Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Avira deaktiviert und re-aktiviert sich automatisch (https://www.trojaner-board.de/172990-avira-deaktiviert-re-aktiviert-automatisch.html)

Treend 11.11.2015 22:42
Avira deaktiviert und re-aktiviert sich automatisch
 
Hallo Community,

Mein Avira zackt gerade etwas rum. Und zwar deaktiviert es sich immer wieder für ein paar Sekunden und re-aktiviert sich dann auch wieder von alleine. Ich gehe zwar von einer Fehlfunktion aus, wäre aber trotzdem Froh wen jemand mal kurz meine Farbar-Logs ansehen könnte.

Dankeschön :).

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
durchgeführt von Claudio (Administrator) auf CLAUDIO (11-11-2015 22:38:40)
Gestartet von C:\Users\Claudio\Downloads
Geladene Profile: Claudio (Verfügbare Profile: Claudio)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avscan.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-10-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [788176 2015-11-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [55100016 2015-08-26] (Skype Technologies S.A.)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\RunOnce: [Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\RunOnce: [Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2015-08-21]
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{652a196b-5ec4-4e66-9837-e98b338c8b62}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-22] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-22] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-10-02] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-10] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-10-02] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF Extension: Avira Browser Safety - C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default\Extensions\abs@avira.com [2015-10-23] [ist nicht signiert]
FF Extension: Lightbeam - C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2015-08-22]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [936544 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2015-11-11] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1105952 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [243968 2015-10-14] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-11-07] ()
U2 OneSyncSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U2 OneSyncSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session10; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-08-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137800 2015-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [74440 2015-10-10] (Avira Operations GmbH & Co. KG)
S3 dc1-controller; C:\Windows\System32\drivers\dc1-controller.sys [50688 2015-07-10] (Microsoft Corp.)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-07] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-08-21] (Intel Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-11 22:38 - 2015-11-11 22:39 - 00016727 _____ C:\Users\Claudio\Downloads\FRST.txt
2015-11-11 22:36 - 2015-11-11 22:38 - 02198528 _____ (Farbar) C:\Users\Claudio\Downloads\FRST64.exe
2015-11-11 22:25 - 2015-11-11 22:25 - 00016148 _____ C:\Windows\system32\CLAUDIO_Claudio_HistoryPrediction.bin
2015-11-08 22:16 - 2015-11-08 22:16 - 00007600 _____ C:\Users\Claudio\AppData\Local\Resmon.ResmonCfg
2015-11-03 23:17 - 2015-11-10 22:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-01 18:49 - 2015-11-01 18:49 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\PDAppFlex
2015-11-01 17:58 - 2015-11-01 17:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-11-01 17:57 - 2015-11-01 17:57 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-01 17:54 - 2015-11-01 17:56 - 00000000 ____D C:\Program Files\Adobe
2015-11-01 17:54 - 2015-11-01 17:54 - 00001029 _____ C:\Users\Claudio\Desktop\Adobe Lightroom.lnk
2015-11-01 17:54 - 2015-11-01 17:54 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-11-01 17:46 - 2015-11-06 22:55 - 00000000 ___RD C:\Users\Claudio\Creative Cloud Files
2015-11-01 17:45 - 2015-11-01 17:45 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-11-01 17:44 - 2015-11-01 17:44 - 00001302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-11-01 17:44 - 2015-11-01 17:44 - 00001290 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2015-11-01 17:41 - 2015-11-01 17:41 - 00686768 _____ (Adobe Systems Incorporated) C:\Users\Claudio\Downloads\CreativeCloudSet-Up.exe
2015-10-31 16:32 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-10-31 16:32 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-10-31 16:32 - 2015-10-21 13:45 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-10-31 16:32 - 2015-10-21 13:44 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-10-31 16:32 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-10-31 16:32 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-31 16:32 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-31 16:32 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-10-31 16:32 - 2015-10-21 12:59 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2015-10-31 16:32 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-10-31 16:32 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-10-31 16:32 - 2015-10-21 12:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-10-31 16:32 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-10-31 16:32 - 2015-10-21 12:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2015-10-31 16:32 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-10-31 16:32 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-31 16:32 - 2015-10-21 12:44 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2015-10-31 16:32 - 2015-10-21 12:44 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-10-31 16:32 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2015-10-31 16:32 - 2015-10-21 12:42 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2015-10-31 16:32 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-31 16:32 - 2015-10-21 12:40 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2015-10-31 16:32 - 2015-10-21 12:38 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2015-10-31 16:32 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-10-31 16:32 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-31 16:32 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-31 16:32 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-10-31 16:32 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-10-31 16:32 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-10-31 16:32 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-31 16:32 - 2015-10-21 06:03 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2015-10-31 16:32 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2015-10-31 16:32 - 2015-10-21 05:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2015-10-31 16:32 - 2015-10-21 05:55 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2015-10-25 12:58 - 2015-10-25 12:58 - 00000000 ____D C:\ProgramData\ATI
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\Users\Claudio\AppData\Local\AMD
2015-10-24 19:18 - 2015-10-24 19:18 - 00062253 _____ C:\Windows\SysWOW64\CCCInstall_201510242018564393.log
2015-10-24 19:18 - 2015-10-24 19:18 - 00052907 _____ C:\Windows\SysWOW64\CCCInstall_201510242018116911.log
2015-10-24 19:18 - 2015-10-24 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-10-24 19:18 - 2015-10-24 19:18 - 00000000 ____D C:\Program Files\ATI Technologies
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default\AppData\Roaming\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default\AppData\Local\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default User\AppData\Roaming\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default User\AppData\Local\ATI
2015-10-24 19:16 - 2015-10-24 19:16 - 00243696 _____ C:\Windows\system32\clinfo.exe
2015-10-24 19:16 - 2015-10-24 19:16 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00047664 _____ C:\Windows\system32\kapp_ci.sbin
2015-10-24 19:16 - 2015-10-24 19:16 - 00043536 _____ C:\Windows\system32\kapp_si.sbin
2015-10-24 19:16 - 2015-10-24 19:16 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 30776304 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-10-24 19:15 - 2015-10-24 19:15 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-10-24 19:15 - 2015-10-24 19:15 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00662392 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-10-24 19:15 - 2015-10-24 19:15 - 00662392 _____ C:\Windows\system32\atiapfxx.blb
2015-10-24 19:15 - 2015-10-24 19:15 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00177344 _____ C:\Windows\system32\ativce03.dat
2015-10-24 19:15 - 2015-10-24 19:15 - 00168944 _____ C:\Windows\system32\atieah64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00100816 _____ C:\Windows\system32\ativce02.dat
2015-10-24 19:15 - 2015-10-24 19:15 - 00097776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00089584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00087992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-10-24 19:14 - 2015-10-24 19:15 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00833800 _____ C:\Windows\system32\amdicdxx.dat
2015-10-24 19:14 - 2015-10-24 19:14 - 00631280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00471312 _____ C:\Windows\system32\amdmiracast.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00175648 _____ C:\Windows\system32\amde31a.dat
2015-10-24 19:14 - 2015-10-24 19:14 - 00151936 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00143344 _____ C:\Windows\system32\amdhdl64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00138376 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00117600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00110312 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-10-17 16:50 - 2015-11-10 22:50 - 05286088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-10-13 22:10 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-13 22:10 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-13 22:10 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-10-13 22:10 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-13 22:10 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-13 22:10 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-13 22:10 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-13 22:10 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-13 22:10 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-13 22:10 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-10-13 22:10 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-10-13 22:10 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-13 22:10 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-10-13 22:10 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-10-13 22:10 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-13 22:10 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2015-10-13 22:10 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-13 22:10 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-13 22:10 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-10-13 22:10 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-13 22:10 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2015-10-13 22:10 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2015-10-13 22:10 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-13 22:10 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-13 22:10 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-10-13 22:10 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-10-13 22:10 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-10-13 22:10 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-10-13 22:10 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2015-10-13 22:10 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-10-13 22:10 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2015-10-13 22:10 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-13 22:10 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-13 22:10 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2015-10-13 22:10 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2015-10-13 22:10 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-10-13 22:10 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-10-13 21:50 - 2015-11-11 22:26 - 00000000 ____D C:\Users\Claudio\Documents\Virtual Machines

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-11 22:38 - 2015-09-02 14:17 - 00000000 ____D C:\FRST
2015-11-11 22:35 - 2015-08-24 23:25 - 00000000 ____D C:\Users\Claudio\AppData\Local\VMware
2015-11-11 22:26 - 2015-08-24 23:18 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\VMware
2015-11-11 22:12 - 2015-08-21 13:19 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-11 22:05 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\system32\sru
2015-11-11 21:50 - 2015-08-21 13:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-11 21:49 - 2015-08-21 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-11-11 19:52 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\AppReadiness
2015-11-11 19:51 - 2015-08-21 14:58 - 01801664 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-11 19:51 - 2015-08-21 03:32 - 00774822 _____ C:\Windows\system32\perfh007.dat
2015-11-11 19:51 - 2015-08-21 03:32 - 00155710 _____ C:\Windows\system32\perfc007.dat
2015-11-11 00:48 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio
2015-11-10 23:03 - 2015-08-21 03:24 - 00000000 ____D C:\Windows\CbsTemp
2015-11-10 22:57 - 2015-08-21 21:29 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-11-10 22:54 - 2015-08-21 14:54 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-10 22:54 - 2015-08-21 14:51 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-10 22:54 - 2015-08-21 14:49 - 00012562 _____ C:\Windows\setupact.log
2015-11-10 22:53 - 2015-08-21 13:03 - 00280498 _____ C:\Windows\PFRO.log
2015-11-10 22:53 - 2015-08-21 12:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-10 22:51 - 2015-08-21 13:09 - 00001211 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2015-11-10 22:50 - 2015-08-21 13:14 - 00003870 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-08 21:09 - 2015-09-19 14:02 - 00000000 ____D C:\Users\Claudio\Desktop\Tor Browser
2015-11-06 22:55 - 2015-08-21 13:13 - 00000000 ____D C:\Users\Claudio\AppData\Local\Adobe
2015-11-02 21:34 - 2015-08-21 21:32 - 00002364 _____ C:\Users\Claudio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-02 21:34 - 2015-08-21 21:32 - 00000000 ___RD C:\Users\Claudio\OneDrive
2015-11-01 17:57 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\Adobe
2015-11-01 17:57 - 2015-08-21 13:18 - 00000000 ____D C:\ProgramData\Adobe
2015-11-01 17:43 - 2015-08-21 13:18 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-31 17:21 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\rescache
2015-10-31 16:37 - 2015-08-21 03:22 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-10-31 16:36 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-30 21:47 - 2015-08-21 13:18 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-30 21:46 - 2015-08-21 13:18 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-28 20:55 - 2015-10-02 21:18 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-24 19:18 - 2015-08-21 15:00 - 00000000 ____D C:\Program Files (x86)\AMD
2015-10-24 19:18 - 2015-08-21 14:51 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-10-24 19:17 - 2015-08-21 14:51 - 00000000 ____D C:\AMD
2015-10-24 19:16 - 2015-08-09 06:10 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-10-24 19:15 - 2015-08-21 02:13 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 07482552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-10-24 19:15 - 2015-08-21 02:13 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-10-24 19:15 - 2015-08-09 06:13 - 10211008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-10-24 19:15 - 2015-08-09 06:13 - 00143048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-10-24 19:15 - 2015-08-09 06:10 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-10-24 19:15 - 2015-08-09 06:10 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-10-24 19:15 - 2014-04-18 03:42 - 08982440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-10-24 19:15 - 2014-04-18 03:42 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-10-24 19:15 - 2014-04-18 03:42 - 00130072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-10-24 19:15 - 2014-04-18 02:30 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-10-24 19:15 - 2014-04-18 02:09 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-10-22 23:32 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio\AppData\Local\Packages
2015-10-22 19:47 - 2015-08-21 13:15 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\Users\Claudio\.oracle_jre_usage
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\ProgramData\Oracle
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-22 19:46 - 2015-08-21 13:14 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-16 04:10 - 2015-08-21 03:29 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 04:10 - 2015-08-21 03:29 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-14 20:34 - 2015-09-04 16:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-14 20:04 - 2015-08-21 12:42 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 20:02 - 2015-08-21 12:42 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-08 22:16 - 2015-11-08 22:16 - 0007600 _____ () C:\Users\Claudio\AppData\Local\Resmon.ResmonCfg
2015-08-21 14:51 - 2015-08-21 14:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Claudio\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Claudio\AppData\Local\Temp\avgnt.exe
C:\Users\Claudio\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\Claudio\AppData\Local\Temp\raptrpatch.exe
C:\Users\Claudio\AppData\Local\Temp\raptr_stub.exe
C:\Users\Claudio\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Claudio\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-02 19:40

==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-11-2015
durchgeführt von Claudio (2015-11-11 22:39:25)
Gestartet von C:\Users\Claudio\Downloads
Windows 10 Pro (X64) (2015-08-21 20:29:31)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4061816720-3657876876-2457947277-500 - Administrator - Disabled)
Claudio (S-1-5-21-4061816720-3657876876-2457947277-1002 - Administrator - Enabled) => C:\Users\Claudio
DefaultAccount (S-1-5-21-4061816720-3657876876-2457947277-503 - Limited - Disabled)
Gast (S-1-5-21-4061816720-3657876876-2457947277-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.3.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.2.1 - Adobe Systems Incorporated)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.14.259 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{59c4462d-a177-4d44-a95b-deda1be79844}) (Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG) Hidden
Call of Pripyat Complete v1.0.2 (HKLM-x32\...\Call of Pripyat Complete_is1) (Version:  - )
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
How to Survive (HKLM-x32\...\Steam App 250400) (Version:  - EKO Software)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{4F4D1244-12E7-4D6C-803D-3B16C13E8912}) (Version: 4.2.41.2633 - Intel Corporation)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.25.108.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7209 - Realtek Semiconductor Corp.)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.9 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.9.103 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
VMware Player (HKLM-x32\...\VMware_Player) (Version: 7.1.0 - VMware, Inc)
VMware Player (Version: 7.1.0 - VMware, Inc.) Hidden
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version:  - Machine Games)
Wolfenstein: The Old Blood  (HKLM-x32\...\Steam App 350080) (Version:  - MachineGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-A2C44E59D520}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Wiederherstellungspunkte =========================

09-11-2015 23:27:36 Geplanter Prüfpunkt

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-08-21 03:28 - 2015-08-21 03:27 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {08992DCA-7970-45C3-AA70-50953CB43AA4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {36EBE873-58D6-4729-BB48-544EFB3199FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {396494D1-EC57-42FA-BED4-B27385109EC1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {70EEB769-103B-4FC5-B975-B9641E3AE4A4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-14] (Microsoft Corporation)
Task: {86BEC575-F1E8-450F-8851-A1259E777ADE} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-10-28] (Microsoft Corporation)
Task: {98BF5B48-BB26-4D9B-87A9-9B8FC07D4FA2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {CE61A708-7C96-4F8C-8D15-37C1CE7ABC0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {FF3EC3B3-D645-4FAE-B8F7-D77429E26065} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-21 12:41 - 2015-07-15 03:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-08-21 12:41 - 2015-08-11 10:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-10-02 21:18 - 2015-10-07 19:28 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-11-07 16:12 - 2013-11-07 16:12 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-11-07 16:12 - 2013-11-07 16:12 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-11-07 16:12 - 2013-11-07 16:12 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2015-09-30 22:33 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-09-30 22:33 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-09-30 22:32 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-09-30 22:33 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-09-30 22:32 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-09-30 22:32 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-09-30 22:33 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-10-28 20:44 - 2015-10-28 20:44 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-10-28 20:44 - 2015-10-28 20:44 - 10958848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-10-28 20:43 - 2015-10-28 20:44 - 00245760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-02-06 17:40 - 2015-02-06 17:40 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\sharepoint.com -> hxxps://tbzedu.sharepoint.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B658B8A6-AD5C-45CB-8BF5-FDD153214D68}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8892B68F-A037-4134-BB3A-0CE97CC0A76D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5E6023F6-409A-47A9-B1D7-4F50330614EB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B53028A6-47C4-4417-81E3-0EB666994FED}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DF5CC82A-E212-49DE-BE0A-36AAE068B542}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{38F3328E-1838-43FE-A6AC-A7AB2322DBDF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{DD42890A-B1FE-4857-A416-3A2FF9B11965}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C79D0CE4-8889-4EDF-BE66-72621AEA504B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{F1688804-A61A-45A9-A2FD-B1A439CF6A8E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E9B1B6EE-168A-486F-B5FE-5B47EB42CDE7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{1763A03F-7DC8-4C73-A0EC-221F20C22688}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{D8464153-4B51-423F-B4BD-B09BA002CB0F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{329C56D9-51BE-4CE0-B9E3-68139DEECA24}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{E853DBFE-B010-4ABA-BD3F-D087E0FF87A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{D0ABC83B-03A5-4507-B74A-7929067F9ECD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B796F4C6-C8FE-4826-B6ED-62BCEB4BCEA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{A2700F51-E207-459F-A4A2-107F5116796F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{AE1837BB-6550-4783-BD5F-3879DBDE49F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{47569AC1-9DC4-4D9F-A353-FE5094A2A35A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{567229FD-BCD7-4AA3-99EC-0612CB3E9999}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{7FB8E5EC-0225-41B4-B36F-C914BA3DC2DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D5E2F8D7-096B-4404-9561-B931A96B91BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B497F51A-EC7F-41EE-924D-AC6999A88E31}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{23245119-4D0A-432B-8E4C-83500BACCB09}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{90B97F47-FF7F-48AB-A05D-3639F7C0AA7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{641E733C-9456-48F4-8F96-F244D2597458}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{D078B213-0DE4-45CB-AEDB-4A85D6E81EC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4AFB9AE3-6487-45A9-BE15-01AEBD3A31E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{84AC50B6-A352-49EF-9C2B-AC73BF0D848B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{E7110C9B-2542-43AE-B0E8-1ECDA7CD4509}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{BBCC6C41-94F8-487C-B42E-151D2964E23C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{29EA9823-CB74-400B-940C-DB5E2CC997C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{E329F17E-7CFA-41A9-BA40-9E93F2DB9BE9}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{AE12E3D2-C5E2-405B-8C39-4F90E3419A55}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [TCP Query User{FD60053B-5EDD-4BFD-BCBB-18EEF3504459}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [UDP Query User{4B9DE888-9F17-4074-83D0-1E92735C0A7E}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{9FAC1267-133F-44E9-88D6-8355AE7D1EF1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{7D9CCDD3-0BCE-434A-8BA3-349B2FF18787}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{CA8525DE-40FF-43BA-B6D9-7984A0B023CE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95B909C7-F2D9-4583-A149-1975E02984D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{F082D2AA-BB08-4CF6-9B80-D7E680750261}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{4F2A624E-3AD1-431C-B891-824E0D1BC75D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{7EEEE0E9-20C2-408A-907B-0A8CB2C6A724}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{63777E6D-90A7-4AF7-8B78-D5205836B187}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6DED0556-92D7-4F66-AA0A-A5AE49C1D966}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{DFE3B2A9-8119-4C43-A4AF-961B8E491D43}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{51B8856C-2F60-471C-9084-3AF3FD9458A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E731C62-A908-41E9-8182-8A8DFF2E2C08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E727AD0A-1A60-4373-B133-70134ADE0116}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{AC90C3B7-1734-4782-8C74-E6AE3DE71D12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{9FC60C9C-0A2D-41F5-8CDE-6E5330AF1DC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein The Old Blood\WolfOldBlood_x64.exe
FirewallRules: [{86A164DA-2370-4BF6-B092-DAE86BB3C89F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein The Old Blood\WolfOldBlood_x64.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/10/2015 01:40:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/09/2015 11:27:40 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (11/07/2015 02:19:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/04/2015 09:13:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/04/2015 01:13:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/03/2015 04:36:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/03/2015 02:04:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/02/2015 12:29:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/01/2015 05:44:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (10/31/2015 04:32:37 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (11/11/2015 12:48:31 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/10/2015 11:09:06 PM) (Source: DCOM) (EventID: 10016) (User: CLAUDIO)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}CLAUDIOClaudioS-1-5-21-4061816720-3657876876-2457947277-1002LocalHost (unter Verwendung von LRPC)Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (11/10/2015 10:54:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎10.‎11.‎2015 um 15:35:42 unerwartet heruntergefahren.

Error: (11/10/2015 04:03:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/10/2015 02:35:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (11/10/2015 02:35:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/10/2015 01:40:14 AM) (Source: DCOM) (EventID: 10010) (User: CLAUDIO)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca

Error: (11/10/2015 01:40:10 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/08/2015 11:59:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/07/2015 09:59:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session6" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-09-19 23:06:46.913
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Claudio\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-09-19 23:06:46.783
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8131.86 MB
Verfügbarer physikalischer RAM: 5758.24 MB
Summe virtueller Speicher: 9859.86 MB
Verfügbarer virtueller Speicher: 6973.28 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.58 GB) (Free:728.79 GB) NTFS
Drive f: (GIBBIX2015M) (Fixed) (Total:232.89 GB) (Free:83.08 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FF4BC7EE)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: 512D4A1C)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

schrauber 12.11.2015 06:42
hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Treend 13.11.2015 00:36
Danke für deine Hilfe.

Hab alles durchlaufen lassen, wurde jedoch nichts gefunden. Was kann das den sonst für Gründe haben, dass sich das Avira zeitweise selbständig macht?

Hier noch die Logs:

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.11.12.05
  rootkit: v2015.11.04.02

Windows 10 x64 NTFS
Internet Explorer 11.0.10240.16431
Claudio :: CLAUDIO [administrator]

12.11.2015 23:50:10
mbar-log-2015-11-12 (23-50-10).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 348399
Time elapsed: 16 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
00:25:59.0212 0x1310  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
00:25:59.0853 0x1310  ============================================================
00:25:59.0853 0x1310  Current date / time: 2015/11/13 00:25:59.0853
00:25:59.0853 0x1310  SystemInfo:
00:25:59.0853 0x1310 
00:25:59.0853 0x1310  OS Version: 10.0.10240 ServicePack: 0.0
00:25:59.0853 0x1310  Product type: Workstation
00:25:59.0853 0x1310  ComputerName: CLAUDIO
00:25:59.0853 0x1310  UserName: Claudio
00:25:59.0853 0x1310  Windows directory: C:\Windows
00:25:59.0853 0x1310  System windows directory: C:\Windows
00:25:59.0853 0x1310  Running under WOW64
00:25:59.0853 0x1310  Processor architecture: Intel x64
00:25:59.0853 0x1310  Number of processors: 4
00:25:59.0853 0x1310  Page size: 0x1000
00:25:59.0853 0x1310  Boot type: Normal boot
00:25:59.0853 0x1310  ============================================================
00:25:59.0853 0x1310  BG loaded
00:26:00.0306 0x1310  System UUID: {75A162D9-FB7E-0B82-4A6F-CFB66A38AED5}
00:26:00.0884 0x1310  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:26:00.0931 0x1310  ============================================================
00:26:00.0931 0x1310  \Device\Harddisk0\DR0:
00:26:00.0947 0x1310  MBR partitions:
00:26:00.0947 0x1310  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xFA000
00:26:00.0947 0x1310  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xFA800, BlocksNum 0x7452A800
00:26:00.0947 0x1310  ============================================================
00:26:01.0103 0x1310  C: <-> \Device\Harddisk0\DR0\Partition2
00:26:01.0103 0x1310  ============================================================
00:26:01.0103 0x1310  Initialize success
00:26:01.0103 0x1310  ============================================================
00:26:20.0058 0x1534  ============================================================
00:26:20.0058 0x1534  Scan started
00:26:20.0058 0x1534  Mode: Manual; SigCheck; TDLFS;
00:26:20.0058 0x1534  ============================================================
00:26:20.0058 0x1534  KSN ping started
00:26:22.0355 0x1534  KSN ping finished: true
00:26:29.0148 0x1534  ================ Scan system memory ========================
00:26:29.0148 0x1534  System memory - ok
00:26:29.0148 0x1534  ================ Scan services =============================
00:26:29.0929 0x1534  [ 22CE801AD25C51E2553F41A076BB0CB2, 0520216417F1619FB642734EC937C59D5E79A24306C1E9B793C82FAE077851E6 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
00:26:30.0023 0x1534  1394ohci - ok
00:26:30.0054 0x1534  [ 2C49A2441EBB24C6ACFB524C1459115F, 0ABACB6F21C41C0297994E61F1BFABB3905AF6B569D0446FE8E174EB9225B8EF ] 3ware          C:\Windows\system32\drivers\3ware.sys
00:26:30.0070 0x1534  3ware - ok
00:26:30.0226 0x1534  [ B87D3D07FE6F15328C6860D542F0E2BD, 46CF069EDD7DBFB4DB800BABA3081DAB363DD2CFD724AFF5916D3419F62A3574 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
00:26:30.0288 0x1534  ACPI - ok
00:26:30.0335 0x1534  [ 1E3C4EDBB7F3F668B7205E351010BB79, A3CA12F72836C4F77B671264828B370B9EBA9CD71110E2C0514994760B6B12FF ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
00:26:30.0367 0x1534  acpiex - ok
00:26:30.0413 0x1534  [ 13B1C26AEDCB40082CDD97506F968129, 883442206B4C60AA493E84CC3037B6C1568441E1F43D2B1FCBFD8D87D135D511 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
00:26:30.0460 0x1534  acpipagr - ok
00:26:30.0523 0x1534  [ B3D64FF927D611721DA73A61BF3A18B3, 96B51AFDC3078B5088AAF66F0CF3E07D2FCBBC84A19D309A25DF0A5C6CECB958 ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
00:26:30.0726 0x1534  AcpiPmi - ok
00:26:30.0773 0x1534  [ 19F793B2203D94AC1F8AEDB08B494E2E, DC98CCF9935E1F1C32FA88575A9A678B74916EFF48E39A64CF1FF92232F64A52 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
00:26:30.0882 0x1534  acpitime - ok
00:26:31.0093 0x1534  [ 5DB2C6B908C50767E2EDAA294A7566B5, 13AE4879D679BB0C6B2A5A5B13910359815A9D2E569BC1DE740B5A387A78CF33 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
00:26:31.0100 0x1534  AdobeARMservice - ok
00:26:31.0423 0x1534  [ 280A526E8111AC6A5BCC1A059E1E0340, FB92DDAE29A097D148AB23D8A0BD2B9E662EC1DBF0DA8B716374D6919B4C646F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
00:26:31.0501 0x1534  AdobeFlashPlayerUpdateSvc - ok
00:26:31.0869 0x1534  [ 0D19026AB5812D3A7B9DBB386F8334D8, 3FF22476D621ECFC2C80EF63D1A90C45F672CE299DC92A874E049779EF96AB4A ] AdobeUpdateService C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
00:26:31.0932 0x1534  AdobeUpdateService - ok
00:26:32.0244 0x1534  [ 2A24E10C1A1DE0E0035E353EED494A1C, CBBFA86578BE74CAADDCA923D65E3BFFC57BC17B887936ADE5C6952530546A22 ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
00:26:32.0307 0x1534  ADP80XX - ok
00:26:32.0432 0x1534  [ 6C12C7E01A4F64E0AA9C88AF66955CC9, 81A413702909341F8694823EC83FBA0089523D7EC927B80E55E0779BB83AD263 ] AFD            C:\Windows\system32\drivers\afd.sys
00:26:32.0463 0x1534  AFD - ok
00:26:32.0510 0x1534  [ EF09D07626820F7F89519514C17FE768, C3EC1DC163CD5946270ED876CD414889BBF2C586A8AF5DC7825FA5D77001E827 ] agp440          C:\Windows\system32\drivers\agp440.sys
00:26:32.0541 0x1534  agp440 - ok
00:26:32.0541 0x1534  AGSService - ok
00:26:32.0682 0x1534  [ 8A289EF0721F95267BF2404BABEE146D, E263D258F03DF3BB405D49AE7230C37E7EB8F392FDEE48059C7C1E3709520D35 ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
00:26:33.0010 0x1534  ahcache - ok
00:26:33.0197 0x1534  [ C301499987AF909258774AE9DC5778BB, 3ED539C999847116AE9DB9C8C5A34AB09703BAE3018E1EAF6DBC779BB6736F32 ] AJRouter        C:\Windows\System32\AJRouter.dll
00:26:34.0072 0x1534  AJRouter - ok
00:26:34.0213 0x1534  [ DD69535D379F9E40AD0D6002887AAA99, 579DD18CE2B264B4058C6069B8AEE6FD9FE6A882B7DA19E300DFE40B37A4E5BE ] ALG            C:\Windows\System32\alg.exe
00:26:34.0869 0x1534  ALG - ok
00:26:35.0291 0x1534  [ 8F312E43E6BFED69705881D49B2A01B4, 7B8CB068ABD091E6F4764D6CF27C3318792C88064ECB5A7E5283AF74892FC3B4 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
00:26:35.0322 0x1534  AMD External Events Utility - ok
00:26:35.0354 0x1534  [ 6763084E8322A4876D1613854640F914, 89EEEB47517A9964FA799821E5E45BDD6009EBDC628D6DADE6A7F03DE7CDA6CD ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
00:26:35.0572 0x1534  AmdK8 - ok
00:26:35.0682 0x1534  [ BE258C17CFD09F4210602105432E784A, FD38B50785206D6E5EADE65396030E18C8B9D993D7225057B0C24F3256BCE2E3 ] amdkmafd        C:\Windows\system32\drivers\amdkmafd.sys
00:26:35.0713 0x1534  amdkmafd - ok
00:26:35.0775 0x1534  amdkmdag - ok
00:26:36.0025 0x1534  [ 67A95F4B9F3C1E09F29017231E857F71, 984DA2D2264678EA001158939D2DA0F8A6D89362DCCEFFC1FFF00AEBF670B827 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
00:26:36.0041 0x1534  amdkmdap - ok
00:26:36.0088 0x1534  [ DE29D8AB57AD67D4940CAB4A48B3E230, 4E92AFCD9107573DAB8E65AC6318E4B8851DCCBE17E135DFF8CF5733210B52E6 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
00:26:36.0119 0x1534  AmdPPM - ok
00:26:36.0182 0x1534  [ 4C1F9BBAF5CCD76D4642F3B92B97B454, 514CCAA8B586B1019658BE101046386EB727AD48D7913AEF9A168763E91F0DE5 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
00:26:36.0197 0x1534  amdsata - ok
00:26:36.0291 0x1534  [ F8195C1A15955180DD663E7FF4C2F6DD, F3C0C6B38FB9478217EE25EBDBDF7A18F01B97655BC38373E70E71171705D5E9 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
00:26:36.0354 0x1534  amdsbs - ok
00:26:36.0447 0x1534  [ DD2F5BBCFAC4D8E48DB1A95A7EEBFF08, 619E3106072C6F785144D785C4AFB4C607CAF7ED29AAA4A1411BE262E62B7ADE ] amdxata        C:\Windows\system32\drivers\amdxata.sys
00:26:36.0479 0x1534  amdxata - ok
00:26:37.0135 0x1534  [ A67DA34878CE085349F010B211EC213A, F16E09DB13C669FFBBC53BBB57CC394BC886FD4B167AFCCDAEAE84E21818C2D1 ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
00:26:37.0150 0x1534  AntiVirMailService - ok
00:26:37.0400 0x1534  [ AE8F14295E704D9FD52092B81B3E1F09, FF0AA062D23903A3E3769713AB2F2D4AB307203C9726B9F0783B3E7DDEF08E6D ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
00:26:37.0432 0x1534  AntiVirSchedulerService - ok
00:26:37.0572 0x1534  [ AE8F14295E704D9FD52092B81B3E1F09, FF0AA062D23903A3E3769713AB2F2D4AB307203C9726B9F0783B3E7DDEF08E6D ] AntiVirService  C:\Program Files (x86)\Avira\Antivirus\avguard.exe
00:26:37.0604 0x1534  AntiVirService - ok
00:26:37.0869 0x1534  [ 807AE684CD6BDE9A8692B023993FAF48, 3671002909383757222AD02F717F5A7290F43AA2DD0CC05B4FF451F209E48DDD ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
00:26:37.0901 0x1534  AntiVirWebService - ok
00:26:37.0994 0x1534  [ 46AAF119090573A80D603745582229ED, 8D7C4AED66DD32A104965DC23D17C0815CD1BE2E3D52375C1A63863664EE174F ] AppID          C:\Windows\system32\drivers\appid.sys
00:26:38.0012 0x1534  AppID - ok
00:26:38.0105 0x1534  [ 24315B385F515D6D5476757EAFD62633, CE645397BF43CC54B864A0E4FCB86F76C10B9C2D2482E85DBBE15EF7BF045F17 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
00:26:38.0301 0x1534  AppIDSvc - ok
00:26:38.0333 0x1534  [ 2CE396457D5C18F034D243EC7E159010, DDF588A568DF5EAE058DF315535BD746760363E2242EF8C705F8DCBA2D5DA4A7 ] Appinfo        C:\Windows\System32\appinfo.dll
00:26:38.0415 0x1534  Appinfo - ok
00:26:38.0490 0x1534  [ 68AF553066C4DAE7D8698322526BDA86, 806A5228D204B18B3B9F88AB87B5918046BE96D1B3AEFEC9331CA7A483547486 ] AppMgmt        C:\Windows\System32\appmgmts.dll
00:26:38.0604 0x1534  AppMgmt - ok
00:26:38.0794 0x1534  [ A8AC0B8ED134888731D1A1BCEF930FA1, 917D2C99CB28C5F20BA386148B6A93541AEF900A9A99D310D732B501322945E5 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
00:26:39.0115 0x1534  AppReadiness - ok
00:26:39.0380 0x1534  [ 2E71E6B389976FD78609A1AB44F7EEB1, 24F7A6D7B4C3DFFE128AFE70F37FFA6258928DF7CCFF3AB2490A41F595529299 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
00:26:39.0591 0x1534  AppXSvc - ok
00:26:39.0622 0x1534  [ 0756EECAC010BE449D07502DF27E7701, 6A895CA80050D021DB5E130102F626027339A22673B7C15C51A375C0401F03D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
00:26:39.0635 0x1534  arcsas - ok
00:26:39.0686 0x1534  [ A5792F971EFE86B7F56EE7299ED1082B, 82DCD15E2C9D8A3EA663941C9CE73020FEEF2F91354D0BB51E8A142AA1E30217 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
00:26:39.0782 0x1534  AsyncMac - ok
00:26:39.0850 0x1534  [ 8921DF6060DB5C7700AA48CB12E9EA08, 8F18841B454CDE4926C50B23F818D00ECE0AE884DB198E396445CB44CB39B2C4 ] atapi          C:\Windows\system32\drivers\atapi.sys
00:26:39.0873 0x1534  atapi - ok
00:26:39.0997 0x1534  [ FD9A5BCC3AFB02E87668B749546B6229, 4BE969A11CEE8033F40EDE7E06A5904B328D3FC1842855C0DB38D5EEF458219C ] AtiHDAudioService C:\Windows\system32\drivers\AtihdWT6.sys
00:26:40.0224 0x1534  AtiHDAudioService - ok
00:26:40.0480 0x1534  [ 240FF83DD79546B26F187FAB20F83864, C4DC0159016B4A4630357131E614814C068D07BEA94AAF6393E882A78C9FCA1E ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
00:26:40.0718 0x1534  AudioEndpointBuilder - ok
00:26:40.0959 0x1534  [ 4C86961C71396D2BA39DAD9783437546, C36A428701D6C0E2FFDF0ECB8917FB6ED48E8014F7C3DD911387DE6E161D7EAD ] Audiosrv        C:\Windows\System32\Audiosrv.dll
00:26:41.0040 0x1534  Audiosrv - ok
00:26:41.0091 0x1534  [ AC82CC4F2A41E098EB34C0A9F8125DDC, CC416DD5FC8E14A1F99F8DF52D795CA6E16EDBF8FD7C9624B10BA83D9D954BF2 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
00:26:41.0102 0x1534  avgntflt - ok
00:26:41.0210 0x1534  [ 45061BD6F11B80BF1C07A9253A659BF1, 9A1AFE963672E23F3C19FACE2CEB64766C964B165ECB26F36B6FB5730CEAFD2D ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
00:26:41.0234 0x1534  avipbb - ok
00:26:41.0357 0x1534  [ 6C4B9A2FF6924405E9ABFB558049D4DD, 9AB314B9ECF41832589726556A93CEAAE2AE774B1738A46A027E833B73A72118 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
00:26:41.0373 0x1534  Avira.ServiceHost - ok
00:26:41.0404 0x1534  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
00:26:41.0404 0x1534  avkmgr - ok
00:26:41.0451 0x1534  [ 74179E7C103F3A44B33D7D982E21E35D, 7F2384B065EA9959734D65426781D901CDB0DA8DFCAD13BF05044DDF33CA5688 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
00:26:41.0467 0x1534  avnetflt - ok
00:26:41.0545 0x1534  [ 2F7F80543129210CA75995D0DCA488E8, 353E598FF26FA363C02A2B44BA8D7D1ED97B8AC8C69F1B5C5D521BD0D5D5AB94 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
00:26:41.0638 0x1534  AxInstSV - ok
00:26:41.0717 0x1534  [ 00D64E82900E4EC9062805ED87C2D75A, 577110F9A7C6C2C4CF86FFF4F60E23F61623ED325FC950033900A5102754A677 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
00:26:41.0779 0x1534  b06bdrv - ok
00:26:41.0967 0x1534  [ 5164A66EC1565711A7B4CF2F143B4979, DA29F0FB63F3EB2BF92D51FEB4BB7D2B964553D2F634556325953927464CB3A5 ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
00:26:42.0920 0x1534  BasicDisplay - ok
00:26:43.0014 0x1534  [ F4C58BBF2972BD84C73F6A14CA35AC4E, B7A226EB861B63ACF4BF9B5A331ACA6FFC9B787DCCAA7697EEFC4F634508A6D5 ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
00:26:43.0045 0x1534  BasicRender - ok
00:26:43.0139 0x1534  [ 25349D0B334E528667980948ED107D89, 70EF9D3B8DCAC6E9720C6F3EBC77392FADC182A6925F9024FE30A21321E0137F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
00:26:43.0139 0x1534  bcmfn2 - ok
00:26:43.0248 0x1534  [ DF78B56EEE6004DEE8CE57763128075E, 5758CAF4B0182F3F2E2508B3BB58B0271F2689808D09675B2753FE373D1D77D2 ] BDESVC          C:\Windows\System32\bdesvc.dll
00:26:43.0389 0x1534  BDESVC - ok
00:26:43.0482 0x1534  [ 1E8A9267F8886803AAE02982FC1B5BC4, 655DF84E037BD6E582A6BA89737A4388956219171AF7253D126E54A23F16BE59 ] Beep            C:\Windows\system32\drivers\Beep.sys
00:26:43.0560 0x1534  Beep - ok
00:26:43.0764 0x1534  [ 7FAFFFC4C59F5010D6E7CEA152076B92, 945FD6C04E109D4E5A4164BAA9A8120EC85AB809555AAD83E61B9F179F976FD7 ] BFE            C:\Windows\System32\bfe.dll
00:26:44.0060 0x1534  BFE - ok
00:26:44.0310 0x1534  [ BD60F5633F6BD617D9ECCA3FFDC0D37E, 2F0DECAEB7096CD628387263381E123C883F483BD87F7F2BA6DEFBB5A184BAA3 ] BITS            C:\Windows\System32\qmgr.dll
00:26:44.0451 0x1534  BITS - ok
00:26:44.0514 0x1534  [ C9FD65687EF89715999C582D3E568812, 42BA59A78A47C510CB2AFDC6C6080B33F9F611F84FEE5262DFF16D7633C50EB1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
00:26:44.0607 0x1534  bowser - ok
00:26:44.0732 0x1534  [ 3A4A543F135DE9A06ABA9DF982D79DD7, ABA165435C27BE15D7EBD3E7D023E295CB7AE2A099DF9E253C78EC45EADD75EA ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
00:26:44.0889 0x1534  BrokerInfrastructure - ok
00:26:44.0943 0x1534  [ 2AAD720B32904B97EDD8C3211344F79E, 41B1AEA5FAA48033B2581E18D68EFC986C3D65B383847E250C054CE3133A893C ] Browser        C:\Windows\System32\browser.dll
00:26:44.0986 0x1534  Browser - ok
00:26:45.0061 0x1534  [ F8DD3B0EAC1EF1D087AE47E5819540AC, 866C951B52E3202AC89552AEA72A45123367199335578F03815E2ED55DA2FDAE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
00:26:45.0122 0x1534  BthAvrcpTg - ok
00:26:45.0206 0x1534  [ 647E2A425AD43637EAA01096A58B7089, 8F76D024FEBCBA1AC54363133DE1E0DD5B9D696E5E688EFEBC3B79F7F1B9C568 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
00:26:45.0314 0x1534  BthHFEnum - ok
00:26:45.0335 0x1534  [ B95040CAD3434D9EE003065363A0FAFF, D441E0676EA1AE1ABC305732024311CA59715E6763B3D7ADB728DEEFC403E182 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
00:26:45.0362 0x1534  bthhfhid - ok
00:26:45.0406 0x1534  [ F334BF7B0737CEB3B6822631EAD55A87, 4E5AEB1F8E109BA01A5D1CDE2E3C677FF07F2AFE8B195CB5F82AA28816D2060E ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
00:26:45.0443 0x1534  BthHFSrv - ok
00:26:45.0461 0x1534  [ 29AEE352AED4FCD2191436D263D75347, 3D21262EA26BF423BFA4A9146E53F8B036B2A1157DBE91A11C5603AF7A670B6F ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
00:26:45.0499 0x1534  BTHMODEM - ok
00:26:45.0510 0x1534  [ 26DD0127A05B333E36316E6EA9A6AAE2, A2DC4483FF5639EE8DD315AB2989865CA6A6992C578FD7F7D31698A015355941 ] bthserv        C:\Windows\system32\bthserv.dll
00:26:45.0556 0x1534  bthserv - ok
00:26:45.0604 0x1534  [ 854AF190F55E6D70EC65A85798F896E2, 6D39F9131BE93F934502BA1DB109E7AD35D3987B636F7B32F9C34823DF25746B ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
00:26:45.0723 0x1534  buttonconverter - ok
00:26:46.0228 0x1534  [ 68BD23A0AD9E934F037A1D8A1929D1E2, 7104B04435930D085D01779065C8F293A265800D90C9DEFB19C998D9326E44E7 ] c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
00:26:46.0276 0x1534  c2cautoupdatesvc - ok
00:26:46.0953 0x1534  [ 13297729C696656F990A5DBA53023129, EB2B34B04B79756199DBBBDE99ACBB576D20C7C0AF3E4F3C0CF0040948216AAC ] c2cpnrsvc      C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
00:26:46.0998 0x1534  c2cpnrsvc - ok
00:26:47.0079 0x1534  [ A10A1E05A943B10ECE5D57D131B7404D, 71BB816B6841001A4305DF1814926B639265E91895CA5D06284B0970E40CE386 ] CapImg          C:\Windows\System32\drivers\capimg.sys
00:26:47.0151 0x1534  CapImg - ok
00:26:47.0194 0x1534  [ F2829DC6D292DCAC5029893BB2E9FEE3, AF2A25722D3BE37BABD1F6668786AAF39E9D6CA18CE8E845E63266E218C64526 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
00:26:47.0246 0x1534  cdfs - ok
00:26:47.0387 0x1534  [ F3A9E38AE23AD4015764AF89E4AE3519, 57ED6AC834177E128720FEC5B5793F35C7C36474E2D787F182B6730933222CC9 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
00:26:47.0668 0x1534  CDPSvc - ok
00:26:47.0793 0x1534  [ CA160E02F35A61C6F5C681FB4669C519, E6BC66156EE226F16804C4FDC8A60EB15CE6212EAFB9FB841FAC899979E140E2 ] cdrom          C:\Windows\System32\drivers\cdrom.sys
00:26:47.0864 0x1534  cdrom - ok
00:26:47.0997 0x1534  [ 320E7A02D81A468E8C1FEEFDB856AFAE, E65127D3D6B628F9D19EA509FEBD9E4DC1BF20D0C62C3C9E1D7087DF972B2AA7 ] CertPropSvc    C:\Windows\System32\certprop.dll
00:26:48.0090 0x1534  CertPropSvc - ok
00:26:48.0192 0x1534  [ 60D7D304DF75DFF6A46CF633F583B592, 4141D8D1C6FE829C02053DA91AC6B0628BDEB3322CAAD4AD958190F9D173340E ] circlass        C:\Windows\System32\drivers\circlass.sys
00:26:48.0282 0x1534  circlass - ok
00:26:48.0392 0x1534  [ FF9D4BCE19E5D36CB3A845A3286DA6C3, A0E2C38D629359EEC6F8EEC6F92A3E571AEF018BAF259F395DC497ED4827460B ] CLFS            C:\Windows\system32\drivers\CLFS.sys
00:26:48.0439 0x1534  CLFS - ok
00:26:49.0259 0x1534  [ 9A5944952B122BBF68D0032EF440CFB5, D4046BA3F985A7F95F1A4A55B6F2976E292C861771CAC80CEC6DE4C82E8FDBB0 ] ClickToRunSvc  C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
00:26:49.0306 0x1534  ClickToRunSvc - ok
00:26:49.0478 0x1534  [ 5C4648673693724C8D4A1A92E1AA06E6, 5D548241715687BFA52E40B867EF73CB45D01B7F9A9B7F00B92BF2B4C97BE1D0 ] ClipSVC        C:\Windows\System32\ClipSVC.dll
00:26:49.0509 0x1534  ClipSVC - ok
00:26:49.0599 0x1534  [ 8EBA63416EC166EBA6EF6D34A505D8C8, 5EB0236ABEA2277B71D9F009DA71934C618606B20BBEC07B8595195E40C12A2B ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
00:26:49.0711 0x1534  CmBatt - ok
00:26:49.0906 0x1534  [ 3B64DA873CEA5BEC42570BFF1054A014, 3649B25855CB9BE5BA3B3FEE4221575381FB2D488B8B050B5DD0088386AA0F7B ] CNG            C:\Windows\system32\Drivers\cng.sys
00:26:49.0953 0x1534  CNG - ok
00:26:49.0969 0x1534  [ 5EEA0856000F81B3D709BC81B3AA1EF2, C04E4E31D3FC38102BA410D312F58AF848920EE37004A5C306D79229C9B6079A ] cnghwassist    C:\Windows\system32\DRIVERS\cnghwassist.sys
00:26:49.0985 0x1534  cnghwassist - ok
00:26:50.0622 0x1534  [ 74CD3BF688E2B408227FE012A2F2D8ED, CC01AC79CEB9DC94FA5675D66F048928C9968B8944E34F5482A73C14B70EE8A8 ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys
00:26:50.0840 0x1534  CompositeBus - ok
00:26:50.0840 0x1534  COMSysApp - ok
00:26:50.0950 0x1534  [ D38774D1D383A2CDB9A4F64B7206913B, 6CDDC46D1D431342F00CA537FC327B23B8AA4D513CEEEE61F3E19C77975DF9C8 ] condrv          C:\Windows\system32\drivers\condrv.sys
00:26:51.0059 0x1534  condrv - ok
00:26:51.0293 0x1534  [ 8AFDD74F2DC5BAD9B2215FB19DB65240, A2BDDA4C77C63D3D8E9F1D397D7B41EC1BF093A6399C14D311D4D230B5F1E093 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
00:26:51.0325 0x1534  CoreMessagingRegistrar - ok
00:26:51.0415 0x1534  [ 35DB06AACD8AD5999161DA71FF0E16F0, 22AD27811AAD14666ACEF4115447B0CFAA70D1E73923059FB2A9B4C3CBE500A6 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
00:26:51.0508 0x1534  CryptSvc - ok
00:26:51.0714 0x1534  [ 838755238B2BAE5A4802B038443B8A22, 1A89E413C6E5C3E8C2B64F8A1D41271D3FA39BC67291331FEC8DCFD4F8CCE994 ] CSC            C:\Windows\system32\drivers\csc.sys
00:26:51.0839 0x1534  CSC - ok
00:26:52.0027 0x1534  [ 7D64B14DAFEBBC19A87EC9D5B862F6AA, BE7510E618566FEA013E2E77CE4C7C160BADE105C493424595A15D0A7F1615CF ] CscService      C:\Windows\System32\cscsvc.dll
00:26:52.0074 0x1534  CscService - ok
00:26:52.0136 0x1534  [ F038EAF73AAB72A4A89185A5A7B9FD75, 8213A60B3BEAFC1C554C5D049DFE3C6E44CEFE639EDD6A335AC18A9DAEDA2D4B ] dam            C:\Windows\system32\drivers\dam.sys
00:26:52.0152 0x1534  dam - ok
00:26:52.0214 0x1534  [ 7F1FB8836C7F0C17BC0522616D3C6D76, 787AF20008F329089BD893520F404A477007E9BC40B40B030FB2B6FABE9FFC70 ] dc1-controller  C:\Windows\System32\drivers\dc1-controller.sys
00:26:52.0246 0x1534  dc1-controller - ok
00:26:52.0417 0x1534  [ 5E57B9FBB4E9C43EE5B69BEE01A1819F, A1F8D1E52AF446CEA2EB50064E3A24B713B19197D61C3EAECB81B3CCD80558E7 ] DcomLaunch      C:\Windows\system32\rpcss.dll
00:26:52.0496 0x1534  DcomLaunch - ok
00:26:52.0605 0x1534  [ 0605AB12BF1856DF21AB708F28EA91CF, 3A6A7F8F84044DC1EA490A007E6DBC52203BA237ECF1B845961D9BB95E9BF8C8 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
00:26:52.0665 0x1534  DcpSvc - ok
00:26:52.0759 0x1534  [ BABB7BB5AD3CECFF466E6080F43CFC58, 1B8FF66557EC4C749156ED6DACC4D61D5DC4E25DD58F6DB3713C356214B80FDA ] defragsvc      C:\Windows\System32\defragsvc.dll
00:26:52.0830 0x1534  defragsvc - ok
00:26:52.0900 0x1534  [ 63C9464B165D31ACC46B6B089AB36B41, DE38DE4E6331D07630B63224F8014C27368C29791EDB58CC5DAE7CBACD37160A ] DeviceAssociationService C:\Windows\system32\das.dll
00:26:53.0027 0x1534  DeviceAssociationService - ok
00:26:53.0050 0x1534  [ 7B3DA16FAA498838BB457E0B7E380EDF, B73DCFFA60886F10765E4B76A58CFF18C08CAFEE620700361FC8FEC7E80B5958 ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
00:26:53.0083 0x1534  DeviceInstall - ok
00:26:53.0098 0x1534  [ CF3895DD260ADE05BC91D8FBE0A82907, D7D8A29E873BE5C3832C9264F0165F6CD50D42ED0E04B0FCF07F054793092334 ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
00:26:53.0208 0x1534  DevQueryBroker - ok
00:26:53.0290 0x1534  [ 25435407D97419627F4B10653433BF2B, 5429B0DB7C5302E9A6AF92C046637183D4147D4A206963ABEA3A611214D6AB04 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
00:26:53.0317 0x1534  Dfsc - ok
00:26:53.0370 0x1534  [ E59C209F1F633C1AEAF151B2CA46BBAA, 6A4DA927418B56A228CC8D9DFA3351B2B53A9328F5C56C10F0C7B19974B2ED89 ] Dhcp            C:\Windows\system32\dhcpcore.dll
00:26:53.0626 0x1534  Dhcp - ok
00:26:53.0829 0x1534  [ 95AA7877FD4161BFBC8493F9279B1901, F6B7DF75D763A89901BD12454BEF92D161B392F721B8568505073929D9F419BD ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
00:26:54.0033 0x1534  diagnosticshub.standardcollector.service - ok
00:26:54.0423 0x1534  [ 58395E37ED838B93A56F1D089C2F53CF, 57D167B58DF5B33F7E2A98E1B8B33C8F076D34CA032D22F050AE6F83A48DC8E6 ] DiagTrack      C:\Windows\system32\diagtrack.dll
00:26:54.0454 0x1534  DiagTrack - ok
00:26:54.0517 0x1534  [ FDCD449AE9E75D7690593D16ADAF4DB4, 3366C4BDB031EB525F85850E903C46802A2AC762C0772C6F6E543DDA4AF1E9D5 ] disk            C:\Windows\system32\drivers\disk.sys
00:26:54.0533 0x1534  disk - ok
00:26:54.0595 0x1534  [ 43A1B8B43CA4E213E0FD920F2FD6BCBA, 839C6047FD6EA951538209C30C9D8AE68F9B47A58DA151D071C03408250B0ECD ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
00:26:54.0767 0x1534  DmEnrollmentSvc - ok
00:26:54.0814 0x1534  [ F10A8F6D036CEDD14A5471782C52F041, E0DA3C4F76DBBEAED549375E57819F8825B33A118F7674D417D294054863F648 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
00:26:54.0892 0x1534  dmvsc - ok
00:26:54.0955 0x1534  [ 7228733177F673B4D51BD1AA082D47C1, DBE155CDCFAA7C32407A207F637F252FA0CE30F1DE7E7DBEC42DB37FADB5BFA7 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
00:26:55.0056 0x1534  dmwappushservice - ok
00:26:55.0109 0x1534  [ 592E41B3C11CA12203D3708AD8FC3D37, 6C69D5D603FBF038C069EDDCE29F7C6A60CAAE58B985AB218E1497F2BA934D42 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
00:26:55.0141 0x1534  Dnscache - ok
00:26:55.0202 0x1534  [ 6184C7A2F12625C108AEFD3A43429967, 689153F319BB1013FF60F71317E8380A6945EEE8141EDBDD6B185A966E23BB93 ] dot3svc        C:\Windows\System32\dot3svc.dll
00:26:55.0236 0x1534  dot3svc - ok
00:26:55.0309 0x1534  [ A616D8297C1BEA690BBC796736A7A78D, 9365470F4609606410AD79D98E1E77D815DC7C5AA924FB639FCF713EE8EDEA76 ] DPS            C:\Windows\system32\dps.dll
00:26:55.0348 0x1534  DPS - ok
00:26:55.0379 0x1534  [ 45771610FF181434073B5A0A00F20F8D, 6A17DB09AA6D021F000F7315317235E1FCF41FD58EA7DF81A7C9F5A6DE999984 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
00:26:55.0426 0x1534  drmkaud - ok
00:26:55.0535 0x1534  [ 00D9A948FB7344C62CEBED88E50EE39A, EF33FE7FB34DE571F3956C1F7AC8EFAA25BFD9F3AFA3ECD25DD34C5890873245 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
00:26:55.0801 0x1534  DsmSvc - ok
00:26:55.0910 0x1534  [ EA354224BAD970CF0F438E6567F26A49, 900F2454F085BC6D2C2149A96452F3375111C601C4464066B6DA1DD7B795021A ] DsSvc          C:\Windows\System32\DsSvc.dll
00:26:56.0082 0x1534  DsSvc - ok
00:26:56.0629 0x1534  [ 89C9C3745F270EF93988DA57BC6AA62B, 947886F3121919427BDCB123C6FC28E29CA73D427E92025E1BEAA743D27306D3 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
00:26:56.0676 0x1534  DXGKrnl - ok
00:26:56.0785 0x1534  [ 6E36BDBB46DF7F865D0DD30663AE3891, 98967B01EA450AD4D5FE8085F710359C022D783B839A51BD4A266718156B01EB ] Eaphost        C:\Windows\System32\eapsvc.dll
00:26:56.0817 0x1534  Eaphost - ok
00:26:57.0848 0x1534  [ 3070013B01EDA42C7EB67D731340C396, C083CA05650750876E70CB6AB51D5C047C06098C2ED86B083A74C97830247BFC ] ebdrv          C:\Windows\system32\drivers\evbda.sys
00:26:58.0332 0x1534  ebdrv - ok
00:26:58.0390 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] EFS            C:\Windows\System32\lsass.exe
00:26:58.0407 0x1534  EFS - ok
00:26:58.0443 0x1534  [ 59EE187E333EE9914DD9BEA5F4E0D85D, E34BB8075E38FC6AEC056323C6E3B5B4E7041EE6F4D51699B706DEEA18BDB911 ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
00:26:58.0456 0x1534  EhStorClass - ok
00:26:58.0475 0x1534  [ 9297F1CC486F24BDFD2874156AC5430F, 1AF8689ADE4E658FC9418F7886B6C19F7D005EAB2AEF9B0E14FC81C61A74CECF ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
00:26:58.0493 0x1534  EhStorTcgDrv - ok
00:26:58.0511 0x1534  [ 9E8FF6B95FD420FA9E40BE548E5C8D92, 8825B81418335D03CFAADB792C1466023C459BE489ACACBD6686FFB544F22D30 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
00:26:58.0642 0x1534  embeddedmode - ok
00:26:58.0656 0x1534  [ DC2F91EAE9A28FA8C6610A9B7701B70D, 480DB509BF944AAC3617594F1245B4603069DE39186BC1FA7EDB8E0536B05E79 ] EntAppSvc      C:\Windows\system32\EnterpriseAppMgmtSvc.dll
00:26:58.0734 0x1534  EntAppSvc - ok
00:26:58.0749 0x1534  [ F7FCCA6300485EF60CEA6D991D6C8C78, 24080D80CF1FD678DF4C9CAE70F65F8D9232F5F6A6F2B73A77B5E3C91E6505F3 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
00:26:58.0764 0x1534  ErrDev - ok
00:26:58.0794 0x1534  [ 2093F65AA84478E28C8E9D05BC413845, 086D4E0D4B993F4041AA8A9DCBEEDB53BD05B88E2BEFB218837FB10FACDF4233 ] EventSystem    C:\Windows\system32\es.dll
00:26:58.0854 0x1534  EventSystem - ok
00:26:58.0865 0x1534  [ DCCDC3F35F0618692117DF90800A4284, B636B2A39AE89A9C2CDE17EC52DA669DA8AA9E2B04CA5CA19926DA8009655244 ] exfat          C:\Windows\system32\drivers\exfat.sys
00:26:58.0912 0x1534  exfat - ok
00:26:58.0943 0x1534  [ 5A1C6AFFF6946C5C21A27AE05084C0D1, 558CB87E596E85182F6976F215EE0E35F57BF901409A2805E6A3C29D8984B048 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
00:26:58.0958 0x1534  fastfat - ok
00:26:58.0990 0x1534  [ 046FC9CF53A91E2FBA498CA7B0C3B028, BCFB06DF53065706DD6287E8C47BF5047F8A1E33981E1881E6ED7510337F5BC8 ] Fax            C:\Windows\system32\fxssvc.exe
00:26:59.0068 0x1534  Fax - ok
00:26:59.0083 0x1534  [ 4E4B7D935DBF522B2F23D3573596181D, 9D0EC9F65920EE0FFFB2D49C58E4D5151C8CEEB7AA82543D226E4B84EEE4B3F0 ] fcvsc          C:\Windows\System32\drivers\fcvsc.sys
00:26:59.0115 0x1534  fcvsc - ok
00:26:59.0130 0x1534  [ 583EB1C7690E361213BBD0472155128B, 5F5871490A6DAC4A824F4428941AC86FBFA9AA349B99B5D9544E5D62EB459FA8 ] fdc            C:\Windows\System32\drivers\fdc.sys
00:26:59.0162 0x1534  fdc - ok
00:26:59.0177 0x1534  [ 94B1A46EDD335F0C54C7BDAFC43348E6, 58073D58D0BE7389C2A4736AFE108835E5AE9C9950FF630644F585C99B964043 ] fdPHost        C:\Windows\system32\fdPHost.dll
00:26:59.0208 0x1534  fdPHost - ok
00:26:59.0224 0x1534  [ BC855BB7DFE06F27F78E0EB2A8CCB70D, D16C3DAB99C16B077BA5DA5E9E0646B0B9237B00ABAE867D9F81A2D072D583B1 ] FDResPub        C:\Windows\system32\fdrespub.dll
00:26:59.0255 0x1534  FDResPub - ok
00:26:59.0255 0x1534  [ F1125F20D56F28DDCD1A6F3E81EB4F5F, A6620ECCB15FAA70E4A43ADA4CE82CF97D708B6FA07F3FAED276359E7F92FD0F ] fhsvc          C:\Windows\system32\fhsvc.dll
00:26:59.0271 0x1534  fhsvc - ok
00:26:59.0302 0x1534  [ CDFD81CACE0E11596A3BB61EC4CF6467, 569FA86A215B054131AA9AFEECFEE7FD7143DCFFE275B84196004AEA538B2476 ] FileCrypt      C:\Windows\system32\drivers\filecrypt.sys
00:26:59.0302 0x1534  FileCrypt - ok
00:26:59.0333 0x1534  [ 3F02FEDAE894CBF4BAADDF8C8E1D53A8, DA32ABB1CDA867B8456C46F8581FA7F3A8D8B89D9F6E7422F51941D5FFA15B13 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
00:26:59.0333 0x1534  FileInfo - ok
00:26:59.0349 0x1534  [ 2824933386E30DE5BA089DF539CE19A3, 7B33E514576C68B444AE99CBA1360EBFAE8A46EEE5C01F4EE4CF471A712AB148 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
00:26:59.0458 0x1534  Filetrace - ok
00:26:59.0490 0x1534  [ 6A598249640F8BEDD79EC73917E1664F, A675238EA19E6632CDEB4EEFF7CF509EAAEF76AD8DFD247664E5607555D9CEE1 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
00:26:59.0505 0x1534  flpydisk - ok
00:26:59.0521 0x1534  [ 44B6A6832134DF651E887E941478CA35, FCF4EB726D00F5A17DD66C81CFDA49427281C94CF9CA2008397D591AEA61AE05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
00:26:59.0537 0x1534  FltMgr - ok
00:26:59.0672 0x1534  [ C197284A9D565A38497733AF2BDFA111, C6615AF0D366C2DD6D431B073901EED02D49AA3F252230735DBB52A90BCFA833 ] FontCache      C:\Windows\system32\FntCache.dll
00:26:59.0811 0x1534  FontCache - ok
00:26:59.0905 0x1534  [ 109AACC7FB0170535F71491F673AFD38, 212B6761ABBAC29993DA0A47C3DDE8074EA9E5A8FFA8FF6EAB95AC69D8FDD5A0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
00:26:59.0921 0x1534  FontCache3.0.0.0 - ok
00:26:59.0936 0x1534  [ 3F3B9E8CECD5604BC7746EF3A852EB67, 51AF62A9563379266C0C873E82F55427900032DFD7AC3EBDCDF77F8F8DE91A5D ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
00:26:59.0936 0x1534  FsDepends - ok
00:26:59.0936 0x1534  [ A60583221C7BB7CEC35C63285A297BE1, 3C842FBEAD1FA2BD8D37B2B0E8EDF77F4F50508C56FB25DFA81DE9679090D51D ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
00:26:59.0952 0x1534  Fs_Rec - ok
00:26:59.0981 0x1534  [ 58013A50225174EEF1410E37795D7908, F8E557CA4110ABB203192DEAF59D91A5FEF2A5EA394637276DAB7F4D2E7BFA39 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
00:27:00.0001 0x1534  fvevol - ok
00:27:00.0021 0x1534  [ 0DAAE3EFCE00133AB3E383A36C47CDAF, 9145665F4F0575F951803AAFAA1A7DC0FAA35430CAE7D90E902074D60D6F4C62 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
00:27:00.0029 0x1534  gagp30kx - ok
00:27:00.0045 0x1534  [ F59155B95D01C08F9ED774B626B504A1, EF0FCF35AD9CD5E5D695F0C064244D2B327E7FB10FD7CBB0586253EC75562918 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
00:27:00.0069 0x1534  gencounter - ok
00:27:00.0088 0x1534  [ AE24452F55C6F1784CBD7489D0CDDB02, 4E13C51CBF30A8662B1180AC74E968CFC428B6EA7931F09357E7D120063D4823 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
00:27:00.0135 0x1534  genericusbfn - ok
00:27:00.0141 0x1534  [ 96F0D3A583A91B634EE2AC2507356EDC, 43D2575F33D28F61C13D2DCF358BFA9DCEAE276C83152DBE7AE2020A66929CD9 ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
00:27:00.0156 0x1534  GPIOClx0101 - ok
00:27:00.0203 0x1534  [ E50CE978F571B900D9A7E2F1C5BCC070, EA14873A5F1B700D7CDBE55B9D214DC457262866A90D80B3E8325A8EB7932CE7 ] gpsvc          C:\Windows\System32\gpsvc.dll
00:27:00.0250 0x1534  gpsvc - ok
00:27:00.0266 0x1534  [ BA2455D93BD57989A04FE4094AA6F941, B579FB367C063EA30C034381148410D49D38E183A5A4D51D2334A81DAEE95CEC ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
00:27:00.0312 0x1534  GpuEnergyDrv - ok
00:27:00.0344 0x1534  [ 2AC2F4227EA41501E7BD2FFA7B3D82F8, 4CB7FF1C759C16733153BF147E4B5CFD61CB8C4EAB071E4655C830C7D35F5215 ] hcmon          C:\Windows\system32\drivers\hcmon.sys
00:27:00.0359 0x1534  hcmon - ok
00:27:00.0422 0x1534  [ FE85E924C86D6D313D61C28A451EA4DE, 22422CECDAB8EBAED6120E6CFDD57BAFC61EA12B1E3563E8605B9700DFE71EBC ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
00:27:00.0484 0x1534  HdAudAddService - ok
00:27:00.0516 0x1534  [ C277A49F8A8295840DEBC9240B75A282, 8B2BA0E6A8300323765D95ECD843105B0FC4B80B85EE2220E677C4E9A760C9D8 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
00:27:00.0531 0x1534  HDAudBus - ok
00:27:00.0562 0x1534  [ D5A57EF4822A0388352FFF9F5CD53495, 509F365386859157E9078821FAA56D2A3C0BA296CA129E0D42453428A14687A5 ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
00:27:00.0578 0x1534  HidBatt - ok
00:27:00.0594 0x1534  [ 39575B53EB80C77FF2A3F1449D00B7F5, 37E66B38BACE00AFEF7093F990A234399D8451A9D2C2C8CBECAB69C664E63EA6 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
00:27:00.0641 0x1534  HidBth - ok
00:27:00.0641 0x1534  [ 35C3B602664116E737FF729F9A7156AD, 7A3C5CAD716E819CC53405971F3ACD135BCF023EC2228C1095E2116BCC384E62 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
00:27:00.0672 0x1534  hidi2c - ok
00:27:00.0687 0x1534  [ C4ABE526BBF2A18E8AF70177FBAD9C6E, 4DA06B563A08AC15D949F4599F73F172B3BFCB5D23B34240D1E2114438A11929 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
00:27:00.0703 0x1534  hidinterrupt - ok
00:27:00.0713 0x1534  [ 348416C7D7EB05BC3099FE2F2B27985C, F30E8682E9DD731A1AD7328FB8A48A2BB7D6E52780AE1FDE839D26E84B4FA7B5 ] HidIr          C:\Windows\System32\drivers\hidir.sys
00:27:00.0734 0x1534  HidIr - ok
00:27:00.0761 0x1534  [ 5576DF399CF2D3B63608F7F282151249, 04939E79B8B8035547CE6FFE9001252CA810BAD46D8DB75FF5C13EB10EEB5C57 ] hidserv        C:\Windows\system32\hidserv.dll
00:27:00.0805 0x1534  hidserv - ok
00:27:00.0826 0x1534  [ 01F732724AF6EFE69886DA95A4E51820, E048A480F9396418BDE9659596E7EDA5FF97D3CE029D186048609B47575BEAE1 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
00:27:00.0870 0x1534  HidUsb - ok
00:27:00.0891 0x1534  [ 7433A8D28EE11A661C7A45AF28BA7987, 8A73DB423924E84CD3629BF6C7298CD093D2437B73B3F4520D39330923DDA2D6 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
00:27:00.0985 0x1534  HomeGroupListener - ok
00:27:01.0031 0x1534  [ 3FDBFBE5AE639996EB8D482C16BA7EA9, 7E48304818AABB4C5B0CB7FD32D96D6F90F4180AB0F668A2FE653A7097A40673 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
00:27:01.0078 0x1534  HomeGroupProvider - ok
00:27:01.0094 0x1534  [ 3844CE7DD23530CAD59D8CABA57CCB05, A44BB60686A0E98FF370D9DED5B32C3F34F0352ACFA3B3052BA4023922B53DB7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
00:27:01.0110 0x1534  HpSAMD - ok
00:27:01.0141 0x1534  [ CA6EADBB8731CA27BDA4037BF290AC14, 31EC9397D55D4EEC416AD722134E2D6B5D14E46D2150CB94889C4BFDAACBF421 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
00:27:01.0172 0x1534  HTTP - ok
00:27:01.0172 0x1534  [ 8841D927EB1F7FFC8B1805BC0CF190ED, B063E686380EEF582CF736E33751812F0041C593C7F30EE97D13DEDC9B246AB5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
00:27:01.0188 0x1534  hwpolicy - ok
00:27:01.0203 0x1534  [ 53436C3835E80F4421652A67F44D6313, 8731091945A839713348DF3060A4C96033874E2B3DC7E099BEEC8C65B07F98CF ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
00:27:01.0227 0x1534  hyperkbd - ok
00:27:01.0243 0x1534  [ D4CDEE4A62BDFFF6E8558A9552148EA7, 55306786CB45082AE374937EBA256FF9CD640BB2E8C19DC6C704489D4743F5CC ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
00:27:01.0268 0x1534  i8042prt - ok
00:27:01.0295 0x1534  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
00:27:01.0305 0x1534  iaLPSSi_GPIO - ok
00:27:01.0309 0x1534  [ F1DF87463AC308047B089E9F0456B4C8, DFFF3C63D3124C2B879B888104042406FE326D4E7C8C1881A269BD4287B9CD33 ] iaLPSSi_I2C    C:\Windows\System32\drivers\iaLPSSi_I2C.sys
00:27:01.0320 0x1534  iaLPSSi_I2C - ok
00:27:01.0351 0x1534  [ 25555186E4FBDF0E30A5DBFC9B9A73F9, 4A9DAC2B56389C5955C343E202C6E81CD3A608E78A4BB7E6ED560719DF02C955 ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
00:27:01.0365 0x1534  iaStorA - ok
00:27:01.0392 0x1534  [ 9FDD4763A115D04F565C38183DE4646F, A8B0653E7C5F5B3CB2A1B642F502269FB1BB1E35DBB1CBABDBDADF92C9815727 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
00:27:01.0417 0x1534  iaStorAV - ok
00:27:01.0444 0x1534  [ 6241810294275CEA59EBA9733080E5EE, F9A1A505B9279CD660CAAF4F8D21BDC34AC75FD86E881632A378B9BF39A3738E ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
00:27:01.0448 0x1534  IAStorDataMgrSvc - ok
00:27:01.0469 0x1534  [ 4E69EE8F8E5DA036535D433C544AF9E2, 2ADE9B97CE1C19FF984D8BB99CF31415872C2D9628864BD78C0E44D21CC94EE3 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
00:27:01.0488 0x1534  iaStorV - ok
00:27:01.0501 0x1534  [ 15C59DF20F74A0C2C764B991FED7F4A5, 6E9804775E815F32A4D73C346E627D64A3096525E78FAE3B6E43CFECAE270428 ] ibbus          C:\Windows\System32\drivers\ibbus.sys
00:27:01.0521 0x1534  ibbus - ok
00:27:01.0562 0x1534  [ 88E6A429944544346EC3AE1FD7D24BCC, B6B8D51E5491C91D2FCDC77C1D82A5168B0C860252208E1B4612D8D5C19401AD ] icssvc          C:\Windows\System32\tetheringservice.dll
00:27:01.0685 0x1534  icssvc - ok
00:27:01.0700 0x1534  IEEtwCollectorService - ok
00:27:01.0700 0x1534  [ E71AC94964ED675B3ED0727059B7F97B, 5468B5E9B75B10EA0BFBD81827FFC9CABFC69A4065CC5A5792DBC289D4DA27EE ] ikbevent        C:\Windows\system32\DRIVERS\ikbevent.sys
00:27:01.0716 0x1534  ikbevent - ok
00:27:01.0779 0x1534  [ 6F9C31435DD3E3D3BC247212EA144EBF, 05C4A0BD4BABD27783CEFEE6108C1A05911A212189233F09AF1A56BDC60F60F8 ] IKEEXT          C:\Windows\System32\ikeext.dll
00:27:01.0825 0x1534  IKEEXT - ok
00:27:01.0841 0x1534  [ 2FDB67F5B9F4E96B40FDC9D1AA0B686F, B556328D54F886792A89588F3FEFE38F7129E3D7A417CDC012778FA4EF37A8C1 ] imsevent        C:\Windows\system32\DRIVERS\imsevent.sys
00:27:01.0857 0x1534  imsevent - ok
00:27:01.0888 0x1534  [ 3F2BB021CB280880F8C1B7A6FEF9B447, CEC0BF9D6C9CF6E6A9F9B4E656BD47208AC977EDDC11C1C3BCD07EB50BABC017 ] INETMON        C:\Windows\System32\Drivers\INETMON.sys
00:27:01.0904 0x1534  INETMON - ok
00:27:02.0029 0x1534  [ 2DF4ACBD8897D56091C9873DE210C2BD, B00E3C91E716C2E927E37938DCFD1D044F573EDA3E35C4367F158EB16B77B675 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
00:27:02.0107 0x1534  IntcAzAudAddService - ok
00:27:02.0138 0x1534  [ 498759139F71142888CF7EFA1ABE18C8, 9CD0CD748B143F947B4DEDE39344A8C284717CC8AC97E25827EB73CF10831419 ] intelide        C:\Windows\system32\drivers\intelide.sys
00:27:02.0154 0x1534  intelide - ok
00:27:02.0164 0x1534  [ DC270DDCDDC2EF65D484A65CC5166222, A88BEAD819ABEFE28B6F9A10586ADCB0EE2A5ED9273F176E9313750609C7892F ] intelpep        C:\Windows\system32\drivers\intelpep.sys
00:27:02.0173 0x1534  intelpep - ok
00:27:02.0204 0x1534  [ B4D9C777762B1F7356958B9C0AA93BEB, F11B07FE939A107AB4EED4857854DF269C2D86A80C8507C8B1E95F7805975EDB ] intelppm        C:\Windows\System32\drivers\intelppm.sys
00:27:02.0229 0x1534  intelppm - ok
00:27:02.0231 0x1534  [ 22BD83268B80A8C89AAC0BDF46E4EB5D, E7DC0C2E4104B51EA545BA8D0CFF11FD6A15BFD8EE16E546E8FC220853402CB3 ] IoQos          C:\Windows\system32\drivers\ioqos.sys
00:27:02.0258 0x1534  IoQos - ok
00:27:02.0274 0x1534  [ A49E47A6E1429123F46A7CA9C05AEFC1, FFD68CA46DFAA4954FD76145808E2C74BDC34FFD6979BB3FB6A3EE4DC33CDC78 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
00:27:02.0305 0x1534  IpFilterDriver - ok
00:27:02.0345 0x1534  [ 8FBA61B7CB44F136226BE3B346FC6D19, 2190A523AC948B18C2C7B6DC96ABB654DAB471AD5E5E13F79899416E91777AED ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
00:27:02.0433 0x1534  iphlpsvc - ok
00:27:02.0449 0x1534  [ E0C276985AF968CE295B8E09C121321F, 07B54165E80D4254C29A6CF00CC634E70F190EF0EB8EEF73EC14F38B841087A5 ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
00:27:02.0489 0x1534  IPMIDRV - ok
00:27:02.0504 0x1534  [ 5D3744E6FDEC1A6FB3FA9B1DD4AF0694, 209BE9FC25C8BF8CE058B7E993B6A902B881380DADC69F5208733077DA7F4382 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
00:27:02.0527 0x1534  IPNAT - ok
00:27:02.0546 0x1534  [ B18202D72C0EF4B53CEC6F59E3E1B955, 6DA244E6485372C16CF0B38838DC90B48079A85F5D22B0F2F197C8DA37F0A293 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
00:27:02.0572 0x1534  IRENUM - ok
00:27:02.0597 0x1534  [ CD04CBCCCB4C0E4BB06B98E0F45C888A, 106B3E823C188BD14328F2BEA28559D2F637C270064B2FD214522FAC4E616F4C ] isapnp          C:\Windows\system32\drivers\isapnp.sys
00:27:02.0605 0x1534  isapnp - ok
00:27:02.0617 0x1534  [ 5D90E942C94B20E0F321015C0ABF3EEA, 4110551B172D4A5524DD857D7CB65FAF2594310BE7883D5641BC0DF5EF49C82C ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
00:27:02.0636 0x1534  iScsiPrt - ok
00:27:02.0652 0x1534  [ 4EE2423C38F43D37F8497A672FD10BDC, 031C5272DD28809255CF4FA8E6DE45DBFBD9A363BBD5156D0AEE0787C4297980 ] ISCT            C:\Windows\System32\drivers\ISCTD64.sys
00:27:02.0660 0x1534  ISCT - ok
00:27:02.0702 0x1534  [ 66D019F462261DF7FC5C0D49CBF9258C, F2D0807514FBD7CA594C00505A73EEA825ED846CD9E182E1FD833A04A0AC4877 ] ISCTAgent      C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
00:27:02.0702 0x1534  ISCTAgent - ok
00:27:02.0718 0x1534  [ 4192DFE6CA143C0AD8AF42C51A82BECA, 31FB3A261D0D5241CC87EF7DFF8BFC1A1EACE8CEC42138918EC5958DAEE100CD ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
00:27:02.0749 0x1534  kbdclass - ok
00:27:02.0777 0x1534  [ B63C0DB341DCB46CF7AA259333A737DD, F1B43BA68707F3F99CD31AB2035F5E86CD967AE4E5393928C69861785E960872 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
00:27:02.0828 0x1534  kbdhid - ok
00:27:02.0837 0x1534  [ 53C79A7FABDAAFD11EAB31963FB2CED7, 357418645DDCEFA5546AE78EDCAE86D50928710CA7A3F65F01CF721AADA36623 ] kdnic          C:\Windows\System32\drivers\kdnic.sys
00:27:02.0916 0x1534  kdnic - ok
00:27:02.0932 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] KeyIso          C:\Windows\system32\lsass.exe
00:27:02.0948 0x1534  KeyIso - ok
00:27:02.0948 0x1534  [ 1E99B26BDB9B9C9BC775ED4543558560, 890870A6737B4910735D1B23F714AA73FCCD1C131D135FACBA6909F06D31B3FF ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
00:27:02.0964 0x1534  KSecDD - ok
00:27:02.0964 0x1534  [ 6198A79011C67497B324798B3D4272CE, C587F7D86837550D07918F6AACF26BF65EBAF7FF57475DC9196B4D011E83AE47 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
00:27:02.0979 0x1534  KSecPkg - ok
00:27:02.0979 0x1534  [ 503597D9B72DBD9998F722F12A51ACFC, 9B3585282191163AA70243BAD921ED8725A98454E0D3879E0F671E0E4F56AB4F ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
00:27:03.0073 0x1534  ksthunk - ok
00:27:03.0135 0x1534  [ ED5AE20C27F27F293C6C61AEC9881054, 4D5BE394D129BD559B0A9D237F3F59CB3D24C15ABDD97AE2E64931D6B9D14FF1 ] KtmRm          C:\Windows\system32\msdtckrm.dll
00:27:03.0198 0x1534  KtmRm - ok
00:27:03.0260 0x1534  [ C529DA0AD5A21878E318801B024AF8E7, A14E8ADCA33C37B1D256CB4926A19F56D2D19B94EDF314A4ED34A8B5AB62CA5A ] LanmanServer    C:\Windows\system32\srvsvc.dll
00:27:03.0307 0x1534  LanmanServer - ok
00:27:03.0339 0x1534  [ D6D9F4CAFD3F1A7E30AD02E508552CD2, F0D225E5951CFE1D8349F634CC91BDD5B3F9DCF6233CCB965E99BFEAFE642265 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
00:27:03.0370 0x1534  LanmanWorkstation - ok
00:27:03.0385 0x1534  [ 24881F16D2829764681F5FAE7B86D7D3, 290348CFAF3165847E4B53965D22E9D417EE20FFD23293B5C1855C57E6328599 ] lfsvc          C:\Windows\System32\lfsvc.dll
00:27:03.0432 0x1534  lfsvc - ok
00:27:03.0432 0x1534  [ 6ED675774BDC3735AB6DA12D29F825CF, 4317C7CF491F4E806975E7A973CFF11CFEE9E94730DDABCC67C3D693691DDDE5 ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
00:27:03.0481 0x1534  LicenseManager - ok
00:27:03.0507 0x1534  [ DB789F57CE94C827FBFF709CA5ABD29E, 4CA4DD079A63649C36F76A31C4081F11F5CF6574AC573B63EF930DB19B1D1C95 ] lltdio          C:\Windows\system32\drivers\lltdio.sys
00:27:03.0553 0x1534  lltdio - ok
00:27:03.0579 0x1534  [ FECBC6C4981772E5D0F517B34A5496EE, 15DB097BFB221B91E580E5CD1DD6B34A9A2C78A1A6FCE4162A855BB4AFE673E9 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
00:27:03.0623 0x1534  lltdsvc - ok
00:27:03.0658 0x1534  [ 24C87BDC66AB192FEB273BEE5FD5AA38, BFAAE1F2450DEBD1A14877C046C6EBA91014DB0B5D0FB95EC14CB714B773B3C0 ] lmhosts        C:\Windows\System32\lmhsvc.dll
00:27:03.0719 0x1534  lmhosts - ok
00:27:03.0747 0x1534  [ 3BB39166E446D456C277C17DFEA3DAC6, 1A08E1D017BBCE91E508D876835FA7AD2DA0859A8CFE8F8F31B4F12B48E2573D ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
00:27:03.0785 0x1534  LSI_SAS - ok
00:27:03.0797 0x1534  [ 25CF625E46307A5D6674C8DFA1A289AA, 1D00EB70B6B0157013A7C15EF194F51B8596612066EF31B337D8134D6BD0BBBE ] LSI_SAS2i      C:\Windows\system32\drivers\lsi_sas2i.sys
00:27:03.0828 0x1534  LSI_SAS2i - ok
00:27:03.0922 0x1534  [ 722C52B12EA4C198D56994934C9DDAB6, 5F4AB818251C770821BAF41C19B1C483A31CCC28EB96F2084D4092E33EAF906B ] LSI_SAS3i      C:\Windows\system32\drivers\lsi_sas3i.sys
00:27:03.0953 0x1534  LSI_SAS3i - ok
00:27:03.0976 0x1534  [ 3371FF1D5D745C3306C6A2C4E99C25A9, DD6F0099001501BAEDDF8411FBCD930BD6472662D209199249203CB2FDAA23FB ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
00:27:03.0991 0x1534  LSI_SSS - ok
00:27:04.0019 0x1534  [ E2EEF074F5260378F9AAFBCD592319A3, DC56674A08FA03FA7AF7DD8B3CC55D8324D1CB51546092A990A935FF9AB48A3C ] LSM            C:\Windows\System32\lsm.dll
00:27:04.0077 0x1534  LSM - ok
00:27:04.0099 0x1534  [ C692B9C0352315417CF49FFA664957A3, C2D4F9A936B809889F7C51FE48214A1923175913A6C5D0B72D3BA469214B5174 ] luafv          C:\Windows\system32\drivers\luafv.sys
00:27:04.0128 0x1534  luafv - ok
00:27:04.0157 0x1534  [ 6A4C75FD28F60062FEA3DF3B15D956C0, 4FC58F3320D33BDACCF759A50C623A3E58E4320749E6691B397DF0C8EAAA8A6F ] MapsBroker      C:\Windows\System32\moshost.dll
00:27:04.0284 0x1534  MapsBroker - ok
00:27:04.0299 0x1534  [ B2ED9A7A5587A128A0EFD0DBE7662E95, 63070AAFD44E3CD2A4B262DF27222B103455A4D8C2E45914502BFA03D84D32C9 ] megasas        C:\Windows\system32\drivers\megasas.sys
00:27:04.0316 0x1534  megasas - ok
00:27:04.0348 0x1534  [ 083F71488E6780A67290273180256EA5, 5F43CE66F5A48850BABB70F4D219FDD002F9BC2B2F0E58E66FE2C492AA335E50 ] megasr          C:\Windows\system32\drivers\megasr.sys
00:27:04.0379 0x1534  megasr - ok
00:27:04.0410 0x1534  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] MEIx64          C:\Windows\System32\drivers\TeeDriverW8x64.sys
00:27:04.0426 0x1534  MEIx64 - ok
00:27:04.0465 0x1534  [ 5907A10D46747A2B6DBFD6A198254DC2, 6C283E9DC75C7ABFD270D6FABBF4F54628A1786E7CE2F603BF664CBB9E4FE583 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
00:27:04.0495 0x1534  mlx4_bus - ok
00:27:04.0499 0x1534  [ 91ED6F0EDF4158D63C52194F17D4F42E, ACF543978E253650C167C6C370699AEA7340EBCECF7CAB904CBDD334D1BD6928 ] MMCSS          C:\Windows\system32\drivers\mmcss.sys
00:27:04.0548 0x1534  MMCSS - ok
00:27:04.0566 0x1534  [ 2C4CC9F6ADBED5A6D131FDB97A78FF68, 04DC76E3F0959C0A9B00DF2133B075194FB7DCBD76832B9D25B0E37223D300DC ] Modem          C:\Windows\system32\drivers\modem.sys
00:27:04.0590 0x1534  Modem - ok
00:27:04.0608 0x1534  [ D8DB13529C8AD6FBAF8E2F382024374F, 13025035C479E2EF76EDCB90D83BE65B4ADD9F7000AD31FEAD628D5DDFE69158 ] monitor        C:\Windows\System32\drivers\monitor.sys
00:27:04.0628 0x1534  monitor - ok
00:27:04.0628 0x1534  [ 2DAAF1EE1C30F2FCF59851A64ADA0422, 08CD801E63E2862DE058CD732C3DB3D87B1A2898732365440E3F8919932E96FC ] mouclass        C:\Windows\System32\drivers\mouclass.sys
00:27:04.0644 0x1534  mouclass - ok
00:27:04.0644 0x1534  [ D30FE074503283829ED194BCAE6239C3, A3A127381ECC798417D01F6B8A1894EED7D71989047BC4D1D74D0E7C8394AD65 ] mouhid          C:\Windows\System32\drivers\mouhid.sys
00:27:04.0685 0x1534  mouhid - ok
00:27:04.0716 0x1534  [ D5EC9413527B286CFEEB0294C53ABB95, B094C611F5A7E33D2F8667B2A4D6260E1D57BD135867F984EE5B674C7EE72B95 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
00:27:04.0724 0x1534  mountmgr - ok
00:27:04.0805 0x1534  [ 0DE2474F316C515482ABAD3B697F8714, 62862AE7432F5350068E96AD466093359C6CF444EB517AE6D09134FAF78C49F5 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
00:27:04.0824 0x1534  MozillaMaintenance - ok
00:27:04.0829 0x1534  [ 989A1BBD9C49B107B4A47D06E6827A69, 62D90B22AE13AC84324DFD5FEBA595813AD07469B7FEC41380CE223D93020CCA ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
00:27:04.0883 0x1534  mpsdrv - ok
00:27:04.0961 0x1534  [ A0DBB9386BEA8DA1A159C2A2E07081A3, 9D3F26005A76A72F9512F040D45C16124D17F8C8DA45C51FFAF74F066357D0A4 ] MpsSvc          C:\Windows\system32\mpssvc.dll
00:27:05.0076 0x1534  MpsSvc - ok
00:27:05.0123 0x1534  [ C1E74DD1D84861D8F12FF8BC0BA11975, 5912A0455C840F5C8AD6383823C9C7DE6FF8B5CAF1B72EA181864999891EAF30 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
00:27:05.0170 0x1534  MRxDAV - ok
00:27:05.0217 0x1534  [ 1DF2C5FD2710A13B07E663A12F0E0EEA, 8EBCA9269F52A5CF602F5DE2B0C2AB2BFD82F415465DBB74C73D43F321D9FD46 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
00:27:05.0248 0x1534  mrxsmb - ok
00:27:05.0248 0x1534  [ 185932B1149BD707F8A13174CDAB365B, BC26CB10DD6E81A94477564444E91F76D47E685E897BD77B9C1393F0D31AB718 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
00:27:05.0299 0x1534  mrxsmb10 - ok
00:27:05.0304 0x1534  [ 99E24D4DBACBC569833B9A67710D65E7, 93BC765E7B6E19E83AFF783DE8080A80A1D69A406B496F1E36C47AE6E86AFB76 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
00:27:05.0328 0x1534  mrxsmb20 - ok
00:27:05.0346 0x1534  [ 6F8BE4FB6262012E61BBADB5444628DC, E87489207AA48106C08E4BADDD8D66D14BC9DD6AD2A4CDD880BA655932CDDE60 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
00:27:05.0376 0x1534  MsBridge - ok
00:27:05.0408 0x1534  [ 283BDF3602F442336DAF242BDD07FB98, 185F046B6AA24FFD1567F00AA70357C82002FF627E329CEF9B926645A6DDB172 ] MSDTC          C:\Windows\System32\msdtc.exe
00:27:05.0420 0x1534  MSDTC - ok
00:27:05.0425 0x1534  [ 7C55F1751CAC199680D4489D1EE46544, 967EC8137D321F6139C3382D19A338FD97A3023EB654747AC57C2008BE4AF677 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
00:27:05.0448 0x1534  Msfs - ok
00:27:05.0466 0x1534  [ 988588C16A53C2581488C15FF18934BF, F021FD31163CB5C7012CF96EF642C5E551708C835039075268F4CBED002D441D ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
00:27:05.0474 0x1534  msgpiowin32 - ok
00:27:05.0489 0x1534  [ 09622DBC24D0178F15DB8461BB6970DF, C0B3F9B2219AAF87E417EE9FF54C64B8AD9944E101EA79B5DC81D99E8C2ECF30 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
00:27:05.0513 0x1534  mshidkmdf - ok
00:27:05.0531 0x1534  [ 34BB07495C0159BE4189841E16F3BC2F, 264B5735D9A68C85BEDE363D4C0AE1FCC381B39EA884B4BAEE185EB8A873184A ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
00:27:05.0539 0x1534  mshidumdf - ok
00:27:05.0548 0x1534  [ 7BF3F0DA362C053918F5F2EC43CE39E2, AA773FA3F83C0C572160D3D0286A697DC628FF4F3655EF21D01C6D1B7BE5DF1C ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
00:27:05.0555 0x1534  msisadrv - ok
00:27:05.0583 0x1534  [ 669DA2006C0B9D882D2014617E1E88F5, 090F558818806CAEF6C81D369F8BFFE4A8240295EF37CAA7102A18F4CD20D868 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
00:27:05.0596 0x1534  MSiSCSI - ok
00:27:05.0599 0x1534  msiserver - ok
00:27:05.0612 0x1534  [ B2D0FD21FE67D6434769CC6F7A7883CA, B2368BD72952C6EE6DAF1AA006DF575A3019E4721BEFB108D3DF1B9E07B2BC5D ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
00:27:05.0633 0x1534  MSKSSRV - ok
00:27:05.0651 0x1534  [ FB3801F176376286A3F8F20FFB8CDC53, EEF89081665B9BBA93AE9F5912C40C1698E8BA8DBBCCC3BBE0BAB5A86B7E05D4 ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
00:27:05.0697 0x1534  MsLldp - ok
00:27:05.0702 0x1534  [ 8CBDF0E7A6CD824352F37A682A33DF7E, 4567FF4C73648FF26EA68EAE2B524B767099789086C158875C97768C77B81359 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
00:27:05.0717 0x1534  MSPCLOCK - ok
00:27:05.0737 0x1534  [ 33E5B6261D69ACD4948A5C64B9D8F29F, 1D32340640312372E52E59AFB5DB872E6F9DFE3AC16B56F9D928AE230DA02B8A ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
00:27:05.0746 0x1534  MSPQM - ok
00:27:05.0765 0x1534  [ 557DF8C0DBBBF518AC395C6EB1B179AE, B294B5A7882C0C60D91FB853FC87505B6E7638D25E360FDAE002AEBB714ED471 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
00:27:05.0782 0x1534  MsRPC - ok
00:27:05.0786 0x1534  [ 0A29AFA668F5DD50482A98ECE70C77A7, 4C1F23B062361D97B1C8D864AB227E5F398F774A99B5E60A1149A4F78D5BEC20 ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
00:27:05.0793 0x1534  mssmbios - ok
00:27:05.0800 0x1534  [ 30CE30877FD5BFADE74FA27D7829BF89, B5EA1F8C91E75722DB1E3E2172C8607FEDBF35BDC4141258A3E6D29D8B0E193B ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
00:27:05.0827 0x1534  MSTEE - ok
00:27:05.0846 0x1534  [ 13D88C0B8A2FA001CD72D454955A6974, 19DD5C8BBD07B64F355737436BF702FFC209D84A8855D2224D3377E233D4BB34 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
00:27:05.0855 0x1534  MTConfig - ok
00:27:05.0859 0x1534  [ 00C7F0F06A0A48B9CDB6B3AC3BE288F0, BF469A2DDF495ACB9FEE9063C6680C95BCC8686682C9EDAE6D1893D4058E8AA6 ] Mup            C:\Windows\system32\Drivers\mup.sys
00:27:05.0868 0x1534  Mup - ok
00:27:05.0880 0x1534  [ 8E237527CA260C71D39ED4081BDF3419, CA52DD174C756A404B1FAD3F2A70E50085C2820BF12369259F61DA649101A179 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
00:27:05.0894 0x1534  mvumis - ok
00:27:05.0906 0x1534  [ 48D0587A8302FD3302CFE6F59F7345B0, 26D48AF3F7FF4867E179347CD635055DEA9A751C6C61CE2C391A7F74FC0DC1DE ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
00:27:06.0000 0x1534  NativeWifiP - ok
00:27:06.0034 0x1534  [ 11BE8117653C542D264788A700AC5BFE, 87EAAC2DF62BB26619DA72950F5EE41DCA1DBDF93F098647F9D200D588F14003 ] NcaSvc          C:\Windows\System32\ncasvc.dll
00:27:06.0097 0x1534  NcaSvc - ok
00:27:06.0097 0x1534  [ 286C6276B2BA86F29A0F687D05466277, AC8551536F37717A0ACE4A260F5696D1276F7AC62F669E8F12AA158DD86F71A5 ] NcbService      C:\Windows\System32\ncbservice.dll
00:27:06.0175 0x1534  NcbService - ok
00:27:06.0182 0x1534  [ C55DA734ED2A831E0BACAAFA01CEB7FF, 9D989B03D07BBAD287B317D238691664B0694331D6A69B7A1AA3D8AB7D1323FC ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
00:27:06.0259 0x1534  NcdAutoSetup - ok
00:27:06.0284 0x1534  [ CF8296427834CF8BBB3EE1444C17362D, 6EFBE1F015DFFA0704C66DF5C88089DD5771E1542018E4AE98389CFF3D0B2309 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
00:27:06.0297 0x1534  ndfltr - ok
00:27:06.0353 0x1534  [ 616F40B897DA651221F86A1741E9609B, 22D66029726313D92FC8E074BCC51C1E1560CB5FE36DCB735E7E063EA53E299A ] NDIS            C:\Windows\system32\drivers\ndis.sys
00:27:06.0382 0x1534  NDIS - ok
00:27:06.0444 0x1534  [ A0719D1EBA971DFC5DF5F7CC010385F8, A982487D3A74E66F3C29AAA5B46CE9A0969F07F267DDEFE58C58573573AB0024 ] NdisCap        C:\Windows\system32\drivers\ndiscap.sys
00:27:06.0506 0x1534  NdisCap - ok
00:27:06.0506 0x1534  [ 0C557932CCCC65AEB37326DD36504527, C0AF3066DEE4BCC32DB30CCC16B7A91442A8383BB36C7C4E3CC0A5EFE0FAAA9B ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
00:27:06.0553 0x1534  NdisImPlatform - ok
00:27:06.0569 0x1534  [ 56F9345D1945826135FBAB7589592B1F, 6BC2A5900076B917823C7392C582A2648D0C8000F2F65D309D5B48E36D4FB4D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
00:27:06.0616 0x1534  NdisTapi - ok
00:27:06.0631 0x1534  [ AADFC340939D99E5D756E713E1D452EB, EFEFDBB2188DE82C2C5E67929861B269FD4C127D34D1DE6D0596ABC33E2C2B51 ] Ndisuio        C:\Windows\system32\drivers\ndisuio.sys
00:27:06.0663 0x1534  Ndisuio - ok
00:27:06.0710 0x1534  [ 312DFD787D99D3BF1427B0388BC04F71, C082CA1F332AD57FF2100748518D3D7B3D0F1B042F69BD7401C44B77AFE97462 ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
00:27:06.0741 0x1534  NdisVirtualBus - ok
00:27:06.0769 0x1534  [ 2103F43E0A1ECFB14B7E1B889F5F24D7, 6A86E854C89E132DBC9183DE2B9464DC592E7492BE267BA02FE4DAFE6FA87528 ] NdisWan        C:\Windows\System32\drivers\ndiswan.sys
00:27:06.0806 0x1534  NdisWan - ok
00:27:06.0812 0x1534  [ 2103F43E0A1ECFB14B7E1B889F5F24D7, 6A86E854C89E132DBC9183DE2B9464DC592E7492BE267BA02FE4DAFE6FA87528 ] ndiswanlegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
00:27:06.0828 0x1534  ndiswanlegacy - ok
00:27:06.0852 0x1534  [ 6E98F16983C4AE8703FF9F90AB4B31DD, BB8BD5DB4B5FB31F3A257747C27CBEFA4B7837EC5C0CF3D4F408E626E4003F4C ] ndproxy        C:\Windows\system32\DRIVERS\NDProxy.sys
00:27:06.0877 0x1534  ndproxy - ok
00:27:06.0881 0x1534  [ F1B7CC77F412C8D45B2DDCF76EDA4F9D, 25F2AA76E675D9BCC0B1FD47AFEC6DF2D0B47E7B1C8AF6FB27C1ED2FB902961A ] Ndu            C:\Windows\system32\drivers\Ndu.sys
00:27:06.0945 0x1534  Ndu - ok
00:27:06.0953 0x1534  [ 824FDC990A3F79069BE468A132EB6888, D09F7A9EC04E37DA504CE54EEC25C312B407B6A8B214CBB074BEB50DE420F52A ] NetBIOS        C:\Windows\system32\drivers\netbios.sys
00:27:06.0965 0x1534  NetBIOS - ok
00:27:06.0975 0x1534  [ F0D791348AD254360CC3C3E501CCB745, E4CAB4D3C2CD3169731283B00DEBFE26438BB66A3F0D78BDB68E876A14FC7070 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
00:27:07.0059 0x1534  NetBT - ok
00:27:07.0084 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] Netlogon        C:\Windows\system32\lsass.exe
00:27:07.0095 0x1534  Netlogon - ok
00:27:07.0157 0x1534  [ 7C8A7380CBE45DFD3DF118D8601499A7, C137280B7696F8CF4258BDC8B241C66BB3AA5708C5410D85255E46C7E8284826 ] Netman          C:\Windows\System32\netman.dll
00:27:07.0204 0x1534  Netman - ok
00:27:07.0251 0x1534  [ BBE9D72EFC7BD66B28309C3607683DBA, FC372EFBC650CE0BDB117858D840A1FB361947B1C67D1DD16BABA95D0286856A ] netprofm        C:\Windows\System32\netprofmsvc.dll
00:27:07.0345 0x1534  netprofm - ok
00:27:07.0407 0x1534  [ 5D046D71B18BEFB2E4D164C3DEEDD672, 536834D020889973854830919B23DF22CC1B27236AFAEDEBDF42D432CE48FCDE ] NetSetupSvc    C:\Windows\System32\NetSetupSvc.dll
00:27:07.0501 0x1534  NetSetupSvc - ok
00:27:07.0541 0x1534  [ FBF2ACE9B10DDE0B4108930D78370E86, 2A4910F071747B786EA49A638B3AAB698DCD0AD7FE702078BA83F85C533A227E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:27:07.0570 0x1534  NetTcpPortSharing - ok
00:27:07.0588 0x1534  [ 88CE4AC85F36B6347C1D820FA373B998, E10B5DF8883928A2062FC6180DE4CF0DE33C68622C2E3E4E1AFC56A0682F8E75 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
00:27:07.0619 0x1534  NgcCtnrSvc - ok
00:27:07.0634 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] NgcSvc          C:\Windows\system32\lsass.exe
00:27:07.0644 0x1534  NgcSvc - ok
00:27:07.0681 0x1534  [ EA1C2DAB8A63712B94897A58557B086C, 98DD7E5C84F3CDF2DAA89484892D6B439F5D14297B5243436925BEEAA0C02EE1 ] NlaSvc          C:\Windows\System32\nlasvc.dll
00:27:07.0775 0x1534  NlaSvc - ok
00:27:07.0853 0x1534  [ 41557BE174E9EC6AC703A8A4ADBC6650, 8CF6DF3FDC3C7C44B32851538A67BF86A54AB6444A424D7A20B7A9A94B4158D8 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
00:27:07.0900 0x1534  Npfs - ok
00:27:07.0931 0x1534  [ AC3F70FCFBCE97AA2F12BA43EE13B86E, D0AC50FB022C0F3031531CEE210D47FC3244C6FB55FAAD4AAB04081F0A21DAE4 ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
00:27:07.0978 0x1534  npsvctrig - ok
00:27:07.0993 0x1534  [ 0AF4872D3D6FD3A030E836DAC2B3EF2D, 03EE7B6FAFC0BB5C26793BC5FF8BD1019AC96B3104688009C1E062C3F4F34D6D ] nsi            C:\Windows\system32\nsisvc.dll
00:27:08.0056 0x1534  nsi - ok
00:27:08.0056 0x1534  [ 66A98C407085B8920DF1E6D722F1ADB8, 3FE307E4A9E41B08E0453507E50D6D0C67FA6F4245A863D90181463C749C83B5 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
00:27:08.0072 0x1534  nsiproxy - ok
00:27:08.0184 0x1534  [ 466EC5659C02ED53DBD47DC1BC2B8086, 1F35DE75386F7D029C01D67B09D5E5157141C6892858885C11972CE73D6078AC ] NTFS            C:\Windows\system32\drivers\NTFS.sys
00:27:08.0267 0x1534  NTFS - ok
00:27:08.0267 0x1534  [ 383E546EF4982262A0EF6CC2B6E9D525, 3C6C90B62E8EB094E6928C388E5081A3F73DF87B0F34F716B72EA7B6EF71FBB7 ] Null            C:\Windows\system32\drivers\Null.sys
00:27:08.0298 0x1534  Null - ok
00:27:08.0314 0x1534  [ 466F875F1D4C6ABB46AF28007009237C, 26F5A5579737A7CF2267F79DDE5A551149C682D5FD24663B53FCEC5AA6B448CE ] nvraid          C:\Windows\system32\drivers\nvraid.sys
00:27:08.0329 0x1534  nvraid - ok
00:27:08.0329 0x1534  [ 76F19EAE7A52CBAF7B8EC428BE6E0DA0, CF1E55D92FA32744A20AB75D466A3E05E6FACF4694F9265C41F5C27C1E7243DC ] nvstor          C:\Windows\system32\drivers\nvstor.sys
00:27:08.0345 0x1534  nvstor - ok
00:27:08.0370 0x1534  [ 0D0CB77D74B38E0EC62341C19E469D8D, A05D3CC67FEEB2FD219BFAA34BF98CB3F3718042124AF28F0E9FDFB9F132DD76 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
00:27:08.0381 0x1534  nv_agp - ok
00:27:08.0406 0x1534  [ EA3FFE8617B9FCA1620AD9876E92F4F1, 68D5143CA71D10A2BB44E29B3C76580596669D0624076BCF6CCBA7AF3140538E ] OneSyncSvc      C:\Windows\System32\APHostService.dll
00:27:08.0423 0x1534  OneSyncSvc - ok
00:27:08.0518 0x1534  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:27:08.0544 0x1534  ose - ok
00:27:08.0578 0x1534  [ CAFB5A95883158A0579DED2ED5CB0627, B23F7D19142DD3544F96ADB36F152F4EA7F6C524A1281EC26A2B95D7D044822C ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
00:27:08.0621 0x1534  p2pimsvc - ok
00:27:08.0651 0x1534  [ 3612CE3432E0A2BE0081E6B488ACF84C, F1A641735FD374CA293FB98FADA2C41E2033B17FECCA3B6D225D0E591AFFF413 ] p2psvc          C:\Windows\system32\p2psvc.dll
00:27:08.0686 0x1534  p2psvc - ok
00:27:08.0706 0x1534  [ 38F1AE32339731F6E5A7281AE8042545, 308954518C45D29FC199525F0CC7FE4EA805322EC0B871DDDCBEEC15355514C8 ] Parport        C:\Windows\System32\drivers\parport.sys
00:27:08.0722 0x1534  Parport - ok
00:27:08.0737 0x1534  [ 707889D2F95AAE8C9DD254D8767AD908, BE7BD94728D7629F8B7567523FFB42B8979941CEA2EA03E11BFCD51CF119FC27 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
00:27:08.0753 0x1534  partmgr - ok
00:27:08.0769 0x1534  [ A09B0D8F9F0FC17EBCE6481AC9FD5CDF, 8E8D68992D98CF3DBC4B70C7902B3EC28A1E2DA8D4DB38F0AD9D52B1A5A1D40F ] PcaSvc          C:\Windows\System32\pcasvc.dll
00:27:08.0786 0x1534  PcaSvc - ok
00:27:08.0815 0x1534  [ 2834089EA4E550FF3B96E61FB4AA34ED, D25DAB47F9778675E984E0738D2014024C2758D52D7E071167A12FF466B7898E ] pci            C:\Windows\system32\drivers\pci.sys
00:27:08.0827 0x1534  pci - ok
00:27:08.0846 0x1534  [ 3D587E4295B11B8480F7ACB09A89D718, 8C3BD62B3451E1B2E7197EDAE381785406DF86C03BEEC486602C642FDD37DBC1 ] pciide          C:\Windows\system32\drivers\pciide.sys
00:27:08.0854 0x1534  pciide - ok
00:27:08.0864 0x1534  [ B8F07002B5F1DA23CFF979C2806B09F3, AD5C589A02BB8185AA070420BF30E78BC8BE3C6F9B0F66319A8CA05B70A5ED32 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
00:27:08.0873 0x1534  pcmcia - ok
00:27:08.0876 0x1534  [ FF588077D0C6AC2EA3FCBF1903CE08D0, 64BE1646FB6D8CC902B6F386255F7C0420E3C334E14DECD527DD541B43A1DCD6 ] pcw            C:\Windows\system32\drivers\pcw.sys
00:27:08.0883 0x1534  pcw - ok
00:27:08.0915 0x1534  [ 70469C8AC4AD367295E70CFDD81B754C, 3EC6FD742C7C60363939E5343477810D751D91D32A2F24285976C08A7C4477AB ] pdc            C:\Windows\system32\drivers\pdc.sys
00:27:08.0929 0x1534  pdc - ok
00:27:08.0959 0x1534  [ 688F47C342E1BBC87A48AB71D316233E, CE99AB67C7E7A11AC69C2F4513AEBDACA385BA7F8CC49BE6313CE04ED404A0E7 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
00:27:08.0985 0x1534  PEAUTH - ok
00:27:09.0026 0x1534  [ 303D2C90139ABFC1D12E279F0F101710, CE02E335A72011004395DC635EB819B3ED8D00041B9C59024DE246366AF00559 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
00:27:09.0097 0x1534  PeerDistSvc - ok
00:27:09.0113 0x1534  [ 189265498945593D5256CFF7FEBB9665, 9CB88CC3C726BFE6EDCE8D9E4544306AACD3FB9E969E3A438D9FD533F25C1281 ] percsas2i      C:\Windows\system32\drivers\percsas2i.sys
00:27:09.0127 0x1534  percsas2i - ok
00:27:09.0169 0x1534  [ 9B86965114F6831A5130EFE6657B17D9, 4C5B657DB9A9F96BFD3EAFA756ED60D911EB58857C439F5FA6E495A473ED1145 ] percsas3i      C:\Windows\system32\drivers\percsas3i.sys
00:27:09.0181 0x1534  percsas3i - ok
00:27:09.0216 0x1534  [ 8A5A52C855FB5BFEF019AE9938AEA8AE, 77CB8A09B209DB5895319BA9D073A67148926E22C47836343050DFC178AFAEEE ] PerfHost        C:\Windows\SysWow64\perfhost.exe
00:27:09.0274 0x1534  PerfHost - ok
00:27:09.0320 0x1534  [ 839BD56425530973FF3F6F7C0057CD22, 9BADF39BC4628409CFCD5F1300C6040C49B2ED72D0FA389C6BB042E5B17E1A40 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
00:27:09.0459 0x1534  PimIndexMaintenanceSvc - ok
00:27:09.0568 0x1534  [ 82FDEC2A262728F62F2111A84CC04B16, A1FCE38D4F55F10BB9B3BFB7D9E3EF7C27D499D9C8882218C8A9A73487798188 ] pla            C:\Windows\system32\pla.dll
00:27:09.0615 0x1534  pla - ok
00:27:09.0637 0x1534  [ 7B3DA16FAA498838BB457E0B7E380EDF, B73DCFFA60886F10765E4B76A58CFF18C08CAFEE620700361FC8FEC7E80B5958 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
00:27:09.0652 0x1534  PlugPlay - ok
00:27:09.0656 0x1534  [ F1E9C35A8DFD4D64382CFB9019A950F9, 24E0381C6909F9876D6DC4697DC6405FE18DF91531891B2CCA6DB0191B9C6DF4 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
00:27:09.0665 0x1534  PNRPAutoReg - ok
00:27:09.0673 0x1534  [ CAFB5A95883158A0579DED2ED5CB0627, B23F7D19142DD3544F96ADB36F152F4EA7F6C524A1281EC26A2B95D7D044822C ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
00:27:09.0689 0x1534  PNRPsvc - ok
00:27:09.0720 0x1534  [ 62C0BD179961132EF2C5B952210C11F5, 2473FBB3619D0DDA229D4BEC30CEFE7497C27ED3844A5B7655F6F2D328FEAF61 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
00:27:09.0755 0x1534  PolicyAgent - ok
00:27:09.0777 0x1534  [ 6390391EDFC43DD11CE9E6AADCAC20EA, C8BC222FFBB9E47489D16BB5248E0E2E594011C46CFF71F5DBCC4D5CC6788098 ] Power          C:\Windows\system32\umpo.dll
00:27:09.0787 0x1534  Power - ok
00:27:09.0809 0x1534  [ 1433EB7908E5E1E20FFD50E4126C3484, 34D81680C8F2F2C5892FC0E0A6DFCBB241AFF493267A1FE182ED28AE9F712456 ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
00:27:09.0832 0x1534  PptpMiniport - ok
00:27:09.0969 0x1534  [ 12E2582F69ACA40A6BAE91DA578CBF34, 648C6394763906AA4163976DA2C3308F8B706486D9D8F16258CB1D61C2929930 ] PrintNotify    C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
00:27:10.0141 0x1534  PrintNotify - ok
00:27:10.0156 0x1534  [ 22DE54C3974E4FD98F61D095C22C59B7, 64E78D6DEC4A28ABB0A23F2CF078459D81796EC79235AE45976ABB4F72B1D1E6 ] Processor      C:\Windows\System32\drivers\processr.sys
00:27:10.0172 0x1534  Processor - ok
00:27:10.0219 0x1534  [ 27D0B024BB356C6BEB1214B61E47DE02, 8CBDD62E243CC652F2197AE83DEDD21D91D2792558A6D7D1CC680B37607DEF4B ] ProfSvc        C:\Windows\system32\profsvc.dll
00:27:10.0250 0x1534  ProfSvc - ok
00:27:10.0266 0x1534  [ EDD52C352CBAAAD13FD7BD5DCEA309B3, EC7D294B23FD5C309E5C4C455896937B85DC615E1B36C9F8F3BDC90E75EBF9CF ] Psched          C:\Windows\system32\drivers\pacer.sys
00:27:10.0266 0x1534  Psched - ok
00:27:10.0281 0x1534  [ DD3FF2053356D11C785999BBC633F3E0, E9A5B7C657F4523E5DEF7AEE7ECFCC94E911FC65F1D491BEF01239F357B8D8E0 ] QWAVE          C:\Windows\system32\qwave.dll
00:27:10.0344 0x1534  QWAVE - ok
00:27:10.0360 0x1534  [ 51590F442C6E5D43244BA30DDB0CE79D, 9C7FD0A19753C13FD4A27EBFD60703A2414D5A2F6F451F0B32769C8D7C953980 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
00:27:10.0391 0x1534  QWAVEdrv - ok
00:27:10.0391 0x1534  [ E951E70019865B06126AF850BCCA2026, C590DE38C7603149AFA0271D57EEBAF956F18F50584FCF04BC2C8D8CEC5C5932 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
00:27:10.0422 0x1534  RasAcd - ok
00:27:10.0438 0x1534  [ 0BF8607133AE264BC3C41A5BAA5FFB7B, 9A4F6AC6013AB5C2A99BCFC2CCF161DD225DE8D85D61579655ADBF04A4383A61 ] RasAgileVpn    C:\Windows\System32\drivers\AgileVpn.sys
00:27:10.0453 0x1534  RasAgileVpn - ok
00:27:10.0484 0x1534  [ FE0976379F9E7DB6F7945FCEB88C7E29, BA331CE55C02E86478714DA87FAC547B50D53BC7D02BCA5A64D484DED44BFAA5 ] RasAuto        C:\Windows\System32\rasauto.dll
00:27:10.0502 0x1534  RasAuto - ok
00:27:10.0518 0x1534  [ CA60F6C03611AF1710BC903ED9F566FB, B5C9E8BAC631738761E11168AB68EB1ECC5EC96BF9A8248B9127DCF744CA4691 ] Rasl2tp        C:\Windows\System32\drivers\rasl2tp.sys
00:27:10.0533 0x1534  Rasl2tp - ok
00:27:10.0546 0x1534  [ 586A17C10D417D889F1FF7D8636E2F34, EEDA4EE8D2BC5C8C7756AB79F1F19AF8B1C4057996748FAE4E3F37844DB0EB33 ] RasMan          C:\Windows\System32\rasmans.dll
00:27:10.0574 0x1534  RasMan - ok
00:27:10.0623 0x1534  [ E5FA41160F5A3D78D8F7765E5C5F6BB0, 31BA423FFFC3206717DC34B482149421EE28B27A4A3BA2DC78C3B3A9EE0C1365 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
00:27:10.0678 0x1534  RasPppoe - ok
00:27:10.0709 0x1534  [ DF0834AE921E633E05D1FDC55C318957, 851A00961224DACBEF9DA427122F6B4B73BB99849D5ECB55DBBD311B2EA84C33 ] RasSstp        C:\Windows\System32\drivers\rassstp.sys
00:27:10.0773 0x1534  RasSstp - ok
00:27:10.0822 0x1534  [ FC9B7AC6E2B837EF7CD6C64F7068D41D, 9B0DD842033E82BC7EE80416A62B084BF5200923EB7A6C80415BB28004E9B5E3 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
00:27:10.0862 0x1534  rdbss - ok
00:27:10.0887 0x1534  [ FB7375657F8A5932C35EAA45E9B4B416, 99594708BFD6DC9F8CECBF092058D4D0D4F1BC3204E86F9FDAD5207ED5ECF194 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
00:27:10.0933 0x1534  rdpbus - ok
00:27:10.0956 0x1534  [ A32AED8C644734B283A7C9D08D76064D, A12F67C57E43B6A2FE6449EA3822B1108FE70C66AF9911798777F85D760E384C ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
00:27:10.0980 0x1534  RDPDR - ok
00:27:10.0994 0x1534  [ 37CC7E41243EFBB4FBC0510E5CA32A02, 634E2F81D61F937F30E5ECE01FB581E090C6DA073EF7B1A3F6083ECAF363CB46 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
00:27:11.0004 0x1534  RdpVideoMiniport - ok
00:27:11.0039 0x1534  [ DAF957B25A35757E9D814611FAE8FE3B, 5244A427B2DEB5349B9F336A4A39A6834A6E8118A8EDA00738C6CE09F2452C24 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
00:27:11.0051 0x1534  rdyboost - ok
00:27:11.0081 0x1534  [ 2C72E029C153D25325CA182A669E4ADE, 5CE0E04A6B53A1F11E8159DFD1E59F2AE6631E3B5BD27BAAEC4A35BC02A55722 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
00:27:11.0107 0x1534  ReFSv1 - ok
00:27:11.0144 0x1534  [ BABEE4A896D005BD0D205F1C932DA25E, 269FDF65BE3A226FA2A5CA25085366E32ADAD30A020484FE844962E8C61CB1D2 ] RemoteAccess    C:\Windows\System32\mprdim.dll
00:27:11.0177 0x1534  RemoteAccess - ok
00:27:11.0198 0x1534  [ 066062967A77867BDCF665960EFDAD32, 68143DBDFA7C68786C22F5CC4E80200255C663A844069C080E7816F423ABB1F4 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
00:27:11.0229 0x1534  RemoteRegistry - ok
00:27:11.0307 0x1534  [ 891C83BE8BA62B7547B9A6576A360C71, B808FE4B5A93B8C971C2AF6CC7F0BAE7154A43A87D6CE0826277D1D7D7948E24 ] RetailDemo      C:\Windows\system32\RDXService.dll
00:27:11.0401 0x1534  RetailDemo - ok
00:27:11.0432 0x1534  [ 6451FE42C35FDE3862D99579444F4A8F, BD56A1120AACF6143E6EB739E12BEE86DF142F1159865608BDF1BBE54B66AFCE ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
00:27:11.0463 0x1534  RpcEptMapper - ok
00:27:11.0494 0x1534  [ F24131EAD1D0B73463052BB042A37B6C, 43B5772310B200DF1914C8E4D10401A0BCE9082BDEAC34736AFB2920B39D7956 ] RpcLocator      C:\Windows\system32\locator.exe
00:27:11.0526 0x1534  RpcLocator - ok
00:27:11.0557 0x1534  [ 5E57B9FBB4E9C43EE5B69BEE01A1819F, A1F8D1E52AF446CEA2EB50064E3A24B713B19197D61C3EAECB81B3CCD80558E7 ] RpcSs          C:\Windows\system32\rpcss.dll
00:27:11.0588 0x1534  RpcSs - ok
00:27:11.0604 0x1534  [ DC66C1D262D64E30A30B68E9F21AC74B, A5ED3D31BCD68DBC00A956787517ACA167C86F5FFDAF7C9A85505FA2B705C6CB ] rspndr          C:\Windows\system32\drivers\rspndr.sys
00:27:11.0619 0x1534  rspndr - ok
00:27:11.0651 0x1534  [ 179E6BCF8D16AD39C137CB4FCFE015C5, A1DF499AA378BDB1CB7F95ACC0C7D6929358AF4596A47FDEDFAE115461563CD5 ] rt640x64        C:\Windows\System32\drivers\rt640x64.sys
00:27:11.0682 0x1534  rt640x64 - ok
00:27:11.0713 0x1534  [ 3E8D616594F25F5FAF336B25B33C71F9, 6C83C4EDB630B5D02B8AA100CAE7D7E704E9C34ED1E139C8C6F7077C5B20A8CA ] RTL8168        C:\Windows\System32\drivers\Rt630x64.sys
00:27:11.0729 0x1534  RTL8168 - ok
00:27:11.0760 0x1534  [ 88F7703F2A4677C828124AE2110D3EBC, 529F6A5815806F2EA2235802BD28AF8D7A40E7799356BD3EC337C9E71B6B53E6 ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
00:27:11.0760 0x1534  s3cap - ok
00:27:11.0776 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] SamSs          C:\Windows\system32\lsass.exe
00:27:11.0791 0x1534  SamSs - ok
00:27:11.0807 0x1534  [ B467E932FE4E16E201DC7E56870CB559, 6FCE9A2DFC5D222BBEA4AA271A17B830FCF8EAE44B07BEE5FF34AE50CABCBB6A ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
00:27:11.0823 0x1534  sbp2port - ok
00:27:11.0838 0x1534  [ 3E115C63649402D321D396F8D606C9B0, F4BA7FE0E89D563A57B6865E4CF1334998987D11A0D70FF7491726A507B40DF4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
00:27:11.0869 0x1534  SCardSvr - ok
00:27:11.0869 0x1534  [ 67EFFD3D1BB6D2B67DF7F8FDCB1A51FC, DE41539FAC730F5CFF6C8754ECFF1253AFDC1C86743AE71B61D716B7A84E85FD ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
00:27:11.0916 0x1534  ScDeviceEnum - ok
00:27:11.0916 0x1534  [ 31DDA0716EC265CA57DAF9D2295FD76F, E6F39C1B3CF81918277DB8C6E3DF9A82812E1C9063DEB1FB85FE433DC9A16CBA ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
00:27:11.0948 0x1534  scfilter - ok
00:27:12.0010 0x1534  [ 1BFAC03B6422E878EFCDA934BF4C4823, 0BA537A4B9E8020E6B709A44F1382DB3B41CEF631B847201F812152FEB303CD3 ] Schedule        C:\Windows\system32\schedsvc.dll
00:27:12.0119 0x1534  Schedule - ok
00:27:12.0166 0x1534  [ 320E7A02D81A468E8C1FEEFDB856AFAE, E65127D3D6B628F9D19EA509FEBD9E4DC1BF20D0C62C3C9E1D7087DF972B2AA7 ] SCPolicySvc    C:\Windows\System32\certprop.dll
00:27:12.0182 0x1534  SCPolicySvc - ok
00:27:12.0229 0x1534  [ 004C66464D8FE76D5DA78BE6777D61AF, 58B5C436798EEBBE7081D54B55B70DEB15331856802CD45E3FF8BDE794F06A27 ] sdbus          C:\Windows\System32\drivers\sdbus.sys
00:27:12.0244 0x1534  sdbus - ok
00:27:12.0260 0x1534  [ A906C527B838A4922611C63EBD250F91, 6BB0054A9C2408138BDF49D834FF99B5B9764E7747ABC15016F54FBA1D28394F ] SDRSVC          C:\Windows\System32\SDRSVC.dll
00:27:12.0323 0x1534  SDRSVC - ok
00:27:12.0338 0x1534  [ F4BF50A7D16A97A887BFA0F193693C42, EEBF5AAC149C72F490BAC954B25BB6882B10FC38F93CA4F4829A06702B1ECEF9 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
00:27:12.0354 0x1534  sdstor - ok
00:27:12.0369 0x1534  [ 648A299839E8F48A946C41DE270D28F5, EEC9A5FCBE3FF78FB5E0452FF1932A8B0C7399688041E22555703CB1977A4428 ] seclogon        C:\Windows\system32\seclogon.dll
00:27:12.0401 0x1534  seclogon - ok
00:27:12.0401 0x1534  [ 29452A9DA3E3482F0C2963312F979053, E1782D36C336C4B4C261AD665C1E9051905AA86020E08FC94069972AF4C4DB4B ] SENS            C:\Windows\System32\sens.dll
00:27:12.0432 0x1534  SENS - ok
00:27:12.0479 0x1534  [ 919BA7E3054E4F1D61A3524ADCE6A970, 3C382673DF5AF2F38A5AE4A268F5856B0CC9E65D52213DE6D2C06E252753B73C ] SensorDataService C:\Windows\System32\SensorDataService.exe
00:27:12.0604 0x1534  SensorDataService - ok
00:27:12.0651 0x1534  [ 01C2EEA7870FE26A4A6CCBA5421CC7E5, 9E643AB6BCBECE4F2A5FD4C96547A4E3F2BDFEFC5FE24B802467718EC69929F8 ] SensorService  C:\Windows\system32\SensorService.dll
00:27:12.0760 0x1534  SensorService - ok
00:27:12.0776 0x1534  [ D2FEE824B4AA0BE377F1353E5F915BF4, 00D754C62F3482BBD0EA72C896139C39D15192B2D9FCC7B755D1FB9DF9FCFD9B ] SensrSvc        C:\Windows\system32\sensrsvc.dll
00:27:12.0854 0x1534  SensrSvc - ok
00:27:12.0885 0x1534  [ 9DB0BBE3ABE1F49651AE51EC5BCABE58, 0B46C1F231F41766AB73EE7E9834D3CDACA602D12E702D9277E28B47417D9CA4 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
00:27:12.0901 0x1534  SerCx - ok
00:27:12.0932 0x1534  [ C4AF79C37334D995D95C22C14FDBF7FD, 4D4985921261909F2123467A22EDB102B490710F60AB935624435E5BB808A0E9 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
00:27:12.0948 0x1534  SerCx2 - ok
00:27:12.0963 0x1534  [ FC541A272F47BE03E67A9FCB87FA8C3E, 730A3616FD67E9F2832442144B2655A8EF78B9AFCB204113E73E257256491354 ] Serenum        C:\Windows\System32\drivers\serenum.sys
00:27:12.0979 0x1534  Serenum - ok
00:27:12.0979 0x1534  [ 2A5F5F95FCA123DCBF53B5F603B64789, DE5C9E1D88B2C180B137DA7839F3EF6C936A171ABA49F89C10EE9C73A2226F3F ] Serial          C:\Windows\System32\drivers\serial.sys
00:27:12.0994 0x1534  Serial - ok
00:27:12.0994 0x1534  [ C8738887228B7BFA3B1A906816A8BB12, 328283569201791891D5E9FB3028DB5B9FD93A7BEFC00C7DEBC2CC5731DE64D5 ] sermouse        C:\Windows\System32\drivers\sermouse.sys
00:27:13.0026 0x1534  sermouse - ok
00:27:13.0026 0x1534  [ B1CB58853153397DFFA2D13A81451D09, CC9B3B064711E9B5CB38DC1C84DC410033939848BD31BB0D12F990E8154F357E ] SessionEnv      C:\Windows\system32\sessenv.dll
00:27:13.0057 0x1534  SessionEnv - ok
00:27:13.0073 0x1534  [ 67832B68752CDF7FDE56949E4A2E70BF, A72320EA8575A751DF86A1EE7969AD9D548D6185F2520197262E11B79FF8222B ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
00:27:13.0073 0x1534  sfloppy - ok
00:27:13.0135 0x1534  [ F10E5536E1C753E01CF19FA4F466CE90, C9897F22B176D84CA233F864078895E3DAD4DAD090FACBB01BD6E59EE337B47C ] SharedAccess    C:\Windows\System32\ipnathlp.dll
00:27:13.0166 0x1534  SharedAccess - ok
00:27:13.0182 0x1534  [ 4AC12D495B3CB4275F74C68A7A017561, DC53EBD606ECCD8BCF6D618C0EB58B03F5C20F09E0F0AEDE9B8082D6B208B19A ] ShellHWDetection C:\Windows\System32\shsvcs.dll
00:27:13.0198 0x1534  ShellHWDetection - ok
00:27:13.0229 0x1534  [ ED058030296CF9B79C8D48BF43724323, 01DC7C2590DF48116CD1A126F207FE5DE439A53286BAE3736E22EE3D1CA80BE3 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
00:27:13.0229 0x1534  SiSRaid2 - ok
00:27:13.0244 0x1534  [ 633D3D1581E9DCCD5A2D8F039104C9A5, C44B5097016C2AEC8B41F77425FE44413562F9DCF0C0C11CA69D8178970B4706 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
00:27:13.0260 0x1534  SiSRaid4 - ok
00:27:13.0347 0x1534  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe

Treend 13.11.2015 00:37
Code:
00:27:13.0383 0x1534  SkypeUpdate - ok
00:27:13.0407 0x1534  [ 35B8FC714C2E7F07F7DC7C64452153F8, 6D45EB01B5F972ED0E5520E771F007FFEE892054FABDB3DD00D3E9915D3A0A31 ] smphost        C:\Windows\System32\smphost.dll
00:27:13.0455 0x1534  smphost - ok
00:27:13.0486 0x1534  [ DE3A5C27EC842A113F68A2705FF63B00, B134EF63708A892B673B539F544F7980FF72838D822E8E4CCDDB359B22CB8805 ] SmsRouter      C:\Windows\system32\SmsRouterSvc.dll
00:27:13.0517 0x1534  SmsRouter - ok
00:27:13.0533 0x1534  [ CD1056818A6FCEF4D32BD1D6E34070D5, F5BFB61ACB220A73B0DC4487B049F52E9F9FA2D4188C001E7A5838D47CEA6343 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
00:27:13.0564 0x1534  SNMPTRAP - ok
00:27:13.0658 0x1534  [ 187B4AD4446C59F8FCC4A10F473EE3D1, 0AAD961B3D7B3484DC89CB86F3EC96CEBFABB7224A5BFB48083DE8F1805EA7B4 ] spaceport      C:\Windows\system32\drivers\spaceport.sys
00:27:13.0705 0x1534  spaceport - ok
00:27:13.0736 0x1534  [ 2799FCA215919FDC9A87C5FCAB530828, BDE968BF26693AA4D70AB669896BCA49C6F533EA226386B35B0EA589A55227B5 ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
00:27:13.0845 0x1534  SpbCx - ok
00:27:13.0939 0x1534  [ 58C17D92AD61EC7A98B05F4FAD0D205A, B881134A1BD9194145A9D18BDB34D57E2C167F06C2A9368459D0C33E6E0D6501 ] Spooler        C:\Windows\System32\spoolsv.exe
00:27:13.0986 0x1534  Spooler - ok
00:27:14.0126 0x1534  [ 5C31E109943E67CFC801810C00AB63EE, 9A80D7CDA1135EBCE10E753986A59CFA3D8D49F9B0BE38FDF99880B1DD88C41D ] sppsvc          C:\Windows\system32\sppsvc.exe
00:27:14.0255 0x1534  sppsvc - ok
00:27:14.0274 0x1534  [ AA1F23501511EFE9CF9771F6B20E8D45, E786852D9877CCFD35444F8FC694467132F868D87A8C344FD1016FFDE74695A5 ] srv            C:\Windows\system32\DRIVERS\srv.sys
00:27:14.0290 0x1534  srv - ok
00:27:14.0313 0x1534  [ F5B169EDF9D5E3C7200D89D30E065D13, 12BAF3A3CB76F0900FA53681C9AD16F40308F493BA22C0F60E1E268D0D6AF825 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
00:27:14.0351 0x1534  srv2 - ok
00:27:14.0358 0x1534  [ 2E142E027F0AA698BA4DCE49CBDB43CD, A21027BBBC75A55A8B302D028113A0683016E4C72790A8C561DDB1AE7FDB4289 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
00:27:14.0373 0x1534  srvnet - ok
00:27:14.0401 0x1534  [ BF71B3FB5B7557CB740CDB09C5FB50D9, D6F9E65FDC9C4ADAFE82D94F71A1F5960DB3BEEBF4FE5B2D087515C4FAA5F287 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
00:27:14.0416 0x1534  SSDPSRV - ok
00:27:14.0433 0x1534  [ EF1BC04215C201ADA3F7F5A2F034EA21, E1A7A0FA2032B9E7D3951100E74C04D93CD848C88D23D57FBA0BFA2816B29C61 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
00:27:14.0448 0x1534  SstpSvc - ok
00:27:14.0530 0x1534  [ 0FC4FA53C3F666CD7AFB138A978D3CB8, F65D88324D6007CE4AAB9486B6D00EE6352CA0F3B1A2D0616811AF1279799501 ] StateRepository C:\Windows\system32\windows.staterepository.dll
00:27:14.0680 0x1534  StateRepository - ok
00:27:14.0732 0x1534  [ 5852D5FADD589643B6C1B5BE9D257A50, 38DC6CEB0AA6AF4FD046A9CF7571E345E52D30471E248E2B99FC6D5622257145 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
00:27:14.0749 0x1534  Steam Client Service - ok
00:27:14.0763 0x1534  [ DDE064A4298FD1FBF804D3ED691E7EDB, B0D117B1FC0DA2CB76F5F63699E2F108930B6C6721AC443111D48215ED624278 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
00:27:14.0774 0x1534  stexstor - ok
00:27:14.0805 0x1534  [ 60F04DF1AB55D6D4BDA02052DD20537E, 52996EDF2C06968DADC9BDF24E4039929B81643493C7193B8CC4A6BD1A3AE761 ] stisvc          C:\Windows\System32\wiaservc.dll
00:27:14.0831 0x1534  stisvc - ok
00:27:14.0853 0x1534  [ 32C95F44108C3E7DB58F773346E3C9D0, F852D8ECA06080EA6DE1A90509071965A750D9CFC9627F0D4DB8ECC57133B0B5 ] storahci        C:\Windows\system32\drivers\storahci.sys
00:27:14.0863 0x1534  storahci - ok
00:27:14.0866 0x1534  [ 8883C8CE4942A99B84E1CC6EFA19738E, 60C1CDA4382F8EE70D810DBB1BCAF5F389433563FF23EEB84859612F396D8CE6 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
00:27:14.0881 0x1534  storflt - ok
00:27:14.0897 0x1534  [ AE7B7E1E95BFB9340B1956C98CA52C81, 3E0214A0C486C1CD05D9BC57E58A998A3CEADDC1D24AE2A75098F56B37069160 ] stornvme        C:\Windows\system32\drivers\stornvme.sys
00:27:14.0897 0x1534  stornvme - ok
00:27:14.0913 0x1534  [ 63513EF3121689B3A59BD217618A2E42, DE9B89732801DEC60BD116D58CFB427F7E37F093BE8A9F6E0CAC729B5346B314 ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
00:27:14.0975 0x1534  storqosflt - ok
00:27:15.0053 0x1534  [ CC96FF061C772340F2ED89ABBA567ADC, 028CD44405B7FAFC7BF331DD729E44E0594A63386F48CF39D7725A58B3DE22D6 ] StorSvc        C:\Windows\system32\storsvc.dll
00:27:15.0100 0x1534  StorSvc - ok
00:27:15.0116 0x1534  [ 000F5CFCEF0F06DC8FD1D2F568E48AE4, C1FE485E57A1B912CE79556E0EFF03CC11362E7966D250E3AA4962DCCB8F8EE6 ] storufs        C:\Windows\system32\drivers\storufs.sys
00:27:15.0131 0x1534  storufs - ok
00:27:15.0147 0x1534  [ 7415087F9006D6818F85F3CBD79B1A50, C768EBB2263375D285D689FEEF546147D42D7376977424A4D6FD655CC78EA7CD ] storvsc        C:\Windows\system32\drivers\storvsc.sys
00:27:15.0147 0x1534  storvsc - ok
00:27:15.0163 0x1534  [ E49858EA5865A015EB78B7F7C1C07DE2, 1ADBBAC2D2E2E3C40AB0BDDE068001E76A8DAB79C54F06479F7A4567DAD7A7A8 ] svsvc          C:\Windows\system32\svsvc.dll
00:27:15.0178 0x1534  svsvc - ok
00:27:15.0241 0x1534  [ 802278EE4ACCE9EA1F1481DF20EB1667, E78F0DA2CA0B2C2DF3B7E3B2A22C03380FE649813EE6EB31067C5FB6727DB7BD ] swenum          C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys
00:27:15.0256 0x1534  swenum - ok
00:27:15.0288 0x1534  [ 313D2C0DBA0B23A8302254FD317D2EC8, 20B98D6F33FEC7ACBCEED9757A3FEAD837FA7BA378BA25575A33EA45E076FC6B ] swprv          C:\Windows\System32\swprv.dll
00:27:15.0334 0x1534  swprv - ok
00:27:15.0350 0x1534  [ 12D0CB1DCAE6725B6CA54CC2038C4C8C, 7D224298E440B8C5FDD99A52485A6245DE5109C9A02E65AD38F1EC6DBF4AEEF2 ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
00:27:15.0381 0x1534  Synth3dVsc - ok
00:27:15.0428 0x1534  [ D5B31B2F14848015C211F1D674A82F3A, 58C18254C817693DB727090D1CC518032B3A67C5B3FC7F2F8CE4613A33790CFA ] SysMain        C:\Windows\system32\sysmain.dll
00:27:15.0600 0x1534  SysMain - ok
00:27:15.0631 0x1534  [ D5AAA188C70146977CFEE8D128599F3F, 9ABC30982E552EAF41FE84397EEEE5A3187444062C662D7CF35A03E3B274AFB8 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
00:27:15.0678 0x1534  SystemEventsBroker - ok
00:27:15.0708 0x1534  [ 95875059929EF91B55EA612D7967DD3D, 5F734209C8C9725376F7C146ED84999CC6D019C4C10B1795F53E72BE8853E2DD ] TabletInputService C:\Windows\System32\TabSvc.dll
00:27:15.0764 0x1534  TabletInputService - ok
00:27:15.0797 0x1534  [ FE33F417DFD9847CB571D3C7EE5FA7E3, B3C7BE7998B9B093DD969A2588EE8CEBD9771331A63D4B1D86A188317B5EE71C ] TapiSrv        C:\Windows\System32\tapisrv.dll
00:27:15.0829 0x1534  TapiSrv - ok
00:27:15.0920 0x1534  [ 7EBD20284AC9BF9F0A020B86769BB074, 26D8CC9C1EE069BB617973BA7CBCFC36BAF1EABF975F395077547F930197A56A ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
00:27:15.0988 0x1534  Tcpip - ok
00:27:16.0029 0x1534  [ 7EBD20284AC9BF9F0A020B86769BB074, 26D8CC9C1EE069BB617973BA7CBCFC36BAF1EABF975F395077547F930197A56A ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
00:27:16.0077 0x1534  Tcpip6 - ok
00:27:16.0098 0x1534  [ D378A1AF58AFA84BB6AC753F2C1BE9F4, 8BBA623193D51E6A8DD0627FA08C93B918EF1BA2EEBA46CDBB86FE6A1007FDEE ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
00:27:16.0126 0x1534  tcpipreg - ok
00:27:16.0151 0x1534  [ 28E1E63A1AC65E17B3194238FA2CF3BF, 9A52D6DD14BEBB7B407B2703A111D1B302F1B84AA40A14D21FCA554F395E935D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
00:27:16.0160 0x1534  tdx - ok
00:27:16.0171 0x1534  [ CCDBD2817C10A4F631280CBB3AE44FFB, A022DEF4D3CF75F41FA26275347F4BA38A513AD32FF18385C2E756DECB61D404 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
00:27:16.0178 0x1534  terminpt - ok
00:27:16.0210 0x1534  [ A0608264209A836821D6AB8C67B108AB, 7912C75F72BCAB7426A2E00C597C8D94C185B5DD31BD6C4BE5D56FECD5B0D9EA ] TermService    C:\Windows\System32\termsrv.dll
00:27:16.0258 0x1534  TermService - ok
00:27:16.0265 0x1534  [ 261830B1E3650E4471E1F98850B929B7, D281B8A93315E64C7AF5002E5BFBE6AFF8B35FD6AA747AE07D7AA96F4AFAA613 ] Themes          C:\Windows\system32\themeservice.dll
00:27:16.0281 0x1534  Themes - ok
00:27:16.0333 0x1534  [ 8D23F0819A00C547814409B734DD3747, 0E1B25A53C84486F8A57F309F3C016114F90F5AF5E576889BD230931F38594A5 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
00:27:16.0400 0x1534  tiledatamodelsvc - ok
00:27:16.0400 0x1534  [ 354DAA630928CD4DA2BC84A0DA4ADA9D, AFAE4948EA4F899267DC52DF9A06450FC3E77083B563E541581DA90685C7E98C ] TimeBroker      C:\Windows\System32\TimeBrokerServer.dll
00:27:16.0432 0x1534  TimeBroker - ok
00:27:16.0463 0x1534  [ F4AEDABC8F3A9D632F8206D0C7F8CA09, 6E76749CD4B857B4D930267E3CF448AF4D14FAC851873C5E71572E62CAD2FA36 ] TPM            C:\Windows\system32\drivers\tpm.sys
00:27:16.0494 0x1534  TPM - ok
00:27:16.0510 0x1534  [ 2D0338A3009075FCCB119CB7F3280F82, F42F3B8DA0F8B2C99892E66CDEF471A1CD30A30CF437ADFF464A2C786A6B87A6 ] TrkWks          C:\Windows\System32\trkwks.dll
00:27:16.0525 0x1534  TrkWks - ok
00:27:16.0559 0x1534  [ 62D6A900C5DFF2ECF131384E5A5C85AB, 1AF1FB868C59DFF452E3351EE5070B2C746DE606B9E2F1834CE2256F41ABE7A9 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
00:27:16.0588 0x1534  TrustedInstaller - ok
00:27:16.0593 0x1534  [ 676C801CAA61AADD0C918CC536A74B78, DB5DEC9445272E46D32DC2A9A99A9AE45729E424E61C679ECFD973AA88457BE6 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
00:27:16.0645 0x1534  TsUsbFlt - ok
00:27:16.0665 0x1534  [ 2BB6CC0DD1CEE86330743B56FA9FE91F, EE71E3DEECA7599947AB09E8967FE8066348D82B4C17D8CBE800FCDE9CF4989D ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
00:27:16.0709 0x1534  TsUsbGD - ok
00:27:16.0744 0x1534  [ 14B46248612DF1B1A695040FFFBCFAFC, 8C373A3C416FC9AB3872A187E64AC7A6E69FF605BD8784E8F2B1C28C293A0495 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
00:27:16.0797 0x1534  tunnel - ok
00:27:16.0808 0x1534  [ D0BE5EA1652D55029C9A898FB8ACFCE0, 80C4BC30B967C79B3457F43EB9B530CA2571C6158958879AC55E5A81F71CFF15 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
00:27:16.0820 0x1534  uagp35 - ok
00:27:16.0836 0x1534  [ 13C15E4B238895FE4731DB1D612EEB5F, 211E4B05AA09F7FBE2487C3241A98D1F970FEE5B9B1BAED2788B57233BFC4104 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
00:27:16.0853 0x1534  UASPStor - ok
00:27:16.0858 0x1534  [ BEBB8B55C5F99B69EEE39A9D7BADB21E, 08A094EA38AB58CC70108A3BDFDD3251897DC4B13FDDAD54C1B063137836EF34 ] UcmCx0101      C:\Windows\system32\Drivers\UcmCx.sys
00:27:16.0917 0x1534  UcmCx0101 - ok
00:27:16.0937 0x1534  [ DE3EDAF609D00EA2E54986E6459796A6, 61A9AB51869F38300CC5CC5D302B962FB966F54CBB2E393954F36372B3A479FE ] UcmUcsi        C:\Windows\System32\drivers\UcmUcsi.sys
00:27:17.0062 0x1534  UcmUcsi - ok
00:27:17.0095 0x1534  [ FB1C1D8B96A482F3581338D6752E1D6C, 0FFAEE3E088614B3483C459513BB9D78EB76B574696FD877A3CDF6A11378F46C ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
00:27:17.0129 0x1534  Ucx01000 - ok
00:27:17.0142 0x1534  [ 4E1543ACE2F6E2846713E5123D9D4159, 1A6AFC525A80D1F19B14CDAD38790DF7293911C4D0E8301161D92201B934C3D4 ] UdeCx          C:\Windows\system32\drivers\udecx.sys
00:27:17.0171 0x1534  UdeCx - ok
00:27:17.0197 0x1534  [ CDCA9CC1D8293E75218D8FF85F2337A4, 173086C08DDC7625E026E425F1E2B5D6C795771BEAE9BFF6093E3592FBEBD323 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
00:27:17.0221 0x1534  udfs - ok
00:27:17.0252 0x1534  [ BC683E19307C533C7161DB7A58051347, 5553BE3421986FDD9992EBFD883CDA151F7166C01BBFA3E9183A3C93E41D79B6 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
00:27:17.0252 0x1534  UEFI - ok
00:27:17.0283 0x1534  [ D14B42C26DE402F316D49667D15446F0, 61CC9FF03EF78631C800EFD8D587975CB94D53DB80E6F60BD13BA52EC5690D3D ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
00:27:17.0314 0x1534  Ufx01000 - ok
00:27:17.0335 0x1534  [ 192470BE4321791FBB25F379D0141D6F, AD120F8F98BD99014471CE60630B5FEE7555AB261C98B7D9819FE23C386655F7 ] UfxChipidea    C:\Windows\System32\drivers\UfxChipidea.sys
00:27:17.0345 0x1534  UfxChipidea - ok
00:27:17.0357 0x1534  [ F7BD838E84E6B286DBCE068EFB8C0800, A55188C8F8BDC739A7ED7D29CDCB2A17468BBB158E13D804963B31ED73449520 ] ufxsynopsys    C:\Windows\System32\drivers\ufxsynopsys.sys
00:27:17.0367 0x1534  ufxsynopsys - ok
00:27:17.0399 0x1534  [ C844E39B900FFA46CA8DD2BBA670A077, 0CB6232BCE47C59821DF25D6ED33E85C3E32DDAB101AA8A2C22B5401E73F5D5B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
00:27:17.0507 0x1534  UI0Detect - ok
00:27:17.0686 0x1534  [ A25842AC180F0E8B02380ECB8ADA1AF5, AF22E7559C5EF8DC22A2B9E27FFFFF075B1D1B68A8307266BD9473E0FAF36BEF ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
00:27:17.0717 0x1534  uliagpkx - ok
00:27:17.0733 0x1534  [ 21088F43172525C7E02D335A3327F46C, B04AD471A7DFE83AB557DB4540616B7DF4A1904F8BDDCB920D449FCEE6F36FD5 ] umbus          C:\Windows\System32\drivers\umbus.sys
00:27:17.0749 0x1534  umbus - ok
00:27:17.0764 0x1534  [ 294A291B5D48FE8F38DD94B7272442C5, 66C9139636760C92C1E04FCF440C432FF6C5A94E1577CAFE1D61FCF2D30472ED ] UmPass          C:\Windows\System32\drivers\umpass.sys
00:27:17.0811 0x1534  UmPass - ok
00:27:17.0858 0x1534  [ 3427889AECC3B6912A0A01D095E32B98, 322AE14B74295ACFC124719BBEF8809201150A184E262EC55E26D2B45787BF9D ] UmRdpService    C:\Windows\System32\umrdp.dll
00:27:17.0905 0x1534  UmRdpService - ok
00:27:17.0999 0x1534  [ 0D5C9E27E93AAEA3E30A1E59A7AC3DFF, 31A203DA03877E6B887930990C5BB53402F0DFFB22A6F8FC5A34EF0B99CD8A7E ] UnistoreSvc    C:\Windows\System32\unistore.dll
00:27:18.0061 0x1534  UnistoreSvc - ok
00:27:18.0092 0x1534  [ BD693208673F40BA21AA70B69F1D439C, E324947C2DD34386A83B09E73668F1CCED127AC91194B8BF7EC4C8E36CF8203E ] upnphost        C:\Windows\System32\upnphost.dll
00:27:18.0124 0x1534  upnphost - ok
00:27:18.0155 0x1534  [ A7A52EDDC3FAF183D6AC4774690ADF13, 630A0331F2EFA2DC7EFDACD08D8DF5C85BFDA30FF1525050FF54E069AFA45F6C ] UrsChipidea    C:\Windows\System32\drivers\urschipidea.sys
00:27:18.0155 0x1534  UrsChipidea - ok
00:27:18.0155 0x1534  [ 2EEA0897DD9E30E958B508D557F0B5E4, BE051A3AA5DFF56310FAB67AD19AC0443A3580542886EF3554EBE18F1323596F ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
00:27:18.0171 0x1534  UrsCx01000 - ok
00:27:18.0171 0x1534  [ DC54D775A3A61E4CDE871B4E38A1459A, CC996A9D293201BBD285E7B629B12EE88574702B8AC7BB4149439D6A25A07F7E ] UrsSynopsys    C:\Windows\System32\drivers\urssynopsys.sys
00:27:18.0171 0x1534  UrsSynopsys - ok
00:27:18.0217 0x1534  [ 1DC6166DB6C4FEFE87D9B9105044E5BE, D19B867C0E900B596B4180390A6E4F2ECCBDF8FBD49561C23DBA7D460B8F44A9 ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
00:27:18.0249 0x1534  usbaudio - ok
00:27:18.0264 0x1534  [ 18B63A0980F4AA1E6D7879B253980E37, 05F96DBE0A3DE2A685DEEBA8B6838A47AEB7CE2EBE8EB6BAD67B36DCF7E73589 ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
00:27:18.0280 0x1534  usbccgp - ok
00:27:18.0296 0x1534  [ 1C60A1A3C8E1E819E16F12BAEB1C83F8, E255BD173DBF091C5EA07381862E23C1FD761489EC396E312974FBC124E1F33A ] usbcir          C:\Windows\System32\drivers\usbcir.sys
00:27:18.0311 0x1534  usbcir - ok
00:27:18.0342 0x1534  [ 9A3E39F85DC6E3B9F792F1095ACFF788, 66B8E137A5232E9F717907CFD49FE624AE101F4DE14E2960849DABF7A877E87A ] usbehci        C:\Windows\System32\drivers\usbehci.sys
00:27:18.0358 0x1534  usbehci - ok
00:27:18.0405 0x1534  [ 0A368247A900656CC0678117DFC3A87C, 9BEAD14DA067439D913F609955E95CFA0B88ED4F1BC60B473E00F9D9CBC01B9C ] usbhub          C:\Windows\System32\drivers\usbhub.sys
00:27:18.0436 0x1534  usbhub - ok
00:27:18.0483 0x1534  [ C08449092043601887A1743350888635, 5CD916649D2CD8823B89C9E7459AD76AA8E54D70B6D9F40AD4A41144E22ACBE0 ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
00:27:18.0514 0x1534  USBHUB3 - ok
00:27:18.0530 0x1534  [ 72EA850B59F40C25A4FEDDA5FE84EFEB, FB4801AA1FB72FC1C41024916368823E88D53E338640E3BEA865B0F0E7B8EE91 ] usbohci        C:\Windows\System32\drivers\usbohci.sys
00:27:18.0624 0x1534  usbohci - ok
00:27:18.0639 0x1534  [ 47B2B2DE152E25546944049CA1170BB1, DDA0A806D3108B2475AB13F584EA8CE6F0932C5E394C2C3FA691DFAB8A2BCAC0 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
00:27:18.0655 0x1534  usbprint - ok
00:27:18.0702 0x1534  [ 1F72E1A7E1858B7B3FF81522FCEBDE95, 4FAD243DA73C45CD5CA5E50F824F30EF0DC777D83957FD21FF43D8C89EC15AAC ] usbser          C:\Windows\System32\drivers\usbser.sys
00:27:18.0827 0x1534  usbser - ok
00:27:18.0842 0x1534  [ CD35467670DF1E6FBF36DA308F0C872B, E1F4F9B1EBD476394CBD0C934842AEE2502B030D97351B0A1E751FF23B011B57 ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
00:27:18.0874 0x1534  USBSTOR - ok
00:27:18.0921 0x1534  [ DFA92EA105DD1073B43FB210EEB03DD4, D940432458F0A04F5013B48197CEA0412C8A909C50605AA21DD08271C90E2FE3 ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
00:27:18.0936 0x1534  usbuhci - ok
00:27:19.0046 0x1534  [ C67A03F54A1EA683F4880A481EE5FF6C, 346185B378577FF14EFAD01ECB7DFC9AFC0D50F16DF081C3BA99AEFF710A0EE9 ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
00:27:19.0077 0x1534  USBXHCI - ok
00:27:19.0108 0x1534  [ 32212C0FE0556915E763C29DEB6D267E, C5BC9DA3AB0C41604E8F3D01AFC2C25351FF5D3967E766DD0CDB4C0239ED6312 ] UserDataSvc    C:\Windows\System32\userdataservice.dll
00:27:19.0155 0x1534  UserDataSvc - ok
00:27:19.0342 0x1534  [ D76A6C338A81C3B14AD37B22AA422B4B, 39489B44068CAA86232B513FF7A5DA56F5AAAB595D8DBC0CCDDD4ED4A1318E07 ] UserManager    C:\Windows\System32\usermgr.dll
00:27:19.0483 0x1534  UserManager - ok
00:27:19.0577 0x1534  [ 0CFEA30C0217EE74FF853B2B0CC0BE6D, 1F0856D2D94F46D7B24B7EE18ED868C9EFAE972039D35D1FAA9058A12CF40493 ] UsoSvc          C:\Windows\system32\usocore.dll
00:27:19.0717 0x1534  UsoSvc - ok
00:27:19.0733 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] VaultSvc        C:\Windows\system32\lsass.exe
00:27:19.0749 0x1534  VaultSvc - ok
00:27:19.0764 0x1534  [ 26223003DDFB347B5CF3EC0B56DB066B, 78848BE1334C05F28FA431B08225EAE8345B2C66E7D677F9936892FC941EA961 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
00:27:19.0764 0x1534  vdrvroot - ok
00:27:19.0796 0x1534  [ 0C3F4E7684C1D72E85A98689E65A98A1, F7928D3EFC1A83125887ADA5F8E008022B58F0DBA8A711B4D60975D8CE82B595 ] vds            C:\Windows\System32\vds.exe
00:27:19.0827 0x1534  vds - ok
00:27:19.0858 0x1534  [ A417284BC6B5C2EEF63F2C5154473530, 55146660CDDD829630C216038E6500CFAC906E67C82881047B665BFEEB286D10 ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
00:27:19.0858 0x1534  VerifierExt - ok
00:27:19.0999 0x1534  [ 4C39C05A72EB14C0567501C7E087E564, D3DC122B7E4A5BD345517FE3A9E9E58CD3C78887F9F327AB782BADCAD0F8F2EB ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
00:27:20.0046 0x1534  vhdmp - ok
00:27:20.0046 0x1534  [ C42206A15078596FDE8E89BB629DE342, B95F9EC2413ADE658A7CE4A9BB57A0E125C29205C24BBB120153DACAF4CF9482 ] vhf            C:\Windows\System32\drivers\vhf.sys
00:27:20.0061 0x1534  vhf - ok
00:27:20.0264 0x1534  [ CD52F26BD7CDD798265D697CBE23A511, C3BD6CE0D758F103B828246C18217B6A73C3F7620D230FD449276E7FE1E76884 ] VMAuthdService  C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
00:27:20.0280 0x1534  VMAuthdService - ok
00:27:20.0327 0x1534  [ 248D9F911A5C94CF8477125DD0C3A291, 418C7285184BCC9DE4E56175960585867A5DB21FEF761C49FF6F1AF1C07D8088 ] vmbus          C:\Windows\system32\drivers\vmbus.sys
00:27:20.0342 0x1534  vmbus - ok
00:27:20.0358 0x1534  [ 3E98DD4E0CBD6B4F9CBD0E9E0EDF541E, 2B5CF364F4D1D3359FBEA8BB2E72A1FCE1277E8D893977B751D9AC10A27DF018 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
00:27:20.0389 0x1534  VMBusHID - ok
00:27:20.0405 0x1534  [ BE8E5E5D53ACF71D4E8E686B68C99B04, 4F30A360095FCB2627068FA6A65A951688058E8FDDF5CE895E2AE39500A413B1 ] vmci            C:\Windows\system32\drivers\vmci.sys
00:27:20.0421 0x1534  vmci - ok
00:27:20.0452 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
00:27:20.0499 0x1534  vmicguestinterface - ok
00:27:20.0499 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicheartbeat  C:\Windows\System32\ICSvc.dll
00:27:20.0530 0x1534  vmicheartbeat - ok
00:27:20.0530 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
00:27:20.0561 0x1534  vmickvpexchange - ok
00:27:20.0570 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicrdv        C:\Windows\System32\ICSvc.dll
00:27:20.0589 0x1534  vmicrdv - ok
00:27:20.0598 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicshutdown    C:\Windows\System32\ICSvc.dll
00:27:20.0617 0x1534  vmicshutdown - ok
00:27:20.0626 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmictimesync    C:\Windows\System32\ICSvc.dll
00:27:20.0645 0x1534  vmictimesync - ok
00:27:20.0654 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicvmsession  C:\Windows\System32\ICSvc.dll
00:27:20.0673 0x1534  vmicvmsession - ok
00:27:20.0682 0x1534  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicvss        C:\Windows\System32\ICSvc.dll
00:27:20.0701 0x1534  vmicvss - ok
00:27:20.0718 0x1534  [ BE720B60B61D1704C4A335A88CF849F7, EDA87A62D2C83CA2269C70DADCEDFDC51F6A7C56E6FE48F8BB5B5D705FC80ABA ] vmkbd          C:\Windows\system32\drivers\VMkbd.sys
00:27:20.0718 0x1534  vmkbd - ok
00:27:20.0718 0x1534  [ A3412EC3FF7A5AC2CA3A3951476BFA9C, 8A3D241168205B6B5348F44DF89875067CDD5B29BE8CF14ADA8403225AE2A379 ] VMnetAdapter    C:\Windows\system32\DRIVERS\vmnetadapter.sys
00:27:20.0733 0x1534  VMnetAdapter - ok
00:27:20.0733 0x1534  [ F76AD463DBE8D30CB715A09DF9FF2BE9, 5B2184582496ED0EE8582C6AD3BCF49674690C585439B6F57B43ADC12DF941F6 ] VMnetBridge    C:\Windows\system32\DRIVERS\vmnetbridge.sys
00:27:20.0749 0x1534  VMnetBridge - ok
00:27:20.0749 0x1534  VMnetDHCP - ok
00:27:20.0749 0x1534  [ FC13DEAE57DE3230B609AAEFF8AFF588, B0A5D662856B8A401DEC95E746717E1EE2C0AB9C532FC4A1038A0501C30CECEC ] VMnetuserif    C:\Windows\system32\drivers\vmnetuserif.sys
00:27:20.0749 0x1534  VMnetuserif - ok
00:27:20.0780 0x1534  [ 69741000F15F2F0CE85E5EE0DD3EB78A, 485C1D410ADDDFACF3518FDDAE0D23B972F270031805EDCB3D40B17F216641E1 ] vmusb          C:\Windows\System32\drivers\vmusb.sys
00:27:20.0780 0x1534  vmusb - ok
00:27:20.0827 0x1534  [ B7D3AD6D2F2128DE45EE4E0E8EAEACCC, 9B26E82BA97EF5CD3BE1CA22E481CBADB4ED6ACDF748D1F082239F34607019C6 ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
00:27:20.0843 0x1534  VMUSBArbService - ok
00:27:20.0843 0x1534  VMware NAT Service - ok
00:27:20.0858 0x1534  [ 20BBEDC86615741AC9ACDED5C30A41A8, 6D706C1F23C9D75D97C1D0AF75E01265097B4F35989E6DFFACAA6B1A02747352 ] vmx86          C:\Windows\system32\drivers\vmx86.sys
00:27:20.0858 0x1534  vmx86 - ok
00:27:20.0874 0x1534  [ 91F165C5D71D9DCB18D4661CF10D1084, 1D55C1FF0F5D860E6DB60EEFE303C0797C98BB0B053ECC255F9B316872288818 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
00:27:20.0889 0x1534  volmgr - ok
00:27:20.0905 0x1534  [ 17042748AC05862A0283D32575220080, A85B480CB969CB7678545D2A9EE99CBD2ADFF210FA016A43E092D0711FBB633D ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
00:27:20.0921 0x1534  volmgrx - ok
00:27:20.0921 0x1534  [ 823A237D871CD652C6BFD47BECB6810A, 99310521451CB54C29A5DEA54C3A666F95E2A1FF0979D5F9792885A161E90C65 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
00:27:20.0936 0x1534  volsnap - ok
00:27:20.0936 0x1534  [ 78727FA284C2095EED660D71CD3C9AEF, 323F0BD5A624DF77973F28C7CF31EC6B3A525496EBF063666623A62B1DB0EA65 ] vpci            C:\Windows\System32\drivers\vpci.sys
00:27:20.0952 0x1534  vpci - ok
00:27:20.0968 0x1534  [ 2415961D561E02F5E46B7C1C687A6788, 68A54B9595A0D15D410D5F1656B6EBE3B913A4BA5F71C658C9B99420E6ED327A ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
00:27:20.0968 0x1534  vsmraid - ok
00:27:20.0983 0x1534  [ 9884BBFB96048DC37A120A1712E0B479, 2A249D4D9076F20CF15946EA2DF19DCEDC044D12FF3D8D64D29AE9140CC93E6B ] vsock          C:\Windows\system32\drivers\vsock.sys
00:27:20.0983 0x1534  vsock - ok
00:27:21.0061 0x1534  [ 16419CBDB04DB9FF298169AA93413822, 743AD26F08AF5EFF5DD353E75C3D659B10C3FEC2FEDABB76387B87721B5B98F8 ] VSS            C:\Windows\system32\vssvc.exe
00:27:21.0124 0x1534  VSS - ok
00:27:21.0124 0x1534  [ 6AE9A843AE979F2DCCA5A25C07C7A5F8, 3CEC26DE2EEC97929A0FBBD87FF75F8DC387C0988B2047074C8F069ACBEF2587 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
00:27:21.0139 0x1534  VSTXRAID - ok
00:27:21.0171 0x1534  [ BD232C761C59FA8D8EF626CA630E2D2E, E494EFDCE8F6343F49F33F1F03DCD5DEC9CB6F349B1AD302B4D3333B5F6BD8E5 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
00:27:21.0202 0x1534  vwifibus - ok
00:27:21.0202 0x1534  [ 3039687AB65CEE26CF478C1F42FFCD7D, 40E140C6F94B6203767A1493DF8CAE6BA1FB67FBD0C13789444F72410D0E6FF1 ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
00:27:21.0233 0x1534  vwififlt - ok
00:27:21.0249 0x1534  [ EC9B6544C569E8D7FAB91772BD7D23F2, 06CC5F21E9A9DD35099CB3E44C3E2BF2F944CE5B71284E6A85E1B681F12BD31B ] W32Time        C:\Windows\system32\w32time.dll
00:27:21.0296 0x1534  W32Time - ok
00:27:21.0311 0x1534  [ FC40A7527D39F06D032A6553D22E4BF6, F572FCB5EB3DE16FD6222A5B6A43C81E3A1F838890667D9F0453F82FFCA772FF ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
00:27:21.0327 0x1534  WacomPen - ok
00:27:21.0343 0x1534  [ 2CFE8CBE358CC4D5715E010E3B13559F, 54E9BFCE202FA123EB261C226094054950429AAFA304AA714F461B003E070BD9 ] WalletService  C:\Windows\system32\WalletService.dll
00:27:21.0389 0x1534  WalletService - ok
00:27:21.0405 0x1534  [ E9E22E116F810DAC98C5EC207F24C916, C518DC57CECA5174E7695F5632555FA08571D5F3A7D6B0C295BA4221AEA67C04 ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
00:27:21.0421 0x1534  wanarp - ok
00:27:21.0421 0x1534  [ E9E22E116F810DAC98C5EC207F24C916, C518DC57CECA5174E7695F5632555FA08571D5F3A7D6B0C295BA4221AEA67C04 ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
00:27:21.0436 0x1534  wanarpv6 - ok
00:27:21.0483 0x1534  [ CF9EF65FA66B0F4982FD1FACAB3009B6, 681C1CD5DCAF87EF436B907534E98B0AB4F66BD62E46B8977A7880B854766A27 ] wbengine        C:\Windows\system32\wbengine.exe
00:27:21.0561 0x1534  wbengine - ok
00:27:21.0608 0x1534  [ 8F2B0ED6FCA72B34BEEA37E32D0EE106, A86C641A13FDF056B7BA13641551582199DDB08E9490003C74D999518B097C00 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
00:27:21.0718 0x1534  WbioSrvc - ok
00:27:21.0780 0x1534  [ A40484AC27EE08DBE7F8DA5E1F6651ED, E3259694450C4F1DEC5E0EA5E23BF3A51F1819374DF47FECF70282AFD46114A1 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
00:27:21.0921 0x1534  Wcmsvc - ok
00:27:21.0936 0x1534  [ 8E7FD07D2C82ACBCA52C4100C20F6542, FB2CD88557ABB5EBE6555CD4E41BF4BDC6FE6BCF26288338F2FB034B966FCBD3 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
00:27:21.0999 0x1534  wcncsvc - ok
00:27:22.0014 0x1534  [ 9C776ED423CD03F8ABD54C2557E34416, 282C1208977070EC0280D5ABA0E03A847AEAEE31F35CDAA3C7A02D8477614EB1 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
00:27:22.0030 0x1534  WcsPlugInService - ok
00:27:22.0046 0x1534  [ C8BA574B3BA6AE88741AC86B1FE3C1DC, B2422CDE3A6A27B52D270D24298FF69D91D389C68456EC1805BA30AA59BAB839 ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
00:27:22.0061 0x1534  WdBoot - ok
00:27:22.0093 0x1534  [ 927AD29D7F91B9A0C5294932374DA15E, ABB2722EF4153771D15683B5CE603D2B7D8A585357F64A3DC26114F37BE2906E ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
00:27:22.0124 0x1534  Wdf01000 - ok
00:27:22.0139 0x1534  [ C5BB7C612B4C852836BEA39593BA5F46, 1E2B123F34500C2A8E983AAAF7F14E409B88DC396A655F19F3E7F15D0C51A762 ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
00:27:22.0155 0x1534  WdFilter - ok
00:27:22.0155 0x1534  [ 9E0442D3880438D006D95C6F63C27274, DB1ED2BCF9986495EFA8A0B3B0156119F2E4F77AE9BDC6377ADF3A6B53C658F6 ] WdiServiceHost  C:\Windows\system32\wdi.dll
00:27:22.0171 0x1534  WdiServiceHost - ok
00:27:22.0171 0x1534  [ 9E0442D3880438D006D95C6F63C27274, DB1ED2BCF9986495EFA8A0B3B0156119F2E4F77AE9BDC6377ADF3A6B53C658F6 ] WdiSystemHost  C:\Windows\system32\wdi.dll
00:27:22.0186 0x1534  WdiSystemHost - ok
00:27:22.0202 0x1534  [ 9B2039C5673EEBF1D4E34ABC0AFB88C7, BBC85546BD86B9027426DAF148194CFE992B80FF89311B28BE0BD82C88630E8C ] wdiwifi        C:\Windows\system32\DRIVERS\wdiwifi.sys
00:27:22.0233 0x1534  wdiwifi - ok
00:27:22.0233 0x1534  [ BD193A7BD34B2E829FAF56306FEE3B09, ADD746D198E21242CEFA01840952B792074EFC473113CD3E7F1ABBA6A4E26AF6 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
00:27:22.0249 0x1534  WdNisDrv - ok
00:27:22.0265 0x1534  WdNisSvc - ok
00:27:22.0280 0x1534  [ 6A3B5013D5C7840E8CABD63DD021C112, 371CCEEAC7816CFE79ACA8A218CDA16469D9567CB63CC9D18C55FF047011EF25 ] WebClient      C:\Windows\System32\webclnt.dll
00:27:22.0311 0x1534  WebClient - ok
00:27:22.0311 0x1534  [ EED4043BC3C2D00067411730EE118354, 5E268DA4DB78C06D8F181E9408B4769F8A12C38DA52C1E986EE0CEE1101E9485 ] Wecsvc          C:\Windows\system32\wecsvc.dll
00:27:22.0327 0x1534  Wecsvc - ok
00:27:22.0358 0x1534  [ 6ECD7A49AFC6533821BEEA1876CEB21D, 2E972245F56F589EF1AB9DABB9214B9DE6E290878735476323A3357D8CDFC71F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
00:27:22.0390 0x1534  WEPHOSTSVC - ok
00:27:22.0405 0x1534  [ 09B434867028AF4895A87959EA668686, 26A7DB82E42DCBF3A77092D58AC6392754FD7C538B9EAAEFA88E9AF81DFE8E96 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
00:27:22.0530 0x1534  wercplsupport - ok
00:27:22.0530 0x1534  [ DE4E417B867841EE55114E588098B8D5, 878708C93FC1D919E2B9E1C5F94A0EAFC5F28BDAA58D3F29DEEDC8EC3F72D9ED ] WerSvc          C:\Windows\System32\WerSvc.dll
00:27:22.0561 0x1534  WerSvc - ok
00:27:22.0561 0x1534  wfpcapture - ok
00:27:22.0577 0x1534  [ DBF5255B759212E5217A2748567A0B5C, 5E81A9289EC39702179038B686A35FADF9974651E74222F3354B4CBE919887B0 ] WFPLWFS        C:\Windows\system32\drivers\wfplwfs.sys
00:27:22.0577 0x1534  WFPLWFS - ok
00:27:22.0577 0x1534  [ 4CD8826BB8320741842A9E53E48AF2BC, 97B22D9DCD0FD31D3A801946173369B0E70B1850576682C8A8180874A61CAD1A ] WiaRpc          C:\Windows\System32\wiarpc.dll
00:27:22.0608 0x1534  WiaRpc - ok
00:27:22.0640 0x1534  [ 4375BCBA419D19695CF566082CEF27D3, 6F86FA14B41A03F2BA51B8702F3D59B85FD488405601FA177495E4B7C576850D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
00:27:22.0640 0x1534  WIMMount - ok
00:27:22.0640 0x1534  WinDefend - ok
00:27:22.0655 0x1534  [ 037BC6DE5F58D4A74A5BB0C12DCECDCA, 92921A2615A41C434BADEB33594DABC166FC9418FBD311A3B2022410B14BFDAC ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
00:27:22.0655 0x1534  WindowsTrustedRT - ok
00:27:22.0671 0x1534  [ 70BCD70BD53F2FE660ED94B025A043EB, B23B96DCAB30C62CB1651B3A2292155AEE8217CE3120574F5158D5E7DA09DE56 ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
00:27:22.0686 0x1534  WindowsTrustedRTProxy - ok
00:27:22.0718 0x1534  [ 8921ECEC2C7D1B1333D77325C60D3AEA, 67C6B6A92B34D99165B5591D0730322C31E967E599BA44924249BF5AD505C132 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
00:27:22.0843 0x1534  WinHttpAutoProxySvc - ok
00:27:22.0874 0x1534  [ 7792AE5403BF8975B6460DFC3428D129, D88F77E973D58C2CA629CC9249877A34ABF31CA1DC2A570666921A8A0DC8DEC7 ] WinMad          C:\Windows\System32\drivers\winmad.sys
00:27:22.0890 0x1534  WinMad - ok
00:27:22.0921 0x1534  [ 73B5230F03DC7002A70F11EA1B0BAA37, DFE8BBE52B58589686E402ACED51021E298A491F907EBA5689DF9DAFC3002BA5 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
00:27:22.0983 0x1534  Winmgmt - ok
00:27:23.0061 0x1534  [ 2FE85D6AFF90F56A78743CC93B9CA684, B515765C4EE64E7EC16BD6AF037C084CCA6E81180AEF59E18F260406ABE6DF58 ] WinRM          C:\Windows\system32\WsmSvc.dll
00:27:23.0202 0x1534  WinRM - ok
00:27:23.0265 0x1534  [ 811F30EB6EE8318C4171CB95AE30B9BD, 765F6BEA3D35D523B5D7ED7356EC0C97A48066A5C4D77C1E6EDAC6F220153385 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
00:27:23.0311 0x1534  WINUSB - ok
00:27:23.0327 0x1534  [ DF00381AB8665D48DE3FF794BC6760AB, 749AC7048601061A34BFF507B574AF028FC662C0A98692E7331E667D105EC09D ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
00:27:23.0358 0x1534  WinVerbs - ok
00:27:23.0733 0x1534  [ 3C096082A9232B7CEE4653B9C9031769, CFD4C7D0874097ED70735FD99206F21C12749B7956C4B5D4287F160EC6A21DCC ] WlanSvc        C:\Windows\System32\wlansvc.dll
00:27:23.0890 0x1534  WlanSvc - ok
00:27:24.0155 0x1534  [ 0968D575D9108497A6DC37749D4A6C4F, 8BFEDBE642DA0FD8AC1E60180C192527F3D36E43089090A7BB6D8B27AB6E4F7F ] wlidsvc        C:\Windows\system32\wlidsvc.dll
00:27:24.0390 0x1534  wlidsvc - ok
00:27:24.0405 0x1534  [ 623ED8E10DFEEAB7AE2CD11A0451DB79, 7DDE15F22FD24556D4765F6CFD0F8E2F27370A89A962919646DE2613B33D43D6 ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
00:27:24.0421 0x1534  WmiAcpi - ok
00:27:24.0421 0x1534  [ B2BB87531C4127ED4120E9BF5566827F, 1DDC0F00F215D77D3698F81B56D4488F384E9D017267840EDFA4846742B99B6A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
00:27:24.0452 0x1534  wmiApSrv - ok
00:27:24.0468 0x1534  WMPNetworkSvc - ok
00:27:24.0499 0x1534  [ 78CA1FF6FE37EEFAFF99DD1C956AF60A, 883C7890C83BAB3B846A0C969D7B67031BD2EF65FA58A0620DD0CD1655C5B2C5 ] Wof            C:\Windows\system32\drivers\Wof.sys
00:27:24.0499 0x1534  Wof - ok
00:27:24.0593 0x1534  [ C7503A49364DB2AF7A7DE177B233081F, 85DC6D8B5631E51FCF395A884F58571A96C8C55C38CA9ABEBD9C75BABAD21E38 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
00:27:24.0718 0x1534  workfolderssvc - ok
00:27:24.0749 0x1534  [ 388F2A3C771B8BEE76FD1AAF9614D08E, C064EC6136CC20C4EE19C86E91CA071974933BB52C9EF8521DF4AFD060FED4A2 ] wpcfltr        C:\Windows\system32\DRIVERS\wpcfltr.sys
00:27:24.0749 0x1534  wpcfltr - ok
00:27:24.0780 0x1534  [ A6FCFE1F691B4A4D266F5D487FADB9FE, 2135D0C13C1295A2F76885E380CD72CB71CEB8E0D9F1C183A35935B27737D423 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
00:27:24.0827 0x1534  WPDBusEnum - ok
00:27:24.0843 0x1534  [ 37DCE976B3935380F2F6E39ABB6BF40D, B14E875F6D6503DF0DB6D9D2363316073AEEF394D830EA2270A0DCDA56E1CEC4 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
00:27:24.0843 0x1534  WpdUpFltr - ok
00:27:24.0858 0x1534  [ 80F0154FD4293E562D54E97811E03499, EDE920F7F95EFBE542FE3CE066B6F7CDE3B9A37DDF3411DC86EACE9EEF294C1D ] WpnService      C:\Windows\system32\WpnService.dll
00:27:24.0874 0x1534  WpnService - ok
00:27:24.0905 0x1534  [ 3CD22DD5A790CF7C24D65455E565EA83, 49DB06DF6F38940E7F8691C16586A78BB20E702FD48A34E50987C06B08BDF4DB ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
00:27:24.0936 0x1534  ws2ifsl - ok
00:27:24.0952 0x1534  [ EBA916109A176714E6A7BD152387F13C, 7B38B1708B83271ADA8D1CEC7F5F0A75C7F2572185C0961EFC749D5DF16A03F0 ] wscsvc          C:\Windows\System32\wscsvc.dll
00:27:24.0983 0x1534  wscsvc - ok
00:27:24.0983 0x1534  WSearch - ok
00:27:25.0061 0x1534  [ 9EB85802AB625970E05879D15DE56335, B7DCE5E1924A5CEE76CC07FF3B8CEDBBD0DDBB4C4ED0A3BFB8D1ABCAD7C0AA23 ] WSService      C:\Windows\System32\WSService.dll
00:27:25.0186 0x1534  WSService - ok
00:27:25.0421 0x1534  [ B70FF53144AC4B3C7D98BFB7D7C239BD, 996F6253F24C6D734B777988CDE03CD3A32FFBAD6D7A198F1C590B762CD8DC0E ] wuauserv        C:\Windows\system32\wuaueng.dll
00:27:25.0812 0x1534  wuauserv - ok
00:27:25.0874 0x1534  [ 835F60262E7E310080EA05F6752BF248, 3010B731DF3D52B56EA16FD29B66F5D3AB9412E49CA4C547BAAECA3225C5DC40 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
00:27:25.0921 0x1534  WudfPf - ok
00:27:25.0952 0x1534  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
00:27:26.0015 0x1534  WUDFRd - ok
00:27:26.0030 0x1534  [ 44CF3130AEC8914705487C4AEF756A19, 30B09E32DEC02141F9B99ED012E441056C1663A72E4130EF4221ECC0ED87BF4B ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
00:27:26.0077 0x1534  wudfsvc - ok
00:27:26.0108 0x1534  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFWpdFs      C:\Windows\system32\DRIVERS\WUDFRd.sys
00:27:26.0124 0x1534  WUDFWpdFs - ok
00:27:26.0171 0x1534  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
00:27:26.0202 0x1534  WUDFWpdMtp - ok
00:27:26.0483 0x1534  [ D23F211E1AA0787EFEC373D172D4A1C2, 6CCAB272D121C9946B2CF6B19F50E09946F0187713D54BFBD371B5C017367204 ] WwanSvc        C:\Windows\System32\wwansvc.dll
00:27:26.0640 0x1534  WwanSvc - ok
00:27:26.0733 0x1534  [ 9BDC2AFCEF4CF1C630D728DE1DBD495A, 5CE19974380CCEC46C181315B349E9A7CE757E19118EC5978A2293D63268BA66 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
00:27:26.0812 0x1534  XblAuthManager - ok
00:27:26.0858 0x1534  [ 3EDB6162310EA223890C2DF44C68358B, 12053291809CA9C38A30EA4B2DE7115F535531F0925220C63B0312979F9CC707 ] XblGameSave    C:\Windows\System32\XblGameSave.dll
00:27:26.0952 0x1534  XblGameSave - ok
00:27:26.0968 0x1534  [ 30021D1E0407B71E8D5D4F8DAE4E656A, EE2E366A1CC033C068176C7E9F876FFA0EF86A15A482B6964E170DE863CFF542 ] xboxgip        C:\Windows\System32\drivers\xboxgip.sys
00:27:27.0062 0x1534  xboxgip - ok
00:27:27.0124 0x1534  [ 729B70C81F207541BC6A4ABAE3A8D594, 31F9BC41169D28B397C0D988C367C32FA9A95289E68AB8F38061DA478752A765 ] XboxNetApiSvc  C:\Windows\system32\XboxNetApiSvc.dll
00:27:27.0280 0x1534  XboxNetApiSvc - ok
00:27:27.0312 0x1534  [ 6851673B90D8CB332439E0339F81A6B6, 4E95F1A63E6DD58BB5BD6FC1D9784837D5E6F5BCF870C7ECC92DCA1AF20B6A4C ] xinputhid      C:\Windows\System32\drivers\xinputhid.sys
00:27:27.0312 0x1534  xinputhid - ok
00:27:27.0327 0x1534  ================ Scan global ===============================
00:27:27.0444 0x1534  [ C6BC6E49A7F76AA2BBA58CD08196755F, D02B6B285899E966D19323566A4780D51303D00E66674D7FF4B61991430A69A6 ] C:\Windows\system32\basesrv.dll
00:27:27.0504 0x1534  [ 70EC9717DC3A1CDF79C703A145E0E5B7, D5ABF42063DFF799FD4099D8A347256CC79B89582B987B3DEE240AFA5BA421BE ] C:\Windows\system32\winsrv.dll
00:27:27.0567 0x1534  [ F435AFA375ACBAEE44324DD464EDCC11, 815DE470439AE5D96348BEBF971A14FBDCA1D36F31CA0D25F69E5F41817D43D5 ] C:\Windows\system32\sxssrv.dll
00:27:27.0629 0x1534  [ BB3D8E1C108F7244613FF3993291A922, 1642AF23F200D46F54239C3BA743F1D5ADDC6A32D5F6481264D0C1D7F3E9D533 ] C:\Windows\system32\services.exe
00:27:27.0661 0x1534  [ Global ] - ok
00:27:27.0661 0x1534  ================ Scan MBR ==================================
00:27:27.0676 0x1534  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
00:27:28.0989 0x1534  \Device\Harddisk0\DR0 - ok
00:27:28.0989 0x1534  ================ Scan VBR ==================================
00:27:29.0005 0x1534  [ 6DEC0C1EF3D5DF161D698819450EF808 ] \Device\Harddisk0\DR0\Partition1
00:27:29.0114 0x1534  \Device\Harddisk0\DR0\Partition1 - ok
00:27:29.0130 0x1534  [ 71F8E1BA44277724A6C5D30F067CFC5E ] \Device\Harddisk0\DR0\Partition2
00:27:29.0255 0x1534  \Device\Harddisk0\DR0\Partition2 - ok
00:27:29.0255 0x1534  ================ Scan active images ========================
00:27:29.0255 0x1534  [ BE2CEEA03CA1A407B85B887DFCA25181, EE64BE9FAB126D27E679DCDE2CA577699C83F21EC8733892E63605094DE67082 ] C:\Windows\System32\drivers\crashdmp.sys
00:27:29.0255 0x1534  C:\Windows\System32\drivers\crashdmp.sys - ok
00:27:29.0255 0x1534  [ 4BA553473375DB7D3391034AAF3A02CE, 8B9DD348E6EB3AD8285DD8996E9BD10D8091D4237AE6227F6FE5C13AB8C28229 ] C:\Windows\System32\drivers\Diskdump.sys
00:27:29.0255 0x1534  C:\Windows\System32\drivers\Diskdump.sys - ok
00:27:29.0270 0x1534  [ 0BB244A03A1FFE52D7C70F0B233A26C2, AA029CD2FAE0D0E5176940413DFD93095069CFBC4EAAEE9259814E1B6FBA2095 ] C:\Windows\System32\drivers\dumpfve.sys
00:27:29.0270 0x1534  C:\Windows\System32\drivers\dumpfve.sys - ok
00:27:29.0270 0x1534  [ 25555186E4FBDF0E30A5DBFC9B9A73F9, 4A9DAC2B56389C5955C343E202C6E81CD3A608E78A4BB7E6ED560719DF02C955 ] C:\Windows\System32\drivers\iaStorA.sys
00:27:29.0270 0x1534  C:\Windows\System32\drivers\iaStorA.sys - ok
00:27:29.0286 0x1534  [ CA160E02F35A61C6F5C681FB4669C519, E6BC66156EE226F16804C4FDC8A60EB15CE6212EAFB9FB841FAC899979E140E2 ] C:\Windows\System32\drivers\cdrom.sys
00:27:29.0286 0x1534  C:\Windows\System32\drivers\cdrom.sys - ok
00:27:29.0286 0x1534  [ CDFD81CACE0E11596A3BB61EC4CF6467, 569FA86A215B054131AA9AFEECFEE7FD7143DCFFE275B84196004AEA538B2476 ] C:\Windows\System32\drivers\filecrypt.sys
00:27:29.0286 0x1534  C:\Windows\System32\drivers\filecrypt.sys - ok
00:27:29.0286 0x1534  [ C2F5BA69FB8753989032F614D4B5021D, EF8A5629C8D648945E5A38E69CD2A1EA698E5F285192C738E16196496E9FD4E4 ] C:\Windows\System32\drivers\tbs.sys
00:27:29.0286 0x1534  C:\Windows\System32\drivers\tbs.sys - ok
00:27:29.0286 0x1534  [ 5164A66EC1565711A7B4CF2F143B4979, DA29F0FB63F3EB2BF92D51FEB4BB7D2B964553D2F634556325953927464CB3A5 ] C:\Windows\System32\drivers\BasicDisplay.sys
00:27:29.0286 0x1534  C:\Windows\System32\drivers\BasicDisplay.sys - ok
00:27:29.0301 0x1534  [ 1E8A9267F8886803AAE02982FC1B5BC4, 655DF84E037BD6E582A6BA89737A4388956219171AF7253D126E54A23F16BE59 ] C:\Windows\System32\drivers\beep.sys
00:27:29.0301 0x1534  C:\Windows\System32\drivers\beep.sys - ok
00:27:29.0301 0x1534  [ 383E546EF4982262A0EF6CC2B6E9D525, 3C6C90B62E8EB094E6928C388E5081A3F73DF87B0F34F716B72EA7B6EF71FBB7 ] C:\Windows\System32\drivers\null.sys
00:27:29.0301 0x1534  C:\Windows\System32\drivers\null.sys - ok
00:27:29.0301 0x1534  [ F9BF09CCDC5D25C644BAF1A8486EBF21, 963B5BA05FC4B04D0D73A5C213FE341D00760E7449B64233CDD59072E27F85B0 ] C:\Windows\System32\drivers\watchdog.sys
00:27:29.0301 0x1534  C:\Windows\System32\drivers\watchdog.sys - ok
00:27:29.0301 0x1534  [ 89C9C3745F270EF93988DA57BC6AA62B, 947886F3121919427BDCB123C6FC28E29CA73D427E92025E1BEAA743D27306D3 ] C:\Windows\System32\drivers\dxgkrnl.sys
00:27:29.0301 0x1534  C:\Windows\System32\drivers\dxgkrnl.sys - ok
00:27:29.0301 0x1534  [ F4C58BBF2972BD84C73F6A14CA35AC4E, B7A226EB861B63ACF4BF9B5A331ACA6FFC9B787DCCAA7697EEFC4F634508A6D5 ] C:\Windows\System32\drivers\BasicRender.sys
00:27:29.0301 0x1534  C:\Windows\System32\drivers\BasicRender.sys - ok
00:27:29.0317 0x1534  [ 7C55F1751CAC199680D4489D1EE46544, 967EC8137D321F6139C3382D19A338FD97A3023EB654747AC57C2008BE4AF677 ] C:\Windows\System32\drivers\msfs.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\msfs.sys - ok
00:27:29.0317 0x1534  [ 41557BE174E9EC6AC703A8A4ADBC6650, 8CF6DF3FDC3C7C44B32851538A67BF86A54AB6444A424D7A20B7A9A94B4158D8 ] C:\Windows\System32\drivers\npfs.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\npfs.sys - ok
00:27:29.0317 0x1534  [ A1FE5D9241FAD9CC97626A2935FBC6AE, 77A57C81ACEC210197D84719DCE68A2D14B0E6E678592A8C7883CE8992D112A0 ] C:\Windows\System32\drivers\tdi.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\tdi.sys - ok
00:27:29.0317 0x1534  [ 28E1E63A1AC65E17B3194238FA2CF3BF, 9A52D6DD14BEBB7B407B2703A111D1B302F1B84AA40A14D21FCA554F395E935D ] C:\Windows\System32\drivers\tdx.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\tdx.sys - ok
00:27:29.0317 0x1534  [ 3CD22DD5A790CF7C24D65455E565EA83, 49DB06DF6F38940E7F8691C16586A78BB20E702FD48A34E50987C06B08BDF4DB ] C:\Windows\System32\drivers\ws2ifsl.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\ws2ifsl.sys - ok
00:27:29.0317 0x1534  [ 6C12C7E01A4F64E0AA9C88AF66955CC9, 81A413702909341F8694823EC83FBA0089523D7EC927B80E55E0779BB83AD263 ] C:\Windows\System32\drivers\afd.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\afd.sys - ok
00:27:29.0317 0x1534  [ F0D791348AD254360CC3C3E501CCB745, E4CAB4D3C2CD3169731283B00DEBFE26438BB66A3F0D78BDB68E876A14FC7070 ] C:\Windows\System32\drivers\netbt.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\netbt.sys - ok
00:27:29.0317 0x1534  [ 45061BD6F11B80BF1C07A9253A659BF1, 9A1AFE963672E23F3C19FACE2CEB64766C964B165ECB26F36B6FB5730CEAFD2D ] C:\Windows\System32\drivers\avipbb.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\avipbb.sys - ok
00:27:29.0317 0x1534  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] C:\Windows\System32\drivers\avkmgr.sys
00:27:29.0317 0x1534  C:\Windows\System32\drivers\avkmgr.sys - ok
00:27:29.0333 0x1534  [ 824FDC990A3F79069BE468A132EB6888, D09F7A9EC04E37DA504CE54EEC25C312B407B6A8B214CBB074BEB50DE420F52A ] C:\Windows\System32\drivers\netbios.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\netbios.sys - ok
00:27:29.0333 0x1534  [ EDD52C352CBAAAD13FD7BD5DCEA309B3, EC7D294B23FD5C309E5C4C455896937B85DC615E1B36C9F8F3BDC90E75EBF9CF ] C:\Windows\System32\drivers\pacer.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\pacer.sys - ok
00:27:29.0333 0x1534  [ 3039687AB65CEE26CF478C1F42FFCD7D, 40E140C6F94B6203767A1493DF8CAE6BA1FB67FBD0C13789444F72410D0E6FF1 ] C:\Windows\System32\drivers\vwififlt.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\vwififlt.sys - ok
00:27:29.0333 0x1534  [ 838755238B2BAE5A4802B038443B8A22, 1A89E413C6E5C3E8C2B64F8A1D41271D3FA39BC67291331FEC8DCFD4F8CCE994 ] C:\Windows\System32\drivers\csc.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\csc.sys - ok
00:27:29.0333 0x1534  [ 66A98C407085B8920DF1E6D722F1ADB8, 3FE307E4A9E41B08E0453507E50D6D0C67FA6F4245A863D90181463C749C83B5 ] C:\Windows\System32\drivers\nsiproxy.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\nsiproxy.sys - ok
00:27:29.0333 0x1534  [ FC9B7AC6E2B837EF7CD6C64F7068D41D, 9B0DD842033E82BC7EE80416A62B084BF5200923EB7A6C80415BB28004E9B5E3 ] C:\Windows\System32\drivers\rdbss.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\rdbss.sys - ok
00:27:29.0333 0x1534  [ 8A289EF0721F95267BF2404BABEE146D, E263D258F03DF3BB405D49AE7230C37E7EB8F392FDEE48059C7C1E3709520D35 ] C:\Windows\System32\drivers\ahcache.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\ahcache.sys - ok
00:27:29.0333 0x1534  [ F038EAF73AAB72A4A89185A5A7B9FD75, 8213A60B3BEAFC1C554C5D049DFE3C6E44CEFE639EDD6A335AC18A9DAEDA2D4B ] C:\Windows\System32\drivers\dam.sys
00:27:29.0333 0x1534  C:\Windows\System32\drivers\dam.sys - ok
00:27:29.0348 0x1534  [ 25435407D97419627F4B10653433BF2B, 5429B0DB7C5302E9A6AF92C046637183D4147D4A206963ABEA3A611214D6AB04 ] C:\Windows\System32\drivers\dfsc.sys
00:27:29.0348 0x1534  C:\Windows\System32\drivers\dfsc.sys - ok
00:27:29.0350 0x1534  [ BA2455D93BD57989A04FE4094AA6F941, B579FB367C063EA30C034381148410D49D38E183A5A4D51D2334A81DAEE95CEC ] C:\Windows\System32\drivers\gpuenergydrv.sys
00:27:29.0350 0x1534  C:\Windows\System32\drivers\gpuenergydrv.sys - ok
00:27:29.0351 0x1534  [ 0A29AFA668F5DD50482A98ECE70C77A7, 4C1F23B062361D97B1C8D864AB227E5F398F774A99B5E60A1149A4F78D5BEC20 ] C:\Windows\System32\drivers\mssmbios.sys
00:27:29.0351 0x1534  C:\Windows\System32\drivers\mssmbios.sys - ok
00:27:29.0353 0x1534  [ AC3F70FCFBCE97AA2F12BA43EE13B86E, D0AC50FB022C0F3031531CEE210D47FC3244C6FB55FAAD4AAB04081F0A21DAE4 ] C:\Windows\System32\drivers\npsvctrig.sys
00:27:29.0353 0x1534  C:\Windows\System32\drivers\npsvctrig.sys - ok
00:27:29.0355 0x1534  [ 52F96A08076479231FFFB908073B1654, 23AFC89D52CCB484477F8345C5AE9C5EB4BD017D04CC0B6EBDABD8DF6F276D65 ] C:\Windows\System32\ntdll.dll
00:27:29.0355 0x1534  C:\Windows\System32\ntdll.dll - ok
00:27:29.0356 0x1534  [ F556DC3F406F81A84DCE1A96A32EE3AA, 8362388156714B077FDF0C520D30420346B1B1B8687236BA84E18EC0329915BB ] C:\Windows\System32\smss.exe
00:27:29.0356 0x1534  C:\Windows\System32\smss.exe - ok
00:27:29.0358 0x1534  [ 167049E2855CC51B6BEA75B3859BE234, 92A6F6512E1C899D9CB68520E96C7DB53F532919CB3D0FA1CEDC2EC4D692D8FF ] C:\Windows\System32\drivers\vmnet.sys
00:27:29.0358 0x1534  C:\Windows\System32\drivers\vmnet.sys - ok
00:27:29.0360 0x1534  [ A3412EC3FF7A5AC2CA3A3951476BFA9C, 8A3D241168205B6B5348F44DF89875067CDD5B29BE8CF14ADA8403225AE2A379 ] C:\Windows\System32\drivers\vmnetadapter.sys
00:27:29.0360 0x1534  C:\Windows\System32\drivers\vmnetadapter.sys - ok
00:27:29.0362 0x1534  [ 74CD3BF688E2B408227FE012A2F2D8ED, CC01AC79CEB9DC94FA5675D66F048928C9968B8944E34F5482A73C14B70EE8A8 ] C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys
00:27:29.0362 0x1534  C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys - ok
00:27:29.0365 0x1534  [ 53C79A7FABDAAFD11EAB31963FB2CED7, 357418645DDCEFA5546AE78EDCAE86D50928710CA7A3F65F01CF721AADA36623 ] C:\Windows\System32\drivers\kdnic.sys
00:27:29.0365 0x1534  C:\Windows\System32\drivers\kdnic.sys - ok
00:27:29.0367 0x1534  [ 21088F43172525C7E02D335A3327F46C, B04AD471A7DFE83AB557DB4540616B7DF4A1904F8BDDCB920D449FCEE6F36FD5 ] C:\Windows\System32\drivers\umbus.sys
00:27:29.0367 0x1534  C:\Windows\System32\drivers\umbus.sys - ok
00:27:29.0369 0x1534  [ 67A95F4B9F3C1E09F29017231E857F71, 984DA2D2264678EA001158939D2DA0F8A6D89362DCCEFFC1FFF00AEBF670B827 ] C:\Windows\System32\drivers\atikmpag.sys
00:27:29.0369 0x1534  C:\Windows\System32\drivers\atikmpag.sys - ok
00:27:29.0370 0x1534  [ 9A4DEDB0AFE7D254DA6F38F976ABB84E, 87D8515F1757D7D7ED9206D5A74C1513B67DCC33E48D0669A048ADC03A14D7AE ] C:\Windows\System32\autochk.exe
00:27:29.0370 0x1534  C:\Windows\System32\autochk.exe - ok
00:27:29.0372 0x1534  [ 54C5864ACFFE734E357BAC57184C8F66, 8C64FA4C2107053472BAA94047040FF1663A0BAA9AFC86ADB89C978011A50CE2 ] C:\Windows\System32\drivers\atikmdag.sys
00:27:29.0372 0x1534  C:\Windows\System32\drivers\atikmdag.sys - ok
00:27:29.0374 0x1534  [ BE258C17CFD09F4210602105432E784A, FD38B50785206D6E5EADE65396030E18C8B9D993D7225057B0C24F3256BCE2E3 ] C:\Windows\System32\drivers\amdkmafd.sys
00:27:29.0374 0x1534  C:\Windows\System32\drivers\amdkmafd.sys - ok
00:27:29.0376 0x1534  [ DAAAD4B6609EA4014AD594F35926C5CB, EB4B18E3A3D441843B49E54946A97FA6021D475D2C9AD5387CC0803B66483F77 ] C:\Windows\System32\drivers\drmk.sys
00:27:29.0376 0x1534  C:\Windows\System32\drivers\drmk.sys - ok
00:27:29.0378 0x1534  [ B46A4F59AAC885D6138A0E7022B67CAD, 60CA4C36F216B886049592D24076588CA563193DEFD9B38394FC590A33CA390E ] C:\Windows\System32\drivers\ks.sys
00:27:29.0378 0x1534  C:\Windows\System32\drivers\ks.sys - ok
00:27:29.0380 0x1534  [ FA5C94FB36625787063D04CF2F24E890, 55A30394A3E4064F5DF0DCD3A1FBCED4A95313CAB96F4824909691E7A37A0644 ] C:\Windows\System32\drivers\portcls.sys
00:27:29.0380 0x1534  C:\Windows\System32\drivers\portcls.sys - ok
00:27:29.0382 0x1534  [ C277A49F8A8295840DEBC9240B75A282, 8B2BA0E6A8300323765D95ECD843105B0FC4B80B85EE2220E677C4E9A760C9D8 ] C:\Windows\System32\drivers\hdaudbus.sys
00:27:29.0382 0x1534  C:\Windows\System32\drivers\hdaudbus.sys - ok
00:27:29.0384 0x1534  [ C67A03F54A1EA683F4880A481EE5FF6C, 346185B378577FF14EFAD01ECB7DFC9AFC0D50F16DF081C3BA99AEFF710A0EE9 ] C:\Windows\System32\drivers\USBXHCI.SYS
00:27:29.0384 0x1534  C:\Windows\System32\drivers\USBXHCI.SYS - ok
00:27:29.0386 0x1534  [ FB1C1D8B96A482F3581338D6752E1D6C, 0FFAEE3E088614B3483C459513BB9D78EB76B574696FD877A3CDF6A11378F46C ] C:\Windows\System32\drivers\Ucx01000.sys
00:27:29.0386 0x1534  C:\Windows\System32\drivers\Ucx01000.sys - ok
00:27:29.0387 0x1534  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] C:\Windows\System32\drivers\TeeDriverW8x64.sys
00:27:29.0387 0x1534  C:\Windows\System32\drivers\TeeDriverW8x64.sys - ok
00:27:29.0389 0x1534  [ 9A3E39F85DC6E3B9F792F1095ACFF788, 66B8E137A5232E9F717907CFD49FE624AE101F4DE14E2960849DABF7A877E87A ] C:\Windows\System32\drivers\usbehci.sys
00:27:29.0389 0x1534  C:\Windows\System32\drivers\usbehci.sys - ok
00:27:29.0391 0x1534  [ 71121D531A2DF7CD8CACB6D2DA9327CF, CFDD57BC64A87786FCCC753B041A3367C81D69E7BA40F8CC79E1A070376C4655 ] C:\Windows\System32\drivers\usbport.sys
00:27:29.0391 0x1534  C:\Windows\System32\drivers\usbport.sys - ok
00:27:29.0393 0x1534  [ B4D9C777762B1F7356958B9C0AA93BEB, F11B07FE939A107AB4EED4857854DF269C2D86A80C8507C8B1E95F7805975EDB ] C:\Windows\System32\drivers\intelppm.sys
00:27:29.0393 0x1534  C:\Windows\System32\drivers\intelppm.sys - ok
00:27:29.0395 0x1534  [ 3E8D616594F25F5FAF336B25B33C71F9, 6C83C4EDB630B5D02B8AA100CAE7D7E704E9C34ED1E139C8C6F7077C5B20A8CA ] C:\Windows\System32\drivers\Rt630x64.sys
00:27:29.0395 0x1534  C:\Windows\System32\drivers\Rt630x64.sys - ok
00:27:29.0397 0x1534  [ 802278EE4ACCE9EA1F1481DF20EB1667, E78F0DA2CA0B2C2DF3B7E3B2A22C03380FE649813EE6EB31067C5FB6727DB7BD ] C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys
00:27:29.0397 0x1534  C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys - ok
00:27:29.0398 0x1534  [ 4EE2423C38F43D37F8497A672FD10BDC, 031C5272DD28809255CF4FA8E6DE45DBFBD9A363BBD5156D0AEE0787C4297980 ] C:\Windows\System32\drivers\ISCTD64.sys
00:27:29.0398 0x1534  C:\Windows\System32\drivers\ISCTD64.sys - ok
00:27:29.0400 0x1534  [ 312DFD787D99D3BF1427B0388BC04F71, C082CA1F332AD57FF2100748518D3D7B3D0F1B042F69BD7401C44B77AFE97462 ] C:\Windows\System32\drivers\NdisVirtualBus.sys
00:27:29.0400 0x1534  C:\Windows\System32\drivers\NdisVirtualBus.sys - ok
00:27:29.0402 0x1534  [ FB7375657F8A5932C35EAA45E9B4B416, 99594708BFD6DC9F8CECBF092058D4D0D4F1BC3204E86F9FDAD5207ED5ECF194 ] C:\Windows\System32\drivers\rdpbus.sys
00:27:29.0402 0x1534  C:\Windows\System32\drivers\rdpbus.sys - ok
00:27:29.0403 0x1534  [ 996D179263700DB53BB643009948C40C, 974B8A8599BD2E903AA3C83591E8CAEB6DC03247BBC7F60854A86ED0031A1298 ] C:\Windows\System32\drivers\usbd.sys
00:27:29.0403 0x1534  C:\Windows\System32\drivers\usbd.sys - ok
00:27:29.0405 0x1534  [ 0A368247A900656CC0678117DFC3A87C, 9BEAD14DA067439D913F609955E95CFA0B88ED4F1BC60B473E00F9D9CBC01B9C ] C:\Windows\System32\drivers\usbhub.sys
00:27:29.0405 0x1534  C:\Windows\System32\drivers\usbhub.sys - ok
00:27:29.0407 0x1534  [ 75EBC59EAB1B4484FFC9B81DD5F4BE46, F37353591FA20776AFFBF8C2D7377A44E9C7FACDEE464A0C41C88F70A0E4B9B0 ] C:\Windows\System32\user32.dll

Treend 13.11.2015 00:37
Code:
00:27:29.0407 0x1534  C:\Windows\System32\user32.dll - ok
00:27:29.0409 0x1534  [ FD9A5BCC3AFB02E87668B749546B6229, 4BE969A11CEE8033F40EDE7E06A5904B328D3FC1842855C0DB38D5EEF458219C ] C:\Windows\System32\drivers\AtihdWT6.sys
00:27:29.0409 0x1534  C:\Windows\System32\drivers\AtihdWT6.sys - ok
00:27:29.0411 0x1534  [ 503597D9B72DBD9998F722F12A51ACFC, 9B3585282191163AA70243BAD921ED8725A98454E0D3879E0F671E0E4F56AB4F ] C:\Windows\System32\drivers\ksthunk.sys
00:27:29.0411 0x1534  C:\Windows\System32\drivers\ksthunk.sys - ok
00:27:29.0414 0x1534  [ C08449092043601887A1743350888635, 5CD916649D2CD8823B89C9E7459AD76AA8E54D70B6D9F40AD4A41144E22ACBE0 ] C:\Windows\System32\drivers\USBHUB3.SYS
00:27:29.0414 0x1534  C:\Windows\System32\drivers\USBHUB3.SYS - ok
00:27:29.0416 0x1534  [ 517B55BC30206D1644D85EFB594B9172, 1DBB08592DCCDE9AB28C70B4BDD8F59E30209B3F9E235D408DD6FB44B50010C0 ] C:\Windows\System32\rpcrt4.dll
00:27:29.0416 0x1534  C:\Windows\System32\rpcrt4.dll - ok
00:27:29.0418 0x1534  [ 300D818630070A91E8FB6C075C4161F3, F8C58CF3D50CC6ADAFB3C3A984E0E8C9063805ADF07BDC392A4C8BD758B319C0 ] C:\Windows\System32\wow64win.dll
00:27:29.0418 0x1534  C:\Windows\System32\wow64win.dll - ok
00:27:29.0420 0x1534  [ 2DF4ACBD8897D56091C9873DE210C2BD, B00E3C91E716C2E927E37938DCFD1D044F573EDA3E35C4367F158EB16B77B675 ] C:\Windows\System32\drivers\RTKVHD64.sys
00:27:29.0420 0x1534  C:\Windows\System32\drivers\RTKVHD64.sys - ok
00:27:29.0422 0x1534  [ A02352301E2DC7CF04D5C6B06C708F7B, 9F34B913AA7F94D1FC6A3025DAD443C47C4AB01D4328289BA6598300AA53B793 ] C:\Windows\System32\GdiPlus.dll
00:27:29.0422 0x1534  C:\Windows\System32\GdiPlus.dll - ok
00:27:29.0424 0x1534  [ 547D2BC05916E97FC8F48CB22DD1CFA1, F6D89B74172BE46190927D67D0170ACEDAEC9636F67D7CD2B2360842BF534088 ] C:\Windows\System32\shell32.dll
00:27:29.0424 0x1534  C:\Windows\System32\shell32.dll - ok
00:27:29.0425 0x1534  [ 362AC63B42F25A76D24DAC55DC1CB1AC, 475128ABF60A4C842E4767D1B319A24F4FC973A4993AC1D38195A5C41407E8E1 ] C:\Windows\System32\drivers\hidparse.sys
00:27:29.0425 0x1534  C:\Windows\System32\drivers\hidparse.sys - ok
00:27:29.0427 0x1534  [ 18B63A0980F4AA1E6D7879B253980E37, 05F96DBE0A3DE2A685DEEBA8B6838A47AEB7CE2EBE8EB6BAD67B36DCF7E73589 ] C:\Windows\System32\drivers\usbccgp.sys
00:27:29.0427 0x1534  C:\Windows\System32\drivers\usbccgp.sys - ok
00:27:29.0429 0x1534  [ B048F79A675486207CF13AB3D2C001BA, E2A3C465907D3279FBBB264DB90F9AAEE690040DD52B84D7E00B82DF4180E9B8 ] C:\Windows\System32\drivers\hidclass.sys
00:27:29.0429 0x1534  C:\Windows\System32\drivers\hidclass.sys - ok
00:27:29.0431 0x1534  [ 01F732724AF6EFE69886DA95A4E51820, E048A480F9396418BDE9659596E7EDA5FF97D3CE029D186048609B47575BEAE1 ] C:\Windows\System32\drivers\hidusb.sys
00:27:29.0431 0x1534  C:\Windows\System32\drivers\hidusb.sys - ok
00:27:29.0433 0x1534  [ 2FDB67F5B9F4E96B40FDC9D1AA0B686F, B556328D54F886792A89588F3FEFE38F7129E3D7A417CDC012778FA4EF37A8C1 ] C:\Windows\System32\drivers\imsevent.sys
00:27:29.0433 0x1534  C:\Windows\System32\drivers\imsevent.sys - ok
00:27:29.0434 0x1534  [ B63C0DB341DCB46CF7AA259333A737DD, F1B43BA68707F3F99CD31AB2035F5E86CD967AE4E5393928C69861785E960872 ] C:\Windows\System32\drivers\kbdhid.sys
00:27:29.0434 0x1534  C:\Windows\System32\drivers\kbdhid.sys - ok
00:27:29.0436 0x1534  [ 2DAAF1EE1C30F2FCF59851A64ADA0422, 08CD801E63E2862DE058CD732C3DB3D87B1A2898732365440E3F8919932E96FC ] C:\Windows\System32\drivers\mouclass.sys
00:27:29.0436 0x1534  C:\Windows\System32\drivers\mouclass.sys - ok
00:27:29.0438 0x1534  [ D30FE074503283829ED194BCAE6239C3, A3A127381ECC798417D01F6B8A1894EED7D71989047BC4D1D74D0E7C8394AD65 ] C:\Windows\System32\drivers\mouhid.sys
00:27:29.0438 0x1534  C:\Windows\System32\drivers\mouhid.sys - ok
00:27:29.0440 0x1534  [ 2138638F9DED7CDBFDE2175869DDF7F2, F0468B226CE05AAD50FFD1C00B529CEF382B0D58729FB0EE4103E827DC6600D7 ] C:\Windows\System32\Wldap32.dll
00:27:29.0440 0x1534  C:\Windows\System32\Wldap32.dll - ok
00:27:29.0442 0x1534  [ 69229859E36A2A40798951D4E81F3355, 27EAC038FE6DCD0C99D8464EBF61136CA693FFC5D1EF45AD403E2EACAA2E9C3E ] C:\Windows\System32\coml2.dll
00:27:29.0442 0x1534  C:\Windows\System32\coml2.dll - ok
00:27:29.0444 0x1534  [ 2DC94CDF8259398925EDD0ADBCD38112, 5A6000E2F489B8E7A5C697D336B9184ABD8A1E7CD555001F9B9B7AD5029D7F71 ] C:\Windows\System32\imagehlp.dll
00:27:29.0444 0x1534  C:\Windows\System32\imagehlp.dll - ok
00:27:29.0446 0x1534  [ 9405300886C7ACF01B5758419BE53793, 3ECDE4F24CABFC3B04256F07414CAED11BA2E9B88EE3F23E20D240BFD0B16ED1 ] C:\Windows\System32\clbcatq.dll
00:27:29.0446 0x1534  C:\Windows\System32\clbcatq.dll - ok
00:27:29.0448 0x1534  [ 0E49B1E08DF8484884A0092C48B933DB, 8E56E5E0C39862236E5BA2A54980655C42D0F0DB446416F634B79AE32E33F287 ] C:\Windows\System32\ws2_32.dll
00:27:29.0448 0x1534  C:\Windows\System32\ws2_32.dll - ok
00:27:29.0449 0x1534  [ 2A6B77A72AEA0C200D6B95F755FCD69F, 86D38FC561ACB046B0D9EE66E44C52C9C73A51352A7EBD1AFB044FE4C151524D ] C:\Windows\System32\sechost.dll
00:27:29.0450 0x1534  C:\Windows\System32\sechost.dll - ok
00:27:29.0451 0x1534  [ 8D04F2B402D727F131A87549BF6D8C40, 095E87097ED0A43B6430B6285EB4CF0153F16DB23854A6CA55C5025D9F6DB90F ] C:\Windows\System32\advapi32.dll
00:27:29.0451 0x1534  C:\Windows\System32\advapi32.dll - ok
00:27:29.0453 0x1534  [ 42E3A19087CCA1F606434E7EC42BA13E, 628AE302E49726FC73F929A128FA929059E72407AD56B11BAB133B0CC59949A2 ] C:\Windows\System32\msvcrt.dll
00:27:29.0453 0x1534  C:\Windows\System32\msvcrt.dll - ok
00:27:29.0455 0x1534  [ 94FA21E27785830798B8EC5F3F8C5A82, 3205EAE3703E11EB7C3A9011457166A35354CD632BFD335038E3505F13C1D234 ] C:\Windows\System32\difxapi.dll
00:27:29.0455 0x1534  C:\Windows\System32\difxapi.dll - ok
00:27:29.0456 0x1534  [ 1F6B87C3E84E565C93AEE828578F81A2, B0FCD004D32DBBD4E447D5D1A28574C85208AC716401BC2C221FF0FE7EC33E00 ] C:\Windows\System32\lpk.dll
00:27:29.0456 0x1534  C:\Windows\System32\lpk.dll - ok
00:27:29.0458 0x1534  [ 6B69A35F448F8BFCB4C6A706AC99A856, B12CF9CD4F1ECD79A877D8BA303DC42907A13453512BCB171156114BC33380FE ] C:\Windows\System32\wow64.dll
00:27:29.0458 0x1534  C:\Windows\System32\wow64.dll - ok
00:27:29.0460 0x1534  [ 12FFC6CE76B62358FA636430F97C0E94, 803C191D73E0630A05E7C2278D4E9C825E06F92168CF7C48B8F256BE5D860223 ] C:\Windows\System32\setupapi.dll
00:27:29.0460 0x1534  C:\Windows\System32\setupapi.dll - ok
00:27:29.0462 0x1534  [ 3CCA3EAFB644018B49208FCB7D72C24E, 07D29CEF946E0878720EE664B9D4E4138F698B1E771A0D016A3B3819FB7F7616 ] C:\Windows\System32\oleaut32.dll
00:27:29.0462 0x1534  C:\Windows\System32\oleaut32.dll - ok
00:27:29.0464 0x1534  [ 038B10C8E735FE667DA29B2E92A09B8A, 9D9D6FA334AA40B16FEC077108280F2D838DC7E822C2DF7E8DFC7FC485CD2D3D ] C:\Windows\System32\kernel32.dll
00:27:29.0464 0x1534  C:\Windows\System32\kernel32.dll - ok
00:27:29.0466 0x1534  [ C39C799393995E2A92E8C9F48E36A09E, A84464554A249F380B0E782E87E38820340E84E8FE479B229A218F01A1FDF1C2 ] C:\Windows\System32\normaliz.dll
00:27:29.0466 0x1534  C:\Windows\System32\normaliz.dll - ok
00:27:29.0468 0x1534  [ 99B9CE4B6BC4766E80D9190011DD4429, DE9678A5A347D7D63AB1B54EE5AC6DB726C7BBC898A050F6523E99A44826AD1A ] C:\Windows\System32\shlwapi.dll
00:27:29.0468 0x1534  C:\Windows\System32\shlwapi.dll - ok
00:27:29.0470 0x1534  [ A6A8DFAB241D568DB8834D6729B05867, E675116EF693A54019C965D6537926023C88320C68B799F3AFFC7CB99D329BF5 ] C:\Windows\System32\comdlg32.dll
00:27:29.0470 0x1534  C:\Windows\System32\comdlg32.dll - ok
00:27:29.0471 0x1534  [ 4473A0AEADF62215B538B9FB975893D2, 7B4D8A39E14AA479345F70D36C0D427AB1286B53419B17DBDBF76875547C5FC2 ] C:\Windows\System32\ole32.dll
00:27:29.0471 0x1534  C:\Windows\System32\ole32.dll - ok
00:27:29.0473 0x1534  [ D5DB30EFD8F98474164B091E569D20A9, 25ACBA4AC3D48F25AD63EC4D68DAE3223402D31D2128A2539EAAD1548EC8124C ] C:\Windows\System32\psapi.dll
00:27:29.0473 0x1534  C:\Windows\System32\psapi.dll - ok
00:27:29.0475 0x1534  [ 5EE78C5643B0ACB1C3E836E0BA18CCE3, 4E7ED5287996CE87451CE121E91DC6BC5C1D8E7E93D1A6804FBF342565C25830 ] C:\Windows\System32\wow64cpu.dll
00:27:29.0475 0x1534  C:\Windows\System32\wow64cpu.dll - ok
00:27:29.0477 0x1534  [ DD1E88BC0333756691944A3082142CDD, E3B794DF433BD3490CDFCBDDC997EDA67103E20743289AF284BB37E9EFF1AFEF ] C:\Windows\System32\nsi.dll
00:27:29.0477 0x1534  C:\Windows\System32\nsi.dll - ok
00:27:29.0479 0x1534  [ 95ECE2825C242B1F42F5AF46CC42A497, 55EB91D0339E1095748A9A9B7137A624649EBD2657620823061CFB6008429029 ] C:\Windows\System32\msctf.dll
00:27:29.0479 0x1534  C:\Windows\System32\msctf.dll - ok
00:27:29.0481 0x1534  [ BFE876E837A15B740FCEA4F4A844C7C9, CC7AE51D7D116D2867FC9398AE962E8FAF4D7684D28E88094C11144E150712A4 ] C:\Windows\System32\imm32.dll
00:27:29.0481 0x1534  C:\Windows\System32\imm32.dll - ok
00:27:29.0482 0x1534  [ F9F22DBC2FF1E7F00B6948545DD2AD1C, 4B969D85B97ED37A2109892418252DB564DB21FB09722B49CCA462FF2042B6B9 ] C:\Windows\System32\gdi32.dll
00:27:29.0482 0x1534  C:\Windows\System32\gdi32.dll - ok
00:27:29.0484 0x1534  [ 3AE3C2BDC055BF3FF4C27828831CD3A1, 0024EEF8897E104A92580A5C7534248C1E89A7934535531D06897B5CCEE5AC09 ] C:\Windows\System32\combase.dll
00:27:29.0484 0x1534  C:\Windows\System32\combase.dll - ok
00:27:29.0486 0x1534  [ E71AC94964ED675B3ED0727059B7F97B, 5468B5E9B75B10EA0BFBD81827FFC9CABFC69A4065CC5A5792DBC289D4DA27EE ] C:\Windows\System32\drivers\ikbevent.sys
00:27:29.0486 0x1534  C:\Windows\System32\drivers\ikbevent.sys - ok
00:27:29.0488 0x1534  [ 4192DFE6CA143C0AD8AF42C51A82BECA, 31FB3A261D0D5241CC87EF7DFF8BFC1A1EACE8CEC42138918EC5958DAEE100CD ] C:\Windows\System32\drivers\kbdclass.sys
00:27:29.0488 0x1534  C:\Windows\System32\drivers\kbdclass.sys - ok
00:27:29.0489 0x1534  [ BE720B60B61D1704C4A335A88CF849F7, EDA87A62D2C83CA2269C70DADCEDFDC51F6A7C56E6FE48F8BB5B5D705FC80ABA ] C:\Windows\System32\drivers\VMkbd.sys
00:27:29.0489 0x1534  C:\Windows\System32\drivers\VMkbd.sys - ok
00:27:29.0491 0x1534  [ DE82BD1C35547D04241DB1DB3D4808E0, CEA9938ABA4772EE804808986E6B08E1B325EE1AD4E21EF8793546FD4A5F5B54 ] C:\Windows\System32\windows.storage.dll
00:27:29.0491 0x1534  C:\Windows\System32\windows.storage.dll - ok
00:27:29.0493 0x1534  [ 1DC6166DB6C4FEFE87D9B9105044E5BE, D19B867C0E900B596B4180390A6E4F2ECCBDF8FBD49561C23DBA7D460B8F44A9 ] C:\Windows\System32\drivers\USBAUDIO.sys
00:27:29.0493 0x1534  C:\Windows\System32\drivers\USBAUDIO.sys - ok
00:27:29.0494 0x1534  [ E202B8613C3E9171D6D5C5C851719BB6, 632E8CE10F414153D5146750EAF9E55D5D95099B5433DBF137B92E31EFD22660 ] C:\Windows\System32\KernelBase.dll
00:27:29.0494 0x1534  C:\Windows\System32\KernelBase.dll - ok
00:27:29.0496 0x1534  [ 613F3CCB3397C6A347D6CFF187DEF2FF, BE201C471AEB3E7EFFC1B71D835860122F819A7F5489E2DB971B44A30BE58C60 ] C:\Windows\System32\wintrust.dll
00:27:29.0496 0x1534  C:\Windows\System32\wintrust.dll - ok
00:27:29.0498 0x1534  [ 1EB4B951E5FA7962ADB15D776803C2D3, 8DD351044DA1F4DFBB16CB84C1E536162AD0F69045C290753FEB9E27F23BCCAA ] C:\Windows\System32\crypt32.dll
00:27:29.0498 0x1534  C:\Windows\System32\crypt32.dll - ok
00:27:29.0500 0x1534  [ B66285C63C13284FC7BC7A87C2BAB7BC, DA667FE92060ACA07FD1A8F2D81E434E9250AEB4F29711AFF6B97571CCB191AC ] C:\Windows\System32\cfgmgr32.dll
00:27:29.0500 0x1534  C:\Windows\System32\cfgmgr32.dll - ok
00:27:29.0501 0x1534  [ A040EB78D945C26952706462D5921A6A, CA4A6BCBD810D64E8CE5FCEE5DAA086C7735D36E7936CE37EEF1682AF7507872 ] C:\Windows\System32\comctl32.dll
00:27:29.0501 0x1534  C:\Windows\System32\comctl32.dll - ok
00:27:29.0503 0x1534  [ EBA89999AFFE4A95E39363EA67719A17, BAA23BF047208682CFFF3D8353368DCE9B05D93154CDADF328F1D802DFCF7CA7 ] C:\Windows\System32\powrprof.dll
00:27:29.0503 0x1534  C:\Windows\System32\powrprof.dll - ok
00:27:29.0505 0x1534  [ B66FB0FDE368FBCC80A5EAB977C66757, 023BB42D3B0CCE95F12156A44DDBFEF2F869D61A670272FD4572249AE087D908 ] C:\Windows\System32\SHCore.dll
00:27:29.0505 0x1534  C:\Windows\System32\SHCore.dll - ok
00:27:29.0507 0x1534  [ 11B6FE91A824EE88934A076B1C9FF44D, 25D74F856A44F034BB77FA5CB02B6E6175C6E546249B9984801ECED0D025A4DB ] C:\Windows\System32\kernel.appcore.dll
00:27:29.0507 0x1534  C:\Windows\System32\kernel.appcore.dll - ok
00:27:29.0508 0x1534  [ 841276A12A199B9C3D2B60562EF77B7E, FE10AA5A7D1E8992636B3EFCA6C894B9F234724A4BABA16131418A462E69D2AF ] C:\Windows\System32\msasn1.dll
00:27:29.0508 0x1534  C:\Windows\System32\msasn1.dll - ok
00:27:29.0510 0x1534  [ 9D0DED3AFAE8F4F429980BCC2C9AB4F2, F1EB903F85E4443699352251AAF069F5E04E6D33C11A5025495CC88FBB4912CC ] C:\Windows\System32\profapi.dll
00:27:29.0510 0x1534  C:\Windows\System32\profapi.dll - ok
00:27:29.0512 0x1534  [ 0417763A6557737D807BD1188AC45EAF, F51AB4EF54B37A3B7B60EA9CCF1BC9F8C86973193271AB22E1DA7F4AEE7C8A64 ] C:\Windows\syswow64\lpk.dll
00:27:29.0512 0x1534  C:\Windows\syswow64\lpk.dll - ok
00:27:29.0514 0x1534  [ ED8EAAD25E68C88EE68869805EDD4F29, 42916C31C7502A1391B4E7220AE23BB724EAE62EF1EEB5E67FA9EFB68A9BFDDD ] C:\Windows\System32\win32kbase.sys
00:27:29.0514 0x1534  C:\Windows\System32\win32kbase.sys - ok
00:27:29.0515 0x1534  [ 879E8BFAEA2393B9E057B909A558174F, DAD00514E552B6829BE1EA73FDA06E9AFA44CEF8EF535725733CD9E7AB29BB2E ] C:\Windows\System32\win32kfull.sys
00:27:29.0515 0x1534  C:\Windows\System32\win32kfull.sys - ok
00:27:29.0518 0x1534  [ 99BC21EA2C4A322B99212A38F0869786, C9DB7D417080BC2D98F8BF5EBFAEA826A5BCFD9EB875ED2C365E17E017192EE2 ] C:\Windows\System32\win32k.sys
00:27:29.0518 0x1534  C:\Windows\System32\win32k.sys - ok
00:27:29.0519 0x1534  [ F1F13E6F22BFB4BB64784244F6F833CB, 88D8C0BC7DBD1FFFA474B944A7791C88FA7BAC056591B4D634641C12F3228BD3 ] C:\Windows\System32\csrsrv.dll
00:27:29.0519 0x1534  C:\Windows\System32\csrsrv.dll - ok
00:27:29.0521 0x1534  [ F7056BC5E1FF6E5ED7845136FD48AA22, EF42C83814BD1AC26008C381A757AC4F604625F01CACEF29D25F4A0DDA536F8D ] C:\Windows\System32\csrss.exe
00:27:29.0521 0x1534  C:\Windows\System32\csrss.exe - ok
00:27:29.0523 0x1534  [ C6BC6E49A7F76AA2BBA58CD08196755F, D02B6B285899E966D19323566A4780D51303D00E66674D7FF4B61991430A69A6 ] C:\Windows\System32\basesrv.dll
00:27:29.0523 0x1534  C:\Windows\System32\basesrv.dll - ok
00:27:29.0524 0x1534  [ 70EC9717DC3A1CDF79C703A145E0E5B7, D5ABF42063DFF799FD4099D8A347256CC79B89582B987B3DEE240AFA5BA421BE ] C:\Windows\System32\winsrv.dll
00:27:29.0524 0x1534  C:\Windows\System32\winsrv.dll - ok
00:27:29.0526 0x1534  [ FDB239DBE2A14B572D21ABCEDC7BB5D0, 810F253D5674A2690EAE2A1F1BBEE09C619E318472E26FB2E2818E235CA61B41 ] C:\Windows\System32\drivers\dxgmms2.sys
00:27:29.0526 0x1534  C:\Windows\System32\drivers\dxgmms2.sys - ok
00:27:29.0528 0x1534  [ D8DB13529C8AD6FBAF8E2F382024374F, 13025035C479E2EF76EDCB90D83BE65B4ADD9F7000AD31FEAD628D5DDFE69158 ] C:\Windows\System32\drivers\monitor.sys
00:27:29.0528 0x1534  C:\Windows\System32\drivers\monitor.sys - ok
00:27:29.0531 0x1534  [ F435AFA375ACBAEE44324DD464EDCC11, 815DE470439AE5D96348BEBF971A14FBDCA1D36F31CA0D25F69E5F41817D43D5 ] C:\Windows\System32\sxssrv.dll
00:27:29.0531 0x1534  C:\Windows\System32\sxssrv.dll - ok
00:27:29.0532 0x1534  [ F85BE7430F33CBF308F0A74CB8F2D286, 29592A9893C62FE264D3F328D0B0FA96CC0CF96F8C63865D609981328C6F9C15 ] C:\Windows\System32\tsddd.dll
00:27:29.0532 0x1534  C:\Windows\System32\tsddd.dll - ok
00:27:29.0534 0x1534  [ 7718A2A9B2BFB2C8E2BAEB03310CA3FD, E519D86860D6E5B1D51575122BF335A954CF267237578A3E31DF3CE72AFA224B ] C:\Windows\System32\wininit.exe
00:27:29.0534 0x1534  C:\Windows\System32\wininit.exe - ok
00:27:29.0536 0x1534  [ E766D3EC1DCE4CCE8CB8CFC1BD655CD6, F44F90412D0DAD2913EEABCAD72AD2F21F26220BF3C0275EAC039A123F501940 ] C:\Windows\System32\wininitext.dll
00:27:29.0536 0x1534  C:\Windows\System32\wininitext.dll - ok
00:27:29.0537 0x1534  [ D01CCC92171417DC89CA55C564F4239F, 578F0E0000C265DE699F66C36146DF7B391F059E19FA2D5BD33DD279F99879A9 ] C:\Windows\System32\KBDSG.DLL
00:27:29.0537 0x1534  C:\Windows\System32\KBDSG.DLL - ok
00:27:29.0539 0x1534  [ 265AA0677BFA532AE076146AE7CDA60B, A48BC60E3B21C7DA352FFB7FF71A0331DD3BCAFCF36A85A36EFD01C629B373C5 ] C:\Windows\System32\cdd.dll
00:27:29.0539 0x1534  C:\Windows\System32\cdd.dll - ok
00:27:29.0541 0x1534  [ 7B67B99EF8299652874CC24B79BF49CD, 04D096EF17D44C60B324A1496F7C68782D9914FDFE6412A803CED786CC655AEF ] C:\Windows\System32\KBDSF.DLL
00:27:29.0541 0x1534  C:\Windows\System32\KBDSF.DLL - ok
00:27:29.0542 0x1534  [ 823075D2DB9600F39FE749E7115971FB, 6133475099869D70E119B4E088D9E57458B3120C6978ED694E83FBEF5B3E6514 ] C:\Windows\System32\WlS0WndH.dll
00:27:29.0542 0x1534  C:\Windows\System32\WlS0WndH.dll - ok
00:27:29.0544 0x1534  [ 2D0CE6A618ACBDA0E8EA8E79C076C4B7, B5008AE736335B3BDFFFD0EA2A673C1F8C168EE1F8E65238B613FD2B5F3DFEF7 ] C:\Windows\System32\sxs.dll
00:27:29.0544 0x1534  C:\Windows\System32\sxs.dll - ok
00:27:29.0546 0x1534  [ 696E4FFD647875D8D561327A0ABA7872, 49ACC8243F20F35D7AED01BA51B618166F0EF05E696ED8BDE4792019B298F6D5 ] C:\Windows\System32\bcrypt.dll
00:27:29.0546 0x1534  C:\Windows\System32\bcrypt.dll - ok
00:27:29.0548 0x1534  [ 458B996FF498C9C4183C5B782381DB32, 971E5DA3F291D1C9D7DEE9741148966062D729ED9264EC096FDE6AF2F2B097D0 ] C:\Windows\System32\bcryptprimitives.dll
00:27:29.0548 0x1534  C:\Windows\System32\bcryptprimitives.dll - ok
00:27:29.0550 0x1534  [ C527C9231D39BF69611F5F8C80C36140, 4AED04015A13C46CA902CC3C8808A4241F43B6562EDC496276C75012329CD770 ] C:\Windows\System32\winlogon.exe
00:27:29.0550 0x1534  C:\Windows\System32\winlogon.exe - ok
00:27:29.0552 0x1534  [ 25681CC3C9FB584630F761B7103878FD, DFC76E965AB521064B675857D215F833D19818ED993CF398D1D38C201E03E552 ] C:\Windows\System32\dabapi.dll
00:27:29.0552 0x1534  C:\Windows\System32\dabapi.dll - ok
00:27:29.0554 0x1534  [ 7516B07528FD720E1D3F9877599206AD, 45A3D630CB73574980055E5CD971E7D8E539FE4698D6E7A54411944E92819FA6 ] C:\Windows\System32\EventAggregation.dll
00:27:29.0554 0x1534  C:\Windows\System32\EventAggregation.dll - ok
00:27:29.0557 0x1534  [ 9A126995971BC1A064D83A8D8EBB5455, 784F65BD19A862DAF72FCD961F6CE3C228420A7C59E128572D87C3A15D58AE01 ] C:\Windows\System32\lsasrv.dll
00:27:29.0557 0x1534  C:\Windows\System32\lsasrv.dll - ok
00:27:29.0559 0x1534  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] C:\Windows\System32\lsass.exe
00:27:29.0559 0x1534  C:\Windows\System32\lsass.exe - ok
00:27:29.0561 0x1534  [ BB3D8E1C108F7244613FF3993291A922, 1642AF23F200D46F54239C3BA743F1D5ADDC6A32D5F6481264D0C1D7F3E9D533 ] C:\Windows\System32\services.exe
00:27:29.0561 0x1534  C:\Windows\System32\services.exe - ok
00:27:29.0563 0x1534  [ 43C8A1C1EFBB7B1C6C14705D9E1FBC74, 4AE9DA2BCCFF02D0DD27F26C4B7E349484D7448EE3875C3A6B46908DEE15D814 ] C:\Windows\System32\SPInf.dll
00:27:29.0563 0x1534  C:\Windows\System32\SPInf.dll - ok
00:27:29.0566 0x1534  [ 8624899FD8EF32518766A3DA00741DDA, 636F2550F70758D6EC5100B47ED28A5C2FA778C9A6087FB1D6BBC8CA0F437C59 ] C:\Windows\System32\sspisrv.dll
00:27:29.0566 0x1534  C:\Windows\System32\sspisrv.dll - ok
00:27:29.0568 0x1534  [ 809AFF9400E8461D3182EF9B983BFE15, 30058EFF4740BAE121C649C5EBDC43111AE65897AA77C32DFB7AB0C7A5CA0B6F ] C:\Windows\System32\sspicli.dll
00:27:29.0568 0x1534  C:\Windows\System32\sspicli.dll - ok
00:27:29.0569 0x1534  [ 08A2CE819451703388A6331FFFCBC267, 58D2F0CAF85D04D8F09AEFC0FA574BB20F2457354F081F4BB94A0DE54C66DC0C ] C:\Windows\System32\samsrv.dll
00:27:29.0570 0x1534  C:\Windows\System32\samsrv.dll - ok
00:27:29.0571 0x1534  [ AB3A10DB7743DB1445BFAD364330A998, 277F7D37F22C4F9E62016775C0249B3464B23ABECD7A1DC4CA3B9D636F4D1320 ] C:\Windows\System32\ncrypt.dll
00:27:29.0571 0x1534  C:\Windows\System32\ncrypt.dll - ok
00:27:29.0573 0x1534  [ 915045FBE76CD36C34EBD4A88A9660BD, E33395452300485E52A98403BDB45F774AFF44BF14DE444D628B93CF3F34FE32 ] C:\Windows\System32\ntasn1.dll
00:27:29.0573 0x1534  C:\Windows\System32\ntasn1.dll - ok
00:27:29.0575 0x1534  [ D63D9C05E55F532F3DF7B403EF141E5D, 96A5029D854034605D2E2CF9B96B89C4DEE3DD88BB6E33B9F3E43D83209D64B2 ] C:\Windows\System32\joinutil.dll
00:27:29.0575 0x1534  C:\Windows\System32\joinutil.dll - ok
00:27:29.0576 0x1534  [ 25CA0D17788EF9033CBE6B4CD7504013, 095A5474C8E7987C3DC1F8063570C70E2ABDB3253F674E943FBB921798020C83 ] C:\Windows\System32\msprivs.dll
00:27:29.0576 0x1534  C:\Windows\System32\msprivs.dll - ok
00:27:29.0578 0x1534  [ 7E5717D5F2B1896F1B55B157AACA5A85, DFE992DECF54A6B1A4494592C1450D4D1CC2C02D2F5B4F1DD2277152F042B766 ] C:\Windows\System32\negoexts.dll
00:27:29.0578 0x1534  C:\Windows\System32\negoexts.dll - ok
00:27:29.0581 0x1534  [ 0685D1E21D9E28D098352B024860CF1C, 2CE3790DDFEF1706C32211E0FFEC79CD4B9F38634C2DECDFD50B49192F6CB988 ] C:\Windows\System32\netprovfw.dll
00:27:29.0581 0x1534  C:\Windows\System32\netprovfw.dll - ok
00:27:29.0583 0x1534  [ 16DF37E73C615D33DE9D89B3692F4D16, E716DA95849C630E1B8A07D30D1F87E943793B46D10A51930EE10FF77E62EA2C ] C:\Windows\System32\cryptbase.dll
00:27:29.0583 0x1534  C:\Windows\System32\cryptbase.dll - ok
00:27:29.0585 0x1534  [ 0EDC328221BC4BACFD801525049D6FC1, 7C56DC001D155C628D4E1F8D4CAE75F9DDDBFA6E5CF436D340939268B7730923 ] C:\Windows\System32\cryptdll.dll
00:27:29.0585 0x1534  C:\Windows\System32\cryptdll.dll - ok
00:27:29.0586 0x1534  [ 3A582ABD42FC7C40B944667EDCF5235F, 6DF95819B5B0C2C01E1D19E80A2E57EC638AB7B852FFC9BDA528A6478FDF6CB6 ] C:\Windows\System32\kerberos.dll
00:27:29.0586 0x1534  C:\Windows\System32\kerberos.dll - ok
00:27:29.0588 0x1534  [ 1914C76046CD99F67D0778A289B8FB9A, AD474D51D6C81E683E5DC19CD172E8096424A7EBE28B4D652EEF0B6FFF50AA73 ] C:\Windows\System32\KerbClientShared.dll
00:27:29.0588 0x1534  C:\Windows\System32\KerbClientShared.dll - ok
00:27:29.0590 0x1534  [ 9C88479B98B5570D09D96EF1433B0314, 55C3FBDFD9B090AC6B39AC4D2F15DE14DD967DB9155F60526B42EBC1CDA79919 ] C:\Windows\System32\cryptsp.dll
00:27:29.0590 0x1534  C:\Windows\System32\cryptsp.dll - ok
00:27:29.0592 0x1534  [ 6E887DD203D23FD46D3460A3DB67E0D0, D6D1943286B208DE1BD99AAC1F0214EE1565A4AC8AAD208888237D2C221E8036 ] C:\Windows\System32\mswsock.dll
00:27:29.0592 0x1534  C:\Windows\System32\mswsock.dll - ok
00:27:29.0594 0x1534  [ 0DD5A7B23ECB062C4C2C0EA87EF35B05, 3892FC66665128D846BEE262E05DD7C09324B999B8E8B801AF42B3C1B2933D5F ] C:\Windows\System32\msv1_0.dll
00:27:29.0594 0x1534  C:\Windows\System32\msv1_0.dll - ok
00:27:29.0596 0x1534  [ 5E9439E5FA71649335D8FB0090843062, A17C50D7C60C44A4B3C9E1D8BC4A6D6EF55237CF8C4B0F722C255E9631AC9FC7 ] C:\Windows\System32\netlogon.dll
00:27:29.0596 0x1534  C:\Windows\System32\netlogon.dll - ok
00:27:29.0598 0x1534  [ 151631EE7C78521506DE1A0BA0651606, A1F5229669617C8F4DC1B192A956408D5158AC60636631C2D9EA1C26ACEE129A ] C:\Windows\System32\NtlmShared.dll
00:27:29.0598 0x1534  C:\Windows\System32\NtlmShared.dll - ok
00:27:29.0599 0x1534  [ EBFFB2229BA1A72E1BD4FB0C35669A63, 26B6B4F5D72E93AAD5B7EC92EBD678187CECF5B6E6169CE5B94723A2E0E2BAFC ] C:\Windows\System32\userenv.dll
00:27:29.0600 0x1534  C:\Windows\System32\userenv.dll - ok
00:27:29.0601 0x1534  [ 5DB8F4E9F19712DFAAE8E6BBAE1CD18D, 55B74A6FFB2C14B6244BBE2C8EB8851062F38CAC3DF22C99817442DD25F48B69 ] C:\Windows\System32\logoncli.dll
00:27:29.0601 0x1534  C:\Windows\System32\logoncli.dll - ok
00:27:29.0603 0x1534  [ C287D0E32771E3222A444DC527A29477, F3D124615E0F6D7EE087D817D915A0DD396A4AB334725D62B0E04327CF9775C4 ] C:\Windows\System32\dnsapi.dll
00:27:29.0603 0x1534  C:\Windows\System32\dnsapi.dll - ok
00:27:29.0605 0x1534  [ 35F7424DBE08C7D730BF04D85E4C0E19, 1787A226FA822CEB32709D93D328DF00705F8FB106BD32FD29BCB53FCE4DBE38 ] C:\Windows\System32\pku2u.dll
00:27:29.0605 0x1534  C:\Windows\System32\pku2u.dll - ok
00:27:29.0607 0x1534  [ DC2ECE6CA0B7341B2A7E65F06F8208D6, E2476F14B1CB2775DAFA012C4F4CC96EC615DA727282056F17923DAAED9937CD ] C:\Windows\System32\TSpkg.dll
00:27:29.0607 0x1534  C:\Windows\System32\TSpkg.dll - ok
00:27:29.0608 0x1534  [ AB46E1DE5E7F9BADEFA1BA3C8772F767, CDAA8FEC66EE2C56E38ACF991E95F4B79A972C5B90D7B79996B99DAF8BFF453F ] C:\Windows\System32\wdigest.dll
00:27:29.0608 0x1534  C:\Windows\System32\wdigest.dll - ok
00:27:29.0610 0x1534  [ 26E2FCBCE48B652511A4DFBBED90A304, 0CD45C5ADBF1B16D2C614E223D93A913C5B1A8BFBD800AACF9185F707DE4F9FA ] C:\Windows\System32\rsaenh.dll
00:27:29.0610 0x1534  C:\Windows\System32\rsaenh.dll - ok
00:27:29.0612 0x1534  [ 327DA4A4DE4E9BECF2C16967366C74E2, 852D1F2B7321E9CC7ABF69D37804E9E9651A34ACFCAB6D44FE2365BE68EE74F6 ] C:\Windows\System32\cloudAP.dll
00:27:29.0612 0x1534  C:\Windows\System32\cloudAP.dll - ok
00:27:29.0614 0x1534  [ 929D90A2DE37B2FC72FC33B9FCAD72AF, EE7CAF28431360E1D9CA19371F14343581D7A87B8C13AD52A48F8FFDCF39D05A ] C:\Windows\System32\dpapi.dll
00:27:29.0614 0x1534  C:\Windows\System32\dpapi.dll - ok
00:27:29.0616 0x1534  [ 8D13516C65F922FB2F28F8545B4A65B3, 8D3340A9B7F17C65E4283995E6AF8220D16C8E16A5B7974F855D0D4B01C4F789 ] C:\Windows\System32\MicrosoftAccountCloudAP.dll
00:27:29.0616 0x1534  C:\Windows\System32\MicrosoftAccountCloudAP.dll - ok
00:27:29.0618 0x1534  [ C817FCEDCA489B9875B2636C30620C36, 27D30CAD72FCA47B3ED3D188D89182FAF873C96FF3B10E349A35BE5396CE146C ] C:\Windows\System32\schannel.dll
00:27:29.0618 0x1534  C:\Windows\System32\schannel.dll - ok
00:27:29.0620 0x1534  [ 9B7121B8498319B72AEEDBAE38EC013F, 5740D9D8967404D042608BB80968E95CC06EBE6940AD411E66911C52BD75BDB5 ] C:\Windows\System32\ntmarta.dll
00:27:29.0620 0x1534  C:\Windows\System32\ntmarta.dll - ok
00:27:29.0621 0x1534  [ C4C7C843E97CA52EF91F3F1F1460A9B8, D1E90A96A2221989197825C7BA3140F966298387619A822C8AF607959D48D107 ] C:\Windows\System32\PCPKsp.dll
00:27:29.0621 0x1534  C:\Windows\System32\PCPKsp.dll - ok
00:27:29.0623 0x1534  [ CF6FBD8971728CEB7B9D84E47248F645, 002B1FB60298ED2216D3A3D1D761581B956F9CF2A5281DE9F49D544CC9F117C1 ] C:\Windows\System32\PCPTpm12.dll
00:27:29.0623 0x1534  C:\Windows\System32\PCPTpm12.dll - ok
00:27:29.0625 0x1534  [ CC72F9A3111C6857F3FB85F475225481, 3A668D70279C3D0FEB9AD8D287C5BFCD025BDE930D814F3C33135404F5DC4C05 ] C:\Windows\System32\tbs.dll
00:27:29.0625 0x1534  C:\Windows\System32\tbs.dll - ok
00:27:29.0627 0x1534  [ 8D7AE5986B7DE03B37B7F067C34CEACD, 31CC4E5069E40A9F0E7296C065A483A3DA2A5E39CA1350735186C172E7AC1EFB ] C:\Windows\System32\efslsaext.dll
00:27:29.0627 0x1534  C:\Windows\System32\efslsaext.dll - ok
00:27:29.0630 0x1534  [ C6249E3D725F6FD349E3A064EDFC2339, 2ED0FDDD0688EEBC6577E9AAEC18544CD9FF8DC0582A9427F6BEDBBF6511F11C ] C:\Windows\System32\mpr.dll
00:27:29.0630 0x1534  C:\Windows\System32\mpr.dll - ok
00:27:29.0632 0x1534  [ A03A21679DECBEB933CEB77B142BCFBA, 7FF42B6628463964847440D24014F76E0E22EA28F99F11B9B75B094D0B079F8C ] C:\Windows\System32\srvcli.dll
00:27:29.0632 0x1534  C:\Windows\System32\srvcli.dll - ok
00:27:29.0634 0x1534  [ 1F280B3B72C26DEDC0098A5C62671C7B, 858B4571CCE771F66FB697C259A5422D764E6810D6811376916D6555D3DE17FE ] C:\Windows\System32\dpapisrv.dll
00:27:29.0634 0x1534  C:\Windows\System32\dpapisrv.dll - ok
00:27:29.0636 0x1534  [ E4769912A207BDE469E9FBD8A473821D, 671A88C722355BA3AFEB29D527CED4DDFBC0FD53C0F7BFA228A05B09586AB6A0 ] C:\Windows\System32\netutils.dll
00:27:29.0636 0x1534  C:\Windows\System32\netutils.dll - ok
00:27:29.0637 0x1534  [ 4312CE82670DCE236F4E1219A98721FE, 54B9ACD0A1984B3752A62FA6913706F4E53D8AF9C4451F55EBB2A7021CE1B91C ] C:\Windows\System32\credssp.dll
00:27:29.0637 0x1534  C:\Windows\System32\credssp.dll - ok
00:27:29.0639 0x1534  [ 7DD59DB925AC2401D33B38152551153E, C4684C5718481C4A044ABB3F5ECDE0867CADC5A92B25B166EB09BD4DD758BE52 ] C:\Windows\System32\scecli.dll
00:27:29.0639 0x1534  C:\Windows\System32\scecli.dll - ok
00:27:29.0641 0x1534  [ 227EEEACB5006907DA5814D583623E06, 117AEEC2C7AE6C7DBACBB77A67E1BF59AC8087784AEBD72B3DD566288BE9D371 ] C:\Windows\System32\winsta.dll
00:27:29.0641 0x1534  C:\Windows\System32\winsta.dll - ok
00:27:29.0643 0x1534  [ 631A66025D8349304130479E464B9432, E211004A5C81D4E7332E0A6A96F513E892064108A8106F42F3E22CCF6DA3113F ] C:\Windows\System32\scesrv.dll
00:27:29.0643 0x1534  C:\Windows\System32\scesrv.dll - ok
00:27:29.0645 0x1534  [ AFDF7F04D0F76AF41BC5EC76AC371D58, 0ACEFF9848E5CD310BFB914A72A08ACC62933893040EF2454F5D35BD42005129 ] C:\Windows\System32\authz.dll
00:27:29.0645 0x1534  C:\Windows\System32\authz.dll - ok
00:27:29.0647 0x1534  [ A1AEAFC58DF7803B8AA2B09EA93C722F, 8A88E067E89D1DCFCAFD842C0CB7DE5DC7E6754447F2064A2BDF8496B088BD52 ] C:\Windows\System32\svchost.exe
00:27:29.0647 0x1534  C:\Windows\System32\svchost.exe - ok
00:27:29.0649 0x1534  [ 7B3DA16FAA498838BB457E0B7E380EDF, B73DCFFA60886F10765E4B76A58CFF18C08CAFEE620700361FC8FEC7E80B5958 ] C:\Windows\System32\umpnpmgr.dll
00:27:29.0649 0x1534  C:\Windows\System32\umpnpmgr.dll - ok
00:27:29.0650 0x1534  [ 6390391EDFC43DD11CE9E6AADCAC20EA, C8BC222FFBB9E47489D16BB5248E0E2E594011C46CFF71F5DBCC4D5CC6788098 ] C:\Windows\System32\umpo.dll
00:27:29.0650 0x1534  C:\Windows\System32\umpo.dll - ok
00:27:29.0652 0x1534  [ 5FE2A1270AA742146ABFA6B2CF375720, FFE0DBFCC068E5E0798C721E25765FC9DBAD29AD67F5A95A246AF66CA7B5BC26 ] C:\Windows\System32\umpoext.dll
00:27:29.0652 0x1534  C:\Windows\System32\umpoext.dll - ok
00:27:29.0654 0x1534  [ FEBC3F2C32FBD91D36445CF569CE8DA5, ADD8C6AABE9F775D722C4C419A6DC96DDE8875C8319CF9E3FD352B84774BEEEA ] C:\Windows\System32\hid.dll
00:27:29.0654 0x1534  C:\Windows\System32\hid.dll - ok
00:27:29.0655 0x1534  [ D0356388FAA9F9821414666673D6E012, 5534E608DE76F3255ACCE385F51634561769F6F0C9A68C5EF62F5420AAFBCBE8 ] C:\Windows\System32\tdh.dll
00:27:29.0655 0x1534  C:\Windows\System32\tdh.dll - ok
00:27:29.0657 0x1534  [ 9553D26AFA5663B6B8236184CD35BC1A, 99722378A9E0712405D23F4DFEBE0DCC3C68F7E37DBD74C15B4DC71D17900710 ] C:\Windows\System32\gpapi.dll
00:27:29.0657 0x1534  C:\Windows\System32\gpapi.dll - ok
00:27:29.0659 0x1534  [ 5E57B9FBB4E9C43EE5B69BEE01A1819F, A1F8D1E52AF446CEA2EB50064E3A24B713B19197D61C3EAECB81B3CCD80558E7 ] C:\Windows\System32\rpcss.dll
00:27:29.0659 0x1534  C:\Windows\System32\rpcss.dll - ok
00:27:29.0660 0x1534  [ 6451FE42C35FDE3862D99579444F4A8F, BD56A1120AACF6143E6EB739E12BEE86DF142F1159865608BDF1BBE54B66AFCE ] C:\Windows\System32\RpcEpMap.dll
00:27:29.0660 0x1534  C:\Windows\System32\RpcEpMap.dll - ok
00:27:29.0662 0x1534  [ 1FEB756CDB54030F5DA1464D6F5A561A, C4CA40B27105E0260B17370EB41376F08ABB1FD53C39A8B060374A16C0456AB5 ] C:\Windows\System32\RpcRtRemote.dll
00:27:29.0662 0x1534  C:\Windows\System32\RpcRtRemote.dll - ok
00:27:29.0665 0x1534  [ 3A4A543F135DE9A06ABA9DF982D79DD7, ABA165435C27BE15D7EBD3E7D023E295CB7AE2A099DF9E253C78EC45EADD75EA ] C:\Windows\System32\bisrv.dll
00:27:29.0665 0x1534  C:\Windows\System32\bisrv.dll - ok
00:27:29.0667 0x1534  [ 261705BFEC1C88CDEB14797680AFF101, F0522632DC4461B57D2DD13BDDDA4FD530D797312FA153B18693D83CDE1DE657 ] C:\Windows\System32\FirewallAPI.dll
00:27:29.0667 0x1534  C:\Windows\System32\FirewallAPI.dll - ok
00:27:29.0669 0x1534  [ 887065722784FD70B880B0D900E4884D, F4E821F3239901A46C63B09AC740CB387C8EF9978A20FFD22F6F433447A34532 ] C:\Windows\System32\psmsrv.dll
00:27:29.0669 0x1534  C:\Windows\System32\psmsrv.dll - ok
00:27:29.0671 0x1534  [ 1C514562B1A6026479B65F0CDACD4BAB, 26BBA744DF2FC8D60EF590C454CB9716E8A3D6EBC8B324E1843B67D35935BB72 ] C:\Windows\System32\rmclient.dll
00:27:29.0671 0x1534  C:\Windows\System32\rmclient.dll - ok
00:27:29.0672 0x1534  [ 2CE946069BF40CC7B95AC6FB45B6E272, 5F1CE7BEA0F35736D424E4E80B7ED8E7593A304CBB0B8566F4F69946870D4AF0 ] C:\Windows\System32\fwbase.dll
00:27:29.0672 0x1534  C:\Windows\System32\fwbase.dll - ok
00:27:29.0674 0x1534  [ E2EEF074F5260378F9AAFBCD592319A3, DC56674A08FA03FA7AF7DD8B3CC55D8324D1CB51546092A990A935FF9AB48A3C ] C:\Windows\System32\lsm.dll
00:27:29.0674 0x1534  C:\Windows\System32\lsm.dll - ok
00:27:29.0676 0x1534  [ E35574FB51D1ADD1C2F5BC90289F3ECE, 2931FB6227FBB71A5791779EB83B6897E37F5BB9D87563847AD271CDBCFEDB0A ] C:\Windows\System32\sysntfy.dll
00:27:29.0676 0x1534  C:\Windows\System32\sysntfy.dll - ok
00:27:29.0678 0x1534  [ 352D2D1C063DBD4CCEBE5DD672B55F1E, D49651E3839F40D6EE194B642224B2C34F0783515DD5712D644BDD82460801B4 ] C:\Windows\System32\wmsgapi.dll
00:27:29.0678 0x1534  C:\Windows\System32\wmsgapi.dll - ok
00:27:29.0680 0x1534  [ 509FF13E5C4FD63846FCA01A5ED912DB, B939D12D0945D0B4D388E3960D5D421C8BC811E125AF42BAAC6288CDBBFD5790 ] C:\Windows\System32\PsmServiceExtHost.dll
00:27:29.0680 0x1534  C:\Windows\System32\PsmServiceExtHost.dll - ok
00:27:29.0681 0x1534  [ 220A1FF8DDAEC5947F06794602AC4653, FF4922BE7FF532C78DE7C1EBC838C23CA15C70B79B984AF601F635973CF57844 ] C:\Windows\System32\UXInit.dll
00:27:29.0681 0x1534  C:\Windows\System32\UXInit.dll - ok
00:27:29.0683 0x1534  [ C5E2FBB19641860794CEE2B580192732, 30C594A326C8F123A736C3F486548094F580F880488E653FD9F5E2377F8257BB ] C:\Windows\System32\twinapi.appcore.dll
00:27:29.0683 0x1534  C:\Windows\System32\twinapi.appcore.dll - ok
00:27:29.0685 0x1534  [ 7D7E9259619DF747DE2A38F59C60BC4F, 3E30C6635601EE063AB920DE23F641BF6B6779E54E8CDA338472277872CD15E2 ] C:\Windows\System32\uxtheme.dll
00:27:29.0685 0x1534  C:\Windows\System32\uxtheme.dll - ok
00:27:29.0687 0x1534  [ 11E9B974D71C6019F9D287B740F06E00, 29ED7BEE32B451D2BC30B00FFB4391AED2BDF324E5C91104B0AAC46F01452DD8 ] C:\Windows\System32\devobj.dll
00:27:29.0687 0x1534  C:\Windows\System32\devobj.dll - ok
00:27:29.0689 0x1534  [ D5AAA188C70146977CFEE8D128599F3F, 9ABC30982E552EAF41FE84397EEEE5A3187444062C662D7CF35A03E3B274AFB8 ] C:\Windows\System32\SystemEventsBrokerServer.dll
00:27:29.0689 0x1534  C:\Windows\System32\SystemEventsBrokerServer.dll - ok
00:27:29.0691 0x1534  [ 2810AECDED417A1564AF95EBDFF99FC4, EA61C98DA538E27CCF9EDD7C217B87E37F80C53D66FE93A4640F91B3DA021F6D ] C:\Windows\System32\BrokerLib.dll
00:27:29.0691 0x1534  C:\Windows\System32\BrokerLib.dll - ok
00:27:29.0692 0x1534  [ 63339969769B925ABDA4BFAFE7459E7E, 00839E1501AABC8B6905039B9CD9216EEA3EC4F085225B4623B97E8EE2D57E03 ] C:\Windows\System32\dab.dll
00:27:29.0692 0x1534  C:\Windows\System32\dab.dll - ok
00:27:29.0694 0x1534  [ 0A0114F408B83E160C75170958A8F181, C1AC9718094CF134C150C417A167D5CB2AA55324301E70F6B7AF144F574C5A52 ] C:\Windows\System32\dwminit.dll
00:27:29.0694 0x1534  C:\Windows\System32\dwminit.dll - ok
00:27:29.0697 0x1534  [ AC82CC4F2A41E098EB34C0A9F8125DDC, CC416DD5FC8E14A1F99F8DF52D795CA6E16EDBF8FD7C9624B10BA83D9D954BF2 ] C:\Windows\System32\drivers\avgntflt.sys
00:27:29.0697 0x1534  C:\Windows\System32\drivers\avgntflt.sys - ok
00:27:29.0699 0x1534  [ 63513EF3121689B3A59BD217618A2E42, DE9B89732801DEC60BD116D58CFB427F7E37F093BE8A9F6E0CAC729B5346B314 ] C:\Windows\System32\drivers\storqosflt.sys
00:27:29.0699 0x1534  C:\Windows\System32\drivers\storqosflt.sys - ok
00:27:29.0701 0x1534  [ 2E67791E8672B29690A04AEDB2D33CBE, 30B3BF21ACB5EB5DC74C79EB5198250107F2992B4F73E464B58F49DFE6D475F5 ] C:\Windows\System32\LogonUI.exe
00:27:29.0701 0x1534  C:\Windows\System32\LogonUI.exe - ok
00:27:29.0703 0x1534  [ C692B9C0352315417CF49FFA664957A3, C2D4F9A936B809889F7C51FE48214A1923175913A6C5D0B72D3BA469214B5174 ] C:\Windows\System32\drivers\luafv.sys
00:27:29.0703 0x1534  C:\Windows\System32\drivers\luafv.sys - ok
00:27:29.0704 0x1534  [ 55D7D60C75FB3D7C1002CFD936BE57E8, FF85417FF4A574A5E9E84618B1286749C7B9959583B0683674F61DDAEC1565A7 ] C:\Windows\System32\apphelp.dll
00:27:29.0704 0x1534  C:\Windows\System32\apphelp.dll - ok
00:27:29.0706 0x1534  [ FB59867A51A84A0A61462809D45A4191, EBB4D57091F08A87E13E3300F3847C9CEDDD738849CF848BF05809845ECD28F8 ] C:\Windows\System32\dwm.exe
00:27:29.0706 0x1534  C:\Windows\System32\dwm.exe - ok
00:27:29.0708 0x1534  [ 6EB6F8B20574B239712C4E23D4D718E1, D2458F116572753C6BBE9D80E2C55DE2C7ECE435BFE8A4D10C09CAF1C612A2CD ] C:\Windows\System32\dwmredir.dll
00:27:29.0708 0x1534  C:\Windows\System32\dwmredir.dll - ok
00:27:29.0710 0x1534  [ 3DB6BAA19408895C9E0BB55084DD94F3, C28098BE81E06323E298ACCF6193B38DE18261F204B01294495B6C5E3B32AF4E ] C:\Windows\System32\LogonController.dll
00:27:29.0710 0x1534  C:\Windows\System32\LogonController.dll - ok
00:27:29.0712 0x1534  [ C090EED522EB550AB66B047A31BF59D0, C6C928BCFEFDAA599AAFEA322B1D86EE5BCDE6AA1E64C920F7FC273EB363BF1E ] C:\Windows\System32\slc.dll
00:27:29.0712 0x1534  C:\Windows\System32\slc.dll - ok
00:27:29.0716 0x1534  [ 04B150189DCE3AFE85C4C6F42B9AC35B, 98B6EB826644CD50C7D43C73BF1EED9CBA24B7347133FF0219BC5E7A024A2682 ] C:\Windows\System32\winmm.dll
00:27:29.0716 0x1534  C:\Windows\System32\winmm.dll - ok
00:27:29.0718 0x1534  [ 33F55BCE1F78734FE1242421D0D7B070, E40BF3D020FA2FF190FD0D7E1259CCE174E438184A9E28E2E609059F56389703 ] C:\Windows\System32\winmmbase.dll
00:27:29.0718 0x1534  C:\Windows\System32\winmmbase.dll - ok
00:27:29.0720 0x1534  [ 01636D1937A0234E4762D42F49509C72, 189F8A4490FCEDF4C049CEDCFC79A49EE804D4D549A209D20E738760241B9492 ] C:\Windows\System32\sppc.dll
00:27:29.0720 0x1534  C:\Windows\System32\sppc.dll - ok
00:27:29.0722 0x1534  [ 1E4B6E4DB127F1964166B458060C4223, F3EDC002ED606644BC3849F2B6E088F867201B02F8E1B2A1B78B23B2F235E42F ] C:\Windows\System32\shacct.dll
00:27:29.0722 0x1534  C:\Windows\System32\shacct.dll - ok
00:27:29.0724 0x1534  [ 5576DF399CF2D3B63608F7F282151249, 04939E79B8B8035547CE6FFE9001252CA810BAD46D8DB75FF5C13EB10EEB5C57 ] C:\Windows\System32\hidserv.dll
00:27:29.0724 0x1534  C:\Windows\System32\hidserv.dll - ok
00:27:29.0726 0x1534  [ 24C87BDC66AB192FEB273BEE5FD5AA38, BFAAE1F2450DEBD1A14877C046C6EBA91014DB0B5D0FB95EC14CB714B773B3C0 ] C:\Windows\System32\lmhsvc.dll
00:27:29.0726 0x1534  C:\Windows\System32\lmhsvc.dll - ok
00:27:29.0727 0x1534  [ 67DA31AC5EAA000B7748AB6B48C9898E, D235561911CB4102759DEAE36BC19E62789CF435A0562B02D9163739D6A88FC3 ] C:\Windows\System32\nrpsrv.dll
00:27:29.0727 0x1534  C:\Windows\System32\nrpsrv.dll - ok
00:27:29.0729 0x1534  [ 354DAA630928CD4DA2BC84A0DA4ADA9D, AFAE4948EA4F899267DC52DF9A06450FC3E77083B563E541581DA90685C7E98C ] C:\Windows\System32\TimeBrokerServer.dll
00:27:29.0729 0x1534  C:\Windows\System32\TimeBrokerServer.dll - ok
00:27:29.0732 0x1534  [ A6FCFE1F691B4A4D266F5D487FADB9FE, 2135D0C13C1295A2F76885E380CD72CB71CEB8E0D9F1C183A35935B27737D423 ] C:\Windows\System32\wpdbusenum.dll
00:27:29.0732 0x1534  C:\Windows\System32\wpdbusenum.dll - ok
00:27:29.0734 0x1534  [ 709E51ECF383F4CEA4FD739943B945FF, E21249918838D790E94D09206F368A545D22D6B473D24D427B08A7993BDA6DE4 ] C:\Windows\System32\bi.dll
00:27:29.0734 0x1534  C:\Windows\System32\bi.dll - ok
00:27:29.0736 0x1534  [ A41C02D9A8DDC79AAD0CDC8919BA0D6F, 07BDEEBC9C632D41AD28B7E51B20EC34D727FF557AD92677B7C5C6055EEBAF8E ] C:\Windows\System32\uDWM.dll
00:27:29.0736 0x1534  C:\Windows\System32\uDWM.dll - ok
00:27:29.0738 0x1534  [ 8F312E43E6BFED69705881D49B2A01B4, 7B8CB068ABD091E6F4764D6CF27C3318792C88064ECB5A7E5283AF74892FC3B4 ] C:\Windows\System32\atiesrxx.exe
00:27:29.0738 0x1534  C:\Windows\System32\atiesrxx.exe - ok
00:27:29.0740 0x1534  [ 1B08A2865213273D19F01CEE9F523D43, C3539A3AF749E16F616D033FCB3B11B5139BE152B927213D24E85E54CFE0991F ] C:\Windows\System32\wtsapi32.dll
00:27:29.0740 0x1534  C:\Windows\System32\wtsapi32.dll - ok
00:27:29.0742 0x1534  [ 70DF783E569C82DE71182D57E6CCFFCD, 6E83B456FDAA49135C74A4D410EAA7CDE5AA90FD8BE5A2FB2CC8DB43BE4FB4B4 ] C:\Windows\System32\BCP47Langs.dll
00:27:29.0742 0x1534  C:\Windows\System32\BCP47Langs.dll - ok
00:27:29.0744 0x1534  [ C1587C6EB11AD38720B6109EFF26E3FA, 46689E5E6F18B9A42BFFC3552B8BA9C612195246727C88FBDC86F8793A3B9980 ] C:\Windows\System32\propsys.dll
00:27:29.0744 0x1534  C:\Windows\System32\propsys.dll - ok
00:27:29.0745 0x1534  [ 7755093BF0D6BC3ED629960C0089C053, 4A9E598277392EF02E39D9A5AAFC73B2CB7F60F28E81D19EF92DD653705FACD5 ] C:\Windows\System32\samlib.dll
00:27:29.0745 0x1534  C:\Windows\System32\samlib.dll - ok
00:27:29.0749 0x1534  [ CEB590C4D459D6208C47D81031762916, A8224D3F6A191FD6EA133A8175AEC5E0B3852E6A1EC11049C43202F096587019 ] C:\Windows\System32\dwmapi.dll
00:27:29.0749 0x1534  C:\Windows\System32\dwmapi.dll - ok
00:27:29.0751 0x1534  [ 742EFBC3CEDAC8141BFEF0116FF0890D, C710F501201737578D181C494F5D463996751B03F164EFCED37DBB6FDE20D86A ] C:\Windows\System32\IPHLPAPI.DLL
00:27:29.0751 0x1534  C:\Windows\System32\IPHLPAPI.DLL - ok
00:27:29.0753 0x1534  [ 5150C836D86D1327342B3892ED8F951E, D2B56684E80D8A4D073F89FC512CFF6C32B2156E3C7E188BF07229DBF5828CF1 ] C:\Windows\System32\wevtsvc.dll
00:27:29.0753 0x1534  C:\Windows\System32\wevtsvc.dll - ok
00:27:29.0755 0x1534  [ C9FF155EE604E4402929FB1E62F340F1, 01D8D9956F32A76F7369386ECA996538AC80C5FA0CBFA5AFEC0F654E64CB5711 ] C:\Windows\System32\winnsi.dll
00:27:29.0755 0x1534  C:\Windows\System32\winnsi.dll - ok
00:27:29.0757 0x1534  [ 239D28ED55E08C08690B88CFF1311EC3, 200C772A4A3D8C4F8DCDF069395D542ECBBD7AED50E1F5A1BEDC4485FA68AE04 ] C:\Windows\System32\dcomp.dll
00:27:29.0757 0x1534  C:\Windows\System32\dcomp.dll - ok
00:27:29.0759 0x1534  [ 2B67D8518FB771C487ED71F4CCC9F9C5, FA143221CF5BB6C92F65E01FAAFB660C6D80E08CB17C8E1BC838AC59CE783409 ] C:\Windows\System32\PortableDeviceApi.dll
00:27:29.0759 0x1534  C:\Windows\System32\PortableDeviceApi.dll - ok
00:27:29.0761 0x1534  [ 38F3501BC9C209D337E4242B363F2AFE, 132162013F3F33E696A18B5154CC79AA66A0F7CDBDD9156A2CC19B4383AF9274 ] C:\Windows\System32\PortableDeviceConnectApi.dll
00:27:29.0761 0x1534  C:\Windows\System32\PortableDeviceConnectApi.dll - ok
00:27:29.0763 0x1534  [ E50CE978F571B900D9A7E2F1C5BCC070, EA14873A5F1B700D7CDBE55B9D214DC457262866A90D80B3E8325A8EB7932CE7 ] C:\Windows\System32\gpsvc.dll
00:27:29.0763 0x1534  C:\Windows\System32\gpsvc.dll - ok
00:27:29.0765 0x1534  [ D4BCDFB00B08059C59CEE2C54637B5A5, 95F27DD9D9C5526B94079C92FAB13699DB4B46915E63EF1C5CCE511B79806385 ] C:\Windows\System32\nlaapi.dll
00:27:29.0765 0x1534  C:\Windows\System32\nlaapi.dll - ok
00:27:29.0766 0x1534  [ 27D0B024BB356C6BEB1214B61E47DE02, 8CBDD62E243CC652F2197AE83DEDD21D91D2792558A6D7D1CC680B37607DEF4B ] C:\Windows\System32\profsvc.dll
00:27:29.0766 0x1534  C:\Windows\System32\profsvc.dll - ok
00:27:29.0768 0x1534  [ 261830B1E3650E4471E1F98850B929B7, D281B8A93315E64C7AF5002E5BFBE6AFF8B35FD6AA747AE07D7AA96F4AFAA613 ] C:\Windows\System32\themeservice.dll
00:27:29.0768 0x1534  C:\Windows\System32\themeservice.dll - ok
00:27:29.0770 0x1534  [ C6F8F9A2D5BF4D3C055A6F5B6866EF18, 5F924F0C48B006665A37776690169B675512921D18075493E6804B5553462F4C ] C:\Windows\System32\dsrole.dll
00:27:29.0770 0x1534  C:\Windows\System32\dsrole.dll - ok
00:27:29.0772 0x1534  [ 7E1FEAD0934B7B7C02CF707927E1F7CF, 66AE327219A41D9B4C003F8C272A0E9C2939F0D1B61DC73436168C73C40C0E84 ] C:\Windows\System32\profsvcext.dll
00:27:29.0772 0x1534  C:\Windows\System32\profsvcext.dll - ok
00:27:29.0774 0x1534  [ 6537845CD156A227B5B4F958F9373DD7, 2668EC74ECB59975BD515EEFA530EF6D11E962C31E11155D36E0CC1591EB66E3 ] C:\Windows\System32\atl.dll
00:27:29.0774 0x1534  C:\Windows\System32\atl.dll - ok
00:27:29.0776 0x1534  [ 70CD53490EFA428C0CDE7754F357AEBB, 50EFCB4909A7FD2774639181684B60A545FA485AB549CEEF1A47FE867F693E1A ] C:\Windows\System32\atieclxx.exe
00:27:29.0776 0x1534  C:\Windows\System32\atieclxx.exe - ok
00:27:29.0777 0x1534  [ 9B1FAB6E3724A5CD9A81E7D0316991F4, 512A5E4FBFD1E9489A0EE62EE3928DFE198EED528E0D3DEB9D74A8F993D0DCAD ] C:\Windows\System32\usermgrcli.dll
00:27:29.0777 0x1534  C:\Windows\System32\usermgrcli.dll - ok
00:27:29.0780 0x1534  [ B7B20B07E6BDB3DCD78668E4F7BFABA9, 9D60E7E4D20408D9986AF580E7AAD6BAEDFFB2D54CE37354B486910779A7AEE8 ] C:\Windows\System32\dwmcore.dll
00:27:29.0780 0x1534  C:\Windows\System32\dwmcore.dll - ok
00:27:29.0782 0x1534  [ 2093F65AA84478E28C8E9D05BC413845, 086D4E0D4B993F4041AA8A9DCBEEDB53BD05B88E2BEFB218837FB10FACDF4233 ] C:\Windows\System32\es.dll
00:27:29.0782 0x1534  C:\Windows\System32\es.dll - ok
00:27:29.0783 0x1534  [ 8AFDD74F2DC5BAD9B2215FB19DB65240, A2BDDA4C77C63D3D8E9F1D397D7B41EC1BF093A6399C14D311D4D230B5F1E093 ] C:\Windows\System32\CoreMessaging.dll
00:27:29.0783 0x1534  C:\Windows\System32\CoreMessaging.dll - ok
00:27:29.0785 0x1534  [ 8A9330E897B9BAF4BC0E5207B67F9270, 5E2389C3BBA4EB6E3143348B2460844CC8C89D5B5545136AA974A7043A18C1F6 ] C:\Windows\System32\ninput.dll
00:27:29.0785 0x1534  C:\Windows\System32\ninput.dll - ok
00:27:29.0787 0x1534  [ DDBADDCE36991781C4FE5A3598708F84, A3CE30DAC4E52B8C02E033A18316641CF708484694EFB4D40E055D6AE3BF57F1 ] C:\Windows\System32\taskschd.dll
00:27:29.0787 0x1534  C:\Windows\System32\taskschd.dll - ok
00:27:29.0789 0x1534  [ 29452A9DA3E3482F0C2963312F979053, E1782D36C336C4B4C261AD665C1E9051905AA86020E08FC94069972AF4C4DB4B ] C:\Windows\System32\Sens.dll
00:27:29.0789 0x1534  C:\Windows\System32\Sens.dll - ok
00:27:29.0791 0x1534  [ 240FF83DD79546B26F187FAB20F83864, C4DC0159016B4A4630357131E614814C068D07BEA94AAF6393E882A78C9FCA1E ] C:\Windows\System32\AudioEndpointBuilder.dll
00:27:29.0791 0x1534  C:\Windows\System32\AudioEndpointBuilder.dll - ok
00:27:29.0793 0x1534  [ 29B35EE0C9B5D64CC9EF724BE4192FF9, 5790B2A24C844D48CF960A3719D7651D6C8F77200EFBFF4C1EC71078C90C32D4 ] C:\Windows\System32\d3d11.dll
00:27:29.0793 0x1534  C:\Windows\System32\d3d11.dll - ok
00:27:29.0794 0x1534  [ 8A76E99A16E83F01EEF841426190DB35, 65CC269081D0DA3ED40A397B13800D16FD1FBB7B379685637B85EDEB5148CB4D ] C:\Windows\System32\dwmghost.dll
00:27:29.0794 0x1534  C:\Windows\System32\dwmghost.dll - ok
00:27:29.0796 0x1534  [ C197284A9D565A38497733AF2BDFA111, C6615AF0D366C2DD6D431B073901EED02D49AA3F252230735DBB52A90BCFA833 ] C:\Windows\System32\FntCache.dll
00:27:29.0796 0x1534  C:\Windows\System32\FntCache.dll - ok
00:27:29.0798 0x1534  [ D76A6C338A81C3B14AD37B22AA422B4B, 39489B44068CAA86232B513FF7A5DA56F5AAAB595D8DBC0CCDDD4ED4A1318E07 ] C:\Windows\System32\usermgr.dll
00:27:29.0798 0x1534  C:\Windows\System32\usermgr.dll - ok
00:27:29.0800 0x1534  [ 1445308A09AD8239FB0AF03D88616AB7, 8E2AEDA555B8CE8662E92861DDF69C3D0602AA7F8D811596D504C0BC0A0E5536 ] C:\Windows\System32\Windows.UI.Logon.dll
00:27:29.0800 0x1534  C:\Windows\System32\Windows.UI.Logon.dll - ok
00:27:29.0802 0x1534  [ 3A1A62642305F9C607B9A88F21919DAC, 8D06F89772B5BB7129F03C48B782E2E43510AD186E3442E728432FAB4B6163D8 ] C:\Windows\System32\FontProvider.dll
00:27:29.0802 0x1534  C:\Windows\System32\FontProvider.dll - ok
00:27:29.0804 0x1534  [ D8334B3FE6A595FC9C9CB702AD655A02, 221E1000CCC8B4CF5C877834014577ECED8F653E025883DF4404B9FD6D00BC09 ] C:\Windows\System32\samcli.dll
00:27:29.0804 0x1534  C:\Windows\System32\samcli.dll - ok
00:27:29.0806 0x1534  [ 1BFAC03B6422E878EFCDA934BF4C4823, 0BA537A4B9E8020E6B709A44F1382DB3B41CEF631B847201F812152FEB303CD3 ] C:\Windows\System32\schedsvc.dll
00:27:29.0806 0x1534  C:\Windows\System32\schedsvc.dll - ok
00:27:29.0808 0x1534  [ 39F952D00590A65026FD2F0337E510A5, 9A878BEF2BAEFBFB3A706372634407110ABB707A65C5CE5CD08E1AECBB2B04D7 ] C:\Windows\System32\ubpm.dll
00:27:29.0808 0x1534  C:\Windows\System32\ubpm.dll - ok
00:27:29.0810 0x1534  [ BA6AE46CFE41297B324527B13B851342, 72A2913F3B44D44492A249B45B11E9186471E01FD807B12EC27BE27282A11314 ] C:\Windows\System32\CSystemEventsBrokerClient.dll
00:27:29.0810 0x1534  C:\Windows\System32\CSystemEventsBrokerClient.dll - ok
00:27:29.0812 0x1534  [ C4DC4CAB9B55E288F0C38872009727E9, 94E2474B9158813990CB6EC32581D05E35ECE4B16CCC0A4D747A2FA462150062 ] C:\Windows\System32\dxgi.dll
00:27:29.0812 0x1534  C:\Windows\System32\dxgi.dll - ok
00:27:29.0815 0x1534  [ EAA718CD36E6A0B2528FF00CC3F05D13, 95493BCF11B705F7C4FBEBA59E6FAB7B1E3086B9011749302D0B8984B22D206A ] C:\Windows\System32\aticfx64.dll
00:27:29.0815 0x1534  C:\Windows\System32\aticfx64.dll - ok
00:27:29.0817 0x1534  [ 0AE80A4C86A867480F1B87EF2902780E, 00A8B3F7451F01B9368C7F105983A278DBF1850676799BD6DB8B991E3F74596E ] C:\Windows\System32\MMDevAPI.dll
00:27:29.0817 0x1534  C:\Windows\System32\MMDevAPI.dll - ok
00:27:29.0819 0x1534  [ 5F5D1AA08F24DDBA91C4FE9890C1DD13, F53761B17B437D0BB0A8EB027A8228F2250BFCF04E2D138E257FC52F7C9BECCF ] C:\Windows\System32\mstask.dll
00:27:29.0819 0x1534  C:\Windows\System32\mstask.dll - ok
00:27:29.0821 0x1534  [ 4C86961C71396D2BA39DAD9783437546, C36A428701D6C0E2FFDF0ECB8917FB6ED48E8014F7C3DD911387DE6E161D7EAD ] C:\Windows\System32\audiosrv.dll
00:27:29.0821 0x1534  C:\Windows\System32\audiosrv.dll - ok
00:27:29.0822 0x1534  [ 67D3A125349AB2AA5C0A108562661B5F, 2C374AEEB271FAF644DAA851DE0F3922E64659F611AF17C77E077211E8339F8D ] C:\Windows\System32\avrt.dll
00:27:29.0822 0x1534  C:\Windows\System32\avrt.dll - ok
00:27:29.0824 0x1534  [ 89456438D82B4069E9A0B001AAFAF91A, 959AF64EED3D82BA4566E83896215C4E1C7FE6BBA6F63FECB91AAEEDAB298E7F ] C:\Windows\System32\ksuser.dll
00:27:29.0824 0x1534  C:\Windows\System32\ksuser.dll - ok
00:27:29.0826 0x1534  [ DB789F57CE94C827FBFF709CA5ABD29E, 4CA4DD079A63649C36F76A31C4081F11F5CF6574AC573B63EF930DB19B1D1C95 ] C:\Windows\System32\drivers\lltdio.sys
00:27:29.0826 0x1534  C:\Windows\System32\drivers\lltdio.sys - ok
00:27:29.0828 0x1534  [ FB3801F176376286A3F8F20FFB8CDC53, EEF89081665B9BBA93AE9F5912C40C1698E8BA8DBBCCC3BBE0BAB5A86B7E05D4 ] C:\Windows\System32\drivers\mslldp.sys
00:27:29.0828 0x1534  C:\Windows\System32\drivers\mslldp.sys - ok
00:27:29.0830 0x1534  [ DC66C1D262D64E30A30B68E9F21AC74B, A5ED3D31BCD68DBC00A956787517ACA167C86F5FFDAF7C9A85505FA2B705C6CB ] C:\Windows\System32\drivers\rspndr.sys
00:27:29.0830 0x1534  C:\Windows\System32\drivers\rspndr.sys - ok
00:27:29.0833 0x1534  [ F76AD463DBE8D30CB715A09DF9FF2BE9, 5B2184582496ED0EE8582C6AD3BCF49674690C585439B6F57B43ADC12DF941F6 ] C:\Windows\System32\drivers\vmnetbridge.sys
00:27:29.0833 0x1534  C:\Windows\System32\drivers\vmnetbridge.sys - ok
00:27:29.0835 0x1534  [ 0AF4872D3D6FD3A030E836DAC2B3EF2D, 03EE7B6FAFC0BB5C26793BC5FF8BD1019AC96B3104688009C1E062C3F4F34D6D ] C:\Windows\System32\nsisvc.dll
00:27:29.0835 0x1534  C:\Windows\System32\nsisvc.dll - ok
00:27:29.0836 0x1534  [ A40484AC27EE08DBE7F8DA5E1F6651ED, E3259694450C4F1DEC5E0EA5E23BF3A51F1819374DF47FECF70282AFD46114A1 ] C:\Windows\System32\wcmsvc.dll
00:27:29.0836 0x1534  C:\Windows\System32\wcmsvc.dll - ok
00:27:29.0838 0x1534  [ 592E41B3C11CA12203D3708AD8FC3D37, 6C69D5D603FBF038C069EDDCE29F7C6A60CAAE58B985AB218E1497F2BA934D42 ] C:\Windows\System32\dnsrslvr.dll
00:27:29.0838 0x1534  C:\Windows\System32\dnsrslvr.dll - ok
00:27:29.0840 0x1534  [ E59C209F1F633C1AEAF151B2CA46BBAA, 6A4DA927418B56A228CC8D9DFA3351B2B53A9328F5C56C10F0C7B19974B2ED89 ] C:\Windows\System32\dhcpcore.dll
00:27:29.0840 0x1534  C:\Windows\System32\dhcpcore.dll - ok
00:27:29.0842 0x1534  [ B31569B0E7A467D4050FA49CFCBFCEFA, D7BCCBAA66B3B124820FF10554C44EC78F59D86BD1DE0EF84BBFC00822C9C265 ] C:\Windows\System32\wcmcsp.dll
00:27:29.0842 0x1534  C:\Windows\System32\wcmcsp.dll - ok
00:27:29.0844 0x1534  [ BB06D22354BEA9E0B38B38AF19991160, 8A8D100E19CADEFF24E2A79DEC01EFEB71DA757C39F42F4D462AF386E732CEFB ] C:\Windows\System32\d3d10warp.dll
00:27:29.0844 0x1534  C:\Windows\System32\d3d10warp.dll - ok
00:27:29.0846 0x1534  [ 3FE158F96D824FB2BE982A3B36F244E3, F1D9711694ADBBA96823680CB51423CCBD887D4A608A832D442CA15AA9675B6A ] C:\Windows\System32\atiuxp64.dll
00:27:29.0846 0x1534  C:\Windows\System32\atiuxp64.dll - ok
00:27:29.0849 0x1534  [ 4B5873B191B61A9FE622467F59F984CE, 81A5DCB24FD941C45A4859D1064FD1395CC9C5F21EE4C04673DBD2F9FF036BDF ] C:\Windows\System32\version.dll
00:27:29.0849 0x1534  C:\Windows\System32\version.dll - ok
00:27:29.0851 0x1534  [ C88D697C62D014E41997F5790A0EB092, A46B90155257AD75E955B422DB6544E867E3D7CB3ED8A696E0E031B1A861268F ] C:\Windows\System32\wmiclnt.dll
00:27:29.0851 0x1534  C:\Windows\System32\wmiclnt.dll - ok
00:27:29.0853 0x1534  [ 8DEE988409DAC7C563BF9AB274907CB3, 8AC77CA5EBF7467B43A461E57BB600BD7438B281B1530373A7AF397B95BC1AA4 ] C:\Windows\System32\FWPUCLNT.DLL
00:27:29.0853 0x1534  C:\Windows\System32\FWPUCLNT.DLL - ok
00:27:29.0855 0x1534  [ 747DD0ED0415143A2B9D8C7A7843478B, 3B4C0040BF277027B8651BE71B3CAD26CEB3C77A759811600BAAD495775ECC1A ] C:\Windows\System32\cmintegrator.dll
00:27:29.0855 0x1534  C:\Windows\System32\cmintegrator.dll - ok
00:27:29.0857 0x1534  [ 3ACDD2357000400F3E383C3B16A626E3, B73283C6CF56E5A07C982895FF7DEC2616F410AE0D63B88DB0569022BDCA8301 ] C:\Windows\System32\dhcpcsvc6.dll
00:27:29.0857 0x1534  C:\Windows\System32\dhcpcsvc6.dll - ok
00:27:29.0859 0x1534  [ A06AB6D0B12172E1C6FD7D10AF3BD11E, DE6B1C704F3D3E4174A444D8510888C5481AB52CC8784460CCA58109412B9C29 ] C:\Windows\System32\dnsext.dll
00:27:29.0859 0x1534  C:\Windows\System32\dnsext.dll - ok
00:27:29.0860 0x1534  [ 1A248430275E15D8A459D5F4E07A41CE, 164907FF8A325086F6DC55CBB07314FF4C5CD79E9EFEAE0EB13632958FCBE8AF ] C:\Windows\System32\dhcpcore6.dll
00:27:29.0860 0x1534  C:\Windows\System32\dhcpcore6.dll - ok
00:27:29.0862 0x1534  [ A02F1B4FA794B5F01B2199A18FA28DB4, BF451968A254B69863C4645DD8861351B3AFD518FAC3536ECC973CB5DD10C7E0 ] C:\Windows\System32\dhcpcsvc.dll
00:27:29.0862 0x1534  C:\Windows\System32\dhcpcsvc.dll - ok
00:27:29.0865 0x1534  [ 816AC597FFFF9BACC2ADFF9BB65B025F, DC6B16FDE17825755FDFC8ED7A1B8140152BE8D8D84CABA89B1BFAC5E8D3879D ] C:\Windows\System32\atidxx64.dll
00:27:29.0865 0x1534  C:\Windows\System32\atidxx64.dll - ok
00:27:29.0868 0x1534  [ 9CD0ED32E28B9123DBB8B20AE62A68A4, AE86D60F32705B672D23AF533B2D00333DF85633D5AAFDCCDEEA95ADB1521BE1 ] C:\Windows\System32\UserMgrProxy.dll
00:27:29.0868 0x1534  C:\Windows\System32\UserMgrProxy.dll - ok
00:27:29.0870 0x1534  [ CA6EADBB8731CA27BDA4037BF290AC14, 31EC9397D55D4EEC416AD722134E2D6B5D14E46D2150CB94889C4BFDAACBF421 ] C:\Windows\System32\drivers\http.sys
00:27:29.0870 0x1534  C:\Windows\System32\drivers\http.sys - ok
00:27:29.0871 0x1534  [ 58C17D92AD61EC7A98B05F4FAD0D205A, B881134A1BD9194145A9D18BDB34D57E2C167F06C2A9368459D0C33E6E0D6501 ] C:\Windows\System32\spoolsv.exe
00:27:29.0872 0x1534  C:\Windows\System32\spoolsv.exe - ok
00:27:29.0873 0x1534  [ 835F60262E7E310080EA05F6752BF248, 3010B731DF3D52B56EA16FD29B66F5D3AB9412E49CA4C547BAAECA3225C5DC40 ] C:\Windows\System32\drivers\WUDFPf.sys
00:27:29.0873 0x1534  C:\Windows\System32\drivers\WUDFPf.sys - ok
00:27:29.0875 0x1534  [ 5EB042EF277540AD1A005F801693795E, B82AB349455F845B847F3878DED68E504C96B0BA0745A5BA47BD844A137F9A99 ] C:\Windows\System32\WUDFPlatform.dll
00:27:29.0875 0x1534  C:\Windows\System32\WUDFPlatform.dll - ok
00:27:29.0877 0x1534  [ 44CF3130AEC8914705487C4AEF756A19, 30B09E32DEC02141F9B99ED012E441056C1663A72E4130EF4221ECC0ED87BF4B ] C:\Windows\System32\WUDFSvc.dll
00:27:29.0877 0x1534  C:\Windows\System32\WUDFSvc.dll - ok
00:27:29.0878 0x1534  [ D4D17FB8E003050BA38B85F335B71222, 63837DD83AE03AB39F8A0E91CF31A130A06872110733FDD5C2408E63EAEB4433 ] C:\Windows\System32\vaultsvc.dll
00:27:29.0878 0x1534  C:\Windows\System32\vaultsvc.dll - ok
00:27:29.0881 0x1534  [ 8F2B0ED6FCA72B34BEEA37E32D0EE106, A86C641A13FDF056B7BA13641551582199DDB08E9490003C74D999518B097C00 ] C:\Windows\System32\wbiosrvc.dll
00:27:29.0881 0x1534  C:\Windows\System32\wbiosrvc.dll - ok
00:27:29.0883 0x1534  [ F3D39925B0D55F39ADE7E6A35181C8B7, 2579957A46B1CA00FF5E9A9C9F8E37AF5E11BCBE9DB65D877F6C17EE00140D94 ] C:\Windows\System32\msvcp_win.dll
00:27:29.0883 0x1534  C:\Windows\System32\msvcp_win.dll - ok
00:27:29.0885 0x1534  [ CE2A27C649BEC4052844B38093DF27D9, 275B4F0C2E11A0047C9734B810242D2857EF630662770881A0F77BA6B61C967F ] C:\Windows\System32\ucrtbase.dll
00:27:29.0885 0x1534  C:\Windows\System32\ucrtbase.dll - ok
00:27:29.0887 0x1534  [ C9FD65687EF89715999C582D3E568812, 42BA59A78A47C510CB2AFDC6C6080B33F9F611F84FEE5262DFF16D7633C50EB1 ] C:\Windows\System32\drivers\bowser.sys
00:27:29.0887 0x1534  C:\Windows\System32\drivers\bowser.sys - ok
00:27:29.0889 0x1534  [ 1DF2C5FD2710A13B07E663A12F0E0EEA, 8EBCA9269F52A5CF602F5DE2B0C2AB2BFD82F415465DBB74C73D43F321D9FD46 ] C:\Windows\System32\drivers\mrxsmb.sys
00:27:29.0889 0x1534  C:\Windows\System32\drivers\mrxsmb.sys - ok
00:27:29.0891 0x1534  [ 99E24D4DBACBC569833B9A67710D65E7, 93BC765E7B6E19E83AFF783DE8080A80A1D69A406B496F1E36C47AE6E86AFB76 ] C:\Windows\System32\drivers\mrxsmb20.sys
00:27:29.0891 0x1534  C:\Windows\System32\drivers\mrxsmb20.sys - ok
00:27:29.0893 0x1534  [ 6D70B0F7FF4D2F142330A038EB035ABF, DBE2E46B2BED7C5DCCD9A6297A29D56B4008AB8BE6840431D862D1D3C59D1D1E ] C:\Windows\System32\winbioext.dll
00:27:29.0893 0x1534  C:\Windows\System32\winbioext.dll - ok
00:27:29.0895 0x1534  [ 86DA189932A2DDD0DD209778651B80F3, 0775596DB6C9F4D498112460B3D038CBBCEAB104F6D842FEF9150AD341CDD1E1 ] C:\Windows\System32\WinBioPlugIns\FaceRecognitionSensorAdapter.dll
00:27:29.0895 0x1534  C:\Windows\System32\WinBioPlugIns\FaceRecognitionSensorAdapter.dll - ok
00:27:29.0897 0x1534  [ 7FAFFFC4C59F5010D6E7CEA152076B92, 945FD6C04E109D4E5A4164BAA9A8120EC85AB809555AAD83E61B9F179F976FD7 ] C:\Windows\System32\BFE.DLL
00:27:29.0897 0x1534  C:\Windows\System32\BFE.DLL - ok
00:27:29.0898 0x1534  [ D6D9F4CAFD3F1A7E30AD02E508552CD2, F0D225E5951CFE1D8349F634CC91BDD5B3F9DCF6233CCB965E99BFEAFE642265 ] C:\Windows\System32\wkssvc.dll
00:27:29.0898 0x1534  C:\Windows\System32\wkssvc.dll - ok
00:27:29.0900 0x1534  [ 989A1BBD9C49B107B4A47D06E6827A69, 62D90B22AE13AC84324DFD5FEBA595813AD07469B7FEC41380CE223D93020CCA ] C:\Windows\System32\drivers\mpsdrv.sys
00:27:29.0900 0x1534  C:\Windows\System32\drivers\mpsdrv.sys - ok
00:27:29.0902 0x1534  [ 8A21E309EDBBAD40E40798E04889FA1F, 3A45924B425747BA657AC21E63516915735150722EFED14C6A4749D3F7E7DA9E ] C:\Windows\System32\netjoin.dll
00:27:29.0902 0x1534  C:\Windows\System32\netjoin.dll - ok
00:27:29.0904 0x1534  [ F05B6A5DC98FA81D7D7D3E7D9E5D3DEB, E1174CFC1B4C6CEEC3532695F531DD05F72DE0EDE4BFC9744C3CB3C3D5FF8F30 ] C:\Windows\System32\wevtapi.dll
00:27:29.0904 0x1534  C:\Windows\System32\wevtapi.dll - ok
00:27:29.0906 0x1534  [ 4948A810A7BF2D5795F5C10282B081E8, EE62081E701C8A6B25B2ACA5ED0DE689DFA578F7AF929A9D314D85A1CCD613C6 ] C:\Windows\System32\WindowsCodecs.dll
00:27:29.0906 0x1534  C:\Windows\System32\WindowsCodecs.dll - ok
00:27:29.0908 0x1534  [ 64E0F8486A72BA837DD6415CBA6510DC, D5927666C461A906A1AC3E8B6CEFE199AC277FD893FB99EF325C33ED0A463029 ] C:\Windows\System32\UIAnimation.dll
00:27:29.0908 0x1534  C:\Windows\System32\UIAnimation.dll - ok
00:27:29.0910 0x1534  [ A0DBB9386BEA8DA1A159C2A2E07081A3, 9D3F26005A76A72F9512F040D45C16124D17F8C8DA45C51FFAF74F066357D0A4 ] C:\Windows\System32\MPSSVC.dll
00:27:29.0910 0x1534  C:\Windows\System32\MPSSVC.dll - ok
00:27:29.0912 0x1534  [ 8973C904DC99DBE4E9BB54044DB85C47, 21663BF579ED2CE9925DB1B187B957BF501F702AB633AD73174FC358BE67CA45 ] C:\Windows\System32\wincorlib.dll
00:27:29.0912 0x1534  C:\Windows\System32\wincorlib.dll - ok
00:27:29.0914 0x1534  [ 9AEF3F265B0EE19F75840199E8FECD7B, 762D767D6A9CE27B9726E8D0AB13A11ADA8D99F40C226C860D1A377D8D816C4D ] C:\Windows\System32\MrmCoreR.dll
00:27:29.0914 0x1534  C:\Windows\System32\MrmCoreR.dll - ok
00:27:29.0916 0x1534  [ 504EC8E161E57742C3EA93E6DBCD5097, 7741DAE5B0A9B5E3144FD491E902A8357FC2944931C77CCE69B22872AD76490C ] C:\Windows\System32\Windows.UI.dll
00:27:29.0916 0x1534  C:\Windows\System32\Windows.UI.dll - ok
00:27:29.0918 0x1534  [ 212E5C2C279835CBFEBF935EB0E7EC5D, 0D25B2F7576711830192F1E325243F6FFF8C4856AC75BB3EBFB529DCEA736984 ] C:\Windows\System32\Windows.UI.Xaml.dll
00:27:29.0918 0x1534  C:\Windows\System32\Windows.UI.Xaml.dll - ok
00:27:29.0920 0x1534  [ 5077A7430A034A3A53811C3F4E4BD76A, D774DBCFD75606CFFF0E66CA5F2D962DAABFFF91F2C7CF9AE48BED7E0BA7E040 ] C:\Windows\System32\fwpolicyiomgr.dll
00:27:29.0920 0x1534  C:\Windows\System32\fwpolicyiomgr.dll - ok
00:27:29.0922 0x1534  [ 8BFB806FCC44C9613CCB472D9CF2D9E6, 9C0AFF6CCB30D81688B64A997A33BAB5A43883E6EA46985DEF649EE55C2ED53E ] C:\Windows\System32\taskcomp.dll
00:27:29.0922 0x1534  C:\Windows\System32\taskcomp.dll - ok
00:27:29.0923 0x1534  [ 5E18D42697AFDE0A69C2D60C3F715198, 3A444165C420B14BFBBB81DF43215A523764B9E45840C14CAC0F5DDE45AAE19C ] C:\Windows\System32\wkscli.dll
00:27:29.0923 0x1534  C:\Windows\System32\wkscli.dll - ok
00:27:29.0925 0x1534  [ 2487C4B49771E85FD6EA42E33C1E0230, 3DA1C828F85FCECD13B9092C97A14C377157BB47D81D5F9A4D0CF7C0CC119AC7 ] C:\Windows\System32\httpprxc.dll
00:27:29.0925 0x1534  C:\Windows\System32\httpprxc.dll - ok
00:27:29.0927 0x1534  [ 8944240102EBF8662201AF9C20AD5C8C, 217CFDC8CAE27CBCA867D4CD9B0043F214559C38871113C9D25B3D7E25B6541F ] C:\Windows\System32\policymanager.dll
00:27:29.0927 0x1534  C:\Windows\System32\policymanager.dll - ok
00:27:29.0929 0x1534  [ BE9DB2123CE126E54A97CE6BE0E45C8B, 4DC988DCB0BF2964564F5FB1E1A0FBD963FAF96CF0DD07B5D4F9AB481E139534 ] C:\Windows\System32\msvcp110_win.dll
00:27:29.0929 0x1534  C:\Windows\System32\msvcp110_win.dll - ok
00:27:29.0930 0x1534  [ 5E334DE9CEA4CC6A6A8AE105DC212A05, DEE41552DC8A25F153BCA4DA1C1C9529516A7198C6F7574620C091FE06D8BE59 ] C:\Windows\System32\d2d1.dll
00:27:29.0930 0x1534  C:\Windows\System32\d2d1.dll - ok
00:27:29.0932 0x1534  [ F1E25288AE6F402B5DB99825F3097AAD, F8D67678F34C082A8B5832185FD1CF252718FCAF1A3EAB60E401E93D054042E6 ] C:\Windows\System32\WinTypes.dll
00:27:29.0932 0x1534  C:\Windows\System32\WinTypes.dll - ok
00:27:29.0934 0x1534  [ 4AC12D495B3CB4275F74C68A7A017561, DC53EBD606ECCD8BCF6D618C0EB58B03F5C20F09E0F0AEDE9B8082D6B208B19A ] C:\Windows\System32\shsvcs.dll
00:27:29.0934 0x1534  C:\Windows\System32\shsvcs.dll - ok
00:27:29.0936 0x1534  [ 104232AB10BA29AD9B472C2C3A7CA089, 3CA37A631838E4B3DEB2B651548F8FF40324419648710577E3426F6DD51FA440 ] C:\Windows\System32\WPTaskScheduler.dll
00:27:29.0936 0x1534  C:\Windows\System32\WPTaskScheduler.dll - ok
00:27:29.0938 0x1534  [ 81EFDF8A7A08C379EB5009BDF371513C, 3FB625F1C5E5AAE7C59CC2DA4E83EEC2576E399B949CD189834474A60FC5FD53 ] C:\Windows\System32\TimeBrokerClient.dll
00:27:29.0938 0x1534  C:\Windows\System32\TimeBrokerClient.dll - ok
00:27:29.0940 0x1534  [ 2B9702F8834ADF2EF4AC369876B40424, 3ACCC500C4AB9689E87714E7CF73E78B27957697B095B95C41B9CEE5E3CB182A ] C:\Windows\System32\iertutil.dll
00:27:29.0940 0x1534  C:\Windows\System32\iertutil.dll - ok
00:27:29.0942 0x1534  [ 90211F7475F525E7F9858C0CE3BBBBE7, 4EDEA48D3981A2BE65873CEE41C27FE58DFE7AAB9D66D3CAB15840F390EC9A09 ] C:\Windows\System32\Windows.UI.Immersive.dll
00:27:29.0942 0x1534  C:\Windows\System32\Windows.UI.Immersive.dll - ok
00:27:29.0944 0x1534  [ C02E7527DFF1288BDB861103FDC759E5, C000B50EA942D0EDFDC5C8B152ED63C7CA110588C81327A8C6C3CEBEDF83D822 ] C:\Windows\System32\WinBioPlugIns\FaceRecognitionEngineAdapter.dll
00:27:29.0944 0x1534  C:\Windows\System32\WinBioPlugIns\FaceRecognitionEngineAdapter.dll - ok
00:27:29.0946 0x1534  [ 3DB8549F2ED4FF39F99E0BF563F7D0C1, C69F44C3F1B3594A9A9931E861F051D46AF8CDEB1E030B859B2A1B75F6E3B9B2 ] C:\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll
00:27:29.0946 0x1534  C:\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll - ok
00:27:29.0948 0x1534  [ 85E978733A619AEF177448B35EF9911A, AB66C1D69E4A50B7FC3C05046538B3E6F50A202D6522153027DC846A2D4F9473 ] C:\Windows\System32\xmllite.dll
00:27:29.0948 0x1534  C:\Windows\System32\xmllite.dll - ok
00:27:29.0949 0x1534  [ 93CE2DEDCD49BBDE4001128098770502, 1E57CF6BFCC404E12746584E526CE52450FB090250F81287E8F76746703E9DA8 ] C:\Windows\System32\adhapi.dll
00:27:29.0949 0x1534  C:\Windows\System32\adhapi.dll - ok
00:27:29.0951 0x1534  [ 468B095D4A0A434D66BFE36DFDCFC91F, 0F21B417E7ECA4981305620CAF0AD0B8254ABF28529E4EB2D80BCDF39DD05656 ] C:\Windows\System32\wshqos.dll
00:27:29.0951 0x1534  C:\Windows\System32\wshqos.dll - ok
00:27:29.0953 0x1534  [ 187A97FC0ADFC57EF243C687244C5588, BCE515E47E659FE06EA7047ACE4264EB0995CFBFBA752D3A461CDC164B5A1298 ] C:\Windows\System32\WSHTCPIP.DLL
00:27:29.0953 0x1534  C:\Windows\System32\WSHTCPIP.DLL - ok
00:27:29.0955 0x1534  [ DAE831A06839E79678B972E458CD5256, 26F2EB0B9E0EBB6C1E6C000054E9478289398FCF38AB982C088AE8A0AE7B75D0 ] C:\Windows\System32\wfapigp.dll
00:27:29.0955 0x1534  C:\Windows\System32\wfapigp.dll - ok
00:27:29.0957 0x1534  [ 20DEC45969D0AF55B7341A7538E78A2E, E7B8AFA00BD264AC0E7AECF3DD350D822E02F1E64339F0DF2C27C372BF4B46B5 ] C:\Windows\System32\wship6.dll
00:27:29.0957 0x1534  C:\Windows\System32\wship6.dll - ok
00:27:29.0959 0x1534  [ AE8F14295E704D9FD52092B81B3E1F09, FF0AA062D23903A3E3769713AB2F2D4AB307203C9726B9F0783B3E7DDEF08E6D ] C:\Program Files (x86)\Avira\Antivirus\sched.exe
00:27:29.0959 0x1534  C:\Program Files (x86)\Avira\Antivirus\sched.exe - ok
00:27:29.0961 0x1534  [ 1C33723A070D41AF85309681EEF63B58, 5B31F6BD82E4268998375873ED66FDCBC23A1AB40252E91C202637C0F0999DFC ] C:\Windows\syswow64\ntdll.dll
00:27:29.0961 0x1534  C:\Windows\syswow64\ntdll.dll - ok
00:27:29.0962 0x1534  [ 6407D861DFB1D295336EFC8D12DE2E5F, 8C2A04A91F2E536E1256C1BE51E1306DEC5AF3972357460AEE1EB3D14DA7DC0F ] C:\Windows\syswow64\kernel32.dll
00:27:29.0962 0x1534  C:\Windows\syswow64\kernel32.dll - ok
00:27:29.0964 0x1534  [ 63ADFB87AED645539B87DD4E39B22088, A1CA0EA941EE053161CDF49AA17FAF2B95467E4604DF11C0113D2590A97F9E88 ] C:\Windows\syswow64\KernelBase.dll
00:27:29.0964 0x1534  C:\Windows\syswow64\KernelBase.dll - ok
00:27:29.0966 0x1534  [ 729FE09CBAE7DCCBE43FA83D63A87278, EB7D258047130A51B416E9391F86C8023974F36DBC308156DF4367C52E56475C ] C:\Windows\syswow64\user32.dll
00:27:29.0966 0x1534  C:\Windows\syswow64\user32.dll - ok
00:27:29.0968 0x1534  [ E11E9E49E412532472982351C5361615, 03211A8F7E85CE4F8C0B8B581ADB5E3FD4BA0A7CEE87B3882D67A99067A6F64D ] C:\Windows\syswow64\gdi32.dll
00:27:29.0968 0x1534  C:\Windows\syswow64\gdi32.dll - ok
00:27:29.0969 0x1534  [ AA1068C54B8236EC4C481A18EDDA725F, 1AABF6C0F5354B23D18FF1130820511BCC59680331951CFD29AE9CE534AF0C64 ] C:\Windows\syswow64\advapi32.dll
00:27:29.0969 0x1534  C:\Windows\syswow64\advapi32.dll - ok
00:27:29.0971 0x1534  [ 203F296B3CE6CD9A6130C38E4D43FD84, 697058ED839E93A5263A9604B1E7D6BDADF31CB6EE16050284962B19066A6675 ] C:\Windows\syswow64\msvcrt.dll
00:27:29.0971 0x1534  C:\Windows\syswow64\msvcrt.dll - ok
00:27:29.0973 0x1534  [ 9E9C07218E6679B9810F2376EE05C03C, DCE066AE0D5E5436A40B7D794A5BB46E9E43D6E220ACB1996794BCBC03B12A17 ] C:\Windows\syswow64\sechost.dll
00:27:29.0973 0x1534  C:\Windows\syswow64\sechost.dll - ok
00:27:29.0975 0x1534  [ 8752DB54FF4458CE9A247A30E1816DAC, F81E5653C58CE6D37205ADF0BD5EB97B8A477DAFCBC843A592F2D9723A997392 ] C:\Windows\syswow64\rpcrt4.dll

Treend 13.11.2015 00:38
Code:
00:27:29.0975 0x1534  C:\Windows\syswow64\rpcrt4.dll - ok
00:27:29.0977 0x1534  [ B63B40B48B7B3BB9E593E0CC61E397E8, FBC8F847ADE6067DF311E45645D84FD7B8AC7C1170815ACA64C0F8F80B412EB5 ] C:\Windows\syswow64\sspicli.dll
00:27:29.0977 0x1534  C:\Windows\syswow64\sspicli.dll - ok
00:27:29.0978 0x1534  [ 90A8B5C8882D07CF1CA85667A0BED95F, 0B34C7E9B968D1960491D40647E02DE27C08834EBFE81CC0C813AC5D822ABD68 ] C:\Windows\syswow64\bcryptprimitives.dll
00:27:29.0978 0x1534  C:\Windows\syswow64\bcryptprimitives.dll - ok
00:27:29.0980 0x1534  [ 5BD84D1D1336B66C43B53CECF9F66BFA, AD5EE35E7A837BE0B865B2AF9E4FDAD3BB0F6D72EF04C76FF72003437B313DB8 ] C:\Windows\syswow64\cryptbase.dll
00:27:29.0980 0x1534  C:\Windows\syswow64\cryptbase.dll - ok
00:27:29.0982 0x1534  [ FC0EA798FE3619FFA5B2B28483CA7B78, 005B112AC5E2425ED6172288837D2E16D7416065D2DB8B1E85DC044669960EF3 ] C:\Windows\syswow64\shlwapi.dll
00:27:29.0982 0x1534  C:\Windows\syswow64\shlwapi.dll - ok
00:27:29.0984 0x1534  [ 056465E9F224122506D1FBC3C1DF1E89, A2168D439FF8497FADBF5A58EA172D5C329C1997F2694C7F7963B22AAD29A8D8 ] C:\Windows\syswow64\combase.dll
00:27:29.0984 0x1534  C:\Windows\syswow64\combase.dll - ok
00:27:29.0986 0x1534  [ AB722F3B0A5E5C910948D96E19D0C989, F41B6A71D1881DAED9CB2A1DCDD572168F10AD90EDD527DDDF435EF2889DFC28 ] C:\Windows\syswow64\dbghelp.dll
00:27:29.0986 0x1534  C:\Windows\syswow64\dbghelp.dll - ok
00:27:29.0988 0x1534  [ 90AC80C3FBE1C7BD3C7EC4F30150D806, 61BBC53275AA96DDD4EC26BA9A38380FB443712C1063CC73CBB28A6DCDB826FE ] C:\Windows\System32\WinBioPlugIns\NUIVoiceWBSAdapters.dll
00:27:29.0988 0x1534  C:\Windows\System32\WinBioPlugIns\NUIVoiceWBSAdapters.dll - ok
00:27:29.0990 0x1534  [ FD5CABBE52272BD76007B68186EBAF00, 87C42CA155473E4E71857D03497C8CBC28FA8FF7F2C8D72E8A1F39B71078F608 ] C:\Program Files (x86)\Avira\Antivirus\msvcp120.dll
00:27:29.0990 0x1534  C:\Program Files (x86)\Avira\Antivirus\msvcp120.dll - ok
00:27:29.0992 0x1534  [ 034CCADC1C073E4216E9466B720F9849, 86E39B5995AF0E042FCDAA85FE2AEFD7C9DDC7AD65E6327BD5E7058BC3AB615F ] C:\Program Files (x86)\Avira\Antivirus\msvcr120.dll
00:27:29.0992 0x1534  C:\Program Files (x86)\Avira\Antivirus\msvcr120.dll - ok
00:27:29.0994 0x1534  [ 5A863500AB522EFA6270019D613F15F9, 24A1FCC31A05EC8B12FE952FF24B59B0C9662B5ACA937A264A89B8624CF8599F ] C:\Windows\System32\fveapi.dll
00:27:29.0994 0x1534  C:\Windows\System32\fveapi.dll - ok
00:27:29.0997 0x1534  [ 5E8D09216315B063FD4AEAB9508F0776, 7326DCE524B6990396F9DB03083A948B5DA9DE0A12773602DA8AA49BE8410D93 ] C:\Windows\System32\mfplat.dll
00:27:29.0997 0x1534  C:\Windows\System32\mfplat.dll - ok
00:27:29.0999 0x1534  [ 738DF2BB10E7943A0531AA00D25CEE7A, 986A44181E7DD90756478215BFFB4B73805911862CB5C38CE98AC321AC348E00 ] C:\Program Files (x86)\Avira\Antivirus\grdcore.dll
00:27:29.0999 0x1534  C:\Program Files (x86)\Avira\Antivirus\grdcore.dll - ok
00:27:30.0001 0x1534  [ E2D8C4A0097AD8CF08656298179B5C67, 955E5DC1DED3995E52C23575B9A85C3BCA756D1B499E621C88836511F152E45F ] C:\Windows\syswow64\dbgcore.dll
00:27:30.0001 0x1534  C:\Windows\syswow64\dbgcore.dll - ok
00:27:30.0002 0x1534  [ D6BF254925FD35955C99F402F8DF4773, 8C24849C0A078F5B80D01C06B617784337E3B8CB1F724FD5F2D3296668C41224 ] C:\Windows\syswow64\shell32.dll
00:27:30.0003 0x1534  C:\Windows\syswow64\shell32.dll - ok
00:27:30.0004 0x1534  [ 685EEB13B31155B5649F44977ED01B07, 7543DD0DF16244675AC83236310959031465AF11D3FFF48C5D7AEAF5B392D447 ] C:\Windows\System32\fvecerts.dll
00:27:30.0004 0x1534  C:\Windows\System32\fvecerts.dll - ok
00:27:30.0006 0x1534  [ B03A83972AF0ADA367D1002C9F0F0254, 6F8121BC70804FB480B7392E2EC24FB2E48A40632BDA53003D74B8F7E6F6CCAF ] C:\Windows\System32\RTWorkQ.dll
00:27:30.0006 0x1534  C:\Windows\System32\RTWorkQ.dll - ok
00:27:30.0008 0x1534  [ B1AC06CB12246625B440C3703F67C32F, 9AAB619F27DA6FE0153846232BC3DB4554F5608859EAD6539B5751CDCD06CCE1 ] C:\Windows\System32\taskhostw.exe
00:27:30.0008 0x1534  C:\Windows\System32\taskhostw.exe - ok
00:27:30.0009 0x1534  [ 48B62999ED22FF21EF2194BDA93FA058, D736D3BB7D11631CF1F635172067CCD8B9715F4CFAB3C1970BBF499C6097427D ] C:\Windows\System32\netcfgx.dll
00:27:30.0009 0x1534  C:\Windows\System32\netcfgx.dll - ok
00:27:30.0011 0x1534  [ 62FFA998B31D23151A18E968229DB051, B7508B0160ABA627A7F7231B2FBC7B29F896A5D61A304284631E703A333B5F0D ] C:\Windows\System32\ProximityService.dll
00:27:30.0011 0x1534  C:\Windows\System32\ProximityService.dll - ok
00:27:30.0013 0x1534  [ 2196049630E2C204A820FCB8660272CA, 3A597B30900E8685DD585E27DBCEEDADDA0F1D1EDE9373D91419CBE633CC789F ] C:\Windows\System32\ProximityCommon.dll
00:27:30.0013 0x1534  C:\Windows\System32\ProximityCommon.dll - ok
00:27:30.0015 0x1534  [ EA34F09317E284350E2747153F617C8A, 7B792AA80FF4B856722E457EF7AA6A184644653DA7341A5D18946AB7ECF83509 ] C:\Windows\System32\ProximityServicePal.dll
00:27:30.0015 0x1534  C:\Windows\System32\ProximityServicePal.dll - ok
00:27:30.0017 0x1534  [ BE72BDB7D9A43BFB9C56347876D94715, D82262DF02789E9C91701E8CF140DC96184309D529D23E96EB78E588A10CF63F ] C:\Windows\System32\ProximityCommonPal.dll
00:27:30.0017 0x1534  C:\Windows\System32\ProximityCommonPal.dll - ok
00:27:30.0018 0x1534  [ 3277E503E6EA72D19CDC16501FD151BA, 0F853E2828A99336AE92DAFE445482823403D0BAD736AC6DF5DFC008ED22AC06 ] C:\Windows\syswow64\windows.storage.dll
00:27:30.0018 0x1534  C:\Windows\syswow64\windows.storage.dll - ok
00:27:30.0020 0x1534  [ 2EA83610F6F342F9924F5FC62A0544F2, 49AF39EA6187D84AC5A6798047B3408F8CA8DD1D8D3DED2E0279384DDD54EAA9 ] C:\Windows\syswow64\kernel.appcore.dll
00:27:30.0020 0x1534  C:\Windows\syswow64\kernel.appcore.dll - ok
00:27:30.0022 0x1534  [ D06C789E5F293F2717F4043BF1ED3467, F38E92C853986A36C48B74935A63D39B3CB90C6821853BD23CAD5BA0FDAABFE4 ] C:\Windows\syswow64\SHCore.dll
00:27:30.0022 0x1534  C:\Windows\syswow64\SHCore.dll - ok
00:27:30.0024 0x1534  [ 8F200EE52E5E38518048402E68F351A7, 21282F37D80839B39686699688474F32A8C6AFAE259F70AB92E4393311548738 ] C:\Windows\syswow64\powrprof.dll
00:27:30.0024 0x1534  C:\Windows\syswow64\powrprof.dll - ok
00:27:30.0026 0x1534  [ 334436793184BE70567D50D55429E812, DC2EFAB625AD0ACE125923AE20B3509981B1C62DE98FFCA98C95DECF5B06DB29 ] C:\Windows\syswow64\profapi.dll
00:27:30.0026 0x1534  C:\Windows\syswow64\profapi.dll - ok
00:27:30.0028 0x1534  [ 54EDCE7E82415A2D57DF163FEF731E06, EBAEF05EDA6321B61888EA8224BF860B4F5096AA5E7E457061995F8C4FCD669B ] C:\Windows\System32\TpmCoreProvisioning.dll
00:27:30.0028 0x1534  C:\Windows\System32\TpmCoreProvisioning.dll - ok
00:27:30.0030 0x1534  [ FA99EAB9FD7156F508883E3B0CC9345E, 3C2CB1DBA1105730CBFC5A32880CA2C48199579EF10C22852783493881332130 ] C:\Windows\System32\TpmTasks.dll
00:27:30.0030 0x1534  C:\Windows\System32\TpmTasks.dll - ok
00:27:30.0032 0x1534  [ 8921ECEC2C7D1B1333D77325C60D3AEA, 67C6B6A92B34D99165B5591D0730322C31E967E599BA44924249BF5AD505C132 ] C:\Windows\System32\winhttp.dll
00:27:30.0032 0x1534  C:\Windows\System32\winhttp.dll - ok
00:27:30.0034 0x1534  [ 5B4651921E32137A95E534AE495C3C19, AA9361BF158588D915216F00807F63CA7AB13764205E1315A32A3EF8ADB24E56 ] C:\Program Files (x86)\Avira\Antivirus\avwinll.dll
00:27:30.0034 0x1534  C:\Program Files (x86)\Avira\Antivirus\avwinll.dll - ok
00:27:30.0036 0x1534  [ E6E64247AB956710E7B5AC8A3D284C85, 524944D00E345802DEF843CF095A2F314FB1082FE21415B95929CD93FD23204D ] C:\Program Files (x86)\Avira\Antivirus\scewxmlw.dll
00:27:30.0036 0x1534  C:\Program Files (x86)\Avira\Antivirus\scewxmlw.dll - ok
00:27:30.0037 0x1534  [ C96EEE4E7D0F79F78A902FBBF0CF9DDC, 19EBBF315048BD321D8F4ABD31180B89CD8F5CC2B9A55BB5C47FBDA8C97F0F1F ] C:\Program Files (x86)\Avira\Antivirus\cfglib.dll
00:27:30.0037 0x1534  C:\Program Files (x86)\Avira\Antivirus\cfglib.dll - ok
00:27:30.0039 0x1534  [ 0E810545D373F3176A0B43BF58890F5F, 5FB1796FA434AE482C6D74E9F01F4C471B7F8A9E0094D2E6B9256ABC48A287ED ] C:\Program Files (x86)\Avira\Antivirus\gpipc.dll
00:27:30.0039 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpipc.dll - ok
00:27:30.0041 0x1534  [ FF1D4D424FA9DF156FD81F5669D75155, E0273767A72B10936053B8AB83611508475312A75B0D7728EAA7F45A713224F2 ] C:\Windows\syswow64\mpr.dll
00:27:30.0041 0x1534  C:\Windows\syswow64\mpr.dll - ok
00:27:30.0042 0x1534  [ B7672CD5AB3ADB146806E21A525FF279, 0B316AE973F4FB133B808ACC897E8E7A1B54C260C2C173FA52B6FF9052E48D85 ] C:\Program Files (x86)\Avira\Antivirus\gpgen.dll
00:27:30.0042 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpgen.dll - ok
00:27:30.0044 0x1534  [ A84F255C5AAEAF15EEA117939D6A38F5, 7BD839DDAEBB8F4A1FE86C021546D70DAC793C235619903FA1377D81961B021E ] C:\Program Files (x86)\Avira\Antivirus\gpschd.dll
00:27:30.0044 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpschd.dll - ok
00:27:30.0046 0x1534  [ 3BA9EEC118DDD58F028A11604E1E1A5D, CE2B55277F88FE6370C7FF26430CE5F6180A655B99DE13662809B3D6D9107039 ] C:\Windows\syswow64\IPHLPAPI.DLL
00:27:30.0046 0x1534  C:\Windows\syswow64\IPHLPAPI.DLL - ok
00:27:30.0048 0x1534  [ 374356DD80B61718B9A3E9BA9DEDD7F1, 031512097F000533C1407A1620D3B65C146C7D0A72DD9CB51A7978205BF7E7FE ] C:\Windows\syswow64\nsi.dll
00:27:30.0048 0x1534  C:\Windows\syswow64\nsi.dll - ok
00:27:30.0049 0x1534  [ 9E209C6B668FD9C867DC41BD55897B4E, FC6D739935BC030109F92AAB5FC92804C71A03D68D7754E076B35F23D9E71199 ] C:\Windows\syswow64\ole32.dll
00:27:30.0049 0x1534  C:\Windows\syswow64\ole32.dll - ok
00:27:30.0051 0x1534  [ 9213CEA8D6CCFAB0B63EC2EC82CB0C79, 193CBADF6E00731C636125BDE2B178D6B8D89D42A4EA9DE9082B4E1B3C76485B ] C:\Windows\syswow64\rasapi32.dll
00:27:30.0051 0x1534  C:\Windows\syswow64\rasapi32.dll - ok
00:27:30.0053 0x1534  [ 6FECC8F36B7EF2559958783A19D3558D, 5530510873E5B9473EB5E760538E3FB6B9CE042A0E8BA9ADDD5155DCF0028439 ] C:\Windows\syswow64\winnsi.dll
00:27:30.0053 0x1534  C:\Windows\syswow64\winnsi.dll - ok
00:27:30.0054 0x1534  [ D8DFEEB3AF6A3A1E71C812B5C3D3A0C9, 7AB28B021DD97109C78298E5413D425F88FE03E5479CF31C916F21757F4C91C4 ] C:\Windows\syswow64\rasman.dll
00:27:30.0054 0x1534  C:\Windows\syswow64\rasman.dll - ok
00:27:30.0056 0x1534  [ 639481170F8E527B8B3E2A4A05A988F9, 1D23A2FEA195AF246E2F397597E38928BEDEDC67D43247E85D3D4065BE993C43 ] C:\Windows\syswow64\version.dll
00:27:30.0056 0x1534  C:\Windows\syswow64\version.dll - ok
00:27:30.0058 0x1534  [ AAAC4B868F5ED70DCB41A2FD651B0AD1, 3FA8027698FD8C1BA1A9D78EEBEC5A2BD1CC47E57D3ED28044F0E72F711AF734 ] C:\Windows\syswow64\wtsapi32.dll
00:27:30.0058 0x1534  C:\Windows\syswow64\wtsapi32.dll - ok
00:27:30.0060 0x1534  [ 2AC2F4227EA41501E7BD2FFA7B3D82F8, 4CB7FF1C759C16733153BF147E4B5CFD61CB8C4EAB071E4655C830C7D35F5215 ] C:\Windows\System32\drivers\hcmon.sys
00:27:30.0060 0x1534  C:\Windows\System32\drivers\hcmon.sys - ok
00:27:30.0061 0x1534  [ 74179E7C103F3A44B33D7D982E21E35D, 7F2384B065EA9959734D65426781D901CDB0DA8DFCAD13BF05044DDF33CA5688 ] C:\Windows\System32\drivers\avnetflt.sys
00:27:30.0061 0x1534  C:\Windows\System32\drivers\avnetflt.sys - ok
00:27:30.0064 0x1534  [ 20BBEDC86615741AC9ACDED5C30A41A8, 6D706C1F23C9D75D97C1D0AF75E01265097B4F35989E6DFFACAA6B1A02747352 ] C:\Windows\System32\drivers\vmx86.sys
00:27:30.0064 0x1534  C:\Windows\System32\drivers\vmx86.sys - ok
00:27:30.0065 0x1534  [ AE8F14295E704D9FD52092B81B3E1F09, FF0AA062D23903A3E3769713AB2F2D4AB307203C9726B9F0783B3E7DDEF08E6D ] C:\Program Files (x86)\Avira\Antivirus\avguard.exe
00:27:30.0065 0x1534  C:\Program Files (x86)\Avira\Antivirus\avguard.exe - ok
00:27:30.0067 0x1534  [ 66D019F462261DF7FC5C0D49CBF9258C, F2D0807514FBD7CA594C00505A73EEA825ED846CD9E182E1FD833A04A0AC4877 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
00:27:30.0067 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe - ok
00:27:30.0070 0x1534  [ 9DC5C5E592A60E1CE73C0D4D9B976775, 52F83DDFC8A5E4CC37CA911FE7B5D8B45FD385F10F6A09137EA6C66FF66CA125 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTNetDetect.dll
00:27:30.0070 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTNetDetect.dll - ok
00:27:30.0072 0x1534  [ FBB16B7FB183480F18E6E445A49CF8F9, E741140CD6579582EA22B5A40E87F807011D08B66B2960FE804F7A7CE6A90E1A ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTRemoteWake.dll
00:27:30.0072 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTRemoteWake.dll - ok
00:27:30.0073 0x1534  [ 7BFF3A1353F5EE50998DBD64C7313F38, 2C8CAAD69AAF3D9D0B165D7A004014CE0215D8312F793882A2394058FC8E8FC3 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\LServ.dll
00:27:30.0073 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\LServ.dll - ok
00:27:30.0075 0x1534  [ 79F51E26EDFD54E57EE238E3942D3691, 52D1A04922A5064BD6A00D25DD6077D51928663843764669B0537B636A09476D ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
00:27:30.0075 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll - ok
00:27:30.0077 0x1534  [ 35DB06AACD8AD5999161DA71FF0E16F0, 22AD27811AAD14666ACEF4115447B0CFAA70D1E73923059FB2A9B4C3CBE500A6 ] C:\Windows\System32\cryptsvc.dll
00:27:30.0077 0x1534  C:\Windows\System32\cryptsvc.dll - ok
00:27:30.0079 0x1534  [ 227F66F3FBBB7B718D1499CDAF7722AD, 661652B64E61FFAFDF4E29B9808BB1DA8B9A62EBB97937FAAEB989C8A4A36DA7 ] C:\Windows\System32\crypttpmeksvc.dll
00:27:30.0079 0x1534  C:\Windows\System32\crypttpmeksvc.dll - ok
00:27:30.0081 0x1534  [ 63C9464B165D31ACC46B6B089AB36B41, DE38DE4E6331D07630B63224F8014C27368C29791EDB58CC5DAE7CBACD37160A ] C:\Windows\System32\das.dll
00:27:30.0081 0x1534  C:\Windows\System32\das.dll - ok
00:27:30.0083 0x1534  [ A616D8297C1BEA690BBC796736A7A78D, 9365470F4609606410AD79D98E1E77D815DC7C5AA924FB639FCF713EE8EDEA76 ] C:\Windows\System32\dps.dll
00:27:30.0083 0x1534  C:\Windows\System32\dps.dll - ok
00:27:30.0085 0x1534  [ 73B5230F03DC7002A70F11EA1B0BAA37, DFE8BBE52B58589686E402ACED51021E298A491F907EBA5689DF9DAFC3002BA5 ] C:\Windows\System32\wbem\WMIsvc.dll
00:27:30.0085 0x1534  C:\Windows\System32\wbem\WMIsvc.dll - ok
00:27:30.0087 0x1534  [ 3DA4E9F884B643CA0CCB6ED3FBC7E90B, CAED33A22C2183E044021A49668328B4D7A4B11B197805B7C8147031751E50B1 ] C:\Windows\System32\wlanapi.dll
00:27:30.0087 0x1534  C:\Windows\System32\wlanapi.dll - ok
00:27:30.0089 0x1534  [ 58395E37ED838B93A56F1D089C2F53CF, 57D167B58DF5B33F7E2A98E1B8B33C8F076D34CA032D22F050AE6F83A48DC8E6 ] C:\Windows\System32\diagtrack.dll
00:27:30.0089 0x1534  C:\Windows\System32\diagtrack.dll - ok
00:27:30.0091 0x1534  [ 91ED6F0EDF4158D63C52194F17D4F42E, ACF543978E253650C167C6C370699AEA7340EBCECF7CAB904CBDD334D1BD6928 ] C:\Windows\System32\drivers\mmcss.sys
00:27:30.0091 0x1534  C:\Windows\System32\drivers\mmcss.sys - ok
00:27:30.0093 0x1534  [ 2E142E027F0AA698BA4DCE49CBDB43CD, A21027BBBC75A55A8B302D028113A0683016E4C72790A8C561DDB1AE7FDB4289 ] C:\Windows\System32\drivers\srvnet.sys
00:27:30.0093 0x1534  C:\Windows\System32\drivers\srvnet.sys - ok
00:27:30.0095 0x1534  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] C:\Program Files (x86)\Skype\Updater\Updater.exe
00:27:30.0095 0x1534  C:\Program Files (x86)\Skype\Updater\Updater.exe - ok
00:27:30.0097 0x1534  [ 24F251C45007A58B086AF6AAE6F340E4, 2712DE7A22B4E9D82A9C500A56E16F8FC915EC0E8775926113300CEBDD5D0DA4 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTENSData.dll
00:27:30.0097 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTENSData.dll - ok
00:27:30.0100 0x1534  [ 9A5944952B122BBF68D0032EF440CFB5, D4046BA3F985A7F95F1A4A55B6F2976E292C861771CAC80CEC6DE4C82E8FDBB0 ] C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
00:27:30.0100 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe - ok
00:27:30.0102 0x1534  [ 7C206DFF0524A54620F6A48B1EA03C68, 6ECE0C7CDBB4D2CDF6B7360EADA75EB4DDFB674067B360B9A0D2B52E93C13175 ] C:\Windows\System32\cryptcatsvc.dll
00:27:30.0102 0x1534  C:\Windows\System32\cryptcatsvc.dll - ok
00:27:30.0104 0x1534  [ 185932B1149BD707F8A13174CDAB365B, BC26CB10DD6E81A94477564444E91F76D47E685E897BD77B9C1393F0D31AB718 ] C:\Windows\System32\drivers\mrxsmb10.sys
00:27:30.0104 0x1534  C:\Windows\System32\drivers\mrxsmb10.sys - ok
00:27:30.0106 0x1534  [ F1B7CC77F412C8D45B2DDCF76EDA4F9D, 25F2AA76E675D9BCC0B1FD47AFEC6DF2D0B47E7B1C8AF6FB27C1ED2FB902961A ] C:\Windows\System32\drivers\Ndu.sys
00:27:30.0106 0x1534  C:\Windows\System32\drivers\Ndu.sys - ok
00:27:30.0108 0x1534  [ EA1C2DAB8A63712B94897A58557B086C, 98DD7E5C84F3CDF2DAA89484892D6B439F5D14297B5243436925BEEAA0C02EE1 ] C:\Windows\System32\nlasvc.dll
00:27:30.0108 0x1534  C:\Windows\System32\nlasvc.dll - ok
00:27:30.0110 0x1534  [ A09B0D8F9F0FC17EBCE6481AC9FD5CDF, 8E8D68992D98CF3DBC4B70C7902B3EC28A1E2DA8D4DB38F0AD9D52B1A5A1D40F ] C:\Windows\System32\pcasvc.dll
00:27:30.0110 0x1534  C:\Windows\System32\pcasvc.dll - ok
00:27:30.0112 0x1534  [ B39D7C3F6699772BF13949455C23FE8F, 0AFF9CB6689637EFB899AECD4BDCF815A937C783EAFF9E96BD78EC9E3753BBDB ] C:\Windows\System32\rasadhlp.dll
00:27:30.0112 0x1534  C:\Windows\System32\rasadhlp.dll - ok
00:27:30.0114 0x1534  [ 9E0442D3880438D006D95C6F63C27274, DB1ED2BCF9986495EFA8A0B3B0156119F2E4F77AE9BDC6377ADF3A6B53C658F6 ] C:\Windows\System32\wdi.dll
00:27:30.0114 0x1534  C:\Windows\System32\wdi.dll - ok
00:27:30.0116 0x1534  [ D4BD839E6C8E09B964B61CC640A4F37F, 4FC645AE21445EA4F4F66525F0C933C5907B0BECFABA041CF505DB1911A4426A ] C:\Windows\syswow64\wintrust.dll
00:27:30.0116 0x1534  C:\Windows\syswow64\wintrust.dll - ok
00:27:30.0118 0x1534  [ 5DB2C6B908C50767E2EDAA294A7566B5, 13AE4879D679BB0C6B2A5A5B13910359815A9D2E569BC1DE740B5A387A78CF33 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
00:27:30.0118 0x1534  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - ok
00:27:30.0120 0x1534  [ FFE8934D77ED5DCCBB5788C01A91EA32, D6EE350C80D84C1F8746F9322CC15FB9729176C72E4967C062AED465F3E656B6 ] C:\Windows\System32\cabinet.dll
00:27:30.0120 0x1534  C:\Windows\System32\cabinet.dll - ok
00:27:30.0122 0x1534  [ E86F732844BC4CD9DDF158C4F1D0036F, 9FB20F402DEA80A2D683AD0CA8A67938C19A55A7C8FAA4509E1C663EA5FB154E ] C:\Windows\syswow64\oleaut32.dll
00:27:30.0122 0x1534  C:\Windows\syswow64\oleaut32.dll - ok
00:27:30.0124 0x1534  [ 02EE94D34213C4DB4AE59B664EC1EDFC, EC8F37CD714F2D36E4AC97DD6BD5EB6CBF2B133AD3D83E777B34FEC7B098971A ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTplatformCheck.dll
00:27:30.0124 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTplatformCheck.dll - ok
00:27:30.0127 0x1534  [ 1DF458F3C5DD1888271AFF903DC6D8F2, 029A75A3BC3424ECA81BDCAA4129EA8D08B2F0FB488DDB374C312EA7CF951EA4 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTSoftwareUpdate.dll
00:27:30.0127 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTSoftwareUpdate.dll - ok
00:27:30.0129 0x1534  [ 7C3B449F661D99A9B1033A14033D2987, AE996EDB9B050677C4F82D56092EFDC75F0ADDC97A14E2C46753E2DB3F6BD732 ] C:\Windows\System32\msvcr110.dll
00:27:30.0129 0x1534  C:\Windows\System32\msvcr110.dll - ok
00:27:30.0131 0x1534  [ F47D684A373E5D876C679229B0075FEE, E549A0E5546676744B1C846D1B4044D116AFF6C88FEE092149223BC7D1179234 ] C:\Windows\System32\dasHost.exe
00:27:30.0131 0x1534  C:\Windows\System32\dasHost.exe - ok
00:27:30.0133 0x1534  [ 7CAA1B97A3311EB5A695E3C9028616E7, 27F394AE01D12F851F1DEE3632DEE3C5AFA1D267F7A96321D35FD43105B035AD ] C:\Windows\System32\msvcp110.dll
00:27:30.0133 0x1534  C:\Windows\System32\msvcp110.dll - ok
00:27:30.0135 0x1534  [ 65BAD5458DC377DFBAE0DA937B642C36, E87DB867A16671CB184F726CC32EFCB6EEAC907EE97C0F4EF8BE4D13423B7302 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
00:27:30.0135 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll - ok
00:27:30.0137 0x1534  [ D94ADCB4B9C184B6584A87618A89DBE8, 0B68FB6672C4F738EC2AD43A8F1F5990D66816A935AD3E2C1DCF8D6966DB5002 ] C:\Windows\syswow64\msasn1.dll
00:27:30.0137 0x1534  C:\Windows\syswow64\msasn1.dll - ok
00:27:30.0139 0x1534  [ 7DEE45DFB4E239F554886F139EAB55B0, 60B589AC7ADF60022E447AB30CA02C5BE8CE4DAF7EE534EF9F83A9563145D0B1 ] C:\Windows\syswow64\crypt32.dll
00:27:30.0139 0x1534  C:\Windows\syswow64\crypt32.dll - ok
00:27:30.0141 0x1534  [ ED650566DE6F2D35FA4FAE0573AD3839, 4DBF5092A028FB46814EE8F6979DE4CEAE265A960BEB361556EC27767B1093C6 ] C:\Windows\System32\wbemcomn.dll
00:27:30.0141 0x1534  C:\Windows\System32\wbemcomn.dll - ok
00:27:30.0143 0x1534  [ 16099F67595E2DF67CF08EB72AE94FDC, DCE2209C0F46B057C90EF5D73DEDC355862D983877285BB672AF35F77769A025 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTRWHelper.dll
00:27:30.0143 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTRWHelper.dll - ok
00:27:30.0145 0x1534  [ E5D86250453B33900666D92ED1A92ABE, D5975C11DBB409BCFDB8FF96B9415B0B827286BBAE7D5C8B6B122A02355CACA2 ] C:\Windows\System32\wininet.dll
00:27:30.0145 0x1534  C:\Windows\System32\wininet.dll - ok
00:27:30.0147 0x1534  [ 656AA12C24202652393DE041395F7224, DED48D4E87487A9FF85C2B5C84F09FB455B260E1280E1522CA4E9E9D58C7C9D9 ] C:\Windows\syswow64\psapi.dll
00:27:30.0147 0x1534  C:\Windows\syswow64\psapi.dll - ok
00:27:30.0149 0x1534  [ 1769C5BEB63605FD26AF8C3C74134D32, 95C4D7006AD43CE3BFA949F0C04B097DE2D218313744228E17FF62958DFAFB94 ] C:\Windows\syswow64\userenv.dll
00:27:30.0149 0x1534  C:\Windows\syswow64\userenv.dll - ok
00:27:30.0151 0x1534  [ 447A6DC092E47AE7A6888D3F764D7DB0, 2F0185548B9C3C132248B0C9A9DB75B8AFAC517573233B76DFD459D2662EE171 ] C:\Windows\System32\winspool.drv
00:27:30.0151 0x1534  C:\Windows\System32\winspool.drv - ok
00:27:30.0153 0x1534  [ B9FC9E9B55C74557FEC004BF8B1184F4, 687FB03B4A9A5DC1B807F1EDF8ECD623424EB7CAEC962F2E22E7A831B36561F0 ] C:\Windows\System32\ncsi.dll
00:27:30.0153 0x1534  C:\Windows\System32\ncsi.dll - ok
00:27:30.0155 0x1534  [ 9CB4AD31F8A1CCE01F458BEBFFFAB378, 619EEE2C9FF3EE8FDACF82985D1B5B59F1D22E1BE155EA523F3EB2D545BD5CAC ] C:\Windows\System32\vssapi.dll
00:27:30.0155 0x1534  C:\Windows\System32\vssapi.dll - ok
00:27:30.0157 0x1534  [ 0D19026AB5812D3A7B9DBB386F8334D8, 3FF22476D621ECFC2C80EF63D1A90C45F672CE299DC92A874E049779EF96AB4A ] C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
00:27:30.0157 0x1534  C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe - ok
00:27:30.0159 0x1534  [ D89DD60F108E6E5944029EF68E0438ED, 6C0A3B2FA43D4327C7E34C7BDA3BF29046F2D9FEE27A55878336B137B4CA80D3 ] C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
00:27:30.0159 0x1534  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe - ok
00:27:30.0162 0x1534  [ 892B915D0504D76570CE991D202F152C, BB699D4A6FFED6C1DE1AF989C9146BC593AB0AFC92B36022594F13BA0FEB2EC1 ] C:\Windows\System32\vsstrace.dll
00:27:30.0162 0x1534  C:\Windows\System32\vsstrace.dll - ok
00:27:30.0164 0x1534  [ 6BFE4EFB7DA0C798BF14759B75F44346, BCC09C321D72F68DD8A1AD96FF61ADBB3E2F9EF19020BA0F607C1789DE14D08F ] C:\Windows\System32\ssdpapi.dll
00:27:30.0164 0x1534  C:\Windows\System32\ssdpapi.dll - ok
00:27:30.0166 0x1534  [ 8CF70097AD4A69217F5D63F508E4B3A3, DD6D7010AE9316A5514D92D71F9D7855A8F25306164BF2EA5990EF6CCBEC95A9 ] C:\Windows\syswow64\setupapi.dll
00:27:30.0166 0x1534  C:\Windows\syswow64\setupapi.dll - ok
00:27:30.0168 0x1534  [ BDF92F91FFC5ADFB42D1FD746B361C34, B7DD17472971B295824F4EEADD81E630895438727E0F03B8D7EBB89FE6716DFF ] C:\Windows\System32\OnDemandConnRouteHelper.dll
00:27:30.0168 0x1534  C:\Windows\System32\OnDemandConnRouteHelper.dll - ok
00:27:30.0170 0x1534  [ 22D7854A1202068E6B22FCF9B3CCB9E9, 3B748B880F4A4BA4EA3260BDAE6330B48E469E1CFCBEBD91110CF049DADD0B9C ] C:\Windows\System32\webio.dll
00:27:30.0170 0x1534  C:\Windows\System32\webio.dll - ok
00:27:30.0172 0x1534  [ F49788A51B1DD2318DA78BCC1CEFB5CF, DE89D308D31C6558D426A0CCA62D4CFE613D1D64CBB75BE84FC6DAC6BB3BC563 ] C:\Windows\syswow64\cfgmgr32.dll
00:27:30.0172 0x1534  C:\Windows\syswow64\cfgmgr32.dll - ok
00:27:30.0173 0x1534  [ 0D3B386A91768C6D4A600C68F91396D5, C5A818AAB6523E3E929F50A6B50509CF9B2346311D7E7D6956F0A50F364BDAFB ] C:\Windows\syswow64\winhttp.dll
00:27:30.0173 0x1534  C:\Windows\syswow64\winhttp.dll - ok
00:27:30.0175 0x1534  [ 13297729C696656F990A5DBA53023129, EB2B34B04B79756199DBBBDE99ACBB576D20C7C0AF3E4F3C0CF0040948216AAC ] C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
00:27:30.0175 0x1534  C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe - ok
00:27:30.0177 0x1534  [ 69B076C9D3B75647EE1807E168F20F78, 7A5AFF898E60910A853DE48758CFC0DA91FB0EE60D4BF436EDB70990DC9674D8 ] C:\Windows\System32\DWrite.dll
00:27:30.0177 0x1534  C:\Windows\System32\DWrite.dll - ok
00:27:30.0179 0x1534  [ 235FD3F3610610AEC496810A37317A7F, 6DFD99AFC77B4F13605FE4AC937C1199448460C1B41AD60E4F8376BB500779AB ] C:\Windows\System32\Windows.Globalization.dll
00:27:30.0179 0x1534  C:\Windows\System32\Windows.Globalization.dll - ok
00:27:30.0182 0x1534  [ E0B357E48BA33813AD53B3D49567505F, C342B7C72D168BE660E357DFCB7E2C58580ABCA9356922C4DD3FC52D14D8E1BA ] C:\Windows\System32\fontgroupsoverride.dll
00:27:30.0182 0x1534  C:\Windows\System32\fontgroupsoverride.dll - ok
00:27:30.0184 0x1534  [ 2DB63E90E8355F269381AEE8FEF3813D, 7445525AE5A01A0F5C497BBA303187C144C0083E0219A61B9A534A074B4CA3CB ] C:\Windows\System32\Windows.Globalization.Fontgroups.dll
00:27:30.0184 0x1534  C:\Windows\System32\Windows.Globalization.Fontgroups.dll - ok
00:27:30.0185 0x1534  [ D4E92C0C0F9C5054B03D67A3C0B41961, E6ED772060CD208E78AE24EF8B0DD9581861797BFB7DD99E45473BAAAA45E2BA ] C:\Windows\System32\directmanipulation.dll
00:27:30.0185 0x1534  C:\Windows\System32\directmanipulation.dll - ok
00:27:30.0187 0x1534  [ B3CD8B2CBC6E48B194116B28F72CDA67, 94F2641FD7EE44E4412C94D3811BB41C8907A3994055B5DB082807C1A8703584 ] C:\Windows\System32\CredProvDataModel.dll
00:27:30.0187 0x1534  C:\Windows\System32\CredProvDataModel.dll - ok
00:27:30.0189 0x1534  [ F5B169EDF9D5E3C7200D89D30E065D13, 12BAF3A3CB76F0900FA53681C9AD16F40308F493BA22C0F60E1E268D0D6AF825 ] C:\Windows\System32\drivers\srv2.sys
00:27:30.0189 0x1534  C:\Windows\System32\drivers\srv2.sys - ok
00:27:30.0191 0x1534  [ C529DA0AD5A21878E318801B024AF8E7, A14E8ADCA33C37B1D256CB4926A19F56D2D19B94EDF314A4ED34A8B5AB62CA5A ] C:\Windows\System32\srvsvc.dll
00:27:30.0191 0x1534  C:\Windows\System32\srvsvc.dll - ok
00:27:30.0193 0x1534  [ AA1F23501511EFE9CF9771F6B20E8D45, E786852D9877CCFD35444F8FC694467132F868D87A8C344FD1016FFDE74695A5 ] C:\Windows\System32\drivers\srv.sys
00:27:30.0193 0x1534  C:\Windows\System32\drivers\srv.sys - ok
00:27:30.0195 0x1534  [ 67C206469E033F58D542F51203FFB12A, 56FA2DFF6DAB959AEEE9C05DD4DEA4673234AAA4A0243659A9B4010E535CAFF7 ] C:\Windows\System32\perftrack.dll
00:27:30.0195 0x1534  C:\Windows\System32\perftrack.dll - ok
00:27:30.0197 0x1534  [ A754BD1A1A3F74C1EE8CB52216750AB5, CB38C8DE1FF2F5A79757A2FF27A2D65F0EBC2D9517219E085D3573A8A8ED2E89 ] C:\Windows\syswow64\clbcatq.dll
00:27:30.0197 0x1534  C:\Windows\syswow64\clbcatq.dll - ok
00:27:30.0199 0x1534  [ 688F47C342E1BBC87A48AB71D316233E, CE99AB67C7E7A11AC69C2F4513AEBDACA385BA7F8CC49BE6313CE04ED404A0E7 ] C:\Windows\System32\drivers\PEAuth.sys
00:27:30.0199 0x1534  C:\Windows\System32\drivers\PEAuth.sys - ok
00:27:30.0201 0x1534  [ CD52F26BD7CDD798265D697CBE23A511, C3BD6CE0D758F103B828246C18217B6A73C3F7620D230FD449276E7FE1E76884 ] C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
00:27:30.0201 0x1534  C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe - ok
00:27:30.0203 0x1534  [ D378A1AF58AFA84BB6AC753F2C1BE9F4, 8BBA623193D51E6A8DD0627FA08C93B918EF1BA2EEBA46CDBB86FE6A1007FDEE ] C:\Windows\System32\drivers\tcpipreg.sys
00:27:30.0203 0x1534  C:\Windows\System32\drivers\tcpipreg.sys - ok
00:27:30.0205 0x1534  [ FC13DEAE57DE3230B609AAEFF8AFF588, B0A5D662856B8A401DEC95E746717E1EE2C0AB9C532FC4A1038A0501C30CECEC ] C:\Windows\System32\drivers\vmnetuserif.sys
00:27:30.0205 0x1534  C:\Windows\System32\drivers\vmnetuserif.sys - ok
00:27:30.0207 0x1534  [ 8FBA61B7CB44F136226BE3B346FC6D19, 2190A523AC948B18C2C7B6DC96ABB654DAB471AD5E5E13F79899416E91777AED ] C:\Windows\System32\iphlpsvc.dll
00:27:30.0207 0x1534  C:\Windows\System32\iphlpsvc.dll - ok
00:27:30.0209 0x1534  [ D5B31B2F14848015C211F1D674A82F3A, 58C18254C817693DB727090D1CC518032B3A67C5B3FC7F2F8CE4613A33790CFA ] C:\Windows\System32\sysmain.dll
00:27:30.0209 0x1534  C:\Windows\System32\sysmain.dll - ok
00:27:30.0211 0x1534  [ 8D23F0819A00C547814409B734DD3747, 0E1B25A53C84486F8A57F309F3C016114F90F5AF5E576889BD230931F38594A5 ] C:\Windows\System32\tileobjserver.dll
00:27:30.0211 0x1534  C:\Windows\System32\tileobjserver.dll - ok
00:27:30.0213 0x1534  [ 60F04DF1AB55D6D4BDA02052DD20537E, 52996EDF2C06968DADC9BDF24E4039929B81643493C7193B8CC4A6BD1A3AE761 ] C:\Windows\System32\wiaservc.dll
00:27:30.0213 0x1534  C:\Windows\System32\wiaservc.dll - ok
00:27:30.0215 0x1534  [ 9EDC7EDC7019837254B6B9DC48DA4EB1, 64E55EB92C806C89E7042287DC368BA6DF2A7AFAB806188BC1873898BAD549F9 ] C:\Windows\syswow64\bcrypt.dll
00:27:30.0215 0x1534  C:\Windows\syswow64\bcrypt.dll - ok
00:27:30.0217 0x1534  [ F682061CF70D608B56D50CD25A1D7EA0, F3DEE15B460A41306C0EBF219E9C820FA5C97BAA6581FD4A752E209043BFA561 ] C:\Windows\syswow64\cryptsp.dll
00:27:30.0217 0x1534  C:\Windows\syswow64\cryptsp.dll - ok
00:27:30.0219 0x1534  [ B39A4766DE09F1E651D68A72A885A493, 347AB85A63790156941ACACB1D85E1137E6A98679D11377F346DD088D80DEC93 ] C:\Windows\syswow64\rsaenh.dll
00:27:30.0219 0x1534  C:\Windows\syswow64\rsaenh.dll - ok
00:27:30.0221 0x1534  [ 663DFD8F26176CD05CABBEFDA94AECEA, 7F92D3D3D275BD048EC0639D4D8478224E6FA33A91AF85508B2513E7D7610FF4 ] C:\Windows\System32\rtutils.dll
00:27:30.0221 0x1534  C:\Windows\System32\rtutils.dll - ok
00:27:30.0223 0x1534  [ 765865579884E3FA34690F61C85D01BD, 2E93FFA4E1A882D086068035D58E10B096A267EDA86109D29C7061E49DAF8450 ] C:\Windows\System32\sqmapi.dll
00:27:30.0223 0x1534  C:\Windows\System32\sqmapi.dll - ok
00:27:30.0225 0x1534  [ 2D0338A3009075FCCB119CB7F3280F82, F42F3B8DA0F8B2C99892E66CDEF471A1CD30A30CF437ADFF464A2C786A6B87A6 ] C:\Windows\System32\trkwks.dll
00:27:30.0225 0x1534  C:\Windows\System32\trkwks.dll - ok
00:27:30.0227 0x1534  [ 06D5F56B51C82CD1072E53BCECB7E5DD, 1ECB8339FB7E79D57A352C75D757770EE43DCBD11B1060BF14DB78A722EBA05C ] C:\Windows\System32\httpprxm.dll
00:27:30.0227 0x1534  C:\Windows\System32\httpprxm.dll - ok
00:27:30.0228 0x1534  [ 752231F46F5E529A4C8730A2E9F4A30E, B16D4E9C374102B2A9C77876D344E21954915D970E813CF982EEE50F4CE0A3A4 ] C:\Windows\System32\sscore.dll
00:27:30.0228 0x1534  C:\Windows\System32\sscore.dll - ok
00:27:30.0230 0x1534  [ 6A6B44BB0F6503F78A5DB64D37AA33AF, F7850A902B71021BFF0B85E2548AB5F18AAF295463CF9FD60BC4D021DCA37952 ] C:\Windows\System32\sscoreext.dll
00:27:30.0230 0x1534  C:\Windows\System32\sscoreext.dll - ok
00:27:30.0232 0x1534  [ A8DA79AC1C7636ED3ABFF035322F2036, 6F05153AB90EC1647D783EF3A7FE7D4F285F4031BDA16019488A9D9EBB45D9BD ] C:\Windows\System32\mi.dll
00:27:30.0232 0x1534  C:\Windows\System32\mi.dll - ok
00:27:30.0234 0x1534  [ 030A7C1444B52D7A2BF63E96E2CE5A9F, A7D65710F3B31CEF49E65779BAE586AE9CA727B66AF974D749C9D66570492A6A ] C:\Windows\System32\miutils.dll
00:27:30.0234 0x1534  C:\Windows\System32\miutils.dll - ok
00:27:30.0236 0x1534  [ F6E596DCE75F3617F745838EA5A85F02, A1B18C29F6AD834CA76CB8A0CAEC60FFFB26A4E30CFFB53A152A10B24348301D ] C:\Windows\System32\wiatrace.dll
00:27:30.0236 0x1534  C:\Windows\System32\wiatrace.dll - ok
00:27:30.0238 0x1534  [ 63881B62728723EE3C12CA2D312F3966, F9A4270DFAF50564046D8EAB7E9AF9A149BA1C7EB2CB15F5790004CFDFB1A97F ] C:\Windows\System32\adhsvc.dll
00:27:30.0238 0x1534  C:\Windows\System32\adhsvc.dll - ok
00:27:30.0240 0x1534  [ D9FA6F89C193D2D8CB8066A72858182E, FD6EAF2F1115CDCAD700E724F0B7D027EE128FBB18D34D099C61F7E8A6C8B89A ] C:\Windows\System32\wmidcom.dll
00:27:30.0240 0x1534  C:\Windows\System32\wmidcom.dll - ok
00:27:30.0242 0x1534  [ 3EB5E06C279317F7C2D0E1247F5571CC, 9AC7430CEE849FA34B87D4B80FA5EC97522C541099387E45E92F44312ACEE228 ] C:\Windows\System32\wsdchngr.dll
00:27:30.0242 0x1534  C:\Windows\System32\wsdchngr.dll - ok
00:27:30.0244 0x1534  [ F90F21A8DFDD000C6B3B600956406C10, 29027C3612FF1E1099D63DDE85E715BF734DC13E3B308B5A1022F62D70BBDF00 ] C:\Windows\System32\deviceassociation.dll
00:27:30.0244 0x1534  C:\Windows\System32\deviceassociation.dll - ok
00:27:30.0246 0x1534  [ 9893111B27B906ADB596EED84A505177, DFC0DFECFB179390A7D19CCEF78D1E3A34AE6ACA959ADCCFCBB0717742BDD4C2 ] C:\Windows\System32\esent.dll
00:27:30.0246 0x1534  C:\Windows\System32\esent.dll - ok
00:27:30.0248 0x1534  [ A33640115ACC79E401E8ABD3F08A2FB6, 095321F8A900F2A502F5279A01AC7DA2C7D46AACFC0CB2A449E8FB44AEC7A29F ] C:\Windows\System32\resutils.dll
00:27:30.0248 0x1534  C:\Windows\System32\resutils.dll - ok
00:27:30.0250 0x1534  [ 41529E49F3A2218E9F689F6814114BF6, 97ABB289F298C4A25A7E3AC0BBFB4B7D05CF097D1FAE113C3017ED43C998C50A ] C:\Windows\System32\urlmon.dll
00:27:30.0250 0x1534  C:\Windows\System32\urlmon.dll - ok
00:27:30.0252 0x1534  [ DE2AE8E5A2D99E365B7361FCF3097422, 293D29A24E2678AB353E70C23A7849C6ED67F724336EAA0EEA304A426E11F261 ] C:\Windows\System32\fundisc.dll
00:27:30.0252 0x1534  C:\Windows\System32\fundisc.dll - ok
00:27:30.0254 0x1534  [ 4D373223D6A174812967290C8C2E2A8B, B74F189D0E8225AB1E27F652247F46623897C50FCC549C720E7807A447A451B0 ] C:\Windows\System32\fdPnp.dll
00:27:30.0254 0x1534  C:\Windows\System32\fdPnp.dll - ok
00:27:30.0256 0x1534  [ 81D0F7BC8CEB8174165B439BC88E7185, E421FAA339F29F702E946CF3F0B995DADF58B5E711D2998E4853108035C8A6F1 ] C:\Windows\syswow64\wbem\wbemprox.dll
00:27:30.0256 0x1534  C:\Windows\syswow64\wbem\wbemprox.dll - ok
00:27:30.0258 0x1534  [ C8F00509B3880DDEDC7944472AC9D5B8, 5AA0D4495BE053192D6CDB3F1B1E64EE2E983828C934F965C0DBCAB4708F582F ] C:\Windows\syswow64\ws2_32.dll
00:27:30.0258 0x1534  C:\Windows\syswow64\ws2_32.dll - ok
00:27:30.0259 0x1534  [ D02F24C3BDDB0055E8231132633E9AB1, BA8C4807D8C39796B37A1054B351D5C7C93E4343B7ABD051C9F114CED37E412E ] C:\Windows\syswow64\wbemcomn.dll
00:27:30.0259 0x1534  C:\Windows\syswow64\wbemcomn.dll - ok
00:27:30.0261 0x1534  [ 6C4B9A2FF6924405E9ABFB558049D4DD, 9AB314B9ECF41832589726556A93CEAAE2AE774B1738A46A027E833B73A72118 ] C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
00:27:30.0261 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe - ok
00:27:30.0263 0x1534  [ E1ED437A4438E268760220838FFB453E, C69F8F59420270FD9E42140627A32CB2D13EE379CF6AB5A6715868D782B3BD15 ] C:\Windows\syswow64\mscoree.dll
00:27:30.0263 0x1534  C:\Windows\syswow64\mscoree.dll - ok
00:27:30.0265 0x1534  [ 8798B6D11A9CBB01A70F0644C07DED59, 8FCBE81CDF1D791D480C180C386019DCF916FF3AC77AFC11D01AAB581593C4DD ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
00:27:30.0265 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok
00:27:30.0267 0x1534  [ A9C603F760EE0FB98C9C9E02F084278D, 3ED945666A1643522C9B984F10C6D772C148DB9E6072D6BB3985BEDFE74D5389 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
00:27:30.0267 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - ok
00:27:30.0269 0x1534  [ 7533B702A4C2C6F346016A7EE52DF8C9, 0DB9CCD15EB7986274BD2DB9F2CFF4D60F925F1263C35F21D2D34A166EDA0B92 ] C:\Windows\System32\msimg32.dll
00:27:30.0269 0x1534  C:\Windows\System32\msimg32.dll - ok
00:27:30.0271 0x1534  [ 21384D4ECD57CD0049045B8077A372DB, D9F218546D145D3AA494D200A64B366BB34EE63C8DB447BF6C6C5706C8824759 ] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9158_none_5091b51ebcb97cdc\msvcr90.dll
00:27:30.0271 0x1534  C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9158_none_5091b51ebcb97cdc\msvcr90.dll - ok
00:27:30.0273 0x1534  [ 856DA04454A75CF6E7453D53CD90A29D, 4D72275D0CA35086400FD14A1F12A2F3E7D91E88957037B27D5BB8D21531A36A ] C:\Windows\syswow64\msvcr120_clr0400.dll
00:27:30.0273 0x1534  C:\Windows\syswow64\msvcr120_clr0400.dll - ok
00:27:30.0275 0x1534  [ 492F3ED866921E09F3965A282A8B753C, 4DE1BBF620407219991740330CBFFA7A00E8A0C2F1602AFEE8BCB2C6B8E10FC1 ] C:\Program Files (x86)\VMware\VMware Player\vmwarebase.dll
00:27:30.0275 0x1534  C:\Program Files (x86)\VMware\VMware Player\vmwarebase.dll - ok
00:27:30.0277 0x1534  [ 6B78D51636EBEFF42D377A24924633A5, 3370A15211EB78C1D07E2A5E3F1F4FAD9492F262A0CBE45DBCF94560F920C9FD ] C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\68b0897c4cade2a6a72889bff2bd0904\mscorlib.ni.dll
00:27:30.0277 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\68b0897c4cade2a6a72889bff2bd0904\mscorlib.ni.dll - ok
00:27:30.0279 0x1534  [ 695EF064427ABA6D6DDC1BF2259462EA, E4C40D5C5AFC791159A4CA454BBE6611E0B67C56C3D0C7A886FC1171DF98C1E8 ] C:\Windows\syswow64\Wldap32.dll
00:27:30.0279 0x1534  C:\Windows\syswow64\Wldap32.dll - ok
00:27:30.0281 0x1534  [ 58E0EA8C0A8FBDD34C6F41135208D3DF, 030E722721453432C6B70588235D9AC0A4DC2D5595A53EA842097DC5C459141E ] C:\Windows\syswow64\cryptui.dll
00:27:30.0281 0x1534  C:\Windows\syswow64\cryptui.dll - ok
00:27:30.0283 0x1534  [ C5D4053D3C13F4DBCDA47D0465DF40DA, 9E25458B97A902B61C290E49A10975A22A33A1F93FC8A4D1BCCD38A1B776EBD4 ] C:\Windows\syswow64\winmm.dll
00:27:30.0283 0x1534  C:\Windows\syswow64\winmm.dll - ok
00:27:30.0285 0x1534  [ B1D3D7876F0C3136EF4485A2213D2ABF, 3697209BAD9B05CE628091DC4AF097323F9F19C370D71B3C850E3973CF4B4F20 ] C:\Windows\syswow64\winspool.drv
00:27:30.0285 0x1534  C:\Windows\syswow64\winspool.drv - ok
00:27:30.0287 0x1534  [ 9705B9889630EEBA746982921889A8E8, 627C243EDFBF9456C2585A0B9561FAD9C879CA066D730A22677747EC9C5DC6B1 ] C:\Windows\syswow64\devobj.dll
00:27:30.0287 0x1534  C:\Windows\syswow64\devobj.dll - ok
00:27:30.0289 0x1534  [ 064A1209E2815F821E0735A808EAB784, 9C04F55D606573322313D3F7685DAB7AA2052008FD0B6287AA9BCD104B833EF6 ] C:\Windows\syswow64\winmmbase.dll
00:27:30.0289 0x1534  C:\Windows\syswow64\winmmbase.dll - ok
00:27:30.0291 0x1534  [ 281F1BFFCA1A7B47B2C0359B0A7CF00D, F6E402936288487FF507AA13969C690BA3BBA93F568533A58EF9E3C9732A532D ] C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
00:27:30.0291 0x1534  C:\Program Files (x86)\VMware\VMware Player\libxml2.dll - ok
00:27:30.0293 0x1534  [ 73FC0143E518D8DB7AFE9675F4AF8063, 236E79E3208ECE717925583F248B5C78D02FA2E9B13F6611F0A259008D9BC236 ] C:\Windows\syswow64\wininet.dll
00:27:30.0293 0x1534  C:\Windows\syswow64\wininet.dll - ok
00:27:30.0295 0x1534  [ BBC14ACC34DBDBEE26C5B37FE57873BB, C81F7C248BB25A121F98722D7DA5AE5695A2DE3595D4FD90050A188701D5120B ] C:\Windows\syswow64\wsock32.dll
00:27:30.0295 0x1534  C:\Windows\syswow64\wsock32.dll - ok
00:27:30.0297 0x1534  [ E7C779E2210A89EE4F05A5F352F5D6E1, 474E11036CA2A5876C9B86502353F08525DE88DC163E8344DA1BA140837BFD02 ] C:\Program Files (x86)\VMware\VMware Player\iconv.dll
00:27:30.0297 0x1534  C:\Program Files (x86)\VMware\VMware Player\iconv.dll - ok
00:27:30.0299 0x1534  [ CFFE537A11AE6C825F36240B96689886, 30923D3EC3D6443B7A5DE785581388DE5807BBEA64FDAD50BE39D5A0950F35F4 ] C:\Windows\System32\ReAgent.dll
00:27:30.0299 0x1534  C:\Windows\System32\ReAgent.dll - ok
00:27:30.0301 0x1534  [ 15044A5910E532DBA4D24A46FC6960A8, 80D47C2E7AE6DE2CED85A8426CF82FFD61C8D22A7A42BFC380855F9A3A9731EF ] C:\Windows\syswow64\urlmon.dll
00:27:30.0301 0x1534  C:\Windows\syswow64\urlmon.dll - ok
00:27:30.0303 0x1534  [ ADD1EE5AF3540FD1A6E21984D16CB49F, 98F4830B7E3FD72ECD4131193FAE5DC7E6D018302F60331B50349400180A947F ] C:\Program Files (x86)\Avira\Antivirus\gpgrd.dll
00:27:30.0303 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpgrd.dll - ok
00:27:30.0305 0x1534  [ B7D3AD6D2F2128DE45EE4E0E8EAEACCC, 9B26E82BA97EF5CD3BE1CA22E481CBADB4ED6ACDF748D1F082239F34607019C6 ] C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
00:27:30.0305 0x1534  C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe - ok
00:27:30.0307 0x1534  [ 64A8573F80949FFA9E4EBCA8FB5A57EC, 446BA97DF63C0832B20A28C1FEFF3A8AA9B047AEB556A130A61AEB4DB4BB4799 ] C:\Windows\syswow64\iertutil.dll
00:27:30.0307 0x1534  C:\Windows\syswow64\iertutil.dll - ok
00:27:30.0308 0x1534  [ 4EE5EED360A55A4EB3259F151869CD64, CF528DB930DFC1B81657513076962F50577C24D642120408BE1E5148CC086A67 ] C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9158_none_08e47e47a83d53d6\msvcr90.dll
00:27:30.0308 0x1534  C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9158_none_08e47e47a83d53d6\msvcr90.dll - ok
00:27:30.0310 0x1534  [ 4A397F9682CB205EA7D5F58330B34F98, 2CFDD5632E6AC943C5AAFC397F814B3FBFEB5360DCF923FDC11B3CA39DB9ACAA ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
00:27:30.0310 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll - ok
00:27:30.0312 0x1534  [ 85409BF46EB6C8D4D2F19EDCAF08E609, 964C19F37E2A9105D6F7A07EF5873EED3B56CA3209C5F85FF943485D0F04B64A ] C:\Windows\System32\wbem\wbemprox.dll
00:27:30.0312 0x1534  C:\Windows\System32\wbem\wbemprox.dll - ok
00:27:30.0315 0x1534  [ 1FAE538DF1FDF7E0D8EF9632E62265D5, 62C1C0AC422A0CEF89F3D0BD2973A27238A6DEF9CD596756A9BC825171864413 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System\33c22596ef36ae634d7c7fa0d834a1a3\System.ni.dll
00:27:30.0315 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System\33c22596ef36ae634d7c7fa0d834a1a3\System.ni.dll - ok
00:27:30.0317 0x1534  [ 9229A6768A4B6490F9424AB750DC8563, 03AB29A39B8FB65B75067E2D5BCC42CDEDFF0517FE9F9948159D00FD181D7E6A ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\632124fc52b319b529bd34542ea56fa4\System.ServiceProcess.ni.dll
00:27:30.0317 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\632124fc52b319b529bd34542ea56fa4\System.ServiceProcess.ni.dll - ok
00:27:30.0319 0x1534  [ C4044C9EF3BA62188C0AF0A04128AADA, 05F8EB67399655C99BBA4499880E5515A038574F4AC87919B453BE80892FBEF4 ] C:\Program Files (x86)\Avira\Launcher\de-DE\Avira.ServiceHost.resources.dll
00:27:30.0319 0x1534  C:\Program Files (x86)\Avira\Launcher\de-DE\Avira.ServiceHost.resources.dll - ok
00:27:30.0321 0x1534  [ 175DFB5E623C0930F1741E65F9FB0699, CB743C468A9DECB550116CDA34A4F10F563C1924B7D19489A9E1C197CF309DEF ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b985aa78aab4528aaa723b90b52986d1\System.Core.ni.dll
00:27:30.0321 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b985aa78aab4528aaa723b90b52986d1\System.Core.ni.dll - ok
00:27:30.0323 0x1534  [ FC18D2B4AA35274E6B7FD8260900FE89, D3190ACCD770B0671519367904593A2AE7E412E6E020933B3F536F8C61E1491D ] C:\Windows\System32\RstrtMgr.dll
00:27:30.0323 0x1534  C:\Windows\System32\RstrtMgr.dll - ok
00:27:30.0325 0x1534  [ 9538E0DB2E835B0E0AC8C82A8A2DD040, 62487CA1FC537B375C744FDA928ABB4F66E9A2B4AE1A47D7848288A3AC0082A7 ] C:\Program Files\Microsoft Office 15\ClientX64\apiclient.dll
00:27:30.0325 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\apiclient.dll - ok
00:27:30.0327 0x1534  [ 9EBA4DD9DED1F9584628B781739D3E6E, DC19BF4DD601A4ABC6609937DDCF4F16CF91E2C2C33712EF45B49B5DC64B46B8 ] C:\Windows\System32\oleacc.dll
00:27:30.0327 0x1534  C:\Windows\System32\oleacc.dll - ok
00:27:30.0329 0x1534  [ A1C6138CF68F2E6F25B7DBF748A0A99C, 8E477548C188A7D36E7E065BB1DC5B061B42F0BD21CDA744E02F08AA301C736B ] C:\Program Files (x86)\Avira\Antivirus\avevtlog.dll
00:27:30.0329 0x1534  C:\Program Files (x86)\Avira\Antivirus\avevtlog.dll - ok
00:27:30.0331 0x1534  [ 1280DDD86372D9C48E3DC112C716809F, A6F1FF588F4D1C6F46CBD782CC3D765A99B33A277A5CCE3FFD5A321DD07C00E3 ] C:\Program Files (x86)\Avira\Antivirus\schedr.dll
00:27:30.0331 0x1534  C:\Program Files (x86)\Avira\Antivirus\schedr.dll - ok
00:27:30.0333 0x1534  [ DB9352ACC640357B2F92C95370191F6F, 28CE24B268A86BD4FA6F8219400838AE6948B4285E7D73847B8D55D53719304D ] C:\Program Files (x86)\Avira\Antivirus\sqlite3.dll
00:27:30.0333 0x1534  C:\Program Files (x86)\Avira\Antivirus\sqlite3.dll - ok
00:27:30.0335 0x1534  [ BD077B0F283808DF47DBC0105D74A565, 5340AD300AFEBB8428E066B8F71728EDB56BEC02F2CB6177D336E2B5C196B7EE ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.WinCore.dll
00:27:30.0335 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.WinCore.dll - ok
00:27:30.0337 0x1534  [ DE6B1920A783CC4C02FB2500B1177540, D05C180E5E852F8AC0BE3F737CFF523CEE5F5E13B98423AD580F686C796B5AA1 ] C:\Program Files (x86)\Avira\Antivirus\productutilities.dll
00:27:30.0337 0x1534  C:\Program Files (x86)\Avira\Antivirus\productutilities.dll - ok
00:27:30.0339 0x1534  [ 88D1DD9E20DAAB2386FB3807C25C08A7, 1E6AFB900058570AAFBEB4371912314E976B7CD19F76585AACF353A6E2AE1BF5 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
00:27:30.0339 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll - ok
00:27:30.0341 0x1534  [ 6C907A319F70DB99E1801D8AF1B9FA24, 2F36E8DD4EDC833CAD132F7C07D9A9DD143509CE63527F6AF5413FFBBA0EBFFD ] C:\Program Files (x86)\Avira\Antivirus\CommonTextRc.dll
00:27:30.0341 0x1534  C:\Program Files (x86)\Avira\Antivirus\CommonTextRc.dll - ok
00:27:30.0343 0x1534  [ B3655D586D871D9D4CA94946C0C4F241, 949E25AFFF02AD3C2D36A94CD97703E6C244E237A669C41A06376B1688263F7F ] C:\Program Files (x86)\Avira\Antivirus\systemutilities.dll
00:27:30.0343 0x1534  C:\Program Files (x86)\Avira\Antivirus\systemutilities.dll - ok
00:27:30.0345 0x1534  [ A4033C37995C9496AA4AB6B2241B6E09, B00E6BE7CD75EC8DDADB983889D84233A14ACA7AC78BDCB5BE1E3E88069625D3 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.WinCore.Interface.dll
00:27:30.0345 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.WinCore.Interface.dll - ok
00:27:30.0348 0x1534  [ A1D1026541B66B987E8F1B42B07B0258, 5A26B768ADB54189D09DA64E171F70C275DEC6A5A1209914897EA387BDAB4875 ] C:\Program Files (x86)\Avira\Antivirus\57\ProductTextRc.dll
00:27:30.0348 0x1534  C:\Program Files (x86)\Avira\Antivirus\57\ProductTextRc.dll - ok
00:27:30.0350 0x1534  [ 4568FF993947FDFC61BF5FDB74C56C1E, 1816507703F936C348FF40D4AE82CBB078A2B0DCC011F0461A83CEF32F352221 ] C:\Windows\syswow64\imagehlp.dll
00:27:30.0350 0x1534  C:\Windows\syswow64\imagehlp.dll - ok
00:27:30.0352 0x1534  [ 0035236E5EBF4C702B79BDF11F8C1CF5, C3AD447AFA91064171E8D483956B03770D630BFAFFAA4E64F043B76E979DF33B ] C:\Windows\syswow64\gpapi.dll
00:27:30.0352 0x1534  C:\Windows\syswow64\gpapi.dll - ok
00:27:30.0354 0x1534  [ 46FC0FCD1F618F7D179194DE2325687C, EA5130A6EE99061EBA22289E0025DADD3E46EA2C854B1167145F21F60BD7E365 ] C:\Windows\syswow64\cryptnet.dll
00:27:30.0354 0x1534  C:\Windows\syswow64\cryptnet.dll - ok
00:27:30.0356 0x1534  [ F781D9AFB13B7581AF1EC9D0AEC0C7A1, 1FA001361809D70D68D38080428AA2494B19F5133A6AD7A7F67ABC3482279EDF ] C:\Windows\syswow64\WinSCard.dll
00:27:30.0356 0x1534  C:\Windows\syswow64\WinSCard.dll - ok
00:27:30.0358 0x1534  [ 7115823377EC683919941A2532D9C510, B07380177673F06AC385A875A267B0529E7BA88AD3A1AC5A1A1E77C834810559 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a73b5a097f4a7e26470de5940f71e623\System.Xml.ni.dll
00:27:30.0358 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a73b5a097f4a7e26470de5940f71e623\System.Xml.ni.dll - ok
00:27:30.0359 0x1534  [ 3D54BB549D05F215FD946AC2FE538C64, 85E8DFAD6353099C6B87F24F534C452A54AF93BB93FD4DE21F25A3B7D64B10BC ] C:\Windows\syswow64\httpapi.dll
00:27:30.0359 0x1534  C:\Windows\syswow64\httpapi.dll - ok
00:27:30.0361 0x1534  [ 53CDF31EF7E27ABEB33C7279205B940F, 09E9F11F2E06482B21A6A6139DBCE5E8CB92BCDE071DC4D816C9B6B00E9A4EFB ] C:\Windows\System32\DismApi.dll
00:27:30.0361 0x1534  C:\Windows\System32\DismApi.dll - ok
00:27:30.0363 0x1534  [ 3EF70822B0E395173112F17FC6C018E0, EB1E021A60DE259254C0A0FB0F1E1ACCA16A93B58D26DC0C553E6F5EF3584EE2 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Compba577418#\e5234354069216a757ce14ca8eff92f0\System.ComponentModel.Composition.ni.dll
00:27:30.0363 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Compba577418#\e5234354069216a757ce14ca8eff92f0\System.ComponentModel.Composition.ni.dll - ok
00:27:30.0365 0x1534  [ EFD3AC2C924127F2C8EA06831673FCB4, 18D187FFD8D6ECA4E43090BFE6ABEEB75B49393C825721D28751DD64B1F46E6A ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.Communicator.Interface.dll
00:27:30.0365 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.Communicator.Interface.dll - ok
00:27:30.0367 0x1534  [ 673C2B597FC79AE20B161797C132550C, 0C7729D6D77936DE12A05E910E72DFADFFD74AE9E369BC600CDFD17F520E3837 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.NativeCore.dll
00:27:30.0367 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.NativeCore.dll - ok
00:27:30.0369 0x1534  [ 7BE7F3F2BB72482FFC62AC002FCC3476, C69FBF17D1102EBB07280F712B6F2B626B1870AF09FD5D4E534F00F5BB3BFC0A ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.SpeedupConnector.Interface.dll
00:27:30.0369 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.SpeedupConnector.Interface.dll - ok
00:27:30.0371 0x1534  [ FD1C7947894631C586DE5B1080FFEA81, EC51C21CD3894CC98332BABB465C8A705B7821C2D26B20837BB5F8DAADB8910E ] C:\Windows\System32\diagperf.dll
00:27:30.0371 0x1534  C:\Windows\System32\diagperf.dll - ok
00:27:30.0373 0x1534  [ FD5CABBE52272BD76007B68186EBAF00, 87C42CA155473E4E71857D03497C8CBC28FA8FF7F2C8D72E8A1F39B71078F608 ] C:\Program Files (x86)\Avira\Launcher\msvcp120.dll
00:27:30.0373 0x1534  C:\Program Files (x86)\Avira\Launcher\msvcp120.dll - ok
00:27:30.0375 0x1534  [ 034CCADC1C073E4216E9466B720F9849, 86E39B5995AF0E042FCDAA85FE2AEFD7C9DDC7AD65E6327BD5E7058BC3AB615F ] C:\Program Files (x86)\Avira\Launcher\msvcr120.dll
00:27:30.0375 0x1534  C:\Program Files (x86)\Avira\Launcher\msvcr120.dll - ok
00:27:30.0377 0x1534  [ A26AB2A4EF430747E1690C2C76C83B17, F4025BB918383301BB2AC941694B753AF0291EA90A710DAAF43AA8E147DEFA2C ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8cc5a2101f88ecce594d053af3256a7e\System.Configuration.ni.dll
00:27:30.0377 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8cc5a2101f88ecce594d053af3256a7e\System.Configuration.ni.dll - ok
00:27:30.0379 0x1534  [ 268807A81507F9549086928D3F556583, DA1BCF0487624F42022BE84D547C2D4E7B30DF0B865DE4A41A77BCD19A5CCBF2 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnector.dll
00:27:30.0379 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnector.dll - ok
00:27:30.0381 0x1534  [ 12ED91503F038D86AE92F439DDCDDB6A, 55531C924252079BBB7ED9B27925B86D1F5D79F5899FE5B96126F79B2673F3E4 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.Communicator.dll
00:27:30.0381 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.Communicator.dll - ok
00:27:30.0383 0x1534  [ A02352301E2DC7CF04D5C6B06C708F7B, 9F34B913AA7F94D1FC6A3025DAD443C47C4AB01D4328289BA6598300AA53B793 ] C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\GdiPlus.dll
00:27:30.0383 0x1534  C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\GdiPlus.dll - ok
00:27:30.0385 0x1534  [ E58479AB894E62E8DCD6DA21716AAC2A, 05E072600C7F4C7E3598E5320C6A605DE0168A3BEF4C71D6C9550BAE67D073E3 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.BrowserExtensionConnector.dll
00:27:30.0385 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.BrowserExtensionConnector.dll - ok
00:27:30.0387 0x1534  [ AF4A5D001909DD894F92BD3CD051DC52, FA2CC8828C476CE56CA4515BF41AC5E5EEF0EAE461040E6547E63A1D069131A0 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.SpeedupConnector.dll
00:27:30.0387 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.SpeedupConnector.dll - ok
00:27:30.0389 0x1534  [ C3F785E03A05CD56D3D331929CECCC5A, ADCA1A3AF77EDAC3997A886F3F58DE4EE62895CBDABAB1E9B5B5238AED61D613 ] C:\Program Files (x86)\Avira\Launcher\WebSocket4Net.dll
00:27:30.0389 0x1534  C:\Program Files (x86)\Avira\Launcher\WebSocket4Net.dll - ok
00:27:30.0391 0x1534  [ C6EF8F29675F1308847A229F756C4B0E, D478A3C03AA7511386E5C46AFF60D71C63A783BD3A20CB04981F25B51BF014B0 ] C:\Windows\System32\wdscore.dll
00:27:30.0391 0x1534  C:\Windows\System32\wdscore.dll - ok
00:27:30.0393 0x1534  [ 800A09DD62CC62CFB0F762E9E0B805AF, 0EEAD909A561CCDD4B33FAE94D195820FFC1EBEA0F005DF413A7742AE985985A ] C:\Windows\System32\srumapi.dll
00:27:30.0393 0x1534  C:\Windows\System32\srumapi.dll - ok
00:27:30.0395 0x1534  [ 035800E4957B81E8C8155453DB02B113, A0F6CA1A66F44CCA9D6F8507605406E11CF4EF2EE003826C8EB6D938D39254C0 ] C:\Windows\System32\pnpts.dll
00:27:30.0395 0x1534  C:\Windows\System32\pnpts.dll - ok
00:27:30.0397 0x1534  [ 3CAB0E3EA98584AE620EC53ADF20A8A5, 6C4F0D49C71E874D1E29F02C1EF0B8F41EAE921801B1B83CA120C43B2AD87AC3 ] C:\Windows\System32\srumsvc.dll
00:27:30.0397 0x1534  C:\Windows\System32\srumsvc.dll - ok
00:27:30.0399 0x1534  [ 9BAF955E6093BFAF7D48BD127C687387, 8A841C9E7FF546ACC37CFF72C7C92CA6FC15F784811431EFAC995DB226FF751F ] C:\Program Files (x86)\VMware\VMware Player\libeay32.dll
00:27:30.0399 0x1534  C:\Program Files (x86)\VMware\VMware Player\libeay32.dll - ok
00:27:30.0400 0x1534  [ 301DEC6130F3FDEA47519F64643032BF, 46B3491069AC66DB5B5D36FE50A4579E9D6F38E2E35E8654385C7487A3869FE3 ] C:\Program Files (x86)\VMware\VMware Player\ssleay32.dll
00:27:30.0400 0x1534  C:\Program Files (x86)\VMware\VMware Player\ssleay32.dll - ok
00:27:30.0402 0x1534  [ 95E8E0CC80EC609DCEC529B18EEDAE59, CD130A019245B60FD4F8BB42EF8F1A860855FF30DD4AED9A20E15ED0E72E984A ] C:\Windows\syswow64\ntmarta.dll
00:27:30.0402 0x1534  C:\Windows\syswow64\ntmarta.dll - ok
00:27:30.0404 0x1534  [ 56D710DA9CCC7E5541DB958BC2A13EE2, 51DEBF300883763D1D1B10FFE9312E0F4ECE13FFB7C46AC14EEB35220BDE8942 ] C:\Windows\syswow64\mswsock.dll
00:27:30.0404 0x1534  C:\Windows\syswow64\mswsock.dll - ok
00:27:30.0406 0x1534  [ 2B501C98A7A793BE8C55B47FC91C3974, B4FF137F5087EA04DC5280E79574DC1F540E83F5E1AA4832C27E2B4773151D86 ] C:\Windows\syswow64\winsta.dll
00:27:30.0406 0x1534  C:\Windows\syswow64\winsta.dll - ok
00:27:30.0408 0x1534  [ 451798481ADAD539D91D7C030F7E3435, 286FE91E69504107B563FAA3F9B3DA90A3B7B6154595F5CA0DBED84D934D1DDA ] C:\Windows\syswow64\dhcpcsvc6.dll
00:27:30.0408 0x1534  C:\Windows\syswow64\dhcpcsvc6.dll - ok
00:27:30.0410 0x1534  [ E9DE2437EAB07E19F4AE9E1F93429982, 190D8BDEB09CC99858003FADEC8E80DBF0E6FCA60AF8E75FE25712167851DEE7 ] C:\Windows\syswow64\dhcpcsvc.dll
00:27:30.0410 0x1534  C:\Windows\syswow64\dhcpcsvc.dll - ok
00:27:30.0412 0x1534  [ 240885586FEE94BAF837812133667052, D5ADE76BF98D984668E9310803100B949779358FE0393DD4E2AC278673232133 ] C:\Windows\syswow64\OnDemandConnRouteHelper.dll
00:27:30.0412 0x1534  C:\Windows\syswow64\OnDemandConnRouteHelper.dll - ok
00:27:30.0414 0x1534  [ 67D9C0AA05B6A647AD06F1F9D408DA34, 915BEF81C9FA54A446B471C9963D8DDCBEB0A2CFCBDD0783B0F38517FF6C84B9 ] C:\Windows\syswow64\webio.dll
00:27:30.0414 0x1534  C:\Windows\syswow64\webio.dll - ok
00:27:30.0416 0x1534  [ A7EA0BDE2A47C17BEDD9BB522A52ABA3, 9FDFE0EA2245E12F35DE35F3334DFE729CC612B8E0BBD4110DA2767146191780 ] C:\Windows\syswow64\PortableDeviceApi.dll
00:27:30.0416 0x1534  C:\Windows\syswow64\PortableDeviceApi.dll - ok
00:27:30.0418 0x1534  [ BB5BBD0E4D04047585E4ED0F07AA51E7, F9BE15C10D2F835C3D93DB0C0938EF91531320F829E0711750C6670881AD5988 ] C:\Windows\syswow64\dnsapi.dll
00:27:30.0418 0x1534  C:\Windows\syswow64\dnsapi.dll - ok
00:27:30.0420 0x1534  [ 48D1631B166EC27FC86080735B1880F6, A1997E014AA625BAD62A965222958A2B59E7E9DFF6830A50C8FD99E90F5E8330 ] C:\Windows\syswow64\rasadhlp.dll
00:27:30.0420 0x1534  C:\Windows\syswow64\rasadhlp.dll - ok
00:27:30.0421 0x1534  [ AAEEC9F2D2CAB7E9151520C42058B3E0, C354DFB6AF61C24DA07A96CDF6C968F32C40FB183D50ABA12897C70272EF07D9 ] C:\Windows\syswow64\FWPUCLNT.DLL
00:27:30.0421 0x1534  C:\Windows\syswow64\FWPUCLNT.DLL - ok
00:27:30.0423 0x1534  [ 608CB190F48475016F31C7A8ACCAC273, 8F165BC0571A4DE31AA29DC0A9CFA749E678F05FDE7EC5072CAE08C0F3BCFE23 ] C:\Program Files (x86)\Avira\Antivirus\ccuac.exe
00:27:30.0423 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccuac.exe - ok
00:27:30.0425 0x1534  [ 203E374949A2DB2E0E3C3B59F95D1000, E0D18F681FAFA6282E035C8FEB52FDE8BE6859DF1CECA9C6532298FCA2841AB9 ] C:\Program Files (x86)\Avira\Antivirus\ccwkrlib.dll
00:27:30.0425 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccwkrlib.dll - ok
00:27:30.0428 0x1534  [ 1D96CFEC913C0E288585082D13A3BFB3, 2701C900E24D995B074A62B514ABCBB1C6C2AA34E48E80DCB1977A778CAEA3E2 ] C:\Windows\syswow64\rtutils.dll
00:27:30.0428 0x1534  C:\Windows\syswow64\rtutils.dll - ok
00:27:30.0431 0x1534  [ 7F39D1BF2E07135C8BA126187658AF49, 0E53698DB07155B1360C5225DDA3B6B2B835315B9737AE7897A74DC24865058A ] C:\Windows\syswow64\schannel.dll
00:27:30.0431 0x1534  C:\Windows\syswow64\schannel.dll - ok
00:27:30.0433 0x1534  [ 784D628A3B7A67AB785BAE3490A5B861, 3D5FA4E303B59F16F1442E26040BCEEB21C02C9EFAEBCCC9614C4F9AE4328892 ] C:\Windows\syswow64\activeds.dll
00:27:30.0433 0x1534  C:\Windows\syswow64\activeds.dll - ok
00:27:30.0435 0x1534  [ C0D6A6A199FF8A8DD440260642C97665, 694FE080CAE3FF0B01AEF3556BAD13A24A486CD964377D2887783994F7A1646A ] C:\Windows\syswow64\netapi32.dll
00:27:30.0435 0x1534  C:\Windows\syswow64\netapi32.dll - ok
00:27:30.0437 0x1534  [ 38F08B82ADEEA1003B4A5177BB5366B3, 95946F4946A1CC932765DB5261D0E5A0BDAB00DEA4346340859D3236236A9452 ] C:\Windows\System32\ncryptprov.dll
00:27:30.0437 0x1534  C:\Windows\System32\ncryptprov.dll - ok
00:27:30.0439 0x1534  [ 6713915F5195CD996DCAB2B99ED05789, BB34861453DD7765795609EA97AA4D95019154C3EF93FD6A32A0BB088A7618D4 ] C:\Windows\System32\ncryptsslp.dll
00:27:30.0439 0x1534  C:\Windows\System32\ncryptsslp.dll - ok
00:27:30.0441 0x1534  [ D340378676E2ACC414165BDB70E69EDB, 8068F98FE0A6056D299CA957B8AEDD9F52C73F64BBF025D9359A6B9CA104E00B ] C:\Windows\syswow64\netutils.dll
00:27:30.0441 0x1534  C:\Windows\syswow64\netutils.dll - ok
00:27:30.0442 0x1534  [ 9B68200FDDC2C676EC5630C96F6ECBD5, 8D35C548A1E8C82251AF2BD285F05A9F9D8A803F989CBFF8EE54750CFD1DE3E6 ] C:\Windows\syswow64\srvcli.dll
00:27:30.0442 0x1534  C:\Windows\syswow64\srvcli.dll - ok
00:27:30.0444 0x1534  [ 28D01EA8167BFF21EF7A9A771D699B70, 08F73B0EDFB13B30429317638F8B342F01C2B0A79224CED0B6751B22B014DC01 ] C:\Windows\syswow64\wkscli.dll
00:27:30.0444 0x1534  C:\Windows\syswow64\wkscli.dll - ok
00:27:30.0447 0x1534  [ 953578218D013F26258D3BFB196E1828, FCA23345C3FA3D190FAE36ED86281233332B1F735F89D2A6821C75F9D14521CF ] C:\Windows\syswow64\adsldpc.dll
00:27:30.0447 0x1534  C:\Windows\syswow64\adsldpc.dll - ok
00:27:30.0449 0x1534  [ 505B918EDD7796C40E3C9CE4A1FA34DD, BC89DD12127355B7FF0C7F2C6D5725D0F573E2CCFDE5B8E7779B38492041FCFB ] C:\Windows\syswow64\logoncli.dll
00:27:30.0449 0x1534  C:\Windows\syswow64\logoncli.dll - ok
00:27:30.0451 0x1534  [ E57C16AFC18E84139E77B34DC85D507B, 9238E6417107F3681A4A94141F005B14DCE90A111C8D9BED439604E9D6567635 ] C:\Windows\syswow64\browcli.dll
00:27:30.0451 0x1534  C:\Windows\syswow64\browcli.dll - ok
00:27:30.0453 0x1534  [ C538847212D38549C16C0B30E922FF93, 68173CAB68388BEB05FC8C4FB97FD54529A0FA55B6A79551E3FAB17B6073A958 ] C:\Windows\System32\dssenh.dll
00:27:30.0453 0x1534  C:\Windows\System32\dssenh.dll - ok
00:27:30.0454 0x1534  [ C951FF1620313B820A73020899CDBB7A, AC6941807FC3C2630EDA30C9FEFDE3424B3F5A39536FAB8E8505E09AD148EBEC ] C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll
00:27:30.0454 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll - ok
00:27:30.0456 0x1534  [ D029339C0F59CF662094EDDF8C42B2B5, 934D882EFD3C0F3F1EFBC238EF87708F3879F5BB456D30AF62F3368D58B6AA4C ] C:\Program Files\Microsoft Office 15\ClientX64\msvcp100.dll
00:27:30.0456 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\msvcp100.dll - ok
00:27:30.0458 0x1534  [ 366FD6F3A451351B5DF2D7C4ECF4C73A, AE3CB6C6AFBA9A4AA5C85F66023C35338CA579B30326DD02918F9D55259503D5 ] C:\Program Files\Microsoft Office 15\ClientX64\msvcr100.dll
00:27:30.0458 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\msvcr100.dll - ok
00:27:30.0460 0x1534  [ 1C608F7D64488DF4E9463252D45F8C81, 2CB95F4BEC517682F4E72EC0594C3639E28798CC07C138624F8D3BF0D7A3F068 ] C:\Program Files (x86)\Avira\Antivirus\gpgui.dll
00:27:30.0460 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpgui.dll - ok
00:27:30.0462 0x1534  [ F398C35319C462F7A0F8513F09218166, C24DF0E0F992834E6A6F3E132740D0BB4154638509D426F373D4286C6E741A33 ] C:\Program Files (x86)\Avira\Antivirus\gpgavid.dll
00:27:30.0462 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpgavid.dll - ok
00:27:30.0465 0x1534  [ 504182434878E4AAC49AE4C845F3F282, FDB38E099BD6D40A6B74F8B6D6D11BE4C9298CF5766487CBFA9848EF642C9AB4 ] C:\Program Files (x86)\Avira\Antivirus\gpgenrep.dll
00:27:30.0465 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpgenrep.dll - ok
00:27:30.0467 0x1534  [ 9C588F2AF79E942CA587A89589B17805, 979C0C462025C5797CDAD6B8B2F586AEEC89AA45BCABACAA58CF7178FDE8F3DD ] C:\Program Files (x86)\Avira\Antivirus\gplegacy.dll
00:27:30.0467 0x1534  C:\Program Files (x86)\Avira\Antivirus\gplegacy.dll - ok
00:27:30.0468 0x1534  [ 15AAAF59CD0293FE77B420D0ECF0F457, 74CD508C25E8FD822BC7F520EDE2C326FAB367F9F62F90707DB1036616C4BB99 ] C:\Windows\System32\clusapi.dll
00:27:30.0468 0x1534  C:\Windows\System32\clusapi.dll - ok
00:27:30.0470 0x1534  [ 0B0D48D5F1DD643B873C5884E609CD2E, C9D796063A5E242244032B2AFD956060AF7C618D33F13EB08D72733ADBEC1B58 ] C:\Windows\System32\netprofm.dll
00:27:30.0470 0x1534  C:\Windows\System32\netprofm.dll - ok
00:27:30.0472 0x1534  [ BBE9D72EFC7BD66B28309C3607683DBA, FC372EFBC650CE0BDB117858D840A1FB361947B1C67D1DD16BABA95D0286856A ] C:\Windows\System32\netprofmsvc.dll
00:27:30.0472 0x1534  C:\Windows\System32\netprofmsvc.dll - ok
00:27:30.0474 0x1534  [ 810B100B28BF1B0FE828EE7299C34E48, 88F24A1521AA9FD07A8B51DD409D816664FF02454D313A87C3B76A7D1500F8EB ] C:\Windows\System32\BluetoothApis.dll
00:27:30.0474 0x1534  C:\Windows\System32\BluetoothApis.dll - ok
00:27:30.0476 0x1534  [ 0F7067F069D502954F4E9E3D3378585B, 4E3928E330A07054C882811A48731C0E3EF9587FC1DCCEEE529E4D1240AC791B ] C:\Windows\System32\BthRadioMedia.dll
00:27:30.0476 0x1534  C:\Windows\System32\BthRadioMedia.dll - ok
00:27:30.0478 0x1534  [ C29F37FC8D5870D703957A304AF9B922, 1B30C69B08ABABD609731AABA181993F39AF49F56A3CFC8168E756609744F2B6 ] C:\Windows\System32\BthTelemetry.dll
00:27:30.0478 0x1534  C:\Windows\System32\BthTelemetry.dll - ok
00:27:30.0480 0x1534  [ FD892979B8C1C4ACFBCF859E40974B29, 9A885475082B3DFD23180A36B0D7A1BA1F682A6C71FD6D6403E419CBC4EC2D62 ] C:\Windows\System32\npmproxy.dll
00:27:30.0480 0x1534  C:\Windows\System32\npmproxy.dll - ok
00:27:30.0482 0x1534  [ 8D3516A3629AD7C905A6A9EB1EBB16C6, AA7AF0B6F4A2FDD90A1A2BD7EBE9AA2F4EF2CA943051F5C6D1487C2D923445A8 ] C:\Windows\System32\WlanRadioManager.dll
00:27:30.0482 0x1534  C:\Windows\System32\WlanRadioManager.dll - ok
00:27:30.0484 0x1534  [ 68BD23A0AD9E934F037A1D8A1929D1E2, 7104B04435930D085D01779065C8F293A265800D90C9DEFB19C998D9326E44E7 ] C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
00:27:30.0484 0x1534  C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe - ok
00:27:30.0486 0x1534  [ 94B1A46EDD335F0C54C7BDAFC43348E6, 58073D58D0BE7389C2A4736AFE108835E5AE9C9950FF630644F585C99B964043 ] C:\Windows\System32\fdPHost.dll
00:27:30.0486 0x1534  C:\Windows\System32\fdPHost.dll - ok
00:27:30.0488 0x1534  [ 232480F4C513FB2382BA8F7E7A4BEB37, F7B8B56A3FAA9F0EF444B865164A434803C45F76071337393252D2E7EB07819F ] C:\Windows\System32\fdWSD.dll
00:27:30.0488 0x1534  C:\Windows\System32\fdWSD.dll - ok
00:27:30.0489 0x1534  [ C55DA734ED2A831E0BACAAFA01CEB7FF, 9D989B03D07BBAD287B317D238691664B0694331D6A69B7A1AA3D8AB7D1323FC ] C:\Windows\System32\NcdAutoSetup.dll
00:27:30.0489 0x1534  C:\Windows\System32\NcdAutoSetup.dll - ok
00:27:30.0491 0x1534  [ EAD756C12EEB62C8CF1A2D2785FE425D, AFE749946EB0E42DA506EBB95D4D0BBF6699D3D5F8FB5A85E37B91377378CABF ] C:\Windows\System32\WSDApi.dll
00:27:30.0491 0x1534  C:\Windows\System32\WSDApi.dll - ok
00:27:30.0493 0x1534  [ 28ED822D97B90302435CF3C3C95505CA, 12C48509118A79A3E2C8B192EBDFC3402F25CFBBD6213E7460639577B0F00BFA ] C:\Windows\System32\webservices.dll
00:27:30.0493 0x1534  C:\Windows\System32\webservices.dll - ok
00:27:30.0494 0x1534  [ 2BDF26F7D8CD51F7C483036A2458472A, D044ACCA26BD2A0A05539DF6F38A141DA2F1FE010AF3BDAC1A97077F4647CB87 ] C:\Windows\System32\fdSSDP.dll
00:27:30.0494 0x1534  C:\Windows\System32\fdSSDP.dll - ok
00:27:30.0497 0x1534  [ 666DEF304A4E5F62D7111BC14FDC8BDA, 57B0DF7990A424EF47EBEBF2A16DEEADE2A2ECCD32A477F3CE547F14910A5924 ] C:\Windows\System32\NetSetupApi.dll
00:27:30.0497 0x1534  C:\Windows\System32\NetSetupApi.dll - ok
00:27:30.0499 0x1534  [ B89FE628B72CEA4674787D13A87CEE9A, B9FDBE4D00D6800B68D06D0E9CF7CD02D1357F9E3713E4E6D18E56F2398B8490 ] C:\Windows\System32\NetSetupShim.dll
00:27:30.0499 0x1534  C:\Windows\System32\NetSetupShim.dll - ok
00:27:30.0501 0x1534  [ 790BAA212572330467C10E8B23E9A9B3, DB63F55241A36CF018ABBDAFF8BD9E2C168345A6002879D702D30994EB8F0692 ] C:\Windows\System32\wbem\wbemcore.dll
00:27:30.0501 0x1534  C:\Windows\System32\wbem\wbemcore.dll - ok
00:27:30.0503 0x1534  [ DD006DDFB21D621E8691480D4EF1583F, 145C461D8E8349950463482D0756DBEADEC1F1E7E37B68D04DB9228B1576B9B5 ] C:\Windows\System32\wbem\esscli.dll
00:27:30.0503 0x1534  C:\Windows\System32\wbem\esscli.dll - ok
00:27:30.0505 0x1534  [ 7D9A7B8CD2DB231D27C3C11E20987D57, CA0EB49F911A02702654FAB8DD8F9E8452CE965B276B484C5D844801BB8AAD00 ] C:\Windows\System32\wbem\fastprox.dll
00:27:30.0505 0x1534  C:\Windows\System32\wbem\fastprox.dll - ok
00:27:30.0507 0x1534  [ 83EF4E71D61B6D3C9783901D1122232B, A664B5EAA04C4B1B086B3577114DC58B8EBE07F88CAB2CB5CDF7C3040D1CA003 ] C:\Windows\System32\wbem\wbemsvc.dll
00:27:30.0507 0x1534  C:\Windows\System32\wbem\wbemsvc.dll - ok
00:27:30.0509 0x1534  [ A84B27ACDB8B528E6108EE58BFC042C9, 4F206DDFBC16B825AD2E3BDE17571947ADF740CBED29ADC7CDE0739A455B4620 ] C:\Windows\syswow64\wbem\wbemsvc.dll
00:27:30.0509 0x1534  C:\Windows\syswow64\wbem\wbemsvc.dll - ok
00:27:30.0511 0x1534  [ 722D2A398CC6A66F2C66307265421D43, E66E25127CC895E7EA27B6C7F49425E490DCF769DBB96C2C9F0BEBFB5507563F ] C:\Windows\System32\activeds.dll
00:27:30.0511 0x1534  C:\Windows\System32\activeds.dll - ok
00:27:30.0514 0x1534  [ CB8F63A525B4457FB04E394BFC49F3D6, 1E5609FDCFE87ED7B8981868D25D9CF3EED1E34999E6F1DD9FE2845975A85686 ] C:\Windows\System32\adsldpc.dll
00:27:30.0514 0x1534  C:\Windows\System32\adsldpc.dll - ok
00:27:30.0516 0x1534  [ 77A4AC93C44E0BB78FF9069C4D311A47, 355B6786E60F09A0657DA6BBA7F70A23D64F835E157D885781EFCF0837634215 ] C:\Windows\System32\hnetcfg.dll
00:27:30.0516 0x1534  C:\Windows\System32\hnetcfg.dll - ok
00:27:30.0519 0x1534  [ 513A8EF909DFCDD872E60A0EA03FEAAB, 62D4B5891DB8E2874B0390A1E1E7063848D6C3150571469400D5AEF0D153DFB1 ] C:\Windows\System32\tetheringclient.dll
00:27:30.0519 0x1534  C:\Windows\System32\tetheringclient.dll - ok
00:27:30.0521 0x1534  [ 7FE3296EF901D84C08EA2B21399FDD55, 1CD54571C2D32A81D79FECC14A3E87BB3BB57C0FFF772724CFA928C1D288C0D2 ] C:\Windows\System32\adsldp.dll
00:27:30.0521 0x1534  C:\Windows\System32\adsldp.dll - ok
00:27:30.0522 0x1534  [ 0CF64D9500FF94DAC63B293A7FD593EA, 9ACEB495EF6A27466B8968AC82A765548617429CFD6B6DD45962AD1ED0434BFD ] C:\Windows\System32\netapi32.dll
00:27:30.0523 0x1534  C:\Windows\System32\netapi32.dll - ok
00:27:30.0524 0x1534  [ B3B65978E0564999DE5F733E3C4FE9D8, 1B543D2977FA96809068DE4D47806284B26D323B539E621341D722B0ADBD70AA ] C:\Windows\System32\secur32.dll
00:27:30.0524 0x1534  C:\Windows\System32\secur32.dll - ok
00:27:30.0526 0x1534  [ F4F2A4C459DD3AA22DD3984D13B15746, C2D0E285E2333A9C620BE04A5747881AF0D5615DA32226886E659FF31A9761CC ] C:\Program Files (x86)\Avira\Antivirus\mfc120u.dll
00:27:30.0526 0x1534  C:\Program Files (x86)\Avira\Antivirus\mfc120u.dll - ok
00:27:30.0528 0x1534  [ 400F3DA7B211CEE08EA4F7A9714715F2, 2B20AE8D0148ACCB11C6523BA03E61C4700EE3DAFF7614363CA2E9FF8E911480 ] C:\Program Files (x86)\Avira\Antivirus\onlcfg.dll
00:27:30.0528 0x1534  C:\Program Files (x86)\Avira\Antivirus\onlcfg.dll - ok
00:27:30.0531 0x1534  [ 6ACF5691CE286E7459A2B2BFE6E2154E, 2BFC077FE3FAF60FA3951A704F9C985A71F1BE581B343A6AC8BD4A2040E160CF ] C:\Program Files (x86)\Avira\Antivirus\gavidb.dll
00:27:30.0531 0x1534  C:\Program Files (x86)\Avira\Antivirus\gavidb.dll - ok
00:27:30.0533 0x1534  [ 8F7E1B91CEA633D059EE9968D8F19808, EB3EA03D91973A7684CD941859A92ED3E87056D34C9870E6B1A01CAA030E9E54 ] C:\Windows\syswow64\esent.dll
00:27:30.0533 0x1534  C:\Windows\syswow64\esent.dll - ok
00:27:30.0535 0x1534  [ 837F5F1B7C66CF4B5C8FDF6BE472E9BA, 58F7CE3D36B4A6AD7FB973825C31379089DEC1D3C4E5AC4A7F2D73057AB46F9A ] C:\Windows\syswow64\imm32.dll
00:27:30.0535 0x1534  C:\Windows\syswow64\imm32.dll - ok
00:27:30.0537 0x1534  [ A548A4EAF2C07F52707AB4C16A567DC7, 8E50AC3FE1C9516C8FC10030E2B66388DEA4FD3891839C7A65CEFE3460A315CA ] C:\Windows\syswow64\msctf.dll
00:27:30.0537 0x1534  C:\Windows\syswow64\msctf.dll - ok
00:27:30.0539 0x1534  [ C0A378CA2EF7BC98781E1C3664BEC2C5, A4C06039FCA21AFF53C7ED9D0447FAEC102B7AB4B9D50C0C7D2A021FF29A545B ] C:\Windows\syswow64\uxtheme.dll
00:27:30.0539 0x1534  C:\Windows\syswow64\uxtheme.dll - ok
00:27:30.0541 0x1534  [ C1ADC786C13BED803995436935C9FAB5, 267EB9C34F0A1E7B6BD08CA2B88E9110AACC7D5276034F19C4F8A2722433D3C9 ] C:\Program Files (x86)\Avira\Antivirus\firewall.dll
00:27:30.0541 0x1534  C:\Program Files (x86)\Avira\Antivirus\firewall.dll - ok
00:27:30.0543 0x1534  [ BF08B3EDA696EE1505BD489729FB16C3, A83584F56D25BF2AA8CF2BA62AE68FA3E35759FC81126006F3A0DEDC0A6B7CA8 ] C:\Windows\syswow64\FirewallAPI.dll
00:27:30.0543 0x1534  C:\Windows\syswow64\FirewallAPI.dll - ok
00:27:30.0545 0x1534  [ 8A5C88B0E78AB8E79E39B36D8F2775DD, 0E20AABE00926BD010EC878183B6E96BC33FD62CA604B35139D37AF348CEE766 ] C:\Windows\syswow64\msi.dll
00:27:30.0545 0x1534  C:\Windows\syswow64\msi.dll - ok
00:27:30.0547 0x1534  [ 1F13306B682ED8F400CB8AB8F3335BC1, 65E5BA4E99A1285E3A2EEE54FA9F34BF5B7A705ABC240953E8591E58607FE6BB ] C:\Windows\syswow64\fwbase.dll
00:27:30.0547 0x1534  C:\Windows\syswow64\fwbase.dll - ok
00:27:30.0549 0x1534  [ D3C41E37A7F5728AA2D65A673A0D9862, 32376443088F8AE047A979737BB9FDAF7E32D92557DCAF3448D5A23881116E3D ] C:\Windows\System32\appsruprov.dll
00:27:30.0549 0x1534  C:\Windows\System32\appsruprov.dll - ok
00:27:30.0551 0x1534  [ 7FE50685E463E33B6D27D18758F128FE, 988E44159933C91B0167951DE520F3F6EB171BEEE403A66E1CBAA9FA56045B41 ] C:\Windows\System32\eeprov.dll
00:27:30.0551 0x1534  C:\Windows\System32\eeprov.dll - ok
00:27:30.0553 0x1534  [ A54D5BD9433CCC792D7801FC27533A6F, ECD423978E861CB3818C57B87B75B6ADBBE731E435639D7E19CFEC944FA1AEBF ] C:\Windows\System32\nduprov.dll

Treend 13.11.2015 00:39
Code:
00:27:30.0553 0x1534  C:\Windows\System32\nduprov.dll - ok
00:27:30.0555 0x1534  [ D17BD4E341C6F6C597119A1EE8A6D756, E5F4E98D7404DD807105AE404B652713222FFAAA3A3D0345EA4E25FA30EC6D7D ] C:\Windows\System32\wpnsruprov.dll
00:27:30.0555 0x1534  C:\Windows\System32\wpnsruprov.dll - ok
00:27:30.0556 0x1534  [ 6B01F4599F153D89D5A5F0A8FB956107, 9F73AE4A58619CA2382C33B3063B26E627FD2A3DE98897D26A06BAF04EB8A38C ] C:\Windows\System32\energyprov.dll
00:27:30.0556 0x1534  C:\Windows\System32\energyprov.dll - ok
00:27:30.0558 0x1534  [ 509740003AAA685F8C717D9E901A7583, 89C01ADA9E4EA093ABF621E83E36559246A59E5303920797ADA2924E88CE7CC4 ] C:\Windows\System32\ncuprov.dll
00:27:30.0558 0x1534  C:\Windows\System32\ncuprov.dll - ok
00:27:30.0560 0x1534  [ 458C017F40163DE13C1054614BC2A3AB, 32E46BE234EE0D3B27AFEB80D2DED8069B72ECAEB11E32AF0D3AC99E6FAF6DAA ] C:\Program Files (x86)\Avira\Antivirus\avipc.dll
00:27:30.0560 0x1534  C:\Program Files (x86)\Avira\Antivirus\avipc.dll - ok
00:27:30.0562 0x1534  [ 2FF278DAB8F35266104A8A93376A5992, F309D3641C626780C675427713ADAB3314DE6D258EA19DFB8497021DB911B73E ] C:\Windows\System32\credprovhost.dll
00:27:30.0562 0x1534  C:\Windows\System32\credprovhost.dll - ok
00:27:30.0564 0x1534  [ E283DE7B5BB438BE4CCD393DA582A5D2, A70BC9D3B01AD2403B4FD9B4A606DBD306245195754961D5A7B4AAF62F6A4070 ] C:\Windows\System32\diagtrack_wininternal.dll
00:27:30.0564 0x1534  C:\Windows\System32\diagtrack_wininternal.dll - ok
00:27:30.0566 0x1534  [ BC855BB7DFE06F27F78E0EB2A8CCB70D, D16C3DAB99C16B077BA5DA5E9E0646B0B9237B00ABAE867D9F81A2D072D583B1 ] C:\Windows\System32\FDResPub.dll
00:27:30.0566 0x1534  C:\Windows\System32\FDResPub.dll - ok
00:27:30.0568 0x1534  [ 987E644FB22831A7FA98093A3EB4B3AD, 043C6B69147E3F8957513F6462D4719FA94F7CF28963648FB333B326AF1A4A3B ] C:\Windows\System32\mskeyprotect.dll
00:27:30.0568 0x1534  C:\Windows\System32\mskeyprotect.dll - ok
00:27:30.0569 0x1534  [ 5D046D71B18BEFB2E4D164C3DEEDD672, 536834D020889973854830919B23DF22CC1B27236AFAEDEBDF42D432CE48FCDE ] C:\Windows\System32\NetSetupSvc.dll
00:27:30.0569 0x1534  C:\Windows\System32\NetSetupSvc.dll - ok
00:27:30.0571 0x1534  [ F8AD81E63743754D1FA7A78050E0C677, E33AD6AE4B310976DED0D793DE550AB55420A9422AD378F87D8E61813360DF77 ] C:\Windows\System32\wbem\wmiutils.dll
00:27:30.0571 0x1534  C:\Windows\System32\wbem\wmiutils.dll - ok
00:27:30.0573 0x1534  [ 6EFD6ACA430DFE25F4BD5B52DF7C744C, 9ED531B497B745DAC4D136BF9E132444FE015D089B3D95D4A1CC9C00957E34B7 ] C:\Windows\System32\dtsh.dll
00:27:30.0573 0x1534  C:\Windows\System32\dtsh.dll - ok
00:27:30.0575 0x1534  [ 54BA975FC7FE44926B414646B3176196, A18204AD21054EF9A5203C3F18710A107C3A3BD72EE1A551026B24D5BC50EBC0 ] C:\Windows\System32\SmartcardCredentialProvider.dll
00:27:30.0575 0x1534  C:\Windows\System32\SmartcardCredentialProvider.dll - ok
00:27:30.0577 0x1534  [ 9F5841502D6179E9363DD8EB13B5A5B1, EB7AD972D17B72203584FF8AA1149887D4A865C07AE1703920E95712F2151A56 ] C:\Windows\System32\aepic.dll
00:27:30.0577 0x1534  C:\Windows\System32\aepic.dll - ok
00:27:30.0578 0x1534  [ 03DD66C3A5067072A9C9739AB1513581, F13E09A2C6E68016363B74A27DEF9082A7624E7F28833850B31A27BA17767DBA ] C:\Windows\System32\sfc_os.dll
00:27:30.0578 0x1534  C:\Windows\System32\sfc_os.dll - ok
00:27:30.0580 0x1534  [ 0582A63A56A1130D93115EF51AF2A57E, 0744908C0ADCEFC688C3773E75AEDDFD4D1E0DC191A60CA41257721687CFC8FA ] C:\Windows\System32\wer.dll
00:27:30.0580 0x1534  C:\Windows\System32\wer.dll - ok
00:27:30.0582 0x1534  [ B4056A9283CC77C2E90C26DA7F6A3002, 33A597732A1614B21566DF7C079723438B34393EA66958EE93A8DF38AC40115B ] C:\Windows\System32\credprovs.dll
00:27:30.0582 0x1534  C:\Windows\System32\credprovs.dll - ok
00:27:30.0584 0x1534  [ 17C158BA4572A0FC8B7215C90240721C, DA4070CAF6FECCCDECAA86638F99E27E14B9767B377F35A8B4B381BC64A5AC14 ] C:\Windows\System32\cngcredui.dll
00:27:30.0584 0x1534  C:\Windows\System32\cngcredui.dll - ok
00:27:30.0586 0x1534  [ 7DDA3587A3D95ADA50FD6C32F30E834F, F6DCD037E136CAACE51A36730ECDBBBC7E3BDDA02E48AEE6B986423FD5A9DE6B ] C:\Windows\syswow64\mskeyprotect.dll
00:27:30.0586 0x1534  C:\Windows\syswow64\mskeyprotect.dll - ok
00:27:30.0588 0x1534  [ B08C43EBC9720EA0BE0D5A09E8C480D8, BEAF27A29ECAE43187B64E7B3A50235C95687FDE037CAAE982810B5802F7E496 ] C:\Windows\syswow64\ncrypt.dll
00:27:30.0588 0x1534  C:\Windows\syswow64\ncrypt.dll - ok
00:27:30.0590 0x1534  [ C66409D42BA31852FA216B7C01F6D38C, B0C385C10286FEA8B8C37035F605BAA6A410150E39BFE21DA853B2FD96029384 ] C:\Windows\syswow64\wbem\fastprox.dll
00:27:30.0590 0x1534  C:\Windows\syswow64\wbem\fastprox.dll - ok
00:27:30.0592 0x1534  [ 43C917A76F30F8A6AE522BAC0D48695E, 36AF06FD4CD24EDFB18C4E0A7CE38F5C61531C2591C462CAF65BC8E7F015A5CE ] C:\Program Files (x86)\Avira\Antivirus\apcfile.dll
00:27:30.0592 0x1534  C:\Program Files (x86)\Avira\Antivirus\apcfile.dll - ok
00:27:30.0594 0x1534  [ 98B8276F5C13F5D77125D2E4B52B80FB, 1F13BFEB44823487E439478A4AAC4330496C0085BCF53CB1881D543243F65DC8 ] C:\Program Files (x86)\Avira\Antivirus\avlode.dll
00:27:30.0594 0x1534  C:\Program Files (x86)\Avira\Antivirus\avlode.dll - ok
00:27:30.0597 0x1534  [ AF21FBB2E2F88EB29CC23BCA825642FA, 794243BF93693F7F567C6835666CAFD284DC9E1ABF36377F22CE15194A6B05E5 ] C:\Program Files (x86)\Avira\Antivirus\libaprutil-1.dll
00:27:30.0597 0x1534  C:\Program Files (x86)\Avira\Antivirus\libaprutil-1.dll - ok
00:27:30.0599 0x1534  [ CA4AB729B98C90C865FD99785411E6EC, 364DB3F534D8061B91F42ECA9780994CA4FC194525C6098461EC41EA61AF8D9D ] C:\Program Files (x86)\Avira\Antivirus\libcurl.dll
00:27:30.0599 0x1534  C:\Program Files (x86)\Avira\Antivirus\libcurl.dll - ok
00:27:30.0601 0x1534  [ BC44F4DFF0D097D71D35314CFCB1F7D6, B4B194BBB1A88D45C57DBD7BCA6612986F76E23F200A8C7C0424988AA6A7F90C ] C:\Program Files (x86)\Avira\Antivirus\libeay32.dll
00:27:30.0601 0x1534  C:\Program Files (x86)\Avira\Antivirus\libeay32.dll - ok
00:27:30.0603 0x1534  [ 35EC6A4E7384E233CBB5EEFD3BC2204D, E4C3807EEB4AE83E71E8099694B9A9BC54046773B182B8DFCC0A60414A044B1E ] C:\Windows\System32\facecredentialprovider.dll
00:27:30.0603 0x1534  C:\Windows\System32\facecredentialprovider.dll - ok
00:27:30.0605 0x1534  [ A39503D02459F85EDAEB32871E4A3CAB, C8B545100CF5FA5E63D48153537A6875A66411A36E89DE4849CC68EC6782E5C4 ] C:\Windows\System32\wbem\repdrvfs.dll
00:27:30.0605 0x1534  C:\Windows\System32\wbem\repdrvfs.dll - ok
00:27:30.0607 0x1534  [ F5BECD89B78BE45F29B44068A895BA70, 615EB925284527C1591A3683844421DBE381DF2D49CF3540B217D221F04DE913 ] C:\Program Files (x86)\Avira\Antivirus\libapr-1.dll
00:27:30.0607 0x1534  C:\Program Files (x86)\Avira\Antivirus\libapr-1.dll - ok
00:27:30.0609 0x1534  [ EACF0FEB2E38F0F790D73D08826B6567, 150F0DE074DF066A59CEA55CE4549FC6BAF9E2CDDE3C8795937A082CEC07642D ] C:\Program Files (x86)\Avira\Antivirus\libapriconv-1.dll
00:27:30.0609 0x1534  C:\Program Files (x86)\Avira\Antivirus\libapriconv-1.dll - ok
00:27:30.0611 0x1534  [ 84E46171056DE5B98E3BF64A9C727F13, B249E2A4D32A0BE2B22DE515C34DC552B003D43B29E8800E59D4CCDA429AD68B ] C:\Windows\System32\dimsjob.dll
00:27:30.0611 0x1534  C:\Windows\System32\dimsjob.dll - ok
00:27:30.0614 0x1534  [ 87D38B1F9330C35A842BEE40ED11E367, A2B3A98889173D821860ACA86396ACF67E86720640D3CE9F7E875824A1982F64 ] C:\Windows\System32\pautoenr.dll
00:27:30.0614 0x1534  C:\Windows\System32\pautoenr.dll - ok
00:27:30.0616 0x1534  [ 316BF9D6B8A5C607ABA4A183A8151911, 2FFEB02665AD23E5BF48C167C84722F38FBD43E7746A50CD96CC1E73F113F549 ] C:\Windows\syswow64\ntasn1.dll
00:27:30.0616 0x1534  C:\Windows\syswow64\ntasn1.dll - ok
00:27:30.0617 0x1534  [ 18C687200D008E03568BD5C02C9E0C78, 123A693ED7CD9CF55BE4D0D7EAB357326DE2880465A641D9ADF29C37B539ECF5 ] C:\Windows\System32\BioCredProv.dll
00:27:30.0617 0x1534  C:\Windows\System32\BioCredProv.dll - ok
00:27:30.0619 0x1534  [ 9C4485B8078F0C2B6EA5E8310DE37EE6, 8F9374B07830CB8B07528E71FEB73AF3E6B129B332031ADCF633CC6882FB9A9E ] C:\Windows\System32\cscapi.dll
00:27:30.0619 0x1534  C:\Windows\System32\cscapi.dll - ok
00:27:30.0621 0x1534  [ 6647421351BF432BC05950DBB51308D8, 6ECA2CB756CB89B36600DF23F4212600501B5D6093486B42A8895E6B9B30F02D ] C:\Windows\System32\httpapi.dll
00:27:30.0621 0x1534  C:\Windows\System32\httpapi.dll - ok
00:27:30.0623 0x1534  [ 7CE2C2D40DF4AB06CA4D6610FFCAE98A, 908B7FB7DAFE00C9AF7E371D37FB4B86F64D9B9418ECF5F27C3BF02075C3A9F3 ] C:\Program Files (x86)\Avira\Antivirus\ssleay32.dll
00:27:30.0623 0x1534  C:\Program Files (x86)\Avira\Antivirus\ssleay32.dll - ok
00:27:30.0624 0x1534  [ A181DC89908B9DD8BE150711B200424F, 1AB5413FF26EF9CE234369057332E9D3F373C7ADB289C3B4DA293FE185671548 ] C:\Windows\System32\CertEnroll.dll
00:27:30.0624 0x1534  C:\Windows\System32\CertEnroll.dll - ok
00:27:30.0626 0x1534  [ 3FDBFBE5AE639996EB8D482C16BA7EA9, 7E48304818AABB4C5B0CB7FD32D96D6F90F4180AB0F668A2FE653A7097A40673 ] C:\Windows\System32\provsvc.dll
00:27:30.0626 0x1534  C:\Windows\System32\provsvc.dll - ok
00:27:30.0628 0x1534  [ C4D9FAA5EC3DD9F2170DFA5F2215BE87, ED817F82FF76E25822C1E386CFF08E7D490077B718B344EEE6DC4D20B1A4D9EE ] C:\Windows\syswow64\samcli.dll
00:27:30.0628 0x1534  C:\Windows\syswow64\samcli.dll - ok
00:27:30.0632 0x1534  [ 698B31F992275B27D2157313613E32B2, EBFFEFD4184ED3CBB1A5DAD2D68127A8A313A51EFB273D5D967C73A08162E2C4 ] C:\Windows\System32\certca.dll
00:27:30.0632 0x1534  C:\Windows\System32\certca.dll - ok
00:27:30.0634 0x1534  [ B7A35D1785B4E564BFE3EE66C22B439E, F93AAAAA811A4744F076DCE2229936E6EC9C1D437AD723ABFC1B34E86038017A ] C:\Windows\syswow64\ncryptsslp.dll
00:27:30.0634 0x1534  C:\Windows\syswow64\ncryptsslp.dll - ok
00:27:30.0635 0x1534  [ 4A54273338073939384A14BF0D7AFC14, D513386C01BBE14E099DC4F132CE96DB46F6A1A36A5BEF2DB8C63F3907739374 ] C:\Windows\System32\ngckeyenum.dll
00:27:30.0635 0x1534  C:\Windows\System32\ngckeyenum.dll - ok
00:27:30.0637 0x1534  [ 03B6A416956541484FAEA3C93F8308D7, CFF4E055E11C917DE6018BF4879211C2522298625037BF6B5CEF8E2B57B81B75 ] C:\Windows\System32\fdProxy.dll
00:27:30.0637 0x1534  C:\Windows\System32\fdProxy.dll - ok
00:27:30.0639 0x1534  [ EB1DFA955695C9C52D923C110E2D6291, F9C0D38F67C3D8777E160781FC74678045F52B3C9CD84DCEE0AE9F2371366734 ] C:\Program Files (x86)\Avira\Antivirus\aecore.dll
00:27:30.0639 0x1534  C:\Program Files (x86)\Avira\Antivirus\aecore.dll - ok
00:27:30.0641 0x1534  [ 080C828151F7BFF6A14E0A547DBC1F48, 5EAC4ECD8606CE22F6ABD3BDD7C72B8A8A759BD1CB54F70B37F073B55E35CB8D ] C:\Windows\syswow64\dpapi.dll
00:27:30.0641 0x1534  C:\Windows\syswow64\dpapi.dll - ok
00:27:30.0643 0x1534  [ 77C39E040001A28018451AB68944BF18, 40D082D9AB1AF83461769B9AD141C9D7822D00D6C9431312D607C84DBA690158 ] C:\Windows\System32\cryptnet.dll
00:27:30.0643 0x1534  C:\Windows\System32\cryptnet.dll - ok
00:27:30.0644 0x1534  [ 2C144777278ECD6DFF4B5A90F742C1AA, 8D6AAC71A3DF44E0B5158104A2D17103658FF99FCCD4DEEDB4E9545DA3B9D6D4 ] C:\Windows\System32\ngccredprov.dll
00:27:30.0645 0x1534  C:\Windows\System32\ngccredprov.dll - ok
00:27:30.0647 0x1534  [ AE80657661F164C09D802B339539DDC2, 1973B60640DBF0340626A877A8963FBC9F9882A0A7A84DC743A535E9D679F0FE ] C:\Program Files (x86)\Avira\Antivirus\aebb.dll
00:27:30.0647 0x1534  C:\Program Files (x86)\Avira\Antivirus\aebb.dll - ok
00:27:30.0649 0x1534  [ 94ABA3C163B524F77D6AE831961FA175, 453E7430A1374DA272B6FA121A8361B88095B6B2DE5C51CA3CB397FEFD0B8FC0 ] C:\Windows\System32\certCredProvider.dll
00:27:30.0649 0x1534  C:\Windows\System32\certCredProvider.dll - ok
00:27:30.0650 0x1534  [ 9250D8EF3334B9E9A3A746E54930F4B4, 5F67FACA54ED4E0CDA0B41B6FD22262F22D280F2C269EBB6404A7858BF2BEA5F ] C:\Windows\System32\wlidcredprov.dll
00:27:30.0650 0x1534  C:\Windows\System32\wlidcredprov.dll - ok
00:27:30.0652 0x1534  [ CFE033E44333E1576D2773D8BD6C0E4E, 3ADB0AFEE65D495270C6087FB0A7070E12202D1F4C8A688EBB1BE0EC33B3E4E5 ] C:\Program Files (x86)\Avira\Antivirus\aedroid.dll
00:27:30.0652 0x1534  C:\Program Files (x86)\Avira\Antivirus\aedroid.dll - ok
00:27:30.0653 0x1534  [ EF4AB69EC57EC094AF3CA5BFFEDEE0A2, 9AA897308E7FC5B799E5407BCB37EA7A1DA1AA0782A5635F063574E9CA4BD302 ] C:\Windows\System32\rasplap.dll
00:27:30.0653 0x1534  C:\Windows\System32\rasplap.dll - ok
00:27:30.0655 0x1534  [ F970F7BB66E653C98D406564CDD7E397, DA709A089C1BFE2D3EAAFFD7210C81AAAC5C58E1E2B918162E1D996A2F4A42C3 ] C:\Windows\System32\rasapi32.dll
00:27:30.0655 0x1534  C:\Windows\System32\rasapi32.dll - ok
00:27:30.0657 0x1534  [ 7786E918C10F1212E68A8C44CCAD8C78, 783797B2ADAF260660E08DB64C3BA139CD93D3C20B1191854C80F5F70ADE20EB ] C:\Windows\System32\IDStore.dll
00:27:30.0657 0x1534  C:\Windows\System32\IDStore.dll - ok
00:27:30.0659 0x1534  [ F295FF02C5F73A62F1FDED357D624F70, 0C1DDB61650751719F01B18672810D2606D53D23DAAD02FA74B92F3D137C8781 ] C:\Windows\System32\rasman.dll
00:27:30.0659 0x1534  C:\Windows\System32\rasman.dll - ok
00:27:30.0661 0x1534  [ 76E5BF8C3DAD02DC942CF625C5434190, F40D0087C99F49ECF40ACD6D74308B7999780EB4A6F966317C9351F4E4ACEA54 ] C:\Program Files (x86)\Avira\Antivirus\aeemu.dll
00:27:30.0661 0x1534  C:\Program Files (x86)\Avira\Antivirus\aeemu.dll - ok
00:27:30.0662 0x1534  [ 1BEC8080F58FEE05EBBF99CDF3896E5D, 871830A08310339BD523F06EBB47D774882959211AACF07C88B801A35B0CB8C7 ] C:\Windows\System32\winbio.dll
00:27:30.0663 0x1534  C:\Windows\System32\winbio.dll - ok
00:27:30.0664 0x1534  [ DC2FF8241C4F760CC1C975F1AE276AF0, 967AF78BA380D5D84762CDD810F3F41DE5BA6F94FB335B5DB94615E332820622 ] C:\Program Files (x86)\Avira\Antivirus\aeexp.dll
00:27:30.0664 0x1534  C:\Program Files (x86)\Avira\Antivirus\aeexp.dll - ok
00:27:30.0666 0x1534  [ 504A1FB82023E0123E5E04BF3F1E0A9B, E5660EE9D532E637FD73A1C10E678738E89F8CBCF75100A004D47C48C4D69723 ] C:\Windows\System32\AuthExt.dll
00:27:30.0666 0x1534  C:\Windows\System32\AuthExt.dll - ok
00:27:30.0668 0x1534  [ 00A748B553F05D5631DF64316E2B0DEA, 1A8ED41176ECF600F006F08AD41F838F49B88F41594CED0DAEEF2D1926D2F637 ] C:\Windows\System32\threadpoolwinrt.dll
00:27:30.0668 0x1534  C:\Windows\System32\threadpoolwinrt.dll - ok
00:27:30.0670 0x1534  [ 96C1BFEF826D3AC6D7B792F475960ABF, E4EBCBD3C2B435CBED5C97A6CB0E5733A14810817ECEB75FA934E514A9433F18 ] C:\Program Files (x86)\Avira\Antivirus\aegen.dll
00:27:30.0670 0x1534  C:\Program Files (x86)\Avira\Antivirus\aegen.dll - ok
00:27:30.0672 0x1534  [ E4C695AE07863C771784F9C70227E4D5, E3A0007285F1B545E8DF2CBD23EBFFC277A045992C9A839E8365325A78E21564 ] C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\comctl32.dll
00:27:30.0672 0x1534  C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\comctl32.dll - ok
00:27:30.0674 0x1534  [ 701B69E53530D7D634532EFD582FD3E4, 99B0915D00DEBFB40D2B1B0B597FF07E66763F73E30B555B73338B17F7410058 ] C:\Program Files (x86)\Avira\Antivirus\aehelp.dll
00:27:30.0674 0x1534  C:\Program Files (x86)\Avira\Antivirus\aehelp.dll - ok
00:27:30.0676 0x1534  [ 919663D05E791FBC7A5766E150435279, 18424249D5135E7F6345047FD60420BE5FEE6BF020EC112EE7BC4500EB28E008 ] C:\Windows\System32\NetworkStatus.dll
00:27:30.0676 0x1534  C:\Windows\System32\NetworkStatus.dll - ok
00:27:30.0678 0x1534  [ ECDFA9E8D84B7B3EBE2E2A0C9284A360, 9AB9B9604B845A2E71AA51A053AF83B149F13D5D8110C6FE9E9C79E2482251A8 ] C:\Windows\System32\PhotoMetadataHandler.dll
00:27:30.0678 0x1534  C:\Windows\System32\PhotoMetadataHandler.dll - ok
00:27:30.0680 0x1534  [ 70A0FD243162058F40C45C595E778500, 6E8C4C43AE7F6E53B0EC0D17404CC3E7315F2629870F4075B4B43CF32AA85483 ] C:\Windows\System32\InputSwitch.dll
00:27:30.0680 0x1534  C:\Windows\System32\InputSwitch.dll - ok
00:27:30.0682 0x1534  [ ED82DA8173630F90E024987EA5DCE508, E1BB614039F60259E34B6C84120EEAA462D2786263CDDB022070111606B0EB44 ] C:\Program Files (x86)\Avira\Antivirus\aeheur.dll
00:27:30.0682 0x1534  C:\Program Files (x86)\Avira\Antivirus\aeheur.dll - ok
00:27:30.0684 0x1534  [ C88A8A557D33B2F613380F7239EE9606, 978907A65CB4C4EAFDDDF2C343A89DA46DB0D5B1A3BA30439A4F5183AAB74089 ] C:\Windows\System32\FontGlyphAnimator.dll
00:27:30.0684 0x1534  C:\Windows\System32\FontGlyphAnimator.dll - ok
00:27:30.0686 0x1534  [ 5C2CE789A9250438AB09BCF89B08A1D0, E57CE99D2F8FF6D51B0C5502A6DB491878695C44C4336DB9F0072D4347AEA6FD ] C:\Windows\System32\msftedit.dll
00:27:30.0686 0x1534  C:\Windows\System32\msftedit.dll - ok
00:27:30.0688 0x1534  [ 93835802FAC453A3CE9D9D6CBADDA7F9, BA72150287910EC895BB5A0575CE752A880F2DFE59209BE97F1D51998DF20BF4 ] C:\Program Files (x86)\Avira\Antivirus\aemobile.dll
00:27:30.0688 0x1534  C:\Program Files (x86)\Avira\Antivirus\aemobile.dll - ok
00:27:30.0690 0x1534  [ EC2CD98D79CC8D6E460A30E4C4747D31, C76C2944CBD8D38E23E46AACA12C8AAA0652E355C5AC7780B2F9E9AAFB0C2833 ] C:\Windows\System32\globinputhost.dll
00:27:30.0690 0x1534  C:\Windows\System32\globinputhost.dll - ok
00:27:30.0692 0x1534  [ F15D040748F92FDA46EE9859A0A18BA1, 183D11E71FA99C0277C0DCBE85E7367B4A6109688D883257374764C98E953250 ] C:\Program Files (x86)\Avira\Antivirus\aeoffice.dll
00:27:30.0692 0x1534  C:\Program Files (x86)\Avira\Antivirus\aeoffice.dll - ok
00:27:30.0694 0x1534  [ B6C1833677CAD703E8B6139F15F57C83, 646215312C48251E2A9485A6D28C07E9CDEF8389EA7717DFB80EE08EDFD66741 ] C:\Program Files (x86)\Avira\Antivirus\aepack.dll
00:27:30.0694 0x1534  C:\Program Files (x86)\Avira\Antivirus\aepack.dll - ok
00:27:30.0698 0x1534  [ 26F821FEA513F81EBACBED5AC8E2DB10, 699EE1534DE0328379F8051EDA1C2A2D1080CD2F57DA1A18123EF8C7EEE13E11 ] C:\Program Files (x86)\Avira\Antivirus\aerdl.dll
00:27:30.0698 0x1534  C:\Program Files (x86)\Avira\Antivirus\aerdl.dll - ok
00:27:30.0700 0x1534  [ E6187818B8F88B52EE6587BEA6766D16, F1F6C78DBCB2FCAA62A008DB1C10AF95C867A57C29B107728DE349FAD27910EB ] C:\Program Files (x86)\Avira\Antivirus\aesbx.dll
00:27:30.0700 0x1534  C:\Program Files (x86)\Avira\Antivirus\aesbx.dll - ok
00:27:30.0701 0x1534  [ 627F2603C9CF6BFCA36DB010BBCAED8D, 183C06B4389D816B7A35B9D9EA2AB5EF73B3290D267EB5068DF45CE239707E7B ] C:\Program Files (x86)\Avira\Antivirus\aescn.dll
00:27:30.0701 0x1534  C:\Program Files (x86)\Avira\Antivirus\aescn.dll - ok
00:27:30.0703 0x1534  [ 4DF4BB72F21D568A32A004FC34BF88AF, F36548BD5CEE2C8F61B8BAABBFC98779F69647B1C3E13AAB44D39C2BCC61723F ] C:\Program Files (x86)\Avira\Antivirus\aescript.dll
00:27:30.0703 0x1534  C:\Program Files (x86)\Avira\Antivirus\aescript.dll - ok
00:27:30.0705 0x1534  [ FEE1A3C2A5170FD883CC4AAC53E492CC, 28C739542FB6D5FC0805C0A8527022035DFB274AE7CBBE6E82EE59939935C321 ] C:\Program Files (x86)\Avira\Antivirus\aevdf.dll
00:27:30.0705 0x1534  C:\Program Files (x86)\Avira\Antivirus\aevdf.dll - ok
00:27:30.0707 0x1534  [ 7DE87ED9EF2A4A76EF5F76BCDC753B18, EA77E0E478B4EF1F2BB6C3DE050C6943A36173ED0FABE636E2ECD7B0CC384002 ] C:\Program Files\Microsoft Office 15\ClientX64\streamserver.dll
00:27:30.0707 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\streamserver.dll - ok
00:27:30.0709 0x1534  [ 5C75A0A849CB38F199DE01A246B1D937, 29C10FB3FFA0E3CFD04C5247C3ED3A975575FAD44D8A1E447B23B43213781653 ] C:\Windows\System32\msdelta.dll
00:27:30.0709 0x1534  C:\Windows\System32\msdelta.dll - ok
00:27:30.0711 0x1534  [ 5440C7A7AA5E93B77E27875887A35F34, 225254601F6460F3C002DEFEB95B1C5D8B347B19A886C66409FA520A6C159B54 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvApi.dll
00:27:30.0711 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvApi.dll - ok
00:27:30.0713 0x1534  [ A83CC5954F5480FEA532E63256AAF966, 6191B795AC030644066D7352ECFCA70EBAEF5C42DEB7B37B3B8AAE311E734F81 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVPolicy.dll
00:27:30.0713 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVPolicy.dll - ok
00:27:30.0715 0x1534  [ 443F4EFD2ED09C2BE07CDDD8AB4D324D, 6FB5CAAEABDDEE7FAF5DD4549A47CB5C45A67EF97C98CDCF5C08FB209CF0361C ] C:\Program Files\Microsoft Office 15\ClientX64\AppVOrchestration.dll
00:27:30.0715 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVOrchestration.dll - ok
00:27:30.0716 0x1534  [ 37E7940D47D84E16CD8506750A9CCC88, 365F888D4F15FC41A7B9CE423F1C427882D0A0773C1E69FF8ED35F664F1AE045 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvStreamingManager.dll
00:27:30.0716 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvStreamingManager.dll - ok
00:27:30.0718 0x1534  [ 8EA7AB256848E12A8C47B0BE89C80102, 4A4B24D50129B0EC596BBE1ABB201D400E00DFB100E0DDD6216C911A4DFCEA6A ] C:\Program Files\Microsoft Office 15\ClientX64\AppVManifest.dll
00:27:30.0718 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVManifest.dll - ok
00:27:30.0720 0x1534  [ 06578CCFA1BFF7D9F07FACBE83ED3072, 9E7AC7F2FCE0931E555C89CB34276DA5B3D47E3BAAC6F810F9B592875A991812 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVCatalog.dll
00:27:30.0720 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVCatalog.dll - ok
00:27:30.0722 0x1534  [ 3EF16C352C5325E911CEEDA2DB5A99AA, 338A6CC967E1575E2D03578F9FAECE2F99DA9BFC7F1F3EC4ABC4FFF4CBD84EE4 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvVirtualization.dll
00:27:30.0722 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvVirtualization.dll - ok
00:27:30.0724 0x1534  [ 4A138F7D971B828F4AC02ADE7E9CD422, 0F31182C7DFF016BBCB22703B4C25C31CC20FED6E731989920D0705ACA51273C ] C:\Program Files\Microsoft Office 15\ClientX64\AppVIntegration.dll
00:27:30.0724 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVIntegration.dll - ok
00:27:30.0726 0x1534  [ 4BDFE0A96525403FC1FF4E2D3886A746, 4948975D4408D67FD961C5D1B090899E29D78C2C277221B8B95E40C04308FE1D ] C:\Program Files\Microsoft Office 15\ClientX64\AppVFileSystemMetadata.dll
00:27:30.0726 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVFileSystemMetadata.dll - ok
00:27:30.0728 0x1534  [ F2ADBF0278E3B9E46BCE40AB31273BB9, 42039E0F78876C81535794C9A798A5300A66BF6D452BEBDB56D795FA02635CA9 ] C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvSubsystemController.dll
00:27:30.0728 0x1534  C:\Program Files\Microsoft Office 15\ClientX64\AppVIsvSubsystemController.dll - ok
00:27:30.0730 0x1534  [ 78756408493815E34DACA75B385EAD27, CFC1A285A0C4FF94614AD3564621D1E450B8BF74D99EDD1D20CB7A446D7DA551 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\a48d9e0c04ec7de632601ca67858a3d2\System.ServiceModel.ni.dll
00:27:30.0730 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\a48d9e0c04ec7de632601ca67858a3d2\System.ServiceModel.ni.dll - ok
00:27:30.0732 0x1534  [ FE58687E1A254969396B0A370FD6AA1D, D2095FFE3E8B96D4C1CAEBD95127D6D376835D2AB4766971B30EF6BFA7B0A51F ] C:\Windows\System32\CourtesyEngine.dll
00:27:30.0732 0x1534  C:\Windows\System32\CourtesyEngine.dll - ok
00:27:30.0734 0x1534  [ DE6B1AB2A351E02CC9E24CF3E6008DCC, 66F2E4BE0E87EED3E16C3E2155E6D6D8F4D7A3B256345EED7123D792FF9798E8 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
00:27:30.0734 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - ok
00:27:30.0737 0x1534  [ 523349A59C953A87BE7C15EA1DDD7CCE, CB13415D7649C0174B021291948813F8A6C13A26680C352D545ACF45D3D26A90 ] C:\Windows\System32\windowsperformancerecordercontrol.dll
00:27:30.0737 0x1534  C:\Windows\System32\windowsperformancerecordercontrol.dll - ok
00:27:30.0738 0x1534  [ 73AF2D8038FCEF4C4EB4B3106B41967A, 71FBC0C2E794C853413C81DE7141E0F59913BAD1BB08CBD614D139408AEC7D96 ] C:\Windows\System32\msxml6.dll
00:27:30.0739 0x1534  C:\Windows\System32\msxml6.dll - ok
00:27:30.0740 0x1534  [ 30F68C0F139797674436CA73D6879522, A3C6BE38A56912512271889A63E45A3749D3B26E4690C4CE48E4CE474C25F998 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\625bd1acaf45990a194af5deefa57e55\System.Transactions.ni.dll
00:27:30.0740 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\625bd1acaf45990a194af5deefa57e55\System.Transactions.ni.dll - ok
00:27:30.0743 0x1534  [ 9ED316115174625B8AF69EF0842846C3, 6A06AC83E7C33C090BDB391A6BCD1192FA1025A7EE750EF8B4362A4E84DB2AE6 ] C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
00:27:30.0743 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - ok
00:27:30.0745 0x1534  [ 36BC8A85EA6C207250DD61557D283CE6, BD273C45A69AE8308F6AA7813A5CC78FD02EE0AFBA17960F34A2439A7FD11E10 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\0ae5397e59e320e24681e9297b413ed2\System.Runtime.Serialization.ni.dll
00:27:30.0745 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\0ae5397e59e320e24681e9297b413ed2\System.Runtime.Serialization.ni.dll - ok
00:27:30.0747 0x1534  [ F3A9B07B7812487A7970A47DCD3FAE75, 94BE8D429D86DCCE0EFF30057C5649212655D9FF156C999F233E2040E647768A ] C:\Windows\syswow64\perfos.dll
00:27:30.0747 0x1534  C:\Windows\syswow64\perfos.dll - ok
00:27:30.0749 0x1534  [ A1BF12CB6CDD0B65142604DF8902F480, 601DA77241AFB4EB9CB3214C7FB43B2B5AA79FCD7A4097F799E471BC833FE364 ] C:\Windows\syswow64\perfproc.dll
00:27:30.0749 0x1534  C:\Windows\syswow64\perfproc.dll - ok
00:27:30.0751 0x1534  [ F0B7E09E37356D88D2ED43D4DC67AC01, 8B7CD44B71EF4563E9FA97EFBEF3BC113418516EA73AE886A3B5F910FC5EE8F1 ] C:\Program Files (x86)\Avira\Launcher\Avira.Mixpanel.dll
00:27:30.0751 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.Mixpanel.dll - ok
00:27:30.0753 0x1534  [ 948A568847BB932B886D7EE0F98F28CF, 5C2A7033C3DB6A3EBB9C2127B92C5FDA50C831ECCE238D1685901C62D4A11030 ] C:\Program Files (x86)\Avira\Launcher\Avira.FileDownloader.dll
00:27:30.0753 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.FileDownloader.dll - ok
00:27:30.0755 0x1534  [ A3FEC1E5FB703CB8B3E5A1FC3DAC5931, 8CB6737A8F77866AA0C867EC3916C64E963FE37CA33F55B41A472BDA47344995 ] C:\Program Files (x86)\Avira\Launcher\ServiceStack.Text.dll
00:27:30.0755 0x1534  C:\Program Files (x86)\Avira\Launcher\ServiceStack.Text.dll - ok
00:27:30.0757 0x1534  [ 5002E16AC0B058089CC3BC241AFF8BF2, C490E2F0408BA35C6762970A60EACB53378372A065E0189EBD71EFBFAE4421EC ] C:\Windows\System32\AudioSes.dll
00:27:30.0757 0x1534  C:\Windows\System32\AudioSes.dll - ok
00:27:30.0759 0x1534  [ 3C9420A013661B401791494CB9C7AF91, F5CE37262FC9DA3AA595F5C969CED7626528348F556C18F943EEC325BB0A0746 ] C:\Program Files (x86)\Avira\Launcher\NLog.dll
00:27:30.0759 0x1534  C:\Program Files (x86)\Avira\Launcher\NLog.dll - ok
00:27:30.0761 0x1534  [ BC314942B304E35A78EA98D85DD3DD48, A80CA5941644886D23DD76272374E92EF0CF4A691FC102C09C58F3F948958CF4 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\fbdef51c0e89515e75a83e4751c79d4a\System.Drawing.ni.dll
00:27:30.0761 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\fbdef51c0e89515e75a83e4751c79d4a\System.Drawing.ni.dll - ok
00:27:30.0763 0x1534  [ 99D324BEDEA13B228D1F8F4FD1E1C22C, 65203413949A20BC2AEB062F8285C82CFF393C06EFDD9907D396A315AE9B6120 ] C:\Windows\System32\NetSetupEngine.dll
00:27:30.0763 0x1534  C:\Windows\System32\NetSetupEngine.dll - ok
00:27:30.0765 0x1534  [ FD215A1E94F9A1931FA0A590688A7E50, 0CFDAD7A01AE9633F2455802664129AA6F9E54E029CDC9927E1469F0938B5D03 ] C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
00:27:30.0765 0x1534  C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll - ok
00:27:30.0767 0x1534  [ 9446F788C72975805CBA5BED6AC29DE8, 31BD22019F56138D2703CB7FD909F6E13C5DF71352178B43F7F24B5DBBC14446 ] C:\Windows\System32\actxprxy.dll
00:27:30.0767 0x1534  C:\Windows\System32\actxprxy.dll - ok
00:27:30.0768 0x1534  [ 2AAD720B32904B97EDD8C3211344F79E, 41B1AEA5FAA48033B2581E18D68EFC986C3D65B383847E250C054CE3133A893C ] C:\Windows\System32\browser.dll
00:27:30.0768 0x1534  C:\Windows\System32\browser.dll - ok
00:27:30.0770 0x1534  [ 272E4008D917E41225F84CFA01F085CB, 1194D2DBF02394C7E8B04FAC526566FCF866BF062A506B09E54A9EB7E54F213F ] C:\Windows\System32\dafupnp.dll
00:27:30.0770 0x1534  C:\Windows\System32\dafupnp.dll - ok
00:27:30.0772 0x1534  [ BF71B3FB5B7557CB740CDB09C5FB50D9, D6F9E65FDC9C4ADAFE82D94F71A1F5960DB3BEEBF4FE5B2D087515C4FAA5F287 ] C:\Windows\System32\ssdpsrv.dll
00:27:30.0772 0x1534  C:\Windows\System32\ssdpsrv.dll - ok
00:27:30.0774 0x1534  [ 2342E4B55270355478F761047F21D4D9, 9FB4F2D6B632AB2F07F6DA1C645CBCBC5D974A778AEB198D7EBACFD03BB96B53 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\f973625b155d04ed7ca1312e9f619cda\WindowsBase.ni.dll
00:27:30.0774 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\f973625b155d04ed7ca1312e9f619cda\WindowsBase.ni.dll - ok
00:27:30.0776 0x1534  [ 81A347C8C023A774E6883250C5351421, 3B66BFD9C2583D6EEEF49FE4BF757954A20AEA909C316E9CB1A30838206FAB22 ] C:\Windows\System32\ImplatSetup.dll
00:27:30.0776 0x1534  C:\Windows\System32\ImplatSetup.dll - ok
00:27:30.0778 0x1534  [ 14B46248612DF1B1A695040FFFBCFAFC, 8C373A3C416FC9AB3872A187E64AC7A6E69FF605BD8784E8F2B1C28C293A0495 ] C:\Windows\System32\drivers\tunnel.sys
00:27:30.0778 0x1534  C:\Windows\System32\drivers\tunnel.sys - ok
00:27:30.0781 0x1534  [ A4C5E01D55CD48926F014460651FCFE8, E998D5EA675EF255E0002D44AFBCA9F68E1FE02EE69BF6E66ACFCB08FA069FB7 ] C:\Windows\System32\nci.dll
00:27:30.0781 0x1534  C:\Windows\System32\nci.dll - ok
00:27:30.0782 0x1534  [ 9DAA9CCD2F1EA10FB53A408C65805C2A, 7E0BA39721A999D1BF2F9FCA5B978098751E3091504642C17BB2155F419C1627 ] C:\Windows\System32\DAFWSD.dll
00:27:30.0782 0x1534  C:\Windows\System32\DAFWSD.dll - ok
00:27:30.0784 0x1534  [ 0907FEEF0CFE3135705298CE55E7B58C, 29C9AEFCAF586C55CBAE3B807F83D6F70E27ACA1CD8E643810C9FB55208B6CD4 ] C:\Windows\System32\FlightSettings.dll
00:27:30.0784 0x1534  C:\Windows\System32\FlightSettings.dll - ok
00:27:30.0786 0x1534  [ 8137722F723D54C9E4A5E183237A2D6C, 471F281AA8A13D3802DAE0A911F687022385C86FD60FBE49D17223794297B886 ] C:\Program Files (x86)\VMware\VMware Player\vmnetBridge.dll
00:27:30.0786 0x1534  C:\Program Files (x86)\VMware\VMware Player\vmnetBridge.dll - ok
00:27:30.0788 0x1534  [ 5F2F8F9D6E872A788B5F5043C8B26712, 6B843296556A21FE6D7FF68CEEDFFCAE11F08E6B3E06C7BBB60F2A307C5D22D6 ] C:\Windows\System32\wbem\WmiPrvSD.dll
00:27:30.0788 0x1534  C:\Windows\System32\wbem\WmiPrvSD.dll - ok
00:27:30.0790 0x1534  [ 6BA52113551624C5B36C08A8B2C8B4C8, 781C212813D7B875495339D4EA3C2B20A0195A9FB1B4FD6BA6FD2A31AC2566C6 ] C:\Windows\System32\configurationclient.dll
00:27:30.0790 0x1534  C:\Windows\System32\configurationclient.dll - ok
00:27:30.0792 0x1534  [ 509E77AA451A1F7C790B797AA5487DB3, FD837E3BF1A7F94BD2C6BFE537BA6F7F4EB0112F50A81B179D99087B372AFB6F ] C:\Windows\System32\ncobjapi.dll
00:27:30.0792 0x1534  C:\Windows\System32\ncobjapi.dll - ok
00:27:30.0793 0x1534  [ CE5D7B8D2B03D0B1294D61238EEDB5E8, 9763EA2E973E15979FF25C20C2846196E916FEC5EA64C16D0E18DD51496DDFD3 ] C:\Windows\System32\tcpipcfg.dll
00:27:30.0793 0x1534  C:\Windows\System32\tcpipcfg.dll - ok
00:27:30.0795 0x1534  [ 7660A9FB2B1B1D45455A899FF6C666FB, 3BE43FD3FBCBD4F1E8B660B5B3A51A4A80DBAFE9C4500ADC168E25DC7E1B2077 ] C:\Windows\System32\wbem\wbemess.dll
00:27:30.0795 0x1534  C:\Windows\System32\wbem\wbemess.dll - ok
00:27:30.0797 0x1534  [ 7CCCD83E35A5BC7BCA99829EEA8DBBE4, B7ACC51D8902DBD2BBCF19445504FC406D62DD4279A3463BFC078D79E7D06EB2 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\bc9659373280d0e6c1f4496c8163b07d\System.Xml.Linq.ni.dll
00:27:30.0797 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\bc9659373280d0e6c1f4496c8163b07d\System.Xml.Linq.ni.dll - ok
00:27:30.0799 0x1534  [ 41512605AA7724743BD32DD4199426D7, BA145D207B3F7590C57D9C747157EF4AA80F1FFF421344E168694AF2E8858AE0 ] C:\Windows\System32\bthprops.cpl
00:27:30.0799 0x1534  C:\Windows\System32\bthprops.cpl - ok
00:27:30.0801 0x1534  [ E3A8E298C83FB5DB60213BF35EB06A19, 16BCAABC7AB2F6D77C3BE13F4223EA4A4D47E78083F97C617C5BA74B28E5A9C1 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnector.Interface.dll
00:27:30.0801 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnector.Interface.dll - ok
00:27:30.0803 0x1534  [ 7C359500407DD393A276010AB778D5AF, A4009288982E4C30D22B544167F72DB882E34F0FDA7D4061B2C02C84688C0ED1 ] C:\Program Files (x86)\Avira\Launcher\Ionic.Zip.Reduced.dll
00:27:30.0803 0x1534  C:\Program Files (x86)\Avira\Launcher\Ionic.Zip.Reduced.dll - ok
00:27:30.0805 0x1534  [ A2A5208A6D36F99334A9719550CCE272, A8CE50FC3826B98192A677D8DDC81FFAC28F52955E6CA82992736DC14C87E901 ] C:\Windows\System32\vnetlib64.dll
00:27:30.0805 0x1534  C:\Windows\System32\vnetlib64.dll - ok
00:27:30.0808 0x1534  [ 37347BE040301808515AF048A1126AA0, 5282ADE43B8926B9A5CE6EF0656369451644207D9A47CA5EBD21A4C2B5B8AF0D ] C:\Windows\System32\newdev.dll
00:27:30.0808 0x1534  C:\Windows\System32\newdev.dll - ok
00:27:30.0810 0x1534  [ 69D6CAA652FBE778D964B3DA08492AAD, 54F0F79075C287466169AC84AE4EAF959CB6794BBEC97DFF6DB7A67D546A08DB ] C:\Windows\System32\mprapi.dll
00:27:30.0810 0x1534  C:\Windows\System32\mprapi.dll - ok
00:27:30.0811 0x1534  [ 26F078C4AA1C5186358EE8177BC0E6AF, 9522A6D4EB3DA09B41C5208B27BB6C72F286246B806276650478E5C4975B93F9 ] C:\Windows\System32\devrtl.dll
00:27:30.0811 0x1534  C:\Windows\System32\devrtl.dll - ok
00:27:30.0813 0x1534  [ 55193DEB631BB718964A86571192DF69, 0FF01D2E8D34CFE6590A5AD660FC94FFE0A13F63481BFF7C4D6851EA174F6AC0 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\dccaa89b0e7ae6bc80f5dfe053220780\System.Data.Linq.ni.dll
00:27:30.0813 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\dccaa89b0e7ae6bc80f5dfe053220780\System.Data.Linq.ni.dll - ok
00:27:30.0815 0x1534  [ 640FC276F21CE523DBF99D5F65FED642, 9CE8FF1215BFB2390E01B429DFEBF12EF93B88D6A24AC9406310DAAC2CDFECC2 ] C:\Windows\System32\wbem\WmiPrvSE.exe
00:27:30.0815 0x1534  C:\Windows\System32\wbem\WmiPrvSE.exe - ok
00:27:30.0817 0x1534  [ C51E72C0C4C9D20F8803BF34A741E032, 4BD0A5C58381ECC6CC7C96FBA7735251309DB7B890BEAF9BECF41B553E035221 ] C:\Windows\System32\wbem\cimwin32.dll
00:27:30.0817 0x1534  C:\Windows\System32\wbem\cimwin32.dll - ok
00:27:30.0818 0x1534  [ 58F1913057D649703423C7B7EF2D7D4A, 4D487A7F32CCD5D2655BA124250BC58C1A22D6048DF370E6EF83FCB741BF3E39 ] C:\Windows\System32\framedynos.dll
00:27:30.0818 0x1534  C:\Windows\System32\framedynos.dll - ok
00:27:30.0820 0x1534  [ 35BC63C8E290471EDDB968988E46860E, 936FF1CA976BD21997D79B002798EF2270FC135CD2E055235ADAB66FDBE9F359 ] C:\Windows\System32\wmi.dll
00:27:30.0820 0x1534  C:\Windows\System32\wmi.dll - ok
00:27:30.0822 0x1534  [ EF6AD94F2AF05D696001835FEED638AC, FFF313751E427391C931B91B0BD7B451BDDE0B60845F8E8169C2A2B3DBEBC8F2 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\19e38e739ece57683d341b1ea4af191f\System.Windows.Forms.ni.dll
00:27:30.0822 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\19e38e739ece57683d341b1ea4af191f\System.Windows.Forms.ni.dll - ok
00:27:30.0824 0x1534  [ 3B4922C9FE0A4937973DE3E9443F789D, 6606D40539BFF812D7B93070315A6886DDE13FDB56C84B484EED6CE6728D77DC ] C:\Windows\System32\browcli.dll
00:27:30.0824 0x1534  C:\Windows\System32\browcli.dll - ok
00:27:30.0825 0x1534  [ 81CABFAA2C4EB02B48E4A3DD934C51F8, 1AA19D9E1700967F12BFA87A37A5AA27E21F333859EF40F1D057C2CE61EB0DA4 ] C:\Windows\System32\schedcli.dll
00:27:30.0825 0x1534  C:\Windows\System32\schedcli.dll - ok
00:27:30.0827 0x1534  [ EBA353417C9A967882B26C911754BBAF, A416EC47D4E77378C95F3595597755CB3EC78A684675712A22DA801D08116501 ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\WdfCoinstaller01011.dll
00:27:30.0827 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\WdfCoinstaller01011.dll - ok
00:27:30.0829 0x1534  [ 9365D299DD1FE6C299996FDE7F69166A, EA0E3D110C12CD780E978F02017863EC78DB4A151F1F529AB53DAEFF2C1D4A96 ] C:\Windows\System32\wbem\WmiPerfClass.dll
00:27:30.0829 0x1534  C:\Windows\System32\wbem\WmiPerfClass.dll - ok
00:27:30.0831 0x1534  [ 0E5D6FF29A5D55957C1DA00563145979, FD69A41FD917A7148674DC46560FEC3F1CE75459D63FAEF39D92D72D52B96FC0 ] C:\Windows\System32\pdh.dll
00:27:30.0831 0x1534  C:\Windows\System32\pdh.dll - ok
00:27:30.0833 0x1534  [ B80AEE6B9F9C828D89CC46CD3E382ADC, 37CA298DDC24C3ADC6A45DC10CC625A33C2850969ECEA81C49854D63A805CAE7 ] C:\Windows\System32\NetCfgNotifyObjectHost.exe
00:27:30.0833 0x1534  C:\Windows\System32\NetCfgNotifyObjectHost.exe - ok
00:27:30.0835 0x1534  [ 29D193858D7ECEAD6A28B29D5245F571, 5D6B69954DFECAEA7AB095C25A6D3EFFCE889DEA7C4316A55898A0440DF8BE41 ] C:\Windows\System32\Windows.Media.Streaming.dll
00:27:30.0835 0x1534  C:\Windows\System32\Windows.Media.Streaming.dll - ok
00:27:30.0837 0x1534  [ 47F5FCCF19C316922391096ED0A36DCB, AB775B29642D9B0924CFFF02E0AD49117E7B51BBADFDE375279CF89F286F9A97 ] C:\Windows\System32\drvstore.dll
00:27:30.0837 0x1534  C:\Windows\System32\drvstore.dll - ok
00:27:30.0839 0x1534  [ 33E8155FBC45B0A3FACFDE28709E6993, EEF302BDBE618773B5D6EDB8E2007C05221F051FDDFDAD77F01DE7B896FB0FA4 ] C:\Windows\System32\upnp.dll
00:27:30.0839 0x1534  C:\Windows\System32\upnp.dll - ok
00:27:30.0841 0x1534  [ E059CC0E1B17B8D4D0086FEF26878412, 53B3C6F2C0E0F179948E1A17BE215526864E3035A5C92A137E2FF00F340DECB9 ] C:\Windows\System32\NapiNSP.dll
00:27:30.0841 0x1534  C:\Windows\System32\NapiNSP.dll - ok
00:27:30.0842 0x1534  [ 4C1051AEA657BD3FDC36B46823FE64EF, 08CEAE2B416380B73A4764A1CB81F9D0EEBFD297541BC7D6403CB6480220E5BA ] C:\Windows\System32\pnrpnsp.dll
00:27:30.0842 0x1534  C:\Windows\System32\pnrpnsp.dll - ok
00:27:30.0844 0x1534  [ BC0D9B499B456C390467DA673BEA9F0A, 5918816F345E4E290088DAB73422D21BF722DD3C079839D5F7A35A9A2FD5C939 ] C:\Windows\System32\winrnr.dll
00:27:30.0844 0x1534  C:\Windows\System32\winrnr.dll - ok
00:27:30.0846 0x1534  [ 888F9A52CFDF7629F714CE7776B04F3D, 5F5D709A040CF1B6925191395A3F6EAF56D6D34E11CC214A54C5D818AD6AC31D ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\70135570ca135349ed66dc855f868945\System.Data.ni.dll
00:27:30.0846 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\70135570ca135349ed66dc855f868945\System.Data.ni.dll - ok
00:27:30.0849 0x1534  [ 8B10998E4BF142A961F22BAC65ED2A32, 92C64342897904CEED0216B3C4C34ECA81D5D0659F1FC0E329B66C9AC94383B0 ] C:\Windows\syswow64\dssenh.dll
00:27:30.0849 0x1534  C:\Windows\syswow64\dssenh.dll - ok
00:27:30.0851 0x1534  [ 57E9A15313916A68F09A0953B27D2737, 561D715B48C450712C909ED66759F13D96D01A45828F516EE533216B2748C7B8 ] C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
00:27:30.0851 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - ok
00:27:30.0853 0x1534  [ FF0968FE35A0E2D3033A19FDBB18721F, 38C6D067B3A159BCBD51E230C12AB1A1F4B617C0E36C43C0F0AB2928908C7F72 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\dc92ba4ca16df1772d16803348f5fff5\SMDiagnostics.ni.dll
00:27:30.0853 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\dc92ba4ca16df1772d16803348f5fff5\SMDiagnostics.ni.dll - ok
00:27:30.0855 0x1534  [ 74F85589423E4863DD21460D1F078D3B, 30481C209581BCF1C65E541B1C09BDD24998219DC3A257CB3FF020600CEF8B44 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\2323d28fd5a3da6b8015c47a7b1bd076\System.ServiceModel.Internals.ni.dll
00:27:30.0855 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\2323d28fd5a3da6b8015c47a7b1bd076\System.ServiceModel.Internals.ni.dll - ok
00:27:30.0857 0x1534  [ 81ECBD81A38240F4B9702CE4956A1167, 8F71CDFD63EE8AC9B0BB195C1E7A59061F9FE09AB5A0C06F590E38BEC0D0CD30 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\mscorlib.resources\v4.0_4.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
00:27:30.0857 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\mscorlib.resources\v4.0_4.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll - ok
00:27:30.0859 0x1534  [ 9750296A11DDC054F4399B74B1B620DC, 5DC260EB5B9F945CA358AEB528D0C85E5A084A7F9BB1C80824686E19226986A1 ] C:\Windows\syswow64\propsys.dll
00:27:30.0859 0x1534  C:\Windows\syswow64\propsys.dll - ok
00:27:30.0861 0x1534  [ 8AF239126A0C5C4800F5B3C65A1F1474, B3D57D8B04AEBF16A4218EF15D33766535CC5A0F7E76DDFE81436FCA482E0871 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\3c3c88fe4c04168a4b70630c7a0643f5\System.IdentityModel.ni.dll
00:27:30.0861 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\3c3c88fe4c04168a4b70630c7a0643f5\System.IdentityModel.ni.dll - ok
00:27:30.0863 0x1534  [ 7423F08580B5FB7C180A70FBE67F19DB, 82CDF9F509AD008A14AC7F970E872EC50196729DDE900E96398ACD893687457D ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
00:27:30.0863 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - ok
00:27:30.0865 0x1534  [ 4C7CB0F91EF78098F74336CE53EE33B0, A2CC7883C83A538C9065F044ADD6646A9C21D65498A129F01BE040B91381DAA7 ] C:\Program Files (x86)\Avira\Antivirus\avpref.dll
00:27:30.0865 0x1534  C:\Program Files (x86)\Avira\Antivirus\avpref.dll - ok
00:27:30.0867 0x1534  [ F60FCAFCF7787372274D9D6568DA655A, 7C530E238504C2260C2B86B50B1227A128EB168A3972BACC660474E3BAD2E871 ] C:\Program Files (x86)\Avira\Antivirus\gpavgio.dll
00:27:30.0867 0x1534  C:\Program Files (x86)\Avira\Antivirus\gpavgio.dll - ok
00:27:30.0869 0x1534  [ 6581331FCED51F9422BE22E9EF0028E6, DDCBF45979CC480FADE5216A01C8F88D9173CBF4020FBB4EE22298A35F3BCABC ] C:\Program Files (x86)\Avira\Antivirus\avgio.dll
00:27:30.0869 0x1534  C:\Program Files (x86)\Avira\Antivirus\avgio.dll - ok
00:27:30.0870 0x1534  [ 1F7893261E99C7AD04FFA4A4FC885B12, 0517D1539330E91620738F12144634FA7BA93B1CC6E8D4A39FB03148ABFC44CD ] C:\Windows\syswow64\fltLib.dll
00:27:30.0870 0x1534  C:\Windows\syswow64\fltLib.dll - ok
00:27:30.0872 0x1534  [ 63B35AD0D34322666BCA0AAD3CB7FE1B, B468024CB2A4157F87C33F568150846490F93DFC62FF8377821FD4DE0B848527 ] C:\Program Files (x86)\Avira\Antivirus\avesvc.dll
00:27:30.0872 0x1534  C:\Program Files (x86)\Avira\Antivirus\avesvc.dll - ok
00:27:30.0874 0x1534  [ 95B1B072EFB10A2E7449D23404BBECDF, AD2EAC23C529995C9752599AC38070E8C492566AE6C2D9BA31D2820296B27979 ] C:\Program Files (x86)\Avira\Antivirus\guardmsg.dll
00:27:30.0874 0x1534  C:\Program Files (x86)\Avira\Antivirus\guardmsg.dll - ok
00:27:30.0876 0x1534  [ A77EC731EA7B808902A77D866551A8CD, 2B8870E34955CB0EFE7D383218163C5FFC3A86A5107CAD7D4DC0146A084937DB ] C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
00:27:30.0876 0x1534  C:\Program Files (x86)\Avira\Antivirus\avshadow.exe - ok
00:27:30.0878 0x1534  [ E98E967C9D3C9DC3299FCD720F18D786, CCB5E05CAE0CAD30DC5648AE89A9DE18593104C15C21A6518B5D4DA979180B41 ] C:\Program Files (x86)\Avira\Antivirus\avipc64.dll
00:27:30.0878 0x1534  C:\Program Files (x86)\Avira\Antivirus\avipc64.dll - ok
00:27:30.0880 0x1534  [ 23FFD903D1DF03CF6A3190DB45438E7D, CDFF1D3D49F6EB933AD620DE895FE88E696E33E267CE71B76F9E42BA5100CCD9 ] C:\Program Files (x86)\Avira\Antivirus\avreg.dll
00:27:30.0880 0x1534  C:\Program Files (x86)\Avira\Antivirus\avreg.dll - ok
00:27:30.0882 0x1534  [ 6041D2B2581C4D4377F64C9680832FC1, 4B0939E2CBD39DB5BBC2F5642E8C4E46279A295E563F30EEE72C524F1CEC1ABE ] C:\Program Files (x86)\Avira\Antivirus\avesvcr.dll
00:27:30.0882 0x1534  C:\Program Files (x86)\Avira\Antivirus\avesvcr.dll - ok
00:27:30.0884 0x1534  [ DE6C26FC39CC128D15EBA38655D27F39, 790EE6BF27F4D53E7BDC116DE60E44B5CCF08BA9B95C4B9F5360D435F5970780 ] C:\Program Files (x86)\Avira\Antivirus\msgclient.dll
00:27:30.0884 0x1534  C:\Program Files (x86)\Avira\Antivirus\msgclient.dll - ok
00:27:30.0886 0x1534  [ 2EF994B89D15EF8AED962F67CBDDEADA, 939905845590267676DBA3AD34891220060B489BFDB05D531C430E45A394C173 ] C:\Program Files (x86)\Avira\Antivirus\avwsc.exe
00:27:30.0886 0x1534  C:\Program Files (x86)\Avira\Antivirus\avwsc.exe - ok
00:27:30.0888 0x1534  [ A67DA34878CE085349F010B211EC213A, F16E09DB13C669FFBBC53BBB57CC394BC886FD4B167AFCCDAEAE84E21818C2D1 ] C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
00:27:30.0888 0x1534  C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe - ok
00:27:30.0890 0x1534  [ 807AE684CD6BDE9A8692B023993FAF48, 3671002909383757222AD02F717F5A7290F43AA2DD0CC05B4FF451F209E48DDD ] C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
00:27:30.0890 0x1534  C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe - ok
00:27:30.0892 0x1534  [ 4E14713CFC09828A571C1959C8D9BCDF, 133523278D6D396570E5E158ACC02177EDB495BE1D22CB502BA0392B5E30DBB0 ] C:\Program Files (x86)\Avira\Antivirus\avwebgrc.dll
00:27:30.0892 0x1534  C:\Program Files (x86)\Avira\Antivirus\avwebgrc.dll - ok
00:27:30.0893 0x1534  [ 3F2BB021CB280880F8C1B7A6FEF9B447, CEC0BF9D6C9CF6E6A9F9B4E656BD47208AC977EDDC11C1C3BCD07EB50BABC017 ] C:\Windows\System32\drivers\INETMON.sys
00:27:30.0893 0x1534  C:\Windows\System32\drivers\INETMON.sys - ok
00:27:30.0895 0x1534  [ 41B5D5E0ABAFAF5BD7E3E6F34694A3B3, 89F4E2412A2CE76C716D9520C3F4A1D886E48FD413E9D09F4F9AEDC3AB29E80D ] C:\Windows\System32\dbghelp.dll
00:27:30.0895 0x1534  C:\Windows\System32\dbghelp.dll - ok
00:27:30.0898 0x1534  [ EBA916109A176714E6A7BD152387F13C, 7B38B1708B83271ADA8D1CEC7F5F0A75C7F2572185C0961EFC749D5DF16A03F0 ] C:\Windows\System32\wscsvc.dll
00:27:30.0898 0x1534  C:\Windows\System32\wscsvc.dll - ok
00:27:30.0900 0x1534  [ 4FCF70C54FA233EE73EFAB0F9F808AD6, CC5D6C6934EE910DC608EAE347869E00D421161BB369FF017AF8F55141754DA0 ] C:\Windows\System32\wbem\NCProv.dll
00:27:30.0900 0x1534  C:\Windows\System32\wbem\NCProv.dll - ok
00:27:30.0901 0x1534  [ F374C1C02B3C22AE28884690C742EBB5, F312644A8AC7DA82AF5DE09EC204B8B29C57E6BE0B1308668A63AC15232026EC ] C:\Program Files (x86)\Avira\Antivirus\ccguard.dll
00:27:30.0901 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccguard.dll - ok
00:27:30.0903 0x1534  [ 79D84BF1FB7402F8C81F591ACB2ADB84, F3A0AF255060AE34974D7C9B7931D620081BD5526BB8B400A54DB22B076C2E10 ] C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_49c02355cf03478c\comctl32.dll
00:27:30.0903 0x1534  C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_49c02355cf03478c\comctl32.dll - ok
00:27:30.0905 0x1534  [ CF5DD7070D10F0E75CC42475A6375194, 7468EBFB81D42D84F88031A5B644FC3AA21E44DD4053AF345CD44832E3270B87 ] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\GdiPlus.dll
00:27:30.0905 0x1534  C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\GdiPlus.dll - ok
00:27:30.0907 0x1534  [ FBA2376474D890F29CD759F391FB30E9, 34668C4833E730A8299F4E2C94B5A98197EE120C5FABFDC2C3FC0FBE6B88277C ] C:\Program Files (x86)\Avira\Antivirus\ccgrdrc.dll
00:27:30.0907 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccgrdrc.dll - ok
00:27:30.0909 0x1534  [ 721397B70A521DE3B5D6D8CA63367D4B, 36F4140854365E1005D0B480ED307A53520432EC76F5A6950271B676364CE2A2 ] C:\Program Files (x86)\Avira\Antivirus\ccgrdw.dll
00:27:30.0909 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccgrdw.dll - ok
00:27:30.0911 0x1534  [ 9BC5F8E1DF7440DFFA4DE15DF574521F, ECEBCFE0F5E159C79E47B47ECFAE806E9060B0089BE3C130F4A505FE3CD83329 ] C:\Windows\syswow64\wscapi.dll
00:27:30.0911 0x1534  C:\Windows\syswow64\wscapi.dll - ok
00:27:30.0914 0x1534  [ 366B8FB085CBED039B7590E9318AF97E, 8978B07A115C90FA27008BC9BA627829CA03BF107CFFC03D4C2B201D67531F34 ] C:\Windows\syswow64\wscisvif.dll
00:27:30.0914 0x1534  C:\Windows\syswow64\wscisvif.dll - ok
00:27:30.0916 0x1534  [ 45C650F31088C2820304CFA4A3D4F5FA, E8111D168DFF36C0D2844A5C4B84DBC68B772D33B6931C7ECD0D35A6BE937E15 ] C:\Windows\syswow64\ReAgent.dll
00:27:30.0916 0x1534  C:\Windows\syswow64\ReAgent.dll - ok
00:27:30.0917 0x1534  [ E77813CBE65B5D6C773D68479D5C0350, 0E7F15E9FFD1950F68C94AA700232EEF0A2AC17B7A443F4BF69A7812A1663A9A ] C:\Windows\syswow64\wdscore.dll
00:27:30.0917 0x1534  C:\Windows\syswow64\wdscore.dll - ok
00:27:30.0919 0x1534  [ 925A6D9FCCB353582AE92D109852280B, 889606063D1AD33EB245705A5CDFA7F599DCC47B4B63D29FB812925829A02952 ] C:\Windows\syswow64\DismApi.dll
00:27:30.0919 0x1534  C:\Windows\syswow64\DismApi.dll - ok
00:27:30.0922 0x1534  [ 5BA0B70364AD06829BB9E8A7FDD48060, 0F81E15062D2E7BA52155967B0E287265A7C43E3FDA464FE652BF2A579C4A005 ] C:\Windows\syswow64\wscproxystub.dll
00:27:30.0922 0x1534  C:\Windows\syswow64\wscproxystub.dll - ok
00:27:30.0923 0x1534  [ CFAC44E2F6522F4D40553BD50E977A1F, 0A9E40F0A747344CD89BC1E3B00788C2ACC1CF2566144B48A1AF1E308B0150A4 ] C:\Program Files\Windows Defender\MpCmdRun.exe
00:27:30.0923 0x1534  C:\Program Files\Windows Defender\MpCmdRun.exe - ok
00:27:30.0925 0x1534  [ 241AE1E0C9273BDA37848264E1E169C6, 17009E5BE64B2DDE0797C990FA0DA451B96D8E9CC85DEC5BB0F9D62B7C74FAD6 ] C:\Windows\System32\conhost.exe
00:27:30.0925 0x1534  C:\Windows\System32\conhost.exe - ok
00:27:30.0927 0x1534  [ D38774D1D383A2CDB9A4F64B7206913B, 6CDDC46D1D431342F00CA537FC327B23B8AA4D513CEEEE61F3E19C77975DF9C8 ] C:\Windows\System32\drivers\condrv.sys
00:27:30.0927 0x1534  C:\Windows\System32\drivers\condrv.sys - ok
00:27:30.0929 0x1534  [ D2F7EF42F82CEA2545A7A8D103B57DF5, 221934745D29522AE44F219F05B37CF34CCBA579CAD13DB5661CE4E27A463EFE ] C:\Windows\System32\SettingSync.dll
00:27:30.0929 0x1534  C:\Windows\System32\SettingSync.dll - ok
00:27:30.0931 0x1534  [ 77665372735EF39DFF04F31251AD17A4, 93EE8D3C87777DF87B4B2A0C41A8A2218E8461740AD22922BF480F0520B27E43 ] C:\Windows\System32\ConhostV2.dll
00:27:30.0931 0x1534  C:\Windows\System32\ConhostV2.dll - ok
00:27:30.0933 0x1534  [ E2C8ECAB45FD37BF02C0F88B6DD17507, 7F5E20D3A1B0A546A007EDC346AD463114B659F4AEBCF0CAB6449026794513A8 ] C:\Windows\System32\dllhost.exe
00:27:30.0933 0x1534  C:\Windows\System32\dllhost.exe - ok
00:27:30.0935 0x1534  [ 3BA01C88049DF0E6F311DB2FD33AEE86, 74E4AC995D80191102C460510FD2E35D610CEBC6AC77B4C7D2F21C52B1940CD8 ] C:\Program Files\Windows Defender\MpClient.dll
00:27:30.0935 0x1534  C:\Program Files\Windows Defender\MpClient.dll - ok
00:27:30.0937 0x1534  [ 0716702A15C44DD0CF7187A52AB6A778, E530F8BDFAB12BD97A360B7C8A44C766B0A18D794A119E0EFAE4D7E83CA6B035 ] C:\Windows\System32\CredentialMigrationHandler.dll
00:27:30.0937 0x1534  C:\Windows\System32\CredentialMigrationHandler.dll - ok
00:27:30.0939 0x1534  [ 4F267B65792A8162B897F9AB02BA2175, B73813AD68D59E5472088299A3191EE81AA020043F4227BB4DA5B1091AC9954F ] C:\Windows\System32\AppxAllUserStore.dll
00:27:30.0939 0x1534  C:\Windows\System32\AppxAllUserStore.dll - ok
00:27:30.0940 0x1534  [ EE5C58951ABE5F06A595A4F8C47372F3, 006AEAFE5DAC79771D9683882CBACD39DDDDB3A740C9D46BC16A7A2241DDCF3D ] C:\Windows\System32\wscapi.dll
00:27:30.0940 0x1534  C:\Windows\System32\wscapi.dll - ok
00:27:30.0942 0x1534  [ 57CA35BE03F1F9E856D538ECA00487E6, 36718BB95DBB1DC4610B76626A94880873E1D2576FA5481DBD639DCA8A5000A2 ] C:\Windows\System32\SystemEventsBrokerClient.dll
00:27:30.0942 0x1534  C:\Windows\System32\SystemEventsBrokerClient.dll - ok
00:27:30.0944 0x1534  [ C80CCE32FF50E662A5BB572E6DD69166, 5B6E9D9E1321452AC5BDB2DAB8ED4A4E6451D6BA29C695E06468E6979DED39FD ] C:\Windows\System32\iuilp.dll
00:27:30.0944 0x1534  C:\Windows\System32\iuilp.dll - ok
00:27:30.0946 0x1534  [ 311F4D131C28DA12595132A35124E955, A33D185D5CFF2A3C1638212F271DC3A019F175F5B1A0046E6F5E1FC83C51E3DF ] C:\Windows\System32\SharedStartModel.dll
00:27:30.0946 0x1534  C:\Windows\System32\SharedStartModel.dll - ok
00:27:30.0948 0x1534  [ A040EB78D945C26952706462D5921A6A, CA4A6BCBD810D64E8CE5FCEE5DAA086C7735D36E7936CE37EEF1682AF7507872 ] C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\comctl32.dll
00:27:30.0948 0x1534  C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\comctl32.dll - ok
00:27:30.0949 0x1534  [ F0D60859ABBD8E0937DB8482CF7DA79C, 9A691351B6EBD7615127928DBB07921016BBC4C4743410ABE25D91D381D1DA4D ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\82ba8dbdb3f502dbe3513694531ba77e\System.Management.ni.dll
00:27:30.0950 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\82ba8dbdb3f502dbe3513694531ba77e\System.Management.ni.dll - ok
00:27:30.0951 0x1534  [ 684F1E1B5D07451B600EA3C3D728A534, 0A0B7E99A5EC3F9F9FEA4568936E3DCF2AA095F6E2F718192A728FD5C02A561E ] C:\Windows\System32\VEEventDispatcher.dll
00:27:30.0951 0x1534  C:\Windows\System32\VEEventDispatcher.dll - ok
00:27:30.0953 0x1534  [ 2969A53D3B9F2D73A1E39F5E18E068D7, D2BB106F4CFFF5C67153FD24C367FC75F3F5855D9F011B52F7653435709EA3C4 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll
00:27:30.0953 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll - ok
00:27:30.0955 0x1534  [ 98AE121CF400A0D7FFDD7491CDA724CB, A2A39ABCBD24F07B8145849152C5845C542D12E4503A5239E5352B03DBAA746F ] C:\Windows\System32\AuthBroker.dll
00:27:30.0956 0x1534  C:\Windows\System32\AuthBroker.dll - ok
00:27:30.0957 0x1534  [ F7BC9EE2F97C2DAF475A6579590C4574, 8FCDE3E5D0F7750EDDABEFD619FD7FF31DE169353C89DA323E5BEA410AD4BEC2 ] C:\Windows\System32\msauserext.dll
00:27:30.0957 0x1534  C:\Windows\System32\msauserext.dll - ok
00:27:30.0959 0x1534  [ B0CE3D15D8CBF2384545F5038F85247D, 1746DA5688E7B87DACAC94C65FA4D6D9E62626CFC52D91332AB78DD2524F727C ] C:\Windows\System32\wlidres.dll
00:27:30.0959 0x1534  C:\Windows\System32\wlidres.dll - ok
00:27:30.0961 0x1534  [ 6F962A71468981B9606F6805BADABF25, 40973D2B21FC99ADDA02A0785133FBF4EC53602D8E26C79503EF357234B6B579 ] C:\Windows\System32\sihost.exe
00:27:30.0961 0x1534  C:\Windows\System32\sihost.exe - ok
00:27:30.0964 0x1534  [ 53D802D2A7EC13273F39E61CC9DDF5E3, E24F294C82E871FDB8E8ECCE564F22FB49912EBD1BDD6B7347BD49D983B31A97 ] C:\Windows\syswow64\wbem\wmiutils.dll
00:27:30.0964 0x1534  C:\Windows\syswow64\wbem\wmiutils.dll - ok
00:27:30.0966 0x1534  [ EEC314E756724CE40FAF1511E30D3AF8, CDFBDB1C831C2594EE7626E915862D8D7696D55CFEACF8E6224B95F933F06964 ] C:\Windows\System32\radardt.dll
00:27:30.0966 0x1534  C:\Windows\System32\radardt.dll - ok
00:27:30.0968 0x1534  [ 66EF1F54C8D324D3DC9CD111578B3579, 701B4843874368C1E24FA627AB1A62B313EF2EB316A475218EBC0EEBB4C02645 ] C:\Windows\System32\PlaySndSrv.dll
00:27:30.0968 0x1534  C:\Windows\System32\PlaySndSrv.dll - ok
00:27:30.0969 0x1534  [ 67301DDCDE9E370ADFDC776694BEA268, CFF34CDCDDDBED81A7E5900437DFA1C32B5405FC3469D6BB3A3562E0DC88C900 ] C:\Windows\System32\MsCtfMonitor.dll
00:27:30.0970 0x1534  C:\Windows\System32\MsCtfMonitor.dll - ok
00:27:30.0971 0x1534  [ 6DEFD298D687ABBF7658778FFEEA9700, 5BA7A062F8578441DB2CE4E275E9A28C197D9BE57CA36F57373330D95D14DCB0 ] C:\Windows\System32\msutb.dll
00:27:30.0971 0x1534  C:\Windows\System32\msutb.dll - ok
00:27:30.0973 0x1534  [ BFD5A46F2EC50B6D9455CE5DF546F450, AB1E19EA1601BE692E92221A112CC8C0CCFB9074817F9F4260647287F6171051 ] C:\Program Files\Microsoft Office 15\root\office15\msoia.exe
00:27:30.0973 0x1534  C:\Program Files\Microsoft Office 15\root\office15\msoia.exe - ok
00:27:30.0975 0x1534  [ 6FA4BB1AA0C18F5CFB96F228376BD249, 1092E89F136BA687824EA1DC86F570524619BDABE108B97FB30A2EE149DBA6E5 ] C:\Windows\System32\CoreUIComponents.dll
00:27:30.0975 0x1534  C:\Windows\System32\CoreUIComponents.dll - ok
00:27:30.0977 0x1534  [ 5F46CB1312B3891E8FEA0F4755B0EEF1, 45BD1342C3B7C26F6535FD45D16F0D32E3D28DB4A2D1CDF2B9342CC50FEBF5C6 ] C:\Program Files (x86)\Avira\Launcher\Interop.WUApiLib.dll
00:27:30.0977 0x1534  C:\Program Files (x86)\Avira\Launcher\Interop.WUApiLib.dll - ok
00:27:30.0979 0x1534  [ B8060958E20E2A9E6C874521A6351312, 719AECDCAB2C0B0D4EC0736E17E8FD163FB3562BB91612A4A6D9C87892AD92A1 ] C:\Windows\System32\DesktopShellExt.dll
00:27:30.0979 0x1534  C:\Windows\System32\DesktopShellExt.dll - ok
00:27:30.0981 0x1534  [ 1D1FB782C16CC1C520F0454A39E4A697, 141250464BE4CB584C7C35857C2921054EE66ACE46160B63FB2D6E23C1309099 ] C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
00:27:30.0981 0x1534  C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll - ok
00:27:30.0983 0x1534  [ 26B471AB00D5746378E5A4690EA79BDD, 7348488DEBDABDDAE17033396AB99F134E46935B9EBE320EE8A1AFA5B26492EF ] C:\Windows\System32\ClipboardServer.dll
00:27:30.0983 0x1534  C:\Windows\System32\ClipboardServer.dll - ok
00:27:30.0984 0x1534  [ 3B07A34D07C281243594D126CFF02ACA, CEF6F1C96BE0F1F0CF15FBD40BAEB65135A8F1989D8128ACC68CE0B41EE60088 ] C:\Windows\System32\edputil.dll
00:27:30.0984 0x1534  C:\Windows\System32\edputil.dll - ok
00:27:30.0986 0x1534  [ 6D80B3176815791A1E0E334879A5F569, D4B60AF6D525A4CF4132C39D2291C282220ED9CE30018063868848CA2D3D64AC ] C:\Windows\System32\ActivationManager.dll
00:27:30.0986 0x1534  C:\Windows\System32\ActivationManager.dll - ok
00:27:30.0988 0x1534  [ ED9975925391784BCBCE96FFA753B7EE, 46A767C93DD631582A1E75A673099371978CA0A51A34C2121C0CDDFFD03FE6B2 ] C:\Windows\System32\AppointmentActivation.dll
00:27:30.0988 0x1534  C:\Windows\System32\AppointmentActivation.dll - ok
00:27:30.0990 0x1534  [ 425F8EA19D0E72F70CD138F669CBA4E9, 551DFC74270BFDEF5748BCBC0543DDD6F33BF35F16ABA5588358E59226C10340 ] C:\Windows\System32\dsclient.dll
00:27:30.0990 0x1534  C:\Windows\System32\dsclient.dll - ok
00:27:30.0991 0x1534  [ A51AC21B1F31FD7F4EC2811E33572AFC, 201268FE54AC977E4941A0FD73AE3D8F3AA3F411710403063AC002139F42B801 ] C:\Windows\System32\modernexecserver.dll
00:27:30.0991 0x1534  C:\Windows\System32\modernexecserver.dll - ok
00:27:30.0993 0x1534  [ 835E102C8810B83005E191D7A687DFE4, 346C081DB29E3C683DB3099DFF1BF92887F97D7B2E1168ADDC097FD29D5D0FBA ] C:\Windows\System32\UserDataTypeHelperUtil.dll
00:27:30.0993 0x1534  C:\Windows\System32\UserDataTypeHelperUtil.dll - ok
00:27:30.0995 0x1534  [ C57C2B315B4DA8F2A4522FC96DEACD90, 536844F2CAAA42204F7C15FC8501C5074ABB27406EC60FA685C6EFB59F78026C ] C:\Windows\System32\WpPortingLibrary.dll
00:27:30.0995 0x1534  C:\Windows\System32\WpPortingLibrary.dll - ok
00:27:30.0997 0x1534  [ C9F3DE7073E02232E053DD6FBBD0BF8D, E87D7F6CDBBCC31A9ACA2B5AD15B299637A6B249628C4BCA2D9CE50A250951C0 ] C:\Program Files (x86)\Avira\Launcher\System.Data.SQLite.dll
00:27:30.0997 0x1534  C:\Program Files (x86)\Avira\Launcher\System.Data.SQLite.dll - ok
00:27:30.0999 0x1534  [ C27EC0128CC8AD7EE835C4C4F87B2F68, C95CF630A1EB93FE80F91D70FAF83B820996CF41E8628FF372071F327A9711B4 ] C:\Windows\System32\ExecModelClient.dll
00:27:30.0999 0x1534  C:\Windows\System32\ExecModelClient.dll - ok
00:27:31.0001 0x1534  [ 711877C9F5CD75070D57431F272DCE78, 48B367F7118C94669E427B49A364F3023763DEF1B39AA7DCDF2531474BD99B7F ] C:\Windows\System32\ACPBackgroundManagerPolicy.dll
00:27:31.0001 0x1534  C:\Windows\System32\ACPBackgroundManagerPolicy.dll - ok
00:27:31.0003 0x1534  [ A4B1CA100E4FF67E8D1C7ECF5081E8C0, 76E4936C7160C56B9F3706EEDCEFAE2B095E39FEC6F70CB16BA9E47ABCF930CC ] C:\Windows\System32\AppContracts.dll
00:27:31.0003 0x1534  C:\Windows\System32\AppContracts.dll - ok
00:27:31.0005 0x1534  [ A80065CB0EFED61DBD2FDB161ACA011F, 5B789544EE894E7052B2E378F9E2AFC916A27449AE74B28C1AF9D27715B60C5B ] C:\Windows\System32\BackgroundMediaPolicy.dll
00:27:31.0005 0x1534  C:\Windows\System32\BackgroundMediaPolicy.dll - ok
00:27:31.0007 0x1534  [ F9CCC99133007CB3B0CACEFC80E60B87, 4866844D135B805C0E5839DCC88F984C4F592B667FCE5E9C4A846F04289A1E54 ] C:\Windows\System32\CbtBackgroundManagerPolicy.dll
00:27:31.0007 0x1534  C:\Windows\System32\CbtBackgroundManagerPolicy.dll - ok
00:27:31.0009 0x1534  [ E7F0E85FFE53B6036E3E8E77F191844B, 5DAFB5BEA77257A7C549C881869196130F8120C1316676286C345C9D3218A773 ] C:\Windows\System32\notificationplatformcomponent.dll
00:27:31.0009 0x1534  C:\Windows\System32\notificationplatformcomponent.dll - ok
00:27:31.0011 0x1534  [ 3F12C5AB8046107C9A8DC07A605AF792, 641F64ECB6C4E6C33BEE9F45692DD0995E63E06AFDBA24E1F2492E9870511E71 ] C:\Windows\System32\OnDemandBrokerClient.dll
00:27:31.0011 0x1534  C:\Windows\System32\OnDemandBrokerClient.dll - ok
00:27:31.0014 0x1534  [ 1930609AFB0ED422DF29C0D5E544D42F, FCF87C1266D8E70D93B34B5BBB6D02473ECDFD6A2AA1C6DDF82CDFC8D32627D1 ] C:\Windows\System32\SebBackgroundManagerPolicy.dll
00:27:31.0014 0x1534  C:\Windows\System32\SebBackgroundManagerPolicy.dll - ok
00:27:31.0016 0x1534  [ 88971AA49FFCB00D6319DF05C3B03503, 178D14AEF8238189A821947459EA2E58196CC86048EC75EEDF95270A0D192DF0 ] C:\Windows\System32\ShareHost.dll
00:27:31.0016 0x1534  C:\Windows\System32\ShareHost.dll - ok
00:27:31.0018 0x1534  [ F06324AE6640585E5D9697DA40CA36AB, 34DA4AC2F9181B3B49806C0902C4C73FEF26DC1E094D6F9AF66C9DFD941484CD ] C:\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
00:27:31.0018 0x1534  C:\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll - ok
00:27:31.0020 0x1534  [ 6F66C8117823A00014E5D0D19FEFD962, FC84906BAF6141CB02B5C68C4D25E5D46BC86D7C5C4CF6D827528CFE7899FE0E ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\917396a2d0ba40ff95871ca20425a67a\System.EnterpriseServices.ni.dll
00:27:31.0020 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\917396a2d0ba40ff95871ca20425a67a\System.EnterpriseServices.ni.dll - ok
00:27:31.0022 0x1534  [ A21D6A1CDB820A16F48010BA57D7F02D, BD98341B5138CEAFF6782E041B090D89100E491F8245C91B9544AFF18C64BFD0 ] C:\Windows\System32\execmodelproxy.dll
00:27:31.0022 0x1534  C:\Windows\System32\execmodelproxy.dll - ok
00:27:31.0024 0x1534  [ AB8D6D7FFCC71044C94571FB3E8BC949, 336E8AAD8BC65BA2A48B6E3D0BC94BC0F7BED4DACD2D338749E10BB6F0768B68 ] C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
00:27:31.0024 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - ok
00:27:31.0027 0x1534  [ AA8AD8C57E73057E1C886E9472303CD1, C83A06CD631E8BC510C1AAAD6CD3DEBB742F63742E62330A889DC2210FED0CF2 ] C:\Windows\System32\twinui.appcore.dll
00:27:31.0027 0x1534  C:\Windows\System32\twinui.appcore.dll - ok
00:27:31.0029 0x1534  [ 5F6D4F12EA33BFC0F0F8CEEAC332AB2B, 24AEB30724217632DC8D494DCF381D0C34F3F65F82344720CEBE2111EBEDDB37 ] C:\Windows\System32\userinit.exe
00:27:31.0029 0x1534  C:\Windows\System32\userinit.exe - ok
00:27:31.0031 0x1534  [ 7B930D4759A1C8A470DED08C743C7D42, 4A5633DE241E63EB9A0D8A5850DA7B1EC2F8F2E064CF3B894C077F4C85590529 ] C:\Windows\System32\userinitext.dll
00:27:31.0031 0x1534  C:\Windows\System32\userinitext.dll - ok
00:27:31.0033 0x1534  [ 040F05DD502C9C590FA37786BA1143AE, CEBA1B56CBB4FAE2028C840821755E0EDDC5DD4DC86234FB829CA2725F1D0924 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\917396a2d0ba40ff95871ca20425a67a\System.EnterpriseServices.Wrapper.dll
00:27:31.0033 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\917396a2d0ba40ff95871ca20425a67a\System.EnterpriseServices.Wrapper.dll - ok
00:27:31.0035 0x1534  [ F1CBCB7FA6F3B309639AA2D4EF74469C, 57F795F20F6686516C611F58683126004692297F1E65D80D9C6EBB4A87F472E9 ] C:\Windows\explorer.exe
00:27:31.0035 0x1534  C:\Windows\explorer.exe - ok
00:27:31.0037 0x1534  [ 2771E692EE7D229351BBBF3FF9BF920F, 28DA0ECCF744A3FCD773046445EBD4A01BB0F8A94626B44913531FBCA633DC66 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnectorNative.dll
00:27:31.0037 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.AvConnectorNative.dll - ok
00:27:31.0039 0x1534  [ 1C84624A6FAF0336167E54A9D6FA4B05, 5007B06CDD57CAE9B30156AE0B819C648640D826BF506505D8A3D726F838864E ] C:\Windows\System32\LicenseManagerApi.dll
00:27:31.0039 0x1534  C:\Windows\System32\LicenseManagerApi.dll - ok
00:27:31.0042 0x1534  [ ACB6CA2317DAE8EB86C9DBAA24173170, 596763312ECA492CBD3889C21F19BAECC759E387C5504894030C41BBD3A03439 ] C:\Program Files (x86)\Avira\Antivirus\ccgen.dll
00:27:31.0042 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccgen.dll - ok
00:27:31.0043 0x1534  [ 784BCB90E466B62B769ABA0F07352CE7, 79A8A52DCA15960DF22841A8B2A45908DD89F3EEA9671C1EDABA724390059B63 ] C:\Windows\System32\backgroundTaskHost.exe
00:27:31.0043 0x1534  C:\Windows\System32\backgroundTaskHost.exe - ok
00:27:31.0045 0x1534  [ 5F77048B36569B14DAEA08650368B63A, 2C25BBE8F054F025A69ED5144B48EF86E598FFEBDD1C46EE64D106B5ED5F3911 ] C:\Windows\System32\capauthz.dll
00:27:31.0045 0x1534  C:\Windows\System32\capauthz.dll - ok
00:27:31.0048 0x1534  [ F4F2A4C459DD3AA22DD3984D13B15746, C2D0E285E2333A9C620BE04A5747881AF0D5615DA32226886E659FF31A9761CC ] C:\Windows\syswow64\mfc120u.dll
00:27:31.0048 0x1534  C:\Windows\syswow64\mfc120u.dll - ok
00:27:31.0050 0x1534  [ 10836AD534DE8D428A08650F0FB43748, F06EDA6EA2A2A22DF398A77994DD7D4B39BEC84CA89EB4069D6BB9923B8BDF9C ] C:\Windows\System32\RelPost.exe
00:27:31.0050 0x1534  C:\Windows\System32\RelPost.exe - ok
00:27:31.0052 0x1534  [ AE9EC29C3583DF76343FE34932EBA40A, 09C9C50F461FC38C0B369C86AF912DD46E70FC1228E6AC8F583125FD3BC5C09B ] C:\Windows\System32\ConhostV1.dll
00:27:31.0052 0x1534  C:\Windows\System32\ConhostV1.dll - ok
00:27:31.0054 0x1534  [ 98C0CDA21B227FD007571C09CABB1C9D, 70CF72022C659FF652A2BD72E3019BA95F703433CEFF212A2E6F0BAAAE64535E ] C:\Program Files (x86)\Avira\Antivirus\ccgenrc.dll
00:27:31.0054 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccgenrc.dll - ok
00:27:31.0055 0x1534  [ 072006697196B629F738995021C977D4, 0A0B83C93607EE3D8234CACA3653DF25CC3A27466B94B83E8C09285D8F7757EC ] C:\Program Files (x86)\Avira\Antivirus\ccgenw.dll
00:27:31.0055 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccgenw.dll - ok
00:27:31.0058 0x1534  [ 6C9263399E5F9D97FE2F4E44F57AC503, C64EEC859265FA8E93A3956F1C1FD605BF5114CF57B933A5EA1B09D4E7F35ACE ] C:\Program Files (x86)\Avira\Antivirus\ccwgrdw.dll
00:27:31.0058 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccwgrdw.dll - ok
00:27:31.0060 0x1534  [ B8465C3C44D2B73F7742FD98A857B8F6, 1DBA1BAF8490E6F50D7D367E3ADE301307244C72DCD8430B8A6A44D9BEF4B2B8 ] C:\Program Files (x86)\Avira\Antivirus\ccfwmgt.dll
00:27:31.0060 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccfwmgt.dll - ok
00:27:31.0062 0x1534  [ E4D2CAFDE5BD6FB9DDD847C3346CF362, B9A0573C9AB67B6B5198C6DD4F7E2842B5AE683F2FA52B01193B13943887209A ] C:\Program Files (x86)\Avira\Antivirus\ccfwmgtrc.dll
00:27:31.0062 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccfwmgtrc.dll - ok
00:27:31.0063 0x1534  [ 10D5DD33B9EF46DD263A112AF2FB4779, 7D3137D7692FAC3D832E17D9DF26C58DCC2A63ECC9F7A15BC9DE8B66A2BF12E4 ] C:\Program Files (x86)\Avira\Antivirus\commonimagerc.dll
00:27:31.0063 0x1534  C:\Program Files (x86)\Avira\Antivirus\commonimagerc.dll - ok
00:27:31.0066 0x1534  [ 0EBC62CE1E636471AC298009603EAF08, 888D9F7948C4D8AEDAAAD80BCE07D95FB2EAF5114D16A3E900603FFD62BB52B2 ] C:\Program Files (x86)\Avira\Antivirus\ccmguard.dll
00:27:31.0066 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccmguard.dll - ok
00:27:31.0068 0x1534  [ 5FD686E20314EE18F0347713CE4F7732, C46FB3FC0A1AC169588DC20E31855512A15B9D9A1F790FD5A0F3FED006565419 ] C:\Program Files (x86)\Avira\Antivirus\ccmgrdrc.dll
00:27:31.0068 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccmgrdrc.dll - ok
00:27:31.0070 0x1534  [ 0E63B7F1A9A82C63953269AF32DEA0F7, 94BFB510ADD41FE2AD3125569AE56F235B6F1F310FAA67F39A626C6E291030F4 ] C:\Program Files (x86)\Avira\Antivirus\ccwgrd.dll
00:27:31.0070 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccwgrd.dll - ok
00:27:31.0072 0x1534  [ 1160BBF830D02A98079E5507E1F00064, 4B7F99AD3898CA1CD94B12211364A50321A7937348A0D413A95EA9E8A8FF6227 ] C:\Program Files (x86)\Avira\Antivirus\ccwgrdrc.dll
00:27:31.0072 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccwgrdrc.dll - ok
00:27:31.0074 0x1534  [ 6D591C0442B5765808AE0DF079DA9CB6, 895D4141700AB12B1D92A25E2DA51D2312054727C9E95806353D5F5BD228BAD5 ] C:\Windows\System32\twinapi.dll
00:27:31.0074 0x1534  C:\Windows\System32\twinapi.dll - ok
00:27:31.0076 0x1534  [ 4BED1C3020DBB0689BEE8BA8D73678F8, 67E4A046D50BE670C18F2522710DFFFC5D546186164D799736A480B64002A436 ] C:\Program Files (x86)\Avira\Antivirus\ccupdate.dll
00:27:31.0076 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccupdate.dll - ok
00:27:31.0078 0x1534  [ 40F6D2DEF7BBAE4B5C1E753A2FC70EB0, 0F5261578DF3008D480D7EBEB7F422F30709E7CA86795712F175D52C64FC8709 ] C:\Program Files (x86)\Avira\Antivirus\ccupdrc.dll
00:27:31.0078 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccupdrc.dll - ok
00:27:31.0081 0x1534  [ 1221CA42940FCE1CD6E3916E5DFC7B76, 84C512C4007DC8640BDF25190FA6E469C4F770B3A0F0A488E0A4A6C876219E65 ] C:\Program Files (x86)\Avira\Antivirus\cclic.dll
00:27:31.0081 0x1534  C:\Program Files (x86)\Avira\Antivirus\cclic.dll - ok
00:27:31.0083 0x1534  [ E68AC34EBC6111EB8871637B22F0E2FE, 38141D5AA64EEC53FE308EAD8F0DC7CDF0E90FD1F5F243CC317374A6571EC40B ] C:\Program Files (x86)\Avira\Antivirus\cclicrc.dll
00:27:31.0083 0x1534  C:\Program Files (x86)\Avira\Antivirus\cclicrc.dll - ok
00:27:31.0085 0x1534  [ D5ED05D46A09B5C01399D81B22D1C8DF, 48F5C5C23A44626C2B7EE0416777E0CEEF4B163F490B41510C38788200CF453B ] C:\Program Files (x86)\Avira\Antivirus\ccev.dll
00:27:31.0085 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccev.dll - ok
00:27:31.0087 0x1534  [ BE3054724217B738366D6322C7054F49, 74CF995A2D89213FF356D9BD55FB798C2AD0D52CEC4BD29F0B0E8FC525F9BE1F ] C:\Program Files (x86)\Avira\Antivirus\ccevrc.dll
00:27:31.0087 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccevrc.dll - ok
00:27:31.0089 0x1534  [ AE0BE3C15E1339FD0A299A8888F193FD, 4F611A7B7A6B08C8AFA499C9E519D021CF8142D956F8965E7FD35D76778379BF ] C:\Program Files (x86)\Avira\Antivirus\cclicw.dll
00:27:31.0089 0x1534  C:\Program Files (x86)\Avira\Antivirus\cclicw.dll - ok
00:27:31.0090 0x1534  [ A8AC0B8ED134888731D1A1BCEF930FA1, 917D2C99CB28C5F20BA386148B6A93541AEF900A9A99D310D732B501322945E5 ] C:\Windows\System32\AppReadiness.dll
00:27:31.0090 0x1534  C:\Windows\System32\AppReadiness.dll - ok
00:27:31.0092 0x1534  [ 49B00A59043431804A5BCB5E48F735B3, 05066B1E3245DFD86831ED1E288C42E27DEF193E1415968B2AE8CCC323253776 ] C:\Windows\System32\AppXDeploymentClient.dll
00:27:31.0092 0x1534  C:\Windows\System32\AppXDeploymentClient.dll - ok
00:27:31.0094 0x1534  [ 9C805ECEF878388B4D23AB581E2ECFD9, 2D43153D2008E14F2B062153587E155A3DCEB69FCBAB22AB220F3E670B291293 ] C:\Windows\System32\Windows.Networking.Connectivity.dll
00:27:31.0095 0x1534  C:\Windows\System32\Windows.Networking.Connectivity.dll - ok
00:27:31.0097 0x1534  [ 17A344D0A065883ABE6A9239093E7CA9, 0FEF3BA4740101B6A678CF58C1A943821E831E6DB802317DB5CA058F1D672C01 ] C:\Windows\System32\Windows.Internal.Shell.Broker.dll
00:27:31.0097 0x1534  C:\Windows\System32\Windows.Internal.Shell.Broker.dll - ok
00:27:31.0099 0x1534  [ A1243182E21EAC015267DBE2728D4BBE, 166AB6FA3DDDF22006FAC45AC9172BBC9AF20B7C5D90BCC14D7F139AC5696720 ] C:\Windows\System32\ntoskrnl.exe
00:27:31.0099 0x1534  C:\Windows\System32\ntoskrnl.exe - ok
00:27:31.0099 0x1534  [ C62E9AD4767AE8B8D48A7CFED8A95D98, 4C251026F06969794C7C16BE9B99AA7DD5725B101644B052942848AA57C598A9 ] C:\Program Files (x86)\Avira\Antivirus\ccupdw.dll
00:27:31.0099 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccupdw.dll - ok
00:27:31.0099 0x1534  [ 2CE396457D5C18F034D243EC7E159010, DDF588A568DF5EAE058DF315535BD746760363E2242EF8C705F8DCBA2D5DA4A7 ] C:\Windows\System32\appinfo.dll
00:27:31.0099 0x1534  C:\Windows\System32\appinfo.dll - ok
00:27:31.0099 0x1534  [ 33D56A6BC421934E0F5F90CA14807E05, BB684175B4A09B1DEAF730714D28B23DC2A344B5B2451D211AB45B2C2F8B6DDC ] C:\Windows\System32\runonce.exe
00:27:31.0099 0x1534  C:\Windows\System32\runonce.exe - ok
00:27:31.0099 0x1534  [ 21FB0BB47EB785A074B0FE738BB60E9A, 3AEFD9330AFE4D06A67C4385D1A983AFF66398CF1CB12979B5E9CBC4D2BFB2CC ] C:\Windows\System32\SettingSyncPolicy.dll
00:27:31.0099 0x1534  C:\Windows\System32\SettingSyncPolicy.dll - ok
00:27:31.0099 0x1534  [ 28376A2A010BC159BCBE5AAB4711FCA1, 0AEB35FAF2316414064EDB55F32666A9025C594A524F3154C24CFA4A9A949771 ] C:\Windows\System32\SettingSyncCore.dll
00:27:31.0099 0x1534  C:\Windows\System32\SettingSyncCore.dll - ok
00:27:31.0099 0x1534  [ 17159DF4093B2F33B95AB9F703EA8391, 7E352E9510D29F1890E725D37A3312E116ADEDD0F21D7D149C80ABC3E6D2FF52 ] C:\Windows\System32\TokenBroker.dll
00:27:31.0099 0x1534  C:\Windows\System32\TokenBroker.dll - ok
00:27:31.0099 0x1534  [ 2E71E6B389976FD78609A1AB44F7EEB1, 24F7A6D7B4C3DFFE128AFE70F37FFA6258928DF7CCFF3AB2490A41F595529299 ] C:\Windows\System32\AppXDeploymentServer.dll
00:27:31.0099 0x1534  C:\Windows\System32\AppXDeploymentServer.dll - ok
00:27:31.0114 0x1534  [ 4FD8126DEE96656972B6A14A7E0AEF67, 5E9248B3C94101C8D130079BBD0FD6F804E2CBE6E63E1CCE929528757636A701 ] C:\Windows\syswow64\secur32.dll
00:27:31.0114 0x1534  C:\Windows\syswow64\secur32.dll - ok
00:27:31.0114 0x1534  [ C8CD90E6E48C00FDED3C6756E135D064, 82E1ED344324649D3D236C4AD2629920D5FE4E80BFD7621EC1EFF7512BD39903 ] C:\Windows\System32\StateRepository.Core.dll
00:27:31.0114 0x1534  C:\Windows\System32\StateRepository.Core.dll - ok
00:27:31.0114 0x1534  [ 4E970BE80B6E380A5CDFCAF0624F51F3, 3A001B8C4D0E52362BBA32D326158C4FBDBF48CEFD49E5B1AC23D77BCA98093F ] C:\Windows\syswow64\runonce.exe
00:27:31.0114 0x1534  C:\Windows\syswow64\runonce.exe - ok
00:27:31.0114 0x1534  [ 442A0C8277043EB6849ACB473B7CCD4A, 5F69B94128BEF1EA380187FC2956192C29DF9E1E104865D548CE4DA6D2F122A4 ] C:\Windows\System32\Windows.ApplicationModel.dll
00:27:31.0114 0x1534  C:\Windows\System32\Windows.ApplicationModel.dll - ok
00:27:31.0114 0x1534  [ D435EA0ADD50C236CC7EFBEC3002EC9B, 6C93E7B16C5449AFED64BF4A1A1A03D94FFE6CD401D40BB3188CF469B9EC7C76 ] C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\comctl32.dll
00:27:31.0114 0x1534  C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\comctl32.dll - ok
00:27:31.0114 0x1534  [ C75D435B808CB7EC827739243DD101F9, 0DFFA045D55BD1BF5A0623AF5034A3CCAC610C83D3B283B11CD8B5B3087AADEB ] C:\Windows\System32\OpcServices.dll
00:27:31.0114 0x1534  C:\Windows\System32\OpcServices.dll - ok
00:27:31.0114 0x1534  [ 42FEFCA6AB3EDFB9AEE8B87292E47DFE, 6073F3616B310E8EDBFD09744E96F94A7F25FE33C79FF06A0A96E3C8888EB6F2 ] C:\Windows\syswow64\cmd.exe
00:27:31.0114 0x1534  C:\Windows\syswow64\cmd.exe - ok
00:27:31.0130 0x1534  [ BA233DF2C1A7D252C9172C468E8FCEA6, 34621DA1D9C7E416154B4791EDF106A16CF979C06BD9DAE68E6C17E0E1C3EA28 ] C:\Windows\System32\AppxPackaging.dll
00:27:31.0130 0x1534  C:\Windows\System32\AppxPackaging.dll - ok
00:27:31.0130 0x1534  [ CB6579CFE793A090038D80E6E8C7256B, CAF8519FC53A4DFA3B515614CB97381DA9381684ED6774D0D6BC3ACFB369BDF5 ] C:\Windows\syswow64\cmdext.dll
00:27:31.0130 0x1534  C:\Windows\syswow64\cmdext.dll - ok
00:27:31.0130 0x1534  [ AAF4EBD24B5FEFF2248F475734B2088A, B3F7EBC7F3C3F788E0E6669C0F2D4A2C858EBCD64B2B28C30C27F472DDAC8DB2 ] C:\Windows\syswow64\actxprxy.dll
00:27:31.0130 0x1534  C:\Windows\syswow64\actxprxy.dll - ok
00:27:31.0130 0x1534  [ 3A0A1281DA2F29BC121A7910E540B382, 6E06F05C6C2649784B272BA525AF4917B4DC7057B9588894C853564A6C410A9B ] C:\Windows\System32\AppxApplicabilityEngine.dll
00:27:31.0130 0x1534  C:\Windows\System32\AppxApplicabilityEngine.dll - ok
00:27:31.0130 0x1534  [ 3151B9ECC25716B9234F06317B3FEB64, F1510141FE552081AF1FB705F04188EDE855C237FA989EF65B4E4E2A8EA91CA3 ] C:\Windows\System32\RuntimeBroker.exe
00:27:31.0130 0x1534  C:\Windows\System32\RuntimeBroker.exe - ok
00:27:31.0130 0x1534  [ CD5E77704BD4192A542294EBC24CC905, BA021F89AD3BCE62A93BD20C2EA14382D15D3F071DC1679625D08767C6FC8A32 ] C:\Windows\System32\SndVolSSO.dll
00:27:31.0130 0x1534  C:\Windows\System32\SndVolSSO.dll - ok
00:27:31.0130 0x1534  [ 3CB189FFDA70D42464269845B311676F, 1DDFAE465A875BEE6B6D288994EC7BC041192006AC1BF4E6AA993A59EE0EE338 ] C:\Windows\System32\DataExchange.dll
00:27:31.0130 0x1534  C:\Windows\System32\DataExchange.dll - ok
00:27:31.0145 0x1534  [ 28B99C708650F1275BA88411A98A2F3B, DD0C2C550EE6E159A8E0BB697A6AB682646ECF08D0CBF28B36E7396FE1BE493E ] C:\Windows\System32\profext.dll
00:27:31.0145 0x1534  C:\Windows\System32\profext.dll - ok
00:27:31.0145 0x1534  [ EF9E849E520C54DF7D4351A218FEA01C, 6E7A8F258128B64214E55AD6BA6E34525BA46ED1963D98B6BAD9C951DC94CADB ] C:\Windows\System32\vaultcli.dll
00:27:31.0145 0x1534  C:\Windows\System32\vaultcli.dll - ok
00:27:31.0145 0x1534  [ 8D7A96FE7814A00780E2484860C3B9E9, BF55E5468759D1F5256FC4347D05B4845AD0883D85CDD5A6F7A094FA22AE7840 ] C:\Windows\System32\ExplorerFrame.dll
00:27:31.0145 0x1534  C:\Windows\System32\ExplorerFrame.dll - ok
00:27:31.0145 0x1534  [ 3BEA5930E4C8FC6AC991E8AC6CA79142, D8141E551DD590F34EFBA2628BC757EDD2BC1940C36890EAFE82668C857E353D ] C:\Windows\System32\twinui.dll
00:27:31.0145 0x1534  C:\Windows\System32\twinui.dll - ok
00:27:31.0145 0x1534  [ E970D31BE5FC8587FEDD8AA56D301D44, 97390181E19F209F7ABD707E01D637680B6269A0AE92B9041475ADA851F01EEB ] C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
00:27:31.0145 0x1534  C:\Windows\System32\windows.immersiveshell.serviceprovider.dll - ok
00:27:31.0145 0x1534  [ BC83108B18756547013ED443B8CDB31B, B2AD109C15EAA92079582787B7772BA0A2F034F7D075907FF87028DF0EAEA671 ] C:\Program Files\Microsoft Office 15\root\office15\msvcp100.dll
00:27:31.0145 0x1534  C:\Program Files\Microsoft Office 15\root\office15\msvcp100.dll - ok
00:27:31.0145 0x1534  [ 25242975D5C81EC2BC3E1B2A1D340C26, 1AA9E60F4ACBEFA921EC881E9AF55849DBF0E1B5B86FA905B988C330260E3E4B ] C:\Windows\System32\wldp.dll
00:27:31.0145 0x1534  C:\Windows\System32\wldp.dll - ok
00:27:31.0145 0x1534  [ 0E37FBFA79D349D672456923EC5FBBE3, 8793353461826FBD48F25EA8B835BE204B758CE7510DB2AF631B28850355BD18 ] C:\Program Files\Microsoft Office 15\root\office15\msvcr100.dll
00:27:31.0145 0x1534  C:\Program Files\Microsoft Office 15\root\office15\msvcr100.dll - ok
00:27:31.0161 0x1534  [ A46EDE4C5F46A6C090B7991B119B8C94, B737ADA8CBB5171B0D4F76CBD59B872533AA0988648173E474EB40857ADAE23E ] C:\Windows\System32\ApplicationFrame.dll
00:27:31.0161 0x1534  C:\Windows\System32\ApplicationFrame.dll - ok
00:27:31.0161 0x1534  [ 208C90D77BE358551D912EA39C75A02A, 08D1CC6CA94702448716821F775C423B934CD3E69C334481465DD3C561E597B5 ] C:\Program Files\Microsoft Office 15\root\office15\appvisvsubsystems32.dll
00:27:31.0161 0x1534  C:\Program Files\Microsoft Office 15\root\office15\appvisvsubsystems32.dll - ok
00:27:31.0161 0x1534  [ E376CC1167BF495B8400694EA590DDD3, 9189D706312245D41BC3389C6F9A558283FEE182C9FEB6394FCFF6632777B370 ] C:\Windows\System32\ELSCore.dll
00:27:31.0161 0x1534  C:\Windows\System32\ELSCore.dll - ok
00:27:31.0161 0x1534  [ 41E4B5F664AAF085F5B8147D0321DE4C, D72E3247CB466FF56F13A0C1900D8940F0868CCC4D31F0BEF2315C9FACA59B78 ] C:\Windows\System32\wpncore.dll
00:27:31.0161 0x1534  C:\Windows\System32\wpncore.dll - ok
00:27:31.0161 0x1534  [ E9FB231B34EB7A79ECCD26AE8E7BA5AF, 5FB611ED547048B8B7D2FF7B7A9ECF7F3DD1F89A23C51FAF7573B47E273CB888 ] C:\Program Files\Microsoft Office 15\root\office15\appvisvstream32.dll
00:27:31.0161 0x1534  C:\Program Files\Microsoft Office 15\root\office15\appvisvstream32.dll - ok
00:27:31.0161 0x1534  [ 86F88F1BCA5B5DF67568D46540D2D649, 0AD91A3A23CD6BC5391788DED6D1298D602E49E429FBF0FBE0C06E1EB04FF1BA ] C:\Program Files\Microsoft Office 15\root\office15\c2r32.dll
00:27:31.0161 0x1534  C:\Program Files\Microsoft Office 15\root\office15\c2r32.dll - ok
00:27:31.0161 0x1534  [ 27A19F0DED39FBE5A07D96E28F166E98, 5580047F0A6A42625211505E1B11C51804D5901E3522293DA912F106E31A4C47 ] C:\Windows\System32\ntshrui.dll
00:27:31.0161 0x1534  C:\Windows\System32\ntshrui.dll - ok
00:27:31.0177 0x1534  [ 9C2B0E3A21CECD14E20A848F0DE94B24, F85AF1F7C3D9B0DE78AD87BA723668C3339E7166A6E0779A2853FDC9705E1041 ] C:\Windows\System32\NotificationController.dll
00:27:31.0177 0x1534  C:\Windows\System32\NotificationController.dll - ok
00:27:31.0177 0x1534  [ C530EEA7F3942BD6B2BE578BFB6E7E73, FB01C14E1D1A2B777847416C588460DD1062CD48B71FF01BFEAF01187161731F ] C:\Windows\System32\wwapi.dll
00:27:31.0177 0x1534  C:\Windows\System32\wwapi.dll - ok
00:27:31.0177 0x1534  [ AFA05AE12B9E099EE7940028EAE2C4A7, 39C791F75F268F2BF6B371264348D5C5A88A99D38C8D982A38D256D769BD423A ] C:\Windows\System32\AboveLockAppHost.dll
00:27:31.0177 0x1534  C:\Windows\System32\AboveLockAppHost.dll - ok
00:27:31.0177 0x1534  [ FD6503ED91D83940582CAD2D1AFD9310, AD8D93CFAC0B790F984E51204E0823F66D141FBEA6AC4A31E4A9F0B2FC14509C ] C:\Windows\System32\wcmapi.dll
00:27:31.0177 0x1534  C:\Windows\System32\wcmapi.dll - ok
00:27:31.0177 0x1534  [ BD60F5633F6BD617D9ECCA3FFDC0D37E, 2F0DECAEB7096CD628387263381E123C883F483BD87F7F2BA6DEFBB5A184BAA3 ] C:\Windows\System32\qmgr.dll
00:27:31.0177 0x1534  C:\Windows\System32\qmgr.dll - ok
00:27:31.0177 0x1534  [ C2396C2252F0DC91DEDF20C56705A8C0, 53A0BFAA442F0298D24BF14F8B4630CCAE6872991EA6DC1AC645F4B2880E966E ] C:\Windows\System32\wlidprov.dll
00:27:31.0177 0x1534  C:\Windows\System32\wlidprov.dll - ok
00:27:31.0177 0x1534  [ CF8445597DA668758E7B1251CE15AE08, 4A01E2DE0330BA43E6F4FDCE04F793AAA136C30D5AF81D8D6E1F12F0CD7E145E ] C:\Windows\System32\bitsperf.dll
00:27:31.0177 0x1534  C:\Windows\System32\bitsperf.dll - ok
00:27:31.0192 0x1534  [ 07AE9C57C31890822BF85E653161B979, 1FD1A865A03298A9663C95DCB5F0AC6C2DFB6AF8B2FA6F02CCF20BE151EDB22E ] C:\Windows\System32\bitsigd.dll
00:27:31.0192 0x1534  C:\Windows\System32\bitsigd.dll - ok
00:27:31.0192 0x1534  [ 5BA9F4F293C22B86917403CD7AE9F29B, EB7F0363FF2E62C0B6F3B2171AAC7FE2F52D8A6ABA6998B1409FE7B62D1C4356 ] C:\Windows\System32\BitsProxy.dll
00:27:31.0192 0x1534  C:\Windows\System32\BitsProxy.dll - ok
00:27:31.0192 0x1534  [ 27D942D4E2CEE4553A9C020BE85433C9, 04EE098A67348D5C2AC6F7324CEB7B682C303E322CE21E624537D5D63384FBF4 ] C:\Windows\System32\thumbcache.dll
00:27:31.0192 0x1534  C:\Windows\System32\thumbcache.dll - ok
00:27:31.0192 0x1534  [ 917B7EFA0A2A72524C0191E6CC3F6FFB, 52C6A79A4986EC416D595A212F208901AA2AD20676023EAFB5131E4821330613 ] C:\Windows\System32\winbrand.dll
00:27:31.0192 0x1534  C:\Windows\System32\winbrand.dll - ok
00:27:31.0192 0x1534  [ EDA40DF87F8FD6B0DEB8738A6F3086E7, 9B22F0F1CB0A1C95B6C816FFE0F52FB6FBE2CB305DFF1D0042BFC77E7E973066 ] C:\Windows\System32\linkinfo.dll
00:27:31.0192 0x1534  C:\Windows\System32\linkinfo.dll - ok
00:27:31.0192 0x1534  [ 91D95DBB1A5AE91725000C7C7AA54EEE, 10D23D90A9B5D16DBF73404CE416644C03FF65AAD98792BE62726297F4CD48FB ] C:\Windows\System32\dsreg.dll
00:27:31.0192 0x1534  C:\Windows\System32\dsreg.dll - ok
00:27:31.0192 0x1534  [ 286C6276B2BA86F29A0F687D05466277, AC8551536F37717A0ACE4A260F5696D1276F7AC62F669E8F12AA158DD86F71A5 ] C:\Windows\System32\ncbservice.dll
00:27:31.0192 0x1534  C:\Windows\System32\ncbservice.dll - ok
00:27:31.0192 0x1534  [ 0FC4FA53C3F666CD7AFB138A978D3CB8, F65D88324D6007CE4AAB9486B6D00EE6352CA0F3B1A2D0616811AF1279799501 ] C:\Windows\System32\Windows.StateRepository.dll

Treend 13.11.2015 00:40
Code:
00:27:31.0192 0x1534  C:\Windows\System32\Windows.StateRepository.dll - ok
00:27:31.0208 0x1534  [ 5275394FE00E85B13DC535C67961DFEB, 262B8E9EF5D3CC4A07D28BA43A969CF78AFA3E73A5D039BAB1E0F836E60777D5 ] C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
00:27:31.0208 0x1534  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe - ok
00:27:31.0208 0x1534  [ 910E8A17B1704DC9ED834765E494F370, 1F6F5D66081F2606093563268135E51005CFC8A7895631061420BF05F2ACF120 ] C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
00:27:31.0208 0x1534  C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll - ok
00:27:31.0208 0x1534  [ A3BC575505C5F52A94E39D554F8C371E, F86D11F7F0C2969C6147E91468B6F50813BBBD7A447CC12E3B7AFFFEE811A50E ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll
00:27:31.0208 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll - ok
00:27:31.0216 0x1534  [ 46060C35F697281BC5E7337AEE3722B1, 2ABF0AAB5A3C5AE9424B64E9D19D9D6D4AEBC67814D7E92E4927B9798FEF2848 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\msvcp120.dll
00:27:31.0216 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\msvcp120.dll - ok
00:27:31.0218 0x1534  [ 9C861C079DD81762B6C54E37597B7712, AD32240BB1DE55C3F5FCAC8789F583A17057F9D14914C538C2A7A5AD346B341C ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\msvcr120.dll
00:27:31.0218 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\msvcr120.dll - ok
00:27:31.0220 0x1534  [ 2EE7E550674522519E1D1E001B6A6105, E92C36ECEF07E350BB4EBFC3565DA7AF972F575BAC7BACAA4855337A617323EF ] C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
00:27:31.0220 0x1534  C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL - ok
00:27:31.0222 0x1534  [ 35D64EDE76831D265DF3DE9D72EE06DF, 865A8592ED455CF49873381848CFA0046B2F3EBE470E02D4E3E87878AAE9BA46 ] C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\StartUI.dll
00:27:31.0222 0x1534  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\StartUI.dll - ok
00:27:31.0224 0x1534  [ 53A3DE22A97A40469FC6AEB54A151A61, ECE86E8A88DE3A06EBDA73D8945DDA04DF9A94A0C8F949C9C3E1C3D2355CA526 ] C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\atl100.dll
00:27:31.0224 0x1534  C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\atl100.dll - ok
00:27:31.0226 0x1534  [ D029339C0F59CF662094EDDF8C42B2B5, 934D882EFD3C0F3F1EFBC238EF87708F3879F5BB456D30AF62F3368D58B6AA4C ] C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcp100.dll
00:27:31.0226 0x1534  C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcp100.dll - ok
00:27:31.0228 0x1534  [ 366FD6F3A451351B5DF2D7C4ECF4C73A, AE3CB6C6AFBA9A4AA5C85F66023C35338CA579B30326DD02918F9D55259503D5 ] C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcr100.dll
00:27:31.0228 0x1534  C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\msvcr100.dll - ok
00:27:31.0231 0x1534  [ C628810A5584A81CCFC7B71E89DD8819, A6C89D4800DF77DF719B40D30483234B71F4024A7CB746BAD754F0E5EFE4CC80 ] C:\Windows\System32\msi.dll
00:27:31.0231 0x1534  C:\Windows\System32\msi.dll - ok
00:27:31.0233 0x1534  [ 9A1144D5CFD06D9440686E3FD5F4B3C9, D11FF12E631436E28AAA644F86483B30D1CF9D8159E89161391B4076D75FD9CE ] C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
00:27:31.0233 0x1534  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll - ok
00:27:31.0235 0x1534  [ E81E56A7230CDE8B34242D9A1AA7F19F, A906501862AAABBC30821968402ABF2C9607991B8A5353F54D348B37694D169E ] C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.ActionCenter.dll
00:27:31.0235 0x1534  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.ActionCenter.dll - ok
00:27:31.0236 0x1534  [ F25517E37D5880CF6D79B5F6DA5BB6C4, D6BDC9661AA7C704239010B26151E2E014700054A9FF9CE8AF52BBF60B96D473 ] C:\Windows\System32\QuickActionsDataModel.dll
00:27:31.0236 0x1534  C:\Windows\System32\QuickActionsDataModel.dll - ok
00:27:31.0238 0x1534  [ B7406AEDDE9D3582A3BAB929C4F3D717, D7F19E2A86B46850604BC3B7361517191D721C0E8584DC29F8804BBA8916DB96 ] C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\1031\grooveintlresource.dll
00:27:31.0238 0x1534  C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\1031\grooveintlresource.dll - ok
00:27:31.0240 0x1534  [ 695DFBE0357DB32E4475F74053D021BC, A2D2D441D807432B9C3EDD976E27635655F29E62E622A00BB2A57B0803D9FAAA ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
00:27:31.0240 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe - ok
00:27:31.0242 0x1534  [ 01C68BC420CF31AAA7DEEE18AD2A4BD1, 4B896079EC7A4CFA91FAB305E4CF96A018D640C1A13A8F85866E3F15A5F3563F ] C:\Windows\System32\SearchIndexer.exe
00:27:31.0242 0x1534  C:\Windows\System32\SearchIndexer.exe - ok
00:27:31.0244 0x1534  [ 9ED18AA0A7F4DEC9779CE9059FE6D057, B84CA92723E6AFC633AD75296B8D44217F728C30717856066A3755389AE340B8 ] C:\Windows\System32\tquery.dll
00:27:31.0244 0x1534  C:\Windows\System32\tquery.dll - ok
00:27:31.0246 0x1534  [ 20436EF4CDBBC0B87464EE42D9D31C99, ABE99DF2C612D1A762F20C9953F5AC694EDB28C288AE29057EC5CF83B3608AE9 ] C:\Windows\System32\NotificationObjFactory.dll
00:27:31.0246 0x1534  C:\Windows\System32\NotificationObjFactory.dll - ok
00:27:31.0248 0x1534  [ 671526BC4C55A11719657F5782A70CB8, 356AC567A7FE14CB2F68E8010D033975E35FAF714083C457A5A404C3B8912C99 ] C:\Windows\System32\Windows.Storage.ApplicationData.dll
00:27:31.0248 0x1534  C:\Windows\System32\Windows.Storage.ApplicationData.dll - ok
00:27:31.0249 0x1534  [ D1650F6BDDF820399421C2952675731A, 609BB34F95E4166F0CBE64F348A4325A2D71DAC79931A3C05117C6FEB64BBA41 ] C:\Windows\System32\mssrch.dll
00:27:31.0249 0x1534  C:\Windows\System32\mssrch.dll - ok
00:27:31.0251 0x1534  [ 919899E1BFC7A239A2ED278CD8494806, AF2B1CA788401AF2C7763503FCE96AC2F89D6EB30563070016E99220D2BD1838 ] C:\Windows\syswow64\apphelp.dll
00:27:31.0251 0x1534  C:\Windows\syswow64\apphelp.dll - ok
00:27:31.0253 0x1534  [ 11E9B30F5A43F6FAB078E78A3D1A43EB, 5DF9E43CD0644DC0C164B762CA013E64532BB906927F68ABC01FDFE34BA269C9 ] C:\Windows\System32\Windows.Graphics.dll
00:27:31.0253 0x1534  C:\Windows\System32\Windows.Graphics.dll - ok
00:27:31.0255 0x1534  [ 981F5A541053CAEB8BAAE01F1CE2B278, 56E2F23A9207C4D02917B9C62729CE15B0D575260C47614B177A62D5D5328F29 ] C:\Windows\System32\msidle.dll
00:27:31.0255 0x1534  C:\Windows\System32\msidle.dll - ok
00:27:31.0256 0x1534  [ 28E40F5E6856E55047F7576BD62B7DBC, 6A6B483EED28CF5CBC4678B26C778EC85A8E8735EFD7248D84BD94252CD8AB9D ] C:\Windows\syswow64\pcacli.dll
00:27:31.0256 0x1534  C:\Windows\syswow64\pcacli.dll - ok
00:27:31.0258 0x1534  [ 7706E35B617DEC186CBD0A377C2E025A, C5A061EB587294469E2E4AA862E7B9D18A182E3675249782D694DABA36996DBB ] C:\Windows\syswow64\sfc_os.dll
00:27:31.0258 0x1534  C:\Windows\syswow64\sfc_os.dll - ok
00:27:31.0260 0x1534  [ F5839DD5FD73019B046ED7FD87AE6C71, 74BB091914E220A0F4D43AA5E60A7C876536CD777CF3B2CCAAD3D4C54F42072D ] C:\Windows\System32\mssprxy.dll
00:27:31.0260 0x1534  C:\Windows\System32\mssprxy.dll - ok
00:27:31.0261 0x1534  [ 69369D90EE2C6EC306E7D61F2393CE98, E6BED56CB86592BF61A9A21D4B265FADE8C0B3795DCACAE6934322D10AACECBA ] C:\Windows\syswow64\devrtl.dll
00:27:31.0261 0x1534  C:\Windows\syswow64\devrtl.dll - ok
00:27:31.0264 0x1534  [ 0170A4503F85F2D7ABCBEF0419B1C35A, 98E2E72DB2B7BA1385A0CCCBD52390797B566B8F05AC13973C871394BF5949DF ] C:\Users\Claudio\AppData\Local\Temp\{49481D20-9D0D-4A9D-ACC3-D50499A1AC11}.exe
00:27:31.0264 0x1534  C:\Users\Claudio\AppData\Local\Temp\{49481D20-9D0D-4A9D-ACC3-D50499A1AC11}.exe - ok
00:27:31.0266 0x1534  [ 7B61D08546C16E98B8CDBB918D928A38, 102E82270D053DECAFE0BEBE976086A96464E664EB0709DBE9B0EDE0246751D3 ] C:\Windows\System32\RTMediaFrame.dll
00:27:31.0266 0x1534  C:\Windows\System32\RTMediaFrame.dll - ok
00:27:31.0268 0x1534  [ 45360D5C9EFA33404D32F3F67018F8A9, 0E57E85D49E4809FD8F44B3C9A15B7BBF79F9604B6B487411113A53BCBBBE75D ] C:\Windows\System32\StructuredQuery.dll
00:27:31.0268 0x1534  C:\Windows\System32\StructuredQuery.dll - ok
00:27:31.0270 0x1534  [ C38FC5ABC2D08E4613C5D1AD4572B7B9, 049B67EF7885C22B53DF938AA621991386E65DF54BA9A2B0B58906234C2A9B77 ] C:\Windows\syswow64\dwmapi.dll
00:27:31.0270 0x1534  C:\Windows\syswow64\dwmapi.dll - ok
00:27:31.0272 0x1534  [ C83D4D51ADFB38564E4BC4A5037B7764, 7648776998C4FEC499F33353904CAB3D6406A9DF7ACF32ED0C652CEB8A6AEE11 ] C:\Windows\System32\Windows.Storage.Search.dll
00:27:31.0272 0x1534  C:\Windows\System32\Windows.Storage.Search.dll - ok
00:27:31.0273 0x1534  [ 2753AEEA95472E1FE53134AC39C192B8, 74C8098186B4C795BF51FBEDCB9C02CEB7B8F7B89CB9A5770A6B104AD00ABAFD ] C:\Windows\System32\biwinrt.dll
00:27:31.0273 0x1534  C:\Windows\System32\biwinrt.dll - ok
00:27:31.0275 0x1534  [ 7E529A58112744373D4921D797E0BF1F, C98D3EEF419256067AE3379A4E98A197C6859624EE1A335D029EE183565DC6B2 ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{9D713B40-B34A-4A61-8A52-1C6DD5DFCEF1}.tmp
00:27:31.0275 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{9D713B40-B34A-4A61-8A52-1C6DD5DFCEF1}.tmp - ok
00:27:31.0277 0x1534  [ 8782E4B9D1D0A82A99C4C934F261D2EC, D0F4829ACCA92937ECE4A41FBC0C2BD083C01EC6FF94C0F76DD94B6945161E6A ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{DFACB741-C6F3-42AC-8382-374E047917C4}.tmp
00:27:31.0277 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{DFACB741-C6F3-42AC-8382-374E047917C4}.tmp - ok
00:27:31.0279 0x1534  [ 7223441A755C62EC4132E0EFE1FE2C76, 52E120E30B5AD191BCD7EB4264F16278A41932DC035C0681A6F5082A3F29DA8D ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{34A058AB-62B4-460D-AB38-6F45D1A51163}.tmp
00:27:31.0279 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{34A058AB-62B4-460D-AB38-6F45D1A51163}.tmp - ok
00:27:31.0281 0x1534  [ 121015422CA0A0EFDAF449D9BF608B21, C0EB56B4A17929D6263CCDA6C6405F5B54AF07C4F9E1D0B48763F51BC2B87751 ] C:\Windows\System32\ploptin.dll
00:27:31.0281 0x1534  C:\Windows\System32\ploptin.dll - ok
00:27:31.0283 0x1534  [ 9FBCAB935BB9C23D672FA4C103436DEE, 70AA809A581DEBE6A95F5CF4074F1C964A77CB1EB5132E91B35FE6DE0E2FF3C7 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
00:27:31.0283 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll - ok
00:27:31.0285 0x1534  [ 81270A0C525D8970FC178D31D795C087, 92DF7190125C6D7334E740B6984BDA8CB381AE3F9CFB260375684166FBB982A2 ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{0EF16CCF-22E8-482D-A7AE-5679763129B4}.tmp
00:27:31.0285 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{0EF16CCF-22E8-482D-A7AE-5679763129B4}.tmp - ok
00:27:31.0287 0x1534  [ DBBDB7AAFF126419847385D9A2C0F704, C773383E0ED15EAEBDD359B38AE40ED8CD0CE14774D0DFF764D6E2A03F5EBC7A ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{ED7FB5FD-896E-4BBD-BDCF-B3D7DCDB1943}.tmp
00:27:31.0287 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{ED7FB5FD-896E-4BBD-BDCF-B3D7DCDB1943}.tmp - ok
00:27:31.0289 0x1534  [ 8A6BFCB7E417417702916AF055B76DAE, 6477CF88B52D0D41755E1A7BDE6F86B73D5E0B5E0184E51DD198BE6B513D40CD ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{654A09C7-3F36-4465-99F7-6B5B765A87D5}.tmp
00:27:31.0289 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{654A09C7-3F36-4465-99F7-6B5B765A87D5}.tmp - ok
00:27:31.0291 0x1534  [ C769DABBDE83748FA38A6161DB2C74EE, AB63838FDDC90EEBEB1DE0A8F22FB09B223DCBA9957457535B41F0F3EFF5CB3B ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{A2CA4474-78ED-4EB9-95EC-A86B9316B7A0}.tmp
00:27:31.0291 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{A2CA4474-78ED-4EB9-95EC-A86B9316B7A0}.tmp - ok
00:27:31.0292 0x1534  [ 988BA85FC4FE7C6D0D14B2536CC9F367, 4D9DBD7F70D101ED120A0EF87E6EE45BD641615DD53C672E6A0710A9EEAA85AD ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{CD736AA6-5D97-4A54-8FBF-1FC5FAD83030}.tmp
00:27:31.0292 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{CD736AA6-5D97-4A54-8FBF-1FC5FAD83030}.tmp - ok
00:27:31.0294 0x1534  [ 828BEAB67CFA903ADC7337128265F39C, 9D917D9C566501B39BACCF08C0E329BC92FC37EC8C0BF46C3FF6BB7CFEA9B974 ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{80F58233-E6AC-4F41-9805-4DA2CF155E6A}.tmp
00:27:31.0294 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{80F58233-E6AC-4F41-9805-4DA2CF155E6A}.tmp - ok
00:27:31.0296 0x1534  [ 2AF6561372C979081B73022462EAD3A1, CB8D0B78292B0531F20CB50E18F63BE971AC4D0D0A5C0D767A3C9701B08C6530 ] C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{4CBDF93A-990D-47C2-86EA-83DD897E2447}.tmp
00:27:31.0296 0x1534  C:\Users\Claudio\AppData\Local\Temp\{A581AB4A-C64A-4366-BD00-F5AB36D83A3D}\{4CBDF93A-990D-47C2-86EA-83DD897E2447}.tmp - ok
00:27:31.0299 0x1534  [ 876BDCE4CD5B2F4DA258A30E8B138264, 556F106AE0626E777B029E73679D25AD21D5E1C45D0220640AD883A5DBB6EAB4 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfigurationClient.dll
00:27:31.0299 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingConfigurationClient.dll - ok
00:27:31.0300 0x1534  [ C0C6BCF81C986E2F6E5C71F4A33C5DC1, D391510D47B188272E0533D108317F3C8819E8178380F93409C7FE5735EEDA23 ] C:\Windows\System32\Windows.Cortana.PAL.Desktop.dll
00:27:31.0300 0x1534  C:\Windows\System32\Windows.Cortana.PAL.Desktop.dll - ok
00:27:31.0302 0x1534  [ 8CCD05E9C0C77712522A68527624204B, 18F352DE607B758F14B07AB0A612F3C0D4361CD424327DEFBAD02BE178F9ECE0 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
00:27:31.0302 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll - ok
00:27:31.0304 0x1534  [ 6EF04C3B85304E1A3A5887C335AF9801, 4449E1C41C9999E90878C442B50A23D0163BD0AB16905D2FEFC10BE45C45D502 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AISTokenManager.dll
00:27:31.0304 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\AISTokenManager.dll - ok
00:27:31.0306 0x1534  [ F0C9C0F983116A2CCF4D5A6C499B24E2, 48B7338EDEE482F3DAF14F1E228B127D99AA1CDD08734915D5E807BC3D7C4B72 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\OnlineServices.dll
00:27:31.0306 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\OnlineServices.dll - ok
00:27:31.0308 0x1534  [ DD511B0D3B895D69549EAA372886BD25, AF2F4848FC7CAFC345F2E230A4F9AC3581C47F87DA438BAA87620725F84AF892 ] C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
00:27:31.0308 0x1534  C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll - ok
00:27:31.0310 0x1534  [ F6058BCD217F4B346FCD83451AB29B9A, D372359956159D2628309F4C411CAA68025489DBF0404AC5965F2818BF8243F3 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingIdentityManagerInternal.dll
00:27:31.0310 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\BingIdentityManagerInternal.dll - ok
00:27:31.0312 0x1534  [ 7F13FA395F0A78239905B63BF8875105, 11AD6306F1DED55CF3E9AB6C9BCBB6E46907AF0324995CEAF75045A2DDE36408 ] C:\Windows\System32\PersonaX.dll
00:27:31.0312 0x1534  C:\Windows\System32\PersonaX.dll - ok
00:27:31.0314 0x1534  [ 75C3B223B2A81B64BA8FE426C3109578, 9191C941CEBD53BAE963A044E4226BE53AF9528DBD72543F5D72014241769491 ] C:\Windows\System32\Windows.Web.Http.dll
00:27:31.0314 0x1534  C:\Windows\System32\Windows.Web.Http.dll - ok
00:27:31.0316 0x1534  [ 94FE2C4045D2319EDE6779B654241BC0, 12E478ACB7F1054D567C1595EE0691BAB71958368E76595459C35E6E32864AB2 ] C:\Windows\syswow64\riched20.dll
00:27:31.0316 0x1534  C:\Windows\syswow64\riched20.dll - ok
00:27:31.0318 0x1534  [ EF85D2B9BF6EB50AE4CDF440F3AC7857, 714DF0F10DA7426028B1ED61ECCA0BB374E51BAEB61CE8BAE188240C3A59FBD5 ] C:\Windows\syswow64\usp10.dll
00:27:31.0318 0x1534  C:\Windows\syswow64\usp10.dll - ok
00:27:31.0319 0x1534  [ AA34BC0E4024BB3598991958B1B103A2, D24C23EB2213E2E44EA2B1E2F6B2C91DA3454DD6BDD4BBD229AD078AF9425CDF ] C:\Windows\syswow64\msls31.dll
00:27:31.0319 0x1534  C:\Windows\syswow64\msls31.dll - ok
00:27:31.0321 0x1534  [ ED9267D9AD4657C9D843D0471D90169B, 55E21F47B21CD8BEA78AAFB8C2769987E6D9E66FDD79984944F196FA03B4EAA4 ] C:\Windows\syswow64\ExplorerFrame.dll
00:27:31.0321 0x1534  C:\Windows\syswow64\ExplorerFrame.dll - ok
00:27:31.0323 0x1534  [ A94C58F3C7F96AA1DC198F8BFF98763E, AEB259E0A4AFE2AB1EBC8C13BAB031CAEE42EE35C64046E3C2612E553DB9A68D ] C:\Windows\System32\stobject.dll
00:27:31.0323 0x1534  C:\Windows\System32\stobject.dll - ok
00:27:31.0325 0x1534  [ D10A37F569F00F4D861D72786310D20F, 64EEE4F841DC3AE2E7E282CED2EAAB47FD37F0F93439AF5DF15A463946E41967 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
00:27:31.0325 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll - ok
00:27:31.0327 0x1534  [ C9346F0B1847A2F98A22DBB26795624D, 615AD5E4ACCBCC8413F8422961F88AFED2C79A0F973C54B521D662D758351622 ] C:\Windows\System32\batmeter.dll
00:27:31.0327 0x1534  C:\Windows\System32\batmeter.dll - ok
00:27:31.0328 0x1534  [ 7505ACFD9362DA74FEB623F21FE3B391, 0ADD0446160F6FA8C65C1AFCC9E43ACDEA0BF5D77A4E246F229E2C1BD4231AB2 ] C:\Windows\System32\Windows.Media.Speech.dll
00:27:31.0328 0x1534  C:\Windows\System32\Windows.Media.Speech.dll - ok
00:27:31.0331 0x1534  [ 70AAE16C405934CAD2024E8E5BDDDC7A, AB23415371C99D3670100A24E636BB4F3A3BCD4B849A9AE1831D97ED71ACD925 ] C:\Windows\System32\NotificationControllerPS.dll
00:27:31.0331 0x1534  C:\Windows\System32\NotificationControllerPS.dll - ok
00:27:31.0332 0x1534  [ 390EAAB81E5C1DB0FD4920796C74AB48, B02B033A7F00330A443D08C9EAD8C43B171EB4EEFC2F7EBCB72C5E59F8959EF0 ] C:\Windows\System32\Windows.UI.Shell.dll
00:27:31.0332 0x1534  C:\Windows\System32\Windows.UI.Shell.dll - ok
00:27:31.0334 0x1534  [ 21923317E3DFB76B0731E7F7D4D683E6, 9352BBCFBCF525966F7DEB5F67740793BD288D94410E29E11DAC70346E2130E9 ] C:\Windows\System32\CommsTypeHelperUtil_ca.dll
00:27:31.0334 0x1534  C:\Windows\System32\CommsTypeHelperUtil_ca.dll - ok
00:27:31.0336 0x1534  [ 8A42D0947B0A88801E5051CE7A03FB5A, ADE885D08EF23C74D66FF363DF738886AA0BBCE4032663CA04C77E06E99F4CE1 ] C:\Windows\System32\Windows.Gaming.Input.dll
00:27:31.0336 0x1534  C:\Windows\System32\Windows.Gaming.Input.dll - ok
00:27:31.0338 0x1534  [ 52C3440B5098BFB99D91E869A26ECB30, 0E47044F123B6FE5C8407978BE36B2E66A9B65FFB49515E8B0F28DB1399272B7 ] C:\Windows\System32\RemoteNaturalLanguage.dll
00:27:31.0338 0x1534  C:\Windows\System32\RemoteNaturalLanguage.dll - ok
00:27:31.0340 0x1534  [ A526BD07A28320A7FCF6F045A051E882, 760A0679C3A44EF0AB43B79FEC3ADA4D6C130210B4FBD10C763031C77423480E ] C:\Windows\System32\prnfldr.dll
00:27:31.0340 0x1534  C:\Windows\System32\prnfldr.dll - ok
00:27:31.0341 0x1534  [ F49D7440A24E561BA47837854917D6E3, 45A9550C9A395DBF1B96C48A43B5F6D88F2427D9A3DE7DB8D17456F094420361 ] C:\Windows\System32\atlthunk.dll
00:27:31.0341 0x1534  C:\Windows\System32\atlthunk.dll - ok
00:27:31.0343 0x1534  [ FD8B92278663930E410ADE68F783D4A8, 461C338F37BCF95860A4961E8B024E372ADB24B9C5EEDBDC3D6059C2E119933D ] C:\Windows\System32\DXP.dll
00:27:31.0343 0x1534  C:\Windows\System32\DXP.dll - ok
00:27:31.0345 0x1534  [ 1BEAF48EA0B970B224D4FE3358F4C016, CCDA2EAE33E63AAABF4682E02510095EE8DA81A71D941EE302A8B026166BF2B7 ] C:\Windows\System32\shdocvw.dll
00:27:31.0345 0x1534  C:\Windows\System32\shdocvw.dll - ok
00:27:31.0347 0x1534  [ E4FEBAC5221A92C25734A9769B66A97D, A0759F3F79DD57EDCBD3D35C09AB05F4EBB05DF8B0782D9AFEDD35581999A270 ] C:\Windows\System32\ActionCenter.dll
00:27:31.0347 0x1534  C:\Windows\System32\ActionCenter.dll - ok
00:27:31.0349 0x1534  [ B71A6C78ED566FEDDA707173CCF2D4FA, D36DFDE9CA26F0B15DC97E0FE471FA4EB3F685581CF17922ED552A5C87ED4182 ] C:\Windows\System32\GeoLocatorHelper.dll
00:27:31.0349 0x1534  C:\Windows\System32\GeoLocatorHelper.dll - ok
00:27:31.0351 0x1534  [ A66166DE3ED8DA76802FD4470F8CA636, 3C7084E3D0FC87010596190FD7C09316ED8B9C9A13073BA0CCF54051E3D7EA9E ] C:\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll
00:27:31.0351 0x1534  C:\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll - ok
00:27:31.0353 0x1534  [ 934F4AD823EFEC7A82ED15A9FF1DD467, AC9309415CF277202A97ADE873822028C74595D56C7D24F6AB18B23CE91F0FE6 ] C:\Windows\System32\Syncreg.dll
00:27:31.0353 0x1534  C:\Windows\System32\Syncreg.dll - ok
00:27:31.0355 0x1534  [ A43228FEF57CBB6BE0CDB0BC37CC0F83, 6239CD5B4384BA61C66F1DF9984AD60B65639287225E61EFDACB6110846E07F0 ] C:\Windows\System32\authui.dll
00:27:31.0355 0x1534  C:\Windows\System32\authui.dll - ok
00:27:31.0356 0x1534  [ 8415D84889EBEF60055FE14E9BE49551, 27392F7BEC62778DC7449C7007FAB1ECEEBFF70F34BFDE6C5152B669D45A29D4 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
00:27:31.0356 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll - ok
00:27:31.0358 0x1534  [ CF2B0ADDBA61B3B9FA339118FC742032, A9BF8560CCCA60FACA114FDA62B2B8B0C0199BA84B8024E50C8035EF24A09B08 ] C:\Windows\System32\pnidui.dll
00:27:31.0358 0x1534  C:\Windows\System32\pnidui.dll - ok
00:27:31.0360 0x1534  [ 7FAE452A3926AD368F7535F4F01825EA, DDBBCD02072AC785362C071C07ADBF541FD21A4C60612AD1421512B945CE0FCF ] C:\Windows\System32\edgehtml.dll
00:27:31.0360 0x1534  C:\Windows\System32\edgehtml.dll - ok
00:27:31.0362 0x1534  [ 68086FAF67D47C8CD140BE31515273D8, EB0F7317F0D1B42BD77F17242B0F1E534C174B0C9060C7CF79FF28B5CA6CD2E6 ] C:\Windows\System32\WPDShServiceObj.dll
00:27:31.0362 0x1534  C:\Windows\System32\WPDShServiceObj.dll - ok
00:27:31.0364 0x1534  [ 3369DF067074FC2128AA5CC8653135F8, B608D002057497E30CEB5E7473F2674D1179518CD405BD29D3559E8677366F53 ] C:\Windows\System32\PortableDeviceTypes.dll
00:27:31.0364 0x1534  C:\Windows\System32\PortableDeviceTypes.dll - ok
00:27:31.0366 0x1534  [ B27725CC29369484C7352D4EA3B7BA0C, 3188D3EAB8EE303DA144E799F9997EFAE72D0C783BF3DA1E97E1DA01A55529A2 ] C:\Windows\System32\SettingMonitor.dll
00:27:31.0366 0x1534  C:\Windows\System32\SettingMonitor.dll - ok
00:27:31.0367 0x1534  [ A23EC72324C954869EB22698F6C0A0D5, 70D629D30CA5B2B8390712BC11A7AD3D548C67B517CFAB4ECAC6DCF2D1407E3B ] C:\Windows\System32\cscui.dll
00:27:31.0367 0x1534  C:\Windows\System32\cscui.dll - ok
00:27:31.0369 0x1534  [ 85AC4CA67BECC08CBC655A8D8919B23B, CE3DCD26ACD6CC4239F26A62FC278AF2A13F2DE1EAD0AC009A2FDCE136B2CF3E ] C:\Windows\System32\UIAutomationCore.dll
00:27:31.0369 0x1534  C:\Windows\System32\UIAutomationCore.dll - ok
00:27:31.0371 0x1534  [ 1E49262503EC709634D4926A6C459A1A, E263D0BE4366C87EB686B0F276E60A4D67F1B7726E202695E81B29E04BD9C44D ] C:\Windows\System32\cscdll.dll
00:27:31.0371 0x1534  C:\Windows\System32\cscdll.dll - ok
00:27:31.0372 0x1534  [ 1CD8DD869DF8799A0976BE7804EB9B3B, D0D6825BC08EBE4A7683BD7E43C28B317A626DA247C12C8D090D63165FA8C8AA ] C:\Windows\System32\cscobj.dll
00:27:31.0372 0x1534  C:\Windows\System32\cscobj.dll - ok
00:27:31.0374 0x1534  [ 80FFB883BB01E3898376901E462192EF, 6AF1F7E4419343966FDB4A852C1E6DD11A29C6A6B1AA392B51D11A361EA2AB0E ] C:\Windows\System32\srchadmin.dll
00:27:31.0374 0x1534  C:\Windows\System32\srchadmin.dll - ok
00:27:31.0376 0x1534  [ C2E401A854FD94B11BBB4BC06F96EAED, 1D881F3E87FF0E8D6C2A5F2891ECE49D857DA1BDBF83CDE8A0C8A8CF4549E451 ] C:\Windows\System32\SyncCenter.dll
00:27:31.0376 0x1534  C:\Windows\System32\SyncCenter.dll - ok
00:27:31.0377 0x1534  [ A32297181CAAFD44174FA031DF372EF8, 6B5D8CB0030B953BF81D7BB3E0302D44B7F1E6009EB11751084C9293BCAAB158 ] C:\Windows\System32\imapi2.dll
00:27:31.0377 0x1534  C:\Windows\System32\imapi2.dll - ok
00:27:31.0379 0x1534  [ 0BB5CE31F15F3917E30A2341C98EFC32, CE9FBD71C959100D898D7B31253F4E5998B49ADE3791A9304C2B780DEEE31B8F ] C:\Windows\System32\hgcpl.dll
00:27:31.0379 0x1534  C:\Windows\System32\hgcpl.dll - ok
00:27:31.0381 0x1534  [ D79D638DA35D8FC8B26EFF3601AC9029, 6EE92E6D706C2E4EE121A2DEEC400148B1FA009424114452E3DC077A2BBFE8F5 ] C:\Windows\System32\duser.dll
00:27:31.0381 0x1534  C:\Windows\System32\duser.dll - ok
00:27:31.0383 0x1534  [ 872A77BDA3B9967118659E2B195EF23F, 6A3A2EE1CDFE49AF20C34FBF33154D27663D4D8B707FE0C64DC29D8F1093FC88 ] C:\Windows\System32\Chakra.dll
00:27:31.0383 0x1534  C:\Windows\System32\Chakra.dll - ok
00:27:31.0384 0x1534  [ 7F835C0446B429B5909DAD4424F01B9A, 0D9F21236D7A6592D993DB195138073A97FC88FF994586AD9D39FAE3D13912DE ] C:\Windows\System32\mlang.dll
00:27:31.0384 0x1534  C:\Windows\System32\mlang.dll - ok
00:27:31.0386 0x1534  [ 78C9C71DB88129A5C950AA3343829560, 0E498316E53472174FA704EBA812E2E11255887DA7045D042E0B64DB175BE342 ] C:\Windows\System32\msimtf.dll
00:27:31.0386 0x1534  C:\Windows\System32\msimtf.dll - ok
00:27:31.0388 0x1534  [ E78268EAC4DE6ED4AC241B4BE926DCCA, 7DE8E4AE124AA9A499A9442BB6D423D425E968F434D85584465E5EB713A8FD70 ] C:\Windows\System32\ieapfltr.dll
00:27:31.0388 0x1534  C:\Windows\System32\ieapfltr.dll - ok
00:27:31.0389 0x1534  [ 3C658DA00D929EDC146C21A179D95D79, 5DC0B80453C063A8726BEEB44B4AAB06332AC5EBB42B7CF2AC37A2C6A81EFCD2 ] C:\Windows\System32\rometadata.dll
00:27:31.0389 0x1534  C:\Windows\System32\rometadata.dll - ok
00:27:31.0391 0x1534  [ EEFB3A9F35DBDEBDAD8F9A9A76927CCF, 07E0051026B1F318D2E69E53F66676D484A52BA4056C33CE3C3805F9E7F8DFFF ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Internal.Search.winmd
00:27:31.0391 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Internal.Search.winmd - ok
00:27:31.0393 0x1534  [ BA8ABEA14E039CE5E5C17F2D19D2FB9C, E5847F67B2B4C5CBC69B41F69003EC10A99610CFDB48B1ED3633A4121B813BB9 ] C:\Windows\System32\WinMetadata\Windows.Foundation.winmd
00:27:31.0393 0x1534  C:\Windows\System32\WinMetadata\Windows.Foundation.winmd - ok
00:27:31.0395 0x1534  [ 9CB1990DE97198DCDCC2B2EFA9F18E34, 5D79E48BF50F093B3532EEE75A1DBF13786C970F638C560775C65BB424EECF5E ] C:\Windows\System32\WinMetadata\Windows.Security.winmd
00:27:31.0395 0x1534  C:\Windows\System32\WinMetadata\Windows.Security.winmd - ok
00:27:31.0397 0x1534  [ 1F0B415426F50CC4A19E40AC48B8625D, 8E73B7E9A211169AEF2AADED49C44293DAA1B731BC95D3C931295BA9A33898DC ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Search.winmd
00:27:31.0397 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Search.winmd - ok
00:27:31.0399 0x1534  [ 2D1A153FF0120B8C463A32EA78567232, F86073FA512E700DD9F8A9D08B96D02DA6C96410C3AE64736FBAD93ADD9395CA ] C:\Windows\System32\WinMetadata\Windows.Storage.winmd
00:27:31.0399 0x1534  C:\Windows\System32\WinMetadata\Windows.Storage.winmd - ok
00:27:31.0401 0x1534  [ 2084917A6F699F9B3C2FC491A54D6E4E, 4B1E0D16C4E8B011FB3489A1DF1A91DE9A7209E408362C98E87CBD8ACBD64D6C ] C:\Windows\System32\WinMetadata\Windows.Web.winmd
00:27:31.0401 0x1534  C:\Windows\System32\WinMetadata\Windows.Web.winmd - ok
00:27:31.0403 0x1534  [ 99E13EE6BA81AF17DEC20490794FE3F4, 0B26C0058CCD094A47F038B3FE8B773E0DA9A76282B84C66A68CEFAECA8A75AE ] C:\Windows\System32\WinMetadata\Windows.System.winmd
00:27:31.0403 0x1534  C:\Windows\System32\WinMetadata\Windows.System.winmd - ok
00:27:31.0404 0x1534  [ F16657F3E0772EBB05F036FFA6F5D23F, 1685C68D91A7289548D82C76BEEA744B699971638A7A9A1033DD45BE1C5F1539 ] C:\Windows\System32\WinMetadata\Windows.UI.winmd
00:27:31.0404 0x1534  C:\Windows\System32\WinMetadata\Windows.UI.winmd - ok
00:27:31.0406 0x1534  [ DC2320ECE03F9EC2AB37232E5B17D200, C5DFB7DF182C153CE3FAA85BA91DF94264C65AEFAF0BF9F7C7514818BD42304B ] C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll
00:27:31.0406 0x1534  C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll - ok
00:27:31.0408 0x1534  [ 47C3110C269EB52CBE3AF984781B697C, 6E8BA8031EB69002B75E3757E4FEE4D49C86F10AC530A7FA4F18C92992010934 ] C:\Windows\System32\CryptoWinRT.dll
00:27:31.0408 0x1534  C:\Windows\System32\CryptoWinRT.dll - ok
00:27:31.0410 0x1534  [ 1F4A5355F853FAF35333D4CCEAF7A119, 8913449F6A2ADA6A478D756AAA0941F3B25397728BA235BB722373983963DA00 ] C:\Windows\System32\keyiso.dll
00:27:31.0410 0x1534  C:\Windows\System32\keyiso.dll - ok
00:27:31.0412 0x1534  [ 6081F748EDCE387AA107E5D7E7AB5289, DE1BD2AF7DF12FD431F0C0CB25FD9F2DF8D497D636CD3C4CDD7FE932B25D8A33 ] C:\Windows\System32\Windows.Web.dll
00:27:31.0412 0x1534  C:\Windows\System32\Windows.Web.dll - ok
00:27:31.0413 0x1534  [ 32DE64FE7B50427C55D20110BE243C81, EF0683D7FBC150037C772015238F854DCFDA8B60FF951D03ADDA26C0602068B0 ] C:\Windows\System32\FamilySafetyExt.dll
00:27:31.0413 0x1534  C:\Windows\System32\FamilySafetyExt.dll - ok
00:27:31.0415 0x1534  [ FBB89827574BBA4282D8A38D954E8781, 10CF1ECE354FCF808AC6B5D3DD781AC42CAC82B0C979606702CD20FB8C7BFCFF ] C:\Windows\System32\Wpc.dll
00:27:31.0415 0x1534  C:\Windows\System32\Wpc.dll - ok
00:27:31.0417 0x1534  [ CDBCDCBE830D17D378BA90FAB81B0E9E, D944D546C5B50B0071E4942629CDD1D25D036EBF723E852F8A931E692C059AA6 ] C:\Windows\System32\Windows.Networking.HostName.dll
00:27:31.0417 0x1534  C:\Windows\System32\Windows.Networking.HostName.dll - ok
00:27:31.0418 0x1534  [ 7C7470612FBF9703642E5266A6D45B53, 46FAE487076753F17934DA540CCCA0EB678275D1E6F7B0AA9F511E24B460342C ] C:\Windows\System32\cryptxml.dll
00:27:31.0418 0x1534  C:\Windows\System32\cryptxml.dll - ok
00:27:31.0420 0x1534  [ B7456C5972ED806545051C7830A1D25F, 3D851D03746589DC12E71A9D0A5108B728CE7CCDF3BE584C4EDEDA306E311C70 ] C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
00:27:31.0420 0x1534  C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll - ok
00:27:31.0422 0x1534  [ BC74E7833257F01DC568AC04FBD2A535, 81FAFB1127C969F570CA18598A71B2F94FFB974BA2D565EEC5927EAE3833FE0C ] C:\Windows\System32\mobsync.exe
00:27:31.0422 0x1534  C:\Windows\System32\mobsync.exe - ok
00:27:31.0423 0x1534  [ 6F21E58175539343A32E9BE18B2F63FE, 61E045A747F2D1A44F98ECCE125BBF0611343D86B856AD024019F10CE15E9831 ] C:\Windows\System32\SyncInfrastructure.dll
00:27:31.0423 0x1534  C:\Windows\System32\SyncInfrastructure.dll - ok
00:27:31.0425 0x1534  [ 86BED376AFCC599C8D11F239D4D0C4C5, 2E955A55CB16E73AF47021F791A46C01C7EF4576222CB68813AA53C74F44148A ] C:\Windows\System32\gameux.dll
00:27:31.0425 0x1534  C:\Windows\System32\gameux.dll - ok
00:27:31.0427 0x1534  [ 94E4AA1445686F9A84101E92EB93D9AF, 1289E5CECB609148313044A3C43E18BB6B2FFBF593DE2AF2FAB0A12509968A20 ] C:\Windows\System32\msiltcfg.dll
00:27:31.0427 0x1534  C:\Windows\System32\msiltcfg.dll - ok
00:27:31.0428 0x1534  [ 3E159523F0312AD39711EFE227AF72AA, 16D2D6E375BD7F78D964948EE6D5FB31C9A9455A8F3A818AFDC7CBCC67D2ADF8 ] C:\Windows\System32\localspl.dll
00:27:31.0428 0x1534  C:\Windows\System32\localspl.dll - ok
00:27:31.0432 0x1534  [ F8F9DA3E879B233F8296073A2B933A4E, CB7FC3948F84AFC3D9882F38033208EBD479730A2A80F33EAF1B71AE064642DC ] C:\Windows\System32\spoolss.dll
00:27:31.0432 0x1534  C:\Windows\System32\spoolss.dll - ok
00:27:31.0433 0x1534  [ 4D493670872F33E28752365712BC5FC6, 65B2D5F35B7EBE2E6ADA366A8450669A60555D3C5DC53DDECA3299482F829466 ] C:\Windows\System32\PrintIsolationProxy.dll
00:27:31.0433 0x1534  C:\Windows\System32\PrintIsolationProxy.dll - ok
00:27:31.0435 0x1534  [ 2373E72EC218872C61D420E1F625FD1A, 0BB43CEA665B7A55C01FBDB91FDF3986E8F86CD76BEA912B8F6BA5C6E4D93F92 ] C:\Windows\System32\FXSMON.dll
00:27:31.0435 0x1534  C:\Windows\System32\FXSMON.dll - ok
00:27:31.0437 0x1534  [ 83DAA6E08144C1363857AAA631627FB5, 42F8C831328D00422BBF03FD4310472DC739433377BCAB63696C84021F0D2CC1 ] C:\Windows\System32\tcpmon.dll
00:27:31.0437 0x1534  C:\Windows\System32\tcpmon.dll - ok
00:27:31.0439 0x1534  [ A6E138910701F7BCA24DCB1943BF626B, 4623BF71287FF81E28F12100C55CA7BB3E078851E97F462925A3E8766F2439A5 ] C:\Windows\System32\snmpapi.dll
00:27:31.0439 0x1534  C:\Windows\System32\snmpapi.dll - ok
00:27:31.0440 0x1534  [ 01291D05DD405F958A0C9E3E48F7042F, 7060AA0235EE3B70E996E9E788B0CAAAB21EB2879F6084E7924B62515BF707F1 ] C:\Windows\System32\wsnmp32.dll
00:27:31.0440 0x1534  C:\Windows\System32\wsnmp32.dll - ok
00:27:31.0442 0x1534  [ 06A438D0CAE24D9B0739CEBBC41D5B2F, 2A6813893EAD17D4DDA446183C748EEB37673D483E3073B24E421B71AF543475 ] C:\Windows\System32\usbmon.dll
00:27:31.0442 0x1534  C:\Windows\System32\usbmon.dll - ok
00:27:31.0444 0x1534  [ ADD94235078547F839D859735AAA711D, D68EC8378C3C9E49A7002E2CE3C10AC7280CCC602D82812C270F0C940CEE1732 ] C:\Windows\System32\WSDMon.dll
00:27:31.0444 0x1534  C:\Windows\System32\WSDMon.dll - ok
00:27:31.0446 0x1534  [ DC3BA96359CFA00046ED39F307C59A4F, F7D9983508F4C6BDFBE710004929466316B1CD1650890C9E671EECBEB0DB8C7A ] C:\Windows\System32\spool\prtprocs\x64\winprint.dll
00:27:31.0446 0x1534  C:\Windows\System32\spool\prtprocs\x64\winprint.dll - ok
00:27:31.0448 0x1534  [ D6B724B7D044808DBCCBDE82706A06AD, 0DF59BEC8ACAA531D54370473B374ACE19349EA459F50C93D8A7EAB481A52667 ] C:\Windows\System32\win32spl.dll
00:27:31.0448 0x1534  C:\Windows\System32\win32spl.dll - ok
00:27:31.0449 0x1534  [ 796833F1C93F89B68FEA77BCC9A11C4D, C787FC83DA253BFDA2F5059EF35A04AA41062142255643620E5C1B51B4DCD6ED ] C:\Windows\System32\apprepapi.dll
00:27:31.0449 0x1534  C:\Windows\System32\apprepapi.dll - ok
00:27:31.0451 0x1534  [ 050789E6B541ACC06E00CB5AA5AD94F1, 09DC042ED797864BCBF8270DF2AD1E7F4B9E928B21C436510A03F328F01E21DE ] C:\Windows\System32\inetpp.dll
00:27:31.0451 0x1534  C:\Windows\System32\inetpp.dll - ok
00:27:31.0453 0x1534  [ 89AA8AC9B4E101E4173455D4620C5117, 746A6EA06A980EE29E6A401AA19313F13ECBF0F0EDFB6E7E6BD8C46ACCF9DA0B ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
00:27:31.0453 0x1534  C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - ok
00:27:31.0455 0x1534  [ E6A3062BDB2E18EBDEB69CF7F7A3A070, 48AB0CCA0230DCBB47CCC765659E390A4A42AC7303A27B835B9FBB1168AC7BF1 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
00:27:31.0455 0x1534  C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe - ok
00:27:31.0457 0x1534  [ 195F2741F83415958B2CF398BFA12DB2, 181C1CEBDFED1BAE4624D991AB907DA3FA621C3F1F72C6F8D0275D8247AD07A8 ] C:\Windows\System32\dsound.dll
00:27:31.0457 0x1534  C:\Windows\System32\dsound.dll - ok
00:27:31.0459 0x1534  [ 4E1E61934789310381E6AD1062B209F6, 79A94E12AA13BD6C88141EA61EB3E4E3F0A134860B673963EB314B32DEF8A0B6 ] C:\Windows\System32\oledlg.dll
00:27:31.0459 0x1534  C:\Windows\System32\oledlg.dll - ok
00:27:31.0460 0x1534  [ 3E197B2A07CCD613AE35CFD38314591C, FEEE9221851A1F2E4C6F66ACCF0A233D8602B1FC1E558A4680D0C0AED49EC136 ] C:\Windows\AppPatch\AcLayers.dll
00:27:31.0460 0x1534  C:\Windows\AppPatch\AcLayers.dll - ok
00:27:31.0462 0x1534  [ 4E0AFCBCB3210535DC2D0D6E8ED034BF, 4DEFB2E776A70C49D72E0B3B1CCBEAAE7355D6D6D54455C6EB96C2DCE7836919 ] C:\Windows\syswow64\sfc.dll
00:27:31.0462 0x1534  C:\Windows\syswow64\sfc.dll - ok
00:27:31.0465 0x1534  [ 1C7CDC7BFD0566430E9C6A9817543CE3, EF08E6E9B7532D8EA56F79090A1F2FC23CB31390652E8BB20A5837D131E62F89 ] C:\Windows\System32\RtkApi64.dll
00:27:31.0465 0x1534  C:\Windows\System32\RtkApi64.dll - ok
00:27:31.0467 0x1534  [ 0805289E121F3E3C458C970B08314EB2, D9B448A04C09F525F599D0369CF9A197F471AABDA0A97201760C46D2EB8F3CDE ] C:\Windows\System32\RtkCfg64.dll
00:27:31.0467 0x1534  C:\Windows\System32\RtkCfg64.dll - ok
00:27:31.0468 0x1534  [ 420C4B0A0572BADAE4543D41DEF43DE4, 7E2D8CDE0B24110910EB812D83BD2E87D52251B54DC361B0CEFC21D1DE8AE404 ] C:\Windows\System32\RtkAPO64.dll
00:27:31.0468 0x1534  C:\Windows\System32\RtkAPO64.dll - ok
00:27:31.0470 0x1534  [ F57FE0BD8BD7E1F8088FE18D0FD7BEE9, D7F5671020F36CDB3A07A92635B7034DF6411EABCA42220F57AA0441959E5E73 ] C:\Windows\System32\AudioEng.dll
00:27:31.0470 0x1534  C:\Windows\System32\AudioEng.dll - ok
00:27:31.0472 0x1534  [ 9F2ECA252720B25E8FEC1CAB2984B98D, 476EE2929901CD43F15869B763376393AA0942A3B934532055E037C6DCE3CD2D ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\OneDrive.exe
00:27:31.0472 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\OneDrive.exe - ok
00:27:31.0474 0x1534  [ 5353A34090BABE3CD48B70569AF0DD12, A211D0B06DC05BFCBD13EBC71275C644B7616E95485ED8336DEFF257B7AE7E80 ] C:\Program Files (x86)\Steam\Steam.exe
00:27:31.0474 0x1534  C:\Program Files (x86)\Steam\Steam.exe - ok
00:27:31.0475 0x1534  [ A8E69DA21AEEB9DAA55D90E87AC1A549, 175AF750A1DF53555D0CB6C61312CEE37E2CB182873041A8AE38C57EA01DC2F5 ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
00:27:31.0475 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe - ok
00:27:31.0477 0x1534  [ CFE3E4354B30B68BD5A13C90AC14AAC6, 574E066355744117B0F1BA7898F8AA6FFC37463D7C71AA0BAAC1360B4FCEC75B ] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
00:27:31.0477 0x1534  C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe - ok
00:27:31.0479 0x1534  [ ABA7195FE69E854D35D348527AC4E496, 7709B23FE07BA2C4DA2669E4FE519B6590C6F4670B68F5EBC4462CEA352F25E5 ] C:\Windows\System32\pcadm.dll
00:27:31.0479 0x1534  C:\Windows\System32\pcadm.dll - ok
00:27:31.0481 0x1534  [ 3CBD03471913E2C6B8EE62F4D761B19D, 605E1287D31005996F007805B7411EB4AFF32081877B74A91706D96C78098AD1 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
00:27:31.0481 0x1534  C:\Program Files (x86)\Avira\Antivirus\avgnt.exe - ok
00:27:31.0483 0x1534  [ 26175F35CEAC4E8984DD7AB553D25C88, C48B916CA75144CA4EE82FED5F8915B5B86EF968FAFE9D488C453E49E499B730 ] C:\Windows\System32\pcacli.dll
00:27:31.0483 0x1534  C:\Windows\System32\pcacli.dll - ok
00:27:31.0484 0x1534  [ FCEC6F664FA7E5FE323165FBC9314470, 4E5AB1E6C3D2881D95E74F2F28649A7DBC4919CA249829A0E4CD9804E401A025 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
00:27:31.0484 0x1534  C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - ok
00:27:31.0486 0x1534  [ 8B588AF403C9D68EDFF154E3A73A1514, EAC1674C2920EF7A81B81E2BBBA3367D2A6E745DA4C31A7967DB927260C50823 ] C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
00:27:31.0486 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe - ok
00:27:31.0488 0x1534  [ 3809657AA6E0A8F25D448797218FBE45, CAD5DB61EA750F2F5649B131E12D8A6C34A336D61415C914EFBCAC4C718FF38B ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\LoggingPlatform.dll
00:27:31.0488 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\LoggingPlatform.dll - ok
00:27:31.0490 0x1534  [ FD5CABBE52272BD76007B68186EBAF00, 87C42CA155473E4E71857D03497C8CBC28FA8FF7F2C8D72E8A1F39B71078F608 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\msvcp120.dll
00:27:31.0490 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\msvcp120.dll - ok
00:27:31.0492 0x1534  [ 034CCADC1C073E4216E9466B720F9849, 86E39B5995AF0E042FCDAA85FE2AEFD7C9DDC7AD65E6327BD5E7058BC3AB615F ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\msvcr120.dll
00:27:31.0492 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\msvcr120.dll - ok
00:27:31.0494 0x1534  [ 5547B4098B29185DC76967B9B0DED3DD, 4F36B4B100FA8515DC316DF773AE61541D45E30F9992AEFF5481F1B12CAA21A5 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncClient.dll
00:27:31.0494 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncClient.dll - ok
00:27:31.0496 0x1534  [ E999E5EED95C3BF0A49E7CA2B8DEDDFE, 4E938E6791E653BBB8AC530D03B0B27C8651675F5AEFC07F017087D294FFE3D4 ] C:\Program Files (x86)\Steam\crashhandler.dll
00:27:31.0496 0x1534  C:\Program Files (x86)\Steam\crashhandler.dll - ok
00:27:31.0498 0x1534  [ EA4F9B19B3614349C79CC97DCA4C23A8, EC330F2E4F002FE450CDC1FC84AC0122C21C7912A483A99143450822004795E3 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
00:27:31.0498 0x1534  C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe - ok
00:27:31.0500 0x1534  [ F0C9B04C13ACD0806FCC9CECFC66C380, 5ECF6E16D49BA5C9B84C471B06DA895F85E4B51C2CCAC33EA6C2BAF1B2DBB745 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\RemoteAccess.dll
00:27:31.0500 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\RemoteAccess.dll - ok
00:27:31.0502 0x1534  [ D475BBD6FEF8DB2DDE0DA7CCFD2C9042, 8E9D77A216D8DD2BE2B304E60EDF85CE825309E67262FCFF1891AEDE63909599 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\sqmapi.dll
00:27:31.0502 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\sqmapi.dll - ok
00:27:31.0504 0x1534  [ A85B149B969798E17C1BA3DC4A88C8BE, 20C2AE4C3824F66B3A6BE636721CE2306CDBD447A705DF720B9C2B93F4577A4A ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\SyncEngine.dll
00:27:31.0504 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\SyncEngine.dll - ok
00:27:31.0506 0x1534  [ 668509D47185B7578FA1A9D3E655FC13, B1F1E5FA7059E32A7B980FCF438CD773CF09148117F2769FC34AE0B7C9D66B19 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\Telemetry.dll
00:27:31.0506 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\Telemetry.dll - ok
00:27:31.0508 0x1534  [ FA85F3D6606AD74E7AF550376DAECC79, CF58FB7AD48B4C382435500772A037BFA37E161923B4985C54ED389876F408B3 ] C:\Program Files (x86)\Avira\Antivirus\ccmsg.dll
00:27:31.0508 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccmsg.dll - ok
00:27:31.0510 0x1534  [ F3BD1E9D6B63251A4492F98E78B5A007, 6D3C0D2E860AC369A6A227A5680AA23CB298D7BE401F2A2E9E36D270C96FF31D ] C:\Program Files (x86)\Avira\Antivirus\ccmsgrc.dll
00:27:31.0510 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccmsgrc.dll - ok
00:27:31.0512 0x1534  [ 8FE6B3D2B293E069692204883F3EC9FB, 010D4A945313C44E848293155B26578897C6D5D41BE25FA91F92FE24DDF97D59 ] C:\Program Files (x86)\Avira\Antivirus\ccmainrc.dll
00:27:31.0512 0x1534  C:\Program Files (x86)\Avira\Antivirus\ccmainrc.dll - ok
00:27:31.0515 0x1534  [ 6FC30108B44F13A1E48D99CEB0F0B9B3, E3AFE8B2F8503F8D14160968E527485FF8B8EB8AF78673567FA0EC2BA680396C ] C:\Users\Claudio\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
00:27:31.0515 0x1534  C:\Users\Claudio\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll - ok
00:27:31.0517 0x1534  [ E4DFDFB51298C4E32E66F9694ECB4056, 8125A66F07E997E150AA0A3C06A501128BA6918477B03A7561604F50000D110D ] C:\Windows\System32\atiadlxx.dll
00:27:31.0517 0x1534  C:\Windows\System32\atiadlxx.dll - ok
00:27:31.0519 0x1534  [ 8BB96817F160BFA8519AA6FA77F815B0, D2BD76BFCF387C032B7A3E7042F4ABAD44964458D01DF6294FB576200DA4704E ] C:\Program Files (x86)\Avira\Antivirus\57\productimagerc.dll
00:27:31.0519 0x1534  C:\Program Files (x86)\Avira\Antivirus\57\productimagerc.dll - ok
00:27:31.0521 0x1534  [ D95731A5C968FB9AFC9E756DAF997753, 06A960ED7F61B3B7CDB4D4485B54643DBDC36275CF3274A1B0EC3D6A61CB6038 ] C:\Windows\syswow64\WindowsCodecs.dll
00:27:31.0521 0x1534  C:\Windows\syswow64\WindowsCodecs.dll - ok
00:27:31.0523 0x1534  [ 28FC3D58326A9DA7D98A13C9BD035134, 7B754C6C66A18F3A43EBCEECB5596BC79A7C6E8B43F4D8F134ECAC4084033A17 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncSessions.dll
00:27:31.0523 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncSessions.dll - ok
00:27:31.0525 0x1534  [ E61CA2821C853D02FA71CB4EDEC89C71, 29C12278B080C2D83205F62F0CDDCA35B2BABF1A12F021782F031068B548D4D1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
00:27:31.0525 0x1534  C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe - ok
00:27:31.0527 0x1534  [ F08FD670531763DDB1442E0205FEF604, 4AC652BBD9521B1775F50C0BD4570A2D8077753D9FA18E8CA3F92B9605FAD8F1 ] C:\Windows\syswow64\wer.dll
00:27:31.0527 0x1534  C:\Windows\syswow64\wer.dll - ok
00:27:31.0529 0x1534  [ 1624C63D7827729789D4C93250A417FB, 878601F1A09E96D2054572A3010C9809F2718A5C29B64F97106DB4DA96A1B9B6 ] C:\Windows\syswow64\cabinet.dll
00:27:31.0529 0x1534  C:\Windows\syswow64\cabinet.dll - ok
00:27:31.0532 0x1534  [ DD35867564C68B826FEDA3422A0947F1, AE678863ED5D1FC574AEAA31D0F5903FBACE23CB0C984C88B89868F61D69AC9F ] C:\Windows\System32\mscoree.dll
00:27:31.0532 0x1534  C:\Windows\System32\mscoree.dll - ok
00:27:31.0534 0x1534  [ 5C4162CC79345D57F3B1BD4DEC71F824, 4D93117CE6A7A121DB3EE8576425D6E50E7CD1C655D3694BB0480FA3C97E4DD4 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\WnsClientApi.dll
00:27:31.0534 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\WnsClientApi.dll - ok
00:27:31.0536 0x1534  [ F55CAB2D7487DBA75EBCC3DEE954EF73, B060B8FBC882A19608784C313BD5BD012C93BFB4AD36F09CD1BE8958EFA9D63B ] C:\Windows\syswow64\Faultrep.dll
00:27:31.0536 0x1534  C:\Windows\syswow64\Faultrep.dll - ok
00:27:31.0538 0x1534  [ 993119DB684012B83F3450373A52225F, 9D1B33648E84C119C25239C88257FF34906497209379762184FE75F14D41A92A ] C:\Windows\syswow64\xmllite.dll
00:27:31.0538 0x1534  C:\Windows\syswow64\xmllite.dll - ok
00:27:31.0540 0x1534  [ 8D7399EF0EA392033C74599D7CFF5B4D, CD3E06F838707B12112B285679E509A68DF4F3D1D6F28EF5005F7BF7A03FF0B0 ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
00:27:31.0540 0x1534  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - ok
00:27:31.0542 0x1534  [ 1FB28302E7D783A8A75D8A3A6E8FC9D3, FBE84204263422AB9AD9CCC3E4FD5E84886BA79F6B7869A06D4DDF8CCD660ADD ] C:\Windows\syswow64\loadperf.dll
00:27:31.0542 0x1534  C:\Windows\syswow64\loadperf.dll - ok
00:27:31.0544 0x1534  [ 875231003D8590C366C4D50027FD59D8, 2017F3F709DAE098CF7D67BD56EDF0E2890BE78C5F8D2CC66321AF7CF4F32247 ] C:\Windows\syswow64\pdh.dll
00:27:31.0544 0x1534  C:\Windows\syswow64\pdh.dll - ok
00:27:31.0546 0x1534  [ 390F5C578D278DCE7EA1F08034356342, EB57CD922F9FAE10969C6EAEA06AFB80C5A4D2BFDB104BFF293C32B61E018353 ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSync.Resources.dll
00:27:31.0546 0x1534  C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSync.Resources.dll - ok
00:27:31.0548 0x1534  [ BD3CE98D3C4BA736F047B6972CC61664, 2023BD87576013646B37E7F6559914A70A75FDB1D233A797071E145A9C3B7550 ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
00:27:31.0548 0x1534  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - ok
00:27:31.0550 0x1534  [ 814AAB9E40DDAFC5D9FE7AFA560CE313, 8247748898853A40CBDE9BAE358F8357401C638FDB9FFB860A3896992BC483F8 ] C:\Program Files (x86)\Avira\Launcher\Avira.OE.MiniGui.dll
00:27:31.0550 0x1534  C:\Program Files (x86)\Avira\Launcher\Avira.OE.MiniGui.dll - ok
00:27:31.0552 0x1534  [ E52431D9E713E7ECE1F20774442E51F8, 04C90DF131604070F0FE7C4D4D712A9D9BEAC8C9C7EF724446FF12CA713B41F3 ] C:\Windows\syswow64\mlang.dll
00:27:31.0552 0x1534  C:\Windows\syswow64\mlang.dll - ok
00:27:31.0554 0x1534  [ E2EFED5C9E4BF8EC6F35CF63CA5B589F, 3D97981B57E446C0D007D090ADE09D03DD5A49AA1F47DF47190FF3ABA284D1F0 ] C:\Windows\syswow64\msxml3.dll
00:27:31.0554 0x1534  C:\Windows\syswow64\msxml3.dll - ok
00:27:31.0556 0x1534  [ 23FA3A85E6AFB6E9B8277CB9D0C504D2, D29E93C0FE4F108FA063E1A9692559A4278A0D51AB4FEABBB231907DFFAEB019 ] C:\Windows\System32\msvcr120_clr0400.dll
00:27:31.0556 0x1534  C:\Windows\System32\msvcr120_clr0400.dll - ok
00:27:31.0558 0x1534  [ A1B94C8C5C9DD2780B83C7435EE18BED, 2876E48143D4E9696C1907D12FE77FDD6DA02F82EAE41BEE1B318D82A7E19FA9 ] C:\Windows\syswow64\msxml6.dll
00:27:31.0558 0x1534  C:\Windows\syswow64\msxml6.dll - ok
00:27:31.0560 0x1534  [ C48A911EBFA683A1C4015207CA8700BA, B55731B2455786096100AA9B00EC1046DCF348BC4E54732168DEB1A54F07161C ] C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\88c60510e9a0b668a5a8e270dba0dfcf\mscorlib.ni.dll
00:27:31.0560 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\88c60510e9a0b668a5a8e270dba0dfcf\mscorlib.ni.dll - ok
00:27:31.0562 0x1534  [ B4B42D858A29F50A745CBC2AB3ED8B6D, 93527F346D1903660842CEBFF37BDE31DCDE47DAC04B0FAF6B747ABDF38F1190 ] C:\Windows\syswow64\SensApi.dll
00:27:31.0562 0x1534  C:\Windows\syswow64\SensApi.dll - ok
00:27:31.0565 0x1534  [ 4909C87B201276A8A1003B9A027E8883, 51079CA05012A4C759FC56D35DEACABC10D98B348AFD07EDA24538393AA401E4 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\fcec6f58894acbd2dbe33323bd1a7e31\PresentationCore.ni.dll
00:27:31.0565 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\fcec6f58894acbd2dbe33323bd1a7e31\PresentationCore.ni.dll - ok
00:27:31.0567 0x1534  [ 05E9BE288BA709FEB318BB7A31263BB9, 12C6EE3EDCD9AA85B03E942BD5EE167045B84EFA3C0F855C81DCFDDD865B9BB3 ] C:\Windows\syswow64\Windows.Networking.Connectivity.dll
00:27:31.0567 0x1534  C:\Windows\syswow64\Windows.Networking.Connectivity.dll - ok
00:27:31.0569 0x1534  [ 98E85A3D66407BC442671E7D9EF9A737, B08EB0158076A82DA2129B622A5C3981D5DC7DDAD137DF80F1D845DD89ADD09A ] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM\d79ac53f26033c3f6530cd1b75ce73a5\MOM.ni.exe
00:27:31.0569 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM\d79ac53f26033c3f6530cd1b75ce73a5\MOM.ni.exe - ok
00:27:31.0571 0x1534  [ 7A90365F8139CB5213E9F3990524FEE7, A212A0B981509FAA0445A794A1E6427412BA31A4F772FB56FFB84F233D888296 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System\f15fbf09bec09b0d846594c6ce1298ac\System.ni.dll
00:27:31.0571 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System\f15fbf09bec09b0d846594c6ce1298ac\System.ni.dll - ok
00:27:31.0573 0x1534  [ EE8B09521B4E510AB956D6F1B81768C9, 2D0137F0FE4C05F4A29662B420867EBD0DB5A67FA79266583704C97F684312F0 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\808c7585b2fbd7ec5659858e8a3b01a7\System.Drawing.ni.dll
00:27:31.0573 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\808c7585b2fbd7ec5659858e8a3b01a7\System.Drawing.ni.dll - ok
00:27:31.0575 0x1534  [ 7CBD56224D43ACF5CFE844B94756B484, 9CFE73DA078132C57AC608467C4491F424C66D6A03D060FE8895D992E61B9AEE ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\d1c3054f3cc556b4204aa38f48eb0790\System.Windows.Forms.ni.dll
00:27:31.0575 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\d1c3054f3cc556b4204aa38f48eb0790\System.Windows.Forms.ni.dll - ok
00:27:31.0577 0x1534  [ B8F7AEDBEED25B62F85CF4E3C67A8161, 2A0E1803974FF76E7045B07EB68B123619682450F2285C35F6891F2C6657C471 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\bec0181fb479924498f7d0ad9ab5112a\PresentationFramework.ni.dll
00:27:31.0577 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\bec0181fb479924498f7d0ad9ab5112a\PresentationFramework.ni.dll - ok
00:27:31.0580 0x1534  [ 9E04962D485F1883679A6E25DB902597, C85B5D96CF6A029479B009DDACB875623D4B22A221173B6EDA5FF741697B1159 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\c0627628d99fe8dbe8e91a16d4aa999a\MOM.Implementation.ni.dll
00:27:31.0580 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\c0627628d99fe8dbe8e91a16d4aa999a\MOM.Implementation.ni.dll - ok
00:27:31.0582 0x1534  [ 6EA4CBCF9D99F1F6A92371A8ADB85FDD, C1EAE6153C7149F8FB916E9AD28908CD5CE260539D2106B8B45EC3636FEDA436 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\2d4a3232fc6277ecb4433330ddca32a0\LOG.Foundation.ni.dll
00:27:31.0582 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\2d4a3232fc6277ecb4433330ddca32a0\LOG.Foundation.ni.dll - ok
00:27:31.0584 0x1534  [ D610A2B752915F5D1FEFEE161E45A698, 021561D9ACFAF708129FA8F19940DA579A2DE6805B8678D6905F720825AD761A ] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\ab64f417150bd257d52ad96fb9c7463b\LOG.Foundation.Private.ni.dll
00:27:31.0584 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\ab64f417150bd257d52ad96fb9c7463b\LOG.Foundation.Private.ni.dll - ok
00:27:31.0586 0x1534  [ 435519E09B94B97AF5190F398486D92C, BBE01EFF5344D7EF961E5F96265D3EF9DC646DC39E85E60AE1DE9C9A6E35514F ] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\1852baeb23f801fb812885acfe0d7b97\LOG.Foundation.Implementation.ni.dll
00:27:31.0586 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\1852baeb23f801fb812885acfe0d7b97\LOG.Foundation.Implementation.ni.dll - ok
00:27:31.0588 0x1534  [ 7D663405489854175DD50BAF063CBB1E, 71AC24EECDC3793828485072BEBC9765E5FB5B812910D732609B1FF0F64B2D9B ] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\7d90a554614729f85963c98c9e717e38\MOM.Foundation.ni.dll
00:27:31.0588 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\7d90a554614729f85963c98c9e717e38\MOM.Foundation.ni.dll - ok
00:27:31.0590 0x1534  [ 444071996C64A9C2BF8325A9C34DB79A, 9A3DA4E3FD06DC249B29A27DDEFF0C51A0A8B884563EE595E0A549819F101FA9 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\5242decca322348603497ca358dafdff\LOG.Foundation.Implementation.Private.ni.dll
00:27:31.0590 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\5242decca322348603497ca358dafdff\LOG.Foundation.Implementation.Private.ni.dll - ok
00:27:31.0592 0x1534  [ FADEB545E17B66D67E9EA0A0D1864AB8, 10D61B9184DC8CFABCB22185FAD51B348F34B5FFD161C0AA7D6F1366789C009B ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runt73a1fc9d#\83f3b97631e1a5e956f31e6a47099d7c\System.Runtime.Remoting.ni.dll
00:27:31.0592 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runt73a1fc9d#\83f3b97631e1a5e956f31e6a47099d7c\System.Runtime.Remoting.ni.dll - ok
00:27:31.0594 0x1534  [ 58C70FA1C52E4A1170C157BEE67B6415, EAA1ED688D1E2F9080B4C2D9775096DB7F83953AFFCBEA292046C257E6940284 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\946a4837bda27f2ed0eed4c6be74e5d4\System.Core.ni.dll
00:27:31.0594 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\946a4837bda27f2ed0eed4c6be74e5d4\System.Core.ni.dll - ok
00:27:31.0596 0x1534  [ 74E72C62A4E95C1C57573B49939A3A56, 96CDBCBC81DDD0F8BEABFBDCBC5624B0A8CA44DE75921EC9D6E33505E66C6098 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\8ef7ed39a53334c86c98ca76a73a2cb4\System.Xaml.ni.dll
00:27:31.0596 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\8ef7ed39a53334c86c98ca76a73a2cb4\System.Xaml.ni.dll - ok
00:27:31.0598 0x1534  [ 50A3C0D8655F5ACFE4320FB207A098F1, 7521B28282A47C99A6CC623CA39CA26F52CA541590EEB35541AE733F49A95C12 ] C:\Windows\syswow64\DWrite.dll
00:27:31.0598 0x1534  C:\Windows\syswow64\DWrite.dll - ok
00:27:31.0600 0x1534  [ CE26479B56A8D75BB70EE06823BD7C91, C6B159E7AF0FC3285E8C0C33B8FEC594AA4F33E386F2C7BBE0F3565D933314F6 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\2833d05d2ba6b161dc5274430cc98804\System.Configuration.ni.dll
00:27:31.0600 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\2833d05d2ba6b161dc5274430cc98804\System.Configuration.ni.dll - ok
00:27:31.0603 0x1534  [ 5DC21B61A2E8E78CD4DCA7B25D347A57, FE5D525753E3A473BFF9CF75C7B26F1DF4BBF2C5A1C0937BAA1E980B03032588 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\8bf2b24b18e2386181d6d307adc54d60\System.Xml.ni.dll
00:27:31.0603 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\8bf2b24b18e2386181d6d307adc54d60\System.Xml.ni.dll - ok
00:27:31.0605 0x1534  [ 930DFB651EA30BF8A5837B3481D39646, 8C88889C61EF04AA0EAC1BA5DB4F1E2AA41C79551732054E95DD033355748C96 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
00:27:31.0605 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll - ok
00:27:31.0607 0x1534  [ DD7108AE86FF8EBB607AF922610D38B7, 1038EAAA54A5B7AF72D3BAD4B268156623512D7DD5A90857EE67DB0940E43D10 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
00:27:31.0607 0x1534  C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll - ok
00:27:31.0609 0x1534  [ 61C6374FA707931790FAF1D7E85EF5CB, 38461810EDBADEB37B0662856798CD8902575A2CAF6FF82C6636AEAEA55A4D53 ] C:\Program Files (x86)\Avira\Launcher\de-DE\Avira.OE.MiniGui.resources.dll
00:27:31.0609 0x1534  C:\Program Files (x86)\Avira\Launcher\de-DE\Avira.OE.MiniGui.resources.dll - ok
00:27:31.0611 0x1534  [ FD6A19BD2D902AA3C88881C694217A40, A8846376B486B715924965796083386D5C29677B82553D24A766894E166346F0 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll
00:27:31.0611 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll - ok
00:27:31.0613 0x1534  [ FD5FCA422BD5D9DF440F2F823E772BEA, 6D478DA794A85C4961B64946DA472E6068D8EB486E630FE25C48C9A684EB3D4A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
00:27:31.0613 0x1534  C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe - ok
00:27:31.0615 0x1534  [ 96D9AF9B3806A79C8A4F79A7EB050CA4, A9168D30E66765B628E9D0C869029EA80DCD5356C85D9F2B5A620B89C030D713 ] C:\Program Files (x86)\Avira\Launcher\WPFToolkit.dll
00:27:31.0615 0x1534  C:\Program Files (x86)\Avira\Launcher\WPFToolkit.dll - ok
00:27:31.0617 0x1534  [ E731E28520E527E9EAC2049B3147D536, F6BD19264218F12BC0E9CF8CFB83CB7353AAD8D663419FBA4486351ABC8FF57F ] C:\Windows\syswow64\d3d9.dll
00:27:31.0618 0x1534  C:\Windows\syswow64\d3d9.dll - ok
00:27:31.0619 0x1534  [ FBFC4EAC38BEC9515BBAC57D1F2288E6, 4A43A5E6CAC12EC04E63CB97A083969230FCF3150E16F77DDBEBFA886D56E3D9 ] C:\Windows\System32\Windows.Cortana.Desktop.dll
00:27:31.0619 0x1534  C:\Windows\System32\Windows.Cortana.Desktop.dll - ok
00:27:31.0621 0x1534  [ 2003DD21BA24C2715B91182ECD819D6D, 1F4FB8DFC11C7613A7303F0C5D073DD5B9A200E8559C647AB77EA91A09ADF0AD ] C:\Windows\System32\Windows.Cortana.ProxyStub.dll
00:27:31.0621 0x1534  C:\Windows\System32\Windows.Cortana.ProxyStub.dll - ok
00:27:31.0623 0x1534  [ AFFDDC6A65B8236D333C759EFEFF1B78, A0208BCBBD9CE4BB37E313B3A8AD787951867A1BF453CB460A48B471BEE8D7C9 ] C:\Windows\syswow64\aticfx32.dll
00:27:31.0623 0x1534  C:\Windows\syswow64\aticfx32.dll - ok
00:27:31.0625 0x1534  [ E3E8E63E1B32F0757FA85356C0346919, A56CEC853155CC1DE916C41BA3CA6992473A8DB60F476C8ED4C804382CD31589 ] C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
00:27:31.0625 0x1534  C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll - ok
00:27:31.0627 0x1534  [ 70292AD53F5CD981A015148A2231D22E, 097A0055FEF02D6BD88DE40BE40E2F16FADE8DC10AE4E0E024AF670FB8FA38FE ] C:\Windows\syswow64\atiu9pag.dll
00:27:31.0627 0x1534  C:\Windows\syswow64\atiu9pag.dll - ok
00:27:31.0629 0x1534  [ 60D478D8AD9C3D1E4EBE93D9160C1C4E, BA940D91B016B581A23A1456FA1FD17DEA37EEC53369E4A44DC6225A70929B10 ] C:\Windows\syswow64\atiumdag.dll
00:27:31.0629 0x1534  C:\Windows\syswow64\atiumdag.dll - ok
00:27:31.0631 0x1534  [ 602243BB86E7EFDE16C19774A47DC1E6, 21A205DE2E37E5CEA03D356182040FD31AF2DD5DC0BAC105FC2D1BDA020DA1EF ] C:\Windows\syswow64\atiumdva.dll
00:27:31.0631 0x1534  C:\Windows\syswow64\atiumdva.dll - ok
00:27:31.0633 0x1534  [ 3C461E490F3DACF309388AD72F4767F7, 50C27759A562B3A5AA875D7AC1F2D65A41962F7DC2679B4B7631D788244E06C8 ] C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC\d9977ed19f5ac1bdc6fe21f505c2d3f2\CCC.ni.exe
00:27:31.0633 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC\d9977ed19f5ac1bdc6fe21f505c2d3f2\CCC.ni.exe - ok
00:27:31.0635 0x1534  [ 9B1445CC27C10DEF82A6CA7134B7ABD3, 9F57DC26E4380B1933F6463ADDCCD89457B853FD100DE52EC6ED05E23F09AC9B ] C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
00:27:31.0635 0x1534  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll - ok
00:27:31.0638 0x1534  [ 3FD13B856D614BA52C90ACFD48D1BD24, 67058697B5AD1BBE68AB63E84CF54926A9E8E8A7019C7124AD4F9B01B1FBE29E ] C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\37834f0c95e4d6125354efb47e6ed3a0\CCC.Implementation.ni.dll
00:27:31.0638 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\37834f0c95e4d6125354efb47e6ed3a0\CCC.Implementation.ni.dll - ok
00:27:31.0640 0x1534  [ 5C4648673693724C8D4A1A92E1AA06E6, 5D548241715687BFA52E40B867EF73CB45D01B7F9A9B7F00B92BF2B4C97BE1D0 ] C:\Windows\System32\ClipSVC.dll
00:27:31.0640 0x1534  C:\Windows\System32\ClipSVC.dll - ok
00:27:31.0642 0x1534  [ 93369CD14FF4C439CB3CA861EF684025, A27A2267FC65199531991156552F27B5C3085A8D7FE5E53B0EBA3D7DC94394CE ] C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\a32f5bf7eb3b56ca485ac12a0c5d35e0\PresentationFramework.Aero2.ni.dll
00:27:31.0642 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\a32f5bf7eb3b56ca485ac12a0c5d35e0\PresentationFramework.Aero2.ni.dll - ok
00:27:31.0644 0x1534  [ 1E061843F812734CC476E98DA3953C2C, EE5AD37B8A25A3B448AB59CF1E32F12754F5B0177D29B474BAA2EDDC2642A97C ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemData\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemData.dll
00:27:31.0644 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemData\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemData.dll - ok
00:27:31.0646 0x1534  [ 52ABEA8D9AF917CDFF22931595BDC64F, B7ECB82D15AA4B6AC8A85135005C86D78B076A42BDFD83C77F5A19405265176C ] C:\Windows\System32\VEDataLayerHelpers.dll
00:27:31.0646 0x1534  C:\Windows\System32\VEDataLayerHelpers.dll - ok
00:27:31.0649 0x1534  [ 97A8DE8BBA6908F1718CFC29ED00E680, 84DB7099BAD8DD30B3038536942F872CE1390D7E78935B3E903C9C689E9ECC59 ] C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\f57add249116cd17cc52e34ab6fa92f2\System.Numerics.ni.dll
00:27:31.0649 0x1534  C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\f57add249116cd17cc52e34ab6fa92f2\System.Numerics.ni.dll - ok
00:27:31.0651 0x1534  [ 3F40BE707FA588787AE4F09130EF7B18, 2B4167C38B68311983A5F79948FFAB6E43E6AB4D467DCFEEFECD5D47CD10EE10 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll
00:27:31.0651 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll - ok
00:27:31.0663 0x1534  [ 99C6D9B4C9E4E0FE161AF8D014E37CBC, A37E913521995AF21D50A9ACAD7E4A3982B4AF5EB8A6A20B5CA03AD287EDBB30 ] C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
00:27:31.0663 0x1534  C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll - ok
00:27:31.0665 0x1534  [ 898B2DA6BFCD42293D2E655C51B76B7D, 0E26F9FDBE6E069BC2ACB9A524D814BFCC00F6977BF9DB45546E06721B85C886 ] C:\Windows\syswow64\mscms.dll
00:27:31.0665 0x1534  C:\Windows\syswow64\mscms.dll - ok
00:27:31.0667 0x1534  [ 9D840C21003668C4811FBFFE87EDF86A, 92F01B746451689D7D6FA45812DAB6E62687D74C95F9F3DE83C0254ACD81E6EC ] C:\Windows\syswow64\WindowsCodecsExt.dll
00:27:31.0667 0x1534  C:\Windows\syswow64\WindowsCodecsExt.dll - ok
00:27:31.0669 0x1534  [ 3D7F4D3D442FBFEE351767DF2F8788F6, 056DBEA83877D9FF57E0903201FFB97D0CDA5A9E9C33DFFA9844D037C2F2E172 ] C:\Windows\syswow64\msv1_0.dll
00:27:31.0669 0x1534  C:\Windows\syswow64\msv1_0.dll - ok
00:27:31.0671 0x1534  [ 616D2E41A75058A8D3E9B93A9A163E1B, 61E179AD9AC065DE25944782208BE19903B85022793949AABD2C8D43DC23D8E2 ] C:\Windows\syswow64\cryptdll.dll
00:27:31.0671 0x1534  C:\Windows\syswow64\cryptdll.dll - ok
00:27:31.0672 0x1534  [ F570B339D43B9070396AC76B3092AF74, 714E9B7C1808D394D1D9A0189844CF42A63EBF6AD6AE914F6419307448B6965C ] C:\Windows\syswow64\NtlmShared.dll
00:27:31.0672 0x1534  C:\Windows\syswow64\NtlmShared.dll - ok
00:27:31.0673 0x1534  ================ Scan generic autorun ======================
00:27:32.0233 0x1534  [ 89AA8AC9B4E101E4173455D4620C5117, 746A6EA06A980EE29E6A401AA19313F13ECBF0F0EDFB6E7E6BD8C46ACCF9DA0B ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
00:27:32.0436 0x1534  RTHDVCPL - ok
00:27:32.0467 0x14a8  Object required for P2P: [ 0968D575D9108497A6DC37749D4A6C4F ] wlidsvc
00:27:32.0467 0x1534  [ E6A3062BDB2E18EBDEB69CF7F7A3A070, 48AB0CCA0230DCBB47CCC765659E390A4A42AC7303A27B835B9FBB1168AC7BF1 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
00:27:32.0514 0x1534  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
00:27:34.0905 0x14a8  Object send P2P result: true
00:27:34.0999 0x1534  Detect skipped due to KSN trusted
00:27:34.0999 0x1534  IAStorIcon - ok
00:27:35.0186 0x1534  [ 5A9CDFF0CEDFA8061D0DE6B6C2547F51, 76CDEF7A94D90D79CFA105E492E53350F7545900FEF651CD0D18B3163B812AD2 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
00:27:35.0218 0x1534  AdobeAAMUpdater-1.0 - ok
00:27:35.0264 0x1534  [ A8E69DA21AEEB9DAA55D90E87AC1A549, 175AF750A1DF53555D0CB6C61312CEE37E2CB182873041A8AE38C57EA01DC2F5 ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
00:27:35.0280 0x1534  Avira SystrayStartTrigger - ok
00:27:35.0374 0x1534  [ 3CBD03471913E2C6B8EE62F4D761B19D, 605E1287D31005996F007805B7411EB4AFF32081877B74A91706D96C78098AD1 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
00:27:35.0405 0x1534  avgnt - ok
00:27:35.0421 0x1534  [ FCEC6F664FA7E5FE323165FBC9314470, 4E5AB1E6C3D2881D95E74F2F28649A7DBC4919CA249829A0E4CD9804E401A025 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
00:27:35.0436 0x1534  SunJavaUpdateSched - ok
00:27:35.0546 0x1534  [ EA4F9B19B3614349C79CC97DCA4C23A8, EC330F2E4F002FE450CDC1FC84AC0122C21C7912A483A99143450822004795E3 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
00:27:35.0561 0x1534  StartCCC - ok
00:27:35.0718 0x1534  [ 3D1D33DE714636AEAB4AC18291D254F6, 8C9ECD5818F48B90FAEFBEC896F795DDE45CCE73BB11901E90E035F179037117 ] C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
00:27:35.0764 0x1534  Adobe Creative Cloud - ok
00:27:35.0999 0x1534  [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
00:27:36.0202 0x1534  OneDriveSetup - ok
00:27:36.0389 0x1534  [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
00:27:36.0499 0x1534  OneDriveSetup - ok
00:27:36.0608 0x1534  [ 9F2ECA252720B25E8FEC1CAB2984B98D, 476EE2929901CD43F15869B763376393AA0942A3B934532055E037C6DCE3CD2D ] C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\OneDrive.exe
00:27:36.0639 0x1534  OneDrive - ok
00:27:36.0749 0x1534  [ 5353A34090BABE3CD48B70569AF0DD12, A211D0B06DC05BFCBD13EBC71275C644B7616E95485ED8336DEFF257B7AE7E80 ] C:\Program Files (x86)\Steam\steam.exe
00:27:36.0796 0x1534  Steam - ok
00:27:36.0843 0x1534  Skype - ok
00:27:36.0921 0x1534  [ A6177D080759CF4A03EF837A38F62401, 79D1FFABDD7841D9043D4DDF1F93721BCD35D823614411FD4EAB5D2C16A86F35 ] C:\Windows\system32\cmd.exe
00:27:36.0968 0x1534  Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64 - ok
00:27:36.0983 0x1534  [ A6177D080759CF4A03EF837A38F62401, 79D1FFABDD7841D9043D4DDF1F93721BCD35D823614411FD4EAB5D2C16A86F35 ] C:\Windows\system32\cmd.exe
00:27:37.0014 0x1534  Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64 - ok
00:27:37.0014 0x1534  Waiting for KSN requests completion. In queue: 13
00:27:38.0030 0x1534  Waiting for KSN requests completion. In queue: 13
00:27:39.0046 0x1534  Waiting for KSN requests completion. In queue: 13
00:27:40.0108 0x1534  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\wsctool.exe ( 15.0.14.257 ), 0x41000 ( enabled : updated )
00:27:40.0124 0x1534  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.10240.16384 ), 0x60100 ( disabled : updated )
00:27:40.0140 0x1534  Win FW state via NFP2: enabled ( trusted )
00:27:42.0499 0x1534  ============================================================
00:27:42.0499 0x1534  Scan finished
00:27:42.0499 0x1534  ============================================================
00:27:42.0499 0x152c  Detected object count: 0
00:27:42.0499 0x152c  Actual detected object count: 0
00:27:46.0577 0x1254  Deinitialize success

schrauber 14.11.2015 12:11
Malware ist da keine. Scheint (wie so oft) ein Fehler in Avira zu sein.


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131