Mach ich gleich mal, und poste das Ergebnis dann hier.
Lässt sich anhand der obigen Logfiles schon was Konkretes sagen ?
So, hier mal das Ergebnis von mbar: Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2015.09.23.05
rootkit: v2015.09.22.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18015
Mainuser :: MAINUSER-PC [administrator]
23.09.2015 21:20:36
mbar-log-2015-09-23 (21-20-36).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 361035
Time elapsed: 5 minute(s), 9 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end) Hier mal das Ergebnis von TDSSKiller: Code:
21:35:38.0521 0x181c TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
21:35:41.0766 0x181c ============================================================
21:35:41.0766 0x181c Current date / time: 2015/09/23 21:35:41.0766
21:35:41.0766 0x181c SystemInfo:
21:35:41.0766 0x181c
21:35:41.0766 0x181c OS Version: 6.1.7601 ServicePack: 1.0
21:35:41.0766 0x181c Product type: Workstation
21:35:41.0766 0x181c ComputerName: MAINUSER-PC
21:35:41.0766 0x181c UserName: Mainuser
21:35:41.0766 0x181c Windows directory: C:\Windows
21:35:41.0766 0x181c System windows directory: C:\Windows
21:35:41.0766 0x181c Running under WOW64
21:35:41.0766 0x181c Processor architecture: Intel x64
21:35:41.0766 0x181c Number of processors: 4
21:35:41.0766 0x181c Page size: 0x1000
21:35:41.0766 0x181c Boot type: Normal boot
21:35:41.0766 0x181c ============================================================
21:35:41.0891 0x181c KLMD registered as C:\Windows\system32\drivers\23952018.sys
21:35:42.0016 0x181c System UUID: {996112BE-C08A-8030-2C69-C3536FD29419}
21:35:42.0375 0x181c Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:35:42.0375 0x181c Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:35:42.0390 0x181c ============================================================
21:35:42.0390 0x181c \Device\Harddisk0\DR0:
21:35:42.0390 0x181c MBR partitions:
21:35:42.0390 0x181c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:35:42.0390 0x181c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D192800
21:35:42.0390 0x181c \Device\Harddisk1\DR1:
21:35:42.0390 0x181c MBR partitions:
21:35:42.0390 0x181c ============================================================
21:35:42.0390 0x181c C: <-> \Device\Harddisk0\DR0\Partition2
21:35:42.0390 0x181c ============================================================
21:35:42.0390 0x181c Initialize success
21:35:42.0390 0x181c ============================================================
21:36:06.0912 0x0b94 ============================================================
21:36:06.0912 0x0b94 Scan started
21:36:06.0912 0x0b94 Mode: Manual; SigCheck; TDLFS;
21:36:06.0912 0x0b94 ============================================================
21:36:06.0912 0x0b94 KSN ping started
21:36:09.0534 0x0b94 KSN ping finished: true
21:36:09.0816 0x0b94 ================ Scan system memory ========================
21:36:09.0816 0x0b94 System memory - ok
21:36:09.0816 0x0b94 ================ Scan services =============================
21:36:09.0832 0x0b94 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
21:36:09.0944 0x0b94 1394ohci - ok
21:36:09.0954 0x0b94 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:36:09.0982 0x0b94 ACPI - ok
21:36:09.0985 0x0b94 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:36:10.0011 0x0b94 AcpiPmi - ok
21:36:10.0016 0x0b94 [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:36:10.0031 0x0b94 AdobeARMservice - ok
21:36:10.0042 0x0b94 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
21:36:10.0071 0x0b94 adp94xx - ok
21:36:10.0079 0x0b94 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
21:36:10.0105 0x0b94 adpahci - ok
21:36:10.0110 0x0b94 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
21:36:10.0133 0x0b94 adpu320 - ok
21:36:10.0138 0x0b94 [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:36:10.0156 0x0b94 AeLookupSvc - ok
21:36:10.0166 0x0b94 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
21:36:10.0199 0x0b94 AFD - ok
21:36:10.0203 0x0b94 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
21:36:10.0223 0x0b94 agp440 - ok
21:36:10.0226 0x0b94 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
21:36:10.0245 0x0b94 ALG - ok
21:36:10.0248 0x0b94 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
21:36:10.0264 0x0b94 aliide - ok
21:36:10.0264 0x0b94 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
21:36:10.0279 0x0b94 amdide - ok
21:36:10.0279 0x0b94 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
21:36:10.0311 0x0b94 AmdK8 - ok
21:36:10.0311 0x0b94 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
21:36:10.0326 0x0b94 AmdPPM - ok
21:36:10.0326 0x0b94 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:36:10.0357 0x0b94 amdsata - ok
21:36:10.0357 0x0b94 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
21:36:10.0373 0x0b94 amdsbs - ok
21:36:10.0389 0x0b94 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:36:10.0404 0x0b94 amdxata - ok
21:36:10.0404 0x0b94 [ A0711D119BA4B48A1470C768D301013E, 536366F809125D2C2171597C8C2CB3271BE5C6B373152112E0D970749776E00A ] AppID C:\Windows\system32\drivers\appid.sys
21:36:10.0420 0x0b94 AppID - ok
21:36:10.0435 0x0b94 [ 173C90AF5B243B4DD86F95CA154CB58A, 349F566DADC96B31FDC34C4F26545FB880844DBF84E5821AA0D0CAA91FB837E1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:36:10.0453 0x0b94 AppIDSvc - ok
21:36:10.0456 0x0b94 [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo C:\Windows\System32\appinfo.dll
21:36:10.0474 0x0b94 Appinfo - ok
21:36:10.0479 0x0b94 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
21:36:10.0488 0x0b94 AppMgmt - ok
21:36:10.0504 0x0b94 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
21:36:10.0524 0x0b94 arc - ok
21:36:10.0528 0x0b94 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:36:10.0541 0x0b94 arcsas - ok
21:36:10.0557 0x0b94 [ BBCE5375F68E968D097345C59ABBF209, 597E055CEDCA6E552623A5D818E395092DE82AF10535D8FEDED0A25262CB2A69 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:36:10.0573 0x0b94 aspnet_state - ok
21:36:10.0576 0x0b94 [ 30E7D7B63BE378C6DCD31434E1C5EBEB, 6F38FBD6B45506E57D4EC6C84C83F0829F280167E14B65643F583B41AA23C18B ] aswHwid C:\Windows\system32\drivers\aswHwid.sys
21:36:10.0611 0x0b94 aswHwid - ok
21:36:10.0627 0x0b94 [ 6C3B7781075271AD9DFBD77BC7FBB9F7, AC53FD0EE1D7695219225440D3922EEF0B953F45F0ED3034CF5F1630A6B40607 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
21:36:10.0642 0x0b94 aswMonFlt - ok
21:36:10.0642 0x0b94 [ 3C04B80B49697EB7DFE5FA43620F8728, 4BC11901898348318BA807938BEA888BC54FE80ADA17C209C728F14EA4E91F21 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys
21:36:10.0658 0x0b94 aswRdr - ok
21:36:10.0673 0x0b94 [ AA8CB23B3B4A4B16F49CB54CA04FE0D9, A94D214B43EDAEC52656EA36C2A830E76C40B90E8F4BABEF4F16BA679A429586 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
21:36:10.0691 0x0b94 aswRvrt - ok
21:36:10.0707 0x0b94 [ E40965585B901AA60AF26279E09959E0, F3EACB4F1E78903D648DE75CC01642BFACA76C0605A6831EC24201292891B5DE ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
21:36:10.0753 0x0b94 aswSnx - ok
21:36:10.0753 0x0b94 [ B54E400C1B044D6D7D9EF95BA865741E, C929B53F53EFD15D3EE64FED23686A01F77E8F7BC74623D02D10D4CFEC3D6BF2 ] aswSP C:\Windows\system32\drivers\aswSP.sys
21:36:10.0785 0x0b94 aswSP - ok
21:36:10.0785 0x0b94 [ 0652346DF90731A87E4C7C9A9C45A8E0, 38B8A760B532254A8CB2FD6B922269A1B96BB5E5F243D130B4BBD09ED50DEDB8 ] aswStm C:\Windows\system32\drivers\aswStm.sys
21:36:10.0800 0x0b94 aswStm - ok
21:36:10.0800 0x0b94 [ 54230972D23E6E4D034D7CB577DC784C, 7F51E81CBAFB143982AF2C68675CF0D46DD17A9A17A8805EBF628FAE84DFF8A9 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
21:36:10.0832 0x0b94 aswVmm - ok
21:36:10.0832 0x0b94 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:36:10.0879 0x0b94 AsyncMac - ok
21:36:10.0879 0x0b94 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
21:36:10.0895 0x0b94 atapi - ok
21:36:10.0910 0x0b94 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:36:10.0926 0x0b94 AudioEndpointBuilder - ok
21:36:10.0942 0x0b94 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:36:10.0973 0x0b94 AudioSrv - ok
21:36:10.0973 0x0b94 [ 11120878E5276B367E1A10FF8C9B595B, 7C02EEF3733307C31BAC4DA9975EC017AC40D0893D88228C30FFAA536DAA73FB ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
21:36:10.0988 0x0b94 avast! Antivirus - ok
21:36:11.0051 0x0b94 [ CF5F47B708C539A40EBBDD7E4675FADA, F324726EB8E5B5A3DB74DC7E78B7141999E2677F1B607D6DEF809C1DA92D4A68 ] AvastVBoxSvc C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
21:36:11.0123 0x0b94 AvastVBoxSvc - ok
21:36:11.0131 0x0b94 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:36:11.0154 0x0b94 AxInstSV - ok
21:36:11.0163 0x0b94 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
21:36:11.0195 0x0b94 b06bdrv - ok
21:36:11.0201 0x0b94 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
21:36:11.0230 0x0b94 b57nd60a - ok
21:36:11.0235 0x0b94 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
21:36:11.0253 0x0b94 BDESVC - ok
21:36:11.0255 0x0b94 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
21:36:11.0288 0x0b94 Beep - ok
21:36:11.0301 0x0b94 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
21:36:11.0328 0x0b94 BFE - ok
21:36:11.0344 0x0b94 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
21:36:11.0398 0x0b94 BITS - ok
21:36:11.0401 0x0b94 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
21:36:11.0409 0x0b94 blbdrive - ok
21:36:11.0425 0x0b94 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:36:11.0440 0x0b94 bowser - ok
21:36:11.0440 0x0b94 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
21:36:11.0456 0x0b94 BrFiltLo - ok
21:36:11.0472 0x0b94 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
21:36:11.0487 0x0b94 BrFiltUp - ok
21:36:11.0487 0x0b94 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
21:36:11.0503 0x0b94 Browser - ok
21:36:11.0518 0x0b94 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:36:11.0551 0x0b94 Brserid - ok
21:36:11.0552 0x0b94 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:36:11.0567 0x0b94 BrSerWdm - ok
21:36:11.0567 0x0b94 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:36:11.0598 0x0b94 BrUsbMdm - ok
21:36:11.0598 0x0b94 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:36:11.0614 0x0b94 BrUsbSer - ok
21:36:11.0614 0x0b94 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
21:36:11.0645 0x0b94 BTHMODEM - ok
21:36:11.0645 0x0b94 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
21:36:11.0676 0x0b94 bthserv - ok
21:36:11.0676 0x0b94 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:36:11.0723 0x0b94 cdfs - ok
21:36:11.0723 0x0b94 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:36:11.0739 0x0b94 cdrom - ok
21:36:11.0739 0x0b94 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
21:36:11.0770 0x0b94 CertPropSvc - ok
21:36:11.0770 0x0b94 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
21:36:11.0801 0x0b94 circlass - ok
21:36:11.0801 0x0b94 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS C:\Windows\system32\CLFS.sys
21:36:11.0832 0x0b94 CLFS - ok
21:36:11.0832 0x0b94 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:36:11.0848 0x0b94 clr_optimization_v2.0.50727_32 - ok
21:36:11.0864 0x0b94 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:36:11.0864 0x0b94 clr_optimization_v2.0.50727_64 - ok
21:36:11.0879 0x0b94 [ 96C28EF71137F2C517A58A6B0E568165, 8FEF346E575D0125DFBE868925A3DC2CA92407B8FA3B047BB7D1E6AC955B9BD3 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:36:11.0895 0x0b94 clr_optimization_v4.0.30319_32 - ok
21:36:11.0895 0x0b94 [ 50EC29FBA05A121FACF0D483E17FE8C1, 1C189F973315E900CF5A32FD8EE93FFD622C9B208644950E6742C0B3F25CF551 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:36:11.0910 0x0b94 clr_optimization_v4.0.30319_64 - ok
21:36:11.0910 0x0b94 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
21:36:11.0942 0x0b94 CmBatt - ok
21:36:11.0942 0x0b94 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:36:11.0957 0x0b94 cmdide - ok
21:36:11.0973 0x0b94 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG C:\Windows\system32\Drivers\cng.sys
21:36:12.0004 0x0b94 CNG - ok
21:36:12.0004 0x0b94 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
21:36:12.0020 0x0b94 Compbatt - ok
21:36:12.0020 0x0b94 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
21:36:12.0051 0x0b94 CompositeBus - ok
21:36:12.0051 0x0b94 COMSysApp - ok
21:36:12.0066 0x0b94 [ 8492FA3B8E6C23805A61032A2C66FD54, 13248B60A1D119694DBAC464CCF0D534CD8ADC24329394F0E31D856746791DF5 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
21:36:12.0082 0x0b94 cphs - ok
21:36:12.0082 0x0b94 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
21:36:12.0098 0x0b94 crcdisk - ok
21:36:12.0113 0x0b94 [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:36:12.0129 0x0b94 CryptSvc - ok
21:36:12.0144 0x0b94 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC C:\Windows\system32\drivers\csc.sys
21:36:12.0176 0x0b94 CSC - ok
21:36:12.0176 0x0b94 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService C:\Windows\System32\cscsvc.dll
21:36:12.0207 0x0b94 CscService - ok
21:36:12.0222 0x0b94 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:36:12.0254 0x0b94 DcomLaunch - ok
21:36:12.0254 0x0b94 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
21:36:12.0285 0x0b94 defragsvc - ok
21:36:12.0347 0x0b94 [ 0B24043732807EE3AA25389356F4DE7C, 6A9A65B38968FF704C3938BEF5E6C1226447FF4F78997473B1694EA8D3D519DF ] DevoloNetworkService C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
21:36:12.0410 0x0b94 DevoloNetworkService - ok
21:36:12.0410 0x0b94 [ CF1F6326AC44C42F4615D4BD53188AC5, 28DC32F1957918C3D5DE72415CC32A51C6885CAA38119FE475D2631269D3B9B3 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:36:12.0443 0x0b94 DfsC - ok
21:36:12.0443 0x0b94 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
21:36:12.0474 0x0b94 Dhcp - ok
21:36:12.0490 0x0b94 [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack C:\Windows\system32\diagtrack.dll
21:36:12.0521 0x0b94 DiagTrack - ok
21:36:12.0552 0x0b94 [ 20B49F00BBE051BEC2727EAAA1BC5203, 03103CD6409E926A67232F5BAB29FA7A8D9A99E20AD059EC71754F5E627F753C ] Disc Soft Pro Bus Service C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe
21:36:12.0583 0x0b94 Disc Soft Pro Bus Service - ok
21:36:12.0583 0x0b94 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
21:36:12.0614 0x0b94 discache - ok
21:36:12.0614 0x0b94 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys
21:36:12.0646 0x0b94 Disk - ok
21:36:12.0646 0x0b94 [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
21:36:12.0661 0x0b94 dmvsc - ok
21:36:12.0677 0x0b94 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:36:12.0692 0x0b94 Dnscache - ok
21:36:12.0692 0x0b94 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
21:36:12.0724 0x0b94 dot3svc - ok
21:36:12.0739 0x0b94 [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] dot4 C:\Windows\system32\DRIVERS\Dot4.sys
21:36:12.0755 0x0b94 dot4 - ok
21:36:12.0755 0x0b94 [ E9F5969233C5D89F3C35E3A66A52A361, C4BD35795C78FB11E6022372CB25DEB570730EFDAD3DC1584368235FF622638C ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
21:36:12.0786 0x0b94 Dot4Print - ok
21:36:12.0786 0x0b94 [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
21:36:12.0802 0x0b94 dot4usb - ok
21:36:12.0817 0x0b94 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
21:36:12.0848 0x0b94 DPS - ok
21:36:12.0848 0x0b94 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:36:12.0864 0x0b94 drmkaud - ok
21:36:12.0864 0x0b94 [ 5B4F7E7CA76F304C17BCB193FDFE9D64, 67E78F4A8AC0E4225EEFE798186FCF940CFF29575C27BBC7D608F1425E6FAC30 ] dtproscsibus C:\Windows\system32\DRIVERS\dtproscsibus.sys
21:36:12.0880 0x0b94 dtproscsibus - ok
21:36:12.0895 0x0b94 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:36:12.0942 0x0b94 DXGKrnl - ok
21:36:12.0958 0x0b94 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
21:36:12.0989 0x0b94 EapHost - ok
21:36:13.0036 0x0b94 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
21:36:13.0098 0x0b94 ebdrv - ok
21:36:13.0098 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] EFS C:\Windows\System32\lsass.exe
21:36:13.0114 0x0b94 EFS - ok
21:36:13.0129 0x0b94 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:36:13.0160 0x0b94 ehRecvr - ok
21:36:13.0160 0x0b94 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
21:36:13.0176 0x0b94 ehSched - ok
21:36:13.0192 0x0b94 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
21:36:13.0223 0x0b94 elxstor - ok
21:36:13.0223 0x0b94 [ 9ED89A533D125C273F93C6A524A1A118, 0CB4282509F455538CF4F9276184CDCC3CF783B0F0D45BB136DB02063983B0C3 ] epp64 C:\EEK\bin\epp64.sys
21:36:13.0254 0x0b94 epp64 - ok
21:36:13.0254 0x0b94 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:36:13.0270 0x0b94 ErrDev - ok
21:36:13.0285 0x0b94 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
21:36:13.0316 0x0b94 EventSystem - ok
21:36:13.0316 0x0b94 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
21:36:13.0363 0x0b94 exfat - ok
21:36:13.0363 0x0b94 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:36:13.0394 0x0b94 fastfat - ok
21:36:13.0410 0x0b94 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
21:36:13.0441 0x0b94 Fax - ok
21:36:13.0441 0x0b94 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
21:36:13.0457 0x0b94 fdc - ok
21:36:13.0472 0x0b94 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
21:36:13.0488 0x0b94 fdPHost - ok
21:36:13.0504 0x0b94 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
21:36:13.0519 0x0b94 FDResPub - ok
21:36:13.0535 0x0b94 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:36:13.0550 0x0b94 FileInfo - ok
21:36:13.0550 0x0b94 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:36:13.0600 0x0b94 Filetrace - ok
21:36:13.0604 0x0b94 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
21:36:13.0630 0x0b94 flpydisk - ok
21:36:13.0639 0x0b94 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:36:13.0669 0x0b94 FltMgr - ok
21:36:13.0690 0x0b94 [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache C:\Windows\system32\FntCache.dll
21:36:13.0726 0x0b94 FontCache - ok
21:36:13.0731 0x0b94 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:36:13.0745 0x0b94 FontCache3.0.0.0 - ok
21:36:13.0748 0x0b94 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:36:13.0761 0x0b94 FsDepends - ok
21:36:13.0761 0x0b94 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:36:13.0776 0x0b94 Fs_Rec - ok
21:36:13.0792 0x0b94 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:36:13.0807 0x0b94 fvevol - ok
21:36:13.0807 0x0b94 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:36:13.0839 0x0b94 gagp30kx - ok
21:36:13.0854 0x0b94 [ FE91DC3D9A696CCDDB9F51C25ACBC53A, 4E1A7BB3AC57530A1DF8AB7E981087275E89E6AC629F881C98E40F13150ED532 ] gpsvc C:\Windows\System32\gpsvc.dll
21:36:13.0870 0x0b94 gpsvc - ok
21:36:13.0888 0x0b94 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:36:13.0904 0x0b94 gupdate - ok
21:36:13.0908 0x0b94 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:36:13.0925 0x0b94 gupdatem - ok
21:36:13.0930 0x0b94 [ 3F95931AEEA6DEF9FC02C565D2EFC145, A77CE97B0143A035D7C2655C2BF31008D4D555EF63CCF188EC58D5611782E635 ] hcmon C:\Windows\system32\drivers\hcmon.sys
21:36:13.0956 0x0b94 hcmon - ok
21:36:13.0961 0x0b94 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:36:13.0984 0x0b94 hcw85cir - ok
21:36:13.0993 0x0b94 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:36:14.0023 0x0b94 HdAudAddService - ok
21:36:14.0028 0x0b94 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
21:36:14.0033 0x0984 Object required for P2P: [ 11120878E5276B367E1A10FF8C9B595B ] avast! Antivirus
21:36:14.0056 0x0b94 HDAudBus - ok
21:36:14.0060 0x0b94 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
21:36:14.0067 0x0b94 HidBatt - ok
21:36:14.0083 0x0b94 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
21:36:14.0099 0x0b94 HidBth - ok
21:36:14.0099 0x0b94 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
21:36:14.0130 0x0b94 HidIr - ok
21:36:14.0130 0x0b94 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
21:36:14.0161 0x0b94 hidserv - ok
21:36:14.0161 0x0b94 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:36:14.0194 0x0b94 HidUsb - ok
21:36:14.0200 0x0b94 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:36:14.0234 0x0b94 hkmsvc - ok
21:36:14.0241 0x0b94 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:36:14.0262 0x0b94 HomeGroupListener - ok
21:36:14.0268 0x0b94 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:36:14.0273 0x0b94 HomeGroupProvider - ok
21:36:14.0288 0x0b94 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:36:14.0309 0x0b94 HpSAMD - ok
21:36:14.0321 0x0b94 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:36:14.0352 0x0b94 HTTP - ok
21:36:14.0352 0x0b94 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:36:14.0383 0x0b94 hwpolicy - ok
21:36:14.0383 0x0b94 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
21:36:14.0399 0x0b94 i8042prt - ok
21:36:14.0414 0x0b94 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:36:14.0446 0x0b94 iaStorV - ok
21:36:14.0466 0x0b94 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:36:14.0489 0x0b94 idsvc - ok
21:36:14.0489 0x0b94 IEEtwCollectorService - ok
21:36:14.0558 0x0b94 [ B12F7F8180BCD99B29AE2A6534857EA1, D095DF08A4F3510B96DE55A69ACCDEA0AACC7244447A858041D4C511835BA066 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
21:36:14.0650 0x0b94 igfx - ok
21:36:14.0661 0x0b94 [ 181722D8E78521191B9B83109AA011CA, 42255FD631D269283686DE964F512345C2C3A257E988A950A12EE9A7F815234E ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
21:36:14.0671 0x0b94 igfxCUIService1.0.0.0 - ok
21:36:14.0671 0x0b94 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
21:36:14.0686 0x0b94 iirsp - ok
21:36:14.0717 0x0b94 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
21:36:14.0733 0x0b94 IKEEXT - ok
21:36:14.0749 0x0b94 [ 890144FA6AB42F2B54EE633BF96A019A, 8741904C66170BA11C78D31681E3759537C0BF2338538678BC64234DB8FDE93F ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
21:36:14.0764 0x0b94 IntcDAud - ok
21:36:14.0780 0x0b94 [ DAE6C3099D291EED8922A65C29ABCF52, AD0A932345382824122F84AF97A8609BAE1B916A3B9FD608779A1411E37D3643 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:36:14.0795 0x0b94 Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
21:36:16.0626 0x0984 Object send P2P result: true
21:36:17.0250 0x0b94 Detect skipped due to KSN trusted
21:36:17.0250 0x0b94 Intel(R) Capability Licensing Service Interface - ok
21:36:17.0297 0x0b94 [ D45226E3E7A25F1E7CE8DF8FD0A2A098, 7BD74E9E3CB0A83D26BA3FD8177C6B9BA46A8695B6569CF7887FDC87947DA2D6 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
21:36:17.0343 0x0b94 Intel(R) Capability Licensing Service TCP IP Interface - ok
21:36:17.0343 0x0b94 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
21:36:17.0359 0x0b94 intelide - ok
21:36:17.0359 0x0b94 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:36:17.0390 0x0b94 intelppm - ok
21:36:17.0390 0x0b94 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:36:17.0421 0x0b94 IPBusEnum - ok
21:36:17.0421 0x0b94 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:36:17.0453 0x0b94 IpFilterDriver - ok
21:36:17.0468 0x0b94 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:36:17.0499 0x0b94 iphlpsvc - ok
21:36:17.0499 0x0b94 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:36:17.0515 0x0b94 IPMIDRV - ok
21:36:17.0531 0x0b94 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:36:17.0562 0x0b94 IPNAT - ok
21:36:17.0562 0x0b94 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:36:17.0593 0x0b94 IRENUM - ok
21:36:17.0593 0x0b94 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:36:17.0609 0x0b94 isapnp - ok
21:36:17.0624 0x0b94 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:36:17.0640 0x0b94 iScsiPrt - ok
21:36:17.0640 0x0b94 [ 45392E76EE30DC9C8F0181C785F0BA48, 7FB522E1AA9B877B9FB1A29C2ADC42EA794E8864AD2411AD275F00F00547F8F3 ] iusb3hcs C:\Windows\system32\DRIVERS\iusb3hcs.sys
21:36:17.0655 0x0b94 iusb3hcs - ok
21:36:17.0671 0x0b94 [ C6E8FB7FF41877378CCB30DE6E9941DF, CA808A00C0CC21C1C7BE54F0D1E5D3F24C0032BE821C064E0A63901F20F3C6BC ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys
21:36:17.0702 0x0b94 iusb3hub - ok
21:36:17.0718 0x0b94 [ 6FBA980433B2B21604CE990FBF542D3F, ACB35A5558DD9EF9A339C9D061207AF5527D3AEFC9AC99AB6CFBA1CE92F8B62D ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys
21:36:17.0749 0x0b94 iusb3xhc - ok
21:36:17.0765 0x0b94 [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:36:17.0765 0x0b94 jhi_service - ok
21:36:17.0780 0x0b94 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:36:17.0796 0x0b94 kbdclass - ok
21:36:17.0796 0x0b94 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:36:17.0827 0x0b94 kbdhid - ok
21:36:17.0827 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] KeyIso C:\Windows\system32\lsass.exe
21:36:17.0843 0x0b94 KeyIso - ok
21:36:17.0843 0x0b94 [ A405647429DE231CD954D93F792CFBA2, EDE6095A20FE10EB26B3018457A44807A120508E6C514F2EAC12F5BA1F74841E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:36:17.0858 0x0b94 KSecDD - ok
21:36:17.0874 0x0b94 [ E4DC0909B5EACB5BF50F6252095BCFF2, 18779648B7FD9D3DFFD8F314E2197962DF98884CC9F025BC5D884984C1C0759D ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:36:17.0889 0x0b94 KSecPkg - ok
21:36:17.0889 0x0b94 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:36:17.0921 0x0b94 ksthunk - ok
21:36:17.0936 0x0b94 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
21:36:17.0967 0x0b94 KtmRm - ok
21:36:17.0967 0x0b94 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
21:36:17.0999 0x0b94 LanmanServer - ok
21:36:18.0014 0x0b94 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:36:18.0045 0x0b94 LanmanWorkstation - ok
21:36:18.0045 0x0b94 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:36:18.0077 0x0b94 lltdio - ok
21:36:18.0092 0x0b94 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:36:18.0123 0x0b94 lltdsvc - ok
21:36:18.0123 0x0b94 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:36:18.0155 0x0b94 lmhosts - ok
21:36:18.0170 0x0b94 [ 08E2B577DB95156F9A658C988EE71F5D, D229FFD97EE9478169D2418A722FD2AD6AD10108FF1B0156BE9A1ADF38B5633A ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:36:18.0186 0x0b94 LMS - ok
21:36:18.0186 0x0b94 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
21:36:18.0217 0x0b94 LSI_FC - ok
21:36:18.0217 0x0b94 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:36:18.0233 0x0b94 LSI_SAS - ok
21:36:18.0248 0x0b94 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
21:36:18.0264 0x0b94 LSI_SAS2 - ok
21:36:18.0264 0x0b94 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
21:36:18.0279 0x0b94 LSI_SCSI - ok
21:36:18.0295 0x0b94 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
21:36:18.0326 0x0b94 luafv - ok
21:36:18.0326 0x0b94 [ A8D28D5B3E2A528D1EF0E338E44F2820, 40D1EFDD253BC0A0D984A5AD8A2721C3E83B15F14D538204714E6D5B00D92CEB ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
21:36:18.0342 0x0b94 MBAMProtector - ok
21:36:18.0373 0x0b94 [ 301E3FDFCF33640BB8763BA444BC5093, 362B069BB9A313A06B376CE27E6F7F8D569F6CA39A8ABC96D9DF231EE462C604 ] MBAMScheduler C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
21:36:18.0420 0x0b94 MBAMScheduler - ok
21:36:18.0435 0x0b94 [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
21:36:18.0467 0x0b94 MBAMService - ok
21:36:18.0467 0x0b94 [ 8F22037D3F5A6BB676525D825A1388B9, 2AAC748D46136DFA1BE45150BF0AB7707D45391CAC1F63B964D341D11B135C91 ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
21:36:18.0498 0x0b94 MBAMSwissArmy - ok
21:36:18.0498 0x0b94 [ AE757332EA130E94E646621CC695B52A, E688CF34A4206F32B5C7301119D8459C3456FC178FA1DAA6215CE15F2C824C43 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
21:36:18.0513 0x0b94 MBAMWebAccessControl - ok
21:36:18.0529 0x0b94 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:36:18.0545 0x0b94 Mcx2Svc - ok
21:36:18.0545 0x0b94 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
21:36:18.0560 0x0b94 megasas - ok
21:36:18.0576 0x0b94 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
21:36:18.0591 0x0b94 MegaSR - ok
21:36:18.0591 0x0b94 [ E0EF6C1399A9B1AAA0B28590411BED04, 10C193D1ED434A6DC2AD8C450012B9AF1C848A0A0B3B775F13495648FB77E009 ] MEIx64 C:\Windows\system32\DRIVERS\TeeDriverx64.sys
21:36:18.0607 0x0b94 MEIx64 - ok
21:36:18.0623 0x0b94 Microsoft SharePoint Workspace Audit Service - ok
21:36:18.0623 0x0b94 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
21:36:18.0654 0x0b94 MMCSS - ok
21:36:18.0654 0x0b94 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
21:36:18.0701 0x0b94 Modem - ok
21:36:18.0701 0x0b94 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:36:18.0716 0x0b94 monitor - ok
21:36:18.0732 0x0b94 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:36:18.0747 0x0b94 mouclass - ok
21:36:18.0747 0x0b94 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:36:18.0763 0x0b94 mouhid - ok
21:36:18.0779 0x0b94 [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:36:18.0794 0x0b94 mountmgr - ok
21:36:18.0794 0x0b94 [ 269BDB3CB77EB77BABE2862BEAB1F208, EC693365C73D59244CB77E181042128A9901BA5C1109CD4F1B9A2008DF1F9582 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:36:18.0810 0x0b94 MozillaMaintenance - ok
21:36:18.0810 0x0b94 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
21:36:18.0841 0x0b94 mpio - ok
21:36:18.0841 0x0b94 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:36:18.0872 0x0b94 mpsdrv - ok
21:36:18.0888 0x0b94 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:36:18.0935 0x0b94 MpsSvc - ok
21:36:18.0935 0x0b94 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:36:18.0966 0x0b94 MRxDAV - ok
21:36:18.0966 0x0b94 [ 43E1F4B0EFDC244D2A83995CCD7846F7, B8FB3CB6C736E20399AF3164197B14E977DDEC8FD164564501A328A8A3A30267 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:36:18.0997 0x0b94 mrxsmb - ok
21:36:18.0997 0x0b94 [ 62CEA59FF56B66154E08BD51D87392C2, 5DC63583E417659139FACD2365C2F8F3C9867E331F7374BD4F6C6E2386B5F746 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:36:19.0028 0x0b94 mrxsmb10 - ok
21:36:19.0028 0x0b94 [ 7D65B5E9573A26C204AA547457DBF544, CE88A733D031DEDBA6ADADB7D9911B3D151A2DDB566A65E0C9E1F07B1A4364AF ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:36:19.0059 0x0b94 mrxsmb20 - ok
21:36:19.0059 0x0b94 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
21:36:19.0075 0x0b94 msahci - ok
21:36:19.0091 0x0b94 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:36:19.0106 0x0b94 msdsm - ok
21:36:19.0106 0x0b94 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
21:36:19.0137 0x0b94 MSDTC - ok
21:36:19.0137 0x0b94 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:36:19.0169 0x0b94 Msfs - ok
21:36:19.0184 0x0b94 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:36:19.0215 0x0b94 mshidkmdf - ok
21:36:19.0215 0x0b94 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:36:19.0231 0x0b94 msisadrv - ok
21:36:19.0231 0x0b94 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:36:19.0262 0x0b94 MSiSCSI - ok
21:36:19.0278 0x0b94 msiserver - ok
21:36:19.0278 0x0b94 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:36:19.0309 0x0b94 MSKSSRV - ok
21:36:19.0309 0x0b94 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:36:19.0340 0x0b94 MSPCLOCK - ok
21:36:19.0356 0x0b94 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:36:19.0396 0x0b94 MSPQM - ok
21:36:19.0407 0x0b94 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:36:19.0437 0x0b94 MsRPC - ok
21:36:19.0446 0x0b94 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
21:36:19.0465 0x0b94 mssmbios - ok
21:36:19.0471 0x0b94 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:36:19.0504 0x0b94 MSTEE - ok
21:36:19.0508 0x0b94 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
21:36:19.0528 0x0b94 MTConfig - ok
21:36:19.0534 0x0b94 [ AA0C2BA3782E92BD85E2264BE418E67C, 8B0953926E83274DF16670F1EF6F4E302F7EE17418F486975C353A406850298C ] Mup C:\Windows\system32\Drivers\mup.sys
21:36:19.0544 0x0b94 Mup - ok
21:36:19.0560 0x0b94 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
21:36:19.0591 0x0b94 napagent - ok
21:36:19.0607 0x0b94 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:36:19.0640 0x0b94 NativeWifiP - ok
21:36:19.0657 0x0b94 [ 988CDC4DAE2186F3A5ED6EE7D3E6B5CA, DB40F7705F0475FF774452E365152EBEDDC77D8ACE48419DABE02DD385C6B725 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
21:36:19.0680 0x0b94 NAUpdate - ok
21:36:19.0697 0x0b94 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
21:36:19.0728 0x0b94 NDIS - ok
21:36:19.0744 0x0b94 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:36:19.0775 0x0b94 NdisCap - ok
21:36:19.0775 0x0b94 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:36:19.0806 0x0b94 NdisTapi - ok
21:36:19.0806 0x0b94 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:36:19.0854 0x0b94 Ndisuio - ok
21:36:19.0861 0x0b94 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:36:19.0903 0x0b94 NdisWan - ok
21:36:19.0908 0x0b94 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:36:19.0943 0x0b94 NDProxy - ok
21:36:19.0948 0x0b94 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:36:19.0979 0x0b94 NetBIOS - ok
21:36:19.0979 0x0b94 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:36:20.0026 0x0b94 NetBT - ok
21:36:20.0026 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] Netlogon C:\Windows\system32\lsass.exe
21:36:20.0041 0x0b94 Netlogon - ok
21:36:20.0041 0x0b94 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
21:36:20.0088 0x0b94 Netman - ok
21:36:20.0088 0x0b94 [ 5C0EAF5D8A46CBBC6ECC0225A9DEFAA4, CEAE971E8C8914A109318D31CB4856A86129727715A9510F73AFC8EB58D73FB0 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:36:20.0117 0x0b94 NetMsmqActivator - ok
21:36:20.0123 0x0b94 [ 5C0EAF5D8A46CBBC6ECC0225A9DEFAA4, CEAE971E8C8914A109318D31CB4856A86129727715A9510F73AFC8EB58D73FB0 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:36:20.0128 0x0b94 NetPipeActivator - ok
21:36:20.0143 0x0b94 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
21:36:20.0175 0x0b94 netprofm - ok
21:36:20.0175 0x0b94 [ 5C0EAF5D8A46CBBC6ECC0225A9DEFAA4, CEAE971E8C8914A109318D31CB4856A86129727715A9510F73AFC8EB58D73FB0 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:36:20.0192 0x0b94 NetTcpActivator - ok
21:36:20.0208 0x0b94 [ 5C0EAF5D8A46CBBC6ECC0225A9DEFAA4, CEAE971E8C8914A109318D31CB4856A86129727715A9510F73AFC8EB58D73FB0 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:36:20.0223 0x0b94 NetTcpPortSharing - ok
21:36:20.0223 0x0b94 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
21:36:20.0239 0x0b94 nfrd960 - ok
21:36:20.0255 0x0b94 [ 8AED7DEF1F9659C911E1B1C9DD3CE8CD, 3ECFF30C8D8E7CF4514055F4E63B36C900EF104ECC75F804B11AF6307874153B ] ngvss C:\Windows\system32\drivers\ngvss.sys
21:36:20.0270 0x0b94 ngvss - ok
21:36:20.0270 0x0b94 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
21:36:20.0301 0x0b94 NlaSvc - ok
21:36:20.0301 0x0b94 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:36:20.0333 0x0b94 Npfs - ok
21:36:20.0348 0x0b94 [ 49697C2C761ACB5C0DE99CC8FE93E95B, 02EEA7FB21D28B235A05FE0A6061170F366470EF6E45C9B21D7C8C0E7C728FC5 ] NPF_devolo C:\Windows\sysWOW64\drivers\npf_devolo.sys
21:36:20.0364 0x0b94 NPF_devolo - ok
21:36:20.0379 0x0b94 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
21:36:20.0411 0x0b94 nsi - ok
21:36:20.0411 0x0b94 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:36:20.0449 0x0b94 nsiproxy - ok
21:36:20.0481 0x0b94 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:36:20.0537 0x0b94 Ntfs - ok
21:36:20.0543 0x0b94 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
21:36:20.0576 0x0b94 Null - ok
21:36:20.0583 0x0b94 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:36:20.0606 0x0b94 nvraid - ok
21:36:20.0613 0x0b94 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:36:20.0636 0x0b94 nvstor - ok
21:36:20.0642 0x0b94 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:36:20.0663 0x0b94 nv_agp - ok
21:36:20.0669 0x0b94 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:36:20.0692 0x0b94 ohci1394 - ok
21:36:20.0699 0x0b94 [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:36:20.0714 0x0b94 ose - ok
21:36:20.0776 0x0b94 [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
21:36:20.0854 0x0b94 osppsvc - ok
21:36:20.0870 0x0b94 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:36:20.0901 0x0b94 p2pimsvc - ok
21:36:20.0917 0x0b94 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
21:36:20.0932 0x0b94 p2psvc - ok
21:36:20.0932 0x0b94 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:36:20.0964 0x0b94 Parport - ok
21:36:20.0981 0x0b94 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:36:21.0002 0x0b94 partmgr - ok
21:36:21.0010 0x0b94 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:36:21.0031 0x0b94 PcaSvc - ok
21:36:21.0038 0x0b94 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
21:36:21.0063 0x0b94 pci - ok
21:36:21.0068 0x0b94 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
21:36:21.0083 0x0b94 pciide - ok
21:36:21.0083 0x0b94 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
21:36:21.0119 0x0b94 pcmcia - ok
21:36:21.0124 0x0b94 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
21:36:21.0142 0x0b94 pcw - ok
21:36:21.0158 0x0b94 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:36:21.0174 0x0b94 PEAUTH - ok
21:36:21.0205 0x0b94 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
21:36:21.0237 0x0b94 PeerDistSvc - ok
21:36:21.0253 0x0b94 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:36:21.0268 0x0b94 PerfHost - ok
21:36:21.0301 0x0b94 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
21:36:21.0348 0x0b94 pla - ok
21:36:21.0348 0x0b94 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:36:21.0380 0x0b94 PlugPlay - ok
21:36:21.0380 0x0b94 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:36:21.0396 0x0b94 PNRPAutoReg - ok
21:36:21.0412 0x0b94 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:36:21.0427 0x0b94 PNRPsvc - ok
21:36:21.0443 0x0b94 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:36:21.0474 0x0b94 PolicyAgent - ok
21:36:21.0490 0x0b94 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
21:36:21.0521 0x0b94 Power - ok
21:36:21.0521 0x0b94 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:36:21.0552 0x0b94 PptpMiniport - ok
21:36:21.0568 0x0b94 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
21:36:21.0583 0x0b94 Processor - ok
21:36:21.0599 0x0b94 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
21:36:21.0614 0x0b94 ProfSvc - ok
21:36:21.0614 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] ProtectedStorage C:\Windows\system32\lsass.exe
21:36:21.0642 0x0b94 ProtectedStorage - ok
21:36:21.0648 0x0b94 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:36:21.0686 0x0b94 Psched - ok
21:36:21.0713 0x0b94 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
21:36:21.0766 0x0b94 ql2300 - ok
21:36:21.0773 0x0b94 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
21:36:21.0795 0x0b94 ql40xx - ok
21:36:21.0804 0x0b94 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
21:36:21.0827 0x0b94 QWAVE - ok
21:36:21.0832 0x0b94 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:36:21.0859 0x0b94 QWAVEdrv - ok
21:36:21.0864 0x0b94 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:36:21.0904 0x0b94 RasAcd - ok
21:36:21.0911 0x0b94 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:36:21.0951 0x0b94 RasAgileVpn - ok
21:36:21.0958 0x0b94 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
21:36:21.0989 0x0b94 RasAuto - ok
21:36:21.0996 0x0b94 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:36:22.0031 0x0b94 Rasl2tp - ok
21:36:22.0037 0x0b94 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
21:36:22.0068 0x0b94 RasMan - ok
21:36:22.0068 0x0b94 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:36:22.0099 0x0b94 RasPppoe - ok
21:36:22.0115 0x0b94 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:36:22.0154 0x0b94 RasSstp - ok
21:36:22.0164 0x0b94 [ 71B6F78D6444CCE6F77BC42917A4E8F7, 34927A2C1CA349D251A327ED1F30018B065A8E6B886D9B5080A8AE2F6A8C0914 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:36:22.0192 0x0b94 rdbss - ok
21:36:22.0193 0x0b94 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
21:36:22.0208 0x0b94 rdpbus - ok
21:36:22.0224 0x0b94 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:36:22.0265 0x0b94 RDPCDD - ok
21:36:22.0278 0x0b94 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
21:36:22.0307 0x0b94 RDPDR - ok
21:36:22.0313 0x0b94 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:36:22.0347 0x0b94 RDPENCDD - ok
21:36:22.0356 0x0b94 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:36:22.0390 0x0b94 RDPREFMP - ok
21:36:22.0396 0x0b94 [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:36:22.0412 0x0b94 RdpVideoMiniport - ok
21:36:22.0428 0x0b94 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:36:22.0443 0x0b94 RDPWD - ok
21:36:22.0459 0x0b94 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:36:22.0474 0x0b94 rdyboost - ok
21:36:22.0506 0x0b94 [ 5A26B315F994C26E6DC5EB96BB8EB5B9, 5200C6F81D8FC9DBCE3432186DB3AA61BA11E583A324F770181C1D553118E5FD ] ReflectService.exe C:\Program Files\Macrium\Reflect\ReflectService.exe
21:36:22.0536 0x0b94 ReflectService.exe - ok
21:36:22.0544 0x0b94 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:36:22.0564 0x0b94 RemoteAccess - ok
21:36:22.0579 0x0b94 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:36:22.0611 0x0b94 RemoteRegistry - ok
21:36:22.0611 0x0b94 [ 7B04C9843921AB1F695FB395422C5360, C9B02BE0384357FD242613C2A12029B45322AF9A795CD69F33500CA7530899A7 ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
21:36:22.0626 0x0b94 RimUsb - ok
21:36:22.0642 0x0b94 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:36:22.0657 0x0b94 RpcEptMapper - ok
21:36:22.0673 0x0b94 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
21:36:22.0689 0x0b94 RpcLocator - ok
21:36:22.0704 0x0b94 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
21:36:22.0735 0x0b94 RpcSs - ok
21:36:22.0753 0x0b94 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:36:22.0797 0x0b94 rspndr - ok
21:36:22.0810 0x0b94 [ EC7F0030D58886B0FCD3EEFB1C51F8E2, 08BD4041B322605E57F676219EF2853E0EAD0E78AD22B7A71FDE4F1E8D6CF04B ] rt61x64 C:\Windows\system32\DRIVERS\netr6164.sys
21:36:22.0841 0x0b94 rt61x64 - ok
21:36:22.0860 0x0b94 [ EB287A54E91FE224FCDB12F0B6C3FA05, 45E0A93A9147CF747E388DCDA1EF3500AFFB29A6C0FEA87A492028505B193144 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
21:36:22.0898 0x0b94 RTL8167 - ok
21:36:22.0903 0x0b94 [ 1E5EBB4FB8B3B0E9DE7AC83759F9C153, 63F701149DBF3D9E60EF70413932E2A42E16C5E9D2E866B1FB73CCE317EDA03A ] RTL8192Ce C:\Windows\system32\DRIVERS\rtl8192Ce.sys
21:36:22.0950 0x0b94 RTL8192Ce - ok
21:36:22.0950 0x0b94 [ E16B7C030A05EF649B18FAB0A93D871F, 0F532D534A93D71650E2F7AF677419A6B38CE3142C98983565F1D759E544A4ED ] RtNdPt60 C:\Windows\system32\DRIVERS\RtNdPt60.sys
21:36:22.0965 0x0b94 RtNdPt60 - ok
21:36:22.0981 0x0b94 [ 66B7587714BC9BD850D0A49041B90CA0, 48FCA14E6D4851BFA7C84536771F409CAD2EE7F5DE5F9EC01901B5A12E27BBA9 ] RTTEAMPT C:\Windows\system32\DRIVERS\RtTeam620.sys
21:36:22.0997 0x0b94 RTTEAMPT - ok
21:36:22.0997 0x0b94 [ C74798D1A2743C102154BD7871D92833, 521A4C9D8E614F2C12E4435FFC8703F7AFA98B0A0DC64F6615ECB4FE62F422EC ] RTVLANPT C:\Windows\system32\DRIVERS\RtVlan620.sys
21:36:23.0026 0x0b94 RTVLANPT - ok
21:36:23.0031 0x0b94 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap C:\Windows\system32\drivers\vms3cap.sys
21:36:23.0050 0x0b94 s3cap - ok
21:36:23.0056 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] SamSs C:\Windows\system32\lsass.exe
21:36:23.0068 0x0b94 SamSs - ok
21:36:23.0068 0x0b94 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:36:23.0084 0x0b94 sbp2port - ok
21:36:23.0099 0x0b94 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:36:23.0131 0x0b94 SCardSvr - ok
21:36:23.0131 0x0b94 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:36:23.0162 0x0b94 scfilter - ok
21:36:23.0193 0x0b94 [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule C:\Windows\system32\schedsvc.dll
21:36:23.0224 0x0b94 Schedule - ok
21:36:23.0224 0x0b94 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
21:36:23.0255 0x0b94 SCPolicySvc - ok
21:36:23.0271 0x0b94 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:36:23.0287 0x0b94 SDRSVC - ok
21:36:23.0287 0x0b94 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:36:23.0302 0x0b94 secdrv - ok
21:36:23.0318 0x0b94 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
21:36:23.0348 0x0b94 seclogon - ok
21:36:23.0354 0x0b94 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
21:36:23.0385 0x0b94 SENS - ok
21:36:23.0391 0x0b94 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:36:23.0408 0x0b94 SensrSvc - ok
21:36:23.0415 0x0b94 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:36:23.0436 0x0b94 Serenum - ok
21:36:23.0443 0x0b94 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:36:23.0467 0x0b94 Serial - ok
21:36:23.0473 0x0b94 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
21:36:23.0494 0x0b94 sermouse - ok
21:36:23.0514 0x0b94 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
21:36:23.0545 0x0b94 SessionEnv - ok
21:36:23.0551 0x0b94 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:36:23.0573 0x0b94 sffdisk - ok
21:36:23.0578 0x0b94 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:36:23.0601 0x0b94 sffp_mmc - ok
21:36:23.0607 0x0b94 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:36:23.0629 0x0b94 sffp_sd - ok
21:36:23.0635 0x0b94 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
21:36:23.0656 0x0b94 sfloppy - ok
21:36:23.0667 0x0b94 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:36:23.0699 0x0b94 SharedAccess - ok
21:36:23.0699 0x0b94 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:36:23.0746 0x0b94 ShellHWDetection - ok
21:36:23.0746 0x0b94 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
21:36:23.0761 0x0b94 SiSRaid2 - ok
21:36:23.0777 0x0b94 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:36:23.0792 0x0b94 SiSRaid4 - ok
21:36:23.0792 0x0b94 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:36:23.0824 0x0b94 Smb - ok
21:36:23.0839 0x0b94 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:36:23.0855 0x0b94 SNMPTRAP - ok
21:36:23.0870 0x0b94 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
21:36:23.0886 0x0b94 spldr - ok
21:36:23.0902 0x0b94 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
21:36:23.0917 0x0b94 Spooler - ok
21:36:23.0980 0x0b94 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
21:36:24.0058 0x0b94 sppsvc - ok
21:36:24.0073 0x0b94 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:36:24.0104 0x0b94 sppuinotify - ok
21:36:24.0120 0x0b94 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
21:36:24.0151 0x0b94 srv - ok
21:36:24.0151 0x0b94 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:36:24.0182 0x0b94 srv2 - ok
21:36:24.0198 0x0b94 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:36:24.0214 0x0b94 srvnet - ok
21:36:24.0229 0x0b94 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:36:24.0260 0x0b94 SSDPSRV - ok
21:36:24.0260 0x0b94 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:36:24.0292 0x0b94 SstpSvc - ok
21:36:24.0307 0x0b94 [ 3BF022F8064A83A23DF90971DD78CA83, 85754DF1C6DE745ADF9A0BAB1948AFF2CA16C4569128DA90AF610D199E621BF4 ] StarMoney 9.0 OnlineUpdate C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
21:36:24.0338 0x0b94 StarMoney 9.0 OnlineUpdate - ok
21:36:24.0338 0x0b94 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
21:36:24.0354 0x0b94 stexstor - ok
21:36:24.0370 0x0b94 [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
21:36:24.0385 0x0b94 StillCam - ok
21:36:24.0401 0x0b94 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
21:36:24.0432 0x0b94 stisvc - ok
21:36:24.0432 0x0b94 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt C:\Windows\system32\drivers\vmstorfl.sys
21:36:24.0448 0x0b94 storflt - ok
21:36:24.0463 0x0b94 [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc C:\Windows\system32\storsvc.dll
21:36:24.0479 0x0b94 StorSvc - ok
21:36:24.0479 0x0b94 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc C:\Windows\system32\drivers\storvsc.sys
21:36:24.0494 0x0b94 storvsc - ok
21:36:24.0510 0x0b94 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
21:36:24.0526 0x0b94 swenum - ok
21:36:24.0541 0x0b94 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
21:36:24.0572 0x0b94 swprv - ok
21:36:24.0604 0x0b94 [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain C:\Windows\system32\sysmain.dll
21:36:24.0650 0x0b94 SysMain - ok
21:36:24.0650 0x0b94 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:36:24.0682 0x0b94 TabletInputService - ok
21:36:24.0682 0x0b94 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
21:36:24.0713 0x0b94 TapiSrv - ok
21:36:24.0728 0x0b94 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
21:36:24.0760 0x0b94 TBS - ok
21:36:24.0791 0x0b94 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:36:24.0853 0x0b94 Tcpip - ok
21:36:24.0884 0x0b94 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:36:24.0931 0x0b94 TCPIP6 - ok
21:36:24.0947 0x0b94 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:36:24.0978 0x0b94 tcpipreg - ok
21:36:24.0978 0x0b94 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:36:25.0009 0x0b94 TDPIPE - ok
21:36:25.0009 0x0b94 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:36:25.0025 0x0b94 TDTCP - ok
21:36:25.0040 0x0b94 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:36:25.0056 0x0b94 tdx - ok
21:36:25.0056 0x0b94 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
21:36:25.0087 0x0b94 TermDD - ok
21:36:25.0087 0x0b94 [ EF4469AB69EB15E5D3754E6AEAFBCD3D, 3609214C3D5181364B544EBF17E9A109952BE1C4C35BE0A8727BFA8F49ECB130 ] terminpt C:\Windows\system32\drivers\terminpt.sys
21:36:25.0103 0x0b94 terminpt - ok
21:36:25.0118 0x0b94 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
21:36:25.0150 0x0b94 TermService - ok
21:36:25.0150 0x0b94 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
21:36:25.0181 0x0b94 Themes - ok
21:36:25.0181 0x0b94 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
21:36:25.0212 0x0b94 THREADORDER - ok
21:36:25.0212 0x0b94 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
21:36:25.0243 0x0b94 TrkWks - ok
21:36:25.0259 0x0b94 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:36:25.0290 0x0b94 TrustedInstaller - ok
21:36:25.0290 0x0b94 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:36:25.0321 0x0b94 tssecsrv - ok
21:36:25.0321 0x0b94 [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:36:25.0337 0x0b94 TsUsbFlt - ok
21:36:25.0352 0x0b94 [ D34789988234DCC8FA55FA9A485AF0EC, 5C1A77EFA23261F5F9C971A12145CA6AC701723A94B6A8AE9BE95EEDD3C02919 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
21:36:25.0368 0x0b94 TsUsbGD - ok
21:36:25.0384 0x0b94 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:36:25.0415 0x0b94 tunnel - ok
21:36:25.0415 0x0b94 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
21:36:25.0446 0x0b94 uagp35 - ok
21:36:25.0446 0x0b94 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:36:25.0493 0x0b94 udfs - ok
21:36:25.0508 0x0b94 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:36:25.0524 0x0b94 UI0Detect - ok
21:36:25.0524 0x0b94 [ B9EF459D54101653DC8B35D4586B8870, 6CE586FBE7DA7613E32DEC7C1F0B42C5CCC20E7D8B36068929895884B39592A4 ] UimBus C:\Windows\system32\DRIVERS\UimBus.sys
21:36:25.0540 0x0b94 UimBus - ok
21:36:25.0555 0x0b94 [ 3C358675816B90A1380D0EDA24C4FB4D, 22034B6CA04A93EC048D8F2805FDB18E13787303925FA82310C0ED56E87DB012 ] Uim_DEVIM C:\Windows\system32\DRIVERS\uim_devim.sys
21:36:25.0571 0x0b94 Uim_DEVIM - ok
21:36:25.0586 0x0b94 [ C7B848B8450BF7F799AC165A26191E17, FA6681F8065384E09FC80896AC15C06DB10C9E0F3541C7B50F6ED1D246FCE309 ] Uim_IM C:\Windows\system32\DRIVERS\uim_im.sys
21:36:25.0618 0x0b94 Uim_IM - ok
21:36:25.0633 0x0b94 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:36:25.0649 0x0b94 uliagpkx - ok
21:36:25.0649 0x0b94 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
21:36:25.0680 0x0b94 umbus - ok
21:36:25.0680 0x0b94 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
21:36:25.0711 0x0b94 UmPass - ok
21:36:25.0711 0x0b94 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService C:\Windows\System32\umrdp.dll
21:36:25.0747 0x0b94 UmRdpService - ok
21:36:25.0759 0x0b94 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
21:36:25.0787 0x0b94 upnphost - ok
21:36:25.0802 0x0b94 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:36:25.0825 0x0b94 usbccgp - ok
21:36:25.0833 0x0b94 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:36:25.0853 0x0b94 usbcir - ok
21:36:25.0853 0x0b94 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:36:25.0884 0x0b94 usbehci - ok
21:36:25.0884 0x0b94 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:36:25.0915 0x0b94 usbhub - ok
21:36:25.0915 0x0b94 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys
21:36:25.0947 0x0b94 usbohci - ok
21:36:25.0947 0x0b94 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\drivers\usbprint.sys
21:36:25.0978 0x0b94 usbprint - ok
21:36:25.0985 0x0b94 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:36:26.0002 0x0b94 USBSTOR - ok
21:36:26.0018 0x0b94 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
21:36:26.0033 0x0b94 usbuhci - ok
21:36:26.0033 0x0b94 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
21:36:26.0066 0x0b94 UxSms - ok
21:36:26.0081 0x0b94 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] VaultSvc C:\Windows\system32\lsass.exe
21:36:26.0097 0x0b94 VaultSvc - ok
21:36:26.0097 0x0b94 [ 3470D2C83CA7A056B91216EA1D571304, 3189ABF6E8C08B1B0F406DB5E78F9ABD9A0AE3FF52615B681A8DEB1A38E26B83 ] VBoxAswDrv C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys
21:36:26.0128 0x0b94 VBoxAswDrv - ok
21:36:26.0128 0x0b94 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:36:26.0159 0x0b94 vdrvroot - ok
21:36:26.0175 0x0b94 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
21:36:26.0206 0x0b94 vds - ok
21:36:26.0222 0x0b94 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:36:26.0237 0x0b94 vga - ok
21:36:26.0237 0x0b94 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
21:36:26.0284 0x0b94 VgaSave - ok
21:36:26.0284 0x0b94 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:36:26.0317 0x0b94 vhdmp - ok
21:36:26.0324 0x0b94 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
21:36:26.0343 0x0b94 viaide - ok
21:36:26.0352 0x0b94 [ 225E1E03B2AABE2D493FCDB459303701, 6123280A48E973AC9696954879CF5F791E6D52CBE0BD07F291437D1A82413891 ] VMAuthdService C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
21:36:26.0367 0x0b94 VMAuthdService - ok
21:36:26.0377 0x0b94 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus C:\Windows\system32\drivers\vmbus.sys
21:36:26.0401 0x0b94 vmbus - ok
21:36:26.0408 0x0b94 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
21:36:26.0429 0x0b94 VMBusHID - ok
21:36:26.0437 0x0b94 [ BE8E5E5D53ACF71D4E8E686B68C99B04, 4F30A360095FCB2627068FA6A65A951688058E8FDDF5CE895E2AE39500A413B1 ] vmci C:\Windows\system32\DRIVERS\vmci.sys
21:36:26.0452 0x0b94 vmci - ok
21:36:26.0459 0x0b94 [ A3412EC3FF7A5AC2CA3A3951476BFA9C, 8A3D241168205B6B5348F44DF89875067CDD5B29BE8CF14ADA8403225AE2A379 ] VMnetAdapter C:\Windows\system32\DRIVERS\vmnetadapter.sys
21:36:26.0478 0x0b94 VMnetAdapter - ok
21:36:26.0486 0x0b94 [ F76AD463DBE8D30CB715A09DF9FF2BE9, 5B2184582496ED0EE8582C6AD3BCF49674690C585439B6F57B43ADC12DF941F6 ] VMnetBridge C:\Windows\system32\DRIVERS\vmnetbridge.sys
21:36:26.0506 0x0b94 VMnetBridge - ok
21:36:26.0519 0x0b94 [ 98E73D79FCD3D48E31EE999B5DF1B0ED, FBDC884BD9376C7E8727BACCF6482207166634F4B2644C8C794295094B29426E ] VMnetDHCP C:\Windows\SysWOW64\vmnetdhcp.exe
21:36:26.0538 0x0b94 VMnetDHCP - ok
21:36:26.0546 0x0b94 [ B564A598B9B31E9358B2D6C9BC96D710, 19A9EFC08AE11A31169F712C577EBAFFF0A37311271FD46F02873286C8281DB7 ] VMnetuserif C:\Windows\system32\drivers\vmnetuserif.sys
21:36:26.0560 0x0b94 VMnetuserif - ok
21:36:26.0567 0x0b94 [ 1507AD521DA518B289DF349791EB702C, 601DA4133A9F6AB7C9CD3EC48544D4A14F0CCAD4C867DED4C368A353D7F079B7 ] VMparport C:\Windows\system32\drivers\VMparport.sys
21:36:26.0588 0x0b94 VMparport - ok
21:36:26.0595 0x0b94 [ 5C33E873349CF67272A8B342AC963A6E, 9CB419F422C88C0055440E1AF94716C537E9D9CD34DF6F2AE81C3D2CDDD1FD31 ] vmusb C:\Windows\system32\DRIVERS\vmusb.sys
21:36:26.0615 0x0b94 vmusb - ok
21:36:26.0636 0x0b94 [ 15D702F235BD1077007A180EEFB9DBB8, 610794EB9AF68789F46D193EF11B406D190096DF9EC557563798D625806D5704 ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
21:36:26.0655 0x0b94 VMUSBArbService - ok
21:36:26.0671 0x0b94 [ 0769FDF4C15D9EDD3CAAC148A8EDC2E5, 65E5CA9461C47491E83EBD755C10AE1665E71D2B73F2CE97A59B9E7380D42E8D ] VMware NAT Service C:\Windows\SysWOW64\vmnat.exe
21:36:26.0703 0x0b94 VMware NAT Service - ok
21:36:26.0893 0x0b94 [ 3EEEA5B5EDB54E2969CE2B8599D45983, F9AB57B13DA4330B9BD31611CC968F1B5E6AB1EA7AE3E08CA2E6F5DDBFA28674 ] VMwareHostd C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
21:36:27.0080 0x0b94 VMwareHostd - ok
21:36:27.0111 0x0b94 [ 8FCCBE30DC217C244CE38DD7F9B673C3, C1E6E65A435D764695C4B9411ED623D626D8A744E3E09752FBB66260D9ACE8D6 ] vmx86 C:\Windows\system32\drivers\vmx86.sys
21:36:27.0127 0x0b94 vmx86 - ok
21:36:27.0142 0x0b94 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:36:27.0158 0x0b94 volmgr - ok
21:36:27.0173 0x0b94 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:36:27.0189 0x0b94 volmgrx - ok
21:36:27.0205 0x0b94 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:36:27.0236 0x0b94 volsnap - ok
21:36:27.0236 0x0b94 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
21:36:27.0267 0x0b94 vsmraid - ok
21:36:27.0267 0x0b94 [ 1C7DC94FDCABD06D24C3A532DC33FB34, 5403724E70ABBE1070958CA58496DB2237F35CAB37296E1ECB64D4A0FE432AC1 ] vsock C:\Windows\system32\drivers\vsock.sys
21:36:27.0283 0x0b94 vsock - ok
21:36:27.0314 0x0b94 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
21:36:27.0376 0x0b94 VSS - ok
21:36:27.0376 0x0b94 [ C279CC22288F277A14620EB949F0E1B9, 8E158D7C930EA6B3ACD7194062AFB562DE8D392A32E4F93E64D06F4A20739E69 ] vstor2-mntapi20-shared C:\Windows\syswow64\drivers\vstor2-mntapi20-shared.sys
21:36:27.0392 0x0b94 vstor2-mntapi20-shared - ok
21:36:27.0407 0x0b94 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
21:36:27.0423 0x0b94 vwifibus - ok
21:36:27.0439 0x0b94 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
21:36:27.0454 0x0b94 vwififlt - ok
21:36:27.0470 0x0b94 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
21:36:27.0501 0x0b94 W32Time - ok
21:36:27.0517 0x0b94 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
21:36:27.0532 0x0b94 WacomPen - ok
21:36:27.0548 0x0b94 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:36:27.0579 0x0b94 WANARP - ok
21:36:27.0579 0x0b94 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:36:27.0610 0x0b94 Wanarpv6 - ok
21:36:27.0641 0x0b94 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
21:36:27.0688 0x0b94 wbengine - ok
21:36:27.0688 0x0b94 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:36:27.0719 0x0b94 WbioSrvc - ok
21:36:27.0735 0x0b94 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:36:27.0751 0x0b94 wcncsvc - ok
21:36:27.0766 0x0b94 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:36:27.0782 0x0b94 WcsPlugInService - ok
21:36:27.0782 0x0b94 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
21:36:27.0797 0x0b94 Wd - ok
21:36:27.0813 0x0b94 [ 37CE6867FC4A6827009A713A9737262C, D8890524F4EF358E35C4A992BEAF7C8FB5ED647FE4D899D3CF608C2201E218A5 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:36:27.0860 0x0b94 Wdf01000 - ok
21:36:27.0860 0x0b94 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:36:27.0875 0x0b94 WdiServiceHost - ok
21:36:27.0891 0x0b94 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:36:27.0907 0x0b94 WdiSystemHost - ok
21:36:27.0922 0x0b94 [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient C:\Windows\System32\webclnt.dll
21:36:27.0938 0x0b94 WebClient - ok
21:36:27.0953 0x0b94 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:36:27.0985 0x0b94 Wecsvc - ok
21:36:27.0985 0x0b94 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:36:28.0016 0x0b94 wercplsupport - ok
21:36:28.0016 0x0b94 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
21:36:28.0047 0x0b94 WerSvc - ok
21:36:28.0063 0x0b94 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:36:28.0094 0x0b94 WfpLwf - ok
21:36:28.0094 0x0b94 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:36:28.0109 0x0b94 WIMMount - ok
21:36:28.0125 0x0b94 WinDefend - ok
21:36:28.0141 0x0b94 WinHttpAutoProxySvc - ok
21:36:28.0156 0x0b94 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:36:28.0187 0x0b94 Winmgmt - ok
21:36:28.0219 0x0b94 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
21:36:28.0265 0x0b94 WinRM - ok
21:36:28.0281 0x0b94 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
21:36:28.0297 0x0b94 WinUsb - ok
21:36:28.0328 0x0b94 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
21:36:28.0359 0x0b94 Wlansvc - ok
21:36:28.0359 0x0b94 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:36:28.0375 0x0b94 WmiAcpi - ok
21:36:28.0390 0x0b94 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:36:28.0421 0x0b94 wmiApSrv - ok
21:36:28.0421 0x0b94 WMPNetworkSvc - ok
21:36:28.0437 0x0b94 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:36:28.0453 0x0b94 WPCSvc - ok
21:36:28.0453 0x0b94 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:36:28.0484 0x0b94 WPDBusEnum - ok
21:36:28.0484 0x0b94 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:36:28.0515 0x0b94 ws2ifsl - ok
21:36:28.0531 0x0b94 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
21:36:28.0546 0x0b94 wscsvc - ok
21:36:28.0562 0x0b94 WSearch - ok
21:36:28.0609 0x0b94 [ 39D604E190DFE2E483B637D6796ABAFF, 52DCCEA0DB59F00C615D94CC2B70FC1C335E553E8FC79AAC8C8C7D9EE1F6111D ] wuauserv C:\Windows\system32\wuaueng.dll
21:36:28.0671 0x0b94 wuauserv - ok
21:36:28.0671 0x0b94 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:36:28.0702 0x0b94 WudfPf - ok
21:36:28.0702 0x0b94 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:36:28.0733 0x0b94 WUDFRd - ok
21:36:28.0733 0x0b94 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:36:28.0765 0x0b94 wudfsvc - ok
21:36:28.0765 0x0b94 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
21:36:28.0796 0x0b94 WwanSvc - ok
21:36:28.0827 0x0b94 ================ Scan global ===============================
21:36:28.0827 0x0b94 [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
21:36:28.0827 0x0b94 [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
21:36:28.0843 0x0b94 [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
21:36:28.0843 0x0b94 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
21:36:28.0858 0x0b94 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
21:36:28.0858 0x0b94 [ Global ] - ok
21:36:28.0858 0x0b94 ================ Scan MBR ==================================
21:36:28.0858 0x0b94 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:36:28.0905 0x0b94 \Device\Harddisk0\DR0 - ok
21:36:28.0905 0x0b94 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk1\DR1
21:36:29.0155 0x0b94 \Device\Harddisk1\DR1 - ok
21:36:29.0155 0x0b94 ================ Scan VBR ==================================
21:36:29.0155 0x0b94 [ EC9F287E6D9E3AFA4CCF76452BFA7D3F ] \Device\Harddisk0\DR0\Partition1
21:36:29.0155 0x0b94 \Device\Harddisk0\DR0\Partition1 - ok
21:36:29.0170 0x0b94 [ 0C032135DAD7047EEA7707192E9D8014 ] \Device\Harddisk0\DR0\Partition2
21:36:29.0170 0x0b94 \Device\Harddisk0\DR0\Partition2 - ok
21:36:29.0170 0x0b94 ================ Scan generic autorun ======================
21:36:29.0201 0x0b94 [ 51B634D617073986FA73417318F7C121, CAB64175383F501FA515D335167334D7F2147F0889E5052484AA1FF866C6F8CF ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
21:36:29.0248 0x0b94 AdobeAAMUpdater-1.0 - ok
21:36:29.0248 0x0b94 [ 3AC269FDBF84B8BE16D5EBAD1F373550, 9EEEFB96D7940816C681968ABA15F7E05DFF4D5D29B93BF5E9D5D3F8475C0DF2 ] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
21:36:29.0264 0x0b94 IMSS - ok
21:36:29.0264 0x0b94 [ E4E7B29D050F5480071984FE6543C311, 9A4D8D1702AE74AB4FE4367EAF4AD6500F59D4F25B3CCACE3EF07613B7B5853C ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
21:36:29.0279 0x0b94 USB3MON - ok
21:36:29.0295 0x0b94 [ 187F4C75A89E3F412322C94526320074, D78FA7EF93C8C7B4326A5B6DB04A92ADD091DF00658FA8731D07C5D3BE29ED04 ] C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
21:36:29.0311 0x0b94 BCSSync - ok
21:36:29.0342 0x0b94 [ 0F89C8AD52BBC7E60133732CE605B4FB, C819EB2848E15019E4F828EBA092DF957185211A119517727661E78778891F09 ] C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\Acrotray.exe
21:36:29.0373 0x0b94 Acrobat Assistant 8.0 - ok
21:36:29.0389 0x0b94 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:36:29.0420 0x0b94 Sidebar - ok
21:36:29.0420 0x0b94 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:36:29.0451 0x0b94 mctadmin - ok
21:36:29.0467 0x0b94 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:36:29.0498 0x0b94 Sidebar - ok
21:36:29.0498 0x0b94 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:36:29.0513 0x0b94 mctadmin - ok
21:36:29.0591 0x0b94 [ 5BF5B0F3E39BE5B079343ED5F99BF982, 0227A6AC51DDA9EA75FE378C72337729C96A4ADB5EC2B6795A5A8A3C9D3A972A ] C:\Program Files\DAEMON Tools Pro\DTAgent.exe
21:36:29.0669 0x0b94 DAEMON Tools Pro Agent - ok
21:36:29.0669 0x0b94 Waiting for KSN requests completion. In queue: 72
21:36:30.0670 0x0b94 Waiting for KSN requests completion. In queue: 72
21:36:31.0684 0x0b94 Waiting for KSN requests completion. In queue: 72
21:36:32.0870 0x0b94 AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.4.2233.1299 ), 0x41000 ( enabled : updated )
21:36:32.0886 0x0b94 Win FW state via NFP2: enabled ( trusted )
21:36:35.0398 0x0b94 ============================================================
21:36:35.0398 0x0b94 Scan finished
21:36:35.0398 0x0b94 ============================================================
21:36:35.0398 0x1614 Detected object count: 0
21:36:35.0398 0x1614 Actual detected object count: 0 Und noch das Ergebnis von EMSISoft: Code:
Emsisoft Emergency Kit - Version 10.0
Letztes Update: 23.09.2015 19:08:19
Benutzerkonto: Mainuser-PC\Mainuser
Scan-Einstellungen:
Scan-Methode: Eigener Scan
Objekte: Rootkits, Speicher, Traces, C:\, D:\, F:\
PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus
Scan-Beginn: 23.09.2015 19:10:04
Value: HKEY_USERS\S-1-5-21-4056725552-3014467852-3067814988-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-4056725552-3014467852-3067814988-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Gefunden: Setting.DisableRegistryTools (A)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3f897d13.qua -> (Quarantine-8) Gefunden: Application.SearchProtect.I (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\4e1e271a.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\0c413ecd.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\1c417df4.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3fff20e4.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3e271484.qua -> (Quarantine-8) Gefunden: Trojan.Generic.12557556 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\568b0887.qua -> (Quarantine-8) Gefunden: Adware.Generic.957027 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\56e16aa9.qua -> (Quarantine-8) Gefunden: Adware.Agent.OFO (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\575c4f6c.qua -> (Quarantine-8) Gefunden: Trojan.Generic.12557556 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\5708ef1c.qua -> (Quarantine-8) Gefunden: Gen:Variant.Application.Bundler.OptimumInstaller.3 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\575fe034.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\5797521a.qua -> (Quarantine-8) Gefunden: Adware.Suptab.A (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\7a0d502b.qua -> (Quarantine-8) Gefunden: Application.SearchProtect.I (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\7a763234.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\4e45450f.qua -> (Quarantine-8) Gefunden: Adware.Generic.958938 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\56933f7f.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\40e72d40.qua -> (Quarantine-8) Gefunden: Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\Mainuser\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\42\49e2baea-6168bcc8 -> chcyih.class Gefunden: Java.Exploit.CVE-2012-1723.R (B)
D:\Dokumente und Einstellungen\Mainuser\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\42\49e2baea-6168bcc8 -> greateac.class Gefunden: Java.Exploit.CVE-2012-1723.R (B)
D:\Dokumente und Einstellungen\Mainuser\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\42\49e2baea-6168bcc8 -> greateaa.class Gefunden: Java.Exploit.CVE-2012-1723.S (B)
Gescannt: 454309
Gefunden 22
Scan-Ende: 23.09.2015 20:06:55
Scan-Zeit: 0:56:51
D:\Dokumente und Einstellungen\Mainuser\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\42\49e2baea-6168bcc8 Gelöscht Java.Exploit.CVE-2012-1723.S (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\40e72d40.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\56933f7f.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\4e45450f.qua Gelöscht Adware.Generic.958938 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\7a763234.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\7a0d502b.qua Gelöscht Application.SearchProtect.I (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\5797521a.qua Gelöscht Adware.Suptab.A (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\575fe034.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\5708ef1c.qua Gelöscht Gen:Variant.Application.Bundler.OptimumInstaller.3 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\575c4f6c.qua Gelöscht Trojan.Generic.12557556 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\56e16aa9.qua Gelöscht Adware.Agent.OFO (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\568b0887.qua Gelöscht Adware.Generic.957027 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3e271484.qua Gelöscht Trojan.Generic.12557556 (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3fff20e4.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\1c417df4.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\0c413ecd.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\4e1e271a.qua Gelöscht Adware.SwiftBrowse.AQ (B)
D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\Antivirus\INFECTED\3f897d13.qua Gelöscht Application.SearchProtect.I (B)
Value: HKEY_USERS\S-1-5-21-4056725552-3014467852-3067814988-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Gelöscht Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-4056725552-3014467852-3067814988-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Gelöscht Setting.DisableTaskMgr (A)
Gelöscht 20 Alles, was auf D:\ liegt, ist noch ein altes Betriebssystem ...
Vielleicht noch als Zusatzinfo:
Die mails wurden am 23.09. gegen 06.00 Uhr versandt.
Der Rechner ist die ganze Nacht durchgelaufen, es wurde mit jdownloader etwas heruntergeladen (selbstverständlich legal).
Diverse Einträge in den Logfiles betreffen ja den Zeitraum zwischen 23.09. 0:00 Uhr und 06:00 Uhr. In dieser Zeit war definitiv niemand am PC.
Lässt sich da was ablesen ? Würde mich natürlich schon interessieren, woher das Problem stammt.
Eine weitere Frage:
Im (DLAN-)Netzwerk hängen noch weitere Laptops und eine NAS.
kann es sein, dass diese nun auch "infiziert" sind ?
Kann es sein, dass das Verhalten meines PCs evtl. durch ein Laptop aus den DLAN-Netzwerk angestossen wurde, da mindestens 1 Laptop die Nacht durch auch gelaufen ist.
-.-
push |