Trojaner-Board - Unbeabsichtigte Weiterleitung bei Aktivieren eines Google-links

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Unbeabsichtigte Weiterleitung bei Aktivieren eines Google-links (https://www.trojaner-board.de/125764-unbeabsichtigte-weiterleitung-aktivieren-google-links.html)

christoph03

16.10.2012 17:53

Unbeabsichtigte Weiterleitung bei Aktivieren eines Google-links

Guten Abend aus Wien,
bei meinen Internetrecherchen habe ich mir heute morgen- zumindest hab ich es zu diesem Zeitpunkt erstmals bemerkt- vermutlich einen Trojaner eingefangen. Nach Erhalt der Suchergebnisse von google wird beim Versuch, die angezeigten Seiten aufzurufen, sehr häufig eine Umleitung aktiviert, und es erfolgt über eine kurz eingeblendete Seite "searchnowfq.com" oder "searchnowfe.com" eine Weiterleitung meist zu "missgoodtimes" oder "viewster".
Die otl.txt und extras.txt Dateien hab ich angeschlossen.
Vielen Dank im voraus für weitere Tips.
Herzliche Grüße
Christoph

christoph03

17.10.2012 05:50

Guten Morgen,
jetzt habe ich eben entdeckt, daß ich offenbar die beiden otl-Dateien als Anhang gesendet habe. Die Möglichkeit, sie direkt als Code einzufügen, hab ich gestern übersehen. Ich versuche es nun.
Besten Dank im voraus,
herziche Grüße Christoph
OTL EXTRAS Logfile:

Code:

OTL logfile created on: 16/10/2012 17:59:22 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\christoph\Downloads

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000c07 | Country: Austria | Language: DEA | Date Format: dd/MM/yyyy

 

3.00 Gb Total Physical Memory | 1.43 Gb Available Physical Memory | 47.71% Memory free

6.19 Gb Paging File | 4.87 Gb Available in Paging File | 78.73% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 458.21 Gb Total Space | 306.19 Gb Free Space | 66.82% Space Free | Partition Type: NTFS

Drive D: | 7.55 Gb Total Space | 1.00 Gb Free Space | 13.30% Space Free | Partition Type: NTFS

Drive E: | 465.76 Gb Total Space | 465.66 Gb Free Space | 99.98% Space Free | Partition Type: NTFS

Drive F: | 59.09 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: CHRISTOPH-PC | User Name: christoph | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012/10/16 16:03:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\christoph\Downloads\OTL.exe

PRC - [2012/05/15 11:28:16 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

PRC - [2012/05/15 11:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2011/01/21 16:19:38 | 000,025,984 | ---- | M] (Uniblue Systems Limited) -- C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

PRC - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

PRC - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

PRC - [2009/07/20 12:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe

PRC - [2009/07/10 12:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

PRC - [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

PRC - [2009/02/04 15:11:50 | 005,521,408 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

PRC - [2009/02/04 15:01:24 | 002,768,896 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

PRC - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

PRC - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

PRC - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

PRC - [2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

PRC - [2008/01/19 09:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe

PRC - [2008/01/15 13:26:18 | 004,874,240 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe

PRC - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

PRC - [2007/07/12 17:36:10 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

PRC - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\System32\PSIService.exe

PRC - [2007/04/18 17:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe

PRC - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2011/01/21 16:19:38 | 000,047,616 | ---- | M] () -- C:\Program Files\Uniblue\RegistryBooster\cache.dll

MOD - [2009/07/20 12:27:14 | 000,017,936 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\khalwrapper.dll

 

 
 ========== Services (SafeList) ==========

 

SRV - File not found [On_Demand | Stopped] -- %ProgramFiles%\WinPcap\rpcapd.exe -- (rpcapd)

SRV - [2012/05/15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2012/04/20 07:59:11 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe -- (NitroReaderDriverReadSpool)

SRV - [2010/06/14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)

SRV - [2009/07/20 12:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV - [2009/02/28 16:17:40 | 001,245,064 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)

SRV - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe -- (FMS)

SRV - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe -- (FMSAdmin)

SRV - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) [On_Demand | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe -- (FMSHttpd)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)

SRV - [2008/09/05 12:52:32 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)

SRV - [2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)

SRV - [2008/01/19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2007/08/22 02:21:30 | 000,055,640 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)

SRV - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)

SRV - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)

DRV - [2012/09/12 10:00:00 | 001,601,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121015.021\NAVEX15.SYS -- (NAVEX15)

DRV - [2012/09/12 10:00:00 | 000,092,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121015.021\NAVENG.SYS -- (NAVENG)

DRV - [2012/08/15 14:26:06 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2012/08/08 10:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2012/05/15 12:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2011/10/18 00:23:24 | 000,286,328 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20121010.001\IDSvix86.sys -- (IDSvix86)

DRV - [2009/08/28 11:49:00 | 000,169,064 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)

DRV - [2009/08/05 17:30:16 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)

DRV - [2009/08/05 14:44:00 | 000,049,400 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)

DRV - [2009/08/05 12:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)

DRV - [2009/07/28 20:01:00 | 000,069,480 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)

DRV - [2009/07/24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)

DRV - [2009/06/19 09:57:00 | 000,079,872 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)

DRV - [2009/06/19 09:56:00 | 000,042,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)

DRV - [2009/06/17 18:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV - [2009/06/17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)

DRV - [2009/06/17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)

DRV - [2009/06/17 18:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L8042Kbd.sys -- (L8042Kbd)

DRV - [2009/06/17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)

DRV - [2009/03/30 04:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0103.sys -- (RsFx0103)

DRV - [2009/03/03 19:55:11 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2009/02/19 12:31:42 | 000,024,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM)

DRV - [2009/02/19 12:31:18 | 000,041,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symndisv.sys -- (SYMNDISV)

DRV - [2009/02/19 12:31:16 | 000,184,496 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI)

DRV - [2009/02/19 12:31:16 | 000,096,560 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symfw.sys -- (SYMFW)

DRV - [2009/02/19 12:31:16 | 000,022,320 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV)

DRV - [2009/02/19 12:31:16 | 000,013,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symdns.sys -- (SYMDNS)

DRV - [2008/09/05 15:31:42 | 000,447,024 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)

DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2008/07/30 18:42:12 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\COH_Mon.sys -- (COH_Mon)

DRV - [2008/03/31 12:55:32 | 000,596,896 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UDXTTM6010.sys -- (UDXTTM6010)

DRV - [2008/02/01 03:51:16 | 000,317,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)

DRV - [2008/02/01 03:51:16 | 000,279,088 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)

DRV - [2008/02/01 03:51:16 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)

DRV - [2007/10/03 18:18:12 | 000,099,840 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)

DRV - [2007/08/08 18:39:56 | 000,036,056 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CO_Mon.sys -- (CO_Mon)

DRV - [2005/12/12 18:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_at&c=81&bd=Pavilion&pf=desktop

IE - HKLM\..\URLSearchHook: {0cc09160-108c-4759-bab1-5c12c216e005} - SOFTWARE\Classes\CLSID\{0cc09160-108c-4759-bab1-5c12c216e005}\InprocServer32 File not found

IE - HKLM\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files\Winload\tbWinl.dll (Conduit Ltd.)

IE - HKLM\..\URLSearchHook: {9d81af43-de53-48d0-a199-42c2a226b24c} - No CLSID value found

IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKLM\..\SearchScopes\{1D55CD03-39AC-4EE7-8AA2-B93BD903E80E}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2206084

IE - HKLM\..\SearchScopes\{EB51BC5D-84F0-4FDB-A0FE-5EF838700F22}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1134&query={searchTerms}&invocationType=tb50hpcndtie7-de-at

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3227982

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/

IE - HKCU\..\URLSearchHook: {0cc09160-108c-4759-bab1-5c12c216e005} - SOFTWARE\Classes\CLSID\{0cc09160-108c-4759-bab1-5c12c216e005}\InprocServer32 File not found

IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=BCPA&o=16145&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=QK&apn_dtid=YYYYYYYYAT&apn_uid=0CF0763D-C990-4ECB-A130-7E8FCE8BBCFE&apn_sauid=D2B81182-96E1-4073-B45D-1B356FE1999F

IE - HKCU\..\SearchScopes\{547EEAAC-3665-4e6c-B326-C622D698543A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=ASHTDF&src=IE-SearchBox

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_de

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 93.188.168.68:80

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..network.proxy.ftp: "93.188.168.68"

FF - prefs.js..network.proxy.ftp_port: 80

FF - prefs.js..network.proxy.gopher: "93.188.168.68"

FF - prefs.js..network.proxy.gopher_port: 80

FF - prefs.js..network.proxy.http: "93.188.168.68"

FF - prefs.js..network.proxy.http_port: 80

FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"

FF - prefs.js..network.proxy.share_proxy_settings: true

FF - prefs.js..network.proxy.socks: "93.188.168.68"

FF - prefs.js..network.proxy.socks_port: 80

FF - prefs.js..network.proxy.ssl: "93.188.168.68"

FF - prefs.js..network.proxy.ssl_port: 80

FF - prefs.js..network.proxy.type: 0

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: C:\Program Files\Virtual Earth 3D\ [2012/04/19 17:45:38 | 000,000,000 | ---D | M]

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohTVPlugin: C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohWebPlayer: C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll File not found

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/08 19:49:38 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/30 12:06:42 | 000,000,000 | ---D | M]

 

[2011/02/04 19:34:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Extensions

[2012/08/14 07:26:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions

[2012/08/02 16:48:45 | 000,000,000 | ---D | M] (appbario8 Community Toolbar) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{0cc09160-108c-4759-bab1-5c12c216e005}

[2011/02/04 19:36:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010/09/28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\christoph\AppData\Roaming\mozilla\firefox\profiles\cy6cbrek.default\searchplugins\askcom.xml

[2011/12/08 19:49:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011/11/21 06:21:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2011/11/21 03:17:49 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011/11/21 03:09:48 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml

[2011/11/21 03:17:49 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml

[2011/11/21 03:17:49 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml

[2011/11/21 03:17:49 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml

[2011/11/21 03:17:49 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (appbario8 Toolbar) - {0cc09160-108c-4759-bab1-5c12c216e005} - Reg Error: Value error. File not found

O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - Reg Error: Value error. File not found

O2 - BHO: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files\Winload\tbWinl.dll (Conduit Ltd.)

O2 - BHO: (Reg Error: Value error.) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (appbario8 Toolbar) - {0cc09160-108c-4759-bab1-5c12c216e005} - Reg Error: Value error. File not found

O3 - HKLM\..\Toolbar: (no name) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files\Winload\tbWinl.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O3 - HKLM\..\Toolbar: (no name) - {9d81af43-de53-48d0-a199-42c2a226b24c} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (Winload Toolbar) - {40C3CC16-7269-4B32-9531-17F2950FB06F} - C:\Program Files\Winload\tbWinl.dll (Conduit Ltd.)

O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE (Symantec Corporation)

O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)

O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()

O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)

O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll ()

O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: pink-unicorns.com ([www] http in Vertrauenswürdige Sites)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} hxxp://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldde-at.cab (MSN Photo Upload Tool)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Value error.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 10.7.2)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-at.cab (Windows Live Hotmail Photo Upload Tool)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61937460-B7E3-41C8-AD03-9F5D9445633E}: DhcpNameServer = 212.186.211.21 195.34.133.21

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008/03/27 16:44:55 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012/10/15 16:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActiveState ActiveTcl 8.5.12.0

[2012/10/15 16:05:02 | 000,000,000 | ---D | C] -- C:\Program Files\Tcl

[2012/10/15 16:04:21 | 000,000,000 | ---D | C] -- C:\Tcl

[2012/10/14 09:12:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReconLab LE 1.2

[2012/10/14 09:12:39 | 000,000,000 | ---D | C] -- C:\ReconLabMaterial

[2012/10/14 09:12:38 | 000,000,000 | ---D | C] -- C:\Program Files\ReconLabLE1.2

[2012/10/14 07:11:31 | 000,000,000 | ---D | C] -- C:\Program Files\Silicon Graphics

[2012/10/10 17:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google SketchUp 8

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 16:37:21 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Scilab

[2012/10/03 16:34:40 | 000,000,000 | ---D | C] -- C:\Program Files\scilab-5.3.3

[2012/09/29 13:28:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PyQt GPL v4.9.4 for Python v2.6 (x86)

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012/10/16 17:53:23 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012/10/16 17:53:07 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job

[2012/10/16 17:53:07 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\RegistryBooster.job

[2012/10/16 17:52:59 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012/10/16 17:52:58 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012/10/16 17:52:49 | 000,000,320 | ---- | M] () -- C:\Windows\tasks\Lqrpettlq.job

[2012/10/16 17:52:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012/10/16 17:52:37 | 3220,480,000 | -HS- | M] () -- C:\hiberfil.sys

[2012/10/16 16:04:00 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat

[2012/10/16 15:52:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012/10/14 11:35:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job

[2012/10/14 09:12:57 | 000,001,657 | ---- | M] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,796,672 | ---- | M] (Qsc) -- C:\Windows\GPInstall.exe

[2012/10/13 14:23:36 | 000,025,036 | ---- | M] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/11 16:29:58 | 000,297,782 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skp

[2012/10/10 17:49:50 | 000,001,864 | ---- | M] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/10 06:48:43 | 000,297,787 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skb

[2012/10/08 14:50:01 | 000,291,020 | ---- | M] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:32 | 000,272,541 | ---- | M] () -- C:\Users\christoph\Documents\stj0.skp

[2012/10/06 17:04:58 | 000,002,591 | ---- | M] () -- C:\Users\christoph\Desktop\Microsoft Office Word 2007.lnk

[2012/09/25 16:10:31 | 001,016,677 | ---- | M] () -- C:\Users\christoph\Documents\st.johann5.jpg

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012/10/14 09:12:57 | 000,001,657 | ---- | C] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,007,883 | ---- | C] () -- C:\Windows\Eng_UK.gpl

[2012/10/14 07:11:31 | 000,708,120 | ---- | C] () -- C:\Windows\System32\tiffdump.exe

[2012/10/14 07:11:31 | 000,256,000 | ---- | C] () -- C:\Windows\System32\iflTIFF0.dll

[2012/10/14 07:11:31 | 000,136,648 | ---- | C] () -- C:\Windows\System32\ifldbgen.exe

[2012/10/14 07:11:31 | 000,104,960 | ---- | C] () -- C:\Windows\System32\iflJFIF0.dll

[2012/10/14 07:11:31 | 000,102,912 | ---- | C] () -- C:\Windows\System32\ifl0.dll

[2012/10/14 07:11:31 | 000,086,016 | ---- | C] () -- C:\Windows\System32\iflPNG0.dll

[2012/10/14 07:11:31 | 000,058,564 | ---- | C] () -- C:\Windows\System32\iflapigen.exe

[2012/10/14 07:11:31 | 000,026,708 | ---- | C] () -- C:\Windows\System32\iflstatus.exe

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflSGI0.dll

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflGIF0.dll

[2012/10/14 07:11:31 | 000,020,480 | ---- | C] () -- C:\Windows\System32\cifl0.dll

[2012/10/14 07:11:31 | 000,019,456 | ---- | C] () -- C:\Windows\System32\iflBMP0.dll

[2012/10/14 07:11:31 | 000,016,384 | ---- | C] () -- C:\Windows\System32\iflXPM0.dll

[2012/10/14 07:11:31 | 000,014,848 | ---- | C] () -- C:\Windows\System32\iflPPM0.dll

[2012/10/14 07:11:31 | 000,013,312 | ---- | C] () -- C:\Windows\System32\iflRaw0.dll

[2012/10/14 07:11:31 | 000,012,800 | ---- | C] () -- C:\Windows\System32\iflXBM0.dll

[2012/10/14 07:11:31 | 000,012,288 | ---- | C] () -- C:\Windows\System32\iflFIT0.dll

[2012/10/14 07:11:31 | 000,004,524 | R--- | C] () -- C:\Windows\System32\ifl_database0

[2012/10/13 14:23:36 | 000,025,036 | ---- | C] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/10 17:49:50 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/08 14:50:01 | 000,291,020 | ---- | C] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:31 | 000,272,541 | ---- | C] () -- C:\Users\christoph\Documents\stj0.skp

[2012/09/25 16:10:29 | 001,016,677 | ---- | C] () -- C:\Users\christoph\Documents\st.johann5.jpg

[2012/09/09 17:10:00 | 000,143,360 | RHS- | C] () -- C:\Windows\System32\d3dx10_33G.dll

[2012/09/06 08:02:17 | 000,000,072 | ---- | C] () -- C:\Users\christoph\.gtk-bookmarks

[2012/08/24 18:26:25 | 000,823,296 | ---- | C] () -- C:\Windows\j3dcore-d3d.dll

[2012/08/24 18:26:25 | 000,163,840 | ---- | C] () -- C:\Windows\j3dcore-ogl.dll

[2012/08/24 18:26:25 | 000,049,152 | ---- | C] () -- C:\Windows\j3dcore-ogl-chk.dll

[2012/08/24 18:26:25 | 000,040,960 | ---- | C] () -- C:\Windows\j3dcore-ogl-cg.dll

[2012/08/02 16:55:37 | 000,000,776 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\it.omnidea.Rulers.plist

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv190904.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.drv120405.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv120205.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211204.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211004.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data110704.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data000.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000002.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.app190905.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.addit001.dat

[2012/07/07 18:02:02 | 000,000,012 | ---- | C] () -- C:\Users\christoph\tmpifo.bat

[2012/06/30 16:26:15 | 000,176,409 | ---- | C] () -- C:\Windows\hpoins16.dat.temp

[2012/06/30 16:26:15 | 000,004,602 | ---- | C] () -- C:\Windows\hpomdl16.dat.temp

[2012/06/28 18:43:25 | 000,001,763 | ---- | C] () -- C:\Windows\System32\geodat.dat

[2012/06/28 18:43:23 | 000,069,632 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE

[2012/06/21 18:50:24 | 000,000,256 | ---- | C] () -- C:\Windows\Caligari.ini

[2012/05/27 09:27:11 | 000,000,097 | ---- | C] () -- C:\Users\christoph\AppData\Local\fusioncache.dat

[2012/05/20 17:53:18 | 000,048,436 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\naggobot.gmic

[2012/05/20 17:53:18 | 000,032,888 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\iain_fergusson.gmic

[2012/05/20 17:53:18 | 000,010,257 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\garagecoder.gmic

[2012/05/20 17:53:17 | 000,006,831 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gentlemanbeggar_gmic.gmic

[2012/05/20 17:53:16 | 000,100,488 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\tomkeil.gmic

[2012/05/20 17:53:16 | 000,047,450 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\photocomix.gmic

[2012/05/20 17:53:16 | 000,001,415 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ronounours.gmic

[2012/05/20 17:53:15 | 000,014,955 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\karos.gmic

[2012/05/20 17:53:14 | 000,659,229 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_def.1513

[2012/05/20 17:51:08 | 000,000,879 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_sources.cimgz

[2012/05/15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe

[2012/03/29 17:53:33 | 000,014,663 | ---- | C] () -- C:\Users\christoph\.octave_hist

[2011/11/11 18:09:30 | 000,001,160 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ShiftN.ini

[2011/10/27 16:35:40 | 000,007,415 | ---- | C] () -- C:\Windows\PmLite3.ini

[2011/10/27 16:35:40 | 000,001,862 | ---- | C] () -- C:\Windows\PMStockCams.Ini

[2011/09/04 16:50:23 | 000,013,855 | ---- | C] () -- C:\Users\christoph\ayamrc

[2011/03/10 20:01:02 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2011/02/05 16:18:38 | 000,026,340 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\UserTile.png

[2011/02/04 19:34:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat

[2010/10/22 08:53:29 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll

[2009/02/14 11:52:17 | 000,005,018 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys

[2009/02/14 11:52:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\EB28B746B4.sys

[2008/08/11 16:13:01 | 000,046,080 | ---- | C] () -- C:\Users\christoph\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

 
 ========== ZeroAccess Check ==========

 

[2003/09/15 20:20:48 | 000,000,053 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-110388515-1034420003-653005438-1000\$R4W9SUT\help\help.button.tools.rc.n

[2003/09/15 20:20:48 | 000,000,053 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-110388515-1034420003-653005438-1000\$RM5RYGN\help\help.button.tools.rc.n

[2006/11/02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 
 ========== LOP Check ==========

 

[2012/08/13 16:58:53 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\.marble

[2011/01/30 12:53:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Ashampoo Cover Studio 2

[2011/08/13 16:59:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Blender Foundation

[2011/08/27 07:09:42 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Bolthouse Software

[2011/01/15 13:16:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Canneverbe Limited

[2008/08/20 07:34:06 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Das Fussball Studio

[2012/03/25 15:36:23 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVDVideoSoft

[2009/01/15 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Engelmann Media

[2012/06/24 14:14:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Exif Viewer

[2012/04/03 17:36:24 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\fltk.org

[2012/06/16 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeCAD

[2011/01/15 16:06:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeFLVConverter

[2011/02/01 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\GetRightToGo

[2012/05/22 18:00:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\gtk-2.0

[2008/08/13 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hemera

[2012/08/29 17:56:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\IrfanView

[2008/11/28 20:00:13 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Leadertech

[2009/03/08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Livestation

[2009/06/25 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mchid

[2009/01/02 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nikon

[2012/10/12 16:55:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nitro PDF

[2010/08/09 16:39:11 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nokia

[2012/03/21 19:55:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Notepad++

[2011/01/15 13:15:44 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\OpenCandy

[2009/01/15 18:51:08 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Orbit

[2012/09/12 17:01:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Origin

[2010/08/09 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PC Suite

[2011/02/05 16:18:37 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PeerNetworking

[2008/12/14 18:06:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PPMate

[2012/10/03 16:37:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Scilab

[2011/11/04 19:05:27 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Sports Interactive

[2008/06/21 18:17:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\temp

[2009/02/07 13:37:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TerraTec

[2012/08/11 16:27:17 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\transdat

[2012/08/18 10:30:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Uniblue

[2011/03/06 09:16:30 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinFAQ

 
 ========== Purity Check ==========

 

 
 

< End of report
 

OTL Extras logfile created on: 16/10/2012 17:59:22 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\christoph\Downloads

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000c07 | Country: Austria | Language: DEA | Date Format: dd/MM/yyyy

 

3.00 Gb Total Physical Memory | 1.43 Gb Available Physical Memory | 47.71% Memory free

6.19 Gb Paging File | 4.87 Gb Available in Paging File | 78.73% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 458.21 Gb Total Space | 306.19 Gb Free Space | 66.82% Space Free | Partition Type: NTFS

Drive D: | 7.55 Gb Total Space | 1.00 Gb Free Space | 13.30% Space Free | Partition Type: NTFS

Drive E: | 465.76 Gb Total Space | 465.66 Gb Free Space | 99.98% Space Free | Partition Type: NTFS

Drive F: | 59.09 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: CHRISTOPH-PC | User Name: christoph | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 0

"UacDisableNotify" = 1

"InternetSettingsDisableNotify" = 1

"AutoUpdateDisableNotify" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"VistaSp2" = Reg Error: Unknown registry data type -- File not found

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\PPMate\ppmate.exe" = C:\Program Files\PPMate\ppmate.exe:*:Enabled:PPMate

"C:\Program Files\PPMate\ppamnet.exe" = C:\Program Files\PPMate\ppamnet.exe:*:Enabled:PPMate

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{2A12B447-65E5-4A84-8A0E-464D978EE0D5}" = rport=138 | protocol=17 | dir=out | app=system | 

"{2A99B2E8-F6D0-4001-8C46-8F50BCA7C476}" = lport=445 | protocol=6 | dir=in | app=system | 

"{4DD112A3-7042-45DD-AD7D-EF8023AC6CDF}" = rport=139 | protocol=6 | dir=out | app=system | 

"{59FD1226-F385-46BD-AABE-0C96927927D3}" = rport=445 | protocol=6 | dir=out | app=system | 

"{616CCA2D-D2F0-41E7-AD1B-BF568A546815}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{7FCFDF92-0729-4F2B-B856-383A83A7D098}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{B0E0087B-9EB2-461B-BD50-7F49BE2F2A29}" = rport=137 | protocol=17 | dir=out | app=system | 

"{BE275126-1EAA-4800-95F5-8149A5AA70B4}" = lport=137 | protocol=17 | dir=in | app=system | 

"{EE61D03F-D5BE-490B-9494-279145998E83}" = lport=139 | protocol=6 | dir=in | app=system | 

"{F0354B75-0F32-43E0-AAF2-B61CC5BB6516}" = lport=138 | protocol=17 | dir=in | app=system | 

"{F863E454-C56B-4130-9E5A-5C8A899160BF}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{1637AA12-8981-4C26-96DE-B2D8824C8A7F}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe | 

"{19A4095A-D84A-4F33-A9B4-DAFEEBD21E9C}" = protocol=17 | dir=in | app=c:\users\christoph\appdata\local\temp\{8fbc6e79-1a95-4440-8a1b-0b736bcd941c}\{63b9bab5-f36a-4a3b-9e5c-68a7f212bfb9}\insttool.exe | 

"{1BEF280A-918D-4869-81DB-B8D98284723E}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvr.exe | 

"{1CC04FAA-1847-40BC-9B6D-5E51082E91D3}" = protocol=17 | dir=in | app=c:\program files\origin games\fifa 12\game\fifa.exe | 

"{21A633D9-07FF-4306-9458-79732798AFC6}" = protocol=17 | dir=in | app=c:\users\christoph\desktop\pes2009.exe | 

"{28A90B41-3BCD-480B-9ECE-CC2B0E8473F2}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{2E99E861-AD24-4B04-84C6-78CDB795D6ED}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvr.exe | 

"{541ED42A-84E2-491D-9E98-AD6CA7B0792C}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvrhelper.exe | 

"{739FE814-D935-4439-B69C-97BC946F7D22}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

"{7B67354E-D33D-4E4C-8A6C-C5E1E0441559}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\tvtvsetup\tvtv_wizard.exe | 

"{84117EAB-DA91-4159-9B09-6D06CDF4401C}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe | 

"{8470436E-EE97-4AC6-8ED0-3774C983887E}" = protocol=6 | dir=in | app=c:\users\christoph\desktop\pes2009.exe | 

"{84AFCE57-03B1-451C-B5D1-BF996CCF76B8}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\insttool.exe | 

"{8AC90CE5-9BB2-437C-BF99-C5AE0853CAB1}" = protocol=6 | dir=in | app=c:\users\christoph\appdata\local\temp\{8fbc6e79-1a95-4440-8a1b-0b736bcd941c}\{63b9bab5-f36a-4a3b-9e5c-68a7f212bfb9}\insttool.exe | 

"{8FD87E74-10C2-4949-AB13-E7AAF4F715C0}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\insttool.exe | 

"{94024679-F958-4D47-A470-7C79F53F7C18}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{96E242F3-BB00-44AC-8739-8AC6F70E5184}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvrhelper.exe | 

"{97A0D452-AE83-4B47-B975-061EB2A32747}" = protocol=6 | dir=in | app=c:\program files\hp\hp deskjet 1050 j410 series\bin\usbsetup.exe | 

"{A3C0A201-9A08-49E5-9C43-F880B68DC087}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\tvtvsetup\tvtv_wizard.exe | 

"{A8A0BEEA-7CBC-4BEA-9BBB-02D13EA88F10}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{B0DE8F0B-8699-4453-A8D5-FC70935E40D9}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 

"{B70F2EF5-C247-45FE-B626-447ED8B71B82}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{BE256F06-59C9-487B-BDA6-295D7CD7CC33}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 

"{C10B95A1-608B-4F27-86BD-90105367AD44}" = protocol=6 | dir=in | app=c:\program files\origin games\fifa 12\game\fifa.exe | 

"{D16C7832-70D0-4CDE-A886-5D19AC5FCCF4}" = protocol=17 | dir=in | app=c:\program files\hp\hp deskjet 1050 j410 series\bin\usbsetup.exe | 

"{D6F7394B-E009-42AA-8A72-BE1E3FBD50B9}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{D7E87719-4E02-4E24-A534-056AE745281B}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe | 

"{E485350E-7B32-4896-BB5C-A26AB08EDD22}" = dir=in | app=c:\users\christ~1\appdata\local\temp\ibtmpf564504\component_514.decrpt | 

"{F092FE71-3D14-4817-8F5B-477C03E28AD6}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{F8840FB3-FAFF-467E-851F-13F7737F4D08}" = dir=in | app=c:\users\christ~1\appdata\local\temp\ibtmpf564504\uninstall manager.exe | 

"{F8F21B70-5554-4334-8906-5AFE48B64F3B}" = dir=in | app=c:\users\christ~1\appdata\local\temp\softonic_ssk_conduit.exe | 

"{FB35CC33-FEE9-4B3E-9C56-E55666D2DFFF}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{089DD780-DB3F-4CDB-A0C2-111360247298}" = PC Connectivity Solution

"{09BDEEF0-5590-457D-89A9-5DB2742F9BBF}" = 32 Bit HP CIO Components Installer

"{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}" = Uniblue RegistryBooster

"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended

"{0A2C5854-557E-48C8-835A-3B9F074BDCAA}" = Python 2.5

"{0BDD3FAD-61CD-4BF3-B9C4-4CEFD43F53F8}" = Norton 360 HTMLHelp

"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer

"{0E19A83E-F53B-40CF-8C91-96F32D955E6A}" = LightScribe System Software  1.10.23.1

"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox

"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp

"{110ED870-1DF3-4574-A679-E2C4A8163211}_is1" = Registry System Wizard.NET

"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{1B9B5B3B-28E7-4E59-A80D-D670AA984514}" = Nokia Connectivity Cable Driver

"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client

"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU

"{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs

"{21829177-4DED-4209-AD08-490B3AC9C01A}" = Norton 360

"{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{24DF7221-644B-4C3A-A478-459502D40522}" = Backup

"{254C37AA-6B72-4300-84F6-98A82419187E}" = Hewlett-Packard Active Check

"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23

"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7

"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in

"{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360

"{2D87E961-577B-492B-AD54-1368680FB9A7}" = Bing Maps 3D

"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper

"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1

"{32A9C5B3-D166-4C6D-A11E-A54473151000}" = Java 3D 1.5.1

"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver

"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3C57F42A-4925-4B5D-9774-18AEF2B81A97}" = sv3DVision

"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11

"{40AAB711-8EFF-4830-8B39-017D3F66983D}" = Studie zur Verbesserung von HP Deskjet 1050 J410 series Produkten

"{40DA9A54-48CA-4A2C-AEAF-F67715BB046E}" = Norton 360

"{45690715-80A6-4445-B61D-ADEC5888E8CD}" = Symantec Technical Support Controls

"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared

"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0

"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files

"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin

"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser

"{4BA6784F-3B10-473A-B9F5-33A36AC354D5}" = Google SketchUp 8

"{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}" = InterVideo DeviceService

"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport

"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In

"{55A6283C-638A-4EE0-B491-51118554BDA2}" = Norton Confidential Core

"{5BD39911-A12F-4562-98BA-A6E03E3370B1}" = Microsoft SQL Server 2008 Database Engine Services

"{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}" = HP Deskjet 1050 J410 series Hilfe

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{6151cf20-0bd8-4023-a4a0-6a86dcfe58e5}" = Python 2.6.6

"{64E72FB1-2343-4977-B4A8-262CD53D0BD3}" = Corel Paint Shop Pro Photo X2

"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = Hewlett-Packard Asset Agent for Health Check

"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2

"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder

"{7003B63A-7ECA-42B0-A122-AFF24A9F1D5B}" = Python 2.6 PyGTK 2.24.2

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{730837D4-FF5E-48DB-BA49-33E732DFF0B3}" = PanoStandAlone

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit

"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP

"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007

"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007

"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007

"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007

"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007

"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System

"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007

"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007

"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007

"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager

"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007

"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{93F54611-2701-454e-94AB-623F458D9E6B}" = DeviceDiscovery

"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup 

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback

"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AC2C1BDB-1E91-4F94-B99C-E716FE2E9C75}_is1" = MinGW-Get version 0.5-beta-20120426-1

"{AC76BA86-7AD7-1031-7B44-A81300000003}" = Adobe Reader 8.1.4 - Deutsch

"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8

"{ACDE260A-602B-4cfb-A650-D0DBA6FFAD85}" = NetDeviceManager

"{AE80CE48-D4A4-4073-878A-16AD6CE17523}" = SymNet

"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant

"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update

"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 301.42

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 301.42

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 301.42

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 301.42

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.8.15

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

"{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}" = Avery Wizard 3.1

"{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}" = Microsoft SQL Server 2008 Database Engine Services

"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter

"{C04BADDA-A8E5-4460-8385-88F2A9E2A305}" = MATLAB Component Runtime 7.6

"{C6941FEB-0595-4ff5-8F31-B6F4B31C031F}" = D7200_Help

"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack

"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program

"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba

"{CEEC3316-E759-460d-B7F5-1FB290E231F2}" = HP Photosmart Printer Driver Software 10.0.02

"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack

"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer

"{D16D8A48-65A4-4B19-8A02-DC9A40FB80C4}" = Norton Security Scan

"{D23E6E13-653C-415e-937A-598E1CEFACB1}" = PS_SF_02_Software_min

"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center

"{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}" = Symantec Real Time Storage Protection Component

"{D774CBD3-A27F-45A1-A34D-6BE5C918462E}" = 3DCrafter

"{D92F1880-822A-41CA-0090-451FBB89BF4C}" = FIFA Fussball-Weltmeisterschaft 2006 (TM)

"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX

"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU

"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm

"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series

"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)

"{EA8ADAA9-6671-4839-A51E-0C6792B78F3E}" = FIFA 12

"{EC385B36-AE9D-4F0F-A596-08F7D425D09D}" = Nitro PDF Reader

"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support

"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint

"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared

"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5

"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{F804CEB4-747E-46D5-B8AB-C56E3BAF27D9}_is1" = Das Fussball Studio 6.9.1

"{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = VideoStudio

"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status

"{FE19B8A3-C79D-4A90-8F7C-1B206DB00CFC}" = HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät

"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files

"34EA302E7F4CBD17A19E33BBCB72363234956D7E" = Windows-Treiberpaket - Nokia Modem  (06/09/2010 4.5)

"3D Object Converter for Windows 4.60" = 3D Object Converter for Windows 4.60

"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)

"ActiveTcl 8.5.12.0" = ActiveState ActiveTcl 8.5.12.0

"Adobe Flash Media Server 3.5.1_is1" = Adobe Flash Media Server 3.5.1

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6

"AVS4YOU Video Editor 4_is1" = AVS Video Editor 4

"Blender" = Blender

"CAD-3D" = CAD-3D

"DesignWorkshop Lite" = DesignWorkshop Lite

"Digitale Bibliothek 4" = Digitale Bibliothek 4

"DVD Flick_is1" = DVD Flick 1.3.0.7

"EEEE705096F837B7907659F100C9FE6DA001970F" = Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.7)

"File-5.03_is1" = GnuWin32: File-5.03

"File-src-5.03_is1" = GnuWin32: File-5.03

"Free FLV Converter_is1" = Free FLV Converter V 6.93.0

"GIMP-2_is1" = GIMP 2.8.0

"G'MIC for GIMP_is1" = G'MIC for GIMP Version 1.5.1.3

"Google Updater" = Google Updater

"HOMESTUDENTR" = Microsoft Office Home and Student 2007

"HP Imaging Device Functions" = HP Imaging Device Functions 9.0

"HP Photo Creations" = HP Photo Creations

"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0

"HPExtendedCapabilities" = HP Customer Participation Program 9.0

"Image Format Library 1.3.1" = Image Format Library

"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin

"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = Ulead VideoStudio 11

"IrfanView" = IrfanView (remove only)

"LTplus SketchUP Plugin 7.1" = LTplus SketchUP Plugin 7.1

"Make-3.81_is1" = GnuWin32: Make-3.81

"Make-src-3.81_is1" = GnuWin32: Make-3.81

"MathMap-1.3.5_is1" = MathMap-1.3.5

"Meazure_is1" = Meazure 2.0.1

"MeshLab" = MeshLab 1.3.0

"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack

"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0

"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU

"Microsoft SQL Server 10" = Microsoft SQL Server 2008

"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008

"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU

"Mozilla Firefox 8.0.1 (x86 de)" = Mozilla Firefox 8.0.1 (x86 de)

"Nikon FotoShare" = Nikon FotoShare

"Nokia PC Suite" = Nokia PC Suite

"Notepad++" = Notepad++

"NSSSetup.{D16D8A48-65A4-4B19-8A02-DC9A40FB80C4}" = Norton Security Scan (Symantec Corporation)

"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

"OpenAL" = OpenAL

"Origin" = Origin

"PC-Doctor 5 for Windows" = Hardware Diagnose Tools

"PerspectiveRectifier_3.3_is1" = Perspective Rectifier 3.3

"PIL-py2.6" = Python 2.6 PIL-1.1.7

"PL-photo3D_is1" = PL-photo3D 1.0

"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)

"PyQt GPL v4.9.4 for Python v2.6 (x86)" = PyQt GPL v4.9.4 for Python v2.6 (x86)

"ReconLab" = ReconLab

"ShiftN_is1" = ShiftN 3.6

"ST6UNST #1" = LigaChampion V7.4.5

"SymSetup.{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360 (Symantec Corporation)

"Ultimate Papercraft3D 1.16_is1" = Ultimate Papercraft3D 1.16

"Uniblue RegistryBooster" = Uniblue RegistryBooster

"VLC media player" = VLC media player 1.1.4

"Windows Media Encoder 9" = Windows Media Encoder 9 Series

"Winload Toolbar" = Winload Toolbar

"WinRAR archiver" = WinRAR 4.01 (32-Bit)

"Wondershare Streaming Video Recorder_is1" = Wondershare Streaming Video Recorder(Build 2.0.1.4)

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"CodeBlocks" = CodeBlocks

"GeoGebra 5.0 Beta" = GeoGebra 5.0 Beta

"PIL-py2.6" = Python 2.6 PIL-1.1.7

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 30/09/2012 9:57:59 | Computer Name = christoph-PC | Source = Application Hang | ID = 1002

Description = Programm Explorer.EXE, Version 6.0.6002.18005 arbeitet nicht mehr 

mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet

 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 

über das Problem zu suchen.  Prozess-ID: 8b8  Anfangszeit: 01cd9f0f9825aa86  Zeitpunkt

 der Beendigung: 13

 

Error - 02/10/2012 10:34:57 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung nvtray.exe, Version 7.17.13.142, Zeitstempel

 0x4fb212f3, fehlerhaftes Modul nvtray.exe, Version 7.17.13.142, Zeitstempel 0x4fb212f3,

 Ausnahmecode 0x40000015, Fehleroffset 0x00101ae9,  Prozess-ID 0xaac, Anwendungsstartzeit

 01cda0a78a0f358f.

 

Error - 12/10/2012 9:01:37 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung MICMAC.exe, Version 0.0.0.0, Zeitstempel 0x473032bd,

 fehlerhaftes Modul MICMAC.exe, Version 0.0.0.0, Zeitstempel 0x473032bd, Ausnahmecode

 0xc0000005, Fehleroffset 0x00010344,  Prozess-ID 0x1d2c, Anwendungsstartzeit 01cda879b6a3ea4f.

 

Error - 12/10/2012 9:02:24 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung MICMAC.exe, Version 0.0.0.0, Zeitstempel 0x473032bd,

 fehlerhaftes Modul MICMAC.exe, Version 0.0.0.0, Zeitstempel 0x473032bd, Ausnahmecode

 0xc0000005, Fehleroffset 0x00010344,  Prozess-ID 0x1b04, Anwendungsstartzeit 01cda879d2a541df.

 

Error - 13/10/2012 11:11:23 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung scanalyze.exe, Version 0.0.0.0, Zeitstempel 

0x3fbd742b, fehlerhaftes Modul TCL80.DLL, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,

 Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,  Prozess-ID 0xd60, Anwendungsstartzeit

 01cda954f6f7d294.

 

Error - 13/10/2012 11:12:17 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung scanalyze.exe, Version 0.0.0.0, Zeitstempel 

0x3fbd742b, fehlerhaftes Modul TCL80.DLL, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,

 Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,  Prozess-ID 0x1858, Anwendungsstartzeit

 01cda955204195f4.

 

Error - 13/10/2012 11:14:52 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung scanalyze.exe, Version 0.0.0.0, Zeitstempel 

0x3fbd742b, fehlerhaftes Modul TK80.DLL, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,

 Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,  Prozess-ID 0x1f64, Anwendungsstartzeit

 01cda95574d24c44.

 

Error - 13/10/2012 11:16:39 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung scanalyze.exe, Version 0.0.0.0, Zeitstempel 

0x3fbd742b, fehlerhaftes Modul ifl0.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,

 Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,  Prozess-ID 0x1a2c, Anwendungsstartzeit

 01cda955b95cd654.

 

Error - 14/10/2012 3:14:09 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung AcroRd32.exe, Version 8.1.0.137, Zeitstempel

 0x46444e37, fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000,

 Ausnahmecode 0xc0000005, Fehleroffset 0x24002aa0,  Prozess-ID 0x1bd4, Anwendungsstartzeit

 01cda9d794118738.

 

Error - 14/10/2012 9:16:32 | Computer Name = christoph-PC | Source = Application Error | ID = 1000

Description = Fehlerhafte Anwendung RadialUndistort.exe, Version 0.0.0.0, Zeitstempel

 0x4cfe4f94, fehlerhaftes Modul MSVCR100.dll, Version 10.0.40219.325, Zeitstempel

 0x4df2be1e, Ausnahmecode 0xc0000417, Fehleroffset 0x0008af3e,  Prozess-ID 0x1c78,

 Anwendungsstartzeit 01cdaa0e210cf492.

 

[ Media Center Events ]

Error - 06/08/2009 10:22:32 | Computer Name = christoph-PC | Source = ehRecvr | ID = 3

Description = 

 

Error - 06/08/2009 10:23:56 | Computer Name = christoph-PC | Source = ehRecvr | ID = 3

Description = 

 

Error - 06/08/2009 10:23:57 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 0

Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerAccumulate failed;

 Win32 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center

 Guide 

 

Error - 06/08/2009 10:26:37 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 0

Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerAccumulate failed;

 Win32 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center

 Guide 

 

Error - 06/08/2009 10:30:53 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 0

Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerAccumulate failed;

 Win32 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center

 Guide 

 

Error - 06/08/2009 10:31:07 | Computer Name = christoph-PC | Source = ehRecvr | ID = 3

Description = 

 

Error - 06/08/2009 12:42:30 | Computer Name = christoph-PC | Source = ehRecvr | ID = 3

Description = 

 

Error - 06/12/2009 2:45:50 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 0

Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerRecord failed; Win32

 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center Guide
 

 

Error - 27/05/2010 0:57:35 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 13

Description = Ereignisinformationen: Fehler beim Downloaden neuer TV-Programmdaten.

 Überprüfen Sie die Internetverbindungseinstellungen. Wenn die Verbindung über einen

 Firewall oder Proxyserver hergestellt wird, stellen Sie sicher, dass dieser ordnungsgemäß

 konfiguriert ist. Prozess: DefaultDomain Objektname: Microsoft.Ehome.Epg.EhepgdatSingleton
 

 

Error - 13/06/2010 9:35:36 | Computer Name = christoph-PC | Source = Media Center Guide | ID = 0

Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerRecord failed; Win32

 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center Guide
 

 

[ System Events ]

Error - 15/10/2012 10:03:23 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 16/10/2012 0:19:36 | Computer Name = christoph-PC | Source = Dhcp | ID = 1002

Description = Die IP-Adresslease 213.47.87.100 für die Netzwerkkarte mit der Netzwerkadresse

 001E8CC584C3 wurde durch den DHCP-Server 195.34.134.99 abgelehnt (der DHCP-Server

 hat eine DHCPNACK-Meldung gesendet).

 

Error - 16/10/2012 0:22:55 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7038

Description = 

 

Error - 16/10/2012 0:22:55 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 16/10/2012 9:37:55 | Computer Name = christoph-PC | Source = Dhcp | ID = 1002

Description = Die IP-Adresslease 213.47.87.100 für die Netzwerkkarte mit der Netzwerkadresse

 001E8CC584C3 wurde durch den DHCP-Server 195.34.134.99 abgelehnt (der DHCP-Server

 hat eine DHCPNACK-Meldung gesendet).

 

Error - 16/10/2012 9:42:08 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7038

Description = 

 

Error - 16/10/2012 9:42:08 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 16/10/2012 11:52:48 | Computer Name = christoph-PC | Source = Dhcp | ID = 1002

Description = Die IP-Adresslease 213.47.87.100 für die Netzwerkkarte mit der Netzwerkadresse

 001E8CC584C3 wurde durch den DHCP-Server 195.34.134.99 abgelehnt (der DHCP-Server

 hat eine DHCPNACK-Meldung gesendet).

 

Error - 16/10/2012 11:56:45 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7038

Description = 

 

Error - 16/10/2012 11:56:45 | Computer Name = christoph-PC | Source = Service Control Manager | ID = 7000

Description = 

 

 

< End of report >

--- --- ---

cosinus

18.10.2012 19:07

Bitte nun routinemäßig einen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

christoph03

19.10.2012 12:44

Hallo,
erst einmal bedanke ich mich vielmals für die schnelle Antwort.
Hier schalte ich jetzt die logfile von malwarebytes:

Code:

Malwarebytes Anti-Malware 1.65.1.1000

www.malwarebytes.org
 

Datenbank Version: v2012.10.19.02
 

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 9.0.8112.16421

christoph :: CHRISTOPH-PC [Administrator]
 

19/10/2012 6:54:09

mbam-log-2012-10-19 (06-54-09).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 526972

Laufzeit: 2 Stunde(n), 45 Minute(n), 14 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 2

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{8BCB5337-EC01-4E38-840C-A964F174255B} (Adware.SmartShopper) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8BCB5337-EC01-4E38-840C-A964F174255B} (Adware.SmartShopper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 3

c:\$recycle.bin\s-1-5-21-110388515-1034420003-653005438-1000\$rnxnexm.exe (Trojan.Pirminay) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\Uninstall Information\ib_uninst_514\uninstall.exe (PUP.BundleInstaller.IB) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\Uninstall Information\ib_uninst_555\uninstall.exe (PUP.BundleInstaller.IB) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Was ist der nächste Schritt?
Herzlichen Dank im voraaus und Grüße aus Ö-sterreich

PS malwarebytes hab ich erst heute morgen heruntergeladen und daher erstmals verwendet, dh es gibt keine älteren logfiles.

cosinus

19.10.2012 15:03

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

christoph03

19.10.2012 20:42

Guten Abend,

der Scanvorgang wurde eben abgeschlossen.
Hier ist die log-Datei:

Code:



ESETSmartInstaller@High as CAB hook log:

OnlineScanner.ocx - registred OK

# version=7

# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=e23d31155519434b988f7acde0f92322

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2012-10-19 07:23:14

# local_time=2012-10-19 09:23:14 (+0100, Mitteleuropäische Sommerzeit)

# country="Austria"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=3584 16777215 100 0 0 0 0 0

# compatibility_mode=5892 16776574 100 100 549961 188190829 0 0

# compatibility_mode=8192 67108863 100 0 197 197 0 0

# scanned=327397

# found=9

# cleaned=0

# scan_time=16493

C:\Program Files\Uniblue\RegistryBooster\Launcher.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rbnotifier.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rb_move_serial.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Users\christoph\AppData\Roaming\OpenCandy\OpenCandy_2EA9788A80B742E69F5DA45DB6BF8D39\dlmgr_3_1.6.87.exe        Win32/OpenCandy application (unable to clean)        00000000000000000000000000000000        I

C:\Users\christoph\Documents\PremiumTV\setup_PremiumDownloadsForPC.msi        Win32/Tool.EvID4226 application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Public\Winferno\PC Confidential\PCCBHO.dll        Win32/Adware.PCConfidential application (unable to clean)        00000000000000000000000000000000        I

${Memory}        Win32/RegistryBooster application        00000000000000000000000000000000        I

Danke im voraus für weitere Unterstützung,
abendliche Grüße from Vienna
Christoph

cosinus

21.10.2012 11:38

Code:

C:\Program Files\Uniblue\RegistryBooster

Finger weg von Registry-Cleanern!!

Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr startet.

Wie soll der Cleaner zu 100% wissen ob der Eintrag benötigt wird oder nicht ?
Es ist vollkommen egal ob ein paar verwaiste Registry Einträge am System sind oder nicht.
Auch die dauernd angepriesene Beschleunigung des Systems ist nur bedingt wahr. Du würdest es nicht merken.

Ein sogenanntes False Positive von einem Cleaner kann auch dein System unbootbar machen.
Zerstörst Du die Registry, zerstörst Du Windows.

adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Suche.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[Rx].txt. (x=fortlaufende Nummer)

christoph03

21.10.2012 12:02

Danke für die Informationen!

Hier ist die Textdatei von adwcleaner:

Code:

# AdwCleaner v2.005 - Datei am 21/10/2012 um 13:00:10 erstellt

# Aktualisiert am 14/10/2012 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzer : christoph - CHRISTOPH-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\christoph\Desktop\adwcleaner.exe

# Option [Suche]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gefunden : C:\Users\christoph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickStores.url

Datei Gefunden : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\searchplugins\Askcom.xml

Ordner Gefunden : C:\Program Files\Conduit

Ordner Gefunden : C:\Program Files\Free Offers from Freeze.com

Ordner Gefunden : C:\Program Files\Winload

Ordner Gefunden : C:\ProgramData\IBUpdaterService

Ordner Gefunden : C:\ProgramData\Tarma Installer

Ordner Gefunden : C:\Users\christoph\AppData\Local\Conduit

Ordner Gefunden : C:\Users\christoph\AppData\Local\OpenCandy

Ordner Gefunden : C:\Users\christoph\AppData\LocalLow\appbario8

Ordner Gefunden : C:\Users\christoph\AppData\LocalLow\Conduit

Ordner Gefunden : C:\Users\christoph\AppData\LocalLow\PriceGong

Ordner Gefunden : C:\Users\christoph\AppData\LocalLow\Softonic_Deutsch_FF

Ordner Gefunden : C:\Users\christoph\AppData\LocalLow\Winload

Ordner Gefunden : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{0cc09160-108c-4759-bab1-5c12c216e005}

Ordner Gefunden : C:\Users\christoph\AppData\Roaming\OpenCandy

Ordner Gefunden : C:\Windows\system32\Sidekick Manager
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\appbario8

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\SmartBar

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Softonic_Deutsch_FF

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Winload

Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gefunden : HKCU\Software\DataMngr

Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar

Schlüssel Gefunden : HKCU\Software\Freeze.com

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winload Toolbar

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2518429F-5C73-49EE-B511-51C12EC8987A}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2518429F-5C73-49EE-B511-51C12EC8987A}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gefunden : HKCU\Software\Softonic

Schlüssel Gefunden : HKLM\Software\appbario8

Schlüssel Gefunden : HKLM\Software\bProtector

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{0DC94E7B-CE27-41AD-9E60-7979B56FFA87}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{17FBAC21-3A8E-43BD-AB17-F02E52037EDB}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2319825

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT3227982

Schlüssel Gefunden : HKLM\Software\Conduit

Schlüssel Gefunden : HKLM\Software\DataMngr

Schlüssel Gefunden : HKLM\Software\Freeze.com

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0CC02A97-6079-4DDA-A203-AF0599ADF8A5}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5438E2C0-A0E8-46BF-8993-0AFDA6C84551}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F957BF53-A8EC-401C-99D3-3BA35AB3F58E}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0DC94E7B-CE27-41AD-9E60-7979B56FFA87}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{17FBAC21-3A8E-43BD-AB17-F02E52037EDB}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winload Toolbar

Schlüssel Gefunden : HKLM\Software\Softonic_Deutsch_FF

Schlüssel Gefunden : HKLM\Software\Tarma Installer

Schlüssel Gefunden : HKLM\Software\Winload

Schlüssel Gefunden : HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16421
 

[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3227982
 

-\\ Mozilla Firefox v8.0.1 (de)
 

Profilname : default 

Datei : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\prefs.js
 

Gefunden : user_pref("CT3227982.autoDisableScopes", -1);
 

*************************
 

AdwCleaner[R1].txt - [7504 octets] - [21/10/2012 13:00:10]
 

########## EOF - C:\AdwCleaner[R1].txt - [7564 octets] ##########

Bitte um weitere Anweisungen.
Herzliche Grüße C.

cosinus

21.10.2012 12:43

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Löschen.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[Sx].txt. (x=fortlaufende Nummer)

christoph03

21.10.2012 13:00

Hier ist die Auswertung von adwcleaner:

Code:

# AdwCleaner v2.005 - Datei am 21/10/2012 um 13:53:58 erstellt

# Aktualisiert am 14/10/2012 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzer : christoph - CHRISTOPH-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\christoph\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Users\christoph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickStores.url

Datei Gelöscht : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\searchplugins\Askcom.xml

Ordner Gelöscht : C:\Program Files\Conduit

Ordner Gelöscht : C:\Program Files\Free Offers from Freeze.com

Ordner Gelöscht : C:\Program Files\Winload

Ordner Gelöscht : C:\ProgramData\IBUpdaterService

Ordner Gelöscht : C:\ProgramData\Tarma Installer

Ordner Gelöscht : C:\Users\christoph\AppData\Local\Conduit

Ordner Gelöscht : C:\Users\christoph\AppData\Local\OpenCandy

Ordner Gelöscht : C:\Users\christoph\AppData\LocalLow\appbario8

Ordner Gelöscht : C:\Users\christoph\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\christoph\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\christoph\AppData\LocalLow\Softonic_Deutsch_FF

Ordner Gelöscht : C:\Users\christoph\AppData\LocalLow\Winload

Ordner Gelöscht : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{0cc09160-108c-4759-bab1-5c12c216e005}

Ordner Gelöscht : C:\Users\christoph\AppData\Roaming\OpenCandy

Ordner Gelöscht : C:\Windows\system32\Sidekick Manager
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\appbario8

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Softonic_Deutsch_FF

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Winload

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar

Schlüssel Gelöscht : HKCU\Software\Freeze.com

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winload Toolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2518429F-5C73-49EE-B511-51C12EC8987A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2518429F-5C73-49EE-B511-51C12EC8987A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKLM\Software\appbario8

Schlüssel Gelöscht : HKLM\Software\bProtector

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0DC94E7B-CE27-41AD-9E60-7979B56FFA87}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{17FBAC21-3A8E-43BD-AB17-F02E52037EDB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{38A29805-B3AE-4F30-81B1-B62E72FBF32E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2319825

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3227982

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Freeze.com

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0CC02A97-6079-4DDA-A203-AF0599ADF8A5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5438E2C0-A0E8-46BF-8993-0AFDA6C84551}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F957BF53-A8EC-401C-99D3-3BA35AB3F58E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CC09160-108C-4759-BAB1-5C12C216E005}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0DC94E7B-CE27-41AD-9E60-7979B56FFA87}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{17FBAC21-3A8E-43BD-AB17-F02E52037EDB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winload Toolbar

Schlüssel Gelöscht : HKLM\Software\Softonic_Deutsch_FF

Schlüssel Gelöscht : HKLM\Software\Tarma Installer

Schlüssel Gelöscht : HKLM\Software\Winload

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0CC09160-108C-4759-BAB1-5C12C216E005}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{9D81AF43-DE53-48D0-A199-42C2A226B24C}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16421
 

Gelöscht : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page]
 

-\\ Mozilla Firefox v8.0.1 (de)
 

Profilname : default 

Datei : C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\prefs.js
 

C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\cy6cbrek.default\user.js ... Gelöscht !
 

Gelöscht : user_pref("CT3227982.autoDisableScopes", -1);
 

*************************
 

AdwCleaner[R1].txt - [7633 octets] - [21/10/2012 13:00:10]

AdwCleaner[S1].txt - [7461 octets] - [21/10/2012 13:53:58]
 

########## EOF - C:\AdwCleaner[S1].txt - [7521 octets] ##########

Vielen Dank, bin jetzt zwei Stunden offline.

cosinus

21.10.2012 13:15

Hätte da mal drei Fragen bevor es weiter geht (wir sind noch nicht fertig!)

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?
3.) Die Werbeeinblendungen bzw Weiterleitungen wie zB Incredibar oder Mystart sind nun weg?

christoph03

21.10.2012 14:59

1) der normale Modus von windows war für mich nie merkbar beeinträchtigt und funktioniert auch jetzt
2) Im Startmenü befinden sich einige leere Ordner, einige kann ich nicht zuordnen, andere stammen von deinstallierten und gelöschten Programmen/Verzeichnissen
3) Die google- Weiterleitung zu den angezeigten Seiten klappt wesentlich besser als vorher, ein einziges Mal bin ich allerdings wieder bei "yellw.info" statt bei "wikipedia" gelandet. Also ist noch irgendwo ein Trojaner, vermute ich einmal.
Wie gehts weiter?
Danke für Ihre Geduld,
viele Grüße c.

cosinus

21.10.2012 16:34

Mach bitte einen CustomScan mit OTL . Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

/md5start

wininit.exe

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

christoph03

21.10.2012 17:27

Guten Abend,

hier ist das Ergebnis der Logdatei:

Code:

OTL logfile created on: 21/10/2012 17:58:34 - Run 3

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\christoph\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000c07 | Country: Austria | Language: DEA | Date Format: dd/MM/yyyy

 

3.00 Gb Total Physical Memory | 1.67 Gb Available Physical Memory | 55.84% Memory free

6.21 Gb Paging File | 4.84 Gb Available in Paging File | 78.03% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 458.21 Gb Total Space | 307.32 Gb Free Space | 67.07% Space Free | Partition Type: NTFS

Drive D: | 7.55 Gb Total Space | 1.00 Gb Free Space | 13.30% Space Free | Partition Type: NTFS

Drive E: | 465.76 Gb Total Space | 465.66 Gb Free Space | 99.98% Space Free | Partition Type: NTFS

Drive F: | 59.09 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: CHRISTOPH-PC | User Name: christoph | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012/10/21 17:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

PRC - [2012/07/03 09:04:58 | 000,507,312 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe

PRC - [2012/05/15 11:28:16 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

PRC - [2012/05/15 11:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2011/01/21 16:19:38 | 000,025,984 | ---- | M] (Uniblue Systems Limited) -- C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

PRC - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

PRC - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

PRC - [2009/07/20 12:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe

PRC - [2009/07/10 12:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

PRC - [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

PRC - [2009/02/04 15:11:50 | 005,521,408 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

PRC - [2009/02/04 15:01:24 | 002,768,896 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

PRC - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

PRC - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

PRC - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

PRC - [2008/01/19 09:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe

PRC - [2008/01/15 13:26:18 | 004,874,240 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe

PRC - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

PRC - [2007/07/12 17:36:10 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

PRC - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\System32\PSIService.exe

PRC - [2007/04/18 17:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe

PRC - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2011/07/18 23:04:08 | 000,296,448 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_04.dll

MOD - [2011/05/28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll

MOD - [2011/01/21 16:19:38 | 000,047,616 | ---- | M] () -- C:\Program Files\Uniblue\RegistryBooster\cache.dll

MOD - [2009/07/20 12:27:14 | 000,017,936 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\khalwrapper.dll

 

 
 ========== Services (SafeList) ==========

 

SRV - File not found [On_Demand | Stopped] -- %ProgramFiles%\WinPcap\rpcapd.exe -- (rpcapd)

SRV - [2012/05/15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2012/04/20 07:59:11 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe -- (NitroReaderDriverReadSpool)

SRV - [2010/06/14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)

SRV - [2009/07/20 12:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV - [2009/02/28 16:17:40 | 001,245,064 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)

SRV - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe -- (FMS)

SRV - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe -- (FMSAdmin)

SRV - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) [On_Demand | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe -- (FMSHttpd)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)

SRV - [2008/09/05 12:52:32 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)

SRV - [2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) [Disabled | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)

SRV - [2008/01/19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2007/08/22 02:21:30 | 000,055,640 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)

SRV - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)

SRV - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)

DRV - [2012/09/12 10:00:00 | 001,601,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121020.007\NAVEX15.SYS -- (NAVEX15)

DRV - [2012/09/12 10:00:00 | 000,092,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121020.007\NAVENG.SYS -- (NAVENG)

DRV - [2012/08/15 14:26:06 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2012/08/08 10:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2012/05/15 12:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2011/10/18 00:23:24 | 000,286,328 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20121019.001\IDSvix86.sys -- (IDSvix86)

DRV - [2009/08/28 11:49:00 | 000,169,064 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)

DRV - [2009/08/05 17:30:16 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)

DRV - [2009/08/05 14:44:00 | 000,049,400 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)

DRV - [2009/08/05 12:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)

DRV - [2009/07/28 20:01:00 | 000,069,480 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)

DRV - [2009/07/24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)

DRV - [2009/06/19 09:57:00 | 000,079,872 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)

DRV - [2009/06/19 09:56:00 | 000,042,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)

DRV - [2009/06/17 18:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV - [2009/06/17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)

DRV - [2009/06/17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)

DRV - [2009/06/17 18:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L8042Kbd.sys -- (L8042Kbd)

DRV - [2009/06/17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)

DRV - [2009/03/30 04:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0103.sys -- (RsFx0103)

DRV - [2009/03/03 19:55:11 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2009/02/19 12:31:42 | 000,024,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM)

DRV - [2009/02/19 12:31:18 | 000,041,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symndisv.sys -- (SYMNDISV)

DRV - [2009/02/19 12:31:16 | 000,184,496 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI)

DRV - [2009/02/19 12:31:16 | 000,096,560 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symfw.sys -- (SYMFW)

DRV - [2009/02/19 12:31:16 | 000,022,320 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV)

DRV - [2009/02/19 12:31:16 | 000,013,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symdns.sys -- (SYMDNS)

DRV - [2008/09/05 15:31:42 | 000,447,024 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)

DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2008/07/30 18:42:12 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\COH_Mon.sys -- (COH_Mon)

DRV - [2008/03/31 12:55:32 | 000,596,896 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UDXTTM6010.sys -- (UDXTTM6010)

DRV - [2008/02/01 03:51:16 | 000,317,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)

DRV - [2008/02/01 03:51:16 | 000,279,088 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)

DRV - [2008/02/01 03:51:16 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)

DRV - [2007/10/03 18:18:12 | 000,099,840 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)

DRV - [2007/08/08 18:39:56 | 000,036,056 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CO_Mon.sys -- (CO_Mon)

DRV - [2005/12/12 18:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_at&c=81&bd=Pavilion&pf=desktop

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{1D55CD03-39AC-4EE7-8AA2-B93BD903E80E}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{EB51BC5D-84F0-4FDB-A0FE-5EF838700F22}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1134&query={searchTerms}&invocationType=tb50hpcndtie7-de-at

 

 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes,bProtectorDefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes\{547EEAAC-3665-4e6c-B326-C622D698543A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=ASHTDF&src=IE-SearchBox

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_de

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 93.188.168.68:80

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..network.proxy.ftp: "93.188.168.68"

FF - prefs.js..network.proxy.ftp_port: 80

FF - prefs.js..network.proxy.gopher: "93.188.168.68"

FF - prefs.js..network.proxy.gopher_port: 80

FF - prefs.js..network.proxy.http: "93.188.168.68"

FF - prefs.js..network.proxy.http_port: 80

FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"

FF - prefs.js..network.proxy.share_proxy_settings: true

FF - prefs.js..network.proxy.socks: "93.188.168.68"

FF - prefs.js..network.proxy.socks_port: 80

FF - prefs.js..network.proxy.ssl: "93.188.168.68"

FF - prefs.js..network.proxy.ssl_port: 80

FF - prefs.js..network.proxy.type: 0

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: C:\Program Files\Virtual Earth 3D\ [2012/04/19 17:45:38 | 000,000,000 | ---D | M]

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohTVPlugin: C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohWebPlayer: C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll File not found

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/08 19:49:38 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/30 12:06:42 | 000,000,000 | ---D | M]

 

[2011/02/04 19:34:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Extensions

[2012/10/21 13:54:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions

[2011/02/04 19:36:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2011/12/08 19:49:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011/11/21 06:21:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2011/11/21 03:17:49 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011/11/21 03:09:48 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml

[2011/11/21 03:17:49 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml

[2011/11/21 03:17:49 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml

[2011/11/21 03:17:49 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml

[2011/11/21 03:17:49 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - Reg Error: Value error. File not found

O2 - BHO: (Reg Error: Value error.) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (no name) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.

O3 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE (Symantec Corporation)

O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)

O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()

O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)

O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)

O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll ()

O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..Trusted Domains: pink-unicorns.com ([www] http in Vertrauenswürdige Sites)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} hxxp://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldde-at.cab (MSN Photo Upload Tool)

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Value error.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 10.7.2)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-at.cab (Windows Live Hotmail Photo Upload Tool)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61937460-B7E3-41C8-AD03-9F5D9445633E}: DhcpNameServer = 212.186.211.21 195.34.133.21

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008/03/27 16:44:55 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

NetSvcs: FastUserSwitchingCompatibility -  File not found

NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)

NetSvcs: Nla -  File not found

NetSvcs: Ntmssvc -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: SRService -  File not found

NetSvcs: WmdmPmSp -  File not found

NetSvcs: LogonHours -  File not found

NetSvcs: PCAudit -  File not found

NetSvcs: helpsvc -  File not found

NetSvcs: uploadmgr -  File not found

 

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe - (TOSHIBA CORPORATION.)

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NkbMonitor.exe.lnk -  - File not found

MsConfig - StartUpReg: ccApp - hkey= - key= - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)

MsConfig - StartUpReg: Corel File Shell Monitor - hkey= - key= - C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe ()

MsConfig - StartUpReg: EA Core - hkey= - key= -  File not found

MsConfig - StartUpReg: ehTray.exe - hkey= - key= - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)

MsConfig - StartUpReg: Google Updater - hkey= - key= - C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)

MsConfig - StartUpReg: ITSecMng - hkey= - key= -  File not found

MsConfig - StartUpReg: Livestation - hkey= - key= -  File not found

MsConfig - StartUpReg: osCheck - hkey= - key= - C:\Program Files\Norton 360\osCheck.exe (Symantec Corporation)

MsConfig - StartUpReg: PC Suite Tray - hkey= - key= - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)

MsConfig - StartUpReg: QuickTime Task - hkey= - key= -  File not found

MsConfig - StartUpReg: Remote Control Editor - hkey= - key= -  File not found

MsConfig - StartUpReg: Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)

MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

MsConfig - StartUpReg: swg - hkey= - key= - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

MsConfig - StartUpReg: TkBellExe - hkey= - key= -  File not found

MsConfig - StartUpReg: UVS11 Preload - hkey= - key= -  File not found

MsConfig - StartUpReg: VeohPlugin - hkey= - key= -  File not found

MsConfig - StartUpReg: Windows Defender - hkey= - key= -  File not found

MsConfig - StartUpReg: WMPNSCFG - hkey= - key= - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)

MsConfig - State: "startup" - 2

MsConfig - State: "services" - 0

 

SafeBootMin: 33287322.sys - Driver

SafeBootMin: AppMgmt - Service

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: NTDS -  File not found

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

SafeBootNet: 33287322.sys - Driver

SafeBootNet: AppMgmt - Service

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: HelpSvc - Service

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: NTDS -  File not found

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0

ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.4

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.4

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework

ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {A38B334A-A0A2-436D-BAA0-34FE5E517E44} - Microsoft .NET Framework 1.1 Security Update (KB2656370)

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\VIO\DVACM.acm (InterVideo Digital Technology Corporation)

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.MPEGacm - C:\Program Files\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)

Drivers32: msacm.ulmp3acm - C:\Program Files\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)

Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org)

Drivers32: vidc.yv12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012/10/21 17:56:23 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

[2012/10/19 16:45:04 | 000,000,000 | ---D | C] -- C:\Program Files\ESET

[2012/10/19 06:52:26 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Malwarebytes

[2012/10/19 06:51:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012/10/19 06:51:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012/10/19 06:51:53 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2012/10/19 06:51:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2012/10/19 06:46:56 | 010,669,952 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\christoph\Desktop\mbam-setup-1.65.1.1000.exe

[2012/10/18 16:21:49 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2012/10/18 16:00:30 | 002,213,464 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\christoph\Desktop\tdsskiller.exe

[2012/10/17 17:20:20 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2012/10/15 16:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActiveState ActiveTcl 8.5.12.0

[2012/10/15 16:05:02 | 000,000,000 | ---D | C] -- C:\Program Files\Tcl

[2012/10/15 16:04:21 | 000,000,000 | ---D | C] -- C:\Tcl

[2012/10/14 09:12:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReconLab LE 1.2

[2012/10/14 09:12:39 | 000,000,000 | ---D | C] -- C:\ReconLabMaterial

[2012/10/14 09:12:38 | 000,000,000 | ---D | C] -- C:\Program Files\ReconLabLE1.2

[2012/10/14 07:11:31 | 000,000,000 | ---D | C] -- C:\Program Files\Silicon Graphics

[2012/10/10 17:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google SketchUp 8

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 16:37:21 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Scilab

[2012/10/03 16:34:40 | 000,000,000 | ---D | C] -- C:\Program Files\scilab-5.3.3

[2012/09/29 13:28:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PyQt GPL v4.9.4 for Python v2.6 (x86)

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012/10/21 17:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

[2012/10/21 17:53:07 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012/10/21 17:52:38 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job

[2012/10/21 17:52:38 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\RegistryBooster.job

[2012/10/21 17:52:01 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012/10/21 17:51:33 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012/10/21 17:51:33 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012/10/21 17:51:31 | 000,000,320 | ---- | M] () -- C:\Windows\tasks\Lqrpettlq.job

[2012/10/21 17:51:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012/10/21 17:51:26 | 3220,480,000 | -HS- | M] () -- C:\hiberfil.sys

[2012/10/21 16:04:17 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat

[2012/10/21 12:58:54 | 000,538,941 | ---- | M] () -- C:\Users\christoph\Desktop\adwcleaner.exe

[2012/10/21 11:35:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job

[2012/10/20 18:24:47 | 000,025,677 | ---- | M] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/20 15:09:11 | 000,002,591 | ---- | M] () -- C:\Users\christoph\Desktop\Microsoft Office Word 2007.lnk

[2012/10/19 06:51:55 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/10/19 06:46:56 | 010,669,952 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\christoph\Desktop\mbam-setup-1.65.1.1000.exe

[2012/10/18 16:06:51 | 000,002,241 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk

[2012/10/18 16:00:31 | 002,213,464 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\christoph\Desktop\tdsskiller.exe

[2012/10/14 09:12:57 | 000,001,657 | ---- | M] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,796,672 | ---- | M] (Qsc) -- C:\Windows\GPInstall.exe

[2012/10/11 16:29:58 | 000,297,782 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skp

[2012/10/10 17:49:50 | 000,001,864 | ---- | M] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/10 06:48:43 | 000,297,787 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skb

[2012/10/08 14:50:01 | 000,291,020 | ---- | M] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:32 | 000,272,541 | ---- | M] () -- C:\Users\christoph\Documents\stj0.skp

[2012/09/29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2012/09/25 16:10:31 | 001,016,677 | ---- | M] () -- C:\Users\christoph\Documents\st.johann5.jpg

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012/10/21 12:58:52 | 000,538,941 | ---- | C] () -- C:\Users\christoph\Desktop\adwcleaner.exe

[2012/10/20 18:24:47 | 000,025,677 | ---- | C] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/19 06:51:55 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/10/14 09:12:57 | 000,001,657 | ---- | C] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,007,883 | ---- | C] () -- C:\Windows\Eng_UK.gpl

[2012/10/14 07:11:31 | 000,708,120 | ---- | C] () -- C:\Windows\System32\tiffdump.exe

[2012/10/14 07:11:31 | 000,256,000 | ---- | C] () -- C:\Windows\System32\iflTIFF0.dll

[2012/10/14 07:11:31 | 000,136,648 | ---- | C] () -- C:\Windows\System32\ifldbgen.exe

[2012/10/14 07:11:31 | 000,104,960 | ---- | C] () -- C:\Windows\System32\iflJFIF0.dll

[2012/10/14 07:11:31 | 000,102,912 | ---- | C] () -- C:\Windows\System32\ifl0.dll

[2012/10/14 07:11:31 | 000,086,016 | ---- | C] () -- C:\Windows\System32\iflPNG0.dll

[2012/10/14 07:11:31 | 000,058,564 | ---- | C] () -- C:\Windows\System32\iflapigen.exe

[2012/10/14 07:11:31 | 000,026,708 | ---- | C] () -- C:\Windows\System32\iflstatus.exe

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflSGI0.dll

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflGIF0.dll

[2012/10/14 07:11:31 | 000,020,480 | ---- | C] () -- C:\Windows\System32\cifl0.dll

[2012/10/14 07:11:31 | 000,019,456 | ---- | C] () -- C:\Windows\System32\iflBMP0.dll

[2012/10/14 07:11:31 | 000,016,384 | ---- | C] () -- C:\Windows\System32\iflXPM0.dll

[2012/10/14 07:11:31 | 000,014,848 | ---- | C] () -- C:\Windows\System32\iflPPM0.dll

[2012/10/14 07:11:31 | 000,013,312 | ---- | C] () -- C:\Windows\System32\iflRaw0.dll

[2012/10/14 07:11:31 | 000,012,800 | ---- | C] () -- C:\Windows\System32\iflXBM0.dll

[2012/10/14 07:11:31 | 000,012,288 | ---- | C] () -- C:\Windows\System32\iflFIT0.dll

[2012/10/14 07:11:31 | 000,004,524 | R--- | C] () -- C:\Windows\System32\ifl_database0

[2012/10/10 17:49:50 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/08 14:50:01 | 000,291,020 | ---- | C] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:31 | 000,272,541 | ---- | C] () -- C:\Users\christoph\Documents\stj0.skp

[2012/09/25 16:10:29 | 001,016,677 | ---- | C] () -- C:\Users\christoph\Documents\st.johann5.jpg

[2012/09/09 17:10:00 | 000,143,360 | RHS- | C] () -- C:\Windows\System32\d3dx10_33G.dll

[2012/09/06 08:02:17 | 000,000,072 | ---- | C] () -- C:\Users\christoph\.gtk-bookmarks

[2012/08/24 18:26:25 | 000,823,296 | ---- | C] () -- C:\Windows\j3dcore-d3d.dll

[2012/08/24 18:26:25 | 000,163,840 | ---- | C] () -- C:\Windows\j3dcore-ogl.dll

[2012/08/24 18:26:25 | 000,049,152 | ---- | C] () -- C:\Windows\j3dcore-ogl-chk.dll

[2012/08/24 18:26:25 | 000,040,960 | ---- | C] () -- C:\Windows\j3dcore-ogl-cg.dll

[2012/08/02 16:55:37 | 000,000,776 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\it.omnidea.Rulers.plist

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv190904.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.drv120405.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv120205.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211204.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211004.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data110704.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data000.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000002.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.app190905.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.addit001.dat

[2012/07/07 18:02:02 | 000,000,012 | ---- | C] () -- C:\Users\christoph\tmpifo.bat

[2012/06/30 16:26:15 | 000,176,409 | ---- | C] () -- C:\Windows\hpoins16.dat.temp

[2012/06/30 16:26:15 | 000,004,602 | ---- | C] () -- C:\Windows\hpomdl16.dat.temp

[2012/06/28 18:43:25 | 000,001,763 | ---- | C] () -- C:\Windows\System32\geodat.dat

[2012/06/28 18:43:23 | 000,069,632 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE

[2012/06/21 18:50:24 | 000,000,256 | ---- | C] () -- C:\Windows\Caligari.ini

[2012/05/27 09:27:11 | 000,000,097 | ---- | C] () -- C:\Users\christoph\AppData\Local\fusioncache.dat

[2012/05/20 17:53:18 | 000,048,436 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\naggobot.gmic

[2012/05/20 17:53:18 | 000,032,888 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\iain_fergusson.gmic

[2012/05/20 17:53:18 | 000,010,257 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\garagecoder.gmic

[2012/05/20 17:53:17 | 000,006,831 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gentlemanbeggar_gmic.gmic

[2012/05/20 17:53:16 | 000,100,488 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\tomkeil.gmic

[2012/05/20 17:53:16 | 000,047,450 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\photocomix.gmic

[2012/05/20 17:53:16 | 000,001,415 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ronounours.gmic

[2012/05/20 17:53:15 | 000,014,955 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\karos.gmic

[2012/05/20 17:53:14 | 000,659,229 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_def.1513

[2012/05/20 17:51:08 | 000,000,879 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_sources.cimgz

[2012/05/15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe

[2012/03/29 17:53:33 | 000,014,663 | ---- | C] () -- C:\Users\christoph\.octave_hist

[2011/11/11 18:09:30 | 000,001,160 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ShiftN.ini

[2011/10/27 16:35:40 | 000,007,415 | ---- | C] () -- C:\Windows\PmLite3.ini

[2011/10/27 16:35:40 | 000,001,862 | ---- | C] () -- C:\Windows\PMStockCams.Ini

[2011/09/04 16:50:23 | 000,013,855 | ---- | C] () -- C:\Users\christoph\ayamrc

[2011/03/10 20:01:02 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2011/02/05 16:18:38 | 000,026,340 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\UserTile.png

[2011/02/04 19:34:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat

[2009/02/14 11:52:17 | 000,005,018 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys

[2009/02/14 11:52:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\EB28B746B4.sys

[2008/08/11 16:13:01 | 000,046,080 | ---- | C] () -- C:\Users\christoph\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

 
 ========== ZeroAccess Check ==========

 

[2003/09/15 20:20:48 | 000,000,053 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-110388515-1034420003-653005438-1000\$R4W9SUT\help\help.button.tools.rc.n

[2003/09/15 20:20:48 | 000,000,053 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-110388515-1034420003-653005438-1000\$RM5RYGN\help\help.button.tools.rc.n

[2006/11/02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 
 ========== LOP Check ==========

 

[2012/08/13 16:58:53 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\.marble

[2011/01/30 12:53:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Ashampoo Cover Studio 2

[2012/10/17 17:20:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2011/08/13 16:59:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Blender Foundation

[2011/08/27 07:09:42 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Bolthouse Software

[2011/01/15 13:16:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Canneverbe Limited

[2008/08/20 07:34:06 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Das Fussball Studio

[2012/03/25 15:36:23 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVDVideoSoft

[2009/01/15 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Engelmann Media

[2012/06/24 14:14:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Exif Viewer

[2012/04/03 17:36:24 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\fltk.org

[2012/06/16 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeCAD

[2011/01/15 16:06:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeFLVConverter

[2011/02/01 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\GetRightToGo

[2012/05/22 18:00:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\gtk-2.0

[2008/08/13 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hemera

[2012/08/29 17:56:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\IrfanView

[2008/11/28 20:00:13 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Leadertech

[2009/03/08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Livestation

[2009/06/25 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mchid

[2009/01/02 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nikon

[2012/10/12 16:55:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nitro PDF

[2010/08/09 16:39:11 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nokia

[2012/03/21 19:55:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Notepad++

[2009/01/15 18:51:08 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Orbit

[2012/09/12 17:01:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Origin

[2010/08/09 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PC Suite

[2011/02/05 16:18:37 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PeerNetworking

[2008/12/14 18:06:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PPMate

[2012/10/03 16:37:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Scilab

[2011/11/04 19:05:27 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Sports Interactive

[2008/06/21 18:17:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\temp

[2009/02/07 13:37:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TerraTec

[2012/08/11 16:27:17 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\transdat

[2012/08/18 10:30:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Uniblue

[2011/03/06 09:16:30 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinFAQ

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2012/08/13 16:58:53 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\.marble

[2008/11/28 20:04:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Adobe

[2009/02/08 15:10:35 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Apple Computer

[2011/01/30 12:53:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Ashampoo Cover Studio 2

[2009/02/17 07:35:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\AVS4YOU

[2012/10/17 17:20:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2011/08/13 16:59:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Blender Foundation

[2011/08/27 07:09:42 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Bolthouse Software

[2011/01/15 13:16:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Canneverbe Limited

[2012/09/04 17:24:07 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\codeblocks

[2009/02/14 11:54:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Corel

[2009/02/08 09:45:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\CyberLink

[2008/08/20 07:34:06 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Das Fussball Studio

[2011/02/18 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVD Flick

[2012/03/25 15:36:23 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVDVideoSoft

[2009/01/15 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Engelmann Media

[2012/06/24 14:14:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Exif Viewer

[2012/04/03 17:36:24 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\fltk.org

[2012/06/16 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeCAD

[2011/01/15 16:06:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeFLVConverter

[2011/02/01 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\GetRightToGo

[2010/12/31 12:40:25 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Google

[2012/05/22 18:00:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\gtk-2.0

[2011/12/08 12:21:40 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Help

[2008/08/13 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hemera

[2008/05/05 19:08:39 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hewlett-Packard

[2009/01/17 18:34:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\HP

[2012/09/30 08:28:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\HpUpdate

[2008/05/05 19:10:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Identities

[2009/01/10 16:18:57 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\InstallShield

[2012/08/29 17:56:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\IrfanView

[2008/11/28 20:00:13 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Leadertech

[2009/03/08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Livestation

[2011/09/25 08:40:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Logitech

[2008/05/05 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Macromedia

[2012/10/19 06:52:26 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Malwarebytes

[2012/03/11 08:30:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\MathWorks

[2009/06/25 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mchid

[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Media Center Programs

[2012/08/01 16:57:55 | 000,000,000 | --SD | M] -- C:\Users\christoph\AppData\Roaming\Microsoft

[2012/03/13 18:21:02 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Microsoft Corporation

[2011/02/04 19:34:12 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mozilla

[2009/01/02 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nikon

[2012/10/12 16:55:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nitro PDF

[2010/08/09 16:39:11 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nokia

[2012/03/21 19:55:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Notepad++

[2012/10/13 15:13:36 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\NVIDIA

[2009/01/15 18:51:08 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Orbit

[2012/09/12 17:01:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Origin

[2010/08/09 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PC Suite

[2011/02/05 16:18:37 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PeerNetworking

[2008/12/14 18:06:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PPMate

[2011/03/11 08:09:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Real

[2012/10/03 16:37:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Scilab

[2008/06/21 17:55:17 | 000,000,000 | RH-D | M] -- C:\Users\christoph\AppData\Roaming\SecuROM

[2009/02/17 08:16:56 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\SopCast

[2011/11/04 19:05:27 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Sports Interactive

[2009/03/02 17:44:12 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Symantec

[2008/06/21 18:17:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\temp

[2009/02/07 13:37:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TerraTec

[2012/08/11 16:27:17 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\transdat

[2008/12/14 18:08:25 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TVU Networks

[2012/08/18 10:30:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Uniblue

[2012/09/21 16:17:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\vlc

[2011/03/06 09:16:30 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinFAQ

[2011/09/03 13:37:03 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinRAR

 
 < %APPDATA%\*.exe /s >

[2012/08/02 16:54:56 | 000,095,315 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25bb508a.exe

[2012/08/02 16:54:56 | 000,053,559 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25be7a87.exe

[2012/08/02 16:54:56 | 000,046,502 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25c12483.exe

[2012/08/02 16:54:56 | 000,046,502 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_2fc2113e.exe

[2012/08/02 16:54:56 | 000,061,203 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_55714a50.exe

[2012/08/02 16:54:56 | 000,053,394 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_758a6f3e.exe

[2012/08/02 16:54:56 | 000,057,332 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_7dbc59a7.exe

[2008/02/21 16:02:34 | 000,152,952 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\ALUNOTIF.EXE

[2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\ALUSDSVC.EXE

[2008/02/21 16:02:36 | 000,308,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\AUPDATE.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LSETUP.EXE

[2008/02/21 16:02:40 | 000,873,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUALL.EXE

[2008/02/21 16:02:48 | 000,062,840 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCBPRXY.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCheck.exe

[2008/02/21 16:02:46 | 003,220,856 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCOMSVR.EXE

[2008/02/21 16:02:42 | 000,804,216 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LuConfig.EXE

[2008/02/21 16:02:44 | 000,016,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\NotifyHA.exe

[2005/05/19 23:50:36 | 002,584,848 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\MSI\wiupdate.exe

[2008/02/23 20:08:52 | 000,382,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\APP\COExport.exe

[2008/02/23 20:08:18 | 000,095,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\APP\coVisPrx.exe

[2007/11/29 18:15:06 | 000,288,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\SYMSHARE\COL\COLUpdtr.exe

[2008/02/20 01:03:58 | 000,160,112 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\Remover\Remover.exe

[2008/02/20 01:03:51 | 000,990,056 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\Reporter\Reporter.exe

[2008/01/25 19:16:58 | 000,832,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SEVINST\SEVINST.EXE

[2008/01/26 10:27:32 | 000,661,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SPBBC\SPBBC32\SYMSHARE\SPBBC\UpdMgr.exe

[2008/02/20 01:03:49 | 000,687,976 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SymLnch\SymLnch.exe

[2007/02/13 05:10:44 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\VCRedist\redist32.exe

[2007/02/13 05:10:44 | 003,161,088 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\VCRedist\redist64.exe

[2008/04/02 19:07:14 | 002,613,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Setup.exe

[2008/02/20 01:03:53 | 000,778,080 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe

[2008/01/25 17:57:36 | 000,031,576 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\FWCfg.exe

[2008/01/18 19:43:28 | 001,250,656 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\COH32\COH32.exe

[2008/01/18 19:58:48 | 001,996,336 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\COH64\COH64.exe

[2008/02/26 16:50:42 | 000,448,352 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\MainStub.exe

[2008/02/26 16:50:42 | 000,370,528 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\NSWRedir.exe

[2008/02/26 16:50:44 | 000,988,512 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\osCheck.exe

[2008/02/26 16:50:44 | 000,404,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\ScanStub.exe

[2008/02/26 16:50:46 | 000,972,640 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\tpNetMap.exe

[2008/02/25 07:21:32 | 000,096,424 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\WSCStub.exe

[2008/02/21 16:49:04 | 000,051,576 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\HSLoader.exe

[2008/02/21 16:49:08 | 000,036,728 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\isUAC.exe

[2008/02/21 16:49:14 | 000,042,360 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\npcLULdr.exe

[2008/02/21 16:49:16 | 000,082,808 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\npcLUStb.exe

[2008/02/23 18:41:38 | 000,423,304 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\cltUAC.exe

[2008/02/23 18:40:46 | 000,533,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\SSAutoRN.exe

[2008/02/23 18:41:28 | 000,611,712 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\SYMCUW.exe

[2008/01/22 16:09:02 | 002,368,888 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\IDS\IdsInst.exe

[2008/02/07 00:49:36 | 000,443,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\SecHist\MCUI32.exe

[2007/08/22 02:21:30 | 000,055,640 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\VASCAN\comHost.exe

[2007/08/22 02:22:08 | 000,267,096 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\VASCAN64\comHost.exe

[2008/02/23 18:40:46 | 000,533,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\OPC\SSAutoRN.exe

[2008/01/30 14:55:54 | 001,279,368 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\PIF_96E2\pifCrawl.exe

[2008/01/30 14:55:34 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\PIF_96E2\PIFSvc.exe

[2008/01/25 19:16:59 | 001,022,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Supp64\SEVINST\Sevntx64.exe

[2008/02/26 10:34:20 | 000,137,568 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Backup\Backup\buDump.exe

[2008/02/18 13:37:38 | 000,051,048 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccApp.exe

[2008/02/18 13:37:40 | 000,056,168 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccEvtMgr.exe

[2008/02/18 13:37:10 | 000,268,648 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccLgView.exe

[2008/02/18 13:37:18 | 000,046,440 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSetMgr.exe

[2008/02/18 13:37:54 | 000,876,392 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSEUPDT.exe

[2008/02/18 13:37:20 | 000,149,352 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSvcHst.exe

[2008/02/21 16:02:34 | 000,152,952 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\ALUNOTIF.EXE

[2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\ALUSDSVC.EXE

[2008/02/21 16:02:36 | 000,308,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\AUPDATE.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LSETUP.EXE

[2008/02/21 16:02:40 | 000,873,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUALL.EXE

[2008/02/21 16:02:48 | 000,062,840 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCBPRXY.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCheck.exe

[2008/02/21 16:02:46 | 003,220,856 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCOMSVR.EXE

[2008/02/21 16:02:42 | 000,804,216 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LuConfig.EXE

[2008/02/21 16:02:44 | 000,016,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\NotifyHA.exe

[2005/05/19 23:50:36 | 002,584,848 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\MSI\wiupdate.exe

[2008/02/23 20:08:52 | 000,382,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\APP\COExport.exe

[2008/02/23 20:08:18 | 000,095,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\APP\coVisPrx.exe

[2007/11/29 18:15:06 | 000,288,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\SYMSHARE\COL\COLUpdtr.exe

[2008/02/20 01:03:58 | 000,160,112 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Remover\Remover.exe

[2008/02/20 01:03:51 | 000,990,056 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Reporter\Reporter.exe

[2008/01/25 19:16:58 | 000,832,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SEVINST\SEVINST.EXE

[2008/01/26 10:27:32 | 000,661,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SPBBC\SPBBC32\SYMSHARE\SPBBC\UpdMgr.exe

[2008/02/20 01:03:49 | 000,687,976 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SymLnch\SymLnch.exe

[2007/02/13 05:10:44 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\VCRedist\redist32.exe

[2007/02/13 05:10:44 | 003,161,088 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\VCRedist\redist64.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < MD5 for: AGP440.SYS  >

[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys

[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys

[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys

[2008/01/19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys

[2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys

[2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

 
 < MD5 for: ATAPI.SYS  >

[2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys

[2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys

[2008/01/19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys

[2008/01/19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys

[2006/11/02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys

[2008/05/11 07:46:36 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys

[2008/05/11 07:46:36 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys

[2008/03/28 01:02:59 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=B3F2C79318B9BBE87B2C51033682D912 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4db4e301\atapi.sys

[2008/03/28 01:02:59 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=B3F2C79318B9BBE87B2C51033682D912 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20693_none_db7d35eb3dc727cc\atapi.sys

[2008/03/28 01:07:42 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=BFD3DF48C9ED81934FE21E8E3CFC2496 -- C:\Windows\System32\drivers\atapi.sys

[2008/05/11 07:46:36 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_64dfd8ea\atapi.sys

[2008/05/11 07:46:36 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

 
 < MD5 for: CNGAUDIT.DLL  >

[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll

[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

 
 < MD5 for: EVENTLOG.DLL  >

[1999/10/02 11:24:46 | 000,017,408 | ---- | M] () MD5=1363337A5301619F00F8033835EF30E9 -- C:\Program Files\MATLAB\MATLAB Component Runtime\v76\sys\perl\win32\site\lib\auto\Win32\EventLog\EventLog.dll

[2007/01/12 23:30:08 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll

 
 < MD5 for: IASTOR.SYS  >

[2007/07/12 18:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\hp\DRIVERS\Intel_RAID\iastor.sys

[2007/07/12 17:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver\IaStor.sys

[2007/07/12 18:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\drivers\iaStor.sys

[2007/07/12 18:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_cfa1dde4\iaStor.sys

[2007/07/12 18:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_ec8a8d1b\iaStor.sys

[2007/07/12 17:35:44 | 000,381,976 | ---- | M] (Intel Corporation) MD5=CEB53BB804B41C52AB0782505C8E2994 -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver64\IaStor.sys

 
 < MD5 for: IASTORV.SYS  >

[2008/01/19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys

[2008/01/19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys

[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys

[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

 
 < MD5 for: NETLOGON.DLL  >

[2006/11/02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll

[2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll

[2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll

[2008/01/19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

 
 < MD5 for: NVSTOR.SYS  >

[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys

[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys

[2008/01/19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys

[2008/01/19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

 
 < MD5 for: SCECLI.DLL  >

[2008/01/19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll

[2006/11/02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll

[2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll

[2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2008/03/28 00:41:33 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll

[2008/03/28 00:41:33 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=9D9F061EDA75425FC67F0365E3467C86 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll

[2008/01/19 09:36:46 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll

[2006/11/02 11:46:13 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=E698A5437B89A285ACA3FF022356810A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16386_none_cb01aa4570716e5e\user32.dll

[2009/04/11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll

[2009/04/11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2008/01/19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe

[2008/01/19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

[2006/11/02 11:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe

 
 < MD5 for: WININIT.EXE  >

[2008/01/19 09:33:37 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe

[2008/01/19 09:33:37 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe

[2006/11/02 11:45:57 | 000,095,744 | ---- | M] (Microsoft Corporation) MD5=D4385B03E8CCCEE6F0EE249F827C1F3E -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce\wininit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2012/09/29 19:54:26 | 000,218,184 | ---- | M] () MD5=8846E87210AD131CF71E3E2E49F647B0 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

[2009/04/11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe

[2009/04/11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe

[2006/11/02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe

[2008/01/19 09:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2006/11/02 10:58:26 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=84620AECDCFD2A7A14E6263927D8C0ED -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6000.16386_none_4d4fded8cae2956d\ws2ifsl.sys

[2008/01/19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys

[2008/01/19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV

[2006/11/02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV

[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV

[2006/11/02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV

[2006/11/02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[2012/09/09 17:10:00 | 000,143,360 | RHS- | M] () Unable to obtain MD5 -- C:\Windows\system32\d3dx10_33G.dll

 
 <           >

[2006/11/02 15:01:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[2006/11/02 15:01:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2008/05/11 12:11:41 | 000,000,590 | ---- | C] () -- C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - christoph.job

[2009/01/02 09:02:35 | 000,000,416 | ---- | C] () -- C:\Windows\Tasks\PCConfidential.job

[2009/02/21 15:55:43 | 000,001,052 | ---- | C] () -- C:\Windows\Tasks\Google Software Updater.job

[2009/07/01 06:17:59 | 000,001,094 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

[2009/07/01 06:18:00 | 000,001,098 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[2011/03/03 15:07:30 | 000,000,340 | ---- | C] () -- C:\Windows\Tasks\RegistryBooster.job

[2011/03/03 15:15:05 | 000,000,322 | ---- | C] () -- C:\Windows\Tasks\RegTask.job

[2012/09/09 17:10:00 | 000,000,320 | ---- | C] () -- C:\Windows\Tasks\Lqrpettlq.job
 

< End of report >

Merci bis demnächst

cosinus

21.10.2012 20:20

Beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL

O3 - HKLM\..\Toolbar: (no name) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe File not found

SafeBootMin: 33287322.sys - Driver

SafeBootNet: 33287322.sys - Driver

:Files

C:\Program Files\Uniblue

C:\Users\christoph\AppData\Roaming\OpenCandy

C:\Users\christoph\Documents\PremiumTV\setup_PremiumDownloadsForPC.msi

C:\Users\Public\Winferno

C:\Windows\Tasks\RegistryBooster.job

C:\Windows\Tasks\RegTask.job

C:\Windows\Tasks\Lqrpettlq.job

ipconfig /flushdns /c

:Commands

[purity]

[emptytemp]

[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

christoph03

22.10.2012 04:55

Guten Morgen,

so sieht die OTL Datei aus

Code:

All processes killed

========== OTL ==========

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC}\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.

Registry value HKEY_USERS\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C}\ not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{53F6FCCD-9E22-4d71-86EA-6E43136192AB}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53F6FCCD-9E22-4d71-86EA-6E43136192AB}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{925DAB62-F9AC-4221-806A-057BFB1014AA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{925DAB62-F9AC-4221-806A-057BFB1014AA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\33287322.sys\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\33287322.sys\ deleted successfully.

========== FILES ==========

C:\Program Files\Uniblue\RegistryBooster\Third Party Terms folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\xt\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\xt folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\xs\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\xs folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\tr\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\tr folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\se\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\se folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\ru\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\ru folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\pt\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\pt folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\pl\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\pl folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\no\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\no folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\nl\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\nl folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\jp\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\jp folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\it\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\it folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\gr\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\gr folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\fr\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\fr folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\fi\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\fi folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\es\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\es folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\en\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\en folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\dk\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\dk folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\de\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\de folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\br\LC_MESSAGES folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale\br folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster\locale folder moved successfully.

C:\Program Files\Uniblue\RegistryBooster folder moved successfully.

C:\Program Files\Uniblue folder moved successfully.

File\Folder C:\Users\christoph\AppData\Roaming\OpenCandy not found.

C:\Users\christoph\Documents\PremiumTV\setup_PremiumDownloadsForPC.msi moved successfully.

C:\Users\Public\Winferno\PC Confidential folder moved successfully.

C:\Users\Public\Winferno folder moved successfully.

C:\Windows\Tasks\RegistryBooster.job moved successfully.

C:\Windows\Tasks\RegTask.job moved successfully.

C:\Windows\Tasks\Lqrpettlq.job moved successfully.
 < ipconfig /flushdns /c >

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

C:\Users\christoph\Desktop\cmd.bat deleted successfully.

C:\Users\christoph\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: christoph

->Temp folder emptied: 93004603 bytes

->Temporary Internet Files folder emptied: 185830191 bytes

->Java cache emptied: 53738722 bytes

->FireFox cache emptied: 50865399 bytes

->Flash cache emptied: 35399 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Flash cache emptied: 41 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: Public

 

User: UpdatusUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Flash cache emptied: 41 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 1690726 bytes

RecycleBin emptied: 2404600494 bytes

 

Total Files Cleaned = 2,661.00 mb

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.69.0 log created on 10222012_054058
 

Files\Folders moved on Reboot...
 

PendingFileRenameOperations files...
 

Registry entries deleted on Reboot...

Einige Registry Keys und Dateien wurden nicht gefunden, welche Ursachen hat das?
Vielen Dank für die tolle Unterstützung C.

cosinus

22.10.2012 11:27

Code:

[2012/10/18 16:21:49 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2012/10/18 16:00:30 | 002,213,464 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\christoph\Desktop\tdsskiller.exe

Was hast du da schon mit dem TDSS-Killer gemacht?! Das Tool ist kein Spielzeug! :kloppen:
Es dürfen auch NICHT pauschal alle Funde mit diesem Tool gefixt werden - poste bitte alle vorhandenen Logs davon

christoph03

22.10.2012 14:15

Code:

16:11:40.0950 5300  TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47

16:11:41.0254 5300  ============================================================

16:11:41.0254 5300  Current date / time: 2012/10/18 16:11:41.0254

16:11:41.0254 5300  SystemInfo:

16:11:41.0254 5300  

16:11:41.0254 5300  OS Version: 6.0.6002 ServicePack: 2.0

16:11:41.0254 5300  Product type: Workstation

16:11:41.0254 5300  ComputerName: CHRISTOPH-PC

16:11:41.0254 5300  UserName: christoph

16:11:41.0254 5300  Windows directory: C:\Windows

16:11:41.0254 5300  System windows directory: C:\Windows

16:11:41.0254 5300  Processor architecture: Intel x86

16:11:41.0254 5300  Number of processors: 4

16:11:41.0254 5300  Page size: 0x1000

16:11:41.0254 5300  Boot type: Normal boot

16:11:41.0254 5300  ============================================================

16:11:41.0506 5300  BG loaded

16:11:41.0936 5300  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

16:11:41.0949 5300  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

16:11:41.0961 5300  ============================================================

16:11:41.0963 5300  \Device\Harddisk0\DR0:

16:11:41.0963 5300  MBR partitions:

16:11:41.0963 5300  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3946D769

16:11:41.0963 5300  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3946D7A8, BlocksNum 0xF17499

16:11:41.0963 5300  \Device\Harddisk1\DR1:

16:11:41.0963 5300  MBR partitions:

16:11:41.0963 5300  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02

16:11:41.0963 5300  ============================================================

16:11:42.0009 5300  C: <-> \Device\Harddisk0\DR0\Partition1

16:11:42.0023 5300  E: <-> \Device\Harddisk1\DR1\Partition1

16:11:42.0123 5300  D: <-> \Device\Harddisk0\DR0\Partition2

16:11:42.0123 5300  ============================================================

16:11:42.0123 5300  Initialize success

16:11:42.0123 5300  ============================================================

16:13:12.0582 8076  ============================================================

16:13:12.0582 8076  Scan started

16:13:12.0582 8076  Mode: Manual; 

16:13:12.0582 8076  ============================================================

16:13:12.0949 8076  ================ Scan system memory ========================

16:13:12.0949 8076  System memory - ok

16:13:12.0951 8076  ================ Scan services =============================

16:13:13.0498 8076  [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI            C:\Windows\system32\drivers\acpi.sys

16:13:13.0512 8076  ACPI - ok

16:13:13.0708 8076  [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

16:13:13.0724 8076  adp94xx - ok

16:13:13.0803 8076  [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci         C:\Windows\system32\drivers\adpahci.sys

16:13:13.0893 8076  adpahci - ok

16:13:13.0923 8076  [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

16:13:14.0225 8076  adpu160m - ok

16:13:14.0335 8076  [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320         C:\Windows\system32\drivers\adpu320.sys

16:13:14.0347 8076  adpu320 - ok

16:13:14.0455 8076  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

16:13:14.0462 8076  AeLookupSvc - ok

16:13:14.0566 8076  [ 3911B972B55FEA0478476B2E777B29FA ] AFD             C:\Windows\system32\drivers\afd.sys

16:13:14.0578 8076  AFD - ok

16:13:14.0683 8076  [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440          C:\Windows\system32\drivers\agp440.sys

16:13:14.0750 8076  agp440 - ok

16:13:14.0799 8076  [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

16:13:14.0832 8076  aic78xx - ok

16:13:14.0884 8076  [ A1545B731579895D8CC44FC0481C1192 ] ALG             C:\Windows\System32\alg.exe

16:13:14.0898 8076  ALG - ok

16:13:14.0955 8076  [ C392B591746961B60F89FE1CBCA7B4FB ] aliide          C:\Windows\system32\drivers\aliide.sys

16:13:14.0975 8076  aliide - ok

16:13:15.0029 8076  [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

16:13:15.0038 8076  amdagp - ok

16:13:15.0081 8076  [ F5F8D2885D1DF33C74764EA2C06C0028 ] amdide          C:\Windows\system32\drivers\amdide.sys

16:13:15.0089 8076  amdide - ok

16:13:15.0152 8076  [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

16:13:15.0190 8076  AmdK7 - ok

16:13:15.0206 8076  [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

16:13:15.0275 8076  AmdK8 - ok

16:13:15.0344 8076  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo         C:\Windows\System32\appinfo.dll

16:13:15.0352 8076  Appinfo - ok

16:13:15.0390 8076  [ 5F673180268BB1FDB69C99B6619FE379 ] arc             C:\Windows\system32\drivers\arc.sys

16:13:15.0400 8076  arc - ok

16:13:15.0405 8076  [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

16:13:15.0415 8076  arcsas - ok

16:13:15.0901 8076  [ 40C145F12FF461A0220303BDA134F598 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

16:13:15.0941 8076  aspnet_state - ok

16:13:16.0074 8076  [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

16:13:16.0111 8076  AsyncMac - ok

16:13:16.0167 8076  [ BFD3DF48C9ED81934FE21E8E3CFC2496 ] atapi           C:\Windows\system32\drivers\atapi.sys

16:13:16.0185 8076  atapi - ok

16:13:16.0288 8076  [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:13:16.0327 8076  AudioEndpointBuilder - ok

16:13:16.0378 8076  [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv        C:\Windows\System32\Audiosrv.dll

16:13:16.0380 8076  Audiosrv - ok

16:13:16.0642 8076  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:13:16.0665 8076  Automatic LiveUpdate Scheduler - ok

16:13:16.0807 8076  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep            C:\Windows\system32\drivers\Beep.sys

16:13:16.0815 8076  Beep - ok

16:13:16.0927 8076  [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE             C:\Windows\System32\bfe.dll

16:13:16.0942 8076  BFE - ok

16:13:17.0065 8076  [ 93952506C6D67330367F7E7934B6A02F ] BITS            C:\Windows\System32\qmgr.dll

16:13:17.0083 8076  BITS - ok

16:13:17.0089 8076  blbdrive - ok

16:13:17.0177 8076  [ 35F376253F687BDE63976CCB3F2108CA ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

16:13:17.0187 8076  bowser - ok

16:13:17.0294 8076  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

16:13:17.0331 8076  BrFiltLo - ok

16:13:17.0399 8076  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

16:13:17.0420 8076  BrFiltUp - ok

16:13:17.0503 8076  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser         C:\Windows\System32\browser.dll

16:13:17.0517 8076  Browser - ok

16:13:17.0573 8076  [ B304E75CFF293029EDDF094246747113 ] Brserid         C:\Windows\system32\drivers\brserid.sys

16:13:17.0597 8076  Brserid - ok

16:13:17.0605 8076  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

16:13:17.0638 8076  BrSerWdm - ok

16:13:17.0693 8076  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

16:13:17.0729 8076  BrUsbMdm - ok

16:13:17.0786 8076  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

16:13:17.0953 8076  BrUsbSer - ok

16:13:18.0070 8076  [ 6D39C954799B63BA866910234CF7D726 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

16:13:18.0081 8076  BthEnum - ok

16:13:18.0145 8076  [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

16:13:18.0155 8076  BTHMODEM - ok

16:13:18.0216 8076  [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

16:13:18.0252 8076  BthPan - ok

16:13:18.0396 8076  [ 73D53F8E90550BA81E2CF44A0873B410 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

16:13:18.0440 8076  BTHPORT - ok

16:13:18.0488 8076  [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ         C:\Windows\System32\bthserv.dll

16:13:18.0496 8076  BthServ - ok

16:13:18.0524 8076  [ 32045A4BB143BBC5BAB1298C4E9E309A ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

16:13:18.0533 8076  BTHUSB - ok

16:13:18.0681 8076  [ 1778EBA872274C1226D869CD9486847E ] Capture Device Service C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:13:18.0696 8076  Capture Device Service - ok

16:13:18.0757 8076  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccEvtMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:13:18.0792 8076  ccEvtMgr - ok

16:13:18.0846 8076  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccSetMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:13:18.0848 8076  ccSetMgr - ok

16:13:18.0917 8076  [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

16:13:18.0925 8076  cdfs - ok

16:13:19.0017 8076  [ 6B4BFFB9BECD728097024276430DB314 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

16:13:19.0030 8076  cdrom - ok

16:13:19.0142 8076  [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc     C:\Windows\System32\certprop.dll

16:13:19.0150 8076  CertPropSvc - ok

16:13:19.0189 8076  [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass        C:\Windows\system32\drivers\circlass.sys

16:13:19.0209 8076  circlass - ok

16:13:19.0257 8076  [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS            C:\Windows\system32\CLFS.sys

16:13:19.0288 8076  CLFS - ok

16:13:19.0355 8076  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:13:19.0439 8076  clr_optimization_v2.0.50727_32 - ok

16:13:19.0582 8076  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:13:19.0713 8076  clr_optimization_v4.0.30319_32 - ok

16:13:19.0791 8076  [ 2F237AAB91497AAA03AF48EAE68758FC ] CLTNetCnService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:13:19.0793 8076  CLTNetCnService - ok

16:13:19.0816 8076  [ 78D56FE738F63D7FEFCC7B396C5DCB67 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

16:13:19.0838 8076  cmdide - ok

16:13:19.0893 8076  [ 6186B6B953BDC884F0F379B84B3E3A98 ] COH_Mon         C:\Windows\system32\Drivers\COH_Mon.sys

16:13:19.0946 8076  COH_Mon - ok

16:13:20.0007 8076  [ 75A69CA9998577F8B2BE8695040E5DF4 ] comHost         C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

16:13:20.0048 8076  comHost - ok

16:13:20.0054 8076  [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

16:13:20.0064 8076  Compbatt - ok

16:13:20.0071 8076  COMSysApp - ok

16:13:20.0101 8076  [ 73F5D6835BFA66019C03E316D99649DA ] CO_Mon          C:\Windows\system32\drivers\CO_Mon.sys

16:13:20.0112 8076  CO_Mon - ok

16:13:20.0141 8076  [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

16:13:20.0153 8076  crcdisk - ok

16:13:20.0211 8076  [ 22A7F883508176489F559EE745B5BF5D ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

16:13:20.0225 8076  Crusoe - ok

16:13:20.0318 8076  [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

16:13:20.0326 8076  CryptSvc - ok

16:13:20.0663 8076  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch      C:\Windows\system32\rpcss.dll

16:13:20.0667 8076  DcomLaunch - ok

16:13:20.0699 8076  [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

16:13:20.0710 8076  DfsC - ok

16:13:21.0297 8076  [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR            C:\Windows\system32\DFSR.exe

16:13:22.0098 8076  DFSR - ok

16:13:22.0260 8076  [ 9028559C132146FB75EB7ACF384B086A ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

16:13:22.0261 8076  Dhcp - ok

16:13:22.0360 8076  [ 5D4AEFC3386920236A548271F8F1AF6A ] disk            C:\Windows\system32\drivers\disk.sys

16:13:22.0477 8076  disk - ok

16:13:22.0588 8076  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache        C:\Windows\System32\dnsrslvr.dll

16:13:22.0596 8076  Dnscache - ok

16:13:22.0706 8076  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc         C:\Windows\System32\dot3svc.dll

16:13:22.0716 8076  dot3svc - ok

16:13:22.0814 8076  [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

16:13:22.0824 8076  Dot4 - ok

16:13:22.0893 8076  [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

16:13:22.0926 8076  Dot4Print - ok

16:13:22.0950 8076  [ C55004CA6B419B6695970DFE849B122F ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

16:13:22.0978 8076  dot4usb - ok

16:13:23.0056 8076  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS             C:\Windows\system32\dps.dll

16:13:23.0066 8076  DPS - ok

16:13:23.0102 8076  [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

16:13:23.0109 8076  drmkaud - ok

16:13:23.0160 8076  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

16:13:23.0175 8076  DXGKrnl - ok

16:13:23.0265 8076  [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

16:13:23.0276 8076  E1G60 - ok

16:13:23.0309 8076  [ C0B95E40D85CD807D614E264248A45B9 ] EapHost         C:\Windows\System32\eapsvc.dll

16:13:23.0318 8076  EapHost - ok

16:13:23.0460 8076  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache          C:\Windows\system32\drivers\ecache.sys

16:13:23.0484 8076  Ecache - ok

16:13:23.0521 8076  [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl          C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:13:23.0532 8076  eeCtrl - ok

16:13:23.0603 8076  [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

16:13:23.0652 8076  ehRecvr - ok

16:13:23.0713 8076  [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched         C:\Windows\ehome\ehsched.exe

16:13:23.0792 8076  ehSched - ok

16:13:23.0808 8076  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart         C:\Windows\ehome\ehstart.dll

16:13:23.0816 8076  ehstart - ok

16:13:23.0891 8076  [ E8F3F21A71720C84BCF423B80028359F ] elxstor         C:\Windows\system32\drivers\elxstor.sys

16:13:23.0914 8076  elxstor - ok

16:13:24.0089 8076  [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

16:13:24.0137 8076  EMDMgmt - ok

16:13:24.0243 8076  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:13:24.0254 8076  EraserUtilRebootDrv - ok

16:13:24.0358 8076  [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem     C:\Windows\system32\es.dll

16:13:24.0361 8076  EventSystem - ok

16:13:24.0423 8076  [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat           C:\Windows\system32\drivers\exfat.sys

16:13:24.0460 8076  exfat - ok

16:13:24.0574 8076  [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

16:13:24.0614 8076  fastfat - ok

16:13:24.0659 8076  [ 63BDADA84951B9C03E641800E176898A ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

16:13:24.0669 8076  fdc - ok

16:13:24.0725 8076  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost         C:\Windows\system32\fdPHost.dll

16:13:24.0726 8076  fdPHost - ok

16:13:24.0791 8076  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub        C:\Windows\system32\fdrespub.dll

16:13:24.0801 8076  FDResPub - ok

16:13:24.0869 8076  [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

16:13:24.0908 8076  FileInfo - ok

16:13:24.0955 8076  [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

16:13:24.0967 8076  Filetrace - ok

16:13:24.0972 8076  [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

16:13:24.0980 8076  flpydisk - ok

16:13:25.0045 8076  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

16:13:25.0054 8076  FltMgr - ok

16:13:25.0299 8076  [ 8795FD92B624648DABE7B75129EF8002 ] FMS             C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:13:25.0334 8076  FMS - ok

16:13:25.0486 8076  [ 2DB70167C13F2339A63E694291FD1BFD ] FMSAdmin        C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:13:25.0524 8076  FMSAdmin - ok

16:13:25.0691 8076  [ 8881574868E648689B7AA88A88716E17 ] FMSHttpd        C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:13:25.0703 8076  FMSHttpd - ok

16:13:25.0961 8076  [ 8CE364388C8ECA59B14B539179276D44 ] FontCache       C:\Windows\system32\FntCache.dll

16:13:25.0979 8076  FontCache - ok

16:13:26.0057 8076  [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

16:13:26.0114 8076  FontCache3.0.0.0 - ok

16:13:26.0126 8076  [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

16:13:26.0133 8076  Fs_Rec - ok

16:13:26.0201 8076  [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

16:13:26.0248 8076  gagp30kx - ok

16:13:26.0295 8076  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] GEARAspiWDM     C:\Windows\system32\Drivers\GEARAspiWDM.sys

16:13:26.0302 8076  GEARAspiWDM - ok

16:13:26.0360 8076  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc           C:\Windows\System32\gpsvc.dll

16:13:26.0375 8076  gpsvc - ok

16:13:26.0515 8076  [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9942c2d4a157c C:\Program Files\Google\Update\GoogleUpdate.exe

16:13:26.0528 8076  gupdate1c9942c2d4a157c - ok

16:13:26.0546 8076  [ 626A24ED1228580B9518C01930936DF9 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

16:13:26.0548 8076  gupdatem - ok

16:13:26.0618 8076  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:13:26.0641 8076  gusvc - ok

16:13:26.0756 8076  [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

16:13:26.0768 8076  HDAudBus - ok

16:13:26.0789 8076  [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth          C:\Windows\system32\drivers\hidbth.sys

16:13:26.0797 8076  HidBth - ok

16:13:26.0803 8076  [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr           C:\Windows\system32\drivers\hidir.sys

16:13:26.0813 8076  HidIr - ok

16:13:26.0924 8076  [ 84067081F3318162797385E11A8F0582 ] hidserv         C:\Windows\system32\hidserv.dll

16:13:26.0933 8076  hidserv - ok

16:13:26.0972 8076  [ CCA4B519B17E23A00B826C55716809CC ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

16:13:26.0980 8076  HidUsb - ok

16:13:27.0030 8076  [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc          C:\Windows\system32\kmsvc.dll

16:13:27.0040 8076  hkmsvc - ok

16:13:27.0306 8076  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

16:13:27.0346 8076  HP Health Check Service - ok

16:13:27.0458 8076  [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

16:13:27.0470 8076  HpCISSs - ok

16:13:27.0655 8076  [ 58D4765AB87347DB835D5693ADF652C1 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:13:27.0657 8076  hpqcxs08 - ok

16:13:27.0827 8076  [ 99ED733F614660EB32199BF889DFB7E2 ] hpqddsvc        C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:13:27.0847 8076  hpqddsvc - ok

16:13:27.0927 8076  [ 75F122CDCA3C71BD09089F2CA824B796 ] HPSLPSVC        C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:13:27.0943 8076  HPSLPSVC - ok

16:13:27.0988 8076  [ F870AA3E254628EBEAFE754108D664DE ] HTTP            C:\Windows\system32\drivers\HTTP.sys

16:13:28.0003 8076  HTTP - ok

16:13:28.0029 8076  [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

16:13:28.0045 8076  i2omp - ok

16:13:28.0124 8076  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

16:13:28.0139 8076  i8042prt - ok

16:13:28.0326 8076  [ 204A73A56751C68C6031E9D5D611EC98 ] IAANTMON        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

16:13:28.0348 8076  IAANTMON - ok

16:13:28.0373 8076  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] iaStor          C:\Windows\system32\drivers\iastor.sys

16:13:28.0386 8076  iaStor - ok

16:13:28.0412 8076  [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

16:13:28.0438 8076  iaStorV - ok

16:13:28.0540 8076  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

16:13:28.0597 8076  IDriverT - ok

16:13:28.0657 8076  [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

16:13:28.0714 8076  idsvc - ok

16:13:28.0836 8076  [ F85DC24DAFA76237722FE38B3196C61A ] IDSvix86        C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:13:28.0852 8076  IDSvix86 - ok

16:13:28.0870 8076  [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

16:13:28.0904 8076  iirsp - ok

16:13:28.0948 8076  [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT          C:\Windows\System32\ikeext.dll

16:13:28.0958 8076  IKEEXT - ok

16:13:29.0111 8076  [ EDC37B918E583A5A813C53D4F5588255 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

16:13:29.0133 8076  IntcAzAudAddService - ok

16:13:29.0163 8076  [ E08FB545EDA9D1E3CA689B4B3F6E4C22 ] intelide        C:\Windows\system32\drivers\intelide.sys

16:13:29.0171 8076  intelide - ok

16:13:29.0295 8076  [ 224191001E78C89DFA78924C3EA595FF ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

16:13:29.0302 8076  intelppm - ok

16:13:29.0345 8076  [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

16:13:29.0354 8076  IPBusEnum - ok

16:13:29.0377 8076  [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:13:29.0387 8076  IpFilterDriver - ok

16:13:29.0432 8076  [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

16:13:29.0445 8076  iphlpsvc - ok

16:13:29.0450 8076  IpInIp - ok

16:13:29.0466 8076  [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

16:13:29.0482 8076  IPMIDRV - ok

16:13:29.0502 8076  [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

16:13:29.0513 8076  IPNAT - ok

16:13:29.0561 8076  [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

16:13:29.0580 8076  IRENUM - ok

16:13:29.0610 8076  [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

16:13:29.0622 8076  isapnp - ok

16:13:29.0721 8076  [ 232FA340531D940AAC623B121A595034 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

16:13:29.0733 8076  iScsiPrt - ok

16:13:29.0799 8076  [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

16:13:29.0814 8076  iteatapi - ok

16:13:29.0820 8076  [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid         C:\Windows\system32\drivers\iteraid.sys

16:13:29.0857 8076  iteraid - ok

16:13:29.0896 8076  [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

16:13:29.0906 8076  kbdclass - ok

16:13:29.0935 8076  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

16:13:29.0948 8076  kbdhid - ok

16:13:30.0018 8076  [ A3E186B4B935905B829219502557314E ] KeyIso          C:\Windows\system32\lsass.exe

16:13:30.0045 8076  KeyIso - ok

16:13:30.0128 8076  [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

16:13:30.0158 8076  KSecDD - ok

16:13:30.0272 8076  [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm           C:\Windows\system32\msdtckrm.dll

16:13:30.0304 8076  KtmRm - ok

16:13:30.0344 8076  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] L8042Kbd        C:\Windows\system32\DRIVERS\L8042Kbd.sys

16:13:30.0355 8076  L8042Kbd - ok

16:13:30.0458 8076  [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer    C:\Windows\system32\srvsvc.dll

16:13:30.0462 8076  LanmanServer - ok

16:13:30.0549 8076  [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:13:30.0565 8076  LanmanWorkstation - ok

16:13:30.0696 8076  [ 3AF6B73A3AD1FC37C5933441F66CEB91 ] LBTServ         C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

16:13:30.0721 8076  LBTServ - ok

16:13:30.0839 8076  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

16:13:30.0851 8076  LHidFilt - ok

16:13:30.0903 8076  [ 9039717A906DA0AE38420918801D9AB3 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:13:30.0927 8076  LightScribeService - ok

16:13:31.0310 8076  [ 36375738DC0B3CD1F764268008E74FDF ] LiveUpdate      C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

16:13:31.0362 8076  LiveUpdate - ok

16:13:31.0380 8076  [ 2F237AAB91497AAA03AF48EAE68758FC ] LiveUpdate Notice C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:13:31.0382 8076  LiveUpdate Notice - ok

16:13:31.0408 8076  [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

16:13:31.0416 8076  lltdio - ok

16:13:31.0501 8076  [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

16:13:31.0594 8076  lltdsvc - ok

16:13:31.0658 8076  [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts         C:\Windows\System32\lmhsvc.dll

16:13:31.0665 8076  lmhosts - ok

16:13:31.0681 8076  [ AB33792A87285344F43B5CE23421BAB0 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

16:13:31.0689 8076  LMouFilt - ok

16:13:31.0794 8076  [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

16:13:31.0826 8076  LSI_FC - ok

16:13:31.0853 8076  [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

16:13:31.0864 8076  LSI_SAS - ok

16:13:31.0926 8076  [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

16:13:31.0950 8076  LSI_SCSI - ok

16:13:32.0006 8076  [ 8F5C7426567798E62A3B3614965D62CC ] luafv           C:\Windows\system32\drivers\luafv.sys

16:13:32.0016 8076  luafv - ok

16:13:32.0066 8076  [ 77030525CD86A93F1AF34FA9B96D33CE ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

16:13:32.0076 8076  LUsbFilt - ok

16:13:32.0112 8076  [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

16:13:32.0123 8076  Mcx2Svc - ok

16:13:32.0173 8076  [ D153B14FC6598EAE8422A2037553ADCE ] megasas         C:\Windows\system32\drivers\megasas.sys

16:13:32.0183 8076  megasas - ok

16:13:32.0220 8076  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS           C:\Windows\system32\mmcss.dll

16:13:32.0230 8076  MMCSS - ok

16:13:32.0284 8076  [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem           C:\Windows\system32\drivers\modem.sys

16:13:32.0789 8076  Modem - ok

16:13:32.0856 8076  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

16:13:32.0863 8076  monitor - ok

16:13:32.0909 8076  [ 5BF6A1326A335C5298477754A506D263 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

16:13:32.0917 8076  mouclass - ok

16:13:33.0009 8076  [ 93B8D4869E12CFBE663915502900876F ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

16:13:33.0017 8076  mouhid - ok

16:13:33.0091 8076  [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

16:13:33.0101 8076  MountMgr - ok

16:13:33.0188 8076  [ 583A41F26278D9E0EA548163D6139397 ] mpio            C:\Windows\system32\drivers\mpio.sys

16:13:33.0203 8076  mpio - ok

16:13:33.0295 8076  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

16:13:33.0304 8076  mpsdrv - ok

16:13:33.0487 8076  [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc          C:\Windows\system32\mpssvc.dll

16:13:33.0501 8076  MpsSvc - ok

16:13:33.0548 8076  [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

16:13:33.0559 8076  Mraid35x - ok

16:13:33.0616 8076  [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

16:13:33.0627 8076  MRxDAV - ok

16:13:33.0673 8076  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

16:13:33.0686 8076  mrxsmb - ok

16:13:33.0796 8076  [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:13:33.0810 8076  mrxsmb10 - ok

16:13:33.0849 8076  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:13:33.0861 8076  mrxsmb20 - ok

16:13:33.0901 8076  [ D537C241DB604FA86E46328DA0FD83D6 ] msahci          C:\Windows\system32\drivers\msahci.sys

16:13:33.0916 8076  msahci - ok

16:13:33.0932 8076  [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

16:13:33.0944 8076  msdsm - ok

16:13:34.0021 8076  [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC           C:\Windows\System32\msdtc.exe

16:13:34.0083 8076  MSDTC - ok

16:13:34.0131 8076  [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

16:13:34.0141 8076  Msfs - ok

16:13:34.0216 8076  [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

16:13:34.0238 8076  msisadrv - ok

16:13:34.0296 8076  [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

16:13:34.0349 8076  MSiSCSI - ok

16:13:34.0355 8076  msiserver - ok

16:13:34.0395 8076  [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

16:13:34.0404 8076  MSKSSRV - ok

16:13:34.0441 8076  [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

16:13:34.0450 8076  MSPCLOCK - ok

16:13:34.0510 8076  [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

16:13:34.0529 8076  MSPQM - ok

16:13:34.0610 8076  [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

16:13:34.0717 8076  MsRPC - ok

16:13:34.0781 8076  [ E384487CB84BE41D09711C30CA79646C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

16:13:34.0792 8076  mssmbios - ok

16:13:35.0054 8076  MSSQL$SQLEXPRESS - ok

16:13:35.0148 8076  [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

16:13:35.0214 8076  MSSQLServerADHelper100 - ok

16:13:35.0311 8076  [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

16:13:35.0346 8076  MSTEE - ok

16:13:35.0419 8076  [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup             C:\Windows\system32\Drivers\mup.sys

16:13:35.0439 8076  Mup - ok

16:13:35.0578 8076  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent        C:\Windows\system32\qagentRT.dll

16:13:35.0583 8076  napagent - ok

16:13:35.0685 8076  [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

16:13:35.0710 8076  NativeWifiP - ok

16:13:35.0801 8076  [ 8E4C77AD9BB279900C00F870CC0C674B ] NAVENG          C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:13:35.0812 8076  NAVENG - ok

16:13:36.0211 8076  [ 826F699B69E88A3920C70F344DD42D88 ] NAVEX15         C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:13:36.0234 8076  NAVEX15 - ok

16:13:36.0311 8076  [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS            C:\Windows\system32\drivers\ndis.sys

16:13:36.0330 8076  NDIS - ok

16:13:36.0360 8076  [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

16:13:36.0371 8076  NdisTapi - ok

16:13:36.0406 8076  [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

16:13:36.0435 8076  Ndisuio - ok

16:13:36.0486 8076  [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

16:13:36.0502 8076  NdisWan - ok

16:13:36.0578 8076  [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

16:13:36.0588 8076  NDProxy - ok

16:13:36.0666 8076  [ 19715A9A573DAD2521348ABC74266A48 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

16:13:36.0677 8076  Net Driver HPZ12 - ok

16:13:36.0713 8076  [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

16:13:36.0723 8076  NetBIOS - ok

16:13:36.0811 8076  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

16:13:36.0831 8076  netbt - ok

16:13:36.0866 8076  [ A3E186B4B935905B829219502557314E ] Netlogon        C:\Windows\system32\lsass.exe

16:13:36.0868 8076  Netlogon - ok

16:13:37.0013 8076  [ C8052711DAECC48B982434C5116CA401 ] Netman          C:\Windows\System32\netman.dll

16:13:37.0017 8076  Netman - ok

16:13:37.0128 8076  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:13:37.0152 8076  NetMsmqActivator - ok

16:13:37.0158 8076  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:13:37.0160 8076  NetPipeActivator - ok

16:13:37.0206 8076  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm        C:\Windows\System32\netprofm.dll

16:13:37.0210 8076  netprofm - ok

16:13:37.0265 8076  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:13:37.0267 8076  NetTcpActivator - ok

16:13:37.0280 8076  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:13:37.0282 8076  NetTcpPortSharing - ok

16:13:37.0324 8076  [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

16:13:37.0359 8076  nfrd960 - ok

16:13:37.0652 8076  [ 183CBAD181DEDAC0119B2861C426AC14 ] NitroReaderDriverReadSpool C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:13:37.0729 8076  NitroReaderDriverReadSpool - ok

16:13:37.0771 8076  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc          C:\Windows\System32\nlasvc.dll

16:13:37.0785 8076  NlaSvc - ok

16:13:37.0933 8076  [ 6623E51595C0076755C29C00846C4EB2 ] NPF             C:\Windows\system32\drivers\npf.sys

16:13:38.0077 8076  NPF - ok

16:13:38.0156 8076  [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

16:13:38.0164 8076  Npfs - ok

16:13:38.0237 8076  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi             C:\Windows\system32\nsisvc.dll

16:13:38.0247 8076  nsi - ok

16:13:38.0340 8076  [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

16:13:38.0347 8076  nsiproxy - ok

16:13:38.0539 8076  [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

16:13:38.0611 8076  Ntfs - ok

16:13:38.0681 8076  [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

16:13:38.0698 8076  ntrigdigi - ok

16:13:38.0722 8076  [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null            C:\Windows\system32\drivers\Null.sys

16:13:38.0728 8076  Null - ok

16:13:40.0341 8076  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:13:40.0426 8076  nvlddmkm - ok

16:13:40.0475 8076  [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

16:13:40.0507 8076  nvraid - ok

16:13:40.0512 8076  [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

16:13:40.0522 8076  nvstor - ok

16:13:40.0782 8076  [ 782945716AD010AC3D41758E8E52C735 ] nvsvc           C:\Windows\system32\nvvsvc.exe

16:13:40.0809 8076  nvsvc - ok

16:13:41.0085 8076  [ A974E5C310B9B00894070CEB055D467F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:13:41.0207 8076  nvUpdatusService - ok

16:13:41.0236 8076  [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

16:13:41.0256 8076  nv_agp - ok

16:13:41.0260 8076  NwlnkFlt - ok

16:13:41.0266 8076  NwlnkFwd - ok

16:13:41.0389 8076  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

16:13:41.0441 8076  odserv - ok

16:13:41.0537 8076  [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

16:13:41.0548 8076  ohci1394 - ok

16:13:41.0708 8076  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:13:41.0827 8076  ose - ok

16:13:42.0034 8076  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

16:13:42.0051 8076  p2pimsvc - ok

16:13:42.0109 8076  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc          C:\Windows\system32\p2psvc.dll

16:13:42.0116 8076  p2psvc - ok

16:13:42.0176 8076  [ 0FA9B5055484649D63C303FE404E5F4D ] Parport         C:\Windows\system32\drivers\parport.sys

16:13:42.0200 8076  Parport - ok

16:13:42.0249 8076  [ B9C2B89F08670E159F7181891E449CD9 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

16:13:42.0269 8076  partmgr - ok

16:13:42.0293 8076  [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

16:13:42.0302 8076  Parvdm - ok

16:13:42.0347 8076  [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc          C:\Windows\System32\pcasvc.dll

16:13:42.0359 8076  PcaSvc - ok

16:13:42.0450 8076  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfd.sys

16:13:42.0474 8076  pccsmcfd - ok

16:13:42.0520 8076  [ 941DC1D19E7E8620F40BBC206981EFDB ] pci             C:\Windows\system32\drivers\pci.sys

16:13:42.0535 8076  pci - ok

16:13:42.0571 8076  [ A88FF9E32AAA9AF398AE89B9A082870B ] pciide          C:\Windows\system32\drivers\pciide.sys

16:13:42.0582 8076  pciide - ok

16:13:42.0660 8076  [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

16:13:42.0803 8076  pcmcia - ok

16:13:42.0918 8076  [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

16:13:42.0933 8076  PEAUTH - ok

16:13:42.0999 8076  [ B1689DF169143F57053F795390C99DB3 ] pla             C:\Windows\system32\pla.dll

16:13:43.0018 8076  pla - ok

16:13:43.0134 8076  [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

16:13:43.0150 8076  PlugPlay - ok

16:13:43.0160 8076  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

16:13:43.0171 8076  Pml Driver HPZ12 - ok

16:13:43.0317 8076  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

16:13:43.0323 8076  PNRPAutoReg - ok

16:13:43.0343 8076  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

16:13:43.0349 8076  PNRPsvc - ok

16:13:43.0382 8076  [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

16:13:43.0394 8076  PolicyAgent - ok

16:13:43.0453 8076  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

16:13:43.0462 8076  PptpMiniport - ok

16:13:43.0503 8076  [ 0E3CEF5D28B40CF273281D620C50700A ] Processor       C:\Windows\system32\drivers\processr.sys

16:13:43.0541 8076  Processor - ok

16:13:43.0659 8076  [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc         C:\Windows\system32\profsvc.dll

16:13:43.0672 8076  ProfSvc - ok

16:13:43.0748 8076  [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe

16:13:43.0750 8076  ProtectedStorage - ok

16:13:43.0840 8076  [ F115AF58ABE5605D7D709CBFBD83F418 ] ProtexisLicensing C:\Windows\system32\PSIService.exe

16:13:43.0994 8076  ProtexisLicensing - ok

16:13:44.0070 8076  [ 390C204CED3785609AB24E9C52054A84 ] Ps2             C:\Windows\system32\DRIVERS\PS2.sys

16:13:44.0077 8076  Ps2 - ok

16:13:44.0127 8076  [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

16:13:44.0136 8076  PSched - ok

16:13:44.0260 8076  [ CCDAC889326317792480C0A67156A1EC ] ql2300          C:\Windows\system32\drivers\ql2300.sys

16:13:44.0279 8076  ql2300 - ok

16:13:44.0304 8076  [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

16:13:44.0326 8076  ql40xx - ok

16:13:44.0393 8076  [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE           C:\Windows\system32\qwave.dll

16:13:44.0405 8076  QWAVE - ok

16:13:44.0450 8076  [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

16:13:44.0458 8076  QWAVEdrv - ok

16:13:44.0609 8076  [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

16:13:44.0617 8076  RasAcd - ok

16:13:44.0715 8076  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto         C:\Windows\System32\rasauto.dll

16:13:44.0726 8076  RasAuto - ok

16:13:44.0747 8076  [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

16:13:44.0756 8076  Rasl2tp - ok

16:13:44.0799 8076  [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan          C:\Windows\System32\rasmans.dll

16:13:44.0813 8076  RasMan - ok

16:13:44.0852 8076  [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

16:13:44.0861 8076  RasPppoe - ok

16:13:44.0888 8076  [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

16:13:44.0897 8076  RasSstp - ok

16:13:44.0946 8076  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

16:13:44.0958 8076  rdbss - ok

16:13:44.0980 8076  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

16:13:44.0988 8076  RDPCDD - ok

16:13:45.0032 8076  [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

16:13:45.0058 8076  rdpdr - ok

16:13:45.0063 8076  [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

16:13:45.0078 8076  RDPENCDD - ok

16:13:45.0170 8076  [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

16:13:45.0204 8076  RDPWD - ok

16:13:45.0259 8076  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess    C:\Windows\System32\mprdim.dll

16:13:45.0271 8076  RemoteAccess - ok

16:13:45.0354 8076  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry  C:\Windows\system32\regsvc.dll

16:13:45.0367 8076  RemoteRegistry - ok

16:13:45.0415 8076  [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

16:13:45.0428 8076  RFCOMM - ok

16:13:45.0506 8076  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

16:13:45.0515 8076  ROOTMODEM - ok

16:13:45.0538 8076  rpcapd - ok

16:13:45.0614 8076  [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator      C:\Windows\system32\locator.exe

16:13:45.0629 8076  RpcLocator - ok

16:13:45.0843 8076  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs           C:\Windows\system32\rpcss.dll

16:13:45.0849 8076  RpcSs - ok

16:13:45.0952 8076  [ FD692C6FFADE58F7C4C3C3C9A0EC35BD ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

16:13:45.0973 8076  RsFx0103 - ok

16:13:46.0045 8076  [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

16:13:46.0055 8076  rspndr - ok

16:13:46.0099 8076  [ C347A3CDE57077056E7E73D3498F7D7D ] RTL8169         C:\Windows\system32\DRIVERS\Rtlh86.sys

16:13:46.0110 8076  RTL8169 - ok

16:13:46.0148 8076  [ A3E186B4B935905B829219502557314E ] SamSs           C:\Windows\system32\lsass.exe

16:13:46.0150 8076  SamSs - ok

16:13:46.0195 8076  [ 3CE8F073A557E172B330109436984E30 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

16:13:46.0220 8076  sbp2port - ok

16:13:46.0304 8076  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

16:13:46.0316 8076  SCardSvr - ok

16:13:46.0552 8076  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule        C:\Windows\system32\schedsvc.dll

16:13:46.0564 8076  Schedule - ok

16:13:46.0603 8076  [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc     C:\Windows\System32\certprop.dll

16:13:46.0604 8076  SCPolicySvc - ok

16:13:46.0674 8076  [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

16:13:46.0683 8076  SDRSVC - ok

16:13:46.0704 8076  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

16:13:46.0711 8076  secdrv - ok

16:13:46.0779 8076  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon        C:\Windows\system32\seclogon.dll

16:13:46.0787 8076  seclogon - ok

16:13:46.0825 8076  [ A9BBAB5759771E523F55563D6CBE140F ] SENS            C:\Windows\System32\sens.dll

16:13:46.0834 8076  SENS - ok

16:13:46.0904 8076  [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum         C:\Windows\system32\drivers\serenum.sys

16:13:46.0944 8076  Serenum - ok

16:13:46.0976 8076  [ C70D69A918B178D3C3B06339B40C2E1B ] Serial          C:\Windows\system32\drivers\serial.sys

16:13:46.0992 8076  Serial - ok

16:13:47.0044 8076  [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

16:13:47.0057 8076  sermouse - ok

16:13:47.0362 8076  [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

16:13:47.0439 8076  ServiceLayer - ok

16:13:47.0510 8076  [ D2193326F729B163125610DBF3E17D57 ] SessionEnv      C:\Windows\system32\sessenv.dll

16:13:47.0522 8076  SessionEnv - ok

16:13:47.0568 8076  [ 51CF56AA8BCC241F134B420B8F850406 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

16:13:47.0612 8076  sffdisk - ok

16:13:47.0619 8076  [ 96DED8B20C734AC41641CE275250E55D ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

16:13:47.0629 8076  sffp_mmc - ok

16:13:47.0636 8076  [ 8B08CAB1267B2C377883FC9E56981F90 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

16:13:47.0647 8076  sffp_sd - ok

16:13:47.0653 8076  [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

16:13:47.0665 8076  sfloppy - ok

16:13:47.0699 8076  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

16:13:47.0713 8076  SharedAccess - ok

16:13:47.0763 8076  [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:13:47.0785 8076  ShellHWDetection - ok

16:13:47.0839 8076  [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

16:13:47.0915 8076  sisagp - ok

16:13:47.0920 8076  [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

16:13:47.0928 8076  SiSRaid2 - ok

16:13:47.0939 8076  [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

16:13:47.0948 8076  SiSRaid4 - ok

16:13:48.0395 8076  [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc           C:\Windows\system32\SLsvc.exe

16:13:48.0530 8076  slsvc - ok

16:13:48.0623 8076  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify      C:\Windows\system32\SLUINotify.dll

16:13:48.0634 8076  SLUINotify - ok

16:13:48.0684 8076  [ 7B75299A4D201D6A6533603D6914AB04 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

16:13:48.0700 8076  Smb - ok

16:13:48.0757 8076  [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

16:13:48.0774 8076  SNMPTRAP - ok

16:13:48.0897 8076  [ DC4DC886D3779C446F9B0E9D6B006E72 ] SPBBCDrv        C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:13:48.0911 8076  SPBBCDrv - ok

16:13:48.0959 8076  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr           C:\Windows\system32\drivers\spldr.sys

16:13:48.0985 8076  spldr - ok

16:13:49.0046 8076  [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler         C:\Windows\System32\spoolsv.exe

16:13:49.0103 8076  Spooler - ok

16:13:49.0243 8076  [ A687B5B326AFCFCF182C4931D1FF9771 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

16:13:49.0349 8076  SQLAgent$SQLEXPRESS - ok

16:13:49.0439 8076  [ B54B48F6D92423440C264E91225C5FF1 ] SQLBrowser      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

16:13:49.0544 8076  SQLBrowser - ok

16:13:49.0611 8076  [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:13:49.0638 8076  SQLWriter - ok

16:13:49.0676 8076  [ E0E54A571D4323567E95E11FE76A5FF3 ] SRTSP           C:\Windows\system32\Drivers\SRTSP.SYS

16:13:49.0730 8076  SRTSP - ok

16:13:49.0803 8076  [ 4E44F0E22DF824D318988CAA6F321C30 ] SRTSPL          C:\Windows\system32\Drivers\SRTSPL.SYS

16:13:49.0868 8076  SRTSPL - ok

16:13:49.0880 8076  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] SRTSPX          C:\Windows\system32\Drivers\SRTSPX.SYS

16:13:49.0892 8076  SRTSPX - ok

16:13:49.0955 8076  [ 41987F9FC0E61ADF54F581E15029AD91 ] srv             C:\Windows\system32\DRIVERS\srv.sys

16:13:49.0966 8076  srv - ok

16:13:50.0081 8076  [ FF33AFF99564B1AA534F58868CBE41EF ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

16:13:50.0091 8076  srv2 - ok

16:13:50.0121 8076  [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

16:13:50.0131 8076  srvnet - ok

16:13:50.0160 8076  [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

16:13:50.0176 8076  SSDPSRV - ok

16:13:50.0199 8076  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

16:13:50.0210 8076  SstpSvc - ok

16:13:50.0291 8076  Steam Client Service - ok

16:13:50.0570 8076  [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:13:50.0612 8076  Stereo Service - ok

16:13:50.0965 8076  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc          C:\Windows\System32\wiaservc.dll

16:13:50.0999 8076  stisvc - ok

16:13:51.0015 8076  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

16:13:51.0026 8076  swenum - ok

16:13:51.0307 8076  [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv           C:\Windows\System32\swprv.dll

16:13:51.0325 8076  swprv - ok

16:13:51.0574 8076  [ 438FAFE708C93B2236FC26B6F2BD5FD0 ] Symantec Core LC C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

16:13:51.0852 8076  Symantec Core LC - ok

16:13:51.0870 8076  [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

16:13:52.0308 8076  Symc8xx - ok

16:13:52.0360 8076  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] SYMDNS          C:\Windows\System32\Drivers\SYMDNS.SYS

16:13:52.0370 8076  SYMDNS - ok

16:13:52.0456 8076  [ 06B95820DF51502099A8A15C93E87986 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT.SYS

16:13:52.0469 8076  SymEvent - ok

16:13:52.0536 8076  [ A0EA9D273889E53CFAABF2444692CCBF ] SYMFW           C:\Windows\System32\Drivers\SYMFW.SYS

16:13:52.0549 8076  SYMFW - ok

16:13:53.0144 8076  [ 8EAB28DD6CD25355B951AE460FA86B48 ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys

16:13:53.0152 8076  SymIM - ok

16:13:53.0234 8076  [ C94EACA4B522012EE0691F1E79C42A7D ] SYMNDISV        C:\Windows\System32\Drivers\SYMNDISV.SYS

16:13:53.0243 8076  SYMNDISV - ok

16:13:53.0279 8076  [ 7C6505EA598E58099D3B7E1F70426864 ] SYMREDRV        C:\Windows\System32\Drivers\SYMREDRV.SYS

16:13:53.0323 8076  SYMREDRV - ok

16:13:53.0813 8076  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] SYMTDI          C:\Windows\System32\Drivers\SYMTDI.SYS

16:13:53.0827 8076  SYMTDI - ok

16:13:53.0853 8076  [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

16:13:53.0921 8076  Sym_hi - ok

16:13:54.0021 8076  [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

16:13:54.0084 8076  Sym_u3 - ok

16:13:54.0336 8076  [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain         C:\Windows\system32\sysmain.dll

16:13:54.0353 8076  SysMain - ok

16:13:54.0428 8076  [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:13:54.0440 8076  TabletInputService - ok

16:13:54.0493 8076  [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv         C:\Windows\System32\tapisrv.dll

16:13:54.0514 8076  TapiSrv - ok

16:13:54.0595 8076  [ CB05822CD9CC6C688168E113C603DBE7 ] TBS             C:\Windows\System32\tbssvc.dll

16:13:54.0607 8076  TBS - ok

16:13:55.0011 8076  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

16:13:55.0197 8076  Tcpip - ok

16:13:55.0461 8076  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

16:13:55.0468 8076  Tcpip6 - ok

16:13:55.0557 8076  [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

16:13:56.0097 8076  tcpipreg - ok

16:13:56.0131 8076  [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

16:13:56.0171 8076  TDPIPE - ok

16:13:56.0341 8076  [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

16:13:56.0428 8076  TDTCP - ok

16:13:56.0517 8076  [ 76B06EB8A01FC8624D699E7045303E54 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

16:13:56.0525 8076  tdx - ok

16:13:56.0707 8076  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

16:13:57.0124 8076  TermDD - ok

16:13:57.0254 8076  [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService     C:\Windows\System32\termsrv.dll

16:13:57.0268 8076  TermService - ok

16:13:57.0311 8076  [ C7230FBEE14437716701C15BE02C27B8 ] Themes          C:\Windows\system32\shsvcs.dll

16:13:57.0314 8076  Themes - ok

16:13:57.0382 8076  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER     C:\Windows\system32\mmcss.dll

16:13:57.0384 8076  THREADORDER - ok

16:13:57.0564 8076  [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:13:57.0580 8076  TOSHIBA Bluetooth Service - ok

16:13:57.0740 8076  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte        C:\Windows\system32\DRIVERS\tosporte.sys

16:13:57.0751 8076  tosporte - ok

16:13:57.0841 8076  [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd         C:\Windows\system32\DRIVERS\tosrfbd.sys

16:13:57.0871 8076  tosrfbd - ok

16:13:57.0910 8076  [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp        C:\Windows\system32\Drivers\tosrfbnp.sys

16:13:57.0941 8076  tosrfbnp - ok

16:13:57.0982 8076  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom        C:\Windows\system32\Drivers\tosrfcom.sys

16:13:57.0990 8076  Tosrfcom - ok

16:13:58.0064 8076  [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid        C:\Windows\system32\DRIVERS\Tosrfhid.sys

16:13:58.0173 8076  Tosrfhid - ok

16:13:58.0308 8076  [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds        C:\Windows\system32\DRIVERS\tosrfnds.sys

16:13:58.0364 8076  tosrfnds - ok

16:13:58.0412 8076  [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd        C:\Windows\system32\drivers\tosrfsnd.sys

16:13:58.0447 8076  TosRfSnd - ok

16:13:58.0532 8076  [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb        C:\Windows\system32\DRIVERS\tosrfusb.sys

16:13:58.0548 8076  Tosrfusb - ok

16:13:58.0601 8076  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks          C:\Windows\System32\trkwks.dll

16:13:58.0604 8076  TrkWks - ok

16:13:58.0746 8076  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:13:58.0771 8076  TrustedInstaller - ok

16:13:58.0838 8076  [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

16:13:58.0866 8076  tssecsrv - ok

16:13:58.0920 8076  [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

16:13:58.0930 8076  tunmp - ok

16:13:58.0999 8076  [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

16:13:59.0007 8076  tunnel - ok

16:13:59.0051 8076  [ C3ADE15414120033A36C0F293D4A4121 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

16:13:59.0088 8076  uagp35 - ok

16:13:59.0184 8076  [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

16:13:59.0256 8076  udfs - ok

16:13:59.0411 8076  [ AC426CD0AA0DB592A81C9A78A5F4B309 ] UDXTTM6010      C:\Windows\system32\DRIVERS\UDXTTM6010.sys

16:13:59.0436 8076  UDXTTM6010 - ok

16:13:59.0545 8076  [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

16:13:59.0564 8076  UI0Detect - ok

16:13:59.0607 8076  [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

16:13:59.0671 8076  uliagpkx - ok

16:13:59.0771 8076  [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci         C:\Windows\system32\drivers\uliahci.sys

16:13:59.0879 8076  uliahci - ok

16:13:59.0940 8076  [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata          C:\Windows\system32\drivers\ulsata.sys

16:13:59.0971 8076  UlSata - ok

16:14:00.0001 8076  [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

16:14:00.0032 8076  ulsata2 - ok

16:14:00.0070 8076  [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

16:14:00.0078 8076  umbus - ok

16:14:00.0143 8076  [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost        C:\Windows\System32\upnphost.dll

16:14:00.0156 8076  upnphost - ok

16:14:00.0232 8076  [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

16:14:00.0268 8076  usbccgp - ok

16:14:00.0338 8076  [ E9476E6C486E76BC4898074768FB7131 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

16:14:00.0347 8076  usbcir - ok

16:14:00.0451 8076  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

16:14:00.0461 8076  usbehci - ok

16:14:00.0534 8076  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

16:14:00.0542 8076  usbhub - ok

16:14:00.0570 8076  [ 38DBC7DD6CC5A72011F187425384388B ] usbohci         C:\Windows\system32\drivers\usbohci.sys

16:14:00.0593 8076  usbohci - ok

16:14:00.0693 8076  [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

16:14:00.0736 8076  usbprint - ok

16:14:00.0812 8076  [ A508C9BD8724980512136B039BBA65E9 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

16:14:00.0858 8076  usbscan - ok

16:14:00.0936 8076  [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:14:00.0945 8076  USBSTOR - ok

16:14:00.0987 8076  [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

16:14:00.0994 8076  usbuhci - ok

16:14:01.0049 8076  [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms           C:\Windows\System32\uxsms.dll

16:14:01.0060 8076  UxSms - ok

16:14:01.0186 8076  [ CD88D1B7776DC17A119049742EC07EB4 ] vds             C:\Windows\System32\vds.exe

16:14:01.0222 8076  vds - ok

16:14:01.0292 8076  [ 7D92BE0028ECDEDEC74617009084B5EF ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

16:14:01.0345 8076  vga - ok

16:14:01.0452 8076  [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave         C:\Windows\System32\drivers\vga.sys

16:14:01.0462 8076  VgaSave - ok

16:14:01.0512 8076  [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp          C:\Windows\system32\drivers\viaagp.sys

16:14:01.0555 8076  viaagp - ok

16:14:01.0588 8076  [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

16:14:01.0648 8076  ViaC7 - ok

16:14:01.0668 8076  [ F2EB2E6E21B008695D3D28E69937DA9C ] viaide          C:\Windows\system32\drivers\viaide.sys

16:14:01.0680 8076  viaide - ok

16:14:01.0766 8076  [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

16:14:01.0798 8076  volmgr - ok

16:14:01.0898 8076  [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

16:14:01.0976 8076  volmgrx - ok

16:14:02.0028 8076  [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

16:14:02.0051 8076  volsnap - ok

16:14:02.0105 8076  [ D984439746D42B30FC65A4C3546C6829 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

16:14:02.0172 8076  vsmraid - ok

16:14:02.0340 8076  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS             C:\Windows\system32\vssvc.exe

16:14:02.0408 8076  VSS - ok

16:14:02.0615 8076  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time         C:\Windows\system32\w32time.dll

16:14:02.0631 8076  W32Time - ok

16:14:02.0788 8076  [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

16:14:02.0819 8076  WacomPen - ok

16:14:02.0895 8076  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

16:14:02.0906 8076  Wanarp - ok

16:14:02.0921 8076  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

16:14:02.0922 8076  Wanarpv6 - ok

16:14:03.0098 8076  [ A3CD60FD826381B49F03832590E069AF ] wcncsvc         C:\Windows\System32\wcncsvc.dll

16:14:03.0115 8076  wcncsvc - ok

16:14:03.0184 8076  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:14:03.0196 8076  WcsPlugInService - ok

16:14:03.0265 8076  [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd              C:\Windows\system32\drivers\wd.sys

16:14:03.0277 8076  Wd - ok

16:14:03.0309 8076  [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

16:14:03.0348 8076  Wdf01000 - ok

16:14:03.0380 8076  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost  C:\Windows\system32\wdi.dll

16:14:03.0392 8076  WdiServiceHost - ok

16:14:03.0411 8076  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost   C:\Windows\system32\wdi.dll

16:14:03.0415 8076  WdiSystemHost - ok

16:14:03.0458 8076  [ 04C37D8107320312FBAE09926103D5E2 ] WebClient       C:\Windows\System32\webclnt.dll

16:14:03.0473 8076  WebClient - ok

16:14:03.0523 8076  [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc          C:\Windows\system32\wecsvc.dll

16:14:03.0537 8076  Wecsvc - ok

16:14:03.0573 8076  [ 670FF720071ED741206D69BD995EA453 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

16:14:03.0585 8076  wercplsupport - ok

16:14:03.0680 8076  [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc          C:\Windows\System32\WerSvc.dll

16:14:03.0694 8076  WerSvc - ok

16:14:03.0867 8076  [ 4575AA12561C5648483403541D0D7F2B ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

16:14:04.0056 8076  WinDefend - ok

16:14:04.0097 8076  WinHttpAutoProxySvc - ok

16:14:04.0320 8076  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

16:14:04.0332 8076  Winmgmt - ok

16:14:04.0487 8076  [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM           C:\Windows\system32\WsmSvc.dll

16:14:04.0504 8076  WinRM - ok

16:14:04.0575 8076  [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc         C:\Windows\System32\wlansvc.dll

16:14:04.0591 8076  Wlansvc - ok

16:14:04.0680 8076  [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

16:14:04.0722 8076  WmiAcpi - ok

16:14:04.0797 8076  [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

16:14:04.0829 8076  wmiApSrv - ok

16:14:05.0113 8076  [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

16:14:05.0118 8076  WMPNetworkSvc - ok

16:14:05.0196 8076  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

16:14:05.0205 8076  WPCSvc - ok

16:14:05.0260 8076  [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

16:14:05.0270 8076  WPDBusEnum - ok

16:14:05.0496 8076  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:14:05.0528 8076  WPFFontCache_v0400 - ok

16:14:05.0585 8076  [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

16:14:05.0600 8076  ws2ifsl - ok

16:14:05.0666 8076  [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc          C:\Windows\System32\wscsvc.dll

16:14:05.0669 8076  wscsvc - ok

16:14:05.0673 8076  WSearch - ok

16:14:06.0042 8076  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll

16:14:06.0067 8076  wuauserv - ok

16:14:06.0146 8076  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

16:14:06.0155 8076  WudfPf - ok

16:14:06.0395 8076  [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

16:14:06.0407 8076  WUDFRd - ok

16:14:07.0046 8076  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

16:14:07.0061 8076  wudfsvc - ok

16:14:07.0071 8076  ================ Scan global ===============================

16:14:07.0186 8076  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll

16:14:07.0393 8076  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:14:07.0422 8076  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:14:07.0532 8076  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe

16:14:07.0537 8076  [Global] - ok

16:14:07.0537 8076  ================ Scan MBR ==================================

16:14:07.0591 8076  [ 81CD5EC01DB0CE57EDD853F82462EF27 ] \Device\Harddisk0\DR0

16:14:08.0962 8076  \Device\Harddisk0\DR0 - ok

16:14:08.0979 8076  [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk1\DR1

16:14:09.0165 8076  \Device\Harddisk1\DR1 - ok

16:14:09.0165 8076  ================ Scan VBR ==================================

16:14:09.0241 8076  [ E95495BFFA6767669DB8405142DB4649 ] \Device\Harddisk0\DR0\Partition1

16:14:09.0313 8076  \Device\Harddisk0\DR0\Partition1 - ok

16:14:09.0344 8076  [ 36160AA267F7FC371B1139ED4DE6DD05 ] \Device\Harddisk0\DR0\Partition2

16:14:09.0346 8076  \Device\Harddisk0\DR0\Partition2 - ok

16:14:09.0348 8076  [ 160F47F4D3004A4D86D9DFD80B20F147 ] \Device\Harddisk1\DR1\Partition1

16:14:09.0350 8076  \Device\Harddisk1\DR1\Partition1 - ok

16:14:09.0350 8076  ================ Scan active images ========================

16:14:09.0352 8076  [ 36975327EF03949CC378AB01E316B574 ] C:\Windows\System32\drivers\crashdmp.sys

16:14:09.0352 8076  C:\Windows\System32\drivers\crashdmp.sys - ok

16:14:09.0354 8076  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] C:\Windows\System32\drivers\iaStor.sys

16:14:09.0354 8076  C:\Windows\System32\drivers\iaStor.sys - ok

16:14:09.0358 8076  [ 300DB877AC094FEAB0BE7688C3454A9C ] C:\Windows\System32\drivers\tunnel.sys

16:14:09.0358 8076  C:\Windows\System32\drivers\tunnel.sys - ok

16:14:09.0361 8076  [ CAECC0120AC49E3D2F758B9169872D38 ] C:\Windows\System32\drivers\TUNMP.SYS

16:14:09.0361 8076  C:\Windows\System32\drivers\TUNMP.SYS - ok

16:14:09.0364 8076  [ 224191001E78C89DFA78924C3EA595FF ] C:\Windows\System32\drivers\intelppm.sys

16:14:09.0364 8076  C:\Windows\System32\drivers\intelppm.sys - ok

16:14:09.0367 8076  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] C:\Windows\System32\drivers\nvlddmkm.sys

16:14:09.0367 8076  C:\Windows\System32\drivers\nvlddmkm.sys - ok

16:14:09.0371 8076  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] C:\Windows\System32\drivers\dxgkrnl.sys

16:14:09.0371 8076  C:\Windows\System32\drivers\dxgkrnl.sys - ok

16:14:09.0375 8076  [ 4A5C31E2C1646034E6A60EBA4C747FF6 ] C:\Windows\System32\drivers\watchdog.sys

16:14:09.0375 8076  C:\Windows\System32\drivers\watchdog.sys - ok

16:14:09.0380 8076  [ A1C100A87D981AD0774FBC0B4B82E913 ] C:\Windows\System32\drivers\usbport.sys

16:14:09.0380 8076  C:\Windows\System32\drivers\usbport.sys - ok

16:14:09.0383 8076  [ 814D653EFC4D48BE3B04A307ECEFF56F ] C:\Windows\System32\drivers\usbuhci.sys

16:14:09.0383 8076  C:\Windows\System32\drivers\usbuhci.sys - ok

16:14:09.0388 8076  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] C:\Windows\System32\drivers\usbehci.sys

16:14:09.0388 8076  C:\Windows\System32\drivers\usbehci.sys - ok

16:14:09.0392 8076  [ 062452B7FFD68C8C042A6261FE8DFF4A ] C:\Windows\System32\drivers\hdaudbus.sys

16:14:09.0392 8076  C:\Windows\System32\drivers\hdaudbus.sys - ok

16:14:09.0395 8076  [ C347A3CDE57077056E7E73D3498F7D7D ] C:\Windows\System32\drivers\Rtlh86.sys

16:14:09.0395 8076  C:\Windows\System32\drivers\Rtlh86.sys - ok

16:14:09.0398 8076  [ 0349BE02F329F4F48F1D48097FD65974 ] C:\Windows\System32\drivers\1394bus.sys

16:14:09.0398 8076  C:\Windows\System32\drivers\1394bus.sys - ok

16:14:09.0402 8076  [ 6F310E890D46E246E0E261A63D9B36B4 ] C:\Windows\System32\drivers\ohci1394.sys

16:14:09.0402 8076  C:\Windows\System32\drivers\ohci1394.sys - ok

16:14:09.0405 8076  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] C:\Windows\System32\drivers\i8042prt.sys

16:14:09.0405 8076  C:\Windows\System32\drivers\i8042prt.sys - ok

16:14:09.0409 8076  [ 37605E0A8CF00CBBA538E753E4344C6E ] C:\Windows\System32\drivers\kbdclass.sys

16:14:09.0409 8076  C:\Windows\System32\drivers\kbdclass.sys - ok

16:14:09.0412 8076  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] C:\Windows\System32\drivers\L8042Kbd.sys

16:14:09.0412 8076  C:\Windows\System32\drivers\L8042Kbd.sys - ok

16:14:09.0416 8076  [ 6B4BFFB9BECD728097024276430DB314 ] C:\Windows\System32\drivers\cdrom.sys

16:14:09.0416 8076  C:\Windows\System32\drivers\cdrom.sys - ok

16:14:09.0421 8076  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] C:\Windows\System32\drivers\GEARAspiWDM.sys

16:14:09.0421 8076  C:\Windows\System32\drivers\GEARAspiWDM.sys - ok

16:14:09.0425 8076  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] C:\Windows\System32\drivers\tosrfcom.sys

16:14:09.0425 8076  C:\Windows\System32\drivers\tosrfcom.sys - ok

16:14:09.0430 8076  [ 232FA340531D940AAC623B121A595034 ] C:\Windows\System32\drivers\msiscsi.sys

16:14:09.0430 8076  C:\Windows\System32\drivers\msiscsi.sys - ok

16:14:09.0435 8076  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] C:\Windows\System32\drivers\rootmdm.sys

16:14:09.0435 8076  C:\Windows\System32\drivers\rootmdm.sys - ok

16:14:09.0439 8076  [ 47E55AFE1ED1D5AFF09690DB226F4A7A ] C:\Windows\System32\drivers\Storport.sys

16:14:09.0439 8076  C:\Windows\System32\drivers\Storport.sys - ok

16:14:09.0443 8076  [ 77937EFF009AC696B90E09F671F9D0A4 ] C:\Windows\System32\drivers\tdi.sys

16:14:09.0443 8076  C:\Windows\System32\drivers\tdi.sys - ok

16:14:09.0446 8076  [ E13B5EA0F51BA5B1512EC671393D09BA ] C:\Windows\System32\drivers\modem.sys

16:14:09.0446 8076  C:\Windows\System32\drivers\modem.sys - ok

16:14:09.0450 8076  [ A214ADBAF4CB47DD2728859EF31F26B0 ] C:\Windows\System32\drivers\rasl2tp.sys

16:14:09.0450 8076  C:\Windows\System32\drivers\rasl2tp.sys - ok

16:14:09.0454 8076  [ 0E186E90404980569FB449BA7519AE61 ] C:\Windows\System32\drivers\ndistapi.sys

16:14:09.0454 8076  C:\Windows\System32\drivers\ndistapi.sys - ok

16:14:09.0459 8076  [ 818F648618AE34F729FDB47EC68345C3 ] C:\Windows\System32\drivers\ndiswan.sys

16:14:09.0459 8076  C:\Windows\System32\drivers\ndiswan.sys - ok

16:14:09.0463 8076  [ 509A98DD18AF4375E1FC40BC175F1DEF ] C:\Windows\System32\drivers\raspppoe.sys

16:14:09.0463 8076  C:\Windows\System32\drivers\raspppoe.sys - ok

16:14:09.0466 8076  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] C:\Windows\System32\drivers\raspptp.sys

16:14:09.0466 8076  C:\Windows\System32\drivers\raspptp.sys - ok

16:14:09.0470 8076  [ 2005F4A1E05FA09389AC85840F0A9E4D ] C:\Windows\System32\drivers\rassstp.sys

16:14:09.0470 8076  C:\Windows\System32\drivers\rassstp.sys - ok

16:14:09.0474 8076  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] C:\Windows\System32\drivers\termdd.sys

16:14:09.0474 8076  C:\Windows\System32\drivers\termdd.sys - ok

16:14:09.0477 8076  [ 5BF6A1326A335C5298477754A506D263 ] C:\Windows\System32\drivers\mouclass.sys

16:14:09.0477 8076  C:\Windows\System32\drivers\mouclass.sys - ok

16:14:09.0481 8076  [ EF73C1E29FBE7B0FD0274BF4394E346A ] C:\Windows\System32\drivers\ks.sys

16:14:09.0481 8076  C:\Windows\System32\drivers\ks.sys - ok

16:14:09.0485 8076  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] C:\Windows\System32\drivers\swenum.sys

16:14:09.0485 8076  C:\Windows\System32\drivers\swenum.sys - ok

16:14:09.0488 8076  [ E384487CB84BE41D09711C30CA79646C ] C:\Windows\System32\drivers\mssmbios.sys

16:14:09.0488 8076  C:\Windows\System32\drivers\mssmbios.sys - ok

16:14:09.0492 8076  [ 32CFF9F809AE9AED85464492BF3E32D2 ] C:\Windows\System32\drivers\umbus.sys

16:14:09.0492 8076  C:\Windows\System32\drivers\umbus.sys - ok

16:14:09.0496 8076  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] C:\Windows\System32\drivers\usbhub.sys

16:14:09.0496 8076  C:\Windows\System32\drivers\usbhub.sys - ok

16:14:09.0499 8076  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] C:\Windows\System32\drivers\tosporte.sys

16:14:09.0499 8076  C:\Windows\System32\drivers\tosporte.sys - ok

16:14:09.0503 8076  [ 71DAB552B41936358F3B541AE5997FB3 ] C:\Windows\System32\drivers\ndproxy.sys

16:14:09.0503 8076  C:\Windows\System32\drivers\ndproxy.sys - ok

16:14:09.0507 8076  [ 7BE5A3C671A2CB56E94403BFC2020A0D ] C:\Windows\System32\drivers\drmk.sys

16:14:09.0507 8076  C:\Windows\System32\drivers\drmk.sys - ok

16:14:09.0510 8076  [ 218286724EC530FF252648369E05B090 ] C:\Windows\System32\drivers\portcls.sys

16:14:09.0510 8076  C:\Windows\System32\drivers\portcls.sys - ok

16:14:09.0513 8076  [ EDC37B918E583A5A813C53D4F5588255 ] C:\Windows\System32\drivers\RTKVHDA.sys

16:14:09.0513 8076  C:\Windows\System32\drivers\RTKVHDA.sys - ok

16:14:09.0516 8076  [ B972A66758577E0BFD1DE0F91AAA27B5 ] C:\Windows\System32\drivers\fs_rec.sys

16:14:09.0516 8076  C:\Windows\System32\drivers\fs_rec.sys - ok

16:14:09.0519 8076  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] C:\Windows\System32\drivers\beep.sys

16:14:09.0520 8076  C:\Windows\System32\drivers\beep.sys - ok

16:14:09.0523 8076  [ C5DBBCDA07D780BDA9B685DF333BB41E ] C:\Windows\System32\drivers\null.sys

16:14:09.0523 8076  C:\Windows\System32\drivers\null.sys - ok

16:14:09.0526 8076  [ 175444D3A01CA45D0E1C5DC5F48DF7CD ] C:\Windows\System32\drivers\hidparse.sys

16:14:09.0526 8076  C:\Windows\System32\drivers\hidparse.sys - ok

16:14:09.0529 8076  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] C:\Windows\System32\drivers\kbdhid.sys

16:14:09.0529 8076  C:\Windows\System32\drivers\kbdhid.sys - ok

16:14:09.0532 8076  [ 2E93AC0A1D8C79D019DB6C51F036636C ] C:\Windows\System32\drivers\vga.sys

16:14:09.0532 8076  C:\Windows\System32\drivers\vga.sys - ok

16:14:09.0536 8076  [ C048D2C33D27441A0CDCAAE2651EB03D ] C:\Windows\System32\drivers\videoprt.sys

16:14:09.0536 8076  C:\Windows\System32\drivers\videoprt.sys - ok

16:14:09.0539 8076  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] C:\Windows\System32\drivers\RDPCDD.sys

16:14:09.0539 8076  C:\Windows\System32\drivers\RDPCDD.sys - ok

16:14:09.0542 8076  [ A9927F4A46B816C92F461ACB90CF8515 ] C:\Windows\System32\drivers\msfs.sys

16:14:09.0542 8076  C:\Windows\System32\drivers\msfs.sys - ok

16:14:09.0545 8076  [ 9D91FE5286F748862ECFFA05F8A0710C ] C:\Windows\System32\drivers\RDPENCDD.sys

16:14:09.0545 8076  C:\Windows\System32\drivers\RDPENCDD.sys - ok

16:14:09.0549 8076  [ D36F239D7CCE1931598E8FB90A0DBC26 ] C:\Windows\System32\drivers\npfs.sys

16:14:09.0549 8076  C:\Windows\System32\drivers\npfs.sys - ok

16:14:09.0552 8076  [ 147D7F9C556D259924351FEB0DE606C3 ] C:\Windows\System32\drivers\rasacd.sys

16:14:09.0552 8076  C:\Windows\System32\drivers\rasacd.sys - ok

16:14:09.0555 8076  [ 76B06EB8A01FC8624D699E7045303E54 ] C:\Windows\System32\drivers\tdx.sys

16:14:09.0555 8076  C:\Windows\System32\drivers\tdx.sys - ok

16:14:09.0559 8076  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] C:\Windows\System32\drivers\symtdi.sys

16:14:09.0559 8076  C:\Windows\System32\drivers\symtdi.sys - ok

16:14:09.0562 8076  [ 06B95820DF51502099A8A15C93E87986 ] C:\Windows\System32\drivers\SYMEVENT.SYS

16:14:09.0562 8076  C:\Windows\System32\drivers\SYMEVENT.SYS - ok

16:14:09.0565 8076  [ 7B75299A4D201D6A6533603D6914AB04 ] C:\Windows\System32\drivers\smb.sys

16:14:09.0565 8076  C:\Windows\System32\drivers\smb.sys - ok

16:14:09.0568 8076  [ 3911B972B55FEA0478476B2E777B29FA ] C:\Windows\System32\drivers\afd.sys

16:14:09.0568 8076  C:\Windows\System32\drivers\afd.sys - ok

16:14:09.0571 8076  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] C:\Windows\System32\drivers\netbt.sys

16:14:09.0571 8076  C:\Windows\System32\drivers\netbt.sys - ok

16:14:09.0575 8076  [ 99514FAA8DF93D34B5589187DB3AA0BA ] C:\Windows\System32\drivers\pacer.sys

16:14:09.0575 8076  C:\Windows\System32\drivers\pacer.sys - ok

16:14:09.0578 8076  [ 8EAB28DD6CD25355B951AE460FA86B48 ] C:\Windows\System32\drivers\SymIMV.sys

16:14:09.0578 8076  C:\Windows\System32\drivers\SymIMV.sys - ok

16:14:09.0583 8076  [ BCD093A5A6777CF626434568DC7DBA78 ] C:\Windows\System32\drivers\netbios.sys

16:14:09.0583 8076  C:\Windows\System32\drivers\netbios.sys - ok

16:14:09.0588 8076  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] C:\Windows\System32\drivers\srtspx.sys

16:14:09.0588 8076  C:\Windows\System32\drivers\srtspx.sys - ok

16:14:09.0593 8076  [ 55201897378CCA7AF8B5EFD874374A26 ] C:\Windows\System32\drivers\wanarp.sys

16:14:09.0593 8076  C:\Windows\System32\drivers\wanarp.sys - ok

16:14:09.0598 8076  [ DC4DC886D3779C446F9B0E9D6B006E72 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:14:09.0598 8076  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys - ok

16:14:09.0602 8076  [ 77030525CD86A93F1AF34FA9B96D33CE ] C:\Windows\System32\drivers\LUsbFilt.sys

16:14:09.0603 8076  C:\Windows\System32\drivers\LUsbFilt.sys - ok

16:14:09.0605 8076  [ 5961CADB7CAD938368D2028725EF771D ] C:\Windows\System32\drivers\hidclass.sys

16:14:09.0605 8076  C:\Windows\System32\drivers\hidclass.sys - ok

16:14:09.0610 8076  [ CCA4B519B17E23A00B826C55716809CC ] C:\Windows\System32\drivers\hidusb.sys

16:14:09.0610 8076  C:\Windows\System32\drivers\hidusb.sys - ok

16:14:09.0614 8076  [ 790FDAC6D0C762DF9047C3C625A6FF6C ] C:\Windows\System32\drivers\usbd.sys

16:14:09.0614 8076  C:\Windows\System32\drivers\usbd.sys - ok

16:14:09.0619 8076  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] C:\Windows\System32\drivers\LHidFilt.Sys

16:14:09.0619 8076  C:\Windows\System32\drivers\LHidFilt.Sys - ok

16:14:09.0622 8076  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] C:\Windows\System32\drivers\rdbss.sys

16:14:09.0622 8076  C:\Windows\System32\drivers\rdbss.sys - ok

16:14:09.0626 8076  [ 93B8D4869E12CFBE663915502900876F ] C:\Windows\System32\drivers\mouhid.sys

16:14:09.0626 8076  C:\Windows\System32\drivers\mouhid.sys - ok

16:14:09.0629 8076  [ 609773E344A97410CE4EBF74A8914FCF ] C:\Windows\System32\drivers\nsiproxy.sys

16:14:09.0629 8076  C:\Windows\System32\drivers\nsiproxy.sys - ok

16:14:09.0633 8076  [ F85DC24DAFA76237722FE38B3196C61A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:14:09.0633 8076  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys - ok

16:14:09.0637 8076  [ AB33792A87285344F43B5CE23421BAB0 ] C:\Windows\System32\drivers\LMouFilt.Sys

16:14:09.0637 8076  C:\Windows\System32\drivers\LMouFilt.Sys - ok

16:14:09.0641 8076  [ 85B8B4032A895A746D46A288A9B30DED ] C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:14:09.0641 8076  C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys - ok

16:14:09.0645 8076  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:14:09.0645 8076  C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys - ok

16:14:09.0648 8076  [ 622C41A07CA7E6DD91770F50D532CB6C ] C:\Windows\System32\drivers\dfsc.sys

16:14:09.0649 8076  C:\Windows\System32\drivers\dfsc.sys - ok

16:14:09.0652 8076  [ DDA770BBD7C2ED024D6F50E279D90E5B ] C:\Windows\System32\ntdll.dll

16:14:09.0652 8076  C:\Windows\System32\ntdll.dll - ok

16:14:09.0655 8076  [ 98AF15A94CD6AC37248E72E5FE789B35 ] C:\Windows\System32\smss.exe

16:14:09.0656 8076  C:\Windows\System32\smss.exe - ok

16:14:09.0659 8076  [ 10761177A6EBE45843F443E99509F5E7 ] C:\Windows\System32\autochk.exe

16:14:09.0659 8076  C:\Windows\System32\autochk.exe - ok

16:14:09.0662 8076  [ BE3DA31C191BC222D9AD503C5224F2AD ] C:\Windows\System32\drivers\USBSTOR.SYS

16:14:09.0662 8076  C:\Windows\System32\drivers\USBSTOR.SYS - ok

16:14:09.0665 8076  [ 7ADD03E75BEB9E6DD102C3081D29840A ] C:\Windows\System32\drivers\cdfs.sys

16:14:09.0665 8076  C:\Windows\System32\drivers\cdfs.sys - ok

16:14:09.0669 8076  [ EB8A00E8E9931A7EC04F920B09D880D8 ] C:\Windows\System32\iertutil.dll

16:14:09.0669 8076  C:\Windows\System32\iertutil.dll - ok

16:14:09.0673 8076  [ 50CAA7072C171B9887215C83D52069E4 ] C:\Windows\System32\advapi32.dll

16:14:09.0673 8076  C:\Windows\System32\advapi32.dll - ok

16:14:09.0676 8076  [ B218342214D9BBA0F54EA12BA2E9278C ] C:\Windows\System32\oleaut32.dll

16:14:09.0676 8076  C:\Windows\System32\oleaut32.dll - ok

16:14:09.0679 8076  [ B304D47D5744BA20FCB99FB8B2C07B0B ] C:\Windows\System32\ws2_32.dll

16:14:09.0679 8076  C:\Windows\System32\ws2_32.dll - ok

16:14:09.0683 8076  [ C394079EB162E812D682C73FA96AF6E4 ] C:\Windows\System32\clbcatq.dll

16:14:09.0683 8076  C:\Windows\System32\clbcatq.dll - ok

16:14:09.0688 8076  [ 551F51B66E5EA87A38D8197EB3BDB57A ] C:\Windows\System32\setupapi.dll

16:14:09.0688 8076  C:\Windows\System32\setupapi.dll - ok

16:14:09.0691 8076  [ EB49FAA5EBBC06356FB12476438781B9 ] C:\Windows\System32\imagehlp.dll

16:14:09.0691 8076  C:\Windows\System32\imagehlp.dll - ok

16:14:09.0694 8076  [ E3C3BD69701CE6B7B17101E4F7740534 ] C:\Windows\System32\msctf.dll

16:14:09.0694 8076  C:\Windows\System32\msctf.dll - ok

16:14:09.0698 8076  [ 7856E3B4594714EF89BB97375E8644EE ] C:\Windows\System32\gdi32.dll

16:14:09.0698 8076  C:\Windows\System32\gdi32.dll - ok

16:14:09.0701 8076  [ 9586E7CB2255A8B097A7E4538202585E ] C:\Windows\System32\ole32.dll

16:14:09.0701 8076  C:\Windows\System32\ole32.dll - ok

16:14:09.0704 8076  [ 9FAC0F6D5F3D922DB294E30CD3F62369 ] C:\Windows\System32\urlmon.dll

16:14:09.0704 8076  C:\Windows\System32\urlmon.dll - ok

16:14:09.0708 8076  [ 17AF64D727545F2804F6E6D998327E3F ] C:\Windows\System32\msvcrt.dll

16:14:09.0708 8076  C:\Windows\System32\msvcrt.dll - ok

16:14:09.0711 8076  [ 9176285122B7B849FEC2AA1B72A8F7A8 ] C:\Windows\System32\shlwapi.dll

16:14:09.0711 8076  C:\Windows\System32\shlwapi.dll - ok

16:14:09.0714 8076  [ C8BDCECEE082B54F0BAC838BF0A34597 ] C:\Windows\System32\imm32.dll

16:14:09.0714 8076  C:\Windows\System32\imm32.dll - ok

16:14:09.0717 8076  [ 574B473FACAA0E91702B86578440B525 ] C:\Windows\System32\kernel32.dll

16:14:09.0717 8076  C:\Windows\System32\kernel32.dll - ok

16:14:09.0721 8076  [ 4AA2A0E26CEF1A803741253DCF9A1503 ] C:\Windows\System32\comdlg32.dll

16:14:09.0721 8076  C:\Windows\System32\comdlg32.dll - ok

16:14:09.0724 8076  [ 75510147B94598407666F4802797C75A ] C:\Windows\System32\user32.dll

16:14:09.0724 8076  C:\Windows\System32\user32.dll - ok

16:14:09.0727 8076  [ E2281CFF793D7A09CE2B35F9F8732EE3 ] C:\Windows\System32\rpcrt4.dll

16:14:09.0727 8076  C:\Windows\System32\rpcrt4.dll - ok

16:14:09.0730 8076  [ 5553611E2F9EA6F613079177F1233068 ] C:\Windows\System32\wininet.dll

16:14:09.0730 8076  C:\Windows\System32\wininet.dll - ok

16:14:09.0733 8076  [ AAF101900A23D75AE1AE00840FA6F3B8 ] C:\Windows\System32\shell32.dll

16:14:09.0733 8076  C:\Windows\System32\shell32.dll - ok

16:14:09.0738 8076  [ B8A609FB5EFB4E44FC1355B1C01C64BC ] C:\Windows\System32\Wldap32.dll

16:14:09.0738 8076  C:\Windows\System32\Wldap32.dll - ok

16:14:09.0742 8076  [ EB0E02749CE5C488741C9A0ABEAB5DEC ] C:\Windows\System32\lpk.dll

16:14:09.0742 8076  C:\Windows\System32\lpk.dll - ok

16:14:09.0746 8076  [ 6F29236AB5926100972924BD29D9D225 ] C:\Windows\System32\normaliz.dll

16:14:09.0746 8076  C:\Windows\System32\normaliz.dll - ok

16:14:09.0749 8076  [ A64AEBC6C78B4CFD7F41A7277879DF8F ] C:\Windows\System32\nsi.dll

16:14:09.0749 8076  C:\Windows\System32\nsi.dll - ok

16:14:09.0752 8076  [ 80FFF14F1757B9AF8BE9D314FC1AE88B ] C:\Windows\System32\usp10.dll

16:14:09.0752 8076  C:\Windows\System32\usp10.dll - ok

16:14:09.0755 8076  [ DC8891A9203810FC994E7FCCF76E94C8 ] C:\Windows\System32\comctl32.dll

16:14:09.0755 8076  C:\Windows\System32\comctl32.dll - ok

16:14:09.0759 8076  [ 93A1732F7F997E36A5C3893539E2FF02 ] C:\Windows\System32\psapi.dll

16:14:09.0759 8076  C:\Windows\System32\psapi.dll - ok

16:14:09.0762 8076  [ EAAAFEF04FBB45665C9576E525D45A12 ] C:\Windows\System32\drivers\dxapi.sys

16:14:09.0762 8076  C:\Windows\System32\drivers\dxapi.sys - ok

16:14:09.0767 8076  [ 92D85E8A4129FE44A3266266AC8D151D ] C:\Windows\System32\win32k.sys

16:14:09.0767 8076  C:\Windows\System32\win32k.sys - ok

16:14:09.0771 8076  [ 187076DD5D8D4D5D23079D0741195EAD ] C:\Windows\System32\csrsrv.dll

16:14:09.0771 8076  C:\Windows\System32\csrsrv.dll - ok

16:14:09.0774 8076  [ ABCA209EBA02CB59233614DB83B4F50D ] C:\Windows\System32\csrss.exe

16:14:09.0774 8076  C:\Windows\System32\csrss.exe - ok

16:14:09.0777 8076  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\System32\basesrv.dll

16:14:09.0777 8076  C:\Windows\System32\basesrv.dll - ok

16:14:09.0780 8076  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\System32\winsrv.dll

16:14:09.0780 8076  C:\Windows\System32\winsrv.dll - ok

16:14:09.0785 8076  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] C:\Windows\System32\drivers\monitor.sys

16:14:09.0785 8076  C:\Windows\System32\drivers\monitor.sys - ok

16:14:09.0789 8076  [ CC21507D246861671A0BF97E75CE1B00 ] C:\Windows\System32\tsddd.dll

16:14:09.0789 8076  C:\Windows\System32\tsddd.dll - ok

16:14:09.0792 8076  [ D602FEDBD9155FC2DED6863FB60C950F ] C:\Windows\System32\secur32.dll

16:14:09.0792 8076  C:\Windows\System32\secur32.dll - ok

16:14:09.0795 8076  [ 665417528489096BBCB8AEA46D3DA924 ] C:\Windows\System32\userenv.dll

16:14:09.0795 8076  C:\Windows\System32\userenv.dll - ok

16:14:09.0798 8076  [ 101BA3EA053480BB5D957EF37C06B5ED ] C:\Windows\System32\wininit.exe

16:14:09.0798 8076  C:\Windows\System32\wininit.exe - ok

16:14:09.0802 8076  [ 12C8D6C564702B0776512932290A3F6B ] C:\Windows\System32\KBDUS.DLL

16:14:09.0802 8076  C:\Windows\System32\KBDUS.DLL - ok

16:14:09.0805 8076  [ 7F2622E89703DD3C4DD75125E80D8636 ] C:\Windows\System32\KBDCR.DLL

16:14:09.0805 8076  C:\Windows\System32\KBDCR.DLL - ok

16:14:09.0808 8076  [ EA818A6DE0BD0A290D001FFABAFFF6EF ] C:\Windows\System32\KBDGR.DLL

16:14:09.0808 8076  C:\Windows\System32\KBDGR.DLL - ok

16:14:09.0811 8076  [ 0393FC83ABF87AA42BC67BBA07C71C69 ] C:\Windows\System32\KBDSP.DLL

16:14:09.0811 8076  C:\Windows\System32\KBDSP.DLL - ok

16:14:09.0814 8076  [ 1107BD574A84367735FEC38B9BD64E6B ] C:\Windows\System32\apphelp.dll

16:14:09.0814 8076  C:\Windows\System32\apphelp.dll - ok

16:14:09.0817 8076  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\System32\services.exe

16:14:09.0817 8076  C:\Windows\System32\services.exe - ok

16:14:09.0821 8076  [ 92283D9E33EC5F41ECC0B430B7459241 ] C:\Windows\System32\WlS0WndH.dll

16:14:09.0821 8076  C:\Windows\System32\WlS0WndH.dll - ok

16:14:09.0824 8076  [ CF9F5BBC2740C41DD471278C41B91F5F ] C:\Windows\System32\cdd.dll

16:14:09.0824 8076  C:\Windows\System32\cdd.dll - ok

16:14:09.0827 8076  [ BE6FAC6F0745C67DAE7522C96406D083 ] C:\Windows\System32\sxs.dll

16:14:09.0827 8076  C:\Windows\System32\sxs.dll - ok

16:14:09.0830 8076  [ A3E186B4B935905B829219502557314E ] C:\Windows\System32\lsass.exe

16:14:09.0830 8076  C:\Windows\System32\lsass.exe - ok

16:14:09.0833 8076  [ D90911B3FA05D7B930C1286084B404DE ] C:\Windows\System32\scesrv.dll

16:14:09.0833 8076  C:\Windows\System32\scesrv.dll - ok

16:14:09.0837 8076  [ 178FAC2B7C66E9A4400CE7AC37623E3F ] C:\Windows\System32\lsasrv.dll

16:14:09.0837 8076  C:\Windows\System32\lsasrv.dll - ok

16:14:09.0840 8076  [ 1AE011BB950A5E0B05023D2AFEC3666D ] C:\Windows\System32\authz.dll

16:14:09.0840 8076  C:\Windows\System32\authz.dll - ok

16:14:09.0843 8076  [ 7808BF0E367ED7348808879CEF482AB3 ] C:\Windows\System32\samsrv.dll

16:14:09.0843 8076  C:\Windows\System32\samsrv.dll - ok

christoph03

22.10.2012 14:16

Code:

16:14:09.0846 8076  [ 98B656EAF128CD06F625B09C84D959E1 ] C:\Windows\System32\netapi32.dll

16:14:09.0846 8076  C:\Windows\System32\netapi32.dll - ok

16:14:09.0849 8076  [ 459B48188494490707DCA8BAA91AA185 ] C:\Windows\System32\cryptdll.dll

16:14:09.0849 8076  C:\Windows\System32\cryptdll.dll - ok

16:14:09.0853 8076  [ 85E861D0B88DB2B54ACB0839654C09F7 ] C:\Windows\System32\dnsapi.dll

16:14:09.0853 8076  C:\Windows\System32\dnsapi.dll - ok

16:14:09.0856 8076  [ 4774AD6C447E02E954BD9A793614EBEC ] C:\Windows\System32\lsm.exe

16:14:09.0856 8076  C:\Windows\System32\lsm.exe - ok

16:14:09.0858 8076  [ EE2FF9A3FC4404234BE3B7C6AA383AF8 ] C:\Windows\System32\msasn1.dll

16:14:09.0858 8076  C:\Windows\System32\msasn1.dll - ok

16:14:09.0861 8076  [ 453DE2958C885527E20C79A3FEFE6AF7 ] C:\Windows\System32\samlib.dll

16:14:09.0861 8076  C:\Windows\System32\samlib.dll - ok

16:14:09.0864 8076  [ B0F9073BE86C6D4EDD4EBA674251E699 ] C:\Windows\System32\crypt32.dll

16:14:09.0864 8076  C:\Windows\System32\crypt32.dll - ok

16:14:09.0868 8076  [ 965AC9FBF2C67231C157E99C03C58D24 ] C:\Windows\System32\feclient.dll

16:14:09.0868 8076  C:\Windows\System32\feclient.dll - ok

16:14:09.0871 8076  [ 1F94EA31C9543B855F53BDAC7792DA4E ] C:\Windows\System32\mpr.dll

16:14:09.0871 8076  C:\Windows\System32\mpr.dll - ok

16:14:09.0874 8076  [ 7F0F1D4B0D847696F8E309423D227DCE ] C:\Windows\System32\ntdsapi.dll

16:14:09.0874 8076  C:\Windows\System32\ntdsapi.dll - ok

16:14:09.0877 8076  [ 71F5A7104FDF16C0AC5283A6CE666553 ] C:\Windows\System32\sysntfy.dll

16:14:09.0877 8076  C:\Windows\System32\sysntfy.dll - ok

16:14:09.0881 8076  [ 2FA16465F64DB54B1F7F511395EB4FD7 ] C:\Windows\System32\ncobjapi.dll

16:14:09.0881 8076  C:\Windows\System32\ncobjapi.dll - ok

16:14:09.0884 8076  [ F0321DA5203F1E71917F3B7A13DC4912 ] C:\Windows\System32\wmsgapi.dll

16:14:09.0884 8076  C:\Windows\System32\wmsgapi.dll - ok

16:14:09.0887 8076  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] C:\Windows\System32\aelupsvc.dll

16:14:09.0887 8076  C:\Windows\System32\aelupsvc.dll - ok

16:14:09.0890 8076  [ C6DF7A87063D006ECF1FD8156CB6DE3F ] C:\Windows\System32\SLC.dll

16:14:09.0891 8076  C:\Windows\System32\SLC.dll - ok

16:14:09.0894 8076  [ 4DE3C4D07BAFDE616EFA0ADE076CBAC2 ] C:\Windows\System32\wevtapi.dll

16:14:09.0894 8076  C:\Windows\System32\wevtapi.dll - ok

16:14:09.0897 8076  [ 9028559C132146FB75EB7ACF384B086A ] C:\Windows\System32\dhcpcsvc.dll

16:14:09.0897 8076  C:\Windows\System32\dhcpcsvc.dll - ok

16:14:09.0900 8076  [ DFB6B71CDABA9DFB49C9D2B318B97A1A ] C:\Windows\System32\dhcpcsvc6.dll

16:14:09.0900 8076  C:\Windows\System32\dhcpcsvc6.dll - ok

16:14:09.0903 8076  [ 4FE8425F21B3F0F8C4B4726351D43EAA ] C:\Windows\System32\IPHLPAPI.DLL

16:14:09.0903 8076  C:\Windows\System32\IPHLPAPI.DLL - ok

16:14:09.0907 8076  [ 6B09105742C75DF80CEF21700F20F55A ] C:\Windows\System32\winnsi.dll

16:14:09.0907 8076  C:\Windows\System32\winnsi.dll - ok

16:14:09.0910 8076  [ 7F15B4953378C8B5161D65C26D5FED4D ] C:\Windows\System32\cngaudit.dll

16:14:09.0910 8076  C:\Windows\System32\cngaudit.dll - ok

16:14:09.0913 8076  [ A1545B731579895D8CC44FC0481C1192 ] C:\Windows\System32\alg.exe

16:14:09.0913 8076  C:\Windows\System32\alg.exe - ok

16:14:09.0916 8076  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] C:\Windows\System32\appinfo.dll

16:14:09.0916 8076  C:\Windows\System32\appinfo.dll - ok

16:14:09.0919 8076  [ 68E2A1A0407A66CF50DA0300852424AB ] C:\Windows\System32\audiosrv.dll

16:14:09.0919 8076  C:\Windows\System32\audiosrv.dll - ok

16:14:09.0923 8076  [ C789AF0F724FDA5852FB9A7D3A432381 ] C:\Windows\System32\BFE.DLL

16:14:09.0923 8076  C:\Windows\System32\BFE.DLL - ok

16:14:09.0926 8076  [ 93952506C6D67330367F7E7934B6A02F ] C:\Windows\System32\qmgr.dll

16:14:09.0926 8076  C:\Windows\System32\qmgr.dll - ok

16:14:09.0929 8076  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] C:\Windows\System32\browser.dll

16:14:09.0929 8076  C:\Windows\System32\browser.dll - ok

16:14:09.0932 8076  [ A4C8377FA4A994E07075107DBE2E3DCE ] C:\Windows\System32\bthserv.dll

16:14:09.0932 8076  C:\Windows\System32\bthserv.dll - ok

16:14:09.0935 8076  [ 312EC3E37A0A1F2006534913E37B4423 ] C:\Windows\System32\certprop.dll

16:14:09.0935 8076  C:\Windows\System32\certprop.dll - ok

16:14:09.0939 8076  [ DE0DD9AE3430F84A96B5501112A696BE ] C:\Windows\System32\bcrypt.dll

16:14:09.0939 8076  C:\Windows\System32\bcrypt.dll - ok

16:14:09.0942 8076  [ 188CC19108B0EBD6332D6628D4EDE469 ] C:\Windows\System32\ncrypt.dll

16:14:09.0942 8076  C:\Windows\System32\ncrypt.dll - ok

16:14:09.0945 8076  [ 4211249955AF9133E2E357CC92B54DFD ] C:\Windows\System32\comres.dll

16:14:09.0945 8076  C:\Windows\System32\comres.dll - ok

16:14:09.0948 8076  [ 26F139DDEC6407508071930D3D07337E ] C:\Windows\System32\credssp.dll

16:14:09.0948 8076  C:\Windows\System32\credssp.dll - ok

16:14:09.0952 8076  [ F1E8C34892336D33EDDCDFE44E474F64 ] C:\Windows\System32\cryptsvc.dll

16:14:09.0952 8076  C:\Windows\System32\cryptsvc.dll - ok

16:14:09.0955 8076  [ ABE9EEA1EABEA0711610A637A7B1C25D ] C:\Windows\System32\msprivs.dll

16:14:09.0955 8076  C:\Windows\System32\msprivs.dll - ok

16:14:09.0959 8076  [ 08D6D1692B62C9EE4062E1FA04D8FE2F ] C:\Windows\System32\oleres.dll

16:14:09.0959 8076  C:\Windows\System32\oleres.dll - ok

16:14:09.0962 8076  [ 74F380C8EC8813626C670D46E8A714D1 ] C:\Windows\System32\dfsrres.dll

16:14:09.0962 8076  C:\Windows\System32\dfsrres.dll - ok

16:14:09.0965 8076  [ AA01497884F9CBAC89470120AF78D2B1 ] C:\Windows\System32\kerberos.dll

16:14:09.0978 8076  C:\Windows\System32\kerberos.dll - ok

16:14:09.0980 8076  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] C:\Windows\System32\dot3svc.dll

16:14:09.0980 8076  C:\Windows\System32\dot3svc.dll - ok

16:14:09.0984 8076  [ 9E80FF0752E365F97FD2D1D68C2AFDA1 ] C:\Windows\System32\wship6.dll

16:14:09.0984 8076  C:\Windows\System32\wship6.dll - ok

16:14:09.0987 8076  [ 22CFAEB9172F5F198048401485CD0571 ] C:\Windows\System32\WSHTCPIP.DLL

16:14:09.0987 8076  C:\Windows\System32\WSHTCPIP.DLL - ok

16:14:09.0991 8076  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] C:\Windows\System32\dps.dll

16:14:09.0991 8076  C:\Windows\System32\dps.dll - ok

16:14:09.0994 8076  [ C0B95E40D85CD807D614E264248A45B9 ] C:\Windows\System32\eapsvc.dll

16:14:09.0994 8076  C:\Windows\System32\eapsvc.dll - ok

16:14:09.0997 8076  [ 9BE3744D295A7701EB425332014F0797 ] C:\Windows\ehome\ehrecvr.exe

16:14:09.0997 8076  C:\Windows\ehome\ehrecvr.exe - ok

16:14:10.0000 8076  [ AD1870C8E5D6DD340C829E6074BF3C3F ] C:\Windows\ehome\ehsched.exe

16:14:10.0000 8076  C:\Windows\ehome\ehsched.exe - ok

16:14:10.0003 8076  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] C:\Windows\ehome\ehstart.dll

16:14:10.0003 8076  C:\Windows\ehome\ehstart.dll - ok

16:14:10.0007 8076  [ 4E6B23DFC917EA39306B529B773950F4 ] C:\Windows\System32\emdmgmt.dll

16:14:10.0007 8076  C:\Windows\System32\emdmgmt.dll - ok

16:14:10.0010 8076  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] C:\Windows\System32\nlasvc.dll

16:14:10.0010 8076  C:\Windows\System32\nlasvc.dll - ok

16:14:10.0013 8076  [ 05C3B38DB95BA5585817A4F898EE5581 ] C:\Windows\System32\wshqos.dll

16:14:10.0013 8076  C:\Windows\System32\wshqos.dll - ok

16:14:10.0016 8076  [ 8617350C9B590B63E620881092751BCB ] C:\Windows\System32\mswsock.dll

16:14:10.0016 8076  C:\Windows\System32\mswsock.dll - ok

16:14:10.0020 8076  [ FC62A635063B762E1C3C60EA77279378 ] C:\Windows\System32\NapiNSP.dll

16:14:10.0020 8076  C:\Windows\System32\NapiNSP.dll - ok

16:14:10.0023 8076  [ 690D41DF1D555F96D4898A0F54EBA065 ] C:\Windows\System32\pnrpnsp.dll

16:14:10.0023 8076  C:\Windows\System32\pnrpnsp.dll - ok

16:14:10.0026 8076  [ 4ABCE74D012971305249E45E095E9EA6 ] C:\Windows\System32\msv1_0.dll

16:14:10.0026 8076  C:\Windows\System32\msv1_0.dll - ok

16:14:10.0029 8076  [ 95DAECF0FB120A7B5DA679CC54E37DDE ] C:\Windows\System32\netlogon.dll

16:14:10.0029 8076  C:\Windows\System32\netlogon.dll - ok

16:14:10.0033 8076  [ A1B40A28F38D27A7E3229EE4C7064434 ] C:\Windows\System32\wevtsvc.dll

16:14:10.0033 8076  C:\Windows\System32\wevtsvc.dll - ok

16:14:10.0036 8076  [ 898E7C06A350D4A1A64A9EA264D55452 ] C:\Windows\System32\winlogon.exe

16:14:10.0036 8076  C:\Windows\System32\winlogon.exe - ok

16:14:10.0039 8076  [ 72910BC4A218C49EA8E43D1FAEC403A5 ] C:\Windows\System32\winbrand.dll

16:14:10.0039 8076  C:\Windows\System32\winbrand.dll - ok

16:14:10.0042 8076  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] C:\Windows\System32\fdPHost.dll

16:14:10.0042 8076  C:\Windows\System32\fdPHost.dll - ok

16:14:10.0046 8076  [ 50E3E76B0901BB4FC029BB88BFA5CE79 ] C:\Windows\System32\schannel.dll

16:14:10.0046 8076  C:\Windows\System32\schannel.dll - ok

16:14:10.0049 8076  [ 93620229F3CC3B67A3528BF39F064C30 ] C:\Windows\System32\wdigest.dll

16:14:10.0049 8076  C:\Windows\System32\wdigest.dll - ok

16:14:10.0052 8076  [ E14170AEA125119B98FA2BDE3FF4F462 ] C:\Windows\System32\rsaenh.dll

16:14:10.0052 8076  C:\Windows\System32\rsaenh.dll - ok

16:14:10.0055 8076  [ F8873D15018F411588BEC02C1725BADA ] C:\Windows\System32\TSpkg.dll

16:14:10.0055 8076  C:\Windows\System32\TSpkg.dll - ok

16:14:10.0059 8076  [ 0F420E81062757EA8363CBACD4D40D6D ] C:\Windows\System32\gpapi.dll

16:14:10.0059 8076  C:\Windows\System32\gpapi.dll - ok

16:14:10.0062 8076  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] C:\Windows\System32\FDResPub.dll

16:14:10.0062 8076  C:\Windows\System32\FDResPub.dll - ok

16:14:10.0065 8076  [ 8CE364388C8ECA59B14B539179276D44 ] C:\Windows\System32\FntCache.dll

16:14:10.0065 8076  C:\Windows\System32\FntCache.dll - ok

16:14:10.0068 8076  [ 302964DCAC79D618CC7B72C778DA9FD2 ] C:\Windows\System32\PresentationHost.exe

16:14:10.0068 8076  C:\Windows\System32\PresentationHost.exe - ok

16:14:10.0072 8076  [ 84067081F3318162797385E11A8F0582 ] C:\Windows\System32\hidserv.dll

16:14:10.0072 8076  C:\Windows\System32\hidserv.dll - ok

16:14:10.0076 8076  [ D8AD255B37DA92434C26E4876DB7D418 ] C:\Windows\System32\KMSVC.DLL

16:14:10.0076 8076  C:\Windows\System32\KMSVC.DLL - ok

16:14:10.0079 8076  [ 05586F5438AB0DA4F5149159E0E5FD4B ] C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll

16:14:10.0079 8076  C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll - ok

16:14:10.0083 8076  [ 9908D8A397B76CD8D31D0D383C5773C9 ] C:\Windows\System32\IKEEXT.DLL

16:14:10.0083 8076  C:\Windows\System32\IKEEXT.DLL - ok

16:14:10.0086 8076  [ 9AC218C6E6105477484C6FDBE7D409A4 ] C:\Windows\System32\IPBusEnum.dll

16:14:10.0086 8076  C:\Windows\System32\IPBusEnum.dll - ok

16:14:10.0089 8076  [ 3464DAE0E801F5A81A23C571D86F30B2 ] C:\Windows\System32\rascfg.dll

16:14:10.0089 8076  C:\Windows\System32\rascfg.dll - ok

16:14:10.0093 8076  [ 4AAFC7461633848AA87A363B2CBEC522 ] C:\Windows\System32\winsta.dll

16:14:10.0093 8076  C:\Windows\System32\winsta.dll - ok

16:14:10.0096 8076  [ 1998BD97F950680BB55F55A7244679C2 ] C:\Windows\System32\iphlpsvc.dll

16:14:10.0096 8076  C:\Windows\System32\iphlpsvc.dll - ok

16:14:10.0099 8076  [ 74C2F29CC612B2B34231BEBD824D2FB2 ] C:\Windows\System32\keyiso.dll

16:14:10.0099 8076  C:\Windows\System32\keyiso.dll - ok

16:14:10.0102 8076  [ 1BF5EEBFD518DD7298434D8C862F825D ] C:\Windows\System32\srvsvc.dll

16:14:10.0102 8076  C:\Windows\System32\srvsvc.dll - ok

16:14:10.0105 8076  [ 1DB69705B695B987082C8BAEC0C6B34F ] C:\Windows\System32\wkssvc.dll

16:14:10.0105 8076  C:\Windows\System32\wkssvc.dll - ok

16:14:10.0108 8076  [ 132F6237FA3BF3E9715F63A1CCF72BF1 ] C:\Windows\ehome\ehres.dll

16:14:10.0108 8076  C:\Windows\ehome\ehres.dll - ok

16:14:10.0112 8076  [ FA0593D936C9B95FB6FAA32AD1595D49 ] C:\Windows\System32\lltdres.dll

16:14:10.0112 8076  C:\Windows\System32\lltdres.dll - ok

16:14:10.0115 8076  [ 35D40113E4A5B961B6CE5C5857702518 ] C:\Windows\System32\lmhsvc.dll

16:14:10.0115 8076  C:\Windows\System32\lmhsvc.dll - ok

16:14:10.0119 8076  [ 95F1EB99B81CFD6F581C85F0A0AA9B2B ] C:\Windows\System32\FirewallAPI.dll

16:14:10.0119 8076  C:\Windows\System32\FirewallAPI.dll - ok

16:14:10.0122 8076  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] C:\Windows\System32\mmcss.dll

16:14:10.0122 8076  C:\Windows\System32\mmcss.dll - ok

16:14:10.0125 8076  [ EA822412BBBA9B7D2B1A3748AD50EFB8 ] C:\Windows\System32\iscsidsc.dll

16:14:10.0125 8076  C:\Windows\System32\iscsidsc.dll - ok

16:14:10.0129 8076  [ ED21401F1E2F6BC2F54C462BB66D0D6B ] C:\Windows\System32\msimsg.dll

16:14:10.0129 8076  C:\Windows\System32\msimsg.dll - ok

16:14:10.0132 8076  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] C:\Windows\System32\QAGENTRT.DLL

16:14:10.0132 8076  C:\Windows\System32\QAGENTRT.DLL - ok

16:14:10.0135 8076  [ C8052711DAECC48B982434C5116CA401 ] C:\Windows\System32\netman.dll

16:14:10.0135 8076  C:\Windows\System32\netman.dll - ok

16:14:10.0138 8076  [ 4EF5DF1B011B05737ECB8F0B7B171510 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll

16:14:10.0138 8076  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll - ok

16:14:10.0142 8076  [ ED640F4CE585058119B824CC76591D9C ] C:\Windows\System32\netprof.dll

16:14:10.0142 8076  C:\Windows\System32\netprof.dll - ok

16:14:10.0145 8076  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] C:\Windows\System32\nsisvc.dll

16:14:10.0145 8076  C:\Windows\System32\nsisvc.dll - ok

16:14:10.0148 8076  [ 0C8E8E61AD1EB0B250B846712C917506 ] C:\Windows\System32\p2psvc.dll

16:14:10.0148 8076  C:\Windows\System32\p2psvc.dll - ok

16:14:10.0151 8076  [ C6276AD11F4BB49B58AA1ED88537F14A ] C:\Windows\System32\pcasvc.dll

16:14:10.0151 8076  C:\Windows\System32\pcasvc.dll - ok

16:14:10.0155 8076  [ B1689DF169143F57053F795390C99DB3 ] C:\Windows\System32\pla.dll

16:14:10.0155 8076  C:\Windows\System32\pla.dll - ok

16:14:10.0158 8076  [ C5E7F8A996EC0A82D508FD9064A5569E ] C:\Windows\System32\umpnpmgr.dll

16:14:10.0158 8076  C:\Windows\System32\umpnpmgr.dll - ok

16:14:10.0161 8076  [ 64B28D672B5B6A01E87B0C3096B1E047 ] C:\Windows\System32\polstore.dll

16:14:10.0161 8076  C:\Windows\System32\polstore.dll - ok

16:14:10.0164 8076  [ 0508FAA222D28835310B7BFCA7A77346 ] C:\Windows\System32\profsvc.dll

16:14:10.0164 8076  C:\Windows\System32\profsvc.dll - ok

16:14:10.0167 8076  [ 08F9134A2215B7ED985409A4DF60AC60 ] C:\Windows\System32\psbase.dll

16:14:10.0167 8076  C:\Windows\System32\psbase.dll - ok

16:14:10.0171 8076  [ 9F5E0E1926014D17486901C88ECA2DB7 ] C:\Windows\System32\drivers\qwavedrv.sys

16:14:10.0171 8076  C:\Windows\System32\drivers\qwavedrv.sys - ok

16:14:10.0174 8076  [ E9ECAE663F47E6CB43962D18AB18890F ] C:\Windows\System32\qwave.dll

16:14:10.0174 8076  C:\Windows\System32\qwave.dll - ok

16:14:10.0177 8076  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] C:\Windows\System32\rasauto.dll

16:14:10.0177 8076  C:\Windows\System32\rasauto.dll - ok

16:14:10.0181 8076  [ 75D47445D70CA6F9F894B032FBC64FCF ] C:\Windows\System32\rasmans.dll

16:14:10.0181 8076  C:\Windows\System32\rasmans.dll - ok

16:14:10.0185 8076  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] C:\Windows\System32\sstpsvc.dll

16:14:10.0185 8076  C:\Windows\System32\sstpsvc.dll - ok

16:14:10.0189 8076  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] C:\Windows\System32\mprdim.dll

16:14:10.0189 8076  C:\Windows\System32\mprdim.dll - ok

16:14:10.0192 8076  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] C:\Windows\System32\regsvc.dll

16:14:10.0192 8076  C:\Windows\System32\regsvc.dll - ok

16:14:10.0196 8076  [ 5123F83CBC4349D065534EEB6BBDC42B ] C:\Windows\System32\Locator.exe

16:14:10.0196 8076  C:\Windows\System32\Locator.exe - ok

16:14:10.0199 8076  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] C:\Windows\System32\SCardSvr.dll

16:14:10.0199 8076  C:\Windows\System32\SCardSvr.dll - ok

16:14:10.0202 8076  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] C:\Windows\System32\schedsvc.dll

16:14:10.0202 8076  C:\Windows\System32\schedsvc.dll - ok

16:14:10.0205 8076  [ 716313D9F6B0529D03F726D5AAF6F191 ] C:\Windows\System32\sdrsvc.dll

16:14:10.0205 8076  C:\Windows\System32\sdrsvc.dll - ok

16:14:10.0208 8076  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] C:\Windows\System32\seclogon.dll

16:14:10.0208 8076  C:\Windows\System32\seclogon.dll - ok

16:14:10.0212 8076  [ A9BBAB5759771E523F55563D6CBE140F ] C:\Windows\System32\Sens.dll

16:14:10.0212 8076  C:\Windows\System32\Sens.dll - ok

16:14:10.0215 8076  [ D2193326F729B163125610DBF3E17D57 ] C:\Windows\System32\SessEnv.dll

16:14:10.0215 8076  C:\Windows\System32\SessEnv.dll - ok

16:14:10.0218 8076  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] C:\Windows\System32\ipnathlp.dll

16:14:10.0218 8076  C:\Windows\System32\ipnathlp.dll - ok

16:14:10.0222 8076  [ C7230FBEE14437716701C15BE02C27B8 ] C:\Windows\System32\shsvcs.dll

16:14:10.0222 8076  C:\Windows\System32\shsvcs.dll - ok

16:14:10.0225 8076  [ 862BB4CBC05D80C5B45BE430E5EF872F ] C:\Windows\System32\SLsvc.exe

16:14:10.0225 8076  C:\Windows\System32\SLsvc.exe - ok

16:14:10.0228 8076  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] C:\Windows\System32\SLUINotify.dll

16:14:10.0228 8076  C:\Windows\System32\SLUINotify.dll - ok

16:14:10.0231 8076  [ E4060CFE50F87C72316CB0FDB20E4913 ] C:\Windows\System32\tcpipcfg.dll

16:14:10.0231 8076  C:\Windows\System32\tcpipcfg.dll - ok

16:14:10.0234 8076  [ 2A146A055B4401C16EE62D18B8E2A032 ] C:\Windows\System32\snmptrap.exe

16:14:10.0234 8076  C:\Windows\System32\snmptrap.exe - ok

16:14:10.0238 8076  [ 8554097E5136C3BF9F69FE578A1B35F4 ] C:\Windows\System32\spoolsv.exe

16:14:10.0238 8076  C:\Windows\System32\spoolsv.exe - ok

16:14:10.0241 8076  [ 03D50B37234967433A5EA5BA72BC0B62 ] C:\Windows\System32\ssdpsrv.dll

16:14:10.0241 8076  C:\Windows\System32\ssdpsrv.dll - ok

16:14:10.0244 8076  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] C:\Windows\System32\wiaservc.dll

16:14:10.0244 8076  C:\Windows\System32\wiaservc.dll - ok

16:14:10.0247 8076  [ F21FD248040681CCA1FB6C9A03AAA93D ] C:\Windows\System32\swprv.dll

16:14:10.0247 8076  C:\Windows\System32\swprv.dll - ok

16:14:10.0250 8076  [ 9A51B04E9886AA4EE90093586B0BA88D ] C:\Windows\System32\sysmain.dll

16:14:10.0250 8076  C:\Windows\System32\sysmain.dll - ok

16:14:10.0254 8076  [ 2DCA225EAE15F42C0933E998EE0231C3 ] C:\Windows\System32\TabSvc.dll

16:14:10.0254 8076  C:\Windows\System32\TabSvc.dll - ok

16:14:10.0257 8076  [ D7673E4B38CE21EE54C59EEEB65E2483 ] C:\Windows\System32\tapisrv.dll

16:14:10.0257 8076  C:\Windows\System32\tapisrv.dll - ok

16:14:10.0260 8076  [ CB05822CD9CC6C688168E113C603DBE7 ] C:\Windows\System32\tbssvc.dll

16:14:10.0260 8076  C:\Windows\System32\tbssvc.dll - ok

16:14:10.0263 8076  [ BB95DA09BEF6E7A131BFF3BA5032090D ] C:\Windows\System32\termsrv.dll

16:14:10.0263 8076  C:\Windows\System32\termsrv.dll - ok

16:14:10.0266 8076  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] C:\Windows\servicing\TrustedInstaller.exe

16:14:10.0266 8076  C:\Windows\servicing\TrustedInstaller.exe - ok

16:14:10.0269 8076  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] C:\Windows\System32\trkwks.dll

16:14:10.0269 8076  C:\Windows\System32\trkwks.dll - ok

16:14:10.0272 8076  [ ECEF404F62863755951E09C802C94AD5 ] C:\Windows\System32\UI0Detect.exe

16:14:10.0272 8076  C:\Windows\System32\UI0Detect.exe - ok

16:14:10.0276 8076  [ 68308183F4AE0BE7BF8ECD07CB297999 ] C:\Windows\System32\upnphost.dll

16:14:10.0276 8076  C:\Windows\System32\upnphost.dll - ok

16:14:10.0279 8076  [ 01DD1004181FD46ECDC3628228EB269D ] C:\Windows\System32\dwm.exe

16:14:10.0279 8076  C:\Windows\System32\dwm.exe - ok

16:14:10.0282 8076  [ CD88D1B7776DC17A119049742EC07EB4 ] C:\Windows\System32\vds.exe

16:14:10.0282 8076  C:\Windows\System32\vds.exe - ok

16:14:10.0285 8076  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] C:\Windows\System32\VSSVC.exe

16:14:10.0285 8076  C:\Windows\System32\VSSVC.exe - ok

16:14:10.0288 8076  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] C:\Windows\System32\w32time.dll

16:14:10.0288 8076  C:\Windows\System32\w32time.dll - ok

16:14:10.0291 8076  [ A3CD60FD826381B49F03832590E069AF ] C:\Windows\System32\wcncsvc.dll

16:14:10.0291 8076  C:\Windows\System32\wcncsvc.dll - ok

16:14:10.0294 8076  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] C:\Windows\System32\WcsPlugInService.dll

16:14:10.0294 8076  C:\Windows\System32\WcsPlugInService.dll - ok

16:14:10.0297 8076  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] C:\Windows\System32\wdi.dll

16:14:10.0297 8076  C:\Windows\System32\wdi.dll - ok

16:14:10.0300 8076  [ 04C37D8107320312FBAE09926103D5E2 ] C:\Windows\System32\WebClnt.dll

16:14:10.0300 8076  C:\Windows\System32\WebClnt.dll - ok

16:14:10.0304 8076  [ AE3736E7E8892241C23E4EBBB7453B60 ] C:\Windows\System32\wecsvc.dll

16:14:10.0304 8076  C:\Windows\System32\wecsvc.dll - ok

16:14:10.0307 8076  [ 670FF720071ED741206D69BD995EA453 ] C:\Windows\System32\wercplsupport.dll

16:14:10.0307 8076  C:\Windows\System32\wercplsupport.dll - ok

16:14:10.0311 8076  [ 32B88481D3B326DA6DEB07B1D03481E7 ] C:\Windows\System32\wersvc.dll

16:14:10.0311 8076  C:\Windows\System32\wersvc.dll - ok

16:14:10.0314 8076  [ 62DB790A860CDFC4278D2F03CC5675D8 ] C:\Program Files\Windows Defender\MsMpRes.dll

16:14:10.0314 8076  C:\Program Files\Windows Defender\MsMpRes.dll - ok

16:14:10.0317 8076  [ DBD02E3E6F061EBBBF9B99A9D7CBA30B ] C:\Windows\System32\winhttp.dll

16:14:10.0317 8076  C:\Windows\System32\winhttp.dll - ok

16:14:10.0320 8076  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] C:\Windows\System32\wbem\WMIsvc.dll

16:14:10.0321 8076  C:\Windows\System32\wbem\WMIsvc.dll - ok

16:14:10.0324 8076  [ 7CFE68BDC065E55AA5E8421607037511 ] C:\Windows\System32\WsmSvc.dll

16:14:10.0324 8076  C:\Windows\System32\WsmSvc.dll - ok

16:14:10.0327 8076  [ C008405E4FEEB069E30DA1D823910234 ] C:\Windows\System32\wlansvc.dll

16:14:10.0327 8076  C:\Windows\System32\wlansvc.dll - ok

16:14:10.0330 8076  [ 43BE3875207DCB62A85C8C49970B66CC ] C:\Windows\System32\wbem\WmiApSrv.exe

16:14:10.0330 8076  C:\Windows\System32\wbem\WmiApSrv.exe - ok

16:14:10.0333 8076  [ 3978704576A121A9204F8CC49A301A9B ] C:\Program Files\Windows Media Player\wmpnetwk.exe

16:14:10.0333 8076  C:\Program Files\Windows Media Player\wmpnetwk.exe - ok

16:14:10.0337 8076  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] C:\Windows\System32\wpcsvc.dll

16:14:10.0337 8076  C:\Windows\System32\wpcsvc.dll - ok

16:14:10.0340 8076  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:14:10.0340 8076  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe - ok

16:14:10.0343 8076  [ 801FBDB89D472B3C467EB112A0FC9246 ] C:\Windows\System32\wpdbusenum.dll

16:14:10.0343 8076  C:\Windows\System32\wpdbusenum.dll - ok

16:14:10.0346 8076  [ 1CA6C40261DDC0425987980D0CD2AAAB ] C:\Windows\System32\wscsvc.dll

16:14:10.0346 8076  C:\Windows\System32\wscsvc.dll - ok

16:14:10.0350 8076  [ AED0DFF80C6B3914769407E78D7AB21A ] C:\Windows\System32\SearchIndexer.exe

16:14:10.0350 8076  C:\Windows\System32\SearchIndexer.exe - ok

16:14:10.0354 8076  [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\Windows\System32\wuaueng.dll

16:14:10.0354 8076  C:\Windows\System32\wuaueng.dll - ok

16:14:10.0358 8076  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] C:\Windows\System32\WUDFSvc.dll

16:14:10.0358 8076  C:\Windows\System32\WUDFSvc.dll - ok

16:14:10.0360 8076  [ 8FC182167381E9915651267044105EE1 ] C:\Windows\System32\scecli.dll

16:14:10.0360 8076  C:\Windows\System32\scecli.dll - ok

16:14:10.0363 8076  [ CD08EEC61C591AF59A39F4363C567D30 ] C:\Windows\System32\ntmarta.dll

16:14:10.0363 8076  C:\Windows\System32\ntmarta.dll - ok

16:14:10.0366 8076  [ 3794B461C45882E06856F282EEF025AF ] C:\Windows\System32\svchost.exe

16:14:10.0366 8076  C:\Windows\System32\svchost.exe - ok

16:14:10.0370 8076  [ 9A7F4B2EDACD11444D048AA19CBB26AF ] C:\Windows\System32\powrprof.dll

16:14:10.0370 8076  C:\Windows\System32\powrprof.dll - ok

16:14:10.0373 8076  [ 8F5C7426567798E62A3B3614965D62CC ] C:\Windows\System32\drivers\luafv.sys

16:14:10.0373 8076  C:\Windows\System32\drivers\luafv.sys - ok

16:14:10.0376 8076  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] C:\Windows\System32\drivers\WUDFPf.sys

16:14:10.0376 8076  C:\Windows\System32\drivers\WUDFPf.sys - ok

16:14:10.0379 8076  [ 782945716AD010AC3D41758E8E52C735 ] C:\Windows\System32\nvvsvc.exe

16:14:10.0379 8076  C:\Windows\System32\nvvsvc.exe - ok

16:14:10.0382 8076  [ F42483814FC39170B3982A184EC5AAA2 ] C:\Windows\System32\wtsapi32.dll

16:14:10.0382 8076  C:\Windows\System32\wtsapi32.dll - ok

16:14:10.0386 8076  [ BE3C082837866C4C291ADAF163C10EA6 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll

16:14:10.0386 8076  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll - ok

16:14:10.0390 8076  [ C354621B6B94E10AE7F5CDBE745FEB86 ] C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:14:10.0390 8076  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - ok

16:14:10.0393 8076  [ 69827805A221C21450BA22F4326A2EE3 ] C:\Windows\System32\version.dll

16:14:10.0393 8076  C:\Windows\System32\version.dll - ok

16:14:10.0396 8076  [ 5EC8FB83F31AA2D6F421F02C3F4F4475 ] C:\Windows\System32\winspool.drv

16:14:10.0396 8076  C:\Windows\System32\winspool.drv - ok

16:14:10.0401 8076  [ 48ECE68A7DF667C201E719B6D282F77B ] C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll

16:14:10.0401 8076  C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll - ok

16:14:10.0405 8076  [ A34A8F5554AA0C547B88121A3B49D88D ] C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll

16:14:10.0405 8076  C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll - ok

16:14:10.0408 8076  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] C:\Windows\System32\rpcss.dll

16:14:10.0408 8076  C:\Windows\System32\rpcss.dll - ok

16:14:10.0411 8076  [ A99871BA522CB2539AE275AC18CACC8F ] C:\Windows\System32\cabinet.dll

16:14:10.0411 8076  C:\Windows\System32\cabinet.dll - ok

16:14:10.0414 8076  [ B2E569EF26DAC9D6994A2AFF4F601B7A ] C:\Windows\System32\wintrust.dll

16:14:10.0414 8076  C:\Windows\System32\wintrust.dll - ok

16:14:10.0417 8076  [ 62D577288B48998FC6667BF22DC5B690 ] C:\Windows\System32\LogonUI.exe

16:14:10.0417 8076  C:\Windows\System32\LogonUI.exe - ok

16:14:10.0421 8076  [ 58C2521D87C494831A625202C80354AD ] C:\Windows\System32\authui.dll

16:14:10.0421 8076  C:\Windows\System32\authui.dll - ok

16:14:10.0424 8076  [ C9244BCAC83B259B920BBEE18A97BFE1 ] C:\Windows\System32\avrt.dll

16:14:10.0424 8076  C:\Windows\System32\avrt.dll - ok

16:14:10.0427 8076  [ 56B5914070B2C243DFB3D186070DA89D ] C:\Windows\System32\MMDevAPI.dll

16:14:10.0427 8076  C:\Windows\System32\MMDevAPI.dll - ok

16:14:10.0431 8076  [ 2EC53B5A351C4D443896DBAD117F7E82 ] C:\Windows\System32\msimg32.dll

16:14:10.0431 8076  C:\Windows\System32\msimg32.dll - ok

16:14:10.0434 8076  [ 999D69DEB576C2C424294DF025891CC6 ] C:\Windows\System32\uxtheme.dll

16:14:10.0434 8076  C:\Windows\System32\uxtheme.dll - ok

16:14:10.0438 8076  [ 83E354791CF2A6A74F077F79D2A2E40E ] C:\Windows\System32\WUDFPlatform.dll

16:14:10.0438 8076  C:\Windows\System32\WUDFPlatform.dll - ok

16:14:10.0441 8076  [ EC43D9CC95C3BB5FEFDBCF22D375E1F5 ] C:\Windows\System32\adtschema.dll

16:14:10.0441 8076  C:\Windows\System32\adtschema.dll - ok

16:14:10.0445 8076  [ 97FEF831AB90BEE128C9AF390E243F80 ] C:\Windows\System32\drivers\drmkaud.sys

16:14:10.0445 8076  C:\Windows\System32\drivers\drmkaud.sys - ok

16:14:10.0448 8076  [ 76EAEF4DDEBBC7C38853F586C0E91DCE ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll

16:14:10.0448 8076  C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll - ok

16:14:10.0452 8076  [ 75EB73E64F5B4655D9797D20F26DE320 ] C:\Windows\System32\duser.dll

16:14:10.0452 8076  C:\Windows\System32\duser.dll - ok

16:14:10.0455 8076  [ 3437B9E218A2E4586BEF4F7A3BD00777 ] C:\Windows\System32\audiodg.exe

16:14:10.0455 8076  C:\Windows\System32\audiodg.exe - ok

16:14:10.0458 8076  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] C:\Windows\System32\drivers\fltMgr.sys

16:14:10.0458 8076  C:\Windows\System32\drivers\fltMgr.sys - ok

16:14:10.0461 8076  [ 57418956DDAE128D1023C508E7D07071 ] C:\Windows\System32\PSHED.DLL

16:14:10.0461 8076  C:\Windows\System32\PSHED.DLL - ok

16:14:10.0464 8076  [ 1908CC7673F72601AFFDCA022689CEDF ] C:\Windows\System32\xmllite.dll

16:14:10.0464 8076  C:\Windows\System32\xmllite.dll - ok

16:14:10.0467 8076  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] C:\Windows\System32\gpsvc.dll

16:14:10.0467 8076  C:\Windows\System32\gpsvc.dll - ok

16:14:10.0471 8076  [ D1A84F7D4CAFCFE2A32149FF418056E5 ] C:\Windows\System32\nlaapi.dll

16:14:10.0471 8076  C:\Windows\System32\nlaapi.dll - ok

16:14:10.0474 8076  [ 409F36C8BD06FCE184631EB4142B009A ] C:\Windows\System32\atl.dll

16:14:10.0474 8076  C:\Windows\System32\atl.dll - ok

16:14:10.0477 8076  [ A7F8BAD9590ADDC425B4003E94780DFA ] C:\Windows\System32\drivers\spsys.sys

16:14:10.0477 8076  C:\Windows\System32\drivers\spsys.sys - ok

16:14:10.0480 8076  [ 67058C46504BC12D821F38CF99B7B28F ] C:\Windows\System32\es.dll

16:14:10.0480 8076  C:\Windows\System32\es.dll - ok

16:14:10.0483 8076  [ 7DACD94118E2D8B6D72F47ADEB0367BF ] C:\Windows\System32\propsys.dll

16:14:10.0483 8076  C:\Windows\System32\propsys.dll - ok

16:14:10.0486 8076  [ 8269CC01940A202BBB9FDF26705DBD67 ] C:\Windows\System32\hid.dll

16:14:10.0486 8076  C:\Windows\System32\hid.dll - ok

16:14:10.0489 8076  [ 1509E705F3AC1D474C92454A5C2DD81F ] C:\Windows\System32\uxsms.dll

16:14:10.0489 8076  C:\Windows\System32\uxsms.dll - ok

16:14:10.0492 8076  [ B25DBBA6C63A61FF4AFDB5ADAB4E70CB ] C:\Windows\System32\SmartcardCredentialProvider.dll

16:14:10.0492 8076  C:\Windows\System32\SmartcardCredentialProvider.dll - ok

16:14:10.0496 8076  [ 9DC3723519F52B6BC63EACD4BD411313 ] C:\Windows\System32\rasplap.dll

16:14:10.0496 8076  C:\Windows\System32\rasplap.dll - ok

16:14:10.0499 8076  [ 3CB863B78642405371CB3A71C07E2382 ] C:\Windows\System32\rasapi32.dll

16:14:10.0499 8076  C:\Windows\System32\rasapi32.dll - ok

16:14:10.0502 8076  [ 3A1DDA77F331D107BA40DB06E4D666E9 ] C:\Windows\System32\rasman.dll

16:14:10.0502 8076  C:\Windows\System32\rasman.dll - ok

16:14:10.0505 8076  [ 3D418A22A56471295AEB1CEB9027C3DA ] C:\Windows\System32\rtutils.dll

16:14:10.0505 8076  C:\Windows\System32\rtutils.dll - ok

16:14:10.0508 8076  [ 70F08ECE7A30A639D3F0C8C433685C7D ] C:\Windows\System32\tapi32.dll

16:14:10.0508 8076  C:\Windows\System32\tapi32.dll - ok

16:14:10.0511 8076  [ 14FF750EFE13B0C21E5A06507C3A97B1 ] C:\Windows\System32\winmm.dll

16:14:10.0511 8076  C:\Windows\System32\winmm.dll - ok

16:14:10.0514 8076  [ DC15AB7168C0309D8F04FD95B6240422 ] C:\Windows\System32\oleacc.dll

16:14:10.0514 8076  C:\Windows\System32\oleacc.dll - ok

16:14:10.0517 8076  [ 627920CFF5DFCF8CF54CF2D592D61307 ] C:\Windows\System32\WinSCard.dll

16:14:10.0518 8076  C:\Windows\System32\WinSCard.dll - ok

16:14:10.0521 8076  [ 12A1DF1B84FB45A00D47B2CDE2CEEBBA ] C:\Windows\System32\shgina.dll

16:14:10.0521 8076  C:\Windows\System32\shgina.dll - ok

16:14:10.0524 8076  [ D1C5883087A0C3F1344D9D55A44901F6 ] C:\Windows\System32\drivers\lltdio.sys

16:14:10.0524 8076  C:\Windows\System32\drivers\lltdio.sys - ok

16:14:10.0527 8076  [ 9C508F4074A39E8B4B31D27198146FAD ] C:\Windows\System32\drivers\rspndr.sys

16:14:10.0527 8076  C:\Windows\System32\drivers\rspndr.sys - ok

16:14:10.0530 8076  [ 70932D6C3D59B416CBD2BE5A3B3D4BE6 ] C:\Windows\System32\shacct.dll

16:14:10.0530 8076  C:\Windows\System32\shacct.dll - ok

16:14:10.0533 8076  [ 4DF066ECEE5A7B20BF8B39EF4D646600 ] C:\Windows\System32\wdmaud.drv

16:14:10.0533 8076  C:\Windows\System32\wdmaud.drv - ok

16:14:10.0537 8076  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] C:\Windows\System32\dnsrslvr.dll

16:14:10.0537 8076  C:\Windows\System32\dnsrslvr.dll - ok

16:14:10.0540 8076  [ 919CC2A0476D5A6A4C935D4B88E29912 ] C:\Windows\System32\ksuser.dll

16:14:10.0540 8076  C:\Windows\System32\ksuser.dll - ok

16:14:10.0543 8076  [ 37F929A6CC3EF6FFACC02F511DD6CBE5 ] C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

16:14:10.0543 8076  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - ok

16:14:10.0547 8076  [ DB7F4AB85298F3FE522C5512B8B0F56D ] C:\Windows\System32\AudioEng.dll

16:14:10.0547 8076  C:\Windows\System32\AudioEng.dll - ok

16:14:10.0550 8076  [ 7258434974EA735725FD2D4A65C5E821 ] C:\Windows\System32\AudioSes.dll

16:14:10.0550 8076  C:\Windows\System32\AudioSes.dll - ok

16:14:10.0553 8076  [ 6836D001FC733F205ACB80A7986CB6C9 ] C:\Windows\System32\WindowsCodecs.dll

16:14:10.0553 8076  C:\Windows\System32\WindowsCodecs.dll - ok

16:14:10.0556 8076  [ 1821828A1C14280420A2914881C25CDC ] C:\Windows\System32\nvsvc.dll

16:14:10.0556 8076  C:\Windows\System32\nvsvc.dll - ok

16:14:10.0560 8076  [ CA0B849566776A17F35F0339BE17DFD9 ] C:\Windows\System32\ktmw32.dll

16:14:10.0560 8076  C:\Windows\System32\ktmw32.dll - ok

16:14:10.0563 8076  [ 35ACD5EA63D75E97DD0E9A1629E582B2 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll

16:14:10.0563 8076  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll - ok

16:14:10.0566 8076  [ BDBB449425991154135E5ED1559927E6 ] C:\Windows\System32\msacm32.dll

16:14:10.0566 8076  C:\Windows\System32\msacm32.dll - ok

16:14:10.0569 8076  [ 166F004D73EA2CF4AC61800CA469458D ] C:\Windows\System32\msacm32.drv

16:14:10.0569 8076  C:\Windows\System32\msacm32.drv - ok

16:14:10.0573 8076  [ 83199EF88D691E730B80666E29F90D58 ] C:\Windows\System32\midimap.dll

16:14:10.0573 8076  C:\Windows\System32\midimap.dll - ok

16:14:10.0576 8076  [ C38FD6683FD0285F0A41A6463325715D ] C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll

16:14:10.0576 8076  C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - ok

16:14:10.0579 8076  [ 5F1DEC3824E566457F53F24F493FEF08 ] C:\Windows\System32\mscms.dll

16:14:10.0579 8076  C:\Windows\System32\mscms.dll - ok

16:14:10.0582 8076  [ 296937202E4D930AAE98085B99D744D8 ] C:\Windows\System32\AUDIOKSE.dll

16:14:10.0582 8076  C:\Windows\System32\AUDIOKSE.dll - ok

16:14:10.0585 8076  [ 9B96F6952186336CC6E3D4E08BE2E0AF ] C:\Windows\System32\dwmapi.dll

16:14:10.0585 8076  C:\Windows\System32\dwmapi.dll - ok

16:14:10.0589 8076  [ 2A6A2C09ECC2CB495628E45F1379ECE8 ] C:\Windows\System32\taskcomp.dll

16:14:10.0589 8076  C:\Windows\System32\taskcomp.dll - ok

16:14:10.0592 8076  [ 665A831D7A1D46150C5D5DFD8BA9BA0F ] C:\Windows\System32\nvapi.dll

16:14:10.0592 8076  C:\Windows\System32\nvapi.dll - ok

16:14:10.0595 8076  [ D330BF0F8742EE1FFFC3A099CE310F9F ] C:\Windows\System32\RtkAPO.dll

16:14:10.0595 8076  C:\Windows\System32\RtkAPO.dll - ok

16:14:10.0598 8076  [ 3D50C4B10352367D5CB20ED1F50F8DA2 ] C:\Windows\System32\taskeng.exe

16:14:10.0598 8076  C:\Windows\System32\taskeng.exe - ok

16:14:10.0601 8076  [ F870AA3E254628EBEAFE754108D664DE ] C:\Windows\System32\drivers\http.sys

16:14:10.0601 8076  C:\Windows\System32\drivers\http.sys - ok

16:14:10.0604 8076  [ 73FE2E5FA55088A241AA2732F5D387D6 ] C:\Windows\System32\wiarpc.dll

16:14:10.0604 8076  C:\Windows\System32\wiarpc.dll - ok

16:14:10.0607 8076  [ E79FDA8D320147FDC347C504B3487F87 ] C:\Windows\System32\spoolss.dll

16:14:10.0607 8076  C:\Windows\System32\spoolss.dll - ok

16:14:10.0609 8076  [ 4203E86598D0E98D7706F7134B74B570 ] C:\Program Files\NVIDIA Corporation\Display\nvui.dll

16:14:10.0609 8076  C:\Program Files\NVIDIA Corporation\Display\nvui.dll - ok

16:14:10.0613 8076  [ B11FDCA4410D6252964EF97F9A47DE74 ] C:\Windows\System32\TSChannel.dll

16:14:10.0613 8076  C:\Windows\System32\TSChannel.dll - ok

16:14:10.0616 8076  [ 0727200F10320A6BA7E59433094FBBA7 ] C:\Windows\System32\WMALFXGFXDSP.dll

16:14:10.0616 8076  C:\Windows\System32\WMALFXGFXDSP.dll - ok

16:14:10.0619 8076  [ BF142D4F8C61ED3629A9CDD7BA867900 ] C:\Windows\System32\mfplat.dll

16:14:10.0620 8076  C:\Windows\System32\mfplat.dll - ok

16:14:10.0623 8076  [ 2F237AAB91497AAA03AF48EAE68758FC ] C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

16:14:10.0623 8076  C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE - ok

16:14:10.0627 8076  [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll

16:14:10.0627 8076  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll - ok

16:14:10.0631 8076  [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll

16:14:10.0631 8076  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll - ok

16:14:10.0634 8076  [ 13EF0C65FAD380C4113791B947DAA7E4 ] C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL

16:14:10.0634 8076  C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL - ok

16:14:10.0638 8076  [ 4934241CD20AC87D78121352E3BA8318 ] C:\Windows\System32\dbghelp.dll

16:14:10.0638 8076  C:\Windows\System32\dbghelp.dll - ok

16:14:10.0641 8076  [ 95436A92D4A2EF1D637A7345C1796DBD ] C:\Program Files\Common Files\Symantec Shared\SymNeti.dll

16:14:10.0641 8076  C:\Program Files\Common Files\Symantec Shared\SymNeti.dll - ok

16:14:10.0644 8076  [ E582816A4855914DEFFC212E12B3B744 ] C:\Windows\System32\wsock32.dll

16:14:10.0644 8076  C:\Windows\System32\wsock32.dll - ok

16:14:10.0648 8076  [ 0AB7B6A0A3A2D4C985C2A3BB363D424E ] C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL

16:14:10.0648 8076  C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL - ok

16:14:10.0651 8076  [ F8F3B92081BDC486C66547B2BA32F037 ] C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL

16:14:10.0651 8076  C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL - ok

16:14:10.0655 8076  [ CDB2A791F0404A519BB24EC108667907 ] C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL

16:14:10.0655 8076  C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL - ok

16:14:10.0658 8076  [ 96A61E28B4D53270D21197F86B19427B ] C:\Program Files\Common Files\Symantec Shared\CCSET.DLL

16:14:10.0658 8076  C:\Program Files\Common Files\Symantec Shared\CCSET.DLL - ok

16:14:10.0661 8076  [ 55B0C85A0CAA5B573A9F330A88251AF1 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL

16:14:10.0661 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL - ok

16:14:10.0664 8076  [ 460D8766D884E629E3C82B8CF911E5F3 ] C:\Windows\System32\nvsvcr.dll

16:14:10.0664 8076  C:\Windows\System32\nvsvcr.dll - ok

16:14:10.0667 8076  [ F9DAD2257388715A4D74680EB5517C7A ] C:\Windows\System32\nvcpl.dll

16:14:10.0667 8076  C:\Windows\System32\nvcpl.dll - ok

16:14:10.0671 8076  [ F6E882AC84D298650FEABAE72FEC86BA ] C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll

16:14:10.0671 8076  C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - ok

16:14:10.0674 8076  [ EF439DAA6C29B68CFA5220726B2DDBA0 ] C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll

16:14:10.0674 8076  C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll - ok

16:14:10.0678 8076  [ 207100C67D5FD5C8F0124B1C6BF56545 ] C:\Program Files\NVIDIA Corporation\Display\nvuir.dll

16:14:10.0678 8076  C:\Program Files\NVIDIA Corporation\Display\nvuir.dll - ok

16:14:10.0681 8076  [ A75AFCBFDB730EEEE12BFDFA1907EC78 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL

16:14:10.0681 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL - ok

16:14:10.0684 8076  [ CE0F8C664F2C5900B87DC4FD9B245929 ] C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll

16:14:10.0684 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll - ok

16:14:10.0687 8076  [ 673FC8AA28C1049827F5675808FC4F74 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll

16:14:10.0687 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll - ok

16:14:10.0691 8076  [ 374C7BB96E5E05EA771469C5BBD78905 ] C:\Program Files\Common Files\Symantec Shared\CCL70.DLL

16:14:10.0691 8076  C:\Program Files\Common Files\Symantec Shared\CCL70.DLL - ok

16:14:10.0694 8076  [ D90E198602F2FA211474F09E0B919974 ] C:\PROGRA~1\NORTON~1\tpDataSv.dll

16:14:10.0694 8076  C:\PROGRA~1\NORTON~1\tpDataSv.dll - ok

16:14:10.0697 8076  [ 98B2647B6BB59914F9AC48678B411615 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll

16:14:10.0697 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll - ok

16:14:10.0700 8076  [ 401DFFDBBBD3F07C747ED1AE2BB88106 ] C:\Windows\System32\msi.dll

16:14:10.0700 8076  C:\Windows\System32\msi.dll - ok

16:14:10.0704 8076  [ 9367481F461AAEBD3154A184E5153897 ] C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll

16:14:10.0704 8076  C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll - ok

16:14:10.0708 8076  [ 35F82898D3598A5EBC3F71CEB8E21B0E ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL

16:14:10.0708 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL - ok

16:14:10.0711 8076  [ C605C6E9441372DCCF427B852A5EFCF9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll

16:14:10.0711 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll - ok

16:14:10.0714 8076  [ 9061E7F4DB0FE7E0B8E216B796E91D26 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll

16:14:10.0714 8076  C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll - ok

16:14:10.0718 8076  [ 29F40BE4D762D12B67EB9407C2537110 ] C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll

16:14:10.0718 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll - ok

16:14:10.0721 8076  [ 648E58F6342D24A4FD1B90CCAE6ACF8D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll

16:14:10.0721 8076  C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll - ok

16:14:10.0724 8076  [ 73F5D6835BFA66019C03E316D99649DA ] C:\Windows\System32\drivers\CO_Mon.sys

16:14:10.0724 8076  C:\Windows\System32\drivers\CO_Mon.sys - ok

16:14:10.0728 8076  [ 75D53AAE9200EBEF669CFD27497D4B2A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll

16:14:10.0728 8076  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll - ok

16:14:10.0731 8076  [ 4B555106290BD117334E9A08761C035A ] C:\Windows\System32\rundll32.exe

16:14:10.0731 8076  C:\Windows\System32\rundll32.exe - ok

16:14:10.0734 8076  [ 1DACD1530C6E58AEAE9F6DE7DA851935 ] C:\Windows\System32\shimeng.dll

16:14:10.0734 8076  C:\Windows\System32\shimeng.dll - ok

16:14:10.0737 8076  [ D6804F089CBB6749E95124E7C4D80900 ] C:\Windows\AppPatch\AcLayers.dll

16:14:10.0737 8076  C:\Windows\AppPatch\AcLayers.dll - ok

16:14:10.0741 8076  [ D05AAE6F63E3F0E1B2424AB6F6777D87 ] C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL

16:14:10.0741 8076  C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL - ok

16:14:10.0744 8076  [ 36B09A449B860EB9AB8B35C1E28AD8E3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll

16:14:10.0744 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll - ok

16:14:10.0747 8076  [ 4B3C0DD2350F61C2CB6EBD23C9BEE0FD ] C:\Windows\System32\d3dx10_33G.dll

16:14:10.0748 8076  C:\Windows\System32\d3dx10_33G.dll - ok

16:14:10.0751 8076  [ C193C9E3A66F639D2B1EC002CCD997A3 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL

16:14:10.0751 8076  C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL - ok

16:14:10.0755 8076  [ A511E531DAA0F4EAFBED6CCEEC49E059 ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll

16:14:10.0755 8076  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll - ok

16:14:10.0758 8076  [ 59DD7F48E5B6C3448D3C8D585CA73607 ] C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll

16:14:10.0758 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll - ok

16:14:10.0761 8076  [ 1B31592377CC3A465270F117CB3695FF ] C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll

16:14:10.0761 8076  C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll - ok

16:14:10.0765 8076  [ 60C7B0B11568809D1AE10D905674E1C8 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll

16:14:10.0765 8076  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll - ok

16:14:10.0768 8076  [ 295363D4317820AED0D527E15B90A8ED ] C:\Windows\System32\pdh.dll

16:14:10.0768 8076  C:\Windows\System32\pdh.dll - ok

16:14:10.0771 8076  [ 4911AA925EDEE509B73989381506EC89 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll

16:14:10.0771 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll - ok

16:14:10.0775 8076  [ BE01E566D1F569AAB32D0335613E1EEA ] C:\Windows\System32\dllhost.exe

16:14:10.0775 8076  C:\Windows\System32\dllhost.exe - ok

16:14:10.0778 8076  [ 3CD1B69551236977918E60F9543C89A2 ] C:\Windows\System32\AtBroker.exe

16:14:10.0778 8076  C:\Windows\System32\AtBroker.exe - ok

16:14:10.0781 8076  [ 0E135526E9785D085BCD9AEDE6FBCBF9 ] C:\Windows\System32\userinit.exe

16:14:10.0781 8076  C:\Windows\System32\userinit.exe - ok

16:14:10.0784 8076  [ D80C6539C00CB4F5D59066865479C308 ] C:\Windows\System32\dwmredir.dll

16:14:10.0784 8076  C:\Windows\System32\dwmredir.dll - ok

16:14:10.0787 8076  [ C99403A5B641520DAED0021DDA06F272 ] C:\Windows\System32\milcore.dll

16:14:10.0787 8076  C:\Windows\System32\milcore.dll - ok

16:14:10.0790 8076  [ D07D4C3038F3578FFCE1C0237F2A1253 ] C:\Windows\explorer.exe

16:14:10.0790 8076  C:\Windows\explorer.exe - ok

16:14:10.0794 8076  [ 77406183F152C273982F6E2B271DB3D1 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll

16:14:10.0794 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll - ok

16:14:10.0797 8076  [ 09E6B725196DD2348E5EFB2EF5C63DEF ] C:\Program Files\Norton 360\TPSVCAV.DLL

16:14:10.0797 8076  C:\Program Files\Norton 360\TPSVCAV.DLL - ok

16:14:10.0800 8076  [ B424FDFDD16741DFA003B1C53B247D1C ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll

16:14:10.0800 8076  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll - ok

16:14:10.0803 8076  [ 8AAEEE8E59A70F37579993D118A34EE0 ] C:\Windows\System32\d3d9.dll

16:14:10.0803 8076  C:\Windows\System32\d3d9.dll - ok

16:14:10.0806 8076  [ C411C80F90D6732380352B98B37BBD53 ] C:\Windows\System32\winrnr.dll

16:14:10.0806 8076  C:\Windows\System32\winrnr.dll - ok

16:14:10.0810 8076  [ 1B09279E755C896E8CEA60585995D4BD ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll

16:14:10.0810 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll - ok

16:14:10.0813 8076  [ 782C8019C89920A77B1907AD3B4C8FF9 ] C:\Windows\System32\HotStartUserAgent.dll

16:14:10.0813 8076  C:\Windows\System32\HotStartUserAgent.dll - ok

16:14:10.0816 8076  [ 7605C0E1D01A08F3ECD743F38B834A44 ] C:\Windows\System32\drivers\srvnet.sys

16:14:10.0816 8076  C:\Windows\System32\drivers\srvnet.sys - ok

16:14:10.0820 8076  [ A521BD24B5A7746441897A8163D21BF5 ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll

16:14:10.0820 8076  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll - ok

16:14:10.0823 8076  [ EFA80360111D8D179E39E314A49C9ED4 ] C:\Windows\System32\wshbth.dll

16:14:10.0823 8076  C:\Windows\System32\wshbth.dll - ok

16:14:10.0826 8076  [ B0D12F4344EB2AE96E487D2DF6F74413 ] C:\Windows\System32\FWPUCLNT.DLL

16:14:10.0826 8076  C:\Windows\System32\FWPUCLNT.DLL - ok

16:14:10.0829 8076  [ A7D525E5C0D91C8C1D84C6BCD25AD77D ] C:\Windows\System32\rasadhlp.dll

16:14:10.0829 8076  C:\Windows\System32\rasadhlp.dll - ok

16:14:10.0833 8076  [ 3E050D8A83E4FD2B2CF88A1253CECF0C ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll

16:14:10.0833 8076  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll - ok

16:14:10.0836 8076  [ 57125869A7B9638A5D11DD685AA65EB4 ] C:\Windows\System32\PlaySndSrv.dll

16:14:10.0836 8076  C:\Windows\System32\PlaySndSrv.dll - ok

16:14:10.0840 8076  [ 8A38B5E8493A9D103083B8620AC5F3A1 ] C:\Windows\System32\tdh.dll

16:14:10.0840 8076  C:\Windows\System32\tdh.dll - ok

16:14:10.0843 8076  [ 43E1054C713C48D252A1826C5E14AACA ] C:\Windows\System32\MsCtfMonitor.dll

16:14:10.0843 8076  C:\Windows\System32\MsCtfMonitor.dll - ok

16:14:10.0846 8076  [ E45051C374F845EDF3DB02A35BA13193 ] C:\Windows\System32\umb.dll

16:14:10.0846 8076  C:\Windows\System32\umb.dll - ok

16:14:10.0849 8076  [ 626A24ED1228580B9518C01930936DF9 ] C:\Program Files\Google\Update\GoogleUpdate.exe

16:14:10.0849 8076  C:\Program Files\Google\Update\GoogleUpdate.exe - ok

16:14:10.0852 8076  [ C6DA42ADA0C5FC8CB05744229D632B47 ] C:\Windows\System32\msutb.dll

16:14:10.0852 8076  C:\Windows\System32\msutb.dll - ok

16:14:10.0856 8076  [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll

16:14:10.0856 8076  C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll - ok

16:14:10.0859 8076  [ 63396CBB1365769D520E0FD89C2419F2 ] C:\Windows\System32\localspl.dll

16:14:10.0859 8076  C:\Windows\System32\localspl.dll - ok

16:14:10.0861 8076  [ 25532414A7A088553527A75B31DF0592 ] C:\Program Files\Mozilla Firefox\firefox.exe

16:14:10.0861 8076  C:\Program Files\Mozilla Firefox\firefox.exe - ok

16:14:10.0865 8076  [ C2B5C7B5ECE593EB059FF1099F3DCC28 ] C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

16:14:10.0865 8076  C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe - ok

16:14:10.0868 8076  [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

16:14:10.0868 8076  C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

16:14:10.0872 8076  [ F4E1AA5D59C849A4AB47E895DC76B9C8 ] C:\Windows\System32\sfc.dll

16:14:10.0872 8076  C:\Windows\System32\sfc.dll - ok

16:14:10.0875 8076  [ E6F1B2C97D6E21B51A7CC18E48A689D8 ] C:\Windows\System32\hpinksts8911LM.dll

16:14:10.0875 8076  C:\Windows\System32\hpinksts8911LM.dll - ok

16:14:10.0878 8076  [ 35F376253F687BDE63976CCB3F2108CA ] C:\Windows\System32\drivers\bowser.sys

16:14:10.0878 8076  C:\Windows\System32\drivers\bowser.sys - ok

16:14:10.0881 8076  [ 9FF47CD8A3787C8FD3CDFE40441C722E ] C:\Program Files\Google\Update\1.3.21.123\goopdate.dll

16:14:10.0881 8076  C:\Program Files\Google\Update\1.3.21.123\goopdate.dll - ok

16:14:10.0885 8076  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] C:\Windows\System32\drivers\mpsdrv.sys

16:14:10.0885 8076  C:\Windows\System32\drivers\mpsdrv.sys - ok

16:14:10.0888 8076  [ 5DE62C6E9108F14F6794060A9BDECAEC ] C:\Windows\System32\MPSSVC.dll

16:14:10.0888 8076  C:\Windows\System32\MPSSVC.dll - ok

16:14:10.0891 8076  [ 82CEA0395524AACFEB58BA1448E8325C ] C:\Windows\System32\drivers\mrxdav.sys

16:14:10.0891 8076  C:\Windows\System32\drivers\mrxdav.sys - ok

16:14:10.0894 8076  [ 39925B438268F78B43EE1AA91D3A0486 ] C:\Windows\System32\nitrolocalmon.dll

16:14:10.0894 8076  C:\Windows\System32\nitrolocalmon.dll - ok

16:14:10.0898 8076  [ 5CBDC1CF7A22D65711F05A1E3B7F734E ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll

16:14:10.0898 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll - ok

16:14:10.0901 8076  [ 0745D6EAD386710110817FBEC03F5161 ] C:\Windows\System32\wfapigp.dll

16:14:10.0901 8076  C:\Windows\System32\wfapigp.dll - ok

16:14:10.0904 8076  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] C:\Windows\System32\drivers\mrxsmb.sys

16:14:10.0904 8076  C:\Windows\System32\drivers\mrxsmb.sys - ok

16:14:10.0907 8076  [ 4FCCB34D793B116423209C0F8B7A3B03 ] C:\Windows\System32\drivers\mrxsmb10.sys

16:14:10.0908 8076  C:\Windows\System32\drivers\mrxsmb10.sys - ok

16:14:10.0911 8076  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] C:\Windows\System32\drivers\mrxsmb20.sys

16:14:10.0911 8076  C:\Windows\System32\drivers\mrxsmb20.sys - ok

16:14:10.0914 8076  [ FF33AFF99564B1AA534F58868CBE41EF ] C:\Windows\System32\drivers\srv2.sys

16:14:10.0914 8076  C:\Windows\System32\drivers\srv2.sys - ok

16:14:10.0917 8076  [ CD6DA5770CAE9D5E6E86722E17B442E0 ] C:\Windows\System32\d3d8thk.dll

16:14:10.0917 8076  C:\Windows\System32\d3d8thk.dll - ok

16:14:10.0920 8076  [ 9558DAA1DB859250A677CCE97B048151 ] C:\Windows\System32\hpz3l5ha.dll

16:14:10.0920 8076  C:\Windows\System32\hpz3l5ha.dll - ok

16:14:10.0923 8076  [ 293C5CCD99D332ECC94637FEDA38D1F2 ] C:\Windows\System32\TMM.dll

16:14:10.0923 8076  C:\Windows\System32\TMM.dll - ok

16:14:10.0926 8076  [ 6FE5C4B61EC85D746ADFA9FFF8C2AC58 ] C:\Windows\System32\HPZ3LLHN.DLL

16:14:10.0926 8076  C:\Windows\System32\HPZ3LLHN.DLL - ok

16:14:10.0930 8076  [ C52CE534397E1D3A442FB4C88A3CBE42 ] C:\Windows\System32\msonpmon.dll

16:14:10.0930 8076  C:\Windows\System32\msonpmon.dll - ok

16:14:10.0933 8076  [ D922592AB65C5D9B88B30B4510A3464E ] C:\Windows\System32\cscapi.dll

16:14:10.0933 8076  C:\Windows\System32\cscapi.dll - ok

16:14:10.0936 8076  [ 87F65295B03C3EF3282F95DBBA8D79B8 ] C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll

16:14:10.0936 8076  C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll - ok

16:14:10.0940 8076  [ 9CD9E2A251CDC2B92444A64DA20415A8 ] C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll

16:14:10.0940 8076  C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll - ok

16:14:10.0943 8076  [ E223D2851906B84F52E1B75EA16198F9 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll

16:14:10.0943 8076  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll - ok

16:14:10.0946 8076  [ 41987F9FC0E61ADF54F581E15029AD91 ] C:\Windows\System32\drivers\srv.sys

16:14:10.0946 8076  C:\Windows\System32\drivers\srv.sys - ok

16:14:10.0949 8076  [ 1311171CF8F6D2954441EF2A42693035 ] C:\Windows\System32\WsmRes.dll

16:14:10.0949 8076  C:\Windows\System32\WsmRes.dll - ok

16:14:10.0952 8076  [ BB0EB921877A1A7EF15AE2D97A71CBA9 ] C:\Windows\System32\tcpmon.dll

16:14:10.0953 8076  C:\Windows\System32\tcpmon.dll - ok

16:14:10.0956 8076  [ 83F2509338423B3B338D27084B241C57 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll

16:14:10.0956 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll - ok

16:14:10.0959 8076  [ E230F3776F373F4C5E788794B53101E4 ] C:\Windows\System32\plasrv.exe

16:14:10.0959 8076  C:\Windows\System32\plasrv.exe - ok

16:14:10.0962 8076  [ AF24A9DF84637BF9858EC6FB88EBA7B2 ] C:\Windows\System32\snmpapi.dll

16:14:10.0962 8076  C:\Windows\System32\snmpapi.dll - ok

16:14:10.0966 8076  [ 1EDE113859276E4B0F19B80F39E2CC95 ] C:\Windows\System32\wsnmp32.dll

16:14:10.0966 8076  C:\Windows\System32\wsnmp32.dll - ok

16:14:10.0969 8076  [ 024528E25BBE8768536861EA09BE1672 ] C:\Windows\System32\msxml6.dll

16:14:10.0969 8076  C:\Windows\System32\msxml6.dll - ok

16:14:10.0973 8076  [ 5CAAE5333EF36DB4A8D294418AB37E80 ] C:\Windows\System32\p2pcollab.dll

16:14:10.0973 8076  C:\Windows\System32\p2pcollab.dll - ok

16:14:10.0977 8076  [ EBC6F0BDF650CB2EDD49080F319900C0 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL

16:14:10.0977 8076  C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL - ok

16:14:10.0980 8076  [ B7F5D1A99E8A7A0A232640908607C315 ] C:\Windows\System32\nvd3dum.dll

16:14:10.0980 8076  C:\Windows\System32\nvd3dum.dll - ok

16:14:10.0984 8076  [ 167AC31450C0C53A01FA1491E94D7678 ] C:\Windows\System32\shdocvw.dll

16:14:10.0984 8076  C:\Windows\System32\shdocvw.dll - ok

16:14:10.0987 8076  [ AE5A69F44C1F97EDC83237FC0B29B6FB ] C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe

16:14:10.0987 8076  C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe - ok

16:14:10.0992 8076  [ 38F2958163C080590A42F7C66E89CDA1 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL

16:14:10.0992 8076  C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL - ok

16:14:10.0996 8076  [ B4F5DE3DAD8E6B97272F45DB97674878 ] C:\Windows\System32\mgmtapi.dll

16:14:10.0996 8076  C:\Windows\System32\mgmtapi.dll - ok

16:14:10.0999 8076  [ 5091452DC719281CF1DD69367E13B494 ] C:\Windows\System32\tcpmib.dll

16:14:10.0999 8076  C:\Windows\System32\tcpmib.dll - ok

16:14:11.0002 8076  [ 18BA660C7022422A9B3BE14C37D7401E ] C:\Windows\System32\TBTMon.dll

16:14:11.0002 8076  C:\Windows\System32\TBTMon.dll - ok

16:14:11.0006 8076  [ 4504819D18FAC09B6108D8728467E5B2 ] C:\Windows\System32\browseui.dll

16:14:11.0006 8076  C:\Windows\System32\browseui.dll - ok

16:14:11.0009 8076  [ E015C3AF4EBEFCD47BB05781126898BD ] C:\Windows\System32\tbtmon98Language.dll

16:14:11.0009 8076  C:\Windows\System32\tbtmon98Language.dll - ok

16:14:11.0013 8076  [ 756D84D65E727B60F149D8058720521A ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll

16:14:11.0013 8076  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll - ok

16:14:11.0016 8076  [ AF5112A454DEE214A44C070E2A59042C ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll

16:14:11.0016 8076  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll - ok

16:14:11.0020 8076  [ D241900C8E03F850E862664F3FBEB5B6 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll

16:14:11.0020 8076  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll - ok

16:14:11.0025 8076  [ 0BF0BB276F17B6AD61A8694D2551EC28 ] C:\Windows\System32\usbmon.dll

16:14:11.0025 8076  C:\Windows\System32\usbmon.dll - ok

16:14:11.0028 8076  [ 0EB1CC5EBFCAAB7DBAEE881E2887F7F9 ] C:\Windows\System32\WSDMon.dll

16:14:11.0028 8076  C:\Windows\System32\WSDMon.dll - ok

16:14:11.0031 8076  [ F4F6C58D079620E909323DB1096C34BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll

16:14:11.0031 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll - ok

16:14:11.0035 8076  [ D81CF1DD857538AA2E5E9CB0AA7FBF67 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll

16:14:11.0035 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll - ok

16:14:11.0038 8076  [ AD48183027CAFCEBC322CB9CAC60F9B8 ] C:\Windows\System32\WSDApi.dll

16:14:11.0038 8076  C:\Windows\System32\WSDApi.dll - ok

16:14:11.0042 8076  [ F6C5BF92697C25EF89F0ABAA5F36E517 ] C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL

16:14:11.0042 8076  C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL - ok

16:14:11.0045 8076  [ 52CB0185C73E1BA86CC7F726F22523C3 ] C:\Windows\System32\msjetoledb40.dll

16:14:11.0045 8076  C:\Windows\System32\msjetoledb40.dll - ok

16:14:11.0048 8076  [ 7CE1E4240F9FA41EE85683B9EEAB8767 ] C:\Windows\System32\msjet40.dll

16:14:11.0049 8076  C:\Windows\System32\msjet40.dll - ok

16:14:11.0052 8076  [ 1A09CB187440993FA5E24DE1EEB7B916 ] C:\Windows\System32\cfgmgr32.dll

16:14:11.0052 8076  C:\Windows\System32\cfgmgr32.dll - ok

16:14:11.0055 8076  [ 4EDA94333BDB75B1BC0A7610BED34F00 ] C:\Windows\System32\fundisc.dll

16:14:11.0055 8076  C:\Windows\System32\fundisc.dll - ok

16:14:11.0059 8076  [ F86293D93760C70ADF4F19E66E3FA5E8 ] C:\Windows\System32\httpapi.dll

16:14:11.0059 8076  C:\Windows\System32\httpapi.dll - ok

16:14:11.0062 8076  [ 73FD66B14D3C4252F7A524B8836A4359 ] C:\Windows\System32\mstask.dll

16:14:11.0062 8076  C:\Windows\System32\mstask.dll - ok

16:14:11.0065 8076  [ 6ABD253226770EAE1292B4C945ED4B4B ] C:\Windows\System32\msxml3.dll

16:14:11.0065 8076  C:\Windows\System32\msxml3.dll - ok

16:14:11.0068 8076  [ 7A623F6B4C51F6F2BC1A31D5787FC0A7 ] C:\Windows\System32\uDWM.dll

16:14:11.0068 8076  C:\Windows\System32\uDWM.dll - ok

16:14:11.0071 8076  [ E0B787702BAF0CF4CEDF8F61B71F8383 ] C:\Windows\System32\mswstr10.dll

16:14:11.0071 8076  C:\Windows\System32\mswstr10.dll - ok

16:14:11.0074 8076  [ 14E4470BF8ACA69A85D741BA99F75F96 ] C:\Windows\System32\EhStorShell.dll

16:14:11.0074 8076  C:\Windows\System32\EhStorShell.dll - ok

16:14:11.0078 8076  [ 60D8CA76CCD1FCDC393C057949E5A89F ] C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll

16:14:11.0078 8076  C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll - ok

16:14:11.0081 8076  [ 9371540C7231BC156501AB933F269762 ] C:\Windows\System32\msjint40.dll

16:14:11.0081 8076  C:\Windows\System32\msjint40.dll - ok

16:14:11.0084 8076  [ 534FD777CB2684392411CE7BCBBDF78E ] C:\Windows\System32\msjter40.dll

16:14:11.0085 8076  C:\Windows\System32\msjter40.dll - ok

16:14:11.0088 8076  [ 7D1A10A1F3562CCA1FD38E9BADA8FEC0 ] C:\Windows\System32\perfos.dll

16:14:11.0088 8076  C:\Windows\System32\perfos.dll - ok

16:14:11.0091 8076  [ D0E39177C896D2F8191A9C96636276DF ] C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll

16:14:11.0091 8076  C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll - ok

16:14:11.0094 8076  [ BDE89AB6F15F0093A2A7861D1FC413ED ] C:\Windows\System32\QAGENT.DLL

16:14:11.0094 8076  C:\Windows\System32\QAGENT.DLL - ok

16:14:11.0097 8076  [ 9104EDD1D3BF91AD079A73FBB515E492 ] C:\Windows\System32\perfdisk.dll

16:14:11.0097 8076  C:\Windows\System32\perfdisk.dll - ok

16:14:11.0101 8076  [ 951F36219C7384C6ED6C9F44D45C5235 ] C:\Program Files\Common Files\System\Ole DB\oledb32.dll

16:14:11.0101 8076  C:\Program Files\Common Files\System\Ole DB\oledb32.dll - ok

16:14:11.0104 8076  [ 111C47816F39A91EAAA18DA0A54E8E63 ] C:\Windows\System32\imageres.dll

16:14:11.0104 8076  C:\Windows\System32\imageres.dll - ok

16:14:11.0107 8076  [ 801DECF3A583C270E5C398FCD082E3DD ] C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL

16:14:11.0107 8076  C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL - ok

16:14:11.0109 8076  [ 769D027B977CED05658C85E698D3C5B1 ] C:\Windows\System32\QUTIL.DLL

16:14:11.0109 8076  C:\Windows\System32\QUTIL.DLL - ok

16:14:11.0113 8076  [ F348280907B38FDBDB3CEF55D456E149 ] C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

16:14:11.0113 8076  C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll - ok

16:14:11.0116 8076  [ 554ED6988E44FDF18941429E8B2CB652 ] C:\Windows\System32\msdart.dll

16:14:11.0116 8076  C:\Windows\System32\msdart.dll - ok

16:14:11.0119 8076  [ C90B296C43EDD9DD1751AD3B590ACDE6 ] C:\Windows\System32\win32spl.dll

16:14:11.0119 8076  C:\Windows\System32\win32spl.dll - ok

16:14:11.0123 8076  [ 892125B60BA6C2A66F485A89C4A6B918 ] C:\Program Files\Common Files\System\Ole DB\oledb32r.dll

16:14:11.0123 8076  C:\Program Files\Common Files\System\Ole DB\oledb32r.dll - ok

16:14:11.0126 8076  [ C4A8C9D346C7943693F301C205CBA003 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL

16:14:11.0126 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL - ok

16:14:11.0130 8076  [ 79B0463638C7ED08DB71FE3437C95A44 ] C:\Windows\System32\msjtes40.dll

16:14:11.0130 8076  C:\Windows\System32\msjtes40.dll - ok

16:14:11.0134 8076  [ 4BF053944E973C073339BE841C9ECF28 ] C:\Windows\System32\netrap.dll

16:14:11.0134 8076  C:\Windows\System32\netrap.dll - ok

16:14:11.0137 8076  [ E340845C8E96D107C36420065D7A5733 ] C:\Windows\System32\printcom.dll

16:14:11.0137 8076  C:\Windows\System32\printcom.dll - ok

16:14:11.0140 8076  [ EC760B0B76A4353DE49D66520EB2141F ] C:\Windows\System32\SensApi.dll

16:14:11.0140 8076  C:\Windows\System32\SensApi.dll - ok

16:14:11.0143 8076  [ 4995B131F6B4DA0F8F7D2191E37054BD ] C:\Windows\System32\vbajet32.dll

16:14:11.0143 8076  C:\Windows\System32\vbajet32.dll - ok

16:14:11.0147 8076  [ B9D5809CE39D2473E36EBC66860C14D1 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll

16:14:11.0147 8076  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll - ok

16:14:11.0150 8076  [ 2E8E30F3B318A9FDA5A2485723F4C2B3 ] C:\Windows\System32\inetpp.dll

16:14:11.0150 8076  C:\Windows\System32\inetpp.dll - ok

16:14:11.0153 8076  [ 16FF3D15D12BFBB0B805FFE71BE3FA15 ] C:\Windows\System32\ntprint.dll

16:14:11.0153 8076  C:\Windows\System32\ntprint.dll - ok

16:14:11.0157 8076  [ B5EB6A3ED3B8918091FE2539374E25E7 ] C:\PROGRA~1\NORTON~1\tpEvent.dll

16:14:11.0157 8076  C:\PROGRA~1\NORTON~1\tpEvent.dll - ok

16:14:11.0161 8076  [ 254C64B570A99F10952ACA71F24A2236 ] C:\Windows\System32\expsrv.dll

16:14:11.0161 8076  C:\Windows\System32\expsrv.dll - ok

16:14:11.0165 8076  [ F2AD56AC3F8A806A70847A15B21F333A ] C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll

16:14:11.0165 8076  C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll - ok

16:14:11.0169 8076  [ 75B8E3EE58004C378B00B7EEE15DEC44 ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll

16:14:11.0169 8076  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll - ok

16:14:11.0172 8076  [ 7483E59A7A7A7891ACD4C63EE97D1BF1 ] C:\Windows\System32\mswdat10.dll

16:14:11.0172 8076  C:\Windows\System32\mswdat10.dll - ok

16:14:11.0175 8076  [ BA7C3E9DD6B1A632124C8659E8014028 ] C:\Windows\System32\perfctrs.dll

16:14:11.0176 8076  C:\Windows\System32\perfctrs.dll - ok

16:14:11.0179 8076  [ F917278F644BC6CED095BFAE4D03CFA0 ] C:\Program Files\Common Files\Symantec Shared\QBackup.dll

16:14:11.0179 8076  C:\Program Files\Common Files\Symantec Shared\QBackup.dll - ok

16:14:11.0183 8076  [ 7BEB17B323267811380BD66E710C1FF6 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll

16:14:11.0183 8076  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll - ok

16:14:11.0186 8076  [ CE8617599BFD41FF3A7C04B60087AD2D ] C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll

16:14:11.0186 8076  C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll - ok

16:14:11.0190 8076  [ EFDCD9B1F546AD59A6730712689F2F3B ] C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll

16:14:11.0190 8076  C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll - ok

16:14:11.0193 8076  [ CB18CBE52505933F679FF2B4A44804D7 ] C:\Program Files\Norton 360\tpDataCl.dll

16:14:11.0193 8076  C:\Program Files\Norton 360\tpDataCl.dll - ok

16:14:11.0196 8076  [ 963BBD53FA2091325A2EF3E3CF46F575 ] C:\Program Files\Norton 360\tpCntnr.dll

16:14:11.0196 8076  C:\Program Files\Norton 360\tpCntnr.dll - ok

16:14:11.0200 8076  [ 3BA25F0A6B00A384F85E2798AAF5DF0F ] C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll

16:14:11.0200 8076  C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll - ok

16:14:11.0203 8076  [ 12BCF4DAD8E5A1B3D5FA7AB4A79DA105 ] C:\Windows\System32\sfc_os.dll

16:14:11.0203 8076  C:\Windows\System32\sfc_os.dll - ok

16:14:11.0206 8076  [ 5E5BDF511A133BFEC9F231B994376154 ] C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll

16:14:11.0206 8076  C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll - ok

16:14:11.0210 8076  [ E335EC58D7089A72D75C2BD6B62741CB ] C:\Program Files\Norton 360\coDataPr.dll

16:14:11.0210 8076  C:\Program Files\Norton 360\coDataPr.dll - ok

16:14:11.0213 8076  [ 632B4F23EA39F03AF869E4087B445257 ] C:\Program Files\Norton 360\07\01\coDataPr.loc

16:14:11.0213 8076  C:\Program Files\Norton 360\07\01\coDataPr.loc - ok

16:14:11.0216 8076  [ 9FE47D87A9256E6868404F1D49CA6BC6 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll

16:14:11.0216 8076  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll - ok

16:14:11.0220 8076  [ D9DFCF094A370025FFB7761D0EFF8500 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll

16:14:11.0220 8076  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll - ok

16:14:11.0224 8076  [ 7103BC76935E601D82700B44B1064F27 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll

16:14:11.0224 8076  C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll - ok

16:14:11.0228 8076  [ 2A97A941CFDF7AC676371922C16B1161 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll

16:14:11.0228 8076  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll - ok

16:14:11.0232 8076  [ 09D06B8DCD3823AEA29D8A5597AACA74 ] C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll

16:14:11.0232 8076  C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll - ok

16:14:11.0236 8076  [ BF79C970B8FA983C8AF57EE1481B8416 ] C:\Program Files\Norton 360\tpBTPlg.dll

16:14:11.0236 8076  C:\Program Files\Norton 360\tpBTPlg.dll - ok

16:14:11.0240 8076  [ E89B10B957AC45AA53301114E415A988 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll

16:14:11.0240 8076  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll - ok

16:14:11.0243 8076  [ B16EE7AE0C2EBDBBF7058899C7387A1B ] C:\Program Files\Norton 360\SetEvtHp.dll

16:14:11.0243 8076  C:\Program Files\Norton 360\SetEvtHp.dll - ok

16:14:11.0247 8076  [ 88C5DD2F2283FD14D8EBE7ED3EE895C4 ] C:\Program Files\Norton 360\NTPFW.DLL

16:14:11.0247 8076  C:\Program Files\Norton 360\NTPFW.DLL - ok

16:14:11.0250 8076  [ 7C6505EA598E58099D3B7E1F70426864 ] C:\Windows\System32\drivers\symredrv.sys

16:14:11.0250 8076  C:\Windows\System32\drivers\symredrv.sys - ok

16:14:11.0253 8076  [ 08578F3CA5365F896D90CE2BF97FD000 ] C:\Windows\System32\IconCodecService.dll

16:14:11.0253 8076  C:\Windows\System32\IconCodecService.dll - ok

16:14:11.0256 8076  [ 9A6A653ADF28D9D69670B48F535E6B90 ] C:\Windows\System32\runonce.exe

16:14:11.0256 8076  C:\Windows\System32\runonce.exe - ok

16:14:11.0260 8076  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] C:\Windows\System32\drivers\symdns.sys

16:14:11.0260 8076  C:\Windows\System32\drivers\symdns.sys - ok

16:14:11.0263 8076  [ A0EA9D273889E53CFAABF2444692CCBF ] C:\Windows\System32\drivers\symfw.sys

16:14:11.0263 8076  C:\Windows\System32\drivers\symfw.sys - ok

16:14:11.0266 8076  [ C94EACA4B522012EE0691F1E79C42A7D ] C:\Windows\System32\drivers\symndisv.sys

16:14:11.0266 8076  C:\Windows\System32\drivers\symndisv.sys - ok

16:14:11.0269 8076  [ 9B338BF4FD5353FE812516D057430EE3 ] C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL

16:14:11.0269 8076  C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL - ok

16:14:11.0273 8076  [ 74F26FC01B180D4A99A168ED69C30A53 ] C:\Windows\System32\cmd.exe

16:14:11.0273 8076  C:\Windows\System32\cmd.exe - ok

16:14:11.0276 8076  [ A324D72A06C110152E7607745F39BFA1 ] C:\Windows\System32\netmsg.dll

16:14:11.0276 8076  C:\Windows\System32\netmsg.dll - ok

16:14:11.0279 8076  [ 452341E471D2D961229DFE0842957272 ] C:\Windows\System32\sscore.dll

16:14:11.0279 8076  C:\Windows\System32\sscore.dll - ok

16:14:11.0282 8076  [ D333058925CE305E39DE8D5AD2B52A46 ] C:\Windows\System32\clusapi.dll

16:14:11.0282 8076  C:\Windows\System32\clusapi.dll - ok

16:14:11.0286 8076  [ 1F5AFD468EB5E09E9ED75A087529EAB5 ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll

16:14:11.0286 8076  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll - ok

16:14:11.0290 8076  [ 6468C3FF6D0C7874FA8C619AF3E23B22 ] C:\Windows\System32\activeds.dll

16:14:11.0290 8076  C:\Windows\System32\activeds.dll - ok

16:14:11.0294 8076  [ 6080A176D09435FC8E6E800996656E18 ] C:\Windows\System32\conime.exe

16:14:11.0294 8076  C:\Windows\System32\conime.exe - ok

16:14:11.0297 8076  [ 0BA3F31E2B4D8D99DF8DD19E81155374 ] C:\Windows\System32\ieframe.dll

16:14:11.0297 8076  C:\Windows\System32\ieframe.dll - ok

16:14:11.0300 8076  [ E9B9C1B98C8D6D48407E1C1203EAC659 ] C:\Windows\System32\adsldpc.dll

16:14:11.0300 8076  C:\Windows\System32\adsldpc.dll - ok

16:14:11.0304 8076  [ 93E317D7AD783D8EAEE2E3500BFE889D ] C:\Windows\System32\credui.dll

16:14:11.0304 8076  C:\Windows\System32\credui.dll - ok

16:14:11.0308 8076  [ B9F3FF52B84FD9E3CAFB29B8EE385E5B ] C:\Windows\System32\resutils.dll

16:14:11.0308 8076  C:\Windows\System32\resutils.dll - ok

16:14:11.0312 8076  [ 4E8B1E9567B3CD76CA628C9026AE1125 ] C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll

16:14:11.0312 8076  C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll - ok

16:14:11.0316 8076  [ 93FEF3A5EB8965CB19F9820D5944D3E2 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll

16:14:11.0316 8076  C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll - ok

16:14:11.0319 8076  [ 1778EBA872274C1226D869CD9486847E ] C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:14:11.0319 8076  C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe - ok

16:14:11.0322 8076  [ 17FC3EDA0162F513E858B8C8FA7FA6E0 ] C:\Windows\System32\vssapi.dll

16:14:11.0322 8076  C:\Windows\System32\vssapi.dll - ok

16:14:11.0326 8076  [ F93C1DB10E59FAADC673D2607F910B92 ] C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll

16:14:11.0326 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll - ok

16:14:11.0329 8076  [ 52E129522C1775DBB8CC252E7A0655C7 ] C:\Windows\System32\taskschd.dll

16:14:11.0329 8076  C:\Windows\System32\taskschd.dll - ok

16:14:11.0332 8076  [ 6950BBCEB21F9C3CB3B52E90960109C3 ] C:\Windows\System32\devenum.dll

16:14:11.0332 8076  C:\Windows\System32\devenum.dll - ok

16:14:11.0335 8076  [ E7D0F91E44D9D3B2116FA549BDCDB756 ] C:\Windows\System32\wdscore.dll

16:14:11.0335 8076  C:\Windows\System32\wdscore.dll - ok

16:14:11.0339 8076  [ 1DFC366D2154EF2B381A7F2CB165C7F4 ] C:\Windows\System32\diagperf.dll

16:14:11.0339 8076  C:\Windows\System32\diagperf.dll - ok

16:14:11.0342 8076  [ B8AEFF80ABD57E6ABC6A46EAC7F4515F ] C:\Windows\System32\msdmo.dll

16:14:11.0342 8076  C:\Windows\System32\msdmo.dll - ok

16:14:11.0345 8076  [ 8795FD92B624648DABE7B75129EF8002 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:14:11.0345 8076  C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe - ok

16:14:11.0348 8076  [ E1E52D56D266C2741058BA6611970D0C ] C:\Windows\System32\qdvd.dll

16:14:11.0348 8076  C:\Windows\System32\qdvd.dll - ok

16:14:11.0351 8076  [ EFD278F8129EE12F1D4AE0250494B791 ] C:\Windows\System32\dxva2.dll

16:14:11.0351 8076  C:\Windows\System32\dxva2.dll - ok

16:14:11.0355 8076  [ 861797D3C83A6EBA05FB2C63B1A45E82 ] C:\Windows\System32\ksproxy.ax

16:14:11.0355 8076  C:\Windows\System32\ksproxy.ax - ok

16:14:11.0358 8076  [ DC3AE9F1554DCD97F90983DDBDACD83D ] C:\Windows\System32\vsstrace.dll

16:14:11.0358 8076  C:\Windows\System32\vsstrace.dll - ok

16:14:11.0360 8076  [ 09469B8EDD2755143FDA06867AAD7E73 ] C:\Windows\System32\cryptnet.dll

16:14:11.0360 8076  C:\Windows\System32\cryptnet.dll - ok

16:14:11.0364 8076  [ 012E22681A63D2BF405E6F15EF80BFD3 ] C:\Windows\System32\vidcap.ax

16:14:11.0364 8076  C:\Windows\System32\vidcap.ax - ok

16:14:11.0366 8076  [ 5F6359756DBCC901276BC2B62460FA64 ] C:\Windows\System32\quartz.dll

16:14:11.0366 8076  C:\Windows\System32\quartz.dll - ok

16:14:11.0370 8076  [ A14F25F62E84C6B4A178A1CFD9B47222 ] C:\Windows\System32\qcap.dll

16:14:11.0370 8076  C:\Windows\System32\qcap.dll - ok

16:14:11.0373 8076  [ 24BBD1F5375FC6CCB47A50811CD3A8A2 ] C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll

16:14:11.0373 8076  C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll - ok

16:14:11.0376 8076  [ EACACA0F2FF4CC54A909E3C5721FCDE8 ] C:\Windows\System32\msvfw32.dll

16:14:11.0376 8076  C:\Windows\System32\msvfw32.dll - ok

16:14:11.0380 8076  [ 418B3754F644C9ADF8B5312654B5FCFA ] C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll

16:14:11.0380 8076  C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll - ok

16:14:11.0383 8076  [ 8F87B4A94164621D4BFC2D4BFB6CF017 ] C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll

16:14:11.0383 8076  C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll - ok

16:14:11.0387 8076  [ 7646FDBF9E5BA332BB42B0B96495277E ] C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll

16:14:11.0387 8076  C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll - ok

16:14:11.0390 8076  [ E97EFFC4472F8FF5896B33FFD88EC9E6 ] C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll

16:14:11.0390 8076  C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll - ok

16:14:11.0394 8076  [ 4B88BD98983A2CD9BE90F368B4F59F0A ] C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll

16:14:11.0394 8076  C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll - ok

16:14:11.0397 8076  [ 2DB70167C13F2339A63E694291FD1BFD ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:14:11.0397 8076  C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe - ok

16:14:11.0400 8076  [ 2FCC8C7E5B59996CBCBEB0904B927148 ] C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll

16:14:11.0400 8076  C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll - ok

16:14:11.0404 8076  [ 8881574868E648689B7AA88A88716E17 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:14:11.0404 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe - ok

16:14:11.0408 8076  [ BAB2355B01458F6BBF77D2AD4967D8F8 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll

16:14:11.0408 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll - ok

16:14:11.0412 8076  [ 7BA720A3E41BA5B56FAEBAFE1D326F8E ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll

16:14:11.0412 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll - ok

16:14:11.0415 8076  [ F5EF52B0BF4F0A878F2E992F9EF74C8F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll

16:14:11.0415 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll - ok

16:14:11.0419 8076  [ 95086E32A109D966C58225EFDE421874 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll

16:14:11.0419 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll - ok

16:14:11.0423 8076  [ 7634010AAB56883F75EFD6CA0D433CAB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so

16:14:11.0423 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so - ok

16:14:11.0426 8076  [ 79F2A39CE043FF4F6F08CADDD94D3022 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so

16:14:11.0426 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so - ok

16:14:11.0430 8076  [ BF1B1795180EFBCAE7E1D79E4E86056D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so

16:14:11.0430 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so - ok

16:14:11.0434 8076  [ FB08B28DA062D00142386BE5D1FA4E97 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so

16:14:11.0434 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so - ok

16:14:11.0438 8076  [ AA6E18DE261A1614E1C8B6F552E39AFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so

16:14:11.0438 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so - ok

16:14:11.0442 8076  [ 0ECC9904B6384F713643640FFEA56990 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so

16:14:11.0442 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so - ok

16:14:11.0445 8076  [ 5CD6753CCE866006DD4E0F567EBCA1F4 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so

16:14:11.0445 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so - ok

16:14:11.0449 8076  [ EFC3817C0A178DA0EDA14570B1B10C75 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so

16:14:11.0449 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so - ok

16:14:11.0452 8076  [ 9F64EC455CD232566D85870836A0200D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so

16:14:11.0452 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so - ok

16:14:11.0456 8076  [ 471EB03D1C1485A145062CA7CFCB8561 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so

16:14:11.0456 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so - ok

16:14:11.0460 8076  [ 82EF0C0B5C8698E812100E3315612FE3 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so

16:14:11.0460 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so - ok

16:14:11.0463 8076  [ FCDA9E17440B42EC01B22F49A022967F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so

16:14:11.0463 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so - ok

16:14:11.0467 8076  [ CC1F352A783CF8A29A05E9F30D94A134 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so

16:14:11.0467 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so - ok

16:14:11.0471 8076  [ 1478F7386CCFCE9A65A3B911EB57AABC ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so

16:14:11.0471 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so - ok

16:14:11.0474 8076  [ E085207B69D06BA56AFB627B1B7FECF2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so

16:14:11.0474 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so - ok

16:14:11.0478 8076  [ E128104681660D5F9867A95E83AD8CA5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so

16:14:11.0478 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so - ok

16:14:11.0481 8076  [ 4992F7ABA77F4DB94B42D2F53B6D2547 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so

16:14:11.0481 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so - ok

16:14:11.0485 8076  [ 8300C329344DA7CC6D87A338F86FC024 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll

16:14:11.0485 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll - ok

16:14:11.0489 8076  [ 54798EEFB9ED48C5F2D7A26BC83F1281 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so

16:14:11.0489 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so - ok

16:14:11.0492 8076  [ F5F8B9B81C58F9AE0C34075BC6446271 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so

16:14:11.0492 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so - ok

16:14:11.0496 8076  [ 4A1DE9A42015DAB7C3C4DA5D8C1C36FA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so

16:14:11.0496 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so - ok

16:14:11.0500 8076  [ 3FD4AA228F8CCAA86581B16B8B13DAFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so

16:14:11.0500 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so - ok

16:14:11.0503 8076  [ 29C86E7A89870CAF9E336BF46670D2D5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so

16:14:11.0503 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so - ok

16:14:11.0507 8076  [ D2033210D4DA9E9CE7670DFF45D7101B ] C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe

16:14:11.0507 8076  C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe - ok

16:14:11.0511 8076  [ 5E3A949B03028F6408A2EC98909C1917 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so

16:14:11.0511 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so - ok

16:14:11.0514 8076  [ 204A73A56751C68C6031E9D5D611EC98 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

16:14:11.0514 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe - ok

16:14:11.0518 8076  [ 0F7F7D875290CCF8C41FAE62F8B3CC82 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so

16:14:11.0518 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so - ok

16:14:11.0521 8076  [ 99ED733F614660EB32199BF889DFB7E2 ] C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:14:11.0521 8076  C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll - ok

16:14:11.0525 8076  [ B764114732DCAF9F6943516843116792 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so

16:14:11.0525 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so - ok

16:14:11.0528 8076  [ 0D9525791E5DB7762F7A92F4B005AACB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so

16:14:11.0528 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so - ok

16:14:11.0532 8076  [ F52548AA0312879A5E8D6DCEC6502AE1 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so

16:14:11.0532 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so - ok

16:14:11.0536 8076  [ C0E7898090D81772EA927E9A3C71817C ] C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll

16:14:11.0536 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll - ok

16:14:11.0539 8076  [ CF061B2D55421E7C2AE6953BA9185332 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so

16:14:11.0540 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so - ok

16:14:11.0543 8076  [ D86C5C506766C5E7544B9C738BA7830D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so

16:14:11.0543 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so - ok

16:14:11.0547 8076  [ 7A99E3E80B28E1E21943654B461E9074 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so

16:14:11.0547 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so - ok

16:14:11.0550 8076  [ 9AF5EA601C06E5C64F9F006E050B931E ] C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll

16:14:11.0550 8076  C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll - ok

16:14:11.0554 8076  [ 27EA34926E31D8C5FA221C19BFD1F4E9 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so

16:14:11.0554 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so - ok

16:14:11.0558 8076  [ 7A07BD7F1077AE67526B97A8896716D2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so

16:14:11.0558 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so - ok

16:14:11.0561 8076  [ 64C66D87575B550D29216BCAE6111984 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so

16:14:11.0561 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so - ok

16:14:11.0565 8076  [ CE146AB004F39F0298B5E57FEB4722E2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll

16:14:11.0565 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll - ok

16:14:11.0568 8076  [ 54951309B2B9CA6FB45E450ACAC69B10 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll

16:14:11.0568 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll - ok

16:14:11.0572 8076  [ E52BD5E1063515F3205325D277B8B6EA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll

16:14:11.0572 8076  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll - ok

16:14:11.0576 8076  [ 9039717A906DA0AE38420918801D9AB3 ] C:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:14:11.0576 8076  C:\Program Files\Common Files\LightScribe\LSSrvc.exe - ok

16:14:11.0579 8076  [ 30F0DC266B46118E9FBCF5B2A30EB1DB ] C:\Windows\System32\wbem\wbemprox.dll

16:14:11.0579 8076  C:\Windows\System32\wbem\wbemprox.dll - ok

16:14:11.0582 8076  [ 5533C95940E5B75FE89BD8CBB352189F ] C:\Program Files\Common Files\LightScribe\LSSProxy.dll

16:14:11.0582 8076  C:\Program Files\Common Files\LightScribe\LSSProxy.dll - ok

16:14:11.0585 8076  [ 74B8C2EA72D43727142D12397D5A49F9 ] C:\Windows\System32\wbemcomn.dll

16:14:11.0585 8076  C:\Windows\System32\wbemcomn.dll - ok

16:14:11.0589 8076  [ 832D44CA982AB483337CB6A3906E53EE ] C:\Program Files\Common Files\LightScribe\LSLog.dll

16:14:11.0589 8076  C:\Program Files\Common Files\LightScribe\LSLog.dll - ok

16:14:11.0593 8076  [ B05640AC812FCCB488328DF34E7F663A ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

16:14:11.0593 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe - ok

16:14:11.0596 8076  [ 254AC97C9AF4DDF3F5F57855198527B7 ] C:\Windows\System32\wermgr.exe

16:14:11.0596 8076  C:\Windows\System32\wermgr.exe - ok

16:14:11.0599 8076  [ 8BE000F9A0B0FF7194AAEFB02C9BDE99 ] C:\Windows\System32\wer.dll

16:14:11.0599 8076  C:\Windows\System32\wer.dll - ok

16:14:11.0602 8076  [ DE7F813217EC88C0A6D4D8F2F39D7949 ] C:\Windows\System32\msiltcfg.dll

16:14:11.0602 8076  C:\Windows\System32\msiltcfg.dll - ok

16:14:11.0606 8076  [ F716057C341C8A4F58142DFC8EF336EA ] C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

16:14:11.0606 8076  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - ok

16:14:11.0609 8076  [ 32C940D6BAAD78CC236BF8832D1AD9B7 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll

16:14:11.0609 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll - ok

16:14:11.0612 8076  [ B88613BE5B9939BD5DD63F9E196413AD ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll

16:14:11.0612 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll - ok

16:14:11.0615 8076  [ 0FB5AA33D26F7212963D832083CD0C5C ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll

16:14:11.0615 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll - ok

16:14:11.0619 8076  [ E31E4E9F644FBFE79DCA532D9781F71D ] C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll

16:14:11.0619 8076  C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll - ok

16:14:11.0623 8076  [ DAFDB8D555A52142DA3033AC758C899C ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll

16:14:11.0623 8076  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll - ok

16:14:11.0626 8076  [ B0FF455B1ED1BF859D24ACDB0855B985 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll

16:14:11.0626 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll - ok

16:14:11.0630 8076  [ 8CF09ABA2A3E577C71CEB321C3D66A4D ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll

16:14:11.0630 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll - ok

16:14:11.0633 8076  [ 19715A9A573DAD2521348ABC74266A48 ] C:\Windows\System32\HPZinw12.dll

16:14:11.0633 8076  C:\Windows\System32\HPZinw12.dll - ok

16:14:11.0637 8076  [ 183CBAD181DEDAC0119B2861C426AC14 ] C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:14:11.0637 8076  C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe - ok

16:14:11.0640 8076  [ F4D9ED6BD74AD7CC0BEC83C43A1CB76B ] C:\Windows\System32\ncsi.dll

16:14:11.0640 8076  C:\Windows\System32\ncsi.dll - ok

16:14:11.0644 8076  [ 01BCD91CC2B0EFDA4890F547010750BD ] C:\Windows\System32\ssdpapi.dll

16:14:11.0644 8076  C:\Windows\System32\ssdpapi.dll - ok

16:14:11.0647 8076  [ 5D32DF97B9116DDA0C75A342F5B2FFEC ] C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll

16:14:11.0647 8076  C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll - ok

16:14:11.0651 8076  [ 6349F6ED9C623B44B52EA3C63C831A92 ] C:\Windows\System32\drivers\PEAuth.sys

16:14:11.0651 8076  C:\Windows\System32\drivers\PEAuth.sys - ok

16:14:11.0654 8076  [ 84D9CAEFD4B265B66D19DC7770D1F6DC ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll

16:14:11.0654 8076  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll - ok

16:14:11.0657 8076  [ D0494460421A03CD5225CCA0059AA146 ] C:\Windows\System32\IPSECSVC.DLL

16:14:11.0657 8076  C:\Windows\System32\IPSECSVC.DLL - ok

16:14:11.0661 8076  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] C:\Windows\System32\HPZipm12.dll

16:14:11.0661 8076  C:\Windows\System32\HPZipm12.dll - ok

16:14:11.0664 8076  [ F115AF58ABE5605D7D709CBFBD83F418 ] C:\Windows\System32\PSIService.exe

16:14:11.0664 8076  C:\Windows\System32\PSIService.exe - ok

16:14:11.0667 8076  [ 42608AE9AF2641EE473A1797C25CFFC2 ] C:\Windows\System32\FwRemoteSvr.dll

16:14:11.0667 8076  C:\Windows\System32\FwRemoteSvr.dll - ok

16:14:11.0670 8076  [ 8FDA02E3E944E203E118F3DABA7C026D ] C:\Windows\System32\PSIKey.dll

16:14:11.0670 8076  C:\Windows\System32\PSIKey.dll - ok

16:14:11.0674 8076  [ 11123D8CAC3E659C4C9D88526DC57E42 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll

16:14:11.0674 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok

16:14:11.0677 8076  [ 90A3935D05B494A5A39D37E71F09A677 ] C:\Windows\System32\drivers\secdrv.sys

16:14:11.0677 8076  C:\Windows\System32\drivers\secdrv.sys - ok

16:14:11.0680 8076  [ 637A0F23F9012358E92E6F99835494D1 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:14:11.0680 8076  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok

16:14:11.0684 8076  [ 428FF21418ADCD6FAD6189CD9520A67B ] C:\Windows\System32\wiatrace.dll

16:14:11.0684 8076  C:\Windows\System32\wiatrace.dll - ok

16:14:11.0687 8076  [ 128DD9AF8640DBCC711940903C8B554F ] C:\Windows\System32\mscoree.dll

16:14:11.0687 8076  C:\Windows\System32\mscoree.dll - ok

16:14:11.0691 8076  [ D1B61E151F6D0077E42E9521869F352F ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll

16:14:11.0691 8076  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll - ok

16:14:11.0694 8076  [ 4DBA143F06BAD1DF935CB9603140CF2A ] C:\Windows\System32\wsdchngr.dll

16:14:11.0694 8076  C:\Windows\System32\wsdchngr.dll - ok

16:14:11.0697 8076  [ 608C345A255D82A6289C2D468EB41FD7 ] C:\Windows\System32\drivers\tcpipreg.sys

16:14:11.0698 8076  C:\Windows\System32\drivers\tcpipreg.sys - ok

16:14:11.0701 8076  [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

16:14:11.0701 8076  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok

16:14:11.0704 8076  [ 0C84B6AFFA7486422235584110D7176F ] C:\Windows\System32\icaapi.dll

16:14:11.0704 8076  C:\Windows\System32\icaapi.dll - ok

16:14:11.0708 8076  [ AC88D258F20909EEB91796F490CFBB73 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:14:11.0708 8076  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe - ok

16:14:11.0711 8076  [ 0A990AFB9F2726323D61C8ECB8B70B17 ] C:\Windows\System32\security.dll

16:14:11.0711 8076  C:\Windows\System32\security.dll - ok

16:14:11.0714 8076  [ C8DBFEF835FF54467425C8F3ABCF7046 ] C:\Windows\System32\dssenh.dll

16:14:11.0714 8076  C:\Windows\System32\dssenh.dll - ok

16:14:11.0717 8076  [ 1F18B9EA1BBFF033413414C3BEA13AD6 ] C:\Windows\System32\wbem\WinMgmtR.dll

16:14:11.0717 8076  C:\Windows\System32\wbem\WinMgmtR.dll - ok

16:14:11.0720 8076  [ DEB9D08750423069647C3A066CEC7A1B ] C:\Windows\System32\tquery.dll

16:14:11.0720 8076  C:\Windows\System32\tquery.dll - ok

16:14:11.0723 8076  [ 2205A220A264E8C8B86492BF3D112907 ] C:\Windows\System32\PortableDeviceApi.dll

16:14:11.0723 8076  C:\Windows\System32\PortableDeviceApi.dll - ok

16:14:11.0727 8076  [ B53BD9E63867CD9FD853F666CA172713 ] C:\Windows\System32\PortableDeviceConnectApi.dll

16:14:11.0727 8076  C:\Windows\System32\PortableDeviceConnectApi.dll - ok

16:14:11.0730 8076  [ F91FF1E51FCA30B3C3981DB7D5924252 ] C:\Windows\System32\drivers\WUDFRd.sys

16:14:11.0730 8076  C:\Windows\System32\drivers\WUDFRd.sys - ok

16:14:11.0734 8076  [ 5C2B01675683AAF42FED528DE2C24C12 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll

16:14:11.0734 8076  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll - ok

16:14:11.0737 8076  [ C6E7AB7E798167095987EBCCB76DF61B ] C:\Windows\System32\WUDFHost.exe

16:14:11.0737 8076  C:\Windows\System32\WUDFHost.exe - ok

16:14:11.0740 8076  [ 218B73EA8341EA9FDF018D43052E790A ] C:\Windows\System32\mssrch.dll

16:14:11.0740 8076  C:\Windows\System32\mssrch.dll - ok

16:14:11.0743 8076  [ 5B7D398C26FCC364B68D9AB0B360502A ] C:\Windows\System32\WUDFx.dll

16:14:11.0743 8076  C:\Windows\System32\WUDFx.dll - ok

16:14:11.0746 8076  [ 119A487B94FCB54D5154EBFBFA124755 ] C:\Windows\System32\drivers\UMDF\WpdFs.dll

16:14:11.0746 8076  C:\Windows\System32\drivers\UMDF\WpdFs.dll - ok

16:14:11.0749 8076  [ AAB5FEAABF4CB6F76D794203831C8D94 ] C:\Windows\System32\msidle.dll

16:14:11.0749 8076  C:\Windows\System32\msidle.dll - ok

16:14:11.0752 8076  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] C:\Windows\System32\netprofm.dll

16:14:11.0753 8076  C:\Windows\System32\netprofm.dll - ok

16:14:11.0756 8076  [ BF7E4D6F60A6D9E866432855C6F8C262 ] C:\Windows\System32\sqmapi.dll

16:14:11.0756 8076  C:\Windows\System32\sqmapi.dll - ok

16:14:11.0759 8076  [ B458B58F7BB97C48D01AC3CF5805AAAC ] C:\Windows\System32\Query.dll

16:14:11.0759 8076  C:\Windows\System32\Query.dll - ok

16:14:11.0762 8076  [ 6BC5FCEF351E4CB5A269C1E84B5A06DA ] C:\Windows\System32\netcfgx.dll

16:14:11.0762 8076  C:\Windows\System32\netcfgx.dll - ok

16:14:11.0765 8076  [ DFCAB29E8FD38F95650CC1E203E8D318 ] C:\Windows\System32\npmproxy.dll

16:14:11.0765 8076  C:\Windows\System32\npmproxy.dll - ok

16:14:11.0768 8076  [ 50ABE7CDA2DAE898216121D14092C182 ] C:\Windows\System32\WMVCORE.DLL

16:14:11.0768 8076  C:\Windows\System32\WMVCORE.DLL - ok

16:14:11.0771 8076  [ A952D0DED445F26AEFCF593A935AB300 ] C:\Windows\System32\hnetcfg.dll

16:14:11.0771 8076  C:\Windows\System32\hnetcfg.dll - ok

16:14:11.0775 8076  [ FC1EEE57EB9CD57279D70BA2A9131C38 ] C:\Windows\System32\wbem\wbemcore.dll

16:14:11.0775 8076  C:\Windows\System32\wbem\wbemcore.dll - ok

16:14:11.0778 8076  [ C10E13721B0AAEBEB5EBA914F1D18181 ] C:\Windows\System32\wbem\esscli.dll

16:14:11.0778 8076  C:\Windows\System32\wbem\esscli.dll - ok

16:14:11.0781 8076  [ 36CCD8A79539C4ACE3BABE09C2CFBA16 ] C:\Windows\System32\WMASF.DLL

16:14:11.0781 8076  C:\Windows\System32\WMASF.DLL - ok

16:14:11.0784 8076  [ BC5A34B6A14C93BF04E3F4E8EA57090A ] C:\Windows\System32\wbem\fastprox.dll

16:14:11.0784 8076  C:\Windows\System32\wbem\fastprox.dll - ok

16:14:11.0787 8076  [ B2B117BD8D1EA80536CDD91797EF4A0A ] C:\Windows\System32\PortableDeviceClassExtension.dll

16:14:11.0787 8076  C:\Windows\System32\PortableDeviceClassExtension.dll - ok

16:14:11.0791 8076  [ 883D02AB5D350BC45E0F60E8CFA97FDC ] C:\Windows\System32\PortableDeviceTypes.dll

16:14:11.0791 8076  C:\Windows\System32\PortableDeviceTypes.dll - ok

16:14:11.0794 8076  [ DB0F37DBA4C245C61E5936DDBDE62438 ] C:\Windows\System32\wbem\wbemsvc.dll

16:14:11.0794 8076  C:\Windows\System32\wbem\wbemsvc.dll - ok

16:14:11.0797 8076  [ 2C3B09E586BDA2CC49A292BE7BADC589 ] C:\Windows\System32\wbem\wmiutils.dll

16:14:11.0797 8076  C:\Windows\System32\wbem\wmiutils.dll - ok

16:14:11.0800 8076  [ B288FF7C1987A736726E87C79148C360 ] C:\Windows\System32\PortableDeviceWiaCompat.dll

16:14:11.0800 8076  C:\Windows\System32\PortableDeviceWiaCompat.dll - ok

16:14:11.0804 8076  [ 834933F16EA839AC5AC7CBF88638DF27 ] C:\Windows\System32\wbem\repdrvfs.dll

16:14:11.0804 8076  C:\Windows\System32\wbem\repdrvfs.dll - ok

16:14:11.0807 8076  [ AF8FCE586FE158542035EFE79B16A9BB ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

16:14:11.0807 8076  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll - ok

16:14:11.0810 8076  [ 22DC784B32BEE306A99F50D6DC2460BC ] C:\Windows\System32\esent.dll

16:14:11.0810 8076  C:\Windows\System32\esent.dll - ok

16:14:11.0813 8076  [ C2C6C014B96581EC8BF0C8604DE1743E ] C:\Windows\System32\wbem\WmiPrvSD.dll

16:14:11.0813 8076  C:\Windows\System32\wbem\WmiPrvSD.dll - ok

16:14:11.0816 8076  [ F85134BF76CB335A39F8D7BC4173D4FB ] C:\Windows\System32\msscb.dll

16:14:11.0816 8076  C:\Windows\System32\msscb.dll - ok

16:14:11.0819 8076  [ 21322832C99E8DE85BD047689A2A69DB ] C:\Windows\System32\pnpts.dll

16:14:11.0819 8076  C:\Windows\System32\pnpts.dll - ok

16:14:11.0823 8076  [ F0062778F50838145AC46B384FFB4FA3 ] C:\Windows\System32\pcadm.dll

16:14:11.0823 8076  C:\Windows\System32\pcadm.dll - ok

16:14:11.0826 8076  [ A609A192E98934A8D352704C99AB8577 ] C:\Windows\System32\wbem\wbemess.dll

16:14:11.0826 8076  C:\Windows\System32\wbem\wbemess.dll - ok

16:14:11.0829 8076  [ 58D4765AB87347DB835D5693ADF652C1 ] C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:14:11.0829 8076  C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll - ok

16:14:11.0832 8076  [ 75F122CDCA3C71BD09089F2CA824B796 ] C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:14:11.0832 8076  C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL - ok

16:14:11.0835 8076  [ FEA6D21F78922D641A0C9346D885133B ] C:\Windows\System32\mssprxy.dll

16:14:11.0835 8076  C:\Windows\System32\mssprxy.dll - ok

16:14:11.0839 8076  [ 01EBD21968ADBCDEF68E41CD8591DC9E ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin

16:14:11.0839 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin - ok

16:14:11.0842 8076  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:14:11.0842 8076  C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe - ok

16:14:11.0845 8076  [ 3606CE1AC3D6A9A9CB7DB35D7F5C54EC ] C:\Windows\System32\shfolder.dll

christoph03

22.10.2012 14:18

Code:

16:14:11.0845 8076  C:\Windows\System32\shfolder.dll - ok

16:14:11.0849 8076  [ 03500AD3001A71D3C01F2A5E053FEEF2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll

16:14:11.0849 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll - ok

16:14:11.0852 8076  [ A9086FD97C26976DFE54848C8B6DB104 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll

16:14:11.0852 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll - ok

16:14:11.0856 8076  [ D22979B79A89BDDC251BE01FED697362 ] C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll

16:14:11.0856 8076  C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll - ok

16:14:11.0859 8076  [ AB15F6916593210DC6D95B328DD13F1C ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll

16:14:11.0859 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll - ok

16:14:11.0861 8076  [ 4B3841A78EC7C6BD7D463AE89D1C2489 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll

16:14:11.0862 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll - ok

16:14:11.0865 8076  [ 83713FA2E305533E961F89BF6880D734 ] C:\Program Files\Uniblue\RegistryBooster\cache.dll

16:14:11.0865 8076  C:\Program Files\Uniblue\RegistryBooster\cache.dll - ok

16:14:11.0869 8076  [ 1182F47930ED9AEC09F0DD410C67E69F ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll

16:14:11.0869 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll - ok

16:14:11.0872 8076  [ 7487E14B2FA3457E8A4A4B51CF36B3F2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll

16:14:11.0872 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll - ok

16:14:11.0876 8076  [ B3E0C20A53D6A55590468B33AA9BC525 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

16:14:11.0876 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe - ok

16:14:11.0879 8076  [ 8E3608C58BA8C8B685D44578897EE0A2 ] C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe

16:14:11.0880 8076  C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe - ok

16:14:11.0883 8076  [ 0D4B1D08EDC6D212BCAC4E0672206474 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

16:14:11.0883 8076  C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe - ok

16:14:11.0886 8076  [ 682B0FFCCCD29668207266C7DA5E6C9D ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

16:14:11.0886 8076  C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe - ok

16:14:11.0890 8076  [ 08630A8609781AE5BCF7324E9FD42FF9 ] C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll

16:14:11.0890 8076  C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll - ok

16:14:11.0893 8076  [ C0B8B96D018849FD8CCF15FED84E8782 ] C:\Windows\System32\ie4uinit.exe

16:14:11.0893 8076  C:\Windows\System32\ie4uinit.exe - ok

16:14:11.0896 8076  [ F0FEFB0B5D25A75D478A4317139D937E ] C:\Windows\System32\iedkcs32.dll

16:14:11.0896 8076  C:\Windows\System32\iedkcs32.dll - ok

16:14:11.0899 8076  [ 4B19A9A4191353007E9819A832B81186 ] C:\Windows\System32\timedate.cpl

16:14:11.0899 8076  C:\Windows\System32\timedate.cpl - ok

16:14:11.0903 8076  [ 8D78BA30DB4AE040A52EDEE725782715 ] C:\Windows\System32\actxprxy.dll

16:14:11.0903 8076  C:\Windows\System32\actxprxy.dll - ok

16:14:11.0906 8076  [ FF41E1AC301F51E16F61AD7C0F45467C ] C:\Windows\System32\msshsq.dll

16:14:11.0906 8076  C:\Windows\System32\msshsq.dll - ok

16:14:11.0909 8076  [ 65C2A23FF131541B3D72D7D3D2CBFC03 ] C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll

16:14:11.0909 8076  C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll - ok

16:14:11.0913 8076  [ 1CE4A2790EB4A96F4ED1E4264866AFE6 ] C:\Windows\System32\NaturalLanguage6.dll

16:14:11.0913 8076  C:\Windows\System32\NaturalLanguage6.dll - ok

16:14:11.0916 8076  [ 3BC9A79BCD7BD98A6F492BCF1B6177B9 ] C:\Windows\System32\NlsData0007.dll

16:14:11.0916 8076  C:\Windows\System32\NlsData0007.dll - ok

16:14:11.0919 8076  [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\Windows\System32\drivers\78914021.sys

16:14:11.0919 8076  C:\Windows\System32\drivers\78914021.sys - ok

16:14:11.0922 8076  [ 795166DED9B1B32136B150A12A1DEBAE ] C:\Windows\System32\NlsLexicons0007.dll

16:14:11.0922 8076  C:\Windows\System32\NlsLexicons0007.dll - ok

16:14:11.0925 8076  [ 24F90AEFEBE601D427CB4511E74CDCB6 ] C:\Windows\System32\linkinfo.dll

16:14:11.0926 8076  C:\Windows\System32\linkinfo.dll - ok

16:14:11.0929 8076  [ 04044BF8E6989BE45FA718C24407CA28 ] C:\Windows\System32\networkexplorer.dll

16:14:11.0929 8076  C:\Windows\System32\networkexplorer.dll - ok

16:14:11.0932 8076  [ 9A4322EE420D6FACD4D4B1FF6CB856B1 ] C:\hp\support\hpsysdrv.exe

16:14:11.0932 8076  C:\hp\support\hpsysdrv.exe - ok

16:14:11.0935 8076  [ 7088B136BB58A5F95CF0DE8386CA6C0F ] C:\hp\KBD\KbdStub.exe

16:14:11.0935 8076  C:\hp\KBD\KbdStub.exe - ok

16:14:11.0938 8076  [ 0CFCDE5D9D074D96B78D1F1CBF1AAB1D ] C:\Windows\System32\riched20.dll

16:14:11.0938 8076  C:\Windows\System32\riched20.dll - ok

16:14:11.0941 8076  [ 4F89DD4EA74C66916E15A6E7D74A50B5 ] C:\Windows\System32\jureg.exe

16:14:11.0941 8076  C:\Windows\System32\jureg.exe - ok

16:14:11.0944 8076  [ 392845E8D49B5F0E81AAC4D795000A8C ] C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

16:14:11.0944 8076  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe - ok

16:14:11.0947 8076  [ E42A642E162B0468B2C4E9D803079C7F ] C:\Windows\KHALMNPR.Exe

16:14:11.0948 8076  C:\Windows\KHALMNPR.Exe - ok

16:14:11.0950 8076  [ 361CD47DC5BD83EE24407903233B0D9A ] C:\Windows\RtHDVCpl.exe

16:14:11.0950 8076  C:\Windows\RtHDVCpl.exe - ok

16:14:11.0954 8076  [ 765AB6A6F8ED6F8186461BB2F183AA00 ] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll

16:14:11.0954 8076  C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll - ok

16:14:11.0957 8076  [ 5016B8FC59AD616F03813FBE63295081 ] C:\Windows\System32\thumbcache.dll

16:14:11.0957 8076  C:\Windows\System32\thumbcache.dll - ok

16:14:11.0961 8076  [ BADC359C9A0D9C217B7E8DA17BF3F5BB ] C:\Windows\System32\ntshrui.dll

16:14:11.0961 8076  C:\Windows\System32\ntshrui.dll - ok

16:14:11.0964 8076  [ 7AF5A466CF4AECA28E3DCBCF5B6FD220 ] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

16:14:11.0976 8076  C:\Program Files\HP\HP Software Update\hpwuSchd2.exe - ok

16:14:11.0979 8076  [ 12916E0642E92561C98B18A2A2D01B14 ] C:\Program Files\Common Files\Java\Java Update\jusched.exe

16:14:11.0979 8076  C:\Program Files\Common Files\Java\Java Update\jusched.exe - ok

16:14:11.0983 8076  [ B01902E9451B3D39DC5CAFDC9B9B398C ] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE

16:14:11.0983 8076  C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE - ok

16:14:11.0986 8076  [ 29000C2AF39C86B3FC08814B456F1A86 ] C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll

16:14:11.0986 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll - ok

16:14:11.0990 8076  [ 5D61BE7DB55B026A5D61A3EED09D0EAD ] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

16:14:11.0990 8076  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe - ok

16:14:11.0993 8076  [ 35937EAD711207544E219C2A19A78A7D ] C:\Program Files\Windows Media Player\wmpnscfg.exe

16:14:11.0993 8076  C:\Program Files\Windows Media Player\wmpnscfg.exe - ok

16:14:11.0996 8076  [ 8548444028D337900D6DE5F1340C9B47 ] C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll

16:14:11.0997 8076  C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll - ok

16:14:12.0000 8076  [ 3484CC5EFA7E9C0DFC47F7692AC0B817 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL

16:14:12.0000 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL - ok

16:14:12.0003 8076  [ 9575E4C5748A79E289C806FAC6E7CEC9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll

16:14:12.0003 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll - ok

16:14:12.0007 8076  [ D6D65109A5A8C93DCF34E1B48B64E5BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll

16:14:12.0007 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll - ok

16:14:12.0011 8076  [ FAB2ABBC61F60E15DE7CF6CF1B16BF69 ] C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL

16:14:12.0011 8076  C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL - ok

16:14:12.0014 8076  [ 3074421324485872276921F457A1E36C ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL

16:14:12.0014 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL - ok

16:14:12.0017 8076  [ 19962D74CD416FEE00C95A03C113C6D3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL

16:14:12.0017 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL - ok

16:14:12.0021 8076  [ F14219FC767F1383526AB423F278A8E3 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

16:14:12.0021 8076  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - ok

16:14:12.0025 8076  [ 124445568B1F019F14871FDA6E9E547E ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll

16:14:12.0025 8076  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll - ok

16:14:12.0028 8076  [ 705A7511B96AC171846D0E2DDC900DB1 ] C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll

16:14:12.0028 8076  C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll - ok

16:14:12.0032 8076  [ B624202660474516E73AA95238FD9843 ] C:\Program Files\Logitech\SetPoint\SetPoint.exe

16:14:12.0032 8076  C:\Program Files\Logitech\SetPoint\SetPoint.exe - ok

16:14:12.0035 8076  [ 84B8827562B005C118CADBA0F25DB2C6 ] C:\Windows\System32\dsound.dll

16:14:12.0035 8076  C:\Windows\System32\dsound.dll - ok

16:14:12.0038 8076  [ D1DCC1D6A2EFEF1148C1874BDC546A2D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll

16:14:12.0038 8076  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll - ok

16:14:12.0042 8076  [ B2A27CE3D828B52B220650ECAEA92D1A ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll

16:14:12.0042 8076  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll - ok

16:14:12.0046 8076  [ 4B1EB3AD2771AE8D0390ED1444B7B493 ] C:\Program Files\Logitech\SetPoint\lgscroll.dll

16:14:12.0046 8076  C:\Program Files\Logitech\SetPoint\lgscroll.dll - ok

16:14:12.0049 8076  [ F5892A613D0A74AE063613CA53D7B491 ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll

16:14:12.0049 8076  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll - ok

16:14:12.0053 8076  [ 9507A8E70A620A36CF2CF60740B8F022 ] C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll

16:14:12.0053 8076  C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll - ok

16:14:12.0058 8076  [ 22AA20E24295D0D98AFF72C65BD7DBFA ] C:\Windows\System32\KemXML.dll

16:14:12.0058 8076  C:\Windows\System32\KemXML.dll - ok

16:14:12.0062 8076  [ 1F171553F1138DC0062A71A7D275055A ] C:\Windows\System32\schtasks.exe

16:14:12.0062 8076  C:\Windows\System32\schtasks.exe - ok

16:14:12.0065 8076  [ E46A4765F8E6D631C9C9CB0B083602F5 ] C:\Program Files\Windows Media Player\wmpnssci.dll

16:14:12.0065 8076  C:\Program Files\Windows Media Player\wmpnssci.dll - ok

16:14:12.0069 8076  [ E1D0C7866A544A1BA9CBEDFE7C35F085 ] C:\Windows\System32\dinput.dll

16:14:12.0069 8076  C:\Windows\System32\dinput.dll - ok

16:14:12.0072 8076  [ C32B360E34ED8730EA4ECFAEBF4351F1 ] C:\Program Files\Norton 360\TPALERT.DLL

16:14:12.0072 8076  C:\Program Files\Norton 360\TPALERT.DLL - ok

16:14:12.0076 8076  [ 7F1165CA2BCAAE4F396D0977308BB16E ] C:\Program Files\Meazure\Meazure.exe

16:14:12.0076 8076  C:\Program Files\Meazure\Meazure.exe - ok

16:14:12.0079 8076  [ 648AB74D9C104FB500B6C4EEDC6A8772 ] C:\Windows\System32\wmpmde.dll

16:14:12.0079 8076  C:\Windows\System32\wmpmde.dll - ok

16:14:12.0082 8076  [ 67D16247C56C26A4F0D79D1A7F272B8F ] C:\Windows\System32\mf.dll

16:14:12.0082 8076  C:\Windows\System32\mf.dll - ok

16:14:12.0085 8076  [ 394CFDE4B6A45A7B93F3EE912C3BB470 ] C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll

16:14:12.0085 8076  C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll - ok

16:14:12.0089 8076  [ D4FF794FD2854CAA86F6C298BF158CFB ] C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe

16:14:12.0089 8076  C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe - ok

16:14:12.0092 8076  [ BAE6DFFEA62A4218B577C25ED04EC947 ] C:\Program Files\Norton 360\TPMAINUI.DLL

16:14:12.0092 8076  C:\Program Files\Norton 360\TPMAINUI.DLL - ok

16:14:12.0095 8076  [ 07F0B8EEB0785B71B194BB5AED8EF0C8 ] C:\Program Files\HP\hpqSSupply.exe

16:14:12.0095 8076  C:\Program Files\HP\hpqSSupply.exe - ok

16:14:12.0099 8076  [ 810F104256F6BCD7012545B0BEA18D23 ] C:\Windows\System32\kemutb.dll

16:14:12.0099 8076  C:\Windows\System32\kemutb.dll - ok

16:14:12.0102 8076  [ 2495C4204C63678F8FD5D488CA7DAD26 ] C:\Windows\System32\evr.dll

16:14:12.0102 8076  C:\Windows\System32\evr.dll - ok

16:14:12.0105 8076  [ 4DF10CE50010D70152944B51E03588B0 ] C:\Windows\System32\wmdrmsdk.dll

16:14:12.0105 8076  C:\Windows\System32\wmdrmsdk.dll - ok

16:14:12.0109 8076  [ 70C6489D56008D75DEDF73226FA63C11 ] C:\Windows\System32\dimsjob.dll

16:14:12.0109 8076  C:\Windows\System32\dimsjob.dll - ok

16:14:12.0112 8076  [ 3192ED5E2FFDF5B630541B9643AE1AA3 ] C:\Windows\System32\upnp.dll

16:14:12.0112 8076  C:\Windows\System32\upnp.dll - ok

16:14:12.0114 8076  [ 015E99A7634B93E8BB0380C70F3D2CC3 ] C:\Windows\System32\wmp.dll

16:14:12.0114 8076  C:\Windows\System32\wmp.dll - ok

16:14:12.0118 8076  [ 98638A4CA187245C469DA0DEC4F04A45 ] C:\Windows\System32\pautoenr.dll

16:14:12.0118 8076  C:\Windows\System32\pautoenr.dll - ok

16:14:12.0121 8076  [ AC48FD62E22C4425879FCA5A63F50497 ] C:\Windows\System32\certcli.dll

16:14:12.0121 8076  C:\Windows\System32\certcli.dll - ok

16:14:12.0124 8076  [ 8F53E6D9036F072B701F9E7D410E25D9 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc

16:14:12.0124 8076  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc - ok

16:14:12.0128 8076  [ 6A702774723F34B7CDC43A9EB7697729 ] C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe

16:14:12.0128 8076  C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe - ok

16:14:12.0131 8076  [ A2BEE7580B3E530A83651CDDA34278FA ] C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll

16:14:12.0131 8076  C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll - ok

16:14:12.0135 8076  [ 74CD7C617D24B8DE59029806CB19F0E0 ] C:\Program Files\Norton 360\tpCED.dll

16:14:12.0135 8076  C:\Program Files\Norton 360\tpCED.dll - ok

16:14:12.0138 8076  [ 3C9BCE38FAF8BAA8168BD5714101449B ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll

16:14:12.0138 8076  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll - ok

16:14:12.0142 8076  [ BE56D0547E24644DEEB19397521B1EAA ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll

16:14:12.0142 8076  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll - ok

16:14:12.0146 8076  [ E859EC77A0C5C2F81DD19C87AD23CACC ] C:\Program Files\Common Files\Symantec Shared\SymRedir.dll

16:14:12.0146 8076  C:\Program Files\Common Files\Symantec Shared\SymRedir.dll - ok

16:14:12.0149 8076  [ B941193CC8DCE2E1EB8AB6D46374222B ] C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll

16:14:12.0149 8076  C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll - ok

16:14:12.0152 8076  [ 80BD4B26E2CBC0D65445D0463DFF6FC2 ] C:\Windows\System32\oledlg.dll

16:14:12.0152 8076  C:\Windows\System32\oledlg.dll - ok

16:14:12.0156 8076  [ 9441A231C0AA0712F7CF3B10D9CFCF76 ] C:\Windows\System32\wmploc.DLL

16:14:12.0156 8076  C:\Windows\System32\wmploc.DLL - ok

16:14:12.0159 8076  [ 580E027967EE2F79AAE03AD658108BCC ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll

16:14:12.0159 8076  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll - ok

16:14:12.0163 8076  [ D083CCCC92C797CD57C4E3F76B740B96 ] C:\Program Files\Perspective Rectifier 3.3\pr.exe

16:14:12.0163 8076  C:\Program Files\Perspective Rectifier 3.3\pr.exe - ok

16:14:12.0166 8076  [ 0053319C4438CDE659AA75C19BBD22F1 ] C:\Windows\System32\CertEnroll.dll

16:14:12.0166 8076  C:\Windows\System32\CertEnroll.dll - ok

16:14:12.0169 8076  [ D62CAB966AD76B00C67C92870F9BD7A5 ] C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll

16:14:12.0169 8076  C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll - ok

16:14:12.0173 8076  [ 289BB482E4689783BE365C08D0360DA4 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll

16:14:12.0173 8076  C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll - ok

16:14:12.0177 8076  [ E54624E7897DDC0CF132C2BAEFC5A21A ] C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll

16:14:12.0177 8076  C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll - ok

16:14:12.0181 8076  [ 021CFC69A1874431DC88BEFC37A2A2FD ] C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll

16:14:12.0181 8076  C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll - ok

16:14:12.0184 8076  [ 8ADAE4E00D86A8530B8176A853B4B9B9 ] C:\Windows\System32\KemUtil.dll

16:14:12.0184 8076  C:\Windows\System32\KemUtil.dll - ok

16:14:12.0187 8076  [ 689C6EA7A17B3AE0F2A0151465EF311E ] C:\Windows\System32\jusched.exe

16:14:12.0187 8076  C:\Windows\System32\jusched.exe - ok

16:14:12.0191 8076  [ E0E54A571D4323567E95E11FE76A5FF3 ] C:\Windows\System32\drivers\srtsp.sys

16:14:12.0191 8076  C:\Windows\System32\drivers\srtsp.sys - ok

16:14:12.0194 8076  [ 826F699B69E88A3920C70F344DD42D88 ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:14:12.0194 8076  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS - ok

16:14:12.0198 8076  [ 8E4C77AD9BB279900C00F870CC0C674B ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:14:12.0198 8076  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS - ok

16:14:12.0201 8076  [ 9495FCC01D7AB7B60E5B8BA7AEFE9E3D ] C:\Windows\System32\wbem\WmiPrvSE.exe

16:14:12.0201 8076  C:\Windows\System32\wbem\WmiPrvSE.exe - ok

16:14:12.0205 8076  [ F723422A11CD6FA13036746272200993 ] C:\Windows\System32\wbem\cimwin32.dll

16:14:12.0205 8076  C:\Windows\System32\wbem\cimwin32.dll - ok

16:14:12.0208 8076  [ 617F9A5813E69F6E9ED94B811EC75396 ] C:\Windows\System32\wmpps.dll

16:14:12.0208 8076  C:\Windows\System32\wmpps.dll - ok

16:14:12.0211 8076  [ F1ECEC53B9FFC30E123D14E087C49111 ] C:\Windows\System32\wmdrmdev.dll

16:14:12.0211 8076  C:\Windows\System32\wmdrmdev.dll - ok

16:14:12.0214 8076  [ 7C7C620860819A62F926D7EC0B72C50B ] C:\Windows\System32\drmv2clt.dll

16:14:12.0214 8076  C:\Windows\System32\drmv2clt.dll - ok

16:14:12.0217 8076  [ 67BB7141F7F5F37411F796943B3418B6 ] C:\Windows\System32\framedynos.dll

16:14:12.0217 8076  C:\Windows\System32\framedynos.dll - ok

16:14:12.0221 8076  [ A6E02F65BE0C48DE7101923AE70268BD ] C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll

16:14:12.0221 8076  C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll - ok

16:14:12.0225 8076  [ 6C60E160FAB097ADDA6977A2B811CBAE ] C:\Program Files\Norton 360\WSCStub.exe

16:14:12.0225 8076  C:\Program Files\Norton 360\WSCStub.exe - ok

16:14:12.0228 8076  [ 80F9CF332BA54654160CEBD1E2C504F8 ] C:\Program Files\ShiftN\ShiftN.exe

16:14:12.0228 8076  C:\Program Files\ShiftN\ShiftN.exe - ok

16:14:12.0231 8076  [ DEB3972E35D9079CED7CD194682A4375 ] C:\Program Files\Common Files\Winferno\WSE2007.dll

16:14:12.0231 8076  C:\Program Files\Common Files\Winferno\WSE2007.dll - ok

16:14:12.0234 8076  [ 67384147DD005E54D2C0A20408E28579 ] C:\Program Files\Steam\steam.exe

16:14:12.0234 8076  C:\Program Files\Steam\steam.exe - ok

16:14:12.0238 8076  [ 37D75B5D3D6CCED0BC35FA9FA963363B ] C:\Program Files\Origin\Origin.exe

16:14:12.0238 8076  C:\Program Files\Origin\Origin.exe - ok

16:14:12.0241 8076  [ D0A95E567224B4C347CBDD6541E5D928 ] C:\Windows\System32\wscisvif.dll

16:14:12.0241 8076  C:\Windows\System32\wscisvif.dll - ok

16:14:12.0244 8076  [ 721BAA64EF443D9033F2330F0FF8C70B ] C:\Windows\System32\dskquota.dll

16:14:12.0244 8076  C:\Windows\System32\dskquota.dll - ok

16:14:12.0249 8076  [ A0F4852A5DB9754BEC06F84B400AE743 ] C:\Windows\System32\wscapi.dll

16:14:12.0249 8076  C:\Windows\System32\wscapi.dll - ok

16:14:12.0252 8076  [ FE3702015BE4D214808A2FBC07B8E5FF ] C:\Windows\System32\wscproxystub.dll

16:14:12.0252 8076  C:\Windows\System32\wscproxystub.dll - ok

16:14:12.0256 8076  [ EF9F69074FF0A48DD30FEF5A33518D86 ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

16:14:12.0256 8076  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll - ok

16:14:12.0259 8076  [ 61216539E55DDF2F78E421E7EF140650 ] C:\Windows\System32\ExplorerFrame.dll

16:14:12.0259 8076  C:\Windows\System32\ExplorerFrame.dll - ok

16:14:12.0264 8076  [ 22CC6CDBA678790046693654C3B212E4 ] C:\Program Files\Internet Explorer\iexplore.exe

16:14:12.0264 8076  C:\Program Files\Internet Explorer\iexplore.exe - ok

16:14:12.0268 8076  [ 7E6EA9CB72B5DE84A5D700BED877E5F9 ] C:\Program Files\Windows Mail\WinMail.exe

16:14:12.0268 8076  C:\Program Files\Windows Mail\WinMail.exe - ok

16:14:12.0272 8076  [ E2C48CD0132D4D1DC7D0DF9A6BEF686A ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll

16:14:12.0272 8076  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll - ok

16:14:12.0276 8076  [ 11F3FFC37D66870A092EB2B220744F84 ] C:\Program Files\Blender Foundation\Blender\blender.exe

16:14:12.0277 8076  C:\Program Files\Blender Foundation\Blender\blender.exe - ok

16:14:12.0280 8076  [ B152B061168EEFE865C9DE284B59D0E5 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll

16:14:12.0280 8076  C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll - ok

16:14:12.0284 8076  [ C8AE490A93C3CC2E537B6E06247785A1 ] C:\Windows\System32\wbem\NCProv.dll

16:14:12.0284 8076  C:\Windows\System32\wbem\NCProv.dll - ok

16:14:12.0287 8076  [ E3F535656B5ABF249702EB64F3CF9AF0 ] C:\Windows\System32\wbem\wbemcons.dll

16:14:12.0287 8076  C:\Windows\System32\wbem\wbemcons.dll - ok

16:14:12.0290 8076  [ 2D821AFA5A1A9CA7F9F997A1AAD09E72 ] C:\Program Files\Windows Media Player\wmplayer.exe

16:14:12.0290 8076  C:\Program Files\Windows Media Player\wmplayer.exe - ok

16:14:12.0294 8076  [ D0716BD0C0822A642D36E82F49F2B5B8 ] C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll

16:14:12.0294 8076  C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll - ok

16:14:12.0297 8076  [ 005EE82BABF1D2D32188A75BEDF500A4 ] C:\Windows\System32\GEARAspi.dll

16:14:12.0297 8076  C:\Windows\System32\GEARAspi.dll - ok

16:14:12.0300 8076  [ 9B0726A03B790E5B82BED44D24009BEF ] C:\Windows\System32\imapi2.dll

16:14:12.0300 8076  C:\Windows\System32\imapi2.dll - ok

16:14:12.0303 8076  [ 8803B32E8AF93C2FCB59C88EB9459190 ] C:\Program Files\Ultimate Papercraft3D\paper3d.exe

16:14:12.0303 8076  C:\Program Files\Ultimate Papercraft3D\paper3d.exe - ok

16:14:12.0307 8076  [ 68DC617F42DB8A10AC58C365F9540E5D ] C:\Program Files\Registry System Wizard.NET\RSW.exe

16:14:12.0307 8076  C:\Program Files\Registry System Wizard.NET\RSW.exe - ok

16:14:12.0311 8076  [ 3B54475A96C7F5403DC3362DEDF3982F ] C:\Program Files\Uniblue\RegistryBooster\Launcher.exe

16:14:12.0311 8076  C:\Program Files\Uniblue\RegistryBooster\Launcher.exe - ok

16:14:12.0314 8076  [ B5950DF243837D8217F4E597919B224A ] C:\Windows\System32\stobject.dll

16:14:12.0314 8076  C:\Windows\System32\stobject.dll - ok

16:14:12.0317 8076  [ EC69B16644C613F41A57169F8D068F1D ] C:\Windows\System32\batmeter.dll

16:14:12.0317 8076  C:\Windows\System32\batmeter.dll - ok

16:14:12.0320 8076  [ 6C90415A6FA967E3746C32E7E6366B22 ] C:\Program Files\DVD Flick\dvdflick.exe

16:14:12.0320 8076  C:\Program Files\DVD Flick\dvdflick.exe - ok

16:14:12.0324 8076  [ C45D74C22D4EFC3F86C9CABF9D98611F ] C:\Program Files\Online Services\eBay\WizLink.exe

16:14:12.0324 8076  C:\Program Files\Online Services\eBay\WizLink.exe - ok

16:14:12.0327 8076  [ DAF60E13E96ECB67F0EDAA89C6B01B8D ] C:\Windows\System32\notepad.exe

16:14:12.0327 8076  C:\Windows\System32\notepad.exe - ok

16:14:12.0330 8076  [ 8958F53C5ACAA22BDBEF97C1C3389102 ] C:\Program Files\Free FLV Converter\FreeFLVConverter.exe

16:14:12.0330 8076  C:\Program Files\Free FLV Converter\FreeFLVConverter.exe - ok

16:14:12.0333 8076  [ FCAB63DD4E9CE22FC46D48C1DB21E72E ] C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll

16:14:12.0334 8076  C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll - ok

16:14:12.0337 8076  [ 8D68E1E83190DEAFD5D4340AE2BF99E4 ] C:\Program Files\CDBurnerXP\cdbxpp.exe

16:14:12.0337 8076  C:\Program Files\CDBurnerXP\cdbxpp.exe - ok

16:14:12.0340 8076  [ 027E5E14C9CFF810377701BDEAD8210F ] C:\Windows\System32\control.exe

16:14:12.0340 8076  C:\Windows\System32\control.exe - ok

16:14:12.0343 8076  [ 8FC5FF226A65B73ECF37DFD90948204D ] C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe

16:14:12.0343 8076  C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe - ok

16:14:12.0347 8076  [ DA1919D896DBD5895E138932AE9E398B ] C:\Windows\System32\browserchoice.exe

16:14:12.0347 8076  C:\Windows\System32\browserchoice.exe - ok

16:14:12.0350 8076  [ F5953C17B50793A746113C3D608856AB ] C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe

16:14:12.0350 8076  C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe - ok

16:14:12.0353 8076  [ B0A7458308E157ABF2B04555D12ACF4A ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

16:14:12.0354 8076  C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe - ok

16:14:12.0357 8076  [ 395335431AD55C167CFDBBAB8420DA73 ] C:\Program Files\Movie Maker\DVDMaker.exe

16:14:12.0357 8076  C:\Program Files\Movie Maker\DVDMaker.exe - ok

16:14:12.0361 8076  [ F6DB5697858D528D0685838461833159 ] C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe

16:14:12.0361 8076  C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe - ok

16:14:12.0363 8076  [ 29FD49B7241866794C33EDD7A1AA2437 ] C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe

16:14:12.0363 8076  C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe - ok

16:14:12.0367 8076  [ 47FE0FFDD2768728E667D3E7B9A53D77 ] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe

16:14:12.0367 8076  C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe - ok

16:14:12.0371 8076  [ 30F02D9C55053367E26A11482F51E255 ] C:\Windows\System32\SndVolSSO.dll

16:14:12.0371 8076  C:\Windows\System32\SndVolSSO.dll - ok

16:14:12.0374 8076  [ B7ED332A57FC78CA29E40D3619550225 ] C:\Windows\ehome\ehshell.exe

16:14:12.0374 8076  C:\Windows\ehome\ehshell.exe - ok

16:14:12.0377 8076  [ 3503086CB4BDFE9F49E8A05C5974B64C ] C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe

16:14:12.0377 8076  C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe - ok

16:14:12.0380 8076  [ 88FFC1304C3F94B1FEB71E42B97D8F7E ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe

16:14:12.0380 8076  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe - ok

16:14:12.0384 8076  [ 3A2EEE8444A8E5C1A454C57B2198F5FC ] C:\Windows\System32\ntlanman.dll

16:14:12.0384 8076  C:\Windows\System32\ntlanman.dll - ok

16:14:12.0387 8076  [ 582EFE56FC0858E58A6CEBA2A64B02C7 ] C:\Windows\System32\drprov.dll

16:14:12.0387 8076  C:\Windows\System32\drprov.dll - ok

16:14:12.0390 8076  [ CFBD2E1FE18B50748A76703A2DC6D4E3 ] C:\Windows\System32\davclnt.dll

16:14:12.0390 8076  C:\Windows\System32\davclnt.dll - ok

16:14:12.0393 8076  [ 313B30189557A2E2793F845DE0F0A4D5 ] C:\Windows\ehome\ehSSO.dll

16:14:12.0393 8076  C:\Windows\ehome\ehSSO.dll - ok

16:14:12.0396 8076  [ DE8CCA55D7210161D83AF3737B85B850 ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe

16:14:12.0396 8076  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe - ok

16:14:12.0400 8076  [ 2714656AF0F4D280CC45BB5D82C7A46C ] C:\Program Files\VideoLAN\VLC\vlc.exe

16:14:12.0400 8076  C:\Program Files\VideoLAN\VLC\vlc.exe - ok

16:14:12.0404 8076  [ E98E402067978DB38282158F9E8609CA ] C:\Windows\System32\netshell.dll

16:14:12.0404 8076  C:\Windows\System32\netshell.dll - ok

16:14:12.0407 8076  [ C4AB08459CD7B59B410ACFC04D90E87B ] C:\Program Files\Movie Maker\MOVIEMK.exe

16:14:12.0407 8076  C:\Program Files\Movie Maker\MOVIEMK.exe - ok

16:14:12.0410 8076  [ 75AD59B9B12EB194486BE8D97B062994 ] C:\Windows\System32\pnidui.dll

16:14:12.0410 8076  C:\Windows\System32\pnidui.dll - ok

16:14:12.0413 8076  [ EB2170D0DDF3B2A92506AE16BC524B0B ] C:\Windows\System32\wlanutil.dll

16:14:12.0414 8076  C:\Windows\System32\wlanutil.dll - ok

16:14:12.0417 8076  [ 0C45DFAEC1E913CD6F0823A908A2638B ] C:\Program Files\Digitale Bibliothek 4\Digibib4.exe

16:14:12.0417 8076  C:\Program Files\Digitale Bibliothek 4\Digibib4.exe - ok

16:14:12.0420 8076  [ B18CC509D7685DCD2A60E8F4801463B3 ] C:\Program Files\Nikon\FotoShare\PicShare.exe

16:14:12.0420 8076  C:\Program Files\Nikon\FotoShare\PicShare.exe - ok

16:14:12.0424 8076  [ 3DAED7FD0244FC5F85BA99CB408D93F3 ] C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe

16:14:12.0424 8076  C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe - ok

16:14:12.0427 8076  [ E47C854A28A81F2939F42CBE9FEA994C ] C:\Windows\System32\Magnify.exe

16:14:12.0427 8076  C:\Windows\System32\Magnify.exe - ok

16:14:12.0431 8076  [ ABAEAEE763E287BDD39094C4165E1F3F ] C:\Windows\System32\fdProxy.dll

16:14:12.0431 8076  C:\Windows\System32\fdProxy.dll - ok

16:14:12.0434 8076  [ 541CBEB6946E6D3EC6289EAA44F24468 ] C:\Program Files\DesignWorkshop Lite\dwlite.exe

16:14:12.0435 8076  C:\Program Files\DesignWorkshop Lite\dwlite.exe - ok

16:14:12.0438 8076  [ 5B6748DFA56A0BE54C45B989378293E1 ] C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll

16:14:12.0438 8076  C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll - ok

16:14:12.0441 8076  [ E064EC2A869CC353EE030920827AD967 ] C:\Program Files\VCG\MeshLab\meshlab.exe

16:14:12.0441 8076  C:\Program Files\VCG\MeshLab\meshlab.exe - ok

16:14:12.0444 8076  [ 5EFDECB7B780B764D330270E565A9BEB ] C:\Program Files\3D Object Converter 4.60\3dconverter.exe

16:14:12.0444 8076  C:\Program Files\3D Object Converter 4.60\3dconverter.exe - ok

16:14:12.0448 8076  [ 69A8B07541DD43AA8A4164DA586BB66A ] C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key

16:14:12.0448 8076  C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key - ok

16:14:12.0451 8076  [ 7BDCEAF13D9EC5873C43BD8063BEC871 ] C:\Windows\System32\KemWnd.dll

16:14:12.0451 8076  C:\Windows\System32\KemWnd.dll - ok

16:14:12.0454 8076  [ A963352EDFCC13E84741B578E23FDCCC ] C:\Program Files\Google\Google Earth\plugin\geplugin.exe

16:14:12.0454 8076  C:\Program Files\Google\Google Earth\plugin\geplugin.exe - ok

16:14:12.0458 8076  [ 069385484EA57B663D688894C88975C5 ] C:\Windows\System32\wuapp.exe

16:14:12.0458 8076  C:\Windows\System32\wuapp.exe - ok

16:14:12.0461 8076  [ 4BAEC13BCAA595639EBB5185278DEFEA ] C:\Windows\System32\fdWSD.dll

16:14:12.0461 8076  C:\Windows\System32\fdWSD.dll - ok

16:14:12.0464 8076  [ C03AC1FBCD625F93D2C245D97E06F270 ] C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe

16:14:12.0464 8076  C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe - ok

16:14:12.0467 8076  [ 27BB54357A51594D9F9B6257B5B9A879 ] C:\Windows\System32\Narrator.exe

16:14:12.0467 8076  C:\Windows\System32\Narrator.exe - ok

16:14:12.0470 8076  [ D571295B71C60A67F6F2EA987E5CC3B0 ] C:\Windows\System32\wmdrmnet.dll

16:14:12.0470 8076  C:\Windows\System32\wmdrmnet.dll - ok

16:14:12.0473 8076  [ 790222D6CCFC576F0D07D418E6115D85 ] C:\Program Files\Windows Calendar\WinCal.exe

16:14:12.0473 8076  C:\Program Files\Windows Calendar\WinCal.exe - ok

16:14:12.0477 8076  [ BABCB7BF8C7210A666546A8B34F7BC54 ] C:\Windows\System32\javaws.exe

16:14:12.0477 8076  C:\Windows\System32\javaws.exe - ok

16:14:12.0480 8076  [ 7A42135A456E5C8154FF3DD5BE4B3DB4 ] C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe

16:14:12.0480 8076  C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe - ok

16:14:12.0483 8076  [ 3EB6D30D82F0E300FCFBAD0498F654FD ] C:\Windows\System32\mlang.dll

16:14:12.0483 8076  C:\Windows\System32\mlang.dll - ok

16:14:12.0486 8076  [ 559DC15B74C66EC38C4ECF81503C7757 ] C:\Program Files\Logitech\SetPoint\SetPointCOM.dll

16:14:12.0486 8076  C:\Program Files\Logitech\SetPoint\SetPointCOM.dll - ok

16:14:12.0489 8076  [ 443C5961CACD4ABC16648874AF06E4A0 ] C:\Windows\System32\fdSSDP.dll

16:14:12.0489 8076  C:\Windows\System32\fdSSDP.dll - ok

16:14:12.0492 8076  [ 2DD6AF8E97F59C9D39329BBC2A81F13F ] C:\Windows\System32\rasdlg.dll

16:14:12.0492 8076  C:\Windows\System32\rasdlg.dll - ok

16:14:12.0495 8076  [ D20AF468FA7F09B9561C8232BB80D4BA ] C:\Program Files\Logitech\SetPoint\khalwrapper.dll

16:14:12.0495 8076  C:\Program Files\Logitech\SetPoint\khalwrapper.dll - ok

16:14:12.0499 8076  [ 56E315ACFB08A177B4D01E42B9044DB5 ] C:\Windows\System32\mprapi.dll

16:14:12.0499 8076  C:\Windows\System32\mprapi.dll - ok

16:14:12.0502 8076  [ B736E9A31EDB4D7CE3632FFCFBD69304 ] C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll

16:14:12.0502 8076  C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll - ok

16:14:12.0505 8076  [ 2424231BBD703A677D115C29983B4293 ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

16:14:12.0505 8076  C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok

16:14:12.0509 8076  [ 145D7CB9862D6FA5A6F068F9F8B61B39 ] C:\Program Files\Logitech\SetPoint\IMHook.dll

16:14:12.0509 8076  C:\Program Files\Logitech\SetPoint\IMHook.dll - ok

16:14:12.0512 8076  [ C0F8561D8F32926EB25165CBDC7BBA3F ] C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll

16:14:12.0512 8076  C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll - ok

16:14:12.0515 8076  [ 2C3196C163BEF55A404A2549C7B69589 ] C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll

16:14:12.0515 8076  C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll - ok

16:14:12.0519 8076  [ 4A79F94E9A9D911D1BB525C262CCE2BA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll

16:14:12.0519 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll - ok

16:14:12.0522 8076  [ E96BC31E0114F0999FB0F92FC65D61CA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

16:14:12.0522 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe - ok

16:14:12.0526 8076  [ 2D3D77C6E0BFD1CEBF241F1F54D9614B ] C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll

16:14:12.0526 8076  C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll - ok

16:14:12.0529 8076  [ 9CA2CE96D1EB3F1890E1182B09195048 ] C:\Program Files\Notepad++\notepad++.exe

16:14:12.0529 8076  C:\Program Files\Notepad++\notepad++.exe - ok

16:14:12.0532 8076  [ 877F2939794EBA4F3D1BB967007E99E8 ] C:\Windows\System32\osk.exe

16:14:12.0532 8076  C:\Windows\System32\osk.exe - ok

16:14:12.0535 8076  [ 17C0E094BEE5BC03CF491972F71AA6EF ] C:\Windows\System32\wlanapi.dll

16:14:12.0535 8076  C:\Windows\System32\wlanapi.dll - ok

16:14:12.0539 8076  [ D7A835DB03CFE8168574893BF7E5C886 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll

16:14:12.0539 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll - ok

16:14:12.0542 8076  [ 2BE37815B1FCA885119612C658DB8CA8 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll

16:14:12.0542 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll - ok

16:14:12.0546 8076  [ 9DB55C2361E0974A9630EECD70C69FAB ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll

16:14:12.0546 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll - ok

16:14:12.0549 8076  [ B64AC7967D6B9FB2D6152AC768A1CB88 ] C:\Windows\System32\onex.dll

16:14:12.0549 8076  C:\Windows\System32\onex.dll - ok

16:14:12.0553 8076  [ 70D4F5E5490A8947262A0D591309CEB4 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll

16:14:12.0553 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll - ok

16:14:12.0556 8076  [ 24F2095044B9EE2AD1ED2B1D7152893E ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll

16:14:12.0556 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll - ok

16:14:12.0560 8076  [ B02910B449EA0B5AF9D3422A9F907D8D ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll

16:14:12.0560 8076  C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll - ok

16:14:12.0563 8076  [ 9D9FFC923FADBB575E0452EA0BBB15BD ] C:\Windows\System32\eappprxy.dll

16:14:12.0563 8076  C:\Windows\System32\eappprxy.dll - ok

16:14:12.0566 8076  [ 13710783A04D427B6F621EE697569217 ] C:\Program Files\Logitech\SetPoint\KGame.dll

16:14:12.0566 8076  C:\Program Files\Logitech\SetPoint\KGame.dll - ok

16:14:12.0569 8076  [ 5D0FE613570CABE3992F7DBCD68E61D1 ] C:\Windows\System32\eappcfg.dll

16:14:12.0569 8076  C:\Windows\System32\eappcfg.dll - ok

16:14:12.0573 8076  [ 8A5092AE59D6ED5B181292CDBFB22B2F ] C:\Program Files\Logitech\SetPoint\GameHook.dll

16:14:12.0573 8076  C:\Program Files\Logitech\SetPoint\GameHook.dll - ok

16:14:12.0576 8076  [ 06164026C38AA5366E4D127E2E36FDE8 ] C:\Program Files\Windows Mail\wab.exe

16:14:12.0576 8076  C:\Program Files\Windows Mail\wab.exe - ok

16:14:12.0580 8076  [ 484ACF6AF85A29AC52F3CF054DFDE9D3 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

16:14:12.0580 8076  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe - ok

16:14:12.0583 8076  [ 21EF4BB2A6FF4116FD83FAEE52D4A416 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

16:14:12.0583 8076  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe - ok

16:14:12.0588 8076  [ F6F1F9773356F02848B33F365F7DDB6E ] C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe

16:14:12.0588 8076  C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe - ok

16:14:12.0592 8076  [ CC1959AB3929997F4198AA69C854086F ] C:\Windows\System32\regsvr32.exe

16:14:12.0592 8076  C:\Windows\System32\regsvr32.exe - ok

16:14:12.0595 8076  [ FD647CA82ACF232DBE5F20345647B948 ] C:\Windows\AppPatch\AcGenral.dll

16:14:12.0595 8076  C:\Windows\AppPatch\AcGenral.dll - ok

16:14:12.0598 8076  [ 4A839160ED1963F9A1526DDA2D1233B2 ] C:\Windows\System32\AltTab.dll

16:14:12.0598 8076  C:\Windows\System32\AltTab.dll - ok

16:14:12.0602 8076  [ 6B5C53E0932C510606D700B7A896EF73 ] C:\Windows\System32\WPDShServiceObj.dll

16:14:12.0602 8076  C:\Windows\System32\WPDShServiceObj.dll - ok

16:14:12.0605 8076  [ 694AF8B27C9A0A99399E02CE977F986B ] C:\Windows\System32\mspaint.exe

16:14:12.0605 8076  C:\Windows\System32\mspaint.exe - ok

16:14:12.0609 8076  [ D05CB427A609C49CA7E34EF43718EE8A ] C:\Program Files\3DCrafter 9\3DCrafter.exe

16:14:12.0609 8076  C:\Program Files\3DCrafter 9\3DCrafter.exe - ok

16:14:12.0612 8076  [ 52BC119E49F88F2A5D1466230B1275C7 ] C:\Program Files\Windows Collaboration\WinCollab.exe

16:14:12.0612 8076  C:\Program Files\Windows Collaboration\WinCollab.exe - ok

16:14:12.0614 8076  [ 7FA34E22A8649AA4EEA11F2D3F4D70D8 ] C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe

16:14:12.0614 8076  C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe - ok

16:14:12.0618 8076  [ DDF5324E0F3065846E9B65FF3AFD379E ] C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll

16:14:12.0618 8076  C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll - ok

16:14:12.0621 8076  [ 072D046EDBA5528868DB40328A8E56F5 ] C:\Program Files\IrfanView\i_view32.exe

16:14:12.0621 8076  C:\Program Files\IrfanView\i_view32.exe - ok

16:14:12.0625 8076  [ D286D7E49EC07ECA96B42F64ACC4F549 ] C:\Program Files\AVS4YOU\Uninstall.exe

16:14:12.0625 8076  C:\Program Files\AVS4YOU\Uninstall.exe - ok

16:14:12.0628 8076  [ B0AC88C4E3B63EC8B67768301D10E652 ] C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll

16:14:12.0628 8076  C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll - ok

16:14:12.0632 8076  [ B292E60B5334E6763BA365D8FD96D3B7 ] C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll

16:14:12.0632 8076  C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll - ok

16:14:12.0635 8076  [ 83AB0FCCF90A395AE71B7EA931C90529 ] C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll

16:14:12.0635 8076  C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll - ok

16:14:12.0639 8076  [ 5146B1592CD05550F5ECBDCB3D39B974 ] C:\Program Files\Logitech\SetPoint\LCabHandler.dll

16:14:12.0639 8076  C:\Program Files\Logitech\SetPoint\LCabHandler.dll - ok

16:14:12.0642 8076  [ A944A73CEC5921B871542FE5CC5E03E4 ] C:\Windows\System32\olepro32.dll

16:14:12.0642 8076  C:\Windows\System32\olepro32.dll - ok

16:14:12.0646 8076  [ 75563FF603C40F0A5486750E0C486CC2 ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll

16:14:12.0646 8076  C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll - ok

16:14:12.0649 8076  [ A3D643C27859499B4C0DA19B588F0D0C ] C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR

16:14:12.0649 8076  C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR - ok

16:14:12.0653 8076  [ 5058D323DDABFAD0D8D8BC2CAEF73070 ] C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR

16:14:12.0653 8076  C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR - ok

16:14:12.0657 8076  [ 1BE24D6164470F4C020AA084A1DAB989 ] C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll

16:14:12.0657 8076  C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll - ok

16:14:12.0660 8076  [ 4BBBD0FC5DD9E8F93003A0AB5BFF7314 ] C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe

16:14:12.0660 8076  C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe - ok

16:14:12.0664 8076  [ 965AC4EAC6ACCE91CD258F3BBD35E2B2 ] C:\Program Files\PL-photo3D\PL-photo3D.exe

16:14:12.0664 8076  C:\Program Files\PL-photo3D\PL-photo3D.exe - ok

16:14:12.0668 8076  [ 060FD02E806F725B04026B2AC90C1A10 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe

16:14:12.0668 8076  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe - ok

16:14:12.0672 8076  [ 744F08CF9ACFFB1C715191D04DEEE907 ] C:\Windows\System32\srchadmin.dll

16:14:12.0673 8076  C:\Windows\System32\srchadmin.dll - ok

16:14:12.0676 8076  [ 5193DE33F3284C447E0D31DAFBF92570 ] C:\Windows\System32\webcheck.dll

16:14:12.0676 8076  C:\Windows\System32\webcheck.dll - ok

16:14:12.0679 8076  [ 36314940CEDBA2962F1062F0DFF7D8FA ] C:\Program Files\HP Photo Creations\PhotoProduct.exe

16:14:12.0679 8076  C:\Program Files\HP Photo Creations\PhotoProduct.exe - ok

16:14:12.0683 8076  [ 4ACEA0C4BB15ACE55E3AE5EC4E88DD55 ] C:\Windows\System32\SyncCenter.dll

16:14:12.0683 8076  C:\Windows\System32\SyncCenter.dll - ok

16:14:12.0686 8076  [ 246C71A9846C3B4127318601031B5B07 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe

16:14:12.0686 8076  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe - ok

16:14:12.0690 8076  [ F37774719A5E1B26F57BC1C4B7575E4C ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe

16:14:12.0690 8076  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe - ok

16:14:12.0694 8076  [ C0ABD66F31C0B84CD944802E6D3D02C2 ] C:\Windows\System32\bthprops.cpl

16:14:12.0694 8076  C:\Windows\System32\bthprops.cpl - ok

16:14:12.0697 8076  [ 52B3E60A5EE8E9AB8C1C8B5607A9EEA4 ] C:\Program Files\ReconLabLE1.2\ReconLab.exe

16:14:12.0697 8076  C:\Program Files\ReconLabLE1.2\ReconLab.exe - ok

16:14:12.0700 8076  [ 834776318237B026554C74DBA6FA8CD4 ] C:\Program Files\IrfanView\iv_uninstall.exe

16:14:12.0700 8076  C:\Program Files\IrfanView\iv_uninstall.exe - ok

16:14:12.0703 8076  [ 66E9F5121482A086CF77B8A40827E922 ] C:\Program Files\WinRAR\WinRAR.exe

16:14:12.0703 8076  C:\Program Files\WinRAR\WinRAR.exe - ok

16:14:12.0707 8076  [ 62CACC4A9C7C2BF244AAA2A7AD9ECE6D ] C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

16:14:12.0707 8076  C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe - ok

16:14:12.0711 8076  [ D56021051E8246A48550CFEC1880F80E ] C:\Program Files\GIMP 2\bin\gimp-2.8.exe

16:14:12.0711 8076  C:\Program Files\GIMP 2\bin\gimp-2.8.exe - ok

16:14:12.0714 8076  [ 8728A91948AC0FE779BDF47BC551BAF5 ] C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe

16:14:12.0714 8076  C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe - ok

16:14:12.0717 8076  [ 6D796D59977EB52B33B966EAB9C73E6A ] C:\Program Files\Microsoft Works\MSWorks.exe

16:14:12.0717 8076  C:\Program Files\Microsoft Works\MSWorks.exe - ok

16:14:12.0721 8076  [ 8BC00165083171F8DE760AE39D76D003 ] C:\Program Files\Microsoft Works\wksdb.exe

16:14:12.0721 8076  C:\Program Files\Microsoft Works\wksdb.exe - ok

16:14:12.0724 8076  [ 0D392EDE3B97E0B3131B2F63EF1DB94E ] C:\Program Files\Windows Defender\MSASCui.exe

16:14:12.0724 8076  C:\Program Files\Windows Defender\MSASCui.exe - ok

16:14:12.0728 8076  [ 78EB73E81B94E7556D391844C5C03AC1 ] C:\Windows\System32\fsquirt.exe

16:14:12.0728 8076  C:\Windows\System32\fsquirt.exe - ok

16:14:12.0731 8076  [ 1ED2124313CCE34C877247574212EFC8 ] C:\Windows\System32\calc.exe

16:14:12.0731 8076  C:\Windows\System32\calc.exe - ok

16:14:12.0734 8076  [ 338104E0E18307CD65604FE317B5FB8D ] C:\Windows\System32\mblctr.exe

16:14:12.0734 8076  C:\Windows\System32\mblctr.exe - ok

16:14:12.0737 8076  [ B1AFF0B6DED627A1D22A6817DD58AC0F ] C:\Windows\System32\NetProj.exe

16:14:12.0737 8076  C:\Windows\System32\NetProj.exe - ok

16:14:12.0740 8076  [ 16FEE292E95EDC274385103E6B498019 ] C:\Windows\System32\mstsc.exe

16:14:12.0740 8076  C:\Windows\System32\mstsc.exe - ok

16:14:12.0744 8076  [ 9E35FF7F943AE0FB89192BFE058B7FD4 ] C:\Program Files\Windows Sidebar\sidebar.exe

16:14:12.0744 8076  C:\Program Files\Windows Sidebar\sidebar.exe - ok

16:14:12.0747 8076  [ E80DB295132C5EF0C623935422BD0FC7 ] C:\Windows\System32\SnippingTool.exe

16:14:12.0747 8076  C:\Windows\System32\SnippingTool.exe - ok

16:14:12.0750 8076  [ 248F33A6C2380757BC1E20E34D9E827B ] C:\Windows\System32\SoundRecorder.exe

16:14:12.0750 8076  C:\Windows\System32\SoundRecorder.exe - ok

16:14:12.0753 8076  [ 9B89B3BB79EA1ACF041F40A7B6FC5827 ] C:\Windows\System32\mobsync.exe

16:14:12.0753 8076  C:\Windows\System32\mobsync.exe - ok

16:14:12.0757 8076  [ 105A4D87C8DCF2CF5DB042830B203E5F ] C:\Windows\Speech\Common\sapisvr.exe

16:14:12.0757 8076  C:\Windows\Speech\Common\sapisvr.exe - ok

16:14:12.0760 8076  [ A623666C8A8EC9A57DCA07915A3F1EC6 ] C:\Windows\System32\sdclt.exe

16:14:12.0760 8076  C:\Windows\System32\sdclt.exe - ok

16:14:12.0763 8076  [ BB4910DE8B6C5E30DF39EC97308D44BA ] C:\Windows\System32\charmap.exe

16:14:12.0763 8076  C:\Windows\System32\charmap.exe - ok

16:14:12.0766 8076  [ 2327C11B043FCEB80BE00CC8D077E9AA ] C:\Windows\System32\dfrgui.exe

16:14:12.0766 8076  C:\Windows\System32\dfrgui.exe - ok

16:14:12.0769 8076  [ 86AB3F6C784197DC1D994A83AF4259CD ] C:\Windows\System32\cleanmgr.exe

16:14:12.0769 8076  C:\Windows\System32\cleanmgr.exe - ok

16:14:12.0772 8076  [ FBF628702A408977FEB0845D48F4F154 ] C:\Windows\System32\migwiz\migwiz.exe

16:14:12.0772 8076  C:\Windows\System32\migwiz\migwiz.exe - ok

16:14:12.0775 8076  ============================================================

16:14:12.0775 8076  Scan finished

16:14:12.0775 8076  ============================================================

16:14:12.0784 8068  Detected object count: 0

16:14:12.0784 8068  Actual detected object count: 0

16:14:40.0724 4936  ============================================================

16:14:40.0724 4936  Scan started

16:14:40.0724 4936  Mode: Manual; SigCheck; TDLFS; 

16:14:40.0724 4936  ============================================================

16:14:41.0181 4936  ================ Scan system memory ========================

16:14:41.0181 4936  System memory - ok

16:14:41.0182 4936  ================ Scan services =============================

16:14:42.0027 4936  [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI            C:\Windows\system32\drivers\acpi.sys

16:14:42.0176 4936  ACPI - ok

16:14:42.0358 4936  [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

16:14:42.0407 4936  adp94xx - ok

16:14:42.0453 4936  [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci         C:\Windows\system32\drivers\adpahci.sys

16:14:42.0484 4936  adpahci - ok

16:14:42.0523 4936  [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

16:14:42.0550 4936  adpu160m - ok

16:14:42.0576 4936  [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320         C:\Windows\system32\drivers\adpu320.sys

16:14:42.0604 4936  adpu320 - ok

16:14:42.0646 4936  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

16:14:42.0794 4936  AeLookupSvc - ok

16:14:42.0882 4936  [ 3911B972B55FEA0478476B2E777B29FA ] AFD             C:\Windows\system32\drivers\afd.sys

16:14:43.0014 4936  AFD - ok

16:14:43.0099 4936  [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440          C:\Windows\system32\drivers\agp440.sys

16:14:43.0125 4936  agp440 - ok

16:14:43.0198 4936  [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

16:14:43.0225 4936  aic78xx - ok

16:14:43.0367 4936  [ A1545B731579895D8CC44FC0481C1192 ] ALG             C:\Windows\System32\alg.exe

16:14:43.0488 4936  ALG - ok

16:14:43.0513 4936  [ C392B591746961B60F89FE1CBCA7B4FB ] aliide          C:\Windows\system32\drivers\aliide.sys

16:14:43.0542 4936  aliide - ok

16:14:43.0695 4936  [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

16:14:43.0721 4936  amdagp - ok

16:14:43.0763 4936  [ F5F8D2885D1DF33C74764EA2C06C0028 ] amdide          C:\Windows\system32\drivers\amdide.sys

16:14:43.0789 4936  amdide - ok

16:14:43.0834 4936  [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

16:14:44.0020 4936  AmdK7 - ok

16:14:44.0026 4936  [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

16:14:44.0119 4936  AmdK8 - ok

16:14:44.0235 4936  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo         C:\Windows\System32\appinfo.dll

16:14:44.0328 4936  Appinfo - ok

16:14:44.0353 4936  [ 5F673180268BB1FDB69C99B6619FE379 ] arc             C:\Windows\system32\drivers\arc.sys

16:14:44.0379 4936  arc - ok

16:14:44.0413 4936  [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

16:14:44.0439 4936  arcsas - ok

16:14:44.0641 4936  [ 40C145F12FF461A0220303BDA134F598 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

16:14:44.0706 4936  aspnet_state - ok

16:14:44.0790 4936  [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

16:14:44.0841 4936  AsyncMac - ok

16:14:44.0941 4936  [ BFD3DF48C9ED81934FE21E8E3CFC2496 ] atapi           C:\Windows\system32\drivers\atapi.sys

16:14:44.0959 4936  atapi - ok

16:14:45.0137 4936  [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:14:45.0209 4936  AudioEndpointBuilder - ok

16:14:45.0216 4936  [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv        C:\Windows\System32\Audiosrv.dll

16:14:45.0278 4936  Audiosrv - ok

16:14:45.0600 4936  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:14:45.0637 4936  Automatic LiveUpdate Scheduler - ok

16:14:45.0698 4936  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep            C:\Windows\system32\drivers\Beep.sys

16:14:45.0768 4936  Beep - ok

16:14:45.0818 4936  [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE             C:\Windows\System32\bfe.dll

16:14:45.0907 4936  BFE - ok

16:14:46.0114 4936  [ 93952506C6D67330367F7E7934B6A02F ] BITS            C:\Windows\System32\qmgr.dll

16:14:46.0213 4936  BITS - ok

16:14:46.0219 4936  blbdrive - ok

16:14:46.0276 4936  [ 35F376253F687BDE63976CCB3F2108CA ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

16:14:46.0393 4936  bowser - ok

16:14:46.0443 4936  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

16:14:46.0527 4936  BrFiltLo - ok

16:14:46.0543 4936  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

16:14:46.0594 4936  BrFiltUp - ok

16:14:46.0694 4936  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser         C:\Windows\System32\browser.dll

16:14:46.0785 4936  Browser - ok

16:14:46.0837 4936  [ B304E75CFF293029EDDF094246747113 ] Brserid         C:\Windows\system32\drivers\brserid.sys

16:14:46.0917 4936  Brserid - ok

16:14:46.0949 4936  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

16:14:47.0052 4936  BrSerWdm - ok

16:14:47.0084 4936  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

16:14:47.0183 4936  BrUsbMdm - ok

16:14:47.0265 4936  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

16:14:47.0366 4936  BrUsbSer - ok

16:14:47.0410 4936  [ 6D39C954799B63BA866910234CF7D726 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

16:14:47.0495 4936  BthEnum - ok

16:14:47.0544 4936  [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

16:14:47.0651 4936  BTHMODEM - ok

16:14:47.0707 4936  [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

16:14:47.0768 4936  BthPan - ok

16:14:47.0878 4936  [ 73D53F8E90550BA81E2CF44A0873B410 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

16:14:47.0954 4936  BTHPORT - ok

16:14:48.0004 4936  [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ         C:\Windows\System32\bthserv.dll

16:14:48.0083 4936  BthServ - ok

16:14:48.0098 4936  [ 32045A4BB143BBC5BAB1298C4E9E309A ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

16:14:48.0167 4936  BTHUSB - ok

16:14:48.0329 4936  [ 1778EBA872274C1226D869CD9486847E ] Capture Device Service C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:14:48.0365 4936  Capture Device Service - ok

16:14:48.0564 4936  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccEvtMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:14:48.0623 4936  ccEvtMgr - ok

16:14:48.0630 4936  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccSetMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:14:48.0702 4936  ccSetMgr - ok

16:14:48.0758 4936  [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

16:14:48.0824 4936  cdfs - ok

16:14:48.0907 4936  [ 6B4BFFB9BECD728097024276430DB314 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

16:14:49.0008 4936  cdrom - ok

16:14:49.0057 4936  [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc     C:\Windows\System32\certprop.dll

16:14:49.0137 4936  CertPropSvc - ok

16:14:49.0155 4936  [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass        C:\Windows\system32\drivers\circlass.sys

16:14:49.0244 4936  circlass - ok

16:14:49.0314 4936  [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS            C:\Windows\system32\CLFS.sys

16:14:49.0347 4936  CLFS - ok

16:14:49.0388 4936  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:14:49.0444 4936  clr_optimization_v2.0.50727_32 - ok

16:14:49.0606 4936  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:14:49.0642 4936  clr_optimization_v4.0.30319_32 - ok

16:14:49.0656 4936  [ 2F237AAB91497AAA03AF48EAE68758FC ] CLTNetCnService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:14:49.0712 4936  CLTNetCnService - ok

16:14:49.0806 4936  [ 78D56FE738F63D7FEFCC7B396C5DCB67 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

16:14:49.0824 4936  cmdide - ok

16:14:49.0875 4936  [ 6186B6B953BDC884F0F379B84B3E3A98 ] COH_Mon         C:\Windows\system32\Drivers\COH_Mon.sys

16:14:49.0890 4936  COH_Mon - ok

16:14:49.0981 4936  [ 75A69CA9998577F8B2BE8695040E5DF4 ] comHost         C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

16:14:50.0002 4936  comHost - ok

16:14:50.0008 4936  [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

16:14:50.0027 4936  Compbatt - ok

16:14:50.0032 4936  COMSysApp - ok

16:14:50.0075 4936  [ 73F5D6835BFA66019C03E316D99649DA ] CO_Mon          C:\Windows\system32\drivers\CO_Mon.sys

16:14:50.0092 4936  CO_Mon - ok

16:14:50.0156 4936  [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

16:14:50.0176 4936  crcdisk - ok

16:14:50.0201 4936  [ 22A7F883508176489F559EE745B5BF5D ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

16:14:50.0275 4936  Crusoe - ok

16:14:50.0308 4936  [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

16:14:50.0378 4936  CryptSvc - ok

16:14:50.0521 4936  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch      C:\Windows\system32\rpcss.dll

16:14:50.0591 4936  DcomLaunch - ok

16:14:50.0631 4936  [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

16:14:50.0725 4936  DfsC - ok

16:14:50.0806 4936  [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR            C:\Windows\system32\DFSR.exe

16:14:50.0940 4936  DFSR - ok

16:14:51.0009 4936  [ 9028559C132146FB75EB7ACF384B086A ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

16:14:51.0069 4936  Dhcp - ok

16:14:51.0118 4936  [ 5D4AEFC3386920236A548271F8F1AF6A ] disk            C:\Windows\system32\drivers\disk.sys

16:14:51.0146 4936  disk - ok

16:14:51.0196 4936  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache        C:\Windows\System32\dnsrslvr.dll

16:14:51.0248 4936  Dnscache - ok

16:14:51.0297 4936  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc         C:\Windows\System32\dot3svc.dll

16:14:51.0349 4936  dot3svc - ok

16:14:51.0395 4936  [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

16:14:51.0482 4936  Dot4 - ok

16:14:51.0526 4936  [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

16:14:51.0567 4936  Dot4Print - ok

16:14:51.0591 4936  [ C55004CA6B419B6695970DFE849B122F ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

16:14:51.0655 4936  dot4usb - ok

16:14:51.0671 4936  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS             C:\Windows\system32\dps.dll

16:14:51.0717 4936  DPS - ok

16:14:51.0776 4936  [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

16:14:51.0842 4936  drmkaud - ok

16:14:52.0076 4936  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

16:14:52.0127 4936  DXGKrnl - ok

16:14:52.0147 4936  [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

16:14:52.0249 4936  E1G60 - ok

16:14:52.0283 4936  [ C0B95E40D85CD807D614E264248A45B9 ] EapHost         C:\Windows\System32\eapsvc.dll

16:14:52.0342 4936  EapHost - ok

16:14:52.0411 4936  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache          C:\Windows\system32\drivers\ecache.sys

16:14:52.0442 4936  Ecache - ok

16:14:52.0503 4936  [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl          C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:14:52.0562 4936  eeCtrl - ok

16:14:52.0603 4936  [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

16:14:52.0695 4936  ehRecvr - ok

16:14:52.0721 4936  [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched         C:\Windows\ehome\ehsched.exe

16:14:52.0861 4936  ehSched - ok

16:14:52.0882 4936  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart         C:\Windows\ehome\ehstart.dll

16:14:52.0939 4936  ehstart - ok

16:14:53.0032 4936  [ E8F3F21A71720C84BCF423B80028359F ] elxstor         C:\Windows\system32\drivers\elxstor.sys

16:14:53.0063 4936  elxstor - ok

16:14:53.0296 4936  [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

16:14:53.0509 4936  EMDMgmt - ok

16:14:53.0567 4936  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:14:53.0592 4936  EraserUtilRebootDrv - ok

16:14:53.0649 4936  [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem     C:\Windows\system32\es.dll

16:14:53.0735 4936  EventSystem - ok

16:14:53.0786 4936  [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat           C:\Windows\system32\drivers\exfat.sys

16:14:53.0859 4936  exfat - ok

16:14:53.0920 4936  [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

16:14:53.0960 4936  fastfat - ok

16:14:54.0033 4936  [ 63BDADA84951B9C03E641800E176898A ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

16:14:54.0132 4936  fdc - ok

16:14:54.0182 4936  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost         C:\Windows\system32\fdPHost.dll

16:14:54.0250 4936  fdPHost - ok

16:14:54.0290 4936  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub        C:\Windows\system32\fdrespub.dll

16:14:54.0379 4936  FDResPub - ok

16:14:54.0410 4936  [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

16:14:54.0441 4936  FileInfo - ok

16:14:54.0512 4936  [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

16:14:54.0588 4936  Filetrace - ok

16:14:54.0643 4936  [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

16:14:54.0734 4936  flpydisk - ok

16:14:54.0827 4936  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

16:14:54.0858 4936  FltMgr - ok

16:14:55.0340 4936  [ 8795FD92B624648DABE7B75129EF8002 ] FMS             C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:14:55.0464 4936  FMS ( UnsignedFile.Multi.Generic ) - warning

16:14:55.0464 4936  FMS - detected UnsignedFile.Multi.Generic (1)

16:14:55.0605 4936  [ 2DB70167C13F2339A63E694291FD1BFD ] FMSAdmin        C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:14:55.0687 4936  FMSAdmin ( UnsignedFile.Multi.Generic ) - warning

16:14:55.0687 4936  FMSAdmin - detected UnsignedFile.Multi.Generic (1)

16:14:55.0823 4936  [ 8881574868E648689B7AA88A88716E17 ] FMSHttpd        C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:14:55.0867 4936  FMSHttpd ( UnsignedFile.Multi.Generic ) - warning

16:14:55.0867 4936  FMSHttpd - detected UnsignedFile.Multi.Generic (1)

16:14:55.0975 4936  [ 8CE364388C8ECA59B14B539179276D44 ] FontCache       C:\Windows\system32\FntCache.dll

16:14:56.0041 4936  FontCache - ok

16:14:56.0198 4936  [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

16:14:56.0233 4936  FontCache3.0.0.0 - ok

16:14:56.0309 4936  [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

16:14:56.0409 4936  Fs_Rec - ok

16:14:56.0458 4936  [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

16:14:56.0482 4936  gagp30kx - ok

16:14:56.0519 4936  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] GEARAspiWDM     C:\Windows\system32\Drivers\GEARAspiWDM.sys

16:14:56.0538 4936  GEARAspiWDM - ok

16:14:56.0718 4936  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc           C:\Windows\System32\gpsvc.dll

16:14:56.0785 4936  gpsvc - ok

16:14:56.0918 4936  [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9942c2d4a157c C:\Program Files\Google\Update\GoogleUpdate.exe

16:14:56.0949 4936  gupdate1c9942c2d4a157c - ok

16:14:56.0989 4936  [ 626A24ED1228580B9518C01930936DF9 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

16:14:57.0019 4936  gupdatem - ok

16:14:57.0108 4936  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:14:57.0148 4936  gusvc - ok

16:14:57.0209 4936  [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

16:14:57.0294 4936  HDAudBus - ok

16:14:57.0329 4936  [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth          C:\Windows\system32\drivers\hidbth.sys

16:14:57.0410 4936  HidBth - ok

16:14:57.0439 4936  [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr           C:\Windows\system32\drivers\hidir.sys

16:14:57.0504 4936  HidIr - ok

16:14:57.0531 4936  [ 84067081F3318162797385E11A8F0582 ] hidserv         C:\Windows\system32\hidserv.dll

16:14:57.0561 4936  hidserv - ok

16:14:57.0637 4936  [ CCA4B519B17E23A00B826C55716809CC ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

16:14:57.0699 4936  HidUsb - ok

16:14:57.0753 4936  [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc          C:\Windows\system32\kmsvc.dll

16:14:57.0831 4936  hkmsvc - ok

16:14:57.0980 4936  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

16:14:58.0028 4936  HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning

16:14:58.0028 4936  HP Health Check Service - detected UnsignedFile.Multi.Generic (1)

16:14:58.0065 4936  [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

16:14:58.0090 4936  HpCISSs - ok

16:14:58.0245 4936  [ 58D4765AB87347DB835D5693ADF652C1 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:14:58.0268 4936  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

16:14:58.0268 4936  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

16:14:58.0309 4936  [ 99ED733F614660EB32199BF889DFB7E2 ] hpqddsvc        C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:14:58.0361 4936  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

16:14:58.0362 4936  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

16:14:58.0457 4936  [ 75F122CDCA3C71BD09089F2CA824B796 ] HPSLPSVC        C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:14:58.0522 4936  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

16:14:58.0522 4936  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

16:14:58.0619 4936  [ F870AA3E254628EBEAFE754108D664DE ] HTTP            C:\Windows\system32\drivers\HTTP.sys

16:14:58.0702 4936  HTTP - ok

16:14:58.0753 4936  [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

16:14:58.0783 4936  i2omp - ok

16:14:58.0814 4936  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

16:14:58.0884 4936  i8042prt - ok

16:14:59.0058 4936  [ 204A73A56751C68C6031E9D5D611EC98 ] IAANTMON        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

16:14:59.0097 4936  IAANTMON - ok

16:14:59.0138 4936  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] iaStor          C:\Windows\system32\drivers\iastor.sys

16:14:59.0166 4936  iaStor - ok

16:14:59.0253 4936  [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

16:14:59.0282 4936  iaStorV - ok

16:14:59.0406 4936  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

16:14:59.0438 4936  IDriverT ( UnsignedFile.Multi.Generic ) - warning

16:14:59.0438 4936  IDriverT - detected UnsignedFile.Multi.Generic (1)

16:14:59.0564 4936  [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

16:14:59.0619 4936  idsvc - ok

16:14:59.0901 4936  [ F85DC24DAFA76237722FE38B3196C61A ] IDSvix86        C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:14:59.0930 4936  IDSvix86 - ok

16:14:59.0952 4936  [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

16:14:59.0982 4936  iirsp - ok

16:15:00.0129 4936  [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT          C:\Windows\System32\ikeext.dll

16:15:00.0219 4936  IKEEXT - ok

16:15:00.0343 4936  [ EDC37B918E583A5A813C53D4F5588255 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

16:15:00.0450 4936  IntcAzAudAddService - ok

16:15:00.0478 4936  [ E08FB545EDA9D1E3CA689B4B3F6E4C22 ] intelide        C:\Windows\system32\drivers\intelide.sys

16:15:00.0504 4936  intelide - ok

16:15:00.0560 4936  [ 224191001E78C89DFA78924C3EA595FF ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

16:15:00.0633 4936  intelppm - ok

16:15:00.0678 4936  [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

16:15:00.0723 4936  IPBusEnum - ok

16:15:00.0784 4936  [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:15:00.0850 4936  IpFilterDriver - ok

16:15:00.0947 4936  [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

16:15:01.0025 4936  iphlpsvc - ok

16:15:01.0030 4936  IpInIp - ok

16:15:01.0115 4936  [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

16:15:01.0201 4936  IPMIDRV - ok

16:15:01.0276 4936  [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

16:15:01.0322 4936  IPNAT - ok

16:15:01.0385 4936  [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

16:15:01.0427 4936  IRENUM - ok

16:15:01.0433 4936  [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

16:15:01.0460 4936  isapnp - ok

16:15:01.0528 4936  [ 232FA340531D940AAC623B121A595034 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

16:15:01.0560 4936  iScsiPrt - ok

16:15:01.0579 4936  [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

16:15:01.0608 4936  iteatapi - ok

16:15:01.0635 4936  [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid         C:\Windows\system32\drivers\iteraid.sys

16:15:01.0660 4936  iteraid - ok

16:15:01.0703 4936  [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

16:15:01.0732 4936  kbdclass - ok

16:15:01.0759 4936  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

16:15:01.0818 4936  kbdhid - ok

16:15:01.0874 4936  [ A3E186B4B935905B829219502557314E ] KeyIso          C:\Windows\system32\lsass.exe

16:15:01.0994 4936  KeyIso - ok

16:15:02.0068 4936  [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

16:15:02.0116 4936  KSecDD - ok

16:15:02.0237 4936  [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm           C:\Windows\system32\msdtckrm.dll

16:15:02.0348 4936  KtmRm - ok

16:15:02.0410 4936  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] L8042Kbd        C:\Windows\system32\DRIVERS\L8042Kbd.sys

16:15:02.0433 4936  L8042Kbd - ok

16:15:02.0515 4936  [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer    C:\Windows\system32\srvsvc.dll

16:15:02.0579 4936  LanmanServer - ok

16:15:02.0697 4936  [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:15:02.0769 4936  LanmanWorkstation - ok

16:15:02.0936 4936  [ 3AF6B73A3AD1FC37C5933441F66CEB91 ] LBTServ         C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

16:15:02.0972 4936  LBTServ - ok

16:15:03.0046 4936  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

16:15:03.0069 4936  LHidFilt - ok

16:15:03.0110 4936  [ 9039717A906DA0AE38420918801D9AB3 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:15:03.0143 4936  LightScribeService - ok

16:15:03.0375 4936  [ 36375738DC0B3CD1F764268008E74FDF ] LiveUpdate      C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

16:15:03.0493 4936  LiveUpdate - ok

16:15:03.0561 4936  [ 2F237AAB91497AAA03AF48EAE68758FC ] LiveUpdate Notice C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:15:03.0620 4936  LiveUpdate Notice - ok

16:15:03.0698 4936  [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

16:15:03.0774 4936  lltdio - ok

16:15:03.0849 4936  [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

16:15:03.0911 4936  lltdsvc - ok

16:15:03.0956 4936  [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts         C:\Windows\System32\lmhsvc.dll

16:15:04.0022 4936  lmhosts - ok

16:15:04.0038 4936  [ AB33792A87285344F43B5CE23421BAB0 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

16:15:04.0061 4936  LMouFilt - ok

16:15:04.0092 4936  [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

16:15:04.0118 4936  LSI_FC - ok

16:15:04.0124 4936  [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

16:15:04.0150 4936  LSI_SAS - ok

16:15:04.0170 4936  [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

16:15:04.0196 4936  LSI_SCSI - ok

16:15:04.0247 4936  [ 8F5C7426567798E62A3B3614965D62CC ] luafv           C:\Windows\system32\drivers\luafv.sys

16:15:04.0292 4936  luafv - ok

16:15:04.0332 4936  [ 77030525CD86A93F1AF34FA9B96D33CE ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

16:15:04.0354 4936  LUsbFilt - ok

16:15:04.0394 4936  [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

16:15:04.0447 4936  Mcx2Svc - ok

16:15:04.0480 4936  [ D153B14FC6598EAE8422A2037553ADCE ] megasas         C:\Windows\system32\drivers\megasas.sys

16:15:04.0505 4936  megasas - ok

16:15:04.0519 4936  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS           C:\Windows\system32\mmcss.dll

16:15:04.0589 4936  MMCSS - ok

16:15:04.0632 4936  [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem           C:\Windows\system32\drivers\modem.sys

16:15:04.0696 4936  Modem - ok

16:15:04.0763 4936  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

16:15:04.0807 4936  monitor - ok

16:15:04.0841 4936  [ 5BF6A1326A335C5298477754A506D263 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

16:15:04.0868 4936  mouclass - ok

16:15:04.0916 4936  [ 93B8D4869E12CFBE663915502900876F ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

16:15:04.0997 4936  mouhid - ok

16:15:05.0056 4936  [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

16:15:05.0084 4936  MountMgr - ok

16:15:05.0111 4936  [ 583A41F26278D9E0EA548163D6139397 ] mpio            C:\Windows\system32\drivers\mpio.sys

16:15:05.0139 4936  mpio - ok

16:15:05.0160 4936  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

16:15:05.0225 4936  mpsdrv - ok

16:15:05.0281 4936  [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc          C:\Windows\system32\mpssvc.dll

16:15:05.0357 4936  MpsSvc - ok

16:15:05.0388 4936  [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

16:15:05.0413 4936  Mraid35x - ok

16:15:05.0464 4936  [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

16:15:05.0542 4936  MRxDAV - ok

16:15:05.0580 4936  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

16:15:05.0631 4936  mrxsmb - ok

16:15:05.0679 4936  [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:15:05.0732 4936  mrxsmb10 - ok

16:15:05.0765 4936  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:15:05.0794 4936  mrxsmb20 - ok

16:15:05.0841 4936  [ D537C241DB604FA86E46328DA0FD83D6 ] msahci          C:\Windows\system32\drivers\msahci.sys

16:15:05.0867 4936  msahci - ok

16:15:05.0888 4936  [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

16:15:05.0915 4936  msdsm - ok

16:15:05.0970 4936  [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC           C:\Windows\System32\msdtc.exe

16:15:06.0033 4936  MSDTC - ok

16:15:06.0130 4936  [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

16:15:06.0210 4936  Msfs - ok

16:15:06.0264 4936  [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

16:15:06.0290 4936  msisadrv - ok

16:15:06.0328 4936  [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

16:15:06.0402 4936  MSiSCSI - ok

16:15:06.0407 4936  msiserver - ok

16:15:06.0427 4936  [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

16:15:06.0490 4936  MSKSSRV - ok

16:15:06.0531 4936  [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

16:15:06.0561 4936  MSPCLOCK - ok

16:15:06.0617 4936  [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

16:15:06.0646 4936  MSPQM - ok

16:15:06.0697 4936  [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

16:15:06.0717 4936  MsRPC - ok

16:15:06.0746 4936  [ E384487CB84BE41D09711C30CA79646C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

16:15:06.0765 4936  mssmbios - ok

16:15:06.0835 4936  MSSQL$SQLEXPRESS - ok

16:15:06.0905 4936  [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

16:15:06.0953 4936  MSSQLServerADHelper100 - ok

16:15:07.0018 4936  [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

16:15:07.0052 4936  MSTEE - ok

16:15:07.0101 4936  [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup             C:\Windows\system32\Drivers\mup.sys

16:15:07.0125 4936  Mup - ok

16:15:07.0268 4936  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent        C:\Windows\system32\qagentRT.dll

16:15:07.0348 4936  napagent - ok

16:15:07.0445 4936  [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

16:15:07.0478 4936  NativeWifiP - ok

16:15:07.0649 4936  [ 8E4C77AD9BB279900C00F870CC0C674B ] NAVENG          C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:15:07.0673 4936  NAVENG - ok

16:15:07.0966 4936  [ 826F699B69E88A3920C70F344DD42D88 ] NAVEX15         C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:15:08.0083 4936  NAVEX15 - ok

16:15:08.0278 4936  [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS            C:\Windows\system32\drivers\ndis.sys

16:15:08.0349 4936  NDIS - ok

16:15:08.0392 4936  [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

16:15:08.0458 4936  NdisTapi - ok

16:15:08.0496 4936  [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

16:15:08.0538 4936  Ndisuio - ok

16:15:08.0592 4936  [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

16:15:08.0673 4936  NdisWan - ok

16:15:08.0735 4936  [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

16:15:08.0772 4936  NDProxy - ok

16:15:08.0814 4936  [ 19715A9A573DAD2521348ABC74266A48 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

16:15:08.0861 4936  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

16:15:08.0861 4936  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

16:15:08.0887 4936  [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

16:15:08.0972 4936  NetBIOS - ok

16:15:09.0060 4936  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

16:15:09.0150 4936  netbt - ok

16:15:09.0198 4936  [ A3E186B4B935905B829219502557314E ] Netlogon        C:\Windows\system32\lsass.exe

16:15:09.0244 4936  Netlogon - ok

16:15:09.0388 4936  [ C8052711DAECC48B982434C5116CA401 ] Netman          C:\Windows\System32\netman.dll

16:15:09.0468 4936  Netman - ok

16:15:09.0843 4936  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:15:09.0870 4936  NetMsmqActivator - ok

16:15:09.0875 4936  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:15:09.0902 4936  NetPipeActivator - ok

16:15:09.0946 4936  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm        C:\Windows\System32\netprofm.dll

16:15:10.0022 4936  netprofm - ok

16:15:10.0031 4936  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:15:10.0058 4936  NetTcpActivator - ok

16:15:10.0068 4936  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:15:10.0095 4936  NetTcpPortSharing - ok

16:15:10.0147 4936  [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

16:15:10.0165 4936  nfrd960 - ok

16:15:10.0242 4936  [ 183CBAD181DEDAC0119B2861C426AC14 ] NitroReaderDriverReadSpool C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:15:10.0292 4936  NitroReaderDriverReadSpool - ok

16:15:10.0348 4936  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc          C:\Windows\System32\nlasvc.dll

16:15:10.0414 4936  NlaSvc - ok

16:15:10.0457 4936  [ 6623E51595C0076755C29C00846C4EB2 ] NPF             C:\Windows\system32\drivers\npf.sys

16:15:10.0480 4936  NPF - ok

16:15:10.0538 4936  [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

16:15:10.0609 4936  Npfs - ok

16:15:10.0652 4936  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi             C:\Windows\system32\nsisvc.dll

16:15:10.0721 4936  nsi - ok

16:15:10.0771 4936  [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

16:15:10.0807 4936  nsiproxy - ok

16:15:11.0129 4936  [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

16:15:11.0236 4936  Ntfs - ok

16:15:11.0296 4936  [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

16:15:11.0391 4936  ntrigdigi - ok

16:15:11.0454 4936  [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null            C:\Windows\system32\drivers\Null.sys

16:15:11.0495 4936  Null - ok

16:15:13.0110 4936  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:15:13.0692 4936  nvlddmkm - ok

16:15:13.0781 4936  [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

16:15:13.0800 4936  nvraid - ok

16:15:13.0805 4936  [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

16:15:13.0823 4936  nvstor - ok

16:15:13.0938 4936  [ 782945716AD010AC3D41758E8E52C735 ] nvsvc           C:\Windows\system32\nvvsvc.exe

16:15:13.0980 4936  nvsvc - ok

16:15:14.0133 4936  [ A974E5C310B9B00894070CEB055D467F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:15:14.0199 4936  nvUpdatusService - ok

16:15:14.0237 4936  [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

16:15:14.0259 4936  nv_agp - ok

16:15:14.0263 4936  NwlnkFlt - ok

16:15:14.0268 4936  NwlnkFwd - ok

16:15:14.0354 4936  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

16:15:14.0407 4936  odserv - ok

16:15:14.0477 4936  [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

16:15:14.0550 4936  ohci1394 - ok

16:15:14.0598 4936  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:15:14.0660 4936  ose - ok

16:15:14.0732 4936  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

16:15:14.0822 4936  p2pimsvc - ok

16:15:14.0833 4936  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc          C:\Windows\system32\p2psvc.dll

16:15:14.0870 4936  p2psvc - ok

16:15:14.0907 4936  [ 0FA9B5055484649D63C303FE404E5F4D ] Parport         C:\Windows\system32\drivers\parport.sys

16:15:14.0993 4936  Parport - ok

16:15:15.0039 4936  [ B9C2B89F08670E159F7181891E449CD9 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

16:15:15.0065 4936  partmgr - ok

16:15:15.0091 4936  [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

16:15:15.0183 4936  Parvdm - ok

16:15:15.0221 4936  [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc          C:\Windows\System32\pcasvc.dll

16:15:15.0306 4936  PcaSvc - ok

16:15:15.0348 4936  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfd.sys

16:15:15.0423 4936  pccsmcfd - ok

16:15:15.0518 4936  [ 941DC1D19E7E8620F40BBC206981EFDB ] pci             C:\Windows\system32\drivers\pci.sys

16:15:15.0550 4936  pci - ok

16:15:15.0627 4936  [ A88FF9E32AAA9AF398AE89B9A082870B ] pciide          C:\Windows\system32\drivers\pciide.sys

16:15:15.0653 4936  pciide - ok

16:15:15.0692 4936  [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

16:15:15.0721 4936  pcmcia - ok

16:15:15.0883 4936  [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

16:15:15.0969 4936  PEAUTH - ok

16:15:16.0022 4936  [ B1689DF169143F57053F795390C99DB3 ] pla             C:\Windows\system32\pla.dll

16:15:16.0118 4936  pla - ok

16:15:16.0157 4936  [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

16:15:16.0192 4936  PlugPlay - ok

16:15:16.0233 4936  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

16:15:16.0248 4936  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

16:15:16.0248 4936  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

16:15:16.0338 4936  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

16:15:16.0376 4936  PNRPAutoReg - ok

16:15:16.0386 4936  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

16:15:16.0463 4936  PNRPsvc - ok

16:15:16.0529 4936  [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

16:15:16.0590 4936  PolicyAgent - ok

16:15:16.0668 4936  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

16:15:16.0707 4936  PptpMiniport - ok

16:15:16.0751 4936  [ 0E3CEF5D28B40CF273281D620C50700A ] Processor       C:\Windows\system32\drivers\processr.sys

16:15:16.0808 4936  Processor - ok

16:15:16.0890 4936  [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc         C:\Windows\system32\profsvc.dll

16:15:16.0927 4936  ProfSvc - ok

16:15:16.0947 4936  [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe

16:15:16.0994 4936  ProtectedStorage - ok

16:15:17.0062 4936  [ F115AF58ABE5605D7D709CBFBD83F418 ] ProtexisLicensing C:\Windows\system32\PSIService.exe

16:15:17.0100 4936  ProtexisLicensing - ok

16:15:17.0127 4936  [ 390C204CED3785609AB24E9C52054A84 ] Ps2             C:\Windows\system32\DRIVERS\PS2.sys

16:15:17.0232 4936  Ps2 - ok

16:15:17.0276 4936  [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

16:15:17.0335 4936  PSched - ok

16:15:17.0376 4936  [ CCDAC889326317792480C0A67156A1EC ] ql2300          C:\Windows\system32\drivers\ql2300.sys

16:15:17.0446 4936  ql2300 - ok

16:15:17.0479 4936  [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

16:15:17.0506 4936  ql40xx - ok

16:15:17.0583 4936  [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE           C:\Windows\system32\qwave.dll

16:15:17.0675 4936  QWAVE - ok

16:15:17.0698 4936  [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

16:15:17.0783 4936  QWAVEdrv - ok

16:15:17.0832 4936  [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

16:15:17.0875 4936  RasAcd - ok

16:15:17.0947 4936  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto         C:\Windows\System32\rasauto.dll

16:15:18.0012 4936  RasAuto - ok

16:15:18.0086 4936  [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

16:15:18.0171 4936  Rasl2tp - ok

16:15:18.0288 4936  [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan          C:\Windows\System32\rasmans.dll

16:15:18.0372 4936  RasMan - ok

16:15:18.0425 4936  [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

16:15:18.0454 4936  RasPppoe - ok

16:15:18.0520 4936  [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

16:15:18.0563 4936  RasSstp - ok

16:15:18.0629 4936  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

16:15:18.0666 4936  rdbss - ok

16:15:18.0703 4936  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

16:15:18.0800 4936  RDPCDD - ok

16:15:18.0930 4936  [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

16:15:19.0000 4936  rdpdr - ok

16:15:19.0039 4936  [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

16:15:19.0086 4936  RDPENCDD - ok

16:15:19.0201 4936  [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

16:15:19.0344 4936  RDPWD - ok

16:15:19.0407 4936  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess    C:\Windows\System32\mprdim.dll

16:15:19.0523 4936  RemoteAccess - ok

16:15:19.0668 4936  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry  C:\Windows\system32\regsvc.dll

16:15:19.0764 4936  RemoteRegistry - ok

16:15:19.0879 4936  [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

16:15:19.0918 4936  RFCOMM - ok

16:15:19.0971 4936  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

16:15:20.0013 4936  ROOTMODEM - ok

16:15:20.0017 4936  rpcapd - ok

16:15:20.0054 4936  [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator      C:\Windows\system32\locator.exe

16:15:20.0228 4936  RpcLocator - ok

16:15:20.0456 4936  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs           C:\Windows\system32\rpcss.dll

16:15:20.0511 4936  RpcSs - ok

16:15:20.0675 4936  [ FD692C6FFADE58F7C4C3C3C9A0EC35BD ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

16:15:20.0709 4936  RsFx0103 - ok

16:15:20.0751 4936  [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

16:15:20.0795 4936  rspndr - ok

16:15:20.0881 4936  [ C347A3CDE57077056E7E73D3498F7D7D ] RTL8169         C:\Windows\system32\DRIVERS\Rtlh86.sys

16:15:21.0021 4936  RTL8169 - ok

16:15:21.0062 4936  [ A3E186B4B935905B829219502557314E ] SamSs           C:\Windows\system32\lsass.exe

16:15:21.0109 4936  SamSs - ok

16:15:21.0151 4936  [ 3CE8F073A557E172B330109436984E30 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

16:15:21.0178 4936  sbp2port - ok

16:15:21.0352 4936  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

16:15:21.0448 4936  SCardSvr - ok

16:15:21.0659 4936  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule        C:\Windows\system32\schedsvc.dll

16:15:21.0838 4936  Schedule - ok

16:15:21.0893 4936  [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc     C:\Windows\System32\certprop.dll

16:15:21.0929 4936  SCPolicySvc - ok

16:15:22.0022 4936  [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

16:15:22.0124 4936  SDRSVC - ok

16:15:22.0160 4936  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

16:15:22.0254 4936  secdrv - ok

16:15:22.0394 4936  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon        C:\Windows\system32\seclogon.dll

16:15:22.0488 4936  seclogon - ok

16:15:22.0573 4936  [ A9BBAB5759771E523F55563D6CBE140F ] SENS            C:\Windows\System32\sens.dll

16:15:22.0706 4936  SENS - ok

16:15:22.0802 4936  [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum         C:\Windows\system32\drivers\serenum.sys

16:15:22.0893 4936  Serenum - ok

16:15:22.0949 4936  [ C70D69A918B178D3C3B06339B40C2E1B ] Serial          C:\Windows\system32\drivers\serial.sys

16:15:23.0016 4936  Serial - ok

16:15:23.0108 4936  [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

16:15:23.0157 4936  sermouse - ok

16:15:23.0485 4936  [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

16:15:23.0607 4936  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning

16:15:23.0607 4936  ServiceLayer - detected UnsignedFile.Multi.Generic (1)

16:15:23.0707 4936  [ D2193326F729B163125610DBF3E17D57 ] SessionEnv      C:\Windows\system32\sessenv.dll

16:15:23.0754 4936  SessionEnv - ok

16:15:23.0824 4936  [ 51CF56AA8BCC241F134B420B8F850406 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

16:15:23.0895 4936  sffdisk - ok

16:15:23.0941 4936  [ 96DED8B20C734AC41641CE275250E55D ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

16:15:24.0007 4936  sffp_mmc - ok

16:15:24.0054 4936  [ 8B08CAB1267B2C377883FC9E56981F90 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

16:15:24.0080 4936  sffp_sd - ok

16:15:24.0096 4936  [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

16:15:24.0189 4936  sfloppy - ok

16:15:24.0246 4936  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

16:15:24.0320 4936  SharedAccess - ok

16:15:24.0418 4936  [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:15:24.0523 4936  ShellHWDetection - ok

16:15:24.0545 4936  [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

16:15:24.0565 4936  sisagp - ok

16:15:24.0602 4936  [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

16:15:24.0620 4936  SiSRaid2 - ok

16:15:24.0653 4936  [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

16:15:24.0672 4936  SiSRaid4 - ok

16:15:24.0889 4936  [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc           C:\Windows\system32\SLsvc.exe

16:15:25.0096 4936  slsvc - ok

16:15:25.0146 4936  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify      C:\Windows\system32\SLUINotify.dll

16:15:25.0215 4936  SLUINotify - ok

16:15:25.0282 4936  [ 7B75299A4D201D6A6533603D6914AB04 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

16:15:25.0340 4936  Smb - ok

16:15:25.0396 4936  [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

16:15:25.0422 4936  SNMPTRAP - ok

16:15:25.0617 4936  [ DC4DC886D3779C446F9B0E9D6B006E72 ] SPBBCDrv        C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:15:25.0644 4936  SPBBCDrv - ok

16:15:25.0690 4936  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr           C:\Windows\system32\drivers\spldr.sys

16:15:25.0711 4936  spldr - ok

16:15:25.0794 4936  [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler         C:\Windows\System32\spoolsv.exe

16:15:25.0928 4936  Spooler - ok

16:15:26.0007 4936  [ A687B5B326AFCFCF182C4931D1FF9771 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

16:15:26.0068 4936  SQLAgent$SQLEXPRESS - ok

16:15:26.0170 4936  [ B54B48F6D92423440C264E91225C5FF1 ] SQLBrowser      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

16:15:26.0253 4936  SQLBrowser - ok

16:15:26.0284 4936  [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:15:26.0339 4936  SQLWriter - ok

16:15:26.0474 4936  [ E0E54A571D4323567E95E11FE76A5FF3 ] SRTSP           C:\Windows\system32\Drivers\SRTSP.SYS

16:15:26.0503 4936  SRTSP - ok

christoph03

22.10.2012 14:19

Code:

4F0E22DF824D318988CAA6F321C30 ] SRTSPL          C:\Windows\system32\Drivers\SRTSPL.SYS

16:15:26.0639 4936  SRTSPL - ok

16:15:26.0695 4936  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] SRTSPX          C:\Windows\system32\Drivers\SRTSPX.SYS

16:15:26.0719 4936  SRTSPX - ok

16:15:26.0781 4936  [ 41987F9FC0E61ADF54F581E15029AD91 ] srv             C:\Windows\system32\DRIVERS\srv.sys

16:15:26.0850 4936  srv - ok

16:15:26.0925 4936  [ FF33AFF99564B1AA534F58868CBE41EF ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

16:15:26.0981 4936  srv2 - ok

16:15:27.0010 4936  [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

16:15:27.0070 4936  srvnet - ok

16:15:27.0111 4936  [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

16:15:27.0177 4936  SSDPSRV - ok

16:15:27.0238 4936  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

16:15:27.0262 4936  SstpSvc - ok

16:15:27.0281 4936  Steam Client Service - ok

16:15:27.0667 4936  [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:15:27.0728 4936  Stereo Service - ok

16:15:27.0812 4936  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc          C:\Windows\System32\wiaservc.dll

16:15:27.0883 4936  stisvc - ok

16:15:27.0913 4936  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

16:15:27.0936 4936  swenum - ok

16:15:28.0004 4936  [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv           C:\Windows\System32\swprv.dll

16:15:28.0085 4936  swprv - ok

16:15:28.0259 4936  [ 438FAFE708C93B2236FC26B6F2BD5FD0 ] Symantec Core LC C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

16:15:28.0336 4936  Symantec Core LC - ok

16:15:28.0392 4936  [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

16:15:28.0418 4936  Symc8xx - ok

16:15:28.0466 4936  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] SYMDNS          C:\Windows\System32\Drivers\SYMDNS.SYS

16:15:28.0488 4936  SYMDNS - ok

16:15:28.0562 4936  [ 06B95820DF51502099A8A15C93E87986 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT.SYS

16:15:28.0588 4936  SymEvent - ok

16:15:28.0614 4936  [ A0EA9D273889E53CFAABF2444692CCBF ] SYMFW           C:\Windows\System32\Drivers\SYMFW.SYS

16:15:28.0639 4936  SYMFW - ok

16:15:28.0683 4936  [ 8EAB28DD6CD25355B951AE460FA86B48 ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys

16:15:28.0706 4936  SymIM - ok

16:15:28.0757 4936  [ C94EACA4B522012EE0691F1E79C42A7D ] SYMNDISV        C:\Windows\System32\Drivers\SYMNDISV.SYS

16:15:28.0780 4936  SYMNDISV - ok

16:15:28.0802 4936  [ 7C6505EA598E58099D3B7E1F70426864 ] SYMREDRV        C:\Windows\System32\Drivers\SYMREDRV.SYS

16:15:28.0827 4936  SYMREDRV - ok

16:15:28.0920 4936  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] SYMTDI          C:\Windows\System32\Drivers\SYMTDI.SYS

16:15:28.0947 4936  SYMTDI - ok

16:15:28.0976 4936  [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

16:15:29.0009 4936  Sym_hi - ok

16:15:29.0086 4936  [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

16:15:29.0112 4936  Sym_u3 - ok

16:15:29.0301 4936  [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain         C:\Windows\system32\sysmain.dll

16:15:29.0396 4936  SysMain - ok

16:15:29.0426 4936  [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:15:29.0487 4936  TabletInputService - ok

16:15:29.0608 4936  [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv         C:\Windows\System32\tapisrv.dll

16:15:29.0694 4936  TapiSrv - ok

16:15:29.0776 4936  [ CB05822CD9CC6C688168E113C603DBE7 ] TBS             C:\Windows\System32\tbssvc.dll

16:15:29.0821 4936  TBS - ok

16:15:30.0059 4936  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

16:15:30.0161 4936  Tcpip - ok

16:15:30.0186 4936  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

16:15:30.0251 4936  Tcpip6 - ok

16:15:30.0338 4936  [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

16:15:30.0383 4936  tcpipreg - ok

16:15:30.0412 4936  [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

16:15:30.0478 4936  TDPIPE - ok

16:15:30.0523 4936  [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

16:15:30.0595 4936  TDTCP - ok

16:15:30.0666 4936  [ 76B06EB8A01FC8624D699E7045303E54 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

16:15:30.0725 4936  tdx - ok

16:15:30.0789 4936  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

16:15:30.0817 4936  TermDD - ok

16:15:30.0942 4936  [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService     C:\Windows\System32\termsrv.dll

16:15:31.0012 4936  TermService - ok

16:15:31.0034 4936  [ C7230FBEE14437716701C15BE02C27B8 ] Themes          C:\Windows\system32\shsvcs.dll

16:15:31.0069 4936  Themes - ok

16:15:31.0088 4936  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER     C:\Windows\system32\mmcss.dll

16:15:31.0133 4936  THREADORDER - ok

16:15:31.0293 4936  [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:15:31.0320 4936  TOSHIBA Bluetooth Service - ok

16:15:31.0363 4936  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte        C:\Windows\system32\DRIVERS\tosporte.sys

16:15:31.0384 4936  tosporte - ok

16:15:31.0441 4936  [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd         C:\Windows\system32\DRIVERS\tosrfbd.sys

16:15:31.0544 4936  tosrfbd - ok

16:15:31.0566 4936  [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp        C:\Windows\system32\Drivers\tosrfbnp.sys

16:15:31.0582 4936  tosrfbnp - ok

16:15:31.0647 4936  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom        C:\Windows\system32\Drivers\tosrfcom.sys

16:15:31.0664 4936  Tosrfcom - ok

16:15:31.0696 4936  [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid        C:\Windows\system32\DRIVERS\Tosrfhid.sys

16:15:31.0714 4936  Tosrfhid - ok

16:15:31.0756 4936  [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds        C:\Windows\system32\DRIVERS\tosrfnds.sys

16:15:31.0773 4936  tosrfnds - ok

16:15:31.0793 4936  [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd        C:\Windows\system32\drivers\tosrfsnd.sys

16:15:31.0811 4936  TosRfSnd - ok

16:15:31.0830 4936  [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb        C:\Windows\system32\DRIVERS\tosrfusb.sys

16:15:31.0846 4936  Tosrfusb - ok

16:15:31.0891 4936  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks          C:\Windows\System32\trkwks.dll

16:15:31.0953 4936  TrkWks - ok

16:15:32.0011 4936  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:15:32.0056 4936  TrustedInstaller - ok

16:15:32.0095 4936  [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

16:15:32.0127 4936  tssecsrv - ok

16:15:32.0177 4936  [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

16:15:32.0237 4936  tunmp - ok

16:15:32.0280 4936  [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

16:15:32.0303 4936  tunnel - ok

16:15:32.0349 4936  [ C3ADE15414120033A36C0F293D4A4121 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

16:15:32.0370 4936  uagp35 - ok

16:15:32.0416 4936  [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

16:15:32.0447 4936  udfs - ok

16:15:32.0663 4936  [ AC426CD0AA0DB592A81C9A78A5F4B309 ] UDXTTM6010      C:\Windows\system32\DRIVERS\UDXTTM6010.sys

16:15:32.0714 4936  UDXTTM6010 - ok

16:15:32.0760 4936  [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

16:15:32.0838 4936  UI0Detect - ok

16:15:32.0872 4936  [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

16:15:32.0899 4936  uliagpkx - ok

16:15:32.0919 4936  [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci         C:\Windows\system32\drivers\uliahci.sys

16:15:32.0951 4936  uliahci - ok

16:15:32.0972 4936  [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata          C:\Windows\system32\drivers\ulsata.sys

16:15:32.0999 4936  UlSata - ok

16:15:33.0019 4936  [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

16:15:33.0046 4936  ulsata2 - ok

16:15:33.0110 4936  [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

16:15:33.0153 4936  umbus - ok

16:15:33.0200 4936  [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost        C:\Windows\System32\upnphost.dll

16:15:33.0277 4936  upnphost - ok

16:15:33.0306 4936  [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

16:15:33.0374 4936  usbccgp - ok

16:15:33.0428 4936  [ E9476E6C486E76BC4898074768FB7131 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

16:15:33.0495 4936  usbcir - ok

16:15:33.0557 4936  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

16:15:33.0629 4936  usbehci - ok

16:15:33.0657 4936  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

16:15:33.0713 4936  usbhub - ok

16:15:33.0794 4936  [ 38DBC7DD6CC5A72011F187425384388B ] usbohci         C:\Windows\system32\drivers\usbohci.sys

16:15:33.0885 4936  usbohci - ok

16:15:33.0933 4936  [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

16:15:34.0003 4936  usbprint - ok

16:15:34.0086 4936  [ A508C9BD8724980512136B039BBA65E9 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

16:15:34.0122 4936  usbscan - ok

16:15:34.0226 4936  [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:15:34.0265 4936  USBSTOR - ok

16:15:34.0335 4936  [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

16:15:34.0371 4936  usbuhci - ok

16:15:34.0439 4936  [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms           C:\Windows\System32\uxsms.dll

16:15:34.0500 4936  UxSms - ok

16:15:34.0715 4936  [ CD88D1B7776DC17A119049742EC07EB4 ] vds             C:\Windows\System32\vds.exe

16:15:34.0789 4936  vds - ok

16:15:34.0857 4936  [ 7D92BE0028ECDEDEC74617009084B5EF ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

16:15:34.0922 4936  vga - ok

16:15:35.0000 4936  [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave         C:\Windows\System32\drivers\vga.sys

16:15:35.0078 4936  VgaSave - ok

16:15:35.0110 4936  [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp          C:\Windows\system32\drivers\viaagp.sys

16:15:35.0137 4936  viaagp - ok

16:15:35.0174 4936  [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

16:15:35.0240 4936  ViaC7 - ok

16:15:35.0287 4936  [ F2EB2E6E21B008695D3D28E69937DA9C ] viaide          C:\Windows\system32\drivers\viaide.sys

16:15:35.0314 4936  viaide - ok

16:15:35.0406 4936  [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

16:15:35.0434 4936  volmgr - ok

16:15:35.0510 4936  [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

16:15:35.0548 4936  volmgrx - ok

16:15:35.0676 4936  [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

16:15:35.0708 4936  volsnap - ok

16:15:35.0778 4936  [ D984439746D42B30FC65A4C3546C6829 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

16:15:35.0806 4936  vsmraid - ok

16:15:35.0975 4936  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS             C:\Windows\system32\vssvc.exe

16:15:36.0154 4936  VSS - ok

16:15:36.0238 4936  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time         C:\Windows\system32\w32time.dll

16:15:36.0293 4936  W32Time - ok

16:15:36.0353 4936  [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

16:15:36.0423 4936  WacomPen - ok

16:15:36.0468 4936  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

16:15:36.0535 4936  Wanarp - ok

16:15:36.0542 4936  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

16:15:36.0581 4936  Wanarpv6 - ok

16:15:36.0813 4936  [ A3CD60FD826381B49F03832590E069AF ] wcncsvc         C:\Windows\System32\wcncsvc.dll

16:15:36.0861 4936  wcncsvc - ok

16:15:36.0890 4936  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:15:36.0930 4936  WcsPlugInService - ok

16:15:36.0980 4936  [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd              C:\Windows\system32\drivers\wd.sys

16:15:37.0006 4936  Wd - ok

16:15:37.0104 4936  [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

16:15:37.0177 4936  Wdf01000 - ok

16:15:37.0211 4936  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost  C:\Windows\system32\wdi.dll

16:15:37.0282 4936  WdiServiceHost - ok

16:15:37.0291 4936  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost   C:\Windows\system32\wdi.dll

16:15:37.0338 4936  WdiSystemHost - ok

16:15:37.0448 4936  [ 04C37D8107320312FBAE09926103D5E2 ] WebClient       C:\Windows\System32\webclnt.dll

16:15:37.0508 4936  WebClient - ok

16:15:37.0570 4936  [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc          C:\Windows\system32\wecsvc.dll

16:15:37.0690 4936  Wecsvc - ok

16:15:37.0729 4936  [ 670FF720071ED741206D69BD995EA453 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

16:15:37.0795 4936  wercplsupport - ok

16:15:37.0836 4936  [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc          C:\Windows\System32\WerSvc.dll

16:15:37.0876 4936  WerSvc - ok

16:15:38.0028 4936  [ 4575AA12561C5648483403541D0D7F2B ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

16:15:38.0063 4936  WinDefend - ok

16:15:38.0072 4936  WinHttpAutoProxySvc - ok

16:15:38.0152 4936  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

16:15:38.0194 4936  Winmgmt - ok

16:15:38.0489 4936  [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM           C:\Windows\system32\WsmSvc.dll

16:15:38.0701 4936  WinRM - ok

16:15:39.0131 4936  [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc         C:\Windows\System32\wlansvc.dll

16:15:39.0333 4936  Wlansvc - ok

16:15:39.0378 4936  [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

16:15:39.0444 4936  WmiAcpi - ok

16:15:39.0537 4936  [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

16:15:39.0608 4936  wmiApSrv - ok

16:15:39.0830 4936  [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

16:15:39.0975 4936  WMPNetworkSvc - ok

16:15:40.0008 4936  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

16:15:40.0087 4936  WPCSvc - ok

16:15:40.0216 4936  [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

16:15:40.0293 4936  WPDBusEnum - ok

16:15:40.0545 4936  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:15:40.0755 4936  WPFFontCache_v0400 - ok

16:15:40.0825 4936  [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

16:15:40.0911 4936  ws2ifsl - ok

16:15:40.0998 4936  [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc          C:\Windows\System32\wscsvc.dll

16:15:41.0070 4936  wscsvc - ok

16:15:41.0075 4936  WSearch - ok

16:15:41.0370 4936  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll

16:15:41.0466 4936  wuauserv - ok

16:15:41.0502 4936  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

16:15:41.0617 4936  WudfPf - ok

16:15:41.0709 4936  [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

16:15:41.0782 4936  WUDFRd - ok

16:15:41.0886 4936  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

16:15:42.0030 4936  wudfsvc - ok

16:15:42.0069 4936  ================ Scan global ===============================

16:15:42.0159 4936  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll

16:15:42.0233 4936  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:15:42.0260 4936  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:15:42.0358 4936  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe

16:15:42.0362 4936  [Global] - ok

16:15:42.0363 4936  ================ Scan MBR ==================================

16:15:42.0414 4936  [ 81CD5EC01DB0CE57EDD853F82462EF27 ] \Device\Harddisk0\DR0

16:15:46.0324 4936  \Device\Harddisk0\DR0 - ok

16:15:46.0352 4936  [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk1\DR1

16:15:46.0697 4936  \Device\Harddisk1\DR1 - ok

16:15:46.0697 4936  ================ Scan VBR ==================================

16:15:46.0722 4936  [ E95495BFFA6767669DB8405142DB4649 ] \Device\Harddisk0\DR0\Partition1

16:15:46.0734 4936  \Device\Harddisk0\DR0\Partition1 - ok

16:15:46.0775 4936  [ 36160AA267F7FC371B1139ED4DE6DD05 ] \Device\Harddisk0\DR0\Partition2

16:15:46.0818 4936  \Device\Harddisk0\DR0\Partition2 - ok

16:15:46.0821 4936  [ 160F47F4D3004A4D86D9DFD80B20F147 ] \Device\Harddisk1\DR1\Partition1

16:15:46.0822 4936  \Device\Harddisk1\DR1\Partition1 - ok

16:15:46.0823 4936  ================ Scan active images ========================

16:15:46.0825 4936  [ 36975327EF03949CC378AB01E316B574 ] C:\Windows\System32\drivers\crashdmp.sys

16:15:46.0825 4936  C:\Windows\System32\drivers\crashdmp.sys - ok

16:15:46.0828 4936  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] C:\Windows\System32\drivers\iaStor.sys

16:15:46.0828 4936  C:\Windows\System32\drivers\iaStor.sys - ok

16:15:46.0831 4936  [ 300DB877AC094FEAB0BE7688C3454A9C ] C:\Windows\System32\drivers\tunnel.sys

16:15:46.0831 4936  C:\Windows\System32\drivers\tunnel.sys - ok

16:15:46.0835 4936  [ CAECC0120AC49E3D2F758B9169872D38 ] C:\Windows\System32\drivers\TUNMP.SYS

16:15:46.0835 4936  C:\Windows\System32\drivers\TUNMP.SYS - ok

16:15:46.0838 4936  [ 224191001E78C89DFA78924C3EA595FF ] C:\Windows\System32\drivers\intelppm.sys

16:15:46.0838 4936  C:\Windows\System32\drivers\intelppm.sys - ok

16:15:46.0842 4936  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] C:\Windows\System32\drivers\nvlddmkm.sys

16:15:46.0842 4936  C:\Windows\System32\drivers\nvlddmkm.sys - ok

16:15:46.0845 4936  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] C:\Windows\System32\drivers\dxgkrnl.sys

16:15:46.0845 4936  C:\Windows\System32\drivers\dxgkrnl.sys - ok

16:15:46.0848 4936  [ 4A5C31E2C1646034E6A60EBA4C747FF6 ] C:\Windows\System32\drivers\watchdog.sys

16:15:46.0848 4936  C:\Windows\System32\drivers\watchdog.sys - ok

16:15:46.0851 4936  [ A1C100A87D981AD0774FBC0B4B82E913 ] C:\Windows\System32\drivers\usbport.sys

16:15:46.0851 4936  C:\Windows\System32\drivers\usbport.sys - ok

16:15:46.0855 4936  [ 814D653EFC4D48BE3B04A307ECEFF56F ] C:\Windows\System32\drivers\usbuhci.sys

16:15:46.0855 4936  C:\Windows\System32\drivers\usbuhci.sys - ok

16:15:46.0859 4936  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] C:\Windows\System32\drivers\usbehci.sys

16:15:46.0859 4936  C:\Windows\System32\drivers\usbehci.sys - ok

16:15:46.0863 4936  [ 062452B7FFD68C8C042A6261FE8DFF4A ] C:\Windows\System32\drivers\hdaudbus.sys

16:15:46.0863 4936  C:\Windows\System32\drivers\hdaudbus.sys - ok

16:15:46.0867 4936  [ C347A3CDE57077056E7E73D3498F7D7D ] C:\Windows\System32\drivers\Rtlh86.sys

16:15:46.0867 4936  C:\Windows\System32\drivers\Rtlh86.sys - ok

16:15:46.0870 4936  [ 0349BE02F329F4F48F1D48097FD65974 ] C:\Windows\System32\drivers\1394bus.sys

16:15:46.0870 4936  C:\Windows\System32\drivers\1394bus.sys - ok

16:15:46.0874 4936  [ 6F310E890D46E246E0E261A63D9B36B4 ] C:\Windows\System32\drivers\ohci1394.sys

16:15:46.0874 4936  C:\Windows\System32\drivers\ohci1394.sys - ok

16:15:46.0877 4936  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] C:\Windows\System32\drivers\i8042prt.sys

16:15:46.0877 4936  C:\Windows\System32\drivers\i8042prt.sys - ok

16:15:46.0880 4936  [ 37605E0A8CF00CBBA538E753E4344C6E ] C:\Windows\System32\drivers\kbdclass.sys

16:15:46.0880 4936  C:\Windows\System32\drivers\kbdclass.sys - ok

16:15:46.0884 4936  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] C:\Windows\System32\drivers\L8042Kbd.sys

16:15:46.0884 4936  C:\Windows\System32\drivers\L8042Kbd.sys - ok

16:15:46.0887 4936  [ 6B4BFFB9BECD728097024276430DB314 ] C:\Windows\System32\drivers\cdrom.sys

16:15:46.0887 4936  C:\Windows\System32\drivers\cdrom.sys - ok

16:15:46.0891 4936  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] C:\Windows\System32\drivers\GEARAspiWDM.sys

16:15:46.0891 4936  C:\Windows\System32\drivers\GEARAspiWDM.sys - ok

16:15:46.0895 4936  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] C:\Windows\System32\drivers\tosrfcom.sys

16:15:46.0895 4936  C:\Windows\System32\drivers\tosrfcom.sys - ok

16:15:46.0898 4936  [ 232FA340531D940AAC623B121A595034 ] C:\Windows\System32\drivers\msiscsi.sys

16:15:46.0898 4936  C:\Windows\System32\drivers\msiscsi.sys - ok

16:15:46.0901 4936  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] C:\Windows\System32\drivers\rootmdm.sys

16:15:46.0901 4936  C:\Windows\System32\drivers\rootmdm.sys - ok

16:15:46.0905 4936  [ 47E55AFE1ED1D5AFF09690DB226F4A7A ] C:\Windows\System32\drivers\Storport.sys

16:15:46.0905 4936  C:\Windows\System32\drivers\Storport.sys - ok

16:15:46.0909 4936  [ 77937EFF009AC696B90E09F671F9D0A4 ] C:\Windows\System32\drivers\tdi.sys

16:15:46.0909 4936  C:\Windows\System32\drivers\tdi.sys - ok

16:15:46.0912 4936  [ E13B5EA0F51BA5B1512EC671393D09BA ] C:\Windows\System32\drivers\modem.sys

16:15:46.0912 4936  C:\Windows\System32\drivers\modem.sys - ok

16:15:46.0916 4936  [ A214ADBAF4CB47DD2728859EF31F26B0 ] C:\Windows\System32\drivers\rasl2tp.sys

16:15:46.0916 4936  C:\Windows\System32\drivers\rasl2tp.sys - ok

16:15:46.0921 4936  [ 0E186E90404980569FB449BA7519AE61 ] C:\Windows\System32\drivers\ndistapi.sys

16:15:46.0921 4936  C:\Windows\System32\drivers\ndistapi.sys - ok

16:15:46.0926 4936  [ 818F648618AE34F729FDB47EC68345C3 ] C:\Windows\System32\drivers\ndiswan.sys

16:15:46.0926 4936  C:\Windows\System32\drivers\ndiswan.sys - ok

16:15:46.0929 4936  [ 509A98DD18AF4375E1FC40BC175F1DEF ] C:\Windows\System32\drivers\raspppoe.sys

16:15:46.0929 4936  C:\Windows\System32\drivers\raspppoe.sys - ok

16:15:46.0933 4936  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] C:\Windows\System32\drivers\raspptp.sys

16:15:46.0933 4936  C:\Windows\System32\drivers\raspptp.sys - ok

16:15:46.0936 4936  [ 2005F4A1E05FA09389AC85840F0A9E4D ] C:\Windows\System32\drivers\rassstp.sys

16:15:46.0937 4936  C:\Windows\System32\drivers\rassstp.sys - ok

16:15:46.0940 4936  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] C:\Windows\System32\drivers\termdd.sys

16:15:46.0941 4936  C:\Windows\System32\drivers\termdd.sys - ok

16:15:46.0944 4936  [ 5BF6A1326A335C5298477754A506D263 ] C:\Windows\System32\drivers\mouclass.sys

16:15:46.0944 4936  C:\Windows\System32\drivers\mouclass.sys - ok

16:15:46.0948 4936  [ EF73C1E29FBE7B0FD0274BF4394E346A ] C:\Windows\System32\drivers\ks.sys

16:15:46.0948 4936  C:\Windows\System32\drivers\ks.sys - ok

16:15:46.0951 4936  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] C:\Windows\System32\drivers\swenum.sys

16:15:46.0951 4936  C:\Windows\System32\drivers\swenum.sys - ok

16:15:46.0955 4936  [ E384487CB84BE41D09711C30CA79646C ] C:\Windows\System32\drivers\mssmbios.sys

16:15:46.0955 4936  C:\Windows\System32\drivers\mssmbios.sys - ok

16:15:46.0959 4936  [ 32CFF9F809AE9AED85464492BF3E32D2 ] C:\Windows\System32\drivers\umbus.sys

16:15:46.0959 4936  C:\Windows\System32\drivers\umbus.sys - ok

16:15:46.0962 4936  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] C:\Windows\System32\drivers\usbhub.sys

16:15:46.0962 4936  C:\Windows\System32\drivers\usbhub.sys - ok

16:15:46.0966 4936  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] C:\Windows\System32\drivers\tosporte.sys

16:15:46.0966 4936  C:\Windows\System32\drivers\tosporte.sys - ok

16:15:46.0970 4936  [ 71DAB552B41936358F3B541AE5997FB3 ] C:\Windows\System32\drivers\ndproxy.sys

16:15:46.0970 4936  C:\Windows\System32\drivers\ndproxy.sys - ok

16:15:46.0974 4936  [ 7BE5A3C671A2CB56E94403BFC2020A0D ] C:\Windows\System32\drivers\drmk.sys

16:15:46.0974 4936  C:\Windows\System32\drivers\drmk.sys - ok

16:15:46.0977 4936  [ 218286724EC530FF252648369E05B090 ] C:\Windows\System32\drivers\portcls.sys

16:15:46.0977 4936  C:\Windows\System32\drivers\portcls.sys - ok

16:15:46.0981 4936  [ EDC37B918E583A5A813C53D4F5588255 ] C:\Windows\System32\drivers\RTKVHDA.sys

16:15:46.0981 4936  C:\Windows\System32\drivers\RTKVHDA.sys - ok

16:15:46.0985 4936  [ B972A66758577E0BFD1DE0F91AAA27B5 ] C:\Windows\System32\drivers\fs_rec.sys

16:15:46.0985 4936  C:\Windows\System32\drivers\fs_rec.sys - ok

16:15:46.0989 4936  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] C:\Windows\System32\drivers\beep.sys

16:15:46.0989 4936  C:\Windows\System32\drivers\beep.sys - ok

16:15:46.0992 4936  [ C5DBBCDA07D780BDA9B685DF333BB41E ] C:\Windows\System32\drivers\null.sys

16:15:46.0992 4936  C:\Windows\System32\drivers\null.sys - ok

16:15:46.0994 4936  [ 175444D3A01CA45D0E1C5DC5F48DF7CD ] C:\Windows\System32\drivers\hidparse.sys

16:15:46.0994 4936  C:\Windows\System32\drivers\hidparse.sys - ok

16:15:46.0998 4936  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] C:\Windows\System32\drivers\kbdhid.sys

16:15:46.0998 4936  C:\Windows\System32\drivers\kbdhid.sys - ok

16:15:47.0002 4936  [ 2E93AC0A1D8C79D019DB6C51F036636C ] C:\Windows\System32\drivers\vga.sys

16:15:47.0002 4936  C:\Windows\System32\drivers\vga.sys - ok

16:15:47.0006 4936  [ C048D2C33D27441A0CDCAAE2651EB03D ] C:\Windows\System32\drivers\videoprt.sys

16:15:47.0006 4936  C:\Windows\System32\drivers\videoprt.sys - ok

16:15:47.0009 4936  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] C:\Windows\System32\drivers\RDPCDD.sys

16:15:47.0009 4936  C:\Windows\System32\drivers\RDPCDD.sys - ok

16:15:47.0012 4936  [ A9927F4A46B816C92F461ACB90CF8515 ] C:\Windows\System32\drivers\msfs.sys

16:15:47.0012 4936  C:\Windows\System32\drivers\msfs.sys - ok

16:15:47.0015 4936  [ 9D91FE5286F748862ECFFA05F8A0710C ] C:\Windows\System32\drivers\RDPENCDD.sys

16:15:47.0015 4936  C:\Windows\System32\drivers\RDPENCDD.sys - ok

16:15:47.0018 4936  [ D36F239D7CCE1931598E8FB90A0DBC26 ] C:\Windows\System32\drivers\npfs.sys

16:15:47.0018 4936  C:\Windows\System32\drivers\npfs.sys - ok

16:15:47.0022 4936  [ 147D7F9C556D259924351FEB0DE606C3 ] C:\Windows\System32\drivers\rasacd.sys

16:15:47.0022 4936  C:\Windows\System32\drivers\rasacd.sys - ok

16:15:47.0025 4936  [ 76B06EB8A01FC8624D699E7045303E54 ] C:\Windows\System32\drivers\tdx.sys

16:15:47.0025 4936  C:\Windows\System32\drivers\tdx.sys - ok

16:15:47.0028 4936  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] C:\Windows\System32\drivers\symtdi.sys

16:15:47.0028 4936  C:\Windows\System32\drivers\symtdi.sys - ok

16:15:47.0032 4936  [ 06B95820DF51502099A8A15C93E87986 ] C:\Windows\System32\drivers\SYMEVENT.SYS

16:15:47.0032 4936  C:\Windows\System32\drivers\SYMEVENT.SYS - ok

16:15:47.0035 4936  [ 7B75299A4D201D6A6533603D6914AB04 ] C:\Windows\System32\drivers\smb.sys

16:15:47.0035 4936  C:\Windows\System32\drivers\smb.sys - ok

16:15:47.0038 4936  [ 3911B972B55FEA0478476B2E777B29FA ] C:\Windows\System32\drivers\afd.sys

16:15:47.0038 4936  C:\Windows\System32\drivers\afd.sys - ok

16:15:47.0041 4936  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] C:\Windows\System32\drivers\netbt.sys

16:15:47.0041 4936  C:\Windows\System32\drivers\netbt.sys - ok

16:15:47.0044 4936  [ 99514FAA8DF93D34B5589187DB3AA0BA ] C:\Windows\System32\drivers\pacer.sys

16:15:47.0044 4936  C:\Windows\System32\drivers\pacer.sys - ok

16:15:47.0048 4936  [ 8EAB28DD6CD25355B951AE460FA86B48 ] C:\Windows\System32\drivers\SymIMV.sys

16:15:47.0048 4936  C:\Windows\System32\drivers\SymIMV.sys - ok

16:15:47.0051 4936  [ BCD093A5A6777CF626434568DC7DBA78 ] C:\Windows\System32\drivers\netbios.sys

16:15:47.0051 4936  C:\Windows\System32\drivers\netbios.sys - ok

16:15:47.0055 4936  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] C:\Windows\System32\drivers\srtspx.sys

16:15:47.0055 4936  C:\Windows\System32\drivers\srtspx.sys - ok

16:15:47.0058 4936  [ 55201897378CCA7AF8B5EFD874374A26 ] C:\Windows\System32\drivers\wanarp.sys

16:15:47.0058 4936  C:\Windows\System32\drivers\wanarp.sys - ok

16:15:47.0061 4936  [ DC4DC886D3779C446F9B0E9D6B006E72 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:15:47.0061 4936  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys - ok

16:15:47.0064 4936  [ 77030525CD86A93F1AF34FA9B96D33CE ] C:\Windows\System32\drivers\LUsbFilt.sys

16:15:47.0064 4936  C:\Windows\System32\drivers\LUsbFilt.sys - ok

16:15:47.0068 4936  [ 5961CADB7CAD938368D2028725EF771D ] C:\Windows\System32\drivers\hidclass.sys

16:15:47.0068 4936  C:\Windows\System32\drivers\hidclass.sys - ok

16:15:47.0071 4936  [ CCA4B519B17E23A00B826C55716809CC ] C:\Windows\System32\drivers\hidusb.sys

16:15:47.0071 4936  C:\Windows\System32\drivers\hidusb.sys - ok

16:15:47.0075 4936  [ 790FDAC6D0C762DF9047C3C625A6FF6C ] C:\Windows\System32\drivers\usbd.sys

16:15:47.0075 4936  C:\Windows\System32\drivers\usbd.sys - ok

16:15:47.0078 4936  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] C:\Windows\System32\drivers\LHidFilt.Sys

16:15:47.0078 4936  C:\Windows\System32\drivers\LHidFilt.Sys - ok

16:15:47.0081 4936  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] C:\Windows\System32\drivers\rdbss.sys

16:15:47.0081 4936  C:\Windows\System32\drivers\rdbss.sys - ok

16:15:47.0084 4936  [ 93B8D4869E12CFBE663915502900876F ] C:\Windows\System32\drivers\mouhid.sys

16:15:47.0084 4936  C:\Windows\System32\drivers\mouhid.sys - ok

16:15:47.0087 4936  [ 609773E344A97410CE4EBF74A8914FCF ] C:\Windows\System32\drivers\nsiproxy.sys

16:15:47.0087 4936  C:\Windows\System32\drivers\nsiproxy.sys - ok

16:15:47.0091 4936  [ F85DC24DAFA76237722FE38B3196C61A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:15:47.0091 4936  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys - ok

16:15:47.0094 4936  [ AB33792A87285344F43B5CE23421BAB0 ] C:\Windows\System32\drivers\LMouFilt.Sys

16:15:47.0094 4936  C:\Windows\System32\drivers\LMouFilt.Sys - ok

16:15:47.0098 4936  [ 85B8B4032A895A746D46A288A9B30DED ] C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:15:47.0098 4936  C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys - ok

16:15:47.0101 4936  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:15:47.0101 4936  C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys - ok

16:15:47.0105 4936  [ 622C41A07CA7E6DD91770F50D532CB6C ] C:\Windows\System32\drivers\dfsc.sys

16:15:47.0105 4936  C:\Windows\System32\drivers\dfsc.sys - ok

16:15:47.0108 4936  [ DDA770BBD7C2ED024D6F50E279D90E5B ] C:\Windows\System32\ntdll.dll

16:15:47.0108 4936  C:\Windows\System32\ntdll.dll - ok

16:15:47.0111 4936  [ 98AF15A94CD6AC37248E72E5FE789B35 ] C:\Windows\System32\smss.exe

16:15:47.0111 4936  C:\Windows\System32\smss.exe - ok

16:15:47.0115 4936  [ 10761177A6EBE45843F443E99509F5E7 ] C:\Windows\System32\autochk.exe

16:15:47.0115 4936  C:\Windows\System32\autochk.exe - ok

16:15:47.0118 4936  [ BE3DA31C191BC222D9AD503C5224F2AD ] C:\Windows\System32\drivers\USBSTOR.SYS

16:15:47.0118 4936  C:\Windows\System32\drivers\USBSTOR.SYS - ok

16:15:47.0121 4936  [ 7ADD03E75BEB9E6DD102C3081D29840A ] C:\Windows\System32\drivers\cdfs.sys

16:15:47.0121 4936  C:\Windows\System32\drivers\cdfs.sys - ok

16:15:47.0124 4936  [ EB8A00E8E9931A7EC04F920B09D880D8 ] C:\Windows\System32\iertutil.dll

16:15:47.0124 4936  C:\Windows\System32\iertutil.dll - ok

16:15:47.0127 4936  [ 50CAA7072C171B9887215C83D52069E4 ] C:\Windows\System32\advapi32.dll

16:15:47.0128 4936  C:\Windows\System32\advapi32.dll - ok

16:15:47.0131 4936  [ B218342214D9BBA0F54EA12BA2E9278C ] C:\Windows\System32\oleaut32.dll

16:15:47.0131 4936  C:\Windows\System32\oleaut32.dll - ok

16:15:47.0134 4936  [ B304D47D5744BA20FCB99FB8B2C07B0B ] C:\Windows\System32\ws2_32.dll

16:15:47.0134 4936  C:\Windows\System32\ws2_32.dll - ok

16:15:47.0137 4936  [ C394079EB162E812D682C73FA96AF6E4 ] C:\Windows\System32\clbcatq.dll

16:15:47.0137 4936  C:\Windows\System32\clbcatq.dll - ok

16:15:47.0140 4936  [ 551F51B66E5EA87A38D8197EB3BDB57A ] C:\Windows\System32\setupapi.dll

16:15:47.0140 4936  C:\Windows\System32\setupapi.dll - ok

16:15:47.0143 4936  [ EB49FAA5EBBC06356FB12476438781B9 ] C:\Windows\System32\imagehlp.dll

16:15:47.0143 4936  C:\Windows\System32\imagehlp.dll - ok

16:15:47.0146 4936  [ E3C3BD69701CE6B7B17101E4F7740534 ] C:\Windows\System32\msctf.dll

16:15:47.0146 4936  C:\Windows\System32\msctf.dll - ok

16:15:47.0149 4936  [ 7856E3B4594714EF89BB97375E8644EE ] C:\Windows\System32\gdi32.dll

16:15:47.0149 4936  C:\Windows\System32\gdi32.dll - ok

16:15:47.0152 4936  [ 9586E7CB2255A8B097A7E4538202585E ] C:\Windows\System32\ole32.dll

16:15:47.0152 4936  C:\Windows\System32\ole32.dll - ok

16:15:47.0156 4936  [ 9FAC0F6D5F3D922DB294E30CD3F62369 ] C:\Windows\System32\urlmon.dll

16:15:47.0156 4936  C:\Windows\System32\urlmon.dll - ok

16:15:47.0159 4936  [ 17AF64D727545F2804F6E6D998327E3F ] C:\Windows\System32\msvcrt.dll

16:15:47.0159 4936  C:\Windows\System32\msvcrt.dll - ok

16:15:47.0162 4936  [ 9176285122B7B849FEC2AA1B72A8F7A8 ] C:\Windows\System32\shlwapi.dll

16:15:47.0162 4936  C:\Windows\System32\shlwapi.dll - ok

16:15:47.0165 4936  [ C8BDCECEE082B54F0BAC838BF0A34597 ] C:\Windows\System32\imm32.dll

16:15:47.0165 4936  C:\Windows\System32\imm32.dll - ok

16:15:47.0168 4936  [ 574B473FACAA0E91702B86578440B525 ] C:\Windows\System32\kernel32.dll

16:15:47.0168 4936  C:\Windows\System32\kernel32.dll - ok

16:15:47.0171 4936  [ 4AA2A0E26CEF1A803741253DCF9A1503 ] C:\Windows\System32\comdlg32.dll

16:15:47.0171 4936  C:\Windows\System32\comdlg32.dll - ok

16:15:47.0175 4936  [ 75510147B94598407666F4802797C75A ] C:\Windows\System32\user32.dll

16:15:47.0175 4936  C:\Windows\System32\user32.dll - ok

16:15:47.0178 4936  [ E2281CFF793D7A09CE2B35F9F8732EE3 ] C:\Windows\System32\rpcrt4.dll

16:15:47.0178 4936  C:\Windows\System32\rpcrt4.dll - ok

16:15:47.0181 4936  [ 5553611E2F9EA6F613079177F1233068 ] C:\Windows\System32\wininet.dll

16:15:47.0181 4936  C:\Windows\System32\wininet.dll - ok

16:15:47.0184 4936  [ AAF101900A23D75AE1AE00840FA6F3B8 ] C:\Windows\System32\shell32.dll

16:15:47.0184 4936  C:\Windows\System32\shell32.dll - ok

16:15:47.0187 4936  [ B8A609FB5EFB4E44FC1355B1C01C64BC ] C:\Windows\System32\Wldap32.dll

16:15:47.0187 4936  C:\Windows\System32\Wldap32.dll - ok

16:15:47.0190 4936  [ EB0E02749CE5C488741C9A0ABEAB5DEC ] C:\Windows\System32\lpk.dll

16:15:47.0190 4936  C:\Windows\System32\lpk.dll - ok

16:15:47.0194 4936  [ 6F29236AB5926100972924BD29D9D225 ] C:\Windows\System32\normaliz.dll

16:15:47.0194 4936  C:\Windows\System32\normaliz.dll - ok

16:15:47.0197 4936  [ A64AEBC6C78B4CFD7F41A7277879DF8F ] C:\Windows\System32\nsi.dll

16:15:47.0197 4936  C:\Windows\System32\nsi.dll - ok

16:15:47.0200 4936  [ 80FFF14F1757B9AF8BE9D314FC1AE88B ] C:\Windows\System32\usp10.dll

16:15:47.0200 4936  C:\Windows\System32\usp10.dll - ok

16:15:47.0204 4936  [ DC8891A9203810FC994E7FCCF76E94C8 ] C:\Windows\System32\comctl32.dll

16:15:47.0204 4936  C:\Windows\System32\comctl32.dll - ok

16:15:47.0207 4936  [ 93A1732F7F997E36A5C3893539E2FF02 ] C:\Windows\System32\psapi.dll

16:15:47.0207 4936  C:\Windows\System32\psapi.dll - ok

16:15:47.0210 4936  [ EAAAFEF04FBB45665C9576E525D45A12 ] C:\Windows\System32\drivers\dxapi.sys

16:15:47.0210 4936  C:\Windows\System32\drivers\dxapi.sys - ok

16:15:47.0214 4936  [ 92D85E8A4129FE44A3266266AC8D151D ] C:\Windows\System32\win32k.sys

16:15:47.0214 4936  C:\Windows\System32\win32k.sys - ok

16:15:47.0217 4936  [ 187076DD5D8D4D5D23079D0741195EAD ] C:\Windows\System32\csrsrv.dll

16:15:47.0217 4936  C:\Windows\System32\csrsrv.dll - ok

16:15:47.0220 4936  [ ABCA209EBA02CB59233614DB83B4F50D ] C:\Windows\System32\csrss.exe

16:15:47.0220 4936  C:\Windows\System32\csrss.exe - ok

16:15:47.0224 4936  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\System32\basesrv.dll

16:15:47.0224 4936  C:\Windows\System32\basesrv.dll - ok

16:15:47.0227 4936  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\System32\winsrv.dll

16:15:47.0227 4936  C:\Windows\System32\winsrv.dll - ok

16:15:47.0231 4936  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] C:\Windows\System32\drivers\monitor.sys

16:15:47.0231 4936  C:\Windows\System32\drivers\monitor.sys - ok

16:15:47.0235 4936  [ CC21507D246861671A0BF97E75CE1B00 ] C:\Windows\System32\tsddd.dll

16:15:47.0235 4936  C:\Windows\System32\tsddd.dll - ok

16:15:47.0238 4936  [ D602FEDBD9155FC2DED6863FB60C950F ] C:\Windows\System32\secur32.dll

16:15:47.0238 4936  C:\Windows\System32\secur32.dll - ok

16:15:47.0242 4936  [ 665417528489096BBCB8AEA46D3DA924 ] C:\Windows\System32\userenv.dll

16:15:47.0242 4936  C:\Windows\System32\userenv.dll - ok

16:15:47.0244 4936  [ 101BA3EA053480BB5D957EF37C06B5ED ] C:\Windows\System32\wininit.exe

16:15:47.0244 4936  C:\Windows\System32\wininit.exe - ok

16:15:47.0248 4936  [ 12C8D6C564702B0776512932290A3F6B ] C:\Windows\System32\KBDUS.DLL

16:15:47.0248 4936  C:\Windows\System32\KBDUS.DLL - ok

16:15:47.0251 4936  [ 7F2622E89703DD3C4DD75125E80D8636 ] C:\Windows\System32\KBDCR.DLL

16:15:47.0251 4936  C:\Windows\System32\KBDCR.DLL - ok

16:15:47.0254 4936  [ EA818A6DE0BD0A290D001FFABAFFF6EF ] C:\Windows\System32\KBDGR.DLL

16:15:47.0254 4936  C:\Windows\System32\KBDGR.DLL - ok

16:15:47.0257 4936  [ 0393FC83ABF87AA42BC67BBA07C71C69 ] C:\Windows\System32\KBDSP.DLL

16:15:47.0257 4936  C:\Windows\System32\KBDSP.DLL - ok

16:15:47.0261 4936  [ 1107BD574A84367735FEC38B9BD64E6B ] C:\Windows\System32\apphelp.dll

16:15:47.0261 4936  C:\Windows\System32\apphelp.dll - ok

16:15:47.0264 4936  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\System32\services.exe

16:15:47.0264 4936  C:\Windows\System32\services.exe - ok

16:15:47.0267 4936  [ 92283D9E33EC5F41ECC0B430B7459241 ] C:\Windows\System32\WlS0WndH.dll

16:15:47.0267 4936  C:\Windows\System32\WlS0WndH.dll - ok

16:15:47.0270 4936  [ CF9F5BBC2740C41DD471278C41B91F5F ] C:\Windows\System32\cdd.dll

16:15:47.0270 4936  C:\Windows\System32\cdd.dll - ok

16:15:47.0274 4936  [ BE6FAC6F0745C67DAE7522C96406D083 ] C:\Windows\System32\sxs.dll

16:15:47.0274 4936  C:\Windows\System32\sxs.dll - ok

16:15:47.0277 4936  [ A3E186B4B935905B829219502557314E ] C:\Windows\System32\lsass.exe

16:15:47.0277 4936  C:\Windows\System32\lsass.exe - ok

16:15:47.0280 4936  [ D90911B3FA05D7B930C1286084B404DE ] C:\Windows\System32\scesrv.dll

16:15:47.0280 4936  C:\Windows\System32\scesrv.dll - ok

16:15:47.0283 4936  [ 178FAC2B7C66E9A4400CE7AC37623E3F ] C:\Windows\System32\lsasrv.dll

16:15:47.0283 4936  C:\Windows\System32\lsasrv.dll - ok

16:15:47.0286 4936  [ 1AE011BB950A5E0B05023D2AFEC3666D ] C:\Windows\System32\authz.dll

16:15:47.0286 4936  C:\Windows\System32\authz.dll - ok

16:15:47.0290 4936  [ 7808BF0E367ED7348808879CEF482AB3 ] C:\Windows\System32\samsrv.dll

16:15:47.0290 4936  C:\Windows\System32\samsrv.dll - ok

16:15:47.0293 4936  [ 98B656EAF128CD06F625B09C84D959E1 ] C:\Windows\System32\netapi32.dll

16:15:47.0293 4936  C:\Windows\System32\netapi32.dll - ok

16:15:47.0296 4936  [ 459B48188494490707DCA8BAA91AA185 ] C:\Windows\System32\cryptdll.dll

16:15:47.0296 4936  C:\Windows\System32\cryptdll.dll - ok

16:15:47.0299 4936  [ 85E861D0B88DB2B54ACB0839654C09F7 ] C:\Windows\System32\dnsapi.dll

16:15:47.0299 4936  C:\Windows\System32\dnsapi.dll - ok

16:15:47.0302 4936  [ 4774AD6C447E02E954BD9A793614EBEC ] C:\Windows\System32\lsm.exe

16:15:47.0302 4936  C:\Windows\System32\lsm.exe - ok

16:15:47.0307 4936  [ EE2FF9A3FC4404234BE3B7C6AA383AF8 ] C:\Windows\System32\msasn1.dll

16:15:47.0307 4936  C:\Windows\System32\msasn1.dll - ok

16:15:47.0311 4936  [ 453DE2958C885527E20C79A3FEFE6AF7 ] C:\Windows\System32\samlib.dll

16:15:47.0311 4936  C:\Windows\System32\samlib.dll - ok

16:15:47.0314 4936  [ B0F9073BE86C6D4EDD4EBA674251E699 ] C:\Windows\System32\crypt32.dll

16:15:47.0314 4936  C:\Windows\System32\crypt32.dll - ok

16:15:47.0317 4936  [ 965AC9FBF2C67231C157E99C03C58D24 ] C:\Windows\System32\feclient.dll

16:15:47.0317 4936  C:\Windows\System32\feclient.dll - ok

16:15:47.0320 4936  [ 1F94EA31C9543B855F53BDAC7792DA4E ] C:\Windows\System32\mpr.dll

16:15:47.0320 4936  C:\Windows\System32\mpr.dll - ok

16:15:47.0324 4936  [ 7F0F1D4B0D847696F8E309423D227DCE ] C:\Windows\System32\ntdsapi.dll

16:15:47.0324 4936  C:\Windows\System32\ntdsapi.dll - ok

16:15:47.0327 4936  [ 71F5A7104FDF16C0AC5283A6CE666553 ] C:\Windows\System32\sysntfy.dll

16:15:47.0327 4936  C:\Windows\System32\sysntfy.dll - ok

16:15:47.0331 4936  [ 2FA16465F64DB54B1F7F511395EB4FD7 ] C:\Windows\System32\ncobjapi.dll

16:15:47.0331 4936  C:\Windows\System32\ncobjapi.dll - ok

16:15:47.0335 4936  [ F0321DA5203F1E71917F3B7A13DC4912 ] C:\Windows\System32\wmsgapi.dll

16:15:47.0335 4936  C:\Windows\System32\wmsgapi.dll - ok

16:15:47.0338 4936  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] C:\Windows\System32\aelupsvc.dll

16:15:47.0338 4936  C:\Windows\System32\aelupsvc.dll - ok

16:15:47.0341 4936  [ C6DF7A87063D006ECF1FD8156CB6DE3F ] C:\Windows\System32\SLC.dll

16:15:47.0341 4936  C:\Windows\System32\SLC.dll - ok

16:15:47.0344 4936  [ 4DE3C4D07BAFDE616EFA0ADE076CBAC2 ] C:\Windows\System32\wevtapi.dll

16:15:47.0344 4936  C:\Windows\System32\wevtapi.dll - ok

16:15:47.0347 4936  [ 9028559C132146FB75EB7ACF384B086A ] C:\Windows\System32\dhcpcsvc.dll

16:15:47.0347 4936  C:\Windows\System32\dhcpcsvc.dll - ok

16:15:47.0350 4936  [ DFB6B71CDABA9DFB49C9D2B318B97A1A ] C:\Windows\System32\dhcpcsvc6.dll

16:15:47.0350 4936  C:\Windows\System32\dhcpcsvc6.dll - ok

16:15:47.0354 4936  [ 4FE8425F21B3F0F8C4B4726351D43EAA ] C:\Windows\System32\IPHLPAPI.DLL

16:15:47.0354 4936  C:\Windows\System32\IPHLPAPI.DLL - ok

16:15:47.0357 4936  [ 6B09105742C75DF80CEF21700F20F55A ] C:\Windows\System32\winnsi.dll

16:15:47.0357 4936  C:\Windows\System32\winnsi.dll - ok

16:15:47.0360 4936  [ 7F15B4953378C8B5161D65C26D5FED4D ] C:\Windows\System32\cngaudit.dll

16:15:47.0360 4936  C:\Windows\System32\cngaudit.dll - ok

16:15:47.0363 4936  [ A1545B731579895D8CC44FC0481C1192 ] C:\Windows\System32\alg.exe

16:15:47.0363 4936  C:\Windows\System32\alg.exe - ok

16:15:47.0366 4936  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] C:\Windows\System32\appinfo.dll

16:15:47.0366 4936  C:\Windows\System32\appinfo.dll - ok

16:15:47.0369 4936  [ 68E2A1A0407A66CF50DA0300852424AB ] C:\Windows\System32\audiosrv.dll

16:15:47.0370 4936  C:\Windows\System32\audiosrv.dll - ok

16:15:47.0373 4936  [ C789AF0F724FDA5852FB9A7D3A432381 ] C:\Windows\System32\BFE.DLL

16:15:47.0373 4936  C:\Windows\System32\BFE.DLL - ok

16:15:47.0376 4936  [ 93952506C6D67330367F7E7934B6A02F ] C:\Windows\System32\qmgr.dll

16:15:47.0376 4936  C:\Windows\System32\qmgr.dll - ok

16:15:47.0379 4936  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] C:\Windows\System32\browser.dll

16:15:47.0379 4936  C:\Windows\System32\browser.dll - ok

16:15:47.0382 4936  [ A4C8377FA4A994E07075107DBE2E3DCE ] C:\Windows\System32\bthserv.dll

16:15:47.0382 4936  C:\Windows\System32\bthserv.dll - ok

16:15:47.0385 4936  [ 312EC3E37A0A1F2006534913E37B4423 ] C:\Windows\System32\certprop.dll

16:15:47.0385 4936  C:\Windows\System32\certprop.dll - ok

16:15:47.0389 4936  [ DE0DD9AE3430F84A96B5501112A696BE ] C:\Windows\System32\bcrypt.dll

16:15:47.0389 4936  C:\Windows\System32\bcrypt.dll - ok

16:15:47.0392 4936  [ 188CC19108B0EBD6332D6628D4EDE469 ] C:\Windows\System32\ncrypt.dll

16:15:47.0392 4936  C:\Windows\System32\ncrypt.dll - ok

16:15:47.0395 4936  [ 4211249955AF9133E2E357CC92B54DFD ] C:\Windows\System32\comres.dll

16:15:47.0395 4936  C:\Windows\System32\comres.dll - ok

16:15:47.0398 4936  [ 26F139DDEC6407508071930D3D07337E ] C:\Windows\System32\credssp.dll

16:15:47.0398 4936  C:\Windows\System32\credssp.dll - ok

16:15:47.0401 4936  [ F1E8C34892336D33EDDCDFE44E474F64 ] C:\Windows\System32\cryptsvc.dll

16:15:47.0401 4936  C:\Windows\System32\cryptsvc.dll - ok

16:15:47.0404 4936  [ ABE9EEA1EABEA0711610A637A7B1C25D ] C:\Windows\System32\msprivs.dll

16:15:47.0404 4936  C:\Windows\System32\msprivs.dll - ok

16:15:47.0407 4936  [ 08D6D1692B62C9EE4062E1FA04D8FE2F ] C:\Windows\System32\oleres.dll

16:15:47.0408 4936  C:\Windows\System32\oleres.dll - ok

16:15:47.0411 4936  [ 74F380C8EC8813626C670D46E8A714D1 ] C:\Windows\System32\dfsrres.dll

16:15:47.0411 4936  C:\Windows\System32\dfsrres.dll - ok

16:15:47.0414 4936  [ AA01497884F9CBAC89470120AF78D2B1 ] C:\Windows\System32\kerberos.dll

16:15:47.0414 4936  C:\Windows\System32\kerberos.dll - ok

16:15:47.0417 4936  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] C:\Windows\System32\dot3svc.dll

16:15:47.0417 4936  C:\Windows\System32\dot3svc.dll - ok

16:15:47.0420 4936  [ 9E80FF0752E365F97FD2D1D68C2AFDA1 ] C:\Windows\System32\wship6.dll

16:15:47.0420 4936  C:\Windows\System32\wship6.dll - ok

16:15:47.0424 4936  [ 22CFAEB9172F5F198048401485CD0571 ] C:\Windows\System32\WSHTCPIP.DLL

16:15:47.0424 4936  C:\Windows\System32\WSHTCPIP.DLL - ok

16:15:47.0427 4936  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] C:\Windows\System32\dps.dll

16:15:47.0427 4936  C:\Windows\System32\dps.dll - ok

16:15:47.0430 4936  [ C0B95E40D85CD807D614E264248A45B9 ] C:\Windows\System32\eapsvc.dll

16:15:47.0430 4936  C:\Windows\System32\eapsvc.dll - ok

16:15:47.0434 4936  [ 9BE3744D295A7701EB425332014F0797 ] C:\Windows\ehome\ehrecvr.exe

16:15:47.0434 4936  C:\Windows\ehome\ehrecvr.exe - ok

16:15:47.0437 4936  [ AD1870C8E5D6DD340C829E6074BF3C3F ] C:\Windows\ehome\ehsched.exe

16:15:47.0437 4936  C:\Windows\ehome\ehsched.exe - ok

16:15:47.0441 4936  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] C:\Windows\ehome\ehstart.dll

16:15:47.0441 4936  C:\Windows\ehome\ehstart.dll - ok

16:15:47.0444 4936  [ 4E6B23DFC917EA39306B529B773950F4 ] C:\Windows\System32\emdmgmt.dll

16:15:47.0444 4936  C:\Windows\System32\emdmgmt.dll - ok

16:15:47.0447 4936  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] C:\Windows\System32\nlasvc.dll

16:15:47.0447 4936  C:\Windows\System32\nlasvc.dll - ok

16:15:47.0450 4936  [ 05C3B38DB95BA5585817A4F898EE5581 ] C:\Windows\System32\wshqos.dll

16:15:47.0450 4936  C:\Windows\System32\wshqos.dll - ok

16:15:47.0454 4936  [ 8617350C9B590B63E620881092751BCB ] C:\Windows\System32\mswsock.dll

16:15:47.0454 4936  C:\Windows\System32\mswsock.dll - ok

16:15:47.0458 4936  [ FC62A635063B762E1C3C60EA77279378 ] C:\Windows\System32\NapiNSP.dll

16:15:47.0458 4936  C:\Windows\System32\NapiNSP.dll - ok

16:15:47.0462 4936  [ 690D41DF1D555F96D4898A0F54EBA065 ] C:\Windows\System32\pnrpnsp.dll

16:15:47.0462 4936  C:\Windows\System32\pnrpnsp.dll - ok

16:15:47.0466 4936  [ 4ABCE74D012971305249E45E095E9EA6 ] C:\Windows\System32\msv1_0.dll

16:15:47.0466 4936  C:\Windows\System32\msv1_0.dll - ok

16:15:47.0470 4936  [ 95DAECF0FB120A7B5DA679CC54E37DDE ] C:\Windows\System32\netlogon.dll

16:15:47.0470 4936  C:\Windows\System32\netlogon.dll - ok

16:15:47.0474 4936  [ A1B40A28F38D27A7E3229EE4C7064434 ] C:\Windows\System32\wevtsvc.dll

16:15:47.0474 4936  C:\Windows\System32\wevtsvc.dll - ok

16:15:47.0477 4936  [ 898E7C06A350D4A1A64A9EA264D55452 ] C:\Windows\System32\winlogon.exe

16:15:47.0477 4936  C:\Windows\System32\winlogon.exe - ok

16:15:47.0481 4936  [ 72910BC4A218C49EA8E43D1FAEC403A5 ] C:\Windows\System32\winbrand.dll

16:15:47.0481 4936  C:\Windows\System32\winbrand.dll - ok

16:15:47.0484 4936  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] C:\Windows\System32\fdPHost.dll

16:15:47.0484 4936  C:\Windows\System32\fdPHost.dll - ok

16:15:47.0487 4936  [ 50E3E76B0901BB4FC029BB88BFA5CE79 ] C:\Windows\System32\schannel.dll

16:15:47.0487 4936  C:\Windows\System32\schannel.dll - ok

16:15:47.0491 4936  [ 93620229F3CC3B67A3528BF39F064C30 ] C:\Windows\System32\wdigest.dll

16:15:47.0491 4936  C:\Windows\System32\wdigest.dll - ok

16:15:47.0494 4936  [ E14170AEA125119B98FA2BDE3FF4F462 ] C:\Windows\System32\rsaenh.dll

16:15:47.0494 4936  C:\Windows\System32\rsaenh.dll - ok

16:15:47.0496 4936  [ F8873D15018F411588BEC02C1725BADA ] C:\Windows\System32\TSpkg.dll

16:15:47.0496 4936  C:\Windows\System32\TSpkg.dll - ok

16:15:47.0500 4936  [ 0F420E81062757EA8363CBACD4D40D6D ] C:\Windows\System32\gpapi.dll

16:15:47.0500 4936  C:\Windows\System32\gpapi.dll - ok

16:15:47.0503 4936  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] C:\Windows\System32\FDResPub.dll

16:15:47.0503 4936  C:\Windows\System32\FDResPub.dll - ok

16:15:47.0506 4936  [ 8CE364388C8ECA59B14B539179276D44 ] C:\Windows\System32\FntCache.dll

16:15:47.0506 4936  C:\Windows\System32\FntCache.dll - ok

16:15:47.0510 4936  [ 302964DCAC79D618CC7B72C778DA9FD2 ] C:\Windows\System32\PresentationHost.exe

16:15:47.0510 4936  C:\Windows\System32\PresentationHost.exe - ok

16:15:47.0513 4936  [ 84067081F3318162797385E11A8F0582 ] C:\Windows\System32\hidserv.dll

16:15:47.0513 4936  C:\Windows\System32\hidserv.dll - ok

16:15:47.0516 4936  [ D8AD255B37DA92434C26E4876DB7D418 ] C:\Windows\System32\KMSVC.DLL

16:15:47.0516 4936  C:\Windows\System32\KMSVC.DLL - ok

16:15:47.0520 4936  [ 05586F5438AB0DA4F5149159E0E5FD4B ] C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll

16:15:47.0520 4936  C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll - ok

16:15:47.0523 4936  [ 9908D8A397B76CD8D31D0D383C5773C9 ] C:\Windows\System32\IKEEXT.DLL

16:15:47.0523 4936  C:\Windows\System32\IKEEXT.DLL - ok

16:15:47.0526 4936  [ 9AC218C6E6105477484C6FDBE7D409A4 ] C:\Windows\System32\IPBusEnum.dll

16:15:47.0527 4936  C:\Windows\System32\IPBusEnum.dll - ok

16:15:47.0530 4936  [ 3464DAE0E801F5A81A23C571D86F30B2 ] C:\Windows\System32\rascfg.dll

16:15:47.0530 4936  C:\Windows\System32\rascfg.dll - ok

16:15:47.0533 4936  [ 4AAFC7461633848AA87A363B2CBEC522 ] C:\Windows\System32\winsta.dll

16:15:47.0533 4936  C:\Windows\System32\winsta.dll - ok

16:15:47.0536 4936  [ 1998BD97F950680BB55F55A7244679C2 ] C:\Windows\System32\iphlpsvc.dll

16:15:47.0536 4936  C:\Windows\System32\iphlpsvc.dll - ok

16:15:47.0540 4936  [ 74C2F29CC612B2B34231BEBD824D2FB2 ] C:\Windows\System32\keyiso.dll

16:15:47.0540 4936  C:\Windows\System32\keyiso.dll - ok

16:15:47.0543 4936  [ 1BF5EEBFD518DD7298434D8C862F825D ] C:\Windows\System32\srvsvc.dll

16:15:47.0543 4936  C:\Windows\System32\srvsvc.dll - ok

16:15:47.0546 4936  [ 1DB69705B695B987082C8BAEC0C6B34F ] C:\Windows\System32\wkssvc.dll

16:15:47.0546 4936  C:\Windows\System32\wkssvc.dll - ok

16:15:47.0549 4936  [ 132F6237FA3BF3E9715F63A1CCF72BF1 ] C:\Windows\ehome\ehres.dll

16:15:47.0549 4936  C:\Windows\ehome\ehres.dll - ok

16:15:47.0553 4936  [ FA0593D936C9B95FB6FAA32AD1595D49 ] C:\Windows\System32\lltdres.dll

16:15:47.0553 4936  C:\Windows\System32\lltdres.dll - ok

16:15:47.0556 4936  [ 35D40113E4A5B961B6CE5C5857702518 ] C:\Windows\System32\lmhsvc.dll

16:15:47.0556 4936  C:\Windows\System32\lmhsvc.dll - ok

16:15:47.0559 4936  [ 95F1EB99B81CFD6F581C85F0A0AA9B2B ] C:\Windows\System32\FirewallAPI.dll

16:15:47.0559 4936  C:\Windows\System32\FirewallAPI.dll - ok

16:15:47.0563 4936  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] C:\Windows\System32\mmcss.dll

16:15:47.0563 4936  C:\Windows\System32\mmcss.dll - ok

16:15:47.0566 4936  [ EA822412BBBA9B7D2B1A3748AD50EFB8 ] C:\Windows\System32\iscsidsc.dll

16:15:47.0566 4936  C:\Windows\System32\iscsidsc.dll - ok

16:15:47.0570 4936  [ ED21401F1E2F6BC2F54C462BB66D0D6B ] C:\Windows\System32\msimsg.dll

16:15:47.0570 4936  C:\Windows\System32\msimsg.dll - ok

16:15:47.0573 4936  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] C:\Windows\System32\QAGENTRT.DLL

16:15:47.0573 4936  C:\Windows\System32\QAGENTRT.DLL - ok

16:15:47.0576 4936  [ C8052711DAECC48B982434C5116CA401 ] C:\Windows\System32\netman.dll

16:15:47.0576 4936  C:\Windows\System32\netman.dll - ok

16:15:47.0580 4936  [ 4EF5DF1B011B05737ECB8F0B7B171510 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll

16:15:47.0580 4936  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll - ok

16:15:47.0583 4936  [ ED640F4CE585058119B824CC76591D9C ] C:\Windows\System32\netprof.dll

16:15:47.0583 4936  C:\Windows\System32\netprof.dll - ok

16:15:47.0586 4936  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] C:\Windows\System32\nsisvc.dll

16:15:47.0586 4936  C:\Windows\System32\nsisvc.dll - ok

16:15:47.0590 4936  [ 0C8E8E61AD1EB0B250B846712C917506 ] C:\Windows\System32\p2psvc.dll

16:15:47.0590 4936  C:\Windows\System32\p2psvc.dll - ok

16:15:47.0593 4936  [ C6276AD11F4BB49B58AA1ED88537F14A ] C:\Windows\System32\pcasvc.dll

16:15:47.0593 4936  C:\Windows\System32\pcasvc.dll - ok

16:15:47.0596 4936  [ B1689DF169143F57053F795390C99DB3 ] C:\Windows\System32\pla.dll

16:15:47.0596 4936  C:\Windows\System32\pla.dll - ok

16:15:47.0599 4936  [ C5E7F8A996EC0A82D508FD9064A5569E ] C:\Windows\System32\umpnpmgr.dll

16:15:47.0599 4936  C:\Windows\System32\umpnpmgr.dll - ok

16:15:47.0602 4936  [ 64B28D672B5B6A01E87B0C3096B1E047 ] C:\Windows\System32\polstore.dll

16:15:47.0602 4936  C:\Windows\System32\polstore.dll - ok

16:15:47.0606 4936  [ 0508FAA222D28835310B7BFCA7A77346 ] C:\Windows\System32\profsvc.dll

16:15:47.0606 4936  C:\Windows\System32\profsvc.dll - ok

16:15:47.0609 4936  [ 08F9134A2215B7ED985409A4DF60AC60 ] C:\Windows\System32\psbase.dll

16:15:47.0609 4936  C:\Windows\System32\psbase.dll - ok

16:15:47.0612 4936  [ 9F5E0E1926014D17486901C88ECA2DB7 ] C:\Windows\System32\drivers\qwavedrv.sys

16:15:47.0612 4936  C:\Windows\System32\drivers\qwavedrv.sys - ok

16:15:47.0616 4936  [ E9ECAE663F47E6CB43962D18AB18890F ] C:\Windows\System32\qwave.dll

16:15:47.0616 4936  C:\Windows\System32\qwave.dll - ok

16:15:47.0619 4936  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] C:\Windows\System32\rasauto.dll

16:15:47.0619 4936  C:\Windows\System32\rasauto.dll - ok

16:15:47.0622 4936  [ 75D47445D70CA6F9F894B032FBC64FCF ] C:\Windows\System32\rasmans.dll

16:15:47.0622 4936  C:\Windows\System32\rasmans.dll - ok

16:15:47.0626 4936  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] C:\Windows\System32\sstpsvc.dll

16:15:47.0626 4936  C:\Windows\System32\sstpsvc.dll - ok

16:15:47.0630 4936  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] C:\Windows\System32\mprdim.dll

16:15:47.0630 4936  C:\Windows\System32\mprdim.dll - ok

16:15:47.0633 4936  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] C:\Windows\System32\regsvc.dll

16:15:47.0633 4936  C:\Windows\System32\regsvc.dll - ok

16:15:47.0636 4936  [ 5123F83CBC4349D065534EEB6BBDC42B ] C:\Windows\System32\Locator.exe

16:15:47.0636 4936  C:\Windows\System32\Locator.exe - ok

16:15:47.0639 4936  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] C:\Windows\System32\SCardSvr.dll

16:15:47.0640 4936  C:\Windows\System32\SCardSvr.dll - ok

16:15:47.0643 4936  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] C:\Windows\System32\schedsvc.dll

16:15:47.0643 4936  C:\Windows\System32\schedsvc.dll - ok

16:15:47.0646 4936  [ 716313D9F6B0529D03F726D5AAF6F191 ] C:\Windows\System32\sdrsvc.dll

16:15:47.0646 4936  C:\Windows\System32\sdrsvc.dll - ok

16:15:47.0649 4936  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] C:\Windows\System32\seclogon.dll

16:15:47.0649 4936  C:\Windows\System32\seclogon.dll - ok

16:15:47.0653 4936  [ A9BBAB5759771E523F55563D6CBE140F ] C:\Windows\System32\Sens.dll

16:15:47.0653 4936  C:\Windows\System32\Sens.dll - ok

16:15:47.0656 4936  [ D2193326F729B163125610DBF3E17D57 ] C:\Windows\System32\SessEnv.dll

16:15:47.0656 4936  C:\Windows\System32\SessEnv.dll - ok

16:15:47.0659 4936  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] C:\Windows\System32\ipnathlp.dll

16:15:47.0659 4936  C:\Windows\System32\ipnathlp.dll - ok

16:15:47.0662 4936  [ C7230FBEE14437716701C15BE02C27B8 ] C:\Windows\System32\shsvcs.dll

16:15:47.0662 4936  C:\Windows\System32\shsvcs.dll - ok

16:15:47.0665 4936  [ 862BB4CBC05D80C5B45BE430E5EF872F ] C:\Windows\System32\SLsvc.exe

16:15:47.0665 4936  C:\Windows\System32\SLsvc.exe - ok

16:15:47.0669 4936  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] C:\Windows\System32\SLUINotify.dll

16:15:47.0669 4936  C:\Windows\System32\SLUINotify.dll - ok

16:15:47.0672 4936  [ E4060CFE50F87C72316CB0FDB20E4913 ] C:\Windows\System32\tcpipcfg.dll

16:15:47.0672 4936  C:\Windows\System32\tcpipcfg.dll - ok

16:15:47.0675 4936  [ 2A146A055B4401C16EE62D18B8E2A032 ] C:\Windows\System32\snmptrap.exe

16:15:47.0676 4936  C:\Windows\System32\snmptrap.exe - ok

16:15:47.0679 4936  [ 8554097E5136C3BF9F69FE578A1B35F4 ] C:\Windows\System32\spoolsv.exe

16:15:47.0679 4936  C:\Windows\System32\spoolsv.exe - ok

16:15:47.0682 4936  [ 03D50B37234967433A5EA5BA72BC0B62 ] C:\Windows\System32\ssdpsrv.dll

16:15:47.0682 4936  C:\Windows\System32\ssdpsrv.dll - ok

16:15:47.0685 4936  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] C:\Windows\System32\wiaservc.dll

16:15:47.0685 4936  C:\Windows\System32\wiaservc.dll - ok

16:15:47.0689 4936  [ F21FD248040681CCA1FB6C9A03AAA93D ] C:\Windows\System32\swprv.dll

16:15:47.0689 4936  C:\Windows\System32\swprv.dll - ok

16:15:47.0692 4936  [ 9A51B04E9886AA4EE90093586B0BA88D ] C:\Windows\System32\sysmain.dll

16:15:47.0692 4936  C:\Windows\System32\sysmain.dll - ok

16:15:47.0696 4936  [ 2DCA225EAE15F42C0933E998EE0231C3 ] C:\Windows\System32\TabSvc.dll

16:15:47.0696 4936  C:\Windows\System32\TabSvc.dll - ok

16:15:47.0699 4936  [ D7673E4B38CE21EE54C59EEEB65E2483 ] C:\Windows\System32\tapisrv.dll

16:15:47.0699 4936  C:\Windows\System32\tapisrv.dll - ok

16:15:47.0702 4936  [ CB05822CD9CC6C688168E113C603DBE7 ] C:\Windows\System32\tbssvc.dll

16:15:47.0702 4936  C:\Windows\System32\tbssvc.dll - ok

16:15:47.0705 4936  [ BB95DA09BEF6E7A131BFF3BA5032090D ] C:\Windows\System32\termsrv.dll

16:15:47.0705 4936  C:\Windows\System32\termsrv.dll - ok

16:15:47.0709 4936  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] C:\Windows\servicing\TrustedInstaller.exe

16:15:47.0709 4936  C:\Windows\servicing\TrustedInstaller.exe - ok

16:15:47.0712 4936  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] C:\Windows\System32\trkwks.dll

16:15:47.0712 4936  C:\Windows\System32\trkwks.dll - ok

16:15:47.0715 4936  [ ECEF404F62863755951E09C802C94AD5 ] C:\Windows\System32\UI0Detect.exe

16:15:47.0715 4936  C:\Windows\System32\UI0Detect.exe - ok

16:15:47.0718 4936  [ 68308183F4AE0BE7BF8ECD07CB297999 ] C:\Windows\System32\upnphost.dll

16:15:47.0718 4936  C:\Windows\System32\upnphost.dll - ok

16:15:47.0721 4936  [ 01DD1004181FD46ECDC3628228EB269D ] C:\Windows\System32\dwm.exe

16:15:47.0722 4936  C:\Windows\System32\dwm.exe - ok

16:15:47.0725 4936  [ CD88D1B7776DC17A119049742EC07EB4 ] C:\Windows\System32\vds.exe

16:15:47.0725 4936  C:\Windows\System32\vds.exe - ok

16:15:47.0728 4936  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] C:\Windows\System32\VSSVC.exe

16:15:47.0728 4936  C:\Windows\System32\VSSVC.exe - ok

16:15:47.0731 4936  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] C:\Windows\System32\w32time.dll

16:15:47.0731 4936  C:\Windows\System32\w32time.dll - ok

16:15:47.0734 4936  [ A3CD60FD826381B49F03832590E069AF ] C:\Windows\System32\wcncsvc.dll

16:15:47.0734 4936  C:\Windows\System32\wcncsvc.dll - ok

16:15:47.0737 4936  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] C:\Windows\System32\WcsPlugInService.dll

16:15:47.0737 4936  C:\Windows\System32\WcsPlugInService.dll - ok

16:15:47.0740 4936  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] C:\Windows\System32\wdi.dll

16:15:47.0740 4936  C:\Windows\System32\wdi.dll - ok

16:15:47.0743 4936  [ 04C37D8107320312FBAE09926103D5E2 ] C:\Windows\System32\WebClnt.dll

16:15:47.0743 4936  C:\Windows\System32\WebClnt.dll - ok

16:15:47.0746 4936  [ AE3736E7E8892241C23E4EBBB7453B60 ] C:\Windows\System32\wecsvc.dll

16:15:47.0746 4936  C:\Windows\System32\wecsvc.dll - ok

16:15:47.0749 4936  [ 670FF720071ED741206D69BD995EA453 ] C:\Windows\System32\wercplsupport.dll

16:15:47.0749 4936  C:\Windows\System32\wercplsupport.dll - ok

16:15:47.0752 4936  [ 32B88481D3B326DA6DEB07B1D03481E7 ] C:\Windows\System32\wersvc.dll

16:15:47.0752 4936  C:\Windows\System32\wersvc.dll - ok

16:15:47.0756 4936  [ 62DB790A860CDFC4278D2F03CC5675D8 ] C:\Program Files\Windows Defender\MsMpRes.dll

16:15:47.0756 4936  C:\Program Files\Windows Defender\MsMpRes.dll - ok

16:15:47.0759 4936  [ DBD02E3E6F061EBBBF9B99A9D7CBA30B ] C:\Windows\System32\winhttp.dll

16:15:47.0759 4936  C:\Windows\System32\winhttp.dll - ok

16:15:47.0762 4936  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] C:\Windows\System32\wbem\WMIsvc.dll

16:15:47.0762 4936  C:\Windows\System32\wbem\WMIsvc.dll - ok

16:15:47.0765 4936  [ 7CFE68BDC065E55AA5E8421607037511 ] C:\Windows\System32\WsmSvc.dll

16:15:47.0765 4936  C:\Windows\System32\WsmSvc.dll - ok

16:15:47.0768 4936  [ C008405E4FEEB069E30DA1D823910234 ] C:\Windows\System32\wlansvc.dll

16:15:47.0768 4936  C:\Windows\System32\wlansvc.dll - ok

16:15:47.0772 4936  [ 43BE3875207DCB62A85C8C49970B66CC ] C:\Windows\System32\wbem\WmiApSrv.exe

16:15:47.0772 4936  C:\Windows\System32\wbem\WmiApSrv.exe - ok

16:15:47.0775 4936  [ 3978704576A121A9204F8CC49A301A9B ] C:\Program Files\Windows Media Player\wmpnetwk.exe

16:15:47.0775 4936  C:\Program Files\Windows Media Player\wmpnetwk.exe - ok

16:15:47.0778 4936  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] C:\Windows\System32\wpcsvc.dll

16:15:47.0778 4936  C:\Windows\System32\wpcsvc.dll - ok

16:15:47.0782 4936  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:15:47.0782 4936  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe - ok

16:15:47.0785 4936  [ 801FBDB89D472B3C467EB112A0FC9246 ] C:\Windows\System32\wpdbusenum.dll

16:15:47.0785 4936  C:\Windows\System32\wpdbusenum.dll - ok

16:15:47.0788 4936  [ 1CA6C40261DDC0425987980D0CD2AAAB ] C:\Windows\System32\wscsvc.dll

16:15:47.0788 4936  C:\Windows\System32\wscsvc.dll - ok

16:15:47.0792 4936  [ AED0DFF80C6B3914769407E78D7AB21A ] C:\Windows\System32\SearchIndexer.exe

16:15:47.0792 4936  C:\Windows\System32\SearchIndexer.exe - ok

16:15:47.0795 4936  [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\Windows\System32\wuaueng.dll

16:15:47.0795 4936  C:\Windows\System32\wuaueng.dll - ok

16:15:47.0798 4936  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] C:\Windows\System32\WUDFSvc.dll

16:15:47.0798 4936  C:\Windows\System32\WUDFSvc.dll - ok

16:15:47.0802 4936  [ 8FC182167381E9915651267044105EE1 ] C:\Windows\System32\scecli.dll

16:15:47.0802 4936  C:\Windows\System32\scecli.dll - ok

16:15:47.0805 4936  [ CD08EEC61C591AF59A39F4363C567D30 ] C:\Windows\System32\ntmarta.dll

16:15:47.0805 4936  C:\Windows\System32\ntmarta.dll - ok

16:15:47.0809 4936  [ 3794B461C45882E06856F282EEF025AF ] C:\Windows\System32\svchost.exe

16:15:47.0809 4936  C:\Windows\System32\svchost.exe - ok

16:15:47.0812 4936  [ 9A7F4B2EDACD11444D048AA19CBB26AF ] C:\Windows\System32\powrprof.dll

16:15:47.0812 4936  C:\Windows\System32\powrprof.dll - ok

16:15:47.0815 4936  [ 8F5C7426567798E62A3B3614965D62CC ] C:\Windows\System32\drivers\luafv.sys

16:15:47.0815 4936  C:\Windows\System32\drivers\luafv.sys - ok

16:15:47.0818 4936  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] C:\Windows\System32\drivers\WUDFPf.sys

16:15:47.0818 4936  C:\Windows\System32\drivers\WUDFPf.sys - ok

16:15:47.0822 4936  [ 782945716AD010AC3D41758E8E52C735 ] C:\Windows\System32\nvvsvc.exe

16:15:47.0822 4936  C:\Windows\System32\nvvsvc.exe - ok

16:15:47.0825 4936  [ F42483814FC39170B3982A184EC5AAA2 ] C:\Windows\System32\wtsapi32.dll

16:15:47.0825 4936  C:\Windows\System32\wtsapi32.dll - ok

16:15:47.0828 4936  [ BE3C082837866C4C291ADAF163C10EA6 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll

16:15:47.0828 4936  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll - ok

16:15:47.0832 4936  [ C354621B6B94E10AE7F5CDBE745FEB86 ] C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:15:47.0832 4936  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - ok

16:15:47.0835 4936  [ 69827805A221C21450BA22F4326A2EE3 ] C:\Windows\System32\version.dll

16:15:47.0835 4936  C:\Windows\System32\version.dll - ok

16:15:47.0838 4936  [ 5EC8FB83F31AA2D6F421F02C3F4F4475 ] C:\Windows\System32\winspool.drv

16:15:47.0838 4936  C:\Windows\System32\winspool.drv - ok

16:15:47.0841 4936  [ 48ECE68A7DF667C201E719B6D282F77B ] C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll

16:15:47.0841 4936  C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll - ok

16:15:47.0845 4936  [ A34A8F5554AA0C547B88121A3B49D88D ] C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll

16:15:47.0845 4936  C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll - ok

16:15:47.0848 4936  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] C:\Windows\System32\rpcss.dll

16:15:47.0848 4936  C:\Windows\System32\rpcss.dll - ok

16:15:47.0851 4936  [ A99871BA522CB2539AE275AC18CACC8F ] C:\Windows\System32\cabinet.dll

16:15:47.0851 4936  C:\Windows\System32\cabinet.dll - ok

16:15:47.0854 4936  [ B2E569EF26DAC9D6994A2AFF4F601B7A ] C:\Windows\System32\wintrust.dll

16:15:47.0854 4936  C:\Windows\System32\wintrust.dll - ok

16:15:47.0857 4936  [ 62D577288B48998FC6667BF22DC5B690 ] C:\Windows\System32\LogonUI.exe

16:15:47.0857 4936  C:\Windows\System32\LogonUI.exe - ok

16:15:47.0860 4936  [ 58C2521D87C494831A625202C80354AD ] C:\Windows\System32\authui.dll

16:15:47.0860 4936  C:\Windows\System32\authui.dll - ok

16:15:47.0863 4936  [ C9244BCAC83B259B920BBEE18A97BFE1 ] C:\Windows\System32\avrt.dll

16:15:47.0863 4936  C:\Windows\System32\avrt.dll - ok

16:15:47.0866 4936  [ 56B5914070B2C243DFB3D186070DA89D ] C:\Windows\System32\MMDevAPI.dll

16:15:47.0866 4936  C:\Windows\System32\MMDevAPI.dll - ok

16:15:47.0869 4936  [ 2EC53B5A351C4D443896DBAD117F7E82 ] C:\Windows\System32\msimg32.dll

16:15:47.0869 4936  C:\Windows\System32\msimg32.dll - ok

16:15:47.0873 4936  [ 999D69DEB576C2C424294DF025891CC6 ] C:\Windows\System32\uxtheme.dll

16:15:47.0873 4936  C:\Windows\System32\uxtheme.dll - ok

16:15:47.0876 4936  [ 83E354791CF2A6A74F077F79D2A2E40E ] C:\Windows\System32\WUDFPlatform.dll

16:15:47.0876 4936  C:\Windows\System32\WUDFPlatform.dll - ok

16:15:47.0879 4936  [ EC43D9CC95C3BB5FEFDBCF22D375E1F5 ] C:\Windows\System32\adtschema.dll

16:15:47.0879 4936  C:\Windows\System32\adtschema.dll - ok

16:15:47.0882 4936  [ 97FEF831AB90BEE128C9AF390E243F80 ] C:\Windows\System32\drivers\drmkaud.sys

16:15:47.0882 4936  C:\Windows\System32\drivers\drmkaud.sys - ok

16:15:47.0886 4936  [ 76EAEF4DDEBBC7C38853F586C0E91DCE ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll

16:15:47.0886 4936  C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll - ok

16:15:47.0889 4936  [ 75EB73E64F5B4655D9797D20F26DE320 ] C:\Windows\System32\duser.dll

16:15:47.0889 4936  C:\Windows\System32\duser.dll - ok

16:15:47.0893 4936  [ 3437B9E218A2E4586BEF4F7A3BD00777 ] C:\Windows\System32\audiodg.exe

16:15:47.0893 4936  C:\Windows\System32\audiodg.exe - ok

16:15:47.0896 4936  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] C:\Windows\System32\drivers\fltMgr.sys

16:15:47.0896 4936  C:\Windows\System32\drivers\fltMgr.sys - ok

16:15:47.0899 4936  [ 57418956DDAE128D1023C508E7D07071 ] C:\Windows\System32\PSHED.DLL

16:15:47.0899 4936  C:\Windows\System32\PSHED.DLL - ok

16:15:47.0902 4936  [ 1908CC7673F72601AFFDCA022689CEDF ] C:\Windows\System32\xmllite.dll

16:15:47.0903 4936  C:\Windows\System32\xmllite.dll - ok

16:15:47.0906 4936  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] C:\Windows\System32\gpsvc.dll

16:15:47.0906 4936  C:\Windows\System32\gpsvc.dll - ok

16:15:47.0909 4936  [ D1A84F7D4CAFCFE2A32149FF418056E5 ] C:\Windows\System32\nlaapi.dll

16:15:47.0909 4936  C:\Windows\System32\nlaapi.dll - ok

16:15:47.0912 4936  [ 409F36C8BD06FCE184631EB4142B009A ] C:\Windows\System32\atl.dll

16:15:47.0912 4936  C:\Windows\System32\atl.dll - ok

16:15:47.0915 4936  [ A7F8BAD9590ADDC425B4003E94780DFA ] C:\Windows\System32\drivers\spsys.sys

16:15:47.0915 4936  C:\Windows\System32\drivers\spsys.sys - ok

16:15:47.0918 4936  [ 67058C46504BC12D821F38CF99B7B28F ] C:\Windows\System32\es.dll

16:15:47.0918 4936  C:\Windows\System32\es.dll - ok

16:15:47.0922 4936  [ 7DACD94118E2D8B6D72F47ADEB0367BF ] C:\Windows\System32\propsys.dll

16:15:47.0922 4936  C:\Windows\System32\propsys.dll - ok

16:15:47.0925 4936  [ 8269CC01940A202BBB9FDF26705DBD67 ] C:\Windows\System32\hid.dll

16:15:47.0925 4936  C:\Windows\System32\hid.dll - ok

16:15:47.0929 4936  [ 1509E705F3AC1D474C92454A5C2DD81F ] C:\Windows\System32\uxsms.dll

16:15:47.0929 4936  C:\Windows\System32\uxsms.dll - ok

16:15:47.0932 4936  [ B25DBBA6C63A61FF4AFDB5ADAB4E70CB ] C:\Windows\System32\SmartcardCredentialProvider.dll

16:15:47.0932 4936  C:\Windows\System32\SmartcardCredentialProvider.dll - ok

16:15:47.0935 4936  [ 9DC3723519F52B6BC63EACD4BD411313 ] C:\Windows\System32\rasplap.dll

16:15:47.0935 4936  C:\Windows\System32\rasplap.dll - ok

16:15:47.0938 4936  [ 3CB863B78642405371CB3A71C07E2382 ] C:\Windows\System32\rasapi32.dll

16:15:47.0938 4936  C:\Windows\System32\rasapi32.dll - ok

16:15:47.0942 4936  [ 3A1DDA77F331D107BA40DB06E4D666E9 ] C:\Windows\System32\rasman.dll

16:15:47.0942 4936  C:\Windows\System32\rasman.dll - ok

16:15:47.0945 4936  [ 3D418A22A56471295AEB1CEB9027C3DA ] C:\Windows\System32\rtutils.dll

16:15:47.0945 4936  C:\Windows\System32\rtutils.dll - ok

16:15:47.0948 4936  [ 70F08ECE7A30A639D3F0C8C433685C7D ] C:\Windows\System32\tapi32.dll

16:15:47.0948 4936  C:\Windows\System32\tapi32.dll - ok

16:15:47.0951 4936  [ 14FF750EFE13B0C21E5A06507C3A97B1 ] C:\Windows\System32\winmm.dll

16:15:47.0951 4936  C:\Windows\System32\winmm.dll - ok

16:15:47.0953 4936  [ DC15AB7168C0309D8F04FD95B6240422 ] C:\Windows\System32\oleacc.dll

16:15:47.0954 4936  C:\Windows\System32\oleacc.dll - ok

16:15:47.0957 4936  [ 627920CFF5DFCF8CF54CF2D592D61307 ] C:\Windows\System32\WinSCard.dll

16:15:47.0957 4936  C:\Windows\System32\WinSCard.dll - ok

16:15:47.0960 4936  [ 12A1DF1B84FB45A00D47B2CDE2CEEBBA ] C:\Windows\System32\shgina.dll

16:15:47.0960 4936  C:\Windows\System32\shgina.dll - ok

16:15:47.0964 4936  [ D1C5883087A0C3F1344D9D55A44901F6 ] C:\Windows\System32\drivers\lltdio.sys

16:15:47.0964 4936  C:\Windows\System32\drivers\lltdio.sys - ok

16:15:47.0967 4936  [ 9C508F4074A39E8B4B31D27198146FAD ] C:\Windows\System32\drivers\rspndr.sys

16:15:47.0967 4936  C:\Windows\System32\drivers\rspndr.sys - ok

16:15:47.0971 4936  [ 70932D6C3D59B416CBD2BE5A3B3D4BE6 ] C:\Windows\System32\shacct.dll

16:15:47.0971 4936  C:\Windows\System32\shacct.dll - ok

16:15:47.0974 4936  [ 4DF066ECEE5A7B20BF8B39EF4D646600 ] C:\Windows\System32\wdmaud.drv

16:15:47.0974 4936  C:\Windows\System32\wdmaud.drv - ok

16:15:47.0977 4936  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] C:\Windows\System32\dnsrslvr.dll

16:15:47.0978 4936  C:\Windows\System32\dnsrslvr.dll - ok

16:15:47.0981 4936  [ 919CC2A0476D5A6A4C935D4B88E29912 ] C:\Windows\System32\ksuser.dll

16:15:47.0981 4936  C:\Windows\System32\ksuser.dll - ok

16:15:47.0984 4936  [ 37F929A6CC3EF6FFACC02F511DD6CBE5 ] C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

16:15:47.0984 4936  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - ok

16:15:47.0988 4936  [ DB7F4AB85298F3FE522C5512B8B0F56D ] C:\Windows\System32\AudioEng.dll

16:15:47.0988 4936  C:\Windows\System32\AudioEng.dll - ok

16:15:47.0991 4936  [ 7258434974EA735725FD2D4A65C5E821 ] C:\Windows\System32\AudioSes.dll

16:15:47.0992 4936  C:\Windows\System32\AudioSes.dll - ok

16:15:47.0995 4936  [ 6836D001FC733F205ACB80A7986CB6C9 ] C:\Windows\System32\WindowsCodecs.dll

16:15:47.0995 4936  C:\Windows\System32\WindowsCodecs.dll - ok

16:15:47.0997 4936  [ 1821828A1C14280420A2914881C25CDC ] C:\Windows\System32\nvsvc.dll

16:15:47.0997 4936  C:\Windows\System32\nvsvc.dll - ok

16:15:48.0001 4936  [ CA0B849566776A17F35F0339BE17DFD9 ] C:\Windows\System32\ktmw32.dll

16:15:48.0001 4936  C:\Windows\System32\ktmw32.dll - ok

16:15:48.0004 4936  [ 35ACD5EA63D75E97DD0E9A1629E582B2 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll

16:15:48.0004 4936  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll - ok

16:15:48.0007 4936  [ BDBB449425991154135E5ED1559927E6 ] C:\Windows\System32\msacm32.dll

16:15:48.0007 4936  C:\Windows\System32\msacm32.dll - ok

16:15:48.0011 4936  [ 166F004D73EA2CF4AC61800CA469458D ] C:\Windows\System32\msacm32.drv

16:15:48.0011 4936  C:\Windows\System32\msacm32.drv - ok

16:15:48.0014 4936  [ 83199EF88D691E730B80666E29F90D58 ] C:\Windows\System32\midimap.dll

16:15:48.0014 4936  C:\Windows\System32\midimap.dll - ok

16:15:48.0017 4936  [ C38FD6683FD0285F0A41A6463325715D ] C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll

16:15:48.0017 4936  C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - ok

16:15:48.0020 4936  [ 5F1DEC3824E566457F53F24F493FEF08 ] C:\Windows\System32\mscms.dll

16:15:48.0021 4936  C:\Windows\System32\mscms.dll - ok

16:15:48.0024 4936  [ 296937202E4D930AAE98085B99D744D8 ] C:\Windows\System32\AUDIOKSE.dll

16:15:48.0024 4936  C:\Windows\System32\AUDIOKSE.dll - ok

16:15:48.0027 4936  [ 9B96F6952186336CC6E3D4E08BE2E0AF ] C:\Windows\System32\dwmapi.dll

16:15:48.0027 4936  C:\Windows\System32\dwmapi.dll - ok

16:15:48.0030 4936  [ 2A6A2C09ECC2CB495628E45F1379ECE8 ] C:\Windows\System32\taskcomp.dll

16:15:48.0030 4936  C:\Windows\System32\taskcomp.dll - ok

16:15:48.0033 4936  [ 665A831D7A1D46150C5D5DFD8BA9BA0F ] C:\Windows\System32\nvapi.dll

16:15:48.0033 4936  C:\Windows\System32\nvapi.dll - ok

16:15:48.0036 4936  [ D330BF0F8742EE1FFFC3A099CE310F9F ] C:\Windows\System32\RtkAPO.dll

16:15:48.0037 4936  C:\Windows\System32\RtkAPO.dll - ok

16:15:48.0040 4936  [ 3D50C4B10352367D5CB20ED1F50F8DA2 ] C:\Windows\System32\taskeng.exe

16:15:48.0040 4936  C:\Windows\System32\taskeng.exe - ok

16:15:48.0043 4936  [ F870AA3E254628EBEAFE754108D664DE ] C:\Windows\System32\drivers\http.sys

16:15:48.0043 4936  C:\Windows\System32\drivers\http.sys - ok

16:15:48.0046 4936  [ 73FE2E5FA55088A241AA2732F5D387D6 ] C:\Windows\System32\wiarpc.dll

16:15:48.0046 4936  C:\Windows\System32\wiarpc.dll - ok

16:15:48.0049 4936  [ E79FDA8D320147FDC347C504B3487F87 ] C:\Windows\System32\spoolss.dll

16:15:48.0049 4936  C:\Windows\System32\spoolss.dll - ok

16:15:48.0053 4936  [ 4203E86598D0E98D7706F7134B74B570 ] C:\Program Files\NVIDIA Corporation\Display\nvui.dll

16:15:48.0053 4936  C:\Program Files\NVIDIA Corporation\Display\nvui.dll - ok

16:15:48.0056 4936  [ B11FDCA4410D6252964EF97F9A47DE74 ] C:\Windows\System32\TSChannel.dll

16:15:48.0056 4936  C:\Windows\System32\TSChannel.dll - ok

16:15:48.0060 4936  [ 0727200F10320A6BA7E59433094FBBA7 ] C:\Windows\System32\WMALFXGFXDSP.dll

16:15:48.0060 4936  C:\Windows\System32\WMALFXGFXDSP.dll - ok

16:15:48.0063 4936  [ BF142D4F8C61ED3629A9CDD7BA867900 ] C:\Windows\System32\mfplat.dll

16:15:48.0063 4936  C:\Windows\System32\mfplat.dll - ok

16:15:48.0067 4936  [ 2F237AAB91497AAA03AF48EAE68758FC ] C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

16:15:48.0067 4936  C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE - ok

16:15:48.0071 4936  [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll

16:15:48.0071 4936  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll - ok

16:15:48.0075 4936  [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll

16:15:48.0075 4936  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll - ok

16:15:48.0079 4936  [ 13EF0C65FAD380C4113791B947DAA7E4 ] C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL

16:15:48.0079 4936  C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL - ok

16:15:48.0082 4936  [ 4934241CD20AC87D78121352E3BA8318 ] C:\Windows\System32\dbghelp.dll

16:15:48.0082 4936  C:\Windows\System32\dbghelp.dll - ok

16:15:48.0085 4936  [ 95436A92D4A2EF1D637A7345C1796DBD ] C:\Program Files\Common Files\Symantec Shared\SymNeti.dll

16:15:48.0085 4936  C:\Program Files\Common Files\Symantec Shared\SymNeti.dll - ok

16:15:48.0089 4936  [ E582816A4855914DEFFC212E12B3B744 ] C:\Windows\System32\wsock32.dll

16:15:48.0089 4936  C:\Windows\System32\wsock32.dll - ok

16:15:48.0092 4936  [ 0AB7B6A0A3A2D4C985C2A3BB363D424E ] C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL

16:15:48.0092 4936  C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL - ok

16:15:48.0096 4936  [ F8F3B92081BDC486C66547B2BA32F037 ] C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL

16:15:48.0096 4936  C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL - ok

16:15:48.0099 4936  [ CDB2A791F0404A519BB24EC108667907 ] C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL

16:15:48.0099 4936  C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL - ok

16:15:48.0102 4936  [ 96A61E28B4D53270D21197F86B19427B ] C:\Program Files\Common Files\Symantec Shared\CCSET.DLL

16:15:48.0102 4936  C:\Program Files\Common Files\Symantec Shared\CCSET.DLL - ok

16:15:48.0106 4936  [ 55B0C85A0CAA5B573A9F330A88251AF1 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL

16:15:48.0106 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL - ok

16:15:48.0110 4936  [ 460D8766D884E629E3C82B8CF911E5F3 ] C:\Windows\System32\nvsvcr.dll

16:15:48.0110 4936  C:\Windows\System32\nvsvcr.dll - ok

16:15:48.0113 4936  [ F9DAD2257388715A4D74680EB5517C7A ] C:\Windows\System32\nvcpl.dll

16:15:48.0114 4936  C:\Windows\System32\nvcpl.dll - ok

16:15:48.0117 4936  [ F6E882AC84D298650FEABAE72FEC86BA ] C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll

16:15:48.0117 4936  C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - ok

16:15:48.0120 4936  [ EF439DAA6C29B68CFA5220726B2DDBA0 ] C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll

16:15:48.0120 4936  C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll - ok

16:15:48.0124 4936  [ 207100C67D5FD5C8F0124B1C6BF56545 ] C:\Program Files\NVIDIA Corporation\Display\nvuir.dll

16:15:48.0124 4936  C:\Program Files\NVIDIA Corporation\Display\nvuir.dll - ok

16:15:48.0127 4936  [ A75AFCBFDB730EEEE12BFDFA1907EC78 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL

16:15:48.0127 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL - ok

16:15:48.0132 4936  [ CE0F8C664F2C5900B87DC4FD9B245929 ] C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll

16:15:48.0132 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll - ok

16:15:48.0136 4936  [ 673FC8AA28C1049827F5675808FC4F74 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll

16:15:48.0136 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll - ok

16:15:48.0140 4936  [ 374C7BB96E5E05EA771469C5BBD78905 ] C:\Program Files\Common Files\Symantec Shared\CCL70.DLL

16:15:48.0140 4936  C:\Program Files\Common Files\Symantec Shared\CCL70.DLL - ok

16:15:48.0143 4936  [ D90E198602F2FA211474F09E0B919974 ] C:\PROGRA~1\NORTON~1\tpDataSv.dll

16:15:48.0143 4936  C:\PROGRA~1\NORTON~1\tpDataSv.dll - ok

16:15:48.0147 4936  [ 98B2647B6BB59914F9AC48678B411615 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll

16:15:48.0147 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll - ok

16:15:48.0151 4936  [ 401DFFDBBBD3F07C747ED1AE2BB88106 ] C:\Windows\System32\msi.dll

16:15:48.0151 4936  C:\Windows\System32\msi.dll - ok

16:15:48.0155 4936  [ 9367481F461AAEBD3154A184E5153897 ] C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll

16:15:48.0155 4936  C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll - ok

16:15:48.0158 4936  [ 35F82898D3598A5EBC3F71CEB8E21B0E ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL

16:15:48.0158 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL - ok

16:15:48.0162 4936  [ C605C6E9441372DCCF427B852A5EFCF9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll

16:15:48.0162 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll - ok

16:15:48.0165 4936  [ 9061E7F4DB0FE7E0B8E216B796E91D26 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll

16:15:48.0165 4936  C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll - ok

16:15:48.0169 4936  [ 29F40BE4D762D12B67EB9407C2537110 ] C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll

16:15:48.0169 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll - ok

16:15:48.0172 4936  [ 648E58F6342D24A4FD1B90CCAE6ACF8D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll

16:15:48.0172 4936  C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll - ok

16:15:48.0175 4936  [ 73F5D6835BFA66019C03E316D99649DA ] C:\Windows\System32\drivers\CO_Mon.sys

16:15:48.0175 4936  C:\Windows\System32\drivers\CO_Mon.sys - ok

16:15:48.0179 4936  [ 75D53AAE9200EBEF669CFD27497D4B2A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll

16:15:48.0179 4936  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll - ok

16:15:48.0182 4936  [ 4B555106290BD117334E9A08761C035A ] C:\Windows\System32\rundll32.exe

16:15:48.0182 4936  C:\Windows\System32\rundll32.exe - ok

16:15:48.0185 4936  [ 1DACD1530C6E58AEAE9F6DE7DA851935 ] C:\Windows\System32\shimeng.dll

16:15:48.0185 4936  C:\Windows\System32\shimeng.dll - ok

16:15:48.0189 4936  [ D6804F089CBB6749E95124E7C4D80900 ] C:\Windows\AppPatch\AcLayers.dll

16:15:48.0189 4936  C:\Windows\AppPatch\AcLayers.dll - ok

16:15:48.0192 4936  [ D05AAE6F63E3F0E1B2424AB6F6777D87 ] C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL

16:15:48.0193 4936  C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL - ok

16:15:48.0196 4936  [ 36B09A449B860EB9AB8B35C1E28AD8E3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll

16:15:48.0196 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll - ok

16:15:48.0199 4936  [ 4B3C0DD2350F61C2CB6EBD23C9BEE0FD ] C:\Windows\System32\d3dx10_33G.dll

16:15:48.0200 4936  C:\Windows\System32\d3dx10_33G.dll - ok

16:15:48.0203 4936  [ C193C9E3A66F639D2B1EC002CCD997A3 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL

16:15:48.0203 4936  C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL - ok

16:15:48.0207 4936  [ A511E531DAA0F4EAFBED6CCEEC49E059 ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll

16:15:48.0207 4936  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll - ok

16:15:48.0211 4936  [ 59DD7F48E5B6C3448D3C8D585CA73607 ] C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll

16:15:48.0211 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll - ok

16:15:48.0214 4936  [ 1B31592377CC3A465270F117CB3695FF ] C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll

16:15:48.0214 4936  C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll - ok

16:15:48.0217 4936  [ 60C7B0B11568809D1AE10D905674E1C8 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll

16:15:48.0217 4936  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll - ok

16:15:48.0220 4936  [ 295363D4317820AED0D527E15B90A8ED ] C:\Windows\System32\pdh.dll

16:15:48.0220 4936  C:\Windows\System32\pdh.dll - ok

16:15:48.0224 4936  [ 4911AA925EDEE509B73989381506EC89 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll

16:15:48.0224 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll - ok

16:15:48.0227 4936  [ BE01E566D1F569AAB32D0335613E1EEA ] C:\Windows\System32\dllhost.exe

16:15:48.0227 4936  C:\Windows\System32\dllhost.exe - ok

16:15:48.0230 4936  [ 3CD1B69551236977918E60F9543C89A2 ] C:\Windows\System32\AtBroker.exe

16:15:48.0231 4936  C:\Windows\System32\AtBroker.exe - ok

16:15:48.0234 4936  [ 0E135526E9785D085BCD9AEDE6FBCBF9 ] C:\Windows\System32\userinit.exe

16:15:48.0234 4936  C:\Windows\System32\userinit.exe - ok

16:15:48.0237 4936  [ D80C6539C00CB4F5D59066865479C308 ] C:\Windows\System32\dwmredir.dll

16:15:48.0237 4936  C:\Windows\System32\dwmredir.dll - ok

16:15:48.0241 4936  [ C99403A5B641520DAED0021DDA06F272 ] C:\Windows\System32\milcore.dll

16:15:48.0241 4936  C:\Windows\System32\milcore.dll - ok

16:15:48.0244 4936  [ D07D4C3038F3578FFCE1C0237F2A1253 ] C:\Windows\explorer.exe

16:15:48.0244 4936  C:\Windows\explorer.exe - ok

16:15:48.0246 4936  [ 77406183F152C273982F6E2B271DB3D1 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll

16:15:48.0246 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll - ok

16:15:48.0250 4936  [ 09E6B725196DD2348E5EFB2EF5C63DEF ] C:\Program Files\Norton 360\TPSVCAV.DLL

16:15:48.0250 4936  C:\Program Files\Norton 360\TPSVCAV.DLL - ok

16:15:48.0256 4936  [ B424FDFDD16741DFA003B1C53B247D1C ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll

16:15:48.0256 4936  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll - ok

16:15:48.0259 4936  [ 8AAEEE8E59A70F37579993D118A34EE0 ] C:\Windows\System32\d3d9.dll

16:15:48.0259 4936  C:\Windows\System32\d3d9.dll - ok

16:15:48.0262 4936  [ C411C80F90D6732380352B98B37BBD53 ] C:\Windows\System32\winrnr.dll

16:15:48.0263 4936  C:\Windows\System32\winrnr.dll - ok

16:15:48.0266 4936  [ 1B09279E755C896E8CEA60585995D4BD ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll

16:15:48.0266 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll - ok

16:15:48.0270 4936  [ 782C8019C89920A77B1907AD3B4C8FF9 ] C:\Windows\System32\HotStartUserAgent.dll

16:15:48.0270 4936  C:\Windows\System32\HotStartUserAgent.dll - ok

16:15:48.0274 4936  [ 7605C0E1D01A08F3ECD743F38B834A44 ] C:\Windows\System32\drivers\srvnet.sys

16:15:48.0274 4936  C:\Windows\System32\drivers\srvnet.sys - ok

16:15:48.0277 4936  [ A521BD24B5A7746441897A8163D21BF5 ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll

16:15:48.0277 4936  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll - ok

16:15:48.0280 4936  [ EFA80360111D8D179E39E314A49C9ED4 ] C:\Windows\System32\wshbth.dll

16:15:48.0280 4936  C:\Windows\System32\wshbth.dll - ok

16:15:48.0284 4936  [ B0D12F4344EB2AE96E487D2DF6F74413 ] C:\Windows\System32\FWPUCLNT.DLL

16:15:48.0284 4936  C:\Windows\System32\FWPUCLNT.DLL - ok

16:15:48.0287 4936  [ A7D525E5C0D91C8C1D84C6BCD25AD77D ] C:\Windows\System32\rasadhlp.dll

16:15:48.0287 4936  C:\Windows\System32\rasadhlp.dll - ok

16:15:48.0290 4936  [ 3E050D8A83E4FD2B2CF88A1253CECF0C ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll

16:15:48.0291 4936  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll - ok

16:15:48.0294 4936  [ 57125869A7B9638A5D11DD685AA65EB4 ] C:\Windows\System32\PlaySndSrv.dll

16:15:48.0294 4936  C:\Windows\System32\PlaySndSrv.dll - ok

16:15:48.0297 4936  [ 8A38B5E8493A9D103083B8620AC5F3A1 ] C:\Windows\System32\tdh.dll

16:15:48.0297 4936  C:\Windows\System32\tdh.dll - ok

16:15:48.0300 4936  [ 43E1054C713C48D252A1826C5E14AACA ] C:\Windows\System32\MsCtfMonitor.dll

16:15:48.0300 4936  C:\Windows\System32\MsCtfMonitor.dll - ok

16:15:48.0303 4936  [ E45051C374F845EDF3DB02A35BA13193 ] C:\Windows\System32\umb.dll

16:15:48.0303 4936  C:\Windows\System32\umb.dll - ok

16:15:48.0307 4936  [ 626A24ED1228580B9518C01930936DF9 ] C:\Program Files\Google\Update\GoogleUpdate.exe

16:15:48.0307 4936  C:\Program Files\Google\Update\GoogleUpdate.exe - ok

16:15:48.0311 4936  [ C6DA42ADA0C5FC8CB05744229D632B47 ] C:\Windows\System32\msutb.dll

16:15:48.0311 4936  C:\Windows\System32\msutb.dll - ok

16:15:48.0315 4936  [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll

16:15:48.0315 4936  C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll - ok

16:15:48.0318 4936  [ 63396CBB1365769D520E0FD89C2419F2 ] C:\Windows\System32\localspl.dll

16:15:48.0318 4936  C:\Windows\System32\localspl.dll - ok

16:15:48.0322 4936  [ 25532414A7A088553527A75B31DF0592 ] C:\Program Files\Mozilla Firefox\firefox.exe

16:15:48.0322 4936  C:\Program Files\Mozilla Firefox\firefox.exe - ok

16:15:48.0325 4936  [ C2B5C7B5ECE593EB059FF1099F3DCC28 ] C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

16:15:48.0325 4936  C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe - ok

16:15:48.0329 4936  [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

16:15:48.0329 4936  C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

16:15:48.0333 4936  [ F4E1AA5D59C849A4AB47E895DC76B9C8 ] C:\Windows\System32\sfc.dll

16:15:48.0333 4936  C:\Windows\System32\sfc.dll - ok

16:15:48.0336 4936  [ E6F1B2C97D6E21B51A7CC18E48A689D8 ] C:\Windows\System32\hpinksts8911LM.dll

16:15:48.0336 4936  C:\Windows\System32\hpinksts8911LM.dll - ok

16:15:48.0340 4936  [ 35F376253F687BDE63976CCB3F2108CA ] C:\Windows\System32\drivers\bowser.sys

16:15:48.0340 4936  C:\Windows\System32\drivers\bowser.sys - ok

16:15:48.0343 4936  [ 9FF47CD8A3787C8FD3CDFE40441C722E ] C:\Program Files\Google\Update\1.3.21.123\goopdate.dll

16:15:48.0343 4936  C:\Program Files\Google\Update\1.3.21.123\goopdate.dll - ok

16:15:48.0347 4936  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] C:\Windows\System32\drivers\mpsdrv.sys

16:15:48.0347 4936  C:\Windows\System32\drivers\mpsdrv.sys - ok

16:15:48.0350 4936  [ 5DE62C6E9108F14F6794060A9BDECAEC ] C:\Windows\System32\MPSSVC.dll

16:15:48.0350 4936  C:\Windows\System32\MPSSVC.dll - ok

16:15:48.0353 4936  [ 82CEA0395524AACFEB58BA1448E8325C ] C:\Windows\System32\drivers\mrxdav.sys

16:15:48.0353 4936  C:\Windows\System32\drivers\mrxdav.sys - ok

16:15:48.0356 4936  [ 39925B438268F78B43EE1AA91D3A0486 ] C:\Windows\System32\nitrolocalmon.dll

16:15:48.0357 4936  C:\Windows\System32\nitrolocalmon.dll - ok

16:15:48.0360 4936  [ 5CBDC1CF7A22D65711F05A1E3B7F734E ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll

16:15:48.0360 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll - ok

16:15:48.0363 4936  [ 0745D6EAD386710110817FBEC03F5161 ] C:\Windows\System32\wfapigp.dll

16:15:48.0364 4936  C:\Windows\System32\wfapigp.dll - ok

16:15:48.0367 4936  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] C:\Windows\System32\drivers\mrxsmb.sys

16:15:48.0367 4936  C:\Windows\System32\drivers\mrxsmb.sys - ok

16:15:48.0370 4936  [ 4FCCB34D793B116423209C0F8B7A3B03 ] C:\Windows\System32\drivers\mrxsmb10.sys

16:15:48.0370 4936  C:\Windows\System32\drivers\mrxsmb10.sys - ok

16:15:48.0373 4936  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] C:\Windows\System32\drivers\mrxsmb20.sys

16:15:48.0373 4936  C:\Windows\System32\drivers\mrxsmb20.sys - ok

16:15:48.0376 4936  [ FF33AFF99564B1AA534F58868CBE41EF ] C:\Windows\System32\drivers\srv2.sys

16:15:48.0376 4936  C:\Windows\System32\drivers\srv2.sys - ok

16:15:48.0380 4936  [ CD6DA5770CAE9D5E6E86722E17B442E0 ] C:\Windows\System32\d3d8thk.dll

16:15:48.0380 4936  C:\Windows\System32\d3d8thk.dll - ok

16:15:48.0383 4936  [ 9558DAA1DB859250A677CCE97B048151 ] C:\Windows\System32\hpz3l5ha.dll

16:15:48.0383 4936  C:\Windows\System32\hpz3l5ha.dll - ok

16:15:48.0386 4936  [ 293C5CCD99D332ECC94637FEDA38D1F2 ] C:\Windows\System32\TMM.dll

16:15:48.0386 4936  C:\Windows\System32\TMM.dll - ok

16:15:48.0389 4936  [ 6FE5C4B61EC85D746ADFA9FFF8C2AC58 ] C:\Windows\System32\HPZ3LLHN.DLL

16:15:48.0389 4936  C:\Windows\System32\HPZ3LLHN.DLL - ok

16:15:48.0393 4936  [ C52CE534397E1D3A442FB4C88A3CBE42 ] C:\Windows\System32\msonpmon.dll

16:15:48.0393 4936  C:\Windows\System32\msonpmon.dll - ok

16:15:48.0396 4936  [ D922592AB65C5D9B88B30B4510A3464E ] C:\Windows\System32\cscapi.dll

16:15:48.0396 4936  C:\Windows\System32\cscapi.dll - ok

16:15:48.0400 4936  [ 87F65295B03C3EF3282F95DBBA8D79B8 ] C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll

16:15:48.0400 4936  C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll - ok

16:15:48.0403 4936  [ 9CD9E2A251CDC2B92444A64DA20415A8 ] C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll

16:15:48.0403 4936  C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll - ok

16:15:48.0407 4936  [ E223D2851906B84F52E1B75EA16198F9 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll

16:15:48.0407 4936  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll - ok

16:15:48.0410 4936  [ 41987F9FC0E61ADF54F581E15029AD91 ] C:\Windows\System32\drivers\srv.sys

16:15:48.0410 4936  C:\Windows\System32\drivers\srv.sys - ok

16:15:48.0413 4936  [ 1311171CF8F6D2954441EF2A42693035 ] C:\Windows\System32\WsmRes.dll

16:15:48.0413 4936  C:\Windows\System32\WsmRes.dll - ok

16:15:48.0416 4936  [ BB0EB921877A1A7EF15AE2D97A71CBA9 ] C:\Windows\System32\tcpmon.dll

16:15:48.0416 4936  C:\Windows\System32\tcpmon.dll - ok

christoph03

22.10.2012 14:20

Code:

2509338423B3B338D27084B241C57 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll

16:15:48.0420 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll - ok

16:15:48.0424 4936  [ E230F3776F373F4C5E788794B53101E4 ] C:\Windows\System32\plasrv.exe

16:15:48.0424 4936  C:\Windows\System32\plasrv.exe - ok

16:15:48.0428 4936  [ AF24A9DF84637BF9858EC6FB88EBA7B2 ] C:\Windows\System32\snmpapi.dll

16:15:48.0428 4936  C:\Windows\System32\snmpapi.dll - ok

16:15:48.0433 4936  [ 1EDE113859276E4B0F19B80F39E2CC95 ] C:\Windows\System32\wsnmp32.dll

16:15:48.0433 4936  C:\Windows\System32\wsnmp32.dll - ok

16:15:48.0436 4936  [ 024528E25BBE8768536861EA09BE1672 ] C:\Windows\System32\msxml6.dll

16:15:48.0436 4936  C:\Windows\System32\msxml6.dll - ok

16:15:48.0440 4936  [ 5CAAE5333EF36DB4A8D294418AB37E80 ] C:\Windows\System32\p2pcollab.dll

16:15:48.0440 4936  C:\Windows\System32\p2pcollab.dll - ok

16:15:48.0443 4936  [ EBC6F0BDF650CB2EDD49080F319900C0 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL

16:15:48.0443 4936  C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL - ok

16:15:48.0447 4936  [ B7F5D1A99E8A7A0A232640908607C315 ] C:\Windows\System32\nvd3dum.dll

16:15:48.0447 4936  C:\Windows\System32\nvd3dum.dll - ok

16:15:48.0450 4936  [ 167AC31450C0C53A01FA1491E94D7678 ] C:\Windows\System32\shdocvw.dll

16:15:48.0450 4936  C:\Windows\System32\shdocvw.dll - ok

16:15:48.0453 4936  [ AE5A69F44C1F97EDC83237FC0B29B6FB ] C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe

16:15:48.0453 4936  C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe - ok

16:15:48.0457 4936  [ 38F2958163C080590A42F7C66E89CDA1 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL

16:15:48.0457 4936  C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL - ok

16:15:48.0461 4936  [ B4F5DE3DAD8E6B97272F45DB97674878 ] C:\Windows\System32\mgmtapi.dll

16:15:48.0461 4936  C:\Windows\System32\mgmtapi.dll - ok

16:15:48.0464 4936  [ 5091452DC719281CF1DD69367E13B494 ] C:\Windows\System32\tcpmib.dll

16:15:48.0464 4936  C:\Windows\System32\tcpmib.dll - ok

16:15:48.0467 4936  [ 18BA660C7022422A9B3BE14C37D7401E ] C:\Windows\System32\TBTMon.dll

16:15:48.0467 4936  C:\Windows\System32\TBTMon.dll - ok

16:15:48.0470 4936  [ 4504819D18FAC09B6108D8728467E5B2 ] C:\Windows\System32\browseui.dll

16:15:48.0470 4936  C:\Windows\System32\browseui.dll - ok

16:15:48.0473 4936  [ E015C3AF4EBEFCD47BB05781126898BD ] C:\Windows\System32\tbtmon98Language.dll

16:15:48.0473 4936  C:\Windows\System32\tbtmon98Language.dll - ok

16:15:48.0477 4936  [ 756D84D65E727B60F149D8058720521A ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll

16:15:48.0477 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll - ok

16:15:48.0481 4936  [ AF5112A454DEE214A44C070E2A59042C ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll

16:15:48.0481 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll - ok

16:15:48.0484 4936  [ D241900C8E03F850E862664F3FBEB5B6 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll

16:15:48.0485 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll - ok

16:15:48.0488 4936  [ 0BF0BB276F17B6AD61A8694D2551EC28 ] C:\Windows\System32\usbmon.dll

16:15:48.0488 4936  C:\Windows\System32\usbmon.dll - ok

16:15:48.0492 4936  [ 0EB1CC5EBFCAAB7DBAEE881E2887F7F9 ] C:\Windows\System32\WSDMon.dll

16:15:48.0492 4936  C:\Windows\System32\WSDMon.dll - ok

16:15:48.0495 4936  [ F4F6C58D079620E909323DB1096C34BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll

16:15:48.0496 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll - ok

16:15:48.0500 4936  [ D81CF1DD857538AA2E5E9CB0AA7FBF67 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll

16:15:48.0500 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll - ok

16:15:48.0504 4936  [ AD48183027CAFCEBC322CB9CAC60F9B8 ] C:\Windows\System32\WSDApi.dll

16:15:48.0504 4936  C:\Windows\System32\WSDApi.dll - ok

16:15:48.0508 4936  [ F6C5BF92697C25EF89F0ABAA5F36E517 ] C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL

16:15:48.0508 4936  C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL - ok

16:15:48.0511 4936  [ 52CB0185C73E1BA86CC7F726F22523C3 ] C:\Windows\System32\msjetoledb40.dll

16:15:48.0511 4936  C:\Windows\System32\msjetoledb40.dll - ok

16:15:48.0514 4936  [ 7CE1E4240F9FA41EE85683B9EEAB8767 ] C:\Windows\System32\msjet40.dll

16:15:48.0514 4936  C:\Windows\System32\msjet40.dll - ok

16:15:48.0517 4936  [ 1A09CB187440993FA5E24DE1EEB7B916 ] C:\Windows\System32\cfgmgr32.dll

16:15:48.0517 4936  C:\Windows\System32\cfgmgr32.dll - ok

16:15:48.0521 4936  [ 4EDA94333BDB75B1BC0A7610BED34F00 ] C:\Windows\System32\fundisc.dll

16:15:48.0521 4936  C:\Windows\System32\fundisc.dll - ok

16:15:48.0524 4936  [ F86293D93760C70ADF4F19E66E3FA5E8 ] C:\Windows\System32\httpapi.dll

16:15:48.0524 4936  C:\Windows\System32\httpapi.dll - ok

16:15:48.0527 4936  [ 73FD66B14D3C4252F7A524B8836A4359 ] C:\Windows\System32\mstask.dll

16:15:48.0527 4936  C:\Windows\System32\mstask.dll - ok

16:15:48.0530 4936  [ 6ABD253226770EAE1292B4C945ED4B4B ] C:\Windows\System32\msxml3.dll

16:15:48.0530 4936  C:\Windows\System32\msxml3.dll - ok

16:15:48.0533 4936  [ 7A623F6B4C51F6F2BC1A31D5787FC0A7 ] C:\Windows\System32\uDWM.dll

16:15:48.0533 4936  C:\Windows\System32\uDWM.dll - ok

16:15:48.0537 4936  [ E0B787702BAF0CF4CEDF8F61B71F8383 ] C:\Windows\System32\mswstr10.dll

16:15:48.0537 4936  C:\Windows\System32\mswstr10.dll - ok

16:15:48.0540 4936  [ 14E4470BF8ACA69A85D741BA99F75F96 ] C:\Windows\System32\EhStorShell.dll

16:15:48.0540 4936  C:\Windows\System32\EhStorShell.dll - ok

16:15:48.0543 4936  [ 60D8CA76CCD1FCDC393C057949E5A89F ] C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll

16:15:48.0544 4936  C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll - ok

16:15:48.0547 4936  [ 9371540C7231BC156501AB933F269762 ] C:\Windows\System32\msjint40.dll

16:15:48.0547 4936  C:\Windows\System32\msjint40.dll - ok

16:15:48.0550 4936  [ 534FD777CB2684392411CE7BCBBDF78E ] C:\Windows\System32\msjter40.dll

16:15:48.0550 4936  C:\Windows\System32\msjter40.dll - ok

16:15:48.0553 4936  [ 7D1A10A1F3562CCA1FD38E9BADA8FEC0 ] C:\Windows\System32\perfos.dll

16:15:48.0553 4936  C:\Windows\System32\perfos.dll - ok

16:15:48.0557 4936  [ D0E39177C896D2F8191A9C96636276DF ] C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll

16:15:48.0557 4936  C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll - ok

16:15:48.0560 4936  [ BDE89AB6F15F0093A2A7861D1FC413ED ] C:\Windows\System32\QAGENT.DLL

16:15:48.0560 4936  C:\Windows\System32\QAGENT.DLL - ok

16:15:48.0563 4936  [ 9104EDD1D3BF91AD079A73FBB515E492 ] C:\Windows\System32\perfdisk.dll

16:15:48.0563 4936  C:\Windows\System32\perfdisk.dll - ok

16:15:48.0566 4936  [ 951F36219C7384C6ED6C9F44D45C5235 ] C:\Program Files\Common Files\System\Ole DB\oledb32.dll

16:15:48.0566 4936  C:\Program Files\Common Files\System\Ole DB\oledb32.dll - ok

16:15:48.0569 4936  [ 111C47816F39A91EAAA18DA0A54E8E63 ] C:\Windows\System32\imageres.dll

16:15:48.0569 4936  C:\Windows\System32\imageres.dll - ok

16:15:48.0573 4936  [ 801DECF3A583C270E5C398FCD082E3DD ] C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL

16:15:48.0573 4936  C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL - ok

16:15:48.0576 4936  [ 769D027B977CED05658C85E698D3C5B1 ] C:\Windows\System32\QUTIL.DLL

16:15:48.0576 4936  C:\Windows\System32\QUTIL.DLL - ok

16:15:48.0580 4936  [ F348280907B38FDBDB3CEF55D456E149 ] C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

16:15:48.0580 4936  C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll - ok

16:15:48.0583 4936  [ 554ED6988E44FDF18941429E8B2CB652 ] C:\Windows\System32\msdart.dll

16:15:48.0583 4936  C:\Windows\System32\msdart.dll - ok

16:15:48.0586 4936  [ C90B296C43EDD9DD1751AD3B590ACDE6 ] C:\Windows\System32\win32spl.dll

16:15:48.0586 4936  C:\Windows\System32\win32spl.dll - ok

16:15:48.0590 4936  [ 892125B60BA6C2A66F485A89C4A6B918 ] C:\Program Files\Common Files\System\Ole DB\oledb32r.dll

16:15:48.0590 4936  C:\Program Files\Common Files\System\Ole DB\oledb32r.dll - ok

16:15:48.0593 4936  [ C4A8C9D346C7943693F301C205CBA003 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL

16:15:48.0593 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL - ok

16:15:48.0596 4936  [ 79B0463638C7ED08DB71FE3437C95A44 ] C:\Windows\System32\msjtes40.dll

16:15:48.0596 4936  C:\Windows\System32\msjtes40.dll - ok

16:15:48.0599 4936  [ 4BF053944E973C073339BE841C9ECF28 ] C:\Windows\System32\netrap.dll

16:15:48.0599 4936  C:\Windows\System32\netrap.dll - ok

16:15:48.0603 4936  [ E340845C8E96D107C36420065D7A5733 ] C:\Windows\System32\printcom.dll

16:15:48.0603 4936  C:\Windows\System32\printcom.dll - ok

16:15:48.0606 4936  [ EC760B0B76A4353DE49D66520EB2141F ] C:\Windows\System32\SensApi.dll

16:15:48.0606 4936  C:\Windows\System32\SensApi.dll - ok

16:15:48.0609 4936  [ 4995B131F6B4DA0F8F7D2191E37054BD ] C:\Windows\System32\vbajet32.dll

16:15:48.0609 4936  C:\Windows\System32\vbajet32.dll - ok

16:15:48.0613 4936  [ B9D5809CE39D2473E36EBC66860C14D1 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll

16:15:48.0613 4936  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll - ok

16:15:48.0616 4936  [ 2E8E30F3B318A9FDA5A2485723F4C2B3 ] C:\Windows\System32\inetpp.dll

16:15:48.0616 4936  C:\Windows\System32\inetpp.dll - ok

16:15:48.0619 4936  [ 16FF3D15D12BFBB0B805FFE71BE3FA15 ] C:\Windows\System32\ntprint.dll

16:15:48.0619 4936  C:\Windows\System32\ntprint.dll - ok

16:15:48.0623 4936  [ B5EB6A3ED3B8918091FE2539374E25E7 ] C:\PROGRA~1\NORTON~1\tpEvent.dll

16:15:48.0623 4936  C:\PROGRA~1\NORTON~1\tpEvent.dll - ok

16:15:48.0626 4936  [ 254C64B570A99F10952ACA71F24A2236 ] C:\Windows\System32\expsrv.dll

16:15:48.0626 4936  C:\Windows\System32\expsrv.dll - ok

16:15:48.0629 4936  [ F2AD56AC3F8A806A70847A15B21F333A ] C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll

16:15:48.0629 4936  C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll - ok

16:15:48.0632 4936  [ 75B8E3EE58004C378B00B7EEE15DEC44 ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll

16:15:48.0632 4936  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll - ok

16:15:48.0636 4936  [ 7483E59A7A7A7891ACD4C63EE97D1BF1 ] C:\Windows\System32\mswdat10.dll

16:15:48.0636 4936  C:\Windows\System32\mswdat10.dll - ok

16:15:48.0639 4936  [ BA7C3E9DD6B1A632124C8659E8014028 ] C:\Windows\System32\perfctrs.dll

16:15:48.0639 4936  C:\Windows\System32\perfctrs.dll - ok

16:15:48.0643 4936  [ F917278F644BC6CED095BFAE4D03CFA0 ] C:\Program Files\Common Files\Symantec Shared\QBackup.dll

16:15:48.0643 4936  C:\Program Files\Common Files\Symantec Shared\QBackup.dll - ok

16:15:48.0647 4936  [ 7BEB17B323267811380BD66E710C1FF6 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll

16:15:48.0647 4936  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll - ok

16:15:48.0650 4936  [ CE8617599BFD41FF3A7C04B60087AD2D ] C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll

16:15:48.0650 4936  C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll - ok

16:15:48.0654 4936  [ EFDCD9B1F546AD59A6730712689F2F3B ] C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll

16:15:48.0654 4936  C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll - ok

16:15:48.0657 4936  [ CB18CBE52505933F679FF2B4A44804D7 ] C:\Program Files\Norton 360\tpDataCl.dll

16:15:48.0658 4936  C:\Program Files\Norton 360\tpDataCl.dll - ok

16:15:48.0661 4936  [ 963BBD53FA2091325A2EF3E3CF46F575 ] C:\Program Files\Norton 360\tpCntnr.dll

16:15:48.0661 4936  C:\Program Files\Norton 360\tpCntnr.dll - ok

16:15:48.0664 4936  [ 3BA25F0A6B00A384F85E2798AAF5DF0F ] C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll

16:15:48.0664 4936  C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll - ok

16:15:48.0667 4936  [ 12BCF4DAD8E5A1B3D5FA7AB4A79DA105 ] C:\Windows\System32\sfc_os.dll

16:15:48.0667 4936  C:\Windows\System32\sfc_os.dll - ok

16:15:48.0671 4936  [ 5E5BDF511A133BFEC9F231B994376154 ] C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll

16:15:48.0671 4936  C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll - ok

16:15:48.0674 4936  [ E335EC58D7089A72D75C2BD6B62741CB ] C:\Program Files\Norton 360\coDataPr.dll

16:15:48.0674 4936  C:\Program Files\Norton 360\coDataPr.dll - ok

16:15:48.0678 4936  [ 632B4F23EA39F03AF869E4087B445257 ] C:\Program Files\Norton 360\07\01\coDataPr.loc

16:15:48.0678 4936  C:\Program Files\Norton 360\07\01\coDataPr.loc - ok

16:15:48.0681 4936  [ 9FE47D87A9256E6868404F1D49CA6BC6 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll

16:15:48.0682 4936  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll - ok

16:15:48.0685 4936  [ D9DFCF094A370025FFB7761D0EFF8500 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll

16:15:48.0685 4936  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll - ok

16:15:48.0689 4936  [ 7103BC76935E601D82700B44B1064F27 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll

16:15:48.0689 4936  C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll - ok

16:15:48.0692 4936  [ 2A97A941CFDF7AC676371922C16B1161 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll

16:15:48.0692 4936  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll - ok

16:15:48.0696 4936  [ 09D06B8DCD3823AEA29D8A5597AACA74 ] C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll

16:15:48.0696 4936  C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll - ok

16:15:48.0699 4936  [ BF79C970B8FA983C8AF57EE1481B8416 ] C:\Program Files\Norton 360\tpBTPlg.dll

16:15:48.0699 4936  C:\Program Files\Norton 360\tpBTPlg.dll - ok

16:15:48.0703 4936  [ E89B10B957AC45AA53301114E415A988 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll

16:15:48.0703 4936  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll - ok

16:15:48.0706 4936  [ B16EE7AE0C2EBDBBF7058899C7387A1B ] C:\Program Files\Norton 360\SetEvtHp.dll

16:15:48.0706 4936  C:\Program Files\Norton 360\SetEvtHp.dll - ok

16:15:48.0710 4936  [ 88C5DD2F2283FD14D8EBE7ED3EE895C4 ] C:\Program Files\Norton 360\NTPFW.DLL

16:15:48.0710 4936  C:\Program Files\Norton 360\NTPFW.DLL - ok

16:15:48.0713 4936  [ 7C6505EA598E58099D3B7E1F70426864 ] C:\Windows\System32\drivers\symredrv.sys

16:15:48.0713 4936  C:\Windows\System32\drivers\symredrv.sys - ok

16:15:48.0716 4936  [ 08578F3CA5365F896D90CE2BF97FD000 ] C:\Windows\System32\IconCodecService.dll

16:15:48.0716 4936  C:\Windows\System32\IconCodecService.dll - ok

16:15:48.0719 4936  [ 9A6A653ADF28D9D69670B48F535E6B90 ] C:\Windows\System32\runonce.exe

16:15:48.0719 4936  C:\Windows\System32\runonce.exe - ok

16:15:48.0723 4936  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] C:\Windows\System32\drivers\symdns.sys

16:15:48.0723 4936  C:\Windows\System32\drivers\symdns.sys - ok

16:15:48.0726 4936  [ A0EA9D273889E53CFAABF2444692CCBF ] C:\Windows\System32\drivers\symfw.sys

16:15:48.0726 4936  C:\Windows\System32\drivers\symfw.sys - ok

16:15:48.0729 4936  [ C94EACA4B522012EE0691F1E79C42A7D ] C:\Windows\System32\drivers\symndisv.sys

16:15:48.0729 4936  C:\Windows\System32\drivers\symndisv.sys - ok

16:15:48.0733 4936  [ 9B338BF4FD5353FE812516D057430EE3 ] C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL

16:15:48.0733 4936  C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL - ok

16:15:48.0736 4936  [ 74F26FC01B180D4A99A168ED69C30A53 ] C:\Windows\System32\cmd.exe

16:15:48.0736 4936  C:\Windows\System32\cmd.exe - ok

16:15:48.0739 4936  [ A324D72A06C110152E7607745F39BFA1 ] C:\Windows\System32\netmsg.dll

16:15:48.0739 4936  C:\Windows\System32\netmsg.dll - ok

16:15:48.0742 4936  [ 452341E471D2D961229DFE0842957272 ] C:\Windows\System32\sscore.dll

16:15:48.0742 4936  C:\Windows\System32\sscore.dll - ok

16:15:48.0746 4936  [ D333058925CE305E39DE8D5AD2B52A46 ] C:\Windows\System32\clusapi.dll

16:15:48.0746 4936  C:\Windows\System32\clusapi.dll - ok

16:15:48.0748 4936  [ 1F5AFD468EB5E09E9ED75A087529EAB5 ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll

16:15:48.0748 4936  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll - ok

16:15:48.0751 4936  [ 6468C3FF6D0C7874FA8C619AF3E23B22 ] C:\Windows\System32\activeds.dll

16:15:48.0751 4936  C:\Windows\System32\activeds.dll - ok

16:15:48.0755 4936  [ 6080A176D09435FC8E6E800996656E18 ] C:\Windows\System32\conime.exe

16:15:48.0755 4936  C:\Windows\System32\conime.exe - ok

16:15:48.0758 4936  [ 0BA3F31E2B4D8D99DF8DD19E81155374 ] C:\Windows\System32\ieframe.dll

16:15:48.0758 4936  C:\Windows\System32\ieframe.dll - ok

16:15:48.0761 4936  [ E9B9C1B98C8D6D48407E1C1203EAC659 ] C:\Windows\System32\adsldpc.dll

16:15:48.0761 4936  C:\Windows\System32\adsldpc.dll - ok

16:15:48.0764 4936  [ 93E317D7AD783D8EAEE2E3500BFE889D ] C:\Windows\System32\credui.dll

16:15:48.0764 4936  C:\Windows\System32\credui.dll - ok

16:15:48.0767 4936  [ B9F3FF52B84FD9E3CAFB29B8EE385E5B ] C:\Windows\System32\resutils.dll

16:15:48.0767 4936  C:\Windows\System32\resutils.dll - ok

16:15:48.0771 4936  [ 4E8B1E9567B3CD76CA628C9026AE1125 ] C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll

16:15:48.0771 4936  C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll - ok

16:15:48.0775 4936  [ 93FEF3A5EB8965CB19F9820D5944D3E2 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll

16:15:48.0775 4936  C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll - ok

16:15:48.0778 4936  [ 1778EBA872274C1226D869CD9486847E ] C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:15:48.0778 4936  C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe - ok

16:15:48.0782 4936  [ 17FC3EDA0162F513E858B8C8FA7FA6E0 ] C:\Windows\System32\vssapi.dll

16:15:48.0782 4936  C:\Windows\System32\vssapi.dll - ok

16:15:48.0785 4936  [ F93C1DB10E59FAADC673D2607F910B92 ] C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll

16:15:48.0785 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll - ok

16:15:48.0788 4936  [ 52E129522C1775DBB8CC252E7A0655C7 ] C:\Windows\System32\taskschd.dll

16:15:48.0788 4936  C:\Windows\System32\taskschd.dll - ok

16:15:48.0792 4936  [ 6950BBCEB21F9C3CB3B52E90960109C3 ] C:\Windows\System32\devenum.dll

16:15:48.0792 4936  C:\Windows\System32\devenum.dll - ok

16:15:48.0795 4936  [ E7D0F91E44D9D3B2116FA549BDCDB756 ] C:\Windows\System32\wdscore.dll

16:15:48.0795 4936  C:\Windows\System32\wdscore.dll - ok

16:15:48.0798 4936  [ 1DFC366D2154EF2B381A7F2CB165C7F4 ] C:\Windows\System32\diagperf.dll

16:15:48.0798 4936  C:\Windows\System32\diagperf.dll - ok

16:15:48.0801 4936  [ B8AEFF80ABD57E6ABC6A46EAC7F4515F ] C:\Windows\System32\msdmo.dll

16:15:48.0801 4936  C:\Windows\System32\msdmo.dll - ok

16:15:48.0804 4936  [ 8795FD92B624648DABE7B75129EF8002 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:15:48.0804 4936  C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe - ok

16:15:48.0808 4936  [ E1E52D56D266C2741058BA6611970D0C ] C:\Windows\System32\qdvd.dll

16:15:48.0808 4936  C:\Windows\System32\qdvd.dll - ok

16:15:48.0811 4936  [ EFD278F8129EE12F1D4AE0250494B791 ] C:\Windows\System32\dxva2.dll

16:15:48.0811 4936  C:\Windows\System32\dxva2.dll - ok

16:15:48.0814 4936  [ 861797D3C83A6EBA05FB2C63B1A45E82 ] C:\Windows\System32\ksproxy.ax

16:15:48.0814 4936  C:\Windows\System32\ksproxy.ax - ok

16:15:48.0817 4936  [ DC3AE9F1554DCD97F90983DDBDACD83D ] C:\Windows\System32\vsstrace.dll

16:15:48.0817 4936  C:\Windows\System32\vsstrace.dll - ok

16:15:48.0820 4936  [ 09469B8EDD2755143FDA06867AAD7E73 ] C:\Windows\System32\cryptnet.dll

16:15:48.0820 4936  C:\Windows\System32\cryptnet.dll - ok

16:15:48.0824 4936  [ 012E22681A63D2BF405E6F15EF80BFD3 ] C:\Windows\System32\vidcap.ax

16:15:48.0824 4936  C:\Windows\System32\vidcap.ax - ok

16:15:48.0827 4936  [ 5F6359756DBCC901276BC2B62460FA64 ] C:\Windows\System32\quartz.dll

16:15:48.0827 4936  C:\Windows\System32\quartz.dll - ok

16:15:48.0830 4936  [ A14F25F62E84C6B4A178A1CFD9B47222 ] C:\Windows\System32\qcap.dll

16:15:48.0830 4936  C:\Windows\System32\qcap.dll - ok

16:15:48.0833 4936  [ 24BBD1F5375FC6CCB47A50811CD3A8A2 ] C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll

16:15:48.0833 4936  C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll - ok

16:15:48.0836 4936  [ EACACA0F2FF4CC54A909E3C5721FCDE8 ] C:\Windows\System32\msvfw32.dll

16:15:48.0836 4936  C:\Windows\System32\msvfw32.dll - ok

16:15:48.0840 4936  [ 418B3754F644C9ADF8B5312654B5FCFA ] C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll

16:15:48.0840 4936  C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll - ok

16:15:48.0843 4936  [ 8F87B4A94164621D4BFC2D4BFB6CF017 ] C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll

16:15:48.0843 4936  C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll - ok

16:15:48.0847 4936  [ 7646FDBF9E5BA332BB42B0B96495277E ] C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll

16:15:48.0847 4936  C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll - ok

16:15:48.0850 4936  [ E97EFFC4472F8FF5896B33FFD88EC9E6 ] C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll

16:15:48.0850 4936  C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll - ok

16:15:48.0854 4936  [ 4B88BD98983A2CD9BE90F368B4F59F0A ] C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll

16:15:48.0854 4936  C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll - ok

16:15:48.0857 4936  [ 2DB70167C13F2339A63E694291FD1BFD ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:15:48.0857 4936  C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe - ok

16:15:48.0861 4936  [ 2FCC8C7E5B59996CBCBEB0904B927148 ] C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll

16:15:48.0861 4936  C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll - ok

16:15:48.0866 4936  [ 8881574868E648689B7AA88A88716E17 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:15:48.0866 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe - ok

16:15:48.0870 4936  [ BAB2355B01458F6BBF77D2AD4967D8F8 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll

16:15:48.0870 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll - ok

16:15:48.0875 4936  [ 7BA720A3E41BA5B56FAEBAFE1D326F8E ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll

16:15:48.0875 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll - ok

16:15:48.0879 4936  [ F5EF52B0BF4F0A878F2E992F9EF74C8F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll

16:15:48.0879 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll - ok

16:15:48.0883 4936  [ 95086E32A109D966C58225EFDE421874 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll

16:15:48.0883 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll - ok

16:15:48.0887 4936  [ 7634010AAB56883F75EFD6CA0D433CAB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so

16:15:48.0887 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so - ok

16:15:48.0891 4936  [ 79F2A39CE043FF4F6F08CADDD94D3022 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so

16:15:48.0891 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so - ok

16:15:48.0894 4936  [ BF1B1795180EFBCAE7E1D79E4E86056D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so

16:15:48.0895 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so - ok

16:15:48.0898 4936  [ FB08B28DA062D00142386BE5D1FA4E97 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so

16:15:48.0898 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so - ok

16:15:48.0902 4936  [ AA6E18DE261A1614E1C8B6F552E39AFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so

16:15:48.0902 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so - ok

16:15:48.0905 4936  [ 0ECC9904B6384F713643640FFEA56990 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so

16:15:48.0905 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so - ok

16:15:48.0909 4936  [ 5CD6753CCE866006DD4E0F567EBCA1F4 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so

16:15:48.0909 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so - ok

16:15:48.0913 4936  [ EFC3817C0A178DA0EDA14570B1B10C75 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so

16:15:48.0913 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so - ok

16:15:48.0916 4936  [ 9F64EC455CD232566D85870836A0200D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so

16:15:48.0917 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so - ok

16:15:48.0920 4936  [ 471EB03D1C1485A145062CA7CFCB8561 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so

16:15:48.0920 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so - ok

16:15:48.0924 4936  [ 82EF0C0B5C8698E812100E3315612FE3 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so

16:15:48.0924 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so - ok

16:15:48.0928 4936  [ FCDA9E17440B42EC01B22F49A022967F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so

16:15:48.0928 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so - ok

16:15:48.0931 4936  [ CC1F352A783CF8A29A05E9F30D94A134 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so

16:15:48.0931 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so - ok

16:15:48.0935 4936  [ 1478F7386CCFCE9A65A3B911EB57AABC ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so

16:15:48.0935 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so - ok

16:15:48.0938 4936  [ E085207B69D06BA56AFB627B1B7FECF2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so

16:15:48.0938 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so - ok

16:15:48.0942 4936  [ E128104681660D5F9867A95E83AD8CA5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so

16:15:48.0942 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so - ok

16:15:48.0945 4936  [ 4992F7ABA77F4DB94B42D2F53B6D2547 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so

16:15:48.0945 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so - ok

16:15:48.0949 4936  [ 8300C329344DA7CC6D87A338F86FC024 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll

16:15:48.0949 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll - ok

16:15:48.0952 4936  [ 54798EEFB9ED48C5F2D7A26BC83F1281 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so

16:15:48.0952 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so - ok

16:15:48.0956 4936  [ F5F8B9B81C58F9AE0C34075BC6446271 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so

16:15:48.0956 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so - ok

16:15:48.0960 4936  [ 4A1DE9A42015DAB7C3C4DA5D8C1C36FA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so

16:15:48.0960 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so - ok

16:15:48.0963 4936  [ 3FD4AA228F8CCAA86581B16B8B13DAFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so

16:15:48.0963 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so - ok

16:15:48.0967 4936  [ 29C86E7A89870CAF9E336BF46670D2D5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so

16:15:48.0967 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so - ok

16:15:48.0970 4936  [ D2033210D4DA9E9CE7670DFF45D7101B ] C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe

16:15:48.0970 4936  C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe - ok

16:15:48.0974 4936  [ 5E3A949B03028F6408A2EC98909C1917 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so

16:15:48.0974 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so - ok

16:15:48.0978 4936  [ 204A73A56751C68C6031E9D5D611EC98 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

16:15:48.0978 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe - ok

16:15:48.0981 4936  [ 0F7F7D875290CCF8C41FAE62F8B3CC82 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so

16:15:48.0981 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so - ok

16:15:48.0984 4936  [ 99ED733F614660EB32199BF889DFB7E2 ] C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:15:48.0984 4936  C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll - ok

16:15:48.0988 4936  [ B764114732DCAF9F6943516843116792 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so

16:15:48.0988 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so - ok

16:15:48.0992 4936  [ 0D9525791E5DB7762F7A92F4B005AACB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so

16:15:48.0992 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so - ok

16:15:48.0996 4936  [ F52548AA0312879A5E8D6DCEC6502AE1 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so

16:15:48.0996 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so - ok

16:15:48.0998 4936  [ C0E7898090D81772EA927E9A3C71817C ] C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll

16:15:48.0998 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll - ok

16:15:49.0002 4936  [ CF061B2D55421E7C2AE6953BA9185332 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so

16:15:49.0002 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so - ok

16:15:49.0005 4936  [ D86C5C506766C5E7544B9C738BA7830D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so

16:15:49.0005 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so - ok

16:15:49.0009 4936  [ 7A99E3E80B28E1E21943654B461E9074 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so

16:15:49.0009 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so - ok

16:15:49.0012 4936  [ 9AF5EA601C06E5C64F9F006E050B931E ] C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll

16:15:49.0013 4936  C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll - ok

16:15:49.0016 4936  [ 27EA34926E31D8C5FA221C19BFD1F4E9 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so

16:15:49.0016 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so - ok

16:15:49.0020 4936  [ 7A07BD7F1077AE67526B97A8896716D2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so

16:15:49.0020 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so - ok

16:15:49.0023 4936  [ 64C66D87575B550D29216BCAE6111984 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so

16:15:49.0023 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so - ok

16:15:49.0027 4936  [ CE146AB004F39F0298B5E57FEB4722E2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll

16:15:49.0027 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll - ok

16:15:49.0031 4936  [ 54951309B2B9CA6FB45E450ACAC69B10 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll

16:15:49.0031 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll - ok

16:15:49.0035 4936  [ E52BD5E1063515F3205325D277B8B6EA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll

16:15:49.0035 4936  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll - ok

16:15:49.0038 4936  [ 9039717A906DA0AE38420918801D9AB3 ] C:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:15:49.0038 4936  C:\Program Files\Common Files\LightScribe\LSSrvc.exe - ok

16:15:49.0042 4936  [ 30F0DC266B46118E9FBCF5B2A30EB1DB ] C:\Windows\System32\wbem\wbemprox.dll

16:15:49.0042 4936  C:\Windows\System32\wbem\wbemprox.dll - ok

16:15:49.0045 4936  [ 5533C95940E5B75FE89BD8CBB352189F ] C:\Program Files\Common Files\LightScribe\LSSProxy.dll

16:15:49.0045 4936  C:\Program Files\Common Files\LightScribe\LSSProxy.dll - ok

16:15:49.0048 4936  [ 74B8C2EA72D43727142D12397D5A49F9 ] C:\Windows\System32\wbemcomn.dll

16:15:49.0048 4936  C:\Windows\System32\wbemcomn.dll - ok

16:15:49.0052 4936  [ 832D44CA982AB483337CB6A3906E53EE ] C:\Program Files\Common Files\LightScribe\LSLog.dll

16:15:49.0052 4936  C:\Program Files\Common Files\LightScribe\LSLog.dll - ok

16:15:49.0055 4936  [ B05640AC812FCCB488328DF34E7F663A ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

16:15:49.0055 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe - ok

16:15:49.0059 4936  [ 254AC97C9AF4DDF3F5F57855198527B7 ] C:\Windows\System32\wermgr.exe

16:15:49.0059 4936  C:\Windows\System32\wermgr.exe - ok

16:15:49.0062 4936  [ 8BE000F9A0B0FF7194AAEFB02C9BDE99 ] C:\Windows\System32\wer.dll

16:15:49.0062 4936  C:\Windows\System32\wer.dll - ok

16:15:49.0067 4936  [ DE7F813217EC88C0A6D4D8F2F39D7949 ] C:\Windows\System32\msiltcfg.dll

16:15:49.0067 4936  C:\Windows\System32\msiltcfg.dll - ok

16:15:49.0071 4936  [ F716057C341C8A4F58142DFC8EF336EA ] C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

16:15:49.0071 4936  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - ok

16:15:49.0075 4936  [ 32C940D6BAAD78CC236BF8832D1AD9B7 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll

16:15:49.0075 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll - ok

16:15:49.0079 4936  [ B88613BE5B9939BD5DD63F9E196413AD ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll

16:15:49.0079 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll - ok

16:15:49.0083 4936  [ 0FB5AA33D26F7212963D832083CD0C5C ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll

16:15:49.0083 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll - ok

16:15:49.0086 4936  [ E31E4E9F644FBFE79DCA532D9781F71D ] C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll

16:15:49.0086 4936  C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll - ok

16:15:49.0090 4936  [ DAFDB8D555A52142DA3033AC758C899C ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll

16:15:49.0090 4936  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll - ok

16:15:49.0094 4936  [ B0FF455B1ED1BF859D24ACDB0855B985 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll

16:15:49.0094 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll - ok

16:15:49.0097 4936  [ 8CF09ABA2A3E577C71CEB321C3D66A4D ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll

16:15:49.0097 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll - ok

16:15:49.0101 4936  [ 19715A9A573DAD2521348ABC74266A48 ] C:\Windows\System32\HPZinw12.dll

16:15:49.0101 4936  C:\Windows\System32\HPZinw12.dll - ok

16:15:49.0104 4936  [ 183CBAD181DEDAC0119B2861C426AC14 ] C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:15:49.0104 4936  C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe - ok

16:15:49.0110 4936  [ F4D9ED6BD74AD7CC0BEC83C43A1CB76B ] C:\Windows\System32\ncsi.dll

16:15:49.0110 4936  C:\Windows\System32\ncsi.dll - ok

16:15:49.0114 4936  [ 01BCD91CC2B0EFDA4890F547010750BD ] C:\Windows\System32\ssdpapi.dll

16:15:49.0114 4936  C:\Windows\System32\ssdpapi.dll - ok

16:15:49.0118 4936  [ 5D32DF97B9116DDA0C75A342F5B2FFEC ] C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll

16:15:49.0118 4936  C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll - ok

16:15:49.0122 4936  [ 6349F6ED9C623B44B52EA3C63C831A92 ] C:\Windows\System32\drivers\PEAuth.sys

16:15:49.0122 4936  C:\Windows\System32\drivers\PEAuth.sys - ok

16:15:49.0128 4936  [ 84D9CAEFD4B265B66D19DC7770D1F6DC ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll

16:15:49.0128 4936  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll - ok

16:15:49.0132 4936  [ D0494460421A03CD5225CCA0059AA146 ] C:\Windows\System32\IPSECSVC.DLL

16:15:49.0132 4936  C:\Windows\System32\IPSECSVC.DLL - ok

16:15:49.0135 4936  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] C:\Windows\System32\HPZipm12.dll

16:15:49.0135 4936  C:\Windows\System32\HPZipm12.dll - ok

16:15:49.0138 4936  [ F115AF58ABE5605D7D709CBFBD83F418 ] C:\Windows\System32\PSIService.exe

16:15:49.0138 4936  C:\Windows\System32\PSIService.exe - ok

16:15:49.0142 4936  [ 42608AE9AF2641EE473A1797C25CFFC2 ] C:\Windows\System32\FwRemoteSvr.dll

16:15:49.0142 4936  C:\Windows\System32\FwRemoteSvr.dll - ok

16:15:49.0145 4936  [ 8FDA02E3E944E203E118F3DABA7C026D ] C:\Windows\System32\PSIKey.dll

16:15:49.0145 4936  C:\Windows\System32\PSIKey.dll - ok

16:15:49.0149 4936  [ 11123D8CAC3E659C4C9D88526DC57E42 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll

16:15:49.0149 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok

16:15:49.0153 4936  [ 90A3935D05B494A5A39D37E71F09A677 ] C:\Windows\System32\drivers\secdrv.sys

16:15:49.0153 4936  C:\Windows\System32\drivers\secdrv.sys - ok

16:15:49.0156 4936  [ 637A0F23F9012358E92E6F99835494D1 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:15:49.0156 4936  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok

16:15:49.0160 4936  [ 428FF21418ADCD6FAD6189CD9520A67B ] C:\Windows\System32\wiatrace.dll

16:15:49.0160 4936  C:\Windows\System32\wiatrace.dll - ok

16:15:49.0163 4936  [ 128DD9AF8640DBCC711940903C8B554F ] C:\Windows\System32\mscoree.dll

16:15:49.0163 4936  C:\Windows\System32\mscoree.dll - ok

16:15:49.0166 4936  [ D1B61E151F6D0077E42E9521869F352F ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll

16:15:49.0166 4936  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll - ok

16:15:49.0170 4936  [ 4DBA143F06BAD1DF935CB9603140CF2A ] C:\Windows\System32\wsdchngr.dll

16:15:49.0170 4936  C:\Windows\System32\wsdchngr.dll - ok

16:15:49.0173 4936  [ 608C345A255D82A6289C2D468EB41FD7 ] C:\Windows\System32\drivers\tcpipreg.sys

16:15:49.0173 4936  C:\Windows\System32\drivers\tcpipreg.sys - ok

16:15:49.0176 4936  [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

16:15:49.0176 4936  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok

16:15:49.0179 4936  [ 0C84B6AFFA7486422235584110D7176F ] C:\Windows\System32\icaapi.dll

16:15:49.0179 4936  C:\Windows\System32\icaapi.dll - ok

16:15:49.0183 4936  [ AC88D258F20909EEB91796F490CFBB73 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:15:49.0183 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe - ok

16:15:49.0186 4936  [ 0A990AFB9F2726323D61C8ECB8B70B17 ] C:\Windows\System32\security.dll

16:15:49.0186 4936  C:\Windows\System32\security.dll - ok

16:15:49.0189 4936  [ C8DBFEF835FF54467425C8F3ABCF7046 ] C:\Windows\System32\dssenh.dll

16:15:49.0189 4936  C:\Windows\System32\dssenh.dll - ok

16:15:49.0193 4936  [ 1F18B9EA1BBFF033413414C3BEA13AD6 ] C:\Windows\System32\wbem\WinMgmtR.dll

16:15:49.0193 4936  C:\Windows\System32\wbem\WinMgmtR.dll - ok

16:15:49.0196 4936  [ DEB9D08750423069647C3A066CEC7A1B ] C:\Windows\System32\tquery.dll

16:15:49.0196 4936  C:\Windows\System32\tquery.dll - ok

16:15:49.0199 4936  [ 2205A220A264E8C8B86492BF3D112907 ] C:\Windows\System32\PortableDeviceApi.dll

16:15:49.0199 4936  C:\Windows\System32\PortableDeviceApi.dll - ok

16:15:49.0202 4936  [ B53BD9E63867CD9FD853F666CA172713 ] C:\Windows\System32\PortableDeviceConnectApi.dll

16:15:49.0202 4936  C:\Windows\System32\PortableDeviceConnectApi.dll - ok

16:15:49.0205 4936  [ F91FF1E51FCA30B3C3981DB7D5924252 ] C:\Windows\System32\drivers\WUDFRd.sys

16:15:49.0205 4936  C:\Windows\System32\drivers\WUDFRd.sys - ok

16:15:49.0209 4936  [ 5C2B01675683AAF42FED528DE2C24C12 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll

16:15:49.0209 4936  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll - ok

16:15:49.0212 4936  [ C6E7AB7E798167095987EBCCB76DF61B ] C:\Windows\System32\WUDFHost.exe

16:15:49.0212 4936  C:\Windows\System32\WUDFHost.exe - ok

16:15:49.0215 4936  [ 218B73EA8341EA9FDF018D43052E790A ] C:\Windows\System32\mssrch.dll

16:15:49.0215 4936  C:\Windows\System32\mssrch.dll - ok

16:15:49.0218 4936  [ 5B7D398C26FCC364B68D9AB0B360502A ] C:\Windows\System32\WUDFx.dll

16:15:49.0218 4936  C:\Windows\System32\WUDFx.dll - ok

16:15:49.0221 4936  [ 119A487B94FCB54D5154EBFBFA124755 ] C:\Windows\System32\drivers\UMDF\WpdFs.dll

16:15:49.0222 4936  C:\Windows\System32\drivers\UMDF\WpdFs.dll - ok

16:15:49.0225 4936  [ AAB5FEAABF4CB6F76D794203831C8D94 ] C:\Windows\System32\msidle.dll

16:15:49.0225 4936  C:\Windows\System32\msidle.dll - ok

16:15:49.0228 4936  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] C:\Windows\System32\netprofm.dll

16:15:49.0228 4936  C:\Windows\System32\netprofm.dll - ok

16:15:49.0231 4936  [ BF7E4D6F60A6D9E866432855C6F8C262 ] C:\Windows\System32\sqmapi.dll

16:15:49.0231 4936  C:\Windows\System32\sqmapi.dll - ok

16:15:49.0235 4936  [ B458B58F7BB97C48D01AC3CF5805AAAC ] C:\Windows\System32\Query.dll

16:15:49.0235 4936  C:\Windows\System32\Query.dll - ok

16:15:49.0238 4936  [ 6BC5FCEF351E4CB5A269C1E84B5A06DA ] C:\Windows\System32\netcfgx.dll

16:15:49.0238 4936  C:\Windows\System32\netcfgx.dll - ok

16:15:49.0241 4936  [ DFCAB29E8FD38F95650CC1E203E8D318 ] C:\Windows\System32\npmproxy.dll

16:15:49.0241 4936  C:\Windows\System32\npmproxy.dll - ok

16:15:49.0244 4936  [ 50ABE7CDA2DAE898216121D14092C182 ] C:\Windows\System32\WMVCORE.DLL

16:15:49.0244 4936  C:\Windows\System32\WMVCORE.DLL - ok

16:15:49.0248 4936  [ A952D0DED445F26AEFCF593A935AB300 ] C:\Windows\System32\hnetcfg.dll

16:15:49.0248 4936  C:\Windows\System32\hnetcfg.dll - ok

16:15:49.0250 4936  [ FC1EEE57EB9CD57279D70BA2A9131C38 ] C:\Windows\System32\wbem\wbemcore.dll

16:15:49.0250 4936  C:\Windows\System32\wbem\wbemcore.dll - ok

16:15:49.0253 4936  [ C10E13721B0AAEBEB5EBA914F1D18181 ] C:\Windows\System32\wbem\esscli.dll

16:15:49.0253 4936  C:\Windows\System32\wbem\esscli.dll - ok

16:15:49.0256 4936  [ 36CCD8A79539C4ACE3BABE09C2CFBA16 ] C:\Windows\System32\WMASF.DLL

16:15:49.0256 4936  C:\Windows\System32\WMASF.DLL - ok

16:15:49.0260 4936  [ BC5A34B6A14C93BF04E3F4E8EA57090A ] C:\Windows\System32\wbem\fastprox.dll

16:15:49.0260 4936  C:\Windows\System32\wbem\fastprox.dll - ok

16:15:49.0263 4936  [ B2B117BD8D1EA80536CDD91797EF4A0A ] C:\Windows\System32\PortableDeviceClassExtension.dll

16:15:49.0263 4936  C:\Windows\System32\PortableDeviceClassExtension.dll - ok

16:15:49.0266 4936  [ 883D02AB5D350BC45E0F60E8CFA97FDC ] C:\Windows\System32\PortableDeviceTypes.dll

16:15:49.0266 4936  C:\Windows\System32\PortableDeviceTypes.dll - ok

16:15:49.0270 4936  [ DB0F37DBA4C245C61E5936DDBDE62438 ] C:\Windows\System32\wbem\wbemsvc.dll

16:15:49.0270 4936  C:\Windows\System32\wbem\wbemsvc.dll - ok

16:15:49.0273 4936  [ 2C3B09E586BDA2CC49A292BE7BADC589 ] C:\Windows\System32\wbem\wmiutils.dll

16:15:49.0273 4936  C:\Windows\System32\wbem\wmiutils.dll - ok

16:15:49.0277 4936  [ B288FF7C1987A736726E87C79148C360 ] C:\Windows\System32\PortableDeviceWiaCompat.dll

16:15:49.0277 4936  C:\Windows\System32\PortableDeviceWiaCompat.dll - ok

16:15:49.0280 4936  [ 834933F16EA839AC5AC7CBF88638DF27 ] C:\Windows\System32\wbem\repdrvfs.dll

16:15:49.0280 4936  C:\Windows\System32\wbem\repdrvfs.dll - ok

16:15:49.0283 4936  [ AF8FCE586FE158542035EFE79B16A9BB ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

16:15:49.0283 4936  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll - ok

16:15:49.0287 4936  [ 22DC784B32BEE306A99F50D6DC2460BC ] C:\Windows\System32\esent.dll

16:15:49.0287 4936  C:\Windows\System32\esent.dll - ok

16:15:49.0290 4936  [ C2C6C014B96581EC8BF0C8604DE1743E ] C:\Windows\System32\wbem\WmiPrvSD.dll

16:15:49.0290 4936  C:\Windows\System32\wbem\WmiPrvSD.dll - ok

16:15:49.0293 4936  [ F85134BF76CB335A39F8D7BC4173D4FB ] C:\Windows\System32\msscb.dll

16:15:49.0293 4936  C:\Windows\System32\msscb.dll - ok

16:15:49.0296 4936  [ 21322832C99E8DE85BD047689A2A69DB ] C:\Windows\System32\pnpts.dll

16:15:49.0296 4936  C:\Windows\System32\pnpts.dll - ok

16:15:49.0300 4936  [ F0062778F50838145AC46B384FFB4FA3 ] C:\Windows\System32\pcadm.dll

16:15:49.0300 4936  C:\Windows\System32\pcadm.dll - ok

16:15:49.0303 4936  [ A609A192E98934A8D352704C99AB8577 ] C:\Windows\System32\wbem\wbemess.dll

16:15:49.0303 4936  C:\Windows\System32\wbem\wbemess.dll - ok

16:15:49.0307 4936  [ 58D4765AB87347DB835D5693ADF652C1 ] C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:15:49.0308 4936  C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll - ok

16:15:49.0312 4936  [ 75F122CDCA3C71BD09089F2CA824B796 ] C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:15:49.0312 4936  C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL - ok

16:15:49.0315 4936  [ FEA6D21F78922D641A0C9346D885133B ] C:\Windows\System32\mssprxy.dll

16:15:49.0315 4936  C:\Windows\System32\mssprxy.dll - ok

16:15:49.0319 4936  [ 01EBD21968ADBCDEF68E41CD8591DC9E ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin

16:15:49.0319 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin - ok

16:15:49.0322 4936  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:15:49.0322 4936  C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe - ok

16:15:49.0326 4936  [ 3606CE1AC3D6A9A9CB7DB35D7F5C54EC ] C:\Windows\System32\shfolder.dll

16:15:49.0326 4936  C:\Windows\System32\shfolder.dll - ok

16:15:49.0329 4936  [ 03500AD3001A71D3C01F2A5E053FEEF2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll

16:15:49.0329 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll - ok

16:15:49.0333 4936  [ A9086FD97C26976DFE54848C8B6DB104 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll

16:15:49.0333 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll - ok

16:15:49.0336 4936  [ D22979B79A89BDDC251BE01FED697362 ] C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll

16:15:49.0336 4936  C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll - ok

16:15:49.0340 4936  [ AB15F6916593210DC6D95B328DD13F1C ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll

16:15:49.0340 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll - ok

16:15:49.0344 4936  [ 4B3841A78EC7C6BD7D463AE89D1C2489 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll

16:15:49.0344 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll - ok

16:15:49.0347 4936  [ 83713FA2E305533E961F89BF6880D734 ] C:\Program Files\Uniblue\RegistryBooster\cache.dll

16:15:49.0347 4936  C:\Program Files\Uniblue\RegistryBooster\cache.dll - ok

16:15:49.0351 4936  [ 1182F47930ED9AEC09F0DD410C67E69F ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll

16:15:49.0351 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll - ok

16:15:49.0354 4936  [ 7487E14B2FA3457E8A4A4B51CF36B3F2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll

16:15:49.0354 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll - ok

16:15:49.0358 4936  [ B3E0C20A53D6A55590468B33AA9BC525 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

16:15:49.0358 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe - ok

16:15:49.0362 4936  [ 8E3608C58BA8C8B685D44578897EE0A2 ] C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe

16:15:49.0362 4936  C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe - ok

16:15:49.0365 4936  [ 0D4B1D08EDC6D212BCAC4E0672206474 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

16:15:49.0365 4936  C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe - ok

16:15:49.0369 4936  [ 682B0FFCCCD29668207266C7DA5E6C9D ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

16:15:49.0369 4936  C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe - ok

16:15:49.0372 4936  [ 08630A8609781AE5BCF7324E9FD42FF9 ] C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll

16:15:49.0372 4936  C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll - ok

16:15:49.0376 4936  [ C0B8B96D018849FD8CCF15FED84E8782 ] C:\Windows\System32\ie4uinit.exe

16:15:49.0376 4936  C:\Windows\System32\ie4uinit.exe - ok

16:15:49.0379 4936  [ F0FEFB0B5D25A75D478A4317139D937E ] C:\Windows\System32\iedkcs32.dll

16:15:49.0379 4936  C:\Windows\System32\iedkcs32.dll - ok

16:15:49.0382 4936  [ 4B19A9A4191353007E9819A832B81186 ] C:\Windows\System32\timedate.cpl

16:15:49.0382 4936  C:\Windows\System32\timedate.cpl - ok

16:15:49.0385 4936  [ 8D78BA30DB4AE040A52EDEE725782715 ] C:\Windows\System32\actxprxy.dll

16:15:49.0385 4936  C:\Windows\System32\actxprxy.dll - ok

16:15:49.0388 4936  [ FF41E1AC301F51E16F61AD7C0F45467C ] C:\Windows\System32\msshsq.dll

16:15:49.0388 4936  C:\Windows\System32\msshsq.dll - ok

16:15:49.0392 4936  [ 65C2A23FF131541B3D72D7D3D2CBFC03 ] C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll

16:15:49.0392 4936  C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll - ok

16:15:49.0395 4936  [ 1CE4A2790EB4A96F4ED1E4264866AFE6 ] C:\Windows\System32\NaturalLanguage6.dll

16:15:49.0395 4936  C:\Windows\System32\NaturalLanguage6.dll - ok

16:15:49.0399 4936  [ 3BC9A79BCD7BD98A6F492BCF1B6177B9 ] C:\Windows\System32\NlsData0007.dll

16:15:49.0399 4936  C:\Windows\System32\NlsData0007.dll - ok

16:15:49.0402 4936  [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\Windows\System32\drivers\78914021.sys

16:15:49.0402 4936  C:\Windows\System32\drivers\78914021.sys - ok

16:15:49.0405 4936  [ 795166DED9B1B32136B150A12A1DEBAE ] C:\Windows\System32\NlsLexicons0007.dll

16:15:49.0405 4936  C:\Windows\System32\NlsLexicons0007.dll - ok

16:15:49.0409 4936  [ 24F90AEFEBE601D427CB4511E74CDCB6 ] C:\Windows\System32\linkinfo.dll

16:15:49.0409 4936  C:\Windows\System32\linkinfo.dll - ok

16:15:49.0412 4936  [ 04044BF8E6989BE45FA718C24407CA28 ] C:\Windows\System32\networkexplorer.dll

16:15:49.0412 4936  C:\Windows\System32\networkexplorer.dll - ok

16:15:49.0415 4936  [ 9A4322EE420D6FACD4D4B1FF6CB856B1 ] C:\hp\support\hpsysdrv.exe

16:15:49.0415 4936  C:\hp\support\hpsysdrv.exe - ok

16:15:49.0418 4936  [ 7088B136BB58A5F95CF0DE8386CA6C0F ] C:\hp\KBD\KbdStub.exe

16:15:49.0418 4936  C:\hp\KBD\KbdStub.exe - ok

16:15:49.0421 4936  [ 0CFCDE5D9D074D96B78D1F1CBF1AAB1D ] C:\Windows\System32\riched20.dll

16:15:49.0421 4936  C:\Windows\System32\riched20.dll - ok

16:15:49.0424 4936  [ 4F89DD4EA74C66916E15A6E7D74A50B5 ] C:\Windows\System32\jureg.exe

16:15:49.0424 4936  C:\Windows\System32\jureg.exe - ok

16:15:49.0428 4936  [ 392845E8D49B5F0E81AAC4D795000A8C ] C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

16:15:49.0428 4936  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe - ok

16:15:49.0432 4936  [ E42A642E162B0468B2C4E9D803079C7F ] C:\Windows\KHALMNPR.Exe

16:15:49.0432 4936  C:\Windows\KHALMNPR.Exe - ok

16:15:49.0435 4936  [ 361CD47DC5BD83EE24407903233B0D9A ] C:\Windows\RtHDVCpl.exe

16:15:49.0435 4936  C:\Windows\RtHDVCpl.exe - ok

16:15:49.0438 4936  [ 765AB6A6F8ED6F8186461BB2F183AA00 ] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll

16:15:49.0438 4936  C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll - ok

16:15:49.0442 4936  [ 5016B8FC59AD616F03813FBE63295081 ] C:\Windows\System32\thumbcache.dll

16:15:49.0442 4936  C:\Windows\System32\thumbcache.dll - ok

16:15:49.0445 4936  [ BADC359C9A0D9C217B7E8DA17BF3F5BB ] C:\Windows\System32\ntshrui.dll

16:15:49.0445 4936  C:\Windows\System32\ntshrui.dll - ok

16:15:49.0448 4936  [ 7AF5A466CF4AECA28E3DCBCF5B6FD220 ] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

16:15:49.0448 4936  C:\Program Files\HP\HP Software Update\hpwuSchd2.exe - ok

16:15:49.0452 4936  [ 12916E0642E92561C98B18A2A2D01B14 ] C:\Program Files\Common Files\Java\Java Update\jusched.exe

16:15:49.0452 4936  C:\Program Files\Common Files\Java\Java Update\jusched.exe - ok

16:15:49.0455 4936  [ B01902E9451B3D39DC5CAFDC9B9B398C ] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE

16:15:49.0455 4936  C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE - ok

16:15:49.0459 4936  [ 29000C2AF39C86B3FC08814B456F1A86 ] C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll

16:15:49.0459 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll - ok

16:15:49.0462 4936  [ 5D61BE7DB55B026A5D61A3EED09D0EAD ] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

16:15:49.0462 4936  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe - ok

16:15:49.0466 4936  [ 35937EAD711207544E219C2A19A78A7D ] C:\Program Files\Windows Media Player\wmpnscfg.exe

16:15:49.0466 4936  C:\Program Files\Windows Media Player\wmpnscfg.exe - ok

16:15:49.0469 4936  [ 8548444028D337900D6DE5F1340C9B47 ] C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll

16:15:49.0469 4936  C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll - ok

16:15:49.0472 4936  [ 3484CC5EFA7E9C0DFC47F7692AC0B817 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL

16:15:49.0472 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL - ok

16:15:49.0476 4936  [ 9575E4C5748A79E289C806FAC6E7CEC9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll

16:15:49.0476 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll - ok

16:15:49.0479 4936  [ D6D65109A5A8C93DCF34E1B48B64E5BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll

16:15:49.0479 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll - ok

16:15:49.0482 4936  [ FAB2ABBC61F60E15DE7CF6CF1B16BF69 ] C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL

16:15:49.0482 4936  C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL - ok

16:15:49.0486 4936  [ 3074421324485872276921F457A1E36C ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL

16:15:49.0486 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL - ok

16:15:49.0489 4936  [ 19962D74CD416FEE00C95A03C113C6D3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL

16:15:49.0489 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL - ok

16:15:49.0493 4936  [ F14219FC767F1383526AB423F278A8E3 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

16:15:49.0493 4936  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - ok

16:15:49.0496 4936  [ 124445568B1F019F14871FDA6E9E547E ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll

16:15:49.0496 4936  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll - ok

16:15:49.0498 4936  [ 705A7511B96AC171846D0E2DDC900DB1 ] C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll

16:15:49.0498 4936  C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll - ok

16:15:49.0502 4936  [ B624202660474516E73AA95238FD9843 ] C:\Program Files\Logitech\SetPoint\SetPoint.exe

16:15:49.0502 4936  C:\Program Files\Logitech\SetPoint\SetPoint.exe - ok

16:15:49.0505 4936  [ 84B8827562B005C118CADBA0F25DB2C6 ] C:\Windows\System32\dsound.dll

16:15:49.0505 4936  C:\Windows\System32\dsound.dll - ok

16:15:49.0509 4936  [ D1DCC1D6A2EFEF1148C1874BDC546A2D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll

16:15:49.0509 4936  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll - ok

16:15:49.0512 4936  [ B2A27CE3D828B52B220650ECAEA92D1A ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll

16:15:49.0512 4936  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll - ok

16:15:49.0515 4936  [ 4B1EB3AD2771AE8D0390ED1444B7B493 ] C:\Program Files\Logitech\SetPoint\lgscroll.dll

16:15:49.0515 4936  C:\Program Files\Logitech\SetPoint\lgscroll.dll - ok

16:15:49.0519 4936  [ F5892A613D0A74AE063613CA53D7B491 ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll

16:15:49.0519 4936  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll - ok

16:15:49.0523 4936  [ 9507A8E70A620A36CF2CF60740B8F022 ] C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll

16:15:49.0523 4936  C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll - ok

16:15:49.0526 4936  [ 22AA20E24295D0D98AFF72C65BD7DBFA ] C:\Windows\System32\KemXML.dll

16:15:49.0526 4936  C:\Windows\System32\KemXML.dll - ok

16:15:49.0529 4936  [ 1F171553F1138DC0062A71A7D275055A ] C:\Windows\System32\schtasks.exe

16:15:49.0529 4936  C:\Windows\System32\schtasks.exe - ok

16:15:49.0532 4936  [ E46A4765F8E6D631C9C9CB0B083602F5 ] C:\Program Files\Windows Media Player\wmpnssci.dll

16:15:49.0532 4936  C:\Program Files\Windows Media Player\wmpnssci.dll - ok

16:15:49.0535 4936  [ E1D0C7866A544A1BA9CBEDFE7C35F085 ] C:\Windows\System32\dinput.dll

16:15:49.0535 4936  C:\Windows\System32\dinput.dll - ok

16:15:49.0539 4936  [ C32B360E34ED8730EA4ECFAEBF4351F1 ] C:\Program Files\Norton 360\TPALERT.DLL

16:15:49.0539 4936  C:\Program Files\Norton 360\TPALERT.DLL - ok

16:15:49.0542 4936  [ 7F1165CA2BCAAE4F396D0977308BB16E ] C:\Program Files\Meazure\Meazure.exe

16:15:49.0542 4936  C:\Program Files\Meazure\Meazure.exe - ok

16:15:49.0545 4936  [ 648AB74D9C104FB500B6C4EEDC6A8772 ] C:\Windows\System32\wmpmde.dll

16:15:49.0545 4936  C:\Windows\System32\wmpmde.dll - ok

16:15:49.0548 4936  [ 67D16247C56C26A4F0D79D1A7F272B8F ] C:\Windows\System32\mf.dll

16:15:49.0548 4936  C:\Windows\System32\mf.dll - ok

16:15:49.0551 4936  [ 394CFDE4B6A45A7B93F3EE912C3BB470 ] C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll

16:15:49.0551 4936  C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll - ok

16:15:49.0555 4936  [ D4FF794FD2854CAA86F6C298BF158CFB ] C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe

16:15:49.0555 4936  C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe - ok

16:15:49.0559 4936  [ BAE6DFFEA62A4218B577C25ED04EC947 ] C:\Program Files\Norton 360\TPMAINUI.DLL

16:15:49.0559 4936  C:\Program Files\Norton 360\TPMAINUI.DLL - ok

16:15:49.0562 4936  [ 07F0B8EEB0785B71B194BB5AED8EF0C8 ] C:\Program Files\HP\hpqSSupply.exe

16:15:49.0562 4936  C:\Program Files\HP\hpqSSupply.exe - ok

16:15:49.0565 4936  [ 810F104256F6BCD7012545B0BEA18D23 ] C:\Windows\System32\kemutb.dll

16:15:49.0565 4936  C:\Windows\System32\kemutb.dll - ok

16:15:49.0568 4936  [ 2495C4204C63678F8FD5D488CA7DAD26 ] C:\Windows\System32\evr.dll

16:15:49.0568 4936  C:\Windows\System32\evr.dll - ok

16:15:49.0571 4936  [ 4DF10CE50010D70152944B51E03588B0 ] C:\Windows\System32\wmdrmsdk.dll

16:15:49.0571 4936  C:\Windows\System32\wmdrmsdk.dll - ok

16:15:49.0575 4936  [ 70C6489D56008D75DEDF73226FA63C11 ] C:\Windows\System32\dimsjob.dll

16:15:49.0575 4936  C:\Windows\System32\dimsjob.dll - ok

16:15:49.0578 4936  [ 3192ED5E2FFDF5B630541B9643AE1AA3 ] C:\Windows\System32\upnp.dll

16:15:49.0578 4936  C:\Windows\System32\upnp.dll - ok

16:15:49.0581 4936  [ 015E99A7634B93E8BB0380C70F3D2CC3 ] C:\Windows\System32\wmp.dll

16:15:49.0581 4936  C:\Windows\System32\wmp.dll - ok

16:15:49.0584 4936  [ 98638A4CA187245C469DA0DEC4F04A45 ] C:\Windows\System32\pautoenr.dll

16:15:49.0584 4936  C:\Windows\System32\pautoenr.dll - ok

16:15:49.0588 4936  [ AC48FD62E22C4425879FCA5A63F50497 ] C:\Windows\System32\certcli.dll

16:15:49.0588 4936  C:\Windows\System32\certcli.dll - ok

16:15:49.0591 4936  [ 8F53E6D9036F072B701F9E7D410E25D9 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc

16:15:49.0591 4936  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc - ok

16:15:49.0595 4936  [ 6A702774723F34B7CDC43A9EB7697729 ] C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe

16:15:49.0595 4936  C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe - ok

16:15:49.0598 4936  [ A2BEE7580B3E530A83651CDDA34278FA ] C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll

16:15:49.0598 4936  C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll - ok

16:15:49.0601 4936  [ 74CD7C617D24B8DE59029806CB19F0E0 ] C:\Program Files\Norton 360\tpCED.dll

16:15:49.0601 4936  C:\Program Files\Norton 360\tpCED.dll - ok

16:15:49.0605 4936  [ 3C9BCE38FAF8BAA8168BD5714101449B ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll

16:15:49.0605 4936  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll - ok

16:15:49.0608 4936  [ BE56D0547E24644DEEB19397521B1EAA ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll

16:15:49.0608 4936  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll - ok

16:15:49.0612 4936  [ E859EC77A0C5C2F81DD19C87AD23CACC ] C:\Program Files\Common Files\Symantec Shared\SymRedir.dll

16:15:49.0612 4936  C:\Program Files\Common Files\Symantec Shared\SymRedir.dll - ok

16:15:49.0615 4936  [ B941193CC8DCE2E1EB8AB6D46374222B ] C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll

16:15:49.0615 4936  C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll - ok

16:15:49.0619 4936  [ 80BD4B26E2CBC0D65445D0463DFF6FC2 ] C:\Windows\System32\oledlg.dll

16:15:49.0619 4936  C:\Windows\System32\oledlg.dll - ok

16:15:49.0622 4936  [ 9441A231C0AA0712F7CF3B10D9CFCF76 ] C:\Windows\System32\wmploc.DLL

16:15:49.0622 4936  C:\Windows\System32\wmploc.DLL - ok

16:15:49.0625 4936  [ 580E027967EE2F79AAE03AD658108BCC ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll

16:15:49.0625 4936  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll - ok

16:15:49.0629 4936  [ D083CCCC92C797CD57C4E3F76B740B96 ] C:\Program Files\Perspective Rectifier 3.3\pr.exe

16:15:49.0629 4936  C:\Program Files\Perspective Rectifier 3.3\pr.exe - ok

16:15:49.0632 4936  [ 0053319C4438CDE659AA75C19BBD22F1 ] C:\Windows\System32\CertEnroll.dll

16:15:49.0632 4936  C:\Windows\System32\CertEnroll.dll - ok

16:15:49.0636 4936  [ D62CAB966AD76B00C67C92870F9BD7A5 ] C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll

16:15:49.0636 4936  C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll - ok

16:15:49.0640 4936  [ 289BB482E4689783BE365C08D0360DA4 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll

16:15:49.0640 4936  C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll - ok

16:15:49.0644 4936  [ E54624E7897DDC0CF132C2BAEFC5A21A ] C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll

16:15:49.0644 4936  C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll - ok

16:15:49.0648 4936  [ 021CFC69A1874431DC88BEFC37A2A2FD ] C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll

16:15:49.0648 4936  C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll - ok

16:15:49.0652 4936  [ 8ADAE4E00D86A8530B8176A853B4B9B9 ] C:\Windows\System32\KemUtil.dll

16:15:49.0652 4936  C:\Windows\System32\KemUtil.dll - ok

16:15:49.0655 4936  [ 689C6EA7A17B3AE0F2A0151465EF311E ] C:\Windows\System32\jusched.exe

16:15:49.0655 4936  C:\Windows\System32\jusched.exe - ok

16:15:49.0658 4936  [ E0E54A571D4323567E95E11FE76A5FF3 ] C:\Windows\System32\drivers\srtsp.sys

16:15:49.0658 4936  C:\Windows\System32\drivers\srtsp.sys - ok

16:15:49.0662 4936  [ 826F699B69E88A3920C70F344DD42D88 ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:15:49.0663 4936  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS - ok

16:15:49.0666 4936  [ 8E4C77AD9BB279900C00F870CC0C674B ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:15:49.0666 4936  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS - ok

16:15:49.0670 4936  [ 9495FCC01D7AB7B60E5B8BA7AEFE9E3D ] C:\Windows\System32\wbem\WmiPrvSE.exe

16:15:49.0670 4936  C:\Windows\System32\wbem\WmiPrvSE.exe - ok

16:15:49.0673 4936  [ F723422A11CD6FA13036746272200993 ] C:\Windows\System32\wbem\cimwin32.dll

16:15:49.0673 4936  C:\Windows\System32\wbem\cimwin32.dll - ok

16:15:49.0676 4936  [ 617F9A5813E69F6E9ED94B811EC75396 ] C:\Windows\System32\wmpps.dll

16:15:49.0676 4936  C:\Windows\System32\wmpps.dll - ok

16:15:49.0680 4936  [ F1ECEC53B9FFC30E123D14E087C49111 ] C:\Windows\System32\wmdrmdev.dll

16:15:49.0680 4936  C:\Windows\System32\wmdrmdev.dll - ok

16:15:49.0684 4936  [ 7C7C620860819A62F926D7EC0B72C50B ] C:\Windows\System32\drmv2clt.dll

16:15:49.0684 4936  C:\Windows\System32\drmv2clt.dll - ok

16:15:49.0687 4936  [ 67BB7141F7F5F37411F796943B3418B6 ] C:\Windows\System32\framedynos.dll

16:15:49.0687 4936  C:\Windows\System32\framedynos.dll - ok

16:15:49.0691 4936  [ A6E02F65BE0C48DE7101923AE70268BD ] C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll

16:15:49.0691 4936  C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll - ok

16:15:49.0695 4936  [ 6C60E160FAB097ADDA6977A2B811CBAE ] C:\Program Files\Norton 360\WSCStub.exe

16:15:49.0695 4936  C:\Program Files\Norton 360\WSCStub.exe - ok

16:15:49.0698 4936  [ 80F9CF332BA54654160CEBD1E2C504F8 ] C:\Program Files\ShiftN\ShiftN.exe

16:15:49.0699 4936  C:\Program Files\ShiftN\ShiftN.exe - ok

16:15:49.0702 4936  [ DEB3972E35D9079CED7CD194682A4375 ] C:\Program Files\Common Files\Winferno\WSE2007.dll

16:15:49.0702 4936  C:\Program Files\Common Files\Winferno\WSE2007.dll - ok

16:15:49.0706 4936  [ 67384147DD005E54D2C0A20408E28579 ] C:\Program Files\Steam\steam.exe

16:15:49.0706 4936  C:\Program Files\Steam\steam.exe - ok

16:15:49.0709 4936  [ 37D75B5D3D6CCED0BC35FA9FA963363B ] C:\Program Files\Origin\Origin.exe

16:15:49.0709 4936  C:\Program Files\Origin\Origin.exe - ok

16:15:49.0713 4936  [ D0A95E567224B4C347CBDD6541E5D928 ] C:\Windows\System32\wscisvif.dll

16:15:49.0713 4936  C:\Windows\System32\wscisvif.dll - ok

16:15:49.0716 4936  [ 721BAA64EF443D9033F2330F0FF8C70B ] C:\Windows\System32\dskquota.dll

16:15:49.0716 4936  C:\Windows\System32\dskquota.dll - ok

16:15:49.0719 4936  [ A0F4852A5DB9754BEC06F84B400AE743 ] C:\Windows\System32\wscapi.dll

16:15:49.0719 4936  C:\Windows\System32\wscapi.dll - ok

16:15:49.0722 4936  [ FE3702015BE4D214808A2FBC07B8E5FF ] C:\Windows\System32\wscproxystub.dll

16:15:49.0722 4936  C:\Windows\System32\wscproxystub.dll - ok

16:15:49.0725 4936  [ EF9F69074FF0A48DD30FEF5A33518D86 ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

16:15:49.0725 4936  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll - ok

16:15:49.0729 4936  [ 61216539E55DDF2F78E421E7EF140650 ] C:\Windows\System32\ExplorerFrame.dll

16:15:49.0729 4936  C:\Windows\System32\ExplorerFrame.dll - ok

16:15:49.0732 4936  [ 22CC6CDBA678790046693654C3B212E4 ] C:\Program Files\Internet Explorer\iexplore.exe

16:15:49.0732 4936  C:\Program Files\Internet Explorer\iexplore.exe - ok

16:15:49.0735 4936  [ 7E6EA9CB72B5DE84A5D700BED877E5F9 ] C:\Program Files\Windows Mail\WinMail.exe

16:15:49.0735 4936  C:\Program Files\Windows Mail\WinMail.exe - ok

16:15:49.0739 4936  [ E2C48CD0132D4D1DC7D0DF9A6BEF686A ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll

16:15:49.0739 4936  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll - ok

16:15:49.0743 4936  [ 11F3FFC37D66870A092EB2B220744F84 ] C:\Program Files\Blender Foundation\Blender\blender.exe

16:15:49.0743 4936  C:\Program Files\Blender Foundation\Blender\blender.exe - ok

16:15:49.0747 4936  [ B152B061168EEFE865C9DE284B59D0E5 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll

16:15:49.0747 4936  C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll - ok

16:15:49.0749 4936  [ C8AE490A93C3CC2E537B6E06247785A1 ] C:\Windows\System32\wbem\NCProv.dll

16:15:49.0749 4936  C:\Windows\System32\wbem\NCProv.dll - ok

16:15:49.0752 4936  [ E3F535656B5ABF249702EB64F3CF9AF0 ] C:\Windows\System32\wbem\wbemcons.dll

16:15:49.0752 4936  C:\Windows\System32\wbem\wbemcons.dll - ok

16:15:49.0755 4936  [ 2D821AFA5A1A9CA7F9F997A1AAD09E72 ] C:\Program Files\Windows Media Player\wmplayer.exe

16:15:49.0755 4936  C:\Program Files\Windows Media Player\wmplayer.exe - ok

16:15:49.0759 4936  [ D0716BD0C0822A642D36E82F49F2B5B8 ] C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll

16:15:49.0759 4936  C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll - ok

16:15:49.0762 4936  [ 005EE82BABF1D2D32188A75BEDF500A4 ] C:\Windows\System32\GEARAspi.dll

16:15:49.0762 4936  C:\Windows\System32\GEARAspi.dll - ok

16:15:49.0765 4936  [ 9B0726A03B790E5B82BED44D24009BEF ] C:\Windows\System32\imapi2.dll

16:15:49.0766 4936  C:\Windows\System32\imapi2.dll - ok

16:15:49.0769 4936  [ 8803B32E8AF93C2FCB59C88EB9459190 ] C:\Program Files\Ultimate Papercraft3D\paper3d.exe

16:15:49.0769 4936  C:\Program Files\Ultimate Papercraft3D\paper3d.exe - ok

16:15:49.0772 4936  [ 68DC617F42DB8A10AC58C365F9540E5D ] C:\Program Files\Registry System Wizard.NET\RSW.exe

16:15:49.0772 4936  C:\Program Files\Registry System Wizard.NET\RSW.exe - ok

16:15:49.0776 4936  [ 3B54475A96C7F5403DC3362DEDF3982F ] C:\Program Files\Uniblue\RegistryBooster\Launcher.exe

16:15:49.0776 4936  C:\Program Files\Uniblue\RegistryBooster\Launcher.exe - ok

16:15:49.0779 4936  [ B5950DF243837D8217F4E597919B224A ] C:\Windows\System32\stobject.dll

16:15:49.0779 4936  C:\Windows\System32\stobject.dll - ok

16:15:49.0782 4936  [ EC69B16644C613F41A57169F8D068F1D ] C:\Windows\System32\batmeter.dll

16:15:49.0782 4936  C:\Windows\System32\batmeter.dll - ok

16:15:49.0785 4936  [ 6C90415A6FA967E3746C32E7E6366B22 ] C:\Program Files\DVD Flick\dvdflick.exe

16:15:49.0785 4936  C:\Program Files\DVD Flick\dvdflick.exe - ok

16:15:49.0789 4936  [ C45D74C22D4EFC3F86C9CABF9D98611F ] C:\Program Files\Online Services\eBay\WizLink.exe

16:15:49.0789 4936  C:\Program Files\Online Services\eBay\WizLink.exe - ok

16:15:49.0792 4936  [ DAF60E13E96ECB67F0EDAA89C6B01B8D ] C:\Windows\System32\notepad.exe

16:15:49.0792 4936  C:\Windows\System32\notepad.exe - ok

16:15:49.0796 4936  [ 8958F53C5ACAA22BDBEF97C1C3389102 ] C:\Program Files\Free FLV Converter\FreeFLVConverter.exe

16:15:49.0796 4936  C:\Program Files\Free FLV Converter\FreeFLVConverter.exe - ok

16:15:49.0799 4936  [ FCAB63DD4E9CE22FC46D48C1DB21E72E ] C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll

16:15:49.0799 4936  C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll - ok

16:15:49.0803 4936  [ 8D68E1E83190DEAFD5D4340AE2BF99E4 ] C:\Program Files\CDBurnerXP\cdbxpp.exe

16:15:49.0803 4936  C:\Program Files\CDBurnerXP\cdbxpp.exe - ok

16:15:49.0806 4936  [ 027E5E14C9CFF810377701BDEAD8210F ] C:\Windows\System32\control.exe

16:15:49.0806 4936  C:\Windows\System32\control.exe - ok

16:15:49.0810 4936  [ 8FC5FF226A65B73ECF37DFD90948204D ] C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe

16:15:49.0810 4936  C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe - ok

16:15:49.0813 4936  [ DA1919D896DBD5895E138932AE9E398B ] C:\Windows\System32\browserchoice.exe

16:15:49.0813 4936  C:\Windows\System32\browserchoice.exe - ok

16:15:49.0817 4936  [ F5953C17B50793A746113C3D608856AB ] C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe

16:15:49.0817 4936  C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe - ok

16:15:49.0820 4936  [ B0A7458308E157ABF2B04555D12ACF4A ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

16:15:49.0820 4936  C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe - ok

16:15:49.0823 4936  [ 395335431AD55C167CFDBBAB8420DA73 ] C:\Program Files\Movie Maker\DVDMaker.exe

16:15:49.0823 4936  C:\Program Files\Movie Maker\DVDMaker.exe - ok

16:15:49.0827 4936  [ F6DB5697858D528D0685838461833159 ] C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe

16:15:49.0827 4936  C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe - ok

16:15:49.0831 4936  [ 29FD49B7241866794C33EDD7A1AA2437 ] C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe

16:15:49.0831 4936  C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe - ok

16:15:49.0834 4936  [ 47FE0FFDD2768728E667D3E7B9A53D77 ] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe

16:15:49.0834 4936  C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe - ok

16:15:49.0838 4936  [ 30F02D9C55053367E26A11482F51E255 ] C:\Windows\System32\SndVolSSO.dll

16:15:49.0838 4936  C:\Windows\System32\SndVolSSO.dll - ok

16:15:49.0841 4936  [ B7ED332A57FC78CA29E40D3619550225 ] C:\Windows\ehome\ehshell.exe

16:15:49.0841 4936  C:\Windows\ehome\ehshell.exe - ok

16:15:49.0844 4936  [ 3503086CB4BDFE9F49E8A05C5974B64C ] C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe

16:15:49.0844 4936  C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe - ok

16:15:49.0848 4936  [ 88FFC1304C3F94B1FEB71E42B97D8F7E ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe

16:15:49.0848 4936  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe - ok

16:15:49.0851 4936  [ 3A2EEE8444A8E5C1A454C57B2198F5FC ] C:\Windows\System32\ntlanman.dll

16:15:49.0851 4936  C:\Windows\System32\ntlanman.dll - ok

16:15:49.0854 4936  [ 582EFE56FC0858E58A6CEBA2A64B02C7 ] C:\Windows\System32\drprov.dll

16:15:49.0854 4936  C:\Windows\System32\drprov.dll - ok

16:15:49.0857 4936  [ CFBD2E1FE18B50748A76703A2DC6D4E3 ] C:\Windows\System32\davclnt.dll

16:15:49.0857 4936  C:\Windows\System32\davclnt.dll - ok

16:15:49.0861 4936  [ 313B30189557A2E2793F845DE0F0A4D5 ] C:\Windows\ehome\ehSSO.dll

16:15:49.0861 4936  C:\Windows\ehome\ehSSO.dll - ok

16:15:49.0864 4936  [ DE8CCA55D7210161D83AF3737B85B850 ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe

16:15:49.0865 4936  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe - ok

16:15:49.0868 4936  [ 2714656AF0F4D280CC45BB5D82C7A46C ] C:\Program Files\VideoLAN\VLC\vlc.exe

16:15:49.0868 4936  C:\Program Files\VideoLAN\VLC\vlc.exe - ok

16:15:49.0871 4936  [ E98E402067978DB38282158F9E8609CA ] C:\Windows\System32\netshell.dll

16:15:49.0871 4936  C:\Windows\System32\netshell.dll - ok

16:15:49.0875 4936  [ C4AB08459CD7B59B410ACFC04D90E87B ] C:\Program Files\Movie Maker\MOVIEMK.exe

16:15:49.0875 4936  C:\Program Files\Movie Maker\MOVIEMK.exe - ok

16:15:49.0878 4936  [ 75AD59B9B12EB194486BE8D97B062994 ] C:\Windows\System32\pnidui.dll

16:15:49.0878 4936  C:\Windows\System32\pnidui.dll - ok

16:15:49.0881 4936  [ EB2170D0DDF3B2A92506AE16BC524B0B ] C:\Windows\System32\wlanutil.dll

16:15:49.0881 4936  C:\Windows\System32\wlanutil.dll - ok

16:15:49.0885 4936  [ 0C45DFAEC1E913CD6F0823A908A2638B ] C:\Program Files\Digitale Bibliothek 4\Digibib4.exe

16:15:49.0885 4936  C:\Program Files\Digitale Bibliothek 4\Digibib4.exe - ok

16:15:49.0888 4936  [ B18CC509D7685DCD2A60E8F4801463B3 ] C:\Program Files\Nikon\FotoShare\PicShare.exe

16:15:49.0888 4936  C:\Program Files\Nikon\FotoShare\PicShare.exe - ok

16:15:49.0892 4936  [ 3DAED7FD0244FC5F85BA99CB408D93F3 ] C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe

16:15:49.0892 4936  C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe - ok

16:15:49.0896 4936  [ E47C854A28A81F2939F42CBE9FEA994C ] C:\Windows\System32\Magnify.exe

16:15:49.0896 4936  C:\Windows\System32\Magnify.exe - ok

16:15:49.0899 4936  [ ABAEAEE763E287BDD39094C4165E1F3F ] C:\Windows\System32\fdProxy.dll

16:15:49.0899 4936  C:\Windows\System32\fdProxy.dll - ok

16:15:49.0902 4936  [ 541CBEB6946E6D3EC6289EAA44F24468 ] C:\Program Files\DesignWorkshop Lite\dwlite.exe

16:15:49.0902 4936  C:\Program Files\DesignWorkshop Lite\dwlite.exe - ok

16:15:49.0905 4936  [ 5B6748DFA56A0BE54C45B989378293E1 ] C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll

16:15:49.0905 4936  C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll - ok

16:15:49.0909 4936  [ E064EC2A869CC353EE030920827AD967 ] C:\Program Files\VCG\MeshLab\meshlab.exe

16:15:49.0909 4936  C:\Program Files\VCG\MeshLab\meshlab.exe - ok

16:15:49.0912 4936  [ 5EFDECB7B780B764D330270E565A9BEB ] C:\Program Files\3D Object Converter 4.60\3dconverter.exe

16:15:49.0912 4936  C:\Program Files\3D Object Converter 4.60\3dconverter.exe - ok

16:15:49.0916 4936  [ 69A8B07541DD43AA8A4164DA586BB66A ] C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key

16:15:49.0916 4936  C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key - ok

16:15:49.0919 4936  [ 7BDCEAF13D9EC5873C43BD8063BEC871 ] C:\Windows\System32\KemWnd.dll

16:15:49.0919 4936  C:\Windows\System32\KemWnd.dll - ok

16:15:49.0922 4936  [ A963352EDFCC13E84741B578E23FDCCC ] C:\Program Files\Google\Google Earth\plugin\geplugin.exe

16:15:49.0922 4936  C:\Program Files\Google\Google Earth\plugin\geplugin.exe - ok

16:15:49.0926 4936  [ 069385484EA57B663D688894C88975C5 ] C:\Windows\System32\wuapp.exe

16:15:49.0926 4936  C:\Windows\System32\wuapp.exe - ok

16:15:49.0929 4936  [ 4BAEC13BCAA595639EBB5185278DEFEA ] C:\Windows\System32\fdWSD.dll

16:15:49.0929 4936  C:\Windows\System32\fdWSD.dll - ok

16:15:49.0932 4936  [ C03AC1FBCD625F93D2C245D97E06F270 ] C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe

16:15:49.0932 4936  C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe - ok

16:15:49.0935 4936  [ 27BB54357A51594D9F9B6257B5B9A879 ] C:\Windows\System32\Narrator.exe

16:15:49.0935 4936  C:\Windows\System32\Narrator.exe - ok

16:15:49.0938 4936  [ D571295B71C60A67F6F2EA987E5CC3B0 ] C:\Windows\System32\wmdrmnet.dll

16:15:49.0938 4936  C:\Windows\System32\wmdrmnet.dll - ok

16:15:49.0942 4936  [ 790222D6CCFC576F0D07D418E6115D85 ] C:\Program Files\Windows Calendar\WinCal.exe

16:15:49.0942 4936  C:\Program Files\Windows Calendar\WinCal.exe - ok

16:15:49.0945 4936  [ BABCB7BF8C7210A666546A8B34F7BC54 ] C:\Windows\System32\javaws.exe

16:15:49.0945 4936  C:\Windows\System32\javaws.exe - ok

16:15:49.0948 4936  [ 7A42135A456E5C8154FF3DD5BE4B3DB4 ] C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe

16:15:49.0948 4936  C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe - ok

16:15:49.0951 4936  [ 3EB6D30D82F0E300FCFBAD0498F654FD ] C:\Windows\System32\mlang.dll

16:15:49.0951 4936  C:\Windows\System32\mlang.dll - ok

16:15:49.0955 4936  [ 559DC15B74C66EC38C4ECF81503C7757 ] C:\Program Files\Logitech\SetPoint\SetPointCOM.dll

16:15:49.0955 4936  C:\Program Files\Logitech\SetPoint\SetPointCOM.dll - ok

16:15:49.0958 4936  [ 443C5961CACD4ABC16648874AF06E4A0 ] C:\Windows\System32\fdSSDP.dll

16:15:49.0958 4936  C:\Windows\System32\fdSSDP.dll - ok

16:15:49.0961 4936  [ 2DD6AF8E97F59C9D39329BBC2A81F13F ] C:\Windows\System32\rasdlg.dll

16:15:49.0961 4936  C:\Windows\System32\rasdlg.dll - ok

16:15:49.0965 4936  [ D20AF468FA7F09B9561C8232BB80D4BA ] C:\Program Files\Logitech\SetPoint\khalwrapper.dll

16:15:49.0965 4936  C:\Program Files\Logitech\SetPoint\khalwrapper.dll - ok

16:15:49.0969 4936  [ 56E315ACFB08A177B4D01E42B9044DB5 ] C:\Windows\System32\mprapi.dll

16:15:49.0969 4936  C:\Windows\System32\mprapi.dll - ok

16:15:49.0973 4936  [ B736E9A31EDB4D7CE3632FFCFBD69304 ] C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll

16:15:49.0973 4936  C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll - ok

16:15:49.0978 4936  [ 2424231BBD703A677D115C29983B4293 ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

16:15:49.0978 4936  C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok

16:15:49.0983 4936  [ 145D7CB9862D6FA5A6F068F9F8B61B39 ] C:\Program Files\Logitech\SetPoint\IMHook.dll

16:15:49.0983 4936  C:\Program Files\Logitech\SetPoint\IMHook.dll - ok

16:15:49.0987 4936  [ C0F8561D8F32926EB25165CBDC7BBA3F ] C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll

16:15:49.0987 4936  C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll - ok

16:15:49.0990 4936  [ 2C3196C163BEF55A404A2549C7B69589 ] C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll

16:15:49.0990 4936  C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll - ok

16:15:49.0994 4936  [ 4A79F94E9A9D911D1BB525C262CCE2BA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll

16:15:49.0994 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll - ok

16:15:49.0997 4936  [ E96BC31E0114F0999FB0F92FC65D61CA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

16:15:49.0997 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe - ok

16:15:50.0000 4936  [ 2D3D77C6E0BFD1CEBF241F1F54D9614B ] C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll

16:15:50.0000 4936  C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll - ok

16:15:50.0003 4936  [ 9CA2CE96D1EB3F1890E1182B09195048 ] C:\Program Files\Notepad++\notepad++.exe

16:15:50.0003 4936  C:\Program Files\Notepad++\notepad++.exe - ok

16:15:50.0006 4936  [ 877F2939794EBA4F3D1BB967007E99E8 ] C:\Windows\System32\osk.exe

16:15:50.0006 4936  C:\Windows\System32\osk.exe - ok

16:15:50.0010 4936  [ 17C0E094BEE5BC03CF491972F71AA6EF ] C:\Windows\System32\wlanapi.dll

16:15:50.0010 4936  C:\Windows\System32\wlanapi.dll - ok

16:15:50.0013 4936  [ D7A835DB03CFE8168574893BF7E5C886 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll

16:15:50.0013 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll - ok

16:15:50.0016 4936  [ 2BE37815B1FCA885119612C658DB8CA8 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll

16:15:50.0016 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll - ok

16:15:50.0020 4936  [ 9DB55C2361E0974A9630EECD70C69FAB ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll

16:15:50.0020 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll - ok

16:15:50.0023 4936  [ B64AC7967D6B9FB2D6152AC768A1CB88 ] C:\Windows\System32\onex.dll

16:15:50.0023 4936  C:\Windows\System32\onex.dll - ok

16:15:50.0027 4936  [ 70D4F5E5490A8947262A0D591309CEB4 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll

16:15:50.0027 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll - ok

16:15:50.0030 4936  [ 24F2095044B9EE2AD1ED2B1D7152893E ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll

16:15:50.0030 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll - ok

16:15:50.0034 4936  [ B02910B449EA0B5AF9D3422A9F907D8D ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll

16:15:50.0034 4936  C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll - ok

16:15:50.0037 4936  [ 9D9FFC923FADBB575E0452EA0BBB15BD ] C:\Windows\System32\eappprxy.dll

16:15:50.0037 4936  C:\Windows\System32\eappprxy.dll - ok

16:15:50.0040 4936  [ 13710783A04D427B6F621EE697569217 ] C:\Program Files\Logitech\SetPoint\KGame.dll

16:15:50.0040 4936  C:\Program Files\Logitech\SetPoint\KGame.dll - ok

16:15:50.0043 4936  [ 5D0FE613570CABE3992F7DBCD68E61D1 ] C:\Windows\System32\eappcfg.dll

16:15:50.0043 4936  C:\Windows\System32\eappcfg.dll - ok

16:15:50.0047 4936  [ 8A5092AE59D6ED5B181292CDBFB22B2F ] C:\Program Files\Logitech\SetPoint\GameHook.dll

16:15:50.0047 4936  C:\Program Files\Logitech\SetPoint\GameHook.dll - ok

16:15:50.0053 4936  [ 06164026C38AA5366E4D127E2E36FDE8 ] C:\Program Files\Windows Mail\wab.exe

16:15:50.0053 4936  C:\Program Files\Windows Mail\wab.exe - ok

16:15:50.0056 4936  [ 484ACF6AF85A29AC52F3CF054DFDE9D3 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

16:15:50.0056 4936  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe - ok

16:15:50.0060 4936  [ 21EF4BB2A6FF4116FD83FAEE52D4A416 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

16:15:50.0060 4936  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe - ok

16:15:50.0064 4936  [ F6F1F9773356F02848B33F365F7DDB6E ] C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe

16:15:50.0064 4936  C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe - ok

16:15:50.0068 4936  [ CC1959AB3929997F4198AA69C854086F ] C:\Windows\System32\regsvr32.exe

16:15:50.0068 4936  C:\Windows\System32\regsvr32.exe - ok

16:15:50.0071 4936  [ FD647CA82ACF232DBE5F20345647B948 ] C:\Windows\AppPatch\AcGenral.dll

16:15:50.0071 4936  C:\Windows\AppPatch\AcGenral.dll - ok

16:15:50.0074 4936  [ 4A839160ED1963F9A1526DDA2D1233B2 ] C:\Windows\System32\AltTab.dll

16:15:50.0074 4936  C:\Windows\System32\AltTab.dll - ok

16:15:50.0078 4936  [ 6B5C53E0932C510606D700B7A896EF73 ] C:\Windows\System32\WPDShServiceObj.dll

16:15:50.0078 4936  C:\Windows\System32\WPDShServiceObj.dll - ok

16:15:50.0082 4936  [ 694AF8B27C9A0A99399E02CE977F986B ] C:\Windows\System32\mspaint.exe

16:15:50.0082 4936  C:\Windows\System32\mspaint.exe - ok

16:15:50.0085 4936  [ D05CB427A609C49CA7E34EF43718EE8A ] C:\Program Files\3DCrafter 9\3DCrafter.exe

16:15:50.0085 4936  C:\Program Files\3DCrafter 9\3DCrafter.exe - ok

16:15:50.0089 4936  [ 52BC119E49F88F2A5D1466230B1275C7 ] C:\Program Files\Windows Collaboration\WinCollab.exe

16:15:50.0089 4936  C:\Program Files\Windows Collaboration\WinCollab.exe - ok

16:15:50.0092 4936  [ 7FA34E22A8649AA4EEA11F2D3F4D70D8 ] C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe

16:15:50.0093 4936  C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe - ok

16:15:50.0097 4936  [ DDF5324E0F3065846E9B65FF3AFD379E ] C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll

16:15:50.0097 4936  C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll - ok

16:15:50.0100 4936  [ 072D046EDBA5528868DB40328A8E56F5 ] C:\Program Files\IrfanView\i_view32.exe

16:15:50.0100 4936  C:\Program Files\IrfanView\i_view32.exe - ok

16:15:50.0103 4936  [ D286D7E49EC07ECA96B42F64ACC4F549 ] C:\Program Files\AVS4YOU\Uninstall.exe

16:15:50.0103 4936  C:\Program Files\AVS4YOU\Uninstall.exe - ok

16:15:50.0107 4936  [ B0AC88C4E3B63EC8B67768301D10E652 ] C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll

16:15:50.0107 4936  C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll - ok

16:15:50.0110 4936  [ B292E60B5334E6763BA365D8FD96D3B7 ] C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll

16:15:50.0110 4936  C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll - ok

16:15:50.0114 4936  [ 83AB0FCCF90A395AE71B7EA931C90529 ] C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll

16:15:50.0114 4936  C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll - ok

16:15:50.0117 4936  [ 5146B1592CD05550F5ECBDCB3D39B974 ] C:\Program Files\Logitech\SetPoint\LCabHandler.dll

16:15:50.0117 4936  C:\Program Files\Logitech\SetPoint\LCabHandler.dll - ok

16:15:50.0121 4936  [ A944A73CEC5921B871542FE5CC5E03E4 ] C:\Windows\System32\olepro32.dll

16:15:50.0121 4936  C:\Windows\System32\olepro32.dll - ok

16:15:50.0124 4936  [ 75563FF603C40F0A5486750E0C486CC2 ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll

16:15:50.0124 4936  C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll - ok

16:15:50.0128 4936  [ A3D643C27859499B4C0DA19B588F0D0C ] C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR

16:15:50.0129 4936  C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR - ok

16:15:50.0132 4936  [ 5058D323DDABFAD0D8D8BC2CAEF73070 ] C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR

16:15:50.0132 4936  C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR - ok

16:15:50.0136 4936  [ 1BE24D6164470F4C020AA084A1DAB989 ] C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll

16:15:50.0136 4936  C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll - ok

16:15:50.0139 4936  [ 4BBBD0FC5DD9E8F93003A0AB5BFF7314 ] C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe

16:15:50.0139 4936  C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe - ok

16:15:50.0143 4936  [ 965AC4EAC6ACCE91CD258F3BBD35E2B2 ] C:\Program Files\PL-photo3D\PL-photo3D.exe

16:15:50.0143 4936  C:\Program Files\PL-photo3D\PL-photo3D.exe - ok

16:15:50.0146 4936  [ 060FD02E806F725B04026B2AC90C1A10 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe

16:15:50.0146 4936  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe - ok

16:15:50.0150 4936  [ 744F08CF9ACFFB1C715191D04DEEE907 ] C:\Windows\System32\srchadmin.dll

16:15:50.0150 4936  C:\Windows\System32\srchadmin.dll - ok

16:15:50.0153 4936  [ 5193DE33F3284C447E0D31DAFBF92570 ] C:\Windows\System32\webcheck.dll

16:15:50.0153 4936  C:\Windows\System32\webcheck.dll - ok

16:15:50.0156 4936  [ 36314940CEDBA2962F1062F0DFF7D8FA ] C:\Program Files\HP Photo Creations\PhotoProduct.exe

16:15:50.0156 4936  C:\Program Files\HP Photo Creations\PhotoProduct.exe - ok

16:15:50.0160 4936  [ 4ACEA0C4BB15ACE55E3AE5EC4E88DD55 ] C:\Windows\System32\SyncCenter.dll

16:15:50.0160 4936  C:\Windows\System32\SyncCenter.dll - ok

16:15:50.0163 4936  [ 246C71A9846C3B4127318601031B5B07 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe

16:15:50.0163 4936  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe - ok

16:15:50.0167 4936  [ F37774719A5E1B26F57BC1C4B7575E4C ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe

16:15:50.0167 4936  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe - ok

16:15:50.0171 4936  [ C0ABD66F31C0B84CD944802E6D3D02C2 ] C:\Windows\System32\bthprops.cpl

16:15:50.0171 4936  C:\Windows\System32\bthprops.cpl - ok

16:15:50.0174 4936  [ 52B3E60A5EE8E9AB8C1C8B5607A9EEA4 ] C:\Program Files\ReconLabLE1.2\ReconLab.exe

16:15:50.0174 4936  C:\Program Files\ReconLabLE1.2\ReconLab.exe - ok

16:15:50.0178 4936  [ 834776318237B026554C74DBA6FA8CD4 ] C:\Program Files\IrfanView\iv_uninstall.exe

16:15:50.0178 4936  C:\Program Files\IrfanView\iv_uninstall.exe - ok

16:15:50.0181 4936  [ 66E9F5121482A086CF77B8A40827E922 ] C:\Program Files\WinRAR\WinRAR.exe

16:15:50.0181 4936  C:\Program Files\WinRAR\WinRAR.exe - ok

16:15:50.0184 4936  [ 62CACC4A9C7C2BF244AAA2A7AD9ECE6D ] C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

16:15:50.0184 4936  C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe - ok

16:15:50.0188 4936  [ D56021051E8246A48550CFEC1880F80E ] C:\Program Files\GIMP 2\bin\gimp-2.8.exe

16:15:50.0188 4936  C:\Program Files\GIMP 2\bin\gimp-2.8.exe - ok

16:15:50.0191 4936  [ 8728A91948AC0FE779BDF47BC551BAF5 ] C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe

16:15:50.0192 4936  C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe - ok

16:15:50.0196 4936  [ 6D796D59977EB52B33B966EAB9C73E6A ] C:\Program Files\Microsoft Works\MSWorks.exe

16:15:50.0196 4936  C:\Program Files\Microsoft Works\MSWorks.exe - ok

16:15:50.0200 4936  [ 8BC00165083171F8DE760AE39D76D003 ] C:\Program Files\Microsoft Works\wksdb.exe

16:15:50.0200 4936  C:\Program Files\Microsoft Works\wksdb.exe - ok

16:15:50.0204 4936  [ 0D392EDE3B97E0B3131B2F63EF1DB94E ] C:\Program Files\Windows Defender\MSASCui.exe

16:15:50.0204 4936  C:\Program Files\Windows Defender\MSASCui.exe - ok

16:15:50.0207 4936  [ 78EB73E81B94E7556D391844C5C03AC1 ] C:\Windows\System32\fsquirt.exe

16:15:50.0207 4936  C:\Windows\System32\fsquirt.exe - ok

16:15:50.0210 4936  [ 1ED2124313CCE34C877247574212EFC8 ] C:\Windows\System32\calc.exe

16:15:50.0210 4936  C:\Windows\System32\calc.exe - ok

16:15:50.0213 4936  [ 338104E0E18307CD65604FE317B5FB8D ] C:\Windows\System32\mblctr.exe

16:15:50.0213 4936  C:\Windows\System32\mblctr.exe - ok

16:15:50.0216 4936  [ B1AFF0B6DED627A1D22A6817DD58AC0F ] C:\Windows\System32\NetProj.exe

16:15:50.0216 4936  C:\Windows\System32\NetProj.exe - ok

16:15:50.0219 4936  [ 16FEE292E95EDC274385103E6B498019 ] C:\Windows\System32\mstsc.exe

16:15:50.0219 4936  C:\Windows\System32\mstsc.exe - ok

16:15:50.0223 4936  [ 9E35FF7F943AE0FB89192BFE058B7FD4 ] C:\Program Files\Windows Sidebar\sidebar.exe

16:15:50.0223 4936  C:\Program Files\Windows Sidebar\sidebar.exe - ok

16:15:50.0227 4936  [ E80DB295132C5EF0C623935422BD0FC7 ] C:\Windows\System32\SnippingTool.exe

16:15:50.0227 4936  C:\Windows\System32\SnippingTool.exe - ok

16:15:50.0230 4936  [ 248F33A6C2380757BC1E20E34D9E827B ] C:\Windows\System32\SoundRecorder.exe

16:15:50.0230 4936  C:\Windows\System32\SoundRecorder.exe - ok

16:15:50.0233 4936  [ 9B89B3BB79EA1ACF041F40A7B6FC5827 ] C:\Windows\System32\mobsync.exe

16:15:50.0233 4936  C:\Windows\System32\mobsync.exe - ok

16:15:50.0236 4936  [ 105A4D87C8DCF2CF5DB042830B203E5F ] C:\Windows\Speech\Common\sapisvr.exe

16:15:50.0236 4936  C:\Windows\Speech\Common\sapisvr.exe - ok

16:15:50.0239 4936  [ A623666C8A8EC9A57DCA07915A3F1EC6 ] C:\Windows\System32\sdclt.exe

16:15:50.0240 4936  C:\Windows\System32\sdclt.exe - ok

16:15:50.0243 4936  [ BB4910DE8B6C5E30DF39EC97308D44BA ] C:\Windows\System32\charmap.exe

16:15:50.0243 4936  C:\Windows\System32\charmap.exe - ok

16:15:50.0246 4936  [ 2327C11B043FCEB80BE00CC8D077E9AA ] C:\Windows\System32\dfrgui.exe

16:15:50.0246 4936  C:\Windows\System32\dfrgui.exe - ok

16:15:50.0249 4936  [ 86AB3F6C784197DC1D994A83AF4259CD ] C:\Windows\System32\cleanmgr.exe

16:15:50.0249 4936  C:\Windows\System32\cleanmgr.exe - ok

16:15:50.0251 4936  [ FBF628702A408977FEB0845D48F4F154 ] C:\Windows\System32\migwiz\migwiz.exe

16:15:50.0251 4936  C:\Windows\System32\migwiz\migwiz.exe - ok

16:15:50.0255 4936  [ D3D1CE8FF30786D50272DA3085149904 ] C:\Windows\System32\msinfo32.exe

16:15:50.0255 4936  C:\Windows\System32\msinfo32.exe - ok

16:15:50.0258 4936  [ 95D5AC5CCBE10E8B4B8A0DF41022568D ] C:\Windows\System32\rstrui.exe

16:15:50.0258 4936  C:\Windows\System32\rstrui.exe - ok

16:15:50.0261 4936  [ C9B520028498E5DA23651619F8A556D4 ] C:\Windows\System32\StikyNot.exe

16:15:50.0261 4936  C:\Windows\System32\StikyNot.exe - ok

16:15:50.0265 4936  [ 7122B0AA2212B07BBFC49BD22215BF3B ] C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

16:15:50.0265 4936  C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - ok

16:15:50.0268 4936  [ C20436B4F0596ACD5569749206F99265 ] C:\Program Files\Windows Journal\Journal.exe

16:15:50.0268 4936  C:\Program Files\Windows Journal\Journal.exe - ok

16:15:50.0271 4936  [ 36B6F71B6D7D280302B348145DB05A9F ] C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe

16:15:50.0271 4936  C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe - ok

16:15:50.0275 4936  [ DF4217DDB34A0B73DC7AAC7829371C0C ] C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

16:15:50.0275 4936  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe - ok

16:15:50.0279 4936  [ 4CAAD229A00C0DEFFF51841AE2B93B46 ] C:\Windows\System32\WindowsPowerShell\v1.0\pwrshmsg.dll

16:15:50.0279 4936  C:\Windows\System32\WindowsPowerShell\v1.0\pwrshmsg.dll - ok

16:15:50.0282 4936  [ DF02DD0F18AB41D0F5BCB8CA6C20A3D5 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll

16:15:50.0282 4936  C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll - ok

16:15:50.0285 4936  [ 10BDE4B7D66C64857551CF719DFCE79F ] C:\Windows\System32\write.exe

16:15:50.0285 4936  C:\Windows\System32\write.exe - ok

16:15:50.0288 4936  [ 03710624A31C6B9585DD40F1F83CDB67 ] C:\Program Files\Tcl\bin\tclsh85.exe

16:15:50.0288 4936  C:\Program Files\Tcl\bin\tclsh85.exe - ok

16:15:50.0292 4936  [ E9EEEE9614BD78DCC0D4633D1DA0DD25 ] C:\Program Files\Tcl\bin\wish85.exe

16:15:50.0292 4936  C:\Program Files\Tcl\bin\wish85.exe - ok

16:15:50.0295 4936  [ D50995263A6E264FC3B2CA4D39F6F47F ] C:\Program Files\Tcl\lib\ppm\log\activetcl8.5-thread\uninstall.exe

16:15:50.0295 4936  C:\Program Files\Tcl\lib\ppm\log\activetcl8.5-thread\uninstall.exe - ok

16:15:50.0299 4936  [ 1C474C0C4CB5F15A555FE912CBF4549C ] C:\Windows\System32\odbcad32.exe

16:15:50.0299 4936  C:\Windows\System32\odbcad32.exe - ok

16:15:50.0302 4936  [ 1CB1B95D67BC380FBCCFAEA3CF2DDA80 ] C:\Windows\System32\iscsicpl.exe

16:15:50.0302 4936  C:\Windows\System32\iscsicpl.exe - ok

16:15:50.0305 4936  [ 8D865A3E7E2C78317EDE4EAE8316284F ] C:\Windows\System32\MdSched.exe

16:15:50.0305 4936  C:\Windows\System32\MdSched.exe - ok

16:15:50.0309 4936  [ 7CF9DBE2D5D2CA53DD33B5C708CC9B7A ] C:\Windows\System32\mmcshext.dll

16:15:50.0309 4936  C:\Windows\System32\mmcshext.dll - ok

16:15:50.0312 4936  [ 75C594669717137332364E44C38777E1 ] C:\Windows\System32\hhsetup.dll

16:15:50.0312 4936  C:\Windows\System32\hhsetup.dll - ok

16:15:50.0316 4936  [ F3880570EF4ADF91795DDB8574764D51 ] C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe

16:15:50.0316 4936  C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe - ok

16:15:50.0319 4936  [ 7629E9BB2FF06EACA62580A2C1D4FE6A ] C:\Windows\System32\msconfig.exe

16:15:50.0319 4936  C:\Windows\System32\msconfig.exe - ok

16:15:50.0322 4936  [ BA2A319EECEC9D04B1D532D2060EAAA5 ] C:\Program Files\Adobe\Flash Media Server 3.5\unins000.exe

16:15:50.0322 4936  C:\Program Files\Adobe\Flash Media Server 3.5\unins000.exe - ok

16:15:50.0325 4936  [ 469F2841AB3C27A88C37CA7681D9CA28 ] C:\Program Files\Logitech\SetPoint\LU\LuLnchr.exe

16:15:50.0325 4936  C:\Program Files\Logitech\SetPoint\LU\LuLnchr.exe - ok

16:15:50.0329 4936  [ 17EDEF0B1B14D618CCBD9A8F89F02A36 ] C:\Program Files\AVS4YOU\Registration.exe

16:15:50.0329 4936  C:\Program Files\AVS4YOU\Registration.exe - ok

16:15:50.0332 4936  [ D4A8714E8A999DB88A497DB4B33CAD30 ] C:\Program Files\Logitech\SetPoint\LU\LogitechUpdate.exe

16:15:50.0332 4936  C:\Program Files\Logitech\SetPoint\LU\LogitechUpdate.exe - ok

16:15:50.0335 4936  [ D6A285CD3A0B70B4DDF9DFAFB82BBFFB ] C:\Program Files\Common Files\AVSMedia\ActiveX\Repairing.exe

16:15:50.0336 4936  C:\Program Files\Common Files\AVSMedia\ActiveX\Repairing.exe - ok

16:15:50.0339 4936  [ 7E24450DC88C75F07564513C29B9F0E4 ] C:\Program Files\Blender Foundation\Blender\uninstall.exe

16:15:50.0339 4936  C:\Program Files\Blender Foundation\Blender\uninstall.exe - ok

16:15:50.0342 4936  [ C47A9248A72A2ABF8876AFD1790F7DF7 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ECCenter1.exe

16:15:50.0342 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ECCenter1.exe - ok

16:15:50.0347 4936  [ 62E46DAFE42A7D72C3B8577B77730B53 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BtAssist1.exe

16:15:50.0347 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BtAssist1.exe - ok

16:15:50.0351 4936  [ 147F8082067626B217C568A6B0A2030E ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc1.exe

16:15:50.0351 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc1.exe - ok

16:15:50.0354 4936  [ 9758FE7FEE0A3F9C72893D9F5AC94EF2 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BIP_Camera1.exe

16:15:50.0354 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BIP_Camera1.exe - ok

16:15:50.0358 4936  [ 9E4F3DC655255F4D938DC5CB7DACA35E ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\UsrGuide.exe

16:15:50.0358 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\UsrGuide.exe - ok

16:15:50.0361 4936  [ B43CDB4D5D679BE74A2B2786191BDF2F ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\WirelessFTP1.exe

16:15:50.0361 4936  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\WirelessFTP1.exe - ok

16:15:50.0365 4936  [ 604D822692FEE84288850AC5A6F2A454 ] C:\Program Files\cad3d\cad3d.exe

16:15:50.0366 4936  C:\Program Files\cad3d\cad3d.exe - ok

16:15:50.0369 4936  [ C8B628A5D7908CE241039EEEE645D668 ] C:\Program Files\CodeBlocks\codeblocks.exe

16:15:50.0369 4936  C:\Program Files\CodeBlocks\codeblocks.exe - ok

16:15:50.0372 4936  [ 54C15EF4F720D1E8AE69ABF5463AC5F6 ] C:\Program Files\CodeBlocks\uninstall.exe

16:15:50.0372 4936  C:\Program Files\CodeBlocks\uninstall.exe - ok

16:15:50.0376 4936  [ B77F17EBF26E81208B54DCFAB89778B6 ] C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

16:15:50.0376 4936  C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe - ok

16:15:50.0379 4936  [ C559672F31ABE6BA7277DD73C4502238 ] C:\Windows\System32\msiexec.exe

16:15:50.0379 4936  C:\Windows\System32\msiexec.exe - ok

16:15:50.0382 4936  [ BA77F9D00BC4AEC9BD74287A0B8CBF8C ] C:\Program Files\Das Fussball Studio\uninst\unins000.exe

16:15:50.0382 4936  C:\Program Files\Das Fussball Studio\uninst\unins000.exe - ok

16:15:50.0386 4936  [ 82256AE8932658C3F142AC687C90C7A9 ] C:\Program Files\DVD Flick\unins000.exe

16:15:50.0386 4936  C:\Program Files\DVD Flick\unins000.exe - ok

16:15:50.0390 4936  [ 495DA482DBD15024CCBD5019FDF0F811 ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\Support\EReg.exe

16:15:50.0390 4936  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\Support\EReg.exe - ok

16:15:50.0394 4936  [ 626F198768F67A0FEB3AD909E638F551 ] C:\Windows\System32\WindowsAnytimeUpgrade.exe

16:15:50.0394 4936  C:\Windows\System32\WindowsAnytimeUpgrade.exe - ok

16:15:50.0397 4936  [ 4367C083AA9BDAFBDF56C716D955C52E ] C:\Program Files\Free FLV Converter\unins000.exe

16:15:50.0397 4936  C:\Program Files\Free FLV Converter\unins000.exe - ok

16:15:50.0400 4936  [ 3503086CB4BDFE9F49E8A05C5974B64C ] C:\Program Files\Fussballdaten\Das Fussball Studio.exe

16:15:50.0400 4936  C:\Program Files\Fussballdaten\Das Fussball Studio.exe - ok

16:15:50.0404 4936  [ BA77F9D00BC4AEC9BD74287A0B8CBF8C ] C:\Program Files\Fussballdaten\uninst\unins000.exe

16:15:50.0404 4936  C:\Program Files\Fussballdaten\uninst\unins000.exe - ok

16:15:50.0407 4936  [ 4304D04DFDAAE621171A2F955981016E ] C:\Program Files\Microsoft Games\Chess\Chess.exe

16:15:50.0407 4936  C:\Program Files\Microsoft Games\Chess\Chess.exe - ok

16:15:50.0410 4936  [ 21AD332BE723EFE40D9F32AD97BA8376 ] C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

16:15:50.0410 4936  C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe - ok

16:15:50.0414 4936  [ 6ED28075D6D9E0C0464048A30432A142 ] C:\Program Files\Microsoft Games\Hearts\Hearts.exe

16:15:50.0414 4936  C:\Program Files\Microsoft Games\Hearts\Hearts.exe - ok

16:15:50.0417 4936  [ EFF7DBEE92519EB96F70E1E31FDE7098 ] C:\Program Files\Microsoft Games\inkball\inkball.exe

16:15:50.0417 4936  C:\Program Files\Microsoft Games\inkball\inkball.exe - ok

16:15:50.0421 4936  [ 7A88900F2F11882FFCE3BF3D4EAEFB4B ] C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

16:15:50.0421 4936  C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe - ok

16:15:50.0425 4936  [ C8C383E6AA546780B2AD3034D6F6ACEF ] C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

16:15:50.0425 4936  C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe - ok

16:15:50.0429 4936  [ 3F903BDD206EB3C688651048B5E304E1 ] C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

16:15:50.0429 4936  C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe - ok

16:15:50.0433 4936  [ 07302F014858D038CB93CC349505D0E6 ] C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

16:15:50.0433 4936  C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe - ok

16:15:50.0437 4936  [ 401A203AB058DEC44BD44AA81BF2CB64 ] C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

16:15:50.0437 4936  C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe - ok

16:15:50.0441 4936  [ E93718335BA5177FBB2686222797A25D ] C:\Program Files\GnuWin32\uninstall\unins001.exe

16:15:50.0441 4936  C:\Program Files\GnuWin32\uninstall\unins001.exe - ok

16:15:50.0445 4936  [ 3DBF2E7B6547D375BF14A7798C3C326D ] C:\Program Files\GnuWin32\uninstall\unins000.exe

16:15:50.0445 4936  C:\Program Files\GnuWin32\uninstall\unins000.exe - ok

16:15:50.0448 4936  [ 381C46A1D7FCEB672322110E2D70BCB1 ] C:\Program Files\GnuWin32\uninstall\unins002.exe

16:15:50.0448 4936  C:\Program Files\GnuWin32\uninstall\unins002.exe - ok

16:15:50.0451 4936  [ 3A328CB15D17D42963F82A47EE440FA8 ] C:\Program Files\GnuWin32\uninstall\unins003.exe

16:15:50.0451 4936  C:\Program Files\GnuWin32\uninstall\unins003.exe - ok

16:15:50.0454 4936  [ CC82F27B8B8FB7DFE57C3C308BCADB91 ] C:\Program Files\Google\Google SketchUp 8\SketchUp.exe

16:15:50.0454 4936  C:\Program Files\Google\Google SketchUp 8\SketchUp.exe - ok

16:15:50.0458 4936  [ 77CE82E61CC16F897F346B295ADC17D8 ] C:\Program Files\Google\Google Updater\GoogleUpdater.exe

16:15:50.0458 4936  C:\Program Files\Google\Google Updater\GoogleUpdater.exe - ok

16:15:50.0463 4936  [ 08BC7211E4E06A47CAC85D5A73D006E2 ] C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}\wksss.exe

16:15:50.0463 4936  C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}\wksss.exe - ok

16:15:50.0467 4936  [ 17A2B73C49E5DB385BE0E1EF043532B4 ] C:\Program Files\Common Files\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_2_2_0_2\Setup.exe

16:15:50.0467 4936  C:\Program Files\Common Files\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_2_2_0_2\Setup.exe - ok

16:15:50.0470 4936  [ F3B3EE66CA76C94510555ABE9D00A353 ] C:\Windows\System32\Macromed\Flash\Flash9b.ocx

16:15:50.0470 4936  C:\Windows\System32\Macromed\Flash\Flash9b.ocx - ok

16:15:50.0474 4936  [ 21CAE7856620D941DDA2BF06E784A862 ] C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\PIFSvc.exe

16:15:50.0474 4936  C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\PIFSvc.exe - ok

16:15:50.0478 4936  [ 292FDD3B57119D7E5877286D4CBD44B6 ] C:\Program Files\Norton 360\ScanStub.exe

16:15:50.0478 4936  C:\Program Files\Norton 360\ScanStub.exe - ok

16:15:50.0481 4936  [ D7F17CAA1C861C32B13DFD06FDE7F19F ] C:\Program Files\Norton 360\MAINSTUB.EXE

16:15:50.0481 4936  C:\Program Files\Norton 360\MAINSTUB.EXE - ok

16:15:50.0484 4936  [ 2277871D6CAB9FBBE90EA0F51166143A ] C:\hp\support\HPSysInfo.exe

16:15:50.0484 4936  C:\hp\support\HPSysInfo.exe - ok

16:15:50.0487 4936  [ 45632BE6626256FBB5E7C45567B8E885 ] C:\Windows\SMINST\Restore7.exe

christoph03

22.10.2012 14:21

Code:

ndows\SMINST\Restore7.exe - ok

16:15:50.0490 4936  [ 6007A834CBEB1B192429E40F882C92A1 ] C:\Python26\Lib\site-packages\PyQt4\assistant.exe

16:15:50.0490 4936  C:\Python26\Lib\site-packages\PyQt4\assistant.exe - ok

16:15:50.0494 4936  [ AF300FE9A937520A8D797607FCEBE4BB ] C:\Python26\Lib\site-packages\PyQt4\designer.exe

16:15:50.0494 4936  C:\Python26\Lib\site-packages\PyQt4\designer.exe - ok

16:15:50.0497 4936  [ DEFF34F6F3B4F2991FE8F82B8057C171 ] C:\Program Files\ReconLabLE1.2\PointViewer3d.exe

16:15:50.0497 4936  C:\Program Files\ReconLabLE1.2\PointViewer3d.exe - ok

16:15:50.0499 4936  [ 95BF86F668D1082069DF7EB6C0C5F04F ] C:\ReconLabMaterial\ReconLabDemo2.exe

16:15:50.0499 4936  C:\ReconLabMaterial\ReconLabDemo2.exe - ok

16:15:50.0503 4936  [ A75A03E2FE261297C3CBB128C32BE3D8 ] C:\Windows\GPInstall.exe

16:15:50.0503 4936  C:\Windows\GPInstall.exe - ok

16:15:50.0506 4936  [ AAC71D5A33D15AC60DD878290FD7B2C5 ] C:\Program Files\Ultimate Papercraft3D\unins000.exe

16:15:50.0506 4936  C:\Program Files\Ultimate Papercraft3D\unins000.exe - ok

16:15:50.0509 4936  [ 6A94279FBFB5095BC505FD1CB7BAB65D ] C:\Program Files\LigaChampion\LigaChampion.exe

16:15:50.0510 4936  C:\Program Files\LigaChampion\LigaChampion.exe - ok

16:15:50.0513 4936  [ 04DA441BBF1BE78FF4E6D65245BB56CF ] C:\Program Files\Windows Media Components\Encoder\wmenc.exe

16:15:50.0513 4936  C:\Program Files\Windows Media Components\Encoder\wmenc.exe - ok

16:15:50.0517 4936  [ A65F84B50317427C58A14C1C3ACD8AA2 ] C:\Program Files\Windows Media Components\Encoder\wmeditor.exe

16:15:50.0517 4936  C:\Program Files\Windows Media Components\Encoder\wmeditor.exe - ok

16:15:50.0520 4936  [ 4EA314A1B26257B0A8724E2BF65B53C7 ] C:\Program Files\Windows Media Components\Encoder\WMProEdt.exe

16:15:50.0520 4936  C:\Program Files\Windows Media Components\Encoder\WMProEdt.exe - ok

16:15:50.0524 4936  [ BAE963F318A4E269799C1E04CF9E4056 ] C:\Program Files\Windows Media Components\Encoder\wmstreamedt.exe

16:15:50.0524 4936  C:\Program Files\Windows Media Components\Encoder\wmstreamedt.exe - ok

16:15:50.0528 4936  [ F5571168828BA68B5341D6C12EFB9EFF ] C:\Program Files\Wondershare\Streaming Video Recorder\unins000.exe

16:15:50.0528 4936  C:\Program Files\Wondershare\Streaming Video Recorder\unins000.exe - ok

16:15:50.0532 4936  [ F21F255B91CA4F04E4250DECD2067CBB ] C:\Windows\System32\bitsperf.dll

16:15:50.0532 4936  C:\Windows\System32\bitsperf.dll - ok

16:15:50.0536 4936  [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:15:50.0536 4936  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok

16:15:50.0539 4936  [ 632557F2495931D952161465AA177B3B ] C:\Windows\System32\bitsigd.dll

16:15:50.0539 4936  C:\Windows\System32\bitsigd.dll - ok

16:15:50.0542 4936  [ E5F7C30EDF0892667933BE879F067D67 ] C:\Windows\System32\msvcr100_clr0400.dll

16:15:50.0542 4936  C:\Windows\System32\msvcr100_clr0400.dll - ok

16:15:50.0545 4936  [ E18FE2168C8712EF4FF2191059158FAB ] C:\Windows\ehome\ehrec.exe

16:15:50.0545 4936  C:\Windows\ehome\ehrec.exe - ok

16:15:50.0548 4936  [ 77784A2BD5912A4EC6284255865526BC ] C:\Windows\System32\Faultrep.dll

16:15:50.0549 4936  C:\Windows\System32\Faultrep.dll - ok

16:15:50.0552 4936  [ 8590BDF8F3B5EACAEEA5559CEC9647BF ] C:\Windows\ehome\ehtrace.dll

16:15:50.0552 4936  C:\Windows\ehome\ehtrace.dll - ok

16:15:50.0555 4936  [ 14E9E1A4472C7D0BB7A2A7A26D60CB35 ] C:\Windows\System32\sbe.dll

16:15:50.0555 4936  C:\Windows\System32\sbe.dll - ok

16:15:50.0558 4936  [ 73F97C8899429EFAEE8C8944DCC08C2E ] C:\Windows\System32\MSVidCtl.dll

16:15:50.0558 4936  C:\Windows\System32\MSVidCtl.dll - ok

16:15:50.0561 4936  [ 44B9C62C32CDA7A62BCFE65DDF4D92C4 ] C:\Windows\System32\msdri.dll

16:15:50.0561 4936  C:\Windows\System32\msdri.dll - ok

16:15:50.0565 4936  [ C42AE64F5DB6BC5E947B7E3E1B1E633E ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

16:15:50.0565 4936  C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - ok

16:15:50.0568 4936  [ 3B1AEFEFF02479F5A5D772494AFA5DFF ] C:\Windows\ehome\ehprivjob.exe

16:15:50.0568 4936  C:\Windows\ehome\ehprivjob.exe - ok

16:15:50.0571 4936  [ B5EF1DA337DB9859709A387638AC5E07 ] C:\Windows\System32\SearchProtocolHost.exe

16:15:50.0571 4936  C:\Windows\System32\SearchProtocolHost.exe - ok

16:15:50.0574 4936  [ 7CAC10A1C258DFCB5ADE563BAE6D2F15 ] C:\hp\KBD\kbd.exe

16:15:50.0574 4936  C:\hp\KBD\kbd.exe - ok

16:15:50.0577 4936  [ F68A3F0D63BE926ED65ED1C8C5B03A3D ] C:\hp\KBD\led.dll

16:15:50.0577 4936  C:\hp\KBD\led.dll - ok

16:15:50.0580 4936  [ F21E49604278F016CEDBD03DCD182111 ] C:\hp\KBD\usb.dll

16:15:50.0580 4936  C:\hp\KBD\usb.dll - ok

16:15:50.0584 4936  [ 015A9D857726C083144CA352A273378A ] C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll

16:15:50.0584 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll - ok

16:15:50.0587 4936  [ 1F847CEB90DF6BF6E0EDAED904B1E7C8 ] C:\hp\KBD\PS2.dll

16:15:50.0587 4936  C:\hp\KBD\PS2.dll - ok

16:15:50.0590 4936  [ 582BE479E7E286BB3B31C5A4C3DC3987 ] C:\Windows\System32\msshooks.dll

16:15:50.0590 4936  C:\Windows\System32\msshooks.dll - ok

16:15:50.0594 4936  [ 80F1DD93D493DC80A12620E352D73BE3 ] C:\hp\KBD\msg.dll

16:15:50.0594 4936  C:\hp\KBD\msg.dll - ok

16:15:50.0597 4936  [ 771AF583BC58373A84496CCD52C36E33 ] C:\Windows\System32\mssvp.dll

16:15:50.0597 4936  C:\Windows\System32\mssvp.dll - ok

16:15:50.0600 4936  [ 1E03BABB4D6CA5C27BD2C822F7F95788 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll

16:15:50.0600 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll - ok

16:15:50.0604 4936  [ 98C77FD99F3DB37B2C03F32B8F837B65 ] C:\Windows\System32\mapi32.dll

16:15:50.0604 4936  C:\Windows\System32\mapi32.dll - ok

16:15:50.0607 4936  [ 351319EF11C263C95FB721AC76F436D6 ] C:\Windows\System32\mssph.dll

16:15:50.0607 4936  C:\Windows\System32\mssph.dll - ok

16:15:50.0610 4936  [ A1CD5CE96F0A5426DB9A2F793854D1B8 ] C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL

16:15:50.0610 4936  C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL - ok

16:15:50.0613 4936  [ 58A18482F445D1C8DD51A1BC29251F61 ] C:\Windows\System32\msfeeds.dll

16:15:50.0613 4936  C:\Windows\System32\msfeeds.dll - ok

16:15:50.0616 4936  [ 0561DE1F7D0D8BA1460719EC4781D496 ] C:\hp\KBD\OSD.DLL

16:15:50.0616 4936  C:\hp\KBD\OSD.DLL - ok

16:15:50.0619 4936  [ 63EB7CB031056E43792A1D2910A79DE1 ] C:\hp\KBD\sct.dll

16:15:50.0619 4936  C:\hp\KBD\sct.dll - ok

16:15:50.0623 4936  [ 44AEC55B120A53A362D22A59C90CE604 ] C:\hp\KBD\Onl.dll

16:15:50.0623 4936  C:\hp\KBD\Onl.dll - ok

16:15:50.0626 4936  [ 6CF34B0F4DFBF541DB299CCFAC445A04 ] C:\hp\KBD\cfg.dll

16:15:50.0626 4936  C:\hp\KBD\cfg.dll - ok

16:15:50.0629 4936  [ 57D46FEDF6BF2DDE8CD4746F0684BE58 ] C:\hp\KBD\msikbdif.dll

16:15:50.0629 4936  C:\hp\KBD\msikbdif.dll - ok

16:15:50.0632 4936  [ C9EE7FF225EAC1CB9C78C413667CDB80 ] C:\Windows\System32\SearchFilterHost.exe

16:15:50.0633 4936  C:\Windows\System32\SearchFilterHost.exe - ok

16:15:50.0636 4936  [ 7CA207D4AC48C29B15F438007B206BD8 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\b7bef07ca1e5abb7a55dbbbc318903fe\ehRecObj.ni.dll

16:15:50.0636 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\b7bef07ca1e5abb7a55dbbbc318903fe\ehRecObj.ni.dll - ok

16:15:50.0640 4936  [ 0D83C896BEFE6EAF7DADF000A72C8FCE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehCIR\2794be5c73dd6a6efe1ec1c5e8396024\ehCIR.ni.dll

16:15:50.0640 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehCIR\2794be5c73dd6a6efe1ec1c5e8396024\ehCIR.ni.dll - ok

16:15:50.0644 4936  [ 2EE0A52FC639197149C7C07B1B8C8F63 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\286a98a691096f98d57f0f9cb9d03690\ehiProxy.ni.dll

16:15:50.0644 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\286a98a691096f98d57f0f9cb9d03690\ehiProxy.ni.dll - ok

16:15:50.0648 4936  [ 0C6461D8257F1EB751BC54B5C1FE70D9 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\00d9844d50e9752452263da331a3fd8c\ehepg.ni.dll

16:15:50.0648 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\00d9844d50e9752452263da331a3fd8c\ehepg.ni.dll - ok

16:15:50.0651 4936  [ AAE663A7E21EDEB523E52A4FF7E60C6C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\7bb80e892853c7ddec7925a7278c03ea\ehepgdat.ni.dll

16:15:50.0651 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\7bb80e892853c7ddec7925a7278c03ea\ehepgdat.ni.dll - ok

16:15:50.0655 4936  [ A3DF38B8A309013B6163B5ED22E76DCE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cf100c0c1510f5c7bb1e17f2f359883c\Microsoft.MediaCenter.UI.ni.dll

16:15:50.0655 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cf100c0c1510f5c7bb1e17f2f359883c\Microsoft.MediaCenter.UI.ni.dll - ok

16:15:50.0659 4936  [ B8876BBA284DFEC2311D7694483AB8AE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll

16:15:50.0659 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll - ok

16:15:50.0663 4936  [ 99495E46CBF87F1C1FF3E57C069D0A8D ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll

16:15:50.0663 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll - ok

16:15:50.0666 4936  [ 8007E7DA344BAD40724072A5DCCB9143 ] C:\Windows\ehome\ehepgres.dll

16:15:50.0666 4936  C:\Windows\ehome\ehepgres.dll - ok

16:15:50.0669 4936  [ 4A938E44BEB41641B70175DACAB1BBB0 ] C:\Windows\ehome\ehProxy.dll

16:15:50.0669 4936  C:\Windows\ehome\ehProxy.dll - ok

16:15:50.0672 4936  [ 0518C7E0FF61F01D3A73D87728A14D46 ] C:\Windows\ehome\ehui.dll

16:15:50.0672 4936  C:\Windows\ehome\ehui.dll - ok

16:15:50.0675 4936  [ AAAE543C535ED596ECAD2AB8761C2C6F ] C:\Windows\System32\dxgi.dll

16:15:50.0675 4936  C:\Windows\System32\dxgi.dll - ok

16:15:50.0678 4936  [ 9359C7DFD426847FC6BE19EC501FE177 ] C:\Program Files\Google\Update\1.3.21.123\goopdateres_es.dll

16:15:50.0678 4936  C:\Program Files\Google\Update\1.3.21.123\goopdateres_es.dll - ok

16:15:50.0682 4936  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:15:50.0682 4936  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - ok

16:15:50.0685 4936  [ 3A72AB0BAF2DC1AE0BA6E1EE28FFCC0B ] C:\Windows\System32\msftedit.dll

16:15:50.0685 4936  C:\Windows\System32\msftedit.dll - ok

16:15:50.0689 4936  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

16:15:50.0689 4936  C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe - ok

16:15:50.0692 4936  [ 2062FABCC7D3DD90BD4EAA1F314551B0 ] C:\Windows\ehome\ehRecObj.dll

16:15:50.0692 4936  C:\Windows\ehome\ehRecObj.dll - ok

16:15:50.0695 4936  [ 219AF0F9A54EBEEB3E7E20025D801034 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

16:15:50.0695 4936  C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - ok

16:15:50.0699 4936  [ 4C45A24152681A0968510B0D593BE33C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\bfdd10e0a0aacf46bac557ffc5d55ba5\System.Data.ni.dll

16:15:50.0699 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\bfdd10e0a0aacf46bac557ffc5d55ba5\System.Data.ni.dll - ok

16:15:50.0702 4936  [ 076C28F6B6870568404AAB773126A54C ] C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll

16:15:50.0702 4936  C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll - ok

16:15:50.0706 4936  [ 3787A4BC97CE6C630F4B581425223D96 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

16:15:50.0706 4936  C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - ok

16:15:50.0710 4936  [ 708A3BBDBFF717F678B64854B7BAF9D3 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll

16:15:50.0710 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll - ok

16:15:50.0713 4936  [ 5CAD3395A4720BF735836D125297229A ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll

16:15:50.0713 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll - ok

16:15:50.0717 4936  [ 0775A7424B1828AD1452BAE43F7069A8 ] C:\Windows\assembly\GAC_MSIL\HP.ActiveSupportLibrary\2.0.0.1__01a974bc1760f423\HP.ActiveSupportLibrary.dll

16:15:50.0717 4936  C:\Windows\assembly\GAC_MSIL\HP.ActiveSupportLibrary\2.0.0.1__01a974bc1760f423\HP.ActiveSupportLibrary.dll - ok

16:15:50.0720 4936  [ 7922FCB95D96E2B908934C4B34A413D0 ] C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll

16:15:50.0721 4936  C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll - ok

16:15:50.0724 4936  [ 8078F8F8F7A79E2E6B494523A828C585 ] C:\Windows\System32\msdtckrm.dll

16:15:50.0724 4936  C:\Windows\System32\msdtckrm.dll - ok

16:15:50.0728 4936  [ 506B6592BF6116521F152DCCB39A6143 ] C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

16:15:50.0728 4936  C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - ok

16:15:50.0731 4936  [ E9FBD0E51A0BE65A623AFB1706C52499 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.ni.dll

16:15:50.0731 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.ni.dll - ok

16:15:50.0735 4936  [ 3E00D032E2BEB9FB5439ABED0DD30A7B ] C:\Windows\System32\sqlceoledb30.dll

16:15:50.0735 4936  C:\Windows\System32\sqlceoledb30.dll - ok

16:15:50.0738 4936  [ F0F5C6F147E1224CA4038D9C22147A5B ] C:\Windows\System32\sqlcese30.dll

16:15:50.0738 4936  C:\Windows\System32\sqlcese30.dll - ok

16:15:50.0741 4936  [ E565C65391CDABF0870E9640815C03FF ] C:\Windows\System32\sqlceqp30.dll

16:15:50.0741 4936  C:\Windows\System32\sqlceqp30.dll - ok

16:15:50.0745 4936  [ 5E41139EC6EFBCAFFD96D46925E544AB ] C:\Windows\System32\mspatcha.dll

16:15:50.0745 4936  C:\Windows\System32\mspatcha.dll - ok

16:15:50.0748 4936  [ 1D40A5268C1517BC445BA0053584C4AA ] C:\Windows\System32\SLCExt.dll

16:15:50.0748 4936  C:\Windows\System32\SLCExt.dll - ok

16:15:50.0750 4936  [ 3458EDA96E30FBD0477A2800D3FB1909 ] C:\Windows\System32\wups.dll

16:15:50.0750 4936  C:\Windows\System32\wups.dll - ok

16:15:50.0753 4936  [ BDC0C99E472176C8C2C853A68ADC5073 ] C:\Windows\System32\wups2.dll

16:15:50.0753 4936  C:\Windows\System32\wups2.dll - ok

16:15:50.0757 4936  [ 4FC9CE1201AD13B842B685AC2894AA95 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e20f2a67e463b0096433b4473c5aedfe\BDATunePIA.ni.dll

16:15:50.0757 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e20f2a67e463b0096433b4473c5aedfe\BDATunePIA.ni.dll - ok

16:15:50.0761 4936  [ F2DED1ED348E6C2397A14BCAB7E3CD7D ] C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll

16:15:50.0761 4936  C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll - ok

16:15:50.0765 4936  [ 1208C93D21971CD07FF5A5BF0891496C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\67ddb639b0e4210abaf7d19d72013cb5\ehiPlay.ni.dll

16:15:50.0765 4936  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\67ddb639b0e4210abaf7d19d72013cb5\ehiPlay.ni.dll - ok

16:15:50.0768 4936  [ 421613767407C639E9E115B092A0EE3B ] C:\Windows\System32\sbeio.dll

16:15:50.0768 4936  C:\Windows\System32\sbeio.dll - ok

16:15:50.0770 4936  ============================================================

16:15:50.0770 4936  Scan finished

16:15:50.0770 4936  ============================================================

16:15:50.0777 0292  Detected object count: 11

16:15:50.0777 0292  Actual detected object count: 11

16:18:21.0963 0292  FMS ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0963 0292  FMS ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0965 0292  FMSAdmin ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0965 0292  FMSAdmin ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0966 0292  FMSHttpd ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0966 0292  FMSHttpd ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0968 0292  HP Health Check Service ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0968 0292  HP Health Check Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0969 0292  hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0970 0292  hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0971 0292  hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0971 0292  hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0972 0292  HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0972 0292  HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0974 0292  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0974 0292  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0975 0292  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0975 0292  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0977 0292  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0977 0292  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:18:21.0978 0292  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user

16:18:21.0978 0292  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:19:39.0338 7980  ============================================================

16:19:39.0338 7980  Scan started

16:19:39.0338 7980  Mode: Manual; SigCheck; TDLFS; 

16:19:39.0338 7980  ============================================================

16:19:39.0942 7980  ================ Scan system memory ========================

16:19:39.0942 7980  System memory - ok

16:19:39.0943 7980  ================ Scan services =============================

16:19:40.0168 7980  [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI            C:\Windows\system32\drivers\acpi.sys

16:19:40.0201 7980  ACPI - ok

16:19:40.0248 7980  [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

16:19:40.0278 7980  adp94xx - ok

16:19:40.0303 7980  [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci         C:\Windows\system32\drivers\adpahci.sys

16:19:40.0333 7980  adpahci - ok

16:19:40.0339 7980  [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

16:19:40.0359 7980  adpu160m - ok

16:19:40.0390 7980  [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320         C:\Windows\system32\drivers\adpu320.sys

16:19:40.0410 7980  adpu320 - ok

16:19:40.0445 7980  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

16:19:40.0474 7980  AeLookupSvc - ok

16:19:40.0540 7980  [ 3911B972B55FEA0478476B2E777B29FA ] AFD             C:\Windows\system32\drivers\afd.sys

16:19:40.0570 7980  AFD - ok

16:19:40.0599 7980  [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440          C:\Windows\system32\drivers\agp440.sys

16:19:40.0618 7980  agp440 - ok

16:19:40.0648 7980  [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

16:19:40.0667 7980  aic78xx - ok

16:19:40.0700 7980  [ A1545B731579895D8CC44FC0481C1192 ] ALG             C:\Windows\System32\alg.exe

16:19:40.0736 7980  ALG - ok

16:19:40.0771 7980  [ C392B591746961B60F89FE1CBCA7B4FB ] aliide          C:\Windows\system32\drivers\aliide.sys

16:19:40.0791 7980  aliide - ok

16:19:40.0828 7980  [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

16:19:40.0847 7980  amdagp - ok

16:19:40.0888 7980  [ F5F8D2885D1DF33C74764EA2C06C0028 ] amdide          C:\Windows\system32\drivers\amdide.sys

16:19:40.0907 7980  amdide - ok

16:19:40.0912 7980  [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

16:19:40.0962 7980  AmdK7 - ok

16:19:40.0967 7980  [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

16:19:41.0017 7980  AmdK8 - ok

16:19:41.0051 7980  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo         C:\Windows\System32\appinfo.dll

16:19:41.0073 7980  Appinfo - ok

16:19:41.0089 7980  [ 5F673180268BB1FDB69C99B6619FE379 ] arc             C:\Windows\system32\drivers\arc.sys

16:19:41.0108 7980  arc - ok

16:19:41.0121 7980  [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

16:19:41.0140 7980  arcsas - ok

16:19:41.0199 7980  [ 40C145F12FF461A0220303BDA134F598 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

16:19:41.0243 7980  aspnet_state - ok

16:19:41.0265 7980  [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

16:19:41.0295 7980  AsyncMac - ok

16:19:41.0307 7980  [ BFD3DF48C9ED81934FE21E8E3CFC2496 ] atapi           C:\Windows\system32\drivers\atapi.sys

16:19:41.0331 7980  atapi - ok

16:19:41.0378 7980  [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:19:41.0439 7980  AudioEndpointBuilder - ok

16:19:41.0445 7980  [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv        C:\Windows\System32\Audiosrv.dll

16:19:41.0507 7980  Audiosrv - ok

16:19:41.0574 7980  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:19:41.0605 7980  Automatic LiveUpdate Scheduler - ok

16:19:41.0631 7980  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep            C:\Windows\system32\drivers\Beep.sys

16:19:41.0659 7980  Beep - ok

16:19:41.0692 7980  [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE             C:\Windows\System32\bfe.dll

16:19:41.0724 7980  BFE - ok

16:19:41.0771 7980  [ 93952506C6D67330367F7E7934B6A02F ] BITS            C:\Windows\System32\qmgr.dll

16:19:41.0809 7980  BITS - ok

16:19:41.0814 7980  blbdrive - ok

16:19:41.0842 7980  [ 35F376253F687BDE63976CCB3F2108CA ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

16:19:41.0864 7980  bowser - ok

16:19:41.0893 7980  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

16:19:41.0920 7980  BrFiltLo - ok

16:19:41.0925 7980  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

16:19:41.0952 7980  BrFiltUp - ok

16:19:41.0977 7980  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser         C:\Windows\System32\browser.dll

16:19:42.0015 7980  Browser - ok

16:19:42.0020 7980  [ B304E75CFF293029EDDF094246747113 ] Brserid         C:\Windows\system32\drivers\brserid.sys

16:19:42.0071 7980  Brserid - ok

16:19:42.0091 7980  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

16:19:42.0145 7980  BrSerWdm - ok

16:19:42.0151 7980  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

16:19:42.0200 7980  BrUsbMdm - ok

16:19:42.0205 7980  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

16:19:42.0251 7980  BrUsbSer - ok

16:19:42.0285 7980  [ 6D39C954799B63BA866910234CF7D726 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

16:19:42.0307 7980  BthEnum - ok

16:19:42.0313 7980  [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

16:19:42.0359 7980  BTHMODEM - ok

16:19:42.0399 7980  [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

16:19:42.0431 7980  BthPan - ok

16:19:42.0478 7980  [ 73D53F8E90550BA81E2CF44A0873B410 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

16:19:42.0513 7980  BTHPORT - ok

16:19:42.0554 7980  [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ         C:\Windows\System32\bthserv.dll

16:19:42.0574 7980  BthServ - ok

16:19:42.0607 7980  [ 32045A4BB143BBC5BAB1298C4E9E309A ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

16:19:42.0628 7980  BTHUSB - ok

16:19:42.0696 7980  [ 1778EBA872274C1226D869CD9486847E ] Capture Device Service C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:19:42.0726 7980  Capture Device Service - ok

16:19:42.0764 7980  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccEvtMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:19:42.0809 7980  ccEvtMgr - ok

16:19:42.0814 7980  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccSetMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:19:42.0859 7980  ccSetMgr - ok

16:19:42.0883 7980  [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

16:19:42.0918 7980  cdfs - ok

16:19:42.0957 7980  [ 6B4BFFB9BECD728097024276430DB314 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

16:19:42.0991 7980  cdrom - ok

16:19:43.0041 7980  [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc     C:\Windows\System32\certprop.dll

16:19:43.0069 7980  CertPropSvc - ok

16:19:43.0105 7980  [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass        C:\Windows\system32\drivers\circlass.sys

16:19:43.0156 7980  circlass - ok

16:19:43.0198 7980  [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS            C:\Windows\system32\CLFS.sys

16:19:43.0223 7980  CLFS - ok

16:19:43.0254 7980  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:19:43.0300 7980  clr_optimization_v2.0.50727_32 - ok

16:19:43.0381 7980  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:19:43.0413 7980  clr_optimization_v4.0.30319_32 - ok

16:19:43.0431 7980  [ 2F237AAB91497AAA03AF48EAE68758FC ] CLTNetCnService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:19:43.0482 7980  CLTNetCnService - ok

16:19:43.0488 7980  [ 78D56FE738F63D7FEFCC7B396C5DCB67 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

16:19:43.0511 7980  cmdide - ok

16:19:43.0551 7980  [ 6186B6B953BDC884F0F379B84B3E3A98 ] COH_Mon         C:\Windows\system32\Drivers\COH_Mon.sys

16:19:43.0570 7980  COH_Mon - ok

16:19:43.0632 7980  [ 75A69CA9998577F8B2BE8695040E5DF4 ] comHost         C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

16:19:43.0662 7980  comHost - ok

16:19:43.0690 7980  [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

16:19:43.0715 7980  Compbatt - ok

16:19:43.0721 7980  COMSysApp - ok

16:19:43.0742 7980  [ 73F5D6835BFA66019C03E316D99649DA ] CO_Mon          C:\Windows\system32\drivers\CO_Mon.sys

16:19:43.0763 7980  CO_Mon - ok

16:19:43.0790 7980  [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

16:19:43.0815 7980  crcdisk - ok

16:19:43.0821 7980  [ 22A7F883508176489F559EE745B5BF5D ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

16:19:43.0887 7980  Crusoe - ok

16:19:43.0917 7980  [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

16:19:43.0949 7980  CryptSvc - ok

16:19:43.0996 7980  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch      C:\Windows\system32\rpcss.dll

16:19:44.0045 7980  DcomLaunch - ok

16:19:44.0090 7980  [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

16:19:44.0124 7980  DfsC - ok

16:19:44.0199 7980  [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR            C:\Windows\system32\DFSR.exe

16:19:44.0284 7980  DFSR - ok

16:19:44.0351 7980  [ 9028559C132146FB75EB7ACF384B086A ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

16:19:44.0393 7980  Dhcp - ok

16:19:44.0451 7980  [ 5D4AEFC3386920236A548271F8F1AF6A ] disk            C:\Windows\system32\drivers\disk.sys

16:19:44.0481 7980  disk - ok

16:19:44.0538 7980  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache        C:\Windows\System32\dnsrslvr.dll

16:19:44.0569 7980  Dnscache - ok

16:19:44.0622 7980  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc         C:\Windows\System32\dot3svc.dll

16:19:44.0663 7980  dot3svc - ok

16:19:44.0705 7980  [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

16:19:44.0751 7980  Dot4 - ok

16:19:44.0776 7980  [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

16:19:44.0818 7980  Dot4Print - ok

16:19:44.0833 7980  [ C55004CA6B419B6695970DFE849B122F ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

16:19:44.0876 7980  dot4usb - ok

16:19:44.0896 7980  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS             C:\Windows\system32\dps.dll

16:19:44.0942 7980  DPS - ok

16:19:44.0976 7980  [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

16:19:45.0011 7980  drmkaud - ok

16:19:45.0060 7980  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

16:19:45.0107 7980  DXGKrnl - ok

16:19:45.0131 7980  [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

16:19:45.0200 7980  E1G60 - ok

16:19:45.0225 7980  [ C0B95E40D85CD807D614E264248A45B9 ] EapHost         C:\Windows\System32\eapsvc.dll

16:19:45.0252 7980  EapHost - ok

16:19:45.0284 7980  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache          C:\Windows\system32\drivers\ecache.sys

16:19:45.0308 7980  Ecache - ok

16:19:45.0336 7980  [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl          C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:19:45.0363 7980  eeCtrl - ok

16:19:45.0402 7980  [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

16:19:45.0451 7980  ehRecvr - ok

16:19:45.0466 7980  [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched         C:\Windows\ehome\ehsched.exe

16:19:45.0525 7980  ehSched - ok

16:19:45.0532 7980  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart         C:\Windows\ehome\ehstart.dll

16:19:45.0551 7980  ehstart - ok

16:19:45.0573 7980  [ E8F3F21A71720C84BCF423B80028359F ] elxstor         C:\Windows\system32\drivers\elxstor.sys

16:19:45.0598 7980  elxstor - ok

16:19:45.0638 7980  [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

16:19:45.0692 7980  EMDMgmt - ok

16:19:45.0742 7980  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:19:45.0762 7980  EraserUtilRebootDrv - ok

16:19:45.0815 7980  [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem     C:\Windows\system32\es.dll

16:19:45.0850 7980  EventSystem - ok

16:19:45.0897 7980  [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat           C:\Windows\system32\drivers\exfat.sys

16:19:45.0937 7980  exfat - ok

16:19:45.0988 7980  [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

16:19:46.0023 7980  fastfat - ok

16:19:46.0056 7980  [ 63BDADA84951B9C03E641800E176898A ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

16:19:46.0113 7980  fdc - ok

16:19:46.0133 7980  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost         C:\Windows\system32\fdPHost.dll

16:19:46.0170 7980  fdPHost - ok

16:19:46.0191 7980  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub        C:\Windows\system32\fdrespub.dll

16:19:46.0247 7980  FDResPub - ok

16:19:46.0269 7980  [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

16:19:46.0294 7980  FileInfo - ok

16:19:46.0313 7980  [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

16:19:46.0353 7980  Filetrace - ok

16:19:46.0369 7980  [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

16:19:46.0426 7980  flpydisk - ok

16:19:46.0470 7980  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

16:19:46.0498 7980  FltMgr - ok

16:19:46.0606 7980  [ 8795FD92B624648DABE7B75129EF8002 ] FMS             C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:19:46.0694 7980  FMS ( UnsignedFile.Multi.Generic ) - warning

16:19:46.0694 7980  FMS - detected UnsignedFile.Multi.Generic (1)

16:19:46.0764 7980  [ 2DB70167C13F2339A63E694291FD1BFD ] FMSAdmin        C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:19:46.0859 7980  FMSAdmin ( UnsignedFile.Multi.Generic ) - warning

16:19:46.0859 7980  FMSAdmin - detected UnsignedFile.Multi.Generic (1)

16:19:46.0891 7980  [ 8881574868E648689B7AA88A88716E17 ] FMSHttpd        C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:19:46.0911 7980  FMSHttpd ( UnsignedFile.Multi.Generic ) - warning

16:19:46.0911 7980  FMSHttpd - detected UnsignedFile.Multi.Generic (1)

16:19:46.0952 7980  [ 8CE364388C8ECA59B14B539179276D44 ] FontCache       C:\Windows\system32\FntCache.dll

16:19:47.0000 7980  FontCache - ok

16:19:47.0082 7980  [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

16:19:47.0109 7980  FontCache3.0.0.0 - ok

16:19:47.0134 7980  [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

16:19:47.0163 7980  Fs_Rec - ok

16:19:47.0192 7980  [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

16:19:47.0219 7980  gagp30kx - ok

16:19:47.0245 7980  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] GEARAspiWDM     C:\Windows\system32\Drivers\GEARAspiWDM.sys

16:19:47.0266 7980  GEARAspiWDM - ok

16:19:47.0318 7980  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc           C:\Windows\System32\gpsvc.dll

16:19:47.0376 7980  gpsvc - ok

16:19:47.0436 7980  [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9942c2d4a157c C:\Program Files\Google\Update\GoogleUpdate.exe

16:19:47.0467 7980  gupdate1c9942c2d4a157c - ok

16:19:47.0472 7980  [ 626A24ED1228580B9518C01930936DF9 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

16:19:47.0502 7980  gupdatem - ok

16:19:47.0543 7980  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:19:47.0582 7980  gusvc - ok

16:19:47.0628 7980  [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

16:19:47.0677 7980  HDAudBus - ok

16:19:47.0714 7980  [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth          C:\Windows\system32\drivers\hidbth.sys

16:19:47.0778 7980  HidBth - ok

16:19:47.0785 7980  [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr           C:\Windows\system32\drivers\hidir.sys

16:19:47.0837 7980  HidIr - ok

16:19:47.0865 7980  [ 84067081F3318162797385E11A8F0582 ] hidserv         C:\Windows\system32\hidserv.dll

16:19:47.0887 7980  hidserv - ok

16:19:47.0905 7980  [ CCA4B519B17E23A00B826C55716809CC ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

16:19:47.0930 7980  HidUsb - ok

16:19:47.0946 7980  [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc          C:\Windows\system32\kmsvc.dll

16:19:47.0977 7980  hkmsvc - ok

16:19:48.0064 7980  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

16:19:48.0081 7980  HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning

16:19:48.0081 7980  HP Health Check Service - detected UnsignedFile.Multi.Generic (1)

16:19:48.0086 7980  [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

16:19:48.0106 7980  HpCISSs - ok

16:19:48.0171 7980  [ 58D4765AB87347DB835D5693ADF652C1 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:19:48.0188 7980  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

16:19:48.0188 7980  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

16:19:48.0227 7980  [ 99ED733F614660EB32199BF889DFB7E2 ] hpqddsvc        C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:19:48.0249 7980  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

16:19:48.0249 7980  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

16:19:48.0334 7980  [ 75F122CDCA3C71BD09089F2CA824B796 ] HPSLPSVC        C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:19:48.0365 7980  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

16:19:48.0365 7980  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

16:19:48.0409 7980  [ F870AA3E254628EBEAFE754108D664DE ] HTTP            C:\Windows\system32\drivers\HTTP.sys

16:19:48.0441 7980  HTTP - ok

16:19:48.0470 7980  [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

16:19:48.0495 7980  i2omp - ok

16:19:48.0523 7980  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

16:19:48.0562 7980  i8042prt - ok

16:19:48.0593 7980  [ 204A73A56751C68C6031E9D5D611EC98 ] IAANTMON        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

16:19:48.0631 7980  IAANTMON - ok

16:19:48.0655 7980  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] iaStor          C:\Windows\system32\drivers\iastor.sys

16:19:48.0680 7980  iaStor - ok

16:19:48.0695 7980  [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

16:19:48.0723 7980  iaStorV - ok

16:19:48.0782 7980  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

16:19:48.0803 7980  IDriverT ( UnsignedFile.Multi.Generic ) - warning

16:19:48.0803 7980  IDriverT - detected UnsignedFile.Multi.Generic (1)

16:19:48.0874 7980  [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

16:19:48.0934 7980  idsvc - ok

16:19:49.0036 7980  [ F85DC24DAFA76237722FE38B3196C61A ] IDSvix86        C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:19:49.0065 7980  IDSvix86 - ok

16:19:49.0095 7980  [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

16:19:49.0124 7980  iirsp - ok

16:19:49.0164 7980  [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT          C:\Windows\System32\ikeext.dll

16:19:49.0213 7980  IKEEXT - ok

16:19:49.0286 7980  [ EDC37B918E583A5A813C53D4F5588255 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

16:19:49.0372 7980  IntcAzAudAddService - ok

16:19:49.0412 7980  [ E08FB545EDA9D1E3CA689B4B3F6E4C22 ] intelide        C:\Windows\system32\drivers\intelide.sys

16:19:49.0439 7980  intelide - ok

16:19:49.0470 7980  [ 224191001E78C89DFA78924C3EA595FF ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

16:19:49.0513 7980  intelppm - ok

16:19:49.0529 7980  [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

16:19:49.0574 7980  IPBusEnum - ok

16:19:49.0594 7980  [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:19:49.0638 7980  IpFilterDriver - ok

16:19:49.0682 7980  [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

16:19:49.0732 7980  iphlpsvc - ok

16:19:49.0737 7980  IpInIp - ok

16:19:49.0766 7980  [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

16:19:49.0825 7980  IPMIDRV - ok

16:19:49.0844 7980  [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

16:19:49.0875 7980  IPNAT - ok

16:19:49.0895 7980  [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

16:19:49.0924 7980  IRENUM - ok

16:19:49.0929 7980  [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

16:19:49.0947 7980  isapnp - ok

16:19:49.0979 7980  [ 232FA340531D940AAC623B121A595034 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

16:19:50.0001 7980  iScsiPrt - ok

16:19:50.0031 7980  [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

16:19:50.0052 7980  iteatapi - ok

16:19:50.0056 7980  [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid         C:\Windows\system32\drivers\iteraid.sys

16:19:50.0074 7980  iteraid - ok

16:19:50.0104 7980  [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

16:19:50.0124 7980  kbdclass - ok

16:19:50.0151 7980  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

16:19:50.0178 7980  kbdhid - ok

16:19:50.0217 7980  [ A3E186B4B935905B829219502557314E ] KeyIso          C:\Windows\system32\lsass.exe

16:19:50.0276 7980  KeyIso - ok

16:19:50.0302 7980  [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

16:19:50.0331 7980  KSecDD - ok

16:19:50.0372 7980  [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm           C:\Windows\system32\msdtckrm.dll

16:19:50.0414 7980  KtmRm - ok

16:19:50.0444 7980  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] L8042Kbd        C:\Windows\system32\DRIVERS\L8042Kbd.sys

16:19:50.0462 7980  L8042Kbd - ok

16:19:50.0508 7980  [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer    C:\Windows\system32\srvsvc.dll

16:19:50.0537 7980  LanmanServer - ok

16:19:50.0574 7980  [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:19:50.0608 7980  LanmanWorkstation - ok

16:19:50.0679 7980  [ 3AF6B73A3AD1FC37C5933441F66CEB91 ] LBTServ         C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

16:19:50.0704 7980  LBTServ - ok

16:19:50.0730 7980  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

16:19:50.0748 7980  LHidFilt - ok

16:19:50.0786 7980  [ 9039717A906DA0AE38420918801D9AB3 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:19:50.0810 7980  LightScribeService - ok

16:19:50.0913 7980  [ 36375738DC0B3CD1F764268008E74FDF ] LiveUpdate      C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

16:19:51.0000 7980  LiveUpdate - ok

16:19:51.0021 7980  [ 2F237AAB91497AAA03AF48EAE68758FC ] LiveUpdate Notice C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:19:51.0063 7980  LiveUpdate Notice - ok

16:19:51.0083 7980  [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

16:19:51.0114 7980  lltdio - ok

16:19:51.0151 7980  [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

16:19:51.0183 7980  lltdsvc - ok

16:19:51.0224 7980  [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts         C:\Windows\System32\lmhsvc.dll

16:19:51.0270 7980  lmhosts - ok

16:19:51.0281 7980  [ AB33792A87285344F43B5CE23421BAB0 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

16:19:51.0298 7980  LMouFilt - ok

16:19:51.0327 7980  [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

16:19:51.0346 7980  LSI_FC - ok

16:19:51.0350 7980  [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

16:19:51.0368 7980  LSI_SAS - ok

16:19:51.0372 7980  [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

16:19:51.0391 7980  LSI_SCSI - ok

16:19:51.0415 7980  [ 8F5C7426567798E62A3B3614965D62CC ] luafv           C:\Windows\system32\drivers\luafv.sys

16:19:51.0447 7980  luafv - ok

16:19:51.0475 7980  [ 77030525CD86A93F1AF34FA9B96D33CE ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

16:19:51.0491 7980  LUsbFilt - ok

16:19:51.0503 7980  [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

16:19:51.0525 7980  Mcx2Svc - ok

16:19:51.0530 7980  [ D153B14FC6598EAE8422A2037553ADCE ] megasas         C:\Windows\system32\drivers\megasas.sys

16:19:51.0550 7980  megasas - ok

16:19:51.0562 7980  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS           C:\Windows\system32\mmcss.dll

16:19:51.0597 7980  MMCSS - ok

16:19:51.0617 7980  [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem           C:\Windows\system32\drivers\modem.sys

16:19:51.0648 7980  Modem - ok

16:19:51.0690 7980  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

16:19:51.0720 7980  monitor - ok

16:19:51.0759 7980  [ 5BF6A1326A335C5298477754A506D263 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

16:19:51.0778 7980  mouclass - ok

16:19:51.0800 7980  [ 93B8D4869E12CFBE663915502900876F ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

16:19:51.0831 7980  mouhid - ok

16:19:51.0858 7980  [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

16:19:51.0877 7980  MountMgr - ok

16:19:51.0896 7980  [ 583A41F26278D9E0EA548163D6139397 ] mpio            C:\Windows\system32\drivers\mpio.sys

16:19:51.0915 7980  mpio - ok

16:19:51.0937 7980  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

16:19:51.0964 7980  mpsdrv - ok

16:19:52.0007 7980  [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc          C:\Windows\system32\mpssvc.dll

16:19:52.0043 7980  MpsSvc - ok

16:19:52.0048 7980  [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

16:19:52.0068 7980  Mraid35x - ok

16:19:52.0116 7980  [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

16:19:52.0140 7980  MRxDAV - ok

16:19:52.0173 7980  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

16:19:52.0199 7980  mrxsmb - ok

16:19:52.0231 7980  [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:19:52.0261 7980  mrxsmb10 - ok

16:19:52.0283 7980  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:19:52.0311 7980  mrxsmb20 - ok

16:19:52.0343 7980  [ D537C241DB604FA86E46328DA0FD83D6 ] msahci          C:\Windows\system32\drivers\msahci.sys

16:19:52.0366 7980  msahci - ok

16:19:52.0382 7980  [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

16:19:52.0405 7980  msdsm - ok

16:19:52.0438 7980  [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC           C:\Windows\System32\msdtc.exe

16:19:52.0493 7980  MSDTC - ok

16:19:52.0540 7980  [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

16:19:52.0577 7980  Msfs - ok

16:19:52.0608 7980  [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

16:19:52.0633 7980  msisadrv - ok

16:19:52.0655 7980  [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

16:19:52.0700 7980  MSiSCSI - ok

16:19:52.0705 7980  msiserver - ok

16:19:52.0720 7980  [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

16:19:52.0761 7980  MSKSSRV - ok

16:19:52.0783 7980  [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

16:19:52.0824 7980  MSPCLOCK - ok

16:19:52.0835 7980  [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

16:19:52.0876 7980  MSPQM - ok

16:19:52.0907 7980  [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

16:19:52.0936 7980  MsRPC - ok

16:19:52.0956 7980  [ E384487CB84BE41D09711C30CA79646C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

16:19:52.0984 7980  mssmbios - ok

16:19:53.0062 7980  MSSQL$SQLEXPRESS - ok

16:19:53.0124 7980  [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

16:19:53.0186 7980  MSSQLServerADHelper100 - ok

16:19:53.0220 7980  [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

16:19:53.0261 7980  MSTEE - ok

16:19:53.0286 7980  [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup             C:\Windows\system32\Drivers\mup.sys

16:19:53.0315 7980  Mup - ok

16:19:53.0370 7980  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent        C:\Windows\system32\qagentRT.dll

16:19:53.0419 7980  napagent - ok

16:19:53.0469 7980  [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

16:19:53.0501 7980  NativeWifiP - ok

16:19:53.0585 7980  [ 8E4C77AD9BB279900C00F870CC0C674B ] NAVENG          C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:19:53.0609 7980  NAVENG - ok

16:19:53.0670 7980  [ 826F699B69E88A3920C70F344DD42D88 ] NAVEX15         C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:19:53.0729 7980  NAVEX15 - ok

16:19:53.0777 7980  [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS            C:\Windows\system32\drivers\ndis.sys

16:19:53.0823 7980  NDIS - ok

16:19:53.0852 7980  [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

16:19:53.0890 7980  NdisTapi - ok

16:19:53.0914 7980  [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

16:19:53.0957 7980  Ndisuio - ok

16:19:53.0994 7980  [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

16:19:54.0039 7980  NdisWan - ok

16:19:54.0078 7980  [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

16:19:54.0116 7980  NDProxy - ok

16:19:54.0141 7980  [ 19715A9A573DAD2521348ABC74266A48 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

16:19:54.0159 7980  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

16:19:54.0160 7980  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

16:19:54.0172 7980  [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

16:19:54.0215 7980  NetBIOS - ok

16:19:54.0245 7980  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

16:19:54.0294 7980  netbt - ok

16:19:54.0308 7980  [ A3E186B4B935905B829219502557314E ] Netlogon        C:\Windows\system32\lsass.exe

16:19:54.0342 7980  Netlogon - ok

16:19:54.0374 7980  [ C8052711DAECC48B982434C5116CA401 ] Netman          C:\Windows\System32\netman.dll

16:19:54.0412 7980  Netman - ok

16:19:54.0478 7980  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:19:54.0497 7980  NetMsmqActivator - ok

16:19:54.0501 7980  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:19:54.0520 7980  NetPipeActivator - ok

16:19:54.0556 7980  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm        C:\Windows\System32\netprofm.dll

16:19:54.0592 7980  netprofm - ok

16:19:54.0596 7980  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:19:54.0614 7980  NetTcpActivator - ok

16:19:54.0618 7980  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:19:54.0637 7980  NetTcpPortSharing - ok

16:19:54.0657 7980  [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

16:19:54.0675 7980  nfrd960 - ok

16:19:54.0719 7980  [ 183CBAD181DEDAC0119B2861C426AC14 ] NitroReaderDriverReadSpool C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:19:54.0767 7980  NitroReaderDriverReadSpool - ok

16:19:54.0794 7980  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc          C:\Windows\System32\nlasvc.dll

16:19:54.0831 7980  NlaSvc - ok

16:19:54.0892 7980  [ 6623E51595C0076755C29C00846C4EB2 ] NPF             C:\Windows\system32\drivers\npf.sys

16:19:54.0914 7980  NPF - ok

16:19:54.0948 7980  [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

16:19:54.0977 7980  Npfs - ok

16:19:55.0013 7980  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi             C:\Windows\system32\nsisvc.dll

16:19:55.0053 7980  nsi - ok

16:19:55.0073 7980  [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

16:19:55.0111 7980  nsiproxy - ok

16:19:55.0173 7980  [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

16:19:55.0220 7980  Ntfs - ok

16:19:55.0257 7980  [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

16:19:55.0314 7980  ntrigdigi - ok

16:19:55.0331 7980  [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null            C:\Windows\system32\drivers\Null.sys

16:19:55.0367 7980  Null - ok

16:19:55.0625 7980  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:19:56.0069 7980  nvlddmkm - ok

16:19:56.0109 7980  [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

16:19:56.0136 7980  nvraid - ok

16:19:56.0142 7980  [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

16:19:56.0167 7980  nvstor - ok

16:19:56.0208 7980  [ 782945716AD010AC3D41758E8E52C735 ] nvsvc           C:\Windows\system32\nvvsvc.exe

16:19:56.0267 7980  nvsvc - ok

16:19:56.0387 7980  [ A974E5C310B9B00894070CEB055D467F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:19:56.0470 7980  nvUpdatusService - ok

16:19:56.0477 7980  [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

16:19:56.0504 7980  nv_agp - ok

16:19:56.0509 7980  NwlnkFlt - ok

16:19:56.0514 7980  NwlnkFwd - ok

16:19:56.0589 7980  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

16:19:56.0631 7980  odserv - ok

16:19:56.0679 7980  [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

16:19:56.0706 7980  ohci1394 - ok

16:19:56.0758 7980  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:19:56.0813 7980  ose - ok

16:19:56.0867 7980  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

16:19:56.0946 7980  p2pimsvc - ok

16:19:56.0956 7980  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc          C:\Windows\system32\p2psvc.dll

16:19:56.0990 7980  p2psvc - ok

16:19:57.0026 7980  [ 0FA9B5055484649D63C303FE404E5F4D ] Parport         C:\Windows\system32\drivers\parport.sys

16:19:57.0078 7980  Parport - ok

16:19:57.0108 7980  [ B9C2B89F08670E159F7181891E449CD9 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

16:19:57.0130 7980  partmgr - ok

16:19:57.0134 7980  [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

16:19:57.0185 7980  Parvdm - ok

16:19:57.0207 7980  [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc          C:\Windows\System32\pcasvc.dll

16:19:57.0234 7980  PcaSvc - ok

16:19:57.0267 7980  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfd.sys

16:19:57.0289 7980  pccsmcfd - ok

16:19:57.0338 7980  [ 941DC1D19E7E8620F40BBC206981EFDB ] pci             C:\Windows\system32\drivers\pci.sys

16:19:57.0365 7980  pci - ok

16:19:57.0369 7980  [ A88FF9E32AAA9AF398AE89B9A082870B ] pciide          C:\Windows\system32\drivers\pciide.sys

16:19:57.0392 7980  pciide - ok

16:19:57.0419 7980  [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

16:19:57.0448 7980  pcmcia - ok

16:19:57.0479 7980  [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

16:19:57.0566 7980  PEAUTH - ok

16:19:57.0635 7980  [ B1689DF169143F57053F795390C99DB3 ] pla             C:\Windows\system32\pla.dll

16:19:57.0710 7980  pla - ok

16:19:57.0752 7980  [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

16:19:57.0800 7980  PlugPlay - ok

16:19:57.0844 7980  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

16:19:57.0865 7980  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

16:19:57.0865 7980  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

16:19:57.0901 7980  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

16:19:57.0943 7980  PNRPAutoReg - ok

16:19:57.0955 7980  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

16:19:57.0997 7980  PNRPsvc - ok

16:19:58.0033 7980  [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

16:19:58.0067 7980  PolicyAgent - ok

16:19:58.0079 7980  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

16:19:58.0111 7980  PptpMiniport - ok

16:19:58.0129 7980  [ 0E3CEF5D28B40CF273281D620C50700A ] Processor       C:\Windows\system32\drivers\processr.sys

16:19:58.0174 7980  Processor - ok

16:19:58.0202 7980  [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc         C:\Windows\system32\profsvc.dll

16:19:58.0231 7980  ProfSvc - ok

16:19:58.0282 7980  [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe

16:19:58.0315 7980  ProtectedStorage - ok

16:19:58.0407 7980  [ F115AF58ABE5605D7D709CBFBD83F418 ] ProtexisLicensing C:\Windows\system32\PSIService.exe

16:19:58.0436 7980  ProtexisLicensing - ok

16:19:58.0471 7980  [ 390C204CED3785609AB24E9C52054A84 ] Ps2             C:\Windows\system32\DRIVERS\PS2.sys

16:19:58.0490 7980  Ps2 - ok

16:19:58.0528 7980  [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

16:19:58.0559 7980  PSched - ok

16:19:58.0602 7980  [ CCDAC889326317792480C0A67156A1EC ] ql2300          C:\Windows\system32\drivers\ql2300.sys

16:19:58.0639 7980  ql2300 - ok

16:19:58.0644 7980  [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

16:19:58.0666 7980  ql40xx - ok

16:19:58.0694 7980  [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE           C:\Windows\system32\qwave.dll

16:19:58.0727 7980  QWAVE - ok

16:19:58.0751 7980  [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

16:19:58.0776 7980  QWAVEdrv - ok

16:19:58.0801 7980  [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

16:19:58.0839 7980  RasAcd - ok

16:19:58.0867 7980  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto         C:\Windows\System32\rasauto.dll

16:19:58.0907 7980  RasAuto - ok

16:19:58.0931 7980  [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

16:19:58.0970 7980  Rasl2tp - ok

16:19:59.0008 7980  [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan          C:\Windows\System32\rasmans.dll

16:19:59.0049 7980  RasMan - ok

16:19:59.0086 7980  [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

16:19:59.0120 7980  RasPppoe - ok

16:19:59.0147 7980  [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

16:19:59.0177 7980  RasSstp - ok

16:19:59.0221 7980  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

16:19:59.0265 7980  rdbss - ok

16:19:59.0289 7980  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

16:19:59.0331 7980  RDPCDD - ok

16:19:59.0366 7980  [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

16:19:59.0435 7980  rdpdr - ok

16:19:59.0441 7980  [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

16:19:59.0488 7980  RDPENCDD - ok

16:19:59.0529 7980  [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

16:19:59.0560 7980  RDPWD - ok

16:19:59.0610 7980  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess    C:\Windows\System32\mprdim.dll

16:19:59.0656 7980  RemoteAccess - ok

16:19:59.0696 7980  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry  C:\Windows\system32\regsvc.dll

16:19:59.0736 7980  RemoteRegistry - ok

16:19:59.0782 7980  [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

16:19:59.0820 7980  RFCOMM - ok

16:19:59.0857 7980  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

16:19:59.0899 7980  ROOTMODEM - ok

16:19:59.0902 7980  rpcapd - ok

16:19:59.0923 7980  [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator      C:\Windows\system32\locator.exe

16:19:59.0956 7980  RpcLocator - ok

16:20:00.0010 7980  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs           C:\Windows\system32\rpcss.dll

16:20:00.0058 7980  RpcSs - ok

16:20:00.0111 7980  [ FD692C6FFADE58F7C4C3C3C9A0EC35BD ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

16:20:00.0147 7980  RsFx0103 - ok

16:20:00.0187 7980  [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

16:20:00.0231 7980  rspndr - ok

16:20:00.0250 7980  [ C347A3CDE57077056E7E73D3498F7D7D ] RTL8169         C:\Windows\system32\DRIVERS\Rtlh86.sys

16:20:00.0289 7980  RTL8169 - ok

16:20:00.0315 7980  [ A3E186B4B935905B829219502557314E ] SamSs           C:\Windows\system32\lsass.exe

16:20:00.0347 7980  SamSs - ok

16:20:00.0379 7980  [ 3CE8F073A557E172B330109436984E30 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

16:20:00.0397 7980  sbp2port - ok

16:20:00.0438 7980  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

16:20:00.0468 7980  SCardSvr - ok

16:20:00.0528 7980  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule        C:\Windows\system32\schedsvc.dll

16:20:00.0559 7980  Schedule - ok

16:20:00.0596 7980  [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc     C:\Windows\System32\certprop.dll

16:20:00.0622 7980  SCPolicySvc - ok

16:20:00.0659 7980  [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

16:20:00.0681 7980  SDRSVC - ok

16:20:00.0689 7980  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

16:20:00.0735 7980  secdrv - ok

16:20:00.0756 7980  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon        C:\Windows\system32\seclogon.dll

16:20:00.0787 7980  seclogon - ok

16:20:00.0809 7980  [ A9BBAB5759771E523F55563D6CBE140F ] SENS            C:\Windows\System32\sens.dll

16:20:00.0841 7980  SENS - ok

16:20:00.0855 7980  [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum         C:\Windows\system32\drivers\serenum.sys

16:20:00.0900 7980  Serenum - ok

16:20:00.0927 7980  [ C70D69A918B178D3C3B06339B40C2E1B ] Serial          C:\Windows\system32\drivers\serial.sys

16:20:00.0973 7980  Serial - ok

16:20:01.0012 7980  [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

16:20:01.0046 7980  sermouse - ok

16:20:01.0112 7980  [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

16:20:01.0148 7980  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning

16:20:01.0148 7980  ServiceLayer - detected UnsignedFile.Multi.Generic (1)

16:20:01.0194 7980  [ D2193326F729B163125610DBF3E17D57 ] SessionEnv      C:\Windows\system32\sessenv.dll

16:20:01.0231 7980  SessionEnv - ok

16:20:01.0235 7980  [ 51CF56AA8BCC241F134B420B8F850406 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

16:20:01.0284 7980  sffdisk - ok

16:20:01.0289 7980  [ 96DED8B20C734AC41641CE275250E55D ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

16:20:01.0311 7980  sffp_mmc - ok

16:20:01.0315 7980  [ 8B08CAB1267B2C377883FC9E56981F90 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

16:20:01.0336 7980  sffp_sd - ok

16:20:01.0340 7980  [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

16:20:01.0393 7980  sfloppy - ok

16:20:01.0424 7980  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

16:20:01.0463 7980  SharedAccess - ok

16:20:01.0488 7980  [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:20:01.0525 7980  ShellHWDetection - ok

16:20:01.0549 7980  [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

16:20:01.0567 7980  sisagp - ok

16:20:01.0581 7980  [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

16:20:01.0598 7980  SiSRaid2 - ok

16:20:01.0603 7980  [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

16:20:01.0621 7980  SiSRaid4 - ok

16:20:01.0726 7980  [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc           C:\Windows\system32\SLsvc.exe

16:20:01.0877 7980  slsvc - ok

16:20:01.0949 7980  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify      C:\Windows\system32\SLUINotify.dll

16:20:01.0980 7980  SLUINotify - ok

16:20:02.0035 7980  [ 7B75299A4D201D6A6533603D6914AB04 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

16:20:02.0071 7980  Smb - ok

16:20:02.0108 7980  [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

16:20:02.0139 7980  SNMPTRAP - ok

16:20:02.0181 7980  [ DC4DC886D3779C446F9B0E9D6B006E72 ] SPBBCDrv        C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:20:02.0214 7980  SPBBCDrv - ok

16:20:02.0235 7980  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr           C:\Windows\system32\drivers\spldr.sys

16:20:02.0257 7980  spldr - ok

16:20:02.0297 7980  [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler         C:\Windows\System32\spoolsv.exe

16:20:02.0348 7980  Spooler - ok

16:20:02.0402 7980  [ A687B5B326AFCFCF182C4931D1FF9771 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

16:20:02.0469 7980  SQLAgent$SQLEXPRESS - ok

16:20:02.0540 7980  [ B54B48F6D92423440C264E91225C5FF1 ] SQLBrowser      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

16:20:02.0628 7980  SQLBrowser - ok

16:20:02.0646 7980  [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:20:02.0701 7980  SQLWriter - ok

16:20:02.0744 7980  [ E0E54A571D4323567E95E11FE76A5FF3 ] SRTSP           C:\Windows\system32\Drivers\SRTSP.SYS

16:20:02.0763 7980  SRTSP - ok

16:20:02.0787 7980  [ 4E44F0E22DF824D318988CAA6F321C30 ] SRTSPL          C:\Windows\system32\Drivers\SRTSPL.SYS

16:20:02.0808 7980  SRTSPL - ok

16:20:02.0823 7980  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] SRTSPX          C:\Windows\system32\Drivers\SRTSPX.SYS

16:20:02.0843 7980  SRTSPX - ok

16:20:02.0872 7980  [ 41987F9FC0E61ADF54F581E15029AD91 ] srv             C:\Windows\system32\DRIVERS\srv.sys

16:20:02.0896 7980  srv - ok

16:20:02.0929 7980  [ FF33AFF99564B1AA534F58868CBE41EF ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

16:20:02.0952 7980  srv2 - ok

16:20:02.0964 7980  [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

16:20:02.0987 7980  srvnet - ok

16:20:03.0023 7980  [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

16:20:03.0061 7980  SSDPSRV - ok

16:20:03.0084 7980  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

16:20:03.0108 7980  SstpSvc - ok

16:20:03.0126 7980  Steam Client Service - ok

16:20:03.0204 7980  [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:20:03.0248 7980  Stereo Service - ok

16:20:03.0282 7980  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc          C:\Windows\System32\wiaservc.dll

16:20:03.0315 7980  stisvc - ok

16:20:03.0342 7980  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

16:20:03.0360 7980  swenum - ok

16:20:03.0441 7980  [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv           C:\Windows\System32\swprv.dll

16:20:03.0473 7980  swprv - ok

16:20:03.0541 7980  [ 438FAFE708C93B2236FC26B6F2BD5FD0 ] Symantec Core LC C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

16:20:03.0587 7980  Symantec Core LC - ok

16:20:03.0605 7980  [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

16:20:03.0623 7980  Symc8xx - ok

16:20:03.0645 7980  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] SYMDNS          C:\Windows\System32\Drivers\SYMDNS.SYS

16:20:03.0660 7980  SYMDNS - ok

16:20:03.0674 7980  [ 06B95820DF51502099A8A15C93E87986 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT.SYS

16:20:03.0693 7980  SymEvent - ok

16:20:03.0698 7980  [ A0EA9D273889E53CFAABF2444692CCBF ] SYMFW           C:\Windows\System32\Drivers\SYMFW.SYS

16:20:03.0717 7980  SYMFW - ok

16:20:03.0729 7980  [ 8EAB28DD6CD25355B951AE460FA86B48 ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys

16:20:03.0746 7980  SymIM - ok

16:20:03.0760 7980  [ C94EACA4B522012EE0691F1E79C42A7D ] SYMNDISV        C:\Windows\System32\Drivers\SYMNDISV.SYS

16:20:03.0780 7980  SYMNDISV - ok

16:20:03.0789 7980  [ 7C6505EA598E58099D3B7E1F70426864 ] SYMREDRV        C:\Windows\System32\Drivers\SYMREDRV.SYS

16:20:03.0809 7980  SYMREDRV - ok

16:20:03.0815 7980  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] SYMTDI          C:\Windows\System32\Drivers\SYMTDI.SYS

16:20:03.0836 7980  SYMTDI - ok

16:20:03.0840 7980  [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

16:20:03.0864 7980  Sym_hi - ok

16:20:03.0868 7980  [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

16:20:03.0886 7980  Sym_u3 - ok

16:20:03.0920 7980  [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain         C:\Windows\system32\sysmain.dll

16:20:03.0958 7980  SysMain - ok

16:20:03.0997 7980  [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:20:04.0021 7980  TabletInputService - ok

16:20:04.0061 7980  [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv         C:\Windows\System32\tapisrv.dll

16:20:04.0096 7980  TapiSrv - ok

16:20:04.0130 7980  [ CB05822CD9CC6C688168E113C603DBE7 ] TBS             C:\Windows\System32\tbssvc.dll

16:20:04.0162 7980  TBS - ok

16:20:04.0220 7980  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

16:20:04.0262 7980  Tcpip - ok

16:20:04.0277 7980  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

16:20:04.0318 7980  Tcpip6 - ok

16:20:04.0367 7980  [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

16:20:04.0389 7980  tcpipreg - ok

16:20:04.0425 7980  [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

16:20:04.0455 7980  TDPIPE - ok

16:20:04.0477 7980  [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

16:20:04.0509 7980  TDTCP - ok

16:20:04.0553 7980  [ 76B06EB8A01FC8624D699E7045303E54 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

16:20:04.0580 7980  tdx - ok

16:20:04.0634 7980  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

16:20:04.0655 7980  TermDD - ok

16:20:04.0678 7980  [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService     C:\Windows\System32\termsrv.dll

16:20:04.0718 7980  TermService - ok

16:20:04.0738 7980  [ C7230FBEE14437716701C15BE02C27B8 ] Themes          C:\Windows\system32\shsvcs.dll

16:20:04.0765 7980  Themes - ok

16:20:04.0776 7980  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER     C:\Windows\system32\mmcss.dll

16:20:04.0810 7980  THREADORDER - ok

16:20:04.0858 7980  [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:20:04.0886 7980  TOSHIBA Bluetooth Service - ok

16:20:04.0917 7980  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte        C:\Windows\system32\DRIVERS\tosporte.sys

16:20:04.0942 7980  tosporte - ok

16:20:04.0973 7980  [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd         C:\Windows\system32\DRIVERS\tosrfbd.sys

16:20:04.0994 7980  tosrfbd - ok

16:20:05.0021 7980  [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp        C:\Windows\system32\Drivers\tosrfbnp.sys

16:20:05.0040 7980  tosrfbnp - ok

16:20:05.0068 7980  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom        C:\Windows\system32\Drivers\tosrfcom.sys

16:20:05.0088 7980  Tosrfcom - ok

16:20:05.0100 7980  [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid        C:\Windows\system32\DRIVERS\Tosrfhid.sys

16:20:05.0121 7980  Tosrfhid - ok

16:20:05.0152 7980  [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds        C:\Windows\system32\DRIVERS\tosrfnds.sys

16:20:05.0171 7980  tosrfnds - ok

16:20:05.0198 7980  [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd        C:\Windows\system32\drivers\tosrfsnd.sys

16:20:05.0218 7980  TosRfSnd - ok

16:20:05.0234 7980  [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb        C:\Windows\system32\DRIVERS\tosrfusb.sys

16:20:05.0253 7980  Tosrfusb - ok

16:20:05.0279 7980  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks          C:\Windows\System32\trkwks.dll

16:20:05.0320 7980  TrkWks - ok

16:20:05.0365 7980  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:20:05.0429 7980  TrustedInstaller - ok

16:20:05.0466 7980  [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

16:20:05.0508 7980  tssecsrv - ok

16:20:05.0531 7980  [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

16:20:05.0564 7980  tunmp - ok

16:20:05.0601 7980  [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

16:20:05.0630 7980  tunnel - ok

16:20:05.0662 7980  [ C3ADE15414120033A36C0F293D4A4121 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

16:20:05.0688 7980  uagp35 - ok

16:20:05.0728 7980  [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

16:20:05.0768 7980  udfs - ok

16:20:05.0826 7980  [ AC426CD0AA0DB592A81C9A78A5F4B309 ] UDXTTM6010      C:\Windows\system32\DRIVERS\UDXTTM6010.sys

16:20:05.0869 7980  UDXTTM6010 - ok

16:20:05.0889 7980  [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

16:20:05.0937 7980  UI0Detect - ok

16:20:05.0952 7980  [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

16:20:05.0970 7980  uliagpkx - ok

16:20:05.0977 7980  [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci         C:\Windows\system32\drivers\uliahci.sys

16:20:05.0997 7980  uliahci - ok

16:20:06.0003 7980  [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata          C:\Windows\system32\drivers\ulsata.sys

16:20:06.0022 7980  UlSata - ok

16:20:06.0026 7980  [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

16:20:06.0045 7980  ulsata2 - ok

16:20:06.0073 7980  [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

16:20:06.0103 7980  umbus - ok

16:20:06.0129 7980  [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost        C:\Windows\System32\upnphost.dll

16:20:06.0166 7980  upnphost - ok

16:20:06.0193 7980  [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

16:20:06.0220 7980  usbccgp - ok

16:20:06.0230 7980  [ E9476E6C486E76BC4898074768FB7131 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

16:20:06.0277 7980  usbcir - ok

16:20:06.0312 7980  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

16:20:06.0345 7980  usbehci - ok

16:20:06.0361 7980  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

16:20:06.0393 7980  usbhub - ok

16:20:06.0423 7980  [ 38DBC7DD6CC5A72011F187425384388B ] usbohci         C:\Windows\system32\drivers\usbohci.sys

16:20:06.0473 7980  usbohci - ok

16:20:06.0488 7980  [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

16:20:06.0521 7980  usbprint - ok

16:20:06.0548 7980  [ A508C9BD8724980512136B039BBA65E9 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

16:20:06.0577 7980  usbscan - ok

16:20:06.0606 7980  [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:20:06.0639 7980  USBSTOR - ok

16:20:06.0673 7980  [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

16:20:06.0705 7980  usbuhci - ok

16:20:06.0735 7980  [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms           C:\Windows\System32\uxsms.dll

16:20:06.0770 7980  UxSms - ok

16:20:06.0814 7980  [ CD88D1B7776DC17A119049742EC07EB4 ] vds             C:\Windows\System32\vds.exe

16:20:06.0885 7980  vds - ok

16:20:06.0903 7980  [ 7D92BE0028ECDEDEC74617009084B5EF ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

16:20:06.0968 7980  vga - ok

16:20:06.0988 7980  [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave         C:\Windows\System32\drivers\vga.sys

16:20:07.0031 7980  VgaSave - ok

16:20:07.0048 7980  [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp          C:\Windows\system32\drivers\viaagp.sys

16:20:07.0074 7980  viaagp - ok

16:20:07.0080 7980  [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

16:20:07.0145 7980  ViaC7 - ok

16:20:07.0151 7980  [ F2EB2E6E21B008695D3D28E69937DA9C ] viaide          C:\Windows\system32\drivers\viaide.sys

16:20:07.0177 7980  viaide - ok

16:20:07.0202 7980  [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

16:20:07.0230 7980  volmgr - ok

16:20:07.0265 7980  [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

16:20:07.0303 7980  volmgrx - ok

16:20:07.0356 7980  [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

16:20:07.0388 7980  volsnap - ok

16:20:07.0416 7980  [ D984439746D42B30FC65A4C3546C6829 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

16:20:07.0444 7980  vsmraid - ok

16:20:07.0509 7980  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS             C:\Windows\system32\vssvc.exe

16:20:07.0615 7980  VSS - ok

16:20:07.0667 7980  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time         C:\Windows\system32\w32time.dll

16:20:07.0701 7980  W32Time - ok

16:20:07.0730 7980  [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

16:20:07.0775 7980  WacomPen - ok

16:20:07.0798 7980  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

16:20:07.0825 7980  Wanarp - ok

16:20:07.0828 7980  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

16:20:07.0855 7980  Wanarpv6 - ok

16:20:07.0884 7980  [ A3CD60FD826381B49F03832590E069AF ] wcncsvc         C:\Windows\System32\wcncsvc.dll

16:20:07.0914 7980  wcncsvc - ok

16:20:07.0945 7980  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:20:07.0972 7980  WcsPlugInService - ok

16:20:07.0976 7980  [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd              C:\Windows\system32\drivers\wd.sys

16:20:07.0994 7980  Wd - ok

16:20:08.0026 7980  [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

16:20:08.0061 7980  Wdf01000 - ok

16:20:08.0083 7980  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost  C:\Windows\system32\wdi.dll

16:20:08.0116 7980  WdiServiceHost - ok

16:20:08.0119 7980  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost   C:\Windows\system32\wdi.dll

16:20:08.0151 7980  WdiSystemHost - ok

16:20:08.0202 7980  [ 04C37D8107320312FBAE09926103D5E2 ] WebClient       C:\Windows\System32\webclnt.dll

16:20:08.0227 7980  WebClient - ok

16:20:08.0258 7980  [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc          C:\Windows\system32\wecsvc.dll

16:20:08.0303 7980  Wecsvc - ok

16:20:08.0351 7980  [ 670FF720071ED741206D69BD995EA453 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

16:20:08.0381 7980  wercplsupport - ok

16:20:08.0441 7980  [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc          C:\Windows\System32\WerSvc.dll

16:20:08.0473 7980  WerSvc - ok

16:20:08.0533 7980  [ 4575AA12561C5648483403541D0D7F2B ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

16:20:08.0563 7980  WinDefend - ok

16:20:08.0571 7980  WinHttpAutoProxySvc - ok

16:20:08.0615 7980  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

16:20:08.0653 7980  Winmgmt - ok

16:20:08.0715 7980  [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM           C:\Windows\system32\WsmSvc.dll

16:20:08.0770 7980  WinRM - ok

16:20:08.0828 7980  [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc         C:\Windows\System32\wlansvc.dll

16:20:08.0867 7980  Wlansvc - ok

16:20:08.0908 7980  [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

16:20:08.0964 7980  WmiAcpi - ok

16:20:09.0008 7980  [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

16:20:09.0078 7980  wmiApSrv - ok

16:20:09.0149 7980  [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

16:20:09.0195 7980  WMPNetworkSvc - ok

16:20:09.0221 7980  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

16:20:09.0244 7980  WPCSvc - ok

16:20:09.0296 7980  [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

16:20:09.0339 7980  WPDBusEnum - ok

16:20:09.0449 7980  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:20:09.0497 7980  WPFFontCache_v0400 - ok

16:20:09.0530 7980  [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

16:20:09.0563 7980  ws2ifsl - ok

16:20:09.0603 7980  [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc          C:\Windows\System32\wscsvc.dll

16:20:09.0628 7980  wscsvc - ok

16:20:09.0632 7980  WSearch - ok

16:20:09.0698 7980  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll

16:20:09.0772 7980  wuauserv - ok

16:20:09.0807 7980  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

16:20:09.0834 7980  WudfPf - ok

16:20:09.0872 7980  [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

16:20:09.0901 7980  WUDFRd - ok

16:20:09.0933 7980  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

16:20:09.0964 7980  wudfsvc - ok

16:20:09.0973 7980  ================ Scan global ===============================

16:20:09.0997 7980  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll

16:20:10.0039 7980  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:20:10.0055 7980  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:20:10.0105 7980  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe

16:20:10.0112 7980  [Global] - ok

16:20:10.0112 7980  ================ Scan MBR ==================================

16:20:10.0136 7980  [ 81CD5EC01DB0CE57EDD853F82462EF27 ] \Device\Harddisk0\DR0

16:20:10.0620 7980  \Device\Harddisk0\DR0 - ok

16:20:10.0623 7980  [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk1\DR1

16:20:10.0805 7980  \Device\Harddisk1\DR1 - ok

16:20:10.0805 7980  ================ Scan VBR ==================================

16:20:10.0808 7980  [ E95495BFFA6767669DB8405142DB4649 ] \Device\Harddisk0\DR0\Partition1

16:20:10.0809 7980  \Device\Harddisk0\DR0\Partition1 - ok

16:20:10.0813 7980  [ 36160AA267F7FC371B1139ED4DE6DD05 ] \Device\Harddisk0\DR0\Partition2

16:20:10.0814 7980  \Device\Harddisk0\DR0\Partition2 - ok

16:20:10.0816 7980  [ 160F47F4D3004A4D86D9DFD80B20F147 ] \Device\Harddisk1\DR1\Partition1

16:20:10.0817 7980  \Device\Harddisk1\DR1\Partition1 - ok

16:20:10.0818 7980  ================ Scan active images ========================

16:20:10.0819 7980  [ 36975327EF03949CC378AB01E316B574 ] C:\Windows\System32\drivers\crashdmp.sys

16:20:10.0819 7980  C:\Windows\System32\drivers\crashdmp.sys - ok

16:20:10.0823 7980  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] C:\Windows\System32\drivers\iaStor.sys

16:20:10.0823 7980  C:\Windows\System32\drivers\iaStor.sys - ok

16:20:10.0826 7980  [ 300DB877AC094FEAB0BE7688C3454A9C ] C:\Windows\System32\drivers\tunnel.sys

16:20:10.0826 7980  C:\Windows\System32\drivers\tunnel.sys - ok

16:20:10.0830 7980  [ CAECC0120AC49E3D2F758B9169872D38 ] C:\Windows\System32\drivers\TUNMP.SYS

16:20:10.0830 7980  C:\Windows\System32\drivers\TUNMP.SYS - ok

16:20:10.0833 7980  [ 224191001E78C89DFA78924C3EA595FF ] C:\Windows\System32\drivers\intelppm.sys

16:20:10.0833 7980  C:\Windows\System32\drivers\intelppm.sys - ok

16:20:10.0836 7980  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] C:\Windows\System32\drivers\nvlddmkm.sys

16:20:10.0836 7980  C:\Windows\System32\drivers\nvlddmkm.sys - ok

16:20:10.0839 7980  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] C:\Windows\System32\drivers\dxgkrnl.sys

16:20:10.0839 7980  C:\Windows\System32\drivers\dxgkrnl.sys - ok

16:20:10.0843 7980  [ 4A5C31E2C1646034E6A60EBA4C747FF6 ] C:\Windows\System32\drivers\watchdog.sys

16:20:10.0843 7980  C:\Windows\System32\drivers\watchdog.sys - ok

16:20:10.0846 7980  [ A1C100A87D981AD0774FBC0B4B82E913 ] C:\Windows\System32\drivers\usbport.sys

16:20:10.0846 7980  C:\Windows\System32\drivers\usbport.sys - ok

16:20:10.0848 7980  [ 814D653EFC4D48BE3B04A307ECEFF56F ] C:\Windows\System32\drivers\usbuhci.sys

16:20:10.0848 7980  C:\Windows\System32\drivers\usbuhci.sys - ok

16:20:10.0851 7980  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] C:\Windows\System32\drivers\usbehci.sys

16:20:10.0851 7980  C:\Windows\System32\drivers\usbehci.sys - ok

16:20:10.0855 7980  [ 062452B7FFD68C8C042A6261FE8DFF4A ] C:\Windows\System32\drivers\hdaudbus.sys

16:20:10.0855 7980  C:\Windows\System32\drivers\hdaudbus.sys - ok

16:20:10.0858 7980  [ C347A3CDE57077056E7E73D3498F7D7D ] C:\Windows\System32\drivers\Rtlh86.sys

16:20:10.0858 7980  C:\Windows\System32\drivers\Rtlh86.sys - ok

16:20:10.0861 7980  [ 0349BE02F329F4F48F1D48097FD65974 ] C:\Windows\System32\drivers\1394bus.sys

16:20:10.0861 7980  C:\Windows\System32\drivers\1394bus.sys - ok

16:20:10.0864 7980  [ 6F310E890D46E246E0E261A63D9B36B4 ] C:\Windows\System32\drivers\ohci1394.sys

16:20:10.0864 7980  C:\Windows\System32\drivers\ohci1394.sys - ok

16:20:10.0868 7980  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] C:\Windows\System32\drivers\i8042prt.sys

16:20:10.0868 7980  C:\Windows\System32\drivers\i8042prt.sys - ok

16:20:10.0871 7980  [ 37605E0A8CF00CBBA538E753E4344C6E ] C:\Windows\System32\drivers\kbdclass.sys

16:20:10.0871 7980  C:\Windows\System32\drivers\kbdclass.sys - ok

16:20:10.0874 7980  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] C:\Windows\System32\drivers\L8042Kbd.sys

16:20:10.0874 7980  C:\Windows\System32\drivers\L8042Kbd.sys - ok

16:20:10.0877 7980  [ 6B4BFFB9BECD728097024276430DB314 ] C:\Windows\System32\drivers\cdrom.sys

16:20:10.0877 7980  C:\Windows\System32\drivers\cdrom.sys - ok

16:20:10.0881 7980  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] C:\Windows\System32\drivers\GEARAspiWDM.sys

16:20:10.0881 7980  C:\Windows\System32\drivers\GEARAspiWDM.sys - ok

16:20:10.0884 7980  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] C:\Windows\System32\drivers\tosrfcom.sys

16:20:10.0884 7980  C:\Windows\System32\drivers\tosrfcom.sys - ok

16:20:10.0887 7980  [ 232FA340531D940AAC623B121A595034 ] C:\Windows\System32\drivers\msiscsi.sys

16:20:10.0887 7980  C:\Windows\System32\drivers\msiscsi.sys - ok

16:20:10.0890 7980  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] C:\Windows\System32\drivers\rootmdm.sys

16:20:10.0890 7980  C:\Windows\System32\drivers\rootmdm.sys - ok

16:20:10.0894 7980  [ 47E55AFE1ED1D5AFF09690DB226F4A7A ] C:\Windows\System32\drivers\Storport.sys

16:20:10.0894 7980  C:\Windows\System32\drivers\Storport.sys - ok

16:20:10.0897 7980  [ 77937EFF009AC696B90E09F671F9D0A4 ] C:\Windows\System32\drivers\tdi.sys

16:20:10.0897 7980  C:\Windows\System32\drivers\tdi.sys - ok

16:20:10.0900 7980  [ E13B5EA0F51BA5B1512EC671393D09BA ] C:\Windows\System32\drivers\modem.sys

16:20:10.0900 7980  C:\Windows\System32\drivers\modem.sys - ok

16:20:10.0903 7980  [ A214ADBAF4CB47DD2728859EF31F26B0 ] C:\Windows\System32\drivers\rasl2tp.sys

16:20:10.0903 7980  C:\Windows\System32\drivers\rasl2tp.sys - ok

16:20:10.0907 7980  [ 0E186E90404980569FB449BA7519AE61 ] C:\Windows\System32\drivers\ndistapi.sys

16:20:10.0907 7980  C:\Windows\System32\drivers\ndistapi.sys - ok

16:20:10.0910 7980  [ 818F648618AE34F729FDB47EC68345C3 ] C:\Windows\System32\drivers\ndiswan.sys

16:20:10.0910 7980  C:\Windows\System32\drivers\ndiswan.sys - ok

16:20:10.0913 7980  [ 509A98DD18AF4375E1FC40BC175F1DEF ] C:\Windows\System32\drivers\raspppoe.sys

16:20:10.0913 7980  C:\Windows\System32\drivers\raspppoe.sys - ok

16:20:10.0916 7980  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] C:\Windows\System32\drivers\raspptp.sys

16:20:10.0916 7980  C:\Windows\System32\drivers\raspptp.sys - ok

16:20:10.0919 7980  [ 2005F4A1E05FA09389AC85840F0A9E4D ] C:\Windows\System32\drivers\rassstp.sys

16:20:10.0919 7980  C:\Windows\System32\drivers\rassstp.sys - ok

16:20:10.0923 7980  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] C:\Windows\System32\drivers\termdd.sys

16:20:10.0923 7980  C:\Windows\System32\drivers\termdd.sys - ok

16:20:10.0926 7980  [ 5BF6A1326A335C5298477754A506D263 ] C:\Windows\System32\drivers\mouclass.sys

16:20:10.0926 7980  C:\Windows\System32\drivers\mouclass.sys - ok

16:20:10.0929 7980  [ EF73C1E29FBE7B0FD0274BF4394E346A ] C:\Windows\System32\drivers\ks.sys

16:20:10.0929 7980  C:\Windows\System32\drivers\ks.sys - ok

16:20:10.0932 7980  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] C:\Windows\System32\drivers\swenum.sys

16:20:10.0932 7980  C:\Windows\System32\drivers\swenum.sys - ok

16:20:10.0936 7980  [ E384487CB84BE41D09711C30CA79646C ] C:\Windows\System32\drivers\mssmbios.sys

16:20:10.0936 7980  C:\Windows\System32\drivers\mssmbios.sys - ok

16:20:10.0939 7980  [ 32CFF9F809AE9AED85464492BF3E32D2 ] C:\Windows\System32\drivers\umbus.sys

16:20:10.0939 7980  C:\Windows\System32\drivers\umbus.sys - ok

16:20:10.0942 7980  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] C:\Windows\System32\drivers\usbhub.sys

16:20:10.0942 7980  C:\Windows\System32\drivers\usbhub.sys - ok

16:20:10.0945 7980  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] C:\Windows\System32\drivers\tosporte.sys

16:20:10.0945 7980  C:\Windows\System32\drivers\tosporte.sys - ok

16:20:10.0948 7980  [ 71DAB552B41936358F3B541AE5997FB3 ] C:\Windows\System32\drivers\ndproxy.sys

16:20:10.0948 7980  C:\Windows\System32\drivers\ndproxy.sys - ok

16:20:10.0952 7980  [ 7BE5A3C671A2CB56E94403BFC2020A0D ] C:\Windows\System32\drivers\drmk.sys

16:20:10.0952 7980  C:\Windows\System32\drivers\drmk.sys - ok

16:20:10.0955 7980  [ 218286724EC530FF252648369E05B090 ] C:\Windows\System32\drivers\portcls.sys

16:20:10.0955 7980  C:\Windows\System32\drivers\portcls.sys - ok

16:20:10.0958 7980  [ EDC37B918E583A5A813C53D4F5588255 ] C:\Windows\System32\drivers\RTKVHDA.sys

16:20:10.0958 7980  C:\Windows\System32\drivers\RTKVHDA.sys - ok

16:20:10.0961 7980  [ B972A66758577E0BFD1DE0F91AAA27B5 ] C:\Windows\System32\drivers\fs_rec.sys

16:20:10.0961 7980  C:\Windows\System32\drivers\fs_rec.sys - ok

16:20:10.0965 7980  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] C:\Windows\System32\drivers\beep.sys

16:20:10.0965 7980  C:\Windows\System32\drivers\beep.sys - ok

16:20:10.0968 7980  [ C5DBBCDA07D780BDA9B685DF333BB41E ] C:\Windows\System32\drivers\null.sys

16:20:10.0968 7980  C:\Windows\System32\drivers\null.sys - ok

16:20:10.0971 7980  [ 175444D3A01CA45D0E1C5DC5F48DF7CD ] C:\Windows\System32\drivers\hidparse.sys

16:20:10.0971 7980  C:\Windows\System32\drivers\hidparse.sys - ok

16:20:10.0974 7980  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] C:\Windows\System32\drivers\kbdhid.sys

16:20:10.0974 7980  C:\Windows\System32\drivers\kbdhid.sys - ok

16:20:10.0978 7980  [ 2E93AC0A1D8C79D019DB6C51F036636C ] C:\Windows\System32\drivers\vga.sys

16:20:10.0978 7980  C:\Windows\System32\drivers\vga.sys - ok

16:20:10.0981 7980  [ C048D2C33D27441A0CDCAAE2651EB03D ] C:\Windows\System32\drivers\videoprt.sys

16:20:10.0981 7980  C:\Windows\System32\drivers\videoprt.sys - ok

16:20:10.0984 7980  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] C:\Windows\System32\drivers\RDPCDD.sys

16:20:10.0984 7980  C:\Windows\System32\drivers\RDPCDD.sys - ok

16:20:10.0987 7980  [ A9927F4A46B816C92F461ACB90CF8515 ] C:\Windows\System32\drivers\msfs.sys

christoph03

22.10.2012 14:22

Code:

ndows\System32\drivers\msfs.sys - ok

16:20:10.0990 7980  [ 9D91FE5286F748862ECFFA05F8A0710C ] C:\Windows\System32\drivers\RDPENCDD.sys

16:20:10.0990 7980  C:\Windows\System32\drivers\RDPENCDD.sys - ok

16:20:10.0994 7980  [ D36F239D7CCE1931598E8FB90A0DBC26 ] C:\Windows\System32\drivers\npfs.sys

16:20:10.0994 7980  C:\Windows\System32\drivers\npfs.sys - ok

16:20:10.0997 7980  [ 147D7F9C556D259924351FEB0DE606C3 ] C:\Windows\System32\drivers\rasacd.sys

16:20:10.0997 7980  C:\Windows\System32\drivers\rasacd.sys - ok

16:20:11.0000 7980  [ 76B06EB8A01FC8624D699E7045303E54 ] C:\Windows\System32\drivers\tdx.sys

16:20:11.0000 7980  C:\Windows\System32\drivers\tdx.sys - ok

16:20:11.0003 7980  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] C:\Windows\System32\drivers\symtdi.sys

16:20:11.0003 7980  C:\Windows\System32\drivers\symtdi.sys - ok

16:20:11.0007 7980  [ 06B95820DF51502099A8A15C93E87986 ] C:\Windows\System32\drivers\SYMEVENT.SYS

16:20:11.0007 7980  C:\Windows\System32\drivers\SYMEVENT.SYS - ok

16:20:11.0010 7980  [ 7B75299A4D201D6A6533603D6914AB04 ] C:\Windows\System32\drivers\smb.sys

16:20:11.0010 7980  C:\Windows\System32\drivers\smb.sys - ok

16:20:11.0013 7980  [ 3911B972B55FEA0478476B2E777B29FA ] C:\Windows\System32\drivers\afd.sys

16:20:11.0013 7980  C:\Windows\System32\drivers\afd.sys - ok

16:20:11.0016 7980  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] C:\Windows\System32\drivers\netbt.sys

16:20:11.0016 7980  C:\Windows\System32\drivers\netbt.sys - ok

16:20:11.0019 7980  [ 99514FAA8DF93D34B5589187DB3AA0BA ] C:\Windows\System32\drivers\pacer.sys

16:20:11.0019 7980  C:\Windows\System32\drivers\pacer.sys - ok

16:20:11.0023 7980  [ 8EAB28DD6CD25355B951AE460FA86B48 ] C:\Windows\System32\drivers\SymIMV.sys

16:20:11.0023 7980  C:\Windows\System32\drivers\SymIMV.sys - ok

16:20:11.0026 7980  [ BCD093A5A6777CF626434568DC7DBA78 ] C:\Windows\System32\drivers\netbios.sys

16:20:11.0026 7980  C:\Windows\System32\drivers\netbios.sys - ok

16:20:11.0029 7980  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] C:\Windows\System32\drivers\srtspx.sys

16:20:11.0029 7980  C:\Windows\System32\drivers\srtspx.sys - ok

16:20:11.0032 7980  [ 55201897378CCA7AF8B5EFD874374A26 ] C:\Windows\System32\drivers\wanarp.sys

16:20:11.0032 7980  C:\Windows\System32\drivers\wanarp.sys - ok

16:20:11.0036 7980  [ DC4DC886D3779C446F9B0E9D6B006E72 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:20:11.0036 7980  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys - ok

16:20:11.0039 7980  [ 77030525CD86A93F1AF34FA9B96D33CE ] C:\Windows\System32\drivers\LUsbFilt.sys

16:20:11.0039 7980  C:\Windows\System32\drivers\LUsbFilt.sys - ok

16:20:11.0043 7980  [ 5961CADB7CAD938368D2028725EF771D ] C:\Windows\System32\drivers\hidclass.sys

16:20:11.0043 7980  C:\Windows\System32\drivers\hidclass.sys - ok

16:20:11.0046 7980  [ CCA4B519B17E23A00B826C55716809CC ] C:\Windows\System32\drivers\hidusb.sys

16:20:11.0046 7980  C:\Windows\System32\drivers\hidusb.sys - ok

16:20:11.0049 7980  [ 790FDAC6D0C762DF9047C3C625A6FF6C ] C:\Windows\System32\drivers\usbd.sys

16:20:11.0049 7980  C:\Windows\System32\drivers\usbd.sys - ok

16:20:11.0052 7980  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] C:\Windows\System32\drivers\LHidFilt.Sys

16:20:11.0052 7980  C:\Windows\System32\drivers\LHidFilt.Sys - ok

16:20:11.0056 7980  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] C:\Windows\System32\drivers\rdbss.sys

16:20:11.0056 7980  C:\Windows\System32\drivers\rdbss.sys - ok

16:20:11.0059 7980  [ 93B8D4869E12CFBE663915502900876F ] C:\Windows\System32\drivers\mouhid.sys

16:20:11.0059 7980  C:\Windows\System32\drivers\mouhid.sys - ok

16:20:11.0062 7980  [ 609773E344A97410CE4EBF74A8914FCF ] C:\Windows\System32\drivers\nsiproxy.sys

16:20:11.0062 7980  C:\Windows\System32\drivers\nsiproxy.sys - ok

16:20:11.0065 7980  [ F85DC24DAFA76237722FE38B3196C61A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:20:11.0066 7980  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys - ok

16:20:11.0069 7980  [ AB33792A87285344F43B5CE23421BAB0 ] C:\Windows\System32\drivers\LMouFilt.Sys

16:20:11.0069 7980  C:\Windows\System32\drivers\LMouFilt.Sys - ok

16:20:11.0072 7980  [ 85B8B4032A895A746D46A288A9B30DED ] C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:20:11.0072 7980  C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys - ok

16:20:11.0076 7980  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:20:11.0076 7980  C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys - ok

16:20:11.0079 7980  [ 622C41A07CA7E6DD91770F50D532CB6C ] C:\Windows\System32\drivers\dfsc.sys

16:20:11.0079 7980  C:\Windows\System32\drivers\dfsc.sys - ok

16:20:11.0083 7980  [ DDA770BBD7C2ED024D6F50E279D90E5B ] C:\Windows\System32\ntdll.dll

16:20:11.0083 7980  C:\Windows\System32\ntdll.dll - ok

16:20:11.0086 7980  [ 98AF15A94CD6AC37248E72E5FE789B35 ] C:\Windows\System32\smss.exe

16:20:11.0086 7980  C:\Windows\System32\smss.exe - ok

16:20:11.0089 7980  [ 10761177A6EBE45843F443E99509F5E7 ] C:\Windows\System32\autochk.exe

16:20:11.0089 7980  C:\Windows\System32\autochk.exe - ok

16:20:11.0092 7980  [ BE3DA31C191BC222D9AD503C5224F2AD ] C:\Windows\System32\drivers\USBSTOR.SYS

16:20:11.0092 7980  C:\Windows\System32\drivers\USBSTOR.SYS - ok

16:20:11.0096 7980  [ 7ADD03E75BEB9E6DD102C3081D29840A ] C:\Windows\System32\drivers\cdfs.sys

16:20:11.0096 7980  C:\Windows\System32\drivers\cdfs.sys - ok

16:20:11.0098 7980  [ EB8A00E8E9931A7EC04F920B09D880D8 ] C:\Windows\System32\iertutil.dll

16:20:11.0098 7980  C:\Windows\System32\iertutil.dll - ok

16:20:11.0101 7980  [ 50CAA7072C171B9887215C83D52069E4 ] C:\Windows\System32\advapi32.dll

16:20:11.0101 7980  C:\Windows\System32\advapi32.dll - ok

16:20:11.0104 7980  [ B218342214D9BBA0F54EA12BA2E9278C ] C:\Windows\System32\oleaut32.dll

16:20:11.0104 7980  C:\Windows\System32\oleaut32.dll - ok

16:20:11.0107 7980  [ B304D47D5744BA20FCB99FB8B2C07B0B ] C:\Windows\System32\ws2_32.dll

16:20:11.0107 7980  C:\Windows\System32\ws2_32.dll - ok

16:20:11.0110 7980  [ C394079EB162E812D682C73FA96AF6E4 ] C:\Windows\System32\clbcatq.dll

16:20:11.0110 7980  C:\Windows\System32\clbcatq.dll - ok

16:20:11.0114 7980  [ 551F51B66E5EA87A38D8197EB3BDB57A ] C:\Windows\System32\setupapi.dll

16:20:11.0114 7980  C:\Windows\System32\setupapi.dll - ok

16:20:11.0117 7980  [ EB49FAA5EBBC06356FB12476438781B9 ] C:\Windows\System32\imagehlp.dll

16:20:11.0117 7980  C:\Windows\System32\imagehlp.dll - ok

16:20:11.0120 7980  [ E3C3BD69701CE6B7B17101E4F7740534 ] C:\Windows\System32\msctf.dll

16:20:11.0120 7980  C:\Windows\System32\msctf.dll - ok

16:20:11.0123 7980  [ 7856E3B4594714EF89BB97375E8644EE ] C:\Windows\System32\gdi32.dll

16:20:11.0123 7980  C:\Windows\System32\gdi32.dll - ok

16:20:11.0126 7980  [ 9586E7CB2255A8B097A7E4538202585E ] C:\Windows\System32\ole32.dll

16:20:11.0126 7980  C:\Windows\System32\ole32.dll - ok

16:20:11.0129 7980  [ 9FAC0F6D5F3D922DB294E30CD3F62369 ] C:\Windows\System32\urlmon.dll

16:20:11.0129 7980  C:\Windows\System32\urlmon.dll - ok

16:20:11.0132 7980  [ 17AF64D727545F2804F6E6D998327E3F ] C:\Windows\System32\msvcrt.dll

16:20:11.0132 7980  C:\Windows\System32\msvcrt.dll - ok

16:20:11.0135 7980  [ 9176285122B7B849FEC2AA1B72A8F7A8 ] C:\Windows\System32\shlwapi.dll

16:20:11.0135 7980  C:\Windows\System32\shlwapi.dll - ok

16:20:11.0138 7980  [ C8BDCECEE082B54F0BAC838BF0A34597 ] C:\Windows\System32\imm32.dll

16:20:11.0138 7980  C:\Windows\System32\imm32.dll - ok

16:20:11.0141 7980  [ 574B473FACAA0E91702B86578440B525 ] C:\Windows\System32\kernel32.dll

16:20:11.0141 7980  C:\Windows\System32\kernel32.dll - ok

16:20:11.0144 7980  [ 4AA2A0E26CEF1A803741253DCF9A1503 ] C:\Windows\System32\comdlg32.dll

16:20:11.0144 7980  C:\Windows\System32\comdlg32.dll - ok

16:20:11.0147 7980  [ 75510147B94598407666F4802797C75A ] C:\Windows\System32\user32.dll

16:20:11.0147 7980  C:\Windows\System32\user32.dll - ok

16:20:11.0150 7980  [ E2281CFF793D7A09CE2B35F9F8732EE3 ] C:\Windows\System32\rpcrt4.dll

16:20:11.0150 7980  C:\Windows\System32\rpcrt4.dll - ok

16:20:11.0153 7980  [ 5553611E2F9EA6F613079177F1233068 ] C:\Windows\System32\wininet.dll

16:20:11.0153 7980  C:\Windows\System32\wininet.dll - ok

16:20:11.0157 7980  [ AAF101900A23D75AE1AE00840FA6F3B8 ] C:\Windows\System32\shell32.dll

16:20:11.0157 7980  C:\Windows\System32\shell32.dll - ok

16:20:11.0160 7980  [ B8A609FB5EFB4E44FC1355B1C01C64BC ] C:\Windows\System32\Wldap32.dll

16:20:11.0160 7980  C:\Windows\System32\Wldap32.dll - ok

16:20:11.0163 7980  [ EB0E02749CE5C488741C9A0ABEAB5DEC ] C:\Windows\System32\lpk.dll

16:20:11.0163 7980  C:\Windows\System32\lpk.dll - ok

16:20:11.0166 7980  [ 6F29236AB5926100972924BD29D9D225 ] C:\Windows\System32\normaliz.dll

16:20:11.0166 7980  C:\Windows\System32\normaliz.dll - ok

16:20:11.0169 7980  [ A64AEBC6C78B4CFD7F41A7277879DF8F ] C:\Windows\System32\nsi.dll

16:20:11.0169 7980  C:\Windows\System32\nsi.dll - ok

16:20:11.0172 7980  [ 80FFF14F1757B9AF8BE9D314FC1AE88B ] C:\Windows\System32\usp10.dll

16:20:11.0172 7980  C:\Windows\System32\usp10.dll - ok

16:20:11.0175 7980  [ DC8891A9203810FC994E7FCCF76E94C8 ] C:\Windows\System32\comctl32.dll

16:20:11.0175 7980  C:\Windows\System32\comctl32.dll - ok

16:20:11.0178 7980  [ 93A1732F7F997E36A5C3893539E2FF02 ] C:\Windows\System32\psapi.dll

16:20:11.0179 7980  C:\Windows\System32\psapi.dll - ok

16:20:11.0182 7980  [ EAAAFEF04FBB45665C9576E525D45A12 ] C:\Windows\System32\drivers\dxapi.sys

16:20:11.0182 7980  C:\Windows\System32\drivers\dxapi.sys - ok

16:20:11.0185 7980  [ 92D85E8A4129FE44A3266266AC8D151D ] C:\Windows\System32\win32k.sys

16:20:11.0185 7980  C:\Windows\System32\win32k.sys - ok

16:20:11.0188 7980  [ 187076DD5D8D4D5D23079D0741195EAD ] C:\Windows\System32\csrsrv.dll

16:20:11.0188 7980  C:\Windows\System32\csrsrv.dll - ok

16:20:11.0191 7980  [ ABCA209EBA02CB59233614DB83B4F50D ] C:\Windows\System32\csrss.exe

16:20:11.0191 7980  C:\Windows\System32\csrss.exe - ok

16:20:11.0194 7980  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\System32\basesrv.dll

16:20:11.0194 7980  C:\Windows\System32\basesrv.dll - ok

16:20:11.0197 7980  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\System32\winsrv.dll

16:20:11.0197 7980  C:\Windows\System32\winsrv.dll - ok

16:20:11.0200 7980  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] C:\Windows\System32\drivers\monitor.sys

16:20:11.0201 7980  C:\Windows\System32\drivers\monitor.sys - ok

16:20:11.0204 7980  [ CC21507D246861671A0BF97E75CE1B00 ] C:\Windows\System32\tsddd.dll

16:20:11.0204 7980  C:\Windows\System32\tsddd.dll - ok

16:20:11.0207 7980  [ D602FEDBD9155FC2DED6863FB60C950F ] C:\Windows\System32\secur32.dll

16:20:11.0207 7980  C:\Windows\System32\secur32.dll - ok

16:20:11.0210 7980  [ 665417528489096BBCB8AEA46D3DA924 ] C:\Windows\System32\userenv.dll

16:20:11.0210 7980  C:\Windows\System32\userenv.dll - ok

16:20:11.0214 7980  [ 101BA3EA053480BB5D957EF37C06B5ED ] C:\Windows\System32\wininit.exe

16:20:11.0214 7980  C:\Windows\System32\wininit.exe - ok

16:20:11.0217 7980  [ 12C8D6C564702B0776512932290A3F6B ] C:\Windows\System32\KBDUS.DLL

16:20:11.0217 7980  C:\Windows\System32\KBDUS.DLL - ok

16:20:11.0220 7980  [ 7F2622E89703DD3C4DD75125E80D8636 ] C:\Windows\System32\KBDCR.DLL

16:20:11.0220 7980  C:\Windows\System32\KBDCR.DLL - ok

16:20:11.0223 7980  [ EA818A6DE0BD0A290D001FFABAFFF6EF ] C:\Windows\System32\KBDGR.DLL

16:20:11.0223 7980  C:\Windows\System32\KBDGR.DLL - ok

16:20:11.0226 7980  [ 0393FC83ABF87AA42BC67BBA07C71C69 ] C:\Windows\System32\KBDSP.DLL

16:20:11.0226 7980  C:\Windows\System32\KBDSP.DLL - ok

16:20:11.0229 7980  [ 1107BD574A84367735FEC38B9BD64E6B ] C:\Windows\System32\apphelp.dll

16:20:11.0229 7980  C:\Windows\System32\apphelp.dll - ok

16:20:11.0232 7980  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\System32\services.exe

16:20:11.0232 7980  C:\Windows\System32\services.exe - ok

16:20:11.0235 7980  [ 92283D9E33EC5F41ECC0B430B7459241 ] C:\Windows\System32\WlS0WndH.dll

16:20:11.0235 7980  C:\Windows\System32\WlS0WndH.dll - ok

16:20:11.0238 7980  [ CF9F5BBC2740C41DD471278C41B91F5F ] C:\Windows\System32\cdd.dll

16:20:11.0238 7980  C:\Windows\System32\cdd.dll - ok

16:20:11.0242 7980  [ BE6FAC6F0745C67DAE7522C96406D083 ] C:\Windows\System32\sxs.dll

16:20:11.0242 7980  C:\Windows\System32\sxs.dll - ok

16:20:11.0245 7980  [ A3E186B4B935905B829219502557314E ] C:\Windows\System32\lsass.exe

16:20:11.0245 7980  C:\Windows\System32\lsass.exe - ok

16:20:11.0248 7980  [ D90911B3FA05D7B930C1286084B404DE ] C:\Windows\System32\scesrv.dll

16:20:11.0248 7980  C:\Windows\System32\scesrv.dll - ok

16:20:11.0251 7980  [ 178FAC2B7C66E9A4400CE7AC37623E3F ] C:\Windows\System32\lsasrv.dll

16:20:11.0251 7980  C:\Windows\System32\lsasrv.dll - ok

16:20:11.0254 7980  [ 1AE011BB950A5E0B05023D2AFEC3666D ] C:\Windows\System32\authz.dll

16:20:11.0254 7980  C:\Windows\System32\authz.dll - ok

16:20:11.0257 7980  [ 7808BF0E367ED7348808879CEF482AB3 ] C:\Windows\System32\samsrv.dll

16:20:11.0257 7980  C:\Windows\System32\samsrv.dll - ok

16:20:11.0260 7980  [ 98B656EAF128CD06F625B09C84D959E1 ] C:\Windows\System32\netapi32.dll

16:20:11.0260 7980  C:\Windows\System32\netapi32.dll - ok

16:20:11.0263 7980  [ 459B48188494490707DCA8BAA91AA185 ] C:\Windows\System32\cryptdll.dll

16:20:11.0263 7980  C:\Windows\System32\cryptdll.dll - ok

16:20:11.0266 7980  [ 85E861D0B88DB2B54ACB0839654C09F7 ] C:\Windows\System32\dnsapi.dll

16:20:11.0266 7980  C:\Windows\System32\dnsapi.dll - ok

16:20:11.0269 7980  [ 4774AD6C447E02E954BD9A793614EBEC ] C:\Windows\System32\lsm.exe

16:20:11.0269 7980  C:\Windows\System32\lsm.exe - ok

16:20:11.0273 7980  [ EE2FF9A3FC4404234BE3B7C6AA383AF8 ] C:\Windows\System32\msasn1.dll

16:20:11.0273 7980  C:\Windows\System32\msasn1.dll - ok

16:20:11.0276 7980  [ 453DE2958C885527E20C79A3FEFE6AF7 ] C:\Windows\System32\samlib.dll

16:20:11.0276 7980  C:\Windows\System32\samlib.dll - ok

16:20:11.0279 7980  [ B0F9073BE86C6D4EDD4EBA674251E699 ] C:\Windows\System32\crypt32.dll

16:20:11.0279 7980  C:\Windows\System32\crypt32.dll - ok

16:20:11.0282 7980  [ 965AC9FBF2C67231C157E99C03C58D24 ] C:\Windows\System32\feclient.dll

16:20:11.0282 7980  C:\Windows\System32\feclient.dll - ok

16:20:11.0285 7980  [ 1F94EA31C9543B855F53BDAC7792DA4E ] C:\Windows\System32\mpr.dll

16:20:11.0285 7980  C:\Windows\System32\mpr.dll - ok

16:20:11.0288 7980  [ 7F0F1D4B0D847696F8E309423D227DCE ] C:\Windows\System32\ntdsapi.dll

16:20:11.0288 7980  C:\Windows\System32\ntdsapi.dll - ok

16:20:11.0292 7980  [ 71F5A7104FDF16C0AC5283A6CE666553 ] C:\Windows\System32\sysntfy.dll

16:20:11.0292 7980  C:\Windows\System32\sysntfy.dll - ok

16:20:11.0295 7980  [ 2FA16465F64DB54B1F7F511395EB4FD7 ] C:\Windows\System32\ncobjapi.dll

16:20:11.0295 7980  C:\Windows\System32\ncobjapi.dll - ok

16:20:11.0298 7980  [ F0321DA5203F1E71917F3B7A13DC4912 ] C:\Windows\System32\wmsgapi.dll

16:20:11.0298 7980  C:\Windows\System32\wmsgapi.dll - ok

16:20:11.0301 7980  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] C:\Windows\System32\aelupsvc.dll

16:20:11.0301 7980  C:\Windows\System32\aelupsvc.dll - ok

16:20:11.0304 7980  [ C6DF7A87063D006ECF1FD8156CB6DE3F ] C:\Windows\System32\SLC.dll

16:20:11.0304 7980  C:\Windows\System32\SLC.dll - ok

16:20:11.0308 7980  [ 4DE3C4D07BAFDE616EFA0ADE076CBAC2 ] C:\Windows\System32\wevtapi.dll

16:20:11.0308 7980  C:\Windows\System32\wevtapi.dll - ok

16:20:11.0312 7980  [ 9028559C132146FB75EB7ACF384B086A ] C:\Windows\System32\dhcpcsvc.dll

16:20:11.0312 7980  C:\Windows\System32\dhcpcsvc.dll - ok

16:20:11.0315 7980  [ DFB6B71CDABA9DFB49C9D2B318B97A1A ] C:\Windows\System32\dhcpcsvc6.dll

16:20:11.0315 7980  C:\Windows\System32\dhcpcsvc6.dll - ok

16:20:11.0318 7980  [ 4FE8425F21B3F0F8C4B4726351D43EAA ] C:\Windows\System32\IPHLPAPI.DLL

16:20:11.0318 7980  C:\Windows\System32\IPHLPAPI.DLL - ok

16:20:11.0321 7980  [ 6B09105742C75DF80CEF21700F20F55A ] C:\Windows\System32\winnsi.dll

16:20:11.0321 7980  C:\Windows\System32\winnsi.dll - ok

16:20:11.0324 7980  [ 7F15B4953378C8B5161D65C26D5FED4D ] C:\Windows\System32\cngaudit.dll

16:20:11.0324 7980  C:\Windows\System32\cngaudit.dll - ok

16:20:11.0328 7980  [ A1545B731579895D8CC44FC0481C1192 ] C:\Windows\System32\alg.exe

16:20:11.0328 7980  C:\Windows\System32\alg.exe - ok

16:20:11.0331 7980  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] C:\Windows\System32\appinfo.dll

16:20:11.0331 7980  C:\Windows\System32\appinfo.dll - ok

16:20:11.0334 7980  [ 68E2A1A0407A66CF50DA0300852424AB ] C:\Windows\System32\audiosrv.dll

16:20:11.0334 7980  C:\Windows\System32\audiosrv.dll - ok

16:20:11.0337 7980  [ C789AF0F724FDA5852FB9A7D3A432381 ] C:\Windows\System32\BFE.DLL

16:20:11.0337 7980  C:\Windows\System32\BFE.DLL - ok

16:20:11.0340 7980  [ 93952506C6D67330367F7E7934B6A02F ] C:\Windows\System32\qmgr.dll

16:20:11.0340 7980  C:\Windows\System32\qmgr.dll - ok

16:20:11.0343 7980  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] C:\Windows\System32\browser.dll

16:20:11.0343 7980  C:\Windows\System32\browser.dll - ok

16:20:11.0346 7980  [ A4C8377FA4A994E07075107DBE2E3DCE ] C:\Windows\System32\bthserv.dll

16:20:11.0346 7980  C:\Windows\System32\bthserv.dll - ok

16:20:11.0348 7980  [ 312EC3E37A0A1F2006534913E37B4423 ] C:\Windows\System32\certprop.dll

16:20:11.0348 7980  C:\Windows\System32\certprop.dll - ok

16:20:11.0351 7980  [ DE0DD9AE3430F84A96B5501112A696BE ] C:\Windows\System32\bcrypt.dll

16:20:11.0351 7980  C:\Windows\System32\bcrypt.dll - ok

16:20:11.0354 7980  [ 188CC19108B0EBD6332D6628D4EDE469 ] C:\Windows\System32\ncrypt.dll

16:20:11.0354 7980  C:\Windows\System32\ncrypt.dll - ok

16:20:11.0357 7980  [ 4211249955AF9133E2E357CC92B54DFD ] C:\Windows\System32\comres.dll

16:20:11.0358 7980  C:\Windows\System32\comres.dll - ok

16:20:11.0361 7980  [ 26F139DDEC6407508071930D3D07337E ] C:\Windows\System32\credssp.dll

16:20:11.0361 7980  C:\Windows\System32\credssp.dll - ok

16:20:11.0364 7980  [ F1E8C34892336D33EDDCDFE44E474F64 ] C:\Windows\System32\cryptsvc.dll

16:20:11.0364 7980  C:\Windows\System32\cryptsvc.dll - ok

16:20:11.0367 7980  [ ABE9EEA1EABEA0711610A637A7B1C25D ] C:\Windows\System32\msprivs.dll

16:20:11.0367 7980  C:\Windows\System32\msprivs.dll - ok

16:20:11.0369 7980  [ 08D6D1692B62C9EE4062E1FA04D8FE2F ] C:\Windows\System32\oleres.dll

16:20:11.0370 7980  C:\Windows\System32\oleres.dll - ok

16:20:11.0373 7980  [ 74F380C8EC8813626C670D46E8A714D1 ] C:\Windows\System32\dfsrres.dll

16:20:11.0373 7980  C:\Windows\System32\dfsrres.dll - ok

16:20:11.0376 7980  [ AA01497884F9CBAC89470120AF78D2B1 ] C:\Windows\System32\kerberos.dll

16:20:11.0376 7980  C:\Windows\System32\kerberos.dll - ok

16:20:11.0379 7980  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] C:\Windows\System32\dot3svc.dll

16:20:11.0379 7980  C:\Windows\System32\dot3svc.dll - ok

16:20:11.0382 7980  [ 9E80FF0752E365F97FD2D1D68C2AFDA1 ] C:\Windows\System32\wship6.dll

16:20:11.0382 7980  C:\Windows\System32\wship6.dll - ok

16:20:11.0385 7980  [ 22CFAEB9172F5F198048401485CD0571 ] C:\Windows\System32\WSHTCPIP.DLL

16:20:11.0385 7980  C:\Windows\System32\WSHTCPIP.DLL - ok

16:20:11.0388 7980  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] C:\Windows\System32\dps.dll

16:20:11.0388 7980  C:\Windows\System32\dps.dll - ok

16:20:11.0391 7980  [ C0B95E40D85CD807D614E264248A45B9 ] C:\Windows\System32\eapsvc.dll

16:20:11.0391 7980  C:\Windows\System32\eapsvc.dll - ok

16:20:11.0394 7980  [ 9BE3744D295A7701EB425332014F0797 ] C:\Windows\ehome\ehrecvr.exe

16:20:11.0394 7980  C:\Windows\ehome\ehrecvr.exe - ok

16:20:11.0397 7980  [ AD1870C8E5D6DD340C829E6074BF3C3F ] C:\Windows\ehome\ehsched.exe

16:20:11.0397 7980  C:\Windows\ehome\ehsched.exe - ok

16:20:11.0400 7980  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] C:\Windows\ehome\ehstart.dll

16:20:11.0400 7980  C:\Windows\ehome\ehstart.dll - ok

16:20:11.0403 7980  [ 4E6B23DFC917EA39306B529B773950F4 ] C:\Windows\System32\emdmgmt.dll

16:20:11.0403 7980  C:\Windows\System32\emdmgmt.dll - ok

16:20:11.0407 7980  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] C:\Windows\System32\nlasvc.dll

16:20:11.0407 7980  C:\Windows\System32\nlasvc.dll - ok

16:20:11.0410 7980  [ 05C3B38DB95BA5585817A4F898EE5581 ] C:\Windows\System32\wshqos.dll

16:20:11.0410 7980  C:\Windows\System32\wshqos.dll - ok

16:20:11.0413 7980  [ 8617350C9B590B63E620881092751BCB ] C:\Windows\System32\mswsock.dll

16:20:11.0413 7980  C:\Windows\System32\mswsock.dll - ok

16:20:11.0416 7980  [ FC62A635063B762E1C3C60EA77279378 ] C:\Windows\System32\NapiNSP.dll

16:20:11.0416 7980  C:\Windows\System32\NapiNSP.dll - ok

16:20:11.0419 7980  [ 690D41DF1D555F96D4898A0F54EBA065 ] C:\Windows\System32\pnrpnsp.dll

16:20:11.0419 7980  C:\Windows\System32\pnrpnsp.dll - ok

16:20:11.0422 7980  [ 4ABCE74D012971305249E45E095E9EA6 ] C:\Windows\System32\msv1_0.dll

16:20:11.0422 7980  C:\Windows\System32\msv1_0.dll - ok

16:20:11.0425 7980  [ 95DAECF0FB120A7B5DA679CC54E37DDE ] C:\Windows\System32\netlogon.dll

16:20:11.0425 7980  C:\Windows\System32\netlogon.dll - ok

16:20:11.0428 7980  [ A1B40A28F38D27A7E3229EE4C7064434 ] C:\Windows\System32\wevtsvc.dll

16:20:11.0428 7980  C:\Windows\System32\wevtsvc.dll - ok

16:20:11.0432 7980  [ 898E7C06A350D4A1A64A9EA264D55452 ] C:\Windows\System32\winlogon.exe

16:20:11.0432 7980  C:\Windows\System32\winlogon.exe - ok

16:20:11.0435 7980  [ 72910BC4A218C49EA8E43D1FAEC403A5 ] C:\Windows\System32\winbrand.dll

16:20:11.0435 7980  C:\Windows\System32\winbrand.dll - ok

16:20:11.0438 7980  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] C:\Windows\System32\fdPHost.dll

16:20:11.0438 7980  C:\Windows\System32\fdPHost.dll - ok

16:20:11.0441 7980  [ 50E3E76B0901BB4FC029BB88BFA5CE79 ] C:\Windows\System32\schannel.dll

16:20:11.0441 7980  C:\Windows\System32\schannel.dll - ok

16:20:11.0444 7980  [ 93620229F3CC3B67A3528BF39F064C30 ] C:\Windows\System32\wdigest.dll

16:20:11.0444 7980  C:\Windows\System32\wdigest.dll - ok

16:20:11.0447 7980  [ E14170AEA125119B98FA2BDE3FF4F462 ] C:\Windows\System32\rsaenh.dll

16:20:11.0447 7980  C:\Windows\System32\rsaenh.dll - ok

16:20:11.0450 7980  [ F8873D15018F411588BEC02C1725BADA ] C:\Windows\System32\TSpkg.dll

16:20:11.0450 7980  C:\Windows\System32\TSpkg.dll - ok

16:20:11.0453 7980  [ 0F420E81062757EA8363CBACD4D40D6D ] C:\Windows\System32\gpapi.dll

16:20:11.0453 7980  C:\Windows\System32\gpapi.dll - ok

16:20:11.0457 7980  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] C:\Windows\System32\FDResPub.dll

16:20:11.0457 7980  C:\Windows\System32\FDResPub.dll - ok

16:20:11.0460 7980  [ 8CE364388C8ECA59B14B539179276D44 ] C:\Windows\System32\FntCache.dll

16:20:11.0460 7980  C:\Windows\System32\FntCache.dll - ok

16:20:11.0463 7980  [ 302964DCAC79D618CC7B72C778DA9FD2 ] C:\Windows\System32\PresentationHost.exe

16:20:11.0463 7980  C:\Windows\System32\PresentationHost.exe - ok

16:20:11.0466 7980  [ 84067081F3318162797385E11A8F0582 ] C:\Windows\System32\hidserv.dll

16:20:11.0466 7980  C:\Windows\System32\hidserv.dll - ok

16:20:11.0469 7980  [ D8AD255B37DA92434C26E4876DB7D418 ] C:\Windows\System32\KMSVC.DLL

16:20:11.0469 7980  C:\Windows\System32\KMSVC.DLL - ok

16:20:11.0473 7980  [ 05586F5438AB0DA4F5149159E0E5FD4B ] C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll

16:20:11.0473 7980  C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll - ok

16:20:11.0476 7980  [ 9908D8A397B76CD8D31D0D383C5773C9 ] C:\Windows\System32\IKEEXT.DLL

16:20:11.0476 7980  C:\Windows\System32\IKEEXT.DLL - ok

16:20:11.0479 7980  [ 9AC218C6E6105477484C6FDBE7D409A4 ] C:\Windows\System32\IPBusEnum.dll

16:20:11.0479 7980  C:\Windows\System32\IPBusEnum.dll - ok

16:20:11.0482 7980  [ 3464DAE0E801F5A81A23C571D86F30B2 ] C:\Windows\System32\rascfg.dll

16:20:11.0482 7980  C:\Windows\System32\rascfg.dll - ok

16:20:11.0485 7980  [ 4AAFC7461633848AA87A363B2CBEC522 ] C:\Windows\System32\winsta.dll

16:20:11.0485 7980  C:\Windows\System32\winsta.dll - ok

16:20:11.0488 7980  [ 1998BD97F950680BB55F55A7244679C2 ] C:\Windows\System32\iphlpsvc.dll

16:20:11.0488 7980  C:\Windows\System32\iphlpsvc.dll - ok

16:20:11.0492 7980  [ 74C2F29CC612B2B34231BEBD824D2FB2 ] C:\Windows\System32\keyiso.dll

16:20:11.0492 7980  C:\Windows\System32\keyiso.dll - ok

16:20:11.0495 7980  [ 1BF5EEBFD518DD7298434D8C862F825D ] C:\Windows\System32\srvsvc.dll

16:20:11.0495 7980  C:\Windows\System32\srvsvc.dll - ok

16:20:11.0498 7980  [ 1DB69705B695B987082C8BAEC0C6B34F ] C:\Windows\System32\wkssvc.dll

16:20:11.0498 7980  C:\Windows\System32\wkssvc.dll - ok

16:20:11.0501 7980  [ 132F6237FA3BF3E9715F63A1CCF72BF1 ] C:\Windows\ehome\ehres.dll

16:20:11.0501 7980  C:\Windows\ehome\ehres.dll - ok

16:20:11.0504 7980  [ FA0593D936C9B95FB6FAA32AD1595D49 ] C:\Windows\System32\lltdres.dll

16:20:11.0504 7980  C:\Windows\System32\lltdres.dll - ok

16:20:11.0507 7980  [ 35D40113E4A5B961B6CE5C5857702518 ] C:\Windows\System32\lmhsvc.dll

16:20:11.0507 7980  C:\Windows\System32\lmhsvc.dll - ok

16:20:11.0510 7980  [ 95F1EB99B81CFD6F581C85F0A0AA9B2B ] C:\Windows\System32\FirewallAPI.dll

16:20:11.0510 7980  C:\Windows\System32\FirewallAPI.dll - ok

16:20:11.0513 7980  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] C:\Windows\System32\mmcss.dll

16:20:11.0513 7980  C:\Windows\System32\mmcss.dll - ok

16:20:11.0516 7980  [ EA822412BBBA9B7D2B1A3748AD50EFB8 ] C:\Windows\System32\iscsidsc.dll

16:20:11.0516 7980  C:\Windows\System32\iscsidsc.dll - ok

16:20:11.0519 7980  [ ED21401F1E2F6BC2F54C462BB66D0D6B ] C:\Windows\System32\msimsg.dll

16:20:11.0519 7980  C:\Windows\System32\msimsg.dll - ok

16:20:11.0523 7980  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] C:\Windows\System32\QAGENTRT.DLL

16:20:11.0523 7980  C:\Windows\System32\QAGENTRT.DLL - ok

16:20:11.0526 7980  [ C8052711DAECC48B982434C5116CA401 ] C:\Windows\System32\netman.dll

16:20:11.0526 7980  C:\Windows\System32\netman.dll - ok

16:20:11.0529 7980  [ 4EF5DF1B011B05737ECB8F0B7B171510 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll

16:20:11.0529 7980  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll - ok

16:20:11.0532 7980  [ ED640F4CE585058119B824CC76591D9C ] C:\Windows\System32\netprof.dll

16:20:11.0532 7980  C:\Windows\System32\netprof.dll - ok

16:20:11.0535 7980  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] C:\Windows\System32\nsisvc.dll

16:20:11.0536 7980  C:\Windows\System32\nsisvc.dll - ok

16:20:11.0538 7980  [ 0C8E8E61AD1EB0B250B846712C917506 ] C:\Windows\System32\p2psvc.dll

16:20:11.0539 7980  C:\Windows\System32\p2psvc.dll - ok

16:20:11.0542 7980  [ C6276AD11F4BB49B58AA1ED88537F14A ] C:\Windows\System32\pcasvc.dll

16:20:11.0542 7980  C:\Windows\System32\pcasvc.dll - ok

16:20:11.0545 7980  [ B1689DF169143F57053F795390C99DB3 ] C:\Windows\System32\pla.dll

16:20:11.0545 7980  C:\Windows\System32\pla.dll - ok

16:20:11.0548 7980  [ C5E7F8A996EC0A82D508FD9064A5569E ] C:\Windows\System32\umpnpmgr.dll

16:20:11.0548 7980  C:\Windows\System32\umpnpmgr.dll - ok

16:20:11.0551 7980  [ 64B28D672B5B6A01E87B0C3096B1E047 ] C:\Windows\System32\polstore.dll

16:20:11.0551 7980  C:\Windows\System32\polstore.dll - ok

16:20:11.0554 7980  [ 0508FAA222D28835310B7BFCA7A77346 ] C:\Windows\System32\profsvc.dll

16:20:11.0554 7980  C:\Windows\System32\profsvc.dll - ok

16:20:11.0557 7980  [ 08F9134A2215B7ED985409A4DF60AC60 ] C:\Windows\System32\psbase.dll

16:20:11.0557 7980  C:\Windows\System32\psbase.dll - ok

16:20:11.0560 7980  [ 9F5E0E1926014D17486901C88ECA2DB7 ] C:\Windows\System32\drivers\qwavedrv.sys

16:20:11.0560 7980  C:\Windows\System32\drivers\qwavedrv.sys - ok

16:20:11.0564 7980  [ E9ECAE663F47E6CB43962D18AB18890F ] C:\Windows\System32\qwave.dll

16:20:11.0564 7980  C:\Windows\System32\qwave.dll - ok

16:20:11.0567 7980  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] C:\Windows\System32\rasauto.dll

16:20:11.0567 7980  C:\Windows\System32\rasauto.dll - ok

16:20:11.0570 7980  [ 75D47445D70CA6F9F894B032FBC64FCF ] C:\Windows\System32\rasmans.dll

16:20:11.0570 7980  C:\Windows\System32\rasmans.dll - ok

16:20:11.0573 7980  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] C:\Windows\System32\sstpsvc.dll

16:20:11.0573 7980  C:\Windows\System32\sstpsvc.dll - ok

16:20:11.0576 7980  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] C:\Windows\System32\mprdim.dll

16:20:11.0576 7980  C:\Windows\System32\mprdim.dll - ok

16:20:11.0579 7980  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] C:\Windows\System32\regsvc.dll

16:20:11.0579 7980  C:\Windows\System32\regsvc.dll - ok

16:20:11.0582 7980  [ 5123F83CBC4349D065534EEB6BBDC42B ] C:\Windows\System32\Locator.exe

16:20:11.0582 7980  C:\Windows\System32\Locator.exe - ok

16:20:11.0585 7980  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] C:\Windows\System32\SCardSvr.dll

16:20:11.0585 7980  C:\Windows\System32\SCardSvr.dll - ok

16:20:11.0588 7980  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] C:\Windows\System32\schedsvc.dll

16:20:11.0588 7980  C:\Windows\System32\schedsvc.dll - ok

16:20:11.0591 7980  [ 716313D9F6B0529D03F726D5AAF6F191 ] C:\Windows\System32\sdrsvc.dll

16:20:11.0591 7980  C:\Windows\System32\sdrsvc.dll - ok

16:20:11.0594 7980  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] C:\Windows\System32\seclogon.dll

16:20:11.0594 7980  C:\Windows\System32\seclogon.dll - ok

16:20:11.0596 7980  [ A9BBAB5759771E523F55563D6CBE140F ] C:\Windows\System32\Sens.dll

16:20:11.0596 7980  C:\Windows\System32\Sens.dll - ok

16:20:11.0600 7980  [ D2193326F729B163125610DBF3E17D57 ] C:\Windows\System32\SessEnv.dll

16:20:11.0600 7980  C:\Windows\System32\SessEnv.dll - ok

16:20:11.0603 7980  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] C:\Windows\System32\ipnathlp.dll

16:20:11.0603 7980  C:\Windows\System32\ipnathlp.dll - ok

16:20:11.0606 7980  [ C7230FBEE14437716701C15BE02C27B8 ] C:\Windows\System32\shsvcs.dll

16:20:11.0606 7980  C:\Windows\System32\shsvcs.dll - ok

16:20:11.0609 7980  [ 862BB4CBC05D80C5B45BE430E5EF872F ] C:\Windows\System32\SLsvc.exe

16:20:11.0609 7980  C:\Windows\System32\SLsvc.exe - ok

16:20:11.0612 7980  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] C:\Windows\System32\SLUINotify.dll

16:20:11.0612 7980  C:\Windows\System32\SLUINotify.dll - ok

16:20:11.0615 7980  [ E4060CFE50F87C72316CB0FDB20E4913 ] C:\Windows\System32\tcpipcfg.dll

16:20:11.0615 7980  C:\Windows\System32\tcpipcfg.dll - ok

16:20:11.0618 7980  [ 2A146A055B4401C16EE62D18B8E2A032 ] C:\Windows\System32\snmptrap.exe

16:20:11.0618 7980  C:\Windows\System32\snmptrap.exe - ok

16:20:11.0622 7980  [ 8554097E5136C3BF9F69FE578A1B35F4 ] C:\Windows\System32\spoolsv.exe

16:20:11.0622 7980  C:\Windows\System32\spoolsv.exe - ok

16:20:11.0625 7980  [ 03D50B37234967433A5EA5BA72BC0B62 ] C:\Windows\System32\ssdpsrv.dll

16:20:11.0625 7980  C:\Windows\System32\ssdpsrv.dll - ok

16:20:11.0628 7980  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] C:\Windows\System32\wiaservc.dll

16:20:11.0628 7980  C:\Windows\System32\wiaservc.dll - ok

16:20:11.0631 7980  [ F21FD248040681CCA1FB6C9A03AAA93D ] C:\Windows\System32\swprv.dll

16:20:11.0631 7980  C:\Windows\System32\swprv.dll - ok

16:20:11.0634 7980  [ 9A51B04E9886AA4EE90093586B0BA88D ] C:\Windows\System32\sysmain.dll

16:20:11.0634 7980  C:\Windows\System32\sysmain.dll - ok

16:20:11.0637 7980  [ 2DCA225EAE15F42C0933E998EE0231C3 ] C:\Windows\System32\TabSvc.dll

16:20:11.0637 7980  C:\Windows\System32\TabSvc.dll - ok

16:20:11.0640 7980  [ D7673E4B38CE21EE54C59EEEB65E2483 ] C:\Windows\System32\tapisrv.dll

16:20:11.0640 7980  C:\Windows\System32\tapisrv.dll - ok

16:20:11.0643 7980  [ CB05822CD9CC6C688168E113C603DBE7 ] C:\Windows\System32\tbssvc.dll

16:20:11.0643 7980  C:\Windows\System32\tbssvc.dll - ok

16:20:11.0646 7980  [ BB95DA09BEF6E7A131BFF3BA5032090D ] C:\Windows\System32\termsrv.dll

16:20:11.0646 7980  C:\Windows\System32\termsrv.dll - ok

16:20:11.0649 7980  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] C:\Windows\servicing\TrustedInstaller.exe

16:20:11.0649 7980  C:\Windows\servicing\TrustedInstaller.exe - ok

16:20:11.0652 7980  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] C:\Windows\System32\trkwks.dll

16:20:11.0652 7980  C:\Windows\System32\trkwks.dll - ok

16:20:11.0655 7980  [ ECEF404F62863755951E09C802C94AD5 ] C:\Windows\System32\UI0Detect.exe

16:20:11.0655 7980  C:\Windows\System32\UI0Detect.exe - ok

16:20:11.0659 7980  [ 68308183F4AE0BE7BF8ECD07CB297999 ] C:\Windows\System32\upnphost.dll

16:20:11.0659 7980  C:\Windows\System32\upnphost.dll - ok

16:20:11.0662 7980  [ 01DD1004181FD46ECDC3628228EB269D ] C:\Windows\System32\dwm.exe

16:20:11.0662 7980  C:\Windows\System32\dwm.exe - ok

16:20:11.0665 7980  [ CD88D1B7776DC17A119049742EC07EB4 ] C:\Windows\System32\vds.exe

16:20:11.0665 7980  C:\Windows\System32\vds.exe - ok

16:20:11.0668 7980  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] C:\Windows\System32\VSSVC.exe

16:20:11.0668 7980  C:\Windows\System32\VSSVC.exe - ok

16:20:11.0671 7980  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] C:\Windows\System32\w32time.dll

16:20:11.0671 7980  C:\Windows\System32\w32time.dll - ok

16:20:11.0674 7980  [ A3CD60FD826381B49F03832590E069AF ] C:\Windows\System32\wcncsvc.dll

16:20:11.0674 7980  C:\Windows\System32\wcncsvc.dll - ok

16:20:11.0677 7980  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] C:\Windows\System32\WcsPlugInService.dll

16:20:11.0677 7980  C:\Windows\System32\WcsPlugInService.dll - ok

16:20:11.0681 7980  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] C:\Windows\System32\wdi.dll

16:20:11.0681 7980  C:\Windows\System32\wdi.dll - ok

16:20:11.0684 7980  [ 04C37D8107320312FBAE09926103D5E2 ] C:\Windows\System32\WebClnt.dll

16:20:11.0684 7980  C:\Windows\System32\WebClnt.dll - ok

16:20:11.0687 7980  [ AE3736E7E8892241C23E4EBBB7453B60 ] C:\Windows\System32\wecsvc.dll

16:20:11.0687 7980  C:\Windows\System32\wecsvc.dll - ok

16:20:11.0692 7980  [ 670FF720071ED741206D69BD995EA453 ] C:\Windows\System32\wercplsupport.dll

16:20:11.0692 7980  C:\Windows\System32\wercplsupport.dll - ok

16:20:11.0695 7980  [ 32B88481D3B326DA6DEB07B1D03481E7 ] C:\Windows\System32\wersvc.dll

16:20:11.0695 7980  C:\Windows\System32\wersvc.dll - ok

16:20:11.0699 7980  [ 62DB790A860CDFC4278D2F03CC5675D8 ] C:\Program Files\Windows Defender\MsMpRes.dll

16:20:11.0699 7980  C:\Program Files\Windows Defender\MsMpRes.dll - ok

16:20:11.0702 7980  [ DBD02E3E6F061EBBBF9B99A9D7CBA30B ] C:\Windows\System32\winhttp.dll

16:20:11.0702 7980  C:\Windows\System32\winhttp.dll - ok

16:20:11.0705 7980  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] C:\Windows\System32\wbem\WMIsvc.dll

16:20:11.0705 7980  C:\Windows\System32\wbem\WMIsvc.dll - ok

16:20:11.0709 7980  [ 7CFE68BDC065E55AA5E8421607037511 ] C:\Windows\System32\WsmSvc.dll

16:20:11.0709 7980  C:\Windows\System32\WsmSvc.dll - ok

16:20:11.0712 7980  [ C008405E4FEEB069E30DA1D823910234 ] C:\Windows\System32\wlansvc.dll

16:20:11.0712 7980  C:\Windows\System32\wlansvc.dll - ok

16:20:11.0716 7980  [ 43BE3875207DCB62A85C8C49970B66CC ] C:\Windows\System32\wbem\WmiApSrv.exe

16:20:11.0716 7980  C:\Windows\System32\wbem\WmiApSrv.exe - ok

16:20:11.0719 7980  [ 3978704576A121A9204F8CC49A301A9B ] C:\Program Files\Windows Media Player\wmpnetwk.exe

16:20:11.0719 7980  C:\Program Files\Windows Media Player\wmpnetwk.exe - ok

16:20:11.0722 7980  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] C:\Windows\System32\wpcsvc.dll

16:20:11.0722 7980  C:\Windows\System32\wpcsvc.dll - ok

16:20:11.0726 7980  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:20:11.0726 7980  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe - ok

16:20:11.0729 7980  [ 801FBDB89D472B3C467EB112A0FC9246 ] C:\Windows\System32\wpdbusenum.dll

16:20:11.0729 7980  C:\Windows\System32\wpdbusenum.dll - ok

16:20:11.0733 7980  [ 1CA6C40261DDC0425987980D0CD2AAAB ] C:\Windows\System32\wscsvc.dll

16:20:11.0733 7980  C:\Windows\System32\wscsvc.dll - ok

16:20:11.0736 7980  [ AED0DFF80C6B3914769407E78D7AB21A ] C:\Windows\System32\SearchIndexer.exe

16:20:11.0736 7980  C:\Windows\System32\SearchIndexer.exe - ok

16:20:11.0739 7980  [ FC3EC24FCE372C89423E015A2AC1A31E ] C:\Windows\System32\wuaueng.dll

16:20:11.0739 7980  C:\Windows\System32\wuaueng.dll - ok

16:20:11.0743 7980  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] C:\Windows\System32\WUDFSvc.dll

16:20:11.0743 7980  C:\Windows\System32\WUDFSvc.dll - ok

16:20:11.0746 7980  [ 8FC182167381E9915651267044105EE1 ] C:\Windows\System32\scecli.dll

16:20:11.0746 7980  C:\Windows\System32\scecli.dll - ok

16:20:11.0749 7980  [ CD08EEC61C591AF59A39F4363C567D30 ] C:\Windows\System32\ntmarta.dll

16:20:11.0749 7980  C:\Windows\System32\ntmarta.dll - ok

16:20:11.0752 7980  [ 3794B461C45882E06856F282EEF025AF ] C:\Windows\System32\svchost.exe

16:20:11.0752 7980  C:\Windows\System32\svchost.exe - ok

16:20:11.0755 7980  [ 9A7F4B2EDACD11444D048AA19CBB26AF ] C:\Windows\System32\powrprof.dll

16:20:11.0755 7980  C:\Windows\System32\powrprof.dll - ok

16:20:11.0759 7980  [ 8F5C7426567798E62A3B3614965D62CC ] C:\Windows\System32\drivers\luafv.sys

16:20:11.0759 7980  C:\Windows\System32\drivers\luafv.sys - ok

16:20:11.0762 7980  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] C:\Windows\System32\drivers\WUDFPf.sys

16:20:11.0762 7980  C:\Windows\System32\drivers\WUDFPf.sys - ok

16:20:11.0765 7980  [ 782945716AD010AC3D41758E8E52C735 ] C:\Windows\System32\nvvsvc.exe

16:20:11.0765 7980  C:\Windows\System32\nvvsvc.exe - ok

16:20:11.0768 7980  [ F42483814FC39170B3982A184EC5AAA2 ] C:\Windows\System32\wtsapi32.dll

16:20:11.0768 7980  C:\Windows\System32\wtsapi32.dll - ok

16:20:11.0772 7980  [ BE3C082837866C4C291ADAF163C10EA6 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll

16:20:11.0772 7980  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll - ok

16:20:11.0776 7980  [ C354621B6B94E10AE7F5CDBE745FEB86 ] C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:20:11.0776 7980  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - ok

16:20:11.0779 7980  [ 69827805A221C21450BA22F4326A2EE3 ] C:\Windows\System32\version.dll

16:20:11.0779 7980  C:\Windows\System32\version.dll - ok

16:20:11.0782 7980  [ 5EC8FB83F31AA2D6F421F02C3F4F4475 ] C:\Windows\System32\winspool.drv

16:20:11.0782 7980  C:\Windows\System32\winspool.drv - ok

16:20:11.0786 7980  [ 48ECE68A7DF667C201E719B6D282F77B ] C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll

16:20:11.0786 7980  C:\Program Files\NVIDIA Corporation\3D Vision\nvstres.dll - ok

16:20:11.0789 7980  [ A34A8F5554AA0C547B88121A3B49D88D ] C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll

16:20:11.0789 7980  C:\Program Files\NVIDIA Corporation\3D Vision\nvwl.dll - ok

16:20:11.0793 7980  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] C:\Windows\System32\rpcss.dll

16:20:11.0793 7980  C:\Windows\System32\rpcss.dll - ok

16:20:11.0796 7980  [ A99871BA522CB2539AE275AC18CACC8F ] C:\Windows\System32\cabinet.dll

16:20:11.0796 7980  C:\Windows\System32\cabinet.dll - ok

16:20:11.0799 7980  [ B2E569EF26DAC9D6994A2AFF4F601B7A ] C:\Windows\System32\wintrust.dll

16:20:11.0799 7980  C:\Windows\System32\wintrust.dll - ok

16:20:11.0802 7980  [ 62D577288B48998FC6667BF22DC5B690 ] C:\Windows\System32\LogonUI.exe

16:20:11.0802 7980  C:\Windows\System32\LogonUI.exe - ok

16:20:11.0805 7980  [ 58C2521D87C494831A625202C80354AD ] C:\Windows\System32\authui.dll

16:20:11.0805 7980  C:\Windows\System32\authui.dll - ok

16:20:11.0809 7980  [ C9244BCAC83B259B920BBEE18A97BFE1 ] C:\Windows\System32\avrt.dll

16:20:11.0809 7980  C:\Windows\System32\avrt.dll - ok

16:20:11.0812 7980  [ 56B5914070B2C243DFB3D186070DA89D ] C:\Windows\System32\MMDevAPI.dll

16:20:11.0812 7980  C:\Windows\System32\MMDevAPI.dll - ok

16:20:11.0815 7980  [ 2EC53B5A351C4D443896DBAD117F7E82 ] C:\Windows\System32\msimg32.dll

16:20:11.0816 7980  C:\Windows\System32\msimg32.dll - ok

16:20:11.0819 7980  [ 999D69DEB576C2C424294DF025891CC6 ] C:\Windows\System32\uxtheme.dll

16:20:11.0819 7980  C:\Windows\System32\uxtheme.dll - ok

16:20:11.0822 7980  [ 83E354791CF2A6A74F077F79D2A2E40E ] C:\Windows\System32\WUDFPlatform.dll

16:20:11.0822 7980  C:\Windows\System32\WUDFPlatform.dll - ok

16:20:11.0825 7980  [ EC43D9CC95C3BB5FEFDBCF22D375E1F5 ] C:\Windows\System32\adtschema.dll

16:20:11.0825 7980  C:\Windows\System32\adtschema.dll - ok

16:20:11.0829 7980  [ 97FEF831AB90BEE128C9AF390E243F80 ] C:\Windows\System32\drivers\drmkaud.sys

16:20:11.0829 7980  C:\Windows\System32\drivers\drmkaud.sys - ok

16:20:11.0832 7980  [ 76EAEF4DDEBBC7C38853F586C0E91DCE ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll

16:20:11.0832 7980  C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052ca1013d0\GdiPlus.dll - ok

16:20:11.0836 7980  [ 75EB73E64F5B4655D9797D20F26DE320 ] C:\Windows\System32\duser.dll

16:20:11.0836 7980  C:\Windows\System32\duser.dll - ok

16:20:11.0839 7980  [ 3437B9E218A2E4586BEF4F7A3BD00777 ] C:\Windows\System32\audiodg.exe

16:20:11.0839 7980  C:\Windows\System32\audiodg.exe - ok

16:20:11.0843 7980  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] C:\Windows\System32\drivers\fltMgr.sys

16:20:11.0843 7980  C:\Windows\System32\drivers\fltMgr.sys - ok

16:20:11.0846 7980  [ 57418956DDAE128D1023C508E7D07071 ] C:\Windows\System32\PSHED.DLL

16:20:11.0846 7980  C:\Windows\System32\PSHED.DLL - ok

16:20:11.0848 7980  [ 1908CC7673F72601AFFDCA022689CEDF ] C:\Windows\System32\xmllite.dll

16:20:11.0848 7980  C:\Windows\System32\xmllite.dll - ok

16:20:11.0851 7980  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] C:\Windows\System32\gpsvc.dll

16:20:11.0851 7980  C:\Windows\System32\gpsvc.dll - ok

16:20:11.0854 7980  [ D1A84F7D4CAFCFE2A32149FF418056E5 ] C:\Windows\System32\nlaapi.dll

16:20:11.0854 7980  C:\Windows\System32\nlaapi.dll - ok

16:20:11.0858 7980  [ 409F36C8BD06FCE184631EB4142B009A ] C:\Windows\System32\atl.dll

16:20:11.0858 7980  C:\Windows\System32\atl.dll - ok

16:20:11.0862 7980  [ A7F8BAD9590ADDC425B4003E94780DFA ] C:\Windows\System32\drivers\spsys.sys

16:20:11.0862 7980  C:\Windows\System32\drivers\spsys.sys - ok

16:20:11.0866 7980  [ 67058C46504BC12D821F38CF99B7B28F ] C:\Windows\System32\es.dll

16:20:11.0866 7980  C:\Windows\System32\es.dll - ok

16:20:11.0869 7980  [ 7DACD94118E2D8B6D72F47ADEB0367BF ] C:\Windows\System32\propsys.dll

16:20:11.0869 7980  C:\Windows\System32\propsys.dll - ok

16:20:11.0872 7980  [ 8269CC01940A202BBB9FDF26705DBD67 ] C:\Windows\System32\hid.dll

16:20:11.0872 7980  C:\Windows\System32\hid.dll - ok

16:20:11.0876 7980  [ 1509E705F3AC1D474C92454A5C2DD81F ] C:\Windows\System32\uxsms.dll

16:20:11.0876 7980  C:\Windows\System32\uxsms.dll - ok

16:20:11.0879 7980  [ B25DBBA6C63A61FF4AFDB5ADAB4E70CB ] C:\Windows\System32\SmartcardCredentialProvider.dll

16:20:11.0879 7980  C:\Windows\System32\SmartcardCredentialProvider.dll - ok

16:20:11.0883 7980  [ 9DC3723519F52B6BC63EACD4BD411313 ] C:\Windows\System32\rasplap.dll

16:20:11.0883 7980  C:\Windows\System32\rasplap.dll - ok

16:20:11.0886 7980  [ 3CB863B78642405371CB3A71C07E2382 ] C:\Windows\System32\rasapi32.dll

16:20:11.0886 7980  C:\Windows\System32\rasapi32.dll - ok

16:20:11.0889 7980  [ 3A1DDA77F331D107BA40DB06E4D666E9 ] C:\Windows\System32\rasman.dll

16:20:11.0889 7980  C:\Windows\System32\rasman.dll - ok

16:20:11.0892 7980  [ 3D418A22A56471295AEB1CEB9027C3DA ] C:\Windows\System32\rtutils.dll

16:20:11.0892 7980  C:\Windows\System32\rtutils.dll - ok

16:20:11.0896 7980  [ 70F08ECE7A30A639D3F0C8C433685C7D ] C:\Windows\System32\tapi32.dll

16:20:11.0896 7980  C:\Windows\System32\tapi32.dll - ok

16:20:11.0899 7980  [ 14FF750EFE13B0C21E5A06507C3A97B1 ] C:\Windows\System32\winmm.dll

16:20:11.0899 7980  C:\Windows\System32\winmm.dll - ok

16:20:11.0902 7980  [ DC15AB7168C0309D8F04FD95B6240422 ] C:\Windows\System32\oleacc.dll

16:20:11.0902 7980  C:\Windows\System32\oleacc.dll - ok

16:20:11.0905 7980  [ 627920CFF5DFCF8CF54CF2D592D61307 ] C:\Windows\System32\WinSCard.dll

16:20:11.0905 7980  C:\Windows\System32\WinSCard.dll - ok

16:20:11.0908 7980  [ 12A1DF1B84FB45A00D47B2CDE2CEEBBA ] C:\Windows\System32\shgina.dll

16:20:11.0908 7980  C:\Windows\System32\shgina.dll - ok

16:20:11.0912 7980  [ D1C5883087A0C3F1344D9D55A44901F6 ] C:\Windows\System32\drivers\lltdio.sys

16:20:11.0912 7980  C:\Windows\System32\drivers\lltdio.sys - ok

16:20:11.0915 7980  [ 9C508F4074A39E8B4B31D27198146FAD ] C:\Windows\System32\drivers\rspndr.sys

16:20:11.0915 7980  C:\Windows\System32\drivers\rspndr.sys - ok

16:20:11.0918 7980  [ 70932D6C3D59B416CBD2BE5A3B3D4BE6 ] C:\Windows\System32\shacct.dll

16:20:11.0918 7980  C:\Windows\System32\shacct.dll - ok

16:20:11.0921 7980  [ 4DF066ECEE5A7B20BF8B39EF4D646600 ] C:\Windows\System32\wdmaud.drv

16:20:11.0921 7980  C:\Windows\System32\wdmaud.drv - ok

16:20:11.0925 7980  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] C:\Windows\System32\dnsrslvr.dll

16:20:11.0925 7980  C:\Windows\System32\dnsrslvr.dll - ok

16:20:11.0928 7980  [ 919CC2A0476D5A6A4C935D4B88E29912 ] C:\Windows\System32\ksuser.dll

16:20:11.0928 7980  C:\Windows\System32\ksuser.dll - ok

16:20:11.0931 7980  [ 37F929A6CC3EF6FFACC02F511DD6CBE5 ] C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

16:20:11.0931 7980  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - ok

16:20:11.0934 7980  [ DB7F4AB85298F3FE522C5512B8B0F56D ] C:\Windows\System32\AudioEng.dll

16:20:11.0934 7980  C:\Windows\System32\AudioEng.dll - ok

16:20:11.0937 7980  [ 7258434974EA735725FD2D4A65C5E821 ] C:\Windows\System32\AudioSes.dll

16:20:11.0937 7980  C:\Windows\System32\AudioSes.dll - ok

16:20:11.0941 7980  [ 6836D001FC733F205ACB80A7986CB6C9 ] C:\Windows\System32\WindowsCodecs.dll

16:20:11.0941 7980  C:\Windows\System32\WindowsCodecs.dll - ok

16:20:11.0944 7980  [ 1821828A1C14280420A2914881C25CDC ] C:\Windows\System32\nvsvc.dll

16:20:11.0944 7980  C:\Windows\System32\nvsvc.dll - ok

16:20:11.0947 7980  [ CA0B849566776A17F35F0339BE17DFD9 ] C:\Windows\System32\ktmw32.dll

16:20:11.0947 7980  C:\Windows\System32\ktmw32.dll - ok

16:20:11.0951 7980  [ 35ACD5EA63D75E97DD0E9A1629E582B2 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll

16:20:11.0951 7980  C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll - ok

16:20:11.0954 7980  [ BDBB449425991154135E5ED1559927E6 ] C:\Windows\System32\msacm32.dll

16:20:11.0954 7980  C:\Windows\System32\msacm32.dll - ok

16:20:11.0958 7980  [ 166F004D73EA2CF4AC61800CA469458D ] C:\Windows\System32\msacm32.drv

16:20:11.0958 7980  C:\Windows\System32\msacm32.drv - ok

16:20:11.0961 7980  [ 83199EF88D691E730B80666E29F90D58 ] C:\Windows\System32\midimap.dll

16:20:11.0961 7980  C:\Windows\System32\midimap.dll - ok

16:20:11.0964 7980  [ C38FD6683FD0285F0A41A6463325715D ] C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll

16:20:11.0964 7980  C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - ok

16:20:11.0968 7980  [ 5F1DEC3824E566457F53F24F493FEF08 ] C:\Windows\System32\mscms.dll

16:20:11.0968 7980  C:\Windows\System32\mscms.dll - ok

16:20:11.0971 7980  [ 296937202E4D930AAE98085B99D744D8 ] C:\Windows\System32\AUDIOKSE.dll

16:20:11.0971 7980  C:\Windows\System32\AUDIOKSE.dll - ok

16:20:11.0974 7980  [ 9B96F6952186336CC6E3D4E08BE2E0AF ] C:\Windows\System32\dwmapi.dll

16:20:11.0974 7980  C:\Windows\System32\dwmapi.dll - ok

16:20:11.0977 7980  [ 2A6A2C09ECC2CB495628E45F1379ECE8 ] C:\Windows\System32\taskcomp.dll

16:20:11.0977 7980  C:\Windows\System32\taskcomp.dll - ok

16:20:11.0981 7980  [ 665A831D7A1D46150C5D5DFD8BA9BA0F ] C:\Windows\System32\nvapi.dll

16:20:11.0981 7980  C:\Windows\System32\nvapi.dll - ok

16:20:11.0984 7980  [ D330BF0F8742EE1FFFC3A099CE310F9F ] C:\Windows\System32\RtkAPO.dll

16:20:11.0984 7980  C:\Windows\System32\RtkAPO.dll - ok

16:20:11.0987 7980  [ 3D50C4B10352367D5CB20ED1F50F8DA2 ] C:\Windows\System32\taskeng.exe

16:20:11.0987 7980  C:\Windows\System32\taskeng.exe - ok

16:20:11.0990 7980  [ F870AA3E254628EBEAFE754108D664DE ] C:\Windows\System32\drivers\http.sys

16:20:11.0990 7980  C:\Windows\System32\drivers\http.sys - ok

16:20:11.0994 7980  [ 73FE2E5FA55088A241AA2732F5D387D6 ] C:\Windows\System32\wiarpc.dll

16:20:11.0994 7980  C:\Windows\System32\wiarpc.dll - ok

16:20:11.0997 7980  [ E79FDA8D320147FDC347C504B3487F87 ] C:\Windows\System32\spoolss.dll

16:20:11.0997 7980  C:\Windows\System32\spoolss.dll - ok

16:20:12.0000 7980  [ 4203E86598D0E98D7706F7134B74B570 ] C:\Program Files\NVIDIA Corporation\Display\nvui.dll

16:20:12.0000 7980  C:\Program Files\NVIDIA Corporation\Display\nvui.dll - ok

16:20:12.0003 7980  [ B11FDCA4410D6252964EF97F9A47DE74 ] C:\Windows\System32\TSChannel.dll

16:20:12.0003 7980  C:\Windows\System32\TSChannel.dll - ok

16:20:12.0007 7980  [ 0727200F10320A6BA7E59433094FBBA7 ] C:\Windows\System32\WMALFXGFXDSP.dll

16:20:12.0007 7980  C:\Windows\System32\WMALFXGFXDSP.dll - ok

16:20:12.0010 7980  [ BF142D4F8C61ED3629A9CDD7BA867900 ] C:\Windows\System32\mfplat.dll

16:20:12.0010 7980  C:\Windows\System32\mfplat.dll - ok

16:20:12.0014 7980  [ 2F237AAB91497AAA03AF48EAE68758FC ] C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

16:20:12.0014 7980  C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE - ok

16:20:12.0017 7980  [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll

16:20:12.0017 7980  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll - ok

16:20:12.0021 7980  [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll

16:20:12.0021 7980  C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll - ok

16:20:12.0025 7980  [ 13EF0C65FAD380C4113791B947DAA7E4 ] C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL

16:20:12.0025 7980  C:\Program Files\Common Files\Symantec Shared\CCL70U.DLL - ok

16:20:12.0028 7980  [ 4934241CD20AC87D78121352E3BA8318 ] C:\Windows\System32\dbghelp.dll

16:20:12.0028 7980  C:\Windows\System32\dbghelp.dll - ok

16:20:12.0032 7980  [ 95436A92D4A2EF1D637A7345C1796DBD ] C:\Program Files\Common Files\Symantec Shared\SymNeti.dll

16:20:12.0032 7980  C:\Program Files\Common Files\Symantec Shared\SymNeti.dll - ok

16:20:12.0035 7980  [ E582816A4855914DEFFC212E12B3B744 ] C:\Windows\System32\wsock32.dll

16:20:12.0035 7980  C:\Windows\System32\wsock32.dll - ok

16:20:12.0038 7980  [ 0AB7B6A0A3A2D4C985C2A3BB363D424E ] C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL

16:20:12.0038 7980  C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL - ok

16:20:12.0042 7980  [ F8F3B92081BDC486C66547B2BA32F037 ] C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL

16:20:12.0042 7980  C:\Program Files\Common Files\Symantec Shared\CCSVC.DLL - ok

16:20:12.0046 7980  [ CDB2A791F0404A519BB24EC108667907 ] C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL

16:20:12.0046 7980  C:\Program Files\Common Files\Symantec Shared\CCIPC.DLL - ok

16:20:12.0049 7980  [ 96A61E28B4D53270D21197F86B19427B ] C:\Program Files\Common Files\Symantec Shared\CCSET.DLL

16:20:12.0049 7980  C:\Program Files\Common Files\Symantec Shared\CCSET.DLL - ok

16:20:12.0052 7980  [ 55B0C85A0CAA5B573A9F330A88251AF1 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL

16:20:12.0052 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETPLG.DLL - ok

16:20:12.0056 7980  [ 460D8766D884E629E3C82B8CF911E5F3 ] C:\Windows\System32\nvsvcr.dll

16:20:12.0056 7980  C:\Windows\System32\nvsvcr.dll - ok

16:20:12.0059 7980  [ F9DAD2257388715A4D74680EB5517C7A ] C:\Windows\System32\nvcpl.dll

16:20:12.0059 7980  C:\Windows\System32\nvcpl.dll - ok

16:20:12.0063 7980  [ F6E882AC84D298650FEABAE72FEC86BA ] C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll

16:20:12.0063 7980  C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - ok

16:20:12.0068 7980  [ EF439DAA6C29B68CFA5220726B2DDBA0 ] C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll

16:20:12.0068 7980  C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll - ok

16:20:12.0072 7980  [ 207100C67D5FD5C8F0124B1C6BF56545 ] C:\Program Files\NVIDIA Corporation\Display\nvuir.dll

16:20:12.0072 7980  C:\Program Files\NVIDIA Corporation\Display\nvuir.dll - ok

16:20:12.0075 7980  [ A75AFCBFDB730EEEE12BFDFA1907EC78 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL

16:20:12.0075 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSUBENG.DLL - ok

16:20:12.0079 7980  [ CE0F8C664F2C5900B87DC4FD9B245929 ] C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll

16:20:12.0079 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\HomeNet\hncore.dll - ok

16:20:12.0082 7980  [ 673FC8AA28C1049827F5675808FC4F74 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll

16:20:12.0082 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSvc.dll - ok

16:20:12.0086 7980  [ 374C7BB96E5E05EA771469C5BBD78905 ] C:\Program Files\Common Files\Symantec Shared\CCL70.DLL

16:20:12.0086 7980  C:\Program Files\Common Files\Symantec Shared\CCL70.DLL - ok

16:20:12.0089 7980  [ D90E198602F2FA211474F09E0B919974 ] C:\PROGRA~1\NORTON~1\tpDataSv.dll

16:20:12.0089 7980  C:\PROGRA~1\NORTON~1\tpDataSv.dll - ok

16:20:12.0093 7980  [ 98B2647B6BB59914F9AC48678B411615 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll

16:20:12.0093 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\TProcPlg.dll - ok

16:20:12.0096 7980  [ 401DFFDBBBD3F07C747ED1AE2BB88106 ] C:\Windows\System32\msi.dll

16:20:12.0096 7980  C:\Windows\System32\msi.dll - ok

16:20:12.0099 7980  [ 9367481F461AAEBD3154A184E5153897 ] C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll

16:20:12.0099 7980  C:\Program Files\Common Files\Symantec Shared\DefUtDCD.dll - ok

16:20:12.0102 7980  [ 35F82898D3598A5EBC3F71CEB8E21B0E ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL

16:20:12.0102 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEVTPLG.DLL - ok

16:20:12.0106 7980  [ C605C6E9441372DCCF427B852A5EFCF9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll

16:20:12.0106 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\AppCore\AppPlg32.dll - ok

16:20:12.0110 7980  [ 9061E7F4DB0FE7E0B8E216B796E91D26 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll

16:20:12.0110 7980  C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll - ok

16:20:12.0113 7980  [ 29F40BE4D762D12B67EB9407C2537110 ] C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll

16:20:12.0113 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSPlug.dll - ok

16:20:12.0117 7980  [ 648E58F6342D24A4FD1B90CCAE6ACF8D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll

16:20:12.0117 7980  C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll - ok

16:20:12.0120 7980  [ 73F5D6835BFA66019C03E316D99649DA ] C:\Windows\System32\drivers\CO_Mon.sys

16:20:12.0120 7980  C:\Windows\System32\drivers\CO_Mon.sys - ok

16:20:12.0123 7980  [ 75D53AAE9200EBEF669CFD27497D4B2A ] C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll

16:20:12.0123 7980  C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\idsxpx86.dll - ok

16:20:12.0127 7980  [ 4B555106290BD117334E9A08761C035A ] C:\Windows\System32\rundll32.exe

16:20:12.0127 7980  C:\Windows\System32\rundll32.exe - ok

16:20:12.0130 7980  [ 1DACD1530C6E58AEAE9F6DE7DA851935 ] C:\Windows\System32\shimeng.dll

16:20:12.0130 7980  C:\Windows\System32\shimeng.dll - ok

16:20:12.0133 7980  [ D6804F089CBB6749E95124E7C4D80900 ] C:\Windows\AppPatch\AcLayers.dll

16:20:12.0133 7980  C:\Windows\AppPatch\AcLayers.dll - ok

16:20:12.0137 7980  [ D05AAE6F63E3F0E1B2424AB6F6777D87 ] C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL

16:20:12.0137 7980  C:\Program Files\Common Files\Symantec Shared\CCEVTCLI.DLL - ok

16:20:12.0140 7980  [ 36B09A449B860EB9AB8B35C1E28AD8E3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll

16:20:12.0140 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\Firewall\FWAgent.dll - ok

16:20:12.0144 7980  [ 4B3C0DD2350F61C2CB6EBD23C9BEE0FD ] C:\Windows\System32\d3dx10_33G.dll

16:20:12.0144 7980  C:\Windows\System32\d3dx10_33G.dll - ok

16:20:12.0148 7980  [ C193C9E3A66F639D2B1EC002CCD997A3 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL

16:20:12.0148 7980  C:\Program Files\Common Files\Symantec Shared\Backup\BUSVC.DLL - ok

16:20:12.0151 7980  [ A511E531DAA0F4EAFBED6CCEEC49E059 ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll

16:20:12.0151 7980  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPCCWkr.dll - ok

16:20:12.0155 7980  [ 59DD7F48E5B6C3448D3C8D585CA73607 ] C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll

16:20:12.0155 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\PIF\{96E26~1\PifEng.dll - ok

16:20:12.0159 7980  [ 1B31592377CC3A465270F117CB3695FF ] C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll

16:20:12.0159 7980  C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll - ok

16:20:12.0162 7980  [ 60C7B0B11568809D1AE10D905674E1C8 ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll

16:20:12.0162 7980  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJob32.dll - ok

16:20:12.0165 7980  [ 295363D4317820AED0D527E15B90A8ED ] C:\Windows\System32\pdh.dll

16:20:12.0165 7980  C:\Windows\System32\pdh.dll - ok

16:20:12.0169 7980  [ 4911AA925EDEE509B73989381506EC89 ] C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll

16:20:12.0169 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEvt.dll - ok

16:20:12.0172 7980  [ BE01E566D1F569AAB32D0335613E1EEA ] C:\Windows\System32\dllhost.exe

16:20:12.0172 7980  C:\Windows\System32\dllhost.exe - ok

16:20:12.0175 7980  [ 3CD1B69551236977918E60F9543C89A2 ] C:\Windows\System32\AtBroker.exe

16:20:12.0175 7980  C:\Windows\System32\AtBroker.exe - ok

16:20:12.0179 7980  [ 0E135526E9785D085BCD9AEDE6FBCBF9 ] C:\Windows\System32\userinit.exe

16:20:12.0179 7980  C:\Windows\System32\userinit.exe - ok

16:20:12.0182 7980  [ D80C6539C00CB4F5D59066865479C308 ] C:\Windows\System32\dwmredir.dll

16:20:12.0182 7980  C:\Windows\System32\dwmredir.dll - ok

16:20:12.0185 7980  [ C99403A5B641520DAED0021DDA06F272 ] C:\Windows\System32\milcore.dll

16:20:12.0185 7980  C:\Windows\System32\milcore.dll - ok

16:20:12.0188 7980  [ D07D4C3038F3578FFCE1C0237F2A1253 ] C:\Windows\explorer.exe

16:20:12.0188 7980  C:\Windows\explorer.exe - ok

16:20:12.0192 7980  [ 77406183F152C273982F6E2B271DB3D1 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll

16:20:12.0192 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVScan.dll - ok

16:20:12.0197 7980  [ 09E6B725196DD2348E5EFB2EF5C63DEF ] C:\Program Files\Norton 360\TPSVCAV.DLL

16:20:12.0197 7980  C:\Program Files\Norton 360\TPSVCAV.DLL - ok

16:20:12.0200 7980  [ B424FDFDD16741DFA003B1C53B247D1C ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll

16:20:12.0200 7980  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\NPPDSMgr.dll - ok

16:20:12.0203 7980  [ 8AAEEE8E59A70F37579993D118A34EE0 ] C:\Windows\System32\d3d9.dll

16:20:12.0203 7980  C:\Windows\System32\d3d9.dll - ok

16:20:12.0207 7980  [ C411C80F90D6732380352B98B37BBD53 ] C:\Windows\System32\winrnr.dll

16:20:12.0207 7980  C:\Windows\System32\winrnr.dll - ok

16:20:12.0210 7980  [ 1B09279E755C896E8CEA60585995D4BD ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll

16:20:12.0210 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVDefMgr.dll - ok

16:20:12.0214 7980  [ 782C8019C89920A77B1907AD3B4C8FF9 ] C:\Windows\System32\HotStartUserAgent.dll

16:20:12.0214 7980  C:\Windows\System32\HotStartUserAgent.dll - ok

16:20:12.0217 7980  [ 7605C0E1D01A08F3ECD743F38B834A44 ] C:\Windows\System32\drivers\srvnet.sys

16:20:12.0217 7980  C:\Windows\System32\drivers\srvnet.sys - ok

16:20:12.0221 7980  [ A521BD24B5A7746441897A8163D21BF5 ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll

16:20:12.0221 7980  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coRegMon.dll - ok

16:20:12.0224 7980  [ EFA80360111D8D179E39E314A49C9ED4 ] C:\Windows\System32\wshbth.dll

16:20:12.0224 7980  C:\Windows\System32\wshbth.dll - ok

16:20:12.0227 7980  [ B0D12F4344EB2AE96E487D2DF6F74413 ] C:\Windows\System32\FWPUCLNT.DLL

16:20:12.0227 7980  C:\Windows\System32\FWPUCLNT.DLL - ok

16:20:12.0231 7980  [ A7D525E5C0D91C8C1D84C6BCD25AD77D ] C:\Windows\System32\rasadhlp.dll

16:20:12.0231 7980  C:\Windows\System32\rasadhlp.dll - ok

16:20:12.0234 7980  [ 3E050D8A83E4FD2B2CF88A1253CECF0C ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll

16:20:12.0234 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWBB.dll - ok

16:20:12.0237 7980  [ 57125869A7B9638A5D11DD685AA65EB4 ] C:\Windows\System32\PlaySndSrv.dll

16:20:12.0237 7980  C:\Windows\System32\PlaySndSrv.dll - ok

16:20:12.0241 7980  [ 8A38B5E8493A9D103083B8620AC5F3A1 ] C:\Windows\System32\tdh.dll

16:20:12.0241 7980  C:\Windows\System32\tdh.dll - ok

16:20:12.0244 7980  [ 43E1054C713C48D252A1826C5E14AACA ] C:\Windows\System32\MsCtfMonitor.dll

16:20:12.0244 7980  C:\Windows\System32\MsCtfMonitor.dll - ok

16:20:12.0247 7980  [ E45051C374F845EDF3DB02A35BA13193 ] C:\Windows\System32\umb.dll

16:20:12.0247 7980  C:\Windows\System32\umb.dll - ok

16:20:12.0250 7980  [ 626A24ED1228580B9518C01930936DF9 ] C:\Program Files\Google\Update\GoogleUpdate.exe

16:20:12.0250 7980  C:\Program Files\Google\Update\GoogleUpdate.exe - ok

16:20:12.0253 7980  [ C6DA42ADA0C5FC8CB05744229D632B47 ] C:\Windows\System32\msutb.dll

16:20:12.0253 7980  C:\Windows\System32\msutb.dll - ok

16:20:12.0257 7980  [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll

16:20:12.0257 7980  C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll - ok

16:20:12.0261 7980  [ 63396CBB1365769D520E0FD89C2419F2 ] C:\Windows\System32\localspl.dll

16:20:12.0261 7980  C:\Windows\System32\localspl.dll - ok

16:20:12.0264 7980  [ 25532414A7A088553527A75B31DF0592 ] C:\Program Files\Mozilla Firefox\firefox.exe

16:20:12.0264 7980  C:\Program Files\Mozilla Firefox\firefox.exe - ok

16:20:12.0268 7980  [ C2B5C7B5ECE593EB059FF1099F3DCC28 ] C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

16:20:12.0268 7980  C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe - ok

16:20:12.0272 7980  [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

16:20:12.0272 7980  C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

16:20:12.0275 7980  [ F4E1AA5D59C849A4AB47E895DC76B9C8 ] C:\Windows\System32\sfc.dll

16:20:12.0275 7980  C:\Windows\System32\sfc.dll - ok

16:20:12.0279 7980  [ E6F1B2C97D6E21B51A7CC18E48A689D8 ] C:\Windows\System32\hpinksts8911LM.dll

16:20:12.0279 7980  C:\Windows\System32\hpinksts8911LM.dll - ok

16:20:12.0282 7980  [ 35F376253F687BDE63976CCB3F2108CA ] C:\Windows\System32\drivers\bowser.sys

16:20:12.0282 7980  C:\Windows\System32\drivers\bowser.sys - ok

16:20:12.0285 7980  [ 9FF47CD8A3787C8FD3CDFE40441C722E ] C:\Program Files\Google\Update\1.3.21.123\goopdate.dll

16:20:12.0285 7980  C:\Program Files\Google\Update\1.3.21.123\goopdate.dll - ok

16:20:12.0288 7980  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] C:\Windows\System32\drivers\mpsdrv.sys

16:20:12.0288 7980  C:\Windows\System32\drivers\mpsdrv.sys - ok

16:20:12.0292 7980  [ 5DE62C6E9108F14F6794060A9BDECAEC ] C:\Windows\System32\MPSSVC.dll

16:20:12.0292 7980  C:\Windows\System32\MPSSVC.dll - ok

16:20:12.0295 7980  [ 82CEA0395524AACFEB58BA1448E8325C ] C:\Windows\System32\drivers\mrxdav.sys

16:20:12.0295 7980  C:\Windows\System32\drivers\mrxdav.sys - ok

16:20:12.0298 7980  [ 39925B438268F78B43EE1AA91D3A0486 ] C:\Windows\System32\nitrolocalmon.dll

16:20:12.0298 7980  C:\Windows\System32\nitrolocalmon.dll - ok

16:20:12.0302 7980  [ 5CBDC1CF7A22D65711F05A1E3B7F734E ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll

16:20:12.0302 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVifc.dll - ok

16:20:12.0306 7980  [ 0745D6EAD386710110817FBEC03F5161 ] C:\Windows\System32\wfapigp.dll

16:20:12.0306 7980  C:\Windows\System32\wfapigp.dll - ok

16:20:12.0310 7980  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] C:\Windows\System32\drivers\mrxsmb.sys

16:20:12.0310 7980  C:\Windows\System32\drivers\mrxsmb.sys - ok

16:20:12.0313 7980  [ 4FCCB34D793B116423209C0F8B7A3B03 ] C:\Windows\System32\drivers\mrxsmb10.sys

16:20:12.0313 7980  C:\Windows\System32\drivers\mrxsmb10.sys - ok

16:20:12.0317 7980  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] C:\Windows\System32\drivers\mrxsmb20.sys

16:20:12.0317 7980  C:\Windows\System32\drivers\mrxsmb20.sys - ok

16:20:12.0320 7980  [ FF33AFF99564B1AA534F58868CBE41EF ] C:\Windows\System32\drivers\srv2.sys

16:20:12.0320 7980  C:\Windows\System32\drivers\srv2.sys - ok

16:20:12.0323 7980  [ CD6DA5770CAE9D5E6E86722E17B442E0 ] C:\Windows\System32\d3d8thk.dll

16:20:12.0323 7980  C:\Windows\System32\d3d8thk.dll - ok

16:20:12.0326 7980  [ 9558DAA1DB859250A677CCE97B048151 ] C:\Windows\System32\hpz3l5ha.dll

16:20:12.0326 7980  C:\Windows\System32\hpz3l5ha.dll - ok

16:20:12.0329 7980  [ 293C5CCD99D332ECC94637FEDA38D1F2 ] C:\Windows\System32\TMM.dll

16:20:12.0329 7980  C:\Windows\System32\TMM.dll - ok

16:20:12.0332 7980  [ 6FE5C4B61EC85D746ADFA9FFF8C2AC58 ] C:\Windows\System32\HPZ3LLHN.DLL

16:20:12.0332 7980  C:\Windows\System32\HPZ3LLHN.DLL - ok

16:20:12.0336 7980  [ C52CE534397E1D3A442FB4C88A3CBE42 ] C:\Windows\System32\msonpmon.dll

16:20:12.0336 7980  C:\Windows\System32\msonpmon.dll - ok

16:20:12.0339 7980  [ D922592AB65C5D9B88B30B4510A3464E ] C:\Windows\System32\cscapi.dll

16:20:12.0339 7980  C:\Windows\System32\cscapi.dll - ok

16:20:12.0342 7980  [ 87F65295B03C3EF3282F95DBBA8D79B8 ] C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll

16:20:12.0342 7980  C:\Program Files\Common Files\Symantec Shared\Backup\buCmpCtl.dll - ok

16:20:12.0345 7980  [ 9CD9E2A251CDC2B92444A64DA20415A8 ] C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll

16:20:12.0345 7980  C:\Program Files\Common Files\Symantec Shared\CF\cfV2Pack.dll - ok

16:20:12.0348 7980  [ E223D2851906B84F52E1B75EA16198F9 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll

16:20:12.0348 7980  C:\Windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll - ok

16:20:12.0351 7980  [ 41987F9FC0E61ADF54F581E15029AD91 ] C:\Windows\System32\drivers\srv.sys

16:20:12.0351 7980  C:\Windows\System32\drivers\srv.sys - ok

16:20:12.0354 7980  [ 1311171CF8F6D2954441EF2A42693035 ] C:\Windows\System32\WsmRes.dll

16:20:12.0354 7980  C:\Windows\System32\WsmRes.dll - ok

16:20:12.0358 7980  [ BB0EB921877A1A7EF15AE2D97A71CBA9 ] C:\Windows\System32\tcpmon.dll

16:20:12.0358 7980  C:\Windows\System32\tcpmon.dll - ok

16:20:12.0361 7980  [ 83F2509338423B3B338D27084B241C57 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll

16:20:12.0361 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVModule.dll - ok

16:20:12.0364 7980  [ E230F3776F373F4C5E788794B53101E4 ] C:\Windows\System32\plasrv.exe

16:20:12.0364 7980  C:\Windows\System32\plasrv.exe - ok

16:20:12.0367 7980  [ AF24A9DF84637BF9858EC6FB88EBA7B2 ] C:\Windows\System32\snmpapi.dll

16:20:12.0367 7980  C:\Windows\System32\snmpapi.dll - ok

16:20:12.0370 7980  [ 1EDE113859276E4B0F19B80F39E2CC95 ] C:\Windows\System32\wsnmp32.dll

16:20:12.0370 7980  C:\Windows\System32\wsnmp32.dll - ok

16:20:12.0374 7980  [ 024528E25BBE8768536861EA09BE1672 ] C:\Windows\System32\msxml6.dll

16:20:12.0374 7980  C:\Windows\System32\msxml6.dll - ok

16:20:12.0377 7980  [ 5CAAE5333EF36DB4A8D294418AB37E80 ] C:\Windows\System32\p2pcollab.dll

16:20:12.0377 7980  C:\Windows\System32\p2pcollab.dll - ok

16:20:12.0380 7980  [ EBC6F0BDF650CB2EDD49080F319900C0 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL

16:20:12.0380 7980  C:\Program Files\Common Files\Symantec Shared\Backup\BUCOMM.DLL - ok

16:20:12.0383 7980  [ B7F5D1A99E8A7A0A232640908607C315 ] C:\Windows\System32\nvd3dum.dll

16:20:12.0383 7980  C:\Windows\System32\nvd3dum.dll - ok

16:20:12.0386 7980  [ 167AC31450C0C53A01FA1491E94D7678 ] C:\Windows\System32\shdocvw.dll

16:20:12.0386 7980  C:\Windows\System32\shdocvw.dll - ok

16:20:12.0390 7980  [ AE5A69F44C1F97EDC83237FC0B29B6FB ] C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe

16:20:12.0390 7980  C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe - ok

16:20:12.0393 7980  [ 38F2958163C080590A42F7C66E89CDA1 ] C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL

16:20:12.0393 7980  C:\Program Files\Common Files\Symantec Shared\Backup\BUENG.DLL - ok

16:20:12.0397 7980  [ B4F5DE3DAD8E6B97272F45DB97674878 ] C:\Windows\System32\mgmtapi.dll

16:20:12.0397 7980  C:\Windows\System32\mgmtapi.dll - ok

16:20:12.0400 7980  [ 5091452DC719281CF1DD69367E13B494 ] C:\Windows\System32\tcpmib.dll

16:20:12.0400 7980  C:\Windows\System32\tcpmib.dll - ok

16:20:12.0403 7980  [ 18BA660C7022422A9B3BE14C37D7401E ] C:\Windows\System32\TBTMon.dll

16:20:12.0403 7980  C:\Windows\System32\TBTMon.dll - ok

16:20:12.0406 7980  [ 4504819D18FAC09B6108D8728467E5B2 ] C:\Windows\System32\browseui.dll

16:20:12.0406 7980  C:\Windows\System32\browseui.dll - ok

16:20:12.0409 7980  [ E015C3AF4EBEFCD47BB05781126898BD ] C:\Windows\System32\tbtmon98Language.dll

16:20:12.0409 7980  C:\Windows\System32\tbtmon98Language.dll - ok

16:20:12.0412 7980  [ 756D84D65E727B60F149D8058720521A ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll

16:20:12.0412 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtHcrpAPI.dll - ok

16:20:12.0416 7980  [ AF5112A454DEE214A44C070E2A59042C ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll

16:20:12.0416 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtAPI.dll - ok

16:20:12.0419 7980  [ D241900C8E03F850E862664F3FBEB5B6 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll

16:20:12.0419 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBdAPI.dll - ok

16:20:12.0422 7980  [ 0BF0BB276F17B6AD61A8694D2551EC28 ] C:\Windows\System32\usbmon.dll

16:20:12.0423 7980  C:\Windows\System32\usbmon.dll - ok

16:20:12.0426 7980  [ 0EB1CC5EBFCAAB7DBAEE881E2887F7F9 ] C:\Windows\System32\WSDMon.dll

16:20:12.0426 7980  C:\Windows\System32\WSDMon.dll - ok

16:20:12.0429 7980  [ F4F6C58D079620E909323DB1096C34BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll

16:20:12.0429 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\SRTSP\Srtsp32.dll - ok

16:20:12.0433 7980  [ D81CF1DD857538AA2E5E9CB0AA7FBF67 ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll

16:20:12.0433 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\avCmpCtl.dll - ok

16:20:12.0436 7980  [ AD48183027CAFCEBC322CB9CAC60F9B8 ] C:\Windows\System32\WSDApi.dll

16:20:12.0436 7980  C:\Windows\System32\WSDApi.dll - ok

16:20:12.0440 7980  [ F6C5BF92697C25EF89F0ABAA5F36E517 ] C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL

16:20:12.0440 7980  C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL - ok

16:20:12.0443 7980  [ 52CB0185C73E1BA86CC7F726F22523C3 ] C:\Windows\System32\msjetoledb40.dll

16:20:12.0443 7980  C:\Windows\System32\msjetoledb40.dll - ok

16:20:12.0446 7980  [ 7CE1E4240F9FA41EE85683B9EEAB8767 ] C:\Windows\System32\msjet40.dll

16:20:12.0446 7980  C:\Windows\System32\msjet40.dll - ok

16:20:12.0449 7980  [ 1A09CB187440993FA5E24DE1EEB7B916 ] C:\Windows\System32\cfgmgr32.dll

16:20:12.0449 7980  C:\Windows\System32\cfgmgr32.dll - ok

16:20:12.0453 7980  [ 4EDA94333BDB75B1BC0A7610BED34F00 ] C:\Windows\System32\fundisc.dll

16:20:12.0453 7980  C:\Windows\System32\fundisc.dll - ok

16:20:12.0456 7980  [ F86293D93760C70ADF4F19E66E3FA5E8 ] C:\Windows\System32\httpapi.dll

16:20:12.0456 7980  C:\Windows\System32\httpapi.dll - ok

16:20:12.0459 7980  [ 73FD66B14D3C4252F7A524B8836A4359 ] C:\Windows\System32\mstask.dll

16:20:12.0459 7980  C:\Windows\System32\mstask.dll - ok

16:20:12.0462 7980  [ 6ABD253226770EAE1292B4C945ED4B4B ] C:\Windows\System32\msxml3.dll

16:20:12.0462 7980  C:\Windows\System32\msxml3.dll - ok

16:20:12.0465 7980  [ 7A623F6B4C51F6F2BC1A31D5787FC0A7 ] C:\Windows\System32\uDWM.dll

16:20:12.0465 7980  C:\Windows\System32\uDWM.dll - ok

16:20:12.0468 7980  [ E0B787702BAF0CF4CEDF8F61B71F8383 ] C:\Windows\System32\mswstr10.dll

16:20:12.0468 7980  C:\Windows\System32\mswstr10.dll - ok

16:20:12.0471 7980  [ 14E4470BF8ACA69A85D741BA99F75F96 ] C:\Windows\System32\EhStorShell.dll

16:20:12.0471 7980  C:\Windows\System32\EhStorShell.dll - ok

16:20:12.0474 7980  [ 60D8CA76CCD1FCDC393C057949E5A89F ] C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll

16:20:12.0475 7980  C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll - ok

16:20:12.0478 7980  [ 9371540C7231BC156501AB933F269762 ] C:\Windows\System32\msjint40.dll

16:20:12.0478 7980  C:\Windows\System32\msjint40.dll - ok

16:20:12.0481 7980  [ 534FD777CB2684392411CE7BCBBDF78E ] C:\Windows\System32\msjter40.dll

16:20:12.0481 7980  C:\Windows\System32\msjter40.dll - ok

16:20:12.0484 7980  [ 7D1A10A1F3562CCA1FD38E9BADA8FEC0 ] C:\Windows\System32\perfos.dll

16:20:12.0484 7980  C:\Windows\System32\perfos.dll - ok

16:20:12.0487 7980  [ D0E39177C896D2F8191A9C96636276DF ] C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll

16:20:12.0487 7980  C:\Windows\System32\spool\prtprocs\w32x86\hpzpp5ha.dll - ok

16:20:12.0491 7980  [ BDE89AB6F15F0093A2A7861D1FC413ED ] C:\Windows\System32\QAGENT.DLL

16:20:12.0491 7980  C:\Windows\System32\QAGENT.DLL - ok

16:20:12.0494 7980  [ 9104EDD1D3BF91AD079A73FBB515E492 ] C:\Windows\System32\perfdisk.dll

16:20:12.0494 7980  C:\Windows\System32\perfdisk.dll - ok

16:20:12.0497 7980  [ 951F36219C7384C6ED6C9F44D45C5235 ] C:\Program Files\Common Files\System\Ole DB\oledb32.dll

16:20:12.0497 7980  C:\Program Files\Common Files\System\Ole DB\oledb32.dll - ok

16:20:12.0500 7980  [ 111C47816F39A91EAAA18DA0A54E8E63 ] C:\Windows\System32\imageres.dll

16:20:12.0500 7980  C:\Windows\System32\imageres.dll - ok

16:20:12.0503 7980  [ 801DECF3A583C270E5C398FCD082E3DD ] C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL

16:20:12.0503 7980  C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL - ok

16:20:12.0507 7980  [ 769D027B977CED05658C85E698D3C5B1 ] C:\Windows\System32\QUTIL.DLL

16:20:12.0507 7980  C:\Windows\System32\QUTIL.DLL - ok

16:20:12.0510 7980  [ F348280907B38FDBDB3CEF55D456E149 ] C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

16:20:12.0510 7980  C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll - ok

16:20:12.0513 7980  [ 554ED6988E44FDF18941429E8B2CB652 ] C:\Windows\System32\msdart.dll

16:20:12.0513 7980  C:\Windows\System32\msdart.dll - ok

16:20:12.0517 7980  [ C90B296C43EDD9DD1751AD3B590ACDE6 ] C:\Windows\System32\win32spl.dll

16:20:12.0517 7980  C:\Windows\System32\win32spl.dll - ok

16:20:12.0520 7980  [ 892125B60BA6C2A66F485A89C4A6B918 ] C:\Program Files\Common Files\System\Ole DB\oledb32r.dll

16:20:12.0520 7980  C:\Program Files\Common Files\System\Ole DB\oledb32r.dll - ok

16:20:12.0523 7980  [ C4A8C9D346C7943693F301C205CBA003 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL

16:20:12.0523 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL - ok

16:20:12.0527 7980  [ 79B0463638C7ED08DB71FE3437C95A44 ] C:\Windows\System32\msjtes40.dll

16:20:12.0527 7980  C:\Windows\System32\msjtes40.dll - ok

16:20:12.0530 7980  [ 4BF053944E973C073339BE841C9ECF28 ] C:\Windows\System32\netrap.dll

16:20:12.0530 7980  C:\Windows\System32\netrap.dll - ok

16:20:12.0533 7980  [ E340845C8E96D107C36420065D7A5733 ] C:\Windows\System32\printcom.dll

16:20:12.0533 7980  C:\Windows\System32\printcom.dll - ok

16:20:12.0536 7980  [ EC760B0B76A4353DE49D66520EB2141F ] C:\Windows\System32\SensApi.dll

16:20:12.0536 7980  C:\Windows\System32\SensApi.dll - ok

16:20:12.0539 7980  [ 4995B131F6B4DA0F8F7D2191E37054BD ] C:\Windows\System32\vbajet32.dll

16:20:12.0539 7980  C:\Windows\System32\vbajet32.dll - ok

16:20:12.0543 7980  [ B9D5809CE39D2473E36EBC66860C14D1 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll

16:20:12.0543 7980  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltEndPt.dll - ok

16:20:12.0546 7980  [ 2E8E30F3B318A9FDA5A2485723F4C2B3 ] C:\Windows\System32\inetpp.dll

16:20:12.0546 7980  C:\Windows\System32\inetpp.dll - ok

16:20:12.0549 7980  [ 16FF3D15D12BFBB0B805FFE71BE3FA15 ] C:\Windows\System32\ntprint.dll

16:20:12.0549 7980  C:\Windows\System32\ntprint.dll - ok

16:20:12.0552 7980  [ B5EB6A3ED3B8918091FE2539374E25E7 ] C:\PROGRA~1\NORTON~1\tpEvent.dll

16:20:12.0552 7980  C:\PROGRA~1\NORTON~1\tpEvent.dll - ok

16:20:12.0555 7980  [ 254C64B570A99F10952ACA71F24A2236 ] C:\Windows\System32\expsrv.dll

16:20:12.0555 7980  C:\Windows\System32\expsrv.dll - ok

16:20:12.0559 7980  [ F2AD56AC3F8A806A70847A15B21F333A ] C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll

16:20:12.0559 7980  C:\Program Files\Common Files\Symantec Shared\COL\BBIF.dll - ok

16:20:12.0562 7980  [ 75B8E3EE58004C378B00B7EEE15DEC44 ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll

16:20:12.0562 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\CWCon.dll - ok

16:20:12.0565 7980  [ 7483E59A7A7A7891ACD4C63EE97D1BF1 ] C:\Windows\System32\mswdat10.dll

16:20:12.0565 7980  C:\Windows\System32\mswdat10.dll - ok

16:20:12.0569 7980  [ BA7C3E9DD6B1A632124C8659E8014028 ] C:\Windows\System32\perfctrs.dll

16:20:12.0569 7980  C:\Windows\System32\perfctrs.dll - ok

16:20:12.0572 7980  [ F917278F644BC6CED095BFAE4D03CFA0 ] C:\Program Files\Common Files\Symantec Shared\QBackup.dll

16:20:12.0572 7980  C:\Program Files\Common Files\Symantec Shared\QBackup.dll - ok

16:20:12.0575 7980  [ 7BEB17B323267811380BD66E710C1FF6 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll

16:20:12.0575 7980  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltPIPlg.dll - ok

16:20:12.0579 7980  [ CE8617599BFD41FF3A7C04B60087AD2D ] C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll

16:20:12.0579 7980  C:\PROGRA~2\Symantec\SyKnAppS\SyKnAppS.dll - ok

16:20:12.0582 7980  [ EFDCD9B1F546AD59A6730712689F2F3B ] C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll

16:20:12.0582 7980  C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll - ok

16:20:12.0586 7980  [ CB18CBE52505933F679FF2B4A44804D7 ] C:\Program Files\Norton 360\tpDataCl.dll

16:20:12.0586 7980  C:\Program Files\Norton 360\tpDataCl.dll - ok

16:20:12.0589 7980  [ 963BBD53FA2091325A2EF3E3CF46F575 ] C:\Program Files\Norton 360\tpCntnr.dll

16:20:12.0589 7980  C:\Program Files\Norton 360\tpCntnr.dll - ok

16:20:12.0592 7980  [ 3BA25F0A6B00A384F85E2798AAF5DF0F ] C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll

16:20:12.0593 7980  C:\Program Files\Common Files\Symantec Shared\SPBBC\ccTrstPc.dll - ok

16:20:12.0596 7980  [ 12BCF4DAD8E5A1B3D5FA7AB4A79DA105 ] C:\Windows\System32\sfc_os.dll

16:20:12.0596 7980  C:\Windows\System32\sfc_os.dll - ok

16:20:12.0598 7980  [ 5E5BDF511A133BFEC9F231B994376154 ] C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll

16:20:12.0598 7980  C:\Program Files\Common Files\Symantec Shared\Backup\buDataCl.dll - ok

16:20:12.0601 7980  [ E335EC58D7089A72D75C2BD6B62741CB ] C:\Program Files\Norton 360\coDataPr.dll

16:20:12.0601 7980  C:\Program Files\Norton 360\coDataPr.dll - ok

16:20:12.0605 7980  [ 632B4F23EA39F03AF869E4087B445257 ] C:\Program Files\Norton 360\07\01\coDataPr.loc

16:20:12.0605 7980  C:\Program Files\Norton 360\07\01\coDataPr.loc - ok

16:20:12.0608 7980  [ 9FE47D87A9256E6868404F1D49CA6BC6 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll

16:20:12.0608 7980  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiDataCl.dll - ok

16:20:12.0612 7980  [ D9DFCF094A370025FFB7761D0EFF8500 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll

16:20:12.0612 7980  C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCCli.dll - ok

16:20:12.0615 7980  [ 7103BC76935E601D82700B44B1064F27 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll

16:20:12.0615 7980  C:\Program Files\Common Files\Symantec Shared\Firewall\FWHelper.dll - ok

16:20:12.0619 7980  [ 2A97A941CFDF7AC676371922C16B1161 ] C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll

16:20:12.0619 7980  C:\Program Files\Common Files\Symantec Shared\NPC\2.0\uiLicPlg.dll - ok

16:20:12.0622 7980  [ 09D06B8DCD3823AEA29D8A5597AACA74 ] C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll

16:20:12.0622 7980  C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll - ok

16:20:12.0626 7980  [ BF79C970B8FA983C8AF57EE1481B8416 ] C:\Program Files\Norton 360\tpBTPlg.dll

16:20:12.0626 7980  C:\Program Files\Norton 360\tpBTPlg.dll - ok

16:20:12.0629 7980  [ E89B10B957AC45AA53301114E415A988 ] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll

16:20:12.0629 7980  C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\cltBTPlg.dll - ok

16:20:12.0633 7980  [ B16EE7AE0C2EBDBBF7058899C7387A1B ] C:\Program Files\Norton 360\SetEvtHp.dll

16:20:12.0633 7980  C:\Program Files\Norton 360\SetEvtHp.dll - ok

16:20:12.0636 7980  [ 88C5DD2F2283FD14D8EBE7ED3EE895C4 ] C:\Program Files\Norton 360\NTPFW.DLL

16:20:12.0636 7980  C:\Program Files\Norton 360\NTPFW.DLL - ok

16:20:12.0639 7980  [ 7C6505EA598E58099D3B7E1F70426864 ] C:\Windows\System32\drivers\symredrv.sys

16:20:12.0639 7980  C:\Windows\System32\drivers\symredrv.sys - ok

16:20:12.0642 7980  [ 08578F3CA5365F896D90CE2BF97FD000 ] C:\Windows\System32\IconCodecService.dll

16:20:12.0642 7980  C:\Windows\System32\IconCodecService.dll - ok

16:20:12.0646 7980  [ 9A6A653ADF28D9D69670B48F535E6B90 ] C:\Windows\System32\runonce.exe

16:20:12.0646 7980  C:\Windows\System32\runonce.exe - ok

16:20:12.0649 7980  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] C:\Windows\System32\drivers\symdns.sys

16:20:12.0649 7980  C:\Windows\System32\drivers\symdns.sys - ok

16:20:12.0652 7980  [ A0EA9D273889E53CFAABF2444692CCBF ] C:\Windows\System32\drivers\symfw.sys

16:20:12.0652 7980  C:\Windows\System32\drivers\symfw.sys - ok

16:20:12.0655 7980  [ C94EACA4B522012EE0691F1E79C42A7D ] C:\Windows\System32\drivers\symndisv.sys

16:20:12.0655 7980  C:\Windows\System32\drivers\symndisv.sys - ok

16:20:12.0659 7980  [ 9B338BF4FD5353FE812516D057430EE3 ] C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL

16:20:12.0659 7980  C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_4.DLL - ok

16:20:12.0662 7980  [ 74F26FC01B180D4A99A168ED69C30A53 ] C:\Windows\System32\cmd.exe

16:20:12.0662 7980  C:\Windows\System32\cmd.exe - ok

16:20:12.0665 7980  [ A324D72A06C110152E7607745F39BFA1 ] C:\Windows\System32\netmsg.dll

16:20:12.0665 7980  C:\Windows\System32\netmsg.dll - ok

16:20:12.0668 7980  [ 452341E471D2D961229DFE0842957272 ] C:\Windows\System32\sscore.dll

16:20:12.0668 7980  C:\Windows\System32\sscore.dll - ok

16:20:12.0671 7980  [ D333058925CE305E39DE8D5AD2B52A46 ] C:\Windows\System32\clusapi.dll

16:20:12.0671 7980  C:\Windows\System32\clusapi.dll - ok

16:20:12.0675 7980  [ 1F5AFD468EB5E09E9ED75A087529EAB5 ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll

16:20:12.0675 7980  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll - ok

16:20:12.0680 7980  [ 6468C3FF6D0C7874FA8C619AF3E23B22 ] C:\Windows\System32\activeds.dll

16:20:12.0680 7980  C:\Windows\System32\activeds.dll - ok

16:20:12.0683 7980  [ 6080A176D09435FC8E6E800996656E18 ] C:\Windows\System32\conime.exe

16:20:12.0683 7980  C:\Windows\System32\conime.exe - ok

16:20:12.0686 7980  [ 0BA3F31E2B4D8D99DF8DD19E81155374 ] C:\Windows\System32\ieframe.dll

16:20:12.0686 7980  C:\Windows\System32\ieframe.dll - ok

16:20:12.0689 7980  [ E9B9C1B98C8D6D48407E1C1203EAC659 ] C:\Windows\System32\adsldpc.dll

16:20:12.0689 7980  C:\Windows\System32\adsldpc.dll - ok

16:20:12.0692 7980  [ 93E317D7AD783D8EAEE2E3500BFE889D ] C:\Windows\System32\credui.dll

16:20:12.0692 7980  C:\Windows\System32\credui.dll - ok

16:20:12.0696 7980  [ B9F3FF52B84FD9E3CAFB29B8EE385E5B ] C:\Windows\System32\resutils.dll

16:20:12.0696 7980  C:\Windows\System32\resutils.dll - ok

16:20:12.0699 7980  [ 4E8B1E9567B3CD76CA628C9026AE1125 ] C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll

16:20:12.0699 7980  C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80DEU.dll - ok

16:20:12.0703 7980  [ 93FEF3A5EB8965CB19F9820D5944D3E2 ] C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll

16:20:12.0703 7980  C:\Program Files\Common Files\Symantec Shared\Firewall\FWSetup.dll - ok

16:20:12.0706 7980  [ 1778EBA872274C1226D869CD9486847E ] C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:20:12.0706 7980  C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe - ok

16:20:12.0710 7980  [ 17FC3EDA0162F513E858B8C8FA7FA6E0 ] C:\Windows\System32\vssapi.dll

16:20:12.0710 7980  C:\Windows\System32\vssapi.dll - ok

16:20:12.0713 7980  [ F93C1DB10E59FAADC673D2607F910B92 ] C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll

16:20:12.0713 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\OPC\{C86EA~1\CLTNetCN.dll - ok

16:20:12.0716 7980  [ 52E129522C1775DBB8CC252E7A0655C7 ] C:\Windows\System32\taskschd.dll

16:20:12.0716 7980  C:\Windows\System32\taskschd.dll - ok

16:20:12.0719 7980  [ 6950BBCEB21F9C3CB3B52E90960109C3 ] C:\Windows\System32\devenum.dll

16:20:12.0719 7980  C:\Windows\System32\devenum.dll - ok

16:20:12.0722 7980  [ E7D0F91E44D9D3B2116FA549BDCDB756 ] C:\Windows\System32\wdscore.dll

16:20:12.0723 7980  C:\Windows\System32\wdscore.dll - ok

16:20:12.0726 7980  [ 1DFC366D2154EF2B381A7F2CB165C7F4 ] C:\Windows\System32\diagperf.dll

16:20:12.0726 7980  C:\Windows\System32\diagperf.dll - ok

16:20:12.0729 7980  [ B8AEFF80ABD57E6ABC6A46EAC7F4515F ] C:\Windows\System32\msdmo.dll

16:20:12.0729 7980  C:\Windows\System32\msdmo.dll - ok

16:20:12.0732 7980  [ 8795FD92B624648DABE7B75129EF8002 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:20:12.0732 7980  C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe - ok

16:20:12.0735 7980  [ E1E52D56D266C2741058BA6611970D0C ] C:\Windows\System32\qdvd.dll

16:20:12.0735 7980  C:\Windows\System32\qdvd.dll - ok

16:20:12.0738 7980  [ EFD278F8129EE12F1D4AE0250494B791 ] C:\Windows\System32\dxva2.dll

16:20:12.0738 7980  C:\Windows\System32\dxva2.dll - ok

16:20:12.0742 7980  [ 861797D3C83A6EBA05FB2C63B1A45E82 ] C:\Windows\System32\ksproxy.ax

16:20:12.0742 7980  C:\Windows\System32\ksproxy.ax - ok

16:20:12.0745 7980  [ DC3AE9F1554DCD97F90983DDBDACD83D ] C:\Windows\System32\vsstrace.dll

16:20:12.0745 7980  C:\Windows\System32\vsstrace.dll - ok

16:20:12.0748 7980  [ 09469B8EDD2755143FDA06867AAD7E73 ] C:\Windows\System32\cryptnet.dll

16:20:12.0748 7980  C:\Windows\System32\cryptnet.dll - ok

16:20:12.0751 7980  [ 012E22681A63D2BF405E6F15EF80BFD3 ] C:\Windows\System32\vidcap.ax

16:20:12.0751 7980  C:\Windows\System32\vidcap.ax - ok

16:20:12.0754 7980  [ 5F6359756DBCC901276BC2B62460FA64 ] C:\Windows\System32\quartz.dll

16:20:12.0754 7980  C:\Windows\System32\quartz.dll - ok

16:20:12.0757 7980  [ A14F25F62E84C6B4A178A1CFD9B47222 ] C:\Windows\System32\qcap.dll

16:20:12.0757 7980  C:\Windows\System32\qcap.dll - ok

16:20:12.0760 7980  [ 24BBD1F5375FC6CCB47A50811CD3A8A2 ] C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll

16:20:12.0760 7980  C:\Program Files\Adobe\Flash Media Server 3.5\shsmp.dll - ok

16:20:12.0763 7980  [ EACACA0F2FF4CC54A909E3C5721FCDE8 ] C:\Windows\System32\msvfw32.dll

16:20:12.0763 7980  C:\Windows\System32\msvfw32.dll - ok

16:20:12.0767 7980  [ 418B3754F644C9ADF8B5312654B5FCFA ] C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll

16:20:12.0767 7980  C:\Program Files\Adobe\Flash Media Server 3.5\js32.dll - ok

16:20:12.0770 7980  [ 8F87B4A94164621D4BFC2D4BFB6CF017 ] C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll

16:20:12.0770 7980  C:\Program Files\Adobe\Flash Media Server 3.5\libnspr4.dll - ok

16:20:12.0774 7980  [ 7646FDBF9E5BA332BB42B0B96495277E ] C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll

16:20:12.0774 7980  C:\Program Files\Adobe\Flash Media Server 3.5\libexpat.dll - ok

16:20:12.0777 7980  [ E97EFFC4472F8FF5896B33FFD88EC9E6 ] C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll

16:20:12.0777 7980  C:\Program Files\Adobe\Flash Media Server 3.5\MMxpt.dll - ok

16:20:12.0780 7980  [ 4B88BD98983A2CD9BE90F368B4F59F0A ] C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll

16:20:12.0780 7980  C:\Program Files\Adobe\Flash Media Server 3.5\asneu.dll - ok

16:20:12.0784 7980  [ 2DB70167C13F2339A63E694291FD1BFD ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:20:12.0784 7980  C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe - ok

16:20:12.0787 7980  [ 2FCC8C7E5B59996CBCBEB0904B927148 ] C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll

16:20:12.0787 7980  C:\Program Files\Adobe\Flash Media Server 3.5\tcSrvMsg.dll - ok

16:20:12.0791 7980  [ 8881574868E648689B7AA88A88716E17 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:20:12.0791 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe - ok

16:20:12.0795 7980  [ BAB2355B01458F6BBF77D2AD4967D8F8 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll

16:20:12.0795 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapr-1.dll - ok

16:20:12.0798 7980  [ 7BA720A3E41BA5B56FAEBAFE1D326F8E ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll

16:20:12.0798 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libaprutil-1.dll - ok

16:20:12.0802 7980  [ F5EF52B0BF4F0A878F2E992F9EF74C8F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll

16:20:12.0802 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libapriconv-1.dll - ok

16:20:12.0805 7980  [ 95086E32A109D966C58225EFDE421874 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll

16:20:12.0805 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libhttpd.dll - ok

16:20:12.0809 7980  [ 7634010AAB56883F75EFD6CA0D433CAB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so

16:20:12.0809 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_actions.so - ok

16:20:12.0813 7980  [ 79F2A39CE043FF4F6F08CADDD94D3022 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so

16:20:12.0813 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_alias.so - ok

16:20:12.0816 7980  [ BF1B1795180EFBCAE7E1D79E4E86056D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so

16:20:12.0816 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_asis.so - ok

16:20:12.0820 7980  [ FB08B28DA062D00142386BE5D1FA4E97 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so

16:20:12.0820 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_basic.so - ok

16:20:12.0824 7980  [ AA6E18DE261A1614E1C8B6F552E39AFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so

16:20:12.0824 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_auth_digest.so - ok

16:20:12.0827 7980  [ 0ECC9904B6384F713643640FFEA56990 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so

16:20:12.0827 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_anon.so - ok

16:20:12.0831 7980  [ 5CD6753CCE866006DD4E0F567EBCA1F4 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so

16:20:12.0831 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_default.so - ok

16:20:12.0835 7980  [ EFC3817C0A178DA0EDA14570B1B10C75 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so

16:20:12.0835 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authn_file.so - ok

16:20:12.0838 7980  [ 9F64EC455CD232566D85870836A0200D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so

16:20:12.0838 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_default.so - ok

16:20:12.0842 7980  [ 471EB03D1C1485A145062CA7CFCB8561 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so

16:20:12.0842 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_groupfile.so - ok

16:20:12.0845 7980  [ 82EF0C0B5C8698E812100E3315612FE3 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so

16:20:12.0845 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_host.so - ok

16:20:12.0849 7980  [ FCDA9E17440B42EC01B22F49A022967F ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so

16:20:12.0849 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_authz_user.so - ok

16:20:12.0851 7980  [ CC1F352A783CF8A29A05E9F30D94A134 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so

16:20:12.0851 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_autoindex.so - ok

16:20:12.0855 7980  [ 1478F7386CCFCE9A65A3B911EB57AABC ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so

16:20:12.0855 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_cgi.so - ok

16:20:12.0859 7980  [ E085207B69D06BA56AFB627B1B7FECF2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so

16:20:12.0859 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav.so - ok

16:20:12.0862 7980  [ E128104681660D5F9867A95E83AD8CA5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so

16:20:12.0862 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dav_fs.so - ok

16:20:12.0865 7980  [ 4992F7ABA77F4DB94B42D2F53B6D2547 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so

16:20:12.0865 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_deflate.so - ok

16:20:12.0869 7980  [ 8300C329344DA7CC6D87A338F86FC024 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll

16:20:12.0869 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\zlib1.dll - ok

16:20:12.0872 7980  [ 54798EEFB9ED48C5F2D7A26BC83F1281 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so

16:20:12.0872 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_dir.so - ok

16:20:12.0876 7980  [ F5F8B9B81C58F9AE0C34075BC6446271 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so

16:20:12.0876 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_env.so - ok

16:20:12.0880 7980  [ 4A1DE9A42015DAB7C3C4DA5D8C1C36FA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so

16:20:12.0880 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_imagemap.so - ok

16:20:12.0883 7980  [ 3FD4AA228F8CCAA86581B16B8B13DAFD ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so

16:20:12.0884 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_include.so - ok

16:20:12.0887 7980  [ 29C86E7A89870CAF9E336BF46670D2D5 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so

16:20:12.0887 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_info.so - ok

16:20:12.0891 7980  [ D2033210D4DA9E9CE7670DFF45D7101B ] C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe

16:20:12.0891 7980  C:\Users\christoph\AppData\Local\Temp\85E7009D-F1A1-4435-83E4-B6FE801C898E.exe - ok

16:20:12.0894 7980  [ 5E3A949B03028F6408A2EC98909C1917 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so

16:20:12.0894 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_isapi.so - ok

16:20:12.0898 7980  [ 204A73A56751C68C6031E9D5D611EC98 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

16:20:12.0898 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe - ok

16:20:12.0902 7980  [ 0F7F7D875290CCF8C41FAE62F8B3CC82 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so

16:20:12.0902 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_log_config.so - ok

16:20:12.0905 7980  [ 99ED733F614660EB32199BF889DFB7E2 ] C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:20:12.0905 7980  C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll - ok

16:20:12.0909 7980  [ B764114732DCAF9F6943516843116792 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so

16:20:12.0909 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime.so - ok

16:20:12.0912 7980  [ 0D9525791E5DB7762F7A92F4B005AACB ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so

16:20:12.0912 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_mime_magic.so - ok

16:20:12.0916 7980  [ F52548AA0312879A5E8D6DCEC6502AE1 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so

16:20:12.0916 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_negotiation.so - ok

16:20:12.0920 7980  [ C0E7898090D81772EA927E9A3C71817C ] C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll

16:20:12.0920 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll - ok

16:20:12.0923 7980  [ CF061B2D55421E7C2AE6953BA9185332 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so

16:20:12.0923 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_rewrite.so - ok

16:20:12.0927 7980  [ D86C5C506766C5E7544B9C738BA7830D ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so

16:20:12.0927 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_setenvif.so - ok

16:20:12.0930 7980  [ 7A99E3E80B28E1E21943654B461E9074 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so

16:20:12.0930 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_status.so - ok

16:20:12.0934 7980  [ 9AF5EA601C06E5C64F9F006E050B931E ] C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll

16:20:12.0934 7980  C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll - ok

16:20:12.0937 7980  [ 27EA34926E31D8C5FA221C19BFD1F4E9 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so

16:20:12.0937 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_unique_id.so - ok

16:20:12.0941 7980  [ 7A07BD7F1077AE67526B97A8896716D2 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so

16:20:12.0941 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_userdir.so - ok

16:20:12.0945 7980  [ 64C66D87575B550D29216BCAE6111984 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so

16:20:12.0945 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\modules\mod_ssl.so - ok

christoph03

22.10.2012 14:24

Code:

16:20:12.0948 7980  [ CE146AB004F39F0298B5E57FEB4722E2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll

16:20:12.0948 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID_DEU.dll - ok

16:20:12.0952 7980  [ 54951309B2B9CA6FB45E450ACAC69B10 ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll

16:20:12.0952 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\libeay32.dll - ok

16:20:12.0955 7980  [ E52BD5E1063515F3205325D277B8B6EA ] C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll

16:20:12.0955 7980  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\ssleay32.dll - ok

16:20:12.0959 7980  [ 9039717A906DA0AE38420918801D9AB3 ] C:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:20:12.0959 7980  C:\Program Files\Common Files\LightScribe\LSSrvc.exe - ok

16:20:12.0962 7980  [ 30F0DC266B46118E9FBCF5B2A30EB1DB ] C:\Windows\System32\wbem\wbemprox.dll

16:20:12.0962 7980  C:\Windows\System32\wbem\wbemprox.dll - ok

16:20:12.0966 7980  [ 5533C95940E5B75FE89BD8CBB352189F ] C:\Program Files\Common Files\LightScribe\LSSProxy.dll

16:20:12.0966 7980  C:\Program Files\Common Files\LightScribe\LSSProxy.dll - ok

16:20:12.0969 7980  [ 74B8C2EA72D43727142D12397D5A49F9 ] C:\Windows\System32\wbemcomn.dll

16:20:12.0969 7980  C:\Windows\System32\wbemcomn.dll - ok

16:20:12.0972 7980  [ 832D44CA982AB483337CB6A3906E53EE ] C:\Program Files\Common Files\LightScribe\LSLog.dll

16:20:12.0972 7980  C:\Program Files\Common Files\LightScribe\LSLog.dll - ok

16:20:12.0976 7980  [ B05640AC812FCCB488328DF34E7F663A ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

16:20:12.0976 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe - ok

16:20:12.0979 7980  [ 254AC97C9AF4DDF3F5F57855198527B7 ] C:\Windows\System32\wermgr.exe

16:20:12.0979 7980  C:\Windows\System32\wermgr.exe - ok

16:20:12.0982 7980  [ 8BE000F9A0B0FF7194AAEFB02C9BDE99 ] C:\Windows\System32\wer.dll

16:20:12.0982 7980  C:\Windows\System32\wer.dll - ok

16:20:12.0985 7980  [ DE7F813217EC88C0A6D4D8F2F39D7949 ] C:\Windows\System32\msiltcfg.dll

16:20:12.0985 7980  C:\Windows\System32\msiltcfg.dll - ok

16:20:12.0989 7980  [ F716057C341C8A4F58142DFC8EF336EA ] C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

16:20:12.0989 7980  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - ok

16:20:12.0992 7980  [ 32C940D6BAAD78CC236BF8832D1AD9B7 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll

16:20:12.0992 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlos.dll - ok

16:20:12.0996 7980  [ B88613BE5B9939BD5DD63F9E196413AD ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll

16:20:12.0996 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\opends60.dll - ok

16:20:13.0000 7980  [ 0FB5AA33D26F7212963D832083CD0C5C ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll

16:20:13.0000 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\batchparser.dll - ok

16:20:13.0003 7980  [ E31E4E9F644FBFE79DCA532D9781F71D ] C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll

16:20:13.0003 7980  C:\Program Files\Microsoft SQL Server\100\Shared\instapi10.dll - ok

16:20:13.0007 7980  [ DAFDB8D555A52142DA3033AC758C899C ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll

16:20:13.0007 7980  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll - ok

16:20:13.0011 7980  [ B0FF455B1ED1BF859D24ACDB0855B985 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll

16:20:13.0011 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlboot.dll - ok

16:20:13.0014 7980  [ 8CF09ABA2A3E577C71CEB321C3D66A4D ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll

16:20:13.0014 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1031\sqlevn70.rll - ok

16:20:13.0017 7980  [ 19715A9A573DAD2521348ABC74266A48 ] C:\Windows\System32\HPZinw12.dll

16:20:13.0017 7980  C:\Windows\System32\HPZinw12.dll - ok

16:20:13.0021 7980  [ 183CBAD181DEDAC0119B2861C426AC14 ] C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:20:13.0021 7980  C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe - ok

16:20:13.0024 7980  [ F4D9ED6BD74AD7CC0BEC83C43A1CB76B ] C:\Windows\System32\ncsi.dll

16:20:13.0024 7980  C:\Windows\System32\ncsi.dll - ok

16:20:13.0027 7980  [ 01BCD91CC2B0EFDA4890F547010750BD ] C:\Windows\System32\ssdpapi.dll

16:20:13.0028 7980  C:\Windows\System32\ssdpapi.dll - ok

16:20:13.0031 7980  [ 5D32DF97B9116DDA0C75A342F5B2FFEC ] C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll

16:20:13.0031 7980  C:\Program Files\NVIDIA Corporation\Update Common\EasyDaemonAPIU.dll - ok

16:20:13.0034 7980  [ 6349F6ED9C623B44B52EA3C63C831A92 ] C:\Windows\System32\drivers\PEAuth.sys

16:20:13.0034 7980  C:\Windows\System32\drivers\PEAuth.sys - ok

16:20:13.0038 7980  [ 84D9CAEFD4B265B66D19DC7770D1F6DC ] C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll

16:20:13.0038 7980  C:\Program Files\NVIDIA Corporation\Update Common\NvUpdtr.dll - ok

16:20:13.0041 7980  [ D0494460421A03CD5225CCA0059AA146 ] C:\Windows\System32\IPSECSVC.DLL

16:20:13.0041 7980  C:\Windows\System32\IPSECSVC.DLL - ok

16:20:13.0044 7980  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] C:\Windows\System32\HPZipm12.dll

16:20:13.0044 7980  C:\Windows\System32\HPZipm12.dll - ok

16:20:13.0048 7980  [ F115AF58ABE5605D7D709CBFBD83F418 ] C:\Windows\System32\PSIService.exe

16:20:13.0048 7980  C:\Windows\System32\PSIService.exe - ok

16:20:13.0051 7980  [ 42608AE9AF2641EE473A1797C25CFFC2 ] C:\Windows\System32\FwRemoteSvr.dll

16:20:13.0051 7980  C:\Windows\System32\FwRemoteSvr.dll - ok

16:20:13.0054 7980  [ 8FDA02E3E944E203E118F3DABA7C026D ] C:\Windows\System32\PSIKey.dll

16:20:13.0054 7980  C:\Windows\System32\PSIKey.dll - ok

16:20:13.0057 7980  [ 11123D8CAC3E659C4C9D88526DC57E42 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll

16:20:13.0057 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\Resources\1033\sqlevn70.rll - ok

16:20:13.0061 7980  [ 90A3935D05B494A5A39D37E71F09A677 ] C:\Windows\System32\drivers\secdrv.sys

16:20:13.0061 7980  C:\Windows\System32\drivers\secdrv.sys - ok

16:20:13.0064 7980  [ 637A0F23F9012358E92E6F99835494D1 ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:20:13.0064 7980  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe - ok

16:20:13.0068 7980  [ 428FF21418ADCD6FAD6189CD9520A67B ] C:\Windows\System32\wiatrace.dll

16:20:13.0068 7980  C:\Windows\System32\wiatrace.dll - ok

16:20:13.0071 7980  [ 128DD9AF8640DBCC711940903C8B554F ] C:\Windows\System32\mscoree.dll

16:20:13.0071 7980  C:\Windows\System32\mscoree.dll - ok

16:20:13.0074 7980  [ D1B61E151F6D0077E42E9521869F352F ] C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll

16:20:13.0074 7980  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss.dll - ok

16:20:13.0077 7980  [ 4DBA143F06BAD1DF935CB9603140CF2A ] C:\Windows\System32\wsdchngr.dll

16:20:13.0077 7980  C:\Windows\System32\wsdchngr.dll - ok

16:20:13.0081 7980  [ 608C345A255D82A6289C2D468EB41FD7 ] C:\Windows\System32\drivers\tcpipreg.sys

16:20:13.0081 7980  C:\Windows\System32\drivers\tcpipreg.sys - ok

16:20:13.0084 7980  [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

16:20:13.0084 7980  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok

16:20:13.0087 7980  [ 0C84B6AFFA7486422235584110D7176F ] C:\Windows\System32\icaapi.dll

16:20:13.0087 7980  C:\Windows\System32\icaapi.dll - ok

16:20:13.0091 7980  [ AC88D258F20909EEB91796F490CFBB73 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:20:13.0091 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe - ok

16:20:13.0094 7980  [ 0A990AFB9F2726323D61C8ECB8B70B17 ] C:\Windows\System32\security.dll

16:20:13.0094 7980  C:\Windows\System32\security.dll - ok

16:20:13.0097 7980  [ C8DBFEF835FF54467425C8F3ABCF7046 ] C:\Windows\System32\dssenh.dll

16:20:13.0097 7980  C:\Windows\System32\dssenh.dll - ok

16:20:13.0099 7980  [ 1F18B9EA1BBFF033413414C3BEA13AD6 ] C:\Windows\System32\wbem\WinMgmtR.dll

16:20:13.0099 7980  C:\Windows\System32\wbem\WinMgmtR.dll - ok

16:20:13.0103 7980  [ DEB9D08750423069647C3A066CEC7A1B ] C:\Windows\System32\tquery.dll

16:20:13.0103 7980  C:\Windows\System32\tquery.dll - ok

16:20:13.0106 7980  [ 2205A220A264E8C8B86492BF3D112907 ] C:\Windows\System32\PortableDeviceApi.dll

16:20:13.0106 7980  C:\Windows\System32\PortableDeviceApi.dll - ok

16:20:13.0109 7980  [ B53BD9E63867CD9FD853F666CA172713 ] C:\Windows\System32\PortableDeviceConnectApi.dll

16:20:13.0109 7980  C:\Windows\System32\PortableDeviceConnectApi.dll - ok

16:20:13.0112 7980  [ F91FF1E51FCA30B3C3981DB7D5924252 ] C:\Windows\System32\drivers\WUDFRd.sys

16:20:13.0113 7980  C:\Windows\System32\drivers\WUDFRd.sys - ok

16:20:13.0116 7980  [ 5C2B01675683AAF42FED528DE2C24C12 ] C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll

16:20:13.0116 7980  C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlscriptupgrade.dll - ok

16:20:13.0119 7980  [ C6E7AB7E798167095987EBCCB76DF61B ] C:\Windows\System32\WUDFHost.exe

16:20:13.0119 7980  C:\Windows\System32\WUDFHost.exe - ok

16:20:13.0122 7980  [ 218B73EA8341EA9FDF018D43052E790A ] C:\Windows\System32\mssrch.dll

16:20:13.0122 7980  C:\Windows\System32\mssrch.dll - ok

16:20:13.0126 7980  [ 5B7D398C26FCC364B68D9AB0B360502A ] C:\Windows\System32\WUDFx.dll

16:20:13.0126 7980  C:\Windows\System32\WUDFx.dll - ok

16:20:13.0129 7980  [ 119A487B94FCB54D5154EBFBFA124755 ] C:\Windows\System32\drivers\UMDF\WpdFs.dll

16:20:13.0129 7980  C:\Windows\System32\drivers\UMDF\WpdFs.dll - ok

16:20:13.0132 7980  [ AAB5FEAABF4CB6F76D794203831C8D94 ] C:\Windows\System32\msidle.dll

16:20:13.0132 7980  C:\Windows\System32\msidle.dll - ok

16:20:13.0135 7980  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] C:\Windows\System32\netprofm.dll

16:20:13.0135 7980  C:\Windows\System32\netprofm.dll - ok

16:20:13.0138 7980  [ BF7E4D6F60A6D9E866432855C6F8C262 ] C:\Windows\System32\sqmapi.dll

16:20:13.0138 7980  C:\Windows\System32\sqmapi.dll - ok

16:20:13.0141 7980  [ B458B58F7BB97C48D01AC3CF5805AAAC ] C:\Windows\System32\Query.dll

16:20:13.0141 7980  C:\Windows\System32\Query.dll - ok

16:20:13.0145 7980  [ 6BC5FCEF351E4CB5A269C1E84B5A06DA ] C:\Windows\System32\netcfgx.dll

16:20:13.0145 7980  C:\Windows\System32\netcfgx.dll - ok

16:20:13.0148 7980  [ DFCAB29E8FD38F95650CC1E203E8D318 ] C:\Windows\System32\npmproxy.dll

16:20:13.0148 7980  C:\Windows\System32\npmproxy.dll - ok

16:20:13.0151 7980  [ 50ABE7CDA2DAE898216121D14092C182 ] C:\Windows\System32\WMVCORE.DLL

16:20:13.0151 7980  C:\Windows\System32\WMVCORE.DLL - ok

16:20:13.0154 7980  [ A952D0DED445F26AEFCF593A935AB300 ] C:\Windows\System32\hnetcfg.dll

16:20:13.0154 7980  C:\Windows\System32\hnetcfg.dll - ok

16:20:13.0157 7980  [ FC1EEE57EB9CD57279D70BA2A9131C38 ] C:\Windows\System32\wbem\wbemcore.dll

16:20:13.0157 7980  C:\Windows\System32\wbem\wbemcore.dll - ok

16:20:13.0161 7980  [ C10E13721B0AAEBEB5EBA914F1D18181 ] C:\Windows\System32\wbem\esscli.dll

16:20:13.0161 7980  C:\Windows\System32\wbem\esscli.dll - ok

16:20:13.0164 7980  [ 36CCD8A79539C4ACE3BABE09C2CFBA16 ] C:\Windows\System32\WMASF.DLL

16:20:13.0164 7980  C:\Windows\System32\WMASF.DLL - ok

16:20:13.0167 7980  [ BC5A34B6A14C93BF04E3F4E8EA57090A ] C:\Windows\System32\wbem\fastprox.dll

16:20:13.0167 7980  C:\Windows\System32\wbem\fastprox.dll - ok

16:20:13.0170 7980  [ B2B117BD8D1EA80536CDD91797EF4A0A ] C:\Windows\System32\PortableDeviceClassExtension.dll

16:20:13.0170 7980  C:\Windows\System32\PortableDeviceClassExtension.dll - ok

16:20:13.0173 7980  [ 883D02AB5D350BC45E0F60E8CFA97FDC ] C:\Windows\System32\PortableDeviceTypes.dll

16:20:13.0173 7980  C:\Windows\System32\PortableDeviceTypes.dll - ok

16:20:13.0177 7980  [ DB0F37DBA4C245C61E5936DDBDE62438 ] C:\Windows\System32\wbem\wbemsvc.dll

16:20:13.0177 7980  C:\Windows\System32\wbem\wbemsvc.dll - ok

16:20:13.0180 7980  [ 2C3B09E586BDA2CC49A292BE7BADC589 ] C:\Windows\System32\wbem\wmiutils.dll

16:20:13.0180 7980  C:\Windows\System32\wbem\wmiutils.dll - ok

16:20:13.0183 7980  [ B288FF7C1987A736726E87C79148C360 ] C:\Windows\System32\PortableDeviceWiaCompat.dll

16:20:13.0183 7980  C:\Windows\System32\PortableDeviceWiaCompat.dll - ok

16:20:13.0187 7980  [ 834933F16EA839AC5AC7CBF88638DF27 ] C:\Windows\System32\wbem\repdrvfs.dll

16:20:13.0187 7980  C:\Windows\System32\wbem\repdrvfs.dll - ok

16:20:13.0190 7980  [ AF8FCE586FE158542035EFE79B16A9BB ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

16:20:13.0190 7980  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll - ok

16:20:13.0194 7980  [ 22DC784B32BEE306A99F50D6DC2460BC ] C:\Windows\System32\esent.dll

16:20:13.0194 7980  C:\Windows\System32\esent.dll - ok

16:20:13.0197 7980  [ C2C6C014B96581EC8BF0C8604DE1743E ] C:\Windows\System32\wbem\WmiPrvSD.dll

16:20:13.0197 7980  C:\Windows\System32\wbem\WmiPrvSD.dll - ok

16:20:13.0200 7980  [ F85134BF76CB335A39F8D7BC4173D4FB ] C:\Windows\System32\msscb.dll

16:20:13.0200 7980  C:\Windows\System32\msscb.dll - ok

16:20:13.0203 7980  [ 21322832C99E8DE85BD047689A2A69DB ] C:\Windows\System32\pnpts.dll

16:20:13.0203 7980  C:\Windows\System32\pnpts.dll - ok

16:20:13.0206 7980  [ F0062778F50838145AC46B384FFB4FA3 ] C:\Windows\System32\pcadm.dll

16:20:13.0206 7980  C:\Windows\System32\pcadm.dll - ok

16:20:13.0209 7980  [ A609A192E98934A8D352704C99AB8577 ] C:\Windows\System32\wbem\wbemess.dll

16:20:13.0209 7980  C:\Windows\System32\wbem\wbemess.dll - ok

16:20:13.0213 7980  [ 58D4765AB87347DB835D5693ADF652C1 ] C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:20:13.0213 7980  C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll - ok

16:20:13.0216 7980  [ 75F122CDCA3C71BD09089F2CA824B796 ] C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:20:13.0216 7980  C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL - ok

16:20:13.0219 7980  [ FEA6D21F78922D641A0C9346D885133B ] C:\Windows\System32\mssprxy.dll

16:20:13.0219 7980  C:\Windows\System32\mssprxy.dll - ok

16:20:13.0223 7980  [ 01EBD21968ADBCDEF68E41CD8591DC9E ] C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin

16:20:13.0223 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\PlugInRAID.pin - ok

16:20:13.0227 7980  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:20:13.0227 7980  C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe - ok

16:20:13.0230 7980  [ 3606CE1AC3D6A9A9CB7DB35D7F5C54EC ] C:\Windows\System32\shfolder.dll

16:20:13.0230 7980  C:\Windows\System32\shfolder.dll - ok

16:20:13.0233 7980  [ 03500AD3001A71D3C01F2A5E053FEEF2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll

16:20:13.0233 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizM.dll - ok

16:20:13.0237 7980  [ A9086FD97C26976DFE54848C8B6DB104 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll

16:20:13.0237 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizD.dll - ok

16:20:13.0240 7980  [ D22979B79A89BDDC251BE01FED697362 ] C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll

16:20:13.0240 7980  C:\Program Files\Symantec\LiveUpdate\LuccMUI.dll - ok

16:20:13.0244 7980  [ AB15F6916593210DC6D95B328DD13F1C ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll

16:20:13.0244 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizR.dll - ok

16:20:13.0247 7980  [ 4B3841A78EC7C6BD7D463AE89D1C2489 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll

16:20:13.0247 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RaidWizCnG.dll - ok

16:20:13.0251 7980  [ 83713FA2E305533E961F89BF6880D734 ] C:\Program Files\Uniblue\RegistryBooster\cache.dll

16:20:13.0251 7980  C:\Program Files\Uniblue\RegistryBooster\cache.dll - ok

16:20:13.0254 7980  [ 1182F47930ED9AEC09F0DD410C67E69F ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll

16:20:13.0254 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizC.dll - ok

16:20:13.0258 7980  [ 7487E14B2FA3457E8A4A4B51CF36B3F2 ] C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll

16:20:13.0258 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\RAIDWizCFE.dll - ok

16:20:13.0262 7980  [ B3E0C20A53D6A55590468B33AA9BC525 ] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

16:20:13.0262 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe - ok

16:20:13.0265 7980  [ 8E3608C58BA8C8B685D44578897EE0A2 ] C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe

16:20:13.0265 7980  C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe - ok

16:20:13.0269 7980  [ 0D4B1D08EDC6D212BCAC4E0672206474 ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

16:20:13.0269 7980  C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe - ok

16:20:13.0272 7980  [ 682B0FFCCCD29668207266C7DA5E6C9D ] C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

16:20:13.0272 7980  C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe - ok

16:20:13.0276 7980  [ 08630A8609781AE5BCF7324E9FD42FF9 ] C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll

16:20:13.0276 7980  C:\Program Files\Adobe\Flash Media Server 3.5\libcurl.dll - ok

16:20:13.0279 7980  [ C0B8B96D018849FD8CCF15FED84E8782 ] C:\Windows\System32\ie4uinit.exe

16:20:13.0279 7980  C:\Windows\System32\ie4uinit.exe - ok

16:20:13.0282 7980  [ F0FEFB0B5D25A75D478A4317139D937E ] C:\Windows\System32\iedkcs32.dll

16:20:13.0282 7980  C:\Windows\System32\iedkcs32.dll - ok

16:20:13.0285 7980  [ 4B19A9A4191353007E9819A832B81186 ] C:\Windows\System32\timedate.cpl

16:20:13.0285 7980  C:\Windows\System32\timedate.cpl - ok

16:20:13.0288 7980  [ 8D78BA30DB4AE040A52EDEE725782715 ] C:\Windows\System32\actxprxy.dll

16:20:13.0288 7980  C:\Windows\System32\actxprxy.dll - ok

16:20:13.0291 7980  [ FF41E1AC301F51E16F61AD7C0F45467C ] C:\Windows\System32\msshsq.dll

16:20:13.0291 7980  C:\Windows\System32\msshsq.dll - ok

16:20:13.0295 7980  [ 65C2A23FF131541B3D72D7D3D2CBFC03 ] C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll

16:20:13.0295 7980  C:\Program Files\Adobe\Flash Media Server 3.5\modules\codecs\Screenshare.dll - ok

16:20:13.0298 7980  [ 1CE4A2790EB4A96F4ED1E4264866AFE6 ] C:\Windows\System32\NaturalLanguage6.dll

16:20:13.0298 7980  C:\Windows\System32\NaturalLanguage6.dll - ok

16:20:13.0301 7980  [ 3BC9A79BCD7BD98A6F492BCF1B6177B9 ] C:\Windows\System32\NlsData0007.dll

16:20:13.0301 7980  C:\Windows\System32\NlsData0007.dll - ok

16:20:13.0305 7980  [ 2A8681AEA24003040CA7D677BE9F1702 ] C:\Windows\System32\drivers\78914021.sys

16:20:13.0305 7980  C:\Windows\System32\drivers\78914021.sys - ok

16:20:13.0309 7980  [ 795166DED9B1B32136B150A12A1DEBAE ] C:\Windows\System32\NlsLexicons0007.dll

16:20:13.0309 7980  C:\Windows\System32\NlsLexicons0007.dll - ok

16:20:13.0313 7980  [ 24F90AEFEBE601D427CB4511E74CDCB6 ] C:\Windows\System32\linkinfo.dll

16:20:13.0313 7980  C:\Windows\System32\linkinfo.dll - ok

16:20:13.0316 7980  [ 04044BF8E6989BE45FA718C24407CA28 ] C:\Windows\System32\networkexplorer.dll

16:20:13.0316 7980  C:\Windows\System32\networkexplorer.dll - ok

16:20:13.0319 7980  [ 9A4322EE420D6FACD4D4B1FF6CB856B1 ] C:\hp\support\hpsysdrv.exe

16:20:13.0319 7980  C:\hp\support\hpsysdrv.exe - ok

16:20:13.0322 7980  [ 7088B136BB58A5F95CF0DE8386CA6C0F ] C:\hp\KBD\KbdStub.exe

16:20:13.0322 7980  C:\hp\KBD\KbdStub.exe - ok

16:20:13.0325 7980  [ 0CFCDE5D9D074D96B78D1F1CBF1AAB1D ] C:\Windows\System32\riched20.dll

16:20:13.0325 7980  C:\Windows\System32\riched20.dll - ok

16:20:13.0328 7980  [ 4F89DD4EA74C66916E15A6E7D74A50B5 ] C:\Windows\System32\jureg.exe

16:20:13.0328 7980  C:\Windows\System32\jureg.exe - ok

16:20:13.0331 7980  [ 392845E8D49B5F0E81AAC4D795000A8C ] C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

16:20:13.0331 7980  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe - ok

16:20:13.0335 7980  [ E42A642E162B0468B2C4E9D803079C7F ] C:\Windows\KHALMNPR.Exe

16:20:13.0335 7980  C:\Windows\KHALMNPR.Exe - ok

16:20:13.0338 7980  [ 361CD47DC5BD83EE24407903233B0D9A ] C:\Windows\RtHDVCpl.exe

16:20:13.0338 7980  C:\Windows\RtHDVCpl.exe - ok

16:20:13.0341 7980  [ 765AB6A6F8ED6F8186461BB2F183AA00 ] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll

16:20:13.0341 7980  C:\Program Files\Intel\Intel Matrix Storage Manager\Iaamon_DEU.dll - ok

16:20:13.0345 7980  [ 5016B8FC59AD616F03813FBE63295081 ] C:\Windows\System32\thumbcache.dll

16:20:13.0345 7980  C:\Windows\System32\thumbcache.dll - ok

16:20:13.0348 7980  [ BADC359C9A0D9C217B7E8DA17BF3F5BB ] C:\Windows\System32\ntshrui.dll

16:20:13.0348 7980  C:\Windows\System32\ntshrui.dll - ok

16:20:13.0350 7980  [ 7AF5A466CF4AECA28E3DCBCF5B6FD220 ] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

16:20:13.0350 7980  C:\Program Files\HP\HP Software Update\hpwuSchd2.exe - ok

16:20:13.0353 7980  [ 12916E0642E92561C98B18A2A2D01B14 ] C:\Program Files\Common Files\Java\Java Update\jusched.exe

16:20:13.0353 7980  C:\Program Files\Common Files\Java\Java Update\jusched.exe - ok

16:20:13.0357 7980  [ B01902E9451B3D39DC5CAFDC9B9B398C ] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE

16:20:13.0357 7980  C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE - ok

16:20:13.0360 7980  [ 29000C2AF39C86B3FC08814B456F1A86 ] C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll

16:20:13.0360 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\COL\sesHlp.dll - ok

16:20:13.0364 7980  [ 5D61BE7DB55B026A5D61A3EED09D0EAD ] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

16:20:13.0364 7980  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe - ok

16:20:13.0367 7980  [ 35937EAD711207544E219C2A19A78A7D ] C:\Program Files\Windows Media Player\wmpnscfg.exe

16:20:13.0367 7980  C:\Program Files\Windows Media Player\wmpnscfg.exe - ok

16:20:13.0370 7980  [ 8548444028D337900D6DE5F1340C9B47 ] C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll

16:20:13.0370 7980  C:\Program Files\Common Files\Symantec Shared\auCOLPwd.dll - ok

16:20:13.0374 7980  [ 3484CC5EFA7E9C0DFC47F7692AC0B817 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL

16:20:13.0374 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCAPPPLG.DLL - ok

16:20:13.0377 7980  [ 9575E4C5748A79E289C806FAC6E7CEC9 ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll

16:20:13.0377 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\npcLU.dll - ok

16:20:13.0380 7980  [ D6D65109A5A8C93DCF34E1B48B64E5BF ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll

16:20:13.0380 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiAlert.dll - ok

16:20:13.0384 7980  [ FAB2ABBC61F60E15DE7CF6CF1B16BF69 ] C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL

16:20:13.0384 7980  C:\Program Files\Common Files\Symantec Shared\CCPROD.DLL - ok

16:20:13.0387 7980  [ 3074421324485872276921F457A1E36C ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL

16:20:13.0387 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL - ok

16:20:13.0390 7980  [ 19962D74CD416FEE00C95A03C113C6D3 ] C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL

16:20:13.0390 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL - ok

16:20:13.0394 7980  [ F14219FC767F1383526AB423F278A8E3 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

16:20:13.0394 7980  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - ok

16:20:13.0397 7980  [ 124445568B1F019F14871FDA6E9E547E ] C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll

16:20:13.0397 7980  C:\PROGRA~1\COMMON~1\SYMANT~1\NPC\2.0\uiHost.dll - ok

16:20:13.0401 7980  [ 705A7511B96AC171846D0E2DDC900DB1 ] C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll

16:20:13.0401 7980  C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\AlertEng.dll - ok

16:20:13.0404 7980  [ B624202660474516E73AA95238FD9843 ] C:\Program Files\Logitech\SetPoint\SetPoint.exe

16:20:13.0404 7980  C:\Program Files\Logitech\SetPoint\SetPoint.exe - ok

16:20:13.0407 7980  [ 84B8827562B005C118CADBA0F25DB2C6 ] C:\Windows\System32\dsound.dll

16:20:13.0407 7980  C:\Windows\System32\dsound.dll - ok

16:20:13.0411 7980  [ D1DCC1D6A2EFEF1148C1874BDC546A2D ] C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll

16:20:13.0411 7980  C:\Program Files\Common Files\Symantec Shared\AppCore\AppJMS32.dll - ok

16:20:13.0414 7980  [ B2A27CE3D828B52B220650ECAEA92D1A ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll

16:20:13.0414 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\AcctMgr.dll - ok

16:20:13.0418 7980  [ 4B1EB3AD2771AE8D0390ED1444B7B493 ] C:\Program Files\Logitech\SetPoint\lgscroll.dll

16:20:13.0418 7980  C:\Program Files\Logitech\SetPoint\lgscroll.dll - ok

16:20:13.0421 7980  [ F5892A613D0A74AE063613CA53D7B491 ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll

16:20:13.0422 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\DSMigrat.dll - ok

16:20:13.0425 7980  [ 9507A8E70A620A36CF2CF60740B8F022 ] C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll

16:20:13.0425 7980  C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll - ok

16:20:13.0429 7980  [ 22AA20E24295D0D98AFF72C65BD7DBFA ] C:\Windows\System32\KemXML.dll

16:20:13.0429 7980  C:\Windows\System32\KemXML.dll - ok

16:20:13.0432 7980  [ 1F171553F1138DC0062A71A7D275055A ] C:\Windows\System32\schtasks.exe

16:20:13.0432 7980  C:\Windows\System32\schtasks.exe - ok

16:20:13.0436 7980  [ E46A4765F8E6D631C9C9CB0B083602F5 ] C:\Program Files\Windows Media Player\wmpnssci.dll

16:20:13.0436 7980  C:\Program Files\Windows Media Player\wmpnssci.dll - ok

16:20:13.0439 7980  [ E1D0C7866A544A1BA9CBEDFE7C35F085 ] C:\Windows\System32\dinput.dll

16:20:13.0439 7980  C:\Windows\System32\dinput.dll - ok

16:20:13.0442 7980  [ C32B360E34ED8730EA4ECFAEBF4351F1 ] C:\Program Files\Norton 360\TPALERT.DLL

16:20:13.0442 7980  C:\Program Files\Norton 360\TPALERT.DLL - ok

16:20:13.0445 7980  [ 7F1165CA2BCAAE4F396D0977308BB16E ] C:\Program Files\Meazure\Meazure.exe

16:20:13.0445 7980  C:\Program Files\Meazure\Meazure.exe - ok

16:20:13.0448 7980  [ 648AB74D9C104FB500B6C4EEDC6A8772 ] C:\Windows\System32\wmpmde.dll

16:20:13.0448 7980  C:\Windows\System32\wmpmde.dll - ok

16:20:13.0451 7980  [ 67D16247C56C26A4F0D79D1A7F272B8F ] C:\Windows\System32\mf.dll

16:20:13.0451 7980  C:\Windows\System32\mf.dll - ok

16:20:13.0454 7980  [ 394CFDE4B6A45A7B93F3EE912C3BB470 ] C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll

16:20:13.0454 7980  C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll - ok

16:20:13.0458 7980  [ D4FF794FD2854CAA86F6C298BF158CFB ] C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe

16:20:13.0458 7980  C:\Users\christoph\Downloads\SIMphoto_en\SIMphoto\SIMphoto.exe - ok

16:20:13.0461 7980  [ BAE6DFFEA62A4218B577C25ED04EC947 ] C:\Program Files\Norton 360\TPMAINUI.DLL

16:20:13.0461 7980  C:\Program Files\Norton 360\TPMAINUI.DLL - ok

16:20:13.0465 7980  [ 07F0B8EEB0785B71B194BB5AED8EF0C8 ] C:\Program Files\HP\hpqSSupply.exe

16:20:13.0465 7980  C:\Program Files\HP\hpqSSupply.exe - ok

16:20:13.0468 7980  [ 810F104256F6BCD7012545B0BEA18D23 ] C:\Windows\System32\kemutb.dll

16:20:13.0468 7980  C:\Windows\System32\kemutb.dll - ok

16:20:13.0471 7980  [ 2495C4204C63678F8FD5D488CA7DAD26 ] C:\Windows\System32\evr.dll

16:20:13.0471 7980  C:\Windows\System32\evr.dll - ok

16:20:13.0474 7980  [ 4DF10CE50010D70152944B51E03588B0 ] C:\Windows\System32\wmdrmsdk.dll

16:20:13.0474 7980  C:\Windows\System32\wmdrmsdk.dll - ok

16:20:13.0477 7980  [ 70C6489D56008D75DEDF73226FA63C11 ] C:\Windows\System32\dimsjob.dll

16:20:13.0477 7980  C:\Windows\System32\dimsjob.dll - ok

16:20:13.0480 7980  [ 3192ED5E2FFDF5B630541B9643AE1AA3 ] C:\Windows\System32\upnp.dll

16:20:13.0480 7980  C:\Windows\System32\upnp.dll - ok

16:20:13.0483 7980  [ 015E99A7634B93E8BB0380C70F3D2CC3 ] C:\Windows\System32\wmp.dll

16:20:13.0483 7980  C:\Windows\System32\wmp.dll - ok

16:20:13.0486 7980  [ 98638A4CA187245C469DA0DEC4F04A45 ] C:\Windows\System32\pautoenr.dll

16:20:13.0486 7980  C:\Windows\System32\pautoenr.dll - ok

16:20:13.0489 7980  [ AC48FD62E22C4425879FCA5A63F50497 ] C:\Windows\System32\certcli.dll

16:20:13.0490 7980  C:\Windows\System32\certcli.dll - ok

16:20:13.0493 7980  [ 8F53E6D9036F072B701F9E7D410E25D9 ] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc

16:20:13.0493 7980  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc - ok

16:20:13.0496 7980  [ 6A702774723F34B7CDC43A9EB7697729 ] C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe

16:20:13.0496 7980  C:\octave\Octave3.6.1_gcc4.6.2\bin\octave.exe - ok

16:20:13.0500 7980  [ A2BEE7580B3E530A83651CDDA34278FA ] C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll

16:20:13.0500 7980  C:\Program Files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll - ok

16:20:13.0503 7980  [ 74CD7C617D24B8DE59029806CB19F0E0 ] C:\Program Files\Norton 360\tpCED.dll

16:20:13.0503 7980  C:\Program Files\Norton 360\tpCED.dll - ok

16:20:13.0506 7980  [ 3C9BCE38FAF8BAA8168BD5714101449B ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll

16:20:13.0506 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\coParse.dll - ok

16:20:13.0510 7980  [ BE56D0547E24644DEEB19397521B1EAA ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll

16:20:13.0510 7980  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\gtn.dll - ok

16:20:13.0514 7980  [ E859EC77A0C5C2F81DD19C87AD23CACC ] C:\Program Files\Common Files\Symantec Shared\SymRedir.dll

16:20:13.0514 7980  C:\Program Files\Common Files\Symantec Shared\SymRedir.dll - ok

16:20:13.0517 7980  [ B941193CC8DCE2E1EB8AB6D46374222B ] C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll

16:20:13.0517 7980  C:\Program Files\Common Files\Symantec Shared\COH\sH0007.dll - ok

16:20:13.0521 7980  [ 80BD4B26E2CBC0D65445D0463DFF6FC2 ] C:\Windows\System32\oledlg.dll

16:20:13.0521 7980  C:\Windows\System32\oledlg.dll - ok

16:20:13.0524 7980  [ 9441A231C0AA0712F7CF3B10D9CFCF76 ] C:\Windows\System32\wmploc.DLL

16:20:13.0524 7980  C:\Windows\System32\wmploc.DLL - ok

16:20:13.0527 7980  [ 580E027967EE2F79AAE03AD658108BCC ] C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll

16:20:13.0527 7980  C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll - ok

16:20:13.0531 7980  [ D083CCCC92C797CD57C4E3F76B740B96 ] C:\Program Files\Perspective Rectifier 3.3\pr.exe

16:20:13.0531 7980  C:\Program Files\Perspective Rectifier 3.3\pr.exe - ok

16:20:13.0534 7980  [ 0053319C4438CDE659AA75C19BBD22F1 ] C:\Windows\System32\CertEnroll.dll

16:20:13.0534 7980  C:\Windows\System32\CertEnroll.dll - ok

16:20:13.0537 7980  [ D62CAB966AD76B00C67C92870F9BD7A5 ] C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll

16:20:13.0537 7980  C:\Program Files\Common Files\Symantec Shared\Backup\buProv.dll - ok

16:20:13.0541 7980  [ 289BB482E4689783BE365C08D0360DA4 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll

16:20:13.0541 7980  C:\Program Files\Common Files\Symantec Shared\Backup\gwrks32.dll - ok

16:20:13.0544 7980  [ E54624E7897DDC0CF132C2BAEFC5A21A ] C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll

16:20:13.0544 7980  C:\Program Files\Common Files\Symantec Shared\Backup\gearaw32.dll - ok

16:20:13.0548 7980  [ 021CFC69A1874431DC88BEFC37A2A2FD ] C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll

16:20:13.0548 7980  C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll - ok

16:20:13.0551 7980  [ 8ADAE4E00D86A8530B8176A853B4B9B9 ] C:\Windows\System32\KemUtil.dll

16:20:13.0551 7980  C:\Windows\System32\KemUtil.dll - ok

16:20:13.0554 7980  [ 689C6EA7A17B3AE0F2A0151465EF311E ] C:\Windows\System32\jusched.exe

16:20:13.0554 7980  C:\Windows\System32\jusched.exe - ok

16:20:13.0557 7980  [ E0E54A571D4323567E95E11FE76A5FF3 ] C:\Windows\System32\drivers\srtsp.sys

16:20:13.0557 7980  C:\Windows\System32\drivers\srtsp.sys - ok

16:20:13.0561 7980  [ 826F699B69E88A3920C70F344DD42D88 ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:20:13.0561 7980  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS - ok

16:20:13.0564 7980  [ 8E4C77AD9BB279900C00F870CC0C674B ] C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:20:13.0564 7980  C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS - ok

16:20:13.0567 7980  [ 9495FCC01D7AB7B60E5B8BA7AEFE9E3D ] C:\Windows\System32\wbem\WmiPrvSE.exe

16:20:13.0567 7980  C:\Windows\System32\wbem\WmiPrvSE.exe - ok

16:20:13.0571 7980  [ F723422A11CD6FA13036746272200993 ] C:\Windows\System32\wbem\cimwin32.dll

16:20:13.0571 7980  C:\Windows\System32\wbem\cimwin32.dll - ok

16:20:13.0574 7980  [ 617F9A5813E69F6E9ED94B811EC75396 ] C:\Windows\System32\wmpps.dll

16:20:13.0574 7980  C:\Windows\System32\wmpps.dll - ok

16:20:13.0577 7980  [ F1ECEC53B9FFC30E123D14E087C49111 ] C:\Windows\System32\wmdrmdev.dll

16:20:13.0577 7980  C:\Windows\System32\wmdrmdev.dll - ok

16:20:13.0580 7980  [ 7C7C620860819A62F926D7EC0B72C50B ] C:\Windows\System32\drmv2clt.dll

16:20:13.0580 7980  C:\Windows\System32\drmv2clt.dll - ok

16:20:13.0583 7980  [ 67BB7141F7F5F37411F796943B3418B6 ] C:\Windows\System32\framedynos.dll

16:20:13.0583 7980  C:\Windows\System32\framedynos.dll - ok

16:20:13.0587 7980  [ A6E02F65BE0C48DE7101923AE70268BD ] C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll

16:20:13.0587 7980  C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll - ok

16:20:13.0590 7980  [ 6C60E160FAB097ADDA6977A2B811CBAE ] C:\Program Files\Norton 360\WSCStub.exe

16:20:13.0590 7980  C:\Program Files\Norton 360\WSCStub.exe - ok

16:20:13.0593 7980  [ 80F9CF332BA54654160CEBD1E2C504F8 ] C:\Program Files\ShiftN\ShiftN.exe

16:20:13.0593 7980  C:\Program Files\ShiftN\ShiftN.exe - ok

16:20:13.0596 7980  [ DEB3972E35D9079CED7CD194682A4375 ] C:\Program Files\Common Files\Winferno\WSE2007.dll

16:20:13.0596 7980  C:\Program Files\Common Files\Winferno\WSE2007.dll - ok

16:20:13.0600 7980  [ 67384147DD005E54D2C0A20408E28579 ] C:\Program Files\Steam\steam.exe

16:20:13.0600 7980  C:\Program Files\Steam\steam.exe - ok

16:20:13.0602 7980  [ 37D75B5D3D6CCED0BC35FA9FA963363B ] C:\Program Files\Origin\Origin.exe

16:20:13.0602 7980  C:\Program Files\Origin\Origin.exe - ok

16:20:13.0605 7980  [ D0A95E567224B4C347CBDD6541E5D928 ] C:\Windows\System32\wscisvif.dll

16:20:13.0605 7980  C:\Windows\System32\wscisvif.dll - ok

16:20:13.0608 7980  [ 721BAA64EF443D9033F2330F0FF8C70B ] C:\Windows\System32\dskquota.dll

16:20:13.0608 7980  C:\Windows\System32\dskquota.dll - ok

16:20:13.0611 7980  [ A0F4852A5DB9754BEC06F84B400AE743 ] C:\Windows\System32\wscapi.dll

16:20:13.0611 7980  C:\Windows\System32\wscapi.dll - ok

16:20:13.0615 7980  [ FE3702015BE4D214808A2FBC07B8E5FF ] C:\Windows\System32\wscproxystub.dll

16:20:13.0615 7980  C:\Windows\System32\wscproxystub.dll - ok

16:20:13.0618 7980  [ EF9F69074FF0A48DD30FEF5A33518D86 ] C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

16:20:13.0618 7980  C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll - ok

16:20:13.0622 7980  [ 61216539E55DDF2F78E421E7EF140650 ] C:\Windows\System32\ExplorerFrame.dll

16:20:13.0622 7980  C:\Windows\System32\ExplorerFrame.dll - ok

16:20:13.0625 7980  [ 22CC6CDBA678790046693654C3B212E4 ] C:\Program Files\Internet Explorer\iexplore.exe

16:20:13.0625 7980  C:\Program Files\Internet Explorer\iexplore.exe - ok

16:20:13.0628 7980  [ 7E6EA9CB72B5DE84A5D700BED877E5F9 ] C:\Program Files\Windows Mail\WinMail.exe

16:20:13.0628 7980  C:\Program Files\Windows Mail\WinMail.exe - ok

16:20:13.0632 7980  [ E2C48CD0132D4D1DC7D0DF9A6BEF686A ] C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll

16:20:13.0632 7980  C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80u.dll - ok

16:20:13.0635 7980  [ 11F3FFC37D66870A092EB2B220744F84 ] C:\Program Files\Blender Foundation\Blender\blender.exe

16:20:13.0635 7980  C:\Program Files\Blender Foundation\Blender\blender.exe - ok

16:20:13.0639 7980  [ B152B061168EEFE865C9DE284B59D0E5 ] C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll

16:20:13.0639 7980  C:\Program Files\Common Files\Symantec Shared\Backup\gwlangen.dll - ok

16:20:13.0642 7980  [ C8AE490A93C3CC2E537B6E06247785A1 ] C:\Windows\System32\wbem\NCProv.dll

16:20:13.0642 7980  C:\Windows\System32\wbem\NCProv.dll - ok

16:20:13.0646 7980  [ E3F535656B5ABF249702EB64F3CF9AF0 ] C:\Windows\System32\wbem\wbemcons.dll

16:20:13.0646 7980  C:\Windows\System32\wbem\wbemcons.dll - ok

16:20:13.0649 7980  [ 2D821AFA5A1A9CA7F9F997A1AAD09E72 ] C:\Program Files\Windows Media Player\wmplayer.exe

16:20:13.0649 7980  C:\Program Files\Windows Media Player\wmplayer.exe - ok

16:20:13.0652 7980  [ D0716BD0C0822A642D36E82F49F2B5B8 ] C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll

16:20:13.0652 7980  C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll - ok

16:20:13.0656 7980  [ 005EE82BABF1D2D32188A75BEDF500A4 ] C:\Windows\System32\GEARAspi.dll

16:20:13.0656 7980  C:\Windows\System32\GEARAspi.dll - ok

16:20:13.0659 7980  [ 9B0726A03B790E5B82BED44D24009BEF ] C:\Windows\System32\imapi2.dll

16:20:13.0659 7980  C:\Windows\System32\imapi2.dll - ok

16:20:13.0662 7980  [ 8803B32E8AF93C2FCB59C88EB9459190 ] C:\Program Files\Ultimate Papercraft3D\paper3d.exe

16:20:13.0662 7980  C:\Program Files\Ultimate Papercraft3D\paper3d.exe - ok

16:20:13.0666 7980  [ 68DC617F42DB8A10AC58C365F9540E5D ] C:\Program Files\Registry System Wizard.NET\RSW.exe

16:20:13.0666 7980  C:\Program Files\Registry System Wizard.NET\RSW.exe - ok

16:20:13.0669 7980  [ 3B54475A96C7F5403DC3362DEDF3982F ] C:\Program Files\Uniblue\RegistryBooster\Launcher.exe

16:20:13.0669 7980  C:\Program Files\Uniblue\RegistryBooster\Launcher.exe - ok

16:20:13.0672 7980  [ B5950DF243837D8217F4E597919B224A ] C:\Windows\System32\stobject.dll

16:20:13.0672 7980  C:\Windows\System32\stobject.dll - ok

16:20:13.0675 7980  [ EC69B16644C613F41A57169F8D068F1D ] C:\Windows\System32\batmeter.dll

16:20:13.0675 7980  C:\Windows\System32\batmeter.dll - ok

16:20:13.0679 7980  [ 6C90415A6FA967E3746C32E7E6366B22 ] C:\Program Files\DVD Flick\dvdflick.exe

16:20:13.0679 7980  C:\Program Files\DVD Flick\dvdflick.exe - ok

16:20:13.0682 7980  [ C45D74C22D4EFC3F86C9CABF9D98611F ] C:\Program Files\Online Services\eBay\WizLink.exe

16:20:13.0682 7980  C:\Program Files\Online Services\eBay\WizLink.exe - ok

16:20:13.0685 7980  [ DAF60E13E96ECB67F0EDAA89C6B01B8D ] C:\Windows\System32\notepad.exe

16:20:13.0685 7980  C:\Windows\System32\notepad.exe - ok

16:20:13.0688 7980  [ 8958F53C5ACAA22BDBEF97C1C3389102 ] C:\Program Files\Free FLV Converter\FreeFLVConverter.exe

16:20:13.0688 7980  C:\Program Files\Free FLV Converter\FreeFLVConverter.exe - ok

16:20:13.0692 7980  [ FCAB63DD4E9CE22FC46D48C1DB21E72E ] C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll

16:20:13.0692 7980  C:\Program Files\Java\jre1.6.0_01\bin\jpinscp.dll - ok

16:20:13.0696 7980  [ 8D68E1E83190DEAFD5D4340AE2BF99E4 ] C:\Program Files\CDBurnerXP\cdbxpp.exe

16:20:13.0696 7980  C:\Program Files\CDBurnerXP\cdbxpp.exe - ok

16:20:13.0699 7980  [ 027E5E14C9CFF810377701BDEAD8210F ] C:\Windows\System32\control.exe

16:20:13.0699 7980  C:\Windows\System32\control.exe - ok

16:20:13.0702 7980  [ 8FC5FF226A65B73ECF37DFD90948204D ] C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe

16:20:13.0702 7980  C:\Program Files\Wondershare\Streaming Video Recorder\WSPlayer.exe - ok

16:20:13.0706 7980  [ DA1919D896DBD5895E138932AE9E398B ] C:\Windows\System32\browserchoice.exe

16:20:13.0706 7980  C:\Windows\System32\browserchoice.exe - ok

16:20:13.0709 7980  [ F5953C17B50793A746113C3D608856AB ] C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe

16:20:13.0710 7980  C:\Program Files\Wondershare\Streaming Video Recorder\StreamingVideoRecorder.exe - ok

16:20:13.0713 7980  [ B0A7458308E157ABF2B04555D12ACF4A ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

16:20:13.0713 7980  C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe - ok

16:20:13.0717 7980  [ 395335431AD55C167CFDBBAB8420DA73 ] C:\Program Files\Movie Maker\DVDMaker.exe

16:20:13.0717 7980  C:\Program Files\Movie Maker\DVDMaker.exe - ok

16:20:13.0720 7980  [ F6DB5697858D528D0685838461833159 ] C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe

16:20:13.0720 7980  C:\Program Files\AVS4YOU\AVSVideoEditor4\AVSVideoEditor.exe - ok

16:20:13.0724 7980  [ 29FD49B7241866794C33EDD7A1AA2437 ] C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe

16:20:13.0724 7980  C:\Program Files\AVS4YOU\AVSVideoConverter6\AVSVideoConverter.exe - ok

16:20:13.0728 7980  [ 47FE0FFDD2768728E667D3E7B9A53D77 ] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe

16:20:13.0728 7980  C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\Corel Paint Shop Pro Photo.exe - ok

16:20:13.0731 7980  [ 30F02D9C55053367E26A11482F51E255 ] C:\Windows\System32\SndVolSSO.dll

16:20:13.0731 7980  C:\Windows\System32\SndVolSSO.dll - ok

16:20:13.0734 7980  [ B7ED332A57FC78CA29E40D3619550225 ] C:\Windows\ehome\ehshell.exe

16:20:13.0734 7980  C:\Windows\ehome\ehshell.exe - ok

16:20:13.0737 7980  [ 3503086CB4BDFE9F49E8A05C5974B64C ] C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe

16:20:13.0737 7980  C:\Program Files\Das Fussball Studio\Das Fussball Studio.exe - ok

16:20:13.0741 7980  [ 88FFC1304C3F94B1FEB71E42B97D8F7E ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe

16:20:13.0741 7980  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\FIFAWC06.exe - ok

16:20:13.0744 7980  [ 3A2EEE8444A8E5C1A454C57B2198F5FC ] C:\Windows\System32\ntlanman.dll

16:20:13.0744 7980  C:\Windows\System32\ntlanman.dll - ok

16:20:13.0747 7980  [ 582EFE56FC0858E58A6CEBA2A64B02C7 ] C:\Windows\System32\drprov.dll

16:20:13.0747 7980  C:\Windows\System32\drprov.dll - ok

16:20:13.0750 7980  [ CFBD2E1FE18B50748A76703A2DC6D4E3 ] C:\Windows\System32\davclnt.dll

16:20:13.0750 7980  C:\Windows\System32\davclnt.dll - ok

16:20:13.0753 7980  [ 313B30189557A2E2793F845DE0F0A4D5 ] C:\Windows\ehome\ehSSO.dll

16:20:13.0753 7980  C:\Windows\ehome\ehSSO.dll - ok

16:20:13.0756 7980  [ DE8CCA55D7210161D83AF3737B85B850 ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe

16:20:13.0756 7980  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\eauninstall.exe - ok

16:20:13.0760 7980  [ 2714656AF0F4D280CC45BB5D82C7A46C ] C:\Program Files\VideoLAN\VLC\vlc.exe

16:20:13.0760 7980  C:\Program Files\VideoLAN\VLC\vlc.exe - ok

16:20:13.0763 7980  [ E98E402067978DB38282158F9E8609CA ] C:\Windows\System32\netshell.dll

16:20:13.0763 7980  C:\Windows\System32\netshell.dll - ok

16:20:13.0766 7980  [ C4AB08459CD7B59B410ACFC04D90E87B ] C:\Program Files\Movie Maker\MOVIEMK.exe

16:20:13.0766 7980  C:\Program Files\Movie Maker\MOVIEMK.exe - ok

16:20:13.0770 7980  [ 75AD59B9B12EB194486BE8D97B062994 ] C:\Windows\System32\pnidui.dll

16:20:13.0770 7980  C:\Windows\System32\pnidui.dll - ok

16:20:13.0773 7980  [ EB2170D0DDF3B2A92506AE16BC524B0B ] C:\Windows\System32\wlanutil.dll

16:20:13.0773 7980  C:\Windows\System32\wlanutil.dll - ok

16:20:13.0776 7980  [ 0C45DFAEC1E913CD6F0823A908A2638B ] C:\Program Files\Digitale Bibliothek 4\Digibib4.exe

16:20:13.0776 7980  C:\Program Files\Digitale Bibliothek 4\Digibib4.exe - ok

16:20:13.0779 7980  [ B18CC509D7685DCD2A60E8F4801463B3 ] C:\Program Files\Nikon\FotoShare\PicShare.exe

16:20:13.0779 7980  C:\Program Files\Nikon\FotoShare\PicShare.exe - ok

16:20:13.0783 7980  [ 3DAED7FD0244FC5F85BA99CB408D93F3 ] C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe

16:20:13.0783 7980  C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe - ok

16:20:13.0786 7980  [ E47C854A28A81F2939F42CBE9FEA994C ] C:\Windows\System32\Magnify.exe

16:20:13.0786 7980  C:\Windows\System32\Magnify.exe - ok

16:20:13.0789 7980  [ ABAEAEE763E287BDD39094C4165E1F3F ] C:\Windows\System32\fdProxy.dll

16:20:13.0789 7980  C:\Windows\System32\fdProxy.dll - ok

16:20:13.0793 7980  [ 541CBEB6946E6D3EC6289EAA44F24468 ] C:\Program Files\DesignWorkshop Lite\dwlite.exe

16:20:13.0793 7980  C:\Program Files\DesignWorkshop Lite\dwlite.exe - ok

16:20:13.0796 7980  [ 5B6748DFA56A0BE54C45B989378293E1 ] C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll

16:20:13.0796 7980  C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll - ok

16:20:13.0799 7980  [ E064EC2A869CC353EE030920827AD967 ] C:\Program Files\VCG\MeshLab\meshlab.exe

16:20:13.0799 7980  C:\Program Files\VCG\MeshLab\meshlab.exe - ok

16:20:13.0803 7980  [ 5EFDECB7B780B764D330270E565A9BEB ] C:\Program Files\3D Object Converter 4.60\3dconverter.exe

16:20:13.0803 7980  C:\Program Files\3D Object Converter 4.60\3dconverter.exe - ok

16:20:13.0806 7980  [ 69A8B07541DD43AA8A4164DA586BB66A ] C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key

16:20:13.0806 7980  C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.key - ok

16:20:13.0809 7980  [ 7BDCEAF13D9EC5873C43BD8063BEC871 ] C:\Windows\System32\KemWnd.dll

16:20:13.0809 7980  C:\Windows\System32\KemWnd.dll - ok

16:20:13.0813 7980  [ A963352EDFCC13E84741B578E23FDCCC ] C:\Program Files\Google\Google Earth\plugin\geplugin.exe

16:20:13.0813 7980  C:\Program Files\Google\Google Earth\plugin\geplugin.exe - ok

16:20:13.0816 7980  [ 069385484EA57B663D688894C88975C5 ] C:\Windows\System32\wuapp.exe

16:20:13.0816 7980  C:\Windows\System32\wuapp.exe - ok

16:20:13.0819 7980  [ 4BAEC13BCAA595639EBB5185278DEFEA ] C:\Windows\System32\fdWSD.dll

16:20:13.0819 7980  C:\Windows\System32\fdWSD.dll - ok

16:20:13.0822 7980  [ C03AC1FBCD625F93D2C245D97E06F270 ] C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe

16:20:13.0822 7980  C:\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe - ok

16:20:13.0825 7980  [ 27BB54357A51594D9F9B6257B5B9A879 ] C:\Windows\System32\Narrator.exe

16:20:13.0825 7980  C:\Windows\System32\Narrator.exe - ok

16:20:13.0828 7980  [ D571295B71C60A67F6F2EA987E5CC3B0 ] C:\Windows\System32\wmdrmnet.dll

16:20:13.0828 7980  C:\Windows\System32\wmdrmnet.dll - ok

16:20:13.0832 7980  [ 790222D6CCFC576F0D07D418E6115D85 ] C:\Program Files\Windows Calendar\WinCal.exe

16:20:13.0832 7980  C:\Program Files\Windows Calendar\WinCal.exe - ok

16:20:13.0835 7980  [ BABCB7BF8C7210A666546A8B34F7BC54 ] C:\Windows\System32\javaws.exe

16:20:13.0835 7980  C:\Windows\System32\javaws.exe - ok

16:20:13.0838 7980  [ 7A42135A456E5C8154FF3DD5BE4B3DB4 ] C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe

16:20:13.0838 7980  C:\Program Files\Origin Games\FIFA 12\Game\fifa.exe - ok

16:20:13.0841 7980  [ 3EB6D30D82F0E300FCFBAD0498F654FD ] C:\Windows\System32\mlang.dll

16:20:13.0841 7980  C:\Windows\System32\mlang.dll - ok

16:20:13.0845 7980  [ 559DC15B74C66EC38C4ECF81503C7757 ] C:\Program Files\Logitech\SetPoint\SetPointCOM.dll

16:20:13.0845 7980  C:\Program Files\Logitech\SetPoint\SetPointCOM.dll - ok

16:20:13.0848 7980  [ 443C5961CACD4ABC16648874AF06E4A0 ] C:\Windows\System32\fdSSDP.dll

16:20:13.0848 7980  C:\Windows\System32\fdSSDP.dll - ok

16:20:13.0851 7980  [ 2DD6AF8E97F59C9D39329BBC2A81F13F ] C:\Windows\System32\rasdlg.dll

16:20:13.0851 7980  C:\Windows\System32\rasdlg.dll - ok

16:20:13.0853 7980  [ D20AF468FA7F09B9561C8232BB80D4BA ] C:\Program Files\Logitech\SetPoint\khalwrapper.dll

16:20:13.0853 7980  C:\Program Files\Logitech\SetPoint\khalwrapper.dll - ok

16:20:13.0856 7980  [ 56E315ACFB08A177B4D01E42B9044DB5 ] C:\Windows\System32\mprapi.dll

16:20:13.0856 7980  C:\Windows\System32\mprapi.dll - ok

16:20:13.0860 7980  [ B736E9A31EDB4D7CE3632FFCFBD69304 ] C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll

16:20:13.0860 7980  C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll - ok

16:20:13.0863 7980  [ 2424231BBD703A677D115C29983B4293 ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

16:20:13.0863 7980  C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok

16:20:13.0866 7980  [ 145D7CB9862D6FA5A6F068F9F8B61B39 ] C:\Program Files\Logitech\SetPoint\IMHook.dll

16:20:13.0866 7980  C:\Program Files\Logitech\SetPoint\IMHook.dll - ok

16:20:13.0870 7980  [ C0F8561D8F32926EB25165CBDC7BBA3F ] C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll

16:20:13.0870 7980  C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll - ok

16:20:13.0873 7980  [ 2C3196C163BEF55A404A2549C7B69589 ] C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll

16:20:13.0873 7980  C:\Program Files\Logitech\SetPoint\Macros\MacroAppSwitch.dll - ok

16:20:13.0877 7980  [ 4A79F94E9A9D911D1BB525C262CCE2BA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll

16:20:13.0877 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.dll - ok

16:20:13.0880 7980  [ E96BC31E0114F0999FB0F92FC65D61CA ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

16:20:13.0880 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe - ok

16:20:13.0884 7980  [ 2D3D77C6E0BFD1CEBF241F1F54D9614B ] C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll

16:20:13.0884 7980  C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.dll - ok

16:20:13.0887 7980  [ 9CA2CE96D1EB3F1890E1182B09195048 ] C:\Program Files\Notepad++\notepad++.exe

16:20:13.0887 7980  C:\Program Files\Notepad++\notepad++.exe - ok

16:20:13.0890 7980  [ 877F2939794EBA4F3D1BB967007E99E8 ] C:\Windows\System32\osk.exe

16:20:13.0890 7980  C:\Windows\System32\osk.exe - ok

16:20:13.0893 7980  [ 17C0E094BEE5BC03CF491972F71AA6EF ] C:\Windows\System32\wlanapi.dll

16:20:13.0893 7980  C:\Windows\System32\wlanapi.dll - ok

16:20:13.0897 7980  [ D7A835DB03CFE8168574893BF7E5C886 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll

16:20:13.0897 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.dll - ok

16:20:13.0900 7980  [ 2BE37815B1FCA885119612C658DB8CA8 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll

16:20:13.0900 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.dll - ok

16:20:13.0904 7980  [ 9DB55C2361E0974A9630EECD70C69FAB ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll

16:20:13.0904 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.dll - ok

16:20:13.0907 7980  [ B64AC7967D6B9FB2D6152AC768A1CB88 ] C:\Windows\System32\onex.dll

16:20:13.0907 7980  C:\Windows\System32\onex.dll - ok

16:20:13.0910 7980  [ 70D4F5E5490A8947262A0D591309CEB4 ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll

16:20:13.0910 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.dll - ok

16:20:13.0914 7980  [ 24F2095044B9EE2AD1ED2B1D7152893E ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll

16:20:13.0914 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.dll - ok

16:20:13.0917 7980  [ B02910B449EA0B5AF9D3422A9F907D8D ] C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll

16:20:13.0917 7980  C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.dll - ok

16:20:13.0920 7980  [ 9D9FFC923FADBB575E0452EA0BBB15BD ] C:\Windows\System32\eappprxy.dll

16:20:13.0920 7980  C:\Windows\System32\eappprxy.dll - ok

16:20:13.0923 7980  [ 13710783A04D427B6F621EE697569217 ] C:\Program Files\Logitech\SetPoint\KGame.dll

16:20:13.0923 7980  C:\Program Files\Logitech\SetPoint\KGame.dll - ok

16:20:13.0927 7980  [ 5D0FE613570CABE3992F7DBCD68E61D1 ] C:\Windows\System32\eappcfg.dll

16:20:13.0927 7980  C:\Windows\System32\eappcfg.dll - ok

16:20:13.0930 7980  [ 8A5092AE59D6ED5B181292CDBFB22B2F ] C:\Program Files\Logitech\SetPoint\GameHook.dll

16:20:13.0930 7980  C:\Program Files\Logitech\SetPoint\GameHook.dll - ok

16:20:13.0933 7980  [ 06164026C38AA5366E4D127E2E36FDE8 ] C:\Program Files\Windows Mail\wab.exe

16:20:13.0933 7980  C:\Program Files\Windows Mail\wab.exe - ok

16:20:13.0937 7980  [ 484ACF6AF85A29AC52F3CF054DFDE9D3 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

16:20:13.0937 7980  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe - ok

16:20:13.0940 7980  [ 21EF4BB2A6FF4116FD83FAEE52D4A416 ] C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

16:20:13.0940 7980  C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe - ok

16:20:13.0944 7980  [ F6F1F9773356F02848B33F365F7DDB6E ] C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe

16:20:13.0944 7980  C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe - ok

16:20:13.0947 7980  [ CC1959AB3929997F4198AA69C854086F ] C:\Windows\System32\regsvr32.exe

16:20:13.0947 7980  C:\Windows\System32\regsvr32.exe - ok

16:20:13.0950 7980  [ FD647CA82ACF232DBE5F20345647B948 ] C:\Windows\AppPatch\AcGenral.dll

16:20:13.0950 7980  C:\Windows\AppPatch\AcGenral.dll - ok

16:20:13.0953 7980  [ 4A839160ED1963F9A1526DDA2D1233B2 ] C:\Windows\System32\AltTab.dll

16:20:13.0953 7980  C:\Windows\System32\AltTab.dll - ok

16:20:13.0956 7980  [ 6B5C53E0932C510606D700B7A896EF73 ] C:\Windows\System32\WPDShServiceObj.dll

16:20:13.0956 7980  C:\Windows\System32\WPDShServiceObj.dll - ok

16:20:13.0960 7980  [ 694AF8B27C9A0A99399E02CE977F986B ] C:\Windows\System32\mspaint.exe

16:20:13.0960 7980  C:\Windows\System32\mspaint.exe - ok

16:20:13.0963 7980  [ D05CB427A609C49CA7E34EF43718EE8A ] C:\Program Files\3DCrafter 9\3DCrafter.exe

16:20:13.0963 7980  C:\Program Files\3DCrafter 9\3DCrafter.exe - ok

16:20:13.0966 7980  [ 52BC119E49F88F2A5D1466230B1275C7 ] C:\Program Files\Windows Collaboration\WinCollab.exe

16:20:13.0966 7980  C:\Program Files\Windows Collaboration\WinCollab.exe - ok

16:20:13.0969 7980  [ 7FA34E22A8649AA4EEA11F2D3F4D70D8 ] C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe

16:20:13.0969 7980  C:\Users\christoph\Downloads\ProcessExplorer\procexp.exe - ok

16:20:13.0973 7980  [ DDF5324E0F3065846E9B65FF3AFD379E ] C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll

16:20:13.0973 7980  C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll - ok

16:20:13.0976 7980  [ 072D046EDBA5528868DB40328A8E56F5 ] C:\Program Files\IrfanView\i_view32.exe

16:20:13.0976 7980  C:\Program Files\IrfanView\i_view32.exe - ok

16:20:13.0979 7980  [ D286D7E49EC07ECA96B42F64ACC4F549 ] C:\Program Files\AVS4YOU\Uninstall.exe

16:20:13.0979 7980  C:\Program Files\AVS4YOU\Uninstall.exe - ok

16:20:13.0983 7980  [ B0AC88C4E3B63EC8B67768301D10E652 ] C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll

16:20:13.0983 7980  C:\Program Files\Logitech\SetPoint\SetPointCOMWMP9.dll - ok

16:20:13.0986 7980  [ B292E60B5334E6763BA365D8FD96D3B7 ] C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll

16:20:13.0986 7980  C:\Program Files\Logitech\SetPoint\SetPointCOMMM9.dll - ok

16:20:13.0989 7980  [ 83AB0FCCF90A395AE71B7EA931C90529 ] C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll

16:20:13.0989 7980  C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll - ok

16:20:13.0993 7980  [ 5146B1592CD05550F5ECBDCB3D39B974 ] C:\Program Files\Logitech\SetPoint\LCabHandler.dll

16:20:13.0993 7980  C:\Program Files\Logitech\SetPoint\LCabHandler.dll - ok

16:20:13.0996 7980  [ A944A73CEC5921B871542FE5CC5E03E4 ] C:\Windows\System32\olepro32.dll

16:20:13.0996 7980  C:\Windows\System32\olepro32.dll - ok

16:20:13.0999 7980  [ 75563FF603C40F0A5486750E0C486CC2 ] C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll

16:20:14.0000 7980  C:\Program Files\Nokia\Nokia PC Suite 7\PCSL.dll - ok

16:20:14.0003 7980  [ A3D643C27859499B4C0DA19B588F0D0C ] C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR

16:20:14.0003 7980  C:\Program Files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.NLR - ok

16:20:14.0006 7980  [ 5058D323DDABFAD0D8D8BC2CAEF73070 ] C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR

16:20:14.0006 7980  C:\Program Files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.NGR - ok

16:20:14.0010 7980  [ 1BE24D6164470F4C020AA084A1DAB989 ] C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll

16:20:14.0010 7980  C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll - ok

16:20:14.0014 7980  [ 4BBBD0FC5DD9E8F93003A0AB5BFF7314 ] C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe

16:20:14.0014 7980  C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\VCExpress.exe - ok

16:20:14.0017 7980  [ 965AC4EAC6ACCE91CD258F3BBD35E2B2 ] C:\Program Files\PL-photo3D\PL-photo3D.exe

16:20:14.0017 7980  C:\Program Files\PL-photo3D\PL-photo3D.exe - ok

16:20:14.0021 7980  [ 060FD02E806F725B04026B2AC90C1A10 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe

16:20:14.0021 7980  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPScan.exe - ok

16:20:14.0024 7980  [ 744F08CF9ACFFB1C715191D04DEEE907 ] C:\Windows\System32\srchadmin.dll

16:20:14.0024 7980  C:\Windows\System32\srchadmin.dll - ok

16:20:14.0027 7980  [ 5193DE33F3284C447E0D31DAFBF92570 ] C:\Windows\System32\webcheck.dll

16:20:14.0027 7980  C:\Windows\System32\webcheck.dll - ok

16:20:14.0031 7980  [ 36314940CEDBA2962F1062F0DFF7D8FA ] C:\Program Files\HP Photo Creations\PhotoProduct.exe

16:20:14.0031 7980  C:\Program Files\HP Photo Creations\PhotoProduct.exe - ok

16:20:14.0034 7980  [ 4ACEA0C4BB15ACE55E3AE5EC4E88DD55 ] C:\Windows\System32\SyncCenter.dll

16:20:14.0034 7980  C:\Windows\System32\SyncCenter.dll - ok

16:20:14.0037 7980  [ 246C71A9846C3B4127318601031B5B07 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe

16:20:14.0037 7980  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe - ok

16:20:14.0041 7980  [ F37774719A5E1B26F57BC1C4B7575E4C ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe

16:20:14.0041 7980  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe - ok

16:20:14.0044 7980  [ C0ABD66F31C0B84CD944802E6D3D02C2 ] C:\Windows\System32\bthprops.cpl

16:20:14.0044 7980  C:\Windows\System32\bthprops.cpl - ok

16:20:14.0048 7980  [ 52B3E60A5EE8E9AB8C1C8B5607A9EEA4 ] C:\Program Files\ReconLabLE1.2\ReconLab.exe

16:20:14.0048 7980  C:\Program Files\ReconLabLE1.2\ReconLab.exe - ok

16:20:14.0051 7980  [ 834776318237B026554C74DBA6FA8CD4 ] C:\Program Files\IrfanView\iv_uninstall.exe

16:20:14.0051 7980  C:\Program Files\IrfanView\iv_uninstall.exe - ok

16:20:14.0054 7980  [ 66E9F5121482A086CF77B8A40827E922 ] C:\Program Files\WinRAR\WinRAR.exe

16:20:14.0054 7980  C:\Program Files\WinRAR\WinRAR.exe - ok

16:20:14.0057 7980  [ 62CACC4A9C7C2BF244AAA2A7AD9ECE6D ] C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

16:20:14.0057 7980  C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe - ok

16:20:14.0061 7980  [ D56021051E8246A48550CFEC1880F80E ] C:\Program Files\GIMP 2\bin\gimp-2.8.exe

16:20:14.0061 7980  C:\Program Files\GIMP 2\bin\gimp-2.8.exe - ok

16:20:14.0065 7980  [ 8728A91948AC0FE779BDF47BC551BAF5 ] C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe

16:20:14.0065 7980  C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe - ok

16:20:14.0068 7980  [ 6D796D59977EB52B33B966EAB9C73E6A ] C:\Program Files\Microsoft Works\MSWorks.exe

16:20:14.0068 7980  C:\Program Files\Microsoft Works\MSWorks.exe - ok

16:20:14.0071 7980  [ 8BC00165083171F8DE760AE39D76D003 ] C:\Program Files\Microsoft Works\wksdb.exe

16:20:14.0071 7980  C:\Program Files\Microsoft Works\wksdb.exe - ok

16:20:14.0074 7980  [ 0D392EDE3B97E0B3131B2F63EF1DB94E ] C:\Program Files\Windows Defender\MSASCui.exe

16:20:14.0074 7980  C:\Program Files\Windows Defender\MSASCui.exe - ok

16:20:14.0078 7980  [ 78EB73E81B94E7556D391844C5C03AC1 ] C:\Windows\System32\fsquirt.exe

16:20:14.0078 7980  C:\Windows\System32\fsquirt.exe - ok

16:20:14.0081 7980  [ 1ED2124313CCE34C877247574212EFC8 ] C:\Windows\System32\calc.exe

16:20:14.0081 7980  C:\Windows\System32\calc.exe - ok

16:20:14.0084 7980  [ 338104E0E18307CD65604FE317B5FB8D ] C:\Windows\System32\mblctr.exe

16:20:14.0084 7980  C:\Windows\System32\mblctr.exe - ok

16:20:14.0087 7980  [ B1AFF0B6DED627A1D22A6817DD58AC0F ] C:\Windows\System32\NetProj.exe

16:20:14.0087 7980  C:\Windows\System32\NetProj.exe - ok

16:20:14.0090 7980  [ 16FEE292E95EDC274385103E6B498019 ] C:\Windows\System32\mstsc.exe

16:20:14.0090 7980  C:\Windows\System32\mstsc.exe - ok

16:20:14.0093 7980  [ 9E35FF7F943AE0FB89192BFE058B7FD4 ] C:\Program Files\Windows Sidebar\sidebar.exe

16:20:14.0093 7980  C:\Program Files\Windows Sidebar\sidebar.exe - ok

16:20:14.0097 7980  [ E80DB295132C5EF0C623935422BD0FC7 ] C:\Windows\System32\SnippingTool.exe

16:20:14.0097 7980  C:\Windows\System32\SnippingTool.exe - ok

16:20:14.0100 7980  [ 248F33A6C2380757BC1E20E34D9E827B ] C:\Windows\System32\SoundRecorder.exe

16:20:14.0100 7980  C:\Windows\System32\SoundRecorder.exe - ok

16:20:14.0102 7980  [ 9B89B3BB79EA1ACF041F40A7B6FC5827 ] C:\Windows\System32\mobsync.exe

16:20:14.0102 7980  C:\Windows\System32\mobsync.exe - ok

16:20:14.0105 7980  [ 105A4D87C8DCF2CF5DB042830B203E5F ] C:\Windows\Speech\Common\sapisvr.exe

16:20:14.0105 7980  C:\Windows\Speech\Common\sapisvr.exe - ok

16:20:14.0108 7980  [ A623666C8A8EC9A57DCA07915A3F1EC6 ] C:\Windows\System32\sdclt.exe

16:20:14.0109 7980  C:\Windows\System32\sdclt.exe - ok

16:20:14.0112 7980  [ BB4910DE8B6C5E30DF39EC97308D44BA ] C:\Windows\System32\charmap.exe

16:20:14.0112 7980  C:\Windows\System32\charmap.exe - ok

16:20:14.0115 7980  [ 2327C11B043FCEB80BE00CC8D077E9AA ] C:\Windows\System32\dfrgui.exe

16:20:14.0115 7980  C:\Windows\System32\dfrgui.exe - ok

16:20:14.0118 7980  [ 86AB3F6C784197DC1D994A83AF4259CD ] C:\Windows\System32\cleanmgr.exe

16:20:14.0118 7980  C:\Windows\System32\cleanmgr.exe - ok

16:20:14.0121 7980  [ FBF628702A408977FEB0845D48F4F154 ] C:\Windows\System32\migwiz\migwiz.exe

16:20:14.0121 7980  C:\Windows\System32\migwiz\migwiz.exe - ok

16:20:14.0124 7980  [ D3D1CE8FF30786D50272DA3085149904 ] C:\Windows\System32\msinfo32.exe

16:20:14.0124 7980  C:\Windows\System32\msinfo32.exe - ok

16:20:14.0128 7980  [ 95D5AC5CCBE10E8B4B8A0DF41022568D ] C:\Windows\System32\rstrui.exe

16:20:14.0128 7980  C:\Windows\System32\rstrui.exe - ok

16:20:14.0131 7980  [ C9B520028498E5DA23651619F8A556D4 ] C:\Windows\System32\StikyNot.exe

16:20:14.0131 7980  C:\Windows\System32\StikyNot.exe - ok

16:20:14.0134 7980  [ 7122B0AA2212B07BBFC49BD22215BF3B ] C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

16:20:14.0134 7980  C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe - ok

16:20:14.0138 7980  [ C20436B4F0596ACD5569749206F99265 ] C:\Program Files\Windows Journal\Journal.exe

16:20:14.0138 7980  C:\Program Files\Windows Journal\Journal.exe - ok

16:20:14.0141 7980  [ 36B6F71B6D7D280302B348145DB05A9F ] C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe

16:20:14.0141 7980  C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe - ok

16:20:14.0145 7980  [ DF4217DDB34A0B73DC7AAC7829371C0C ] C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

16:20:14.0145 7980  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe - ok

16:20:14.0148 7980  [ 4CAAD229A00C0DEFFF51841AE2B93B46 ] C:\Windows\System32\WindowsPowerShell\v1.0\pwrshmsg.dll

16:20:14.0148 7980  C:\Windows\System32\WindowsPowerShell\v1.0\pwrshmsg.dll - ok

16:20:14.0151 7980  [ DF02DD0F18AB41D0F5BCB8CA6C20A3D5 ] C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll

16:20:14.0152 7980  C:\Program Files\Common Files\Symantec Shared\SPBBC\bbRGen.dll - ok

16:20:14.0155 7980  [ 10BDE4B7D66C64857551CF719DFCE79F ] C:\Windows\System32\write.exe

16:20:14.0155 7980  C:\Windows\System32\write.exe - ok

16:20:14.0158 7980  [ 03710624A31C6B9585DD40F1F83CDB67 ] C:\Program Files\Tcl\bin\tclsh85.exe

16:20:14.0158 7980  C:\Program Files\Tcl\bin\tclsh85.exe - ok

16:20:14.0161 7980  [ E9EEEE9614BD78DCC0D4633D1DA0DD25 ] C:\Program Files\Tcl\bin\wish85.exe

16:20:14.0161 7980  C:\Program Files\Tcl\bin\wish85.exe - ok

16:20:14.0165 7980  [ D50995263A6E264FC3B2CA4D39F6F47F ] C:\Program Files\Tcl\lib\ppm\log\activetcl8.5-thread\uninstall.exe

16:20:14.0165 7980  C:\Program Files\Tcl\lib\ppm\log\activetcl8.5-thread\uninstall.exe - ok

16:20:14.0168 7980  [ 1C474C0C4CB5F15A555FE912CBF4549C ] C:\Windows\System32\odbcad32.exe

16:20:14.0168 7980  C:\Windows\System32\odbcad32.exe - ok

16:20:14.0171 7980  [ 1CB1B95D67BC380FBCCFAEA3CF2DDA80 ] C:\Windows\System32\iscsicpl.exe

16:20:14.0171 7980  C:\Windows\System32\iscsicpl.exe - ok

16:20:14.0174 7980  [ 8D865A3E7E2C78317EDE4EAE8316284F ] C:\Windows\System32\MdSched.exe

16:20:14.0174 7980  C:\Windows\System32\MdSched.exe - ok

16:20:14.0178 7980  [ 7CF9DBE2D5D2CA53DD33B5C708CC9B7A ] C:\Windows\System32\mmcshext.dll

16:20:14.0178 7980  C:\Windows\System32\mmcshext.dll - ok

16:20:14.0181 7980  [ 75C594669717137332364E44C38777E1 ] C:\Windows\System32\hhsetup.dll

16:20:14.0181 7980  C:\Windows\System32\hhsetup.dll - ok

16:20:14.0184 7980  [ F3880570EF4ADF91795DDB8574764D51 ] C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe

16:20:14.0184 7980  C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe - ok

16:20:14.0188 7980  [ 7629E9BB2FF06EACA62580A2C1D4FE6A ] C:\Windows\System32\msconfig.exe

16:20:14.0188 7980  C:\Windows\System32\msconfig.exe - ok

16:20:14.0191 7980  [ BA2A319EECEC9D04B1D532D2060EAAA5 ] C:\Program Files\Adobe\Flash Media Server 3.5\unins000.exe

16:20:14.0191 7980  C:\Program Files\Adobe\Flash Media Server 3.5\unins000.exe - ok

16:20:14.0195 7980  [ 469F2841AB3C27A88C37CA7681D9CA28 ] C:\Program Files\Logitech\SetPoint\LU\LuLnchr.exe

16:20:14.0195 7980  C:\Program Files\Logitech\SetPoint\LU\LuLnchr.exe - ok

16:20:14.0198 7980  [ 17EDEF0B1B14D618CCBD9A8F89F02A36 ] C:\Program Files\AVS4YOU\Registration.exe

16:20:14.0198 7980  C:\Program Files\AVS4YOU\Registration.exe - ok

16:20:14.0201 7980  [ D4A8714E8A999DB88A497DB4B33CAD30 ] C:\Program Files\Logitech\SetPoint\LU\LogitechUpdate.exe

16:20:14.0201 7980  C:\Program Files\Logitech\SetPoint\LU\LogitechUpdate.exe - ok

16:20:14.0205 7980  [ D6A285CD3A0B70B4DDF9DFAFB82BBFFB ] C:\Program Files\Common Files\AVSMedia\ActiveX\Repairing.exe

16:20:14.0205 7980  C:\Program Files\Common Files\AVSMedia\ActiveX\Repairing.exe - ok

16:20:14.0208 7980  [ 7E24450DC88C75F07564513C29B9F0E4 ] C:\Program Files\Blender Foundation\Blender\uninstall.exe

16:20:14.0208 7980  C:\Program Files\Blender Foundation\Blender\uninstall.exe - ok

16:20:14.0212 7980  [ C47A9248A72A2ABF8876AFD1790F7DF7 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ECCenter1.exe

16:20:14.0212 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ECCenter1.exe - ok

16:20:14.0215 7980  [ 62E46DAFE42A7D72C3B8577B77730B53 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BtAssist1.exe

16:20:14.0215 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BtAssist1.exe - ok

16:20:14.0219 7980  [ 147F8082067626B217C568A6B0A2030E ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc1.exe

16:20:14.0219 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc1.exe - ok

16:20:14.0222 7980  [ 9758FE7FEE0A3F9C72893D9F5AC94EF2 ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BIP_Camera1.exe

16:20:14.0222 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\BIP_Camera1.exe - ok

16:20:14.0226 7980  [ 9E4F3DC655255F4D938DC5CB7DACA35E ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\UsrGuide.exe

16:20:14.0226 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\UsrGuide.exe - ok

16:20:14.0230 7980  [ B43CDB4D5D679BE74A2B2786191BDF2F ] C:\Program Files\Toshiba\Bluetooth Toshiba Stack\WirelessFTP1.exe

16:20:14.0230 7980  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\WirelessFTP1.exe - ok

16:20:14.0233 7980  [ 604D822692FEE84288850AC5A6F2A454 ] C:\Program Files\cad3d\cad3d.exe

16:20:14.0233 7980  C:\Program Files\cad3d\cad3d.exe - ok

16:20:14.0236 7980  [ C8B628A5D7908CE241039EEEE645D668 ] C:\Program Files\CodeBlocks\codeblocks.exe

16:20:14.0236 7980  C:\Program Files\CodeBlocks\codeblocks.exe - ok

16:20:14.0240 7980  [ 54C15EF4F720D1E8AE69ABF5463AC5F6 ] C:\Program Files\CodeBlocks\uninstall.exe

16:20:14.0240 7980  C:\Program Files\CodeBlocks\uninstall.exe - ok

16:20:14.0243 7980  [ B77F17EBF26E81208B54DCFAB89778B6 ] C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

16:20:14.0243 7980  C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe - ok

16:20:14.0247 7980  [ C559672F31ABE6BA7277DD73C4502238 ] C:\Windows\System32\msiexec.exe

16:20:14.0247 7980  C:\Windows\System32\msiexec.exe - ok

16:20:14.0250 7980  [ BA77F9D00BC4AEC9BD74287A0B8CBF8C ] C:\Program Files\Das Fussball Studio\uninst\unins000.exe

16:20:14.0250 7980  C:\Program Files\Das Fussball Studio\uninst\unins000.exe - ok

16:20:14.0253 7980  [ 82256AE8932658C3F142AC687C90C7A9 ] C:\Program Files\DVD Flick\unins000.exe

16:20:14.0253 7980  C:\Program Files\DVD Flick\unins000.exe - ok

16:20:14.0257 7980  [ 495DA482DBD15024CCBD5019FDF0F811 ] C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\Support\EReg.exe

16:20:14.0257 7980  C:\Program Files\EA SPORTS\FIFA Fussball-Weltmeisterschaft 2006 (TM)\Support\EReg.exe - ok

16:20:14.0261 7980  [ 626F198768F67A0FEB3AD909E638F551 ] C:\Windows\System32\WindowsAnytimeUpgrade.exe

16:20:14.0261 7980  C:\Windows\System32\WindowsAnytimeUpgrade.exe - ok

16:20:14.0264 7980  [ 4367C083AA9BDAFBDF56C716D955C52E ] C:\Program Files\Free FLV Converter\unins000.exe

16:20:14.0264 7980  C:\Program Files\Free FLV Converter\unins000.exe - ok

16:20:14.0267 7980  [ 3503086CB4BDFE9F49E8A05C5974B64C ] C:\Program Files\Fussballdaten\Das Fussball Studio.exe

16:20:14.0267 7980  C:\Program Files\Fussballdaten\Das Fussball Studio.exe - ok

16:20:14.0271 7980  [ BA77F9D00BC4AEC9BD74287A0B8CBF8C ] C:\Program Files\Fussballdaten\uninst\unins000.exe

16:20:14.0271 7980  C:\Program Files\Fussballdaten\uninst\unins000.exe - ok

16:20:14.0274 7980  [ 4304D04DFDAAE621171A2F955981016E ] C:\Program Files\Microsoft Games\Chess\Chess.exe

16:20:14.0274 7980  C:\Program Files\Microsoft Games\Chess\Chess.exe - ok

16:20:14.0278 7980  [ 21AD332BE723EFE40D9F32AD97BA8376 ] C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

16:20:14.0278 7980  C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe - ok

16:20:14.0281 7980  [ 6ED28075D6D9E0C0464048A30432A142 ] C:\Program Files\Microsoft Games\Hearts\Hearts.exe

16:20:14.0281 7980  C:\Program Files\Microsoft Games\Hearts\Hearts.exe - ok

16:20:14.0284 7980  [ EFF7DBEE92519EB96F70E1E31FDE7098 ] C:\Program Files\Microsoft Games\inkball\inkball.exe

16:20:14.0284 7980  C:\Program Files\Microsoft Games\inkball\inkball.exe - ok

16:20:14.0288 7980  [ 7A88900F2F11882FFCE3BF3D4EAEFB4B ] C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

16:20:14.0288 7980  C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe - ok

16:20:14.0291 7980  [ C8C383E6AA546780B2AD3034D6F6ACEF ] C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

16:20:14.0291 7980  C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe - ok

16:20:14.0295 7980  [ 3F903BDD206EB3C688651048B5E304E1 ] C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

16:20:14.0295 7980  C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe - ok

16:20:14.0298 7980  [ 07302F014858D038CB93CC349505D0E6 ] C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

16:20:14.0298 7980  C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe - ok

16:20:14.0302 7980  [ 401A203AB058DEC44BD44AA81BF2CB64 ] C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

16:20:14.0302 7980  C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe - ok

16:20:14.0306 7980  [ E93718335BA5177FBB2686222797A25D ] C:\Program Files\GnuWin32\uninstall\unins001.exe

16:20:14.0306 7980  C:\Program Files\GnuWin32\uninstall\unins001.exe - ok

16:20:14.0310 7980  [ 3DBF2E7B6547D375BF14A7798C3C326D ] C:\Program Files\GnuWin32\uninstall\unins000.exe

16:20:14.0310 7980  C:\Program Files\GnuWin32\uninstall\unins000.exe - ok

16:20:14.0314 7980  [ 381C46A1D7FCEB672322110E2D70BCB1 ] C:\Program Files\GnuWin32\uninstall\unins002.exe

16:20:14.0314 7980  C:\Program Files\GnuWin32\uninstall\unins002.exe - ok

16:20:14.0317 7980  [ 3A328CB15D17D42963F82A47EE440FA8 ] C:\Program Files\GnuWin32\uninstall\unins003.exe

16:20:14.0317 7980  C:\Program Files\GnuWin32\uninstall\unins003.exe - ok

16:20:14.0320 7980  [ CC82F27B8B8FB7DFE57C3C308BCADB91 ] C:\Program Files\Google\Google SketchUp 8\SketchUp.exe

16:20:14.0320 7980  C:\Program Files\Google\Google SketchUp 8\SketchUp.exe - ok

16:20:14.0324 7980  [ 77CE82E61CC16F897F346B295ADC17D8 ] C:\Program Files\Google\Google Updater\GoogleUpdater.exe

16:20:14.0324 7980  C:\Program Files\Google\Google Updater\GoogleUpdater.exe - ok

16:20:14.0327 7980  [ 08BC7211E4E06A47CAC85D5A73D006E2 ] C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}\wksss.exe

16:20:14.0327 7980  C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}\wksss.exe - ok

16:20:14.0331 7980  [ 17A2B73C49E5DB385BE0E1EF043532B4 ] C:\Program Files\Common Files\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_2_2_0_2\Setup.exe

16:20:14.0331 7980  C:\Program Files\Common Files\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_2_2_0_2\Setup.exe - ok

16:20:14.0334 7980  [ F3B3EE66CA76C94510555ABE9D00A353 ] C:\Windows\System32\Macromed\Flash\Flash9b.ocx

16:20:14.0334 7980  C:\Windows\System32\Macromed\Flash\Flash9b.ocx - ok

16:20:14.0338 7980  [ 21CAE7856620D941DDA2BF06E784A862 ] C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\PIFSvc.exe

16:20:14.0338 7980  C:\Program Files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\PIFSvc.exe - ok

16:20:14.0341 7980  [ 292FDD3B57119D7E5877286D4CBD44B6 ] C:\Program Files\Norton 360\ScanStub.exe

16:20:14.0341 7980  C:\Program Files\Norton 360\ScanStub.exe - ok

16:20:14.0345 7980  [ D7F17CAA1C861C32B13DFD06FDE7F19F ] C:\Program Files\Norton 360\MAINSTUB.EXE

16:20:14.0345 7980  C:\Program Files\Norton 360\MAINSTUB.EXE - ok

16:20:14.0348 7980  [ 2277871D6CAB9FBBE90EA0F51166143A ] C:\hp\support\HPSysInfo.exe

16:20:14.0348 7980  C:\hp\support\HPSysInfo.exe - ok

16:20:14.0351 7980  [ 45632BE6626256FBB5E7C45567B8E885 ] C:\Windows\SMINST\Restore7.exe

16:20:14.0351 7980  C:\Windows\SMINST\Restore7.exe - ok

16:20:14.0353 7980  [ 6007A834CBEB1B192429E40F882C92A1 ] C:\Python26\Lib\site-packages\PyQt4\assistant.exe

16:20:14.0353 7980  C:\Python26\Lib\site-packages\PyQt4\assistant.exe - ok

16:20:14.0356 7980  [ AF300FE9A937520A8D797607FCEBE4BB ] C:\Python26\Lib\site-packages\PyQt4\designer.exe

16:20:14.0356 7980  C:\Python26\Lib\site-packages\PyQt4\designer.exe - ok

16:20:14.0360 7980  [ DEFF34F6F3B4F2991FE8F82B8057C171 ] C:\Program Files\ReconLabLE1.2\PointViewer3d.exe

16:20:14.0360 7980  C:\Program Files\ReconLabLE1.2\PointViewer3d.exe - ok

16:20:14.0364 7980  [ 95BF86F668D1082069DF7EB6C0C5F04F ] C:\ReconLabMaterial\ReconLabDemo2.exe

16:20:14.0364 7980  C:\ReconLabMaterial\ReconLabDemo2.exe - ok

16:20:14.0367 7980  [ A75A03E2FE261297C3CBB128C32BE3D8 ] C:\Windows\GPInstall.exe

16:20:14.0367 7980  C:\Windows\GPInstall.exe - ok

16:20:14.0370 7980  [ AAC71D5A33D15AC60DD878290FD7B2C5 ] C:\Program Files\Ultimate Papercraft3D\unins000.exe

16:20:14.0370 7980  C:\Program Files\Ultimate Papercraft3D\unins000.exe - ok

16:20:14.0373 7980  [ 6A94279FBFB5095BC505FD1CB7BAB65D ] C:\Program Files\LigaChampion\LigaChampion.exe

16:20:14.0373 7980  C:\Program Files\LigaChampion\LigaChampion.exe - ok

16:20:14.0377 7980  [ 04DA441BBF1BE78FF4E6D65245BB56CF ] C:\Program Files\Windows Media Components\Encoder\wmenc.exe

16:20:14.0377 7980  C:\Program Files\Windows Media Components\Encoder\wmenc.exe - ok

16:20:14.0380 7980  [ A65F84B50317427C58A14C1C3ACD8AA2 ] C:\Program Files\Windows Media Components\Encoder\wmeditor.exe

16:20:14.0381 7980  C:\Program Files\Windows Media Components\Encoder\wmeditor.exe - ok

16:20:14.0384 7980  [ 4EA314A1B26257B0A8724E2BF65B53C7 ] C:\Program Files\Windows Media Components\Encoder\WMProEdt.exe

16:20:14.0384 7980  C:\Program Files\Windows Media Components\Encoder\WMProEdt.exe - ok

16:20:14.0387 7980  [ BAE963F318A4E269799C1E04CF9E4056 ] C:\Program Files\Windows Media Components\Encoder\wmstreamedt.exe

16:20:14.0387 7980  C:\Program Files\Windows Media Components\Encoder\wmstreamedt.exe - ok

16:20:14.0391 7980  [ F5571168828BA68B5341D6C12EFB9EFF ] C:\Program Files\Wondershare\Streaming Video Recorder\unins000.exe

16:20:14.0391 7980  C:\Program Files\Wondershare\Streaming Video Recorder\unins000.exe - ok

16:20:14.0394 7980  [ F21F255B91CA4F04E4250DECD2067CBB ] C:\Windows\System32\bitsperf.dll

16:20:14.0394 7980  C:\Windows\System32\bitsperf.dll - ok

16:20:14.0398 7980  [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:20:14.0398 7980  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok

16:20:14.0401 7980  [ 632557F2495931D952161465AA177B3B ] C:\Windows\System32\bitsigd.dll

16:20:14.0401 7980  C:\Windows\System32\bitsigd.dll - ok

16:20:14.0404 7980  [ E5F7C30EDF0892667933BE879F067D67 ] C:\Windows\System32\msvcr100_clr0400.dll

16:20:14.0404 7980  C:\Windows\System32\msvcr100_clr0400.dll - ok

16:20:14.0407 7980  [ E18FE2168C8712EF4FF2191059158FAB ] C:\Windows\ehome\ehrec.exe

16:20:14.0407 7980  C:\Windows\ehome\ehrec.exe - ok

16:20:14.0410 7980  [ 77784A2BD5912A4EC6284255865526BC ] C:\Windows\System32\Faultrep.dll

16:20:14.0410 7980  C:\Windows\System32\Faultrep.dll - ok

16:20:14.0414 7980  [ 8590BDF8F3B5EACAEEA5559CEC9647BF ] C:\Windows\ehome\ehtrace.dll

16:20:14.0414 7980  C:\Windows\ehome\ehtrace.dll - ok

16:20:14.0417 7980  [ 14E9E1A4472C7D0BB7A2A7A26D60CB35 ] C:\Windows\System32\sbe.dll

16:20:14.0417 7980  C:\Windows\System32\sbe.dll - ok

16:20:14.0420 7980  [ 73F97C8899429EFAEE8C8944DCC08C2E ] C:\Windows\System32\MSVidCtl.dll

16:20:14.0420 7980  C:\Windows\System32\MSVidCtl.dll - ok

16:20:14.0423 7980  [ 44B9C62C32CDA7A62BCFE65DDF4D92C4 ] C:\Windows\System32\msdri.dll

16:20:14.0423 7980  C:\Windows\System32\msdri.dll - ok

16:20:14.0426 7980  [ C42AE64F5DB6BC5E947B7E3E1B1E633E ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

16:20:14.0426 7980  C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - ok

16:20:14.0430 7980  [ 3B1AEFEFF02479F5A5D772494AFA5DFF ] C:\Windows\ehome\ehprivjob.exe

16:20:14.0430 7980  C:\Windows\ehome\ehprivjob.exe - ok

16:20:14.0433 7980  [ B5EF1DA337DB9859709A387638AC5E07 ] C:\Windows\System32\SearchProtocolHost.exe

16:20:14.0433 7980  C:\Windows\System32\SearchProtocolHost.exe - ok

16:20:14.0436 7980  [ 7CAC10A1C258DFCB5ADE563BAE6D2F15 ] C:\hp\KBD\kbd.exe

16:20:14.0436 7980  C:\hp\KBD\kbd.exe - ok

16:20:14.0439 7980  [ F68A3F0D63BE926ED65ED1C8C5B03A3D ] C:\hp\KBD\led.dll

16:20:14.0439 7980  C:\hp\KBD\led.dll - ok

16:20:14.0442 7980  [ F21E49604278F016CEDBD03DCD182111 ] C:\hp\KBD\usb.dll

16:20:14.0442 7980  C:\hp\KBD\usb.dll - ok

16:20:14.0446 7980  [ 015A9D857726C083144CA352A273378A ] C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll

16:20:14.0446 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll - ok

16:20:14.0449 7980  [ 1F847CEB90DF6BF6E0EDAED904B1E7C8 ] C:\hp\KBD\PS2.dll

16:20:14.0449 7980  C:\hp\KBD\PS2.dll - ok

16:20:14.0452 7980  [ 582BE479E7E286BB3B31C5A4C3DC3987 ] C:\Windows\System32\msshooks.dll

16:20:14.0452 7980  C:\Windows\System32\msshooks.dll - ok

16:20:14.0455 7980  [ 80F1DD93D493DC80A12620E352D73BE3 ] C:\hp\KBD\msg.dll

16:20:14.0455 7980  C:\hp\KBD\msg.dll - ok

16:20:14.0458 7980  [ 771AF583BC58373A84496CCD52C36E33 ] C:\Windows\System32\mssvp.dll

16:20:14.0458 7980  C:\Windows\System32\mssvp.dll - ok

16:20:14.0462 7980  [ 1E03BABB4D6CA5C27BD2C822F7F95788 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll

16:20:14.0462 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll - ok

16:20:14.0465 7980  [ 98C77FD99F3DB37B2C03F32B8F837B65 ] C:\Windows\System32\mapi32.dll

16:20:14.0465 7980  C:\Windows\System32\mapi32.dll - ok

16:20:14.0468 7980  [ 351319EF11C263C95FB721AC76F436D6 ] C:\Windows\System32\mssph.dll

16:20:14.0468 7980  C:\Windows\System32\mssph.dll - ok

16:20:14.0471 7980  [ A1CD5CE96F0A5426DB9A2F793854D1B8 ] C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL

16:20:14.0471 7980  C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL - ok

16:20:14.0474 7980  [ 58A18482F445D1C8DD51A1BC29251F61 ] C:\Windows\System32\msfeeds.dll

16:20:14.0474 7980  C:\Windows\System32\msfeeds.dll - ok

16:20:14.0477 7980  [ 0561DE1F7D0D8BA1460719EC4781D496 ] C:\hp\KBD\OSD.DLL

16:20:14.0477 7980  C:\hp\KBD\OSD.DLL - ok

16:20:14.0480 7980  [ 63EB7CB031056E43792A1D2910A79DE1 ] C:\hp\KBD\sct.dll

16:20:14.0480 7980  C:\hp\KBD\sct.dll - ok

16:20:14.0483 7980  [ 44AEC55B120A53A362D22A59C90CE604 ] C:\hp\KBD\Onl.dll

16:20:14.0483 7980  C:\hp\KBD\Onl.dll - ok

16:20:14.0486 7980  [ 6CF34B0F4DFBF541DB299CCFAC445A04 ] C:\hp\KBD\cfg.dll

16:20:14.0486 7980  C:\hp\KBD\cfg.dll - ok

16:20:14.0489 7980  [ 57D46FEDF6BF2DDE8CD4746F0684BE58 ] C:\hp\KBD\msikbdif.dll

16:20:14.0489 7980  C:\hp\KBD\msikbdif.dll - ok

16:20:14.0492 7980  [ C9EE7FF225EAC1CB9C78C413667CDB80 ] C:\Windows\System32\SearchFilterHost.exe

16:20:14.0492 7980  C:\Windows\System32\SearchFilterHost.exe - ok

16:20:14.0496 7980  [ 7CA207D4AC48C29B15F438007B206BD8 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\b7bef07ca1e5abb7a55dbbbc318903fe\ehRecObj.ni.dll

16:20:14.0496 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\b7bef07ca1e5abb7a55dbbbc318903fe\ehRecObj.ni.dll - ok

16:20:14.0499 7980  [ 0D83C896BEFE6EAF7DADF000A72C8FCE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehCIR\2794be5c73dd6a6efe1ec1c5e8396024\ehCIR.ni.dll

16:20:14.0499 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehCIR\2794be5c73dd6a6efe1ec1c5e8396024\ehCIR.ni.dll - ok

16:20:14.0503 7980  [ 2EE0A52FC639197149C7C07B1B8C8F63 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\286a98a691096f98d57f0f9cb9d03690\ehiProxy.ni.dll

16:20:14.0503 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\286a98a691096f98d57f0f9cb9d03690\ehiProxy.ni.dll - ok

16:20:14.0507 7980  [ 0C6461D8257F1EB751BC54B5C1FE70D9 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\00d9844d50e9752452263da331a3fd8c\ehepg.ni.dll

16:20:14.0507 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\00d9844d50e9752452263da331a3fd8c\ehepg.ni.dll - ok

16:20:14.0510 7980  [ AAE663A7E21EDEB523E52A4FF7E60C6C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\7bb80e892853c7ddec7925a7278c03ea\ehepgdat.ni.dll

16:20:14.0510 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\7bb80e892853c7ddec7925a7278c03ea\ehepgdat.ni.dll - ok

16:20:14.0514 7980  [ A3DF38B8A309013B6163B5ED22E76DCE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cf100c0c1510f5c7bb1e17f2f359883c\Microsoft.MediaCenter.UI.ni.dll

16:20:14.0514 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cf100c0c1510f5c7bb1e17f2f359883c\Microsoft.MediaCenter.UI.ni.dll - ok

16:20:14.0518 7980  [ B8876BBA284DFEC2311D7694483AB8AE ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll

16:20:14.0518 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll - ok

16:20:14.0521 7980  [ 99495E46CBF87F1C1FF3E57C069D0A8D ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll

16:20:14.0522 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll - ok

16:20:14.0525 7980  [ 8007E7DA344BAD40724072A5DCCB9143 ] C:\Windows\ehome\ehepgres.dll

16:20:14.0525 7980  C:\Windows\ehome\ehepgres.dll - ok

16:20:14.0528 7980  [ 4A938E44BEB41641B70175DACAB1BBB0 ] C:\Windows\ehome\ehProxy.dll

16:20:14.0528 7980  C:\Windows\ehome\ehProxy.dll - ok

16:20:14.0531 7980  [ 0518C7E0FF61F01D3A73D87728A14D46 ] C:\Windows\ehome\ehui.dll

16:20:14.0531 7980  C:\Windows\ehome\ehui.dll - ok

16:20:14.0534 7980  [ AAAE543C535ED596ECAD2AB8761C2C6F ] C:\Windows\System32\dxgi.dll

16:20:14.0534 7980  C:\Windows\System32\dxgi.dll - ok

16:20:14.0538 7980  [ 9359C7DFD426847FC6BE19EC501FE177 ] C:\Program Files\Google\Update\1.3.21.123\goopdateres_es.dll

16:20:14.0538 7980  C:\Program Files\Google\Update\1.3.21.123\goopdateres_es.dll - ok

16:20:14.0541 7980  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:20:14.0541 7980  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - ok

16:20:14.0545 7980  [ 3A72AB0BAF2DC1AE0BA6E1EE28FFCC0B ] C:\Windows\System32\msftedit.dll

16:20:14.0545 7980  C:\Windows\System32\msftedit.dll - ok

16:20:14.0548 7980  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

16:20:14.0548 7980  C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe - ok

16:20:14.0551 7980  [ 2062FABCC7D3DD90BD4EAA1F314551B0 ] C:\Windows\ehome\ehRecObj.dll

16:20:14.0551 7980  C:\Windows\ehome\ehRecObj.dll - ok

16:20:14.0554 7980  [ 219AF0F9A54EBEEB3E7E20025D801034 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

16:20:14.0554 7980  C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - ok

16:20:14.0558 7980  [ 4C45A24152681A0968510B0D593BE33C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\bfdd10e0a0aacf46bac557ffc5d55ba5\System.Data.ni.dll

16:20:14.0558 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\bfdd10e0a0aacf46bac557ffc5d55ba5\System.Data.ni.dll - ok

16:20:14.0562 7980  [ 076C28F6B6870568404AAB773126A54C ] C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll

16:20:14.0562 7980  C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll - ok

16:20:14.0566 7980  [ 3787A4BC97CE6C630F4B581425223D96 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

16:20:14.0566 7980  C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - ok

16:20:14.0569 7980  [ 708A3BBDBFF717F678B64854B7BAF9D3 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll

16:20:14.0569 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll - ok

16:20:14.0573 7980  [ 5CAD3395A4720BF735836D125297229A ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll

16:20:14.0573 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll - ok

16:20:14.0576 7980  [ 0775A7424B1828AD1452BAE43F7069A8 ] C:\Windows\assembly\GAC_MSIL\HP.ActiveSupportLibrary\2.0.0.1__01a974bc1760f423\HP.ActiveSupportLibrary.dll

16:20:14.0577 7980  C:\Windows\assembly\GAC_MSIL\HP.ActiveSupportLibrary\2.0.0.1__01a974bc1760f423\HP.ActiveSupportLibrary.dll - ok

16:20:14.0580 7980  [ 7922FCB95D96E2B908934C4B34A413D0 ] C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll

16:20:14.0580 7980  C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll - ok

16:20:14.0584 7980  [ 8078F8F8F7A79E2E6B494523A828C585 ] C:\Windows\System32\msdtckrm.dll

16:20:14.0584 7980  C:\Windows\System32\msdtckrm.dll - ok

16:20:14.0587 7980  [ 506B6592BF6116521F152DCCB39A6143 ] C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

16:20:14.0587 7980  C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - ok

16:20:14.0591 7980  [ E9FBD0E51A0BE65A623AFB1706C52499 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.ni.dll

16:20:14.0591 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.ni.dll - ok

16:20:14.0594 7980  [ 3E00D032E2BEB9FB5439ABED0DD30A7B ] C:\Windows\System32\sqlceoledb30.dll

16:20:14.0595 7980  C:\Windows\System32\sqlceoledb30.dll - ok

16:20:14.0598 7980  [ F0F5C6F147E1224CA4038D9C22147A5B ] C:\Windows\System32\sqlcese30.dll

16:20:14.0598 7980  C:\Windows\System32\sqlcese30.dll - ok

16:20:14.0601 7980  [ E565C65391CDABF0870E9640815C03FF ] C:\Windows\System32\sqlceqp30.dll

16:20:14.0601 7980  C:\Windows\System32\sqlceqp30.dll - ok

16:20:14.0603 7980  [ 5E41139EC6EFBCAFFD96D46925E544AB ] C:\Windows\System32\mspatcha.dll

16:20:14.0603 7980  C:\Windows\System32\mspatcha.dll - ok

16:20:14.0606 7980  [ 1D40A5268C1517BC445BA0053584C4AA ] C:\Windows\System32\SLCExt.dll

16:20:14.0606 7980  C:\Windows\System32\SLCExt.dll - ok

16:20:14.0609 7980  [ 3458EDA96E30FBD0477A2800D3FB1909 ] C:\Windows\System32\wups.dll

16:20:14.0609 7980  C:\Windows\System32\wups.dll - ok

16:20:14.0612 7980  [ BDC0C99E472176C8C2C853A68ADC5073 ] C:\Windows\System32\wups2.dll

16:20:14.0613 7980  C:\Windows\System32\wups2.dll - ok

16:20:14.0616 7980  [ 4FC9CE1201AD13B842B685AC2894AA95 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e20f2a67e463b0096433b4473c5aedfe\BDATunePIA.ni.dll

16:20:14.0616 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e20f2a67e463b0096433b4473c5aedfe\BDATunePIA.ni.dll - ok

16:20:14.0620 7980  [ F2DED1ED348E6C2397A14BCAB7E3CD7D ] C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll

16:20:14.0620 7980  C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll - ok

16:20:14.0623 7980  [ 1208C93D21971CD07FF5A5BF0891496C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\67ddb639b0e4210abaf7d19d72013cb5\ehiPlay.ni.dll

16:20:14.0623 7980  C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\67ddb639b0e4210abaf7d19d72013cb5\ehiPlay.ni.dll - ok

16:20:14.0626 7980  [ 421613767407C639E9E115B092A0EE3B ] C:\Windows\System32\sbeio.dll

16:20:14.0626 7980  C:\Windows\System32\sbeio.dll - ok

16:20:14.0629 7980  [ 5FA382106B145A920E2A4F7087AF1B90 ] C:\Windows\System32\wbem\wmipcima.dll

16:20:14.0629 7980  C:\Windows\System32\wbem\wmipcima.dll - ok

16:20:14.0633 7980  [ 87CDFFCBD09C1CA03A068343D5D93250 ] C:\Windows\System32\wmi.dll

16:20:14.0633 7980  C:\Windows\System32\wmi.dll - ok

16:20:14.0636 7980  [ DA887F28054D78EE8637BEBB924A2DB5 ] C:\Windows\System32\slwga.dll

16:20:14.0636 7980  C:\Windows\System32\slwga.dll - ok

16:20:14.0639 7980  [ F8D8BB3F6173FFF00128612F33D3197A ] C:\Windows\System32\wbem\WMIADAP.exe

16:20:14.0639 7980  C:\Windows\System32\wbem\WMIADAP.exe - ok

16:20:14.0642 7980  [ 8B2D61CA83825CEAD423228ACD40CFBC ] C:\Windows\System32\loadperf.dll

16:20:14.0642 7980  C:\Windows\System32\loadperf.dll - ok

16:20:14.0645 7980  [ 031DA76A5A7DC13F015DD3491394865E ] C:\Windows\System32\advpack.dll

16:20:14.0645 7980  C:\Windows\System32\advpack.dll - ok

16:20:14.0649 7980  [ A58374D1A487C3CF98355BA92C0188C0 ] C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\CbsCore.dll

16:20:14.0649 7980  C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\CbsCore.dll - ok

16:20:14.0652 7980  [ E7D0F91E44D9D3B2116FA549BDCDB756 ] C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wdscore.dll

16:20:14.0652 7980  C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wdscore.dll - ok

16:20:14.0655 7980  [ 4EBDD20AFC19AAECBA2893D128DD5ECD ] C:\Windows\System32\dpx.dll

16:20:14.0656 7980  C:\Windows\System32\dpx.dll - ok

16:20:14.0659 7980  [ 971B711E37CF2CEDCE57B54384640E54 ] C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wcp.dll

16:20:14.0659 7980  C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wcp.dll - ok

16:20:14.0663 7980  [ 47071DD42F703390B205B33B11DAB65C ] C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\DrUpdate.dll

16:20:14.0663 7980  C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\DrUpdate.dll - ok

16:20:14.0666 7980  [ BC8E5F6AAF447364A6F6A00D3F8FAF29 ] C:\Windows\System32\srclient.dll

16:20:14.0666 7980  C:\Windows\System32\srclient.dll - ok

16:20:14.0669 7980  [ 43AEF7355D24090CA7C24C83846BD981 ] C:\Windows\System32\spp.dll

16:20:14.0669 7980  C:\Windows\System32\spp.dll - ok

16:20:14.0673 7980  [ 380E6B396644EDCDFA07E52D7D95EF99 ] C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wrpint.dll

16:20:14.0673 7980  C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\wrpint.dll - ok

16:20:14.0676 7980  [ 9F433F65D10043295F42DD015B189426 ] C:\Windows\System32\sxsstore.dll

16:20:14.0676 7980  C:\Windows\System32\sxsstore.dll - ok

16:20:14.0679 7980  [ F6DFDFD5BC950275DE3B285E108CB974 ] C:\Windows\servicing\CbsApi.dll

16:20:14.0679 7980  C:\Windows\servicing\CbsApi.dll - ok

16:20:14.0682 7980  [ C39790BA091F3F9EC7DFE5C2E4598DF0 ] C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe

16:20:14.0682 7980  C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe - ok

16:20:14.0686 7980  [ 4BA9EFCDA842C6A6692AFDA6E2BEF70A ] C:\Program Files\Internet Explorer\sqmapi.dll

16:20:14.0686 7980  C:\Program Files\Internet Explorer\sqmapi.dll - ok

16:20:14.0689 7980  [ 1D6B95871DC006190964B04E5657E35F ] C:\Windows\System32\rastapi.dll

16:20:14.0689 7980  C:\Windows\System32\rastapi.dll - ok

16:20:14.0692 7980  [ CC0713B192BF47A124168957ACD75CC1 ] C:\Windows\System32\ieui.dll

16:20:14.0692 7980  C:\Windows\System32\ieui.dll - ok

16:20:14.0696 7980  [ 5E4FF36923C37C80B537DCE6CAA755F9 ] C:\Program Files\Internet Explorer\ieproxy.dll

16:20:14.0696 7980  C:\Program Files\Internet Explorer\ieproxy.dll - ok

16:20:14.0699 7980  [ B96B60EC821F86D445C9739A0F3DED59 ] C:\Windows\System32\unimdm.tsp

16:20:14.0699 7980  C:\Windows\System32\unimdm.tsp - ok

16:20:14.0702 7980  [ DFBAADF1B624DC71E88D34D86B3595BE ] C:\Windows\System32\uniplat.dll

16:20:14.0702 7980  C:\Windows\System32\uniplat.dll - ok

16:20:14.0705 7980  [ 0B71899E60D1265229BF3D080EAB573D ] C:\Windows\System32\unimdmat.dll

16:20:14.0705 7980  C:\Windows\System32\unimdmat.dll - ok

16:20:14.0708 7980  [ 2DAD4B6B659F7E5DFBCB6D2C634FA6F3 ] C:\Program Files\Internet Explorer\IEShims.dll

16:20:14.0708 7980  C:\Program Files\Internet Explorer\IEShims.dll - ok

16:20:14.0712 7980  [ 2E837F3D406224DF131C34BC8F71621E ] C:\Windows\System32\modemui.dll

16:20:14.0712 7980  C:\Windows\System32\modemui.dll - ok

16:20:14.0715 7980  [ BB197F54A8F69EEA8356B7F70E6D3A20 ] C:\Windows\System32\mshtml.dll

16:20:14.0715 7980  C:\Windows\System32\mshtml.dll - ok

16:20:14.0718 7980  [ 953193A9DEA40348C1086D171F6440AE ] C:\Windows\System32\kmddsp.tsp

16:20:14.0718 7980  C:\Windows\System32\kmddsp.tsp - ok

16:20:14.0721 7980  [ 2F6776ACEFE41EE889C464EA407918F2 ] C:\Windows\System32\ndptsp.tsp

16:20:14.0721 7980  C:\Windows\System32\ndptsp.tsp - ok

16:20:14.0724 7980  [ B4B59AC042EE3733A862F26CBC0B17FC ] C:\Windows\System32\hidphone.tsp

16:20:14.0724 7980  C:\Windows\System32\hidphone.tsp - ok

16:20:14.0727 7980  [ 8B645890A93F1FBBC7DA3E07CC72D762 ] C:\Windows\System32\rasppp.dll

16:20:14.0727 7980  C:\Windows\System32\rasppp.dll - ok

16:20:14.0731 7980  [ 300E3336B7BD92A29404E6157521C120 ] C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

16:20:14.0731 7980  C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll - ok

16:20:14.0734 7980  [ 88225070DD2F7B0B2ED51E7935078641 ] C:\Windows\System32\rasqec.dll

16:20:14.0734 7980  C:\Windows\System32\rasqec.dll - ok

16:20:14.0737 7980  [ 82A79D5BE740D0AE9C91AA6DE4B3AC5A ] C:\Windows\System32\raschap.dll

16:20:14.0737 7980  C:\Windows\System32\raschap.dll - ok

16:20:14.0740 7980  [ 3B0489DE8CC3058B48471660C60A7B75 ] C:\Windows\System32\rastls.dll

16:20:14.0740 7980  C:\Windows\System32\rastls.dll - ok

16:20:14.0743 7980  [ 248A1F31ABB58DDDDC01490EF0BDC777 ] C:\Windows\System32\cryptui.dll

16:20:14.0743 7980  C:\Windows\System32\cryptui.dll - ok

16:20:14.0746 7980  [ E769E042CECD6EDEE9DEA25C862A9B45 ] C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_32_05C482CA2286F7C1.dll

16:20:14.0746 7980  C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_32_05C482CA2286F7C1.dll - ok

16:20:14.0750 7980  [ C1C4C0708D5507AF91E9355ADF4CB6ED ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coCoreFW.dll

16:20:14.0750 7980  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coCoreFW.dll - ok

16:20:14.0753 7980  [ 612B2FC3F7DFEF75D71B307BBC3DF860 ] C:\Program Files\Common Files\Symantec Shared\coShared\WP\2.6\coWCID.dll

16:20:14.0753 7980  C:\Program Files\Common Files\Symantec Shared\coShared\WP\2.6\coWCID.dll - ok

16:20:14.0757 7980  [ B7EEE16B2BE39B1085638568D30CA089 ] C:\Program Files\Common Files\Symantec Shared\coShared\WP\2.6\nppw.dll

16:20:14.0757 7980  C:\Program Files\Common Files\Symantec Shared\coShared\WP\2.6\nppw.dll - ok

16:20:14.0761 7980  [ 3ACC71DF4F603B30497C76E048E6C4A7 ] C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

16:20:14.0761 7980  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe - ok

16:20:14.0764 7980  [ 316DFEBD1837B384CCC8E1A0AA63AB47 ] C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coUICtlr.dll

16:20:14.0764 7980  C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coUICtlr.dll - ok

16:20:14.0768 7980  [ 37F475AF64AA26AF8EE436BA00840CD4 ] C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\coCWPlg.dll

16:20:14.0768 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CW\2.6\coCWPlg.dll - ok

16:20:14.0772 7980  [ 42A85AD8ADE860BB9A64BA8EC9EC916A ] C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\coWbAuth.dll

16:20:14.0772 7980  C:\Program Files\Common Files\Symantec Shared\coShared\WA\2.6\coWbAuth.dll - ok

16:20:14.0775 7980  [ 56966C7BDBEA0CA17202FB6D1D7E49F5 ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\IVPlugin.dll

16:20:14.0775 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\IVPlugin.dll - ok

16:20:14.0779 7980  [ C2DBC44EBA163F4DBBB176A995C6AC1E ] C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_532AA89C449CD335.dll

16:20:14.0779 7980  C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_532AA89C449CD335.dll - ok

16:20:14.0782 7980  [ D5A4E5C7F02A3850FD957977F72B09C0 ] C:\Program Files\Common Files\Symantec Shared\coShared\FF\2.5\FFPrefs.dll

16:20:14.0782 7980  C:\Program Files\Common Files\Symantec Shared\coShared\FF\2.5\FFPrefs.dll - ok

16:20:14.0786 7980  [ C250BE72CA76BED67B4243F6B1E09605 ] C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\rf.dll

16:20:14.0786 7980  C:\Program Files\Common Files\Symantec Shared\coShared\CIM\2.6\rf.dll - ok

16:20:14.0789 7980  [ 11CF82D619C8AB9612AA429CEAD97A37 ] C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_de_FFDA10FC57140698.dll

16:20:14.0789 7980  C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_de_FFDA10FC57140698.dll - ok

16:20:14.0793 7980  [ 317FC88BDD45DD92A4A8A6C1F7963EF3 ] C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll

16:20:14.0793 7980  C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll - ok

16:20:14.0797 7980  [ 55A64EF3043E3E3EE64E440E60EA9C15 ] C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20121010.001\scxpx86.dll

16:20:14.0797 7980  C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20121010.001\scxpx86.dll - ok

16:20:14.0801 7980  [ CA69DB1BB9982F7422D2FCCD00965740 ] C:\Program Files\Google\Google Toolbar\Component\GoogleCld_69A221B9205A3D78.dll

16:20:14.0801 7980  C:\Program Files\Google\Google Toolbar\Component\GoogleCld_69A221B9205A3D78.dll - ok

16:20:14.0804 7980  [ E92143D1B2E32FAF6CC56FD97B908F6A ] C:\Windows\System32\wpdshext.dll

16:20:14.0804 7980  C:\Windows\System32\wpdshext.dll - ok

16:20:14.0807 7980  [ 394373142655ACCF49D64AAD466C86FF ] C:\Windows\System32\jscript9.dll

16:20:14.0807 7980  C:\Windows\System32\jscript9.dll - ok

16:20:14.0810 7980  [ 67C30FAFA58BD7E02A9DA8BE28512934 ] C:\Windows\System32\audiodev.dll

16:20:14.0810 7980  C:\Windows\System32\audiodev.dll - ok

16:20:14.0814 7980  [ EE9D715AF1B928982F417238B9914484 ] C:\Windows\System32\ieapfltr.dll

16:20:14.0814 7980  C:\Windows\System32\ieapfltr.dll - ok

16:20:14.0817 7980  [ AC6B8F8058EE27932F9AF8A2D959D201 ] C:\Windows\System32\msimtf.dll

16:20:14.0817 7980  C:\Windows\System32\msimtf.dll - ok

16:20:14.0820 7980  [ 9E5C1D19851FAE2ACDBA118AB20D55AC ] C:\Windows\System32\EhStorAPI.dll

16:20:14.0820 7980  C:\Windows\System32\EhStorAPI.dll - ok

16:20:14.0823 7980  [ E9B39C81C87E5B790FCE121DA9E02701 ] C:\Windows\System32\d2d1.dll

16:20:14.0823 7980  C:\Windows\System32\d2d1.dll - ok

16:20:14.0826 7980  [ 83F5D4B41BB12CE146786E97F6AAD75E ] C:\Windows\System32\ieapfltr.dat

16:20:14.0826 7980  C:\Windows\System32\ieapfltr.dat - ok

16:20:14.0829 7980  [ CABD1B34BD05C986B4DBC18BC0E947EE ] C:\Windows\System32\DWrite.dll

16:20:14.0829 7980  C:\Windows\System32\DWrite.dll - ok

16:20:14.0832 7980  [ 5256383D1D266A9EEFCDB270340C0E5C ] C:\Windows\System32\d3d10_1.dll

16:20:14.0832 7980  C:\Windows\System32\d3d10_1.dll - ok

16:20:14.0835 7980  [ A441F5B43EAF4BD4E3ACFBE38841B46B ] C:\Windows\System32\d3d10_1core.dll

16:20:14.0835 7980  C:\Windows\System32\d3d10_1core.dll - ok

16:20:14.0839 7980  [ 4A4C71376ECA305D6DEA021F1A44816D ] C:\Windows\System32\d3d10warp.dll

16:20:14.0839 7980  C:\Windows\System32\d3d10warp.dll - ok

16:20:14.0842 7980  [ 8B02D2ECC7EF6E1F6AF08459E3F741F6 ] C:\Windows\System32\d3d10.dll

16:20:14.0842 7980  C:\Windows\System32\d3d10.dll - ok

16:20:14.0845 7980  [ 9C7094F537782A82B6A29B4A7172E180 ] C:\Windows\System32\d3d10core.dll

16:20:14.0845 7980  C:\Windows\System32\d3d10core.dll - ok

16:20:14.0848 7980  [ CA493A92DA9880B6F1A89C3DBD54BA5B ] C:\Windows\System32\dxtrans.dll

16:20:14.0848 7980  C:\Windows\System32\dxtrans.dll - ok

16:20:14.0851 7980  [ 734DAA4FEAC6905BCFB30410D6C7E003 ] C:\Windows\System32\ddrawex.dll

16:20:14.0851 7980  C:\Windows\System32\ddrawex.dll - ok

16:20:14.0853 7980  [ FA2A3AFADC4FB47DBC234A4E57F92CDB ] C:\Windows\System32\ddraw.dll

16:20:14.0853 7980  C:\Windows\System32\ddraw.dll - ok

16:20:14.0857 7980  [ EF764E33878B3A4A9E5A2FB5D0D031D0 ] C:\Windows\System32\dciman32.dll

16:20:14.0857 7980  C:\Windows\System32\dciman32.dll - ok

16:20:14.0860 7980  [ 4312DEBDACBE338F0B90E7F08E7672BE ] C:\Windows\System32\dxtmsft.dll

16:20:14.0860 7980  C:\Windows\System32\dxtmsft.dll - ok

16:20:14.0863 7980  [ 8A324CC67F207E6BEE00ADA0A31B743D ] C:\Windows\System32\msxml3r.dll

16:20:14.0863 7980  C:\Windows\System32\msxml3r.dll - ok

16:20:14.0866 7980  [ 35AAE2E841AA1A949775168E119482C9 ] C:\Windows\System32\msls31.dll

16:20:14.0866 7980  C:\Windows\System32\msls31.dll - ok

16:20:14.0869 7980  [ 339E159B0956BA01B6662BB8546BDE95 ] C:\Windows\System32\url.dll

16:20:14.0869 7980  C:\Windows\System32\url.dll - ok

16:20:14.0872 7980  [ 012A965F34414458075EF4F0EDC11536 ] C:\Windows\System32\WindowsCodecsExt.dll

16:20:14.0872 7980  C:\Windows\System32\WindowsCodecsExt.dll - ok

16:20:14.0875 7980  [ 27871C737EA32408AF880842BF51E783 ] C:\Windows\System32\msxml6r.dll

16:20:14.0875 7980  C:\Windows\System32\msxml6r.dll - ok

16:20:14.0879 7980  [ 992A7B8B84649353B172CBB80C1E613C ] C:\Windows\System32\Macromed\Flash\Flash10n.ocx

16:20:14.0879 7980  C:\Windows\System32\Macromed\Flash\Flash10n.ocx - ok

16:20:14.0881 7980  ============================================================

16:20:14.0881 7980  Scan finished

16:20:14.0881 7980  ============================================================

16:20:14.0888 0484  Detected object count: 11

16:20:14.0888 0484  Actual detected object count: 11

16:21:49.0933 0484  C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe - copied to quarantine

16:21:49.0965 0484  FMS ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:50.0309 0484  C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe - copied to quarantine

16:21:50.0335 0484  FMSAdmin ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:50.0588 0484  C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe - copied to quarantine

16:21:50.0606 0484  FMSHttpd ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:50.0888 0484  c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe - copied to quarantine

16:21:50.0907 0484  HP Health Check Service ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0078 0484  C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll - copied to quarantine

16:21:51.0096 0484  hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0150 0484  C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll - copied to quarantine

16:21:51.0172 0484  hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0346 0484  C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL - copied to quarantine

16:21:51.0362 0484  HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0565 0484  C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe - copied to quarantine

16:21:51.0590 0484  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0651 0484  C:\Windows\system32\HPZinw12.dll - copied to quarantine

16:21:51.0670 0484  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0686 0484  C:\Windows\system32\HPZipm12.dll - copied to quarantine

16:21:51.0708 0484  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:21:51.0744 0484  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - copied to quarantine

16:21:51.0775 0484  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 

16:22:11.0127 5048  Deinitialize success

Das ist die killer Datei

christoph03

22.10.2012 14:29

Da hab ich noch eine logfile gefunden

Code:

16:07:04.0463 7064  TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47

16:07:04.0703 7064  ============================================================

16:07:04.0703 7064  Current date / time: 2012/10/18 16:07:04.0703

16:07:04.0703 7064  SystemInfo:

16:07:04.0703 7064  

16:07:04.0703 7064  OS Version: 6.0.6002 ServicePack: 2.0

16:07:04.0703 7064  Product type: Workstation

16:07:04.0703 7064  ComputerName: CHRISTOPH-PC

16:07:04.0704 7064  UserName: christoph

16:07:04.0704 7064  Windows directory: C:\Windows

16:07:04.0704 7064  System windows directory: C:\Windows

16:07:04.0704 7064  Processor architecture: Intel x86

16:07:04.0704 7064  Number of processors: 4

16:07:04.0704 7064  Page size: 0x1000

16:07:04.0704 7064  Boot type: Normal boot

16:07:04.0704 7064  ============================================================

16:07:05.0074 7064  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

16:07:05.0103 7064  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

16:07:05.0115 7064  ============================================================

16:07:05.0115 7064  \Device\Harddisk0\DR0:

16:07:05.0115 7064  MBR partitions:

16:07:05.0115 7064  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3946D769

16:07:05.0115 7064  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3946D7A8, BlocksNum 0xF17499

16:07:05.0115 7064  \Device\Harddisk1\DR1:

16:07:05.0116 7064  MBR partitions:

16:07:05.0116 7064  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02

16:07:05.0116 7064  ============================================================

16:07:05.0139 7064  C: <-> \Device\Harddisk0\DR0\Partition1

16:07:05.0149 7064  E: <-> \Device\Harddisk1\DR1\Partition1

16:07:05.0194 7064  D: <-> \Device\Harddisk0\DR0\Partition2

16:07:05.0194 7064  ============================================================

16:07:05.0194 7064  Initialize success

16:07:05.0194 7064  ============================================================

16:07:10.0167 8080  ============================================================

16:07:10.0167 8080  Scan started

16:07:10.0167 8080  Mode: Manual; 

16:07:10.0167 8080  ============================================================

16:07:11.0399 8080  ================ Scan system memory ========================

16:07:11.0399 8080  System memory - ok

16:07:11.0399 8080  ================ Scan services =============================

16:07:11.0641 8080  [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI            C:\Windows\system32\drivers\acpi.sys

16:07:11.0644 8080  ACPI - ok

16:07:11.0705 8080  [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

16:07:11.0712 8080  adp94xx - ok

16:07:11.0768 8080  [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci         C:\Windows\system32\drivers\adpahci.sys

16:07:11.0774 8080  adpahci - ok

16:07:11.0780 8080  [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

16:07:11.0782 8080  adpu160m - ok

16:07:11.0789 8080  [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320         C:\Windows\system32\drivers\adpu320.sys

16:07:11.0792 8080  adpu320 - ok

16:07:11.0852 8080  [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

16:07:11.0853 8080  AeLookupSvc - ok

16:07:11.0947 8080  [ 3911B972B55FEA0478476B2E777B29FA ] AFD             C:\Windows\system32\drivers\afd.sys

16:07:11.0952 8080  AFD - ok

16:07:12.0005 8080  [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440          C:\Windows\system32\drivers\agp440.sys

16:07:12.0007 8080  agp440 - ok

16:07:12.0037 8080  [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

16:07:12.0040 8080  aic78xx - ok

16:07:12.0065 8080  [ A1545B731579895D8CC44FC0481C1192 ] ALG             C:\Windows\System32\alg.exe

16:07:12.0066 8080  ALG - ok

16:07:12.0119 8080  [ C392B591746961B60F89FE1CBCA7B4FB ] aliide          C:\Windows\system32\drivers\aliide.sys

16:07:12.0120 8080  aliide - ok

16:07:12.0159 8080  [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

16:07:12.0161 8080  amdagp - ok

16:07:12.0186 8080  [ F5F8D2885D1DF33C74764EA2C06C0028 ] amdide          C:\Windows\system32\drivers\amdide.sys

16:07:12.0187 8080  amdide - ok

16:07:12.0192 8080  [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

16:07:12.0193 8080  AmdK7 - ok

16:07:12.0198 8080  [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

16:07:12.0200 8080  AmdK8 - ok

16:07:12.0258 8080  [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo         C:\Windows\System32\appinfo.dll

16:07:12.0259 8080  Appinfo - ok

16:07:12.0264 8080  [ 5F673180268BB1FDB69C99B6619FE379 ] arc             C:\Windows\system32\drivers\arc.sys

16:07:12.0266 8080  arc - ok

16:07:12.0310 8080  [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

16:07:12.0313 8080  arcsas - ok

16:07:12.0422 8080  [ 40C145F12FF461A0220303BDA134F598 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

16:07:12.0424 8080  aspnet_state - ok

16:07:12.0480 8080  [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

16:07:12.0481 8080  AsyncMac - ok

16:07:12.0505 8080  [ BFD3DF48C9ED81934FE21E8E3CFC2496 ] atapi           C:\Windows\system32\drivers\atapi.sys

16:07:12.0507 8080  atapi - ok

16:07:12.0585 8080  [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:07:12.0591 8080  AudioEndpointBuilder - ok

16:07:12.0598 8080  [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv        C:\Windows\System32\Audiosrv.dll

16:07:12.0601 8080  Audiosrv - ok

16:07:12.0722 8080  [ AE9560C298D847AEF346BDD5FAD3B0E3 ] Automatic LiveUpdate Scheduler C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

16:07:12.0725 8080  Automatic LiveUpdate Scheduler - ok

16:07:12.0796 8080  [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep            C:\Windows\system32\drivers\Beep.sys

16:07:12.0797 8080  Beep - ok

16:07:12.0866 8080  [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE             C:\Windows\System32\bfe.dll

16:07:12.0871 8080  BFE - ok

16:07:12.0954 8080  [ 93952506C6D67330367F7E7934B6A02F ] BITS            C:\Windows\System32\qmgr.dll

16:07:12.0966 8080  BITS - ok

16:07:12.0972 8080  blbdrive - ok

16:07:13.0007 8080  [ 35F376253F687BDE63976CCB3F2108CA ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

16:07:13.0009 8080  bowser - ok

16:07:13.0066 8080  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

16:07:13.0067 8080  BrFiltLo - ok

16:07:13.0072 8080  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

16:07:13.0073 8080  BrFiltUp - ok

16:07:13.0109 8080  [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser         C:\Windows\System32\browser.dll

16:07:13.0111 8080  Browser - ok

16:07:13.0147 8080  [ B304E75CFF293029EDDF094246747113 ] Brserid         C:\Windows\system32\drivers\brserid.sys

16:07:13.0149 8080  Brserid - ok

16:07:13.0197 8080  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

16:07:13.0199 8080  BrSerWdm - ok

16:07:13.0204 8080  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

16:07:13.0206 8080  BrUsbMdm - ok

16:07:13.0211 8080  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

16:07:13.0212 8080  BrUsbSer - ok

16:07:13.0292 8080  [ 6D39C954799B63BA866910234CF7D726 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

16:07:13.0293 8080  BthEnum - ok

16:07:13.0298 8080  [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

16:07:13.0300 8080  BTHMODEM - ok

16:07:13.0363 8080  [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

16:07:13.0366 8080  BthPan - ok

16:07:13.0427 8080  [ 73D53F8E90550BA81E2CF44A0873B410 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

16:07:13.0431 8080  BTHPORT - ok

16:07:13.0485 8080  [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ         C:\Windows\System32\bthserv.dll

16:07:13.0486 8080  BthServ - ok

16:07:13.0530 8080  [ 32045A4BB143BBC5BAB1298C4E9E309A ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

16:07:13.0532 8080  BTHUSB - ok

16:07:13.0611 8080  [ 1778EBA872274C1226D869CD9486847E ] Capture Device Service C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

16:07:13.0613 8080  Capture Device Service - ok

16:07:13.0671 8080  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccEvtMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:07:13.0673 8080  ccEvtMgr - ok

16:07:13.0698 8080  [ 2F237AAB91497AAA03AF48EAE68758FC ] ccSetMgr        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:07:13.0700 8080  ccSetMgr - ok

16:07:13.0740 8080  [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

16:07:13.0742 8080  cdfs - ok

16:07:13.0822 8080  [ 6B4BFFB9BECD728097024276430DB314 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

16:07:13.0824 8080  cdrom - ok

16:07:13.0897 8080  [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc     C:\Windows\System32\certprop.dll

16:07:13.0899 8080  CertPropSvc - ok

16:07:13.0936 8080  [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass        C:\Windows\system32\drivers\circlass.sys

16:07:13.0938 8080  circlass - ok

16:07:13.0979 8080  [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS            C:\Windows\system32\CLFS.sys

16:07:13.0984 8080  CLFS - ok

16:07:14.0036 8080  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:07:14.0038 8080  clr_optimization_v2.0.50727_32 - ok

16:07:14.0121 8080  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:07:14.0124 8080  clr_optimization_v4.0.30319_32 - ok

16:07:14.0171 8080  [ 2F237AAB91497AAA03AF48EAE68758FC ] CLTNetCnService C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:07:14.0173 8080  CLTNetCnService - ok

16:07:14.0178 8080  [ 78D56FE738F63D7FEFCC7B396C5DCB67 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

16:07:14.0179 8080  cmdide - ok

16:07:14.0249 8080  [ 6186B6B953BDC884F0F379B84B3E3A98 ] COH_Mon         C:\Windows\system32\Drivers\COH_Mon.sys

16:07:14.0250 8080  COH_Mon - ok

16:07:14.0313 8080  [ 75A69CA9998577F8B2BE8695040E5DF4 ] comHost         C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

16:07:14.0314 8080  comHost - ok

16:07:14.0346 8080  [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

16:07:14.0348 8080  Compbatt - ok

16:07:14.0353 8080  COMSysApp - ok

16:07:14.0407 8080  [ 73F5D6835BFA66019C03E316D99649DA ] CO_Mon          C:\Windows\system32\drivers\CO_Mon.sys

16:07:14.0408 8080  CO_Mon - ok

16:07:14.0438 8080  [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

16:07:14.0439 8080  crcdisk - ok

16:07:14.0445 8080  [ 22A7F883508176489F559EE745B5BF5D ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

16:07:14.0447 8080  Crusoe - ok

16:07:14.0523 8080  [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

16:07:14.0526 8080  CryptSvc - ok

16:07:14.0611 8080  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch      C:\Windows\system32\rpcss.dll

16:07:14.0621 8080  DcomLaunch - ok

16:07:14.0671 8080  [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

16:07:14.0673 8080  DfsC - ok

16:07:14.0797 8080  [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR            C:\Windows\system32\DFSR.exe

16:07:14.0828 8080  DFSR - ok

16:07:14.0898 8080  [ 9028559C132146FB75EB7ACF384B086A ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

16:07:14.0902 8080  Dhcp - ok

16:07:15.0008 8080  [ 5D4AEFC3386920236A548271F8F1AF6A ] disk            C:\Windows\system32\drivers\disk.sys

16:07:15.0010 8080  disk - ok

16:07:15.0077 8080  [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache        C:\Windows\System32\dnsrslvr.dll

16:07:15.0080 8080  Dnscache - ok

16:07:15.0154 8080  [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc         C:\Windows\System32\dot3svc.dll

16:07:15.0158 8080  dot3svc - ok

16:07:15.0228 8080  [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

16:07:15.0232 8080  Dot4 - ok

16:07:15.0266 8080  [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

16:07:15.0267 8080  Dot4Print - ok

16:07:15.0281 8080  [ C55004CA6B419B6695970DFE849B122F ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

16:07:15.0282 8080  dot4usb - ok

16:07:15.0336 8080  [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS             C:\Windows\system32\dps.dll

16:07:15.0339 8080  DPS - ok

16:07:15.0408 8080  [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

16:07:15.0409 8080  drmkaud - ok

16:07:15.0474 8080  [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

16:07:15.0485 8080  DXGKrnl - ok

16:07:15.0546 8080  [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

16:07:15.0549 8080  E1G60 - ok

16:07:15.0615 8080  [ C0B95E40D85CD807D614E264248A45B9 ] EapHost         C:\Windows\System32\eapsvc.dll

16:07:15.0617 8080  EapHost - ok

16:07:15.0682 8080  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache          C:\Windows\system32\drivers\ecache.sys

16:07:15.0686 8080  Ecache - ok

16:07:15.0760 8080  [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl          C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

16:07:15.0766 8080  eeCtrl - ok

16:07:15.0826 8080  [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

16:07:15.0829 8080  ehRecvr - ok

16:07:15.0864 8080  [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched         C:\Windows\ehome\ehsched.exe

16:07:15.0866 8080  ehSched - ok

16:07:15.0889 8080  [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart         C:\Windows\ehome\ehstart.dll

16:07:15.0890 8080  ehstart - ok

16:07:15.0955 8080  [ E8F3F21A71720C84BCF423B80028359F ] elxstor         C:\Windows\system32\drivers\elxstor.sys

16:07:15.0961 8080  elxstor - ok

16:07:16.0012 8080  [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

16:07:16.0022 8080  EMDMgmt - ok

16:07:16.0099 8080  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:07:16.0101 8080  EraserUtilRebootDrv - ok

16:07:16.0155 8080  [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem     C:\Windows\system32\es.dll

16:07:16.0160 8080  EventSystem - ok

16:07:16.0204 8080  [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat           C:\Windows\system32\drivers\exfat.sys

16:07:16.0207 8080  exfat - ok

16:07:16.0253 8080  [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

16:07:16.0256 8080  fastfat - ok

16:07:16.0261 8080  [ 63BDADA84951B9C03E641800E176898A ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

16:07:16.0263 8080  fdc - ok

16:07:16.0297 8080  [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost         C:\Windows\system32\fdPHost.dll

16:07:16.0299 8080  fdPHost - ok

16:07:16.0322 8080  [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub        C:\Windows\system32\fdrespub.dll

16:07:16.0324 8080  FDResPub - ok

16:07:16.0384 8080  [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

16:07:16.0386 8080  FileInfo - ok

16:07:16.0411 8080  [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

16:07:16.0413 8080  Filetrace - ok

16:07:16.0442 8080  [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

16:07:16.0443 8080  flpydisk - ok

16:07:16.0485 8080  [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

16:07:16.0488 8080  FltMgr - ok

16:07:16.0710 8080  [ 8795FD92B624648DABE7B75129EF8002 ] FMS             C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

16:07:16.0746 8080  FMS - ok

16:07:17.0243 8080  [ 2DB70167C13F2339A63E694291FD1BFD ] FMSAdmin        C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

16:07:17.0286 8080  FMSAdmin - ok

16:07:17.0405 8080  [ 8881574868E648689B7AA88A88716E17 ] FMSHttpd        C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

16:07:17.0406 8080  FMSHttpd - ok

16:07:17.0508 8080  [ 8CE364388C8ECA59B14B539179276D44 ] FontCache       C:\Windows\system32\FntCache.dll

16:07:17.0521 8080  FontCache - ok

16:07:17.0597 8080  [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

16:07:17.0620 8080  FontCache3.0.0.0 - ok

16:07:17.0641 8080  [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

16:07:17.0642 8080  Fs_Rec - ok

16:07:17.0665 8080  [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

16:07:17.0667 8080  gagp30kx - ok

16:07:17.0735 8080  [ AB8A6A87D9D7255C3884D5B9541A6E80 ] GEARAspiWDM     C:\Windows\system32\Drivers\GEARAspiWDM.sys

16:07:17.0736 8080  GEARAspiWDM - ok

16:07:17.0783 8080  [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc           C:\Windows\System32\gpsvc.dll

16:07:17.0793 8080  gpsvc - ok

16:07:17.0859 8080  [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9942c2d4a157c C:\Program Files\Google\Update\GoogleUpdate.exe

16:07:17.0860 8080  gupdate1c9942c2d4a157c - ok

16:07:17.0885 8080  [ 626A24ED1228580B9518C01930936DF9 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

16:07:17.0887 8080  gupdatem - ok

16:07:17.0982 8080  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

16:07:18.0003 8080  gusvc - ok

16:07:18.0043 8080  [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

16:07:18.0050 8080  HDAudBus - ok

16:07:18.0070 8080  [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth          C:\Windows\system32\drivers\hidbth.sys

16:07:18.0072 8080  HidBth - ok

16:07:18.0077 8080  [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr           C:\Windows\system32\drivers\hidir.sys

16:07:18.0079 8080  HidIr - ok

16:07:18.0130 8080  [ 84067081F3318162797385E11A8F0582 ] hidserv         C:\Windows\system32\hidserv.dll

16:07:18.0138 8080  hidserv - ok

16:07:18.0153 8080  [ CCA4B519B17E23A00B826C55716809CC ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

16:07:18.0154 8080  HidUsb - ok

16:07:18.0169 8080  [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc          C:\Windows\system32\kmsvc.dll

16:07:18.0172 8080  hkmsvc - ok

16:07:18.0296 8080  [ 0D26C438E2938A3E6BDD91173BC96FF0 ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

16:07:18.0297 8080  HP Health Check Service - ok

16:07:18.0335 8080  [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

16:07:18.0336 8080  HpCISSs - ok

16:07:18.0436 8080  [ 58D4765AB87347DB835D5693ADF652C1 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

16:07:18.0439 8080  hpqcxs08 - ok

16:07:18.0492 8080  [ 99ED733F614660EB32199BF889DFB7E2 ] hpqddsvc        C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

16:07:18.0495 8080  hpqddsvc - ok

16:07:18.0575 8080  [ 75F122CDCA3C71BD09089F2CA824B796 ] HPSLPSVC        C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

16:07:18.0583 8080  HPSLPSVC - ok

16:07:18.0664 8080  [ F870AA3E254628EBEAFE754108D664DE ] HTTP            C:\Windows\system32\drivers\HTTP.sys

16:07:18.0671 8080  HTTP - ok

16:07:18.0710 8080  [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

16:07:18.0712 8080  i2omp - ok

16:07:18.0763 8080  [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

16:07:18.0765 8080  i8042prt - ok

16:07:18.0957 8080  [ 204A73A56751C68C6031E9D5D611EC98 ] IAANTMON        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

16:07:18.0971 8080  IAANTMON - ok

16:07:19.0004 8080  [ 2358C53F30CB9DCD1D3843C4E2F299B2 ] iaStor          C:\Windows\system32\drivers\iastor.sys

16:07:19.0007 8080  iaStor - ok

16:07:19.0102 8080  [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

16:07:19.0106 8080  iaStorV - ok

16:07:19.0222 8080  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

16:07:19.0224 8080  IDriverT - ok

16:07:19.0306 8080  [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

16:07:19.0320 8080  idsvc - ok

16:07:19.0426 8080  [ F85DC24DAFA76237722FE38B3196C61A ] IDSvix86        C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121010.001\IDSvix86.sys

16:07:19.0431 8080  IDSvix86 - ok

16:07:19.0460 8080  [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

16:07:19.0462 8080  iirsp - ok

16:07:19.0494 8080  [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT          C:\Windows\System32\ikeext.dll

16:07:19.0501 8080  IKEEXT - ok

16:07:19.0590 8080  [ EDC37B918E583A5A813C53D4F5588255 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

16:07:19.0617 8080  IntcAzAudAddService - ok

16:07:19.0644 8080  [ E08FB545EDA9D1E3CA689B4B3F6E4C22 ] intelide        C:\Windows\system32\drivers\intelide.sys

16:07:19.0645 8080  intelide - ok

16:07:19.0701 8080  [ 224191001E78C89DFA78924C3EA595FF ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

16:07:19.0702 8080  intelppm - ok

16:07:19.0727 8080  [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

16:07:19.0730 8080  IPBusEnum - ok

16:07:19.0750 8080  [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:07:19.0752 8080  IpFilterDriver - ok

16:07:19.0788 8080  [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

16:07:19.0792 8080  iphlpsvc - ok

16:07:19.0795 8080  IpInIp - ok

16:07:19.0822 8080  [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

16:07:19.0824 8080  IPMIDRV - ok

16:07:19.0842 8080  [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

16:07:19.0844 8080  IPNAT - ok

16:07:19.0868 8080  [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

16:07:19.0869 8080  IRENUM - ok

16:07:19.0873 8080  [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

16:07:19.0875 8080  isapnp - ok

16:07:19.0910 8080  [ 232FA340531D940AAC623B121A595034 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

16:07:19.0913 8080  iScsiPrt - ok

16:07:19.0918 8080  [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

16:07:19.0919 8080  iteatapi - ok

16:07:19.0924 8080  [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid         C:\Windows\system32\drivers\iteraid.sys

16:07:19.0925 8080  iteraid - ok

16:07:19.0960 8080  [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

16:07:19.0962 8080  kbdclass - ok

16:07:19.0975 8080  [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

16:07:19.0976 8080  kbdhid - ok

16:07:20.0007 8080  [ A3E186B4B935905B829219502557314E ] KeyIso          C:\Windows\system32\lsass.exe

16:07:20.0009 8080  KeyIso - ok

16:07:20.0050 8080  [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

16:07:20.0057 8080  KSecDD - ok

16:07:20.0136 8080  [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm           C:\Windows\system32\msdtckrm.dll

16:07:20.0141 8080  KtmRm - ok

16:07:20.0184 8080  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] L8042Kbd        C:\Windows\system32\DRIVERS\L8042Kbd.sys

16:07:20.0185 8080  L8042Kbd - ok

16:07:20.0231 8080  [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer    C:\Windows\system32\srvsvc.dll

16:07:20.0236 8080  LanmanServer - ok

16:07:20.0272 8080  [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:07:20.0277 8080  LanmanWorkstation - ok

16:07:20.0378 8080  [ 3AF6B73A3AD1FC37C5933441F66CEB91 ] LBTServ         C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

16:07:20.0380 8080  LBTServ - ok

16:07:20.0420 8080  [ 7F9C7B28CF1C859E1C42619EEA946DC8 ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

16:07:20.0422 8080  LHidFilt - ok

16:07:20.0468 8080  [ 9039717A906DA0AE38420918801D9AB3 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe

16:07:20.0469 8080  LightScribeService - ok

16:07:20.0551 8080  [ 36375738DC0B3CD1F764268008E74FDF ] LiveUpdate      C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

16:07:20.0578 8080  LiveUpdate - ok

16:07:20.0611 8080  [ 2F237AAB91497AAA03AF48EAE68758FC ] LiveUpdate Notice C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

16:07:20.0613 8080  LiveUpdate Notice - ok

16:07:20.0632 8080  [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

16:07:20.0633 8080  lltdio - ok

16:07:20.0674 8080  [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

16:07:20.0679 8080  lltdsvc - ok

16:07:20.0723 8080  [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts         C:\Windows\System32\lmhsvc.dll

16:07:20.0725 8080  lmhosts - ok

16:07:20.0737 8080  [ AB33792A87285344F43B5CE23421BAB0 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

16:07:20.0739 8080  LMouFilt - ok

16:07:20.0767 8080  [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

16:07:20.0769 8080  LSI_FC - ok

16:07:20.0774 8080  [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

16:07:20.0776 8080  LSI_SAS - ok

16:07:20.0800 8080  [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

16:07:20.0802 8080  LSI_SCSI - ok

16:07:20.0838 8080  [ 8F5C7426567798E62A3B3614965D62CC ] luafv           C:\Windows\system32\drivers\luafv.sys

16:07:20.0840 8080  luafv - ok

16:07:20.0865 8080  [ 77030525CD86A93F1AF34FA9B96D33CE ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

16:07:20.0866 8080  LUsbFilt - ok

16:07:20.0877 8080  [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

16:07:20.0879 8080  Mcx2Svc - ok

16:07:20.0922 8080  [ D153B14FC6598EAE8422A2037553ADCE ] megasas         C:\Windows\system32\drivers\megasas.sys

16:07:20.0923 8080  megasas - ok

16:07:20.0935 8080  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS           C:\Windows\system32\mmcss.dll

16:07:20.0937 8080  MMCSS - ok

16:07:20.0957 8080  [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem           C:\Windows\system32\drivers\modem.sys

16:07:20.0958 8080  Modem - ok

16:07:20.0996 8080  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

16:07:20.0997 8080  monitor - ok

16:07:21.0032 8080  [ 5BF6A1326A335C5298477754A506D263 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

16:07:21.0034 8080  mouclass - ok

16:07:21.0057 8080  [ 93B8D4869E12CFBE663915502900876F ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

16:07:21.0058 8080  mouhid - ok

16:07:21.0069 8080  [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

16:07:21.0071 8080  MountMgr - ok

16:07:21.0128 8080  [ 583A41F26278D9E0EA548163D6139397 ] mpio            C:\Windows\system32\drivers\mpio.sys

16:07:21.0130 8080  mpio - ok

16:07:21.0152 8080  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

16:07:21.0153 8080  mpsdrv - ok

16:07:21.0197 8080  [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc          C:\Windows\system32\mpssvc.dll

16:07:21.0205 8080  MpsSvc - ok

16:07:21.0218 8080  [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

16:07:21.0220 8080  Mraid35x - ok

16:07:21.0264 8080  [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

16:07:21.0267 8080  MRxDAV - ok

16:07:21.0297 8080  [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

16:07:21.0299 8080  mrxsmb - ok

16:07:21.0329 8080  [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:07:21.0333 8080  mrxsmb10 - ok

16:07:21.0356 8080  [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:07:21.0358 8080  mrxsmb20 - ok

16:07:21.0383 8080  [ D537C241DB604FA86E46328DA0FD83D6 ] msahci          C:\Windows\system32\drivers\msahci.sys

16:07:21.0384 8080  msahci - ok

16:07:21.0397 8080  [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

16:07:21.0399 8080  msdsm - ok

16:07:21.0437 8080  [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC           C:\Windows\System32\msdtc.exe

16:07:21.0440 8080  MSDTC - ok

16:07:21.0480 8080  [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

16:07:21.0481 8080  Msfs - ok

16:07:21.0506 8080  [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

16:07:21.0507 8080  msisadrv - ok

16:07:21.0528 8080  [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

16:07:21.0531 8080  MSiSCSI - ok

16:07:21.0535 8080  msiserver - ok

16:07:21.0552 8080  [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

16:07:21.0553 8080  MSKSSRV - ok

16:07:21.0573 8080  [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

16:07:21.0574 8080  MSPCLOCK - ok

16:07:21.0625 8080  [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

16:07:21.0626 8080  MSPQM - ok

16:07:21.0655 8080  [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

16:07:21.0658 8080  MsRPC - ok

16:07:21.0680 8080  [ E384487CB84BE41D09711C30CA79646C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

16:07:21.0681 8080  mssmbios - ok

16:07:21.0786 8080  MSSQL$SQLEXPRESS - ok

16:07:21.0847 8080  [ F1761C8FB2B25A32C6D63E36BB88C3AE ] MSSQLServerADHelper100 C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE

16:07:21.0849 8080  MSSQLServerADHelper100 - ok

16:07:21.0885 8080  [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

16:07:21.0886 8080  MSTEE - ok

16:07:21.0918 8080  [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup             C:\Windows\system32\Drivers\mup.sys

16:07:21.0919 8080  Mup - ok

16:07:21.0977 8080  [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent        C:\Windows\system32\qagentRT.dll

16:07:21.0983 8080  napagent - ok

16:07:22.0051 8080  [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

16:07:22.0054 8080  NativeWifiP - ok

16:07:22.0133 8080  [ 8E4C77AD9BB279900C00F870CC0C674B ] NAVENG          C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVENG.SYS

16:07:22.0136 8080  NAVENG - ok

16:07:22.0194 8080  [ 826F699B69E88A3920C70F344DD42D88 ] NAVEX15         C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121017.019\NAVEX15.SYS

16:07:22.0217 8080  NAVEX15 - ok

16:07:22.0292 8080  [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS            C:\Windows\system32\drivers\ndis.sys

16:07:22.0299 8080  NDIS - ok

16:07:22.0334 8080  [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

16:07:22.0336 8080  NdisTapi - ok

16:07:22.0363 8080  [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

16:07:22.0364 8080  Ndisuio - ok

16:07:22.0401 8080  [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

16:07:22.0404 8080  NdisWan - ok

16:07:22.0452 8080  [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

16:07:22.0454 8080  NDProxy - ok

16:07:22.0515 8080  [ 19715A9A573DAD2521348ABC74266A48 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

16:07:22.0517 8080  Net Driver HPZ12 - ok

16:07:22.0537 8080  [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

16:07:22.0539 8080  NetBIOS - ok

16:07:22.0585 8080  [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

16:07:22.0589 8080  netbt - ok

16:07:22.0607 8080  [ A3E186B4B935905B829219502557314E ] Netlogon        C:\Windows\system32\lsass.exe

16:07:22.0609 8080  Netlogon - ok

16:07:22.0648 8080  [ C8052711DAECC48B982434C5116CA401 ] Netman          C:\Windows\System32\netman.dll

16:07:22.0654 8080  Netman - ok

16:07:22.0719 8080  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:07:22.0722 8080  NetMsmqActivator - ok

16:07:22.0727 8080  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:07:22.0729 8080  NetPipeActivator - ok

16:07:22.0763 8080  [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm        C:\Windows\System32\netprofm.dll

16:07:22.0768 8080  netprofm - ok

16:07:22.0799 8080  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:07:22.0801 8080  NetTcpActivator - ok

16:07:22.0805 8080  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

16:07:22.0807 8080  NetTcpPortSharing - ok

16:07:22.0839 8080  [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

16:07:22.0841 8080  nfrd960 - ok

16:07:22.0934 8080  [ 183CBAD181DEDAC0119B2861C426AC14 ] NitroReaderDriverReadSpool C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

16:07:22.0936 8080  NitroReaderDriverReadSpool - ok

16:07:22.0959 8080  [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc          C:\Windows\System32\nlasvc.dll

16:07:22.0963 8080  NlaSvc - ok

16:07:23.0016 8080  [ 6623E51595C0076755C29C00846C4EB2 ] NPF             C:\Windows\system32\drivers\npf.sys

16:07:23.0054 8080  NPF - ok

16:07:23.0097 8080  [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

16:07:23.0098 8080  Npfs - ok

16:07:23.0128 8080  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi             C:\Windows\system32\nsisvc.dll

16:07:23.0130 8080  nsi - ok

16:07:23.0147 8080  [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

16:07:23.0148 8080  nsiproxy - ok

16:07:23.0212 8080  [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

16:07:23.0225 8080  Ntfs - ok

16:07:23.0264 8080  [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

16:07:23.0265 8080  ntrigdigi - ok

16:07:23.0288 8080  [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null            C:\Windows\system32\drivers\Null.sys

16:07:23.0289 8080  Null - ok

16:07:23.0564 8080  [ AFB33A823AABC112FC7BD62AFBCDB0CD ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:07:23.0779 8080  nvlddmkm - ok

16:07:23.0807 8080  [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

16:07:23.0810 8080  nvraid - ok

16:07:23.0814 8080  [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor          C:\Windows\system32\drivers\nvstor.sys

16:07:23.0816 8080  nvstor - ok

16:07:23.0881 8080  [ 782945716AD010AC3D41758E8E52C735 ] nvsvc           C:\Windows\system32\nvvsvc.exe

16:07:23.0889 8080  nvsvc - ok

16:07:24.0017 8080  [ A974E5C310B9B00894070CEB055D467F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:07:24.0033 8080  nvUpdatusService - ok

16:07:24.0038 8080  [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

16:07:24.0041 8080  nv_agp - ok

16:07:24.0044 8080  NwlnkFlt - ok

16:07:24.0047 8080  NwlnkFwd - ok

16:07:24.0122 8080  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

16:07:24.0129 8080  odserv - ok

16:07:24.0186 8080  [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

16:07:24.0188 8080  ohci1394 - ok

16:07:24.0240 8080  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:07:24.0243 8080  ose - ok

16:07:24.0299 8080  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

16:07:24.0309 8080  p2pimsvc - ok

16:07:24.0317 8080  [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc          C:\Windows\system32\p2psvc.dll

16:07:24.0323 8080  p2psvc - ok

16:07:24.0358 8080  [ 0FA9B5055484649D63C303FE404E5F4D ] Parport         C:\Windows\system32\drivers\parport.sys

16:07:24.0361 8080  Parport - ok

16:07:24.0390 8080  [ B9C2B89F08670E159F7181891E449CD9 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

16:07:24.0392 8080  partmgr - ok

16:07:24.0396 8080  [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

16:07:24.0398 8080  Parvdm - ok

16:07:24.0430 8080  [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc          C:\Windows\System32\pcasvc.dll

16:07:24.0434 8080  PcaSvc - ok

16:07:24.0499 8080  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfd.sys

16:07:24.0500 8080  pccsmcfd - ok

16:07:24.0545 8080  [ 941DC1D19E7E8620F40BBC206981EFDB ] pci             C:\Windows\system32\drivers\pci.sys

16:07:24.0547 8080  pci - ok

16:07:24.0551 8080  [ A88FF9E32AAA9AF398AE89B9A082870B ] pciide          C:\Windows\system32\drivers\pciide.sys

16:07:24.0552 8080  pciide - ok

16:07:24.0576 8080  [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

16:07:24.0580 8080  pcmcia - ok

16:07:24.0643 8080  [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

16:07:24.0653 8080  PEAUTH - ok

16:07:24.0707 8080  [ B1689DF169143F57053F795390C99DB3 ] pla             C:\Windows\system32\pla.dll

16:07:24.0726 8080  pla - ok

16:07:24.0758 8080  [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

16:07:24.0764 8080  PlugPlay - ok

16:07:24.0776 8080  [ B36CD3F2ECA751C0CA8B8868BD1C5449 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

16:07:24.0779 8080  Pml Driver HPZ12 - ok

16:07:24.0816 8080  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

16:07:24.0822 8080  PNRPAutoReg - ok

16:07:24.0831 8080  [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

16:07:24.0836 8080  PNRPsvc - ok

16:07:24.0865 8080  [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

16:07:24.0871 8080  PolicyAgent - ok

16:07:24.0903 8080  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

16:07:24.0905 8080  PptpMiniport - ok

16:07:24.0919 8080  [ 0E3CEF5D28B40CF273281D620C50700A ] Processor       C:\Windows\system32\drivers\processr.sys

16:07:24.0921 8080  Processor - ok

16:07:24.0951 8080  [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc         C:\Windows\system32\profsvc.dll

16:07:24.0955 8080  ProfSvc - ok

16:07:24.0973 8080  [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe

16:07:24.0975 8080  ProtectedStorage - ok

16:07:25.0015 8080  [ F115AF58ABE5605D7D709CBFBD83F418 ] ProtexisLicensing C:\Windows\system32\PSIService.exe

16:07:25.0018 8080  ProtexisLicensing - ok

16:07:25.0078 8080  [ 390C204CED3785609AB24E9C52054A84 ] Ps2             C:\Windows\system32\DRIVERS\PS2.sys

16:07:25.0080 8080  Ps2 - ok

16:07:25.0119 8080  [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

16:07:25.0121 8080  PSched - ok

16:07:25.0175 8080  [ CCDAC889326317792480C0A67156A1EC ] ql2300          C:\Windows\system32\drivers\ql2300.sys

16:07:25.0185 8080  ql2300 - ok

16:07:25.0191 8080  [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

16:07:25.0193 8080  ql40xx - ok

16:07:25.0218 8080  [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE           C:\Windows\system32\qwave.dll

16:07:25.0223 8080  QWAVE - ok

16:07:25.0242 8080  [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

16:07:25.0243 8080  QWAVEdrv - ok

16:07:25.0267 8080  [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

16:07:25.0268 8080  RasAcd - ok

16:07:25.0290 8080  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto         C:\Windows\System32\rasauto.dll

16:07:25.0294 8080  RasAuto - ok

16:07:25.0321 8080  [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

16:07:25.0324 8080  Rasl2tp - ok

16:07:25.0357 8080  [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan          C:\Windows\System32\rasmans.dll

16:07:25.0362 8080  RasMan - ok

16:07:25.0402 8080  [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

16:07:25.0403 8080  RasPppoe - ok

16:07:25.0446 8080  [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

16:07:25.0448 8080  RasSstp - ok

16:07:25.0487 8080  [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

16:07:25.0491 8080  rdbss - ok

16:07:25.0513 8080  [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

16:07:25.0514 8080  RDPCDD - ok

16:07:25.0539 8080  [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

16:07:25.0543 8080  rdpdr - ok

16:07:25.0547 8080  [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

16:07:25.0548 8080  RDPENCDD - ok

16:07:25.0586 8080  [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

16:07:25.0589 8080  RDPWD - ok

16:07:25.0643 8080  [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess    C:\Windows\System32\mprdim.dll

16:07:25.0645 8080  RemoteAccess - ok

16:07:25.0687 8080  [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry  C:\Windows\system32\regsvc.dll

16:07:25.0690 8080  RemoteRegistry - ok

16:07:25.0739 8080  [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

16:07:25.0742 8080  RFCOMM - ok

16:07:25.0789 8080  [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

16:07:25.0790 8080  ROOTMODEM - ok

16:07:25.0813 8080  rpcapd - ok

16:07:25.0847 8080  [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator      C:\Windows\system32\locator.exe

16:07:25.0849 8080  RpcLocator - ok

16:07:25.0900 8080  [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs           C:\Windows\system32\rpcss.dll

16:07:25.0905 8080  RpcSs - ok

16:07:25.0968 8080  [ FD692C6FFADE58F7C4C3C3C9A0EC35BD ] RsFx0103        C:\Windows\system32\DRIVERS\RsFx0103.sys

16:07:25.0972 8080  RsFx0103 - ok

16:07:26.0011 8080  [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

16:07:26.0013 8080  rspndr - ok

16:07:26.0033 8080  [ C347A3CDE57077056E7E73D3498F7D7D ] RTL8169         C:\Windows\system32\DRIVERS\Rtlh86.sys

16:07:26.0035 8080  RTL8169 - ok

16:07:26.0064 8080  [ A3E186B4B935905B829219502557314E ] SamSs           C:\Windows\system32\lsass.exe

16:07:26.0066 8080  SamSs - ok

16:07:26.0103 8080  [ 3CE8F073A557E172B330109436984E30 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

16:07:26.0105 8080  sbp2port - ok

16:07:26.0179 8080  [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

16:07:26.0182 8080  SCardSvr - ok

16:07:26.0244 8080  [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule        C:\Windows\system32\schedsvc.dll

16:07:26.0253 8080  Schedule - ok

16:07:26.0278 8080  [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc     C:\Windows\System32\certprop.dll

16:07:26.0279 8080  SCPolicySvc - ok

16:07:26.0316 8080  [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

16:07:26.0320 8080  SDRSVC - ok

16:07:26.0329 8080  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

16:07:26.0331 8080  secdrv - ok

16:07:26.0346 8080  [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon        C:\Windows\system32\seclogon.dll

16:07:26.0349 8080  seclogon - ok

16:07:26.0367 8080  [ A9BBAB5759771E523F55563D6CBE140F ] SENS            C:\Windows\System32\sens.dll

16:07:26.0370 8080  SENS - ok

16:07:26.0387 8080  [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum         C:\Windows\system32\drivers\serenum.sys

16:07:26.0389 8080  Serenum - ok

16:07:26.0418 8080  [ C70D69A918B178D3C3B06339B40C2E1B ] Serial          C:\Windows\system32\drivers\serial.sys

16:07:26.0421 8080  Serial - ok

16:07:26.0469 8080  [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

16:07:26.0470 8080  sermouse - ok

16:07:26.0536 8080  [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

16:07:26.0545 8080  ServiceLayer - ok

16:07:26.0585 8080  [ D2193326F729B163125610DBF3E17D57 ] SessionEnv      C:\Windows\system32\sessenv.dll

16:07:26.0589 8080  SessionEnv - ok

16:07:26.0593 8080  [ 51CF56AA8BCC241F134B420B8F850406 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

16:07:26.0595 8080  sffdisk - ok

16:07:26.0599 8080  [ 96DED8B20C734AC41641CE275250E55D ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

16:07:26.0601 8080  sffp_mmc - ok

16:07:26.0605 8080  [ 8B08CAB1267B2C377883FC9E56981F90 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

16:07:26.0607 8080  sffp_sd - ok

16:07:26.0611 8080  [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

16:07:26.0612 8080  sfloppy - ok

16:07:26.0624 8080  [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

16:07:26.0629 8080  SharedAccess - ok

16:07:26.0654 8080  [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:07:26.0660 8080  ShellHWDetection - ok

16:07:26.0673 8080  [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

16:07:26.0675 8080  sisagp - ok

16:07:26.0680 8080  [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

16:07:26.0681 8080  SiSRaid2 - ok

16:07:26.0706 8080  [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

16:07:26.0708 8080  SiSRaid4 - ok

16:07:26.0808 8080  [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc           C:\Windows\system32\SLsvc.exe

16:07:26.0832 8080  slsvc - ok

16:07:26.0890 8080  [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify      C:\Windows\system32\SLUINotify.dll

16:07:26.0894 8080  SLUINotify - ok

16:07:26.0943 8080  [ 7B75299A4D201D6A6533603D6914AB04 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

16:07:26.0945 8080  Smb - ok

16:07:26.0999 8080  [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

16:07:27.0002 8080  SNMPTRAP - ok

16:07:27.0046 8080  [ DC4DC886D3779C446F9B0E9D6B006E72 ] SPBBCDrv        C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

16:07:27.0053 8080  SPBBCDrv - ok

16:07:27.0076 8080  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr           C:\Windows\system32\drivers\spldr.sys

16:07:27.0077 8080  spldr - ok

16:07:27.0113 8080  [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler         C:\Windows\System32\spoolsv.exe

16:07:27.0116 8080  Spooler - ok

16:07:27.0168 8080  [ A687B5B326AFCFCF182C4931D1FF9771 ] SQLAgent$SQLEXPRESS C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE

16:07:27.0174 8080  SQLAgent$SQLEXPRESS - ok

16:07:27.0239 8080  [ B54B48F6D92423440C264E91225C5FF1 ] SQLBrowser      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

16:07:27.0242 8080  SQLBrowser - ok

16:07:27.0287 8080  [ 637A0F23F9012358E92E6F99835494D1 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:07:27.0288 8080  SQLWriter - ok

16:07:27.0326 8080  [ E0E54A571D4323567E95E11FE76A5FF3 ] SRTSP           C:\Windows\system32\Drivers\SRTSP.SYS

16:07:27.0331 8080  SRTSP - ok

16:07:27.0361 8080  [ 4E44F0E22DF824D318988CAA6F321C30 ] SRTSPL          C:\Windows\system32\Drivers\SRTSPL.SYS

16:07:27.0366 8080  SRTSPL - ok

16:07:27.0389 8080  [ D3BB40427CF3D02E56BBA97FEDA0A3AA ] SRTSPX          C:\Windows\system32\Drivers\SRTSPX.SYS

16:07:27.0391 8080  SRTSPX - ok

16:07:27.0422 8080  [ 41987F9FC0E61ADF54F581E15029AD91 ] srv             C:\Windows\system32\DRIVERS\srv.sys

16:07:27.0426 8080  srv - ok

16:07:27.0469 8080  [ FF33AFF99564B1AA534F58868CBE41EF ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

16:07:27.0473 8080  srv2 - ok

16:07:27.0488 8080  [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

16:07:27.0490 8080  srvnet - ok

16:07:27.0522 8080  [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

16:07:27.0527 8080  SSDPSRV - ok

16:07:27.0550 8080  [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

16:07:27.0553 8080  SstpSvc - ok

16:07:27.0600 8080  Steam Client Service - ok

16:07:27.0678 8080  [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:07:27.0681 8080  Stereo Service - ok

16:07:27.0731 8080  [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc          C:\Windows\System32\wiaservc.dll

16:07:27.0738 8080  stisvc - ok

16:07:27.0749 8080  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

16:07:27.0751 8080  swenum - ok

16:07:27.0790 8080  [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv           C:\Windows\System32\swprv.dll

16:07:27.0796 8080  swprv - ok

16:07:27.0866 8080  [ 438FAFE708C93B2236FC26B6F2BD5FD0 ] Symantec Core LC C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

16:07:27.0873 8080  Symantec Core LC - ok

16:07:27.0896 8080  [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

16:07:27.0897 8080  Symc8xx - ok

16:07:27.0919 8080  [ FE9F8B3A8BC22D85332B42E92308DDF9 ] SYMDNS          C:\Windows\System32\Drivers\SYMDNS.SYS

16:07:27.0921 8080  SYMDNS - ok

16:07:27.0965 8080  [ 06B95820DF51502099A8A15C93E87986 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT.SYS

16:07:27.0968 8080  SymEvent - ok

16:07:27.0998 8080  [ A0EA9D273889E53CFAABF2444692CCBF ] SYMFW           C:\Windows\System32\Drivers\SYMFW.SYS

16:07:28.0000 8080  SYMFW - ok

16:07:28.0028 8080  [ 8EAB28DD6CD25355B951AE460FA86B48 ] SymIM           C:\Windows\system32\DRIVERS\SymIMv.sys

16:07:28.0029 8080  SymIM - ok

16:07:28.0043 8080  [ C94EACA4B522012EE0691F1E79C42A7D ] SYMNDISV        C:\Windows\System32\Drivers\SYMNDISV.SYS

16:07:28.0045 8080  SYMNDISV - ok

16:07:28.0055 8080  [ 7C6505EA598E58099D3B7E1F70426864 ] SYMREDRV        C:\Windows\System32\Drivers\SYMREDRV.SYS

16:07:28.0056 8080  SYMREDRV - ok

16:07:28.0064 8080  [ E6FF7ACE71D07CA90119F2C6AB592BA4 ] SYMTDI          C:\Windows\System32\Drivers\SYMTDI.SYS

16:07:28.0068 8080  SYMTDI - ok

16:07:28.0071 8080  [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

16:07:28.0073 8080  Sym_hi - ok

16:07:28.0077 8080  [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

16:07:28.0079 8080  Sym_u3 - ok

16:07:28.0112 8080  [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain         C:\Windows\system32\sysmain.dll

16:07:28.0121 8080  SysMain - ok

16:07:28.0146 8080  [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:07:28.0150 8080  TabletInputService - ok

16:07:28.0186 8080  [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv         C:\Windows\System32\tapisrv.dll

16:07:28.0191 8080  TapiSrv - ok

16:07:28.0221 8080  [ CB05822CD9CC6C688168E113C603DBE7 ] TBS             C:\Windows\System32\tbssvc.dll

16:07:28.0224 8080  TBS - ok

16:07:28.0278 8080  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

16:07:28.0290 8080  Tcpip - ok

16:07:28.0304 8080  [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

16:07:28.0311 8080  Tcpip6 - ok

16:07:28.0358 8080  [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

16:07:28.0360 8080  tcpipreg - ok

16:07:28.0391 8080  [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

16:07:28.0392 8080  TDPIPE - ok

16:07:28.0418 8080  [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

16:07:28.0420 8080  TDTCP - ok

16:07:28.0469 8080  [ 76B06EB8A01FC8624D699E7045303E54 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

16:07:28.0471 8080  tdx - ok

16:07:28.0526 8080  [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

16:07:28.0527 8080  TermDD - ok

16:07:28.0553 8080  [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService     C:\Windows\System32\termsrv.dll

16:07:28.0562 8080  TermService - ok

16:07:28.0596 8080  [ C7230FBEE14437716701C15BE02C27B8 ] Themes          C:\Windows\system32\shsvcs.dll

16:07:28.0601 8080  Themes - ok

16:07:28.0617 8080  [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER     C:\Windows\system32\mmcss.dll

16:07:28.0621 8080  THREADORDER - ok

16:07:28.0757 8080  [ AC88D258F20909EEB91796F490CFBB73 ] TOSHIBA Bluetooth Service C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

16:07:28.0759 8080  TOSHIBA Bluetooth Service - ok

16:07:28.0817 8080  [ 90AFA1A4451BBBEE87C9F18A665D8121 ] tosporte        C:\Windows\system32\DRIVERS\tosporte.sys

16:07:28.0818 8080  tosporte - ok

16:07:28.0856 8080  [ 00371CE4DA09B68BA0FF953E61820981 ] tosrfbd         C:\Windows\system32\DRIVERS\tosrfbd.sys

16:07:28.0860 8080  tosrfbd - ok

16:07:28.0895 8080  [ 74392BAB3F0D4810DA8436EC79D6955D ] tosrfbnp        C:\Windows\system32\Drivers\tosrfbnp.sys

16:07:28.0897 8080  tosrfbnp - ok

16:07:28.0926 8080  [ 1AD9EB1B5ABD0AEEE4084C8153476F1E ] Tosrfcom        C:\Windows\system32\Drivers\tosrfcom.sys

16:07:28.0928 8080  Tosrfcom - ok

16:07:28.0950 8080  [ A72A3473180F378CC07D342803FFD580 ] Tosrfhid        C:\Windows\system32\DRIVERS\Tosrfhid.sys

16:07:28.0952 8080  Tosrfhid - ok

16:07:28.0985 8080  [ B2A1A6538245FD69578224BBF2FD4677 ] tosrfnds        C:\Windows\system32\DRIVERS\tosrfnds.sys

16:07:28.0987 8080  tosrfnds - ok

16:07:29.0014 8080  [ F1CA74CCA8241D8B8A024AECC643C547 ] TosRfSnd        C:\Windows\system32\drivers\tosrfsnd.sys

16:07:29.0016 8080  TosRfSnd - ok

16:07:29.0067 8080  [ F400FB9616261A1B66E6D2E04B6C3538 ] Tosrfusb        C:\Windows\system32\DRIVERS\tosrfusb.sys

16:07:29.0069 8080  Tosrfusb - ok

16:07:29.0086 8080  [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks          C:\Windows\System32\trkwks.dll

16:07:29.0091 8080  TrkWks - ok

16:07:29.0140 8080  [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:07:29.0141 8080  TrustedInstaller - ok

16:07:29.0173 8080  [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

16:07:29.0175 8080  tssecsrv - ok

16:07:29.0197 8080  [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

16:07:29.0199 8080  tunmp - ok

16:07:29.0276 8080  [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

16:07:29.0277 8080  tunnel - ok

16:07:29.0311 8080  [ C3ADE15414120033A36C0F293D4A4121 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

16:07:29.0313 8080  uagp35 - ok

16:07:29.0353 8080  [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

16:07:29.0357 8080  udfs - ok

16:07:29.0409 8080  [ AC426CD0AA0DB592A81C9A78A5F4B309 ] UDXTTM6010      C:\Windows\system32\DRIVERS\UDXTTM6010.sys

16:07:29.0418 8080  UDXTTM6010 - ok

16:07:29.0456 8080  [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

16:07:29.0460 8080  UI0Detect - ok

16:07:29.0476 8080  [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

16:07:29.0479 8080  uliagpkx - ok

16:07:29.0485 8080  [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci         C:\Windows\system32\drivers\uliahci.sys

16:07:29.0489 8080  uliahci - ok

16:07:29.0496 8080  [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata          C:\Windows\system32\drivers\ulsata.sys

16:07:29.0498 8080  UlSata - ok

16:07:29.0504 8080  [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

16:07:29.0507 8080  ulsata2 - ok

16:07:29.0531 8080  [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

16:07:29.0533 8080  umbus - ok

16:07:29.0562 8080  [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost        C:\Windows\System32\upnphost.dll

16:07:29.0568 8080  upnphost - ok

16:07:29.0626 8080  [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

16:07:29.0629 8080  usbccgp - ok

16:07:29.0638 8080  [ E9476E6C486E76BC4898074768FB7131 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

16:07:29.0641 8080  usbcir - ok

16:07:29.0678 8080  [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

16:07:29.0680 8080  usbehci - ok

16:07:29.0695 8080  [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

16:07:29.0699 8080  usbhub - ok

16:07:29.0723 8080  [ 38DBC7DD6CC5A72011F187425384388B ] usbohci         C:\Windows\system32\drivers\usbohci.sys

16:07:29.0724 8080  usbohci - ok

16:07:29.0737 8080  [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

16:07:29.0739 8080  usbprint - ok

16:07:29.0765 8080  [ A508C9BD8724980512136B039BBA65E9 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

16:07:29.0766 8080  usbscan - ok

16:07:29.0797 8080  [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:07:29.0799 8080  USBSTOR - ok

16:07:29.0839 8080  [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

16:07:29.0841 8080  usbuhci - ok

16:07:29.0868 8080  [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms           C:\Windows\System32\uxsms.dll

16:07:29.0872 8080  UxSms - ok

16:07:29.0913 8080  [ CD88D1B7776DC17A119049742EC07EB4 ] vds             C:\Windows\System32\vds.exe

16:07:29.0922 8080  vds - ok

16:07:29.0953 8080  [ 7D92BE0028ECDEDEC74617009084B5EF ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

16:07:29.0955 8080  vga - ok

16:07:29.0979 8080  [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave         C:\Windows\System32\drivers\vga.sys

16:07:29.0980 8080  VgaSave - ok

16:07:29.0998 8080  [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp          C:\Windows\system32\drivers\viaagp.sys

16:07:30.0000 8080  viaagp - ok

16:07:30.0005 8080  [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

16:07:30.0007 8080  ViaC7 - ok

16:07:30.0012 8080  [ F2EB2E6E21B008695D3D28E69937DA9C ] viaide          C:\Windows\system32\drivers\viaide.sys

16:07:30.0014 8080  viaide - ok

16:07:30.0035 8080  [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

16:07:30.0037 8080  volmgr - ok

16:07:30.0072 8080  [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

16:07:30.0078 8080  volmgrx - ok

16:07:30.0130 8080  [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

16:07:30.0135 8080  volsnap - ok

16:07:30.0174 8080  [ D984439746D42B30FC65A4C3546C6829 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

16:07:30.0177 8080  vsmraid - ok

16:07:30.0233 8080  [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS             C:\Windows\system32\vssvc.exe

16:07:30.0251 8080  VSS - ok

16:07:30.0301 8080  [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time         C:\Windows\system32\w32time.dll

16:07:30.0308 8080  W32Time - ok

16:07:30.0338 8080  [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

16:07:30.0340 8080  WacomPen - ok

16:07:30.0364 8080  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

16:07:30.0366 8080  Wanarp - ok

16:07:30.0370 8080  [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

16:07:30.0371 8080  Wanarpv6 - ok

16:07:30.0409 8080  [ A3CD60FD826381B49F03832590E069AF ] wcncsvc         C:\Windows\System32\wcncsvc.dll

16:07:30.0420 8080  wcncsvc - ok

16:07:30.0453 8080  [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:07:30.0457 8080  WcsPlugInService - ok

16:07:30.0462 8080  [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd              C:\Windows\system32\drivers\wd.sys

16:07:30.0464 8080  Wd - ok

16:07:30.0493 8080  [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

16:07:30.0501 8080  Wdf01000 - ok

16:07:30.0524 8080  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost  C:\Windows\system32\wdi.dll

16:07:30.0529 8080  WdiServiceHost - ok

16:07:30.0532 8080  [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost   C:\Windows\system32\wdi.dll

16:07:30.0536 8080  WdiSystemHost - ok

16:07:30.0577 8080  [ 04C37D8107320312FBAE09926103D5E2 ] WebClient       C:\Windows\System32\webclnt.dll

16:07:30.0584 8080  WebClient - ok

16:07:30.0624 8080  [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc          C:\Windows\system32\wecsvc.dll

16:07:30.0630 8080  Wecsvc - ok

16:07:30.0650 8080  [ 670FF720071ED741206D69BD995EA453 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

16:07:30.0655 8080  wercplsupport - ok

16:07:30.0699 8080  [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc          C:\Windows\System32\WerSvc.dll

16:07:30.0704 8080  WerSvc - ok

16:07:30.0758 8080  [ 4575AA12561C5648483403541D0D7F2B ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

16:07:30.0763 8080  WinDefend - ok

16:07:30.0770 8080  WinHttpAutoProxySvc - ok

16:07:30.0815 8080  [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

16:07:30.0818 8080  Winmgmt - ok

16:07:30.0874 8080  [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM           C:\Windows\system32\WsmSvc.dll

16:07:30.0894 8080  WinRM - ok

16:07:30.0944 8080  [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc         C:\Windows\System32\wlansvc.dll

16:07:30.0955 8080  Wlansvc - ok

16:07:30.0991 8080  [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

16:07:30.0993 8080  WmiAcpi - ok

16:07:31.0033 8080  [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

16:07:31.0036 8080  wmiApSrv - ok

16:07:31.0100 8080  [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

16:07:31.0108 8080  WMPNetworkSvc - ok

16:07:31.0146 8080  [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

16:07:31.0152 8080  WPCSvc - ok

16:07:31.0204 8080  [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

16:07:31.0210 8080  WPDBusEnum - ok

16:07:31.0341 8080  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

16:07:31.0352 8080  WPFFontCache_v0400 - ok

16:07:31.0371 8080  [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

16:07:31.0373 8080  ws2ifsl - ok

16:07:31.0411 8080  [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc          C:\Windows\System32\wscsvc.dll

16:07:31.0416 8080  wscsvc - ok

16:07:31.0420 8080  WSearch - ok

16:07:31.0483 8080  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll

16:07:31.0513 8080  wuauserv - ok

16:07:31.0549 8080  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

16:07:31.0551 8080  WudfPf - ok

16:07:31.0589 8080  [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

16:07:31.0592 8080  WUDFRd - ok

16:07:31.0624 8080  [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

16:07:31.0629 8080  wudfsvc - ok

16:07:31.0639 8080  ================ Scan global ===============================

16:07:31.0664 8080  [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll

16:07:31.0705 8080  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:07:31.0719 8080  [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll

16:07:31.0763 8080  [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe

16:07:31.0769 8080  [Global] - ok

16:07:31.0770 8080  ================ Scan MBR ==================================

16:07:31.0794 8080  [ 81CD5EC01DB0CE57EDD853F82462EF27 ] \Device\Harddisk0\DR0

16:07:32.0211 8080  \Device\Harddisk0\DR0 - ok

16:07:32.0214 8080  [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk1\DR1

16:07:32.0402 8080  \Device\Harddisk1\DR1 - ok

16:07:32.0402 8080  ================ Scan VBR ==================================

16:07:32.0405 8080  [ E95495BFFA6767669DB8405142DB4649 ] \Device\Harddisk0\DR0\Partition1

16:07:32.0406 8080  \Device\Harddisk0\DR0\Partition1 - ok

16:07:32.0408 8080  [ 36160AA267F7FC371B1139ED4DE6DD05 ] \Device\Harddisk0\DR0\Partition2

16:07:32.0410 8080  \Device\Harddisk0\DR0\Partition2 - ok

16:07:32.0412 8080  [ 160F47F4D3004A4D86D9DFD80B20F147 ] \Device\Harddisk1\DR1\Partition1

16:07:32.0413 8080  \Device\Harddisk1\DR1\Partition1 - ok

16:07:32.0413 8080  ============================================================

16:07:32.0413 8080  Scan finished

16:07:32.0413 8080  ============================================================

16:07:32.0422 2992  Detected object count: 0

16:07:32.0422 2992  Actual detected object count: 0

16:09:08.0396 6704  Deinitialize success

und eine von heute, die ich versehentlich auf der Suche nach der Textdatei initiiert habe.

Code:

15:01:51.0053 1812  TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47

15:01:53.0054 1812  ============================================================

15:01:53.0054 1812  Current date / time: 2012/10/22 15:01:53.0054

15:01:53.0054 1812  SystemInfo:

15:01:53.0055 1812  

15:01:53.0055 1812  OS Version: 6.0.6002 ServicePack: 2.0

15:01:53.0055 1812  Product type: Workstation

15:01:53.0055 1812  ComputerName: CHRISTOPH-PC

15:01:53.0055 1812  UserName: christoph

15:01:53.0055 1812  Windows directory: C:\Windows

15:01:53.0055 1812  System windows directory: C:\Windows

15:01:53.0055 1812  Processor architecture: Intel x86

15:01:53.0055 1812  Number of processors: 4

15:01:53.0055 1812  Page size: 0x1000

15:01:53.0055 1812  Boot type: Normal boot

15:01:53.0055 1812  ============================================================

15:01:53.0673 1812  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

15:01:53.0674 1812  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

15:01:53.0687 1812  ============================================================

15:01:53.0687 1812  \Device\Harddisk0\DR0:

15:01:53.0687 1812  MBR partitions:

15:01:53.0687 1812  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3946D769

15:01:53.0687 1812  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3946D7A8, BlocksNum 0xF17499

15:01:53.0687 1812  \Device\Harddisk1\DR1:

15:01:53.0688 1812  MBR partitions:

15:01:53.0688 1812  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02

15:01:53.0688 1812  ============================================================

15:01:53.0702 1812  C: <-> \Device\Harddisk0\DR0\Partition1

15:01:53.0718 1812  E: <-> \Device\Harddisk1\DR1\Partition1

15:01:53.0768 1812  D: <-> \Device\Harddisk0\DR0\Partition2

15:01:53.0768 1812  ============================================================

15:01:53.0768 1812  Initialize success

15:01:53.0768 1812  ============================================================

15:02:16.0502 3148  Deinitialize success

cosinus

22.10.2012 15:19

Na klasse, sieht aus, als hättest du da diverse Treiber zB von HP gelöscht :killpc:

christoph03

23.10.2012 14:47

Bewerten Sie doch bitte einen alten Mann (ich bin 54) nicht so kritisch.
Ich habe mich an die Anleitungen gehalten, die hier im TB abgedruckt sind (rechts unten auf einer Seite, ich glaube von "DA Guru").
Seitdem Sie sich um die Lösung meines Problems bemüht haben, bin ich streng nach Ihren Anweisungen vorgegangen. Und das heißt etwas bei mir, ich bin von Berufs wegen gewohnt selbständig zu agieren ;-)
Es fehlen auch keine Dateien, sie sind nicht gelöscht. Ich hab vor kurzem einen HP Drucker gegen einen andren ausgetauscht. Jedenfalls funktioniert auf meinem pc alles bis auf den Fehler bei der google Umleitung, der ist unverändert da.
Würden Sie mir weiterhelfen oder wollen Sie aufhören? Ich versteh ja auch Ihre Warte...
Herzlich C.

cosinus

23.10.2012 20:33

Naja das mag sein, dass du da eine Anleitung zu gefunden hast, aber man sollte nicht einfach diese so auszführen und ich kann mir auch nicht vorstellen, dass da pauschal steht man möge gleich alle Funde entsorgen ;)

Sei's drum, wenn du keine Auswirkungen spürst könntest du nochmal ohne Schäden davongekommen sein...

Bitte eine Kontrolle:

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

%systemroot%\Installer\*. /s

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Installer\*. /s

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

christoph03

24.10.2012 05:32

Guten Morgen,
das freut mich, daß Sie weitermachen mit meinem Anliegen, danke.
Hier ist die OTL Datei in zwei Teilen:

Code:

OTL logfile created on: 24/10/2012 6:12:00 - Run 4

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\christoph\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000c07 | Country: Austria | Language: DEA | Date Format: dd/MM/yyyy

 

3.00 Gb Total Physical Memory | 1.51 Gb Available Physical Memory | 50.32% Memory free

6.19 Gb Paging File | 4.79 Gb Available in Paging File | 77.39% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 458.21 Gb Total Space | 311.05 Gb Free Space | 67.88% Space Free | Partition Type: NTFS

Drive D: | 7.55 Gb Total Space | 1.00 Gb Free Space | 13.30% Space Free | Partition Type: NTFS

Drive E: | 465.76 Gb Total Space | 465.66 Gb Free Space | 99.98% Space Free | Partition Type: NTFS

Drive F: | 59.09 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: CHRISTOPH-PC | User Name: christoph | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012/10/21 17:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

PRC - [2012/05/15 11:28:16 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

PRC - [2012/05/15 11:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

PRC - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

PRC - [2009/07/20 12:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe

PRC - [2009/07/10 12:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

PRC - [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

PRC - [2009/02/04 15:11:50 | 005,521,408 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSCore.exe

PRC - [2009/02/04 15:01:24 | 002,768,896 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSEdge.exe

PRC - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

PRC - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

PRC - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE

PRC - [2008/01/19 09:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe

PRC - [2008/01/15 13:26:18 | 004,874,240 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe

PRC - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

PRC - [2007/07/12 17:36:10 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

PRC - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\System32\PSIService.exe

PRC - [2007/04/18 17:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe

PRC - [2007/04/07 03:56:47 | 000,132,760 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\jusched.exe

PRC - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2011/07/18 23:04:08 | 000,296,448 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_04.dll

MOD - [2011/05/28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll

MOD - [2009/07/20 12:27:14 | 000,017,936 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\khalwrapper.dll

 

 
 ========== Services (SafeList) ==========

 

SRV - File not found [On_Demand | Stopped] -- %ProgramFiles%\WinPcap\rpcapd.exe -- (rpcapd)

SRV - [2012/05/15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2012/05/15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2012/04/20 07:59:11 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2010/12/03 12:18:08 | 000,196,912 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe -- (NitroReaderDriverReadSpool)

SRV - [2010/06/14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2009/07/30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)

SRV - [2009/07/20 12:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV - [2009/02/28 16:17:40 | 001,245,064 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)

SRV - [2009/02/04 15:15:40 | 002,428,928 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe -- (FMS)

SRV - [2009/02/04 15:00:12 | 002,596,864 | R--- | M] (Adobe Systems Incorporated.) [Auto | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe -- (FMSAdmin)

SRV - [2009/02/04 14:42:58 | 000,024,635 | ---- | M] (Apache Software Foundation) [On_Demand | Running] -- C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe -- (FMSHttpd)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)

SRV - [2008/10/17 16:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)

SRV - [2008/09/05 12:52:32 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)

SRV - [2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) [Disabled | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)

SRV - [2008/01/19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2007/08/22 02:21:30 | 000,055,640 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)

SRV - [2007/07/12 17:36:12 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2007/06/05 14:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)

SRV - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)

DRV - [2012/09/12 10:00:00 | 001,601,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121020.007\NAVEX15.SYS -- (NAVEX15)

DRV - [2012/09/12 10:00:00 | 000,092,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20121020.007\NAVENG.SYS -- (NAVENG)

DRV - [2012/08/15 14:26:06 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2012/08/08 10:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2012/05/15 12:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2011/10/18 00:23:24 | 000,286,328 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20121019.001\IDSvix86.sys -- (IDSvix86)

DRV - [2009/08/28 11:49:00 | 000,169,064 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)

DRV - [2009/08/05 17:30:16 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)

DRV - [2009/08/05 14:44:00 | 000,049,400 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)

DRV - [2009/08/05 12:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)

DRV - [2009/07/28 20:01:00 | 000,069,480 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)

DRV - [2009/07/24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)

DRV - [2009/06/19 09:57:00 | 000,079,872 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)

DRV - [2009/06/19 09:56:00 | 000,042,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)

DRV - [2009/06/17 18:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV - [2009/06/17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)

DRV - [2009/06/17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)

DRV - [2009/06/17 18:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L8042Kbd.sys -- (L8042Kbd)

DRV - [2009/06/17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)

DRV - [2009/03/30 04:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0103.sys -- (RsFx0103)

DRV - [2009/03/03 19:55:11 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2009/02/19 12:31:42 | 000,024,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM)

DRV - [2009/02/19 12:31:18 | 000,041,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symndisv.sys -- (SYMNDISV)

DRV - [2009/02/19 12:31:16 | 000,184,496 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI)

DRV - [2009/02/19 12:31:16 | 000,096,560 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symfw.sys -- (SYMFW)

DRV - [2009/02/19 12:31:16 | 000,022,320 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV)

DRV - [2009/02/19 12:31:16 | 000,013,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\symdns.sys -- (SYMDNS)

DRV - [2008/09/05 15:31:42 | 000,447,024 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)

DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2008/07/30 18:42:12 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\COH_Mon.sys -- (COH_Mon)

DRV - [2008/03/31 12:55:32 | 000,596,896 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UDXTTM6010.sys -- (UDXTTM6010)

DRV - [2008/02/01 03:51:16 | 000,317,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)

DRV - [2008/02/01 03:51:16 | 000,279,088 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)

DRV - [2008/02/01 03:51:16 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)

DRV - [2007/10/03 18:18:12 | 000,099,840 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)

DRV - [2007/08/08 18:39:56 | 000,036,056 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CO_Mon.sys -- (CO_Mon)

DRV - [2005/12/12 18:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_at&c=81&bd=Pavilion&pf=desktop

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{1D55CD03-39AC-4EE7-8AA2-B93BD903E80E}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{EB51BC5D-84F0-4FDB-A0FE-5EF838700F22}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1134&query={searchTerms}&invocationType=tb50hpcndtie7-de-at

 

 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes,bProtectorDefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes\{547EEAAC-3665-4e6c-B326-C622D698543A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=ASHTDF&src=IE-SearchBox

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_de

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

IE - HKU\S-1-5-21-110388515-1034420003-653005438-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 93.188.168.68:80

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..network.proxy.ftp: "93.188.168.68"

FF - prefs.js..network.proxy.ftp_port: 80

FF - prefs.js..network.proxy.gopher: "93.188.168.68"

FF - prefs.js..network.proxy.gopher_port: 80

FF - prefs.js..network.proxy.http: "93.188.168.68"

FF - prefs.js..network.proxy.http_port: 80

FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"

FF - prefs.js..network.proxy.share_proxy_settings: true

FF - prefs.js..network.proxy.socks: "93.188.168.68"

FF - prefs.js..network.proxy.socks_port: 80

FF - prefs.js..network.proxy.ssl: "93.188.168.68"

FF - prefs.js..network.proxy.ssl_port: 80

FF - prefs.js..network.proxy.type: 0

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: C:\Program Files\Virtual Earth 3D\ [2012/04/19 17:45:38 | 000,000,000 | ---D | M]

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohTVPlugin: C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohWebPlayer: C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll File not found

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/08 19:49:38 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/30 12:06:42 | 000,000,000 | ---D | M]

 

[2011/02/04 19:34:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Extensions

[2012/10/21 13:54:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions

[2011/02/04 19:36:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\christoph\AppData\Roaming\mozilla\Firefox\Profiles\cy6cbrek.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2011/12/08 19:49:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011/11/21 06:21:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2011/11/21 03:17:49 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011/11/21 03:09:48 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml

[2011/11/21 03:17:49 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml

[2011/11/21 03:17:49 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml

[2011/11/21 03:17:49 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml

[2011/11/21 03:17:49 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2012/10/22 05:47:55 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1       localhost

O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - Reg Error: Value error. File not found

O2 - BHO: (Reg Error: Value error.) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O3 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)

O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE (Symantec Corporation)

O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)

O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()

O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)

O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)

O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll ()

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-110388515-1034420003-653005438-1000\..Trusted Domains: pink-unicorns.com ([www] http in Vertrauenswürdige Sites)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} hxxp://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldde-at.cab (MSN Photo Upload Tool)

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Value error.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 10.7.2)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-at.cab (Windows Live Hotmail Photo Upload Tool)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61937460-B7E3-41C8-AD03-9F5D9445633E}: DhcpNameServer = 212.186.211.21 195.34.133.21

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\clouds.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008/03/27 16:44:55 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

NetSvcs: FastUserSwitchingCompatibility -  File not found

NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)

NetSvcs: Nla -  File not found

NetSvcs: Ntmssvc -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: SRService -  File not found

NetSvcs: WmdmPmSp -  File not found

NetSvcs: LogonHours -  File not found

NetSvcs: PCAudit -  File not found

NetSvcs: helpsvc -  File not found

NetSvcs: uploadmgr -  File not found

 

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe - (TOSHIBA CORPORATION.)

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NkbMonitor.exe.lnk -  - File not found

MsConfig - StartUpReg: ccApp - hkey= - key= - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)

MsConfig - StartUpReg: Corel File Shell Monitor - hkey= - key= - C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe ()

MsConfig - StartUpReg: EA Core - hkey= - key= -  File not found

MsConfig - StartUpReg: ehTray.exe - hkey= - key= - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)

MsConfig - StartUpReg: Google Updater - hkey= - key= - C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)

MsConfig - StartUpReg: ITSecMng - hkey= - key= -  File not found

MsConfig - StartUpReg: Livestation - hkey= - key= -  File not found

MsConfig - StartUpReg: osCheck - hkey= - key= - C:\Program Files\Norton 360\osCheck.exe (Symantec Corporation)

MsConfig - StartUpReg: PC Suite Tray - hkey= - key= - C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)

MsConfig - StartUpReg: QuickTime Task - hkey= - key= -  File not found

MsConfig - StartUpReg: Remote Control Editor - hkey= - key= -  File not found

MsConfig - StartUpReg: Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)

MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

MsConfig - StartUpReg: swg - hkey= - key= - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

MsConfig - StartUpReg: TkBellExe - hkey= - key= -  File not found

MsConfig - StartUpReg: UVS11 Preload - hkey= - key= -  File not found

MsConfig - StartUpReg: VeohPlugin - hkey= - key= -  File not found

MsConfig - StartUpReg: Windows Defender - hkey= - key= -  File not found

MsConfig - StartUpReg: WMPNSCFG - hkey= - key= - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)

MsConfig - State: "startup" - 2

MsConfig - State: "services" - 0

 

SafeBootMin: AppMgmt - Service

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: NTDS -  File not found

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

SafeBootNet: AppMgmt - Service

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: HelpSvc - Service

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: NTDS -  File not found

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0

ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.4

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.4

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework

ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {A38B334A-A0A2-436D-BAA0-34FE5E517E44} - Microsoft .NET Framework 1.1 Security Update (KB2656370)

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\VIO\DVACM.acm (InterVideo Digital Technology Corporation)

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.MPEGacm - C:\Program Files\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)

Drivers32: msacm.ulmp3acm - C:\Program Files\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)

Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org)

Drivers32: vidc.yv12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012/10/22 05:40:58 | 000,000,000 | ---D | C] -- C:\_OTL

[2012/10/21 17:56:23 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

[2012/10/19 16:45:04 | 000,000,000 | ---D | C] -- C:\Program Files\ESET

[2012/10/19 06:52:26 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Malwarebytes

[2012/10/19 06:51:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012/10/19 06:51:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012/10/19 06:51:53 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2012/10/19 06:51:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2012/10/19 06:46:56 | 010,669,952 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\christoph\Desktop\mbam-setup-1.65.1.1000.exe

[2012/10/18 16:21:49 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine

[2012/10/18 16:00:30 | 002,213,464 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\christoph\Desktop\tdsskiller.exe

[2012/10/17 17:20:20 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2012/10/15 16:05:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActiveState ActiveTcl 8.5.12.0

[2012/10/15 16:05:02 | 000,000,000 | ---D | C] -- C:\Program Files\Tcl

[2012/10/15 16:04:21 | 000,000,000 | ---D | C] -- C:\Tcl

[2012/10/14 09:12:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReconLab LE 1.2

[2012/10/14 09:12:39 | 000,000,000 | ---D | C] -- C:\ReconLabMaterial

[2012/10/14 09:12:38 | 000,000,000 | ---D | C] -- C:\Program Files\ReconLabLE1.2

[2012/10/14 07:11:31 | 000,000,000 | ---D | C] -- C:\Program Files\Silicon Graphics

[2012/10/10 17:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google SketchUp 8

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 17:03:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIVP-0.5.0

[2012/10/03 16:37:21 | 000,000,000 | ---D | C] -- C:\Users\christoph\AppData\Roaming\Scilab

[2012/10/03 16:34:40 | 000,000,000 | ---D | C] -- C:\Program Files\scilab-5.3.3

[2012/09/29 13:28:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PyQt GPL v4.9.4 for Python v2.6 (x86)

 
 ========== Files - Modified Within 30 Days ==========

 

[2012/10/24 06:08:02 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012/10/24 06:08:01 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job

[2012/10/24 06:07:47 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012/10/24 06:07:46 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012/10/24 06:07:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012/10/24 06:07:39 | 3220,480,000 | -HS- | M] () -- C:\hiberfil.sys

[2012/10/23 17:26:35 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat

[2012/10/23 16:52:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012/10/22 05:47:55 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts

[2012/10/21 17:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\christoph\Desktop\OTL.exe

[2012/10/21 12:58:54 | 000,538,941 | ---- | M] () -- C:\Users\christoph\Desktop\adwcleaner.exe

[2012/10/21 11:35:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job

[2012/10/20 18:24:47 | 000,025,677 | ---- | M] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/20 15:09:11 | 000,002,591 | ---- | M] () -- C:\Users\christoph\Desktop\Microsoft Office Word 2007.lnk

[2012/10/19 06:51:55 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/10/19 06:46:56 | 010,669,952 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\christoph\Desktop\mbam-setup-1.65.1.1000.exe

[2012/10/18 16:06:51 | 000,002,241 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk

[2012/10/18 16:00:31 | 002,213,464 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\christoph\Desktop\tdsskiller.exe

[2012/10/14 09:12:57 | 000,001,657 | ---- | M] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,796,672 | ---- | M] (Qsc) -- C:\Windows\GPInstall.exe

[2012/10/11 16:29:58 | 000,297,782 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skp

[2012/10/10 17:49:50 | 000,001,864 | ---- | M] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/10 06:48:43 | 000,297,787 | ---- | M] () -- C:\Users\christoph\Documents\st.johann-flucht.skb

[2012/10/08 14:50:01 | 000,291,020 | ---- | M] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:32 | 000,272,541 | ---- | M] () -- C:\Users\christoph\Documents\stj0.skp

[2012/09/29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2012/09/25 16:10:31 | 001,016,677 | ---- | M] () -- C:\Users\christoph\Documents\st.johann5.jpg

 
 ========== Files Created - No Company Name ==========

 

[2012/10/21 12:58:52 | 000,538,941 | ---- | C] () -- C:\Users\christoph\Desktop\adwcleaner.exe

[2012/10/20 18:24:47 | 000,025,677 | ---- | C] () -- C:\Users\christoph\AppData\Local\recently-used.xbel

[2012/10/19 06:51:55 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/10/14 09:12:57 | 000,001,657 | ---- | C] () -- C:\Users\christoph\Desktop\ReconLab.lnk

[2012/10/14 09:12:03 | 000,007,883 | ---- | C] () -- C:\Windows\Eng_UK.gpl

[2012/10/14 07:11:31 | 000,708,120 | ---- | C] () -- C:\Windows\System32\tiffdump.exe

[2012/10/14 07:11:31 | 000,256,000 | ---- | C] () -- C:\Windows\System32\iflTIFF0.dll

[2012/10/14 07:11:31 | 000,136,648 | ---- | C] () -- C:\Windows\System32\ifldbgen.exe

[2012/10/14 07:11:31 | 000,104,960 | ---- | C] () -- C:\Windows\System32\iflJFIF0.dll

[2012/10/14 07:11:31 | 000,102,912 | ---- | C] () -- C:\Windows\System32\ifl0.dll

[2012/10/14 07:11:31 | 000,086,016 | ---- | C] () -- C:\Windows\System32\iflPNG0.dll

[2012/10/14 07:11:31 | 000,058,564 | ---- | C] () -- C:\Windows\System32\iflapigen.exe

[2012/10/14 07:11:31 | 000,026,708 | ---- | C] () -- C:\Windows\System32\iflstatus.exe

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflSGI0.dll

[2012/10/14 07:11:31 | 000,026,112 | ---- | C] () -- C:\Windows\System32\iflGIF0.dll

[2012/10/14 07:11:31 | 000,020,480 | ---- | C] () -- C:\Windows\System32\cifl0.dll

[2012/10/14 07:11:31 | 000,019,456 | ---- | C] () -- C:\Windows\System32\iflBMP0.dll

[2012/10/14 07:11:31 | 000,016,384 | ---- | C] () -- C:\Windows\System32\iflXPM0.dll

[2012/10/14 07:11:31 | 000,014,848 | ---- | C] () -- C:\Windows\System32\iflPPM0.dll

[2012/10/14 07:11:31 | 000,013,312 | ---- | C] () -- C:\Windows\System32\iflRaw0.dll

[2012/10/14 07:11:31 | 000,012,800 | ---- | C] () -- C:\Windows\System32\iflXBM0.dll

[2012/10/14 07:11:31 | 000,012,288 | ---- | C] () -- C:\Windows\System32\iflFIT0.dll

[2012/10/14 07:11:31 | 000,004,524 | R--- | C] () -- C:\Windows\System32\ifl_database0

[2012/10/10 17:49:50 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk

[2012/10/08 14:50:01 | 000,291,020 | ---- | C] () -- C:\Users\christoph\Documents\stj1.skp

[2012/10/07 10:31:31 | 000,272,541 | ---- | C] () -- C:\Users\christoph\Documents\stj0.skp

[2012/09/25 16:10:29 | 001,016,677 | ---- | C] () -- C:\Users\christoph\Documents\st.johann5.jpg

[2012/09/09 17:10:00 | 000,143,360 | RHS- | C] () -- C:\Windows\System32\d3dx10_33G.dll

[2012/09/06 08:02:17 | 000,000,072 | ---- | C] () -- C:\Users\christoph\.gtk-bookmarks

[2012/08/24 18:26:25 | 000,823,296 | ---- | C] () -- C:\Windows\j3dcore-d3d.dll

[2012/08/24 18:26:25 | 000,163,840 | ---- | C] () -- C:\Windows\j3dcore-ogl.dll

[2012/08/24 18:26:25 | 000,049,152 | ---- | C] () -- C:\Windows\j3dcore-ogl-chk.dll

[2012/08/24 18:26:25 | 000,040,960 | ---- | C] () -- C:\Windows\j3dcore-ogl-cg.dll

[2012/08/02 16:55:37 | 000,000,776 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\it.omnidea.Rulers.plist

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv190904.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.drv120405.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.drv120205.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211204.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data211004.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.data110704.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.data000.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000002.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Program Files\.dat000001.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.app190905.dat

[2012/07/29 17:07:37 | 000,000,008 | -HS- | C] () -- C:\Users\christoph\AppData\Roaming\.addit001.dat

[2012/07/07 18:02:02 | 000,000,012 | ---- | C] () -- C:\Users\christoph\tmpifo.bat

[2012/06/30 16:26:15 | 000,176,409 | ---- | C] () -- C:\Windows\hpoins16.dat.temp

[2012/06/30 16:26:15 | 000,004,602 | ---- | C] () -- C:\Windows\hpomdl16.dat.temp

[2012/06/28 18:43:25 | 000,001,763 | ---- | C] () -- C:\Windows\System32\geodat.dat

[2012/06/28 18:43:23 | 000,069,632 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE

[2012/06/21 18:50:24 | 000,000,256 | ---- | C] () -- C:\Windows\Caligari.ini

[2012/05/27 09:27:11 | 000,000,097 | ---- | C] () -- C:\Users\christoph\AppData\Local\fusioncache.dat

[2012/05/20 17:53:18 | 000,048,436 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\naggobot.gmic

[2012/05/20 17:53:18 | 000,032,888 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\iain_fergusson.gmic

[2012/05/20 17:53:18 | 000,010,257 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\garagecoder.gmic

[2012/05/20 17:53:17 | 000,006,831 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gentlemanbeggar_gmic.gmic

[2012/05/20 17:53:16 | 000,100,488 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\tomkeil.gmic

[2012/05/20 17:53:16 | 000,047,450 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\photocomix.gmic

[2012/05/20 17:53:16 | 000,001,415 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ronounours.gmic

[2012/05/20 17:53:15 | 000,014,955 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\karos.gmic

[2012/05/20 17:53:14 | 000,659,229 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_def.1513

[2012/05/20 17:51:08 | 000,000,879 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\gmic_sources.cimgz

[2012/05/15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe

[2012/03/29 17:53:33 | 000,014,663 | ---- | C] () -- C:\Users\christoph\.octave_hist

[2011/11/11 18:09:30 | 000,001,160 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\ShiftN.ini

[2011/10/27 16:35:40 | 000,007,415 | ---- | C] () -- C:\Windows\PmLite3.ini

[2011/10/27 16:35:40 | 000,001,862 | ---- | C] () -- C:\Windows\PMStockCams.Ini

[2011/09/04 16:50:23 | 000,013,855 | ---- | C] () -- C:\Users\christoph\ayamrc

[2011/03/10 20:01:02 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2011/02/05 16:18:38 | 000,026,340 | ---- | C] () -- C:\Users\christoph\AppData\Roaming\UserTile.png

[2011/02/04 19:34:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat

[2009/02/14 11:52:17 | 000,005,018 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys

[2009/02/14 11:52:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\EB28B746B4.sys

[2008/08/11 16:13:01 | 000,046,080 | ---- | C] () -- C:\Users\christoph\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

 
 ========== ZeroAccess Check ==========

 

[2006/11/02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 
 ========== LOP Check ==========

 

[2012/08/13 16:58:53 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\.marble

[2011/01/30 12:53:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Ashampoo Cover Studio 2

[2012/10/17 17:20:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2011/08/13 16:59:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Blender Foundation

[2011/08/27 07:09:42 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Bolthouse Software

[2011/01/15 13:16:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Canneverbe Limited

[2008/08/20 07:34:06 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Das Fussball Studio

[2012/03/25 15:36:23 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVDVideoSoft

[2009/01/15 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Engelmann Media

[2012/06/24 14:14:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Exif Viewer

[2012/04/03 17:36:24 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\fltk.org

[2012/06/16 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeCAD

[2011/01/15 16:06:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeFLVConverter

[2011/02/01 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\GetRightToGo

[2012/05/22 18:00:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\gtk-2.0

[2008/08/13 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hemera

[2012/08/29 17:56:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\IrfanView

[2008/11/28 20:00:13 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Leadertech

[2009/03/08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Livestation

[2009/06/25 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mchid

[2009/01/02 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nikon

[2012/10/12 16:55:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nitro PDF

[2010/08/09 16:39:11 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nokia

[2012/03/21 19:55:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Notepad++

[2009/01/15 18:51:08 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Orbit

[2012/09/12 17:01:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Origin

[2010/08/09 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PC Suite

[2011/02/05 16:18:37 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PeerNetworking

[2008/12/14 18:06:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PPMate

[2012/10/03 16:37:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Scilab

[2011/11/04 19:05:27 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Sports Interactive

[2008/06/21 18:17:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\temp

[2009/02/07 13:37:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TerraTec

[2012/08/11 16:27:17 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\transdat

[2012/08/18 10:30:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Uniblue

[2011/03/06 09:16:30 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinFAQ

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

christoph03

24.10.2012 05:34

Code:

< %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2012/08/13 16:58:53 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\.marble

[2008/11/28 20:04:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Adobe

[2009/02/08 15:10:35 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Apple Computer

[2011/01/30 12:53:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Ashampoo Cover Studio 2

[2009/02/17 07:35:20 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\AVS4YOU

[2012/10/17 17:20:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\blaxxun interactive

[2011/08/13 16:59:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Blender Foundation

[2011/08/27 07:09:42 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Bolthouse Software

[2011/01/15 13:16:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Canneverbe Limited

[2012/09/04 17:24:07 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\codeblocks

[2009/02/14 11:54:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Corel

[2009/02/08 09:45:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\CyberLink

[2008/08/20 07:34:06 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Das Fussball Studio

[2011/02/18 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVD Flick

[2012/03/25 15:36:23 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\DVDVideoSoft

[2009/01/15 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Engelmann Media

[2012/06/24 14:14:52 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Exif Viewer

[2012/04/03 17:36:24 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\fltk.org

[2012/06/16 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeCAD

[2011/01/15 16:06:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\FreeFLVConverter

[2011/02/01 18:45:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\GetRightToGo

[2010/12/31 12:40:25 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Google

[2012/05/22 18:00:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\gtk-2.0

[2011/12/08 12:21:40 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Help

[2008/08/13 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hemera

[2008/05/05 19:08:39 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Hewlett-Packard

[2009/01/17 18:34:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\HP

[2012/09/30 08:28:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\HpUpdate

[2008/05/05 19:10:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Identities

[2009/01/10 16:18:57 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\InstallShield

[2012/08/29 17:56:58 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\IrfanView

[2008/11/28 20:00:13 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Leadertech

[2009/03/08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Livestation

[2011/09/25 08:40:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Logitech

[2008/05/05 19:09:03 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Macromedia

[2012/10/19 06:52:26 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Malwarebytes

[2012/03/11 08:30:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\MathWorks

[2009/06/25 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mchid

[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Media Center Programs

[2012/08/01 16:57:55 | 000,000,000 | --SD | M] -- C:\Users\christoph\AppData\Roaming\Microsoft

[2012/03/13 18:21:02 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Microsoft Corporation

[2011/02/04 19:34:12 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Mozilla

[2009/01/02 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nikon

[2012/10/12 16:55:59 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nitro PDF

[2010/08/09 16:39:11 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Nokia

[2012/03/21 19:55:22 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Notepad++

[2012/10/13 15:13:36 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\NVIDIA

[2009/01/15 18:51:08 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Orbit

[2012/09/12 17:01:09 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Origin

[2010/08/09 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PC Suite

[2011/02/05 16:18:37 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PeerNetworking

[2008/12/14 18:06:41 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\PPMate

[2011/03/11 08:09:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Real

[2012/10/03 16:37:21 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Scilab

[2008/06/21 17:55:17 | 000,000,000 | RH-D | M] -- C:\Users\christoph\AppData\Roaming\SecuROM

[2009/02/17 08:16:56 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\SopCast

[2011/11/04 19:05:27 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Sports Interactive

[2009/03/02 17:44:12 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Symantec

[2008/06/21 18:17:16 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\temp

[2009/02/07 13:37:00 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TerraTec

[2012/08/11 16:27:17 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\transdat

[2008/12/14 18:08:25 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\TVU Networks

[2012/08/18 10:30:01 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\Uniblue

[2012/09/21 16:17:55 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\vlc

[2011/03/06 09:16:30 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinFAQ

[2011/09/03 13:37:03 | 000,000,000 | ---D | M] -- C:\Users\christoph\AppData\Roaming\WinRAR

 
 < %APPDATA%\*.exe /s >

[2012/08/02 16:54:56 | 000,095,315 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25bb508a.exe

[2012/08/02 16:54:56 | 000,053,559 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25be7a87.exe

[2012/08/02 16:54:56 | 000,046,502 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_25c12483.exe

[2012/08/02 16:54:56 | 000,046,502 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_2fc2113e.exe

[2012/08/02 16:54:56 | 000,061,203 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_55714a50.exe

[2012/08/02 16:54:56 | 000,053,394 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_758a6f3e.exe

[2012/08/02 16:54:56 | 000,057,332 | R--- | M] () -- C:\Users\christoph\AppData\Roaming\Microsoft\Installer\{D774CBD3-A27F-45A1-A34D-6BE5C918462E}\_7dbc59a7.exe

[2008/02/21 16:02:34 | 000,152,952 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\ALUNOTIF.EXE

[2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\ALUSDSVC.EXE

[2008/02/21 16:02:36 | 000,308,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\AUPDATE.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LSETUP.EXE

[2008/02/21 16:02:40 | 000,873,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUALL.EXE

[2008/02/21 16:02:48 | 000,062,840 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCBPRXY.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCheck.exe

[2008/02/21 16:02:46 | 003,220,856 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LUCOMSVR.EXE

[2008/02/21 16:02:42 | 000,804,216 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\LuConfig.EXE

[2008/02/21 16:02:44 | 000,016,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\LUpdate\WLUEX\NotifyHA.exe

[2005/05/19 23:50:36 | 002,584,848 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\MSI\wiupdate.exe

[2008/02/23 20:08:52 | 000,382,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\APP\COExport.exe

[2008/02/23 20:08:18 | 000,095,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\APP\coVisPrx.exe

[2007/11/29 18:15:06 | 000,288,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\NCO\NCO\SYMSHARE\COL\COLUpdtr.exe

[2008/02/20 01:03:58 | 000,160,112 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\Remover\Remover.exe

[2008/02/20 01:03:51 | 000,990,056 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\Reporter\Reporter.exe

[2008/01/25 19:16:58 | 000,832,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SEVINST\SEVINST.EXE

[2008/01/26 10:27:32 | 000,661,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SPBBC\SPBBC32\SYMSHARE\SPBBC\UpdMgr.exe

[2008/02/20 01:03:49 | 000,687,976 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\SymLnch\SymLnch.exe

[2007/02/13 05:10:44 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\VCRedist\redist32.exe

[2007/02/13 05:10:44 | 003,161,088 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\001CACE2.tmp\Support\VCRedist\redist64.exe

[2008/04/02 19:07:14 | 002,613,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Setup.exe

[2008/02/20 01:03:53 | 000,778,080 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Stub.exe

[2008/01/25 17:57:36 | 000,031,576 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\FWCfg.exe

[2008/01/18 19:43:28 | 001,250,656 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\COH32\COH32.exe

[2008/01/18 19:58:48 | 001,996,336 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\COH64\COH64.exe

[2008/02/26 16:50:42 | 000,448,352 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\MainStub.exe

[2008/02/26 16:50:42 | 000,370,528 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\NSWRedir.exe

[2008/02/26 16:50:44 | 000,988,512 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\osCheck.exe

[2008/02/26 16:50:44 | 000,404,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\ScanStub.exe

[2008/02/26 16:50:46 | 000,972,640 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\tpNetMap.exe

[2008/02/25 07:21:32 | 000,096,424 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\Norton\app\WSCStub.exe

[2008/02/21 16:49:04 | 000,051,576 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\HSLoader.exe

[2008/02/21 16:49:08 | 000,036,728 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\isUAC.exe

[2008/02/21 16:49:14 | 000,042,360 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\npcLULdr.exe

[2008/02/21 16:49:16 | 000,082,808 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\NPC\npcLUStb.exe

[2008/02/23 18:41:38 | 000,423,304 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\cltUAC.exe

[2008/02/23 18:40:46 | 000,533,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\SSAutoRN.exe

[2008/02/23 18:41:28 | 000,611,712 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\OPC\SYMCUW.exe

[2008/01/22 16:09:02 | 002,368,888 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\IDS\IdsInst.exe

[2008/02/07 00:49:36 | 000,443,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\SecHist\MCUI32.exe

[2007/08/22 02:21:30 | 000,055,640 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\VASCAN\comHost.exe

[2007/08/22 02:22:08 | 000,267,096 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\Setup\SYMSHARE\VASCAN64\comHost.exe

[2008/02/23 18:40:46 | 000,533,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\OPC\SSAutoRN.exe

[2008/01/30 14:55:54 | 001,279,368 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\PIF_96E2\pifCrawl.exe

[2008/01/30 14:55:34 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\N360\SymLT\PIF_96E2\PIFSvc.exe

[2008/01/25 19:16:59 | 001,022,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Supp64\SEVINST\Sevntx64.exe

[2008/02/26 10:34:20 | 000,137,568 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Backup\Backup\buDump.exe

[2008/02/18 13:37:38 | 000,051,048 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccApp.exe

[2008/02/18 13:37:40 | 000,056,168 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccEvtMgr.exe

[2008/02/18 13:37:10 | 000,268,648 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccLgView.exe

[2008/02/18 13:37:18 | 000,046,440 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSetMgr.exe

[2008/02/18 13:37:54 | 000,876,392 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSEUPDT.exe

[2008/02/18 13:37:20 | 000,149,352 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\ccCommon\ccCommon\ccSvcHst.exe

[2008/02/21 16:02:34 | 000,152,952 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\ALUNOTIF.EXE

[2008/02/21 16:02:54 | 000,238,968 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\ALUSDSVC.EXE

[2008/02/21 16:02:36 | 000,308,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\AUPDATE.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LSETUP.EXE

[2008/02/21 16:02:40 | 000,873,848 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUALL.EXE

[2008/02/21 16:02:48 | 000,062,840 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCBPRXY.EXE

[2008/02/21 16:03:08 | 000,181,624 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCheck.exe

[2008/02/21 16:02:46 | 003,220,856 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LUCOMSVR.EXE

[2008/02/21 16:02:42 | 000,804,216 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\LuConfig.EXE

[2008/02/21 16:02:44 | 000,016,760 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\LUpdate\WLUEX\NotifyHA.exe

[2005/05/19 23:50:36 | 002,584,848 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\MSI\wiupdate.exe

[2008/02/23 20:08:52 | 000,382,320 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\APP\COExport.exe

[2008/02/23 20:08:18 | 000,095,600 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\APP\coVisPrx.exe

[2007/11/29 18:15:06 | 000,288,088 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\NCO\NCO\SYMSHARE\COL\COLUpdtr.exe

[2008/02/20 01:03:58 | 000,160,112 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Remover\Remover.exe

[2008/02/20 01:03:51 | 000,990,056 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\Reporter\Reporter.exe

[2008/01/25 19:16:58 | 000,832,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SEVINST\SEVINST.EXE

[2008/01/26 10:27:32 | 000,661,896 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SPBBC\SPBBC32\SYMSHARE\SPBBC\UpdMgr.exe

[2008/02/20 01:03:49 | 000,687,976 | ---- | M] (Symantec Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\SymLnch\SymLnch.exe

[2007/02/13 05:10:44 | 002,682,880 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\VCRedist\redist32.exe

[2007/02/13 05:10:44 | 003,161,088 | ---- | M] (Microsoft Corporation) -- C:\Users\christoph\AppData\Roaming\Symantec\Layouts\Norton 360\2.0\English\0E743DD31FF89B86DBEBF1C48C5BAFF874A5B132\20080103\Support\VCRedist\redist64.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < %systemroot%\Installer\*. /s >

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$

[2012/03/12 20:13:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0125D081-30D0-4A97-82A8-C28D444B6256}

[2011/11/04 16:50:36 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}

[2010/08/09 14:52:22 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{089DD780-DB3F-4CDB-A0C2-111360247298}

[2011/03/03 15:07:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}

[2011/09/25 08:39:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0C826C5B-B131-423A-A229-C71B3CACCD6A}

[2008/03/27 16:44:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0E19A83E-F53B-40CF-8C91-96F32D955E6A}

[2011/03/05 16:29:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0EE0B0D9-C159-4D0D-8E92-83959FCAA35D}

[2012/06/30 18:33:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{10E1E87C-656C-4D08-86D6-5443D28583BE}

[2009/11/14 09:10:36 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{11202615-E557-4ECF-9B86-F59C81E52909}

[2008/03/27 16:38:22 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{11BB336F-0E58-4977-B866-F24FA334616B}

[2010/08/09 14:49:08 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{1B9B5B3B-28E7-4E59-A80D-D670AA984514}

[2012/03/12 20:32:27 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{1C2B3CEA-482E-4453-B3E2-C9731337828A}

[2010/08/09 14:53:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}

[2008/11/28 19:59:59 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}

[2011/02/07 16:02:16 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83216023FF}

[2012/09/30 12:06:21 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83217007FF}

[2011/11/14 07:14:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}

[2012/04/19 17:45:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2D87E961-577B-492B-AD54-1368680FB9A7}

[2010/05/13 07:07:44 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}

[2011/09/25 08:36:50 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3101CB58-3482-4D21-AF1A-7057FC935355}

[2012/08/24 18:26:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{32A9C5B3-D166-4C6D-A11E-A54473151000}

[2012/03/12 20:33:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}

[2012/10/12 07:24:18 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}

[2012/09/14 16:28:47 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3C57F42A-4925-4B5D-9774-18AEF2B81A97}

[2010/10/13 17:57:55 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}

[2012/09/08 16:16:15 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{40AAB711-8EFF-4830-8B39-017D3F66983D}

[2010/12/31 12:14:51 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4422D20B-F530-4E65-8504-31396C9BC066}

[2012/06/30 18:34:38 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}

[2009/01/10 16:17:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}

[2012/03/12 20:33:54 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4AF2248C-B3DF-46FB-9596-87F5DB193689}

[2012/10/10 17:49:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4BA6784F-3B10-473A-B9F5-33A36AC354D5}

[2012/09/08 16:16:04 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}

[2012/05/13 15:13:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}

[2012/05/23 07:36:00 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6151CF20-0BD8-4023-A4A0-6A86DCFE58E5}

[2009/01/24 08:26:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{64E72FB1-2343-4977-B4A8-262CD53D0BD3}

[2011/01/29 18:41:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

[2012/05/23 07:42:40 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{7003B63A-7ECA-42B0-A122-AFF24A9F1D5B}

[2009/01/15 06:44:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

[2012/05/12 07:32:06 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

[2012/05/12 07:38:49 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-0020-0407-0000-0000000FF1CE}

[2012/03/01 08:05:07 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-006E-0407-0000-0000000FF1CE}

[2009/12/19 08:30:17 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{9074AFC0-CFDA-11DE-B484-005056806466}

[2012/05/12 07:51:08 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}

[2012/05/12 07:51:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}

[2012/03/12 20:30:12 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{9AA2D735-3375-42D4-9A61-3FFEF82599D6}

[2011/09/25 08:40:03 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{A498D9EB-927B-459B-85D6-DD6EF8C2C564}

[2011/08/20 16:14:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{A8DB611A-D80E-450D-85F6-3ACDD164BE31}

[2009/03/22 14:48:33 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-A81300000003}

[2008/12/31 12:22:26 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-800000000003}

[2012/09/08 16:16:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}

[2009/06/21 10:20:48 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}

[2012/03/11 11:46:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C04BADDA-A8E5-4460-8385-88F2A9E2A305}

[2010/02/04 18:30:30 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C084BC61-E537-11DE-8616-005056806466}

[2012/03/12 20:33:56 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C965F01C-76EA-4BD7-973E-46236AE312D7}

[2008/03/27 16:43:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}

[2009/02/28 16:36:56 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CB84F0F2-927B-458D-9DC5-87832E3DC653}

[2010/08/09 15:03:43 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

[2012/03/12 20:33:49 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D074DC76-F6C9-440E-A1D0-1DE958417FDB}

[2009/01/01 16:50:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D16D8A48-65A4-4B19-8A02-DC9A40FB80C4}

[2012/05/26 16:51:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}

[2010/12/17 08:33:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}

[2009/02/28 16:15:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E80F62FF-5D3C-4A19-8409-9721F2928206}

[2011/01/15 13:16:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EC385B36-AE9D-4F0F-A596-08F7D425D09D}

[2011/01/29 18:41:30 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EE6097DD-05F4-4178-9719-D3170BF098E8}

[2008/11/28 20:01:24 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EF7E931D-DC84-471B-8DB6-A83358095474}

[2012/04/28 15:39:53 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}

[2009/11/26 17:23:29 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

[2009/01/10 16:15:42 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}

[2012/09/08 16:15:32 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{FE19B8A3-C79D-4A90-8F7C-1B206DB00CFC}

[2012/10/20 06:40:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged

[2012/03/01 08:12:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC

[2008/12/29 16:25:19 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021091A0070400000000000F01FEC

[2012/03/01 08:05:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC

[2012/03/01 08:05:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC

[2012/03/01 08:05:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC

[2008/12/29 16:25:02 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109E60070400000000000F01FEC

[2008/12/29 16:25:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10001400000000000F01FEC

[2008/12/29 16:25:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC

[2008/12/29 16:24:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC

[2010/01/21 17:36:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC

[2012/03/01 08:08:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC

[2012/03/01 08:02:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC

[2012/05/01 07:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC

[2009/01/12 07:47:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D00C83EB86A81348A6A7F4D5B1BFDE0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D756077321A70C3E844C138CE981581

[2012/03/12 20:34:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11993DB5F21A265489AB6A0EE333071B

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\180D52100D0379A4288A2CD844B42665

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1B5423D68BD832A4C92DC2094FA0AB6F

[2009/01/24 08:24:58 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1BF27E46343277944B8A62C25DD3B03D

[2012/03/15 07:32:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1D5E3C0FEDA1E123187686FED06E995A

[2009/08/22 07:35:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D

[2012/03/12 20:31:42 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2E43F6A45E9061642B72A4624A886A9F

[2012/03/12 20:34:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3323515BEEA94DC4D9C2F4AA8C07BD2E

[2012/03/14 06:39:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3EF5BEED5F04B5C3F8583560FEC3804F

[2012/06/30 18:33:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\40B8D8DFDAEB55A4AAD1262D73E3D7AE

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\41DAA1250305BB44B8E0C56EF5EC750E

[2012/06/30 18:33:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\42C2662EE13B94340A4823BE678E7B06

[2009/06/12 14:51:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\430E0D9324015094EBBC552009F9BCC7

[2012/06/30 18:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4D738037E5FFBD84AB94337E23FD0F3B

[2012/03/12 20:31:33 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\537D2AA957334D24A916F3EF8F52996D

[2011/04/14 16:38:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A

[2012/03/12 20:33:14 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5F514774AD39AA64585C460074289559

[2012/03/12 20:33:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\67CD470D9C6FE0441A0DD19E8514F7BD

[2011/06/28 07:03:33 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1

[2009/03/22 14:48:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7448A3100000030

[2012/03/12 20:32:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\6BA4943F00966C14FA7528636228E78D

[2012/06/30 18:32:31 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\79F70AEA8809c7948812F063DBD52C15

[2012/06/30 18:34:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A1DC6DCBEBD0E214F952B305D0E1B61A

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\ADDAB40C5E8A06443858882F9A2E3A50

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AEC3B2C1E28435443B2E9C37317328A8

[2012/09/08 16:16:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AFC9600B9BB530C41B6C98EC92E0A5EF

[2012/10/10 06:59:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\b25099274a207264182f8181add555d0

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\BEF1496C59505ff4F8136B4F3BC130F1

[2012/03/12 20:33:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C10F569CAE677DB479E36432A63E217D

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a

[2012/06/30 18:33:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C78E1E01C65680D4686D45342D5838EB

[2012/03/12 20:29:43 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C839E3454CDB33946A211092936948F5

[2012/03/12 20:33:52 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C8422FA4FD3BBF645969785FBD916398

[2009/03/14 09:32:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DD7906EE4F50871479913D71B00F898E

[2012/05/27 08:14:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDE7F2BCF1D91C3409CFF425AE1E271A

[2012/10/10 17:49:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4876AB401B3A3749B5F333AA63C455D

[2012/03/14 06:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FCDAC0A0AD874C333A05DC1548B97920

[2009/02/28 18:37:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FF26F08EC3D591A4489079122F292860

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC\12.0.4518

[2012/03/01 08:11:59 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021091A0070400000000000F01FEC\12.0.4518

[2010/01/21 17:33:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC\12.0.6612

[2012/03/01 08:05:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109E60070400000000000F01FEC\12.0.4518

[2008/12/29 16:25:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10001400000000000F01FEC\12.0.4518

[2012/03/01 08:10:39 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC\12.0.4518

[2010/01/21 17:36:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC\12.0.4518

[2012/03/01 08:11:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518

[2012/05/12 07:34:40 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518

[2012/03/01 08:08:43 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC\12.0.4518

[2012/03/01 08:02:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC\12.0.6612

[2012/05/01 07:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130

[2010/12/17 08:32:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D00C83EB86A81348A6A7F4D5B1BFDE0\9.0.2980

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D756077321A70C3E844C138CE981581\8.0.50727

[2012/03/12 20:34:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11993DB5F21A265489AB6A0EE333071B\10.0.1600

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\180D52100D0379A4288A2CD844B42665\3.5.8080

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1B5423D68BD832A4C92DC2094FA0AB6F\1.0.3

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1BF27E46343277944B8A62C25DD3B03D\12.1.0

[2012/03/15 07:32:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1D5E3C0FEDA1E123187686FED06E995A\10.0.40219

[2012/05/12 07:58:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729

[2012/03/12 20:31:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2E43F6A45E9061642B72A4624A886A9F\10.0.1600

[2012/03/12 20:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3323515BEEA94DC4D9C2F4AA8C07BD2E\10.0.1600

[2012/03/14 06:41:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3EF5BEED5F04B5C3F8583560FEC3804F\10.0.30319

[2012/06/30 18:33:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\40B8D8DFDAEB55A4AAD1262D73E3D7AE\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\41DAA1250305BB44B8E0C56EF5EC750E\1.0.0

[2012/06/30 18:33:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\42C2662EE13B94340A4823BE678E7B06\90.0.146

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\430E0D9324015094EBBC552009F9BCC7\9.7.621

[2012/06/30 18:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4D738037E5FFBD84AB94337E23FD0F3B\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\537D2AA957334D24A916F3EF8F52996D\10.1.2731

[2012/05/13 07:21:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319

[2012/03/12 20:33:24 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5F514774AD39AA64585C460074289559\10.0.1600

[2012/05/12 07:38:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\67CD470D9C6FE0441A0DD19E8514F7BD\10.0.1600

[2011/06/28 07:07:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1\4.0.30319

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7448A3100000030\8.1.3

[2012/03/12 20:32:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\6BA4943F00966C14FA7528636228E78D\10.0.1600

[2012/06/30 18:34:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\79F70AEA8809c7948812F063DBD52C15\90.0.146

[2012/06/30 18:34:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89\90.0.146

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A1DC6DCBEBD0E214F952B305D0E1B61A\90.0.146

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\ADDAB40C5E8A06443858882F9A2E3A50\7.6.0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AEC3B2C1E28435443B2E9C37317328A8\10.1.2531

[2012/09/08 16:16:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AFC9600B9BB530C41B6C98EC92E0A5EF\5.2.6

[2012/10/10 06:59:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\b25099274a207264182f8181add555d0\8.0.56336

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\BEF1496C59505ff4F8136B4F3BC130F1\90.0.189

[2012/03/12 20:33:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C10F569CAE677DB479E36432A63E217D\10.0.1600

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a\8.0.61001

[2012/06/30 18:33:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C78E1E01C65680D4686D45342D5838EB\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C839E3454CDB33946A211092936948F5\9.0.0

[2012/03/12 20:33:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C8422FA4FD3BBF645969785FBD916398\10.0.1600

[2009/03/14 09:32:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DD7906EE4F50871479913D71B00F898E\1.4.1

[2012/05/27 08:14:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDE7F2BCF1D91C3409CFF425AE1E271A\1.1.4322

[2012/10/10 17:49:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4876AB401B3A3749B5F333AA63C455D\3.0.14358

[2012/05/01 07:53:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FCDAC0A0AD874C333A05DC1548B97920\4.0.30319

[2009/02/28 18:37:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FF26F08EC3D591A4489079122F292860\3.4.1

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000\3DBC477DF72A1A543AD4B65E9C8164E2

[2012/08/02 16:52:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000\3DBC477DF72A1A543AD4B65E9C8164E2\9.1.2

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV

[2006/11/02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV

[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV

[2006/11/02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV

[2006/11/02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[2012/09/09 17:10:00 | 000,143,360 | RHS- | M] () Unable to obtain MD5 -- C:\Windows\system32\d3dx10_33G.dll

 
 < %systemroot%\Installer\*. /s >

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$

[2012/03/12 20:13:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0125D081-30D0-4A97-82A8-C28D444B6256}

[2011/11/04 16:50:36 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}

[2010/08/09 14:52:22 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{089DD780-DB3F-4CDB-A0C2-111360247298}

[2011/03/03 15:07:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}

[2011/09/25 08:39:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0C826C5B-B131-423A-A229-C71B3CACCD6A}

[2008/03/27 16:44:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0E19A83E-F53B-40CF-8C91-96F32D955E6A}

[2011/03/05 16:29:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0EE0B0D9-C159-4D0D-8E92-83959FCAA35D}

[2012/06/30 18:33:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{10E1E87C-656C-4D08-86D6-5443D28583BE}

[2009/11/14 09:10:36 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{11202615-E557-4ECF-9B86-F59C81E52909}

[2008/03/27 16:38:22 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{11BB336F-0E58-4977-B866-F24FA334616B}

[2010/08/09 14:49:08 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{1B9B5B3B-28E7-4E59-A80D-D670AA984514}

[2012/03/12 20:32:27 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{1C2B3CEA-482E-4453-B3E2-C9731337828A}

[2010/08/09 14:53:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}

[2008/11/28 19:59:59 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}

[2011/02/07 16:02:16 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83216023FF}

[2012/09/30 12:06:21 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83217007FF}

[2011/11/14 07:14:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}

[2012/04/19 17:45:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2D87E961-577B-492B-AD54-1368680FB9A7}

[2010/05/13 07:07:44 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2EAF7E61-068E-11DF-953C-005056806466}

[2011/09/25 08:36:50 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3101CB58-3482-4D21-AF1A-7057FC935355}

[2012/08/24 18:26:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{32A9C5B3-D166-4C6D-A11E-A54473151000}

[2012/03/12 20:33:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}

[2012/10/12 07:24:18 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{39D0E034-1042-4905-BECB-5502909FCB7C}

[2012/09/14 16:28:47 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3C57F42A-4925-4B5D-9774-18AEF2B81A97}

[2010/10/13 17:57:55 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}

[2012/09/08 16:16:15 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{40AAB711-8EFF-4830-8B39-017D3F66983D}

[2010/12/31 12:14:51 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4422D20B-F530-4E65-8504-31396C9BC066}

[2012/06/30 18:34:38 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}

[2009/01/10 16:17:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}

[2012/03/12 20:33:54 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4AF2248C-B3DF-46FB-9596-87F5DB193689}

[2012/10/10 17:49:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4BA6784F-3B10-473A-B9F5-33A36AC354D5}

[2012/09/08 16:16:04 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}

[2012/05/13 15:13:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}

[2012/05/23 07:36:00 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6151CF20-0BD8-4023-A4A0-6A86DCFE58E5}

[2009/01/24 08:26:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{64E72FB1-2343-4977-B4A8-262CD53D0BD3}

[2011/01/29 18:41:13 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

[2012/05/23 07:42:40 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{7003B63A-7ECA-42B0-A122-AFF24A9F1D5B}

[2009/01/15 06:44:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

[2012/05/12 07:32:06 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

[2012/05/12 07:38:49 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-0020-0407-0000-0000000FF1CE}

[2012/03/01 08:05:07 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-006E-0407-0000-0000000FF1CE}

[2009/12/19 08:30:17 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{9074AFC0-CFDA-11DE-B484-005056806466}

[2012/05/12 07:51:08 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}

[2012/05/12 07:51:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}

[2012/03/12 20:30:12 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{9AA2D735-3375-42D4-9A61-3FFEF82599D6}

[2011/09/25 08:40:03 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{A498D9EB-927B-459B-85D6-DD6EF8C2C564}

[2011/08/20 16:14:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{A8DB611A-D80E-450D-85F6-3ACDD164BE31}

[2009/03/22 14:48:33 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-A81300000003}

[2008/12/31 12:22:26 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-5464-3428-800000000003}

[2012/09/08 16:16:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}

[2009/06/21 10:20:48 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}

[2012/03/11 11:46:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C04BADDA-A8E5-4460-8385-88F2A9E2A305}

[2010/02/04 18:30:30 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C084BC61-E537-11DE-8616-005056806466}

[2012/03/12 20:33:56 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C965F01C-76EA-4BD7-973E-46236AE312D7}

[2008/03/27 16:43:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}

[2009/02/28 16:36:56 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CB84F0F2-927B-458D-9DC5-87832E3DC653}

[2010/08/09 15:03:43 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

[2012/03/12 20:33:49 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D074DC76-F6C9-440E-A1D0-1DE958417FDB}

[2009/01/01 16:50:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D16D8A48-65A4-4B19-8A02-DC9A40FB80C4}

[2012/05/26 16:51:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}

[2010/12/17 08:33:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}

[2009/02/28 16:15:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E80F62FF-5D3C-4A19-8409-9721F2928206}

[2011/01/15 13:16:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EC385B36-AE9D-4F0F-A596-08F7D425D09D}

[2011/01/29 18:41:30 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EE6097DD-05F4-4178-9719-D3170BF098E8}

[2008/11/28 20:01:24 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EF7E931D-DC84-471B-8DB6-A83358095474}

[2012/04/28 15:39:53 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}

[2009/11/26 17:23:29 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

[2009/01/10 16:15:42 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}

[2012/09/08 16:15:32 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{FE19B8A3-C79D-4A90-8F7C-1B206DB00CFC}

[2012/10/20 06:40:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged

[2012/03/01 08:12:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC

[2008/12/29 16:25:19 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021091A0070400000000000F01FEC

[2012/03/01 08:05:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC

[2012/03/01 08:05:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC

[2012/03/01 08:05:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC

[2008/12/29 16:25:02 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109E60070400000000000F01FEC

[2008/12/29 16:25:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10001400000000000F01FEC

[2008/12/29 16:25:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC

[2008/12/29 16:24:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC

[2010/01/21 17:36:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC

[2012/03/01 08:08:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC

[2012/03/01 08:02:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC

[2012/05/01 07:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC

[2009/01/12 07:47:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D00C83EB86A81348A6A7F4D5B1BFDE0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D756077321A70C3E844C138CE981581

[2012/03/12 20:34:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11993DB5F21A265489AB6A0EE333071B

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\180D52100D0379A4288A2CD844B42665

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1B5423D68BD832A4C92DC2094FA0AB6F

[2009/01/24 08:24:58 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1BF27E46343277944B8A62C25DD3B03D

[2012/03/15 07:32:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1D5E3C0FEDA1E123187686FED06E995A

[2009/08/22 07:35:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D

[2012/03/12 20:31:42 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2E43F6A45E9061642B72A4624A886A9F

[2012/03/12 20:34:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3323515BEEA94DC4D9C2F4AA8C07BD2E

[2012/03/14 06:39:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3EF5BEED5F04B5C3F8583560FEC3804F

[2012/06/30 18:33:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\40B8D8DFDAEB55A4AAD1262D73E3D7AE

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\41DAA1250305BB44B8E0C56EF5EC750E

[2012/06/30 18:33:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\42C2662EE13B94340A4823BE678E7B06

[2009/06/12 14:51:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\430E0D9324015094EBBC552009F9BCC7

[2012/06/30 18:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4D738037E5FFBD84AB94337E23FD0F3B

[2012/03/12 20:31:33 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\537D2AA957334D24A916F3EF8F52996D

[2011/04/14 16:38:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A

[2012/03/12 20:33:14 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5F514774AD39AA64585C460074289559

[2012/03/12 20:33:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\67CD470D9C6FE0441A0DD19E8514F7BD

[2011/06/28 07:03:33 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1

[2009/03/22 14:48:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7448A3100000030

[2012/03/12 20:32:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\6BA4943F00966C14FA7528636228E78D

[2012/06/30 18:32:31 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\79F70AEA8809c7948812F063DBD52C15

[2012/06/30 18:34:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A1DC6DCBEBD0E214F952B305D0E1B61A

[2012/03/12 20:13:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\ADDAB40C5E8A06443858882F9A2E3A50

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AEC3B2C1E28435443B2E9C37317328A8

[2012/09/08 16:16:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AFC9600B9BB530C41B6C98EC92E0A5EF

[2012/10/10 06:59:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\b25099274a207264182f8181add555d0

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\BEF1496C59505ff4F8136B4F3BC130F1

[2012/03/12 20:33:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C10F569CAE677DB479E36432A63E217D

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a

[2012/06/30 18:33:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C78E1E01C65680D4686D45342D5838EB

[2012/03/12 20:29:43 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C839E3454CDB33946A211092936948F5

[2012/03/12 20:33:52 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C8422FA4FD3BBF645969785FBD916398

[2009/03/14 09:32:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100

[2012/03/12 20:29:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DD7906EE4F50871479913D71B00F898E

[2012/05/27 08:14:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDE7F2BCF1D91C3409CFF425AE1E271A

[2012/10/10 17:49:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4876AB401B3A3749B5F333AA63C455D

[2012/03/14 06:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FCDAC0A0AD874C333A05DC1548B97920

[2009/02/28 18:37:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FF26F08EC3D591A4489079122F292860

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC\12.0.4518

[2012/03/01 08:11:59 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021091A0070400000000000F01FEC\12.0.4518

[2010/01/21 17:33:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109610070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109810070400000000000F01FEC\12.0.6612

[2010/01/21 17:33:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC\12.0.4518

[2012/03/01 08:05:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109B10070400000000000F01FEC\12.0.6612

[2012/03/01 08:05:03 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109E60070400000000000F01FEC\12.0.4518

[2008/12/29 16:25:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10001400000000000F01FEC\12.0.4518

[2012/03/01 08:10:39 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC\12.0.4518

[2010/01/21 17:36:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC\12.0.4518

[2012/03/01 08:11:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518

[2012/05/12 07:34:40 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518

[2012/03/01 08:08:43 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC\12.0.4518

[2012/03/01 08:02:30 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002159FA0070400000000000F01FEC\12.0.6612

[2012/05/01 07:43:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130

[2010/12/17 08:32:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D00C83EB86A81348A6A7F4D5B1BFDE0\9.0.2980

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0D756077321A70C3E844C138CE981581\8.0.50727

[2012/03/12 20:34:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11993DB5F21A265489AB6A0EE333071B\10.0.1600

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\180D52100D0379A4288A2CD844B42665\3.5.8080

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1B5423D68BD832A4C92DC2094FA0AB6F\1.0.3

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1BF27E46343277944B8A62C25DD3B03D\12.1.0

[2012/03/15 07:32:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\1D5E3C0FEDA1E123187686FED06E995A\10.0.40219

[2012/05/12 07:58:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729

[2012/03/12 20:31:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2E43F6A45E9061642B72A4624A886A9F\10.0.1600

[2012/03/12 20:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3323515BEEA94DC4D9C2F4AA8C07BD2E\10.0.1600

[2012/03/14 06:41:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3EF5BEED5F04B5C3F8583560FEC3804F\10.0.30319

[2012/06/30 18:33:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\40B8D8DFDAEB55A4AAD1262D73E3D7AE\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\41DAA1250305BB44B8E0C56EF5EC750E\1.0.0

[2012/06/30 18:33:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\42C2662EE13B94340A4823BE678E7B06\90.0.146

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\430E0D9324015094EBBC552009F9BCC7\9.7.621

[2012/06/30 18:34:13 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4D738037E5FFBD84AB94337E23FD0F3B\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\537D2AA957334D24A916F3EF8F52996D\10.1.2731

[2012/05/13 07:21:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319

[2012/03/12 20:33:24 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5F514774AD39AA64585C460074289559\10.0.1600

[2012/05/12 07:38:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\67CD470D9C6FE0441A0DD19E8514F7BD\10.0.1600

[2011/06/28 07:07:55 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1\4.0.30319

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7448A3100000030\8.1.3

[2012/03/12 20:32:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\6BA4943F00966C14FA7528636228E78D\10.0.1600

[2012/06/30 18:34:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\79F70AEA8809c7948812F063DBD52C15\90.0.146

[2012/06/30 18:34:29 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\81500F31A708A3B4380B7ADC093F3A89\90.0.146

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A1DC6DCBEBD0E214F952B305D0E1B61A\90.0.146

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\ADDAB40C5E8A06443858882F9A2E3A50\7.6.0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AEC3B2C1E28435443B2E9C37317328A8\10.1.2531

[2012/09/08 16:16:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\AFC9600B9BB530C41B6C98EC92E0A5EF\5.2.6

[2012/10/10 06:59:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\b25099274a207264182f8181add555d0\8.0.56336

[2012/06/30 18:33:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\BEF1496C59505ff4F8136B4F3BC130F1\90.0.189

[2012/03/12 20:33:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C10F569CAE677DB479E36432A63E217D\10.0.1600

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a\8.0.61001

[2012/06/30 18:33:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C78E1E01C65680D4686D45342D5838EB\90.0.146

[2012/03/12 20:33:47 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C839E3454CDB33946A211092936948F5\9.0.0

[2012/03/12 20:33:54 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\C8422FA4FD3BBF645969785FBD916398\10.0.1600

[2009/03/14 09:32:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0

[2012/03/12 20:33:48 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DD7906EE4F50871479913D71B00F898E\1.4.1

[2012/05/27 08:14:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDE7F2BCF1D91C3409CFF425AE1E271A\1.1.4322

[2012/10/10 17:49:49 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4876AB401B3A3749B5F333AA63C455D\3.0.14358

[2012/05/01 07:53:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FCDAC0A0AD874C333A05DC1548B97920\4.0.30319

[2009/02/28 18:37:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\FF26F08EC3D591A4489079122F292860\3.4.1

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000

[2012/08/02 16:52:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000\3DBC477DF72A1A543AD4B65E9C8164E2

[2012/08/02 16:52:46 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\UnManaged\S-1-5-21-110388515-1034420003-653005438-1000\3DBC477DF72A1A543AD4B65E9C8164E2\9.1.2

 
 <           >

[2006/11/02 15:01:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[2006/11/02 15:01:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2008/05/11 12:11:41 | 000,000,590 | ---- | C] () -- C:\Windows\Tasks\Norton Internet Security - Systemprüfung ausführen - christoph.job

[2009/01/02 09:02:35 | 000,000,416 | ---- | C] () -- C:\Windows\Tasks\PCConfidential.job

[2009/02/21 15:55:43 | 000,001,052 | ---- | C] () -- C:\Windows\Tasks\Google Software Updater.job

[2009/07/01 06:17:59 | 000,001,094 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

[2009/07/01 06:18:00 | 000,001,098 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
 

< End of report >

cosinus

24.10.2012 15:33

Ok ist unauffällig. Was ist bzgl. der Weiterleitung noch offen oder ist das behoben?

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

christoph03

24.10.2012 16:52

Hier ist erst einmal die log Datei von gmer

Code:

GMER 1.0.15.15641 - hxxp://www.gmer.net

Rootkit quick scan 2012-10-24 17:51:16

Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.GM4O

Running: drxt9ymm.exe; Driver: C:\Users\CHRIST~1\AppData\Local\Temp\kwtiruod.sys
 
 

---- Devices - GMER 1.0.15 ----
 

AttachedDevice  \Driver\tdx \Device\Ip   SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice  \Driver\tdx \Device\Tcp  SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice  \Driver\tdx \Device\Udp  SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
 

---- EOF - GMER 1.0.15 ----

Und dann jene von osam.
Die Google-Umleitung ist heute morgen - jetzt hab ichs nicht probiert - wieder bei jedem Link aktiv geworden, so "arg" war die Seuche noch nie. Nach jedem Klick springt die Seite sofort auf "searchnowfq" und danach irgendwo andershin, nur nicht an die Zielseite.

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 17:59:10 on 24.10.2012
 

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit

Default Browser: Microsoft Corporation Internet Explorer 9.00.8112.16421
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Common]

-----( %SystemRoot%\Tasks )-----

"Norton Internet Security - Systemprüfung ausführen - christoph.job" - ? - c:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe  (File not found)

"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"Google Software Updater.job" - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

"PCConfidential.job" - ? - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe  (File not found)
 

[Control Panel Objects]

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"NokiaConnectionManager" - "Nokia" - C:\PROGRA~1\Nokia\NOKIAP~1\CONNEC~1.CPL

"TosBtLocalCOM" - "TOSHIBA CORPORATION" - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\LocalCOM.cpl
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"EraserUtilRebootDrv" (EraserUtilRebootDrv) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)

"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)

"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)

"kwtiruod" (kwtiruod) - ? - C:\Users\CHRIST~1\AppData\Local\Temp\kwtiruod.sys  (Hidden registry entry, rootkit activity | File not found)

"NAVENG" (NAVENG) - "Symantec Corporation" - C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121020.007\NAVENG.SYS

"NAVEX15" (NAVEX15) - "Symantec Corporation" - C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20121020.007\NAVEX15.SYS

"NetGroup Packet Filter Driver" (NPF) - "CACE Technologies" - C:\Windows\System32\drivers\npf.sys

"SPBBCDrv" (SPBBCDrv) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

"SRTSP" (SRTSP) - "Symantec Corporation" - C:\Windows\System32\Drivers\SRTSP.SYS

"SRTSPL" (SRTSPL) - "Symantec Corporation" - C:\Windows\System32\Drivers\SRTSPL.SYS

"SRTSPX" (SRTSPX) - "Symantec Corporation" - C:\Windows\System32\Drivers\SRTSPX.SYS

"Symantec Eraser Control driver" (eeCtrl) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

"Symantec Intrusion Prevention Driver" (IDSvix86) - "Symantec Corporation" - C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20121019.001\IDSvix86.sys

"SYMDNS" (SYMDNS) - "Symantec Corporation" - C:\Windows\System32\Drivers\SYMDNS.SYS

"SymEvent" (SymEvent) - "Symantec Corporation" - C:\Windows\system32\Drivers\SYMEVENT.SYS

"SYMFW" (SYMFW) - "Symantec Corporation" - C:\Windows\System32\Drivers\SYMFW.SYS

"SYMNDISV" (SYMNDISV) - "Symantec Corporation" - C:\Windows\System32\Drivers\SYMNDISV.SYS

"SYMREDRV" (SYMREDRV) - "Symantec Corporation" - C:\Windows\System32\Drivers\SYMREDRV.SYS

"SYMTDI" (SYMTDI) - "Symantec Corporation" - C:\Windows\System32\Drivers\SYMTDI.SYS
 

[Explorer]

-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B} "Bluetooth-Informationsaustausch" - "TOSHIBA" - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtExt.dll

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)

{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{6230EF55-8E71-4F40-861A-DBA282584FF5} "AVSVideoConverter Object" - "Online Media Technologies Ltd." - C:\PROGRA~1\AVS4YOU\AVSVID~1\AVSVID~1.DLL

{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B} "Bluetooth-Informationsaustausch" - "TOSHIBA" - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\sys\TosBtExt.dll

{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} "BUContextMenu Class" - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\Backup\buShell.dll

{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)

{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\Display\nvui.dll

{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)

{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? -   (File not found | COM-object registry key not found)

{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} "KbLogiExt Class" - "Logitech, Inc." - C:\Program Files\Logitech\SetPoint\kbcplext.dll

{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -   (File not found | COM-object registry key not found)

{B9B9F083-2B04-452A-8691-83694AC1037B} "LogiExt Class" - "Logitech, Inc." - C:\Program Files\Logitech\SetPoint\mcplext.dll

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} "Nokia Phone Browser" - "Nokia" - C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll

{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll

{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "Shell Extensions for RealOne Player" - ? -   (File not found | COM-object registry key not found)

{7F67036B-66F1-411A-AD85-759FB9C5B0DB} "ShellViewRTF" - "XSS" - C:\Windows\System32\ShellvRTF.dll

{A40526DD-F152-4C1D-844C-CE668D29B77E} "TPContextMenu Class" - "Symantec Corporation" - C:\PROGRA~1\NORTON~1\tpShell.dll

{DBD8E168-244D-448C-9922-25508950D1DC} "USIShellExt Class" - "Ulead Systems, Inc." - C:\Program Files\Common Files\Ulead Systems\DVD\USIShex.dll

{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)

{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll
 

[Internet Explorer]

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

<binary data> "Show Norton Toolbar" - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} "Java Plug-in 1.6.0_01" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab

{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 10.7.2" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

{4F1E5B1A-2A80-42CA-8532-2D05CB959537} "MSN Photo Upload Tool" - "Microsoft® Corporation" - C:\Windows\Downloaded Program Files\MsnPUpld.dll / hxxp://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldde-at.cab

{7530BFB8-7293-4D34-9923-61A11451AFC5} "OnlineScanner Control" - "ESET" - C:\PROGRA~1\ESET\ESETON~1\ONLINE~1.OCX / hxxp://download.eset.com/special/eos/OnlineScanner.cab

{233C1507-6A77-46A4-9443-F871F945D258} "Shockwave ActiveX Control" - "Adobe Systems, Inc." - C:\Windows\system32\Adobe\Director\SwDir.dll / hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\Windows\system32\LegitCheckControl.DLL / hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

{E77F23EB-E7AB-4502-8F37-247DBAF1A147} "Windows Live Hotmail Photo Upload Tool" - "Microsoft® Corporation" - C:\Windows\Downloaded Program Files\CONFLICT.1\MsnPUpld.dll / hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldde-at.cab

{8AD9C840-044E-11D1-B3E9-00805F499D93} "{8AD9C840-044E-11D1-B3E9-00805F499D93}" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" - ? -   (File not found | COM-object registry key not found) / hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -   (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC} "ClsidExtension" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2iexp.dll

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----

<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} "Show Norton Toolbar" - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

{AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\jp2ssv.dll

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Oracle Corporation" - C:\Program Files\Java\jre7\bin\ssv.dll

{6D53EC84-6AAE-4787-AEEE-F4628F01010C} "Symantec Intrusion Prevention" - "Symantec Corporation" - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} "{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}" - ? -   (File not found | COM-object registry key not found)

{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} "{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}" - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe  (Shortcut exists | File exists)

"Logitech SetPoint.lnk" - "Logitech, Inc." - C:\Program Files\Logitech\SetPoint\SetPoint.exe  (Shortcut exists | File exists)

-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----

"swg" - "Google Inc." - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

"ccApp" - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\ccApp.exe

"HP Software Update" - "Hewlett-Packard Co." - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

"hpsysdrv" - "Hewlett-Packard Company" - c:\hp\support\hpsysdrv.exe

"IAAnotif" - "Intel Corporation" - "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

"KBD" - ? - C:\HP\KBD\KbdStub.EXE  (File found, but it contains no detailed information)

"SunJavaUpdateReg" - "Sun Microsystems, Inc." - "C:\Windows\system32\jureg.exe"

"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"Nitro PDF Port Monitor" - "Nitro PDF Software" - C:\Windows\system32\nitrolocalmon.dll

"PCL hpz3l5ha" - "Hewlett-Packard Company" - C:\Windows\system32\hpz3l5ha.dll

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll

"Toshiba Bluetooth Monitor" - "TOSHIBA CORPORATION." - C:\Windows\system32\tbtmon.dll
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

"Capture Device Service" (Capture Device Service) - "InterVideo Inc." - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

"COM Host" (comHost) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

"Flash Media Administration Server" (FMSAdmin) - "Adobe Systems Incorporated." - C:\Program Files\Adobe\Flash Media Server 3.5\FMSAdmin.exe

"Flash Media Server (FMS)" (FMS) - "Adobe Systems Incorporated." - C:\Program Files\Adobe\Flash Media Server 3.5\FMSMaster.exe

"FMSHttpd" (FMSHttpd) - "Apache Software Foundation" - C:\Program Files\Adobe\Flash Media Server 3.5\Apache2.2\bin\httpd.exe

"Google Software Updater" (gusvc) - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

"Google Update Service (gupdate1c9942c2d4a157c)" (gupdate1c9942c2d4a157c) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

"HP Health Check Service" (HP Health Check Service) - "Hewlett-Packard" - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

"HP Network Devices Support" (HPSLPSVC) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

"hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

"Intel(R) Matrix Storage Event Monitor" (IAANTMON) - "Intel Corporation" - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

"LiveUpdate" (LiveUpdate) - "Symantec Corporation" - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

"LiveUpdate Notice" (LiveUpdate Notice) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

"Logitech Bluetooth Service" (LBTServ) - "Logitech, Inc." - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll

"NitroPDFReaderDriverCreatorReadSpool" (NitroReaderDriverReadSpool) - "Nitro PDF Software" - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe

"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll

"ProtexisLicensing" (ProtexisLicensing) - ? - C:\Windows\system32\PSIService.exe

"Remote Packet Capture Protocol v.0 (experimental)" (rpcapd) - ? - "C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"  (File not found)

"ServiceLayer" (ServiceLayer) - "Nokia" - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

"SQL Server (SQLEXPRESS)" (MSSQL$SQLEXPRESS) - "Microsoft Corporation" - C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

"SQL Server VSS Writer" (SQLWriter) - "Microsoft Corporation" - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

"Steam Client Service" (Steam Client Service) - "Valve Corporation" - C:\Program Files\Common Files\Steam\SteamService.exe

"Symantec Core LC" (Symantec Core LC) - ? - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

"Symantec Event Manager" (ccEvtMgr) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

"Symantec Lic NetConnect service" (CLTNetCnService) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

"Symantec Settings Manager" (ccSetMgr) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

"TOSHIBA Bluetooth Service" (TOSHIBA Bluetooth Service) - "TOSHIBA CORPORATION" - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Das ist noch die letzte Logfile von aswMBR

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software

Run date: 2012-10-24 18:07:18

-----------------------------

18:07:18.758    OS Version: Windows 6.0.6002 Service Pack 2

18:07:18.758    Number of processors: 4 586 0xF0B

18:07:18.759    ComputerName: CHRISTOPH-PC  UserName: christoph

18:07:21.122    Initialize success

18:08:28.621    AVAST engine defs: 12102400

18:08:41.310    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

18:08:41.312    Disk 0 Vendor: Hitachi_ GM4O Size: 476940MB BusType: 3

18:08:41.314    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-2

18:08:41.317    Disk 1 Vendor: Hitachi_ GM4O Size: 476940MB BusType: 3

18:08:41.329    Disk 0 MBR read successfully

18:08:41.332    Disk 0 MBR scan

18:08:41.356    Disk 0 unknown MBR code

18:08:41.359    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS       469210 MB offset 63

18:08:41.398    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS         7726 MB offset 960944040

18:08:41.407    Disk 0 scanning sectors +976768065

18:08:41.470    Disk 0 scanning C:\Windows\system32\drivers

18:08:53.491    Service scanning

18:09:25.215    Modules scanning

18:09:40.102    Disk 0 trace - called modules:

18:09:40.117    ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll 

18:09:40.122    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85d8b358]

18:09:40.127    3 CLASSPNP.SYS[8a7ab8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x843fa030]

18:09:41.836    AVAST engine scan C:\Windows

18:09:47.351    AVAST engine scan C:\Windows\system32

18:10:15.136    File: C:\Windows\system32\d3dx10_33G.dll  **INFECTED** Win32:Malware-gen

18:15:18.721    AVAST engine scan C:\Windows\system32\drivers

18:15:45.574    AVAST engine scan C:\Users\christoph

18:31:11.493    AVAST engine scan C:\ProgramData

18:37:22.294    Scan finished successfully

18:39:55.560    Disk 0 MBR has been saved successfully to "C:\Users\christoph\Desktop\MBR.dat"

18:39:55.567    The log file has been saved successfully to "C:\Users\christoph\Desktop\aswMBR.txt"

cosinus

24.10.2012 19:18

Code:

C:\Windows\system32\d3dx10_33G.dll

Bitte diese Datei mal bei uns hochladen => http://www.trojaner-board.de/54791-a...tml#post349565

christoph03

25.10.2012 05:27

Der Versuch, diese Datei hochzuladen, scheitert vorerst. Die Einstellungen im
Bereich Ordner- und Suchoptionen passen.
In einem Fenster wird mir aber nach Anklicken von "Öffnen" der Datei angezeigt, daß ich nicht über die Rechte zu diesem Vorgang verfüge, und ich mich an Besitzer oder Administrator wenden soll.
Die Benutzerkontensteuerung, die ich standardmäßig abgeschaltet hatte, wollte ich aktivieren und neustarten, merkwürdigerweise ist der Haken , der das Aktivieren anzeigt, offenbar automatisch entfernt. Anderseits öffnen sich permanent die für diese vista-Steuerung obligaten Fenster, die zur Zustimmung zur Fortsetzung auffordern. Ich kenne mich da zu wenig aus.
Daher wollte ich nicht schon wieder einen Fehler machen und hab vorerst weitere Versuche gestoppt. Was könnte ich ändern, um die Datei doch hochzuladen, oder haben Sie einen anderen Tip?

Herzlich c.

cosinus

25.10.2012 10:37

Beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":Files" muss mitkopiert werden!!!)

Code:

:Files

C:\Windows\system32\d3dx10_33G.dll

ipconfig /flushdns /c

:Commands

[emptytemp]

christoph03

25.10.2012 14:04

Das Fixen hat zwar begonnen, danach sind alle icons vom desktop verschwunden und auf der Randzeile von OTL ist die Information "Keine Rückmeldung" angezeigt worden. Der Maus Cursor hat sich in einen drehenden Kreis verwandelt, das ist bei meinem pc das Zeichen, daß etwas gesucht oder versucht wird.
Letztlich ist OTL auf diese Weise abgestürzt, es ist kein Ende signalisiert worden und auch keine logfile. Ich mußte den PC herunterfahren, weil keine Eingaben mehr angenommen wurden.
Die.dll Datei ist verschoben worden in den C:\_OTL Ordner.
Ein erster Probelauf im Google war erfolgreich, es erfolgt keine Umleitung mehr.
"Alle Programme schließen", umfaßt das auch die Anzeigen im task Manager?
Oder nur die von mir manuell gestarteten Programme, wie IE, oder Module aus dem Startmenü? Virenscanner Symantec ist die ganze Zeit abgeschaltet.
Herzlich C.

cosinus

25.10.2012 14:57

Zitat:

Die.dll Datei ist verschoben worden in den C:\_OTL Ordner.

Sehr schön, dann lad sie mal jetzt bei uns in den Upchannel

christoph03

25.10.2012 17:04

Jetzt hab ich die Datei aus dem OTL-Ordner im Upchannel hochgeladen.
Herzlich c.

markusg

25.10.2012 17:32

nur eine kurze bitte, wenn es mir erlaubt ist.
da wir die dll einsenden wollen an antimalware hersteller:
downloade get info:
http://markusg.trojaner-board.de/GetInfo.exe
doppelklicke die .exe
im selben ordner wird nun eine .txt erstellt:
summary-info.txt
diese doppelklicken und deren inhalt posten.

und, eine frage.
diese malware wird meist über gehackte websites verbreitet, und zwar, wenn du in einer suchmaschine einen begriff eingibst, wirst du, beim besuch einer seite aufgefordert, etwas runterzuladen, ist meist ein archiv.
kannst du dich erinnern, dass soetwas vor dem infektionszeitpunkt passiert ist? falls ja, welcher suchbegriff, bzw welche seite hast du aufgerufen, bzw, hast du das archiv noch?
falls du das archiv noch hast, lads mal im up-channel hoch, und infos über den suchbegriff an mich als private nachicht.

christoph03

26.10.2012 07:04

Guten Morgen,

hier sende ich noch die gewünschte Textdatei

Code:

System volume information:         dwHighDateTime = 0x1c89014,dwLowDateTime = 0x8303ea0d

System32:                         dwHighDateTime = 0x1c6fe70,dwLowDateTime = 0xa3cd0a16

dwSerialNumber = 0x1e0f33b6

Zu der anderen Frage muß ich noch ein wenig recherchieren, und melde dann wieder.
Herzlichen Dank für Ihre Hilfe, herzlich c.

In der letzten halben Stunde habe ich den "Verlauf" der besuchten Seiten geprüft.

Soweit ich mich erinnern kann, habe ich am Morgen des 16. Oktober - das ist der Tag, an dem ich die Infektion bemerkt habe, sie war eindeutig davor nicht zu erkennen - einen Suchbegriff wie "stereo view" oder " fundamental matrix" verwendet gemeinsam mit "software". Dabei ist mir unter anderem die Seite
devernay.free.fr angezeigt worden, die ich angeklickt habe. Das weiß ich deshalb noch, weil die Verbindung zunächst geblockt war und erst auf Umwegen (Eingabe in der obersten url-Zeile) hergestellt wurde. Außerdem enthält die Seite einen Unterordner "hacks", was mir merkwürdig vorgekommen ist. Ich möchte aber niemanden explizit verdächtigen, dazu kenne ich mich viel zu wenig aus.
Heruntergeladen habe ich von dort nichts, es ist zwar nicht mehr hundertprozentig nachzuprüfen, aber ich bin mir fast sicher.
Viele Grüße
C.

markusg

26.10.2012 13:00

danke das teste ich, und, wenn ne seite geblockt wird, hat das schon seinen grund, solche mechanissmen sind natürlich sinnlos, wenn sie keiner beachtet, dann muss man sich aber auch nicht wundern, wenn man dann seinen pc mit malware infiziert :-)

cosinus

26.10.2012 13:04

Code:

Disk 0 unknown MBR code

Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast

Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

christoph03

26.10.2012 14:18

Bevor ich mit dem Fixen beginne, hab ich noch eine Frage, die mich wahrscheinlich als ziemlich ahnungslos enttarnt:

Wie sichere ich meine Daten, und welche sind betroffen?
Danke im voraus!

cosinus

26.10.2012 14:28

Gut dass du fragst ;)

Da gibt es mehrere Möglichkeiten. Das einfachste wäre es wohl alle Dateien und wichtigen persönlichen Ordner auf eine ext. Platte zu kopieren. Dann hast du deine Daten gesichert, zB nach einem Systemcrash kannst du Windows dann manuell sauber neu installieren und die Daten aus der einfachen manuellen Backupmethode einfach wieder zurückkopieren

Man kann aber auch Abbilder eines gesamten System (besser gesagt der gesamten Platte oder von einzelnen oder auch mehreren Partitionen erstellen), Denkanstoß hier => http://www.trojaner-board.de/115678-...r-backups.html

Wenn du eine Festplatte von WesternDigital oder Seagate hast, bekommst du ein AcronisTrueImage für lau :) (das aber ohne SecureZone soweit ich weiß, ich empfehle aber eh Images auf externe Platten, diese sollten nur angesteckt sein wenn man das Backup braucht bzw. ein Backup erstellen muss!)

WesternDigtal => Acronis True Image WD Edition Download - Acronis True Image WD Edition 13.0
Seagate => Seagate DiscWizard Download - Seagate DiscWizard 13.0

Mit Windows7 hat man auch ein Bordmitteln für die Imageerstellung zB hier => [Anleitung] Komplettes Image-Backup (Systemabbild) von Windows 7 erstellen - Anleitungen / Tutorials / FAQ (Windows 7)

Gibt auch andere Programme, wie zB Drive Snapshot - Disk Image Backup leicht gemacht

christoph03

26.10.2012 15:00

Meine Fragen gehen noch weiter, mein Unwissen auch

Weder hab ich eine externe Festplatte verfügbar - in Ö ist heute Feiertag! -
noch wüßte ich wie ich sie installieren bzw. anschließen sollte.
Ist auch eine Kopie auf mein freies Laufwerk E: - eine zweite interne Festplatte- möglich?

cosinus

26.10.2012 15:09

Dann lass den MBR-Fix erstmal sein, aber um Backups sollte man sich immer regelmäßig kümmern!
Was machst du denn wenn die interne Platte kaputtgeht oder du versehentlich Daten löscht?

Zitat:

Ist auch eine Kopie auf mein freies Laufwerk E: - eine zweite interne Festplatte- möglich?

Naja das geht auch. Aber Backups solten auf externe Medien gemacht werden. Ganz wichtige Daten werden zweimal gesichert auf zwei voneinander unabhängige Datenträger.

christoph03

26.10.2012 15:19

Regelmäßig hab ich backups über mein Norton Antivirenprogramm gemacht, ich glaube, da landen die Daten auf einem externen Server.
Soll ich das machen?
Der Ahnungslose

cosinus

26.10.2012 18:09

Hm soll angeblich die gesamte Platte sichern können. Erfahrungen hab ich damit nicht, ich mach lieber selber Backups auf externe Medien.

Alle Zeitangaben in WEZ +1. Es ist jetzt 11:56 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20