Trojaner-Board - VBS/LNK.Jenxcus.Gen auf USB-Stick

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:07-11-2015

durchgeführt von fipsin (Administrator) auf FIPSIN-PC (09-11-2015 18:45:57)

Gestartet von C:\Users\fipsin\Desktop

Geladene Profile: fipsin & postgres (Verfügbare Profile: fipsin & Oli & postgres)

Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 7 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Antivir\Avira\AntiVir Desktop\sched.exe

(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Antivir\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

(Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusionService.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Lenovo.) C:\Program Files\Lenovo\HOTKEY\FnF5svc.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(Lenovo) C:\Program Files\Lenovo\PM Driver\PMSveH.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe

(Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaRegistry.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

() C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe

(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe

(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe

(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Antivir\Avira\AntiVir Desktop\avgnt.exe

(Microsoft Corporation) C:\Windows\System32\wscript.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\System Update\SUService.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Antivir\Avira\AntiVir Desktop\avshadow.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Felix 'SniperBeamer' Geyer) C:\Program Files\Thunderbird-Tray\TBTray.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [163840 2008-03-26] (Alps Electric Co., Ltd.)

HKLM\...\Run: [avgnt] => C:\Program Files\Antivir\Avira\AntiVir Desktop\avgnt.exe [782520 2015-10-29] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\Run: [wscript] => wscript.exe //B "C:\Users\fipsin\AppData\Roaming\wscript.vbs"

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {07ff1c9a-2c52-11e2-a70d-002269f50714} - D:\Setup.EXE

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {2f305cc7-ba0e-19dd-8a92-001eec9c2126} - S:\LenovoSDrive.exe

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {389cd0c7-b2b2-11e2-93f9-001eec9c2126} - I:\LGAutoRun.exe

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {9c02519f-bc2b-11e3-8236-002269f50714} - H:\LaunchU3.exe -a

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {e6817655-b9c9-11dd-9682-806e6f6e6963} - Q:\LenovoQDrive.exe

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\MountPoints2: {e6817658-b9c9-11dd-9682-806e6f6e6963} - E:\Install.exe

HKU\S-1-5-21-3882981418-2557861113-3788238974-1007\...\RunOnce: [] => [X]

HKU\S-1-5-21-3882981418-2557861113-3788238974-1007\...\RunOnce: [Lenovoautosdrive] => C:\Program Files\Common Files\Lenovo\LenovoDrive\LenovoAutorunreg.exe [159744 2008-07-30] ()

HKU\S-1-5-21-3882981418-2557861113-3788238974-1007\...\RunOnce: [Lenovoautoqdrive] => C:\Program Files\Common Files\Lenovo\LenovoDrive\LenovoAutorunreg.exe [159744 2008-07-30] ()

Lsa: [Notification Packages] scecli ACGina

Startup: C:\Users\fipsin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wscript.vbs [2014-11-26] ()
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Winsock: Catalog9 01 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 C:\Program Files\Antivir\Avira\AntiVir Desktop\avsda.dll [507984 2014-08-01] (Avira Operations GmbH & Co. KG)

Hosts: 127.0.0.1 rad.msn.com

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{0B0E1C2F-D364-442F-99CB-DE03EBA5D565}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{1A4DFA0B-B5BF-4962-ACF6-035DEF9E99F6}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{3EBD1D5E-1A00-4680-918A-08785F3F2225}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://g.msn.de/0SEDEDE/SAOS01?FORM=TOOLBR

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.live.com

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/3000notebook

SearchScopes: HKLM -> DefaultScope Wert fehlt

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM=LENIE

SearchScopes: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM=LENIE

SearchScopes: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM=LENIE

BHO: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)

BHO: Windows Live Toolbar Helper -> {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -> C:\Program Files\Windows Live Toolbar\msntb.dll => Keine Datei

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003 -> Kein Name - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -  Keine Datei

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default

FF Homepage: about:blank

FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*'))%20%7B%20return%20'PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"

FF NetworkProxy: "ftp", "78.133.103.185"

FF NetworkProxy: "ftp_port", 80

FF NetworkProxy: "gopher", "213.174.103.90"

FF NetworkProxy: "gopher_port", 3128

FF NetworkProxy: "http", "78.133.103.185"

FF NetworkProxy: "http_port", 80

FF NetworkProxy: "socks", "78.133.103.185"

FF NetworkProxy: "socks_port", 80

FF NetworkProxy: "ssl", "78.133.103.185"

FF NetworkProxy: "ssl_port", 80

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-22] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()

FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin: @protectdisc.com/NPMPDRM -> C:\Program Files\Common Files\mpDRM\NPMPDRM.dll [2010-02-03] ( )

FF Plugin: @videolan.org/vlc,version=1.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin HKU\S-1-5-21-3882981418-2557861113-3788238974-1003: @tools.google.com/Google Update;version=3 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin HKU\S-1-5-21-3882981418-2557861113-3788238974-1003: @tools.google.com/Google Update;version=9 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin HKU\S-1-5-21-3882981418-2557861113-3788238974-1003: @www.flatcast.com/FlatViewer 5.2 -> C:\Users\fipsin\AppData\Roaming\Mozilla\Plugins\NpFv530.dll [2011-09-23] (1 mal 1 Software GmbH)

FF user.js: detected! => C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\user.js [2009-05-20]

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NpFv530.dll [2011-09-23] (1 mal 1 Software GmbH)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2003-07-14] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2008-10-14] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012-01-06] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Users\fipsin\AppData\Roaming\mozilla\plugins\NpFv530.dll [2011-09-23] (1 mal 1 Software GmbH)

FF SearchPlugin: C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\searchplugins\readme!!.txt [2014-06-27]

FF SearchPlugin: C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\searchplugins\youtube.xml [2012-11-11]

FF Extension: Avira Browser Safety - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\abs@avira.com [2015-07-03] [ist nicht signiert]

FF Extension: YouTube Unblocker - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\youtubeunblocker@unblocker.yt [2015-06-05]

FF Extension: Download videos and MP3s from YouTube - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-10-18] [ist nicht signiert]

FF Extension: Best Proxy Switcher - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\bestproxyswitcher@bestproxyswitcher.com.xpi [2015-07-25]

FF Extension: Multi YouTube mp3 - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\d.lehr@chello.at.xpi [2015-07-23]

FF Extension: ProxTube - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\ich@maltegoetz.de.xpi [2015-05-28]

FF Extension: YouTube mp3 - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\info@youtube-mp3.org.xpi [2015-07-23]

FF Extension: Random Bookmark - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\jid0-Nij4w8dVNyt4uDDdw6bTGkSRb4o@jetpack.xpi [2015-05-28]

FF Extension: One Click Proxy - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\jid0-zXo3XFGyiDalgkeEO4UYJTUwo2I@jetpack.xpi [2015-08-28]

FF Extension: YouTube™ Flash® Player - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi [2015-05-28]

FF Extension: Youtube MP3 Downloader using youtube-mp3.org - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\jid1-xKH0EoS44u1a2w@jetpack.xpi [2015-07-23]

FF Extension: NoScript - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-07-16]

FF Extension: Adblock Plus - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-25]

FF Extension: Greasemonkey - C:\Users\fipsin\AppData\Roaming\Mozilla\Firefox\Profiles\n5edda0n.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-06-27]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-04] [ist nicht signiert]

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2012-06-05]
 

Chrome: 

=======

CHR Profile: C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-03]

CHR Extension: (Google Drive) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]

CHR Extension: (YouTube) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08]

CHR Extension: (Google-Suche) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-03]

CHR Extension: (Avira Browserschutz) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-10-23]

CHR Extension: (Google Text & Tabellen Offline) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-05]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-21]

CHR Extension: (Browsec) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh [2015-10-23]

CHR Extension: (Google Mail) - C:\Users\fipsin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-03]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

StartMenuInternet: Google Chrome - C:\Users\fipsin\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files\Antivir\Avira\AntiVir Desktop\avmailc.exe [916968 2015-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Antivir\Avira\AntiVir Desktop\sched.exe [461672 2015-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Antivir\Avira\AntiVir Desktop\avguard.exe [461672 2015-10-29] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [1210512 2015-10-29] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

S4 btwdins; C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe [522792 2008-08-26] (Broadcom Corporation.)

R2 DisplayFusionService; C:\Program Files\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software)

R2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [815104 2008-04-30] (Intel(R) Corporation) [Datei ist nicht signiert]

R2 FNF5SVC; C:\Program Files\LENOVO\HOTKEY\FNF5SVC.exe [54560 2008-03-14] (Lenovo.)

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-10-16] (Hewlett-Packard Co.) [Datei ist nicht signiert]

S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]

S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

S4 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [1903472 2014-12-18] (Electronic Arts)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 PMSveH; C:\Program Files\Lenovo\PM Driver\PMSveH.exe [57344 2006-05-24] (Lenovo) [Datei ist nicht signiert]

R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]

R2 RalinkRegistryWriter; C:\Program Files\Ralink\Common\RaRegistry.exe [185632 2009-12-15] (Ralink Technology, Corp.)

S4 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [45056 2010-01-21] (Realtek) [Datei ist nicht signiert]

R2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944 2008-04-30] (Intel(R) Corporation) [Datei ist nicht signiert]

S4 Roxio UPnP Renderer 10; C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2008-04-25] (Sonic Solutions)

S4 Roxio Upnp Server 10; C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2008-04-25] (Sonic Solutions)

S4 RoxLiveShare10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [309744 2008-04-25] (Sonic Solutions)

R2 SUService; c:\Program Files\Lenovo\System Update\SUService.exe [28672 2008-11-04] (Lenovo Group Limited) [Datei ist nicht signiert]

S4 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

R2 TPHKSVC; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [53325 2008-08-08] (Lenovo Group Limited) [Datei ist nicht signiert]

R2 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [520192 2008-05-24] () [Datei ist nicht signiert]

R2 TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [950272 2008-05-24] (Lenovo Group Limited) [Datei ist nicht signiert]

R2 TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1155072 2008-05-24] (Lenovo Group Limited) [Datei ist nicht signiert]

S2 TVT_UpdateMonitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [253952 2008-05-24] (Lenovo Group Limited) [Datei ist nicht signiert]

S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [501560 2008-01-23] (Protect Software GmbH)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-10-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-09-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-31] (Avira Operations GmbH & Co. KG)

S2 DgiVecp; C:\Windows\System32\Drivers\DgiVecp.sys [40448 2003-07-29] (DeviceGuys, Inc.) [Datei ist nicht signiert]

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-11-12] (DT Soft Ltd)

R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [25896 2008-08-20] (COMPAL ELECTRONIC INC.)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)

S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [552448 2007-08-15] (Ralink Technology Corp.) [Datei ist nicht signiert]

S3 RivaTuner32; C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys [9088 2009-08-22] () [Datei ist nicht signiert]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-16] (Avira Operations GmbH & Co. KG)

U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35152 2014-06-27] ()

R2 tvtfilter; C:\Windows\System32\DRIVERS\tvtfilter.sys [33536 2008-11-24] (Lenovo) [Datei ist nicht signiert]

R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [974336 2008-06-30] (Vimicro Corporation)

S3 ZSMC301b; C:\Windows\System32\Drivers\usbVM31b.sys [90968 2004-03-19] (VM)

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-09 18:44 - 2015-11-09 18:45 - 00076835 _____ C:\Users\fipsin\Desktop\Addition.txt

2015-11-09 18:41 - 2015-11-09 18:45 - 00028700 _____ C:\Users\fipsin\Desktop\FRST.txt

2015-11-09 18:40 - 2015-11-09 18:46 - 00000000 ____D C:\FRST

2015-11-09 18:39 - 2015-11-09 18:39 - 01702400 _____ (Farbar) C:\Users\fipsin\Desktop\FRST.exe

2015-11-09 17:33 - 2015-05-24 10:56 - 01223025 ___SH C:\Users\fipsin\Desktop\Kretschmer, Thorsten - EÜR 2014.eur2014

2015-11-07 14:35 - 2015-11-08 15:15 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-11-06 14:00 - 2015-11-06 14:00 - 00858624 _____ C:\Users\fipsin\Desktop\Rechnung Spülbürste 04.11.2015

2015-10-28 16:05 - 2015-10-28 16:05 - 00000000 ____D C:\Users\fipsin\Desktop\GSpot
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-11-09 18:46 - 2014-04-24 20:53 - 00000000 ____D C:\Users\fipsin\AppData\Roaming\Skype

2015-11-09 18:45 - 2014-08-21 01:22 - 00000394 ____H C:\Windows\Tasks\User_Feed_Synchronization-{4AAA7BF1-CD1A-45CD-B8EB-18FDFC1D4B1E}.job

2015-11-09 18:42 - 2011-07-02 18:22 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003UA.job

2015-11-09 18:19 - 2009-04-03 01:43 - 00000256 _____ C:\Windows\Tasks\Auf Updates für Windows Live Toolbar prüfen.job

2015-11-09 18:18 - 2006-11-02 13:45 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-11-09 18:18 - 2006-11-02 13:45 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-11-09 17:31 - 2008-04-15 16:03 - 01713944 _____ C:\Windows\system32\PerfStringBackup.INI

2015-11-09 16:20 - 2008-11-24 02:52 - 01790285 _____ C:\Windows\WindowsUpdate.log

2015-11-09 16:18 - 2006-11-02 13:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-11-09 16:17 - 2006-11-02 13:58 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-11-09 04:42 - 2011-07-02 18:21 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003Core.job

2015-11-08 23:14 - 2010-09-09 10:20 - 00000000 ____D C:\Users\fipsin\AppData\Roaming\vlc

2015-11-08 21:46 - 2012-12-18 00:25 - 00000000 ____D C:\Users\fipsin\AppData\Local\PokerStars.EU

2015-11-08 15:15 - 2012-11-06 17:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2015-11-08 15:15 - 2008-01-21 04:02 - 00528676 _____ C:\Windows\PFRO.log

2015-11-07 19:30 - 2014-06-27 19:46 - 00000000 ____D C:\Users\fipsin\AppData\Local\CrashDumps

2015-11-07 01:13 - 2015-06-29 12:53 - 00000000 ____D C:\Users\fipsin\AppData\Local\PokerStars.FR

2015-11-06 21:00 - 2015-06-22 15:01 - 00000000 ____D C:\Program Files\Tor Browser

2015-10-29 14:35 - 2015-08-25 13:23 - 00000000 ____D C:\Users\fipsin\Desktop\Umzug

2015-10-29 03:12 - 2012-11-06 16:57 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-10-27 23:42 - 2015-02-12 19:11 - 00000293 _____ C:\Users\fipsin\Desktop\Filmliste.txt

2015-10-26 00:01 - 2015-03-12 22:02 - 00000000 ____D C:\Users\fipsin\Desktop\Neuer Ordner

2015-10-22 18:04 - 2014-08-25 14:19 - 00000000 ____D C:\Users\fipsin\AppData\Local\Adobe

2015-10-22 18:04 - 2014-02-04 04:25 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-10-22 18:04 - 2014-02-04 04:25 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-10-21 19:15 - 2009-04-16 21:09 - 00000000 _____ C:\Users\Public\Documents\AcSvc.dmp

2015-10-21 15:17 - 2009-05-10 15:54 - 00076288 _____ C:\Users\fipsin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-10-13 14:30 - 2015-01-28 19:06 - 00019968 _____ C:\Users\fipsin\Desktop\Ausgaben Konto.xls
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2013-06-05 14:18 - 2015-06-09 13:07 - 0000132 _____ () C:\Users\fipsin\AppData\Roaming\Adobe GIF Format CS5 Prefs

2013-01-16 00:54 - 2015-05-28 17:47 - 0000132 _____ () C:\Users\fipsin\AppData\Roaming\Adobe PNG Format CS5 Prefs

2015-07-26 21:16 - 2015-07-26 21:31 - 0000916 _____ () C:\Users\fipsin\AppData\Roaming\EasyToolz.ini

2004-01-26 17:15 - 2004-01-26 17:15 - 0233472 ____R () C:\Users\fipsin\AppData\Roaming\MafiaSetup.exe

2014-12-19 03:09 - 2014-12-19 15:34 - 0004309 _____ () C:\Users\fipsin\AppData\Roaming\SpeedRunnersLog.txt

2015-09-18 15:14 - 2015-09-18 15:14 - 0100864 _____ () C:\Users\fipsin\AppData\Roaming\svchost.exe

2014-12-19 03:10 - 2014-12-19 15:19 - 0002972 _____ () C:\Users\fipsin\AppData\Roaming\TargetInvocationLog.txt

2014-12-08 00:01 - 2014-11-26 07:43 - 0076733 ____H () C:\Users\fipsin\AppData\Roaming\wscript.vbs

2011-12-25 12:09 - 2011-12-25 21:48 - 0001164 _____ () C:\Users\fipsin\AppData\Local\crc32list11.txt

2014-12-11 22:06 - 2015-07-27 17:26 - 0000680 _____ () C:\Users\fipsin\AppData\Local\d3d9caps.dat

2009-05-10 15:54 - 2015-10-21 15:17 - 0076288 _____ () C:\Users\fipsin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2009-08-10 10:04 - 2010-08-31 14:58 - 0004096 ____H () C:\Users\fipsin\AppData\Local\keyfile3.drm

2014-06-27 16:55 - 2014-06-27 16:55 - 0000440 _____ () C:\Users\fipsin\AppData\Local\readme!!.txt

2013-03-16 00:20 - 2013-03-16 00:20 - 21662880 _____ () C:\Users\fipsin\AppData\Local\TempFullTiltPokerEuSetup.exe

2015-04-29 17:09 - 2015-04-29 17:09 - 0000057 _____ () C:\ProgramData\Ament.ini

2009-05-22 17:30 - 2009-05-22 17:30 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

2009-09-01 19:17 - 2009-09-03 10:13 - 0008780 _____ () C:\ProgramData\hpzinstall.log

2014-06-27 16:55 - 2014-06-27 16:55 - 0000440 _____ () C:\ProgramData\readme!!.txt
 

Einige Dateien in TEMP:

====================

C:\Users\fipsin\AppData\Local\Temp\avgnt.exe

C:\Users\fipsin\AppData\Local\Temp\bitool.dll

C:\Users\fipsin\AppData\Local\Temp\detectionapi_rd.dll

C:\Users\fipsin\AppData\Local\Temp\directx9tests_rd.dll

C:\Users\fipsin\AppData\Local\Temp\drm_dialogs.dll

C:\Users\fipsin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpqry1ep.dll

C:\Users\fipsin\AppData\Local\Temp\Launcher.exe

C:\Users\fipsin\AppData\Local\Temp\local.dll

C:\Users\fipsin\AppData\Local\Temp\SecuExp.exe

C:\Users\fipsin\AppData\Local\Temp\SIntf16.dll

C:\Users\fipsin\AppData\Local\Temp\SIntf32.dll

C:\Users\fipsin\AppData\Local\Temp\SIntfNT.dll

C:\Users\fipsin\AppData\Local\Temp\SkypeSetup.exe

C:\Users\fipsin\AppData\Local\Temp\sldlext.dll

C:\Users\fipsin\AppData\Local\Temp\SLDL_DLL.dll

C:\Users\fipsin\AppData\Local\Temp\SRLDetectionLibrary9032722049703762565.dll

C:\Users\fipsin\AppData\Local\Temp\StartUp.exe

C:\Users\fipsin\AppData\Local\Temp\svchost.exe

C:\Users\fipsin\AppData\Local\Temp\TnPCacheEngine.exe

C:\Users\fipsin\AppData\Local\Temp\TnPUI.dll

C:\Users\fipsin\AppData\Local\Temp\vlc-2.2.1-win32.exe

C:\Users\fipsin\AppData\Local\Temp\zipsetup.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-11-09 16:28
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:07-11-2015

durchgeführt von fipsin (2015-11-09 18:47:01)

Gestartet von C:\Users\fipsin\Desktop

Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) (2008-11-24 01:54:36)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3882981418-2557861113-3788238974-500 - Administrator - Disabled)

fipsin (S-1-5-21-3882981418-2557861113-3788238974-1003 - Administrator - Enabled) => C:\Users\fipsin

Gast (S-1-5-21-3882981418-2557861113-3788238974-501 - Limited - Disabled)

Oli (S-1-5-21-3882981418-2557861113-3788238974-1005 - Limited - Enabled) => C:\Users\Oli

postgres (S-1-5-21-3882981418-2557861113-3788238974-1007 - Limited - Enabled) => C:\Users\postgres
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Desktop (Enabled - Out of date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Out of date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)

Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.176 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Reader 8.1.4 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A81300000003}) (Version: 8.1.4 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - )

Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 5.13.00 - )

Apple Application Support (HKLM\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}) (Version: 5.2.0.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Astroburn Lite (HKLM\...\Astroburn Lite) (Version: 1.8.0.0182 - Disc Soft Ltd)

Audacity 2.0.2 (HKLM\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)

Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)

Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

Broadcom Gigabit Integrated Controller (HKLM\...\{FC57FC53-104C-415C-98D7-B05E659461A9}) (Version: 10.52.12 - Broadcom Corporation)

BufferChm (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Business Contact Manager für Outlook 2007 SP1 (HKLM\...\Business Contact Manager) (Version: 3.0.7311.0 - Microsoft Corporation)

Business Contact Manager für Outlook 2007 SP1 (Version: 3.0.7311.0 - Microsoft Corporation) Hidden

C309a (Version: 120.0.202.000 - Hewlett-Packard) Hidden

Camera Center (HKLM\...\{668ACF05-E455-4932-A2D2-5822A8206FEB}) (Version: 1.0.27 - Lenovo)

Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.55.0.0 - Conexant)

Creative ALchemy Universal (HKLM\...\ALchemy) (Version:  - )

DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)

Debut Video Capture Software (HKLM\...\Debut) (Version:  - NCH Software)

Destination Component (Version: 110.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 120.0.194.000 - Hewlett-Packard) Hidden

DirectXInstallService (Version: 9.0.2 - Roxio) Hidden

DisplayFusion 5.1 (HKLM\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 5.1.0.0 - Binary Fortress Software)

DocProc (Version: 12.0.0.0 - Hewlett-Packard) Hidden

Drag-to-Disc (HKLM\...\{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}) (Version: 9.05 - Sonic Solutions)

Dropbox (HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\Dropbox) (Version: 2.10.41 - Dropbox, Inc.)

EAX Unified (HKLM\...\EAX Unified) (Version:  - )

EAX4 Unified Redist (HKLM\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

Ergänzung zu Lenovo Care (HKLM\...\{6280149E-EFF3-4F1B-BD43-5B7EDD6F620A}) (Version: 2.00 - )

Fax (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Flatcast Viewer Plugin 5.3.0.784 (HKLM\...\Flatcast Viewer 5.3_is1) (Version:  - 1 mal 1 Software GmbH)

Free YouTube to MP3 Converter version 3.12.46.923 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)

GOG.com Thief - Deadly Shadows (HKLM\...\{6177064c-e1cb-4f80-bfec-1d8cb07b244e}.sdb) (Version:  - )

Google Chrome (HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)

GPBaseService2 (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Grand Theft Auto San Andreas (HKLM\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)

Hama Wireless LAN Adapter (HKLM\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 1.00.0000 - Hama)

Hattrick Organizer (remove only) (HKLM\...\Hattrick Organizer) (Version:  - )

HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.73.00.50 - Conexant Systems)

Hitman - Codename 47 (HKLM\...\Hitman - Codename 47) (Version:  - )

HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{C6E3AB83-85E9-495E-B7A8-20B2963D11A2}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)

HP Deskjet 1510 series Hilfe (HKLM\...\{23972F22-BA23-4C61-9F91-B9470E1563EB}) (Version: 30.0.0 - Hewlett Packard)

HP Imaging Device Functions 12.0 (HKLM\...\HP Imaging Device Functions) (Version: 12.0 - HP)

HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (HKLM\...\{E2E25F53-EB64-4BC1-8A9E-B970BBEF8C1C}) (Version: 22.50.231.0 - Hewlett-Packard Co.)

HP Officejet Pro 8500 A910 Hilfe (HKLM\...\{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}) (Version: 140.0.2.2 - Hewlett Packard)

HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 4.05 - HP)

HP Solution Center 12.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 12.0 - HP)

HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden

HPPhotoGadget (Version: 120.0.150.000 - Hewlett-Packard) Hidden

HPProductAssistant (Version: 120.0.194.000 - Hewlett-Packard) Hidden

I.R.I.S. OCR (HKLM\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

iCloud (HKLM\...\{DA7DF8E2-4B8F-4286-97FE-DE3FFFE9B728}) (Version: 1.1.0.40 - Apple Inc.)

Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - Intel Corporation)

Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{26921B2E-3E62-47F9-A514-1FC4A83BD738}) (Version: 12.00.0004 - Intel(R) Corporation)

InterVideo Register Manager (Version: 1.0.4.0 - InterVideo Inc.) Hidden

InterVideo WinDVD (HKLM\...\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}) (Version: 5.0-B11.1268 - InterVideo Inc.)

IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.35 - Irfan Skiljan)

iTunes (HKLM\...\{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}) (Version: 10.6.3.25 - Apple Inc.)

Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)

JDownloader 0.9 (HKLM\...\jdownloader09) (Version: 0.9 - AppWork GmbH)

JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.18.07 - JMicron Technology Corp.)

join.me (HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\...\JoinMe) (Version: 1.9.0.130 - LogMeIn, Inc.)

Lenovo Bluetooth with Enhanced Data Rate Software 6.1.0.5100 (HKLM\...\{03D1988F-469F-4843-8E6E-E5FE9D17889D}) (Version: 6.1.0.5100 - Lenovo.)

Lenovo Care (HKLM\...\{CF52099A-3BEA-4C41-AEA8-1E190F04D737}) (Version: 2.10 - )

Lenovo EasyCamera (HKLM\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 1.8.0701.01 - )

Lenovo Registration (HKLM\...\Lenovo Registration) (Version:  - Lenovo - Leader Technologies)

Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.01 - )

LIVE gaming on Windows Runtime Version 1.0.6027 (HKLM\...\{839916F4-D8B5-4407-BE6D-6D4EB9D96AF4}) (Version: 1.0.6027 - Microsoft Corporation)

Mafia (HKLM\...\Mafia) (Version:  - )

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

ManiaPlanet (HKLM\...\ManiaPlanet_is1) (Version:  - Nadeo)

Message Center (HKLM\...\{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}) (Version: 2.01b - )

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Halo (HKLM\...\Halo) (Version:  - Microsoft)

Microsoft Office 2003 Web Components (HKLM\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation)

Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)

Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)

Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)

Microsoft SQL Server Native Client (HKLM\...\{1D1D8ADC-BF08-4E61-9393-5FA305B16864}) (Version: 9.00.3042.00 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\...\{5C759B74-34F4-43C6-A5D9-039CB754C5E9}) (Version: 9.00.3042.00 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

Mozilla Firefox 42.0 (x86 de) (HKLM\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)

Mozilla Thunderbird 16.0.2 (x86 de) (HKLM\...\Mozilla Thunderbird 16.0.2 (x86 de)) (Version: 16.0.2 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

OCR Software by I.R.I.S. 12.0 (HKLM\...\HPOCR) (Version: 12.0 - HP)

OpenAL (HKLM\...\OpenAL) (Version:  - )

Origin (HKLM\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)

PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden

PDFBinder (HKLM\...\{8BA03AC2-579F-41CD-A250-740137D86F7A}) (Version: 1.0.0 - Malamute.dk)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.1 - Frank Heindörfer, Philip Chinery)

Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)

PlayCatan Zugangssoftware (HKLM\...\PlayCatan Client) (Version: 3.1148 - Catan GmbH)

PM Driver (HKLM\...\InstallShield_{62715632-A555-4D9E-9CEC-4F84EB55B07B}) (Version: 0.64.0.2 - Lenovo)

PM Driver (Version: 0.64.0.2 - Lenovo) Hidden

PokerStars.eu (HKLM\...\PokerStars.eu) (Version:  - PokerStars.eu)

PokerStars.fr (HKLM\...\PokerStars.fr) (Version:  - PokerStars.fr)

PostgreSQL 8.4 (HKLM\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)

Power Ux Customization (Version: 1.00.0000 - Lenovo) Hidden

Präsentationsdirektor (HKLM\...\{65706020-7B6F-41F2-8047-FC69579E386A}) (Version: 4.00a - )

PrismaLife Angebots-Software (C:\Program Files\PrismaLife Angebots-Software AFA 2011\) (HKLM\...\ST6UNST #2) (Version:  - )

PrismaLife Angebots-Software (HKLM\...\ST6UNST #1) (Version:  - )

Product Recovery Disc Burning Utility (HKLM\...\{FA62B4C2-6CFD-462F-9B59-68A730001AB3}) (Version: 1.0.0022.00 - Lenovo Group Limited)

ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.10 - ProtectDisc Software GmbH)

PS_AIO_05_C309_Software_Min (Version: 120.0.206.000 - Hewlett-Packard) Hidden

QIP Infium 9040 Jeak-Edition (HKLM\...\{D20559F7-7755-4811-BCD5-7F344BEC2215}) (Version: 2.0.9040 - jeak.de)

QuickTime (HKLM\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)

Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.7.0 - Ralink)

REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0150 - REALTEK Semiconductor Corp.)

Registry patch for Windows Vista USB S3 PM Enablement (HKLM\...\USBPMon) (Version: 1.00 - )

Registry patch of Changing Timing of IDLE IRP by Finger Print Driver for Windows Vista  (HKLM\...\FPIRPOn) (Version: 1.01 - )

Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista (HKLM\...\Dipmon) (Version: 1.01 - )

Registry patch to improve USB device detection on resume from sleep for Windows Vista (HKLM\...\{4AB5764A-3894-49A2-BAA8-C4665F74CD4C}) (Version: 1.01.0000 - Lenovo Group Limited)

Rescue and Recovery (HKLM\...\{7E4C16B8-8F76-4940-8505-98E93C00BF19}) (Version: 4.21.0014.00 - Lenovo Group Limited)

RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (HKLM\...\RivaTuner) (Version: v2.24 MSI Master Overclocking Arena 2009 edition - Alexey Nicolaychuk)

Roxio Creator Small Business Edition (HKLM\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.1 - Roxio)

Roxio Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 6.0.0 - Roxio)

Safari (HKLM\...\{6D172D0A-B9F1-4046-AFAB-8599288545BF}) (Version: 5.34.55.3 - Apple Inc.)

Samsung ML-1520 Series (HKLM\...\Samsung ML-1520 Series) (Version:  - )

Schlag den Raab - Das 2. Spiel (HKLM\...\SDR2) (Version: 1.0 - Sproing Interactive GmbH)

Secure Download Manager (HKLM\...\{7709C9B0-AD83-4F7C-A153-B956BC3C3B0A}) (Version: 3.1.10 - Kivuto Solutions Inc.)

Skype™ 7.13 (HKLM\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.)

SolutionCenter (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Sonic CinePlayer Decoder Pack (Version: 4.3.0 - Sonic Solutions) Hidden

Sonic Icons for Lenovo (HKLM\...\{B334D9AE-1393-423E-97C0-3BDC3360E692}) (Version: 2.0.0 - Lenovo)

SopCast 3.9.6 (HKLM\...\SopCast) (Version: 3.9.6 - www.sopcast.com)

Status (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

StreamTransport version: 1.0.2.2171 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )

Studie zur Verbesserung von HP Deskjet 1510 series (HKLM\...\{DBA5666B-B0A2-4742-8D4F-F619FF37A7C4}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Update (HKLM\...\{8675339C-128C-44DD-83BF-0A5D6ABD8297}) (Version: 3.14.0020 - Lenovo)

The Adventures of Zak McKracken (HKLM\...\The Adventures of Zak McKracken) (Version:  - )

Thief - Deadly Shadows (HKLM\...\GOGPACKTHIEF3_is1) (Version: 2.0.0.6 - GOG.com)

ThinkVantage Access Connections (HKLM\...\{4BD295B9-0190-4C54-B08E-33A6ECA922DF}) (Version: 5.02 - Lenovo)

ThinkVantage Status Gadget (HKLM\...\{AF70B943-5081-4BD8-88F2-75637FD34364}) (Version: 1.1.0026 - Lenovo)

ThinkVantage Technologies Welcome Message (Version: 1.21 - ) Hidden

Thunderbird-Tray (HKLM\...\Thunderbird-Tray) (Version: 1.2 - Felix 'SniperBeamer' Geyer)

Tomb Raider: Anniversary 1.0 (HKLM\...\Tomb Raider: Anniversary) (Version:  - )

Toolbox (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Tournament Manager Pro V.3.1.0 (HKLM\...\Tournament Manager Pro V.3_is1) (Version:  - Sport-Supervisor)

Tourney Manager (HKLM\...\{33FF2328-8CE0-425E-AEDC-BEF9AED09153}) (Version: 1.0.00 - RVG Software)

TrayApp (Version: 120.0.194.000 - Hewlett-Packard) Hidden

TubeDigger 4.5.1 (HKLM\...\{1E3745C1-674D-4B2E-B8F7-3F4088950ED7}_is1) (Version: 4.5.1 - TubeDigger)

TV-Browser 3.3.2 (HKLM\...\tvbrowser) (Version: 3.3.2 - TV-Browser Team)

UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden

Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.3042.00 - Microsoft Corporation)

VideoPad Video Editor (HKLM\...\VideoPad) (Version:  - NCH Software)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Wallpapers (Version:  - ) Hidden

WebReg (Version: 120.0.194.000 - Hewlett-Packard) Hidden

Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

Windows Live Toolbar (HKLM\...\Windows Live Toolbar) (Version: 03.01.0130 - Microsoft Corporation)

WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

WISO Steuer-Sparbuch 2012 (HKLM\...\{0CC1DAFB-40C8-4903-953D-471E541477C7}) (Version: 19.00.7303 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2013 (HKLM\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2014 (HKLM\...\{6CEDC3A7-344C-48A2-9E52-0F434FEFB181}) (Version: 21.00.8480 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2015 (HKLM\...\{221B9581-AB18-41FD-B5F4-43BABF6521F0}) (Version: 22.00.8811 - Buhl Data Service GmbH)

WMTurnier 1.0.1 (HKLM\...\WMTurnier_is1) (Version: 1.0 - Turniermanager.de)

X-Chat 2.8.6-2 (HKLM\...\X-Chat 2_is1) (Version: 2.8.6-2 - SilvereX)

Yahoo! Detect (HKLM\...\YTdetect) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.135\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.99\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.57\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{0F130AC8-CDF1-4DAA-AA9B-7B4083F49EA4}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\PtContainerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.25.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.27.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.69\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.79\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.23.9\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{492042A2-4432-44A1-9A39-85B2D3C0119E}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\PtContainerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Chrome\Application\46.0.2490.80\delegate_execute.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.1\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.145\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.123\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.153\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.13\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{876FA801-2B5E-4201-9E6B-2EF2C05A5C6B}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarAPI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{89425F5E-A2BD-44CD-9E4F-F1498522F0E5}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarManagerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.24.15\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.149\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{9642D229-6B2E-49FD-B6BB-43B37BD97B6B}\localserver32 -> "C:\Program Files\Coral Poker\widgetbar\PTContainerOle.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.22.3\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.165\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.26.9\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.25.11\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\psuser.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.21.65\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.15\psuser.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.22.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{F6F8856F-374D-4397-BB1C-80AB57E60529}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarAPI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1003_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\fipsin\AppData\Local\Google\Update\1.3.24.7\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.135\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.99\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.57\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{0F130AC8-CDF1-4DAA-AA9B-7B4083F49EA4}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\PtContainerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.25.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.27.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.69\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.1\GoogleUpdateOnDemand.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.1\GoogleUpdateOnDemand.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.79\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.23.9\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{492042A2-4432-44A1-9A39-85B2D3C0119E}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\PtContainerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.1\GoogleUpdateOnDemand.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\fipsin\AppData\Local\Google\Chrome\Application\44.0.2403.89\delegate_execute.exe" => Keine (Der Dateneintrag hat 6 mehr Zeichen).

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.28.1\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.145\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.123\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.153\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.28.13\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{876FA801-2B5E-4201-9E6B-2EF2C05A5C6B}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarAPI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{89425F5E-A2BD-44CD-9E4F-F1498522F0E5}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarManagerUI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.24.15\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.149\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{9642D229-6B2E-49FD-B6BB-43B37BD97B6B}\localserver32 -> "C:\Program Files\Coral Poker\widgetbar\PTContainerOle.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.22.3\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.165\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.26.9\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.25.11\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.21.65\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\fipsin\AppData\Local\Google\Update\1.3.28.1\GoogleUpdateOnDemand.exe" => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.28.1\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.22.5\psuser.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{F6F8856F-374D-4397-BB1C-80AB57E60529}\InprocServer32 -> C:\Program Files\Coral Poker\widgetbar\WidgetbarAPI.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-3882981418-2557861113-3788238974-1007_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\postgres\AppData\Local\Google\Update\1.3.24.7\psuser.dll => Keine Datei
 

==================== Wiederherstellungspunkte =========================
 

30-10-2015 03:21:38 Geplanter Prüfpunkt

30-10-2015 18:27:24 Geplanter Prüfpunkt

06-11-2015 14:30:53 Geplanter Prüfpunkt
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2006-11-02 11:23 - 2014-08-20 16:21 - 00000730 ____A C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1 rad.msn.com
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0ADAB7F7-D7C4-425A-901E-77F7919FA574} - System32\Tasks\{BAF487B7-4109-4D5A-A546-BBBBB1172009} => pcalua.exe -a "C:\Program Files\Spiele\Mafia\Setup.exe" -d "C:\Program Files\Spiele\Mafia"

Task: {1EC488E8-C9D1-43BB-B272-3FC48D49644B} - System32\Tasks\{A0EB2C31-939F-49B8-B045-371B5AEEEEBD} => pcalua.exe -a D:\setup.exe -d D:\

Task: {364B5BA2-252D-43BE-AA56-61B7C8F17608} - System32\Tasks\HP AR Program Upload - 63ff701bc1d348a9b53ca8a30f7046425efc4b9859da4ceaafd5acbc5a48fe74 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2014-03-06] (TODO: <Company name>)

Task: {43AFDB20-B12F-496A-8622-EDF92AD0AC90} - System32\Tasks\{0CD47EEE-CD87-4B38-AF6A-EEEFA1F4BC95} => Firefox.exe hxxp://ui.skype.com/ui/0/7.1.0.105/de/abandoninstall?page=tsMain

Task: {6F7AABB0-A084-4FE3-A27C-F82689FECA77} - System32\Tasks\{3058B1B0-CAF3-4060-8D99-F1826F694E32} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=6.1.0.129.272&amp;LastError=404

Task: {75DE84CC-22D9-47C2-90A4-894940F29AE7} - System32\Tasks\{9B3A0654-2E8E-4C8C-AA68-3048CEA5707D} => pcalua.exe -a C:\Users\fipsin\Desktop\fanadv_zak2.exe -d C:\Users\fipsin\Desktop

Task: {88158391-6C3F-4738-8D55-C20E759A0C32} - System32\Tasks\{7E838AE1-328C-4694-86A3-8B82DFE166F8} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=6.1.0.129.272&amp;LastError=404

Task: {8EB4E8C1-D2EB-4510-82FB-AAEA8887E898} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003Core => C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {91B28236-3C39-4B86-9351-35DCDD90D6CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {A9C27B6E-30AD-4E8F-BEDA-C749B3AB7ACB} - System32\Tasks\Auf Updates für Windows Live Toolbar prüfen => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE [2007-02-12] (Microsoft Corporation)

Task: {AEC4E68A-1FE4-46D5-8665-55A53952D08C} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)

Task: {B781BA53-FA96-4467-BC8C-1C89908B0A3B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003UA => C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {BA8F6445-7BB5-48B2-AFE2-D05A51EFF5AA} - System32\Tasks\{EF3E5C58-4583-4643-B893-2F4AD9FD1F69} => pcalua.exe -a D:\DirectX9\dxsetup.exe -d D:\DirectX9

Task: {C2B13926-F5C3-4243-BF83-D93E4CB16EA5} - System32\Tasks\{F9878DDB-AB22-442E-8A99-39FDD5A9C5F2} => pcalua.exe -a C:\Users\fipsin\Desktop\PartyPokerSetup.exe -d C:\Users\fipsin\Desktop

Task: {EC2A0F6D-A3D0-4BD1-9B47-3A1466D81E6C} - System32\Tasks\NCH Software\DebutReminder => C:\Program Files\NCH Software\Debut\Debut.exe [2013-03-07] (NCH Software)

Task: {F2572CFE-79C9-4D53-91EF-0302ECB06B60} - System32\Tasks\{0A5781FD-9811-46FC-A95A-883700155D62} => pcalua.exe -a "C:\Program Files\Lenovo\Camera Center\bin\LenovoApplicationInstaller.exe" -d "C:\Program Files\Lenovo\Camera Center\bin"
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Auf Updates für Windows Live Toolbar prüfen.job => C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003Core.job => C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3882981418-2557861113-3788238974-1003UA.job => C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\User_Feed_Synchronization-{4AAA7BF1-CD1A-45CD-B8EB-18FDFC1D4B1E}.job => C:\Windows\system32\msfeedssync.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2008-04-30 19:13 - 2008-04-30 19:13 - 00200704 ____N () C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL

2015-07-03 11:33 - 2014-02-18 09:11 - 00172032 _____ () c:\postgreSQL\bin\LIBPQ.dll

2015-07-03 11:36 - 2012-08-14 14:19 - 00999424 _____ () c:\postgreSQL\bin\libxml2.dll

2008-05-24 16:17 - 2008-05-24 16:17 - 00520192 ____N () C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe

2008-05-24 16:03 - 2008-05-24 16:03 - 00139264 ____N () C:\Program Files\Lenovo\Rescue and Recovery\CDRecord.dll

2008-11-24 03:19 - 2007-06-18 16:28 - 00056056 ____N () C:\Windows\system32\DLAAPI_W.DLL

2008-11-24 02:59 - 2008-06-17 20:00 - 00659456 ____N () C:\Windows\system32\vmprp331.ax

2012-11-08 20:34 - 2012-10-26 21:40 - 02111456 _____ () C:\Programme\Mozilla Thunderbird\mozjs.dll

2012-11-08 20:34 - 2012-10-26 21:40 - 00157664 _____ () C:\Programme\Mozilla Thunderbird\NSLDAP32V60.dll

2012-11-08 20:34 - 2012-10-26 21:40 - 00021984 _____ () C:\Programme\Mozilla Thunderbird\NSLDAPPR32V60.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3882981418-2557861113-3788238974-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\fipsin\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg

HKU\S-1-5-21-3882981418-2557861113-3788238974-1007\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: )

Windows Firewall ist deaktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: BthServ => 2

MSCONFIG\Services: btwdins => 2

MSCONFIG\Services: IDriverT => 3

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: IviRegMgr => 2

MSCONFIG\Services: MBAMService => 2

MSCONFIG\Services: Realtek11nSU => 2

MSCONFIG\Services: Roxio UPnP Renderer 10 => 3

MSCONFIG\Services: Roxio Upnp Server 10 => 2

MSCONFIG\Services: RoxLiveShare10 => 2

MSCONFIG\Services: RoxMediaDB10 => 3

MSCONFIG\Services: RoxWatch10 => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\Services: Steam Client Service => 3

MSCONFIG\Services: SwitchBoard => 3

MSCONFIG\Services: TVT Backup Protection Service => 2

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\Services: wscsvc => 2

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk => C:\Windows\pss\BTTray.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Hama Wireless LAN Utility.lnk => C:\Windows\pss\Hama Wireless LAN Utility.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^fipsin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^readme!!.txt => C:\Windows\pss\readme!!.txt.Startup

MSCONFIG\startupfolder: C:^Users^fipsin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Sparbuch heute.lnk.Startup

MSCONFIG\startupreg: ACTray => C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe

MSCONFIG\startupreg: ACWlIcon => C:\Program Files\ThinkPad\ConnectUtilities\ACWlIcon.exe

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AMSG => C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup

MSCONFIG\startupreg: Apoint => C:\Program Files\Apoint2K\Apoint.exe

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Avira Systray => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

MSCONFIG\startupreg: CameraApplicationLauncher => C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchpadLauncher.exe

MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

MSCONFIG\startupreg: FlashPlayerUpdate => C:\Users\fipsin\EHGKJ\DFOJW.vbs

MSCONFIG\startupreg: Google Update => "C:\Users\fipsin\AppData\Local\Google\Update\GoogleUpdate.exe" /c

MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: LPManager => C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe

MSCONFIG\startupreg: MobileDocuments => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe

MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe

MSCONFIG\startupreg: PMHandler => C:\PROGRA~1\Lenovo\PMDRIV~1\PMHandler.exe

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: RoxioDragToDisc => "C:\Program Files\Lenovo\Drag-to-Disc\DrgToDsc.exe"

MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"

MSCONFIG\startupreg: Samsung LBP SM => "C:\Windows\Samsung\LaserSMMgr\ssmmgr.exe" /autorun

MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SMARTAUDIO\SMAUDIO.EXE /c

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

MSCONFIG\startupreg: TPFNF7 => C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe /r

MSCONFIG\startupreg: TPWAUDAP => C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe

MSCONFIG\startupreg: TVT Scheduler Proxy => C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe

MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide

MSCONFIG\startupreg: WindowsWelcomeCenter => rundll32.exe oobefldr.dll,ShowWelcomeCenter

MSCONFIG\startupreg: WMPNSCFG => C:\Program Files\Windows Media Player\WMPNSCFG.exe

MSCONFIG\startupreg: wscript => wscript.exe //B "C:\Users\fipsin\AppData\Roaming\wscript.vbs"
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [{3BC76C07-09EC-476D-8FE5-606DECE43AB7}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{9CF7005D-E764-4F86-9E3B-421DB48C25C5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{EE7D0CFE-A099-4060-960E-3C7ECB61DC1B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{C3EEBA44-6431-4F09-BD81-1509162249FA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{E37C1FF4-6D92-4DDE-B560-3CE376423456}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{7DDDE376-A121-44A7-836E-9EC8D3FDCA67}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{4FA96A22-9CE5-4421-8EC5-1551D9BAD61F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{8686D7A8-A02E-45CA-8FC1-011AA3C5044F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{40AAF93C-8B6E-40DE-8669-84D30081FE20}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{1063AE42-AF58-43B4-8926-9FE4C695754D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{6767F2FE-7CF7-4D24-A33A-BB04BB619EBC}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{659A8E75-DB28-42C4-AB33-CD8552D4D17A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{6A14018C-74E8-4777-AE37-C86A3780AC4B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{C39B88EE-F219-4AD0-89C4-07758202FE5A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{591883B7-1306-4C60-8933-2B7DF757471A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{A2063F6E-08A6-40DA-9A1A-EAF94A928E80}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{6D759581-41DE-4456-BC0F-F9EB34F28F71}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{3B6FA3FC-F3E9-4690-B02C-9655DDA47403}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{902D5CE3-5BB5-463A-8C1B-F5203EF8C2B8}] => (Allow) E:\setup\hpznui01.exe

FirewallRules: [TCP Query User{FDFD4B55-7019-4EBE-B816-D7B57143E320}C:\users\fipsin\desktop\oli\qip\qip.exe] => (Allow) C:\users\fipsin\desktop\oli\qip\qip.exe

FirewallRules: [UDP Query User{4BC0D2BB-6C06-42BD-B4CB-9665083A513B}C:\users\fipsin\desktop\oli\qip\qip.exe] => (Allow) C:\users\fipsin\desktop\oli\qip\qip.exe

FirewallRules: [TCP Query User{2D4EB1D6-BA2A-42E1-A034-47650791B651}C:\users\fipsin\desktop\oli\xchat\xchat.exe] => (Block) C:\users\fipsin\desktop\oli\xchat\xchat.exe

FirewallRules: [UDP Query User{011AA711-07F7-460B-AC0E-6D153C7ED5AD}C:\users\fipsin\desktop\oli\xchat\xchat.exe] => (Block) C:\users\fipsin\desktop\oli\xchat\xchat.exe

FirewallRules: [TCP Query User{059C5FBB-57B6-4760-BD49-BCFDE8B422EB}C:\users\fipsin\desktop\oli\xchat\xchat.exe] => (Allow) C:\users\fipsin\desktop\oli\xchat\xchat.exe

FirewallRules: [UDP Query User{5D980E2B-A32A-4008-A188-0714B3019163}C:\users\fipsin\desktop\oli\xchat\xchat.exe] => (Allow) C:\users\fipsin\desktop\oli\xchat\xchat.exe

FirewallRules: [{7AEBA42E-5613-4B51-9594-179370E21C5D}] => (Allow) LPort=80

FirewallRules: [{BFA86678-696B-4449-A934-8621FEAAAD5D}] => (Allow) LPort=80

FirewallRules: [{3EF15A1A-2FEA-4D1B-9F69-A7313A9C0ACE}] => (Allow) LPort=80

FirewallRules: [{64746795-9E3D-4A80-8E16-570FF50431BC}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe

FirewallRules: [{98A416EE-915B-41B0-8A42-9240A848B28D}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe

FirewallRules: [{35F660F0-DECE-440D-9CD9-14DE891E03E5}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe

FirewallRules: [{B84DEEE2-47B3-471B-8ECA-2A28D698DDB7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe

FirewallRules: [TCP Query User{7DA9F507-F1CD-401E-A3E6-5DA359EC6D5E}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe

FirewallRules: [UDP Query User{CAAAA004-4229-401A-861E-8F28ABB452E3}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe

FirewallRules: [TCP Query User{4189E271-6F0F-46AA-BCCD-498E7B1C316B}C:\users\fipsin\desktop\neuer ordner (3)\scda-offline\system\splintercell4.exe] => (Allow) C:\users\fipsin\desktop\neuer ordner (3)\scda-offline\system\splintercell4.exe

FirewallRules: [UDP Query User{34133694-71A5-4FB3-BDBF-E84831CC14EA}C:\users\fipsin\desktop\neuer ordner (3)\scda-offline\system\splintercell4.exe] => (Allow) C:\users\fipsin\desktop\neuer ordner (3)\scda-offline\system\splintercell4.exe

FirewallRules: [TCP Query User{7EC20E9F-BC91-452D-8AAE-04816E480C6B}C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe] => (Allow) C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe

FirewallRules: [UDP Query User{D8A485A1-4D57-4EDA-A4D2-4E4928D34D4E}C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe] => (Allow) C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe

FirewallRules: [TCP Query User{ED71A410-9F97-4FFE-9497-763AF6F35495}C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe] => (Block) C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe

FirewallRules: [UDP Query User{9C947765-4DE4-4768-9F9B-37D1FF229B73}C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe] => (Block) C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe

FirewallRules: [TCP Query User{F6254497-3BFF-44E1-A6B2-196180038701}C:\users\fipsin\desktop\splinter cell double agent\scda-offline\system\splintercell4.exe] => (Allow) C:\users\fipsin\desktop\splinter cell double agent\scda-offline\system\splintercell4.exe

FirewallRules: [UDP Query User{61521446-2C01-4AD5-9955-D1D571EFB350}C:\users\fipsin\desktop\splinter cell double agent\scda-offline\system\splintercell4.exe] => (Allow) C:\users\fipsin\desktop\splinter cell double agent\scda-offline\system\splintercell4.exe

FirewallRules: [TCP Query User{A251C6DE-3BE3-403E-9AEB-1FD951286014}C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe] => (Allow) C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe

FirewallRules: [UDP Query User{E2AE352F-E288-4E31-A480-20821B642DDD}C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe] => (Allow) C:\users\fipsin\desktop\miranda4gamers 1.1\miranda32.exe

FirewallRules: [TCP Query User{B592C8AB-92B0-4B9F-BC37-78E886F1EE3C}C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe] => (Allow) C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe

FirewallRules: [UDP Query User{59AF5D1E-D6FE-422C-A32B-9F6E384DF50D}C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe] => (Allow) C:\users\fipsin\desktop\neuer ordner\mirc\mirc.exe

FirewallRules: [{A56B5E76-9F8B-4A0E-ACCE-2A34F1F9FD03}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{DF93ED6D-4832-49BD-8F63-27FD44A152D0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{4E782BC9-AB07-4466-8E14-9A5F2FFD2F5F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{3CEA82ED-7CB5-44A8-9F25-25D14560DD76}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{1C6BE509-97A7-42DD-B136-CA3419D1403F}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{120233D8-01CA-44E5-97C4-97A436526AA8}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{5C6867A5-72EA-4A39-8F72-D42C18EA0470}] => (Allow) LPort=1542

FirewallRules: [{97A45B21-62B7-4560-9CD0-A566A3E60FBD}] => (Allow) LPort=1542

FirewallRules: [{43E5A230-2141-462E-99F5-FE43E039E4F9}] => (Allow) LPort=53

FirewallRules: [TCP Query User{57B76855-2708-4973-A270-FD773AB43A8A}C:\program files\x-chat 2\xchat.exe] => (Allow) C:\program files\x-chat 2\xchat.exe

FirewallRules: [UDP Query User{D520B493-6046-4D39-927A-72CEB75FCC0B}C:\program files\x-chat 2\xchat.exe] => (Allow) C:\program files\x-chat 2\xchat.exe

FirewallRules: [TCP Query User{152AEDA5-E973-40C5-8B59-EF58F6FB69EB}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A9A39BE5-ABD5-4F67-BACA-A9CFF7508A29}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{C39202E6-2925-476D-B62C-4D5145629BCC}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe

FirewallRules: [UDP Query User{72BA361C-4C7F-4ABA-8F9D-A117D909C871}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe

FirewallRules: [{EFBBC260-E144-4E8E-AF0A-8B6DD13C244C}] => (Allow) C:\Program Files\TubeDigger\TubeDigger.exe

FirewallRules: [{478D73BB-E58E-4FE3-B73B-FD1B7CD5FF8D}] => (Allow) C:\Program Files\TubeDigger\TubeDigger.exe

FirewallRules: [{90E828D8-0EF7-431D-AF4F-1B8059404165}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe

FirewallRules: [{227528D0-7F35-4F4D-996E-86092DC3F0FB}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe

FirewallRules: [{5EE3C184-82FB-4E06-89AF-8532FC06452D}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe

FirewallRules: [{E431612B-EDE0-45B3-ACD7-4616E7F8B210}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe

FirewallRules: [{E7F3FBEB-F522-4857-AB18-D6F558D20D7C}] => (Allow) C:\Program Files\Java\jre7\bin\java.exe

FirewallRules: [{7962A59D-A04A-4155-81FE-94114B884FB9}] => (Allow) C:\Program Files\Java\jre7\bin\java.exe

FirewallRules: [{1C1DAF55-D921-492A-AE6F-1DD06BCEE175}] => (Allow) C:\Program Files\Java\jre7\bin\javaw.exe

FirewallRules: [{312E6A85-455E-4B63-8B33-6C97EBF20808}] => (Allow) C:\Program Files\Java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{6517EFA4-DD92-4DDD-A105-CA91B5AFAE70}C:\program files\miranda\miranda32.exe] => (Allow) C:\program files\miranda\miranda32.exe

FirewallRules: [UDP Query User{466BAB06-28C2-4544-8AEB-40E0925EDA19}C:\program files\miranda\miranda32.exe] => (Allow) C:\program files\miranda\miranda32.exe

FirewallRules: [TCP Query User{23F688A7-CF86-45B8-A727-6E4A66898797}C:\program files\miranda\miranda32.exe] => (Allow) C:\program files\miranda\miranda32.exe

FirewallRules: [UDP Query User{797022A8-48EA-4C1C-B112-14E9BFC174B3}C:\program files\miranda\miranda32.exe] => (Allow) C:\program files\miranda\miranda32.exe

FirewallRules: [TCP Query User{325BEA95-6B0A-4DD7-8751-7FA327502E5E}C:\program files\x-chat 2\xchat.exe] => (Allow) C:\program files\x-chat 2\xchat.exe

FirewallRules: [UDP Query User{59E56D44-41C3-4594-8081-D474676BCDEE}C:\program files\x-chat 2\xchat.exe] => (Allow) C:\program files\x-chat 2\xchat.exe

FirewallRules: [TCP Query User{057E0875-0912-447C-8593-252C4C2D50F3}C:\users\fipsin\desktop\call of duty\codmp.exe] => (Allow) C:\users\fipsin\desktop\call of duty\codmp.exe

FirewallRules: [UDP Query User{C757112B-CDD3-49E8-9CFE-657843D04616}C:\users\fipsin\desktop\call of duty\codmp.exe] => (Allow) C:\users\fipsin\desktop\call of duty\codmp.exe

FirewallRules: [TCP Query User{7BDEBAED-D430-4A55-85D4-731E554F98AC}C:\users\fipsin\desktop\flatout2\flatout2.exe] => (Allow) C:\users\fipsin\desktop\flatout2\flatout2.exe

FirewallRules: [UDP Query User{2CA41986-ABA8-4806-8594-AA7240A065FF}C:\users\fipsin\desktop\flatout2\flatout2.exe] => (Allow) C:\users\fipsin\desktop\flatout2\flatout2.exe

FirewallRules: [{2DB89069-B896-4EC2-83E2-0F7FC134AE68}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{ABDE0F08-3605-4A27-8D0E-19790A4FFA36}] => (Allow) C:\Program Files\Spiele\halo2.exe

FirewallRules: [{E2FD88CB-CAD1-4197-8F6C-25FD3783697C}] => (Allow) C:\Program Files\Spiele\halo2.exe

FirewallRules: [{CF1A702F-8777-4026-A276-9A460026C85B}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{6A42FFE7-D355-4C38-901E-2E8E66B9567F}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{3F320360-986C-45D8-9718-75D0629A5634}] => (Allow) C:\Program Files\Steam\Steam.exe

FirewallRules: [{2A6818FE-CEB7-4A3D-8DA5-97FA989C6246}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{4D023647-233E-41C6-895C-7115B89B4C9D}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe

FirewallRules: [{C5051312-ED93-4E55-AF95-5A35AF93579D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{515F431F-506B-41E4-B4BC-E186AB465873}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{3595BDB0-8C36-41D3-A75C-95D18A453975}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{41FE4608-CA72-4072-A689-C28CA29036A1}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{5E1069DA-EF98-4FE6-857D-81E88A6F1B7D}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe

FirewallRules: [{252A7D4A-750F-4CD4-80EA-AEDE940EC316}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{EE642A12-7441-47FB-87B3-29F96EAF9133}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{6BDB946B-505D-4C1F-84A9-570E0723BFF5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

StandardProfile\AuthorizedApplications: [C:\Users\fipsin\Desktop\Oli\Xchat\xchat.exe] => Enabled:XChat IRC Client

StandardProfile\AuthorizedApplications: [C:\Users\fipsin\Desktop\Xchat\xchat.exe] => Enabled:XChat IRC Client

StandardProfile\AuthorizedApplications: [C:\Program Files\xchat\xchat.exe] => Enabled:XChat IRC Client
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Microsoft-ISATAP-Adapter #2

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: Microsoft-ISATAP-Adapter #4

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (11/09/2015 04:39:05 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\N5EDDA0N.DEFAULT\SAFEBROWSING-TO_DELETE> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:30 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\LANGUAGES> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:30 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\LANGUAGES> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:19 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\JS> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:17 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\JS> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:12 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\IMAGES> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:25:12 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\IMAGES> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:24:54 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\IMAGES\WHITE-ON-BLACK> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:24:40 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\IMAGES\WHITE-ON-BLACK> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 

Error: (11/09/2015 04:23:20 PM) (Source: Windows Search Service) (EventID: 3013) (User: )

Description: Eintrag <C:\USERS\FIPSIN\APPDATA\LOCAL\SKYPE\APPS\LOGIN\IMAGES\RETINA> in der Hash-Zuordnung kann nicht aktualisiert werden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
 
 

Systemfehler:

=============

Error: (11/09/2015 06:39:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 06:29:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 06:19:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 06:09:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:59:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:49:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:39:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:29:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:19:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (11/09/2015 05:09:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 
 

CodeIntegrity:

===================================

  Date: 2015-11-09 18:46:18.194

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:46:18.007

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:46:17.804

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:46:17.541

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:42:46.287

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:42:45.976

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:42:45.731

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-11-09 18:42:45.495

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-04 15:38:38.950

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-04 15:38:38.732

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Genuine Intel(R) CPU 575 @ 2.00GHz

Prozentuale Nutzung des RAM: 79%

Installierter physikalischer RAM: 2007.85 MB

Verfügbarer physikalischer RAM: 415.57 MB

Summe virtueller Speicher: 4254.99 MB

Verfügbarer virtueller Speicher: 1910.01 MB
 

==================== Laufwerke ================================
 

Drive c: (SW_Preload) (Fixed) (Total:137.82 GB) (Free:14.66 GB) NTFS

Drive q: (Lenovo) (Fixed) (Total:9.77 GB) (Free:3.57 GB) NTFS

Drive s: (SERVICEV003) (Fixed) (Total:1.46 GB) (Free:0.65 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 149.1 GB) (Disk ID: 0ECCE8AD)

Partition 1: (Active) - (Size=1.5 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=137.8 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=9.8 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2015.11.11.01

  rootkit: v2015.11.04.02
 

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 7.0.6002.18005

fipsin :: FIPSIN-PC [administrator]
 

11.11.2015 03:39:00

mbar-log-2015-11-11 (03-39-00).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 415107

Time elapsed: 49 minute(s), 26 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Code:

04:34:10.0283 0x1310  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57

04:34:17.0479 0x1310  ============================================================

04:34:17.0479 0x1310  Current date / time: 2015/11/11 04:34:17.0479

04:34:17.0479 0x1310  SystemInfo:

04:34:17.0479 0x1310  

04:34:17.0479 0x1310  OS Version: 6.0.6002 ServicePack: 2.0

04:34:17.0479 0x1310  Product type: Workstation

04:34:17.0479 0x1310  ComputerName: FIPSIN-PC

04:34:17.0480 0x1310  UserName: fipsin

04:34:17.0480 0x1310  Windows directory: C:\Windows

04:34:17.0480 0x1310  System windows directory: C:\Windows

04:34:17.0480 0x1310  Processor architecture: Intel x86

04:34:17.0480 0x1310  Number of processors: 1

04:34:17.0480 0x1310  Page size: 0x1000

04:34:17.0480 0x1310  Boot type: Normal boot

04:34:17.0480 0x1310  ============================================================

04:34:21.0057 0x1310  KLMD registered as C:\Windows\system32\drivers\91290330.sys

04:34:21.0448 0x1310  System UUID: {E53F43A9-8388-4199-A52A-6CF65D5CEED7}

04:34:22.0581 0x1310  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

04:34:22.0584 0x1310  ============================================================

04:34:22.0584 0x1310  \Device\Harddisk0\DR0:

04:34:22.0585 0x1310  MBR partitions:

04:34:22.0585 0x1310  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2EE000

04:34:22.0585 0x1310  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x113A27F8

04:34:22.0585 0x1310  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x11691000, BlocksNum 0x1388000

04:34:22.0585 0x1310  ============================================================

04:34:22.0648 0x1310  C: <-> \Device\Harddisk0\DR0\Partition2

04:34:22.0700 0x1310  S: <-> \Device\Harddisk0\DR0\Partition1

04:34:22.0751 0x1310  Q: <-> \Device\Harddisk0\DR0\Partition3

04:34:22.0751 0x1310  ============================================================

04:34:22.0751 0x1310  Initialize success

04:34:22.0751 0x1310  ============================================================

04:34:58.0311 0x0e3c  ============================================================

04:34:58.0311 0x0e3c  Scan started

04:34:58.0311 0x0e3c  Mode: Manual; SigCheck; TDLFS; 

04:34:58.0311 0x0e3c  ============================================================

04:34:58.0311 0x0e3c  KSN ping started

04:34:58.0623 0x0e3c  KSN ping finished: true

04:35:01.0134 0x0e3c  ================ Scan system memory ========================

04:35:01.0134 0x0e3c  System memory - ok

04:35:01.0134 0x0e3c  ================ Scan services =============================

04:35:01.0478 0x0e3c  [ 66DC3740111238C91B875D8A0021834D, 8D1496EB2D5926381CE5CF9B8897D16C4C2EDE03880DB1A442153CDEF0D26D0C ] acedrv11        C:\Windows\system32\drivers\acedrv11.sys

04:35:01.0930 0x0e3c  acedrv11 - ok

04:35:01.0992 0x0e3c  [ FCB8C7210F0135E24C6580F7F649C73C, 7E5E3D0B4F4BD418E6CC551850C672E1AF347CBB2E665B6F72638786CE5079C5 ] ACPI            C:\Windows\system32\drivers\acpi.sys

04:35:02.0024 0x0e3c  ACPI - ok

04:35:02.0133 0x0e3c  [ A125765807A56B6323635CDDC5EF0770, E0421EA7DA37DF281B3C528F1F30F49D14C6DF0B7FE12C3BA1E78C1B53D9F6DF ] AcPrfMgrSvc     C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

04:35:02.0148 0x0e3c  AcPrfMgrSvc - ok

04:35:02.0180 0x0e3c  [ 977457D42BC46E46D1FEA8D375685DE9, 07722201AA3979CE7170EEA2D7B4AFF5EC87AA1C502A3AF3AF4F9A92384BC769 ] AcSvc           C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

04:35:02.0195 0x0e3c  AcSvc - ok

04:35:02.0258 0x0e3c  [ 04F0FCAC69C7C71A3AC4EB97FAFC8303, FBBDD38574A1F66A5AA12B82E34FDE60B870180C4B7100C15757539DC869ED4B ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

04:35:02.0289 0x0e3c  adp94xx - ok

04:35:02.0351 0x0e3c  [ 60505E0041F7751BDBB80F88BF45C2CE, 1DE16042B8ABD7B643189E836DE273832EE743FD66AFBB641E8049C4E0CD04D8 ] adpahci         C:\Windows\system32\drivers\adpahci.sys

04:35:02.0382 0x0e3c  adpahci - ok

04:35:02.0414 0x0e3c  [ 8A42779B02AEC986EAB64ECFC98F8BD7, B89938EFF4E81FA44197D2D839EBD3340DDE01FBC79605049C088621784C1B91 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

04:35:02.0429 0x0e3c  adpu160m - ok

04:35:02.0492 0x0e3c  [ 241C9E37F8CE45EF51C3DE27515CA4E5, 1A03E93DD8C1F3640C96124A14A3D0F4E349B06CCA2118CE40B8AE201A4030A7 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

04:35:02.0585 0x0e3c  adpu320 - ok

04:35:02.0835 0x0e3c  [ 9D1FDA9E086BA64E3C93C9DE32461BCF, 200FD0BFC811EC8993AF9FC78F58823ECC717063F438B627FBCDD6BD7790CAA8 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

04:35:03.0006 0x0e3c  AeLookupSvc - ok

04:35:03.0100 0x0e3c  [ A201207363AA900ABF1A388468688570, C772D8546BBA93553AFCD553B7CF50C252B1F8B45A4A415014B48308F1D7ECD6 ] AFD             C:\Windows\system32\drivers\afd.sys

04:35:03.0194 0x0e3c  AFD - ok

04:35:03.0256 0x0e3c  [ 13F9E33747E6B41A3FF305C37DB0D360, 066DD6060B1CF93F85BBAAA52848C801128CD294E8B7EACD912E0EF219DBFBC2 ] agp440          C:\Windows\system32\drivers\agp440.sys

04:35:03.0272 0x0e3c  agp440 - ok

04:35:03.0318 0x0e3c  [ AE1FDF7BF7BB6C6A70F67699D880592A, B831BF156FC49287A19FC149383D437B1034EA6F42CE9D761EB90ABD0F8D96B1 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

04:35:03.0350 0x0e3c  aic78xx - ok

04:35:03.0443 0x0e3c  [ A1545B731579895D8CC44FC0481C1192, 6B0EE833BA39C142D625A03586CCD8F6C9C3136C603CE5DF5BAC1AA3423E3E7F ] ALG             C:\Windows\System32\alg.exe

04:35:03.0584 0x0e3c  ALG - ok

04:35:03.0599 0x0e3c  [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91, 0EADB6AE21FEDAB55D41F41B638198B556CC2BE2EE57F6C8B40EB044A318319F ] aliide          C:\Windows\system32\drivers\aliide.sys

04:35:03.0630 0x0e3c  aliide - ok

04:35:03.0662 0x0e3c  [ C47344BC706E5F0B9DCE369516661578, 689C9CDAF6F38227F1C34359CAEB3C7798F318EDFD4B7FE532FBE3C8E4EE3DC8 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

04:35:03.0677 0x0e3c  amdagp - ok

04:35:03.0724 0x0e3c  [ 9B78A39A4C173FDBC1321E0DD659B34C, 2CA66EB68AD7A317D91C13B8CFD4E8CA985926A610D19595B613F5553B145C7B ] amdide          C:\Windows\system32\drivers\amdide.sys

04:35:03.0740 0x0e3c  amdide - ok

04:35:03.0755 0x0e3c  [ 18F29B49AD23ECEE3D2A826C725C8D48, 0FA08882301D218E367E63E1966B6406220EE94BAE7E7DAD6E55EB70BF6FED7F ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

04:35:03.0818 0x0e3c  AmdK7 - ok

04:35:03.0833 0x0e3c  [ 93AE7F7DD54AB986A6F1A1B37BE7442D, ECE0ABA2DECEED94AC678240A4B604F04022F0740F2295CBD07D25F5917E878A ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

04:35:03.0896 0x0e3c  AmdK8 - ok

04:35:04.0301 0x0e3c  [ 7485BE8D2501F2B188206FD3687C188F, 27C04C89034AD66832749686347D0F9777A829D35473CBFE5B92FB30A8BA1484 ] AntiVirMailService C:\Program Files\Antivir\Avira\AntiVir Desktop\avmailc.exe

04:35:04.0457 0x0e3c  AntiVirMailService - ok

04:35:04.0504 0x0e3c  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirSchedulerService C:\Program Files\Antivir\Avira\AntiVir Desktop\sched.exe

04:35:04.0598 0x0e3c  AntiVirSchedulerService - ok

04:35:04.0660 0x0e3c  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirService  C:\Program Files\Antivir\Avira\AntiVir Desktop\avguard.exe

04:35:04.0722 0x0e3c  AntiVirService - ok

04:35:04.0847 0x0e3c  [ 2BDC68714A14FC2C57BFBAF524B13939, A175F97AE231D2C63304BD394139B7F262EBEC8239C4740CFED7365127171800 ] AntiVirWebService C:\Program Files\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE

04:35:04.0972 0x0e3c  AntiVirWebService - ok

04:35:05.0034 0x0e3c  [ 0F83CB9BCB247869BCAD28026B8F134B, 3C44950C4714DDB16E397B5C8937129771BC3DB2B432FB01A5CA15297EAD28FA ] ApfiltrService  C:\Windows\system32\DRIVERS\Apfiltr.sys

04:35:05.0050 0x0e3c  ApfiltrService - ok

04:35:05.0097 0x0e3c  [ C6D704C7F0434DC791AAC37CAC4B6E14, 35CF7D1895F97637E0C678A39F3049B871BCA9526D379C7793ED33B87D2EAC4C ] Appinfo         C:\Windows\System32\appinfo.dll

04:35:05.0206 0x0e3c  Appinfo - ok

04:35:05.0362 0x0e3c  [ F401929EE0CC92BFE7F15161CA535383, 61E1C0630B8BBC65C51121D5DC7F095C59B475F39BB7B0DC68133EF7D9D0A29D ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

04:35:05.0378 0x0e3c  Apple Mobile Device - ok

04:35:05.0424 0x0e3c  [ 5D2888182FB46632511ACEE92FDAD522, 2E53231ACAF9B2FB7993DBC1CD15C06D7B0CCE0D08DAFF7B0CC13A2040028A75 ] arc             C:\Windows\system32\drivers\arc.sys

04:35:05.0440 0x0e3c  arc - ok

04:35:05.0471 0x0e3c  [ 5E2A321BD7C8B3624E41FDEC3E244945, 9D47FF6C823868F2267FEFAB5851D3CD2BC3F619A2D6EFF803EA22DB0509C450 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

04:35:05.0487 0x0e3c  arcsas - ok

04:35:05.0690 0x0e3c  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

04:35:05.0752 0x0e3c  aspnet_state - ok

04:35:05.0814 0x0e3c  [ 53B202ABEE6455406254444303E87BE1, 4C91CA8DD345FEDD74A6AF2C07580717703F979B7DE2532B1D00B9F6896DDE70 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

04:35:05.0861 0x0e3c  AsyncMac - ok

04:35:05.0908 0x0e3c  [ 2D9C903DC76A66813D350A562DE40ED9, 82609F01A08C6842E4C17C077BB641C1429C0E6657964B7F2D114035E1BDCBF3 ] atapi           C:\Windows\system32\drivers\atapi.sys

04:35:05.0924 0x0e3c  atapi - ok

04:35:06.0080 0x0e3c  [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

04:35:06.0142 0x0e3c  AudioEndpointBuilder - ok

04:35:06.0158 0x0e3c  [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] Audiosrv        C:\Windows\System32\Audiosrv.dll

04:35:06.0189 0x0e3c  Audiosrv - ok

04:35:06.0236 0x0e3c  [ 98A2E56DC1197D36E81F771DB81ED798, 9AD3089D59DDD15DF74CEE49568C3CFFD97976F93B7CA246F4D51FBA5528C6BA ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

04:35:06.0251 0x0e3c  avgntflt - ok

04:35:06.0282 0x0e3c  [ B9D3418110A6B4EAADCB2BD1A8CEC617, 2252E518FB0A69699ECF7A940A20E9D77822F7FF7CE14FE5E30E4DDB34546D56 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

04:35:06.0298 0x0e3c  avipbb - ok

04:35:06.0407 0x0e3c  [ 6F77BBB8FC69D26132309EB4CE7A4E0E, 39E1E20F7CE6B2A784765BB1BE3AC539EDD2889880F78D14C340129E9DB7A43E ] Avira.OE.ServiceHost C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

04:35:06.0423 0x0e3c  Avira.OE.ServiceHost - ok

04:35:06.0470 0x0e3c  [ F80F5DCA8A5D9D93CC5BE933D20CAF05, 2AFBB2D62127FACBCABBB3E78F3568A6BA016ED4A97A1490BAA29A1EFB7A4408 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

04:35:06.0470 0x0e3c  avkmgr - ok

04:35:06.0548 0x0e3c  [ F17463EDDB3B6A988F939FF403E067C3, 77B2CB22F622D5D753E1FA1E9609170526CBDD738F298DE9B6342D2CEB2CA1BA ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys

04:35:06.0610 0x1210  Object required for P2P: [ 2BDC68714A14FC2C57BFBAF524B13939 ] AntiVirWebService

04:35:06.0610 0x0e3c  b57nd60x - ok

04:35:06.0797 0x0e3c  [ 6163664C7E9CD110AF70180C126C3FDC, 9A801295CDE2BDE4EE0E96C610E4C01F6915DBDA2104D0E8873AFF1BC34A0FA1 ] BcmSqlStartupSvc C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

04:35:06.0797 0x0e3c  BcmSqlStartupSvc - ok

04:35:06.0860 0x0e3c  [ 67E506B75BD5326A3EC7B70BD014DFB6, 3B07243970CAB4E93A858BEA6E31F56AD0157C42D624F3FEB469E68EEEF65669 ] Beep            C:\Windows\system32\drivers\Beep.sys

04:35:06.0922 0x0e3c  Beep - ok

04:35:07.0031 0x0e3c  [ C789AF0F724FDA5852FB9A7D3A432381, 4B0F7A3A8F2D45E49630D24F2630B8014BCDB793B9C6E83FD2B2863A54F62BF5 ] BFE             C:\Windows\System32\bfe.dll

04:35:07.0109 0x0e3c  BFE - ok

04:35:07.0203 0x0e3c  [ 93952506C6D67330367F7E7934B6A02F, 1D9A6B10B9489C1A32F730E22CC399BFF0796E3FCB3BA52BE45ED487CAC59EBD ] BITS            C:\Windows\System32\qmgr.dll

04:35:07.0281 0x1210  Object send P2P result: true

04:35:07.0296 0x0e3c  BITS - ok

04:35:07.0343 0x0e3c  [ D4DF28447741FD3D953526E33A617397, E7239BA432090F8AC7DF453DB876507CD4419ECA964D289408A1B2B353618693 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

04:35:07.0359 0x0e3c  blbdrive - ok

04:35:07.0484 0x0e3c  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

04:35:07.0515 0x0e3c  Bonjour Service - ok

04:35:07.0608 0x0e3c  [ 8153396D5551276227FA146900F734E6, 0AE06774162D542D9E95246B7112A40D7C463EF331B4F56C9CF8AD99A0341E38 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

04:35:07.0686 0x0e3c  bowser - ok

04:35:07.0718 0x0e3c  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

04:35:07.0749 0x0e3c  BrFiltLo - ok

04:35:07.0780 0x0e3c  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

04:35:07.0827 0x0e3c  BrFiltUp - ok

04:35:07.0905 0x0e3c  [ A3629A0C4226F9E9C72FAAEEBC3AD33C, FB4D2738B64AADA52B95A6CF7ED4CDBFE4DD4BEBCAF1AE9CE64317F97DB38DDF ] Browser         C:\Windows\System32\browser.dll

04:35:07.0952 0x0e3c  Browser - ok

04:35:07.0983 0x0e3c  [ B304E75CFF293029EDDF094246747113, CB6B219B186C3511A0DE3CDE7F7B8966A9E32D808A952CA8C5B42B3A3A17BFB0 ] Brserid         C:\Windows\system32\drivers\brserid.sys

04:35:08.0201 0x0e3c  Brserid - ok

04:35:08.0232 0x0e3c  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

04:35:08.0295 0x0e3c  BrSerWdm - ok

04:35:08.0326 0x0e3c  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

04:35:08.0388 0x0e3c  BrUsbMdm - ok

04:35:08.0404 0x0e3c  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

04:35:08.0466 0x0e3c  BrUsbSer - ok

04:35:08.0513 0x0e3c  [ CCE53AFC28347CC18EA139972E5B5E5A, 647086790A27DBD4D8D874F5DA46B3B634474A09C4D0271C29CABA0A236CB35E ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

04:35:08.0560 0x0e3c  BthEnum - ok

04:35:08.0607 0x0e3c  [ 5FFA6988FF9597986FF2ADA736CC90C0, 50F57047CC5CC241DDF9BB8E39E03F91074AC4C7B4CDE6C44FF279A8741384C5 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

04:35:08.0654 0x0e3c  BTHMODEM - ok

04:35:08.0716 0x0e3c  [ 5904EFA25F829BF84EA6FB045134A1D8, 66E4160CC404744576BA6E9DD606B533F42B3D4A3E2FDD457DAA016CC72A81CC ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

04:35:08.0810 0x0e3c  BthPan - ok

04:35:08.0856 0x0e3c  [ AC8A1689D5EFC4D214201155A78D8F4B, B11ADCFD40D02DC764F71BC9EC62A548953A91E6D5BACF06982D43CB97C728C8 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

04:35:08.0919 0x0e3c  BTHPORT - ok

04:35:08.0997 0x0e3c  [ A4C8377FA4A994E07075107DBE2E3DCE, C3CDAA7B83D130100044341C23897CC6C257FA075A8D08B8551F4A28AE8CE6C4 ] BthServ         C:\Windows\System32\bthserv.dll

04:35:09.0059 0x0e3c  BthServ - ok

04:35:09.0075 0x0e3c  [ 288C1F74E3E2EED6C7B54EB3AAC70856, ADC723A0786878FAEDEF7946F9279755D90C679A60BB13396D3AFAC0E121EEBF ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

04:35:09.0122 0x0e3c  BTHUSB - ok

04:35:09.0184 0x0e3c  [ 463483285B2D2D345443AAEE7B9391E7, C8ED91313938375B0F8D89AC2023B53A84FF1D37010C2061E4515AAC7746898E ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys

04:35:09.0200 0x0e3c  btwaudio - ok

04:35:09.0246 0x0e3c  [ 4F82B6173EF8637CB26CF4E73B90F172, DB9084861261B64D901B14EFF57AB38FBE1130BAF8DC166122E8004400B80FC1 ] btwavdt         C:\Windows\system32\drivers\btwavdt.sys

04:35:09.0262 0x0e3c  btwavdt - ok

04:35:09.0387 0x0e3c  [ BD92E10B38CEE3293D5E2D9761FD38C1, 77B988CC2C89B5CE3309BB3D23FFBEB384B04BE2808183DF31180B5760CBD4E3 ] btwdins         C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe

04:35:09.0449 0x0e3c  btwdins - ok

04:35:09.0512 0x0e3c  [ ECB98391C756A7B9CFBAE89D9D1235E1, 0A639D2187BDCD64320A7FB72627ED8AF2AF7CC8AAEF6E0991BDEF28BA080442 ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys

04:35:09.0512 0x0e3c  btwl2cap - ok

04:35:09.0543 0x0e3c  [ F771034F5B59A4A5054A2FA6F4E9F28B, D1AE8B30AF35196416AFAEFBE34D632CEC44511E5FC8E60285499AFDCAB62765 ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys

04:35:09.0558 0x0e3c  btwrchid - ok

04:35:09.0605 0x0e3c  [ 7ADD03E75BEB9E6DD102C3081D29840A, 0CA14A77CE990B5AA32C0725C22CA190ECBC73B75064DD959CABAD79B8846F1D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

04:35:09.0652 0x0e3c  cdfs - ok

04:35:09.0714 0x0e3c  [ 1EC25CEA0DE6AC4718BF89F9E1778B57, 019E12C30E7A395259F3906EC55AFF86949CFDBB443060208C8B91B9EB7F9FB7 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

04:35:09.0761 0x0e3c  cdrom - ok

04:35:09.0839 0x0e3c  [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] CertPropSvc     C:\Windows\System32\certprop.dll

04:35:09.0902 0x0e3c  CertPropSvc - ok

04:35:09.0933 0x0e3c  [ E5D4133F37219DBCFE102BC61072589D, 74C7F8C53D9C71CE3C8B33BC0331948571318402B0A8E1AC4552360504092A46 ] circlass        C:\Windows\system32\drivers\circlass.sys

04:35:09.0980 0x0e3c  circlass - ok

04:35:10.0042 0x0e3c  [ D7659D3B5B92C31E84E53C1431F35132, 6BFE644AD9890A8CEEDCC4B97ADD564AD57202FBC5D21599469E0C4B31BB27C6 ] CLFS            C:\Windows\system32\CLFS.sys

04:35:10.0073 0x0e3c  CLFS - ok

04:35:10.0136 0x0e3c  [ 8EE772032E2FE80A924F3B8DD5082194, B743DF91563A22CC15D9B44105804B5866A29D3DFC156DBE88DFAFEF903B94C0 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

04:35:10.0151 0x0e3c  clr_optimization_v2.0.50727_32 - ok

04:35:10.0198 0x0e3c  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

04:35:10.0245 0x0e3c  clr_optimization_v4.0.30319_32 - ok

04:35:10.0292 0x0e3c  [ 99AFC3795B58CC478FBBBCDC658FCB56, 0D1B27C42A058C5D56A0157B5ECA9A054254F6B9C8015D0321021A7EFCE10CE2 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

04:35:10.0338 0x0e3c  CmBatt - ok

04:35:10.0354 0x0e3c  [ 0CA25E686A4928484E9FDABD168AB629, C2CB2333CAB40CDF93219870E66700F957188C86A1B1A004BC4652953091E5C5 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

04:35:10.0370 0x0e3c  cmdide - ok

04:35:10.0416 0x0e3c  [ 8B7A0CE6613F991359FF95212900396C, 11D95BF40F5AAE9638B21AE2AFA78213DED1934D14FF27293942DE25528B5A46 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys

04:35:10.0463 0x0e3c  CnxtHdAudService - ok

04:35:10.0494 0x0e3c  [ 6AFEF0B60FA25DE07C0968983EE4F60A, E4037EF9EDE57A1039AB814EBCE9A8B12C9A084E7FAC6296212ACF2394DD37B6 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

04:35:10.0510 0x0e3c  Compbatt - ok

04:35:10.0526 0x0e3c  COMSysApp - ok

04:35:10.0541 0x0e3c  [ 741E9DFF4F42D2D8477D0FC1DC0DF871, 06EA43D771E3455F943AB624CC00C2259FE5E561164908630755E933EF44A522 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

04:35:10.0557 0x0e3c  crcdisk - ok

04:35:10.0588 0x0e3c  [ 1F07BECDCA750766A96CDA811BA86410, F4E36F0003184BCB36D59B23AC903421AD8C0A1FD2D6315E06375235ABC9A0AD ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

04:35:10.0650 0x0e3c  Crusoe - ok

04:35:10.0728 0x0e3c  [ FB27772BEAF8E1D28CCD825C09DA939B, D074A314FB3E6B2248F2DB0A734B98A110F618804449E055B4178BF414826982 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

04:35:10.0775 0x0e3c  CryptSvc - ok

04:35:10.0884 0x0e3c  [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] DcomLaunch      C:\Windows\system32\rpcss.dll

04:35:11.0025 0x0e3c  DcomLaunch - ok

04:35:11.0087 0x0e3c  [ 218D8AE46C88E82014F5D73D0236D9B2, D404EE45EFC2557182DDD9C1B7244C10FC5AD3080A57CDFBF2C9D3B890F78852 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

04:35:11.0134 0x0e3c  DfsC - ok

04:35:11.0306 0x0e3c  [ 2CC3DCFB533A1035B13DCAB6160AB38B, C88C91F662ADE248EEE3B568E70C2BC2D5075B7D9B7D3C63E83D011C5F7812B0 ] DFSR            C:\Windows\system32\DFSR.exe

04:35:11.0508 0x0e3c  DFSR - ok

04:35:11.0633 0x0e3c  [ 1EC27A51A2F9DF052BC2B4C8376C8FEA, 6B903263C4E5A26FE161EF829FD5C597485DFE1E9DBADD60FBEECE9F6605E79F ] DgiVecp         C:\Windows\system32\Drivers\DgiVecp.sys

04:35:11.0664 0x0e3c  DgiVecp - detected UnsignedFile.Multi.Generic ( 1 )

04:35:11.0930 0x0e3c  Detect skipped due to KSN trusted

04:35:11.0930 0x0e3c  DgiVecp - ok

04:35:12.0070 0x0e3c  [ 9028559C132146FB75EB7ACF384B086A, 35159D86706441ED94895B4629411B4445FCB4526AFD1F7036EE647931B7A94D ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

04:35:12.0117 0x0e3c  Dhcp - ok

04:35:12.0148 0x0e3c  [ 64109E623ABD6955C8FB110B592E68B7, 964F456EF44F9AE836B8CAB438FEB18303B2548A2B7D85FEBD72F4F80127B0EE ] disk            C:\Windows\system32\drivers\disk.sys

04:35:12.0164 0x0e3c  disk - ok

04:35:12.0351 0x0e3c  [ B64C1F0ADD16BE98CA47EA651402085D, 06CA6840E3DD981561962C150FC64CE19EB0AB577133CF09393B2473C62DC898 ] DisplayFusionService C:\Program Files\DisplayFusion\DisplayFusionService.exe

04:35:12.0460 0x0e3c  DisplayFusionService - ok

04:35:12.0569 0x0e3c  [ 5B149CCFE275F4DE0B4B8EC6B9F6821E, CC9706D8DB6511E85F05646F72BF6398F98E13027AA4CEF8113A7D77ED52EB53 ] DLABMFSM        C:\Windows\system32\DLA\DLABMFSM.SYS

04:35:12.0585 0x0e3c  DLABMFSM - ok

04:35:12.0632 0x0e3c  [ AD4CB3D783634C90A9D0CE360933A63C, 65FDDFF3A921444667DB446EDC2ADC307D0ABEE1A4571194205D66484BC56863 ] DLABOIOM        C:\Windows\system32\DLA\DLABOIOM.SYS

04:35:12.0632 0x0e3c  DLABOIOM - ok

04:35:12.0772 0x0e3c  [ 5230CDB7E715F3A3B4A882E254CDD35D, 0D6A88DE30A75FAD5FF535468DF56A33E4695C619BFDD7E142AC4516A7878E52 ] DLACDBHM        C:\Windows\system32\Drivers\DLACDBHM.SYS

04:35:12.0788 0x0e3c  DLACDBHM - ok

04:35:12.0834 0x0e3c  [ DAE193B1DDC6914F56B767A4F1406351, D013685455232F5B54A625D096F59247F0832C913B8BF939AF5538BC012C7C67 ] DLADResM        C:\Windows\system32\DLA\DLADResM.SYS

04:35:12.0850 0x0e3c  DLADResM - ok

04:35:12.0866 0x0e3c  [ 6A82F77C4A6F5235BF352F0028E2EF52, 02349027F93340546C7F25BCA751C2C30BFB2AE47D1927CB5AF9FCD062BA249A ] DLAIFS_M        C:\Windows\system32\DLA\DLAIFS_M.SYS

04:35:12.0881 0x0e3c  DLAIFS_M - ok

04:35:12.0897 0x0e3c  [ 0E6052C0ADA37504896A847231A3907D, 6F0C4DA7EE49F07F3E0EC22AD9FF4E8164AEF951DF64E051BBBC74BADACDAB15 ] DLAOPIOM        C:\Windows\system32\DLA\DLAOPIOM.SYS

04:35:12.0912 0x0e3c  DLAOPIOM - ok

04:35:12.0928 0x0e3c  [ 29670BB4E2B973C5B55A76107D4910B2, 322490F50DFDD721CF0E1FD98DEE07126F9BB556FA4D91D11BBA79511EFE6885 ] DLAPoolM        C:\Windows\system32\DLA\DLAPoolM.SYS

04:35:12.0944 0x0e3c  DLAPoolM - ok

04:35:12.0959 0x0e3c  [ 77FE51F0F8D86804CB81F6EF6BFB86DD, 030F70D5703A95964087C3E9EB1E9BAC1ECE8224FFF3E131A5C1D20215C9BB43 ] DLARTL_M        C:\Windows\system32\Drivers\DLARTL_M.SYS

04:35:12.0959 0x0e3c  DLARTL_M - ok

04:35:12.0990 0x0e3c  [ 6B087732B86C1D866D69DBBE463EA90A, 6B84EA902175E010220C02D134CCCBC9806FAC93F700ED4A3E0EAB9260050DBF ] DLAUDFAM        C:\Windows\system32\DLA\DLAUDFAM.SYS

04:35:13.0006 0x0e3c  DLAUDFAM - ok

04:35:13.0022 0x0e3c  [ BBEECB95F2841AE4A3E3690D46D7153D, 38A5984C318F25F101358B5F5B1B102063B5AC48787A5A27D1C70C198779361C ] DLAUDF_M        C:\Windows\system32\DLA\DLAUDF_M.SYS

04:35:13.0053 0x0e3c  DLAUDF_M - ok

04:35:13.0131 0x0e3c  [ 30A08728740E71947AE1E073B5CE69B4, 6F313F09E17885A84F546E11215B4B451AAA0FFDF2E7A13211F862FAD18F5C8E ] Dnscache        C:\Windows\System32\dnsrslvr.dll

04:35:13.0178 0x0e3c  Dnscache - ok

04:35:13.0240 0x0e3c  [ 324FD74686B1EF5E7C19A8AF49E748F6, DC6EB4304555B60DD17E04D20DFE4E279718E4041A9310DE29E678834BB22C5B ] dot3svc         C:\Windows\System32\dot3svc.dll

04:35:13.0287 0x0e3c  dot3svc - ok

04:35:13.0349 0x0e3c  [ 4F59C172C094E1A1D46463A8DC061CBD, CE09A4ED1F8BA6242E152C384AFF5C3C95FBB8556DAE23765272F13BF158D8F9 ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

04:35:13.0505 0x0e3c  Dot4 - ok

04:35:13.0552 0x0e3c  [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5, 69BB5B07D03FA9F28591012F2AA4A583D3F086644C136D63A56D1A827121CC19 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

04:35:13.0583 0x0e3c  Dot4Print - ok

04:35:13.0630 0x0e3c  [ C55004CA6B419B6695970DFE849B122F, 6E0C4A9E24DD09E9389E097AF63E7F5040A0658DDCEBBE963968B7118CFE9AB8 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

04:35:13.0677 0x0e3c  dot4usb - ok

04:35:13.0724 0x0e3c  [ A622E888F8AA2F6B49E9BC466F0E5DEF, 3DED7F22A29AD2F8C927DFA0FD87FDE5ED0BDCAC7260BD9F71D8EA34328C772A ] DPS             C:\Windows\system32\dps.dll

04:35:13.0786 0x0e3c  DPS - ok

04:35:13.0833 0x0e3c  [ 97FEF831AB90BEE128C9AF390E243F80, A7F4118603E2D5DDDB117EF7C058684EA5B37690EFAB2BEBA570EEF9C36281BE ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

04:35:13.0864 0x0e3c  drmkaud - ok

04:35:13.0911 0x0e3c  [ 83106585494D5EB96F59187200C144BD, 9D0B85643AA379E3CDB11C61DE4838164834231A1F4BF62173C8AA4BCF090063 ] DRVMCDB         C:\Windows\system32\Drivers\DRVMCDB.SYS

04:35:13.0926 0x0e3c  DRVMCDB - ok

04:35:13.0958 0x0e3c  [ FFC371525AA55D1BAE18715EBCB8797C, 4894F67772CEB0143B5DAFE10B42D90727E36A58B02F6221E83CE4CFD26E32B6 ] DRVNDDM         C:\Windows\system32\Drivers\DRVNDDM.SYS

04:35:13.0958 0x0e3c  DRVNDDM - ok

04:35:14.0020 0x0e3c  [ 687AF6BB383885FF6A64071B189A7F3E, 1C751B8DD27F63E88D0223A8434CED7589AC00EC6275938C59D1B954F0354F78 ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys

04:35:14.0051 0x0e3c  dtsoftbus01 - ok

04:35:14.0145 0x0e3c  [ FB85F7F69E9B109820409243F578CC4D, FBE0426E51B83DD973EC08ABA4E69E99F54B1C44995E0FD42B68A07549D52D7F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

04:35:14.0285 0x0e3c  DXGKrnl - ok

04:35:14.0363 0x0e3c  [ 908ED85B7806E8AF3AF5E9B74F7809D4, 9A763D247035578A946094D2C1CE8204E6EDFFD7237C7BF2058B5F4ECC0306E0 ] e1express       C:\Windows\system32\DRIVERS\e1e6032.sys

04:35:14.0410 0x0e3c  e1express - ok

04:35:14.0457 0x0e3c  [ 5425F74AC0C1DBD96A1E04F17D63F94C, AD133CEDCDEA75420C75A91BB4CF7152475D46ED7B7703E3BAE5F9946D610292 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

04:35:14.0504 0x0e3c  E1G60 - ok

04:35:14.0535 0x0e3c  [ C0B95E40D85CD807D614E264248A45B9, 30421DAF1722A225222268CB8BA4FE60CB76C6FD0C9157B0F53FC1368F806A4E ] EapHost         C:\Windows\System32\eapsvc.dll

04:35:14.0582 0x0e3c  EapHost - ok

04:35:14.0644 0x0e3c  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371, F3E9CF5D8E9124CB06F08454C5F0E510DE19A92780151FB2F8A58A0905D59B8F ] Ecache          C:\Windows\system32\drivers\ecache.sys

04:35:14.0675 0x0e3c  Ecache - ok

04:35:14.0722 0x0e3c  [ 23B62471681A124889978F6295B3F4C6, A90C521F06125B86A26EA625B0E7F811AF7D328E1313165E7AD4A83596A23819 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

04:35:14.0753 0x0e3c  elxstor - ok

04:35:14.0847 0x0e3c  [ 4E6B23DFC917EA39306B529B773950F4, C4BA77632B4BD46C4C1797F7F57399DB506D3EB6E5A0A36C269A793DAA3445C2 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

04:35:14.0987 0x0e3c  EMDMgmt - ok

04:35:15.0003 0x0e3c  [ 3DB974F3935483555D7148663F726C61, C288CFC04213B0340ABEC752C0A7B308B29122B5F51E68387BA1D9E9D7166FDD ] ErrDev          C:\Windows\system32\drivers\errdev.sys

04:35:15.0034 0x0e3c  ErrDev - ok

04:35:15.0096 0x0e3c  [ 67058C46504BC12D821F38CF99B7B28F, E8D19F305F78BCA1DA8425315F2C77A377CD51E3CC54323DC2FF355120EA097D ] EventSystem     C:\Windows\system32\es.dll

04:35:15.0143 0x0e3c  EventSystem - ok

04:35:15.0268 0x0e3c  [ 306AC856622864C761CBDB5E816BB9D8, 491221AD59143DC3FF96C71768E543043048CDFE0A7CC8EA306CFA4B1CC67502 ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe

04:35:15.0393 0x0e3c  EvtEng - detected UnsignedFile.Multi.Generic ( 1 )

04:35:15.0830 0x0e3c  Detect skipped due to KSN trusted

04:35:15.0830 0x0e3c  EvtEng - ok

04:35:15.0908 0x0e3c  [ 22B408651F9123527BCEE54B4F6C5CAE, 31AF9649333A9496A9224001266D1B68CE2A31B9FB182A755D127FC5492AA6B2 ] exfat           C:\Windows\system32\drivers\exfat.sys

04:35:15.0970 0x0e3c  exfat - ok

04:35:16.0032 0x0e3c  [ 1E9B9A70D332103C52995E957DC09EF8, 7E709D545D4025A2E9F3489CF2A231040904CB53E3E4EEAC15A22468FAB2A5B3 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

04:35:16.0079 0x0e3c  fastfat - ok

04:35:16.0142 0x0e3c  [ AFE1E8B9782A0DD7FB46BBD88E43F89A, B4CBE1DC3430F2F3485F49007C71293D5B86E9C405741EA00A67B00A38BE1F8D ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

04:35:16.0188 0x0e3c  fdc - ok

04:35:16.0220 0x0e3c  [ 6629B5F0E98151F4AFDD87567EA32BA3, 8CC02D5E0639CDF74B2F85DB56D6199E1858F1A58465ED1D8B25C968E986132C ] fdPHost         C:\Windows\system32\fdPHost.dll

04:35:16.0251 0x0e3c  fdPHost - ok

04:35:16.0282 0x0e3c  [ 89ED56DCE8E47AF40892778A5BD31FD2, 924360875796C3DDDDA8097FDF53F6846B227F7413766F00AEDD981EFD691BF9 ] FDResPub        C:\Windows\system32\fdrespub.dll

04:35:16.0360 0x0e3c  FDResPub - ok

04:35:16.0391 0x0e3c  [ A8C0139A884861E3AAE9CFE73B208A9F, 3B021D148A2989AAA46AE58E5FED8A2DCA25E9212C2FA7F922880EF5A077E49B ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

04:35:16.0422 0x0e3c  FileInfo - ok

04:35:16.0454 0x0e3c  [ 0AE429A696AECBC5970E3CF2C62635AE, 1ECC315C099D17835788B68F0DE00EC98DC5AEE8F329D739E0DB90A898F22244 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

04:35:16.0500 0x0e3c  Filetrace - ok

04:35:16.0516 0x0e3c  [ 85B7CF99D532820495D68D747FDA9EBD, 682D35D219D1AFBE51CF0AB03F2D3E15C940F5AF291C1A611A19F4D279143F3C ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

04:35:16.0563 0x0e3c  flpydisk - ok

04:35:16.0625 0x0e3c  [ 01334F9EA68E6877C4EF05D3EA8ABB05, 82F8AA6AD2B5077898773D4A5814819EAF0E872FFD95894E06FEDAB6EE92CF99 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

04:35:16.0641 0x0e3c  FltMgr - ok

04:35:16.0688 0x0e3c  [ C4C9A48C3339B6335F8F0DB1F47BB668, 3B75477DD54ECEAA91CADE29F6ED567AE2760E31F7577AFA25931D7DE85AEAAC ] FNF5SVC         C:\Program Files\LENOVO\HOTKEY\FNF5SVC.exe

04:35:16.0703 0x0e3c  FNF5SVC - ok

04:35:16.0781 0x0e3c  [ C7FBDD1ED42F82BFA35167A5C9803EA3, 372FF71070D5ECE17342466A690737A0622E93C98DBED8172C49B0854F0012B7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

04:35:16.0797 0x0e3c  FontCache3.0.0.0 - ok

04:35:16.0828 0x0e3c  [ 65EA8B77B5851854F0C55C43FA51A198, 150BE6C195094DBEAC4FD73CC1C31FF59B77A73944574E244D280EE2DE69DC2F ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

04:35:16.0859 0x0e3c  Fs_Rec - ok

04:35:16.0890 0x0e3c  [ 34582A6E6573D54A07ECE5FE24A126B5, 5F45DC38F8015AD90616EAD3B57820CCD284938A96B2C4E1FF5FC7BDEE8A848D ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

04:35:16.0906 0x0e3c  gagp30kx - ok

04:35:16.0953 0x0e3c  [ 8182FF89C65E4D38B2DE4BB0FB18564E, 2ACFA64D48BF7D25641EC5819C8722144284B8A8E071BF297C1881B07EEAFE88 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

04:35:16.0968 0x0e3c  GEARAspiWDM - ok

04:35:17.0046 0x0e3c  [ CD5D0AEEE35DFD4E986A5AA1500A6E66, DCED5126837292593F1C1B35DF18E3B631D6C0C6D0742B77C7B7742C55A7825F ] gpsvc           C:\Windows\System32\gpsvc.dll

04:35:17.0140 0x0e3c  gpsvc - ok

04:35:17.0171 0x0e3c  [ CB04C744BE0A61B1D648FAED182C3B59, 61DC0FF94325DAFCCB7B3980A48727EFBF1283FCF753EC16EF04C730525994C0 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

04:35:17.0265 0x0e3c  HdAudAddService - ok

04:35:17.0312 0x0e3c  [ C87B1EE051C0464491C1A7B03FA0BC99, 0EF498A7D37A454E8B6DB1BE3C0EADA648B51B34A2BB553171E766463E54EE90 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

04:35:17.0358 0x0e3c  HDAudBus - ok

04:35:17.0374 0x0e3c  [ 1338520E78D90154ED6BE8F84DE5FCEB, 8531F1C5856983EBDA4C2B70162645ECE72FFFBA9FE7A28BCEDDF2169B7ECF9D ] HidBth          C:\Windows\system32\drivers\hidbth.sys

04:35:17.0421 0x0e3c  HidBth - ok

04:35:17.0468 0x0e3c  [ FF3160C3A2445128C5A6D9B076DA519E, DC1A70C80CD55F33B3AD5A21E86AF7C3086D8CC2DC6148C058E74A871E0BAD4A ] HidIr           C:\Windows\system32\drivers\hidir.sys

04:35:17.0514 0x0e3c  HidIr - ok

04:35:17.0577 0x0e3c  [ 84067081F3318162797385E11A8F0582, 11E32E3800CFCA37354388243F88D0239D622891BAC5483518A2BE5D1CA19015 ] hidserv         C:\Windows\system32\hidserv.dll

04:35:17.0592 0x0e3c  hidserv - ok

04:35:17.0624 0x0e3c  [ E2B5BD48AFCC0F0974FB44641B223250, 6DFAE7ED19095FE3965BC82E3AAD3255C1245C94C51A3511E5075300012ADD48 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

04:35:17.0655 0x0e3c  HidUsb - ok

04:35:17.0717 0x0e3c  [ D8AD255B37DA92434C26E4876DB7D418, C901EADDD93FC90C8F29F4B6DE808F8E4F486C877FC0AA27DA4ACDE17E28899D ] hkmsvc          C:\Windows\system32\kmsvc.dll

04:35:17.0764 0x0e3c  hkmsvc - ok

04:35:17.0858 0x0e3c  [ 16EE7B23A009E00D835CDB79574A91A6, 964AFE7D2F7E48C7DE7FDAB48F57ADC4AD44A0B2A9A03071E0E8D334007E5572 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

04:35:17.0920 0x0e3c  HpCISSs - ok

04:35:18.0232 0x0e3c  [ CE0FCEC4D4D860F36D972759B11EAF0F, 81F9E391A71D9FB9DD41BC35BD5136B3A851C231BE5A6E936B84E49CDAAF0B67 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

04:35:18.0263 0x0e3c  hpqcxs08 - detected UnsignedFile.Multi.Generic ( 1 )

04:35:18.0591 0x0e3c  Detect skipped due to KSN trusted

04:35:18.0591 0x0e3c  hpqcxs08 - ok

04:35:18.0669 0x0e3c  [ 7DA3211AC63EDD90B8ECA1CA1ABFD43B, D3D1EA40833157386E83EAC3B730E043BE0ED831106972625E285263ADB968C3 ] hpqddsvc        C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

04:35:18.0716 0x0e3c  hpqddsvc - detected UnsignedFile.Multi.Generic ( 1 )

04:35:18.0996 0x0e3c  Detect skipped due to KSN trusted

04:35:18.0996 0x0e3c  hpqddsvc - ok

04:35:19.0106 0x0e3c  [ 46D67209550973257601A533E2AC5785, 3C0D97781947BA8532344AA5D9F3B684761B5B3263A0A294F4593E76EE41DB0C ] HSFHWAZL        C:\Windows\system32\DRIVERS\VSTAZL3.SYS

04:35:19.0199 0x0e3c  HSFHWAZL - ok

04:35:19.0293 0x0e3c  [ FADD7095163CB3CB4073793EBB50FE75, 12555D259DA75CA4B4EC8F5F86EAA2A57270BC2016E2DE05AFE95256E8C010E2 ] HSF_DPV         C:\Windows\system32\DRIVERS\HSX_DPV.sys

04:35:19.0402 0x0e3c  HSF_DPV - ok

04:35:19.0449 0x0e3c  [ 058783BEDD17615D1FECE09F77960436, 2DC2C98F40016C50521C0BE4C276C04065376A43F81DCBCE80E8E09F850AF1C8 ] HSXHWAZL        C:\Windows\system32\DRIVERS\HSXHWAZL.sys

04:35:19.0480 0x0e3c  HSXHWAZL - ok

04:35:19.0558 0x0e3c  [ 0EEECA26C8D4BDE2A4664DB058A81937, 6F88567A116B1420BE1C9C8888F34D05F51378092C805EF4E489635CF92D416B ] HTTP            C:\Windows\system32\drivers\HTTP.sys

04:35:19.0683 0x0e3c  HTTP - ok

04:35:19.0761 0x0e3c  [ C6B032D69650985468160FC9937CF5B4, 4D5A944C70037F35A9DBA4F49F174455FA80ED7EAEDAA143F0A2C0E05AE585D8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

04:35:19.0776 0x0e3c  i2omp - ok

04:35:19.0823 0x0e3c  [ 22D56C8184586B7A1F6FA60BE5F5A2BD, D96A2962848C1F59B143BFEC22EC48BD1C5A75D0EBCFD7FB965E66B85FF7D8CA ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

04:35:19.0870 0x0e3c  i8042prt - ok

04:35:19.0917 0x0e3c  [ 54155EA1B0DF185878E0FC9EC3AC3A14, 344A0793499261D2E4FF2FCCC70501329485F8E299EBC68953D07BA86F0D4729 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

04:35:19.0932 0x0e3c  iaStorV - ok

04:35:20.0042 0x0e3c  [ 6F95324909B502E2651442C1548AB12F, FF1B104990FE186C6100ED229A45345FF695323AC778688EC11AA8F5A87B141E ] IDriverT        C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

04:35:20.0057 0x0e3c  IDriverT - detected UnsignedFile.Multi.Generic ( 1 )

04:35:20.0229 0x0e3c  Detect skipped due to KSN trusted

04:35:20.0229 0x0e3c  IDriverT - ok

04:35:20.0478 0x0e3c  [ 98477B08E61945F974ED9FDC4CB6BDAB, C7E8F661F6FBF6AB493E950D2E70363496E155B1838CE7B490B981BD840B04FC ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

04:35:20.0634 0x0e3c  idsvc - ok

04:35:21.0227 0x0e3c  [ DCE0B53570703CCE580D066F89EF58CD, C5C2C4F51F2DB2BB6E7F1218472AEAAD996514AB99EA84946A473CB7A64D9E15 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys

04:35:22.0023 0x0e3c  igfx - ok

04:35:22.0085 0x0e3c  [ 2D077BF86E843F901D8DB709C95B49A5, 78FF558A881F307858F5C7C74A748B8B2562AF3CAC7EA8639945609001D790CE ] iirsp           C:\Windows\system32\drivers\iirsp.sys

04:35:22.0101 0x0e3c  iirsp - ok

04:35:22.0179 0x0e3c  [ 9908D8A397B76CD8D31D0D383C5773C9, FFA6996BE9F11A81CB63C849C2400EB44A07706D1EEB7A3502D4110DAC3684A2 ] IKEEXT          C:\Windows\System32\ikeext.dll

04:35:22.0241 0x0e3c  IKEEXT - ok

04:35:22.0304 0x0e3c  [ C7E7E43CBD34D3B0A0156B51B917DFCC, 8F40D053D1AF89E0739D798D41F92801F95AB55CA0109386C426AB57784DD540 ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys

04:35:22.0366 0x0e3c  IntcHdmiAddService - ok

04:35:22.0397 0x0e3c  [ 83AA759F3189E6370C30DE5DC5590718, 7406FE41EA8FB80052517318CB72E2641E92E579FAFAF5E8DDDFF0BF8DAE773A ] intelide        C:\Windows\system32\drivers\intelide.sys

04:35:22.0397 0x0e3c  intelide - ok

04:35:22.0428 0x0e3c  [ 224191001E78C89DFA78924C3EA595FF, E4EC9CAAEEEAEB30E13F4A8023AF687F29514667380DDFD638BBFFF1D5FC2563 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

04:35:22.0475 0x0e3c  intelppm - ok

04:35:22.0538 0x0e3c  [ 9AC218C6E6105477484C6FDBE7D409A4, FF30D09CD2A0F5BBEC309E953370F194B6F26BF4227E627B594AAA48B0F5D3C2 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

04:35:22.0569 0x0e3c  IPBusEnum - ok

04:35:22.0584 0x0e3c  [ 62C265C38769B864CB25B4BCF62DF6C3, CAF6BCE967104233E216464E4729B0275C3BD426D812F404AB0EE83A7F2063D8 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

04:35:22.0631 0x0e3c  IpFilterDriver - ok

04:35:22.0709 0x0e3c  [ 7F83B06A929A981BC001B2EA304D2036, 9446637FA31EDAF472B8EBEEA3678D434FFF49D94C4F7EADB1840CC073A61872 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

04:35:22.0772 0x0e3c  iphlpsvc - ok

04:35:22.0787 0x0e3c  IpInIp - ok

04:35:22.0834 0x0e3c  [ B25AAF203552B7B3491139D582B39AD1, EA9C38F512F40FF12975A6719E6FE4D7EA93A4B2497103E0FDA5A4CD6033C0A6 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

04:35:22.0881 0x0e3c  IPMIDRV - ok

04:35:22.0912 0x0e3c  [ 8793643A67B42CEC66490B2A0CF92D68, 8B1ED1314E4C6623824DD6B9C15A0F7F996F4D243BF0B305421251BE40850907 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

04:35:22.0943 0x0e3c  IPNAT - ok

04:35:23.0037 0x0e3c  [ E6BE7A41A28D8F2DB174957454D32448, 9077FCD816AB3E59D39ED30BED5D4272A98993872ADA77F9121BDBA0200A28C6 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

04:35:23.0115 0x0e3c  iPod Service - ok

04:35:23.0224 0x0e3c  [ 109C0DFB82C3632FBD11949B73AEEAC9, 73B01426100256B7110DF0B74483AF1B62FC209612EEC29A7BF6DC31A7FBEFB6 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

04:35:23.0255 0x0e3c  IRENUM - ok

04:35:23.0286 0x0e3c  [ 6C70698A3E5C4376C6AB5C7C17FB0614, 10FBCBA5A74AF5D136B152FD4D3DFA2A1F2CEBC3F979D5BA6DB98B3DCB2F7A07 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

04:35:23.0318 0x0e3c  isapnp - ok

04:35:23.0364 0x0e3c  [ F247EEC28317F6C739C16DE420097301, 0F4BE16BB0630DFE2256F70C94D4363B7B71F02F7F6597E7CAE28A3EFEA7BCAD ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

04:35:23.0396 0x0e3c  iScsiPrt - ok

04:35:23.0411 0x0e3c  [ BCED60D16156E428F8DF8CF27B0DF150, 4934E9AB8A8A548548F0C63517F2BF4DE84B05E5C9C7C2AA6C1517B8F9C340D4 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

04:35:23.0427 0x0e3c  iteatapi - ok

04:35:23.0458 0x0e3c  [ 06FA654504A498C30ADCA8BEC4E87E7E, 651BC35A0A3D504573BBAB40DE81929BB18C9FC0CD7944FEAE0E99CD7658EA88 ] iteraid         C:\Windows\system32\drivers\iteraid.sys

04:35:23.0458 0x0e3c  iteraid - ok

04:35:23.0520 0x0e3c  [ 213822072085B5BBAD9AF30AB577D817, 2C373B804D840933EC3A5F3ABFC43E47C2636CDB2431AB51846C565077B7C468 ] IviRegMgr       C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe

04:35:23.0536 0x0e3c  IviRegMgr - ok

04:35:23.0598 0x0e3c  [ A69A1B991824B98F744913555F665893, C113FC03DD043F500E68F8E8AC74C17840270BEEEF0E19E5CAF37FA4DD72AD22 ] JMCR            C:\Windows\system32\DRIVERS\jmcr.sys

04:35:23.0676 0x0e3c  JMCR - ok

04:35:23.0708 0x0e3c  [ 37605E0A8CF00CBBA538E753E4344C6E, B9A9FFDCE45B0830E277CF322C28ACB49372C16144B0F676B283BE5DAE9A7F30 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

04:35:23.0708 0x0e3c  kbdclass - ok

04:35:23.0754 0x0e3c  [ 18247836959BA67E3511B62846B9C2E0, 9623FF990A1C11A707C358CC9FDD4306C2992A8C766A50DAFC9534A283AA011D ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

04:35:23.0817 0x0e3c  kbdhid - ok

04:35:23.0864 0x0e3c  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] KeyIso          C:\Windows\system32\lsass.exe

04:35:23.0895 0x0e3c  KeyIso - ok

04:35:23.0957 0x0e3c  [ 86165728AF9BF72D6442A894FDFB4F8B, 97A95C1856C761C93F43B177995749E45FA066C7FF6E93E6C3F34C1593ED2FB7 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

04:35:24.0004 0x0e3c  KSecDD - ok

04:35:24.0176 0x0e3c  [ 8078F8F8F7A79E2E6B494523A828C585, BB399993166853F0C01B7508649ECD7E7473238267BA8333D0441128FE656347 ] KtmRm           C:\Windows\system32\msdtckrm.dll

04:35:24.0332 0x0e3c  KtmRm - ok

04:35:24.0394 0x0e3c  [ 43446F197C74EF2030F84B3A4F39D570, 94915BEA9CF2E047AFF058DCE9819836A9BBC07122D2DCC5BD9269F9FA7D7FA8 ] LanmanServer    C:\Windows\system32\srvsvc.dll

04:35:24.0472 0x0e3c  LanmanServer - ok

04:35:24.0519 0x0e3c  [ 1DB69705B695B987082C8BAEC0C6B34F, D395B272F6B69D4A9FC3CDEFD812EF0DBFECF3C1B1C787C7CC1E1A1B091B8DB3 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

04:35:24.0581 0x0e3c  LanmanWorkstation - ok

04:35:24.0628 0x0e3c  [ 3C3F7F424E324C6971632C5DE5FF458F, 932369A793C6FD527F7AD205B230E64228D54E8A1B17D8684EC43C71337BE9B1 ] lenovo.smi      C:\Windows\system32\DRIVERS\smiif32.sys

04:35:24.0628 0x0e3c  lenovo.smi - ok

04:35:24.0659 0x0e3c  [ D1C5883087A0C3F1344D9D55A44901F6, 608D67357AFDDD538D2C12C93EB0793ECA4EB3AF2BAB779E881C41F50E4AB911 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

04:35:24.0706 0x0e3c  lltdio - ok

04:35:24.0784 0x0e3c  [ 2D5A428872F1442631D0959A34ABFF63, E532C6ECFFB936EFF744CA57BDC6394C89E797B6B0822D04F1F3F35D9BDDD4F0 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

04:35:24.0846 0x0e3c  lltdsvc - ok

04:35:24.0878 0x0e3c  [ 35D40113E4A5B961B6CE5C5857702518, 453097AEF46ED48107395D9A1696AAC259FD6CEA8A655D38C5E246FDDAB81664 ] lmhosts         C:\Windows\System32\lmhsvc.dll

04:35:24.0956 0x0e3c  lmhosts - ok

04:35:25.0002 0x0e3c  [ 31F74D5D47EEA83E5E89447586917774, 5B8C99FDC77E8782A4362907424432A36AAA487756CA3E6CCC7E0F9759662145 ] LPCFilter       C:\Windows\system32\DRIVERS\LPCFilter.sys

04:35:25.0018 0x0e3c  LPCFilter - ok

04:35:25.0049 0x0e3c  [ C7E15E82879BF3235B559563D4185365, 98C9268ADF6BAEB0522BB84BE6C98D0D6D5EB4BD27BB61412D208232164C8435 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

04:35:25.0080 0x0e3c  LSI_FC - ok

04:35:25.0112 0x0e3c  [ EE01EBAE8C9BF0FA072E0FF68718920A, 655924440E611278998226299645BC72B3627A8A057286DC8D65A162CFBBE484 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

04:35:25.0127 0x0e3c  LSI_SAS - ok

04:35:25.0174 0x0e3c  [ 912A04696E9CA30146A62AFA1463DD5C, 1D336D47B9D1C8449F29CDB776C092235E3D70CE53D9440970533E376EB004D3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

04:35:25.0190 0x0e3c  LSI_SCSI - ok

04:35:25.0221 0x0e3c  [ 8F5C7426567798E62A3B3614965D62CC, 659810257D942C5F4168E1247868CDA990F2324AC9ACAA9A6211F64B7AC9EC6E ] luafv           C:\Windows\system32\drivers\luafv.sys

04:35:25.0268 0x0e3c  luafv - ok

04:35:25.0377 0x0e3c  [ 11F714F85530A2BD134074DC30E99FCA, BDB5FD3B2DF4ADD19B31965B3E789768B59E872B3EA85912B1FFB32B2AF9D5D8 ] MDM             C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

04:35:25.0392 0x0e3c  MDM - ok

04:35:25.0408 0x0e3c  [ 0CEA2D0D3FA284B85ED5B68365114F76, E6FF0EC98FDC3F628438B613C356C237E68686E3B5B17A58A60C16F4B9A2B968 ] mdmxsdk         C:\Windows\system32\DRIVERS\mdmxsdk.sys

04:35:25.0439 0x0e3c  mdmxsdk - ok

04:35:25.0470 0x0e3c  [ 0001CE609D66632FA17B84705F658879, D5F9758BDC2B733307B565A74B33F5581FB425A5A9F32CCFA307DA1569EBD6CD ] megasas         C:\Windows\system32\drivers\megasas.sys

04:35:25.0486 0x0e3c  megasas - ok

04:35:25.0517 0x0e3c  [ C252F32CD9A49DBFC25ECF26EBD51A99, 47EC8F475AB62A00FAF989CD2C3ABDF2922588F75CC15C83CD99A62EF6400FB0 ] MegaSR          C:\Windows\system32\drivers\megasr.sys

04:35:25.0548 0x0e3c  MegaSR - ok

04:35:25.0595 0x0e3c  [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] MMCSS           C:\Windows\system32\mmcss.dll

04:35:25.0642 0x0e3c  MMCSS - ok

04:35:25.0673 0x0e3c  [ E13B5EA0F51BA5B1512EC671393D09BA, 5B380D1B435D809CA201FD5ED075D42F3C6BA1A4EEDBC4040F7E3329F05A334A ] Modem           C:\Windows\system32\drivers\modem.sys

04:35:25.0704 0x0e3c  Modem - ok

04:35:25.0720 0x0e3c  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8, 1E8031D51E074FDFB53E98E26DABF313B901C028D01196BFD402EED5D0A89595 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

04:35:25.0782 0x0e3c  monitor - ok

04:35:25.0814 0x0e3c  [ 5BF6A1326A335C5298477754A506D263, CC7F58E5955A448F6CE28D6D8EB98C7479E11F931B5C733CFE71A29B2E95923D ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

04:35:25.0829 0x0e3c  mouclass - ok

04:35:25.0845 0x0e3c  [ 93B8D4869E12CFBE663915502900876F, 7464DE60FAAD8793D855F1F86C3C865B3A3EE41C19A3E926D1BE4426E67F5EC2 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

04:35:25.0892 0x0e3c  mouhid - ok

04:35:25.0923 0x0e3c  [ BDAFC88AA6B92F7842416EA6A48E1600, 2CA8A7BB260016D6B7953980A94C45A3C5D41F7DC7E73EEFB1C18EA144749503 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

04:35:25.0938 0x0e3c  MountMgr - ok

04:35:26.0016 0x0e3c  [ 0DE2474F316C515482ABAD3B697F8714, 62862AE7432F5350068E96AD466093359C6CF444EB517AE6D09134FAF78C49F5 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

04:35:26.0032 0x0e3c  MozillaMaintenance - ok

04:35:26.0079 0x0e3c  [ 511D011289755DD9F9A7579FB0B064E6, 1FD0D0D5B6E08FE06F7A5D0821BCD859B0F98A6DEA58AAB7FB6C95B64212FFC8 ] mpio            C:\Windows\system32\drivers\mpio.sys

04:35:26.0094 0x0e3c  mpio - ok

04:35:26.0141 0x0e3c  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E, 62055C0DCEB69873B8961AB17DBD002F44319A44CB05EC3A61421A0C6D4736CD ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

04:35:26.0157 0x0e3c  mpsdrv - ok

04:35:26.0235 0x0e3c  [ 5DE62C6E9108F14F6794060A9BDECAEC, 655E6645CC4A1EDBE5F51F5F80C7B504DD956851E788A6E4E4E08CDCDCE160D9 ] MpsSvc          C:\Windows\system32\mpssvc.dll

04:35:26.0328 0x0e3c  MpsSvc - ok

04:35:26.0344 0x0e3c  [ 4FBBB70D30FD20EC51F80061703B001E, 72907A0CA5CFF82F40C02A65CD8EFD51D7CFC33BE67DE572D1ACF4FD3B248F0A ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

04:35:26.0360 0x0e3c  Mraid35x - ok

04:35:26.0438 0x0e3c  [ 82CEA0395524AACFEB58BA1448E8325C, 16E37990A291C848DE35F48EA7E09AE5B258AE589EB08A3FA2C60DC1278DE182 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

04:35:26.0484 0x0e3c  MRxDAV - ok

04:35:26.0516 0x0e3c  [ 66DE1A2B389A1969CA1751B276108E45, F4581D8BCB700FCBF8288F5AEB5EC692B00A8EF9A62412CCA41F7EE403C54405 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

04:35:26.0562 0x0e3c  mrxsmb - ok

04:35:26.0594 0x0e3c  [ 346611D7523B520FAA86B76753CC9874, 92ED0433EA6E921B1F738AA6BBEF7178C0248FA7B1B0C9AE2FCDFAC1C79D7AD9 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

04:35:26.0640 0x0e3c  mrxsmb10 - ok

04:35:26.0703 0x0e3c  [ C70C50D101B92B45C42BA11EA9FE6CD1, D0EFCB665532FED28A4560AEB2D598DED3574C9822A79E4AD71D35525A00CC0D ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

04:35:26.0781 0x0e3c  mrxsmb20 - ok

04:35:26.0828 0x0e3c  [ 28023E86F17001F7CD9B15A5BC9AE07D, FC7EAA592C5F796E3BCD7F7EF261709CD899B33FC8486E594A480F143D0D6320 ] msahci          C:\Windows\system32\drivers\msahci.sys

04:35:26.0843 0x0e3c  msahci - ok

04:35:26.0874 0x0e3c  [ 4468B0F385A86ECDDAF8D3CA662EC0E7, EAEDC9CDD2EEC5000AF8190A4BE7729282576C3F88E64FDF57F455F5CECC81C9 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

04:35:26.0906 0x0e3c  msdsm - ok

04:35:26.0937 0x0e3c  [ FD7520CC3A80C5FC8C48852BB24C6DED, C3F3D7A07FAB9AF38A2A00BF0DF6EEE18CA8FE26277BEC9D8ADB793F2CD5EC1F ] MSDTC           C:\Windows\System32\msdtc.exe

04:35:26.0999 0x0e3c  MSDTC - ok

04:35:27.0046 0x0e3c  [ A9927F4A46B816C92F461ACB90CF8515, 753284F726F9B4D3E7322C75532244CA43714F00717C2019391FB36DEE0738C0 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

04:35:27.0093 0x0e3c  Msfs - ok

04:35:27.0124 0x0e3c  [ 0F400E306F385C56317357D6DEA56F62, C48FA8193787359902D20D869F5F602CD66D3C5D061A58DDB72F51EED433C4BC ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

04:35:27.0140 0x0e3c  msisadrv - ok

04:35:27.0186 0x0e3c  [ 85466C0757A23D9A9AECDC0755203CB2, 79141B8DF9D7470466872AF03A85C3D3976512BFDBDB8B92A22225DC8EFD70A6 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

04:35:27.0233 0x0e3c  MSiSCSI - ok

04:35:27.0249 0x0e3c  msiserver - ok

04:35:27.0296 0x0e3c  [ D8C63D34D9C9E56C059E24EC7185CC07, D0CBFB8D57E6D908679DC0488ED659CA35B92626DEA890873E165F051A1AD2AE ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

04:35:27.0327 0x0e3c  MSKSSRV - ok

04:35:27.0358 0x0e3c  [ 1D373C90D62DDB641D50E55B9E78D65E, 1D4897A96EA54D6FAC7916D69B4E88CAE1397C38CC8FAE08554772808476357B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

04:35:27.0389 0x0e3c  MSPCLOCK - ok

04:35:27.0405 0x0e3c  [ B572DA05BF4E098D4BBA3A4734FB505B, B7923F204CEADD0F62C2FE4B7CF8C56DAB70F88093B15C5692D0E61490CF4BAA ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

04:35:27.0452 0x0e3c  MSPQM - ok

04:35:27.0514 0x0e3c  [ B49456D70555DE905C311BCDA6EC6ADB, 8E40586B3A1FAE9996459E0261726C9DD6A8D5F575604868C45604613385C92F ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

04:35:27.0530 0x0e3c  MsRPC - ok

04:35:27.0561 0x0e3c  [ E384487CB84BE41D09711C30CA79646C, 520391DEE14D4D6C1EA99C7D31DD95D56B44D54CA3CD8E5C9855E9C0A04F026C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

04:35:27.0576 0x0e3c  mssmbios - ok

04:35:27.0623 0x0e3c  MSSQL$MSSMLBIZ - ok

04:35:27.0686 0x0e3c  [ ADAF062116B4E6D96E44D26486A87AF6, 1A2EE7C4598E8442F24A5C97FEBF7AC6A20703F7EA9097B6E48BE4A05E231D8C ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe

04:35:27.0732 0x0e3c  MSSQLServerADHelper - ok

04:35:27.0764 0x0e3c  [ 7199C1EEC1E4993CAF96B8C0A26BD58A, DD02DF8ED7AF5BB88BD2A91F38CE4C52432CB8044BDCBC41C320CD22B10B8A3B ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

04:35:27.0810 0x0e3c  MSTEE - ok

04:35:27.0904 0x0e3c  [ 6A57B5733D4CB702C8EA4542E836B96C, 080FB0B01E949D24CDD6876125B3A72DA9F88845D8B9A1A425BCA99E7ACF6821 ] Mup             C:\Windows\system32\Drivers\mup.sys

04:35:27.0920 0x0e3c  Mup - ok

04:35:27.0966 0x0e3c  [ E4EAF0C5C1B41B5C83386CF212CA9584, 5946C3DCE65A0DB164169A1775DFCA544AF4E1895ADF6916BB1653F373F8D9AF ] napagent        C:\Windows\system32\qagentRT.dll

04:35:28.0029 0x0e3c  napagent - ok

04:35:28.0107 0x0e3c  [ 85C44FDFF9CF7E72A40DCB7EC06A4416, DC37C99C458CA69B33BFD3894187089E947F4F9C01EC2ED024FA8614989E0956 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

04:35:28.0122 0x0e3c  NativeWifiP - ok

04:35:28.0185 0x0e3c  [ 1357274D1883F68300AEADD15D7BBB42, EE6352CBF0D9D633816F338159CDA27F1A805C3DDC3402D8605B50D8F3CD3300 ] NDIS            C:\Windows\system32\drivers\ndis.sys

04:35:28.0232 0x0e3c  NDIS - ok

04:35:28.0263 0x0e3c  [ 0E186E90404980569FB449BA7519AE61, DE41791D9D3074007D6DD1D3933E7A2A13E3789D0AD4F029105B58279622FC1B ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

04:35:28.0310 0x0e3c  NdisTapi - ok

04:35:28.0341 0x0e3c  [ D6973AA34C4D5D76C0430B181C3CD389, 7C303F3D6BFF8B82E39998135B444837091AB1F9EB8F28D013E5EF45DB237EFC ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

04:35:28.0403 0x0e3c  Ndisuio - ok

04:35:28.0466 0x0e3c  [ 818F648618AE34F729FDB47EC68345C3, 5FC8F9237BD7FCE3C62D5BDDD49DC104BE2BECDC2FA8CDC1DB8F1891CBAA9140 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

04:35:28.0497 0x0e3c  NdisWan - ok

04:35:28.0512 0x0e3c  [ 71DAB552B41936358F3B541AE5997FB3, 30A8B3E33CBF04FC047254E404C0321F9028F2640036AA8AC1EA0A5E64551684 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

04:35:28.0559 0x0e3c  NDProxy - ok

04:35:28.0622 0x0e3c  [ A081CB6FB9A12668F233EB5414BE3A0E, EE2A1311B51D1FEBAF79F45E568A927D8EA7704AFC8495AED2D26927566F61E3 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

04:35:28.0637 0x0e3c  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )

04:35:29.0027 0x0e3c  Detect skipped due to KSN trusted

04:35:29.0027 0x0e3c  Net Driver HPZ12 - ok

04:35:29.0136 0x0e3c  [ 1352E1648213551923A0A822E441553C, F9BCA299249D8E1ADF88F54554F72428E267E39911143F4C99DFF562F0EE4E70 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl.sys

04:35:29.0152 0x0e3c  Netaapl - ok

04:35:29.0183 0x0e3c  [ BCD093A5A6777CF626434568DC7DBA78, 2A283DD93230361204EA0897864EAF0224CB8C02E025AE2E4237B07A598B3EBD ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

04:35:29.0230 0x0e3c  NetBIOS - ok

04:35:29.0292 0x0e3c  [ ECD64230A59CBD93C85F1CD1CAB9F3F6, 83650D756C1F2768A2AAAFC7924F2A4316ABAEB1708F4B05803CDDD699B5AB6F ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

04:35:29.0324 0x0e3c  netbt - ok

04:35:29.0339 0x0e3c  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] Netlogon        C:\Windows\system32\lsass.exe

04:35:29.0370 0x0e3c  Netlogon - ok

04:35:29.0417 0x0e3c  [ C8052711DAECC48B982434C5116CA401, 417DEB86D157DD3F0B4678410FE27FDD3E8FA04AB03AF398F6C02BF207070B35 ] Netman          C:\Windows\System32\netman.dll

04:35:29.0495 0x0e3c  Netman - ok

04:35:29.0589 0x0e3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

04:35:29.0604 0x0e3c  NetMsmqActivator - ok

04:35:29.0651 0x0e3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

04:35:29.0667 0x0e3c  NetPipeActivator - ok

04:35:29.0714 0x0e3c  [ 2EF3BBE22E5A5ACD1428EE387A0D0172, 55DB91EDD0339D2434C06445F8A716A48EA90925B0FF7EBF45BB79D4B54B80BF ] netprofm        C:\Windows\System32\netprofm.dll

04:35:29.0792 0x0e3c  netprofm - ok

04:35:29.0870 0x0e3c  [ 6F8480809D14F0594B4B1DF07385DA33, 6B400C2ED058F4082E256BED14B205D599AEF7654BF5CE813FEDA7868839F8C1 ] netr28u         C:\Windows\system32\DRIVERS\netr28u.sys

04:35:29.0932 0x0e3c  netr28u - detected UnsignedFile.Multi.Generic ( 1 )

04:35:30.0041 0x0e3c  Detect skipped due to KSN trusted

04:35:30.0041 0x0e3c  netr28u - ok

04:35:30.0072 0x0e3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

04:35:30.0088 0x0e3c  NetTcpActivator - ok

04:35:30.0104 0x0e3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

04:35:30.0119 0x0e3c  NetTcpPortSharing - ok

04:35:30.0338 0x0e3c  [ E559EA9138C77B5D1FDA8C558764A25F, F89DA7D8289B65DCD9ADCAC576C36AD62BE694F85E289A3CE59035688A3ECDF3 ] NETw5v32        C:\Windows\system32\DRIVERS\NETw5v32.sys

04:35:30.0603 0x0e3c  NETw5v32 - ok

04:35:30.0650 0x0e3c  [ 2E7FB731D4790A1BC6270ACCEFACB36E, EE9A00B694E8A3A5842CDC56C7BA1364317AC8134E046A0059661D057094B1A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

04:35:30.0665 0x0e3c  nfrd960 - ok

04:35:30.0696 0x0e3c  [ 2997B15415F9BBE05B5A4C1C85E0C6A2, 5455536515FE740E18E090329FDCC40288724372AD18ACDB2CB4BB9D85CF681E ] NlaSvc          C:\Windows\System32\nlasvc.dll

04:35:30.0759 0x0e3c  NlaSvc - ok

04:35:30.0821 0x0e3c  [ D36F239D7CCE1931598E8FB90A0DBC26, DF9397411D0CE5A87E3346D4E6E25BEC537A21BCE196CC55FD999CD08FC4A637 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

04:35:30.0852 0x0e3c  Npfs - ok

04:35:30.0899 0x0e3c  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD, 15CA178518EB3D457AA4C109D97A8490821590842AE4E9841703B5A55870C8F6 ] nsi             C:\Windows\system32\nsisvc.dll

04:35:30.0946 0x0e3c  nsi - ok

04:35:30.0977 0x0e3c  [ 609773E344A97410CE4EBF74A8914FCF, 90B9CBD2B62854DD503DE4A910CB987D402368EB99882FE20FFB6DEACD70F2BD ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

04:35:31.0024 0x0e3c  nsiproxy - ok

04:35:31.0133 0x0e3c  [ 6A4A98CEE84CF9E99564510DDA4BAA47, 18C3D8C0F12761D3B7FC43D9413CF4C4CEBF8CA9BEC521381F40D241B35EA779 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

04:35:31.0211 0x0e3c  Ntfs - ok

04:35:31.0305 0x0e3c  [ E875C093AEC0C978A90F30C9E0DFBB72, D3A480CD7EF374EFBC1BB831B33B81534774DDDBB0FB338BEE1D444949FD8DE7 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

04:35:31.0367 0x0e3c  ntrigdigi - ok

04:35:31.0414 0x0e3c  [ C5DBBCDA07D780BDA9B685DF333BB41E, 3652893DFF05469A273C3073D8D0A9D6D6BBDEC7855FEA8EAB768F95BA674108 ] Null            C:\Windows\system32\drivers\Null.sys

04:35:31.0445 0x0e3c  Null - ok

04:35:31.0492 0x0e3c  [ 2EDF9E7751554B42CBB60116DE727101, 37A0AA78E83DBB5A788F7F067EB71DDF6CCC72A66BB41B209E1A5E2F68F8AF9B ] nvraid          C:\Windows\system32\drivers\nvraid.sys

04:35:31.0508 0x0e3c  nvraid - ok

04:35:31.0539 0x0e3c  [ ABED0C09758D1D97DB0042DBB2688177, 84B9BF886EF9181915E8AB6D971446BC681E6DE4485DBECD62838EAFA10E7F46 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

04:35:31.0554 0x0e3c  nvstor - ok

04:35:31.0586 0x0e3c  [ 18BBDF913916B71BD54575BDB6EEAC0B, 5FBA165149AB09E869DCE35622E91CFC964BDD22B31A5E76CF12F1565402B207 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

04:35:31.0601 0x0e3c  nv_agp - ok

04:35:31.0617 0x0e3c  NwlnkFlt - ok

04:35:31.0632 0x0e3c  NwlnkFwd - ok

04:35:31.0664 0x0e3c  [ 790E27C3DB53410B40FF9EF2FD10A1D9, FD06F2702B8F7E04ECF1B6E88602F14301E7AE7FC44AD114282E580FAD530A9C ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

04:35:31.0726 0x0e3c  ohci1394 - ok

04:35:31.0976 0x0e3c  [ EF8DA126239D08B7B4734256417AE702, 4BBA0577C20E851F5B30D0D0F19382AB32AF57EFF7AA5B394E0FF6358A7AB287 ] Origin Client Service C:\Program Files\Origin\OriginClientService.exe

04:35:32.0147 0x0e3c  Origin Client Service - ok

04:35:32.0241 0x0e3c  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

04:35:32.0256 0x0e3c  ose - ok

04:35:32.0334 0x0e3c  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

04:35:32.0428 0x0e3c  p2pimsvc - ok

04:35:32.0459 0x0e3c  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2psvc          C:\Windows\system32\p2psvc.dll

04:35:32.0522 0x0e3c  p2psvc - ok

04:35:32.0600 0x0e3c  [ 0FA9B5055484649D63C303FE404E5F4D, ABF357001A5E7B21621560E74FA538E2D899C5111A6AAC784B5B12D9D819C6CD ] Parport         C:\Windows\system32\drivers\parport.sys

04:35:32.0678 0x0e3c  Parport - ok

04:35:32.0724 0x0e3c  [ 57389FA59A36D96B3EB09D0CB91E9CDC, 05A3E2B155789990517CCFDC57FC3D1E9A596E4F31D86350B8BF0C043DE5EE9B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

04:35:32.0740 0x0e3c  partmgr - ok

04:35:32.0787 0x0e3c  [ 4F9A6A8A31413180D0FCB279AD5D8112, DCE48BC6E3447403521BB9FBF727E629DEE45B69B8AE8CFEE1A67FECAE3CB9D3 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

04:35:32.0849 0x0e3c  Parvdm - ok

04:35:32.0912 0x0e3c  [ C6276AD11F4BB49B58AA1ED88537F14A, 409E956AF994640DF8D062E5E41F87A6EE7EEE0335C191B582722A49322357CE ] PcaSvc          C:\Windows\System32\pcasvc.dll

04:35:32.0974 0x0e3c  PcaSvc - ok

04:35:33.0021 0x0e3c  [ 01B94418DEB235DFF777CC80076354B4, 091C4D5954C5CA1F783748C4D7287DD160C5F3357F2CC448DC5C2935B79AC1E9 ] pci             C:\Windows\system32\drivers\pci.sys

04:35:33.0036 0x0e3c  pci - ok

04:35:33.0068 0x0e3c  [ FC175F5DDAB666D7F4D17449A547626F, 7D6108213D1AD3F97A3B83E491BCCC7D6F5BC72C32A182BDDE8736851A26C8D2 ] pciide          C:\Windows\system32\drivers\pciide.sys

04:35:33.0083 0x0e3c  pciide - ok

04:35:33.0146 0x0e3c  [ B7C5A8769541900F6DFA6FE0C5E4D513, 1885FE8AE9D6929E8B43D674B43B7B3FEAA25AF6E45973A0B49CBA7B9CBA34C4 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

04:35:33.0177 0x0e3c  pcmcia - ok

04:35:33.0239 0x0e3c  [ 6349F6ED9C623B44B52EA3C63C831A92, 9EAA3ABD396870123107D6E1B758F56FDA378BD28B28DB8415AA470D24294F92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

04:35:33.0411 0x0e3c  PEAUTH - ok

04:35:33.0567 0x0e3c  [ B1689DF169143F57053F795390C99DB3, 887B8C76B34CABC68067C0F27CC4EEF02457A53634C96FE5B0FE9B99453BDBEF ] pla             C:\Windows\system32\pla.dll

04:35:33.0707 0x0e3c  pla - ok

04:35:33.0785 0x0e3c  [ C5E7F8A996EC0A82D508FD9064A5569E, 416A93816CDF12DD42DEA796D37E6E2000D3172AAAB20D3EAD3B715DACD4B61F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

04:35:33.0848 0x0e3c  PlugPlay - ok

04:35:33.0941 0x0e3c  [ 65BC271F337637731D3C71455AE1F476, DAD32B61FE0147F8D2DA4C8F016920CD6BB2098F16E3CC2768009763E71DEFBC ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

04:35:33.0972 0x0e3c  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )

04:35:34.0253 0x0e3c  Detect skipped due to KSN trusted

04:35:34.0253 0x0e3c  Pml Driver HPZ12 - ok

04:35:34.0347 0x0e3c  [ 29A26236447E5B5E3FCE5E33168C43E0, 6BEA8990AAFDDF4D022C6C1C71E36536ED49FCA8B90BDCC33F9BE18951C113A2 ] PMSveH          C:\Program Files\Lenovo\PM Driver\PMSveH.exe

04:35:34.0347 0x0e3c  PMSveH - detected UnsignedFile.Multi.Generic ( 1 )

04:35:34.0674 0x0e3c  Detect skipped due to KSN trusted

04:35:34.0674 0x0e3c  PMSveH - ok

04:35:34.0752 0x0e3c  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

04:35:34.0815 0x0e3c  PNRPAutoReg - ok

04:35:34.0893 0x0e3c  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

04:35:34.0940 0x0e3c  PNRPsvc - ok

04:35:35.0002 0x0e3c  [ D0494460421A03CD5225CCA0059AA146, FC30E90522C63F2A66D89381705712D2CDF07B2E029DF40C2DEBB2353E763E90 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

04:35:35.0111 0x0e3c  PolicyAgent - ok

04:35:35.0283 0x0e3c  [ 4671F353D0DF74C3B0D2D00DE676F56C, 0F75009DD36B2E18212CE855FB7CA7D273E5749D8F2F451655ED81AA5E86BA9F ] postgresql-8.4  c:\postgreSQL\bin\pg_ctl.exe

04:35:35.0283 0x0e3c  postgresql-8.4 - detected UnsignedFile.Multi.Generic ( 1 )

04:35:35.0595 0x0e3c  Detect skipped due to KSN trusted

04:35:35.0595 0x0e3c  postgresql-8.4 - ok

04:35:35.0673 0x0e3c  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1, 6E4B188A4BFDBBCA51347BCCE2873F2D0F858398851B9B5129CB9F36A02E4354 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

04:35:35.0704 0x0e3c  PptpMiniport - ok

04:35:35.0735 0x0e3c  [ 2027293619DD0F047C584CF2E7DF4FFD, B7C172CCD08D8A30483D27536355ED1E5009B33629355B426470AFBA8542B394 ] Processor       C:\Windows\system32\drivers\processr.sys

04:35:35.0766 0x0e3c  Processor - ok

04:35:35.0829 0x0e3c  [ 0508FAA222D28835310B7BFCA7A77346, 3AE2340C6E365F137CC00D9560069501DD2724756EA9EBF7A6CDFFC91B43709C ] ProfSvc         C:\Windows\system32\profsvc.dll

04:35:35.0876 0x0e3c  ProfSvc - ok

04:35:35.0907 0x0e3c  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] ProtectedStorage C:\Windows\system32\lsass.exe

04:35:35.0922 0x0e3c  ProtectedStorage - ok

04:35:35.0969 0x0e3c  [ F8A25F1DD8B2C332CBC663E3579566E7, 85413753DBEDCDD367DC655B4A8FCEF8A5F7919DA1D5EE6773DC4677A95C829F ] psadd           C:\Windows\system32\DRIVERS\psadd.sys

04:35:36.0000 0x0e3c  psadd - ok

04:35:36.0063 0x0e3c  [ 99514FAA8DF93D34B5589187DB3AA0BA, 4DDE5EC0C721B22E1D7D55ED3514B60EA07435C232A3A931BB49C7F486B52C18 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

04:35:36.0110 0x0e3c  PSched - ok

04:35:36.0156 0x0e3c  [ E42E3433DBB4CFFE8FDD91EAB29AEA8E, 20ABD8372B242FD356AC143E7EB56F93CFEA4988ED1B0C4434CB64C387D7F66C ] PxHelp20        C:\Windows\system32\Drivers\PxHelp20.sys

04:35:36.0172 0x0e3c  PxHelp20 - ok

04:35:36.0234 0x0e3c  [ 0A6DB55AFB7820C99AA1F3A1D270F4F6, 8B7D44A7698B95FE34CBBE4FAB2F01EC1F5BA86C2B19672F99767E650E99BF1C ] ql2300          C:\Windows\system32\drivers\ql2300.sys

04:35:36.0328 0x0e3c  ql2300 - ok

04:35:36.0390 0x0e3c  [ 81A7E5C076E59995D54BC1ED3A16E60B, A2988F065F93C41B3B389BFF3BB3FD69F768C2AF249C2356F315CC92E5C9E128 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

04:35:36.0406 0x0e3c  ql40xx - ok

04:35:36.0453 0x0e3c  [ E9ECAE663F47E6CB43962D18AB18890F, F1A05320CAED9E745AA36A6DA9B64C48AAEDE888B42B249840CEB31448F7F432 ] QWAVE           C:\Windows\system32\qwave.dll

04:35:36.0500 0x0e3c  QWAVE - ok

04:35:36.0531 0x0e3c  [ 9F5E0E1926014D17486901C88ECA2DB7, 67CDFB99AB546DCEEF20507EAC07DD52FFB51BFDFE9416ABEDDC1201B60D720E ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

04:35:36.0546 0x0e3c  QWAVEdrv - ok

04:35:36.0671 0x0e3c  [ 720FEA3AAA15FE7E0BEAB10AC2E6D2B0, E1E6A79751B7CAA86F4C7F9DD2A835D5C30FBD433644F916B8E54CD8105D00D2 ] RalinkRegistryWriter C:\Program Files\Ralink\Common\RaRegistry.exe

04:35:36.0718 0x0e3c  RalinkRegistryWriter - ok

04:35:36.0749 0x0e3c  [ 147D7F9C556D259924351FEB0DE606C3, E41EBA5F3098C6CF2BE4C0060A5F4BF161C3677D983B7A0D70ACC12FC3CFEFD7 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

04:35:36.0796 0x0e3c  RasAcd - ok

04:35:36.0827 0x0e3c  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F, 6A410ABCCD2211EFF511CDBF22E4152B57D2996336EBE711DFF71904AF232DB2 ] RasAuto         C:\Windows\System32\rasauto.dll

04:35:36.0890 0x0e3c  RasAuto - ok

04:35:36.0905 0x0e3c  [ A214ADBAF4CB47DD2728859EF31F26B0, A24F37F55E2C018B1B4FA2C568A01AAAAEA1220833ED24A93378386174A70A32 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

04:35:36.0968 0x0e3c  Rasl2tp - ok

04:35:37.0046 0x0e3c  [ 75D47445D70CA6F9F894B032FBC64FCF, 9112EA5D25F867136858524C7965ACCEDC02675D1E2985B950598D89CCF25E14 ] RasMan          C:\Windows\System32\rasmans.dll

04:35:37.0092 0x0e3c  RasMan - ok

04:35:37.0139 0x0e3c  [ 509A98DD18AF4375E1FC40BC175F1DEF, CC7C278CA298CE102D871E34C176E73F903D6687D1E8B5AFAB8772C7DE1A60B1 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

04:35:37.0186 0x0e3c  RasPppoe - ok

04:35:37.0233 0x0e3c  [ 2005F4A1E05FA09389AC85840F0A9E4D, D8A664073FDE82F9AB324347024CDB7043635C84EB11C24C59AB384C52F0FD94 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

04:35:37.0264 0x0e3c  RasSstp - ok

04:35:37.0326 0x0e3c  [ B14C9D5B9ADD2F84F70570BBBFAA7935, 3D533767A50554B86C769DF4D8841B3EA680B3807E85EA3533BDA9B649548269 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

04:35:37.0373 0x0e3c  rdbss - ok

04:35:37.0420 0x0e3c  [ 89E59BE9A564262A3FB6C4F4F1CD9899, 6F948FB0E73495CA60B7B19E758268495EC8A084C475EC59AD7940AA619570BB ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

04:35:37.0451 0x0e3c  RDPCDD - ok

04:35:37.0482 0x0e3c  [ FBC0BACD9C3D7F6956853F64A66E252D, 7672B10C7039295B152C02C96903E869FF2C0A88A2C3FA89BAE9F1D593B43569 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

04:35:37.0545 0x0e3c  rdpdr - ok

04:35:37.0560 0x0e3c  [ 9D91FE5286F748862ECFFA05F8A0710C, 33F37F1B207151A5564BF051BBF16F35D8C5A0F426CCA078A51F125BF09E487B ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

04:35:37.0607 0x0e3c  RDPENCDD - ok

04:35:37.0670 0x0e3c  [ 30BFBDFB7F95559EDE971F9DDB9A00BA, 1BDD3FD0ABCF5EA2C4D2618E76AC782894E5A7132700BA4C4226E1F9C7CE547B ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

04:35:37.0701 0x0e3c  RDPWD - ok

04:35:37.0826 0x0e3c  [ E1A6731867765FBC01B37150AEFC00F3, 4ADB0FE791ACF0BBCF314FB73AE6025D70BAFB8DF925B4A4CFB3B50EA191C94E ] Realtek11nSU    C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe

04:35:37.0857 0x0e3c  Realtek11nSU - detected UnsignedFile.Multi.Generic ( 1 )

04:35:38.0247 0x0e3c  Detect skipped due to KSN trusted

04:35:38.0247 0x0e3c  Realtek11nSU - ok

04:35:38.0372 0x0e3c  [ B33C88DF3588ACF250B87A004526C31A, 7D9FAE5C36CA9414F7E49C96C7799A3A1464D421AB2F023E7E9CF1371AD13E5B ] RegSrvc         C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

04:35:38.0496 0x0e3c  RegSrvc - detected UnsignedFile.Multi.Generic ( 1 )

04:35:38.0871 0x0e3c  Detect skipped due to KSN trusted

04:35:38.0871 0x0e3c  RegSrvc - ok

04:35:38.0996 0x0e3c  [ BCDD6B4804D06B1F7EBF29E53A57ECE9, 8A961CCD0A0265E03D9952C733B593B02B5CF64E308D6B420276D2D6B20F86FC ] RemoteAccess    C:\Windows\System32\mprdim.dll

04:35:39.0042 0x0e3c  RemoteAccess - ok

04:35:39.0089 0x0e3c  [ 9E6894EA18DAFF37B63E1005F83AE4AB, 5D6DF994D297C875D547C7B111A571AA90D582DAECADE18A53F65AD988819E67 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

04:35:39.0120 0x0e3c  RemoteRegistry - ok

04:35:39.0152 0x0e3c  [ 23F486726DA7A9B2F3EC7326421A9C36, D81035B3832FC670F018DA14B3986CB091F158229EE496A7B4BDAC2DB24385C5 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

04:35:39.0183 0x0e3c  RFCOMM - ok

04:35:39.0323 0x0e3c  [ C0C8909BE3ECC9DF8089112BF9BE954E, 6F9BB117EBB21BDFD3A9DF774A78157BB15C76EEF3B329B99F029D3D8A72C5C4 ] RivaTuner32     C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys

04:35:39.0339 0x0e3c  RivaTuner32 - detected UnsignedFile.Multi.Generic ( 1 )

04:35:39.0791 0x0e3c  Detect skipped due to KSN trusted

04:35:39.0791 0x0e3c  RivaTuner32 - ok

04:35:39.0916 0x0e3c  [ ADA991D7A02130FA78413281A134330B, 0615426A3BF6A6BA3B82955ABF9C9EE02F93B35FFD660A78AA6A3BB07A75F0A3 ] Roxio UPnP Renderer 10 C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe

04:35:39.0947 0x0e3c  Roxio UPnP Renderer 10 - ok

04:35:39.0994 0x0e3c  [ 11F07111105072F81C03A437423E88EE, 5628D6C1894EB1DF4B43987610FD70C07742A2EE73418CDB6574CC5C2F3B7F6B ] Roxio Upnp Server 10 C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe

04:35:40.0025 0x0e3c  Roxio Upnp Server 10 - ok

04:35:40.0134 0x0e3c  [ 7C334636B539FBFA65BD3B6DA75B9D30, 434AD1769283224D54D0D20AD84833102DEDBF794810155F9026A81E5D99365B ] RoxLiveShare10  C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe

04:35:40.0166 0x0e3c  RoxLiveShare10 - ok

04:35:40.0244 0x0e3c  [ EB9EEB379848F356797EB9EF31114CA5, 07C4BE23612D5799685DB4FC920639FF8547788896BC5BCF07F4979EEC96231E ] RoxMediaDB10    C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe

04:35:40.0337 0x0e3c  RoxMediaDB10 - ok

04:35:40.0400 0x0e3c  [ 640E33EFB13278BEDD3699DFA88185E5, BD7113BC1EE8119416A9ABF4059EE44863CD867096C9D02DDB6D01BEF77A84C0 ] RoxWatch10      C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe

04:35:40.0431 0x0e3c  RoxWatch10 - ok

04:35:40.0478 0x0e3c  [ 5123F83CBC4349D065534EEB6BBDC42B, 92A3F38EA924D83D601BB93E3750F9DBC2DD963FB7ACF2A0E776297E21815225 ] RpcLocator      C:\Windows\system32\locator.exe

04:35:40.0524 0x0e3c  RpcLocator - ok

04:35:40.0602 0x0e3c  [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] RpcSs           C:\Windows\system32\rpcss.dll

04:35:40.0696 0x0e3c  RpcSs - ok

04:35:40.0774 0x0e3c  [ 9C508F4074A39E8B4B31D27198146FAD, 84913471E5A6C297B1EDABE45EF3FE7D2C4410EF04370F615109FD9E2690FFDB ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

04:35:40.0805 0x0e3c  rspndr - ok

04:35:40.0914 0x0e3c  [ 0797877413D3225700D94488F06273A8, A2A3706B7DB6D991637F6BCB9804036D5BC77061702DF99B8635B85081AE2D36 ] RTL8192su       C:\Windows\system32\DRIVERS\RTL8192su.sys

04:35:40.0977 0x0e3c  RTL8192su - ok

04:35:41.0039 0x0e3c  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] SamSs           C:\Windows\system32\lsass.exe

04:35:41.0055 0x0e3c  SamSs - ok

04:35:41.0086 0x0e3c  [ 3CE8F073A557E172B330109436984E30, CEC281C6076FAA1E34372CF419C6308E73811316606B8D0D9055B7D8952BDC88 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

04:35:41.0102 0x0e3c  sbp2port - ok

04:35:41.0148 0x0e3c  [ 77B7A11A0C3D78D3386398FBBEA1B632, A3D290AB793BDC2F84C7B963300DFCE81CFE082A0FFF7489E8E5B14714892C00 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

04:35:41.0180 0x0e3c  SCardSvr - ok

04:35:41.0273 0x0e3c  [ 323AE0BDFD2EB15B668DDA50CC597329, 43AF5B26713D317DB4A5C82A27074B2E2A75A22B4CF9DA597ED93130B951133C ] Schedule        C:\Windows\system32\schedsvc.dll

04:35:41.0382 0x0e3c  Schedule - ok

04:35:41.0445 0x0e3c  [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] SCPolicySvc     C:\Windows\System32\certprop.dll

04:35:41.0460 0x0e3c  SCPolicySvc - ok

04:35:41.0538 0x0e3c  [ 126EA89BCC413EE45E3004FB0764888F, 367BE2B56113177AE867E00D019C707C6449E0FC4A642101B11036A0534D6901 ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys

04:35:41.0585 0x0e3c  sdbus - ok

04:35:41.0632 0x0e3c  [ 716313D9F6B0529D03F726D5AAF6F191, 44FE994A11631C1D99C73026340BACE39973C65A1281D87A61B481C9B5FAB251 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

04:35:41.0663 0x0e3c  SDRSVC - ok

04:35:41.0694 0x0e3c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

04:35:41.0757 0x0e3c  secdrv - ok

04:35:41.0788 0x0e3c  [ FD5199D4D8A521005E4B5EE7FE00FA9B, 0FB7A1D300C72B1ADC423CC57343C17853E5F8ACFE3EA2C42FAC2FF72E502FBE ] seclogon        C:\Windows\system32\seclogon.dll

04:35:41.0835 0x0e3c  seclogon - ok

04:35:41.0866 0x0e3c  [ A9BBAB5759771E523F55563D6CBE140F, 415BF6F6A1E4C5F98DABF9C2EEAF8CA49730693046E5F94C7655683717EDAD75 ] SENS            C:\Windows\System32\sens.dll

04:35:41.0913 0x0e3c  SENS - ok

04:35:41.0944 0x0e3c  [ 68E44E331D46F0FB38F0863A84CD1A31, 0778D85B6869CE2610820DC9724360538BFE832426E898AEBC34E53D2AB4322B ] Serenum         C:\Windows\system32\drivers\serenum.sys

04:35:41.0991 0x0e3c  Serenum - ok

04:35:42.0038 0x0e3c  [ C70D69A918B178D3C3B06339B40C2E1B, 40BEEECA4C797A3355F4B01C57C2763C33028F27826315062320789A496D0810 ] Serial          C:\Windows\system32\drivers\serial.sys

04:35:42.0100 0x0e3c  Serial - ok

04:35:42.0131 0x0e3c  [ 8AF3D28A879BF75DB53A0EE7A4289624, C870BEBB969DCD9170E64584D1CD329A193D9FC812A45EF3574891110CA68B45 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

04:35:42.0162 0x0e3c  sermouse - ok

04:35:42.0225 0x0e3c  [ D2193326F729B163125610DBF3E17D57, 82C894E24E2C139C884246A693AD37BBF0A4E9375B7F7A288EF1DB22F89434B9 ] SessionEnv      C:\Windows\system32\sessenv.dll

04:35:42.0272 0x0e3c  SessionEnv - ok

04:35:42.0303 0x0e3c  [ 3EFA810BDCA87F6ECC24F9832243FE86, E50FEA94DB9851A46A8A71A8C061AC953A9D5B14585382B3F0FFC84931A0A68F ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

04:35:42.0318 0x0e3c  sffdisk - ok

04:35:42.0350 0x0e3c  [ E95D451F7EA3E583AEC75F3B3EE42DC5, B014BE4F9B0C79ECCE2537D1CF4AAD48ACB4C5AD3DACAC4444F0F465B9689921 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

04:35:42.0396 0x0e3c  sffp_mmc - ok

04:35:42.0428 0x0e3c  [ 3D0EA348784B7AC9EA9BD9F317980979, 2500CE188C9B71C50E966FA575303AEFE50934E376C530AECEC7C7533C15EF08 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

04:35:42.0474 0x0e3c  sffp_sd - ok

04:35:42.0490 0x0e3c  [ 46ED8E91793B2E6F848015445A0AC188, 34A97304F23EA153422848F6F1CAF8ADF0944EA781E12F027B6DEAF751A04B5D ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

04:35:42.0552 0x0e3c  sfloppy - ok

04:35:42.0599 0x0e3c  [ E1499BD0FF76B1B2FBBF1AF339D91165, 9A8F0403467E75880D3070C4D862489A75134383BAF8E7C45F8C5E7DFB0605A5 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

04:35:42.0677 0x0e3c  SharedAccess - ok

04:35:42.0740 0x0e3c  [ C818C44C201898399BF999BB6B35D4E3, 8887EDF7F9D16F5D055AA4EE3BE22AD238AF15034671F09124921B66B7890915 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

04:35:42.0802 0x0e3c  ShellHWDetection - ok

04:35:42.0833 0x0e3c  [ 1D76624A09A054F682D746B924E2DBC3, DC903DD466AB8899883253F09477B02E4E93A31C8B279F9F02BD555F1AA083B7 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

04:35:42.0864 0x0e3c  sisagp - ok

04:35:42.0911 0x0e3c  [ 43CB7AA756C7DB280D01DA9B676CFDE2, 08484CAEA0518C0A4CCCD292D8C803B27FEC453537EE1E4CEE74A7208356A474 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

04:35:42.0911 0x0e3c  SiSRaid2 - ok

04:35:42.0974 0x0e3c  [ A99C6C8B0BAA970D8AA59DDC50B57F94, 97AC9DD6DC4F58AC60E819B999BB157663EE7C1739521D16768AA9AC00DAD012 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

04:35:43.0020 0x0e3c  SiSRaid4 - ok

04:35:43.0114 0x0e3c  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe

04:35:43.0145 0x0e3c  SkypeUpdate - ok

04:35:43.0332 0x0e3c  [ 862BB4CBC05D80C5B45BE430E5EF872F, F4961B22C93E472C8C862421AA231CDDA9E40D3958741A1D666357F22CC3143D ] slsvc           C:\Windows\system32\SLsvc.exe

04:35:43.0644 0x0e3c  slsvc - ok

04:35:43.0707 0x0e3c  [ 6EDC422215CD78AA8A9CDE6B30ABBD35, D8342BC3152859F4F7512E85ABEC61147DBCAB515458644728874E42F639D6CA ] SLUINotify      C:\Windows\system32\SLUINotify.dll

04:35:43.0754 0x0e3c  SLUINotify - ok

04:35:43.0816 0x0e3c  [ 7B75299A4D201D6A6533603D6914AB04, 172BE3951F06B1991EF70B71EB91786D1EFC4E381C22BCA3A5F622CD59F3227E ] Smb             C:\Windows\system32\DRIVERS\smb.sys

04:35:43.0832 0x0e3c  Smb - ok

04:35:43.0894 0x0e3c  [ 2A146A055B4401C16EE62D18B8E2A032, D0930FFA53951C92F56E1ECB41374F4C0AA01ECBF99F474513A21EAD579CFE47 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

04:35:43.0925 0x0e3c  SNMPTRAP - ok

04:35:43.0941 0x0e3c  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF, E03BEE733F4C2A5F39946D4955679A290E22758DFCE4222EE69ABF64FC54EDF7 ] spldr           C:\Windows\system32\drivers\spldr.sys

04:35:44.0112 0x0e3c  spldr - ok

04:35:44.0237 0x0e3c  [ 524BFBEA40E6E404737CCBC754647A2E, 0F4F06DEFCA6886D4D3BDA5F6FDA467C8F966E511FA757A83BFC5B33D8D33EAA ] Spooler         C:\Windows\System32\spoolsv.exe

04:35:44.0315 0x0e3c  Spooler - ok

04:35:44.0362 0x0e3c  [ D2B096CD2F56FAC6EEEED9A77DDF6DC8, FD904FBB36ED60AE084F86F7196FCE48F798CF720DB1677C307059E45497E140 ] SQLBrowser      c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

04:35:44.0378 0x0e3c  SQLBrowser - ok

04:35:44.0424 0x0e3c  [ 54902536AAD0E9B99BC65F89C0CAF93F, 312B6F1ECBAA42EA8FAC374E446FC6B686F747B38D903E1B181F95AECCB2BFD1 ] SQLWriter       c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

04:35:44.0424 0x0e3c  SQLWriter - ok

04:35:44.0502 0x0e3c  [ 0DEBAFCC0E3591FCA34F077CAB62F7F7, 16956958C94D043B3AC014DC894230E28F2A3BDFF5C1B77923C3AC190A1A5A79 ] srv             C:\Windows\system32\DRIVERS\srv.sys

04:35:44.0580 0x0e3c  srv - ok

04:35:44.0658 0x0e3c  [ 6B6F3658E0A58C6C50C5F7FBDF3DF633, E679559372D24EA31CEE4D9F99141C2675447E3BED1710B1D0E6AE5A97E13EB2 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

04:35:44.0752 0x0e3c  srv2 - ok

04:35:44.0814 0x0e3c  [ 0C5AB1892AE0FA504218DB094BF6D041, CBE188D362BEC5479AB3FCE7CC4B8651CB1BB853117307FD3BF00709E201D3EF ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

04:35:44.0830 0x0e3c  srvnet - ok

04:35:44.0877 0x0e3c  [ 03D50B37234967433A5EA5BA72BC0B62, 7B61D6A4BF5D446A9473D058BC207FB6DA7C2FEFB8083F3B66CAC8907DBD8327 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

04:35:44.0924 0x0e3c  SSDPSRV - ok

04:35:44.0970 0x0e3c  [ 424566865D82AA4BD8D6546C1F2065FA, 37B4C04C7C0EE0F3347A9E9F35B095478299F7324CA87AAE487BF989B0E6AE03 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys

04:35:44.0970 0x0e3c  ssmdrv - ok

04:35:45.0017 0x0e3c  [ 6F1A32E7B7B30F004D9A20AFADB14944, AA9D874A14CA4779E76701D2B02F4CCA92CD5917435FB4CACA149FCB2D1D4C4C ] SstpSvc         C:\Windows\system32\sstpsvc.dll

04:35:45.0048 0x0e3c  SstpSvc - ok

04:35:45.0142 0x0e3c  [ CC7ED069C2FC82B5B1555C2044C765CC, CE43363544A3EE2C5133CD0D47BF34AFAFA4EAD6AC9EB9A772EE55E89D4D89D4 ] Steam Client Service C:\Program Files\Common Files\Steam\SteamService.exe

04:35:45.0220 0x0e3c  Steam Client Service - ok

04:35:45.0267 0x0e3c  [ EF70B3D22B4BFFDA6EA851ECB063EFAA, 1666572F8F988805C3A2E949FA6B060B35B72DBB115B86F4CFC710FB6A86C3E3 ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys

04:35:45.0314 0x0e3c  StillCam - ok

04:35:45.0392 0x0e3c  [ 5DE7D67E49B88F5F07F3E53C4B92A352, 6930A598C35646646ED0E91633797EFE139AE6CDD0012335BD1340754A22F997 ] stisvc          C:\Windows\System32\wiaservc.dll

04:35:45.0438 0x0e3c  stisvc - ok

04:35:45.0548 0x0e3c  [ 1D0063597C3666404FCF97698ABEB019, 352A63C97F930499BC598C2A398663377D7CCD4A42770E35635C90EDC4DA530A ] stllssvr        C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

04:35:45.0563 0x0e3c  stllssvr - ok

04:35:45.0626 0x0e3c  [ 2A79CF4D716F72D93E783D5A755C8ADE, D08CD38C95721C3FBCBFA8CC014256D02B96F41DB05158C6DED3ACC7EAB06D60 ] SUService       c:\Program Files\Lenovo\System Update\SUService.exe

04:35:45.0657 0x0e3c  SUService - detected UnsignedFile.Multi.Generic ( 1 )

04:35:46.0234 0x0e3c  Detect skipped due to KSN trusted

04:35:46.0234 0x0e3c  SUService - ok

04:35:46.0296 0x0e3c  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56, 23CC47FA2D6E183D69DB0D3D3F3081A830D94A58FBC0A9A295B3A56C51E9486A ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

04:35:46.0312 0x0e3c  swenum - ok

04:35:46.0484 0x0e3c  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

04:35:46.0655 0x0e3c  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )

04:35:46.0952 0x0e3c  Detect skipped due to KSN trusted

04:35:46.0952 0x0e3c  SwitchBoard - ok

04:35:47.0030 0x0e3c  [ F21FD248040681CCA1FB6C9A03AAA93D, 32FE765841A183A1F2C1ACACBBF8CDB11E7D4D4396F9C9F6CFF1B51C9B620ED3 ] swprv           C:\Windows\System32\swprv.dll

04:35:47.0092 0x0e3c  swprv - ok

04:35:47.0139 0x0e3c  [ 192AA3AC01DF071B541094F251DEED10, 5C6EB56D1C39F3717EB754A1B37C8A618BA4F2107F64048E985D71FA04D1AD05 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

04:35:47.0154 0x0e3c  Symc8xx - ok

04:35:47.0186 0x0e3c  [ 8C8EB8C76736EBAF3B13B633B2E64125, A6C4845DDED81CCF4947612A4D6E42035136025BCD80812D2FF396927CAADEC5 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

04:35:47.0186 0x0e3c  Sym_hi - ok

04:35:47.0232 0x0e3c  [ 8072AF52B5FD103BBBA387A1E49F62CB, D336A7D008D145619E79043EBF5D0D455086BA1FEF89612BC2EA11CC363D82B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

04:35:47.0232 0x0e3c  Sym_u3 - ok

04:35:47.0326 0x0e3c  [ 9A51B04E9886AA4EE90093586B0BA88D, 1666C29FBFA34174B506678C920636519051D03456A6DDCCD6FF708CAE5D9962 ] SysMain         C:\Windows\system32\sysmain.dll

04:35:47.0404 0x0e3c  SysMain - ok

04:35:47.0466 0x0e3c  [ 2DCA225EAE15F42C0933E998EE0231C3, 67C7913E41854DFA3043426B7D59AA1FBBB9DE01A6E6904E40A696A7C61A5F98 ] TabletInputService C:\Windows\System32\TabSvc.dll

04:35:47.0482 0x0e3c  TabletInputService - ok

04:35:47.0560 0x0e3c  [ D7673E4B38CE21EE54C59EEEB65E2483, 330D0AD13F5008D8569CE8E5EA0BBD69F54F59FEB54FD903FA18D2849CEC6AF0 ] TapiSrv         C:\Windows\System32\tapisrv.dll

04:35:47.0607 0x0e3c  TapiSrv - ok

04:35:47.0638 0x0e3c  [ CB05822CD9CC6C688168E113C603DBE7, 9DB8945BDC702BB13E9DE477F2D3CCA4CE0E9E8CE9B54CE1A25375F2A2C93F0E ] TBS             C:\Windows\System32\tbssvc.dll

04:35:47.0669 0x0e3c  TBS - ok

04:35:47.0763 0x0e3c  [ DA467E7619AE5F4588E6262C13C8940A, 4DF80D10D2F0BF13813C43DB17E4FEB1F0DA8D18AF7F7015E7F00CDB71119663 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

04:35:47.0872 0x0e3c  Tcpip - ok

04:35:47.0981 0x0e3c  [ DA467E7619AE5F4588E6262C13C8940A, 4DF80D10D2F0BF13813C43DB17E4FEB1F0DA8D18AF7F7015E7F00CDB71119663 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

04:35:48.0106 0x0e3c  Tcpip6 - ok

04:35:48.0184 0x0e3c  [ 608C345A255D82A6289C2D468EB41FD7, 74ECFDD45DC3EB3AFAEF9C42B546241AA1D6ACB2F6591A76DDB8BB1768545889 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

04:35:48.0262 0x0e3c  tcpipreg - ok

04:35:48.0309 0x0e3c  [ 5DCF5E267BE67A1AE926F2DF77FBCC56, E00C0A03AEE579B51B39930A72F39F4EFFE7CDA37187B0AE90F4E001AD15473B ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

04:35:48.0356 0x0e3c  TDPIPE - ok

04:35:48.0387 0x0e3c  [ 389C63E32B3CEFED425B61ED92D3F021, E4718E290678F00995E754AE66F1027D227BFAB9E1A1D2AC8E4EAD27DC50CB17 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

04:35:48.0418 0x0e3c  TDTCP - ok

04:35:48.0480 0x0e3c  [ 76B06EB8A01FC8624D699E7045303E54, EC30F244B48A35622ED3EE91792F6A1517C5A50770FAB3945E7A945EB7AF28A8 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

04:35:48.0512 0x0e3c  tdx - ok

04:35:48.0636 0x0e3c  [ A048056F5E1A96A9BF3071B91741A5AA, CFDE51D106A6CC4A5638BCD458505F5831636D2203F7C949273BDA446AC7C5F3 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

04:35:48.0683 0x0e3c  TermDD - ok

04:35:48.0746 0x0e3c  [ BB95DA09BEF6E7A131BFF3BA5032090D, BAF6997F8D944F85F0553957677866C7F22E72AA434BA45FFFB6CC41041070DC ] TermService     C:\Windows\System32\termsrv.dll

04:35:48.0808 0x0e3c  TermService - ok

04:35:48.0855 0x0e3c  [ C818C44C201898399BF999BB6B35D4E3, 8887EDF7F9D16F5D055AA4EE3BE22AD238AF15034671F09124921B66B7890915 ] Themes          C:\Windows\system32\shsvcs.dll

04:35:48.0902 0x0e3c  Themes - ok

04:35:48.0980 0x0e3c  [ 9626746A9B120D2ED537DD8D76278405, E566408C85B90BF35581AF9C5FDCAEDDFC52746ACFDEBD209F3DB5188DCE072B ] ThinkVantage Registry Monitor Service c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe

04:35:49.0026 0x0e3c  ThinkVantage Registry Monitor Service - ok

04:35:49.0104 0x0e3c  [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] THREADORDER     C:\Windows\system32\mmcss.dll

04:35:49.0136 0x0e3c  THREADORDER - ok

04:35:49.0167 0x0e3c  [ 93CFFC9CB0D4354FDF60C4982DD3D379, F3B96BD31C8124F09BE745B84669C7092546B5920FBAD324A3B5E210D6FFF700 ] TPHKSVC         C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

04:35:49.0214 0x0e3c  TPHKSVC - detected UnsignedFile.Multi.Generic ( 1 )

04:35:49.0619 0x0e3c  Detect skipped due to KSN trusted

04:35:49.0619 0x0e3c  TPHKSVC - ok

04:35:49.0650 0x0e3c  [ CB258C2F726F1BE73C507022BE33EBB3, 096A6027D3C0D4D09DC4038505FAEA41E5DD9F62782CED648DC14314F138D666 ] TPM             C:\Windows\system32\drivers\tpm.sys

04:35:49.0666 0x0e3c  TPM - ok

04:35:49.0697 0x0e3c  [ EC74E77D0EB004BD3A809B5F8FB8C2CE, 1E4BBC58D0E35D79C764CF1BA73602C5E29A5A2393D40332801D533E445C6667 ] TrkWks          C:\Windows\System32\trkwks.dll

04:35:49.0760 0x0e3c  TrkWks - ok

04:35:49.0822 0x0e3c  [ 2FDC9D9F34838BDD20FAD0979D40FDEF, 6A3217F3CB1ED10A9C70394E77E3B2A7BA9BD1A5AB007A3E7D8DA7E62DD74EB7 ] TrueSight       C:\Windows\System32\drivers\TrueSight.sys

04:35:49.0822 0x0e3c  TrueSight - ok

04:35:50.0009 0x0e3c  [ 97D9D6A04E3AD9B6C626B9931DB78DBA, 8E42133ED5EE5EEC414A8B11C1035385C6141E445EA9677F947D20768F25A877 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

04:35:50.0040 0x0e3c  TrustedInstaller - ok

04:35:50.0072 0x0e3c  [ DCF0F056A2E4F52287264F5AB29CF206, D9F770BD65AE4320A8C130DEA1D093AA4E37FCA573BBE6A59D6D045452EA711D ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

04:35:50.0118 0x0e3c  tssecsrv - ok

04:35:50.0165 0x0e3c  [ CAECC0120AC49E3D2F758B9169872D38, 80DB15ADF5F4FF78D0C7D5081B6C0E8F1E5125872B60D23C19DA8E62C9DAC9A8 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

04:35:50.0228 0x0e3c  tunmp - ok

04:35:50.0259 0x0e3c  [ 119B8184E106BAEDC83FCE5DDF3950DA, 0EA54732B8C04B1F2DEE6EA34751285855C3CDF37373E4557CDEB1B6111B2559 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

04:35:50.0290 0x0e3c  tunnel - ok

04:35:50.0399 0x0e3c  [ 1A9F115D6F82FC0753D06599E42B2295, 3DFDB7017676D1B62B0AFA55A991067127CBDC033047BF3080AEF05F4F8E51AE ] TVT Backup Protection Service C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe

04:35:50.0493 0x0e3c  TVT Backup Protection Service - detected UnsignedFile.Multi.Generic ( 1 )

04:35:50.0852 0x0e3c  Detect skipped due to KSN trusted

04:35:50.0852 0x0e3c  TVT Backup Protection Service - ok

04:35:50.0961 0x0e3c  [ 43FFBB6AF7245C97865ADA74B8CEECF9, 28EE815849FE9D500DD40AEF6558BA35801D9741B26618F6FFC9CADCB9AB2E31 ] TVT Backup Service C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe

04:35:51.0086 0x0e3c  TVT Backup Service - detected UnsignedFile.Multi.Generic ( 1 )

04:35:51.0460 0x0e3c  Detect skipped due to KSN trusted

04:35:51.0460 0x0e3c  TVT Backup Service - ok

04:35:51.0585 0x0e3c  [ 58BC366538A8A1F252D2750C1F5193B6, 35705F73EC4A86736C497C5D1EDF91203AADFC2A0B62350360511FE8621F1650 ] TVT Scheduler   c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe

04:35:51.0725 0x0e3c  TVT Scheduler - detected UnsignedFile.Multi.Generic ( 1 )

04:35:51.0866 0x0e3c  Detect skipped due to KSN trusted

04:35:51.0866 0x0e3c  TVT Scheduler - ok

04:35:51.0912 0x0e3c  [ 49258A02A1E8D304ED88B0F1C56B1738, 4BB23E4C37BB2A0DAF465FE93C0AF6E0D3E6AE85605382E08FFE80403CBC2DAF ] tvtfilter       C:\Windows\system32\DRIVERS\tvtfilter.sys

04:35:51.0959 0x0e3c  tvtfilter - detected UnsignedFile.Multi.Generic ( 1 )

04:35:52.0178 0x0e3c  Detect skipped due to KSN trusted

04:35:52.0178 0x0e3c  tvtfilter - ok

04:35:52.0240 0x0e3c  [ 7E66DDA1EF146BFC3A6E36E08E036602, 8F053BA611059E514E3C718ADB2E697E64B62FB182E2CD13F3AD379EAA5D3392 ] TVTI2C          C:\Windows\system32\DRIVERS\Tvti2c.sys

04:35:52.0271 0x0e3c  TVTI2C - ok

04:35:52.0318 0x0e3c  [ 2D1EC233C89416BA8187C9D7D49A075A, FE6B5817CA55840F7B7D60C191C465CF293A820170B82FA09EC3DE60B2162EAF ] tvtumon         C:\Windows\system32\DRIVERS\tvtumon.sys

04:35:52.0334 0x0e3c  tvtumon - ok

04:35:52.0349 0x0e3c  [ 3152355EA8E8274D4FDA092F454DA7C0, E9F7270EF088EBC0B8F5EC7983D0D0E9B319592EE300403F5418390E4A507004 ] TVT_UpdateMonitor C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe

04:35:52.0380 0x0e3c  TVT_UpdateMonitor - detected UnsignedFile.Multi.Generic ( 1 )

04:35:52.0692 0x0e3c  Detect skipped due to KSN trusted

04:35:52.0692 0x0e3c  TVT_UpdateMonitor - ok

04:35:52.0770 0x0e3c  [ 7D33C4DB2CE363C8518D2DFCF533941F, C6A539AD31B0BD9F895E0A537783AA75D5760C8590D83BA832D59A9B090CA0E9 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

04:35:52.0770 0x0e3c  uagp35 - ok

04:35:52.0880 0x0e3c  [ D9728AF68C4C7693CB100B8441CBDEC6, A2CEE1EE4EF17106349F4E6967F504354801934179FBB3F10B9A4E3C30BC28CE ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

04:35:52.0958 0x0e3c  udfs - ok

04:35:53.0020 0x0e3c  [ ECEF404F62863755951E09C802C94AD5, 5D92062B3E371F196774EBFE840C78501E55A244DB2A49703C7AC0141C7DABF1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

04:35:53.0051 0x0e3c  UI0Detect - ok

04:35:53.0098 0x0e3c  [ B0ACFDC9E4AF279E9116C03E014B2B27, 455D30859E381361FF6EE8B01EDC22A2E66CD5EC22CA9F314E88009DB77A8BAF ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

04:35:53.0114 0x0e3c  uliagpkx - ok

04:35:53.0145 0x0e3c  [ 9224BB254F591DE4CA8D572A5F0D635C, C5E7B24587AC5A28ECA63300307AD95B8A846833340126AE378840A40E53C056 ] uliahci         C:\Windows\system32\drivers\uliahci.sys

04:35:53.0176 0x0e3c  uliahci - ok

04:35:53.0192 0x0e3c  [ 8514D0E5CD0534467C5FC61BE94A569F, A6EFB967044F88335469DB3351587E31CEC659BB6A7D8ED45C68329232C31BB9 ] UlSata          C:\Windows\system32\drivers\ulsata.sys

04:35:53.0207 0x0e3c  UlSata - ok

04:35:53.0238 0x0e3c  [ 38C3C6E62B157A6BC46594FADA45C62B, 44F87DC955CB4E35E0EB4C8B4E931472B33D97FE000C22370A06AD5EDCEFD0BA ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

04:35:53.0254 0x0e3c  ulsata2 - ok

04:35:53.0270 0x0e3c  [ 32CFF9F809AE9AED85464492BF3E32D2, 91AAA47AEF17F373276B01AC8FA823592A0C854541A7A9A3B78F2350DB964EBC ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

04:35:53.0316 0x0e3c  umbus - ok

04:35:53.0379 0x0e3c  [ 68308183F4AE0BE7BF8ECD07CB297999, 4444233CA3C42BEE50ED47553D4AE5A7C12D8F288D2FA4B2DAE1D9B9FEC1A72D ] upnphost        C:\Windows\System32\upnphost.dll

04:35:53.0441 0x0e3c  upnphost - ok

04:35:53.0519 0x0e3c  [ EAFE1E00739AFE6C51487A050E772E17, C005E635470AEB68131D922CAFFE2703626EAB4612932237B35F5562E559258A ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys

04:35:53.0566 0x0e3c  USBAAPL - ok

04:35:53.0597 0x0e3c  [ CAF811AE4C147FFCD5B51750C7F09142, BD670CF88D8F932AD1C6BA91FB68A7204BC473657C6A057C92AFB84D164D393C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

04:35:53.0613 0x0e3c  usbccgp - ok

04:35:53.0660 0x0e3c  [ E9476E6C486E76BC4898074768FB7131, D14B8F69A511DC1F990A9C123C18689AFE59659BA8130D248D8D03E9BD2143B6 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

04:35:53.0738 0x0e3c  usbcir - ok

04:35:53.0784 0x0e3c  [ CEBE90821810E76320155BEBA722FCF9, AD27B032520BE2A45690DD1AFDDA632B934AB7F815CD313B19CD692790C761D8 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

04:35:53.0816 0x0e3c  usbehci - ok

04:35:53.0847 0x0e3c  [ CC6B28E4CE39951357963119CE47B143, 0BC653B51A33709AADD8B5A2B8102DBCB3C1EE14BDDF4C58813FDCA43FF7C1B2 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

04:35:53.0909 0x0e3c  usbhub - ok

04:35:53.0956 0x0e3c  [ 38DBC7DD6CC5A72011F187425384388B, 456CFCD190035C3033709C8DC0F6DC4352BBF751D57C0C52DD04F8C301FEBACD ] usbohci         C:\Windows\system32\drivers\usbohci.sys

04:35:54.0003 0x0e3c  usbohci - ok

04:35:54.0034 0x0e3c  [ E75C4B5269091D15A2E7DC0B6D35F2F5, B0A4141B69B66276890836DE98EB8BC790D35CE59FA503060593E8CC12AA106B ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

04:35:54.0065 0x0e3c  usbprint - ok

04:35:54.0128 0x0e3c  [ A508C9BD8724980512136B039BBA65E9, B39B72471C468AC997AEC528599EDC98A031F5A7EB91C4F9471402D48D2D4E3E ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

04:35:54.0143 0x0e3c  usbscan - ok

04:35:54.0206 0x0e3c  [ 87BA6B83C5D19B69160968D07D6E2982, 9E039DF4BBE53CA22A0ACE486B9867F99FFFE086CCAF6A83BD78770E4631F3F8 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

04:35:54.0284 0x0e3c  USBSTOR - ok

04:35:54.0315 0x0e3c  [ 814D653EFC4D48BE3B04A307ECEFF56F, D73D62F51AEFE2F8F2B938B20107C246F2AC2F62ED49112DBD092A5D2E4024B3 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

04:35:54.0377 0x0e3c  usbuhci - ok

04:35:54.0424 0x0e3c  [ E67998E8F14CB0627A769F6530BCB352, 60982F168E9BF13954328C728F55F4D3ADDC572CACB65289B0E895A63DAA08C1 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys

04:35:54.0471 0x0e3c  usbvideo - ok

04:35:54.0533 0x0e3c  [ 1509E705F3AC1D474C92454A5C2DD81F, 7F525921A3513224F8B093A16E19B4235B300349A14B0B86EE11B7473BA53337 ] UxSms           C:\Windows\System32\uxsms.dll

04:35:54.0564 0x0e3c  UxSms - ok

04:35:54.0642 0x0e3c  [ CD88D1B7776DC17A119049742EC07EB4, 6B68B9EDB8C6BCB2644F1F004D5743E928509D12107D996F390A24A72E0AA528 ] vds             C:\Windows\System32\vds.exe

04:35:54.0689 0x0e3c  vds - ok

04:35:54.0767 0x0e3c  [ 87B06E1F30B749A114F74622D013F8D4, 06C06EF87F7DC668D23B50AA5F419F62474ACF90E325E167491BF290286D6594 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

04:35:54.0814 0x0e3c  vga - ok

04:35:54.0845 0x0e3c  [ 2E93AC0A1D8C79D019DB6C51F036636C, 8B6F3B4EE90691A22788915AD0F99D8EE617750430A34E7CEB9AB4FB4E581755 ] VgaSave         C:\Windows\System32\drivers\vga.sys

04:35:54.0892 0x0e3c  VgaSave - ok

04:35:54.0923 0x0e3c  [ 5D7159DEF58A800D5781BA3A879627BC, 499A8E51FDE61AE0D7C1812D1E5B331211A36BD095A4992C629B93DE6D80F4E6 ] viaagp          C:\Windows\system32\drivers\viaagp.sys

04:35:54.0923 0x0e3c  viaagp - ok

04:35:54.0954 0x0e3c  [ C4F3A691B5BAD343E6249BD8C2D45DEE, 19DE07AD6CD51036FA8A6B8EE82F34D7F5264FF3A12CBE6E52BD036D0303E319 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

04:35:54.0986 0x0e3c  ViaC7 - ok

04:35:55.0017 0x0e3c  [ AADF5587A4063F52C2C3FED7887426FC, 0A74791A236FDAFCD045CFB79A159245B94F7C2033E0CD830C1B76F0F994E06D ] viaide          C:\Windows\system32\drivers\viaide.sys

04:35:55.0032 0x0e3c  viaide - ok

04:35:55.0095 0x0e3c  [ B9DFDA5510FFFB6C8B825271E3E3D2E0, 57B47428721DEC0AA68566944B374104BA153CB1DE0B60FCBBB49531FE3F4277 ] vm331avs        C:\Windows\system32\Drivers\vm331avs.sys

04:35:55.0220 0x0e3c  vm331avs - ok

04:35:55.0298 0x0e3c  [ 69503668AC66C77C6CD7AF86FBDF8C43, 2CE407674A58313737073F02B9A617460BBA84B36C3A16D98AE5ED45279F5006 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

04:35:55.0313 0x0e3c  volmgr - ok

04:35:55.0376 0x0e3c  [ 23E41B834759917BFD6B9A0D625D0C28, 9F60992805262F936E8DA33610FDF60A191ECAFC08BBF657C8F9A21833C8EFC5 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

04:35:55.0422 0x0e3c  volmgrx - ok

04:35:55.0438 0x0e3c  [ D8B4A53DD2769F226B3EB374374987C9, 49314B3E53FBF40A60E272C5B3B79FD1EFABFE1215DA5B030571B4DDF5592896 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

04:35:55.0469 0x0e3c  volsnap - ok

04:35:55.0516 0x0e3c  [ 587253E09325E6BF226B299774B728A9, C9F46197819C2A095456393C518A9B00B59ECDC54F464D038AA7F8DCCDB93CCF ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

04:35:55.0532 0x0e3c  vsmraid - ok

04:35:55.0625 0x0e3c  [ DB3D19F850C6EB32BDCB9BC0836ACDDB, D81FF1CDA87A2FE83EFD5B3FE01EFF940952F8BAEE70BEA3B2F6EF30E2121704 ] VSS             C:\Windows\system32\vssvc.exe

04:35:55.0719 0x0e3c  VSS - ok

04:35:55.0828 0x0e3c  [ 96EA68B9EB310A69C25EBB0282B2B9DE, C76D3427F8A2953CB4D96BBA1523679CBE1BBF7FA821A35D2FBEB3E67AC6A10B ] W32Time         C:\Windows\system32\w32time.dll

04:35:55.0890 0x0e3c  W32Time - ok

04:35:55.0922 0x0e3c  [ 48DFEE8F1AF7C8235D4E626F0C4FE031, A41D05BC0DA3C476C32E0A4DAF015DF7BADF28A03CE236D5596885FF1772F148 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

04:35:56.0046 0x0e3c  WacomPen - ok

04:35:56.0124 0x0e3c  [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

04:35:56.0156 0x0e3c  Wanarp - ok

04:35:56.0171 0x0e3c  [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

04:35:56.0187 0x0e3c  Wanarpv6 - ok

04:35:56.0312 0x0e3c  [ A3CD60FD826381B49F03832590E069AF, 213C5DB5E5D828264286FD7548527566D6160CCA780BC6853B7B28CECF329674 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

04:35:56.0358 0x0e3c  wcncsvc - ok

04:35:56.0405 0x0e3c  [ 11BCB7AFCDD7AADACB5746F544D3A9C7, 0370E20FD12ED713F94E5CD76F068F7A7A5E7F42416DD2A8A41249020DA7DA31 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

04:35:56.0421 0x0e3c  WcsPlugInService - ok

04:35:56.0468 0x0e3c  [ 78FE9542363F297B18C027B2D7E7C07F, 6BC3ED2A48EF41E1EE597FD58271DB12256EC013518663331CD0FBCB3FC415EE ] Wd              C:\Windows\system32\drivers\wd.sys

04:35:56.0483 0x0e3c  Wd - ok

04:35:56.0561 0x0e3c  [ A840213F1ACDCC175B4D1D5AAEAC0D7A, B20F7CAEEA790290072BC170EBEEADB4C19E1C40DB0B3FE0D4A640D0D82300D6 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

04:35:56.0639 0x0e3c  Wdf01000 - ok

04:35:56.0670 0x0e3c  [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiServiceHost  C:\Windows\system32\wdi.dll

04:35:56.0702 0x0e3c  WdiServiceHost - ok

04:35:56.0717 0x0e3c  [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiSystemHost   C:\Windows\system32\wdi.dll

04:35:56.0748 0x0e3c  WdiSystemHost - ok

04:35:56.0764 0x0e3c  [ 04C37D8107320312FBAE09926103D5E2, 1C6726A9871CBACB240AFA93E57781515F01758D43693DDA395EA683D97234F0 ] WebClient       C:\Windows\System32\webclnt.dll

04:35:56.0811 0x0e3c  WebClient - ok

04:35:56.0889 0x0e3c  [ AE3736E7E8892241C23E4EBBB7453B60, 0F998116CC07CD719CB237EAE53BB16B2EDD6973828B9C1055EB981AEA0453D1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

04:35:56.0982 0x0e3c  Wecsvc - ok

04:35:57.0014 0x0e3c  [ 670FF720071ED741206D69BD995EA453, 4B96F5E3545F69AE9EBC75DC4AB27B87306D656EE526AE39E7EC7E2B6F83F7FD ] wercplsupport   C:\Windows\System32\wercplsupport.dll

04:35:57.0076 0x0e3c  wercplsupport - ok

04:35:57.0185 0x0e3c  [ 32B88481D3B326DA6DEB07B1D03481E7, 821FBAF147E525ED15EB9391B16A96C6D5464841258B11F277EFB57A3BD50E37 ] WerSvc          C:\Windows\System32\WerSvc.dll

04:35:57.0216 0x0e3c  WerSvc - ok

04:35:57.0263 0x0e3c  [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4, A6020D41FEA0CC76D0C3CA3A88F3E9493022CD5A549E18B02D69A482B579F339 ] WimFltr         C:\Windows\system32\DRIVERS\wimfltr.sys

04:35:57.0294 0x0e3c  WimFltr - ok

04:35:57.0419 0x0e3c  [ BB9CBAF6AC20452B245C324F1F50EE81, 0458CF8DE26E1F04AE278A1856E2C0285569E1438605793ED791F91E71B1FFD1 ] winachsf        C:\Windows\system32\DRIVERS\HSX_CNXT.sys

04:35:57.0544 0x0e3c  winachsf - ok

04:35:57.0638 0x0e3c  [ 4575AA12561C5648483403541D0D7F2B, 2DBB7904285F16E879E1662C4CC4DFAA420D5EB24DDFC4BAC0B7616F5F44649A ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

04:35:57.0669 0x0e3c  WinDefend - ok

04:35:57.0700 0x0e3c  WinHttpAutoProxySvc - ok

04:35:57.0856 0x0e3c  [ 6B2A1D0E80110E3D04E6863C6E62FD8A, EE8BC7C378993EFE90273764C83119EBF331768CD7B24DE949233C74A51306C2 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

04:35:57.0887 0x0e3c  Winmgmt - ok

04:35:58.0028 0x0e3c  [ 7CFE68BDC065E55AA5E8421607037511, C2CE76D52AD4E31FC4216E94457DC16ABF65A5F3E883F0BD97AD387FB7574533 ] WinRM           C:\Windows\system32\WsmSvc.dll

04:35:58.0184 0x0e3c  WinRM - ok

04:35:58.0277 0x0e3c  [ C008405E4FEEB069E30DA1D823910234, C392A7B5FEACB7D11A3A231C1AD65D533984E6E7429ECD3BFBF90A27E8DEB157 ] Wlansvc         C:\Windows\System32\wlansvc.dll

04:35:58.0433 0x0e3c  Wlansvc - ok

04:35:58.0511 0x0e3c  [ 2E7255D172DF0B8283CDFB7B433B864E, 60C786CF0EA4A29B309B9457F0496D5A0AF1F093FC2C5D88078865814B7DBBA3 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

04:35:58.0542 0x0e3c  WmiAcpi - ok

04:35:58.0605 0x0e3c  [ 43BE3875207DCB62A85C8C49970B66CC, 27169F2E8A30807794407DA8F80611E4287F940AAE2A1F00F547901872FB9703 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

04:35:58.0636 0x0e3c  wmiApSrv - ok

04:35:58.0730 0x0e3c  [ 3978704576A121A9204F8CC49A301A9B, 936CC13B90A183613BDA4081556C96D48CA415B5F65D61E18CB5F2E51EEBE59F ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

04:35:58.0854 0x0e3c  WMPNetworkSvc - ok

04:35:58.0932 0x0e3c  [ CFC5A04558F5070CEE3E3A7809F3FF52, 45899E04000E21C4E009BE8B6149F199A5B2E0512C657A525770BF9DBFED7D2B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

04:35:58.0964 0x0e3c  WPCSvc - ok

04:35:59.0042 0x0e3c  [ 396D406292B0CD26E3504FFE82784702, 5F9015BB515AC13D4DFE8F4B532352CF2C5B61DEFD3D0D61BCD82C781D36E7AF ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

04:35:59.0073 0x0e3c  WPDBusEnum - ok

04:35:59.0135 0x0e3c  [ 0CEC23084B51B8288099EB710224E955, E1AAB1E08E1745313D0A149A645AA878148D2DBE5CCC23C4ECCFC5003945C22B ] WpdUsb          C:\Windows\system32\DRIVERS\wpdusb.sys

04:35:59.0166 0x0e3c  WpdUsb - ok

04:35:59.0494 0x0e3c  [ F8D3544ACBCE9110362119F7C10D848E, 31C49201A931751A36286874AC0B929D886F490D7CE48CCC9283850A56AD9FD9 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

04:35:59.0572 0x0e3c  WPFFontCache_v0400 - ok

04:35:59.0681 0x0e3c  [ E3A3CB253C0EC2494D4A61F5E43A389C, 10BA8B102E31B961819E524FCA5FA817B588EC77FB26B4E176D0A5CFF11EDF79 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

04:35:59.0697 0x0e3c  ws2ifsl - ok

04:35:59.0759 0x0e3c  [ 1CA6C40261DDC0425987980D0CD2AAAB, 727C1E3A170316641F832A8D197EDA6D6EE1206E4ED7B741E5A4017B7F2F7B88 ] wscsvc          C:\Windows\System32\wscsvc.dll

04:35:59.0775 0x0e3c  wscsvc - ok

04:35:59.0822 0x0e3c  [ 4422AC5ED8D4C2F0DB63E71D4C069DD7, B010DCC7B802C26A701A7DE1CA1B21D6B43D99FE88524D015C9228376B0BDA6E ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys

04:35:59.0853 0x0e3c  WSDPrintDevice - ok

04:35:59.0868 0x0e3c  WSearch - ok

04:35:59.0993 0x0e3c  [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D148979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv        C:\Windows\system32\wuaueng.dll

04:36:00.0165 0x0e3c  wuauserv - ok

04:36:00.0274 0x0e3c  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

04:36:00.0321 0x0e3c  WudfPf - ok

04:36:00.0352 0x0e3c  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

04:36:00.0368 0x0e3c  WUDFRd - ok

04:36:00.0430 0x0e3c  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

04:36:00.0524 0x0e3c  wudfsvc - ok

04:36:00.0555 0x0e3c  [ DAB33CFA9DD24251AAA389FF36B64D4B, 1C5D7C3D6C3552BDD52EB7E76031746D7DAAF64CA2432CC23329DA72BE7252D0 ] XAudio          C:\Windows\system32\DRIVERS\xaudio.sys

04:36:00.0586 0x0e3c  XAudio - ok

04:36:00.0633 0x0e3c  [ CD5F291A1161F15896D1A4D63DAFF5DF, 4F30DC454F255249431FCD14DE17858A79A088A4084F2CEDD0CF25382D427285 ] XAudioService   C:\Windows\system32\DRIVERS\xaudio.exe

04:36:00.0680 0x0e3c  XAudioService - ok

04:36:00.0758 0x0e3c  [ 1E41295EAC56589EFD9DC3CA14BF3FEC, E6CAB82BA2C8A4D40B7897D1E7B2A881B01609BE27F67CFBE435110B72F4E041 ] ZSMC301b        C:\Windows\system32\Drivers\usbVM31b.sys

04:36:00.0836 0x0e3c  ZSMC301b - ok

04:36:00.0914 0x0e3c  ================ Scan global ===============================

04:36:00.0945 0x0e3c  [ F31EEBC1A1C81FD04005489CC3DCDFE7, 098C35ACFCCE1686C5A6DB6057001CBF8B06A863A0802CB2E9D793F4795F8CEE ] C:\Windows\system32\basesrv.dll

04:36:01.0023 0x0e3c  [ 40864DA48A14EBC68A0D6BFD08BA21EB, EF311D4A937ADE53216949CB2E690582883C30B70BFCB89F82433CA2FBF1E24E ] C:\Windows\system32\winsrv.dll

04:36:01.0054 0x0e3c  [ 40864DA48A14EBC68A0D6BFD08BA21EB, EF311D4A937ADE53216949CB2E690582883C30B70BFCB89F82433CA2FBF1E24E ] C:\Windows\system32\winsrv.dll

04:36:01.0132 0x0e3c  [ D4E6D91C1349B7BFB3599A6ADA56851B, 8748091BF27F05D28D45688E04DD9229A4B2E159209A64F457703F66A8CECE4D ] C:\Windows\system32\services.exe

04:36:01.0163 0x0e3c  [ Global ] - ok

04:36:01.0163 0x0e3c  ================ Scan MBR ==================================

04:36:01.0179 0x0e3c  [ D072261DD7A14495CF381C4A95180706 ] \Device\Harddisk0\DR0

04:36:02.0474 0x0e3c  \Device\Harddisk0\DR0 - ok

04:36:02.0474 0x0e3c  ================ Scan VBR ==================================

04:36:02.0536 0x0e3c  [ CA152A1A549F8FDB8430C3CE7ABC8C84 ] \Device\Harddisk0\DR0\Partition1

04:36:02.0598 0x0e3c  \Device\Harddisk0\DR0\Partition1 - ok

04:36:02.0630 0x0e3c  [ E80314FF75ACE0E5C055F6D6C6F6CF1B ] \Device\Harddisk0\DR0\Partition2

04:36:02.0676 0x0e3c  \Device\Harddisk0\DR0\Partition2 - ok

04:36:02.0723 0x0e3c  [ 5F69C13D4A67A09645D0781E9D09FF42 ] \Device\Harddisk0\DR0\Partition3

04:36:02.0739 0x0e3c  \Device\Harddisk0\DR0\Partition3 - ok

04:36:02.0739 0x0e3c  ================ Scan generic autorun ======================

04:36:02.0879 0x0e3c  [ 9E35FF7F943AE0FB89192BFE058B7FD4, 54712A4FA296AE28CF834F90B77B2EEB69020E3D5B5CF24674BD8DACA25195B9 ] C:\Program Files\Windows Sidebar\Sidebar.exe

04:36:03.0004 0x0e3c  Sidebar - ok

04:36:03.0020 0x0e3c  WindowsWelcomeCenter - ok

04:36:03.0082 0x0e3c  [ 9E35FF7F943AE0FB89192BFE058B7FD4, 54712A4FA296AE28CF834F90B77B2EEB69020E3D5B5CF24674BD8DACA25195B9 ] C:\Program Files\Windows Sidebar\Sidebar.exe

04:36:03.0191 0x0e3c  Sidebar - ok

04:36:03.0191 0x0e3c  WindowsWelcomeCenter - ok

04:36:03.0207 0x0e3c  wscript - ok

04:36:03.0254 0x0e3c  Skype - ok

04:36:03.0300 0x0e3c  [ 9E35FF7F943AE0FB89192BFE058B7FD4, 54712A4FA296AE28CF834F90B77B2EEB69020E3D5B5CF24674BD8DACA25195B9 ] C:\Program Files\Windows Sidebar\Sidebar.exe

04:36:03.0410 0x0e3c  Sidebar - ok

04:36:03.0410 0x0e3c  WindowsWelcomeCenter - ok

04:36:03.0425 0x0e3c  Waiting for KSN requests completion. In queue: 96

04:36:04.0611 0x0e3c  AV detected via SS2: Avira Desktop, C:\Program Files\Antivir\Avira\AntiVir Desktop\wsctool.exe ( 15.0.13.202 ), 0x41010 ( enabled : outofdate )

04:36:04.0642 0x0e3c  Win FW state via NFP2: disabled ( trusted )

04:36:05.0048 0x0e3c  ============================================================

04:36:05.0048 0x0e3c  Scan finished

04:36:05.0048 0x0e3c  ============================================================

04:36:05.0048 0x1708  Detected object count: 0

04:36:05.0048 0x1708  Actual detected object count: 0