Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   WIndows 8 immer wieder SPAM Mails vom Web.de Account (https://www.trojaner-board.de/171578-windows-8-immer-spam-mails-web-de-account.html)

uta89 27.09.2015 17:52
WIndows 8 immer wieder SPAM Mails vom Web.de Account
 
Sehr geehrtes Team vom Trojaner Board,

ich habe nun schon das dritte mal innerhalb ca. eines Monats beim Aufrufen meiner privaten Mailadresse (web.de) zahlreiche Nachrichten "Mail delivery failed" u.ä. bekommen, sowie auch Nachrichten von Bekannten, dass sie SPAM Mails von meinem Absender bekommen (meist mit dem Titel Fdw: read this oder Fdw: news). In meinem "Gesendet" Ordner finden sich diese Nachrichten nicht. Beim ersten Mal meldete ich diese Nachrichten sowohl bei web.de als auch bei google als Spam unter Angabe der vollständigen Header, beim zweiten Mal löschte ich auf Anraten eines Bekannten mein gesamtes Postfach sowie Adressbuch, und alle weiteren Ordner, damit nicht mehr auf die Kontaktdaten zugegriffen werden konnte. Beide Male änderte ich nach den unternommenen Schritten das Passwort. Heute habe ich nun schon wieder eine beträchtliche Anzahl dieser Nachrichten, die Mails scheinen auch jetzt noch an alle ehemaligen Adressen meines Postfaches zu gehen. Zusätzlich tritt das Phänomen auf, dass mich Mails mit denselben Titeln (Fdw. news o.ä.) erreichen, die laut Absendername von meinen Bekannten stammen, jedoch meine Absendeadresse aufweisen. Auch scheinen diese Spammails nicht nur an meine Bekannten zu gehen, sondern wenn diese eine Mail an mehrere Absender schickten, unter denen ich war, bekamen anscheinend alle in dieser Liste diese SPAMs. Ich weiß nun nicht mehr, was ich machen soll, und wende mich hilfesuchend an Sie.

Defogger fand nichts beim Scannen, daher gab es keine Logdatei.

Die Logdatei FRST. txt:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015
durchgeführt von Uta (Administrator) auf UTA2 (27-09-2015 17:28:04)
Gestartet von C:\Users\Uta\Downloads
Geladene Profile: Uta (Verfügbare Profile: Uta)
Platform: Windows 8.1 Connected (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
(McAfee, Inc.) C:\Program Files\mcafee\VirusScan\mcods.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
() C:\Program Files (x86)\McAfee\SiteAdvisor\Download\s4k8.m.exe
(McAfee, Inc.) C:\Windows\Temp\SiteAdvisor{9846876D-91A4-49D6-A9DD-39EAB1DE9039}\saInst.exe
(McAfee, Inc.) C:\Windows\Temp\SiteAdvisor{9846876D-91A4-49D6-A9DD-39EAB1DE9039}\mcinst.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWXDetector.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9ABADE37-EFFF-4104-9B14-FBD430AC6260}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{BCE65BE8-0AF6-4318-B481-C25748211248}: [DhcpNameServer] 40.52.1.201 40.52.1.203

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected
HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1274317435-2679677014-2603788777-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1274317435-2679677014-2603788777-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_15_35&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzyyE0CyE0A0D0F0B0F0C0BtN0D0Tzu0StCtAtAtCtN1L2XzutAtFtCtBtFyDtFtCtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StA0D0E0FtBtAtDyDtGyEtCyB0DtG0CyDyDzytGtBzy0EzztGtCtByByCyEyC0CyD0BzzyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0CyDzz0AzzzytCtG0C0EtC0AtGyEyDtAyCtGzzyD0C0BtG0C0BtByEtCyB0E0DyE0CyB0B2QtN0A0LzuyEtN1B2Z1V1T1S1NzuzyyEtA%26cr%3D1303607512%26a%3Dwncy_gmmedply_15_35%26os%3DWindows%2B8.1%2BConnected&p={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-08-04] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
BHO-x32: Kein Name -> {E6E66045-E911-4C01-961D-32387BF12768} -> C:\Users\Uta\AppData\LocalLow\Browser-Security\safe_url.dll [2015-07-22] ()
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-08-25] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-09-15] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\MSC\McSnIePl64.dll [2015-08-21] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-08-21] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Homepage: web.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-21] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-08-21] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-21] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-08-21] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-08-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF user.js: detected! => C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\user.js [2015-08-25]
FF SearchPlugin: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\searchplugins\McSiteAdvisor.xml [2015-09-27]
FF SearchPlugin: C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\searchplugins\search-provided-by-yahoo.xml [2015-08-25]
FF Extension: Browser-Security - C:\Users\Uta\AppData\Roaming\Mozilla\Firefox\Profiles\c3x83gr8.default\Extensions\firefox@browser-security.de.xpi [2015-08-25]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: Kein Name - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-09-18]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-08-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-09-18]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-09-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 0007541442951330mcinstcleanup; C:\Windows\TEMP\000754~1.EXE [882000 2015-06-18] (McAfee, Inc.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2774104 2015-09-11] (Microsoft Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2014-10-29] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [157928 2015-09-15] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [782608 2015-08-21] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-07-17] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-06-29] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-07-15] (McAfee, Inc.)
R3 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-06-29] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-03-31] (ASUS Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [77536 2015-07-02] (McAfee, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-28] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [412440 2015-07-02] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-07-02] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496888 2015-07-02] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-07-02] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [529080 2015-06-28] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [109728 2015-06-28] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-09-15] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-07-02] (McAfee, Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3421040 2014-04-30] (Realtek Semiconductor Corporation                          )
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-27 17:29 - 2015-09-27 17:29 - 00047046 _____ C:\Users\Uta\Desktop\FRST.txt
2015-09-27 17:29 - 2015-09-27 17:29 - 00022123 _____ C:\Users\Uta\Desktop\Addition 2.txt
2015-09-27 17:28 - 2015-09-27 17:28 - 00022123 _____ C:\Users\Uta\Desktop\Addition.txt
2015-09-27 17:17 - 2015-09-27 17:27 - 00022123 _____ C:\Users\Uta\Downloads\Addition.txt
2015-09-27 17:08 - 2015-09-27 17:28 - 00019401 _____ C:\Users\Uta\Downloads\FRST.txt
2015-09-27 17:06 - 2015-09-27 17:28 - 00000000 ____D C:\FRST
2015-09-27 17:04 - 2015-09-27 17:04 - 02192384 _____ (Farbar) C:\Users\Uta\Downloads\FRST64.exe
2015-09-27 17:02 - 2015-09-27 17:02 - 00050477 _____ C:\Users\Uta\Downloads\Defogger.exe
2015-09-27 17:02 - 2015-09-27 17:02 - 00000468 _____ C:\Users\Uta\Downloads\defogger_disable.log
2015-09-27 17:02 - 2015-09-27 17:02 - 00000000 _____ C:\Users\Uta\defogger_reenable
2015-09-27 16:42 - 2015-09-27 16:42 - 00380416 _____ C:\Users\Uta\Downloads\7r03gs8p.exe
2015-09-27 16:42 - 2015-09-27 16:42 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-09-21 12:49 - 2015-09-25 14:18 - 00000000 ____D C:\Users\Uta\Desktop\Archivo di Stato Torino 21.09. - 28.09.15
2015-09-17 11:28 - 2015-09-17 11:33 - 00000000 ____D C:\Users\Uta\Documents\Uni
2015-09-17 11:27 - 2015-09-17 11:27 - 00000000 ____D C:\Users\Uta\Documents\Tutorium Bohde
2015-09-17 11:25 - 2015-09-17 11:26 - 00000000 ____D C:\Users\Uta\Documents\roter Stick
2015-09-17 10:48 - 2015-09-17 11:24 - 00000000 ____D C:\Users\Uta\Documents\M.A
2015-09-17 10:47 - 2015-09-17 10:48 - 00000000 ____D C:\Users\Uta\Documents\Hausarbeiten
2015-09-17 10:37 - 2015-09-17 10:47 - 00000000 ____D C:\Users\Uta\Documents\grüner Stick
2015-09-17 10:37 - 2015-09-17 10:37 - 00000000 ____D C:\Users\Uta\Documents\Finanzen
2015-09-17 10:37 - 2015-09-17 10:37 - 00000000 ____D C:\Users\Uta\Documents\DVD Liste
2015-09-16 08:30 - 2015-09-16 08:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-16 08:29 - 2015-09-16 09:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-09-16 08:29 - 2015-09-16 08:29 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-16 08:28 - 2015-09-16 09:41 - 00000000 ____D C:\Users\Uta\Desktop\mbar
2015-09-16 08:28 - 2015-09-16 08:28 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-16 08:26 - 2015-09-16 08:27 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Uta\Downloads\mbar-1.09.3.1001.exe
2015-09-09 22:19 - 2015-09-10 06:35 - 00000000 ____D C:\Users\Uta\Desktop\WS 15-16
2015-09-09 02:24 - 2015-08-22 20:19 - 25188352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 02:24 - 2015-08-22 19:35 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 02:24 - 2015-08-22 19:34 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 02:24 - 2015-08-22 19:22 - 19856384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 02:24 - 2015-08-22 19:21 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 02:24 - 2015-08-22 19:20 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 02:24 - 2015-08-22 18:55 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 02:24 - 2015-08-22 18:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 02:24 - 2015-08-22 18:50 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-09-09 02:24 - 2015-08-22 18:45 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 02:24 - 2015-08-22 18:44 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 02:24 - 2015-08-22 18:41 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 02:24 - 2015-08-22 18:41 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 02:24 - 2015-08-22 18:39 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 02:24 - 2015-08-22 18:28 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 02:24 - 2015-08-22 18:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 02:24 - 2015-08-22 18:23 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-09-09 02:24 - 2015-08-22 18:22 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 02:24 - 2015-08-22 18:20 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-09-09 02:24 - 2015-08-22 18:18 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 02:24 - 2015-08-22 18:18 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 02:24 - 2015-08-22 18:18 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 02:24 - 2015-08-22 18:14 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 02:24 - 2015-08-22 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 02:24 - 2015-08-22 18:00 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 02:24 - 2015-08-22 17:56 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 02:24 - 2015-08-22 17:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 02:21 - 2015-09-03 04:18 - 02531400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-09 02:21 - 2015-09-03 04:17 - 01903848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-09 02:21 - 2015-09-02 20:48 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-09 02:21 - 2015-09-02 19:09 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-09 02:21 - 2015-08-27 04:48 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 02:21 - 2015-08-26 20:00 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 02:21 - 2015-08-26 20:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 02:21 - 2015-08-26 16:46 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 02:21 - 2015-08-26 16:29 - 02240512 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 02:21 - 2015-08-26 16:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 02:21 - 2015-08-26 16:27 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 02:21 - 2015-08-26 16:26 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 02:21 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-09 02:21 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-09 02:21 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-09 02:21 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-09 02:21 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-09 02:20 - 2015-07-30 19:18 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 02:20 - 2015-07-30 18:22 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 02:15 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-09-09 02:15 - 2015-07-03 16:00 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-09-09 02:15 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-09-09 02:14 - 2015-09-02 04:56 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 02:14 - 2015-09-02 04:55 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 02:14 - 2015-09-02 04:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 02:14 - 2015-09-02 04:17 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 02:14 - 2015-09-02 04:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 02:14 - 2015-08-03 23:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 02:14 - 2015-08-03 23:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 02:14 - 2015-08-01 16:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 02:14 - 2015-08-01 05:47 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2015-09-09 02:14 - 2015-08-01 05:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2015-09-09 02:14 - 2015-08-01 05:38 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 02:14 - 2015-08-01 05:37 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2015-09-09 02:14 - 2015-08-01 05:37 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2015-09-09 02:14 - 2015-07-22 16:34 - 02775552 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-09 02:14 - 2015-07-22 16:33 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-09-09 02:14 - 2015-07-22 16:25 - 02461184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-09 02:14 - 2015-07-22 16:25 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 02:14 - 2015-07-18 20:31 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-09-09 02:14 - 2015-07-18 20:29 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-09-09 02:14 - 2015-07-18 20:29 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-09-09 02:14 - 2015-07-18 20:27 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-09-09 02:14 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2015-09-09 02:14 - 2015-07-13 21:10 - 00411455 _____ C:\Windows\system32\ApnDatabase.xml
2015-09-09 02:14 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-09-03 17:10 - 2015-09-14 09:21 - 00000000 ____D C:\Users\Uta\AppData\Roaming\Foxit Software
2015-09-02 06:42 - 2015-09-02 06:42 - 00000000 ____D C:\Users\Uta\AppData\Local\Macromedia
2015-09-02 06:31 - 2015-09-27 17:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-02 06:31 - 2015-09-21 22:16 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-02 06:30 - 2015-09-02 06:31 - 00000000 ____D C:\Users\Uta\AppData\Local\Adobe
2015-09-01 07:46 - 2015-09-01 07:46 - 00000000 ____D C:\Users\Uta\Documents\Benutzerdefinierte Office-Vorlagen
2015-09-01 07:43 - 2015-09-01 07:43 - 00000000 __RHD C:\MSOCache
2015-08-30 22:29 - 2015-08-30 22:29 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-08-28 19:35 - 2015-08-28 19:35 - 00000000 ____D C:\Users\Uta\AppData\Local\GWX
2015-08-28 10:45 - 2015-08-28 10:45 - 00001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001178 _____ C:\Users\Public\Desktop\VideoPad Video-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001174 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2015-08-28 10:45 - 2015-08-28 10:45 - 00001162 _____ C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2015-08-28 10:44 - 2015-09-04 12:41 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2015-08-28 10:44 - 2015-08-28 11:36 - 00000000 ____D C:\Users\Uta\AppData\Roaming\NCH Software
2015-08-28 10:44 - 2015-08-28 10:45 - 00000000 ____D C:\ProgramData\NCH Software
2015-08-28 10:44 - 2015-08-28 10:45 - 00000000 ____D C:\Program Files (x86)\NCH Software
2015-08-28 10:44 - 2015-08-28 10:44 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Videorekorder.lnk
2015-08-28 10:44 - 2015-08-28 10:44 - 00001116 _____ C:\Users\Public\Desktop\Debut Videorekorder.lnk
2015-08-28 10:41 - 2015-08-28 10:42 - 01558752 _____ (NCH Software) C:\Users\Uta\Downloads\debutpsetup.exe
2015-08-28 10:31 - 2015-08-28 10:31 - 00000000 ____D C:\Users\Uta\Tracing
2015-08-28 10:29 - 2015-08-28 10:29 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-28 10:29 - 2015-08-28 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-28 10:13 - 2015-08-28 10:13 - 00001323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-08-28 10:13 - 2015-08-28 10:13 - 00000000 ____D C:\Windows\de
2015-08-28 10:11 - 2015-08-28 10:11 - 00001392 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-08-28 10:11 - 2015-08-28 10:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-28 10:09 - 2015-08-28 10:11 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-08-28 10:09 - 2015-08-28 10:09 - 00000000 ____D C:\Windows\PCHEALTH
2015-08-28 10:07 - 2015-08-28 10:07 - 00000194 _____ C:\Windows\DirectX.log
2015-08-28 10:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-08-28 10:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-08-28 10:07 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-08-28 10:07 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-08-28 10:07 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-08-28 10:07 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-08-28 10:07 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-08-28 09:56 - 2015-09-12 10:03 - 00000000 ____D C:\Users\Uta\AppData\Local\Windows Live
2015-08-28 09:56 - 2015-08-28 09:56 - 01245384 _____ (Microsoft Corporation) C:\Users\Uta\Downloads\wlsetup-web.exe
2015-08-28 05:41 - 2015-09-15 03:18 - 00812008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-28 05:41 - 2015-09-15 03:18 - 00178152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-28 05:28 - 2015-08-28 05:42 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-28 05:28 - 2015-08-28 05:28 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-28 00:33 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 00:33 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-27 17:14 - 2015-08-25 02:14 - 00000272 _____ C:\Windows\Tasks\UpdateTask.job
2015-09-27 17:14 - 2015-08-24 22:51 - 01747174 _____ C:\Windows\WindowsUpdate.log
2015-09-27 17:05 - 2015-08-24 22:55 - 00003906 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CF450DAB-1926-45BC-8A74-71EC672ECC45}
2015-09-27 17:02 - 2015-08-24 22:51 - 00000000 ____D C:\Users\Uta
2015-09-27 17:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-09-27 16:42 - 2015-08-25 02:00 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-09-27 16:28 - 2015-08-24 22:55 - 00000126 _____ C:\Users\Uta\AppData\Roaming\sp_data.sys
2015-09-27 08:42 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-09-26 20:08 - 2015-08-24 22:57 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1274317435-2679677014-2603788777-1001
2015-09-25 10:16 - 2014-11-09 12:31 - 00765582 _____ C:\Windows\system32\perfh007.dat
2015-09-25 10:16 - 2014-11-09 12:31 - 00159366 _____ C:\Windows\system32\perfc007.dat
2015-09-25 10:16 - 2014-03-18 17:25 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-25 06:42 - 2015-08-25 01:24 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-09-24 18:45 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-09-22 21:53 - 2014-12-18 13:55 - 00000000 ____D C:\ProgramData\McAfee
2015-09-22 21:48 - 2015-08-25 01:48 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-09-22 17:21 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-09-21 14:42 - 2013-08-22 16:46 - 00026831 _____ C:\Windows\setupact.log
2015-09-20 20:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-09-18 22:21 - 2014-03-18 10:13 - 00012190 _____ C:\Windows\PFRO.log
2015-09-18 22:21 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-18 22:21 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-09-18 07:35 - 2015-08-24 22:51 - 00000000 ____D C:\Users\Uta\AppData\Local\Packages
2015-09-17 08:14 - 2015-08-25 20:14 - 00000184 _____ C:\Users\Uta\AppData\Roaming\WB.CFG
2015-09-16 11:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-09-12 20:34 - 2013-08-22 16:44 - 00371968 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-12 11:37 - 2014-03-18 17:03 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-12 11:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-11 06:02 - 2015-08-25 01:32 - 00000000 ___RD C:\Users\Uta\OneDrive
2015-09-11 06:01 - 2015-08-25 01:32 - 00003084 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1274317435-2679677014-2603788777-1001
2015-09-11 05:44 - 2015-08-27 19:49 - 00000000 ____D C:\Windows\system32\MRT
2015-09-04 06:44 - 2015-08-25 19:59 - 00000000 ____D C:\Users\Uta\AppData\Roaming\Skype
2015-09-04 01:17 - 2014-11-09 06:59 - 00000000 ____D C:\ProgramData\Skype
2015-08-31 07:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-31 07:37 - 2014-11-09 12:31 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\winrm
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\WCN
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\winrm
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\WCN
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\slmgr
2015-08-31 07:37 - 2014-03-18 17:00 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\MUI
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\MUI
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Com
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\IME
2015-08-31 07:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Help
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe
2015-08-31 07:37 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-08-31 07:36 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-31 07:36 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-08-31 07:36 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing
2015-08-31 07:35 - 2013-08-22 17:36 - 00000000 ___SD C:\Windows\system32\dsc
2015-08-31 07:35 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-08-30 00:45 - 2014-11-09 13:35 - 00000000 ____D C:\Windows\Panther
2015-08-30 00:18 - 2015-07-10 19:28 - 00000000 ___HD C:\$Windows.~BT
2015-08-29 22:15 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-29 06:52 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppCompat
2015-08-28 05:41 - 2013-08-22 17:37 - 00004167 _____ C:\Windows\DtcInstall.log
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sr-Latn-RS
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2015-08-28 05:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sppui
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-08-28 05:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sppui
2015-08-28 05:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-08-28 05:29 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-08-28 05:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-28 05:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-24 22:55 - 2015-09-27 16:28 - 0000126 _____ () C:\Users\Uta\AppData\Roaming\sp_data.sys
2015-08-25 20:14 - 2015-09-17 08:14 - 0000184 _____ () C:\Users\Uta\AppData\Roaming\WB.CFG
2014-12-18 13:36 - 2014-12-18 13:36 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-09 06:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-11-09 06:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-11-09 06:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS


Einige Dateien in TEMP:
====================
C:\Users\Uta\AppData\Local\Temp\ExPromo.exe
C:\Users\Uta\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\Uta\AppData\Local\Temp\McCSPInstall.dll
C:\Users\Uta\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-24 17:20

==================== Ende von FRST.txt ============================

Die Logdatei FRST Addition:
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-09-2015
durchgeführt von Uta (2015-09-27 17:39:32)
Gestartet von C:\Users\Uta\Downloads
Windows 8.1 Connected (X64) (2015-08-24 20:51:06)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1274317435-2679677014-2603788777-500 - Administrator - Disabled)
Gast (S-1-5-21-1274317435-2679677014-2603788777-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1274317435-2679677014-2603788777-1003 - Limited - Enabled)
Uta (S-1-5-21-1274317435-2679677014-2603788777-1001 - Administrator - Enabled) => C:\Users\Uta

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.03.0006 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Browser-Security (HKLM-x32\...\Browser-Security) (Version: 1.0.7.0 - Vondos Media GmbH)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debut Videorekorder (HKLM-x32\...\Debut) (Version: 2.17 - NCH Software)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{FC76E6BB-7CBB-4CD6-8178-3BCADC0526C3}) (Version: 6.0.62.801 - Foxit Corporation)
Free YouTube Download version 3.2.61.805 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.61.805 - DVDVideoSoft Ltd.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5228 - Gretech Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3925 - Intel Corporation)
Intel(R) Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.0.0.1002 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 14.0.4121 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.167 - McAfee, Inc.)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4753.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.2 (x86 de)) (Version: 40.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.2 - Mozilla)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7224 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Search Provided by Yahoo (HKLM-x32\...\Wincy) (Version:  - Wincy)
Skype™ 7.9 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.9.103 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 4.02 - NCH Software)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.12 - NCH Software)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.11.399 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse  (03/18/2014 6.0.0.35) (HKLM\...\DAA6E0EEB715139C1CEA332C78AB4609FB3C211B) (Version: 03/18/2014 6.0.0.35 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

04-09-2015 01:07:04 McAfee  Vulnerability Scanner
11-09-2015 05:10:42 Windows Update
22-09-2015 17:18:46 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0742A6A7-97B7-4490-B189-48CE4F285BCA} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-09-02] (ASUSTek Computer Inc.)
Task: {109617BA-DEE5-4C22-A69A-AE90438D02BF} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {12FA83FA-37CA-42D6-A32A-F7E76E18F6CC} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {14B4FFD7-5987-47CF-A347-EA37CDACEA69} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {20714524-5825-4737-BFAF-7741DD226C2A} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {43D1FBA3-13E2-439B-9770-F372B07260EC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {4CA3C184-1486-4E7D-8764-3403B500FAD2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21] (Adobe Systems Incorporated)
Task: {5F85B721-3033-472B-9143-7190FCD0014A} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-09-11] (ASUS)
Task: {91F057D6-6115-416B-85D4-55F5DE262109} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1274317435-2679677014-2603788777-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {9F582B9A-8B44-4F0D-BA31-43456031653B} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {A16FFF53-CF67-4941-A4EF-A88E9B3D8433} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {A2EB4732-1CB5-4B88-8028-ABAC7CA9FEFE} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-04-15] (Realtek Semiconductor)
Task: {A325748F-7D0D-46DC-9EF8-A1FA7BABC7C8} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10] (Realtek Semiconductor)
Task: {ACD97FF8-D038-4CA4-BD38-D6E0C99BA7AB} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {B6F470B8-20D3-461E-8977-98FAC6B399E5} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {CF6552D4-A947-4B7B-81B1-DCBEF68CE80E} - System32\Tasks\UpdateTask => C:\Users\Uta\AppData\Local\{E666D~1\UNINST~1.EXE [2015-08-25] ()
Task: {D364E31D-42BC-4E9D-BD2C-3ED35F4736EC} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)
Task: {E32BC5A4-BDD0-4ABB-BB12-0B1740CDB0A6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\UpdateTask.job => C:\Users\Uta\AppData\Local\{E666D~1\UNINST~1.EXE

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-25 01:24 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-02-12 14:08 - 2015-02-12 14:08 - 00012288 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
2015-09-27 17:19 - 2015-09-27 17:20 - 07590976 _____ () C:\Program Files (x86)\McAfee\SiteAdvisor\Download\s4k8.m.exe
2014-09-11 20:31 - 2014-09-11 20:31 - 00037424 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-09-11 20:31 - 2014-09-11 20:31 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2013-04-27 10:24 - 2013-04-27 10:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1274317435-2679677014-2603788777-1001\Control Panel\Desktop\\Wallpaper -> E:\PC Sicherung 03.07.2015\Bilder\599.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{37991CF5-AF94-406C-A6E5-AB5D38AAD189}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCED65CF-F5AC-4496-878B-9CCEDCEE01CA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BD21B961-C15C-4B29-A2CC-DFE0799CD460}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E67653E3-8B8B-4227-AAF1-E1C998905FCD}] => (Allow) C:\Users\Uta\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{C142F4D4-E98B-4AD3-AADE-B9D13DA3468D}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{20C7C20B-C88B-4D8B-AAEA-5CDFFFDAF954}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5CD1DF00-5D5B-4FC7-BF6B-E5B37EECB75D}] => (Allow) LPort=2869
FirewallRules: [{2A742CE3-F64B-4BA9-8492-D71F9837831A}] => (Allow) LPort=1900

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/26/2015 07:50:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: OLEAUT32.dll, Version: 6.3.9600.17560, Zeitstempel: 0x5493ae73
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005410
ID des fehlerhaften Prozesses: 0x1b9c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5

Error: (09/25/2015 01:49:38 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (09/25/2015 10:50:29 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4

Error: (09/25/2015 10:50:28 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (09/25/2015 10:50:04 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description:

Error: (09/25/2015 10:50:04 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL4

Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\Windows\system32\esentprf.dll4

Error: (09/25/2015 10:50:03 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (09/24/2015 10:31:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4


Systemfehler:
=============
Error: (09/27/2015 04:21:58 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst McODS erreicht.

Error: (09/25/2015 12:58:28 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.

Error: (09/25/2015 12:58:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.

Error: (09/25/2015 12:58:23 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 70. Der Windows-SChannel-Fehlerstatus lautet: 105.

Error: (09/24/2015 05:21:25 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (09/24/2015 05:20:33 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/24/2015 05:20:32 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}

Error: (09/24/2015 02:30:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (09/23/2015 05:05:04 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/23/2015 05:04:33 PM) (Source: DCOM) (EventID: 10010) (User: Uta2)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Celeron(R) CPU N2830 @ 2.16GHz
Prozentuale Nutzung des RAM: 88%
Installierter physikalischer RAM: 1934.69 MB
Verfügbarer physikalischer RAM: 222.52 MB
Summe virtueller Speicher: 7102.96 MB
Verfügbarer virtueller Speicher: 1517.53 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:42.58 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:258.34 GB) (Free:211.26 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 543DAE44)

Partition: GPT.

==================== Ende von Addition.txt ============================

Die Logdatei von Gmer:
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-09-27 18:19:36
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000021 HGST_HTS545050A7E680 rev.GG2OAF10 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\Uta\AppData\Local\Temp\fxldapob.sys


---- Kernel code sections - GMER 2.1 ----

.text  C:\Windows\System32\win32k.sys!W32pServiceTable      fffff96000190300 15 bytes [00, 0B, F2, 01, 00, 06, 6C, ...]
.text  C:\Windows\System32\win32k.sys!W32pServiceTable + 16  fffff96000190310 8 bytes [00, D7, FB, FF, 00, D3, CD, ...]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [888:6048]              fffff960009132d0

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                unknown MBR code

---- EOF - GMER 2.1 ----
Ich hoffe, Sie können mir weiterhelfen.
Mit freundlichen Grüßen
Uta

schrauber 27.09.2015 17:59
hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

uta89 27.09.2015 21:21
LOG Dateien Malwarebytes und TDSSKiller
 
Sehr geehrter Team von Trojaner Board,

vielen Dank für Ihre schnelle Hilfe, ich habe beide Programme nun ausgeführt, laut den Scans wurde dabei kein Virus etc. gefunden.
Hier die LOG Dateien:

Malewarebytes:
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.09.27.04
  rootkit: v2015.09.22.01

Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.18036
Uta :: UTA2 [administrator]

27.09.2015 20:36:14
mbar-log-2015-09-27 (20-36-14).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 346728
Time elapsed: 1 hour(s), 17 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
TDSSKiller:
Code:
21:58:37.0306 0x1228  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
21:58:37.0306 0x1228  UEFI system
21:58:47.0472 0x1228  ============================================================
21:58:47.0472 0x1228  Current date / time: 2015/09/27 21:58:47.0472
21:58:47.0472 0x1228  SystemInfo:
21:58:47.0472 0x1228 
21:58:47.0472 0x1228  OS Version: 6.3.9600 ServicePack: 0.0
21:58:47.0472 0x1228  Product type: Workstation
21:58:47.0472 0x1228  ComputerName: UTA2
21:58:47.0472 0x1228  UserName: Uta
21:58:47.0472 0x1228  Windows directory: C:\Windows
21:58:47.0472 0x1228  System windows directory: C:\Windows
21:58:47.0473 0x1228  Running under WOW64
21:58:47.0473 0x1228  Processor architecture: Intel x64
21:58:47.0473 0x1228  Number of processors: 2
21:58:47.0473 0x1228  Page size: 0x1000
21:58:47.0473 0x1228  Boot type: Normal boot
21:58:47.0473 0x1228  ============================================================
21:58:47.0805 0x1228  System UUID: {02958EBA-DAEF-D7C0-CB98-BD5F29A38E1E}
21:58:48.0597 0x1228  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:58:48.0608 0x1228  ============================================================
21:58:48.0609 0x1228  \Device\Harddisk0\DR0:
21:58:48.0613 0x1228  GPT partitions:
21:58:48.0614 0x1228  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {19DFF712-B913-46B9-88CC-904CECB26CE4}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
21:58:48.0614 0x1228  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {FFA03883-1690-42BC-9110-BDA16591ED76}, Name: Basic data partition, StartLBA 0x32800, BlocksNum 0x1C2000
21:58:48.0614 0x1228  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {B6578E5B-B75C-44ED-9325-A83770E2136F}, Name: Microsoft reserved partition, StartLBA 0x1F4800, BlocksNum 0x40000
21:58:48.0614 0x1228  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {2EFDA897-C5AA-4A7A-9205-56192A107ABE}, Name: Basic data partition, StartLBA 0x234800, BlocksNum 0x1749C000
21:58:48.0615 0x1228  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {1B8282CF-1735-49AF-9504-AA8FD32A2BEF}, Name: Basic data partition, StartLBA 0x176D0800, BlocksNum 0x204B0800
21:58:48.0615 0x1228  \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {81EDF113-8C44-4696-9CEA-94AD7138C166}, Name: Basic data partition, StartLBA 0x37B81000, BlocksNum 0x2805000
21:58:48.0615 0x1228  MBR partitions:
21:58:48.0615 0x1228  ============================================================
21:58:48.0656 0x1228  C: <-> \Device\Harddisk0\DR0\Partition4
21:58:48.0727 0x1228  D: <-> \Device\Harddisk0\DR0\Partition5
21:58:48.0727 0x1228  ============================================================
21:58:48.0727 0x1228  Initialize success
21:58:48.0727 0x1228  ============================================================
21:58:55.0300 0x1988  ============================================================
21:58:55.0300 0x1988  Scan started
21:58:55.0300 0x1988  Mode: Manual;
21:58:55.0300 0x1988  ============================================================
21:58:55.0300 0x1988  KSN ping started
21:58:57.0924 0x1988  KSN ping finished: true
21:59:00.0041 0x1988  ================ Scan system memory ========================
21:59:00.0041 0x1988  System memory - ok
21:59:00.0045 0x1988  ================ Scan services =============================
21:59:00.0759 0x1988  0007541442951330mcinstcleanup - ok
21:59:01.0994 0x1988  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
21:59:02.0010 0x1988  1394ohci - ok
21:59:02.0213 0x1988  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware          C:\Windows\system32\drivers\3ware.sys
21:59:02.0213 0x1988  3ware - ok
21:59:02.0338 0x1988  [ E796AE43DDD1844281DB4D57294D17C0, 21AE69615044A96041E46476BE814B52C22624B6C7EA6BFC77BB64F69C3C21F5 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
21:59:02.0400 0x1988  ACPI - ok
21:59:02.0447 0x1988  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
21:59:02.0463 0x1988  acpiex - ok
21:59:02.0478 0x1988  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
21:59:02.0494 0x1988  acpipagr - ok
21:59:02.0510 0x1988  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
21:59:02.0525 0x1988  AcpiPmi - ok
21:59:02.0541 0x1988  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
21:59:02.0541 0x1988  acpitime - ok
21:59:02.0681 0x1988  [ C6D147C12C424373B016C0AB0A6C61EB, 043D44F3C942CFC3558E782938C26849BF648A58A7AA62C4A526E37DE4136C27 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:59:02.0697 0x1988  AdobeFlashPlayerUpdateSvc - ok
21:59:02.0791 0x1988  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
21:59:02.0853 0x1988  ADP80XX - ok
21:59:02.0916 0x1988  [ BCD58DACAA1EAAADC115EDD940478F6D, F31613F583C302F62A00E6766B031531C9E193CAED563689B178BA257715B992 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
21:59:02.0947 0x1988  AeLookupSvc - ok
21:59:03.0010 0x1988  [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD            C:\Windows\system32\drivers\afd.sys
21:59:03.0056 0x1988  AFD - ok
21:59:03.0181 0x1988  [ 98022774D9930ECBB292E70DB7601DF6, BE64A40B9BE997D73C0FC14D97E204C9D886EDA07EC4C9391A70CE477084E5F1 ] AgereSoftModem  C:\Windows\system32\DRIVERS\agrsm64.sys
21:59:03.0275 0x1988  AgereSoftModem - ok
21:59:03.0307 0x1988  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\Windows\system32\drivers\agp440.sys
21:59:03.0307 0x1988  agp440 - ok
21:59:03.0338 0x1988  [ FE14D249D39368CA62D8DA6BC94AC694, E1036E22BFBD3750FD2D3DA6AB939B2DD54E824F4BD3E6539EF0E45AB5453DD1 ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
21:59:03.0354 0x1988  ahcache - ok
21:59:03.0385 0x1988  [ 16F6F6B7903B913AB41AB848C8BB5658, 7304257048CB42E5274B3F6400F4A053A38E3B70A157662FE9D2B7C5979DE851 ] AiCharger      C:\Windows\system32\DRIVERS\AiCharger.sys
21:59:03.0400 0x1988  AiCharger - ok
21:59:03.0447 0x1988  [ 14A45BE6F5678339F0EC5752D9849410, DD0F60E96FAC68FBD5B86382E541408C613BD0F871D0E0A1EF9AB6E7B26E545C ] ALG            C:\Windows\System32\alg.exe
21:59:03.0463 0x1988  ALG - ok
21:59:03.0494 0x1988  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
21:59:03.0510 0x1988  AmdK8 - ok
21:59:03.0525 0x1988  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
21:59:03.0541 0x1988  AmdPPM - ok
21:59:03.0572 0x1988  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
21:59:03.0572 0x1988  amdsata - ok
21:59:03.0603 0x1988  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
21:59:03.0650 0x1988  amdsbs - ok
21:59:03.0682 0x1988  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
21:59:03.0697 0x1988  amdxata - ok
21:59:03.0760 0x1988  [ 415DD71628795197F7AFC176CBADC74E, 5F0359053A6CD6EE239139E0E6F46E1FA9A73F017C0CE9B7BC052216B2C846EC ] AppID          C:\Windows\system32\drivers\appid.sys
21:59:03.0760 0x1988  AppID - ok
21:59:03.0807 0x1988  [ 88358135810B9DFD830A9D3A8C3D149A, DF914DA3828EE2310895D156342E3B3DF5E8C6F6F9B851C359E82A1F48180D4B ] AppIDSvc        C:\Windows\System32\appidsvc.dll
21:59:03.0807 0x1988  AppIDSvc - ok
21:59:03.0854 0x1988  [ 680BFB820C5A943AB709BAA2B1EF27F2, A51D2A7976A762FE470C13C6D1BA0319A0FB19C9E66BF02AA44F83EAEC7130F8 ] Appinfo        C:\Windows\System32\appinfo.dll
21:59:03.0854 0x1988  Appinfo - ok
21:59:03.0916 0x1988  [ 35E28923A23ADABAA5A1B43256D0AB58, A5F3AF8BBEE58B2165BAFACC5FF8B167B55B020998D3D1565C2229ED8753B269 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
21:59:03.0947 0x1988  AppReadiness - ok
21:59:04.0072 0x1988  [ 573542B5E97772021B73E854DA861DAA, C3FD00FA28060F8D7CDFD455BBB5FF8239CB76DDFFF2BDAE6AA944674DD993D3 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
21:59:04.0150 0x1988  AppXSvc - ok
21:59:04.0182 0x1988  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
21:59:04.0197 0x1988  arcsas - ok
21:59:04.0275 0x1988  [ 564CB886D1A968B9798C1AB03F4EB54F, F7F73E5C17C0848462860E367215F5D9D4C52E1AA26B3154EC60BA14CBD56556 ] ASLDRService    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
21:59:04.0291 0x1988  ASLDRService - ok
21:59:04.0306 0x1988  [ 4C016FD76ED5C05E84CA8CAB77993961, 025E7BE9FCEFD6A83F4471BBA0C11F1C11BD5047047D26626DA24EE9A419CDC4 ] ASMMAP64        C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
21:59:04.0322 0x1988  ASMMAP64 - ok
21:59:04.0369 0x1988  [ DB5610839DBEBE48AA963DFA96FD7103, AADB0D5BFE8C28E31266FA48FEE41B82DC8B5D6F3E12238AD3E06C800F2D72A8 ] Asus WebStorage Windows Service C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
21:59:04.0400 0x1988  Asus WebStorage Windows Service - ok
21:59:04.0447 0x1988  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi          C:\Windows\system32\drivers\atapi.sys
21:59:04.0463 0x1988  atapi - ok
21:59:04.0494 0x1988  [ DBC598E47E7A382E60E2A4745D41FEF9, A810AC197CA456B0285E2CAE6986D38B31F4ADA32BEB47EC7A48A2B2196BA639 ] ATKGFNEXSrv    C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
21:59:04.0494 0x1988  ATKGFNEXSrv - ok
21:59:04.0541 0x1988  [ C435191FAD19B43E5C3082E4275DCE75, 12D8AF471CA89FE59790092EF3274D638B4B978F1F061423F8D70F270121CF7A ] ATKWMIACPIIO    C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
21:59:04.0557 0x1988  ATKWMIACPIIO - ok
21:59:04.0588 0x1988  [ 01D911D09BD63E6CA76137F9655B18C5, 4339DADE6DE8700D33742D87D0C9C5BE4C5EBE37CFC8D558D2192A23CF3B80FF ] ATP            C:\Windows\System32\drivers\AsusTP.sys
21:59:04.0604 0x1988  ATP - ok
21:59:04.0650 0x1988  [ 431FE56F5A2F5937994CB2DA330B47DB, E5AED551529A21494114959251FDF566802DD6D9B9D86A937A0EECE53338CAC7 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
21:59:04.0666 0x1988  AudioEndpointBuilder - ok
21:59:04.0729 0x1988  [ 0F03CC00645D7F841879A048787D6AC7, 3ECD2486157469F2EDB63D4868338D1445F2909153DF0AFFE432083730EEE3F5 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
21:59:04.0807 0x1988  Audiosrv - ok
21:59:04.0838 0x1988  [ 3C6ED74AF41DD1A5585CE5EF3D00915F, A742F576407776634E5A8E49C60023FFDF395DE0B2DE36662A23F85B79405ED2 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
21:59:04.0854 0x1988  AxInstSV - ok
21:59:04.0916 0x1988  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
21:59:04.0947 0x1988  b06bdrv - ok
21:59:04.0979 0x1988  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
21:59:04.0979 0x1988  BasicDisplay - ok
21:59:04.0994 0x1988  [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
21:59:05.0010 0x1988  BasicRender - ok
21:59:05.0057 0x1988  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
21:59:05.0057 0x1988  bcmfn2 - ok
21:59:05.0119 0x1988  [ 77D760E9B477C21487C171F561497F98, 2393D466CEC863C771C5BB4CD81B251635DC084386134B8E13F74F3E1C6D68DF ] BDESVC          C:\Windows\System32\bdesvc.dll
21:59:05.0150 0x1988  BDESVC - ok
21:59:05.0166 0x1988  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\Windows\system32\drivers\Beep.sys
21:59:05.0182 0x1988  Beep - ok
21:59:05.0244 0x1988  [ 7BCB00EA702F78EC74CD9699D85CE80B, 17241ADAA13051B560DB9FA9079CAE6321D5B49788B596C125DC912443B00421 ] BFE            C:\Windows\System32\bfe.dll
21:59:05.0307 0x1988  BFE - ok
21:59:05.0432 0x1988  [ 48554994279BFE17A3D2B00076D0CB1A, 6521B1EC0BC6B01F63976370D89FE7DC2E7404899F68B6FAC37A9173B9C5D489 ] BITS            C:\Windows\System32\qmgr.dll
21:59:05.0588 0x1988  BITS - ok
21:59:05.0619 0x1988  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
21:59:05.0619 0x1988  bowser - ok
21:59:05.0682 0x1988  [ FA601515FF2B59F25FDD8EDB1D2A1104, 21DFB53241F8E880F7546B9ADF38F47D6AD0782EC7F8F0284ED69DE7CEF7DCB9 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
21:59:05.0697 0x1988  BrokerInfrastructure - ok
21:59:05.0744 0x1988  [ BC111AADACD0BF59D56547461D13AB6E, 91E3619930C29EE4B2683683888BA7EE3CF6B1DDB0C19A14E0880470CBE40EF4 ] Browser        C:\Windows\System32\browser.dll
21:59:05.0744 0x1988  Browser - ok
21:59:05.0775 0x1988  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
21:59:05.0775 0x1988  BthAvrcpTg - ok
21:59:05.0838 0x1988  [ 272A62B660A48AEF366F8A1836CED19F, 78EFAC6B1B2313482329BBFFBF0DDA6462BD88E5BE3C817C5E8E0EAF3074C925 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
21:59:05.0838 0x1988  BthHFEnum - ok
21:59:05.0885 0x1988  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
21:59:05.0900 0x1988  bthhfhid - ok
21:59:05.0947 0x1988  [ 9307A4B743D277C499CDA8E19E5687AC, 7A01989EC3D54581F292BDEDC9B9445F2ABD50165102617E3089BDD061C63A19 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
21:59:05.0963 0x1988  BthHFSrv - ok
21:59:05.0994 0x1988  [ EF4B9E7C9AD88C00C18A12B0D22D1894, 672537E75201E690D86CD65252B8AEF887C76EBD37AB0C419462D69164B350CC ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
21:59:06.0010 0x1988  BTHMODEM - ok
21:59:06.0057 0x1988  [ 043A0F37631BF453F16D478B71320F46, C368296B802984F438852927B8A40EA3F4205724A05828F3173F08EC17228356 ] bthserv        C:\Windows\system32\bthserv.dll
21:59:06.0057 0x1988  bthserv - ok
21:59:06.0088 0x1988  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
21:59:06.0088 0x1988  cdfs - ok
21:59:06.0119 0x1988  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom          C:\Windows\System32\drivers\cdrom.sys
21:59:06.0135 0x1988  cdrom - ok
21:59:06.0182 0x1988  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] CertPropSvc    C:\Windows\System32\certprop.dll
21:59:06.0182 0x1988  CertPropSvc - ok
21:59:06.0229 0x1988  [ 4ECA59628D074CF45633EC7A3D7954D3, 054B4AE94920A06ECF8C65A66DC949B65665679B15733D021120159F6E2460DA ] cfwids          C:\Windows\system32\drivers\cfwids.sys
21:59:06.0229 0x1988  cfwids - ok
21:59:06.0260 0x1988  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\Windows\System32\drivers\circlass.sys
21:59:06.0260 0x1988  circlass - ok
21:59:06.0322 0x1988  [ 8EB7E70C2D348FE2476A2E3F2D585E3D, 2B5D407FACF1D049261026CC552A7C93B028A661B0F4E959815EAE7670054127 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
21:59:06.0354 0x1988  CLFS - ok
21:59:07.0041 0x1988  [ 55C892763A614BA39BA956A0323C65F3, 3A4FFB6140D8390CBA67ADEB459C71B0B6B5720D17E30E2677CC9AB603D43016 ] ClickToRunSvc  C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
21:59:07.0354 0x1988  ClickToRunSvc - ok
21:59:07.0479 0x1988  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
21:59:07.0494 0x1988  CmBatt - ok
21:59:07.0604 0x1988  [ 5E5AB950693F2C6D6ACBEE3A74697ED7, 3790A7DD0AC65F47A697A577744FDFA4CC1CA3422884C84E499F97AC91BA84F3 ] CNG            C:\Windows\system32\Drivers\cng.sys
21:59:07.0666 0x1988  CNG - ok
21:59:07.0729 0x1988  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\Windows\System32\drivers\CompositeBus.sys
21:59:07.0744 0x1988  CompositeBus - ok
21:59:07.0760 0x1988  COMSysApp - ok
21:59:07.0807 0x1988  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\Windows\system32\drivers\condrv.sys
21:59:07.0807 0x1988  condrv - ok
21:59:07.0979 0x1988  [ 0712EFB5F93852EFB2E6912383102287, A0DF4E38F60AEF48F125C9247B4A0729D3EC93F7F37A1E1E33F5580779CA0A5F ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
21:59:08.0041 0x1988  cphs - ok
21:59:08.0119 0x1988  [ 6324F0D18FB52833BA64BC828E29054C, 04118FA1BDFC512F76E4A81FEF34C78B6BD98429DB1D65123B6802B4A1E30584 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
21:59:08.0135 0x1988  CryptSvc - ok
21:59:08.0182 0x1988  [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam            C:\Windows\system32\drivers\dam.sys
21:59:08.0182 0x1988  dam - ok
21:59:08.0307 0x1988  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] DcomLaunch      C:\Windows\system32\rpcss.dll
21:59:08.0400 0x1988  DcomLaunch - ok
21:59:08.0479 0x1988  [ 95E1ABFB27F8A62ED764805775F0D2F3, 692865DA60C93481E01592883678B2C51FD9AC9A835DFB00A8E3F2DFEE7AB0ED ] defragsvc      C:\Windows\System32\defragsvc.dll
21:59:08.0541 0x1988  defragsvc - ok
21:59:08.0619 0x1988  [ FF086DEF5995558CCB1B5AAC2110195D, CED52FF01F9247BFDAFC5C7EFC538F8638146ED715574A422496EE0F846CB079 ] DeviceAssociationService C:\Windows\system32\das.dll
21:59:08.0666 0x1988  DeviceAssociationService - ok
21:59:08.0713 0x1988  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
21:59:08.0760 0x1988  DeviceInstall - ok
21:59:08.0791 0x1988  [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
21:59:08.0807 0x1988  Dfsc - ok
21:59:08.0854 0x1988  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
21:59:08.0854 0x1988  dg_ssudbus - ok
21:59:08.0932 0x1988  [ 3EEAADA3125431980E5804ED7143458A, 381E12C83E3211C255B321D35536F4049D67E31061F8D82155E4D4509E97F43D ] Dhcp            C:\Windows\system32\dhcpcore.dll
21:59:08.0963 0x1988  Dhcp - ok
21:59:09.0150 0x1988  [ 21EDAD8188372C912B7BB9B1C6CB0D38, 4A102745DE8A2A82D2C069B30503BF9FF2312A035A82854F84EF9C27E3533CEE ] DiagTrack      C:\Windows\system32\diagtrack.dll
21:59:09.0400 0x1988  DiagTrack - ok
21:59:09.0479 0x1988  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\Windows\system32\drivers\disk.sys
21:59:09.0494 0x1988  disk - ok
21:59:09.0541 0x1988  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
21:59:09.0541 0x1988  dmvsc - ok
21:59:09.0651 0x1988  [ 33ADFB7453BF3271463712C4BCE61AD1, A1DB30F874BA7B2C4C653494D70B46B94BF7D39D0DD8559F6CA7A14B676FD617 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
21:59:09.0698 0x1988  Dnscache - ok
21:59:09.0791 0x1988  [ 811EACBCC7C51A03AE11F13CC27B2AB6, FAB94F84950FFB7D3649BAFB8D96D43B880D7FDE8D5B879472AE26C4BC4203B0 ] dot3svc        C:\Windows\System32\dot3svc.dll
21:59:09.0838 0x1988  dot3svc - ok
21:59:09.0916 0x1988  [ B99CB575986789A93A683DCF292A43A1, 6ACEA31C723B74003E106FC8303542FCC6DBC4952B6B523F6590D006BE57238D ] DPS            C:\Windows\system32\dps.dll
21:59:09.0932 0x1988  DPS - ok
21:59:09.0979 0x1988  [ 00C594D5A1DBD22AD8B2902B9F6EFF94, 2920D62B5F7C49A8AFA80FCAD1E834BBAA670AEBDD7E6F21F0496D1D3CCB4E90 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
21:59:09.0979 0x1988  drmkaud - ok
21:59:10.0057 0x1988  [ 263625A4F616538EB867B6306A6590DB, 2A064720C247EAA3446EFDCC9E01D84CBA875905D78DFED0FBD62D1EE422D416 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
21:59:10.0088 0x1988  DsmSvc - ok
21:59:10.0307 0x1988  [ E1BB0B6F00F470B451AB45EA13EBA0B3, 3A2FC2175B69A5EB98D6C2D563DBFDCB320647AB87A14E47FAE800423DCACDAB ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
21:59:10.0494 0x1988  DXGKrnl - ok
21:59:10.0635 0x1988  [ FA988D76745C917CDFE20031C06DE860, B01AA3611869854D3BCA8B6CD7A6F48CC3537145DD3EBE50F5BEF72239924BF7 ] e1iexpress      C:\Windows\system32\DRIVERS\e1i63x64.sys
21:59:10.0697 0x1988  e1iexpress - ok
21:59:10.0760 0x1988  [ E253530BD5EDE28F1FF6AF93C4D8034D, 787A70C3E946348F066FB8EB81FCE60157217D93FD78ADC631B5835E8D76A253 ] Eaphost        C:\Windows\System32\eapsvc.dll
21:59:10.0776 0x1988  Eaphost - ok
21:59:11.0229 0x1988  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
21:59:11.0635 0x1988  ebdrv - ok
21:59:11.0760 0x1988  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] EFS            C:\Windows\System32\lsass.exe
21:59:11.0791 0x1988  EFS - ok
21:59:11.0823 0x1988  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
21:59:11.0838 0x1988  EhStorClass - ok
21:59:11.0885 0x1988  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
21:59:11.0916 0x1988  EhStorTcgDrv - ok
21:59:11.0947 0x1988  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\Windows\System32\drivers\errdev.sys
21:59:11.0963 0x1988  ErrDev - ok
21:59:12.0135 0x1988  [ F00C593994D57C75273F820653440536, 2DC986D9890EC907405FB2045E6F55ACC384169B45F0B56CCB1A953CF71D9A5D ] EventSystem    C:\Windows\system32\es.dll
21:59:12.0229 0x1988  EventSystem - ok
21:59:12.0307 0x1988  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat          C:\Windows\system32\drivers\exfat.sys
21:59:12.0338 0x1988  exfat - ok
21:59:12.0416 0x1988  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
21:59:12.0448 0x1988  fastfat - ok
21:59:12.0557 0x1988  [ 304B6AEC4639A7CCCCF544C6BA6177B2, B75CDD52FD3890B3008E06C503945D1E36478F0EC5E067C8DBC2822D7935D24B ] Fax            C:\Windows\system32\fxssvc.exe
21:59:12.0651 0x1988  Fax - ok
21:59:12.0682 0x1988  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc            C:\Windows\System32\drivers\fdc.sys
21:59:12.0698 0x1988  fdc - ok
21:59:12.0744 0x1988  [ 020D2F29009F893ADEFF4405B4B44565, 9F8501064C72933D1442DA00E70392B30D0207EB7D60F50E6648FF363799E6F1 ] fdPHost        C:\Windows\system32\fdPHost.dll
21:59:12.0760 0x1988  fdPHost - ok
21:59:12.0807 0x1988  [ E80D2EDD2F88B6E20076A0A4F5A5A245, E3CD6E0BE152B22E8A7340EFFD10CCDB1B632CD3EDF487E83F697D2E22A7D594 ] FDResPub        C:\Windows\system32\fdrespub.dll
21:59:12.0823 0x1988  FDResPub - ok
21:59:12.0869 0x1988  [ 47AB7D16EDE434B934AA4D661456C2D5, D375A92FB3E4BB0A8DA5270DACC888E53FB9F514516039FE6DAE4D4EF6B9A970 ] fhsvc          C:\Windows\system32\fhsvc.dll
21:59:12.0885 0x1988  fhsvc - ok
21:59:12.0932 0x1988  [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
21:59:12.0948 0x1988  FileInfo - ok
21:59:12.0979 0x1988  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
21:59:12.0979 0x1988  Filetrace - ok
21:59:13.0010 0x1988  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
21:59:13.0010 0x1988  flpydisk - ok
21:59:13.0104 0x1988  [ C1FB505A73FA2E9019D32444AB33B75A, 765F0635C18295855CA4C0394192E8B94BA2EA1C4D74F86B720358ABA019FFAA ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
21:59:13.0135 0x1988  FltMgr - ok
21:59:13.0307 0x1988  [ 1E93CBB75D167CDF85501A8C790097A8, C9E5DD090C94E7855939CE1F416460DB408EFF897C2CD52E0D52A734D8ED18B7 ] FontCache      C:\Windows\system32\FntCache.dll
21:59:13.0416 0x1988  FontCache - ok
21:59:13.0510 0x1988  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:59:13.0526 0x1988  FontCache3.0.0.0 - ok
21:59:13.0573 0x1988  [ A7C31B168F371E8E6796219F23E354DB, C51C9BF568F1E96CBBE57D2432B38F93F40520086DDB6AAAAC48CBCD1691B441 ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
21:59:13.0588 0x1988  FsDepends - ok
21:59:13.0619 0x1988  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
21:59:13.0635 0x1988  Fs_Rec - ok
21:59:13.0698 0x1988  [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
21:59:13.0744 0x1988  fvevol - ok
21:59:13.0776 0x1988  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM          C:\Windows\System32\drivers\fxppm.sys
21:59:13.0791 0x1988  FxPPM - ok
21:59:13.0807 0x1988  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
21:59:13.0807 0x1988  gagp30kx - ok
21:59:13.0901 0x1988  [ 4A336C92A790A3F7C2D9952C73FCFA16, 2EB400EBAA2B50A97F442D18107316A172A92660F5D712D1C58D39172C9CD80C ] GamesAppIntegrationService C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
21:59:13.0916 0x1988  GamesAppIntegrationService - ok
21:59:13.0963 0x1988  [ A404AE536DD73FC8118A15BFF0BD4FC0, EA24D7866FEB40DD72713601E14DBDA60497324222196B8E0791DA656DBF5DA7 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
21:59:13.0979 0x1988  GamesAppService - ok
21:59:14.0010 0x1988  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
21:59:14.0026 0x1988  gencounter - ok
21:59:14.0057 0x1988  [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
21:59:14.0073 0x1988  GPIOClx0101 - ok
21:59:14.0182 0x1988  [ 0D03F87D4FF4ADBAF8336DD80548155A, BC10CFA88EA2F41A8D96CB810B7953A4C168B79273A3E804A9F020F49AB58CD3 ] gpsvc          C:\Windows\System32\gpsvc.dll
21:59:14.0276 0x1988  gpsvc - ok
21:59:14.0432 0x1988  [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:59:14.0510 0x1988  HdAudAddService - ok
21:59:14.0557 0x1988  [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
21:59:14.0573 0x1988  HDAudBus - ok
21:59:14.0604 0x1988  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
21:59:14.0619 0x1988  HidBatt - ok
21:59:14.0698 0x1988  [ 42F88B57CAE42FC10059C887B3FCFCEA, 9363AA2B8E839A6935A7C6A36C491938DF78024886DCCE6D29CB18E1D6A6D806 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
21:59:14.0713 0x1988  HidBth - ok
21:59:14.0760 0x1988  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
21:59:14.0776 0x1988  hidi2c - ok
21:59:14.0823 0x1988  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr          C:\Windows\System32\drivers\hidir.sys
21:59:14.0838 0x1988  HidIr - ok
21:59:14.0885 0x1988  [ EA85B5093DF7B5C3E80362B053740AE2, 1D4251385402A2ADEE8FA1642F54180304F88337DA74989BDE44025ABB145FE5 ] hidserv        C:\Windows\system32\hidserv.dll
21:59:14.0901 0x1988  hidserv - ok
21:59:14.0948 0x1988  [ 894D982CEAB8CD45A56AE2C9988E86C0, AA2DEB62CB69FF1AEF772989342F2CF77CA48F212C9489A92A4FF97FD46D3866 ] HIDSwitch      C:\Windows\System32\drivers\AsHIDSwitch64.sys
21:59:14.0948 0x1988  HIDSwitch - ok
21:59:14.0995 0x1988  [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
21:59:15.0010 0x1988  HidUsb - ok
21:59:15.0073 0x1988  [ E7AF59F1E0352F5EBEC4ECD32103D405, 0E02E031799F407A1BCE926D46471E7EFB8820359CBDE73759219B86C1882EB8 ] HipShieldK      C:\Windows\system32\drivers\HipShieldK.sys
21:59:15.0104 0x1988  HipShieldK - ok
21:59:15.0151 0x1988  [ 93C4315F47F8D635C6DB0DF49FCE10EE, 70C52B8927D54ACD23F27948780B522974250FD5CD81AA9801C3F158C402889F ] hkmsvc          C:\Windows\system32\kmsvc.dll
21:59:15.0182 0x1988  hkmsvc - ok
21:59:15.0245 0x1988  [ AC49522ED106BD4B545D6614D71C2445, 40BD738A301170378ECFC031635EB04E2F812B676376CADDD6607ECABEC9255F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:59:15.0291 0x1988  HomeGroupListener - ok
21:59:15.0385 0x1988  [ 99932E30CE0283B73BB6E5019E150394, 1F88C2F56A7B8E1F75E6359281F418F9661DA4FB7B7D7B14FA7F718B15D4DCE0 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:59:15.0448 0x1988  HomeGroupProvider - ok
21:59:15.0604 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] HomeNetSvc      C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:15.0651 0x1988  HomeNetSvc - ok
21:59:15.0682 0x1988  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
21:59:15.0698 0x1988  HpSAMD - ok
21:59:15.0885 0x1988  [ E87A6D3B8FECD5B93BC0CFBB48C27970, 55C49B6F3822450447C082B40A263F3370694DB53AD0018ADEB911E4A9F65A88 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
21:59:16.0041 0x1988  HTTP - ok
21:59:16.0073 0x1988  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
21:59:16.0088 0x1988  hwpolicy - ok
21:59:16.0135 0x1988  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
21:59:16.0166 0x1988  hyperkbd - ok
21:59:16.0198 0x1988  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\Windows\system32\DRIVERS\HyperVideo.sys
21:59:16.0213 0x1988  HyperVideo - ok
21:59:16.0276 0x1988  [ 49EE0AE9E5B64FFBBD06D55C4984B598, 8866627F9241B24A59C81D8BCC67A4DCA87576F589599BA291D0E323F679EB4D ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
21:59:16.0291 0x1988  i8042prt - ok
21:59:16.0323 0x1988  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
21:59:16.0338 0x1988  iaLPSSi_GPIO - ok
21:59:16.0370 0x1988  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C    C:\Windows\System32\drivers\iaLPSSi_I2C.sys
21:59:16.0385 0x1988  iaLPSSi_I2C - ok
21:59:16.0495 0x1988  [ 9863EC0FB887C0AD0C3A20AC3BF91629, B695048C370CB91BB0CFF2E29641636225B23347B08F7E451FB91CF8B1A0120A ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
21:59:16.0604 0x1988  iaStorA - ok
21:59:16.0698 0x1988  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
21:59:16.0776 0x1988  iaStorAV - ok
21:59:16.0870 0x1988  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
21:59:16.0916 0x1988  iaStorV - ok
21:59:16.0979 0x1988  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
21:59:17.0010 0x1988  ICCS - ok
21:59:17.0026 0x1988  IEEtwCollectorService - ok
21:59:17.0432 0x1988  [ 807AC6A76500002AB259188B5EE6D891, 74031DCA5F01F8636BD42B7E87BE7253642EDB614EF7853888B37D5CBB1D00A0 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
21:59:17.0807 0x1988  igfx - ok
21:59:17.0917 0x1988  [ 7C208BE7C64C2E4AADCC7BEFDCB023F6, 656F2DEF15CA4787D27C3767461435F77D3C78BFAA8742AF08996BD147610312 ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
21:59:17.0948 0x1988  igfxCUIService1.0.0.0 - ok
21:59:18.0104 0x1988  [ 3DBDBD9581C015F02651D6A89801FAD5, 81B6D302C9CD29AD8319515056CFBCD0BD25619B2B166937ACD5F1416B568837 ] IKEEXT          C:\Windows\System32\ikeext.dll
21:59:18.0214 0x1988  IKEEXT - ok
21:59:18.0261 0x1988  [ FC7C456AF9B9811499EDBD10616832EE, CA2D8B0E672D3AE449C2FF0B9E142D74E8C72FD877D11162A9F7CC51AF58220F ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
21:59:18.0261 0x1988  intaud_WaveExtensible - ok
21:59:18.0682 0x1988  [ 5B301323F69E653CEFE6C14C86627FCA, 2B462CA6C3E1AFB21C41A4C46E4853B0C1DBBF481654C08C1E540001FC0839CC ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
21:59:18.0932 0x1988  IntcAzAudAddService - ok
21:59:19.0120 0x1988  [ 5F6F8E55DDB25BC41497DD11A85FC257, 45EF15064644729A776BBF35A790E23246309939A1614369553371EC82786890 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
21:59:19.0198 0x1988  IntcDAud - ok
21:59:19.0370 0x1988  [ 768DD5CB66952BC4A3BD474757AEE34F, 5A1F91FC8028D84FD83591D60CB7E3B24425C3B0FFF5A9BB0F7CE2E17AAB92D4 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
21:59:19.0479 0x1988  Intel(R) Capability Licensing Service Interface - ok
21:59:19.0604 0x1988  [ 7C9ED65324CF268ACBA8024257F782D8, 1DC43DBA3612E26454D7786DEB0538B44A736B67EC99642B4CC574D8A03E0DC7 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
21:59:19.0698 0x1988  Intel(R) Capability Licensing Service TCP IP Interface - ok
21:59:19.0745 0x1988  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\Windows\system32\drivers\intelide.sys
21:59:19.0760 0x1988  intelide - ok
21:59:19.0823 0x1988  [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep        C:\Windows\system32\drivers\intelpep.sys
21:59:19.0823 0x1988  intelpep - ok
21:59:19.0870 0x1988  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
21:59:19.0901 0x1988  intelppm - ok
21:59:19.0948 0x1988  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:59:19.0948 0x1988  IpFilterDriver - ok
21:59:20.0104 0x1988  [ A5800036E4EA06697A34742A24ACFBE1, BA67060526E9213000B4206F86A74F904999AD7018EFCBE4FE9708650DA9D973 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
21:59:20.0213 0x1988  iphlpsvc - ok
21:59:20.0260 0x1988  [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
21:59:20.0260 0x1988  IPMIDRV - ok
21:59:20.0307 0x1988  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
21:59:20.0323 0x1988  IPNAT - ok
21:59:20.0354 0x1988  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\Windows\system32\drivers\irenum.sys
21:59:20.0370 0x1988  IRENUM - ok
21:59:20.0385 0x1988  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\Windows\system32\drivers\isapnp.sys
21:59:20.0401 0x1988  isapnp - ok
21:59:20.0464 0x1988  [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
21:59:20.0495 0x1988  iScsiPrt - ok
21:59:20.0542 0x1988  [ A90C843F4FDD7A07129BA73C6BE13976, A76DEA9F09E3B2F18D3B646A0DD39E2773EC62E2F3C55421BA61C12190D78C1C ] iwdbus          C:\Windows\System32\drivers\iwdbus.sys
21:59:20.0542 0x1988  iwdbus - ok
21:59:20.0589 0x1988  [ 5917AFE4A3F695A54B99C1849C8207FE, DD57638966F2F0387DCF9DA4BBAEE3CDD8CC6F1A2D49581A0374D46A565BED4F ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
21:59:20.0604 0x1988  kbdclass - ok
21:59:20.0636 0x1988  [ 8CD840A062F6BDF41DDE3ACB96164B72, AEAE867F3557C1CE6B931E19D7144A3BD3CBABD81B1542667680D54FC24DEBE1 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
21:59:20.0651 0x1988  kbdhid - ok
21:59:20.0682 0x1988  [ 6C6F4A5FC5A2343995D1B0F111D5CF06, 62282992D3B1634C7BBDD1BCFC13F77FC806AD85B2C667FA09D73355825D19A8 ] kbfiltr        C:\Windows\System32\drivers\kbfiltr.sys
21:59:20.0682 0x1988  kbfiltr - ok
21:59:20.0714 0x1988  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic          C:\Windows\system32\DRIVERS\kdnic.sys
21:59:20.0729 0x1988  kdnic - ok
21:59:20.0745 0x1988  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] KeyIso          C:\Windows\system32\lsass.exe
21:59:20.0776 0x1988  KeyIso - ok
21:59:20.0823 0x1988  [ 4E829B18D5BAEC29893792A3C671A847, 64C3B99F53A9D1ACA802B46B09E820AD210B667D5A1CD0ADAF1F12944B15B52E ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
21:59:20.0823 0x1988  KSecDD - ok
21:59:20.0886 0x1988  [ 46711F40D0F9E63F786ED23F9BD5215E, 1FBC5101D843E5B43184C98B3D9AF3015C9409EEA6C7BB01B143FD08D4946FC0 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
21:59:20.0901 0x1988  KSecPkg - ok
21:59:20.0932 0x1988  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
21:59:20.0948 0x1988  ksthunk - ok
21:59:20.0995 0x1988  [ C1591A66028C71147A3E2EAB0B1CCB7E, 82F3D5DCC1614398A144D9791E4BAA814DBA9112677341FD57D5E9834CEDEB41 ] KtmRm          C:\Windows\system32\msdtckrm.dll
21:59:21.0026 0x1988  KtmRm - ok
21:59:21.0089 0x1988  [ CA2828DDE4B09FEFFDB7CE68B3D8D00A, B514792FF1EF36C678BB51644A1C420105D5E2CD6DD5A89A3FB252D08277A40C ] LanmanServer    C:\Windows\system32\srvsvc.dll
21:59:21.0120 0x1988  LanmanServer - ok
21:59:21.0182 0x1988  [ 3DBD9100745F9B8506B8FEC6FE6CCDE3, C3EF2856A1680AFDE133887E48946CF9CAB6755C3BDC07F0326965DCD4096F62 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:59:21.0229 0x1988  LanmanWorkstation - ok
21:59:21.0339 0x1988  [ 8B9F3796EC1762CF255BDB324E5529C8, F73D6BEF19BE20AEB18DA82CB63E9D8B50ACBBE4ED9B646EF0C9F598F6B81F94 ] lfsvc          C:\Windows\System32\GeofenceMonitorService.dll
21:59:21.0386 0x1988  lfsvc - ok
21:59:21.0417 0x1988  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
21:59:21.0417 0x1988  lltdio - ok
21:59:21.0479 0x1988  [ DAE98CC96C5EE308BF4EA7B18F226CB8, 7A6CC56BF075010707715AB6608764291E358EDF27C806A025532869004C686B ] lltdsvc        C:\Windows\System32\lltdsvc.dll
21:59:21.0495 0x1988  lltdsvc - ok
21:59:21.0542 0x1988  [ 1E2662D847B7D9995C65D90D254A7E0F, AFD4063D2071FFCB6B0EAC0715276D986F42326919C86E525DCE12E1109A93E2 ] lmhosts        C:\Windows\System32\lmhsvc.dll
21:59:21.0542 0x1988  lmhosts - ok
21:59:21.0589 0x1988  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
21:59:21.0604 0x1988  LSI_SAS - ok
21:59:21.0620 0x1988  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
21:59:21.0620 0x1988  LSI_SAS2 - ok
21:59:21.0635 0x1988  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\Windows\system32\drivers\lsi_sas3.sys
21:59:21.0651 0x1988  LSI_SAS3 - ok
21:59:21.0667 0x1988  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
21:59:21.0667 0x1988  LSI_SSS - ok
21:59:21.0761 0x1988  [ 9A7A7E45DAED2E8C2816716D8D28236A, C94787988826E546A8DC752BD6BE4EA7423DC3762B2D371DB297A63F865A95FF ] LSM            C:\Windows\System32\lsm.dll
21:59:21.0807 0x1988  LSM - ok
21:59:21.0839 0x1988  [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv          C:\Windows\system32\drivers\luafv.sys
21:59:21.0854 0x1988  luafv - ok
21:59:21.0886 0x1988  [ 0D3CF8B876F55291B137B972891C1575, 2E7D0A54D5B2211D340EB56F3D5FCB8362E75415A3C75F553643BA55888DC690 ] MBI            C:\Windows\system32\drivers\MBI.sys
21:59:21.0886 0x1988  MBI - ok
21:59:22.0104 0x1988  [ D8E5D83BE1F296F5AF38F89E4D0C3F3B, F0C3C94FBAC1A3DA4299257CB6DDA581CAAE602606E0039C49BCD19370248CB0 ] McAfee SiteAdvisor Service C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
21:59:22.0120 0x1988  McAfee SiteAdvisor Service - ok
21:59:22.0323 0x1988  [ 6BE500A77E653B3E621F280BA544AA0B, 2AFE3221EC6EABA1C085022555AD349996026E6883952833CF0A69F280E9C8EE ] McAPExe        C:\Program Files\McAfee\MSC\McAPExe.exe
21:59:22.0448 0x1988  McAPExe - ok
21:59:22.0854 0x1988  [ 2F5C40E9774716950C5011051E5E5C3C, BA8AD474814250AA1605162E831223E5F9F095DE81477803705C5AD824274B82 ] mccspsvc        C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
21:59:22.0995 0x1988  mccspsvc - ok
21:59:23.0089 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McMPFSvc        C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0104 0x1988  McMPFSvc - ok
21:59:23.0151 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McNaiAnn        C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0182 0x1988  McNaiAnn - ok
21:59:23.0276 0x1988  [ C32F9DAFD27557A53ED44915075B5658, 3C14A497021BA51AD8200D94B898ABA039666ED971C3AE4EB4859A35BDFFD564 ] McODS          C:\Program Files\mcafee\VirusScan\mcods.exe
21:59:23.0323 0x1988  McODS - ok
21:59:23.0386 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] mcpltsvc        C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0401 0x1988  mcpltsvc - ok
21:59:23.0448 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] McProxy        C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:23.0479 0x1988  McProxy - ok
21:59:23.0511 0x1988  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas        C:\Windows\system32\drivers\megasas.sys
21:59:23.0511 0x1988  megasas - ok
21:59:23.0573 0x1988  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\Windows\system32\drivers\megasr.sys
21:59:23.0620 0x1988  megasr - ok
21:59:23.0667 0x1988  [ B57322E3BC44A1F0A9C97B68A9EFF495, 2C967B0E965DF834BDC92E3D12E372CB47BA88CB02B0B12FA2AE7B94C2AD80A1 ] mfeaack        C:\Windows\system32\drivers\mfeaack.sys
21:59:23.0698 0x1988  mfeaack - ok
21:59:23.0745 0x1988  [ 2BD453B97EF1B1DB5AA195A261F926F8, 47582D78B3ADD1D77F98C5D4EC89B1EC1EE7A79677691FAE543DECA2EE5ACF79 ] mfeavfk        C:\Windows\system32\drivers\mfeavfk.sys
21:59:23.0792 0x1988  mfeavfk - ok
21:59:23.0823 0x1988  [ D1780DF54D9DB0DF6801F8657D5F0A14, 4B695A7165BB11521E602D93E73770D4181E170AA010CE5F91F95031BF4865C9 ] mfeelamk        C:\Windows\system32\drivers\mfeelamk.sys
21:59:23.0823 0x1988  mfeelamk - ok
21:59:23.0886 0x1988  [ B58B438EE841934F0425AC91560D13F4, 3D6FAFB2E7EB3616E2A4827D713DB95795AFA0D50140F8DDF08C102838776277 ] mfefire        C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
21:59:23.0901 0x1988  mfefire - ok
21:59:23.0948 0x1988  [ 9F9BC4DBB610F1AD600F619416A6144D, DE957B0CEF45A4DFD5280DFF8EC4D3EDFBE00E1CB920262D2F6B86E19DDAD7C6 ] mfefirek        C:\Windows\system32\drivers\mfefirek.sys
21:59:23.0979 0x1988  mfefirek - ok
21:59:24.0073 0x1988  [ B98911F49EA2F83A9079315846BE1E53, 2335ED3F166D5B10F2DBECE330C1FE8D50E1DEE4EA7D523AB6AC79E99A26C206 ] mfehidk        C:\Windows\system32\drivers\mfehidk.sys
21:59:24.0120 0x1988  mfehidk - ok
21:59:24.0182 0x1988  [ 38C25BC79FE3EAEDBB1B03796DB59BAB, 05E2D4691334AB107733EDEB297AB4701F528C215E16B36EF2D5C2D6473FB541 ] mfemms          C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe
21:59:24.0198 0x1988  mfemms - ok
21:59:24.0292 0x1988  [ 759ABC713BCA60F5508FC1455046670D, 1E8E903982B04D66ACBA0251B5256189F1BA4BD024A1C5F2E37E24D6CD1F96F3 ] mfencbdc        C:\Windows\system32\DRIVERS\mfencbdc.sys
21:59:24.0370 0x1988  mfencbdc - ok
21:59:24.0433 0x1988  [ 3924A68351C527CCB1AEF2DF486F0C35, C308C472DCB370D10935B1B00368C27F9F66B650F64D9B454495CD1CC5ABF3B6 ] mfencrk        C:\Windows\system32\DRIVERS\mfencrk.sys
21:59:24.0464 0x1988  mfencrk - ok
21:59:24.0605 0x1988  [ 4BEC4AE374CBE6D562D2DD1DD6118BB4, 2D6F13A6DF5BF1C89291749B061C0152A56417C82B6E4742365B112DA2FBC3B2 ] mfesapsn        C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys
21:59:24.0620 0x1988  mfesapsn - ok
21:59:24.0698 0x1988  [ E2082E1EF67506041CAD66D905494B43, B577E1D37D16A9FDA9818317D4A8DB0FF49F1099D983F014FFDB697A3FC889F7 ] mfevtp          C:\Windows\system32\mfevtps.exe
21:59:24.0745 0x1988  mfevtp - ok
21:59:24.0855 0x1988  [ 34CA0FA858BC45FA83247AAD4976CCE7, 676ED2E7EE58D2316F2DC05AB4BD9F9CFE75570E9919D568ACC992B4F9152514 ] mfewfpk        C:\Windows\system32\drivers\mfewfpk.sys
21:59:24.0901 0x1988  mfewfpk - ok
21:59:24.0948 0x1988  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] MMCSS          C:\Windows\system32\mmcss.dll
21:59:24.0980 0x1988  MMCSS - ok
21:59:25.0011 0x1988  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem          C:\Windows\system32\drivers\modem.sys
21:59:25.0026 0x1988  Modem - ok
21:59:25.0057 0x1988  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor        C:\Windows\System32\drivers\monitor.sys
21:59:25.0057 0x1988  monitor - ok
21:59:25.0089 0x1988  [ 08374E4E5B8914DE6067CBA99F61E930, CBB1390D6523FC968BEDF78FD13699488621ACB2CD1DF55D1606316090548661 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
21:59:25.0104 0x1988  mouclass - ok
21:59:25.0151 0x1988  [ 5FCBAB60598AE119E02B4C27DE6B99EA, 36F30094F700DE41C293047ACB49ED1961DD927BEDAD8DFDAB7023D4D24CB0DE ] mouhid          C:\Windows\System32\drivers\mouhid.sys
21:59:25.0167 0x1988  mouhid - ok
21:59:25.0214 0x1988  [ 9A788037D768809DFD677F4BA08A224A, E0686B3318F924E440ADA439D6671D44D3FF97C13D45C2E0A3A7B9E23DA38350 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
21:59:25.0229 0x1988  mountmgr - ok
21:59:25.0308 0x1988  [ 2E1F005987F6C31ADE25B67C2D172DF6, 7DDEA05F80158FECCF37A31F056D04E8E76115B178557450056DEC516D3027C8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:59:25.0323 0x1988  MozillaMaintenance - ok
21:59:25.0386 0x1988  [ 6FC047578785B0435F4E2660946D1ADC, 8AEA5659F01FC2F75160922C69622502DABA39F33CB90D5178DD679A1CDE617D ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
21:59:25.0401 0x1988  mpsdrv - ok
21:59:25.0542 0x1988  [ C18AA14126ADC66478E8E962B2DFAA98, A6F8CE9D88D590DC083253004392572C3BD02C33433CD6C0D9117D2AA7171EEC ] MpsSvc          C:\Windows\system32\mpssvc.dll
21:59:25.0651 0x1988  MpsSvc - ok
21:59:25.0714 0x1988  [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
21:59:25.0730 0x1988  MRxDAV - ok
21:59:25.0823 0x1988  [ 6FBDF2B1B025A8E6E069234362FFFFB7, CF1AFC088F59AD61037F4C4650F3BAEE7FE37C40B3A27B903475F005410F8155 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
21:59:25.0886 0x1988  mrxsmb - ok
21:59:25.0964 0x1988  [ BCBD64220AD85C26823453FF1DC3EFBD, 0245E3659E9135B9276F3CCFBEA0CEFFC4F4C0826F6D19B6329057620235F087 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:59:26.0011 0x1988  mrxsmb10 - ok
21:59:26.0073 0x1988  [ 57C2473D501331211D6885FD59F3E44B, 10253703DB32A32291C61B6962A79E374B5DF7DD14A6B6AFD08A99EF26206619 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:59:26.0089 0x1988  mrxsmb20 - ok
21:59:26.0136 0x1988  [ F3C060444777A59FC63D920719E43CCD, 8766A2746E3DFB0749E902F458141269335CA6F0CEDCA3D5F8C204637C19E783 ] MsBridge        C:\Windows\system32\DRIVERS\bridge.sys
21:59:26.0151 0x1988  MsBridge - ok
21:59:26.0214 0x1988  [ 915747E010A9414B069173284A9B93F4, 8A335C28FE1EF96DD71485877F2E86155D24B5614ACE05468F4B07E2ACD56331 ] MSDTC          C:\Windows\System32\msdtc.exe
21:59:26.0230 0x1988  MSDTC - ok
21:59:26.0276 0x1988  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\Windows\system32\drivers\Msfs.sys
21:59:26.0276 0x1988  Msfs - ok
21:59:26.0323 0x1988  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
21:59:26.0323 0x1988  msgpiowin32 - ok
21:59:26.0339 0x1988  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
21:59:26.0354 0x1988  mshidkmdf - ok
21:59:26.0386 0x1988  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
21:59:26.0386 0x1988  mshidumdf - ok
21:59:26.0401 0x1988  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
21:59:26.0417 0x1988  msisadrv - ok
21:59:26.0464 0x1988  [ 4EAEEBAC8CFF4E0D717DFA920BC58A90, A65CB1BB3392B6A04B978348CAC18A414560A6B04A727F22DFC0ADB20DD3AF6B ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
21:59:26.0480 0x1988  MSiSCSI - ok
21:59:26.0495 0x1988  msiserver - ok
21:59:26.0542 0x1988  [ 08CCC7622DDDFD649F75F9CFA53E4229, 257C8C285DDAA1CB1AAD3F799235972D0FF9577BE97859337437D4562B7CE4E4 ] MSK80Service    C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
21:59:26.0573 0x1988  MSK80Service - ok
21:59:26.0604 0x1988  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
21:59:26.0604 0x1988  MSKSSRV - ok
21:59:26.0651 0x1988  [ 51B3AC0560848CD6D65AC2033E293113, 73A27E88774C6929328E6C9FC9C389F4DF76D4D4D5CBFC4F51651CC308829628 ] MsLldp          C:\Windows\system32\DRIVERS\mslldp.sys
21:59:26.0667 0x1988  MsLldp - ok
21:59:26.0683 0x1988  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
21:59:26.0683 0x1988  MSPCLOCK - ok
21:59:26.0714 0x1988  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
21:59:26.0714 0x1988  MSPQM - ok
21:59:26.0776 0x1988  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
21:59:26.0792 0x1988  MsRPC - ok
21:59:26.0839 0x1988  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
21:59:26.0839 0x1988  mssmbios - ok
21:59:26.0870 0x1988  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
21:59:26.0870 0x1988  MSTEE - ok
21:59:26.0886 0x1988  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
21:59:26.0901 0x1988  MTConfig - ok
21:59:26.0979 0x1988  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup            C:\Windows\system32\Drivers\mup.sys
21:59:27.0026 0x1988  Mup - ok
21:59:27.0073 0x1988  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
21:59:27.0073 0x1988  mvumis - ok
21:59:27.0151 0x1988  [ 8DF30698BDD9492A9D45A4B94FB4A82A, 26B1B2D7E785E29B8BCB74C467C66AE4EBDD481ACFF36334F3BDF4506B778244 ] napagent        C:\Windows\system32\qagentRT.dll
21:59:27.0183 0x1988  napagent - ok
21:59:27.0261 0x1988  [ 008F7CED69FD5B30CBDE1E03C6F36A27, D4ADA7834C470B17A3CD976012DC5A511B32545B9F91D23D09A85722E0B75320 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
21:59:27.0292 0x1988  NativeWifiP - ok
21:59:27.0355 0x1988  [ BFCE1225D10619029E68946929CEB64C, 499F560331FFBA82E3D673B47F027FDAB7BEE4F2CB5B811D69E0218839F6E6A5 ] NcaSvc          C:\Windows\System32\ncasvc.dll
21:59:27.0370 0x1988  NcaSvc - ok
21:59:27.0417 0x1988  [ 267C97373110B7AFD3B46DF60B6CBB85, CEBB99F71D47634BB9C04DF2836DF6B47F15B3073FEFC237F85526DF01E4E38B ] NcbService      C:\Windows\System32\ncbservice.dll
21:59:27.0448 0x1988  NcbService - ok
21:59:27.0495 0x1988  [ 9ACED0F5B458C9011F39143326494E93, 9DFFC7EE7DE6FD92545EC6A203213C498A01EEFB0BC55460D339BCE498E56A7F ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
21:59:27.0511 0x1988  NcdAutoSetup - ok
21:59:27.0636 0x1988  [ 97DC5967F65503213FD1F1B3E4A6F983, 3EC515856C7CE9B30032F963DC04190F66EE62402A819781DC45B7D088C84229 ] NDIS            C:\Windows\system32\drivers\ndis.sys
21:59:27.0714 0x1988  NDIS - ok
21:59:27.0761 0x1988  [ 8CECC8DA55F3274181FD1EA28AD76664, 188112424CEF97FB926A0FB915260B803555A775DD2E1846725A9C8616300F42 ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
21:59:27.0761 0x1988  NdisCap - ok
21:59:27.0808 0x1988  [ 269882812E9A68FFF1AFE1283D428322, 50B99EBC42DA9B46A8C2C28C9BADCF58AE3079535CDD1227D0F5C86291C715FF ] NdisImPlatform  C:\Windows\system32\DRIVERS\NdisImPlatform.sys
21:59:27.0823 0x1988  NdisImPlatform - ok
21:59:27.0854 0x1988  [ 82821F4EEC776B4CF11695A38F3ABA46, 23184F9D31E662855DC4D23EFE7C2FE00E5487D3762B6024704A5D8C87762E1C ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
21:59:27.0870 0x1988  NdisTapi - ok
21:59:27.0901 0x1988  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
21:59:27.0917 0x1988  Ndisuio - ok
21:59:27.0933 0x1988  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
21:59:27.0948 0x1988  NdisVirtualBus - ok
21:59:27.0995 0x1988  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:28.0027 0x1988  NdisWan - ok
21:59:28.0042 0x1988  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
21:59:28.0058 0x1988  NdisWanLegacy - ok
21:59:28.0105 0x1988  [ DDD7F92A83F74D1476B71FBA9530A8DC, D3F94FC9F48854E09B0B77CE5E1C1DB948D54EAC63C5583437051BB893B5A386 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
21:59:28.0120 0x1988  NDProxy - ok
21:59:28.0167 0x1988  [ 3083926D1CC5B56EA0786527B557DD1B, 3C3F0CA0D43398576DBE8F677B353ADDA7E8F56829874958CE668E31261C1590 ] Ndu            C:\Windows\system32\drivers\Ndu.sys
21:59:28.0167 0x1988  Ndu - ok
21:59:28.0214 0x1988  [ 42FF4975D032CAE558AE4BB8448F6E5A, 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
21:59:28.0214 0x1988  NetBIOS - ok
21:59:28.0261 0x1988  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
21:59:28.0292 0x1988  NetBT - ok
21:59:28.0339 0x1988  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] Netlogon        C:\Windows\system32\lsass.exe
21:59:28.0386 0x1988  Netlogon - ok
21:59:28.0495 0x1988  [ 8F074B62E66B6117D9598C62A12069C5, 5FDB19045D3E2F6D0F0C5158AC2ECB0D5404CD2AF7A319755D7E3753CA3B7CF3 ] Netman          C:\Windows\System32\netman.dll
21:59:28.0542 0x1988  Netman - ok
21:59:28.0714 0x1988  [ 4A04B1CD5BFB4A978C5F60E86D6C3E45, A946922C1C38ADD3CF9D3B09DDCC301AE4DAC960A081B2F42B32BE1E7095B3FD ] netprofm        C:\Windows\System32\netprofmsvc.dll
21:59:28.0792 0x1988  netprofm - ok
21:59:28.0902 0x1988  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:59:28.0964 0x1988  NetTcpPortSharing - ok
21:59:29.0042 0x1988  [ D4DCE03870314D3354F3501F9DDD4123, 5BFE8299B3F72B8C39A4965365CBF5BA151024451F02DD872FAD1CC35CF94CEA ] netvsc          C:\Windows\System32\drivers\netvsc63.sys
21:59:29.0073 0x1988  netvsc - ok
21:59:30.0230 0x1988  [ 272BB8C52BE106B5CC69171AF1D281D4, 3D65A772C15440DF5895843185241D890CCDECA0E02DD6CF32CCB9B5849E31A4 ] NETwNs64        C:\Windows\system32\DRIVERS\Netwsw00.sys
21:59:31.0355 0x1988  NETwNs64 - ok
21:59:31.0511 0x1988  [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc          C:\Windows\System32\nlasvc.dll
21:59:31.0573 0x1988  NlaSvc - ok
21:59:31.0636 0x1988  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
21:59:31.0652 0x1988  Npfs - ok
21:59:31.0683 0x1988  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
21:59:31.0698 0x1988  npsvctrig - ok
21:59:31.0761 0x1988  [ 0F12A72A753CFD7FB0631EE8D08FE983, 860A96471F6CD90DDA9AB3A48E95CEAD826C87D2FA98A00EF91B61C44A4C8B82 ] nsi            C:\Windows\system32\nsisvc.dll
21:59:31.0777 0x1988  nsi - ok
21:59:31.0839 0x1988  [ 0E046FF5823B95326D10CF1B4AF23541, 39D22715003746527AB4BFEDED8C34B695DAF589091AE7F3A2A2C4B8A35675A9 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
21:59:31.0839 0x1988  nsiproxy - ok
21:59:32.0183 0x1988  [ 7F68063A5A0461E02BC860CE0E6BFDDC, 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
21:59:32.0433 0x1988  Ntfs - ok
21:59:32.0480 0x1988  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\Windows\system32\drivers\Null.sys
21:59:32.0480 0x1988  Null - ok
21:59:32.0527 0x1988  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
21:59:32.0574 0x1988  nvraid - ok
21:59:32.0605 0x1988  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
21:59:32.0636 0x1988  nvstor - ok
21:59:32.0667 0x1988  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
21:59:32.0683 0x1988  nv_agp - ok
21:59:32.0761 0x1988  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:59:32.0777 0x1988  ose - ok
21:59:32.0855 0x1988  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
21:59:32.0917 0x1988  p2pimsvc - ok
21:59:33.0042 0x1988  [ FD8F61F0D1F64BBB3D835F39A3F979C9, E5C5F86576488EA7F605E26C06EE5AFB36506A446F60C894D55E0A148BF7F02D ] p2psvc          C:\Windows\system32\p2psvc.dll
21:59:33.0121 0x1988  p2psvc - ok
21:59:33.0183 0x1988  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport        C:\Windows\System32\drivers\parport.sys
21:59:33.0199 0x1988  Parport - ok
21:59:33.0277 0x1988  [ BAFF6122CFC9F95CA175AD8C348179A4, 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
21:59:33.0292 0x1988  partmgr - ok
21:59:33.0417 0x1988  [ ABE95ABE27A8BD9701782BBCD82C9925, AE3BA1E9ECDE692374D8DAC95A8DAA289DD2470E3D8D58EFAD9F83A37F3AC8E5 ] PcaSvc          C:\Windows\System32\pcasvc.dll
21:59:33.0511 0x1988  PcaSvc - ok
21:59:33.0589 0x1988  [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci            C:\Windows\system32\drivers\pci.sys
21:59:33.0621 0x1988  pci - ok
21:59:33.0667 0x1988  [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide          C:\Windows\system32\drivers\pciide.sys
21:59:33.0667 0x1988  pciide - ok
21:59:33.0714 0x1988  [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
21:59:33.0745 0x1988  pcmcia - ok
21:59:33.0777 0x1988  [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw            C:\Windows\system32\drivers\pcw.sys
21:59:33.0792 0x1988  pcw - ok
21:59:33.0855 0x1988  [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc            C:\Windows\system32\drivers\pdc.sys
21:59:33.0871 0x1988  pdc - ok
21:59:33.0995 0x1988  [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
21:59:34.0089 0x1988  PEAUTH - ok
21:59:34.0199 0x1988  [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost        C:\Windows\SysWow64\perfhost.exe
21:59:34.0214 0x1988  PerfHost - ok
21:59:34.0402 0x1988  [ 70B39E7241F750A248798CE82C44596D, 54A72199EB277EE586611DCBC21654786FD2196F91D5884C4F531297893CC3EC ] pla            C:\Windows\system32\pla.dll
21:59:34.0527 0x1988  pla - ok
21:59:34.0589 0x1988  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
21:59:34.0605 0x1988  PlugPlay - ok
21:59:34.0636 0x1988  [ 4570F8A37D221660F3A09D6F4DD4BA94, 0EA190CFFA53DF9CCA2D53A4EF1BCB837BA3F2489A3AC5BD11F6D6ED811D118E ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
21:59:34.0652 0x1988  PNRPAutoReg - ok
21:59:34.0714 0x1988  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
21:59:34.0761 0x1988  PNRPsvc - ok
21:59:34.0855 0x1988  [ BDD52AB4AEBB8B1904568DBD0CCB70CB, C3D1DBA349C79B43DCDD9EF5255C5EE973EFB844235B808B5EF9B63A51FF00AA ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
21:59:34.0886 0x1988  PolicyAgent - ok
21:59:34.0949 0x1988  [ C8DD82C3035E60D671B8CC5DF128D3A9, 6AABF632CBEDA9A7B553BC9134FF100CB6FDC88000D499D2883408FCEDD97576 ] Power          C:\Windows\system32\umpo.dll
21:59:34.0980 0x1988  Power - ok
21:59:35.0292 0x1988  [ C0B3AD50136FE57C2548BD75CAC49DA2, B5661CE7631C5D1B1C50F36EE66AF6DF2E9E69DA1D9BA7C852E74D206F72D8DB ] PrintNotify    C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
21:59:35.0480 0x1988  PrintNotify - ok
21:59:35.0527 0x1988  [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor      C:\Windows\System32\drivers\processr.sys
21:59:35.0527 0x1988  Processor - ok
21:59:35.0574 0x1988  [ 6E409D818C6B342544EAE741B1422B85, B4ADFB7809FC42C432C984C3AC13FAFD1B7AD53BCC7FB16E86371DE4C829DD1A ] ProfSvc        C:\Windows\system32\profsvc.dll
21:59:35.0589 0x1988  ProfSvc - ok
21:59:35.0636 0x1988  [ FC0141B4A5AD6D637D883C1A89FC45C5, DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
21:59:35.0636 0x1988  Psched - ok
21:59:35.0714 0x1988  [ DAA9DEE0A5D5F238C4EE54C2C7FB67C5, 7EC8C603BD92699AC35BDCD294F13BEE90D5C2C195FD93A3F16928BFCF53CA93 ] QWAVE          C:\Windows\system32\qwave.dll
21:59:35.0777 0x1988  QWAVE - ok
21:59:35.0839 0x1988  [ 83868EB2924E6BC21A54337C65D614D1, 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
21:59:35.0855 0x1988  QWAVEdrv - ok
21:59:35.0902 0x1988  [ B337B1F1E82A83E20A1743E008E25C0F, A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
21:59:35.0902 0x1988  RasAcd - ok
21:59:35.0980 0x1988  [ 044638489B4A5FE5334F46C5314A0826, E06CC2A9EF369794DAD69FBB5AFD1676D4283DDAB2AD5E3EFE454C473F62F955 ] RasAuto        C:\Windows\System32\rasauto.dll
21:59:36.0011 0x1988  RasAuto - ok
21:59:36.0136 0x1988  [ F83B38FCD4F69157B3D158433FA149CC, AB103BD3E2B3B134CB355C556DF70BCF0CF4DB11EFF7DB4A9876D5AA43D81293 ] RasMan          C:\Windows\System32\rasmans.dll
21:59:36.0230 0x1988  RasMan - ok
21:59:36.0293 0x1988  [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
21:59:36.0308 0x1988  RasPppoe - ok
21:59:36.0371 0x1988  [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
21:59:36.0433 0x1988  rdbss - ok
21:59:36.0480 0x1988  [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
21:59:36.0480 0x1988  rdpbus - ok
21:59:36.0527 0x1988  [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
21:59:36.0543 0x1988  RDPDR - ok
21:59:36.0621 0x1988  [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:59:36.0621 0x1988  RdpVideoMiniport - ok
21:59:36.0668 0x1988  [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
21:59:36.0699 0x1988  rdyboost - ok
21:59:36.0824 0x1988  [ 615DFD97DEA56CE1C3A52185A3038FF8, 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 ] ReFS            C:\Windows\system32\drivers\ReFS.sys
21:59:36.0902 0x1988  ReFS - ok
21:59:36.0949 0x1988  [ 0CF7CB56BF2D5E9DBCEE0185CB626FAD, 2BD2E2FB1D2EADD1F70EF55E8523C353F95D4FEB1BAD5017FA4D94F790F27825 ] RemoteAccess    C:\Windows\System32\mprdim.dll
21:59:36.0964 0x1988  RemoteAccess - ok
21:59:37.0027 0x1988  [ AC8785B53F8436058C90450DA1840AE7, CC1FFC2713910211F8A6AD532DBB9253ACD188CBD784F1BE6613DF382825A3C1 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
21:59:37.0058 0x1988  RemoteRegistry - ok
21:59:37.0089 0x1988  [ 65B9FDE300A6DECC03BA44C4616DCAD6, CAD992982733DD20282A3453DC4E554AE1FC077C35479C0CA4E8BC3A9DCD3BB0 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
21:59:37.0105 0x1988  RpcEptMapper - ok
21:59:37.0136 0x1988  [ A737B433ABAF3F2DCB2BD7B4CC582B26, 3B5706B0CF0969A9F82060FD4DCC745F2D83C066B663FE8A4F0F493B64032C9C ] RpcLocator      C:\Windows\system32\locator.exe
21:59:37.0152 0x1988  RpcLocator - ok
21:59:37.0246 0x1988  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] RpcSs          C:\Windows\system32\rpcss.dll
21:59:37.0308 0x1988  RpcSs - ok
21:59:37.0355 0x1988  [ 566B32C6C06B31384C4D5D7762955A8F, A71E746CED15294DC5268953AE573D3DD59829A7B28F0FC887F343D762F69897 ] RSBASTOR        C:\Windows\system32\DRIVERS\RtsBaStor.sys
21:59:37.0371 0x1988  RSBASTOR - ok
21:59:37.0418 0x1988  [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
21:59:37.0433 0x1988  rspndr - ok
21:59:37.0527 0x1988  [ CE9B0D2B0790C23952A3554AD375699C, 5ED67683F06B448D104345CD479CA3F1FEFEE92B5A302E9284A04B747993BC03 ] RTL8168        C:\Windows\system32\DRIVERS\Rt630x64.sys
21:59:37.0589 0x1988  RTL8168 - ok
21:59:37.0871 0x1988  [ 19D1C2B85E17F94CAD6FC8184FB65A04, E7943EA2A64860D4DB44CF58B6B48C19C350A005C12DF188D42346502C27C517 ] RTWlanE        C:\Windows\system32\DRIVERS\rtwlane.sys
21:59:38.0105 0x1988  RTWlanE - ok
21:59:38.0136 0x1988  [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
21:59:38.0136 0x1988  s3cap - ok
21:59:38.0168 0x1988  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] SamSs          C:\Windows\system32\lsass.exe
21:59:38.0183 0x1988  SamSs - ok
21:59:38.0199 0x1988  [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
21:59:38.0214 0x1988  sbp2port - ok
21:59:38.0261 0x1988  [ 74A3B67F03877D06B09B1B40C5ED582E, A8FF9BF416F0BF365BFB4E1796859825C811A74B5E54DDDCE8345193BEEBE206 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
21:59:38.0293 0x1988  SCardSvr - ok
21:59:38.0355 0x1988  [ 8B9C4D55B4A536FB01C360DDB9533574, 9B939FE68F6F9C171ED0D91E2CE1E67515295D34EC23606BCDFD097DCC8CFD4A ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
21:59:38.0386 0x1988  ScDeviceEnum - ok
21:59:38.0449 0x1988  [ 13BEA6C882D4D877A5A85CA149C86BC1, 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
21:59:38.0449 0x1988  scfilter - ok
21:59:38.0699 0x1988  [ 3151A020E03DDE31AAC49F35C5EFB4DB, 5ABB1103009979F86C862357E28F37C2744979F2C99F7CF6ABB4EB1B8416B3F6 ] Schedule        C:\Windows\system32\schedsvc.dll
21:59:38.0902 0x1988  Schedule - ok
21:59:39.0027 0x1988  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] SCPolicySvc    C:\Windows\System32\certprop.dll
21:59:39.0058 0x1988  SCPolicySvc - ok
21:59:39.0168 0x1988  [ C54B6B2170BF628FD42F799A66956D75, BCF460A124CAA6F1F1A9A7BCBDCC2D5E39B0404D96B7C9FFAC806E041782B91E ] sdbus          C:\Windows\System32\drivers\sdbus.sys
21:59:39.0215 0x1988  sdbus - ok
21:59:39.0261 0x1988  [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
21:59:39.0277 0x1988  sdstor - ok
21:59:39.0324 0x1988  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
21:59:39.0340 0x1988  secdrv - ok
21:59:39.0371 0x1988  [ BA24CEA7152239F42ECD04AFB7C89D24, A2A11EABB0C283772B74667C7544B61BEB1B9745FBF065E831542129EB585AFA ] seclogon        C:\Windows\system32\seclogon.dll
21:59:39.0402 0x1988  seclogon - ok
21:59:39.0449 0x1988  [ 81FE9A81EDF8016816C9E91FBFBF7D35, 87FB92A3D15F312F0B9C423EF851061A944B013E5668D8C9A441B4DC0EB690AF ] SENS            C:\Windows\System32\sens.dll
21:59:39.0465 0x1988  SENS - ok
21:59:39.0527 0x1988  [ 6E4012AE67F09F867EF620C8D5524C0B, 63933E51F8E413E63481369CE2F9FD224560550FBD3BD2B4573E9F4AD88708A2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
21:59:39.0558 0x1988  SensrSvc - ok
21:59:39.0590 0x1988  [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
21:59:39.0605 0x1988  SerCx - ok
21:59:39.0636 0x1988  [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
21:59:39.0652 0x1988  SerCx2 - ok
21:59:39.0668 0x1988  [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum        C:\Windows\System32\drivers\serenum.sys
21:59:39.0683 0x1988  Serenum - ok
21:59:39.0730 0x1988  [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial          C:\Windows\System32\drivers\serial.sys
21:59:39.0730 0x1988  Serial - ok
21:59:39.0761 0x1988  [ 148195AE95D9BC7375A08846439FDAC1, 3A2F78FD18AA7A6D659921E19335E943894530874AC5AB5E7219CEF28FA54F7A ] sermouse        C:\Windows\System32\drivers\sermouse.sys
21:59:39.0777 0x1988  sermouse - ok
21:59:39.0855 0x1988  [ 3A2F1A7472C3B7CC9B89C8516C726488, 9BCBBAC10C900EA7B30822B463A77EE5067F217C4B490857A09E5277983CB89B ] SessionEnv      C:\Windows\system32\sessenv.dll
21:59:39.0886 0x1988  SessionEnv - ok
21:59:39.0918 0x1988  [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
21:59:39.0918 0x1988  sfloppy - ok
21:59:40.0011 0x1988  [ 8081FF3DAE8159FE8956B09BC29CE983, AC0F305AEE8B1AB2E1275F1D33EC1D2F3E23F234F831BD9D41F415A94A19D3AB ] SharedAccess    C:\Windows\System32\ipnathlp.dll
21:59:40.0043 0x1988  SharedAccess - ok
21:59:40.0183 0x1988  [ 7FD9A61A3523A61FC135D61D6E160314, 409E1CF7A62FD90CBC31AEAFBB7230B02DBEC6CFCA2D266D221A7643FAEBA13B ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:59:40.0230 0x1988  ShellHWDetection - ok
21:59:40.0277 0x1988  [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
21:59:40.0277 0x1988  SiSRaid2 - ok
21:59:40.0308 0x1988  [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
21:59:40.0308 0x1988  SiSRaid4 - ok
21:59:40.0402 0x1988  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
21:59:40.0433 0x1988  SkypeUpdate - ok
21:59:40.0496 0x1988  [ 3C84DCCE5B322F745A75CA8BA3A0F6B3, 1FB94A8A1C63D6FDB82E28ED5B696B3CB1F64183A89A3B5153B266C292CB7815 ] smphost        C:\Windows\System32\smphost.dll
21:59:40.0496 0x1988  smphost - ok
21:59:40.0558 0x1988  [ D0EB0DF8C603BBA084351A92732B1CBE, E24ED8F78EF41C1BC17386AE4BBCE0DC892C5B89B12C03FC9FB61D359B13F1B4 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
21:59:40.0558 0x1988  SNMPTRAP - ok
21:59:40.0652 0x1988  [ D24B1945ED1F9C96DA786DBBF1E983CE, B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 ] spaceport      C:\Windows\system32\drivers\spaceport.sys
21:59:40.0683 0x1988  spaceport - ok
21:59:40.0714 0x1988  [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
21:59:40.0730 0x1988  SpbCx - ok
21:59:40.0824 0x1988  [ FCB156A6745631A67DEA61827061D483, 9275ABFA1E1E595969A71C0DA228D18D1B868BF46E097E1276142BD80F8A32C9 ] Spooler        C:\Windows\System32\spoolsv.exe
21:59:40.0886 0x1988  Spooler - ok
21:59:41.0715 0x1988  [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc          C:\Windows\system32\sppsvc.exe
21:59:42.0574 0x1988  sppsvc - ok
21:59:42.0668 0x1988  [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv            C:\Windows\system32\DRIVERS\srv.sys
21:59:42.0715 0x1988  srv - ok
21:59:42.0824 0x1988  [ 00D8AC8E3053290BDE6EA2FB6810D2FC, 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
21:59:42.0886 0x1988  srv2 - ok
21:59:42.0933 0x1988  [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
21:59:42.0965 0x1988  srvnet - ok
21:59:43.0043 0x1988  [ CF6C3037839CF78421A94F9060C2886F, CA98C180AE03F5BE8FEFFBA75BD98DEE2AD4FA975E1EF83215C9CD2476946811 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
21:59:43.0074 0x1988  SSDPSRV - ok
21:59:43.0137 0x1988  [ 198A737DBA666F4808D62E9A8277A6B7, 90B6E5E2ACE95D850C913A3A1DA1F966C44955C530004C228FA93B2A536F5C27 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
21:59:43.0152 0x1988  SstpSvc - ok
21:59:43.0215 0x1988  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm        C:\Windows\system32\DRIVERS\ssudmdm.sys
21:59:43.0230 0x1988  ssudmdm - ok
21:59:43.0293 0x1988  [ 76F7D7217FBDAB77798A2A244ACD641F, E65CF2CE789E721CEFCA35DF5100304C56135459DA2421DB2A0DF9E6E9DDE70F ] ssudserd        C:\Windows\system32\DRIVERS\ssudserd.sys
21:59:43.0308 0x1988  ssudserd - ok
21:59:43.0340 0x1988  [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
21:59:43.0340 0x1988  stexstor - ok
21:59:43.0465 0x1988  [ 63E9CE568CF1192771A5F0460DE7D2B9, C27B21FD2C14AD41A59EF62EB8AC95C08EB13CCB1CEECD8378B8CDD4DC352E69 ] stisvc          C:\Windows\System32\wiaservc.dll
21:59:43.0543 0x1988  stisvc - ok
21:59:43.0590 0x1988  [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci        C:\Windows\system32\drivers\storahci.sys
21:59:43.0605 0x1988  storahci - ok
21:59:43.0652 0x1988  [ 8B9486B64E5FC17FB9CC04CA10B77A34, C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
21:59:43.0668 0x1988  storflt - ok
21:59:43.0683 0x1988  [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme        C:\Windows\system32\drivers\stornvme.sys
21:59:43.0699 0x1988  stornvme - ok
21:59:43.0746 0x1988  [ A45F5AC9D8069D0EC66E3CA73103073B, 996788F1C58E016E8E5CF3FD1D220A3C40AFFD6C21361A34636415DB12E0D381 ] StorSvc        C:\Windows\system32\storsvc.dll
21:59:43.0746 0x1988  StorSvc - ok
21:59:43.0793 0x1988  [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc        C:\Windows\system32\drivers\storvsc.sys
21:59:43.0809 0x1988  storvsc - ok
21:59:43.0855 0x1988  [ E395BE02F80A79A6CF973BA38DBB8135, 4C6F85B0EB8E7725BA720F9742561D229726C0D7C17505D1E79F19A5626F6325 ] svsvc          C:\Windows\system32\svsvc.dll
21:59:43.0871 0x1988  svsvc - ok
21:59:43.0918 0x1988  [ 65454187E0F8B6C0DCECB0287D06EC43, 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE ] swenum          C:\Windows\System32\drivers\swenum.sys
21:59:43.0918 0x1988  swenum - ok
21:59:44.0027 0x1988  [ 1C71D72D4997A284128FBEE770726330, 21682BDE74A1108FED1124FB1EA35A03CBFA94ABE1B89CC0FADB4DD82596C43E ] swprv          C:\Windows\System32\swprv.dll
21:59:44.0105 0x1988  swprv - ok
21:59:44.0262 0x1988  [ 7E85DB0463AD2403AE84AD162B162279, 996C42ECAFC6E24C623068AFAFCC0A2612526333AF9315F7536C6D40C2570632 ] SysMain        C:\Windows\system32\sysmain.dll
21:59:44.0387 0x1988  SysMain - ok
21:59:44.0465 0x1988  [ D73DBBB96CEE90C2856164AAD8543425, D11ADB5D4C5DD355314CA656D375D0062CAE7462E866F94F1B26D5803F65DCB2 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
21:59:44.0512 0x1988  SystemEventsBroker - ok
21:59:44.0574 0x1988  [ D6A71B95ACF71ACA63B67232059F1BCD, C5CEC032E7AB507500D1CC7A4E65DA6322412C798201A9D770CBDE892E50DFC8 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:59:44.0590 0x1988  TabletInputService - ok
21:59:44.0668 0x1988  [ 5A5BAB1CA9621E73E25EE4744B67CDA6, 479EBD7BAE1E2AD431153FDC016742F7A8D824716EAB1A4CA87EBBD21D61DECD ] TapiSrv        C:\Windows\System32\tapisrv.dll
21:59:44.0699 0x1988  TapiSrv - ok
21:59:44.0965 0x1988  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
21:59:45.0152 0x1988  Tcpip - ok
21:59:45.0355 0x1988  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
21:59:45.0527 0x1988  TCPIP6 - ok
21:59:45.0621 0x1988  [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
21:59:45.0637 0x1988  tcpipreg - ok
21:59:45.0668 0x1988  [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
21:59:45.0684 0x1988  tdx - ok
21:59:45.0715 0x1988  [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
21:59:45.0715 0x1988  terminpt - ok
21:59:45.0855 0x1988  [ C50997E282576DA492EBA66B059D4196, EBD793CB396F9503376207FA60353F5672DEDB620C8E01C8D6AE0030B3B03339 ] TermService    C:\Windows\System32\termsrv.dll
21:59:45.0918 0x1988  TermService - ok
21:59:45.0965 0x1988  [ 2180DBCE75B914E5E5BBFFFAAE97AA21, 8000AECC8855903DB50ABA7E304396D1FCEAE8DC9ADD4FC50275CF24B4D914DE ] Themes          C:\Windows\system32\themeservice.dll
21:59:45.0980 0x1988  Themes - ok
21:59:46.0012 0x1988  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] THREADORDER    C:\Windows\system32\mmcss.dll
21:59:46.0027 0x1988  THREADORDER - ok
21:59:46.0074 0x1988  [ B5ED9CC61798C7D44BD535D40B89EFB5, 1BDCEAA9AF2096381870D92129C748F4EE06A1167ABA9367B9DD43BAF27E3F5B ] TimeBroker      C:\Windows\System32\TimeBrokerServer.dll
21:59:46.0105 0x1988  TimeBroker - ok
21:59:46.0152 0x1988  [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM            C:\Windows\system32\drivers\tpm.sys
21:59:46.0152 0x1988  TPM - ok
21:59:46.0215 0x1988  [ 884113C2BB703FE806C8608B75F34831, 24DE5750CA4363455412BABB0B1FAB08497153E8F158ED44958F100410F93506 ] TrkWks          C:\Windows\System32\trkwks.dll
21:59:46.0230 0x1988  TrkWks - ok
21:59:46.0293 0x1988  [ 44A94FB4C76528D2382FFE04B05827C3, B0BCDF7CD1D65E61A9061D539D83527A89B69583958F8A26C6BF9766C1B61E0C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:59:46.0309 0x1988  TrustedInstaller - ok
21:59:46.0340 0x1988  [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
21:59:46.0340 0x1988  TsUsbFlt - ok
21:59:46.0371 0x1988  [ 20185BEB7512EDE4EFECDFA148AC9F99, 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
21:59:46.0371 0x1988  TsUsbGD - ok
21:59:46.0418 0x1988  [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
21:59:46.0418 0x1988  tunnel - ok
21:59:46.0465 0x1988  [ E624283C1A2F9BB4688A002914CC00A7, B6908C1FFDD6BCFFC5C2FC0C429FC3E237E340F891F80CFD737BE41E5EF7E328 ] TXEIx64        C:\Windows\System32\drivers\TXEIx64.sys
21:59:46.0465 0x1988  TXEIx64 - ok
21:59:46.0480 0x1988  [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
21:59:46.0496 0x1988  uagp35 - ok
21:59:46.0512 0x1988  [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
21:59:46.0527 0x1988  UASPStor - ok
21:59:46.0574 0x1988  [ 807F8CF3E973305FC435C61CBBEE2A49, 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 ] UCX01000        C:\Windows\System32\drivers\ucx01000.sys
21:59:46.0590 0x1988  UCX01000 - ok
21:59:46.0637 0x1988  [ C61EAF8E1E4B2F62BA4FDF457440B2C6, 961F76A789925234AC27F56AAE34556FA06088D71580B42C24B0BC209EAFD67E ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
21:59:46.0652 0x1988  udfs - ok
21:59:46.0699 0x1988  [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
21:59:46.0715 0x1988  UEFI - ok
21:59:46.0762 0x1988  [ A867F0F978EE64C87FADC3B100869EE4, 2686BE85F963D0D0BB275E92E5B543280D8742CF10772303E3189D0719B6A277 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
21:59:46.0762 0x1988  UI0Detect - ok
21:59:46.0777 0x1988  [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
21:59:46.0777 0x1988  uliagpkx - ok
21:59:46.0809 0x1988  [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus          C:\Windows\System32\drivers\umbus.sys
21:59:46.0809 0x1988  umbus - ok
21:59:46.0824 0x1988  [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass          C:\Windows\System32\drivers\umpass.sys
21:59:46.0824 0x1988  UmPass - ok
21:59:46.0887 0x1988  [ A023F267A262D5DA6CE1436D9C5E8FD9, 92AD7AF91184C244A7E392F49663143193A80D5D81114546A00F18227DE31D23 ] UmRdpService    C:\Windows\System32\umrdp.dll
21:59:46.0902 0x1988  UmRdpService - ok
21:59:46.0965 0x1988  [ C98493DD8E6A50154FAC75C15E1C36BB, CECD1C826C8F7AF05468871BF6A0ACDBB6B0202F4F87F48C6D367E5BD699E800 ] upnphost        C:\Windows\System32\upnphost.dll
21:59:46.0981 0x1988  upnphost - ok
21:59:47.0027 0x1988  [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
21:59:47.0043 0x1988  usbccgp - ok
21:59:47.0090 0x1988  [ 0139248F6B95CF0D837B5B46A2722D40, 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 ] usbcir          C:\Windows\System32\drivers\usbcir.sys
21:59:47.0090 0x1988  usbcir - ok
21:59:47.0121 0x1988  [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci        C:\Windows\System32\drivers\usbehci.sys
21:59:47.0137 0x1988  usbehci - ok
21:59:47.0184 0x1988  [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub          C:\Windows\System32\drivers\usbhub.sys
21:59:47.0215 0x1988  usbhub - ok
21:59:47.0277 0x1988  [ 95B0179BDA907252025DEEA183699FB3, A6BDFB93EE9418A83407024204A41640A08638C60E2BE75C249D102601DC1D80 ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
21:59:47.0309 0x1988  USBHUB3 - ok
21:59:47.0324 0x1988  [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci        C:\Windows\System32\drivers\usbohci.sys
21:59:47.0340 0x1988  usbohci - ok
21:59:47.0355 0x1988  [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
21:59:47.0371 0x1988  usbprint - ok
21:59:47.0402 0x1988  [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
21:59:47.0418 0x1988  USBSTOR - ok
21:59:47.0434 0x1988  [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
21:59:47.0434 0x1988  usbuhci - ok
21:59:47.0496 0x1988  [ 5C8F604F6DC74177CDD8372D7B1ADFF0, C1DE9A37A7A01CCCBFCE13C1E5B26683F620AB21EDA5A14C82022E2F49C84484 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
21:59:47.0512 0x1988  usbvideo - ok
21:59:47.0559 0x1988  [ 44603DA5A87FB491EF59C889EBBB4DDB, 59AA9B6B0B5D66F9312CD3F999D0D9F12F1A2C5D230365AD7287CD71FD86961C ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
21:59:47.0574 0x1988  USBXHCI - ok
21:59:47.0621 0x1988  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] VaultSvc        C:\Windows\system32\lsass.exe
21:59:47.0621 0x1988  VaultSvc - ok
21:59:47.0668 0x1988  [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
21:59:47.0668 0x1988  vdrvroot - ok
21:59:47.0777 0x1988  [ 8A4D808D1EC7C1C47B2C8BF488A9A07A, 63C07312ADB6F8A8BDE93361C30AC63DAB4DE1141AF54630EEF11E54B0BF983D ] vds            C:\Windows\System32\vds.exe
21:59:47.0840 0x1988  vds - ok
21:59:47.0887 0x1988  [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
21:59:47.0887 0x1988  VerifierExt - ok
21:59:47.0965 0x1988  [ C06E8481E068F170A258441639AC5792, 2F550530BACB511A195D5047F003B01CB6E04FA9A0DCCF638CB3D51FF5467DC7 ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
21:59:47.0996 0x1988  vhdmp - ok
21:59:48.0027 0x1988  [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide          C:\Windows\system32\drivers\viaide.sys
21:59:48.0027 0x1988  viaide - ok
21:59:48.0059 0x1988  [ 511AD3FF957A0127E6BD336FF6F89C38, 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
21:59:48.0059 0x1988  vmbus - ok
21:59:48.0090 0x1988  [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
21:59:48.0090 0x1988  VMBusHID - ok
21:59:48.0152 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
21:59:48.0184 0x1988  vmicguestinterface - ok
21:59:48.0215 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicheartbeat  C:\Windows\System32\ICSvc.dll
21:59:48.0246 0x1988  vmicheartbeat - ok
21:59:48.0277 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
21:59:48.0309 0x1988  vmickvpexchange - ok
21:59:48.0340 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicrdv        C:\Windows\System32\ICSvc.dll
21:59:48.0371 0x1988  vmicrdv - ok
21:59:48.0402 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicshutdown    C:\Windows\System32\ICSvc.dll
21:59:48.0434 0x1988  vmicshutdown - ok
21:59:48.0465 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmictimesync    C:\Windows\System32\ICSvc.dll
21:59:48.0481 0x1988  vmictimesync - ok
21:59:48.0512 0x1988  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicvss        C:\Windows\System32\ICSvc.dll
21:59:48.0543 0x1988  vmicvss - ok
21:59:48.0590 0x1988  [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr          C:\Windows\system32\drivers\volmgr.sys
21:59:48.0605 0x1988  volmgr - ok
21:59:48.0637 0x1988  [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
21:59:48.0652 0x1988  volmgrx - ok
21:59:48.0684 0x1988  [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
21:59:48.0699 0x1988  volsnap - ok
21:59:48.0746 0x1988  [ EF31713EE4C7CCFE4049F7E7F15645A2, 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 ] vpci            C:\Windows\System32\drivers\vpci.sys
21:59:48.0746 0x1988  vpci - ok
21:59:48.0793 0x1988  [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
21:59:48.0809 0x1988  vsmraid - ok
21:59:48.0918 0x1988  [ 94FAFD473CDD80CE19A21FB9503D7ED1, 953E5E8C753C0017E1258695A76F60CC05D283F7476B9D9C5C8AC78B8E3FCE18 ] VSS            C:\Windows\system32\vssvc.exe
21:59:48.0965 0x16dc  Object required for P2P: [ 55C892763A614BA39BA956A0323C65F3 ] ClickToRunSvc
21:59:48.0996 0x1988  VSS - ok
21:59:49.0043 0x1988  [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
21:59:49.0059 0x1988  VSTXRAID - ok
21:59:49.0074 0x1988  [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
21:59:49.0090 0x1988  vwifibus - ok
21:59:49.0105 0x1988  [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
21:59:49.0105 0x1988  vwififlt - ok
21:59:49.0137 0x1988  [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
21:59:49.0152 0x1988  vwifimp - ok
21:59:49.0199 0x1988  [ DC821E811EFBB65CDD77FBB8B6ECA385, B7C8AACDF81DBA298F2F384983D36B269876C31F0398D89BF9070217A069B96F ] W32Time        C:\Windows\system32\w32time.dll
21:59:49.0215 0x1988  W32Time - ok
21:59:49.0246 0x1988  [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
21:59:49.0246 0x1988  WacomPen - ok
21:59:49.0356 0x1988  [ A81988DCC4FA440AA88B84CA452F5E22, 3573AAA09971E8ADB6FEFA778E02B2D8EE5E4249267CF37A524D9F019CC836FB ] wbengine        C:\Windows\system32\wbengine.exe
21:59:49.0434 0x1988  wbengine - ok
21:59:49.0512 0x1988  [ 0F1DFA2FED73FA78B8C3CDE332A870F6, 1089F6F585F5350D349A640EBD3117832DF6B3657EB6667CB00AE217E04ACA17 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
21:59:49.0543 0x1988  WbioSrvc - ok
21:59:49.0590 0x1988  [ 0EAEC313B24837613621B4A2536ED382, 61C194ED7FA7D65BBE61A546D5FCA52F52AB08324E084D3EC23C9706E9BF0175 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
21:59:49.0606 0x1988  Wcmsvc - ok
21:59:49.0684 0x1988  [ F6B4C2280FF7C7156AC8A4687B9DA35E, 1899D584D7469BB49355D84080051E2575B033E6312009D9C6C1DD3F7F9AA4C5 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
21:59:49.0699 0x1988  wcncsvc - ok
21:59:49.0746 0x1988  [ B7BF1D783F5B2484E8CE1C0C78257F16, 468601199FCCF63DBAE86EE6B8825EA85B2A1EE177413353FFA2CC9CA5249FCD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:59:49.0762 0x1988  WcsPlugInService - ok
21:59:49.0793 0x1988  [ 81285DDC994F03379DB46419300B2DCB, 98D3622E11F375718AEA1DE3B5F0104DDAB4F96B6D4C19788C14F7B338A6F235 ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
21:59:49.0793 0x1988  WdBoot - ok
21:59:49.0871 0x1988  [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
21:59:49.0918 0x1988  Wdf01000 - ok
21:59:49.0965 0x1988  [ 26B8FED3F3B85F5F0C4BD03FD00B9941, 7F94FE7954498223B33C025258DB588A3AC9FF25C58EEAD204514FD20652FE40 ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
21:59:49.0996 0x1988  WdFilter - ok
21:59:50.0043 0x1988  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiServiceHost  C:\Windows\system32\wdi.dll
21:59:50.0043 0x1988  WdiServiceHost - ok
21:59:50.0059 0x1988  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiSystemHost  C:\Windows\system32\wdi.dll
21:59:50.0074 0x1988  WdiSystemHost - ok
21:59:50.0106 0x1988  [ CE67080F00E0AF32755096CEA6430ABA, 0E5D626F9F76C0BC63B2D246AD66D9CBF7D92F34B56398417BCFD0C331DBD282 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
21:59:50.0106 0x1988  WdNisDrv - ok
21:59:50.0137 0x1988  WdNisSvc - ok
21:59:50.0184 0x1988  [ 40F83492DB9ABBA59773A45FB487C8B2, 0D0DE0B0C9B929FEFD2674CCF17F5F2FC4B16EAB8E1981BBCE51B0305FD7D75E ] WebClient      C:\Windows\System32\webclnt.dll
21:59:50.0199 0x1988  WebClient - ok
21:59:50.0246 0x1988  [ 384E1D04FE20845B2559D292F17A9FA1, AD3B0B2B2219691AC30FEEC8AFDB3BBB74B51BB7D02038AE2B4DEA514E245315 ] Wecsvc          C:\Windows\system32\wecsvc.dll
21:59:50.0262 0x1988  Wecsvc - ok
21:59:50.0293 0x1988  [ 455014F4E48B67EBE0F032E2B0E06BF2, A36435784A034B27056A0E606683A20C69F1B0AB2B6BAEDEAEAA190F6287CAEF ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
21:59:50.0309 0x1988  WEPHOSTSVC - ok
21:59:50.0340 0x1988  [ F13DBA57CEA9B7074B95EDCA6AD2635E, 1D9BA4841EF1343A5D9096B5FE27FC65DC1901D6683DD13516171638549666B5 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
21:59:50.0356 0x1988  wercplsupport - ok
21:59:50.0387 0x1988  [ FD7E58B6AA3EABF2D12B9762A20E11E4, 4C5E2E246C5C70074866BB3DBC2AAF483ECE4345004CCB8D1FE285047268685D ] WerSvc          C:\Windows\System32\WerSvc.dll
21:59:50.0402 0x1988  WerSvc - ok
21:59:50.0465 0x1988  [ BAB713B409258DB7B5D9F9693F802B0E, C0D0391EC4FDC07E0A07F4EEB2DC9CC5B2BE5D2E292E7D01929E8D39D6F73EA5 ] WFPLWFS        C:\Windows\system32\DRIVERS\wfplwfs.sys
21:59:50.0465 0x1988  WFPLWFS - ok
21:59:50.0512 0x1988  [ 8C840E1FD7584E74BD0CC1EA581EC187, 148E534A94B4882E7396B13FABE17407802292E7890713540080D03D5629C81D ] WiaRpc          C:\Windows\System32\wiarpc.dll
21:59:50.0528 0x1988  WiaRpc - ok
21:59:50.0574 0x1988  [ 5F66B7BB330AA80067FC66149A692620, 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
21:59:50.0574 0x1988  WIMMount - ok
21:59:50.0590 0x1988  WinDefend - ok
21:59:50.0668 0x1988  [ 10DAD6A7FC617A221313BD584E3C3A00, F139B878668ECF38FE59831E8595A207D5CEEE76C6FFDA8C9F735435E601A763 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
21:59:50.0715 0x1988  WinHttpAutoProxySvc - ok
21:59:50.0777 0x1988  [ FC8BD690321216C32BB58B035B6D5674, D61698DB19D9DB2593B60B6BA13F7B7735667206F41D751D507135469D6D3CDD ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
21:59:50.0793 0x1988  Winmgmt - ok
21:59:51.0199 0x1988  [ 75436315AA383CF527695C6D49D0CA59, E3D55F2ACBD45D4D031FA6CA799394459C89BE50FF6ADE4FE36F2CAB2D2E63D0 ] WinRM          C:\Windows\system32\WsmSvc.dll
21:59:51.0606 0x1988  WinRM - ok
21:59:51.0684 0x1988  [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb          C:\Windows\System32\drivers\WinUSB.sys
21:59:51.0700 0x1988  WinUsb - ok
21:59:51.0918 0x1988  [ DC079BA8390089E4EBCA63D27EEA3ECB, 4D549217A68292E2B16C09FD9F84317011EE54A2DAF4E2AB85554267DF0D3249 ] WlanSvc        C:\Windows\System32\wlansvc.dll
21:59:52.0090 0x1988  WlanSvc - ok
21:59:52.0309 0x1988  [ 06BF5897949A8F24893F792E876B71F5, 9D3719492A86BF52A56E2EA798FD6FDB5862A03F6D360FCC4B0CEA9BE9792AE4 ] wlidsvc        C:\Windows\system32\wlidsvc.dll
21:59:52.0449 0x1988  wlidsvc - ok
21:59:52.0481 0x1988  [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
21:59:52.0496 0x1988  WmiAcpi - ok
21:59:52.0559 0x1988  [ B96F7A1236C3F21212DE2C40A3DDB005, 5A29EBB6DA036E303611EB1304192655021405BB05452FD37886DDE604FF0D9D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
21:59:52.0575 0x1988  wmiApSrv - ok
21:59:52.0606 0x1988  WMPNetworkSvc - ok
21:59:52.0653 0x1988  [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof            C:\Windows\system32\drivers\Wof.sys
21:59:52.0668 0x1988  Wof - ok
21:59:52.0731 0x16dc  Object send P2P result: true
21:59:52.0887 0x1988  [ 588040D595BBF0856CA1ADD941A8ED17, CBC92BB5453FE1BEA6F33239B7CE884F312559591383408EA5F95A006156C5D3 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
21:59:52.0965 0x1988  workfolderssvc - ok
21:59:52.0996 0x1988  [ A2468CC3509394A33C4C32F99563D845, 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 ] wpcfltr        C:\Windows\system32\DRIVERS\wpcfltr.sys
21:59:53.0012 0x1988  wpcfltr - ok
21:59:53.0043 0x1988  [ 19F4DF69876DA7E9C4965351560FE6B7, 127247A7964F55EE3AF842D25120F5ACD387632BEE2BF3D28FAC05840CEA19BA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
21:59:53.0043 0x1988  WPCSvc - ok
21:59:53.0075 0x1988  [ 2ADE11F3D84709C5F6781E4C59F11683, F003C43396CF8FCF44EAB87583650DB4D2A233322D28D6A78D1694945D9073BB ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
21:59:53.0090 0x1988  WPDBusEnum - ok
21:59:53.0106 0x1988  [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
21:59:53.0121 0x1988  WpdUpFltr - ok
21:59:53.0137 0x1988  [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
21:59:53.0137 0x1988  ws2ifsl - ok
21:59:53.0184 0x1988  [ 5596C0960ED6ED7494BF2A55DE428684, C95CF09A657F37F421CC80E16F2F95B8EC59A8D5D48F104551155EAC8E53DCB2 ] wscsvc          C:\Windows\System32\wscsvc.dll
21:59:53.0200 0x1988  wscsvc - ok
21:59:53.0200 0x1988  WSearch - ok
21:59:53.0403 0x1988  [ 6B2D71124C1EA86B74412F414C42431D, 078CC6C9667EF6BDA3E6900BC26A5A5B030CAA66928A6BBB7B7DC43C5C199EDC ] WSService      C:\Windows\System32\WSService.dll
21:59:53.0559 0x1988  WSService - ok
21:59:53.0746 0x1988  [ 3F726FF7B1ACC7D5E89940EA5BFF0E61, DF84486870C677B30985005A909CFDF8446BD566F601A295FF29F258E1D1AFF4 ] wuauserv        C:\Windows\system32\wuaueng.dll
21:59:53.0903 0x1988  wuauserv - ok
21:59:53.0934 0x1988  [ 481286719402E4BAEFEA0604AB1B5113, F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
21:59:53.0949 0x1988  WudfPf - ok
21:59:53.0996 0x1988  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0028 0x1988  WUDFRd - ok
21:59:54.0043 0x1988  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFSensorLP    C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0043 0x1988  WUDFSensorLP - ok
21:59:54.0106 0x1988  [ 51D28F7F1F888DDCF2C67DCF3B79A5D3, 74FF2936AFCEB9A36175D5B00EB91A5AD614B52BE3FB3FA9B994A025A484D2B7 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
21:59:54.0137 0x1988  wudfsvc - ok
21:59:54.0200 0x1988  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdFs      C:\Windows\System32\drivers\WUDFRd.sys
21:59:54.0262 0x1988  WUDFWpdFs - ok
21:59:54.0324 0x1988  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
21:59:54.0387 0x1988  WUDFWpdMtp - ok
21:59:54.0528 0x1988  [ A0900F8F628B5AF6841414EB3CF11E50, 8A531F2472FF4B4D895D469D28C215C834ECADBEF539894B8F3F606079A86184 ] WwanSvc        C:\Windows\System32\wwansvc.dll
21:59:54.0622 0x1988  WwanSvc - ok
21:59:54.0684 0x1988  ================ Scan global ===============================
21:59:54.0793 0x1988  [ 05B08C20B8428ECE088CB5635696A48D, 471642A2D0E5C3BB235962FC8D86A49AC30D7DDE80B97E348425BBFCDE4DCDC3 ] C:\Windows\system32\basesrv.dll
21:59:54.0871 0x1988  [ EAB311B0A7A8EA0346F14F08D4BC8F46, 11168E4074679F8A69DA714C0ABD0C68BA49D171B379343F14783C9C563202CA ] C:\Windows\system32\winsrv.dll
21:59:54.0965 0x1988  [ 3600ED7EA8AED849E20700551C0BD63B, 4A8C346C1646E80B58EF93F87F915A41E05CA2E993BB1C96955AE62A0669AF66 ] C:\Windows\system32\sxssrv.dll
21:59:55.0106 0x1988  [ E0C7813A97CA7947FF5C18A8F3B61A45, 083BB4F3B20419C87DB656F1465E5F782ACDE76838CDE6207F26AAD035C69DE0 ] C:\Windows\system32\services.exe
21:59:55.0184 0x1988  [ Global ] - ok
21:59:55.0184 0x1988  ================ Scan MBR ==================================
21:59:55.0200 0x1988  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
21:59:55.0262 0x1988  \Device\Harddisk0\DR0 - ok
21:59:55.0262 0x1988  ================ Scan VBR ==================================
21:59:55.0278 0x1988  [ 44C751946C60B5D0D621FA0CD6C945AD ] \Device\Harddisk0\DR0\Partition1
21:59:55.0293 0x1988  \Device\Harddisk0\DR0\Partition1 - ok
21:59:55.0325 0x1988  [ EDF646E536477EF7F6ECB1D274D4F197 ] \Device\Harddisk0\DR0\Partition2
21:59:55.0340 0x1988  \Device\Harddisk0\DR0\Partition2 - ok
21:59:55.0387 0x1988  [ 3B1727C808837DAC4104A16DB3F7F6F8 ] \Device\Harddisk0\DR0\Partition3
21:59:55.0387 0x1988  \Device\Harddisk0\DR0\Partition3 - ok
21:59:55.0418 0x1988  [ D9D396A12180C37548F829E3A11AF993 ] \Device\Harddisk0\DR0\Partition4
21:59:55.0434 0x1988  \Device\Harddisk0\DR0\Partition4 - ok
21:59:55.0481 0x1988  [ 61418FB9FA5338AEED10070F8D3FF5E2 ] \Device\Harddisk0\DR0\Partition5
21:59:55.0496 0x1988  \Device\Harddisk0\DR0\Partition5 - ok
21:59:55.0559 0x1988  [ 00C57FDFA0EC955C3D6BB97DA52427CB ] \Device\Harddisk0\DR0\Partition6
21:59:55.0590 0x1988  \Device\Harddisk0\DR0\Partition6 - ok
21:59:55.0590 0x1988  ================ Scan generic autorun ======================
21:59:55.0668 0x1988  [ EC160CC63955C4C4845C056962F9987F, 99AC2E788982742B9539C519F2E779C78C34CDF8CACBB4D34FF20F3E47981F5D ] C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe
21:59:55.0668 0x1988  WebStorage - ok
21:59:55.0684 0x1988  Waiting for KSN requests completion. In queue: 109
21:59:56.0700 0x1988  Waiting for KSN requests completion. In queue: 109
21:59:57.0715 0x1988  Waiting for KSN requests completion. In queue: 109
21:59:59.0309 0x1988  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.207.0 ), 0x60100 ( disabled : updated )
21:59:59.0356 0x1988  AV detected via SS2: McAfee Anti-Virus und Anti-Spyware, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 14.0.0.0 ), 0x51000 ( enabled : updated )
21:59:59.0403 0x1988  FW detected via SS2: McAfee Firewall, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( 14.0.0.0 ), 0x51010 ( enabled )
22:00:01.0950 0x1988  ============================================================
22:00:01.0950 0x1988  Scan finished
22:00:01.0950 0x1988  ============================================================
22:00:02.0012 0x0054  Detected object count: 0
22:00:02.0012 0x0054  Actual detected object count: 0
22:00:18.0372 0x0d98  Deinitialize success
Mit freundlichen Grüßen
Uta

schrauber 28.09.2015 20:04
Rechner hat keine Malware. Ist das der einzige Rechner auf dem die Mails abgerufen werden?

uta89 29.09.2015 04:04
Nein, es gibt noch mein Handy, auf dem ich eine mobile Web App für meine Mails installiert hatte, die habe ich inzwischen gelöscht und CM Security drüberlaufen lassen. Und einen anderen Rechner, der war jetzt mehrere Wochen in Reperatur, bei dem habe ich die Schritte noch nicht durchführen können. Da die SPAM Mails kurz nach dem Erhalten des Netbooks das erste Mal auftraten (hier habe ich die Schritte durchgeführt), dachte ich, dass der Fehler hier liegen könnte. Ich werde heute die entsprechenden Schritte auf meinem Laptop wiederholen und die LOG Dateien hier posten.

Mit freundlichen Grüßen
Uta

schrauber 29.09.2015 19:12
Meist, sagen wir mal in 99% der Fälle, ist da eh keine Malware auf dem Rechner.

Das Konto wird einfach gehackt oder gespooft.


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:31 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132