|
Verschiedene Trojaner gefunden? Wie entfernen? Hallo, Habe mit Antivir folgenden Trojaner gefunfen und in die Quarantäne gesteckt EXP/Java.Blacole.CY.1 Avira Free Antivirus Report file date: Montag, 26. November 2012 20:03 Scanning for 4442860 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available. Licensee : Avira Free Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows 7 Home Premium Windows version : (Service Pack 1) [6.1.7601] Boot mode : Normally booted Username : ALKL Computer name : ALKL-PC Version information: BUILD.DAT : 12.1.9.1236 Bytes 11.10.2012 15:58:00 AVSCAN.EXE : 12.3.0.48 468256 Bytes 14.11.2012 16:47:31 AVSCAN.DLL : 12.3.0.15 54736 Bytes 18.07.2012 16:05:06 LUKE.DLL : 12.3.0.15 68304 Bytes 18.07.2012 16:04:59 AVSCPLR.DLL : 12.3.0.27 97064 Bytes 18.07.2012 16:04:51 AVREG.DLL : 12.3.0.33 232232 Bytes 18.07.2012 16:04:51 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 18:18:34 VBASE001.VDF : 7.11.0.0 13342208 Bytes 14.12.2010 23:23:21 VBASE002.VDF : 7.11.19.170 14374912 Bytes 20.12.2011 23:32:24 VBASE003.VDF : 7.11.21.238 4472832 Bytes 01.02.2012 09:58:50 VBASE004.VDF : 7.11.26.44 4329472 Bytes 28.03.2012 22:38:13 VBASE005.VDF : 7.11.34.116 4034048 Bytes 29.06.2012 16:05:05 VBASE006.VDF : 7.11.41.250 4902400 Bytes 06.09.2012 07:31:51 VBASE007.VDF : 7.11.50.230 3904512 Bytes 22.11.2012 19:03:14 VBASE008.VDF : 7.11.50.231 2048 Bytes 22.11.2012 19:03:14 VBASE009.VDF : 7.11.50.232 2048 Bytes 22.11.2012 19:03:14 VBASE010.VDF : 7.11.50.233 2048 Bytes 22.11.2012 19:03:14 VBASE011.VDF : 7.11.50.234 2048 Bytes 22.11.2012 19:03:14 VBASE012.VDF : 7.11.50.235 2048 Bytes 22.11.2012 19:03:15 VBASE013.VDF : 7.11.50.236 2048 Bytes 22.11.2012 19:03:15 VBASE014.VDF : 7.11.51.27 133632 Bytes 23.11.2012 12:13:44 VBASE015.VDF : 7.11.51.28 2048 Bytes 23.11.2012 12:13:44 VBASE016.VDF : 7.11.51.29 2048 Bytes 23.11.2012 12:13:44 VBASE017.VDF : 7.11.51.30 2048 Bytes 23.11.2012 12:13:44 VBASE018.VDF : 7.11.51.31 2048 Bytes 23.11.2012 12:13:44 VBASE019.VDF : 7.11.51.32 2048 Bytes 23.11.2012 12:13:45 VBASE020.VDF : 7.11.51.33 2048 Bytes 23.11.2012 12:13:45 VBASE021.VDF : 7.11.51.34 2048 Bytes 23.11.2012 12:13:45 VBASE022.VDF : 7.11.51.35 2048 Bytes 23.11.2012 12:13:45 VBASE023.VDF : 7.11.51.36 2048 Bytes 23.11.2012 12:13:46 VBASE024.VDF : 7.11.51.37 2048 Bytes 23.11.2012 12:13:46 VBASE025.VDF : 7.11.51.38 2048 Bytes 23.11.2012 12:13:46 VBASE026.VDF : 7.11.51.39 2048 Bytes 23.11.2012 12:13:46 VBASE027.VDF : 7.11.51.40 2048 Bytes 23.11.2012 12:13:46 VBASE028.VDF : 7.11.51.41 2048 Bytes 23.11.2012 12:13:46 VBASE029.VDF : 7.11.51.42 2048 Bytes 23.11.2012 12:13:46 VBASE030.VDF : 7.11.51.43 2048 Bytes 23.11.2012 12:13:46 VBASE031.VDF : 7.11.51.72 80896 Bytes 25.11.2012 12:13:47 Engine version : 8.2.10.204 AEVDF.DLL : 8.1.2.10 102772 Bytes 12.08.2012 16:27:19 AESCRIPT.DLL : 8.1.4.68 467324 Bytes 22.11.2012 19:03:43 AESCN.DLL : 8.1.9.4 131445 Bytes 15.11.2012 20:44:22 AESBX.DLL : 8.2.5.12 606578 Bytes 18.07.2012 16:04:48 AERDL.DLL : 8.2.0.74 643445 Bytes 07.11.2012 16:33:15 AEPACK.DLL : 8.3.0.40 815479 Bytes 14.11.2012 16:47:25 AEOFFICE.DLL : 8.1.2.50 201084 Bytes 05.11.2012 13:45:14 AEHEUR.DLL : 8.1.4.142 5566841 Bytes 22.11.2012 19:03:43 AEHELP.DLL : 8.1.25.2 258423 Bytes 12.10.2012 08:08:52 AEGEN.DLL : 8.1.6.10 438646 Bytes 15.11.2012 20:44:06 AEEXP.DLL : 8.2.0.12 119158 Bytes 22.11.2012 19:03:44 AEEMU.DLL : 8.1.3.2 393587 Bytes 12.08.2012 16:26:51 AECORE.DLL : 8.1.29.2 201079 Bytes 07.11.2012 16:33:07 AEBB.DLL : 8.1.1.4 53619 Bytes 05.11.2012 13:45:08 AVWINLL.DLL : 12.3.0.15 27344 Bytes 18.07.2012 16:04:53 AVPREF.DLL : 12.3.0.32 50720 Bytes 14.11.2012 16:47:30 AVREP.DLL : 12.3.0.15 179208 Bytes 18.07.2012 16:04:51 AVARKT.DLL : 12.3.0.33 209696 Bytes 14.11.2012 16:47:28 AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 18.07.2012 16:04:50 SQLITE3.DLL : 3.7.0.1 398288 Bytes 18.07.2012 16:05:02 AVSMTP.DLL : 12.3.0.32 63480 Bytes 18.07.2012 16:04:52 NETNT.DLL : 12.3.0.15 17104 Bytes 18.07.2012 16:04:59 RCIMAGE.DLL : 12.3.0.31 4445944 Bytes 18.07.2012 16:05:09 RCTEXT.DLL : 12.3.0.32 97056 Bytes 14.11.2012 16:47:07 Configuration settings for the scan: Jobname.............................: Local Drives Configuration file..................: C:\Program Files (x86)\Avira\AntiVir Desktop\alldrives.avp Logging.............................: default Primary action......................: Interactive Secondary action....................: Ignore Scan master boot sector.............: on Scan boot sector....................: on Boot sectors........................: C:, Q:, D:, Process scan........................: on Scan registry.......................: on Search for rootkits.................: off Integrity checking of system files..: off Scan all files......................: Intelligent file selection Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: extended Start of the scan: Montag, 26. November 2012 20:03 Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! [INFO] Please restart the search with Administrator rights Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! [INFO] Please restart the search with Administrator rights Boot sector 'Q:\' [INFO] No virus was found! [INFO] Please restart the search with Administrator rights The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'soffice.bin' - '1' Module(s) have been scanned Scan process 'soffice.exe' - '1' Module(s) have been scanned Scan process 'DMREngine.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'PhilipsDeviceListener.exe' - '1' Module(s) have been scanned Scan process 'ACDaemon.exe' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'clear.fiMovieService.exe' - '1' Module(s) have been scanned Scan process 'nusb3mon.exe' - '1' Module(s) have been scanned Scan process 'LManager.exe' - '1' Module(s) have been scanned Scan process 'BackupManagerTray.exe' - '1' Module(s) have been scanned Scan process 'TomTomHOMERunner.exe' - '1' Module(s) have been scanned Scan process 'clear.fiAgent.exe' - '1' Module(s) have been scanned Starting to scan executable files (registry). The registry was scanned ( '1744' files ). Starting the file scan: Begin scan in 'C:\' <Acer> C:\Users\ALKL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CHS01OFN\sweetimsetup[1].7z [WARNING] The file could not be read! C:\Users\ALKL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RF6J8Q6R\sweetiesetup[1].7z [WARNING] The file could not be read! C:\Users\ALKL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\31d293c3-3453b1f8 [0] Archive type: ZIP --> Play.class [DETECTION] Contains recognition pattern of the EXP/Java.Blacole.CY.1 exploit Begin scan in 'Q:\' Search path Q:\ could not be opened! System error [5]: Zugriff verweigert Begin scan in 'D:\' <Disk1> Beginning disinfection: C:\Users\ALKL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\31d293c3-3453b1f8 [DETECTION] Contains recognition pattern of the EXP/Java.Blacole.CY.1 exploit [NOTE] The file was moved to the quarantine directory under the name '544472b6.qua'. End of the scan: Montag, 26. November 2012 21:30 Used time: 1:26:49 Hour(s) The scan has been done completely. 30634 Scanned directories 646686 Files were scanned 1 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 Files were deleted 0 Viruses and unwanted programs were repaired 1 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 646685 Files not concerned 4438 Archives were scanned 2 Warnings 1 Notes dann mit Malware bites Anitmalware nochmal gescannt und folgende gefunden: PUP.OfferBundler.ST sowie Exploi.Drop.2 Log von denen: Infizierte Dateien: 2 C:\Users\ALKL\Downloads\SoftonicDownloader_fuer_openoffice.exe (PUP.OfferBundler.ST) -> Keine Aktion durchgeführt. C:\Users\ALKL\AppData\Local\Temp\0.517416384732799.EXE (Exploit.Drop.2) -> Keine Aktion durchgeführt. Bitte um Hilfe, wie ich die Runterkriege und was da das Thema ist Danke |
Hallo und :hallo: Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
Note: Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread. Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards. Zitat:
Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs posten! |
hier nochmal das log file von den beiden in Antimalware suchsystem gefundenen Viren: Malwarebytes Anti-Malware (Test) 1.65.1.1000 Malwarebytes : Free anti-malware download Datenbank Version: v2012.11.26.09 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 ALKL :: ALKL-PC [Administrator] Schutz: Aktiviert 27.11.2012 20:22:31 mbam-log-2012-11-27 (23-36-40).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 376123 Laufzeit: 1 Stunde(n), 11 Minute(n), 53 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\ALKL\Downloads\SoftonicDownloader_fuer_openoffice.exe (PUP.OfferBundler.ST) -> Keine Aktion durchgeführt. C:\Users\ALKL\AppData\Local\Temp\0.517416384732799.EXE (Exploit.Drop.2) -> Keine Aktion durchgeführt. (Ende) |
Sind das alle Logs mit Funden? Es geht auch nicht nur um Malwarebytes |
Ja das von Malwarebytes und am Anfang meines Posts jenes von Avira Virusscanner Mehr hatte ich nicht gefunden Glaub dass der erste eh der blödere ist, oder? jedenfalls sagen das die Foren... |
1. aswMBR Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop. Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehlalarm!
Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes: Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button. 2. TDSS-Killer Download TDSS-Killer auf Desktop siehe => http://www.trojaner-board.de/82358-t...entfernen.html Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm! Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs. Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten! http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png |
soda, nun mal das log file von AVAST! aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software Run date: 2012-11-28 20:11:53 ----------------------------- 20:11:53.271 OS Version: Windows x64 6.1.7601 Service Pack 1 20:11:53.271 Number of processors: 4 586 0x2A07 20:11:53.271 ComputerName: ALKL-PC UserName: ALKL 20:11:54.519 Initialize success 20:15:37.830 AVAST engine defs: 12112800 20:15:59.545 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 20:15:59.561 Disk 0 Vendor: WDC_WD50 01.0 Size: 476940MB BusType: 3 20:15:59.576 Disk 0 MBR read successfully 20:15:59.576 Disk 0 MBR scan 20:15:59.592 Disk 0 Windows 7 default MBR code 20:15:59.592 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 16384 MB offset 2048 20:15:59.623 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 33556480 20:15:59.639 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 460454 MB offset 33761280 20:15:59.670 Disk 0 scanning C:\Windows\system32\drivers 20:16:08.406 Service scanning 20:16:34.358 Modules scanning 20:16:34.374 Disk 0 trace - called modules: 20:16:34.390 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 20:16:34.405 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80068e9060] 20:16:34.405 3 CLASSPNP.SYS[fffff88001ba543f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004aad050] 20:16:36.137 AVAST engine scan C:\Windows 20:16:38.851 AVAST engine scan C:\Windows\system32 20:21:20.505 AVAST engine scan C:\Windows\system32\drivers 20:21:31.707 AVAST engine scan C:\Users\ALKL 20:27:35.826 File: C:\Users\ALKL\AppData\Local\Temp\0.517416384732799.exe **INFECTED** Win32:Rootkit-gen [Rtk] 20:27:47.377 File: C:\Users\ALKL\AppData\Local\Temp\jar_cache4108568453813458730.tmp **INFECTED** Win32:Rootkit-gen [Rtk] 20:31:52.776 AVAST engine scan C:\ProgramData 20:34:04.932 Scan finished successfully 20:38:52.468 Disk 0 MBR has been saved successfully to "C:\Users\ALKL\Desktop\MBR.dat" 20:38:52.484 The log file has been saved successfully to "C:\Users\ALKL\Desktop\aswMBR.txt" nun der TDSS Killer file- bzw. report: 20:57:47.0271 4752 TDSS rootkit removing tool 2.8.14.0 Oct 30 2012 13:37:33 20:57:55.0625 4752 ============================================================ 20:57:55.0625 4752 Current date / time: 2012/11/28 20:57:55.0625 20:57:55.0640 4752 SystemInfo: 20:57:55.0640 4752 20:57:55.0640 4752 OS Version: 6.1.7601 ServicePack: 1.0 20:57:55.0640 4752 Product type: Workstation 20:57:55.0640 4752 ComputerName: ALKL-PC 20:57:55.0640 4752 UserName: ALKL 20:57:55.0640 4752 Windows directory: C:\Windows 20:57:55.0640 4752 System windows directory: C:\Windows 20:57:55.0640 4752 Running under WOW64 20:57:55.0640 4752 Processor architecture: Intel x64 20:57:55.0640 4752 Number of processors: 4 20:57:55.0640 4752 Page size: 0x1000 20:57:55.0640 4752 Boot type: Normal boot 20:57:55.0640 4752 ============================================================ 20:57:56.0139 4752 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 20:57:56.0202 4752 ============================================================ 20:57:56.0202 4752 \Device\Harddisk0\DR0: 20:57:56.0202 4752 MBR partitions: 20:57:56.0202 4752 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2000800, BlocksNum 0x32000 20:57:56.0202 4752 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2032800, BlocksNum 0x38353000 20:57:56.0202 4752 ============================================================ 20:57:56.0217 4752 C: <-> \Device\Harddisk0\DR0\Partition2 20:57:56.0217 4752 ============================================================ 20:57:56.0217 4752 Initialize success 20:57:56.0217 4752 ============================================================ 20:58:10.0930 5432 ============================================================ 20:58:10.0930 5432 Scan started 20:58:10.0930 5432 Mode: Manual; SigCheck; TDLFS; 20:58:10.0930 5432 ============================================================ 20:58:11.0133 5432 ================ Scan system memory ======================== 20:58:11.0133 5432 System memory - ok 20:58:11.0133 5432 ================ Scan services ============================= 20:58:11.0383 5432 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 20:58:11.0507 5432 1394ohci - ok 20:58:11.0663 5432 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe 20:58:11.0710 5432 ACDaemon - ok 20:58:11.0773 5432 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 20:58:11.0819 5432 ACPI - ok 20:58:11.0866 5432 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 20:58:11.0929 5432 AcpiPmi - ok 20:58:12.0069 5432 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 20:58:12.0100 5432 AdobeFlashPlayerUpdateSvc - ok 20:58:12.0131 5432 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 20:58:12.0163 5432 adp94xx - ok 20:58:12.0194 5432 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys 20:58:12.0209 5432 adpahci - ok 20:58:12.0225 5432 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 20:58:12.0241 5432 adpu320 - ok 20:58:12.0256 5432 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 20:58:12.0350 5432 AeLookupSvc - ok 20:58:12.0428 5432 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 20:58:12.0459 5432 AFD - ok 20:58:12.0475 5432 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 20:58:12.0490 5432 agp440 - ok 20:58:12.0506 5432 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 20:58:12.0568 5432 ALG - ok 20:58:12.0615 5432 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 20:58:12.0631 5432 aliide - ok 20:58:12.0677 5432 [ E4DA723458A20FBA693FB1F5924483DB ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 20:58:12.0724 5432 AMD External Events Utility - ok 20:58:12.0787 5432 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 20:58:12.0802 5432 amdide - ok 20:58:12.0833 5432 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 20:58:12.0896 5432 AmdK8 - ok 20:58:13.0097 5432 [ F894BFB5817718D50CE0122B7806B457 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 20:58:13.0317 5432 amdkmdag - ok 20:58:13.0327 5432 [ B12E7BE6715F3EE1A913A806F6B0AB94 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 20:58:13.0347 5432 amdkmdap - ok 20:58:13.0357 5432 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys 20:58:13.0387 5432 AmdPPM - ok 20:58:13.0417 5432 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 20:58:13.0447 5432 amdsata - ok 20:58:13.0487 5432 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 20:58:13.0507 5432 amdsbs - ok 20:58:13.0537 5432 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 20:58:13.0547 5432 amdxata - ok 20:58:13.0657 5432 [ 0A1CC583E8147004E4AD4625D7FBF88C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 20:58:13.0677 5432 AntiVirSchedulerService - ok 20:58:13.0717 5432 [ C9A36EF935ACED86AEDF93E97E606911 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 20:58:13.0737 5432 AntiVirService - ok 20:58:13.0827 5432 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 20:58:13.0877 5432 AppID - ok 20:58:13.0907 5432 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 20:58:14.0017 5432 AppIDSvc - ok 20:58:14.0037 5432 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 20:58:14.0107 5432 Appinfo - ok 20:58:14.0187 5432 [ 3DEBBECF665DCDDE3A95D9B902010817 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 20:58:14.0207 5432 Apple Mobile Device - ok 20:58:14.0227 5432 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys 20:58:14.0247 5432 arc - ok 20:58:14.0277 5432 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys 20:58:14.0307 5432 arcsas - ok 20:58:14.0337 5432 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 20:58:14.0457 5432 AsyncMac - ok 20:58:14.0497 5432 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 20:58:14.0527 5432 atapi - ok 20:58:14.0567 5432 [ 4BF5BCA6E2608CD8A00BC4A6673A9F47 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 20:58:14.0587 5432 AtiHDAudioService - ok 20:58:14.0637 5432 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 20:58:14.0747 5432 AudioEndpointBuilder - ok 20:58:14.0767 5432 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 20:58:14.0797 5432 AudioSrv - ok 20:58:14.0827 5432 [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 20:58:14.0837 5432 avgntflt - ok 20:58:14.0897 5432 [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 20:58:14.0917 5432 avipbb - ok 20:58:14.0937 5432 [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 20:58:14.0957 5432 avkmgr - ok 20:58:14.0997 5432 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 20:58:15.0097 5432 AxInstSV - ok 20:58:15.0127 5432 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 20:58:15.0217 5432 b06bdrv - ok 20:58:15.0267 5432 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 20:58:15.0307 5432 b57nd60a - ok 20:58:15.0387 5432 [ 87F3BCF82A63E900AF896CD930BF7E05 ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE 20:58:15.0417 5432 BBSvc - ok 20:58:15.0507 5432 [ 78779EE07231C658B483B1F38B5088DF ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE 20:58:15.0537 5432 BBUpdate - ok 20:58:15.0667 5432 [ 11F844B46B631337395651ABE9C4167B ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 20:58:15.0807 5432 BCM43XX - ok 20:58:15.0827 5432 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 20:58:15.0858 5432 BDESVC - ok 20:58:15.0898 5432 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 20:58:15.0968 5432 Beep - ok 20:58:16.0028 5432 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 20:58:16.0138 5432 BFE - ok 20:58:16.0178 5432 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 20:58:16.0308 5432 BITS - ok 20:58:16.0328 5432 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 20:58:16.0348 5432 blbdrive - ok 20:58:16.0428 5432 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 20:58:16.0458 5432 Bonjour Service - ok 20:58:16.0498 5432 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 20:58:16.0528 5432 bowser - ok 20:58:16.0558 5432 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 20:58:16.0598 5432 BrFiltLo - ok 20:58:16.0618 5432 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 20:58:16.0658 5432 BrFiltUp - ok 20:58:16.0708 5432 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 20:58:16.0748 5432 Browser - ok 20:58:16.0768 5432 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 20:58:16.0828 5432 Brserid - ok 20:58:16.0868 5432 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 20:58:16.0908 5432 BrSerWdm - ok 20:58:16.0938 5432 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 20:58:16.0968 5432 BrUsbMdm - ok 20:58:16.0978 5432 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 20:58:17.0008 5432 BrUsbSer - ok 20:58:17.0028 5432 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 20:58:17.0078 5432 BTHMODEM - ok 20:58:17.0128 5432 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 20:58:17.0198 5432 bthserv - ok 20:58:17.0218 5432 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 20:58:17.0258 5432 cdfs - ok 20:58:17.0308 5432 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 20:58:17.0328 5432 cdrom - ok 20:58:17.0358 5432 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 20:58:17.0398 5432 CertPropSvc - ok 20:58:17.0428 5432 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys 20:58:17.0478 5432 circlass - ok 20:58:17.0518 5432 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 20:58:17.0548 5432 CLFS - ok 20:58:17.0608 5432 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 20:58:17.0638 5432 clr_optimization_v2.0.50727_32 - ok 20:58:17.0668 5432 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 20:58:17.0698 5432 clr_optimization_v2.0.50727_64 - ok 20:58:17.0798 5432 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 20:58:17.0855 5432 clr_optimization_v4.0.30319_32 - ok 20:58:17.0886 5432 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 20:58:17.0917 5432 clr_optimization_v4.0.30319_64 - ok 20:58:17.0948 5432 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 20:58:17.0995 5432 CmBatt - ok 20:58:18.0042 5432 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 20:58:18.0058 5432 cmdide - ok 20:58:18.0120 5432 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 20:58:18.0136 5432 CNG - ok 20:58:18.0151 5432 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 20:58:18.0151 5432 Compbatt - ok 20:58:18.0198 5432 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 20:58:18.0245 5432 CompositeBus - ok 20:58:18.0292 5432 COMSysApp - ok 20:58:18.0323 5432 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 20:58:18.0354 5432 crcdisk - ok 20:58:18.0401 5432 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 20:58:18.0448 5432 CryptSvc - ok 20:58:18.0572 5432 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 20:58:18.0619 5432 cvhsvc - ok 20:58:18.0666 5432 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 20:58:18.0744 5432 DcomLaunch - ok 20:58:18.0791 5432 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 20:58:18.0869 5432 defragsvc - ok 20:58:18.0900 5432 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 20:58:18.0978 5432 DfsC - ok 20:58:19.0025 5432 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 20:58:19.0087 5432 Dhcp - ok 20:58:19.0118 5432 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 20:58:19.0165 5432 discache - ok 20:58:19.0212 5432 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys 20:58:19.0243 5432 Disk - ok 20:58:19.0243 5432 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 20:58:19.0321 5432 Dnscache - ok 20:58:19.0337 5432 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 20:58:19.0430 5432 dot3svc - ok 20:58:19.0430 5432 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 20:58:19.0477 5432 DPS - ok 20:58:19.0508 5432 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 20:58:19.0571 5432 drmkaud - ok 20:58:19.0622 5432 [ 9DD3A22F804697606C2B7FF9E912FF6B ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe 20:58:19.0652 5432 DsiWMIService - ok 20:58:19.0672 5432 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 20:58:19.0702 5432 DXGKrnl - ok 20:58:19.0742 5432 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 20:58:19.0812 5432 EapHost - ok 20:58:19.0892 5432 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys 20:58:19.0992 5432 ebdrv - ok 20:58:20.0022 5432 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 20:58:20.0072 5432 EFS - ok 20:58:20.0112 5432 [ 5332EC2BA1C112BD4BB1F38127848FEF ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe 20:58:20.0132 5432 EgisTec Ticket Service - ok 20:58:20.0192 5432 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 20:58:20.0242 5432 ehRecvr - ok 20:58:20.0262 5432 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 20:58:20.0302 5432 ehSched - ok 20:58:20.0362 5432 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys 20:58:20.0392 5432 elxstor - ok 20:58:20.0472 5432 [ 48425C93B6F36529707206E4FA680CF3 ] ePowerSvc C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe 20:58:20.0522 5432 ePowerSvc - ok 20:58:20.0532 5432 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 20:58:20.0552 5432 ErrDev - ok 20:58:20.0592 5432 [ 9D8739A2A2173C9D27C499A3FC6EDA3F ] ETD C:\Windows\system32\DRIVERS\ETD.sys 20:58:20.0602 5432 ETD - ok 20:58:20.0642 5432 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 20:58:20.0722 5432 EventSystem - ok 20:58:20.0752 5432 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 20:58:20.0782 5432 exfat - ok 20:58:20.0792 5432 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 20:58:20.0832 5432 fastfat - ok 20:58:20.0852 5432 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 20:58:20.0902 5432 Fax - ok 20:58:20.0922 5432 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys 20:58:20.0942 5432 fdc - ok 20:58:20.0962 5432 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 20:58:21.0012 5432 fdPHost - ok 20:58:21.0032 5432 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 20:58:21.0062 5432 FDResPub - ok 20:58:21.0092 5432 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 20:58:21.0112 5432 FileInfo - ok 20:58:21.0132 5432 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 20:58:21.0202 5432 Filetrace - ok 20:58:21.0232 5432 [ BB0667B0171B632B97EA759515476F07 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 20:58:21.0252 5432 FLEXnet Licensing Service - ok 20:58:21.0282 5432 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 20:58:21.0292 5432 flpydisk - ok 20:58:21.0312 5432 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 20:58:21.0322 5432 FltMgr - ok 20:58:21.0382 5432 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 20:58:21.0502 5432 FontCache - ok 20:58:21.0602 5432 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 20:58:21.0622 5432 FontCache3.0.0.0 - ok 20:58:21.0642 5432 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 20:58:21.0658 5432 FsDepends - ok 20:58:21.0704 5432 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 20:58:21.0720 5432 Fs_Rec - ok 20:58:21.0736 5432 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 20:58:21.0751 5432 fvevol - ok 20:58:21.0782 5432 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 20:58:21.0782 5432 gagp30kx - ok 20:58:21.0829 5432 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 20:58:21.0860 5432 GamesAppService - ok 20:58:21.0907 5432 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 20:58:21.0923 5432 GEARAspiWDM - ok 20:58:22.0001 5432 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 20:58:22.0079 5432 gpsvc - ok 20:58:22.0126 5432 [ C9B2D1D3F86FD3673EF847DEF73B6F9E ] GREGService C:\Program Files (x86)\Acer\Registration\GREGsvc.exe 20:58:22.0141 5432 GREGService - ok 20:58:22.0219 5432 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 20:58:22.0235 5432 gupdate - ok 20:58:22.0266 5432 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 20:58:22.0282 5432 gupdatem - ok 20:58:22.0297 5432 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 20:58:22.0360 5432 hcw85cir - ok 20:58:22.0391 5432 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 20:58:22.0438 5432 HdAudAddService - ok 20:58:22.0453 5432 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 20:58:22.0500 5432 HDAudBus - ok 20:58:22.0516 5432 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 20:58:22.0531 5432 HidBatt - ok 20:58:22.0562 5432 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys 20:58:22.0578 5432 HidBth - ok 20:58:22.0609 5432 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys 20:58:22.0625 5432 HidIr - ok 20:58:22.0640 5432 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 20:58:22.0687 5432 hidserv - ok 20:58:22.0718 5432 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 20:58:22.0718 5432 HidUsb - ok 20:58:22.0750 5432 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 20:58:22.0796 5432 hkmsvc - ok 20:58:22.0812 5432 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 20:58:22.0859 5432 HomeGroupListener - ok 20:58:22.0890 5432 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 20:58:22.0921 5432 HomeGroupProvider - ok 20:58:22.0968 5432 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 20:58:22.0968 5432 HpSAMD - ok 20:58:23.0015 5432 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 20:58:23.0093 5432 HTTP - ok 20:58:23.0108 5432 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 20:58:23.0124 5432 hwpolicy - ok 20:58:23.0155 5432 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 20:58:23.0155 5432 i8042prt - ok 20:58:23.0186 5432 [ D469B77687E12FE43E344806740B624D ] iaStor C:\Windows\system32\drivers\iaStor.sys 20:58:23.0186 5432 iaStor - ok 20:58:23.0249 5432 [ 983FC69644DDF0486C8DFEA262948D1A ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe 20:58:23.0249 5432 IAStorDataMgrSvc - ok 20:58:23.0296 5432 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 20:58:23.0311 5432 iaStorV - ok 20:58:23.0362 5432 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 20:58:23.0382 5432 idsvc - ok 20:58:23.0412 5432 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys 20:58:23.0422 5432 iirsp - ok 20:58:23.0452 5432 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 20:58:23.0502 5432 IKEEXT - ok 20:58:23.0612 5432 [ B60ACCD29F8FAFC4A6344CD2BD5CA3A5 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 20:58:23.0712 5432 IntcAzAudAddService - ok 20:58:23.0742 5432 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 20:58:23.0752 5432 intelide - ok 20:58:23.0772 5432 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 20:58:23.0782 5432 intelppm - ok 20:58:23.0812 5432 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 20:58:23.0862 5432 IPBusEnum - ok 20:58:23.0882 5432 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 20:58:23.0912 5432 IpFilterDriver - ok 20:58:23.0972 5432 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 20:58:24.0012 5432 iphlpsvc - ok 20:58:24.0022 5432 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 20:58:24.0042 5432 IPMIDRV - ok 20:58:24.0062 5432 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 20:58:24.0102 5432 IPNAT - ok 20:58:24.0142 5432 [ 46D249F9DB7844CC01050A9345F0F61B ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 20:58:24.0162 5432 iPod Service - ok 20:58:24.0192 5432 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 20:58:24.0202 5432 IRENUM - ok 20:58:24.0212 5432 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 20:58:24.0222 5432 isapnp - ok 20:58:24.0242 5432 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 20:58:24.0262 5432 iScsiPrt - ok 20:58:24.0292 5432 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 20:58:24.0312 5432 kbdclass - ok 20:58:24.0342 5432 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 20:58:24.0372 5432 kbdhid - ok 20:58:24.0392 5432 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 20:58:24.0402 5432 KeyIso - ok 20:58:24.0452 5432 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 20:58:24.0472 5432 KSecDD - ok 20:58:24.0522 5432 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 20:58:24.0542 5432 KSecPkg - ok 20:58:24.0582 5432 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 20:58:24.0652 5432 ksthunk - ok 20:58:24.0682 5432 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 20:58:24.0722 5432 KtmRm - ok 20:58:24.0752 5432 [ 0E154DA6CA9105354A07D0C576804037 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys 20:58:24.0762 5432 L1C - ok 20:58:24.0802 5432 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 20:58:24.0842 5432 LanmanServer - ok 20:58:24.0882 5432 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 20:58:24.0922 5432 LanmanWorkstation - ok 20:58:24.0972 5432 [ B705C7097F9A0EC941D02DCE7C7D426C ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe 20:58:24.0972 5432 Live Updater Service - ok 20:58:25.0012 5432 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 20:58:25.0032 5432 lltdio - ok 20:58:25.0082 5432 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 20:58:25.0122 5432 lltdsvc - ok 20:58:25.0142 5432 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 20:58:25.0192 5432 lmhosts - ok 20:58:25.0242 5432 [ 50C7CE53EF461870410355F1F2E7D515 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 20:58:25.0262 5432 LMS - ok 20:58:25.0292 5432 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 20:58:25.0302 5432 LSI_FC - ok 20:58:25.0332 5432 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 20:58:25.0332 5432 LSI_SAS - ok 20:58:25.0352 5432 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 20:58:25.0362 5432 LSI_SAS2 - ok 20:58:25.0382 5432 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 20:58:25.0392 5432 LSI_SCSI - ok 20:58:25.0402 5432 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 20:58:25.0434 5432 luafv - ok 20:58:25.0496 5432 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 20:58:25.0512 5432 MBAMProtector - ok 20:58:25.0652 5432 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 20:58:25.0668 5432 MBAMScheduler - ok 20:58:25.0699 5432 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 20:58:25.0714 5432 MBAMService - ok 20:58:25.0761 5432 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 20:58:25.0792 5432 Mcx2Svc - ok 20:58:25.0808 5432 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys 20:58:25.0824 5432 megasas - ok 20:58:25.0870 5432 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 20:58:25.0902 5432 MegaSR - ok 20:58:25.0948 5432 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\drivers\HECIx64.sys 20:58:25.0964 5432 MEIx64 - ok 20:58:25.0995 5432 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 20:58:26.0042 5432 MMCSS - ok 20:58:26.0042 5432 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 20:58:26.0089 5432 Modem - ok 20:58:26.0120 5432 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 20:58:26.0151 5432 monitor - ok 20:58:26.0182 5432 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 20:58:26.0198 5432 mouclass - ok 20:58:26.0214 5432 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 20:58:26.0245 5432 mouhid - ok 20:58:26.0276 5432 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 20:58:26.0292 5432 mountmgr - ok 20:58:26.0292 5432 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 20:58:26.0307 5432 mpio - ok 20:58:26.0323 5432 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 20:58:26.0354 5432 mpsdrv - ok 20:58:26.0557 5432 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 20:58:26.0650 5432 MpsSvc - ok 20:58:26.0666 5432 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 20:58:26.0697 5432 MRxDAV - ok 20:58:26.0713 5432 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 20:58:26.0744 5432 mrxsmb - ok 20:58:26.0775 5432 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 20:58:26.0806 5432 mrxsmb10 - ok 20:58:26.0838 5432 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 20:58:26.0853 5432 mrxsmb20 - ok 20:58:26.0900 5432 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 20:58:26.0916 5432 msahci - ok 20:58:26.0931 5432 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 20:58:26.0947 5432 msdsm - ok 20:58:26.0978 5432 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 20:58:27.0009 5432 MSDTC - ok 20:58:27.0025 5432 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 20:58:27.0056 5432 Msfs - ok 20:58:27.0087 5432 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 20:58:27.0150 5432 mshidkmdf - ok 20:58:27.0150 5432 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 20:58:27.0165 5432 msisadrv - ok 20:58:27.0181 5432 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 20:58:27.0228 5432 MSiSCSI - ok 20:58:27.0228 5432 msiserver - ok 20:58:27.0259 5432 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 20:58:27.0321 5432 MSKSSRV - ok 20:58:27.0321 5432 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 20:58:27.0368 5432 MSPCLOCK - ok 20:58:27.0384 5432 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 20:58:27.0415 5432 MSPQM - ok 20:58:27.0430 5432 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 20:58:27.0446 5432 MsRPC - ok 20:58:27.0446 5432 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 20:58:27.0462 5432 mssmbios - ok 20:58:27.0477 5432 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 20:58:27.0508 5432 MSTEE - ok 20:58:27.0524 5432 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 20:58:27.0540 5432 MTConfig - ok 20:58:27.0555 5432 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 20:58:27.0555 5432 Mup - ok 20:58:27.0571 5432 [ C009123B206C56854F4E88596035231D ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys 20:58:27.0571 5432 mwlPSDFilter - ok 20:58:27.0602 5432 [ BF3739EEB9F008B1DEBAC115089A53F8 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys 20:58:27.0602 5432 mwlPSDNServ - ok 20:58:27.0618 5432 [ 38DD143D95E7A01B86F219DDA9C28779 ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys 20:58:27.0618 5432 mwlPSDVDisk - ok 20:58:27.0649 5432 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 20:58:27.0696 5432 napagent - ok 20:58:27.0742 5432 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 20:58:27.0774 5432 NativeWifiP - ok 20:58:27.0852 5432 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 20:58:27.0914 5432 NDIS - ok 20:58:27.0930 5432 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 20:58:27.0976 5432 NdisCap - ok 20:58:27.0992 5432 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 20:58:28.0023 5432 NdisTapi - ok 20:58:28.0054 5432 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 20:58:28.0086 5432 Ndisuio - ok 20:58:28.0086 5432 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 20:58:28.0132 5432 NdisWan - ok 20:58:28.0148 5432 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 20:58:28.0164 5432 NDProxy - ok 20:58:28.0195 5432 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 20:58:28.0257 5432 NetBIOS - ok 20:58:28.0273 5432 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 20:58:28.0304 5432 NetBT - ok 20:58:28.0335 5432 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 20:58:28.0366 5432 Netlogon - ok 20:58:28.0413 5432 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 20:58:28.0491 5432 Netman - ok 20:58:28.0491 5432 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 20:58:28.0538 5432 netprofm - ok 20:58:28.0569 5432 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 20:58:28.0569 5432 NetTcpPortSharing - ok 20:58:28.0616 5432 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 20:58:28.0616 5432 nfrd960 - ok 20:58:28.0647 5432 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 20:58:28.0663 5432 NlaSvc - ok 20:58:28.0803 5432 [ 5839A8027D6D324A7CD494051A96628C ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 20:58:28.0897 5432 NOBU - ok 20:58:28.0912 5432 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 20:58:28.0944 5432 Npfs - ok 20:58:28.0959 5432 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 20:58:28.0990 5432 nsi - ok 20:58:29.0006 5432 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 20:58:29.0053 5432 nsiproxy - ok 20:58:29.0100 5432 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 20:58:29.0146 5432 Ntfs - ok 20:58:29.0224 5432 [ 1873214666F6F0A883742DF91FBC48C9 ] NTI IScheduleSvc C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe 20:58:29.0256 5432 NTI IScheduleSvc - ok 20:58:29.0287 5432 [ EE3BA1024594D5D09E314F206B94069E ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys 20:58:29.0302 5432 NTIDrvr - ok 20:58:29.0318 5432 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 20:58:29.0365 5432 Null - ok 20:58:29.0412 5432 [ 0EBC9D13CD96C15B1B18D8678A609E4B ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys 20:58:29.0443 5432 nusb3hub - ok 20:58:29.0474 5432 [ 7BDEC000D56D485021D9C1E63C2F81CA ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys 20:58:29.0521 5432 nusb3xhc - ok 20:58:29.0568 5432 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 20:58:29.0599 5432 nvraid - ok 20:58:29.0614 5432 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 20:58:29.0630 5432 nvstor - ok 20:58:29.0646 5432 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 20:58:29.0661 5432 nv_agp - ok 20:58:29.0677 5432 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 20:58:29.0724 5432 ohci1394 - ok 20:58:29.0739 5432 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 20:58:29.0755 5432 ose - ok 20:58:29.0942 5432 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 20:58:30.0036 5432 osppsvc - ok 20:58:30.0051 5432 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 20:58:30.0114 5432 p2pimsvc - ok 20:58:30.0129 5432 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 20:58:30.0160 5432 p2psvc - ok 20:58:30.0192 5432 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys 20:58:30.0207 5432 Parport - ok 20:58:30.0238 5432 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 20:58:30.0238 5432 partmgr - ok 20:58:30.0254 5432 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 20:58:30.0316 5432 PcaSvc - ok 20:58:30.0332 5432 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 20:58:30.0348 5432 pci - ok 20:58:30.0363 5432 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 20:58:30.0379 5432 pciide - ok 20:58:30.0394 5432 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 20:58:30.0410 5432 pcmcia - ok 20:58:30.0426 5432 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 20:58:30.0441 5432 pcw - ok 20:58:30.0457 5432 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 20:58:30.0504 5432 PEAUTH - ok 20:58:30.0582 5432 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 20:58:30.0628 5432 PerfHost - ok 20:58:30.0706 5432 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 20:58:30.0800 5432 pla - ok 20:58:30.0831 5432 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 20:58:30.0878 5432 PlugPlay - ok 20:58:30.0894 5432 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 20:58:30.0925 5432 PNRPAutoReg - ok 20:58:30.0940 5432 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 20:58:30.0972 5432 PNRPsvc - ok 20:58:31.0128 5432 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 20:58:31.0221 5432 PolicyAgent - ok 20:58:31.0237 5432 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 20:58:31.0268 5432 Power - ok 20:58:31.0315 5432 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 20:58:31.0393 5432 PptpMiniport - ok 20:58:31.0408 5432 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys 20:58:31.0424 5432 Processor - ok 20:58:31.0471 5432 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 20:58:31.0549 5432 ProfSvc - ok 20:58:31.0564 5432 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 20:58:31.0580 5432 ProtectedStorage - ok 20:58:31.0596 5432 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 20:58:31.0658 5432 Psched - ok 20:58:31.0705 5432 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 20:58:31.0752 5432 ql2300 - ok 20:58:31.0783 5432 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 20:58:31.0783 5432 ql40xx - ok 20:58:31.0814 5432 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 20:58:31.0830 5432 QWAVE - ok 20:58:31.0845 5432 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 20:58:31.0876 5432 QWAVEdrv - ok 20:58:31.0892 5432 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 20:58:31.0923 5432 RasAcd - ok 20:58:31.0970 5432 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 20:58:32.0064 5432 RasAgileVpn - ok 20:58:32.0095 5432 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 20:58:32.0204 5432 RasAuto - ok 20:58:32.0220 5432 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 20:58:32.0266 5432 Rasl2tp - ok 20:58:32.0282 5432 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 20:58:32.0313 5432 RasMan - ok 20:58:32.0329 5432 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 20:58:32.0376 5432 RasPppoe - ok 20:58:32.0391 5432 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 20:58:32.0422 5432 RasSstp - ok 20:58:32.0454 5432 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 20:58:32.0485 5432 rdbss - ok 20:58:32.0485 5432 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 20:58:32.0500 5432 rdpbus - ok 20:58:32.0516 5432 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 20:58:32.0547 5432 RDPCDD - ok 20:58:32.0563 5432 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 20:58:32.0594 5432 RDPENCDD - ok 20:58:32.0610 5432 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 20:58:32.0641 5432 RDPREFMP - ok 20:58:32.0703 5432 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 20:58:32.0734 5432 RDPWD - ok 20:58:32.0781 5432 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 20:58:32.0781 5432 rdyboost - ok 20:58:32.0828 5432 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 20:58:32.0922 5432 RemoteAccess - ok 20:58:32.0984 5432 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 20:58:33.0031 5432 RemoteRegistry - ok 20:58:33.0046 5432 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 20:58:33.0078 5432 RpcEptMapper - ok 20:58:33.0093 5432 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 20:58:33.0109 5432 RpcLocator - ok 20:58:33.0124 5432 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 20:58:33.0156 5432 RpcSs - ok 20:58:33.0187 5432 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 20:58:33.0218 5432 rspndr - ok 20:58:33.0265 5432 [ 9BEB5F18A418FF70659CE2E356829568 ] RSUSBSTOR C:\Windows\System32\Drivers\RtsUStor.sys 20:58:33.0265 5432 RSUSBSTOR - ok 20:58:33.0280 5432 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 20:58:33.0280 5432 SamSs - ok 20:58:33.0312 5432 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 20:58:33.0312 5432 sbp2port - ok 20:58:33.0343 5432 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 20:58:33.0374 5432 SCardSvr - ok 20:58:33.0390 5432 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 20:58:33.0421 5432 scfilter - ok 20:58:33.0468 5432 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 20:58:33.0514 5432 Schedule - ok 20:58:33.0530 5432 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 20:58:33.0561 5432 SCPolicySvc - ok 20:58:33.0592 5432 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 20:58:33.0639 5432 SDRSVC - ok 20:58:33.0670 5432 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 20:58:33.0748 5432 secdrv - ok 20:58:33.0764 5432 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 20:58:33.0795 5432 seclogon - ok 20:58:33.0826 5432 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 20:58:33.0858 5432 SENS - ok 20:58:33.0873 5432 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 20:58:33.0920 5432 SensrSvc - ok 20:58:33.0967 5432 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys 20:58:33.0998 5432 Serenum - ok 20:58:34.0045 5432 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys 20:58:34.0076 5432 Serial - ok 20:58:34.0107 5432 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys 20:58:34.0138 5432 sermouse - ok 20:58:34.0170 5432 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 20:58:34.0232 5432 SessionEnv - ok 20:58:34.0248 5432 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 20:58:34.0263 5432 sffdisk - ok 20:58:34.0279 5432 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 20:58:34.0310 5432 sffp_mmc - ok 20:58:34.0310 5432 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 20:58:34.0341 5432 sffp_sd - ok 20:58:34.0372 5432 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 20:58:34.0419 5432 sfloppy - ok 20:58:34.0482 5432 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys 20:58:34.0528 5432 Sftfs - ok 20:58:34.0638 5432 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 20:58:34.0684 5432 sftlist - ok 20:58:34.0747 5432 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys 20:58:34.0778 5432 Sftplay - ok 20:58:34.0825 5432 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys 20:58:34.0856 5432 Sftredir - ok 20:58:34.0903 5432 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys 20:58:34.0918 5432 Sftvol - ok 20:58:34.0950 5432 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 20:58:34.0965 5432 sftvsa - ok 20:58:35.0012 5432 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 20:58:35.0074 5432 SharedAccess - ok 20:58:35.0106 5432 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 20:58:35.0152 5432 ShellHWDetection - ok 20:58:35.0168 5432 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 20:58:35.0184 5432 SiSRaid2 - ok 20:58:35.0215 5432 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 20:58:35.0215 5432 SiSRaid4 - ok 20:58:35.0293 5432 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 20:58:35.0308 5432 SkypeUpdate - ok 20:58:35.0340 5432 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 20:58:35.0418 5432 Smb - ok 20:58:35.0449 5432 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 20:58:35.0480 5432 SNMPTRAP - ok 20:58:35.0511 5432 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 20:58:35.0527 5432 spldr - ok 20:58:35.0574 5432 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 20:58:35.0636 5432 Spooler - ok 20:58:35.0730 5432 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 20:58:35.0854 5432 sppsvc - ok 20:58:35.0870 5432 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 20:58:35.0901 5432 sppuinotify - ok 20:58:35.0917 5432 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 20:58:35.0948 5432 srv - ok 20:58:35.0964 5432 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 20:58:35.0979 5432 srv2 - ok 20:58:35.0995 5432 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 20:58:36.0010 5432 srvnet - ok 20:58:36.0026 5432 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 20:58:36.0104 5432 SSDPSRV - ok 20:58:36.0120 5432 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 20:58:36.0151 5432 SstpSvc - ok 20:58:36.0166 5432 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys 20:58:36.0182 5432 stexstor - ok 20:58:36.0229 5432 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 20:58:36.0291 5432 stisvc - ok 20:58:36.0307 5432 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 20:58:36.0322 5432 swenum - ok 20:58:36.0354 5432 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 20:58:36.0400 5432 swprv - ok 20:58:36.0447 5432 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 20:58:36.0525 5432 SysMain - ok 20:58:36.0541 5432 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 20:58:36.0556 5432 TabletInputService - ok 20:58:36.0572 5432 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 20:58:36.0603 5432 TapiSrv - ok 20:58:36.0619 5432 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 20:58:36.0650 5432 TBS - ok 20:58:36.0728 5432 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 20:58:36.0822 5432 Tcpip - ok 20:58:36.0868 5432 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 20:58:36.0900 5432 TCPIP6 - ok 20:58:36.0931 5432 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 20:58:36.0962 5432 tcpipreg - ok 20:58:36.0993 5432 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 20:58:37.0040 5432 TDPIPE - ok 20:58:37.0071 5432 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 20:58:37.0102 5432 TDTCP - ok 20:58:37.0118 5432 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 20:58:37.0165 5432 tdx - ok 20:58:37.0196 5432 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 20:58:37.0227 5432 TermDD - ok 20:58:37.0274 5432 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 20:58:37.0321 5432 TermService - ok 20:58:37.0352 5432 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 20:58:37.0352 5432 Themes - ok 20:58:37.0383 5432 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 20:58:37.0399 5432 THREADORDER - ok 20:58:37.0492 5432 [ 3199A477F0F06EEDE41BD55179F8EB05 ] TomTomHOMEService C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe 20:58:37.0524 5432 TomTomHOMEService - ok 20:58:37.0539 5432 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 20:58:37.0602 5432 TrkWks - ok 20:58:37.0695 5432 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 20:58:37.0758 5432 TrustedInstaller - ok 20:58:37.0789 5432 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 20:58:37.0867 5432 tssecsrv - ok 20:58:37.0898 5432 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 20:58:37.0929 5432 TsUsbFlt - ok 20:58:37.0945 5432 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 20:58:37.0976 5432 TsUsbGD - ok 20:58:38.0007 5432 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 20:58:38.0070 5432 tunnel - ok 20:58:38.0132 5432 [ FD24F98D2898BE093FE926604BE7DB99 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys 20:58:38.0163 5432 TurboB - ok 20:58:38.0241 5432 [ 600B406A04D90F577FEA8A88D7379F08 ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe 20:58:38.0272 5432 TurboBoost - ok 20:58:38.0304 5432 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 20:58:38.0319 5432 uagp35 - ok 20:58:38.0335 5432 [ A17D5E1A6DF4EAB0A480F2C490DE4C9D ] UBHelper C:\Windows\system32\drivers\UBHelper.sys 20:58:38.0350 5432 UBHelper - ok 20:58:38.0366 5432 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 20:58:38.0428 5432 udfs - ok 20:58:38.0460 5432 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 20:58:38.0491 5432 UI0Detect - ok 20:58:38.0506 5432 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 20:58:38.0522 5432 uliagpkx - ok 20:58:38.0538 5432 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 20:58:38.0569 5432 umbus - ok 20:58:38.0584 5432 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys 20:58:38.0616 5432 UmPass - ok 20:58:38.0850 5432 [ 374EBDA379A8F38E0CFC2211611E7167 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 20:58:38.0896 5432 UNS - ok 20:58:38.0912 5432 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 20:58:39.0006 5432 upnphost - ok 20:58:39.0052 5432 [ AA33FC47ED58C34E6E9261E4F850B7EB ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 20:58:39.0115 5432 USBAAPL64 - ok 20:58:39.0146 5432 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 20:58:39.0162 5432 usbccgp - ok 20:58:39.0197 5432 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 20:58:39.0227 5432 usbcir - ok 20:58:39.0247 5432 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys 20:58:39.0277 5432 usbehci - ok 20:58:39.0307 5432 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\drivers\usbhub.sys 20:58:39.0347 5432 usbhub - ok 20:58:39.0357 5432 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 20:58:39.0387 5432 usbohci - ok 20:58:39.0407 5432 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys 20:58:39.0447 5432 usbprint - ok 20:58:39.0467 5432 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 20:58:39.0497 5432 USBSTOR - ok 20:58:39.0527 5432 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 20:58:39.0567 5432 usbuhci - ok 20:58:39.0597 5432 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 20:58:39.0637 5432 usbvideo - ok 20:58:39.0677 5432 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 20:58:39.0727 5432 UxSms - ok 20:58:39.0747 5432 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 20:58:39.0757 5432 VaultSvc - ok 20:58:39.0787 5432 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 20:58:39.0787 5432 vdrvroot - ok 20:58:39.0807 5432 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 20:58:39.0847 5432 vds - ok 20:58:39.0877 5432 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 20:58:39.0887 5432 vga - ok 20:58:39.0907 5432 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 20:58:39.0937 5432 VgaSave - ok 20:58:39.0957 5432 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 20:58:39.0967 5432 vhdmp - ok 20:58:39.0997 5432 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 20:58:40.0017 5432 viaide - ok 20:58:40.0037 5432 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 20:58:40.0047 5432 volmgr - ok 20:58:40.0067 5432 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 20:58:40.0077 5432 volmgrx - ok 20:58:40.0087 5432 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 20:58:40.0097 5432 volsnap - ok 20:58:40.0117 5432 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 20:58:40.0127 5432 vsmraid - ok 20:58:40.0197 5432 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 20:58:40.0297 5432 VSS - ok 20:58:40.0307 5432 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 20:58:40.0327 5432 vwifibus - ok 20:58:40.0337 5432 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 20:58:40.0367 5432 vwififlt - ok 20:58:40.0407 5432 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 20:58:40.0417 5432 vwifimp - ok 20:58:40.0447 5432 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 20:58:40.0477 5432 W32Time - ok 20:58:40.0487 5432 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys 20:58:40.0517 5432 WacomPen - ok 20:58:40.0547 5432 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 20:58:40.0607 5432 WANARP - ok 20:58:40.0607 5432 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 20:58:40.0637 5432 Wanarpv6 - ok 20:58:40.0717 5432 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 20:58:40.0767 5432 WatAdminSvc - ok 20:58:40.0847 5432 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 20:58:40.0957 5432 wbengine - ok 20:58:40.0977 5432 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 20:58:40.0997 5432 WbioSrvc - ok 20:58:41.0017 5432 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 20:58:41.0037 5432 wcncsvc - ok 20:58:41.0047 5432 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 20:58:41.0117 5432 WcsPlugInService - ok 20:58:41.0147 5432 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys 20:58:41.0157 5432 Wd - ok 20:58:41.0207 5432 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 20:58:41.0270 5432 Wdf01000 - ok 20:58:41.0285 5432 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 20:58:41.0394 5432 WdiServiceHost - ok 20:58:41.0394 5432 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 20:58:41.0410 5432 WdiSystemHost - ok 20:58:41.0426 5432 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 20:58:41.0457 5432 WebClient - ok 20:58:41.0488 5432 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 20:58:41.0535 5432 Wecsvc - ok 20:58:41.0550 5432 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 20:58:41.0582 5432 wercplsupport - ok 20:58:41.0597 5432 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 20:58:41.0644 5432 WerSvc - ok 20:58:41.0660 5432 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 20:58:41.0691 5432 WfpLwf - ok 20:58:41.0706 5432 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 20:58:41.0722 5432 WIMMount - ok 20:58:41.0738 5432 WinDefend - ok 20:58:41.0738 5432 WinHttpAutoProxySvc - ok 20:58:41.0784 5432 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 20:58:41.0847 5432 Winmgmt - ok 20:58:41.0940 5432 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 20:58:42.0034 5432 WinRM - ok 20:58:42.0096 5432 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 20:58:42.0143 5432 WinUsb - ok 20:58:42.0174 5432 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 20:58:42.0237 5432 Wlansvc - ok 20:58:42.0299 5432 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 20:58:42.0315 5432 wlcrasvc - ok 20:58:42.0408 5432 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 20:58:42.0440 5432 wlidsvc - ok 20:58:42.0471 5432 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 20:58:42.0502 5432 WmiAcpi - ok 20:58:42.0533 5432 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 20:58:42.0564 5432 wmiApSrv - ok 20:58:42.0611 5432 WMPNetworkSvc - ok 20:58:42.0720 5432 [ 495284CF894336E9512ED7C9ACB3548E ] WOTUpdater C:\Users\ALKL\AppData\LocalLow\WOT\IE\WOTUpdater.exe 20:58:42.0736 5432 WOTUpdater ( UnsignedFile.Multi.Generic ) - warning 20:58:42.0736 5432 WOTUpdater - detected UnsignedFile.Multi.Generic (1) 20:58:42.0767 5432 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 20:58:42.0814 5432 WPCSvc - ok 20:58:42.0845 5432 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 20:58:42.0861 5432 WPDBusEnum - ok 20:58:42.0886 5432 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 20:58:42.0918 5432 ws2ifsl - ok 20:58:42.0933 5432 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 20:58:42.0949 5432 wscsvc - ok 20:58:42.0949 5432 WSearch - ok 20:58:43.0027 5432 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 20:58:43.0136 5432 wuauserv - ok 20:58:43.0183 5432 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 20:58:43.0245 5432 WudfPf - ok 20:58:43.0292 5432 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 20:58:43.0323 5432 WUDFRd - ok 20:58:43.0370 5432 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 20:58:43.0417 5432 wudfsvc - ok 20:58:43.0432 5432 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 20:58:43.0495 5432 WwanSvc - ok 20:58:43.0526 5432 ================ Scan global =============================== 20:58:43.0557 5432 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 20:58:43.0588 5432 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll 20:58:43.0620 5432 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll 20:58:43.0651 5432 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 20:58:43.0682 5432 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 20:58:43.0698 5432 [Global] - ok 20:58:43.0698 5432 ================ Scan MBR ================================== 20:58:43.0713 5432 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 20:58:44.0337 5432 \Device\Harddisk0\DR0 - ok 20:58:44.0337 5432 ================ Scan VBR ================================== 20:58:44.0337 5432 [ 63F505F739F3D7FCCABDBEE348030360 ] \Device\Harddisk0\DR0\Partition1 20:58:44.0337 5432 \Device\Harddisk0\DR0\Partition1 - ok 20:58:44.0368 5432 [ 149CD9229AE634167A7282034F2EE62F ] \Device\Harddisk0\DR0\Partition2 20:58:44.0384 5432 \Device\Harddisk0\DR0\Partition2 - ok 20:58:44.0384 5432 ============================================================ 20:58:44.0384 5432 Scan finished 20:58:44.0384 5432 ============================================================ 20:58:44.0384 6248 Detected object count: 1 20:58:44.0384 6248 Actual detected object count: 1 20:59:06.0049 6248 WOTUpdater ( UnsignedFile.Multi.Generic ) - skipped by user 20:59:06.0049 6248 WOTUpdater ( UnsignedFile.Multi.Generic ) - User select action: Skip |
Ich hab dich doch in den ersten Hinweisen gebeten, die Logs alle in CODE-Tags zu posten, warum machst du das nicht? |
Zitat:
Code: aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST SoftwareLog von Antimalware: Code: Malwarebytes Anti-Malware (Test) 1.65.1.1000Code: Avira Free Antivirus |
Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat! Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie Zitat:
|
die log Datei von combofix: Combofix Logfile: Code: ComboFix 12-12-01.02 - ALKL 02.12.2012 20:06:38.1.4 - x64 |
adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren Downloade Dir bitte AdwCleaner auf deinen Desktop. Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!
|
# AdwCleaner v2.011 - Datei am 03/12/2012 um 17:55:06 erstellt # Aktualisiert am 02/12/2012 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : ALKL - ALKL-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\ALKL\Downloads\adwcleaner.exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gefunden : C:\Users\ALKL\AppData\Local\Temp\Uninstall.exe Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk Ordner Gefunden : C:\Users\ALKL\AppData\Roaming\pdfforge ***** [Registrierungsdatenbank] ***** Schlüssel Gefunden : HKCU\Software\Softonic ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16455 [OK] Die Registrierungsdatenbank ist sauber. -\\ Opera v12.0.1467.0 Datei : C:\Users\ALKL\AppData\Roaming\Opera\Opera\operaprefs.ini [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [906 octets] - [03/12/2012 17:55:06] ########## EOF - C:\AdwCleaner[R1].txt - [965 octets] ########## |
Die Logs bitte in CODE-Tags! :kloppen: Versuch bitte alle im adwCleaner-Log erwähnten Einträge (zB pdfforge Toolbar) über die Systemsteuerung zu deinstallieren, danach ein neues Suchlog mit dem adwCleaner machen. Reste und was sich nicht deinstallieren lassen will machen wir mit dem adwCleaner weg. |
gemacht: Code: # AdwCleaner v2.011 - Datei am 05/12/2012 um 18:50:24 erstellt |
Zitat:
Eine Kontrolle mit OTL bitte:
|
Code: OTL logfile created on: 09.12.2012 20:48:51 - Run 1Code: OTL Extras logfile created on: 09.12.2012 20:48:51 - Run 1 |
Code: Scan Mode: Current userDu hast den Haken bei Scanne alle Benutzer vergessen! Bitte das Log nochmal richtig machen |
Code: OTL logfile created on: 10.12.2012 22:03:47 - Run 2Code: OTL Extras logfile created on: 10.12.2012 22:03:47 - Run 2 |
Fixen mit OTL
Code: :OTL
|
hier bitte: Code: All processes killed |
Eine Kontrolle mit OTL bitte:
|
Code: OTL Extras logfile created on: 16.12.2012 10:37:59 - Run 3Code: OTL logfile created on: 16.12.2012 10:37:59 - Run 3 |
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
|
Malwarebytes: Code: Malwarebytes Anti-Malware 1.65.1.1000 |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 05:11 Uhr. |
Copyright ©2000-2025, Trojaner-Board
Textbox. 