Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Windows 7 - System reagiert langsam/hängt sich auf - Fehlermeldung nach Öffnen einer Bilddatei (https://www.trojaner-board.de/172298-windows-7-system-reagiert-langsam-haengt-fehlermeldung-offnen-bilddatei.html)

Luuminous 21.10.2015 21:22
Windows 7 - System reagiert langsam/hängt sich auf - Fehlermeldung nach Öffnen einer Bilddatei
 
Hallo, liebes Forum!

Ich wende mich hilfesuchend an euch, da mein Laptop seit einigen Tagen sehr schwerfällig läuft und ich eine Bereinigung für sinnvoll halte.

Mir fiel auf, dass es während der Nutzung häufig Komplikationen gibt. Teilweise reagiert der Laptop nur sehr langsam, der Browser hängt sich dabei sehr gern auf (Keine Rückmeldung) - Das dauert dann aber nur wenige Sekunden, bis er wieder benutzbar ist. Wenn ich in der Zeit etwas getippt habe, kommt im Anschluss nach dem Hänger totaler Kauderwelsch raus, den ich nie geschrieben habe. Andere Programme wie Skype oder Tweetdeck sind davon ebenso betroffen. Außerdem machen einige Videoplayer Stress. Youtube-Videos geben häufig einen Error aus, Mediatheken wie Rtl und Konsorten bekommen den Player nicht einmal geladen, sodass ich auf Chrome ausweichen muss.
Mein Standartbrowser (Firefox) läuft schon seit ein paar Monaten nicht mehr ganz rund, wobei ich mir nicht sicher bin, ob das nicht am Browser selbst liegt, da es Familienmitgliedern ähnlich ergeht damit.
Da kommt es häufig zu Abstürzen, dass der FF dann einfach so ausgeht. Bei mir kündigt sich das meistens noch dadurch an, dass die Seiten schwarz flackern.

Ob das nachfolgende damit in Verbindung steht, weiß ich nicht genau. Aber ich meine, die Hänger sind danach erst schlimmer geworden. Als ich vor ein paar Tagen eine Bilddatei herunterladen habe (JPEG) und es öffnen wollte, bekam ich eine Fehlermeldung, wo zum einen der Pfad zur entsprechenden Datei gezeigt wurde und folgender Text: "Starten des Servers fehlgeschlagen"
Das kam mir spanisch vor, aber nach erneutem Anklicken ließ sich das Bild ohne Probleme öffnen. Seitdem trat das auch nicht mehr auf - Bis eben gerade. Von der Fehlermeldung hatte ich einen Screenshot angefertigt. Und als ich mir diesen ansehen wollte, kam nochmal dasselbe Fenster, nur mit anderem Pfad.
Wie gesagt, bin mir nicht so sicher, ob das was miteinander zu tun hat. Ich fands nur etwas merkwürdig :wtf:

Bisher habe ich nur mit dem Eset Online Scanner gescannt, der hat aber nichts gefunden. Logfile hänge ich trotzdem mal mit an.
Hitman.Pro war während des Scans mit FRST noch installiert. Da es sich aber für den Gmer-Scan nicht deaktivieren ließ, habe ich es vorher entfernt, nur der Info halber.
Ich hoffe, jemand kann mir helfen :)

Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:00 on 21/10/2015 (Lucia)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:21-10-2015
durchgeführt von Lucia (Administrator) auf SHUFFLE (21-10-2015 21:03:31)
Gestartet von C:\Users\Lucia\Desktop
Geladene Profile: Lucia (Verfügbare Profile: Lucia)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(SurfRight B.V.) C:\Program Files\HitmanPro.Alert\hmpalert.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(eden.fm) C:\Program Files\Mal Updater 2\MalUpdater.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
() C:\Program Files\FastStone Capture\FSCapture.exe
() C:\Program Files\puush\puush.exe
(Twitter) C:\Program Files\Twitter\TweetDeck\TweetDeck.exe
(Twitter) C:\Program Files\Twitter\TweetDeck\TweetDeck.exe
(Twitter) C:\Program Files\Twitter\TweetDeck\TweetDeck.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2325776 2012-02-14] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10889832 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft anti-malware\a2guard.exe [5836888 2015-09-30] (Emsisoft Ltd)
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\...\Run: [Mal Updater 2] => C:\Program Files\Mal Updater 2\MalUpdater.exe [2634240 2015-08-16] (eden.fm)
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\...\Run: [puush] => C:\Program Files\puush\puush.exe [568904 2015-07-25] ()
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\...\MountPoints2: {94033714-32cc-11e5-827b-806e6f6e6963} - D:\AutoRun\AutoRunX\AutoRunX.exe
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\...\MountPoints2: {b333ec9f-32da-11e5-be23-b888e3bd1368} - "E:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-07-25] (Microsoft Corporation)
IFEO\taskmgr.exe: [Debugger] "C:\USERS\LUCIA\DOWNLOADS\PROCEXP.EXE"
IFEO\Utilman.exe: [Debugger] cmd.exe
Startup: C:\Users\Lucia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk [2015-07-25]
ShortcutTarget: FastStone Capture.lnk -> C:\Program Files\FastStone Capture\FSCapture.exe ()
Startup: C:\Users\Lucia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\puush.lnk [2015-07-25]
ShortcutTarget: puush.lnk -> C:\Program Files\puush\puush.exe ()
Startup: C:\Users\Lucia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TweetDeck.lnk [2015-07-25]
ShortcutTarget: TweetDeck.lnk -> C:\Program Files\Twitter\TweetDeck\TweetDeck.exe (Twitter)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 127.0.0.1                rad.msn.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{854A8DF7-B10D-44F3-B666-ED90D800FEDD}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1301427834-473665050-3346237763-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

FireFox:
========
FF ProfilePath: C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default
FF DefaultSearchUrl: hxxp://www.searchcanvas.com/web?ot=7&q=
FF Session Restore: -> ist aktiviert.
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-19] ()
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=1.1.11 -> C:\Program Files\VideoLAN\VLC2\VLC\npvlc.dll [2011-07-14] (the VideoLAN Team)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: ProxTube - Unblock YouTube - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\ich@maltegoetz.de [2015-07-25] [ist nicht signiert]
FF Extension: Youtube Downloader - 4K Download - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\paulsaintuzb@gmail.com [2015-07-25] [ist nicht signiert]
FF Extension: Twitter App - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{12b6fdcd-4423-4276-82a3-73fdbff5f7e4} [2015-07-25] [ist nicht signiert]
FF Extension: Facebook Messenger - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{249b4e45-4fb9-4f6b-9754-7c0c1e605d44} [2015-07-25] [ist nicht signiert]
FF Extension: MP3 Download! - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\anthonyytmp3download@gmail.com.xpi [2014-02-21] [ist nicht signiert]
FF Extension: Flash Video Downloader - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\artur.dubovoy@gmail.com.xpi [2013-10-20] [ist nicht signiert]
FF Extension: Video Downloader Professional - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\ffext_basicvideoext@startpage24.xpi [2014-11-16] [ist nicht signiert]
FF Extension: Ghostery - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\firefox@ghostery.com.xpi [2015-07-22]
FF Extension: Lazarus: Form Recovery - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\lazarus@interclue.com.xpi [2014-03-24] [ist nicht signiert]
FF Extension: Google Similar Images - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\nishan.naseer.googimagesearch@gmail.com.xpi [2014-10-22] [ist nicht signiert]
FF Extension: Personas Plus - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\personas@christopher.beard.xpi [2013-05-18] [ist nicht signiert]
FF Extension: Thesaurus: Synonyms and Antonyms - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\zmthesaurus@zeemind.com.xpi [2013-08-09] [ist nicht signiert]
FF Extension: FlashGot - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-10-20] [ist nicht signiert]
FF Extension: Stylish - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2013-08-09] [ist nicht signiert]
FF Extension: NoScript - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-13]
FF Extension: Adblock Plus - C:\Users\Lucia\AppData\Roaming\Mozilla\Firefox\Profiles\y2rdifiz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-09] [ist nicht signiert]

Chrome:
=======
CHR Profile: C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-25]
CHR Extension: (Google Docs) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-26]
CHR Extension: (Google Drive) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-19]
CHR Extension: (Google-Suche) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-26]
CHR Extension: (Google Tabellen) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-25]
CHR Extension: (Google Docs Offline) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-19]
CHR Extension: (Adblock Super) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2015-07-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR Extension: (Google Mail) - C:\Users\Lucia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-26]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [7084784 2015-09-30] (Emsisoft Ltd)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [276248 2012-04-23] (Intel Corporation)
R2 hmpalertsvc; C:\Program Files\HitmanPro.Alert\hmpalert.exe [4108104 2015-10-14] (SurfRight B.V.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [458464 2012-02-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 b57xdbd; C:\Windows\System32\DRIVERS\b57xdbd.sys [60968 2011-11-04] (Broadcom Corporation)
R3 b57xdmp; C:\Windows\System32\DRIVERS\b57xdmp.sys [17960 2011-11-04] (Broadcom Corporation)
R3 bScsiMSx; C:\Windows\System32\DRIVERS\bScsiMSx.sys [43560 2011-09-02] (Broadcom Corporation)
R3 bScsiSDx; C:\Windows\System32\DRIVERS\bScsiSDx.sys [52856 2012-06-01] (Broadcom Corporation)
S3 eapihdrv; C:\Users\Lucia\AppData\Local\Temp\ehdrv.sys [135760 2015-10-20] (ESET)
R1 epp32; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp32.sys [114200 2015-09-30] (Emsisoft GmbH)
R3 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [152360 2015-10-14] (SurfRight B.V.)
R3 hmpnet; C:\Windows\system32\drivers\hmpnet.sys [64112 2015-10-14] (SurfRight B.V.)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [55104 2012-07-17] (Intel Corporation)
R3 SmbDrv; C:\Windows\System32\DRIVERS\Smb_driver.sys [21520 2012-02-14] (Synaptics Incorporated)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-21 21:03 - 2015-10-21 21:04 - 00014689 _____ C:\Users\Lucia\Desktop\FRST.txt
2015-10-21 21:03 - 2015-10-21 21:03 - 00000000 ____D C:\FRST
2015-10-21 21:02 - 2015-10-21 21:02 - 01700352 _____ (Farbar) C:\Users\Lucia\Desktop\FRST.exe
2015-10-21 21:00 - 2015-10-21 21:00 - 00000472 _____ C:\Users\Lucia\Desktop\defogger_disable.log
2015-10-21 21:00 - 2015-10-21 21:00 - 00000000 _____ C:\Users\Lucia\defogger_reenable
2015-10-21 20:57 - 2015-10-21 20:57 - 00050477 _____ C:\Users\Lucia\Desktop\Defogger.exe
2015-10-21 20:49 - 2015-10-21 20:52 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-21 20:21 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-10-21 20:21 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-21 20:21 - 2015-09-29 05:02 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-21 20:21 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-21 20:21 - 2015-09-29 04:58 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-21 20:21 - 2015-09-29 04:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-21 20:21 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-21 20:21 - 2015-09-29 04:58 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-21 20:21 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-21 20:21 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-21 20:21 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-21 20:21 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-21 20:21 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-21 20:21 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-21 20:21 - 2015-09-29 03:43 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-21 20:21 - 2015-09-29 03:43 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-21 20:21 - 2015-09-29 03:43 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-21 20:21 - 2015-09-25 19:59 - 02955776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-21 20:21 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-21 20:21 - 2015-09-25 19:58 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-21 20:21 - 2015-09-25 19:58 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-21 20:21 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-21 20:21 - 2015-09-25 19:58 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-21 20:21 - 2015-09-15 19:42 - 00139096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-21 20:21 - 2015-09-15 19:42 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-21 20:21 - 2015-09-15 19:36 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-21 20:21 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-21 20:21 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-21 20:21 - 2015-09-15 19:36 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-21 20:21 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-21 20:21 - 2015-09-15 19:36 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-21 20:21 - 2015-09-15 19:35 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-21 20:21 - 2015-09-14 21:53 - 02385920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-10-21 20:21 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-21 20:21 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-21 20:20 - 2015-10-01 19:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-21 20:20 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-21 20:20 - 2015-10-01 19:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-21 20:20 - 2015-10-01 19:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-21 20:20 - 2015-10-01 19:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-21 20:20 - 2015-10-01 18:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-21 20:20 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-21 20:20 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-21 20:20 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-21 20:20 - 2015-09-16 05:45 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-21 20:20 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-21 20:20 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-21 20:20 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-21 20:20 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-21 20:20 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-21 20:20 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-21 20:20 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-21 20:20 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-21 20:20 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-21 20:20 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-21 20:20 - 2015-09-16 05:23 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-21 20:20 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-21 20:20 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-21 20:20 - 2015-09-16 05:18 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-21 20:20 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-21 20:20 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-21 20:20 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-21 20:20 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-21 20:20 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-21 20:20 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-21 20:20 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-21 20:20 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-21 20:20 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-21 20:20 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-21 20:20 - 2015-09-16 04:56 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-21 20:20 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-21 20:20 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-21 20:20 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-21 20:20 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-21 20:20 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-21 20:18 - 2015-09-18 19:47 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-21 20:18 - 2015-09-18 19:44 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-21 20:18 - 2015-09-18 19:44 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-21 20:18 - 2015-09-18 19:44 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-21 20:18 - 2015-09-18 19:44 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-21 20:18 - 2015-09-18 19:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-21 20:18 - 2015-09-18 19:35 - 00999936 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-20 23:44 - 2015-10-20 23:45 - 00000000 ____D C:\Users\Lucia\Downloads\GCrown ED [Single]
2015-10-20 23:39 - 2015-10-20 23:39 - 00000000 ____D C:\Users\Lucia\Downloads\Guilty Crown Theme Song Collection
2015-10-20 21:07 - 2015-10-20 21:09 - 00000000 ____D C:\AdwCleaner
2015-10-20 19:48 - 2015-10-20 19:48 - 00000000 ____D C:\Program Files\ESET
2015-10-16 03:43 - 2015-10-17 20:32 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-10-15 22:05 - 2015-10-16 13:06 - 00000000 ____D C:\Stuff
2015-09-28 17:21 - 2015-09-28 17:21 - 00000000 ____D C:\ProgramData\Emsisoft
2015-09-28 17:13 - 2015-09-28 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-09-28 17:12 - 2015-10-21 20:58 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2015-09-21 00:30 - 2015-10-15 12:42 - 00000000 ____D C:\Program Files\HitmanPro.Alert
2015-09-21 00:30 - 2015-10-14 22:25 - 00772944 _____ (SurfRight B.V.) C:\Windows\system32\hmpalert.dll
2015-09-21 00:30 - 2015-10-14 22:25 - 00152360 _____ (SurfRight B.V.) C:\Windows\system32\Drivers\hmpalert.sys
2015-09-21 00:30 - 2015-09-21 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-21 21:00 - 2015-07-25 18:05 - 00000000 ____D C:\Users\Lucia
2015-10-21 21:00 - 2009-07-14 06:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-21 21:00 - 2009-07-14 06:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-21 20:59 - 2015-07-25 16:42 - 00000000 ____D C:\LoyalerPolizist50
2015-10-21 20:58 - 2015-07-25 18:02 - 02018702 _____ C:\Windows\WindowsUpdate.log
2015-10-21 20:53 - 2015-07-25 21:44 - 00000000 ____D C:\Users\Lucia\AppData\Roaming\Skype
2015-10-21 20:52 - 2015-07-25 23:10 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-21 20:52 - 2015-07-25 23:03 - 00000000 ____D C:\Users\Lucia\AppData\Roaming\Mal Updater
2015-10-21 20:51 - 2015-07-26 19:15 - 00000000 ____D C:\ProgramData\HitmanPro.Alert
2015-10-21 20:51 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-21 20:51 - 2009-07-14 06:39 - 00045021 _____ C:\Windows\setupact.log
2015-10-21 20:51 - 2009-07-14 06:33 - 04033872 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-21 20:49 - 2015-07-25 15:41 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-21 20:49 - 2015-07-25 15:41 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-21 20:49 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-21 20:49 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2015-10-21 20:42 - 2015-07-25 15:33 - 00000000 ____D C:\Windows\system32\MRT
2015-10-21 20:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-10-21 20:39 - 2015-07-26 17:29 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-21 20:27 - 2015-07-25 23:10 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-21 20:13 - 2015-07-25 16:51 - 00000000 ____D C:\T-Aiko
2015-10-21 19:51 - 2015-07-25 16:41 - 00000000 ____D C:\LangerLümmel
2015-10-21 16:27 - 2015-07-25 22:12 - 00000000 ____D C:\Users\Lucia\AppData\Roaming\vlc
2015-10-20 23:39 - 2015-07-25 20:07 - 00000000 ____D C:\Ost
2015-10-20 23:38 - 2009-11-10 20:44 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-20 22:00 - 2015-07-25 22:29 - 00000000 ____D C:\Users\Lucia\AppData\Local\osu!
2015-10-19 17:24 - 2015-07-26 17:28 - 00000000 ____D C:\Users\Lucia\AppData\Local\Adobe
2015-10-19 17:23 - 2015-07-26 17:29 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-10-19 17:23 - 2015-07-26 17:29 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-10-18 22:31 - 2015-07-25 16:39 - 00000000 ____D C:\BesterBulle12
2015-10-17 20:32 - 2015-07-25 21:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-10-17 20:32 - 2015-07-25 16:19 - 00011468 _____ C:\Windows\PFRO.log
2015-10-17 13:29 - 2015-07-25 16:50 - 00000000 ____D C:\Skype
2015-10-15 12:45 - 2015-07-25 16:43 - 00000000 ____D C:\Memes
2015-10-14 22:25 - 2015-07-26 19:14 - 00064112 _____ (SurfRight B.V.) C:\Windows\system32\Drivers\hmpnet.sys
2015-10-11 15:19 - 2015-07-25 16:41 - 00000000 ____D C:\FanFiktion
2015-10-10 13:17 - 2015-07-25 23:06 - 00000000 ____D C:\Users\Lucia\Downloads\Gameforge Live
2015-10-08 21:31 - 2015-07-25 16:41 - 00000000 ____D C:\GenialerAnwalt03
2015-10-04 00:22 - 2015-07-25 16:47 - 00000000 ____D C:\QR Codes
2015-10-02 12:10 - 2009-10-14 04:21 - 141105520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-09-30 17:28 - 2015-07-25 16:44 - 00000000 ____D C:\LP
2015-09-26 19:45 - 2015-08-29 12:55 - 00000000 ____D C:\Users\Lucia\Downloads\9nine - MY ONLY ONE

Einige Dateien in TEMP:
====================
C:\Users\Lucia\AppData\Local\Temp\HitmanPro.exe
C:\Users\Lucia\AppData\Local\Temp\InstHelper.exe
C:\Users\Lucia\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-10-11 02:52

==================== Ende vom FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:21-10-2015
durchgeführt von Lucia (2015-10-21 21:04:54)
Gestartet von C:\Users\Lucia\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2015-07-25 13:00:01)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1301427834-473665050-3346237763-500 - Administrator - Disabled)
Gast (S-1-5-21-1301427834-473665050-3346237763-501 - Limited - Disabled)
Lucia (S-1-5-21-1301427834-473665050-3346237763-1000 - Administrator - Enabled) => C:\Users\Lucia

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {9425001D-A331-13F4-34E6-D05C71B96A74}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden
AION Free-to-Play (HKLM\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.7.3 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
DolbyFiles (Version: 2.0 - Nero AG) Hidden
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 10.0 - Emsisoft Ltd.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
FastStone Capture 5.3 (HKLM\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Free YouTube Download version 3.2.61.805 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.61.805 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.8 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge)
Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)
Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden
HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 3.0.57.207 - SurfRight B.V.)
ImagXpress (Version: 7.0.74.0 - Nero AG) Hidden
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{51A66ED3-200E-4147-8D1E-E8D30936FD26}) (Version: 1.23.605.1 - Intel Corporation)
Launch Manager (HKLM\...\LManager) (Version: 5.1.15 - Acer Inc.)
Mal Updater 2.96 (HKLM\...\{07E900C8-D1E3-4C24-AC9F-7FE3C1AE19A2}_is1) (Version:  - Eden.fm)
Menu Templates - Starter Kit (Version: 9.4.6.0 - Nero AG) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 41.0.2 (x86 de) (HKLM\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 de) (HKLM\...\Mozilla Thunderbird 38.2.0 (x86 de)) (Version: 38.2.0 - Mozilla)
Nero 9 (HKLM\...\{8a26fd75-a2b1-456f-ace3-f1b7b6f90b3c}) (Version:  - Nero AG)
Nettalk 6.7 (HKLM\...\Nettalk_is1) (Version:  - Nicolas Kruse)
osu! (HKLM\...\{caf6fd60-747d-4e83-9d5d-8d1b6c4d8ece}) (Version: latest - ppy Pty Ltd)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
puush (HKLM\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Qualcomm Atheros WiFi Driver Installation (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.0 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Skype™ 7.8 (HKLM\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.41.5 - Synaptics Incorporated)
TweetDeck (HKLM\...\{C4ADB67B-C908-4D94-B85E-585D2F3F9118}) (Version: 3.3.7 - Twitter)
VirusTotal Uploader 2.2 (HKLM\...\VTUploader) (Version:  - )
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
WinRAR 5.21 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

17-10-2015 16:10:14 Geplanter Prüfpunkt
21-10-2015 20:22:04 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2015-07-25 22:06 - 00000846 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1                rad.msn.com

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1990FB84-753A-4DC3-AAA9-CCB9E7508FB6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-07-25] (Google Inc.)
Task: {6A4D7E68-562F-4825-8526-0B9AF9611AEF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-19] (Adobe Systems Incorporated)
Task: {DE8C688C-A3D6-4327-91D7-29A3EC095974} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-07-25] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-25 18:11 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll
2007-02-12 21:51 - 2007-02-12 21:51 - 01111552 _____ () C:\Program Files\FastStone Capture\FSCapture.exe
2012-01-10 14:41 - 2015-07-25 23:35 - 00568904 _____ () C:\Program Files\puush\puush.exe
2013-11-01 10:47 - 2013-11-01 10:47 - 36625920 _____ () C:\Program Files\Twitter\TweetDeck\libcef.dll
2013-11-01 10:47 - 2013-11-01 10:47 - 00861184 _____ () C:\Program Files\Twitter\TweetDeck\ffmpegsumo.dll
2013-11-01 10:47 - 2013-11-01 10:47 - 00880640 _____ () C:\Program Files\Twitter\TweetDeck\libglesv2.dll
2013-11-01 10:47 - 2013-11-01 10:47 - 00102400 _____ () C:\Program Files\Twitter\TweetDeck\libegl.dll
2015-07-25 20:57 - 2015-07-25 20:57 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll
2015-07-25 18:10 - 2012-02-01 19:25 - 00059904 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-07-25 18:14 - 2012-02-08 03:39 - 01198872 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1301427834-473665050-3346237763-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{E280E8CA-F102-4705-BCDA-BB3D7E7DA480}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{9290642A-2F79-4915-BD78-8B277B84C2DD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{5BAC3485-4D94-45BD-9AA3-AEED69EDF003}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3A8275B8-5875-47E8-99C9-DE36E70CBA39}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{FB50B6DF-94F6-4AC0-90C6-D34DA5415421}] => (Allow) C:\Program Files\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{ED3785F1-2E7C-47E8-913B-A780C627CB4A}C:\program files\gameforgelive\games\deu_deu\aion\nclauncher.exe] => (Allow) C:\program files\gameforgelive\games\deu_deu\aion\nclauncher.exe
FirewallRules: [UDP Query User{2FFF4CEF-88C7-4EDD-8876-B3C209F357E2}C:\program files\gameforgelive\games\deu_deu\aion\nclauncher.exe] => (Allow) C:\program files\gameforgelive\games\deu_deu\aion\nclauncher.exe
FirewallRules: [{5193FB0E-DF31-4CC4-A8B2-617975C1CC62}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/21/2015 08:12:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc6b7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x75b54ec3
ID des fehlerhaften Prozesses: 0x1c18
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/21/2015 08:12:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc6b7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x75b54ec3
ID des fehlerhaften Prozesses: 0x1c18
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/20/2015 11:58:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 1.1.11.0, Zeitstempel: 0x4e1edf37
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18939, Zeitstempel: 0x55afd7a8
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000c3f83
ID des fehlerhaften Prozesses: 0x118c
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3

Error: (10/19/2015 09:22:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TweetDeck.exe, Version: 3.3.7.0, Zeitstempel: 0x52738582
Name des fehlerhaften Moduls: libcef.dll, Version: 3.1547.1412.0, Zeitstempel: 0x5217c1eb
Ausnahmecode: 0x80000003
Fehleroffset: 0x0003f600
ID des fehlerhaften Prozesses: 0xcec
Startzeit der fehlerhaften Anwendung: 0xTweetDeck.exe0
Pfad der fehlerhaften Anwendung: TweetDeck.exe1
Pfad des fehlerhaften Moduls: TweetDeck.exe2
Berichtskennung: TweetDeck.exe3

Error: (10/17/2015 04:22:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TweetDeck.exe, Version: 3.3.7.0, Zeitstempel: 0x52738582
Name des fehlerhaften Moduls: libcef.dll, Version: 3.1547.1412.0, Zeitstempel: 0x5217c1eb
Ausnahmecode: 0x80000003
Fehleroffset: 0x0003f600
ID des fehlerhaften Prozesses: 0xb9c
Startzeit der fehlerhaften Anwendung: 0xTweetDeck.exe0
Pfad der fehlerhaften Anwendung: TweetDeck.exe1
Pfad des fehlerhaften Moduls: TweetDeck.exe2
Berichtskennung: TweetDeck.exe3

Error: (10/16/2015 04:06:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc6b7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x76cf4ec3
ID des fehlerhaften Prozesses: 0x6f8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/16/2015 04:06:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc6b7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x76cf4ec3
ID des fehlerhaften Prozesses: 0x6f8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3

Error: (10/14/2015 07:06:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: taskhost.exe, Version: 6.1.7601.18010, Zeitstempel: 0x50aee407
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x76404ec3
ID des fehlerhaften Prozesses: 0x878
Startzeit der fehlerhaften Anwendung: 0xtaskhost.exe0
Pfad der fehlerhaften Anwendung: taskhost.exe1
Pfad des fehlerhaften Moduls: taskhost.exe2
Berichtskennung: taskhost.exe3

Error: (10/12/2015 01:34:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TweetDeck.exe, Version: 3.3.7.0, Zeitstempel: 0x52738582
Name des fehlerhaften Moduls: libcef.dll, Version: 3.1547.1412.0, Zeitstempel: 0x5217c1eb
Ausnahmecode: 0x80000003
Fehleroffset: 0x0003f600
ID des fehlerhaften Prozesses: 0x1248
Startzeit der fehlerhaften Anwendung: 0xTweetDeck.exe0
Pfad der fehlerhaften Anwendung: TweetDeck.exe1
Pfad des fehlerhaften Moduls: TweetDeck.exe2
Berichtskennung: TweetDeck.exe3

Error: (10/11/2015 06:59:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 41.0.1.5750 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1354

Startzeit: 01d1041af70e3fed

Endzeit: 336

Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe

Berichts-ID: 65e2930a-7039-11e5-a8ec-b888e3bd1368


Systemfehler:
=============
Error: (10/21/2015 08:48:35 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (10/21/2015 08:12:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {76D0CB12-7604-4048-B83C-1005C7DDC503}

Error: (10/21/2015 08:05:46 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 08:05:46 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 08:05:45 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 08:05:45 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 04:04:32 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 04:04:32 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 04:04:32 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/21/2015 04:04:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU B960 @ 2.20GHz
Prozentuale Nutzung des RAM: 69%
Installierter physikalischer RAM: 2642.36 MB
Verfügbarer physikalischer RAM: 817.3 MB
Summe virtueller Speicher: 5283.03 MB
Verfügbarer virtueller Speicher: 2788.6 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:208.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 9ABFF84B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-10-21 21:40:36
Windows 6.1.7601 Service Pack 1
Running: Gmer-19357.exe; Driver: C:\Users\Lucia\AppData\Local\Temp\kwddypob.sys


---- Registry - GMER 2.1 ----

Reg  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active         
Reg  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@2EF7FC13  106

---- EOF - GMER 2.1 ----
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f5dbb2d9fd69f04e8aee579a8238584c
# end=init
# utc_time=2015-10-20 05:48:37
# local_time=2015-10-20 07:48:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26327
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f5dbb2d9fd69f04e8aee579a8238584c
# end=updated
# utc_time=2015-10-20 05:50:26
# local_time=2015-10-20 07:50:26 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f5dbb2d9fd69f04e8aee579a8238584c
# engine=26327
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-20 06:45:47
# local_time=2015-10-20 08:45:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 6860 196997938 0 0
# compatibility_mode_1='Emsisoft Anti-Malware'
# compatibility_mode=16901 16777213 100 100 6495 137935213 0 0
# scanned=173330
# found=0
# cleaned=0
# scan_time=3320

schrauber 22.10.2015 06:08
hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Luuminous 22.10.2015 13:11
Hallo und danke für die Hilfe! :knuddel:
Anbei die gewünschten Logs. Da mbar nichts gefunden hat und daher auch keinen Neustart wollte, habe ich den zweiten Scan weggelassen. War das in Ordnung oder soll ich den noch nachholen?

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.10.22.03
  rootkit: v2015.10.16.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.18059
Lucia :: SHUFFLE [administrator]

22.10.2015 13:32:38
mbar-log-2015-10-22 (13-32-38).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 284882
Time elapsed: 24 minute(s), 43 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
14:03:10.0703 0x16a0  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
14:03:32.0334 0x16a0  ============================================================
14:03:32.0334 0x16a0  Current date / time: 2015/10/22 14:03:32.0334
14:03:32.0334 0x16a0  SystemInfo:
14:03:32.0334 0x16a0 
14:03:32.0334 0x16a0  OS Version: 6.1.7601 ServicePack: 1.0
14:03:32.0334 0x16a0  Product type: Workstation
14:03:32.0334 0x16a0  ComputerName: SHUFFLE
14:03:32.0334 0x16a0  UserName: Lucia
14:03:32.0334 0x16a0  Windows directory: C:\Windows
14:03:32.0334 0x16a0  System windows directory: C:\Windows
14:03:32.0335 0x16a0  Processor architecture: Intel x86
14:03:32.0335 0x16a0  Number of processors: 2
14:03:32.0335 0x16a0  Page size: 0x1000
14:03:32.0335 0x16a0  Boot type: Normal boot
14:03:32.0335 0x16a0  ============================================================
14:03:33.0620 0x16a0  KLMD registered as C:\Windows\system32\drivers\62124021.sys
14:03:34.0125 0x16a0  System UUID: {B9722C41-92A6-1FFA-AA2F-7FD5B1755FD5}
14:03:34.0728 0x16a0  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:03:34.0729 0x16a0  ============================================================
14:03:34.0729 0x16a0  \Device\Harddisk0\DR0:
14:03:34.0729 0x16a0  MBR partitions:
14:03:34.0730 0x16a0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:03:34.0730 0x16a0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000
14:03:34.0730 0x16a0  ============================================================
14:03:34.0804 0x16a0  C: <-> \Device\Harddisk0\DR0\Partition2
14:03:34.0819 0x16a0  ============================================================
14:03:34.0819 0x16a0  Initialize success
14:03:34.0820 0x16a0  ============================================================
14:04:31.0444 0x0c9c  ============================================================
14:04:31.0445 0x0c9c  Scan started
14:04:31.0445 0x0c9c  Mode: Manual; SigCheck; TDLFS;
14:04:31.0445 0x0c9c  ============================================================
14:04:31.0445 0x0c9c  KSN ping started
14:04:33.0904 0x0c9c  KSN ping finished: true
14:04:34.0798 0x0c9c  ================ Scan system memory ========================
14:04:34.0798 0x0c9c  System memory - ok
14:04:34.0799 0x0c9c  ================ Scan services =============================
14:04:34.0978 0x0c9c  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
14:04:35.0226 0x0c9c  1394ohci - ok
14:04:35.0582 0x0c9c  [ AFF6827F620F2E72859B16536B57F8FB, E749F140A1D87927BEF23318B4C78E07438B70BDDD812FB927DBFEFE8B2B2549 ] a2AntiMalware  C:\Program Files\Emsisoft Anti-Malware\a2service.exe
14:04:35.0828 0x0c9c  a2AntiMalware - ok
14:04:35.0881 0x0c9c  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:04:35.0900 0x0c9c  ACPI - ok
14:04:35.0922 0x0c9c  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
14:04:35.0988 0x0c9c  AcpiPmi - ok
14:04:36.0095 0x0c9c  [ 8C194A201698B4B4F77D974549819D1F, 081A2496FE1CE519E48677D99A831FF1FEEB1B33C75224CF288FA52F3E0E5FF0 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:04:36.0136 0x0c9c  AdobeFlashPlayerUpdateSvc - ok
14:04:36.0203 0x0c9c  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
14:04:36.0233 0x0c9c  adp94xx - ok
14:04:36.0252 0x0c9c  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
14:04:36.0271 0x0c9c  adpahci - ok
14:04:36.0300 0x0c9c  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
14:04:36.0314 0x0c9c  adpu320 - ok
14:04:36.0336 0x0c9c  [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
14:04:36.0406 0x0c9c  AeLookupSvc - ok
14:04:36.0447 0x0c9c  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD            C:\Windows\system32\drivers\afd.sys
14:04:36.0539 0x0c9c  AFD - ok
14:04:36.0588 0x0c9c  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
14:04:36.0614 0x0c9c  agp440 - ok
14:04:36.0669 0x0c9c  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx        C:\Windows\system32\DRIVERS\djsvs.sys
14:04:36.0688 0x0c9c  aic78xx - ok
14:04:36.0740 0x0c9c  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG            C:\Windows\System32\alg.exe
14:04:36.0783 0x0c9c  ALG - ok
14:04:36.0822 0x0c9c  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:04:36.0849 0x0c9c  aliide - ok
14:04:36.0874 0x0c9c  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
14:04:36.0888 0x0c9c  amdagp - ok
14:04:36.0901 0x0c9c  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
14:04:36.0912 0x0c9c  amdide - ok
14:04:36.0944 0x0c9c  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
14:04:37.0000 0x0c9c  AmdK8 - ok
14:04:37.0018 0x0c9c  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
14:04:37.0033 0x0c9c  AmdPPM - ok
14:04:37.0087 0x0c9c  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
14:04:37.0118 0x0c9c  amdsata - ok
14:04:37.0169 0x0c9c  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
14:04:37.0185 0x0c9c  amdsbs - ok
14:04:37.0215 0x0c9c  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
14:04:37.0227 0x0c9c  amdxata - ok
14:04:37.0296 0x0c9c  [ FE4F2ADE5DBB3B888E9EB0A1FBA1F152, B17053A912C73835A2E80176D79885B530E15240B988125114B6B877C903D61C ] AppID          C:\Windows\system32\drivers\appid.sys
14:04:37.0401 0x0c9c  AppID - ok
14:04:37.0450 0x0c9c  [ A4DA304773AC1396792C5DE1D1EB601A, ECD23FF67FB1C4B94DBE23F6724E2DA0917CE0E479DE9C9F790A8635A2234950 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:04:37.0493 0x0c9c  AppIDSvc - ok
14:04:37.0529 0x0c9c  [ 133A7896E643D139443B47FDBFA327C7, 371FC602B531DF1EFDCEEC3A2F5497A0D0BE7F558B0583F572862C69A65BD454 ] Appinfo        C:\Windows\System32\appinfo.dll
14:04:37.0620 0x0c9c  Appinfo - ok
14:04:37.0668 0x0c9c  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt        C:\Windows\System32\appmgmts.dll
14:04:37.0741 0x0c9c  AppMgmt - ok
14:04:37.0770 0x0c9c  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc            C:\Windows\system32\DRIVERS\arc.sys
14:04:37.0785 0x0c9c  arc - ok
14:04:37.0805 0x0c9c  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
14:04:37.0820 0x0c9c  arcsas - ok
14:04:37.0904 0x0c9c  [ 537B2948976F5D9B5767B74A63EBB395, 1A14F8B582E74AD15B612EDA5B707AA3CB0B2A107ED14572B4232EAA7383B634 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:04:37.0934 0x0c9c  aspnet_state - ok
14:04:37.0964 0x0c9c  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:04:38.0057 0x0c9c  AsyncMac - ok
14:04:38.0097 0x0c9c  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi          C:\Windows\system32\drivers\atapi.sys
14:04:38.0108 0x0c9c  atapi - ok
14:04:38.0213 0x0c9c  [ 8309BF4D39DAA99E5035B58C7B1533D9, 78A986B99FF6329F4BE64EEF99C411EF55171D1F867DB1801E2EEFF19B7FE2BD ] athr            C:\Windows\system32\DRIVERS\athr.sys
14:04:38.0356 0x0c9c  athr - ok
14:04:38.0400 0x0c9c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:04:38.0533 0x0c9c  AudioEndpointBuilder - ok
14:04:38.0573 0x0c9c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
14:04:38.0602 0x0c9c  Audiosrv - ok
14:04:38.0632 0x0c9c  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:04:38.0722 0x0c9c  AxInstSV - ok
14:04:38.0767 0x0c9c  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbdx.sys
14:04:38.0839 0x0c9c  b06bdrv - ok
14:04:38.0876 0x0c9c  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
14:04:38.0917 0x0c9c  b57nd60x - ok
14:04:38.0949 0x0c9c  [ 0FEBD51BA19FC5079B61D8C374C8809A, E83B655E4DD425B4BF6280EF3E10972824A4EC083423733C41DAB7EBD8D10CA9 ] b57xdbd        C:\Windows\system32\DRIVERS\b57xdbd.sys
14:04:38.0970 0x0c9c  b57xdbd - ok
14:04:38.0976 0x0c9c  [ 2AB28236A9671A4867F9FECC104F6AB7, 08FFB0492DB6FF28E5AD5A24A64219D7C114C41EB226E1F740A544E54599D22A ] b57xdmp        C:\Windows\system32\DRIVERS\b57xdmp.sys
14:04:38.0985 0x0c9c  b57xdmp - ok
14:04:39.0028 0x0c9c  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
14:04:39.0105 0x0c9c  BDESVC - ok
14:04:39.0134 0x0c9c  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:04:39.0203 0x0c9c  Beep - ok
14:04:39.0253 0x0c9c  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE            C:\Windows\System32\bfe.dll
14:04:39.0319 0x0c9c  BFE - ok
14:04:39.0370 0x0c9c  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
14:04:39.0491 0x0c9c  BITS - ok
14:04:39.0519 0x0c9c  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:04:39.0536 0x0c9c  blbdrive - ok
14:04:39.0567 0x0c9c  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:04:39.0649 0x0c9c  bowser - ok
14:04:39.0663 0x0c9c  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:04:39.0723 0x0c9c  BrFiltLo - ok
14:04:39.0742 0x0c9c  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:04:39.0770 0x0c9c  BrFiltUp - ok
14:04:39.0821 0x0c9c  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser        C:\Windows\System32\browser.dll
14:04:39.0893 0x0c9c  Browser - ok
14:04:39.0931 0x0c9c  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
14:04:39.0982 0x0c9c  Brserid - ok
14:04:40.0005 0x0c9c  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:04:40.0043 0x0c9c  BrSerWdm - ok
14:04:40.0082 0x0c9c  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:04:40.0109 0x0c9c  BrUsbMdm - ok
14:04:40.0125 0x0c9c  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:04:40.0145 0x0c9c  BrUsbSer - ok
14:04:40.0174 0x0c9c  [ 9C01DC83392D5DDC4CEC3AC18A7B10CF, 61D7AB75C5AA0FDC6D73C0B8537A8F7DD5F5CC7FE5C86A38D898384318C12803 ] bScsiMSx        C:\Windows\system32\DRIVERS\bScsiMSx.sys
14:04:40.0185 0x0c9c  bScsiMSx - ok
14:04:40.0213 0x0c9c  [ 73D596C31AE4CEF3F71A83D92F0C5977, 8F1D0830D67404EFD28E86EAED5B4226F637ACCB075D865F8D04CCD897F7B37D ] bScsiSDx        C:\Windows\system32\DRIVERS\bScsiSDx.sys
14:04:40.0225 0x0c9c  bScsiSDx - ok
14:04:40.0245 0x0c9c  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
14:04:40.0275 0x0c9c  BTHMODEM - ok
14:04:40.0307 0x0c9c  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv        C:\Windows\system32\bthserv.dll
14:04:40.0361 0x0c9c  bthserv - ok
14:04:40.0396 0x0c9c  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:04:40.0435 0x0c9c  cdfs - ok
14:04:40.0469 0x0c9c  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
14:04:40.0512 0x0c9c  cdrom - ok
14:04:40.0559 0x0c9c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc    C:\Windows\System32\certprop.dll
14:04:40.0601 0x0c9c  CertPropSvc - ok
14:04:40.0631 0x0c9c  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
14:04:40.0657 0x0c9c  circlass - ok
14:04:40.0692 0x0c9c  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\Windows\system32\CLFS.sys
14:04:40.0712 0x0c9c  CLFS - ok
14:04:40.0782 0x0c9c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:04:40.0795 0x0c9c  clr_optimization_v2.0.50727_32 - ok
14:04:40.0848 0x0c9c  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:04:40.0877 0x0c9c  clr_optimization_v4.0.30319_32 - ok
14:04:40.0901 0x0c9c  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
14:04:40.0939 0x0c9c  CmBatt - ok
14:04:40.0955 0x0c9c  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:04:40.0968 0x0c9c  cmdide - ok
14:04:41.0011 0x0c9c  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG            C:\Windows\system32\Drivers\cng.sys
14:04:41.0038 0x0c9c  CNG - ok
14:04:41.0070 0x0c9c  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
14:04:41.0080 0x0c9c  Compbatt - ok
14:04:41.0112 0x0c9c  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
14:04:41.0134 0x0c9c  CompositeBus - ok
14:04:41.0146 0x0c9c  COMSysApp - ok
14:04:41.0184 0x0c9c  [ E0A7C8F5791A13B2CB8D3C7ABC499926, EBBEBB80850372C7DD0F50703419D94F6BDF7B8F2D7BD44E96C5F923B006638F ] cphs            C:\Windows\system32\IntelCpHeciSvc.exe
14:04:41.0203 0x0c9c  cphs - ok
14:04:41.0229 0x0c9c  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
14:04:41.0241 0x0c9c  crcdisk - ok
14:04:41.0284 0x0c9c  [ 33F67BBCC3C0499D3F3382473114CFA8, FDDCC41CE005B7C1BEBB6F4ACA9A3F10E5972792ADFD7D294E70A0B781460981 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:04:41.0372 0x0c9c  CryptSvc - ok
14:04:41.0407 0x0c9c  [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC            C:\Windows\system32\drivers\csc.sys
14:04:41.0450 0x0c9c  CSC - ok
14:04:41.0487 0x0c9c  [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService      C:\Windows\System32\cscsvc.dll
14:04:41.0540 0x0c9c  CscService - ok
14:04:41.0573 0x0c9c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:04:41.0617 0x0c9c  DcomLaunch - ok
14:04:41.0648 0x0c9c  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc      C:\Windows\System32\defragsvc.dll
14:04:41.0690 0x0c9c  defragsvc - ok
14:04:41.0723 0x0c9c  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:04:41.0776 0x0c9c  DfsC - ok
14:04:41.0827 0x0c9c  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:04:41.0870 0x0c9c  Dhcp - ok
14:04:41.0955 0x0c9c  [ 0A3386E3CF9C5D089D695AC5A35F4C6F, D610071493EB95FCE39E24C457A0B5BBA131193159E43FDC1E8EDABB9C7AB81A ] DiagTrack      C:\Windows\system32\diagtrack.dll
14:04:42.0058 0x0c9c  DiagTrack - ok
14:04:42.0094 0x0c9c  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
14:04:42.0131 0x0c9c  discache - ok
14:04:42.0149 0x0c9c  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
14:04:42.0160 0x0c9c  Disk - ok
14:04:42.0188 0x0c9c  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:04:42.0207 0x0c9c  Dnscache - ok
14:04:42.0237 0x0c9c  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc        C:\Windows\System32\dot3svc.dll
14:04:42.0285 0x0c9c  dot3svc - ok
14:04:42.0309 0x0c9c  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS            C:\Windows\system32\dps.dll
14:04:42.0383 0x0c9c  DPS - ok
14:04:42.0413 0x0c9c  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
14:04:42.0485 0x0c9c  drmkaud - ok
14:04:42.0520 0x0c9c  [ C02FF01B821FBB72104132E56EC5B881, 161AC96EE71C9B1F59ACE07EDC7550E1203C8DEFF6B333D298D564FAF536CF96 ] DsiWMIService  C:\Program Files\Launch Manager\dsiwmis.exe
14:04:42.0540 0x0c9c  DsiWMIService - ok
14:04:42.0592 0x0c9c  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
14:04:42.0641 0x0c9c  DXGKrnl - ok
14:04:42.0685 0x0c9c  [ 22EF8965101685ADD128F03A2B03CE16, 677F7B32C7A45C26F2F0DB67FFB526E9742E4B3A8BEAEA7B814CBCA2F56D6D5A ] E1G60          C:\Windows\system32\DRIVERS\E1G60I32.sys
14:04:42.0718 0x0c9c  E1G60 - ok
14:04:42.0757 0x0c9c  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost        C:\Windows\System32\eapsvc.dll
14:04:42.0807 0x0c9c  EapHost - ok
14:04:42.0926 0x0c9c  [ 560EDC0912BDB68290930E2542823A24, CB9578A19F717FBD388F2BE8179CF2D4755DF11AD246E13AF1D43E25CA026386 ] eapihdrv        C:\Users\Lucia\AppData\Local\Temp\ehdrv.sys
14:04:42.0989 0x0c9c  eapihdrv - ok
14:04:43.0163 0x0c9c  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv          C:\Windows\system32\DRIVERS\evbdx.sys
14:04:43.0308 0x0c9c  ebdrv - ok
14:04:43.0337 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] EFS            C:\Windows\System32\lsass.exe
14:04:43.0420 0x0c9c  EFS - ok
14:04:43.0487 0x0c9c  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
14:04:43.0547 0x0c9c  ehRecvr - ok
14:04:43.0582 0x0c9c  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched        C:\Windows\ehome\ehsched.exe
14:04:43.0656 0x0c9c  ehSched - ok
14:04:43.0695 0x0c9c  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
14:04:43.0722 0x0c9c  elxstor - ok
14:04:43.0773 0x0c9c  [ 92BBDBA2E5C94CE6E7E9D76695E4FB32, C82345A4565613391ABAB18665D8EDD7B8CD0A4D3C4B40EE0EB9F12BBB3A88EC ] epp32          C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp32.sys
14:04:43.0785 0x0c9c  epp32 - ok
14:04:43.0820 0x0c9c  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:04:43.0845 0x0c9c  ErrDev - ok
14:04:43.0886 0x0c9c  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem    C:\Windows\system32\es.dll
14:04:43.0939 0x0c9c  EventSystem - ok
14:04:43.0977 0x0c9c  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat          C:\Windows\system32\drivers\exfat.sys
14:04:44.0021 0x0c9c  exfat - ok
14:04:44.0029 0x0c9c  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
14:04:44.0058 0x0c9c  fastfat - ok
14:04:44.0100 0x0c9c  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax            C:\Windows\system32\fxssvc.exe
14:04:44.0172 0x0c9c  Fax - ok
14:04:44.0203 0x0c9c  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
14:04:44.0216 0x0c9c  fdc - ok
14:04:44.0245 0x0c9c  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost        C:\Windows\system32\fdPHost.dll
14:04:44.0285 0x0c9c  fdPHost - ok
14:04:44.0300 0x0c9c  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
14:04:44.0336 0x0c9c  FDResPub - ok
14:04:44.0353 0x0c9c  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:04:44.0365 0x0c9c  FileInfo - ok
14:04:44.0379 0x0c9c  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
14:04:44.0420 0x0c9c  Filetrace - ok
14:04:44.0443 0x0c9c  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
14:04:44.0475 0x0c9c  flpydisk - ok
14:04:44.0491 0x0c9c  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:04:44.0508 0x0c9c  FltMgr - ok
14:04:44.0580 0x0c9c  [ 37DE123FE4276D8EC7F3C5B10C236238, 93CA47B9A96D904DD177FC0E04DECDF13756C8FA3C7613913DB4BF29A70ECE96 ] FontCache      C:\Windows\system32\FntCache.dll
14:04:44.0882 0x0c9c  FontCache - ok
14:04:44.0976 0x0c9c  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:04:44.0987 0x0c9c  FontCache3.0.0.0 - ok
14:04:45.0027 0x0c9c  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
14:04:45.0037 0x0c9c  FsDepends - ok
14:04:45.0058 0x0c9c  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:04:45.0069 0x0c9c  Fs_Rec - ok
14:04:45.0118 0x0c9c  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:04:45.0148 0x0c9c  fvevol - ok
14:04:45.0188 0x0c9c  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
14:04:45.0213 0x0c9c  gagp30kx - ok
14:04:45.0312 0x0c9c  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc          C:\Windows\System32\gpsvc.dll
14:04:45.0384 0x0c9c  gpsvc - ok
14:04:45.0520 0x0c9c  [ C6FF00DA1605982E616C03BE809FFE2D, 4D9C86B9FF2FA291DC320677D28DF00C26834409F7AD94D6C07D2233ED746B19 ] gupdate        C:\Program Files\Google\Update\GoogleUpdate.exe
14:04:45.0535 0x0c9c  gupdate - ok
14:04:45.0543 0x0c9c  [ C6FF00DA1605982E616C03BE809FFE2D, 4D9C86B9FF2FA291DC320677D28DF00C26834409F7AD94D6C07D2233ED746B19 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
14:04:45.0556 0x0c9c  gupdatem - ok
14:04:45.0602 0x0c9c  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:04:45.0658 0x0c9c  hcw85cir - ok
14:04:45.0698 0x0c9c  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:04:45.0750 0x0c9c  HdAudAddService - ok
14:04:45.0783 0x0c9c  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
14:04:45.0822 0x0c9c  HDAudBus - ok
14:04:45.0852 0x0c9c  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
14:04:45.0885 0x0c9c  HidBatt - ok
14:04:45.0906 0x0c9c  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
14:04:45.0926 0x0c9c  HidBth - ok
14:04:45.0950 0x0c9c  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
14:04:45.0984 0x0c9c  HidIr - ok
14:04:46.0011 0x0c9c  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv        C:\Windows\system32\hidserv.dll
14:04:46.0048 0x0c9c  hidserv - ok
14:04:46.0077 0x0c9c  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
14:04:46.0108 0x0c9c  HidUsb - ok
14:04:46.0141 0x0c9c  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:04:46.0170 0x0c9c  hkmsvc - ok
14:04:46.0185 0x0c9c  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:04:46.0226 0x0c9c  HomeGroupListener - ok
14:04:46.0243 0x0c9c  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:04:46.0279 0x0c9c  HomeGroupProvider - ok
14:04:46.0316 0x0c9c  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:04:46.0329 0x0c9c  HpSAMD - ok
14:04:46.0374 0x0c9c  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:04:46.0445 0x0c9c  HTTP - ok
14:04:46.0472 0x0c9c  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:04:46.0483 0x0c9c  hwpolicy - ok
14:04:46.0513 0x0c9c  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
14:04:46.0543 0x0c9c  i8042prt - ok
14:04:46.0582 0x0c9c  [ 76C3966183BD5382E14CEB6DF97D9709, 52A2676FED3A73182D7BA3AC4EA954BC2DC8879CE71DB973E37720B2F0A7392A ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
14:04:46.0605 0x0c9c  iaStor - ok
14:04:46.0669 0x0c9c  [ 545462D0DBE24AF379BA869B7C185CCD, 056F9D0D5FD4FEF37665A35A4029722FF60D02A69854E952DC361CC0E5CD26F9 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
14:04:46.0678 0x0c9c  IAStorDataMgrSvc - ok
14:04:46.0743 0x0c9c  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
14:04:46.0774 0x0c9c  iaStorV - ok
14:04:46.0871 0x0c9c  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc          C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:04:46.0926 0x0c9c  idsvc - ok
14:04:46.0931 0x0c9c  IEEtwCollectorService - ok
14:04:47.0405 0x0c9c  [ B48D92C2A50056CDFD0FEB361F0E5E99, EC612F3AA976624E6970400B0A4D666E4F52732FEE44E51781BE58E69DA2A9F7 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
14:04:47.0998 0x0c9c  igfx - ok
14:04:48.0055 0x0c9c  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
14:04:48.0066 0x0c9c  iirsp - ok
14:04:48.0100 0x0c9c  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
14:04:48.0146 0x0c9c  IKEEXT - ok
14:04:48.0323 0x0c9c  [ 15DCAE77CD3A481E1AF74DB7BA217E44, 915C97113D6E559A3AC5B4DDBE42F64CB7967CBE7A474497DF5F336009ED7966 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:04:48.0473 0x0c9c  IntcAzAudAddService - ok
14:04:48.0519 0x0c9c  [ 7081EFE4EBF9CBBFF4EB5A3AC478DDC5, 014B53477E77FDE4A9B1254EED710658F8BAC2FADE423D13F5141F98EBA3A048 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
14:04:48.0556 0x0c9c  IntcDAud - ok
14:04:48.0609 0x0c9c  [ C86A9AA1CBC4C3C2C5C9DD0F6D939926, E8D3C2BA7679895AC4836FA9568B8264E5512C1163CFFF4E9E14C406CDF60059 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
14:04:48.0632 0x0c9c  Intel(R) Capability Licensing Service Interface - ok
14:04:48.0667 0x0c9c  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
14:04:48.0679 0x0c9c  intelide - ok
14:04:48.0722 0x0c9c  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:04:48.0740 0x0c9c  intelppm - ok
14:04:48.0766 0x0c9c  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
14:04:48.0799 0x0c9c  IPBusEnum - ok
14:04:48.0816 0x0c9c  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:04:48.0853 0x0c9c  IpFilterDriver - ok
14:04:48.0895 0x0c9c  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:04:48.0938 0x0c9c  iphlpsvc - ok
14:04:48.0961 0x0c9c  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
14:04:48.0989 0x0c9c  IPMIDRV - ok
14:04:49.0028 0x0c9c  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
14:04:49.0057 0x0c9c  IPNAT - ok
14:04:49.0079 0x0c9c  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:04:49.0137 0x0c9c  IRENUM - ok
14:04:49.0162 0x0c9c  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:04:49.0174 0x0c9c  isapnp - ok
14:04:49.0203 0x0c9c  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:04:49.0222 0x0c9c  iScsiPrt - ok
14:04:49.0281 0x0c9c  [ DBD76BC1D498FE368F2C8CB76C3E00A4, CDFB082B57807CE89509A16D1C8A5BAEEC026EDD7068F5E359AA50557D2525DC ] jhi_service    C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
14:04:49.0307 0x0c9c  jhi_service - ok
14:04:49.0355 0x0c9c  [ D053F0D41A71D3C13C7DD3825BE362AC, 90C801E13095E8A0587B0923991BC8CDB7E31B302207AF843EDD040325E769B1 ] k57nd60x        C:\Windows\system32\DRIVERS\k57nd60x.sys
14:04:49.0379 0x0c9c  k57nd60x - ok
14:04:49.0402 0x0c9c  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
14:04:49.0419 0x0c9c  kbdclass - ok
14:04:49.0452 0x0c9c  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
14:04:49.0499 0x0c9c  kbdhid - ok
14:04:49.0515 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] KeyIso          C:\Windows\system32\lsass.exe
14:04:49.0528 0x0c9c  KeyIso - ok
14:04:49.0575 0x0c9c  [ AFBAF1FD434B1C0AFE6EE6DE3066A0F1, 60CB5D4786A036898E813849D74204A2486F30C8D7B0C843F9544FDFBB2EC532 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:04:49.0602 0x0c9c  KSecDD - ok
14:04:49.0621 0x0c9c  [ F6A2B372BED88AF01383739F5280D961, 306061B94027D6544D1DECAB70663C427E091CC8D5EAAF920B3CDBAB7F2C1CFA ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
14:04:49.0636 0x0c9c  KSecPkg - ok
14:04:49.0668 0x0c9c  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm          C:\Windows\system32\msdtckrm.dll
14:04:49.0728 0x0c9c  KtmRm - ok
14:04:49.0777 0x0c9c  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
14:04:49.0825 0x0c9c  LanmanServer - ok
14:04:49.0848 0x0c9c  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:04:49.0886 0x0c9c  LanmanWorkstation - ok
14:04:49.0922 0x0c9c  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:04:49.0959 0x0c9c  lltdio - ok
14:04:49.0991 0x0c9c  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
14:04:50.0040 0x0c9c  lltdsvc - ok
14:04:50.0064 0x0c9c  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts        C:\Windows\System32\lmhsvc.dll
14:04:50.0102 0x0c9c  lmhosts - ok
14:04:50.0140 0x0c9c  [ 86E4CC39C953D11EF57CF54C4DC78238, 076973CA22E8BA94877241EC39D97612C32F3E744E026FA0E518C4DDE8277A55 ] LMS            C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:04:50.0155 0x0c9c  LMS - ok
14:04:50.0190 0x0c9c  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
14:04:50.0203 0x0c9c  LSI_FC - ok
14:04:50.0220 0x0c9c  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
14:04:50.0232 0x0c9c  LSI_SAS - ok
14:04:50.0247 0x0c9c  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:04:50.0258 0x0c9c  LSI_SAS2 - ok
14:04:50.0276 0x0c9c  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:04:50.0289 0x0c9c  LSI_SCSI - ok
14:04:50.0304 0x0c9c  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv          C:\Windows\system32\drivers\luafv.sys
14:04:50.0341 0x0c9c  luafv - ok
14:04:50.0370 0x0c9c  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
14:04:50.0384 0x0c9c  Mcx2Svc - ok
14:04:50.0406 0x0c9c  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
14:04:50.0417 0x0c9c  megasas - ok
14:04:50.0448 0x0c9c  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
14:04:50.0465 0x0c9c  MegaSR - ok
14:04:50.0487 0x0c9c  [ 9E0A56C77E9244D2CAAC3811F4B47FCB, 0E70544BBA78DD8E43C5746C064C895A0990373F667A0B6AEA832FBEA2D2B764 ] MEI            C:\Windows\system32\DRIVERS\HECI.sys
14:04:50.0496 0x0c9c  MEI - ok
14:04:50.0518 0x0c9c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS          C:\Windows\system32\mmcss.dll
14:04:50.0551 0x0c9c  MMCSS - ok
14:04:50.0571 0x0c9c  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem          C:\Windows\system32\drivers\modem.sys
14:04:50.0616 0x0c9c  Modem - ok
14:04:50.0658 0x0c9c  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
14:04:50.0683 0x0c9c  monitor - ok
14:04:50.0708 0x0c9c  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\drivers\mouclass.sys
14:04:50.0720 0x0c9c  mouclass - ok
14:04:50.0746 0x0c9c  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:04:50.0770 0x0c9c  mouhid - ok
14:04:50.0788 0x0c9c  [ BAD9C0366134BA181514E9263C8CE606, 7976B2D3DC283ACDBC21C7D197C0E2A650E6555F6569283302766B17D736BDB8 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:04:50.0802 0x0c9c  mountmgr - ok
14:04:50.0872 0x0c9c  [ C34AB4280614658903BE848CE79ACDB5, 9A943D9B3CF941DAE4EA4E2771B5EC5DA37AB16AD43095EF092B4259D62FF810 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:04:50.0899 0x0c9c  MozillaMaintenance - ok
14:04:50.0918 0x0c9c  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:04:50.0931 0x0c9c  mpio - ok
14:04:50.0951 0x0c9c  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:04:50.0976 0x0c9c  mpsdrv - ok
14:04:51.0041 0x0c9c  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:04:51.0093 0x0c9c  MpsSvc - ok
14:04:51.0118 0x0c9c  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:04:51.0168 0x0c9c  MRxDAV - ok
14:04:51.0219 0x0c9c  [ 249FE98BD066894910A32DD53C8C5D16, 5B22F7DD6ADFB0A49EC101A408407CE3B69D07A71D2A9C21D2BAD7B6DCE83A45 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:04:51.0263 0x0c9c  mrxsmb - ok
14:04:51.0297 0x0c9c  [ F9DCC39B1F4797448213725BFE4A26AC, 80BC41BAD98D0773E084BE81F13DB985F74A9FC44967295F930C3F2B3448CD7B ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:04:51.0324 0x0c9c  mrxsmb10 - ok
14:04:51.0346 0x0c9c  [ B74DE20F28B634FFD5F5F2CAE9D4ABEE, EDD405EB48C9DF546226777F0166742784203E9560229D7E76F0BAB1FB237CC9 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:04:51.0362 0x0c9c  mrxsmb20 - ok
14:04:51.0388 0x0c9c  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
14:04:51.0398 0x0c9c  msahci - ok
14:04:51.0427 0x0c9c  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
14:04:51.0441 0x0c9c  msdsm - ok
14:04:51.0462 0x0c9c  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC          C:\Windows\System32\msdtc.exe
14:04:51.0492 0x0c9c  MSDTC - ok
14:04:51.0521 0x0c9c  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:04:51.0553 0x0c9c  Msfs - ok
14:04:51.0562 0x0c9c  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
14:04:51.0589 0x0c9c  mshidkmdf - ok
14:04:51.0620 0x0c9c  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:04:51.0631 0x0c9c  msisadrv - ok
14:04:51.0660 0x0c9c  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
14:04:51.0704 0x0c9c  MSiSCSI - ok
14:04:51.0708 0x0c9c  msiserver - ok
14:04:51.0748 0x0c9c  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
14:04:51.0780 0x0c9c  MSKSSRV - ok
14:04:51.0795 0x0c9c  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:04:51.0828 0x0c9c  MSPCLOCK - ok
14:04:51.0832 0x0c9c  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
14:04:51.0859 0x0c9c  MSPQM - ok
14:04:51.0878 0x0c9c  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
14:04:51.0892 0x0c9c  MsRPC - ok
14:04:51.0918 0x0c9c  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
14:04:51.0928 0x0c9c  mssmbios - ok
14:04:51.0965 0x0c9c  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
14:04:52.0007 0x0c9c  MSTEE - ok
14:04:52.0012 0x0c9c  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
14:04:52.0040 0x0c9c  MTConfig - ok
14:04:52.0054 0x0c9c  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup            C:\Windows\system32\Drivers\mup.sys
14:04:52.0067 0x0c9c  Mup - ok
14:04:52.0094 0x0c9c  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
14:04:52.0143 0x0c9c  napagent - ok
14:04:52.0186 0x0c9c  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
14:04:52.0207 0x0c9c  NativeWifiP - ok
14:04:52.0261 0x0c9c  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:04:52.0305 0x0c9c  NDIS - ok
14:04:52.0330 0x0c9c  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
14:04:52.0366 0x0c9c  NdisCap - ok
14:04:52.0386 0x0c9c  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:04:52.0411 0x0c9c  NdisTapi - ok
14:04:52.0434 0x0c9c  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
14:04:52.0459 0x0c9c  Ndisuio - ok
14:04:52.0483 0x0c9c  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
14:04:52.0524 0x0c9c  NdisWan - ok
14:04:52.0536 0x0c9c  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
14:04:52.0569 0x0c9c  NDProxy - ok
14:04:52.0598 0x0c9c  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
14:04:52.0654 0x0c9c  NetBIOS - ok
14:04:52.0679 0x0c9c  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
14:04:52.0710 0x0c9c  NetBT - ok
14:04:52.0737 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] Netlogon        C:\Windows\system32\lsass.exe
14:04:52.0749 0x0c9c  Netlogon - ok
14:04:52.0799 0x0c9c  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
14:04:52.0834 0x0c9c  Netman - ok
14:04:52.0880 0x0c9c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:04:52.0899 0x0c9c  NetMsmqActivator - ok
14:04:52.0905 0x0c9c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:04:52.0920 0x0c9c  NetPipeActivator - ok
14:04:52.0964 0x0c9c  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
14:04:53.0019 0x0c9c  netprofm - ok
14:04:53.0069 0x0c9c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:04:53.0085 0x0c9c  NetTcpActivator - ok
14:04:53.0093 0x0c9c  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:04:53.0109 0x0c9c  NetTcpPortSharing - ok
14:04:53.0143 0x0c9c  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
14:04:53.0154 0x0c9c  nfrd960 - ok
14:04:53.0187 0x0c9c  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:04:53.0224 0x0c9c  NlaSvc - ok
14:04:53.0242 0x0c9c  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:04:53.0282 0x0c9c  Npfs - ok
14:04:53.0306 0x0c9c  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi            C:\Windows\system32\nsisvc.dll
14:04:53.0353 0x0c9c  nsi - ok
14:04:53.0387 0x0c9c  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:04:53.0416 0x0c9c  nsiproxy - ok
14:04:53.0487 0x0c9c  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:04:53.0546 0x0c9c  Ntfs - ok
14:04:53.0579 0x0c9c  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
14:04:53.0664 0x0c9c  Null - ok
14:04:53.0730 0x0c9c  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:04:53.0765 0x0c9c  nvraid - ok
14:04:53.0819 0x0c9c  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:04:53.0852 0x0c9c  nvstor - ok
14:04:53.0887 0x0c9c  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:04:53.0904 0x0c9c  nv_agp - ok
14:04:53.0939 0x0c9c  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:04:53.0954 0x0c9c  ohci1394 - ok
14:04:54.0008 0x0c9c  [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:04:54.0020 0x0c9c  ose - ok
14:04:54.0058 0x0c9c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:04:54.0104 0x0c9c  p2pimsvc - ok
14:04:54.0128 0x0c9c  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
14:04:54.0150 0x0c9c  p2psvc - ok
14:04:54.0193 0x0c9c  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport        C:\Windows\system32\DRIVERS\parport.sys
14:04:54.0242 0x0c9c  Parport - ok
14:04:54.0267 0x0c9c  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr        C:\Windows\system32\drivers\partmgr.sys
14:04:54.0285 0x0c9c  partmgr - ok
14:04:54.0295 0x0c9c  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
14:04:54.0329 0x0c9c  Parvdm - ok
14:04:54.0363 0x0c9c  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:04:54.0427 0x0c9c  PcaSvc - ok
14:04:54.0446 0x0c9c  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci            C:\Windows\system32\drivers\pci.sys
14:04:54.0465 0x0c9c  pci - ok
14:04:54.0486 0x0c9c  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
14:04:54.0499 0x0c9c  pciide - ok
14:04:54.0529 0x0c9c  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
14:04:54.0546 0x0c9c  pcmcia - ok
14:04:54.0559 0x0c9c  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw            C:\Windows\system32\drivers\pcw.sys
14:04:54.0572 0x0c9c  pcw - ok
14:04:54.0619 0x0c9c  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:04:54.0662 0x0c9c  PEAUTH - ok
14:04:54.0715 0x0c9c  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
14:04:54.0803 0x0c9c  PeerDistSvc - ok
14:04:54.0886 0x0c9c  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla            C:\Windows\system32\pla.dll
14:04:54.0982 0x0c9c  pla - ok
14:04:55.0017 0x0c9c  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:04:55.0102 0x0c9c  PlugPlay - ok
14:04:55.0112 0x0c9c  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
14:04:55.0134 0x0c9c  PNRPAutoReg - ok
14:04:55.0157 0x0c9c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
14:04:55.0177 0x0c9c  PNRPsvc - ok
14:04:55.0208 0x0c9c  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
14:04:55.0256 0x0c9c  PolicyAgent - ok
14:04:55.0292 0x0c9c  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power          C:\Windows\system32\umpo.dll
14:04:55.0325 0x0c9c  Power - ok
14:04:55.0362 0x0c9c  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:04:55.0402 0x0c9c  PptpMiniport - ok
14:04:55.0425 0x0c9c  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor      C:\Windows\system32\DRIVERS\processr.sys
14:04:55.0451 0x0c9c  Processor - ok
14:04:55.0478 0x0c9c  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc        C:\Windows\system32\profsvc.dll
14:04:55.0501 0x0c9c  ProfSvc - ok
14:04:55.0526 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] ProtectedStorage C:\Windows\system32\lsass.exe
14:04:55.0538 0x0c9c  ProtectedStorage - ok
14:04:55.0568 0x0c9c  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:04:55.0616 0x0c9c  Psched - ok
14:04:55.0718 0x0c9c  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
14:04:55.0792 0x0c9c  ql2300 - ok
14:04:55.0800 0x0c9c  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
14:04:55.0812 0x0c9c  ql40xx - ok
14:04:55.0840 0x0c9c  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE          C:\Windows\system32\qwave.dll
14:04:55.0867 0x0c9c  QWAVE - ok
14:04:55.0886 0x0c9c  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:04:55.0910 0x0c9c  QWAVEdrv - ok
14:04:55.0924 0x0c9c  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:04:55.0961 0x0c9c  RasAcd - ok
14:04:55.0995 0x0c9c  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
14:04:56.0044 0x0c9c  RasAgileVpn - ok
14:04:56.0085 0x0c9c  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto        C:\Windows\System32\rasauto.dll
14:04:56.0133 0x0c9c  RasAuto - ok
14:04:56.0150 0x0c9c  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
14:04:56.0195 0x0c9c  Rasl2tp - ok
14:04:56.0246 0x0c9c  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
14:04:56.0294 0x0c9c  RasMan - ok
14:04:56.0306 0x0c9c  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:04:56.0346 0x0c9c  RasPppoe - ok
14:04:56.0367 0x0c9c  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
14:04:56.0393 0x0c9c  RasSstp - ok
14:04:56.0426 0x0c9c  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
14:04:56.0456 0x0c9c  rdbss - ok
14:04:56.0474 0x0c9c  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:04:56.0488 0x0c9c  rdpbus - ok
14:04:56.0517 0x0c9c  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:04:56.0543 0x0c9c  RDPCDD - ok
14:04:56.0563 0x0c9c  [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
14:04:56.0642 0x0c9c  RDPDR - ok
14:04:56.0660 0x0c9c  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:04:56.0709 0x0c9c  RDPENCDD - ok
14:04:56.0719 0x0c9c  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:04:56.0762 0x0c9c  RDPREFMP - ok
14:04:56.0836 0x0c9c  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:04:56.0919 0x0c9c  RdpVideoMiniport - ok
14:04:56.0958 0x0c9c  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
14:04:57.0008 0x0c9c  RDPWD - ok
14:04:57.0044 0x0c9c  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:04:57.0060 0x0c9c  rdyboost - ok
14:04:57.0087 0x0c9c  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:04:57.0127 0x0c9c  RemoteAccess - ok
14:04:57.0152 0x0c9c  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
14:04:57.0188 0x0c9c  RemoteRegistry - ok
14:04:57.0202 0x0c9c  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:04:57.0245 0x0c9c  RpcEptMapper - ok
14:04:57.0267 0x0c9c  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
14:04:57.0300 0x0c9c  RpcLocator - ok
14:04:57.0333 0x0c9c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs          C:\Windows\system32\rpcss.dll
14:04:57.0371 0x0c9c  RpcSs - ok
14:04:57.0396 0x0c9c  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:04:57.0435 0x0c9c  rspndr - ok
14:04:57.0465 0x0c9c  [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
14:04:57.0513 0x0c9c  s3cap - ok
14:04:57.0537 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] SamSs          C:\Windows\system32\lsass.exe
14:04:57.0549 0x0c9c  SamSs - ok
14:04:57.0595 0x0c9c  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:04:57.0608 0x0c9c  sbp2port - ok
14:04:57.0636 0x0c9c  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:04:57.0672 0x0c9c  SCardSvr - ok
14:04:57.0697 0x0c9c  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:04:57.0722 0x0c9c  scfilter - ok
14:04:57.0771 0x0c9c  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\Windows\system32\schedsvc.dll
14:04:57.0850 0x0c9c  Schedule - ok
14:04:57.0882 0x0c9c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc    C:\Windows\System32\certprop.dll
14:04:57.0907 0x0c9c  SCPolicySvc - ok
14:04:57.0957 0x0c9c  [ 0328BE1C7F1CBA23848179F8762E391C, EA80853F04BAE6F46F658B3EFED34BFDDE20E6F2BDA349EBC17EC75DFF19855D ] sdbus          C:\Windows\system32\drivers\sdbus.sys
14:04:58.0002 0x0c9c  sdbus - ok
14:04:58.0025 0x0c9c  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:04:58.0069 0x0c9c  SDRSVC - ok
14:04:58.0097 0x0c9c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:04:58.0137 0x0c9c  secdrv - ok
14:04:58.0165 0x0c9c  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
14:04:58.0210 0x0c9c  seclogon - ok
14:04:58.0228 0x0c9c  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
14:04:58.0259 0x0c9c  SENS - ok
14:04:58.0275 0x0c9c  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:04:58.0323 0x0c9c  SensrSvc - ok
14:04:58.0340 0x0c9c  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
14:04:58.0374 0x0c9c  Serenum - ok
14:04:58.0402 0x0c9c  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:04:58.0432 0x0c9c  Serial - ok
14:04:58.0473 0x0c9c  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
14:04:58.0504 0x0c9c  sermouse - ok
14:04:58.0547 0x0c9c  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
14:04:58.0601 0x0c9c  SessionEnv - ok
14:04:58.0654 0x0c9c  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
14:04:58.0697 0x0c9c  sffdisk - ok
14:04:58.0705 0x0c9c  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:04:58.0731 0x0c9c  sffp_mmc - ok
14:04:58.0747 0x0c9c  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
14:04:58.0762 0x0c9c  sffp_sd - ok
14:04:58.0783 0x0c9c  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
14:04:58.0794 0x0c9c  sfloppy - ok
14:04:58.0819 0x0c9c  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:04:58.0853 0x0c9c  SharedAccess - ok
14:04:58.0881 0x0c9c  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:04:58.0914 0x0c9c  ShellHWDetection - ok
14:04:58.0939 0x0c9c  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
14:04:58.0950 0x0c9c  sisagp - ok
14:04:58.0982 0x0c9c  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:04:58.0993 0x0c9c  SiSRaid2 - ok
14:04:59.0009 0x0c9c  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
14:04:59.0022 0x0c9c  SiSRaid4 - ok
14:04:59.0070 0x0c9c  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files\Skype\Updater\Updater.exe
14:04:59.0092 0x0c9c  SkypeUpdate - ok
14:04:59.0117 0x0c9c  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
14:04:59.0146 0x0c9c  Smb - ok
14:04:59.0180 0x0c9c  [ FFB4ECFD7435B1CEB61AFD5FE264A648, 50E7B04D9883754DA0E478936B882D00A163014B692A30673C8EF27EFA5B5E74 ] SmbDrv          C:\Windows\system32\DRIVERS\Smb_driver.sys
14:04:59.0190 0x0c9c  SmbDrv - ok
14:04:59.0224 0x0c9c  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:04:59.0254 0x0c9c  SNMPTRAP - ok
14:04:59.0292 0x0c9c  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr          C:\Windows\system32\drivers\spldr.sys
14:04:59.0320 0x0c9c  spldr - ok
14:04:59.0379 0x0c9c  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler        C:\Windows\System32\spoolsv.exe
14:04:59.0462 0x0c9c  Spooler - ok
14:04:59.0576 0x0c9c  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
14:04:59.0718 0x0c9c  sppsvc - ok
14:04:59.0740 0x0c9c  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify    C:\Windows\system32\sppuinotify.dll
14:04:59.0780 0x0c9c  sppuinotify - ok
14:04:59.0811 0x0c9c  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv            C:\Windows\system32\DRIVERS\srv.sys
14:04:59.0842 0x0c9c  srv - ok
14:04:59.0872 0x0c9c  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:04:59.0898 0x0c9c  srv2 - ok
14:04:59.0917 0x0c9c  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:04:59.0932 0x0c9c  srvnet - ok
14:04:59.0960 0x0c9c  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
14:05:00.0005 0x0c9c  SSDPSRV - ok
14:05:00.0021 0x0c9c  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
14:05:00.0055 0x0c9c  SstpSvc - ok
14:05:00.0071 0x0c9c  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
14:05:00.0081 0x0c9c  stexstor - ok
14:05:00.0121 0x0c9c  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
14:05:00.0174 0x0c9c  StiSvc - ok
14:05:00.0209 0x0c9c  [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
14:05:00.0221 0x0c9c  storflt - ok
14:05:00.0239 0x0c9c  [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
14:05:00.0251 0x0c9c  storvsc - ok
14:05:00.0266 0x0c9c  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\drivers\swenum.sys
14:05:00.0277 0x0c9c  swenum - ok
14:05:00.0326 0x0c9c  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv          C:\Windows\System32\swprv.dll
14:05:00.0379 0x0c9c  swprv - ok
14:05:00.0391 0x0c9c  Synth3dVsc - ok
14:05:00.0428 0x0c9c  [ FD7DED98BC01BA5F22289F78283E0A22, 7DD6388672432499224A91B80CAC6965F0EBE46353E33016ABA57F6C7A08740F ] SynTP          C:\Windows\system32\DRIVERS\SynTP.sys
14:05:00.0446 0x0c9c  SynTP - ok
14:05:00.0497 0x0c9c  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain        C:\Windows\system32\sysmain.dll
14:05:00.0576 0x0c9c  SysMain - ok
14:05:00.0636 0x0c9c  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
14:05:00.0699 0x0c9c  TabletInputService - ok
14:05:00.0744 0x0c9c  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv        C:\Windows\System32\tapisrv.dll
14:05:00.0782 0x0c9c  TapiSrv - ok
14:05:00.0802 0x0c9c  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS            C:\Windows\System32\tbssvc.dll
14:05:00.0831 0x0c9c  TBS - ok
14:05:00.0892 0x0c9c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
14:05:00.0958 0x0c9c  Tcpip - ok
14:05:01.0027 0x0c9c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:05:01.0095 0x0c9c  TCPIP6 - ok
14:05:01.0137 0x0c9c  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:05:01.0149 0x0c9c  tcpipreg - ok
14:05:01.0175 0x0c9c  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:05:01.0198 0x0c9c  TDPIPE - ok
14:05:01.0222 0x0c9c  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
14:05:01.0253 0x0c9c  TDTCP - ok
14:05:01.0284 0x0c9c  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
14:05:01.0341 0x0c9c  tdx - ok
14:05:01.0364 0x0c9c  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\drivers\termdd.sys
14:05:01.0375 0x0c9c  TermDD - ok
14:05:01.0419 0x0c9c  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService    C:\Windows\System32\termsrv.dll
14:05:01.0466 0x0c9c  TermService - ok
14:05:01.0495 0x0c9c  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
14:05:01.0525 0x0c9c  Themes - ok
14:05:01.0541 0x0c9c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER    C:\Windows\system32\mmcss.dll
14:05:01.0569 0x0c9c  THREADORDER - ok
14:05:01.0584 0x0c9c  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
14:05:01.0613 0x0c9c  TrkWks - ok
14:05:01.0647 0x0c9c  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:05:01.0677 0x0c9c  TrustedInstaller - ok
14:05:01.0710 0x0c9c  [ B89F89A2308E9569A1022A50F78C5506, 375C4A11F78A1335269657012DC57093C6E1A7B1460094B0C265179409F01554 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:05:01.0773 0x0c9c  tssecsrv - ok
14:05:01.0797 0x0c9c  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:05:01.0829 0x0c9c  TsUsbFlt - ok
14:05:01.0832 0x0c9c  tsusbhub - ok
14:05:01.0875 0x0c9c  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:05:01.0918 0x0c9c  tunnel - ok
14:05:01.0947 0x0c9c  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
14:05:01.0960 0x0c9c  uagp35 - ok
14:05:01.0991 0x0c9c  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:05:02.0023 0x0c9c  udfs - ok
14:05:02.0054 0x0c9c  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect      C:\Windows\system32\UI0Detect.exe
14:05:02.0085 0x0c9c  UI0Detect - ok
14:05:02.0101 0x0c9c  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:05:02.0112 0x0c9c  uliagpkx - ok
14:05:02.0136 0x0c9c  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
14:05:02.0148 0x0c9c  umbus - ok
14:05:02.0176 0x0c9c  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
14:05:02.0196 0x0c9c  UmPass - ok
14:05:02.0231 0x0c9c  [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService    C:\Windows\System32\umrdp.dll
14:05:02.0248 0x0c9c  UmRdpService - ok
14:05:02.0290 0x0c9c  [ D80B1075B69B57A3AB78F750CE463ECE, E8435B723C3D9F5B28D5588365E7D6BED298565BCF61240C2B505B1033180DAA ] UNS            C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
14:05:02.0307 0x0c9c  UNS - ok
14:05:02.0337 0x0c9c  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
14:05:02.0387 0x0c9c  upnphost - ok
14:05:02.0415 0x0c9c  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
14:05:02.0441 0x0c9c  usbccgp - ok
14:05:02.0479 0x0c9c  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:05:02.0509 0x0c9c  usbcir - ok
14:05:02.0544 0x0c9c  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci        C:\Windows\system32\drivers\usbehci.sys
14:05:02.0558 0x0c9c  usbehci - ok
14:05:02.0584 0x0c9c  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:05:02.0605 0x0c9c  usbhub - ok
14:05:02.0643 0x0c9c  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
14:05:02.0669 0x0c9c  usbohci - ok
14:05:02.0691 0x0c9c  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:05:02.0735 0x0c9c  usbprint - ok
14:05:02.0754 0x0c9c  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:05:02.0829 0x0c9c  USBSTOR - ok
14:05:02.0860 0x0c9c  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
14:05:02.0895 0x0c9c  usbuhci - ok
14:05:02.0924 0x0c9c  [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
14:05:02.0952 0x0c9c  usbvideo - ok
14:05:02.0975 0x0c9c  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms          C:\Windows\System32\uxsms.dll
14:05:03.0015 0x0c9c  UxSms - ok
14:05:03.0038 0x0c9c  [ 7D67B4D677A15B1A363D5BD8201B533D, B40C64C99632B988E3AAFB1FAAF2826EE0466B90F74C541C02E0668C9150F45B ] VaultSvc        C:\Windows\system32\lsass.exe
14:05:03.0056 0x0c9c  VaultSvc - ok
14:05:03.0093 0x0c9c  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:05:03.0105 0x0c9c  vdrvroot - ok
14:05:03.0149 0x0c9c  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds            C:\Windows\System32\vds.exe
14:05:03.0195 0x0c9c  vds - ok
14:05:03.0234 0x0c9c  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
14:05:03.0266 0x0c9c  vga - ok
14:05:03.0279 0x0c9c  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave        C:\Windows\System32\drivers\vga.sys
14:05:03.0308 0x0c9c  VgaSave - ok
14:05:03.0311 0x0c9c  VGPU - ok
14:05:03.0342 0x0c9c  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
14:05:03.0356 0x0c9c  vhdmp - ok
14:05:03.0379 0x0c9c  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
14:05:03.0390 0x0c9c  viaagp - ok
14:05:03.0410 0x0c9c  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7          C:\Windows\system32\DRIVERS\viac7.sys
14:05:03.0423 0x0c9c  ViaC7 - ok
14:05:03.0446 0x0c9c  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
14:05:03.0456 0x0c9c  viaide - ok
14:05:03.0490 0x0c9c  [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus          C:\Windows\system32\drivers\vmbus.sys
14:05:03.0506 0x0c9c  vmbus - ok
14:05:03.0519 0x0c9c  [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
14:05:03.0537 0x0c9c  VMBusHID - ok
14:05:03.0547 0x0c9c  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:05:03.0558 0x0c9c  volmgr - ok
14:05:03.0589 0x0c9c  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
14:05:03.0607 0x0c9c  volmgrx - ok
14:05:03.0631 0x0c9c  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
14:05:03.0648 0x0c9c  volsnap - ok
14:05:03.0672 0x0c9c  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
14:05:03.0685 0x0c9c  vsmraid - ok
14:05:03.0747 0x0c9c  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS            C:\Windows\system32\vssvc.exe
14:05:03.0831 0x0c9c  VSS - ok
14:05:03.0845 0x0c9c  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
14:05:03.0858 0x0c9c  vwifibus - ok
14:05:03.0874 0x0c9c  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
14:05:03.0889 0x0c9c  vwififlt - ok
14:05:03.0947 0x0c9c  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time        C:\Windows\system32\w32time.dll
14:05:03.0992 0x0c9c  W32Time - ok
14:05:04.0008 0x0c9c  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
14:05:04.0029 0x0c9c  WacomPen - ok
14:05:04.0056 0x0c9c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:05:04.0083 0x0c9c  WANARP - ok
14:05:04.0088 0x0c9c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:05:04.0113 0x0c9c  Wanarpv6 - ok
14:05:04.0160 0x0c9c  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
14:05:04.0236 0x0c9c  wbengine - ok
14:05:04.0269 0x0c9c  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:05:04.0302 0x0c9c  WbioSrvc - ok
14:05:04.0337 0x0c9c  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc        C:\Windows\System32\wcncsvc.dll
14:05:04.0374 0x0c9c  wcncsvc - ok
14:05:04.0398 0x0c9c  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:05:04.0435 0x0c9c  WcsPlugInService - ok
14:05:04.0456 0x0c9c  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
14:05:04.0468 0x0c9c  Wd - ok
14:05:04.0503 0x0c9c  [ 5A833408ACFEADB92C7BEB2E7DB6B9BF, 7704B4183E7532F0E7FB964EB54894511042B6E6F588C09EE2C3DEDF0C58A7D8 ] WDC_SAM        C:\Windows\system32\DRIVERS\wdcsam.sys
14:05:04.0531 0x0c9c  WDC_SAM - ok
14:05:04.0568 0x0c9c  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:05:04.0605 0x0c9c  Wdf01000 - ok
14:05:04.0631 0x0c9c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
14:05:04.0666 0x0c9c  WdiServiceHost - ok
14:05:04.0670 0x0c9c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost  C:\Windows\system32\wdi.dll
14:05:04.0685 0x0c9c  WdiSystemHost - ok
14:05:04.0718 0x0c9c  [ 55C70654420DBF429604FD567E6F3CD3, 22191B049BCA76EF13AEDF8078E452E6B35E998A75AD63F14C542B541EA9F67D ] WebClient      C:\Windows\System32\webclnt.dll
14:05:04.0758 0x0c9c  WebClient - ok
14:05:04.0792 0x0c9c  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:05:04.0832 0x0c9c  Wecsvc - ok
14:05:04.0850 0x0c9c  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
14:05:04.0877 0x0c9c  wercplsupport - ok
14:05:04.0902 0x0c9c  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
14:05:04.0953 0x0c9c  WerSvc - ok
14:05:04.0992 0x0c9c  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:05:05.0044 0x0c9c  WfpLwf - ok
14:05:05.0070 0x0c9c  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:05:05.0080 0x0c9c  WIMMount - ok
14:05:05.0143 0x0c9c  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend      C:\Program Files\Windows Defender\mpsvc.dll
14:05:05.0244 0x0c9c  WinDefend - ok
14:05:05.0254 0x0c9c  WinHttpAutoProxySvc - ok
14:05:05.0302 0x0c9c  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
14:05:05.0331 0x0c9c  Winmgmt - ok
14:05:05.0391 0x0c9c  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM          C:\Windows\system32\WsmSvc.dll
14:05:05.0480 0x0c9c  WinRM - ok
14:05:05.0527 0x0c9c  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
14:05:05.0543 0x0c9c  WinUsb - ok
14:05:05.0588 0x0c9c  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc        C:\Windows\System32\wlansvc.dll
14:05:05.0651 0x0c9c  Wlansvc - ok
14:05:05.0682 0x0c9c  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
14:05:05.0705 0x0c9c  WmiAcpi - ok
14:05:05.0737 0x0c9c  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:05:05.0753 0x0c9c  wmiApSrv - ok
14:05:05.0848 0x0c9c  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
14:05:05.0952 0x0c9c  WMPNetworkSvc - ok
14:05:05.0971 0x0c9c  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:05:06.0005 0x0c9c  WPCSvc - ok
14:05:06.0025 0x0c9c  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:05:06.0056 0x0c9c  WPDBusEnum - ok
14:05:06.0079 0x0c9c  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
14:05:06.0117 0x0c9c  ws2ifsl - ok
14:05:06.0141 0x0c9c  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
14:05:06.0165 0x0c9c  wscsvc - ok
14:05:06.0169 0x0c9c  WSearch - ok
14:05:06.0296 0x0c9c  [ 4A19D4A01F8F0684E155C131B5B54776, 341ABCDB121DDB49831B3E42DFDB0938AF49C31B44351A3D9970DAD25CD22606 ] wuauserv        C:\Windows\system32\wuaueng.dll
14:05:06.0450 0x0c9c  wuauserv - ok
14:05:06.0489 0x0c9c  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:05:06.0530 0x0c9c  WudfPf - ok
14:05:06.0555 0x0c9c  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
14:05:06.0589 0x0c9c  WUDFRd - ok
14:05:06.0609 0x0c9c  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
14:05:06.0632 0x0c9c  wudfsvc - ok
14:05:06.0655 0x0c9c  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc        C:\Windows\System32\wwansvc.dll
14:05:06.0721 0x0c9c  WwanSvc - ok
14:05:06.0726 0x0c9c  ================ Scan global ===============================
14:05:06.0748 0x0c9c  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll
14:05:06.0775 0x0c9c  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
14:05:06.0790 0x0c9c  [ A83DD77AC941A8B1B2652035EA589149, 8F879178E154B3F9F367FB3D6F9A21B129F36796CD3B6A76A9E7CFDD0F63332C ] C:\Windows\system32\winsrv.dll
14:05:06.0818 0x0c9c  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
14:05:06.0851 0x0c9c  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
14:05:06.0860 0x0c9c  [ Global ] - ok
14:05:06.0860 0x0c9c  ================ Scan MBR ==================================
14:05:06.0866 0x0c9c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:05:07.0121 0x0c9c  \Device\Harddisk0\DR0 - ok
14:05:07.0122 0x0c9c  ================ Scan VBR ==================================
14:05:07.0129 0x0c9c  [ 8ABC61D8C4A30471B0C6A650F3CB4F7E ] \Device\Harddisk0\DR0\Partition1
14:05:07.0132 0x0c9c  \Device\Harddisk0\DR0\Partition1 - ok
14:05:07.0146 0x0c9c  [ A74A445C9AE669C6B4FEB4BEFED413E1 ] \Device\Harddisk0\DR0\Partition2
14:05:07.0149 0x0c9c  \Device\Harddisk0\DR0\Partition2 - ok
14:05:07.0150 0x0c9c  ================ Scan generic autorun ======================
14:05:07.0186 0x0c9c  [ 5514B64F7F2D25E09E2FDAF5D62B688C, 43263715ADC49250762A01E41DB2832C6A8B63CE4F66CDD8FC0B51DCA031DF27 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
14:05:07.0198 0x0c9c  IAStorIcon - ok
14:05:07.0231 0x0c9c  [ C59574F8385714F10E67986E05569389, 71CEE0A0EFE0BC09F63459795D6ABF701BFF9AE9762D73B4FDDF7FCF4C5BC12F ] C:\Windows\system32\igfxtray.exe
14:05:07.0246 0x0c9c  IgfxTray - ok
14:05:07.0255 0x0c9c  [ 3E7004AE42E7D86E94B0FD61EB3D6669, 9703D89C079E1BDCC7927E4352819B15BC6354E42CF8492EBC776839D744B2F3 ] C:\Windows\system32\hkcmd.exe
14:05:07.0271 0x0c9c  HotKeysCmds - ok
14:05:07.0286 0x0c9c  [ 98A21CB323EABE629B9EF223E91D3E7F, 09E93FD9E5469BECA0997DADEEE0714903DF51EE92CA78E72F4F19DD4D7F75C7 ] C:\Windows\system32\igfxpers.exe
14:05:07.0299 0x0c9c  Persistence - ok
14:05:07.0349 0x0c9c  [ FE668B0E3E87077A46FE77AFB0E27F9C, E9485A083D7CC0438668132154C8AD14267113F15EEB794B356BF3E6F998FD17 ] C:\Program Files\Launch Manager\LManager.exe
14:05:07.0385 0x0c9c  LManager - ok
14:05:07.0521 0x0c9c  [ 0F2311BD5D1DDC14F5CC79FCD390A9AE, E25A50C9D7022C32E74BFD0E0B8EA2616F5169C3CC11D0141ACD8F463CE27702 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
14:05:07.0595 0x0c9c  SynTPEnh - ok
14:05:07.0963 0x0c9c  [ A5F053AFE13D8C23141E54B5C18565FD, C0E6AA3232EFB95E6D799E5AC9DA57085B19BEA77026ADEF605DF08211F5C043 ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
14:05:08.0255 0x0c9c  RTHDVCPL - ok
14:05:08.0533 0x0c9c  [ 4C19DF323F4C0F1F27D328EFDCDFC36E, 047920667261F84E9B63E7239B0AE3306DB85ECC052CC6638183301E01A808C0 ] c:\program files\emsisoft anti-malware\a2guard.exe
14:05:08.0700 0x0c9c  emsisoft anti-malware - ok
14:05:08.0841 0x0c9c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:05:08.0906 0x0c9c  Sidebar - ok
14:05:08.0933 0x0c9c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:05:08.0951 0x0c9c  mctadmin - ok
14:05:09.0004 0x0c9c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
14:05:09.0046 0x0c9c  Sidebar - ok
14:05:09.0051 0x0c9c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
14:05:09.0068 0x0c9c  mctadmin - ok
14:05:09.0230 0x0c9c  [ 844023C6ED6A051CF3B6D083BEC0C8F6, A0E2CC64DC26087D839A953B7885B2FF2BB2E9613FA4660A94107FAF95AE46FE ] C:\Program Files\Mal Updater 2\MalUpdater.exe
14:05:09.0336 0x0c9c  Mal Updater 2 - detected UnsignedFile.Multi.Generic ( 1 )
14:05:11.0767 0x0c9c  Mal Updater 2 ( UnsignedFile.Multi.Generic ) - warning
14:05:14.0231 0x0c9c  [ 42CD0245D2BE7184E774BC89DAA4F6C2, EDF4942E9A27478241CB33ECC8F75239AD0E294D1CD2202DB9F707BD6873B2FC ] C:\Program Files\puush\puush.exe
14:05:14.0259 0x0c9c  puush - ok
14:05:14.0281 0x0c9c  Skype - ok
14:05:14.0283 0x0c9c  Waiting for KSN requests completion. In queue: 1
14:05:15.0283 0x0c9c  Waiting for KSN requests completion. In queue: 1
14:05:16.0283 0x0c9c  Waiting for KSN requests completion. In queue: 1
14:05:17.0459 0x0c9c  AV detected via SS2: Emsisoft Anti-Malware, C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2start.exe ( 10.0.0.5735 ), 0x41000 ( enabled : updated )
14:05:17.0480 0x0c9c  Win FW state via NFP2: enabled ( trusted )
14:05:19.0837 0x0c9c  ============================================================
14:05:19.0837 0x0c9c  Scan finished
14:05:19.0837 0x0c9c  ============================================================
14:05:19.0846 0x07b4  Detected object count: 1
14:05:19.0846 0x07b4  Actual detected object count: 1
14:05:38.0631 0x07b4  Mal Updater 2 ( UnsignedFile.Multi.Generic ) - skipped by user
14:05:38.0631 0x07b4  Mal Updater 2 ( UnsignedFile.Multi.Generic ) - User select action: Skip

schrauber 23.10.2015 13:36
http://support2.microsoft.com/kb/929135/de

Bitte einen Clean Boot machen. Wenn das Problem dann weg ist, einzeln wieder Dienste aktivieren, dazwischen immer einen Reboot machen. Solange bis Du weißt welcher Dienst die Probleme macht.

Diesen dann hier benennen.

Luuminous 23.10.2015 15:59
Ich hoffe mal, ich hab alles richtig gemacht.
Wie in der Anleitung beschrieben, hab ich den Clean Reboot durchgeführt und erst nach und nach alle Einträge im Reiter Dienste wieder aktiviert, mit Neustart dazwischen.
Nach jedem Neustart habe ich ein paar Dinge ausprobiert, bei denen er für gewöhnlich gerne mal hängt. Durch Ordner scrollen, die Nutzung von Tweetdeck und Thunderbird, kurzes Surfen im Browser, etc.

Das erste was mir bewusst auffiel, war die Zeit beim Hochfahren. Nachdem ich den Eintrag "Intel(R) Dynamic Application Loader Host Interface Service" wieder angewählt habe, hat der Reboot ein wenig länger gedauert als die Male davor. Dennoch verhältnismäßig schnell.
Die Male darauf ging es auch wieder flotter. Da kam es dann aber auch öfter mal vor, dass die Taskleiste einen Moment nicht reagiert hat oder die Symbole 10-15 Sekunden geladen haben, bevor die Icons erschienen sind.

Bei normaler Benutzung sind mir zwischen den Neustarts keine wirklichen Performance-Einbrüche aufgefallen. Es ging alles sehr flüssig. Einzig der Firefox hat sich einmal aufgehängt. Das passiert am ehesten auf Seiten wie Youtube, mit vielen Medien drauf. An sich ist der Browser aber auch flüssiger gelaufen als gewöhnlich.

Während der Testphase habe ich auch wirklich nur die Einträge angewählt, die in dem Reiter Dienste aufgeführt sind. Alles andere aus dem normalen Autostart war davon ausgeschlossen. Am Ende habe ich das aber auch nochmal mit normalen Einstellungen (also wie sie waren vor dem Clean Reboot) durchgeführt. Der Neustart ging dieses Mal relativ schnell. Im Allgemeinen kommt es mir auch besser von der Performance vor, nur macht er jetzt, wie zuvor schon, Anstalten, beim Tippen im Browser etwas zu hängen, ebenso bei Thunderbird und Konsorten.
Ich glaube fast, dass das auf die Anzahl der laufenden Programme im Hintergrund zurückzuführen sein könnte.
So richtig ungewöhnlich oder auffällig war bei den Reboot-Versuchen nämlich auch nichts bis auf das oben erwähnte.

schrauber 24.10.2015 17:39
Das kann schon sein. Aus Bequemlichkeit oder Unwissen knallt man schon mal gerne den Autostart voll.

Da kann aber alles raus was nicht Treiber oder AV Programm ist :)

Luuminous 24.10.2015 19:40
Gut, hab alles ausgestellt, was überflüssig ist :)
War denn malwaretechnisch irgendwas in den Logs zu sehen oder war's das dann an der Stelle hier?

schrauber 25.10.2015 06:14
nope, alles gut :)

Luuminous 25.10.2015 14:41
Super.
Dann bedanke ich mich herzlich für deine Hilfe! :dankeschoen: :knuddel:

schrauber 26.10.2015 18:07
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:26 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131