Trojaner-Board - Virus/Malware oder etwas anderes eingefangen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Virus/Malware oder etwas anderes eingefangen (https://www.trojaner-board.de/183438-virus-malware-etwas-anderes-eingefangen.html)

Neue FRST Logs posten

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016

durchgeführt von Alex (Administrator) auf DESKTOP-LR01EJK (11-12-2016 18:52:21)

Gestartet von C:\Users\Alex\Downloads

Geladene Profile: Alex (Verfügbare Profile: defaultuser0 & Alex)

Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe

(Scarlet.Crush Productions) D:\PS3 Controller\ScpServer\bin\ScpService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Electronic Arts) D:\Origin\OriginWebHelperService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

() C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-09-02] (Realtek Semiconductor)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-15] (Microsoft Corporation)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [798352 2016-09-22] (Sandboxie Holdings, LLC)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [Steam] => D:\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

AutoConfigURL: [S-1-5-21-4067737683-66589609-3790051880-1001] => hxxp://no-stops.com/wpad.dat?0b1f711134b3f8a667094f9e0257a60221637713

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{d3b14608-4b74-4114-97da-446aac2fb833}: [DhcpNameServer] 192.168.0.1

ManualProxies: 0hxxp://no-stops.com/wpad.dat?0b1f711134b3f8a667094f9e0257a60221637713
 

Internet Explorer:

==================

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-12-06] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)
 

FireFox:

========

FF DefaultProfile: a98suup4.default

FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\a98suup4.default [2016-12-11]

FF Homepage: Mozilla\Firefox\Profiles\a98suup4.default -> hxxp://www.google.at

FF Extension: (Adblock Plus) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\a98suup4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-05]

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-06] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-01] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-01] (NVIDIA Corporation)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\122587843.js [2016-12-07] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\122587843.cfg [2016-12-07] <==== ACHTUNG
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2016-09-06] ()

R2 AsRogAuraService; C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe [659416 2016-09-07] (ASUSTek Computer Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3073216 2016-10-30] (Microsoft Corporation)

R2 Ds3Service; D:\PS3 Controller\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)

R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-26] (Intel Corporation)

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-01] (NVIDIA Corporation)

R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)

S3 Origin Client Service; D:\Origin\OriginClientService.exe [2119688 2016-12-06] (Electronic Arts)

R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2180624 2016-12-06] (Electronic Arts)

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197264 2016-09-22] (Sandboxie Holdings, LLC)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-09-06] ()

R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [559080 2016-04-19] (Intel Corporation)

S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7bb3101ce32915cc\nvlddmkm.sys [14181304 2016-12-03] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)

S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [26560 2016-11-11] (Windows (R) Win 7 DDK provider)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [204944 2016-09-22] (Sandboxie Holdings, LLC)

R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [168080 2016-03-02] (Ray Hinchliffe)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

U0 aswVmm; kein ImagePath

S3 e1edc438-f640-4184-a443-d2a7c37a01dc; \??\c:\OA3_Scripts\MB_Tools\ASUS\690b33e1-0462-4e84-9bea-c7552b45432a.sys [X]

S3 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-11 14:43 - 2016-12-11 14:43 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job

2016-12-11 14:39 - 2016-12-11 16:04 - 07344400 _____ (AVAST Software) C:\Users\Alex\Downloads\avastclear.exe

2016-12-10 19:25 - 2016-12-10 19:25 - 00000065 _____ C:\Windows\wininit.ini

2016-12-10 19:23 - 2016-12-10 19:23 - 00001086 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk

2016-12-10 19:23 - 2016-12-10 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-12-10 19:23 - 2016-12-10 19:23 - 00000000 ____D C:\Program Files\VS Revo Group

2016-12-10 19:22 - 2016-12-10 19:23 - 07100088 _____ (VS Revo Group ) C:\Users\Alex\Downloads\revosetup201.exe

2016-12-10 18:31 - 2016-12-11 18:52 - 00012292 _____ C:\Users\Alex\Downloads\FRST.txt

2016-12-10 18:31 - 2016-12-11 18:52 - 00000000 ____D C:\FRST

2016-12-10 18:31 - 2016-12-10 19:36 - 00032519 _____ C:\Users\Alex\Downloads\Addition.txt

2016-12-10 18:30 - 2016-12-10 18:30 - 02420224 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe

2016-12-09 17:39 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2016-12-09 17:39 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2016-12-09 17:39 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-12-09 17:39 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2016-12-09 17:39 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll

2016-12-09 17:39 - 2016-11-11 11:09 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll

2016-12-09 17:39 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll

2016-12-09 17:39 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2016-12-09 17:39 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2016-12-09 17:39 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 02189152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-12-09 17:39 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 01738048 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 00658264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys

2016-12-09 17:39 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 00401760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys

2016-12-09 17:39 - 2016-11-11 10:59 - 02913136 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2016-12-09 17:39 - 2016-11-11 10:59 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2016-12-09 17:39 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2016-12-09 17:39 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 08170048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2016-12-09 17:39 - 2016-11-11 10:56 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00241496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe

2016-12-09 17:39 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll

2016-12-09 17:39 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-12-09 17:39 - 2016-11-11 10:51 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe

2016-12-09 17:39 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2016-12-09 17:39 - 2016-11-11 10:31 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2016-12-09 17:39 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll

2016-12-09 17:39 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll

2016-12-09 17:39 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe

2016-12-09 17:39 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-12-09 17:39 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe

2016-12-09 17:39 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe

2016-12-09 17:39 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys

2016-12-09 17:39 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll

2016-12-09 17:39 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll

2016-12-09 17:39 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys

2016-12-09 17:39 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe

2016-12-09 17:39 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe

2016-12-09 17:39 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll

2016-12-09 17:39 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll

2016-12-09 17:39 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe

2016-12-09 17:39 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe

2016-12-09 17:39 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe

2016-12-09 17:39 - 2016-11-11 10:20 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe

2016-12-09 17:39 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe

2016-12-09 17:39 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl

2016-12-09 17:39 - 2016-11-11 10:17 - 01004032 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll

2016-12-09 17:39 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-12-09 17:39 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll

2016-12-09 17:39 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2016-12-09 17:39 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2016-12-09 17:39 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll

2016-12-09 17:39 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 23678464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll

2016-12-09 17:39 - 2016-11-11 10:10 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-12-09 17:39 - 2016-11-11 10:10 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 05111296 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 08127488 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2016-12-09 17:39 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2016-12-09 17:39 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe

2016-12-09 17:39 - 2016-11-11 10:04 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe

2016-12-09 17:39 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2016-12-09 17:39 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2016-12-09 17:39 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2016-12-09 17:39 - 2016-11-11 10:01 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll

2016-12-09 17:39 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2016-12-09 17:39 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-12-09 17:39 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-12-09 17:39 - 2016-11-11 08:56 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll

2016-12-09 17:39 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll

2016-12-09 17:39 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 01503032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2016-12-09 17:39 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2016-12-09 17:39 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 06668032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll

2016-12-09 17:39 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2016-12-09 17:39 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe

2016-12-09 17:39 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2016-12-09 17:39 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-12-09 17:39 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe

2016-12-09 17:39 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe

2016-12-09 17:39 - 2016-11-11 08:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys

2016-12-09 17:39 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe

2016-12-09 17:39 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll

2016-12-09 17:39 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-12-09 17:39 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll

2016-12-09 17:39 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll

2016-12-09 17:39 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe

2016-12-09 17:39 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll

2016-12-09 17:39 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll

2016-12-09 17:39 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe

2016-12-09 17:39 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe

2016-12-09 17:39 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe

2016-12-09 17:39 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl

2016-12-09 17:39 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2016-12-09 17:39 - 2016-11-11 08:16 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2016-12-09 17:39 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 17:39 - 2016-11-11 08:16 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll

2016-12-09 17:39 - 2016-11-11 08:14 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-12-09 17:39 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll

2016-12-09 17:39 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll

2016-12-09 17:39 - 2016-11-11 08:13 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2016-12-09 17:39 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll

2016-12-09 17:39 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 03196416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll

2016-12-09 17:39 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe

2016-12-09 17:39 - 2016-11-11 08:06 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00873472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll

2016-12-09 17:39 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2016-12-09 17:39 - 2016-11-11 08:01 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys

2016-12-09 17:39 - 2016-11-11 07:40 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll

2016-12-09 17:38 - 2016-12-09 17:38 - 00000000 ____D C:\Users\Alex\Documents\ProcAlyzer Dumps

2016-12-09 17:11 - 2016-12-09 17:11 - 00000000 ____D C:\Program Files\Common Files\AV

2016-12-09 17:11 - 2016-12-09 17:11 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2016-12-09 17:08 - 2016-12-10 19:25 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2016-12-09 17:08 - 2016-12-09 17:08 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2016-12-08 14:55 - 2015-10-30 19:13 - 00549656 _____ C:\Users\Alex\Downloads\SGTA50015.bak

2016-12-08 14:55 - 2015-10-30 19:13 - 00549656 _____ C:\Users\Alex\Downloads\SGTA50015

2016-12-08 14:55 - 2015-05-07 01:06 - 00000236 _____ C:\Users\Alex\Downloads\Installation.txt

2016-12-08 14:52 - 2016-12-08 14:52 - 00537431 _____ C:\Users\Alex\Downloads\ac6092-100save61.rar

2016-12-07 21:12 - 2016-12-07 21:13 - 00324608 _____ (MyFHL) C:\Users\Alex\Downloads\FHL-BH-Editor.exe

2016-12-07 20:56 - 2016-12-07 20:57 - 04053928 _____ C:\Users\Alex\Downloads\BootsUpdate2016.zip

2016-12-07 20:42 - 2016-12-07 20:42 - 00000000 ____D C:\ProgramData\FFinder LTD

2016-12-07 20:34 - 2016-12-07 20:34 - 00000000 ____D C:\Program Files (x86)\Origin Games

2016-12-06 19:35 - 2016-12-06 19:35 - 00000000 ____D C:\Users\Alex\AppData\Local\Rockstar Games

2016-12-06 19:34 - 2016-12-07 13:46 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2016-12-06 19:34 - 2016-12-06 19:36 - 00000000 ____D C:\Users\Alex\Documents\Rockstar Games

2016-12-06 19:34 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2016-12-06 19:30 - 2016-12-06 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2016-12-06 18:00 - 2016-12-07 13:46 - 00000000 ____D C:\Program Files\Rockstar Games

2016-12-06 12:59 - 2016-12-06 12:59 - 00001510 _____ C:\Users\Alex\Desktop\GeForce Experience.lnk

2016-12-06 10:28 - 2016-12-06 10:28 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2016-12-06 10:28 - 2016-12-01 18:04 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2016-12-06 10:28 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll

2016-12-06 10:28 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll

2016-12-06 10:28 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2016-12-06 10:28 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe

2016-12-06 10:27 - 2016-12-01 21:02 - 34711096 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10912744 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10803880 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10354984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 09158432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 08762072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 02954808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 02587704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437619.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437619.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00975296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00683824 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00642576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00617880 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00573072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00439864 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00327224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2016-12-06 10:26 - 2016-12-01 21:02 - 40125496 _____ C:\Windows\system32\nvcompiler.dll

2016-12-06 10:26 - 2016-12-01 21:02 - 35222976 _____ C:\Windows\SysWOW64\nvcompiler.dll

2016-12-06 10:15 - 2016-12-06 11:59 - 00000000 ____D C:\Users\Alex\Documents\Overwatch

2016-12-06 10:15 - 2016-12-06 10:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\NVIDIA

2016-12-06 10:11 - 2016-11-17 14:45 - 00101824 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2016-12-06 10:11 - 2016-11-17 14:45 - 00091584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2016-12-06 09:44 - 2016-12-06 10:09 - 00000000 ____D C:\Users\Alex\Documents\FIFA 16

2016-12-06 09:40 - 2013-05-19 08:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys

2016-12-06 09:39 - 2013-01-07 15:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2016-12-06 09:39 - 2013-01-07 15:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll

2016-12-06 09:38 - 2016-12-06 09:38 - 10571443 _____ C:\Users\Alex\Downloads\SCP-DS-Driver-Package-1.2.0.160.7z

2016-12-06 09:38 - 2016-12-06 09:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2016-12-06 09:26 - 2016-12-06 09:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16

2016-12-06 08:58 - 2016-12-08 01:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Origin

2016-12-06 08:58 - 2016-12-06 08:59 - 00000000 ____D C:\Users\Alex\AppData\Local\Origin

2016-12-06 08:58 - 2016-12-06 08:58 - 00000000 ____D C:\Users\Alex\.QtWebEngineProcess

2016-12-06 08:58 - 2016-12-06 08:58 - 00000000 ____D C:\Users\Alex\.Origin

2016-12-06 08:53 - 2016-12-07 21:20 - 00000000 ____D C:\ProgramData\Origin

2016-12-06 08:53 - 2016-12-06 09:45 - 00000000 ____D C:\ProgramData\Electronic Arts

2016-12-06 08:53 - 2016-12-06 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

2016-12-05 21:46 - 2016-12-07 11:02 - 00000000 ____D C:\Program Files (x86)\Overwatch

2016-12-05 21:45 - 2016-12-08 14:12 - 00000000 ____D C:\Users\Alex\AppData\Local\Battle.net

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\Users\Alex\AppData\Local\Blizzard Entertainment

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\ProgramData\Blizzard Entertainment

2016-12-05 21:43 - 2016-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Battle.net

2016-12-05 21:43 - 2016-12-05 21:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Battle.net

2016-12-05 21:42 - 2016-12-05 21:43 - 00000000 ____D C:\ProgramData\Battle.net

2016-12-05 21:42 - 2016-12-05 21:42 - 03126768 _____ (Blizzard Entertainment) C:\Users\Alex\Downloads\Battle.net-Setup.exe

2016-12-05 21:28 - 2016-12-05 21:28 - 00000000 ____D C:\Users\Alex\Documents\My Games

2016-12-05 19:50 - 2016-12-05 19:50 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-05 16:35 - 2016-12-05 16:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RandyRants.com

2016-12-05 16:35 - 2016-12-05 16:35 - 00000000 ____D C:\Program Files (x86)\RandyRants.com

2016-12-05 16:28 - 2016-12-05 16:28 - 00000000 ____D C:\Users\Alex\AppData\Local\Steam

2016-12-05 16:25 - 2016-12-05 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-05 16:23 - 2016-12-05 16:23 - 01446792 _____ C:\Users\Alex\Downloads\SteamSetup.exe

2016-12-05 16:02 - 2016-12-05 16:02 - 00001292 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TERA-launcher.lnk

2016-12-05 15:44 - 2016-12-05 15:44 - 00000000 ____D C:\Users\Alex\AppData\Local\Solid State Networks

2016-12-05 15:22 - 2016-12-05 15:43 - 00000000 ____D C:\Program Files (x86)\TERA

2016-12-05 15:11 - 2016-12-07 13:48 - 00001852 _____ C:\Windows\Sandboxie.ini

2016-12-05 15:11 - 2016-12-05 15:11 - 00000000 ___RD C:\Sandbox

2016-12-05 15:11 - 2016-12-05 15:10 - 00000962 _____ C:\Users\Alex\Desktop\Sandboxed Web Browser.lnk

2016-12-05 15:10 - 2016-12-05 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie

2016-12-05 15:10 - 2016-12-05 15:10 - 00000000 ____D C:\Program Files\Sandboxie

2016-12-05 15:08 - 2016-12-05 15:08 - 01496584 _____ C:\Users\Alex\Downloads\Sandboxie - CHIP-Installer.exe

2016-12-05 15:08 - 2016-12-05 15:08 - 00000000 ____D C:\Users\Alex\AppData\Local\Downloaded Installations

2016-12-05 15:06 - 2016-12-11 16:06 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Mozilla

2016-12-05 15:05 - 2016-12-07 20:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-12-05 15:05 - 2016-12-05 16:33 - 00000000 ____D C:\Users\Alex\AppData\Local\Mozilla

2016-12-05 15:05 - 2016-12-05 15:06 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Mozilla

2016-12-05 15:05 - 2016-12-05 15:05 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2016-12-05 15:05 - 2016-12-05 15:05 - 00001223 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2016-12-05 15:05 - 2016-12-05 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-12-05 15:04 - 2016-12-05 15:04 - 00243696 _____ C:\Users\Alex\Downloads\Firefox Setup Stub 50.0.2.exe

2016-12-05 15:00 - 2016-12-05 15:00 - 00000000 ____D C:\Users\Alex\AppData\Local\CEF

2016-12-05 14:56 - 2016-12-11 16:05 - 00000000 ____D C:\Program Files\AVAST Software

2016-12-05 14:56 - 2016-12-05 14:56 - 06253640 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup_online.exe

2016-12-05 14:49 - 2016-12-11 16:17 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps

2016-12-05 14:48 - 2016-12-05 14:48 - 00000335 _____ C:\Users\Alex\Desktop\Computer.lnk

2016-12-05 14:45 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Macromedia

2016-12-05 14:45 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Intel Corporation

2016-12-05 14:44 - 2016-12-05 14:45 - 00002387 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-12-05 14:44 - 2016-12-05 14:45 - 00000000 ___RD C:\Users\Alex\OneDrive

2016-12-05 14:44 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Local\MicrosoftEdge

2016-12-05 14:44 - 2016-12-05 14:44 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype

2016-12-05 14:43 - 2016-12-05 15:19 - 00000000 ____D C:\Program Files (x86)\Razer

2016-12-05 14:43 - 2016-12-05 14:43 - 00000000 ____D C:\ProgramData\Razer

2016-12-05 14:42 - 2016-12-11 16:16 - 00000000 ____D C:\Users\Alex

2016-12-05 14:42 - 2016-12-09 17:14 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA Corporation

2016-12-05 14:42 - 2016-12-06 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA

2016-12-05 14:42 - 2016-12-05 15:31 - 00000000 ____D C:\Users\Alex\AppData\Local\Packages

2016-12-05 14:42 - 2016-12-05 15:21 - 00000000 ____D C:\Users\Alex\AppData\Local\ConnectedDevicesPlatform

2016-12-05 14:42 - 2016-12-05 14:42 - 00000020 ___SH C:\Users\Alex\ntuser.ini

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Vorlagen

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Startmenü

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Netzwerkumgebung

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Lokale Einstellungen

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Eigene Dateien

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Druckumgebung

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Videos

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Musik

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Bilder

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Verlauf

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Anwendungsdaten

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Anwendungsdaten

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Adobe

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\TileDataLayer

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\Publishers

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2016-12-05 14:41 - 2016-12-05 14:42 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\NVIDIA Corporation

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\NVIDIA

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform

2016-12-05 14:40 - 2016-12-05 14:40 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\My Documents

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Videos

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Pictures

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Music

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 ____D C:\Users\defaultuser0

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\My Documents

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Documents and Settings

2016-11-30 05:06 - 2016-03-02 10:54 - 00168080 _____ (Ray Hinchliffe) C:\Windows\system32\Drivers\SIVX64.sys

2016-11-16 22:20 - 2016-11-16 22:20 - 00000786 _____ C:\Users\Public\Desktop\AURA.lnk

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\Windows\System32\Tasks\ASUS

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\Program Files (x86)\ASUS

2016-11-16 22:20 - 2016-09-06 10:41 - 00028672 _____ (ASUSTek Computer Inc.) C:\Windows\SysWOW64\AsIO.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00015232 _____ C:\Windows\SysWOW64\Drivers\AsIO.sys

2016-11-16 22:12 - 2016-05-18 20:42 - 00405560 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe

2016-11-16 22:12 - 2016-05-18 20:42 - 00001904 ____N C:\Windows\system32\SetupBD.din

2016-11-16 22:09 - 2016-11-16 22:09 - 00000012 _____ C:\Windows\csup.txt

2016-11-16 22:09 - 2016-11-16 22:09 - 00000000 ____D C:\Windows\logo

2016-11-16 22:09 - 2016-05-10 10:13 - 00003130 _____ C:\Windows\system32\e1d65x64.din

2016-11-16 22:09 - 2016-04-19 23:18 - 00559080 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d65x64.sys

2016-11-16 22:09 - 2014-04-18 21:17 - 00125728 _____ (Intel Corporation) C:\Windows\system32\NicCo4.dll

2016-11-16 21:43 - 2016-12-06 18:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-11-16 21:43 - 2016-11-30 05:01 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2016-11-16 21:43 - 2016-11-17 19:57 - 00000000 ___HD C:\Program Files (x86)\Temp

2016-11-16 21:43 - 2016-11-17 19:57 - 00000000 ____D C:\Program Files (x86)\Realtek

2016-11-16 21:43 - 2016-11-16 21:43 - 00000000 ____D C:\Program Files\Realtek

2016-11-16 21:43 - 2016-09-02 13:13 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2016-11-16 21:43 - 2016-09-02 13:13 - 07019638 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT

2016-11-16 21:43 - 2016-09-02 13:13 - 05793528 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 05593616 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 05303304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2016-11-16 21:43 - 2016-09-02 13:13 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 03203592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 03133848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2016-11-16 21:43 - 2016-09-02 13:13 - 02071592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 01360520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00105312 _____ C:\Windows\system32\audioLibVc.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll

2016-11-16 21:42 - 2016-12-11 16:05 - 00000000 ____D C:\ProgramData\NVIDIA

2016-11-16 21:42 - 2016-12-06 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-06 10:27 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-06 10:11 - 00004000 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003972 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003936 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003910 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003748 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003706 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-01 18:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat

2016-11-16 21:42 - 2016-12-01 18:32 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00546752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2016-11-16 21:42 - 2016-11-30 10:34 - 07607057 _____ C:\Windows\system32\nvcoproc.bin

2016-11-16 21:42 - 2016-11-17 14:45 - 01854400 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01452480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2016-11-16 21:42 - 2016-11-11 00:51 - 00215608 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2016-11-16 21:42 - 2016-11-11 00:51 - 00203320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2016-11-16 21:41 - 2016-12-06 10:11 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-11-16 21:41 - 2016-12-01 21:02 - 28202040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 03934320 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 03474064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 00042296 _____ C:\Windows\system32\nvinfo.pb

2016-11-16 21:41 - 2016-11-17 14:45 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2016-11-16 21:41 - 2016-11-16 21:41 - 04970328 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2016-11-16 21:41 - 2016-11-16 21:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2016-11-16 21:41 - 2016-11-11 00:51 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437586.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437586.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 00469568 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 00026560 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\nvswcfilter.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json

2016-11-16 21:41 - 2016-11-11 00:51 - 00000669 _____ C:\Windows\system32\nv-vk64.json

2016-11-16 21:40 - 2016-12-05 14:39 - 00003118 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification

2016-11-16 21:40 - 2016-11-16 22:12 - 00000000 ____D C:\Program Files\Intel

2016-11-16 21:40 - 2016-11-16 21:41 - 00000000 ____D C:\Program Files (x86)\Intel

2016-11-16 21:40 - 2016-11-16 21:40 - 00000000 ____D C:\ProgramData\Intel

Code:

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-11 16:11 - 2016-08-22 21:18 - 00785362 _____ C:\Windows\system32\perfh007.dat

2016-12-11 16:11 - 2016-08-22 21:18 - 00175358 _____ C:\Windows\system32\perfc007.dat

2016-12-11 16:11 - 2016-08-22 20:55 - 02138258 _____ C:\Windows\system32\PerfStringBackup.INI

2016-12-11 16:05 - 2016-08-22 20:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-12-11 16:05 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI

2016-12-11 14:13 - 2016-08-22 20:45 - 00000000 ____D C:\Windows\system32\SleepStudy

2016-12-11 10:03 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache

2016-12-10 23:18 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\winrm

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\WCN

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\slmgr

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\winrm

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\F12

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\MUI

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\Com

2016-12-10 23:15 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\WCN

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\slmgr

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\F12

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\dsc

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\MiracastView

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\SystemResetPlatform

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\MUI

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\migwiz

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Com

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\PolicyDefinitions

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Help

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing

2016-12-10 23:10 - 2016-08-22 21:18 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\DiagSvcs

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\IME

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2016-12-10 14:38 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness

2016-12-09 22:55 - 2016-08-22 20:51 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-12-09 22:53 - 2016-08-22 20:45 - 00230168 _____ C:\Windows\system32\FNTCACHE.DAT

2016-12-09 22:53 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr

2016-12-09 17:22 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll

2016-12-09 17:13 - 2016-08-22 21:02 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-12-09 10:48 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-06 21:12 - 2016-08-22 21:01 - 00000000 ____D C:\Windows\system32\MRT

2016-12-06 21:11 - 2016-08-22 21:01 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-12-06 09:26 - 2016-08-22 21:13 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-06 08:53 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2016-12-06 08:41 - 2016-09-15 20:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-12-06 08:41 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-12-06 07:36 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\appcompat

2016-12-05 14:44 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports

2016-12-05 14:42 - 2016-09-15 20:48 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2016-12-05 14:42 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase

2016-12-05 14:39 - 2016-09-15 19:40 - 00002834 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task

2016-11-29 13:24 - 2016-08-22 21:13 - 00000000 ____D C:\Windows\Panther

2016-11-16 22:09 - 2016-07-16 12:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template
 

Einige Dateien in TEMP:

====================

C:\Users\Alex\AppData\Local\Temp\122603968.exe

C:\Users\Alex\AppData\Local\Temp\122690425.exe

C:\Users\Alex\AppData\Local\Temp\nvSCPAPI64.dll

C:\Users\Alex\AppData\Local\Temp\nvStInst.exe
 
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-08-22 20:45
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgeführt von Alex (11-12-2016 18:53:01)

Gestartet von C:\Users\Alex\Downloads

Windows 10 Home Version 1607 (X64) (2016-12-05 13:41:03)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4067737683-66589609-3790051880-500 - Administrator - Disabled)

Alex (S-1-5-21-4067737683-66589609-3790051880-1001 - Administrator - Enabled) => C:\Users\Alex

DefaultAccount (S-1-5-21-4067737683-66589609-3790051880-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-4067737683-66589609-3790051880-1000 - Limited - Disabled) => C:\Users\defaultuser0

Gast (S-1-5-21-4067737683-66589609-3790051880-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

Ansel (Version: 376.19 - NVIDIA Corporation) Hidden

AURA (HKLM-x32\...\{5899CD4F-8764-4303-A0D9-C60A62CFC24F}) (Version: 1.03.34 - ASUSTeK Computer Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.44.20513.9 - Electronic Arts)

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

Intel(R) Chipset Device Software (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)

Intel(R) Network Connections 21.0.504.0 (HKLM\...\PROSetDX) (Version: 21.0.504.0 - Intel)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)

Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2 - Mozilla)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.19 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)

NVIDIA Grafiktreiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.19 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden

NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7426.1015 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7926 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.0.1 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.1 - VS Revo Group, Ltd.)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix, Inc.)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.8 - Rockstar Games)

Sandboxie 5.14 (64-bit) (HKLM\...\Sandboxie) (Version: 5.14 - Sandboxie Holdings, LLC)

SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)

SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {23DB1194-2699-461E-BDE1-7ED8D79F8D60} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)

Task: {2F798073-5921-406F-BE8B-85C61F6BC84F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)

Task: {44EC7DA1-51BD-4D27-928D-5750E3B3B150} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)

Task: {5C7277B9-50B7-472F-9534-1761481675CC} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe [2016-09-07] ()

Task: {5D291C82-5CED-437E-9D9A-F24478400B02} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {78C2378C-4D38-4FC1-AE7C-F8CB2F3E5D8F} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe

Task: {7A58E8C9-2D9C-48AE-AA87-A169F19B13E1} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)

Task: {7D4A05D8-0F1E-466E-BF40-A8A0DF1450A7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

Task: {97DFDCA6-BF5B-4384-BDDB-9D205F66CE39} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

Task: {C3C96A71-1DCF-4722-90F8-AE05BBF66CB0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {C5A61984-B1AA-4801-9804-D566553A901F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)

Task: {CA3115CB-3822-45C6-8626-C353047C833B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {E3A16248-7583-482A-9A86-091F001453EC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {E72BE8EB-6098-476C-8B88-3EF5F21B342C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)

Task: {E7BD70D7-8F76-4896-9066-D23B698404B4} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2016-11-16 21:42 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-11-16 22:20 - 2016-09-07 02:43 - 00030680 _____ () C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll

2016-12-05 14:44 - 2016-12-05 14:44 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-09-15 20:31 - 2016-09-15 20:31 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00105312 _____ () C:\Windows\SYSTEM32\audioLibVc.dll

2016-12-05 15:32 - 2016-12-05 15:33 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-12-05 15:32 - 2016-12-05 15:33 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-12-05 15:32 - 2016-12-05 15:33 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-11-16 22:20 - 2016-12-11 16:05 - 00037160 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2016-11-16 22:20 - 2016-09-07 02:41 - 01746432 _____ () C:\Program Files (x86)\ASUS\AURA\Vender.dll

2016-11-16 22:20 - 2016-09-07 02:41 - 00073216 _____ () C:\Program Files (x86)\ASUS\AURA\ClaymoreProtocol.dll

2016-12-06 08:58 - 2016-12-06 08:58 - 02493440 _____ () D:\Origin\libGLESv2.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-16 21:42 - 2016-11-17 11:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node

2016-11-16 21:42 - 2016-11-17 11:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node

2016-11-16 21:42 - 2016-11-17 11:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node

2016-11-16 21:42 - 2016-11-17 11:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node

2016-11-16 21:42 - 2016-11-17 11:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node

2016-11-16 21:42 - 2016-11-17 11:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node

2016-11-16 21:42 - 2016-11-17 11:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node

2016-05-26 07:52 - 2016-05-26 07:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2016-07-16 12:47 - 2016-07-16 12:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\Control Panel\Desktop\\Wallpaper -> D:\Hintergründe\4164628-swiss-night-sky.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

HKLM\...\StartupApproved\Run: => "IAStorIcon"

HKLM\...\StartupApproved\Run: => "ShadowPlay"

HKLM\...\StartupApproved\Run32: => "SDTray"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "SandboxieControl"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [{5BF9D695-52CF-4FFF-8383-F9F25B747B60}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{BD33E3ED-C3D2-4F0D-A4CC-CCAC65D5BB2B}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{B8017C8F-5959-47BC-B2EA-D0755B290EB9}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{EF488DCF-834F-4D27-AD52-011C1690521F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{6083522A-0933-4AB6-8218-DE9EFDD26EDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{C1D677AB-2302-46C4-BFEC-6271F3442961}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{6ACA591E-6F67-4513-A449-0D9589E51C25}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{8AB570F1-EBF6-445C-91EC-7821ACF2D41C}] => D:\Steam\Steam.exe

FirewallRules: [{65902F1B-C346-42ED-9F8B-B0E203496A09}] => D:\Steam\Steam.exe

FirewallRules: [{8B5AAD3A-B21B-4751-8B2A-DC33433EE901}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe

FirewallRules: [{A4CEEC40-A1A6-41A1-ADD9-A8B91E5484E8}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe

FirewallRules: [TCP Query User{54A29375-0345-4477-A18F-EB9FE2C3823D}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe

FirewallRules: [UDP Query User{52D9FA87-64B9-4746-A77B-A6A4B38D9458}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe

FirewallRules: [TCP Query User{2CFC7F7E-46F7-456D-803D-9FFBD2165633}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [UDP Query User{1D98C62D-969C-4414-9681-CB78CEFA7893}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{7FE07775-C168-48AC-8B35-446B5FD01387}] => C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{A9EE4B31-AFF8-4B98-ABF1-19E973EA742F}] => C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{79C302DB-08A2-46A9-BC55-7511D697D80A}] => D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{BD77F7EE-CEB8-496B-AEE6-1550A633F760}] => D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/11/2016 04:17:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Name des fehlerhaften Moduls: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Ausnahmecode: 0xc000041d

Fehleroffset: 0x01323e28

ID des fehlerhaften Prozesses: 0x1e40

Startzeit der fehlerhaften Anwendung: 0x01d253c184b6938b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Berichtskennung: 6ed67925-8b92-42d7-bcd3-d8ce84cb9481

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2016 04:17:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Name des fehlerhaften Moduls: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Ausnahmecode: 0xc0000005

Fehleroffset: 0x01323e28

ID des fehlerhaften Prozesses: 0x1e40

Startzeit der fehlerhaften Anwendung: 0x01d253c184b6938b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Berichtskennung: b49cc07f-a448-467a-b624-b4ab67b51ae7

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2016 02:46:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:44:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:44:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 
 

Systemfehler:

=============

Error: (12/11/2016 04:05:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IOMap" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (12/11/2016 04:05:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/11/2016 04:05:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IOMap" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (12/11/2016 04:05:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Nal Service " wurde aufgrund folgenden Fehlers nicht gestartet: 

Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.
 

Error: (12/11/2016 02:47:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IOMap" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (12/11/2016 02:47:27 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/11/2016 02:47:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IOMap" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (12/11/2016 02:47:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Nal Service " wurde aufgrund folgenden Fehlers nicht gestartet: 

Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.
 

Error: (12/11/2016 02:46:54 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-LR01EJK)

Description: Fehler "1068" in DCOM, als der Dienst "netprofm" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{A47979D2-C419-11D9-A5B4-001185AD2B89}
 

Error: (12/11/2016 02:46:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der Abhängigkeitsdienst oder die Abhängigkeitsgruppe konnte nicht gestartet werden.
 
 

CodeIntegrity:

===================================

  Date: 2016-12-11 16:05:49.639

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-11 14:47:23.129

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-10 19:34:21.945

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-10 17:44:07.754

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 22:53:58.469

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 17:12:50.392

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 08:26:51.333

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-06 10:39:16.313

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-06 08:48:20.413

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
 

  Date: 2016-12-05 16:40:23.582

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 13%

Installierter physikalischer RAM: 16314.54 MB

Verfügbarer physikalischer RAM: 14150.25 MB

Summe virtueller Speicher: 18746.54 MB

Verfügbarer virtueller Speicher: 16113.65 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:222.86 GB) (Free:73.23 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (D1-P1) (Fixed) (Total:931.39 GB) (Free:908.24 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 223.6 GB) (Disk ID: FE63FFAE)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

1. scan MBAR

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.12.11.05

  rootkit: v2016.11.20.01
 

Windows 10 x64 NTFS

Internet Explorer 11.447.14393.0

Alex :: DESKTOP-LR01EJK [administrator]
 

11.12.2016 19:31:10

mbar-log-2016-12-11 (19-31-10).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 308186

Time elapsed: 6 minute(s), 14 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 4

C:\Users\Alex\AppData\Local\Temp\06a0-f9c4-9ca7-7af5 (Adware.FileFinder) -> Delete on reboot. [12ff45a1970375c15794f6ad0df34cb4]

C:\Users\Alex\AppData\Local\Temp\122603968.exe (Adware.FileFinder) -> Delete on reboot. [71a038ae52482d091dce148fe719c23e]

C:\Users\Alex\AppData\Local\Temp\122690425.exe (Adware.FileFinder) -> Delete on reboot. [70a1a1455a401b1bd01b307334cc08f8]

C:\Users\Alex\AppData\Local\Temp\2ed1-ea9f-38fe-6bb0\uninstall.exe (Adware.FileFinder) -> Delete on reboot. [fc152eb80397b482707ba300857b9b65]
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

2. scan MBAR

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.12.11.05

  rootkit: v2016.11.20.01
 

Windows 10 x64 NTFS

Internet Explorer 11.447.14393.0

Alex :: DESKTOP-LR01EJK [administrator]
 

11.12.2016 19:39:45

mbar-log-2016-12-11 (19-39-45).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 307704

Time elapsed: 5 minute(s), 52 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

TDSS Killer:

Code:

19:47:09.0614 0x1338  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01

19:47:09.0614 0x1338  UEFI system

19:47:13.0397 0x1338  ============================================================

19:47:13.0397 0x1338  Current date / time: 2016/12/11 19:47:13.0397

19:47:13.0397 0x1338  SystemInfo:

19:47:13.0397 0x1338  

19:47:13.0397 0x1338  OS Version: 10.0.14393 ServicePack: 0.0

19:47:13.0397 0x1338  Product type: Workstation

19:47:13.0397 0x1338  ComputerName: DESKTOP-LR01EJK

19:47:13.0397 0x1338  UserName: Alex

19:47:13.0397 0x1338  Windows directory: C:\Windows

19:47:13.0397 0x1338  System windows directory: C:\Windows

19:47:13.0397 0x1338  Running under WOW64

19:47:13.0397 0x1338  Processor architecture: Intel x64

19:47:13.0397 0x1338  Number of processors: 8

19:47:13.0397 0x1338  Page size: 0x1000

19:47:13.0397 0x1338  Boot type: Normal boot

19:47:13.0397 0x1338  CodeIntegrityOptions = 0x0000C001

19:47:13.0397 0x1338  ============================================================

19:47:13.0430 0x1338  KLMD registered as C:\Windows\system32\drivers\78420733.sys

19:47:13.0430 0x1338  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.479, osProperties = 0x19

19:47:13.0804 0x1338  System UUID: {B33FE6E8-9144-307E-6ADB-31FCB4EC2062}

19:47:14.0112 0x1338  Drive \Device\Harddisk0\DR0 - Size: 0x37E4896000 ( 223.57 Gb ), SectorSize: 0x200, Cylinders: 0x7201, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

19:47:14.0565 0x1338  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

19:47:14.0926 0x1338  ============================================================

19:47:14.0926 0x1338  \Device\Harddisk0\DR0:

19:47:14.0926 0x1338  GPT partitions:

19:47:14.0927 0x1338  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {245E362E-47E9-4909-BC2F-6649B3A811C7}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000

19:47:14.0927 0x1338  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {15C72A0F-77B0-467D-A3B0-0770D9618DFF}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000

19:47:14.0927 0x1338  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {E507B531-8A9B-4AC2-BAF1-5F121089C285}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x1BDB7800

19:47:14.0927 0x1338  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {899696A6-A978-4EAD-81AF-934501969F62}, Name: Basic data partition, StartLBA 0x1BE2A000, BlocksNum 0xFA000

19:47:14.0927 0x1338  MBR partitions:

19:47:14.0927 0x1338  \Device\Harddisk1\DR1:

19:47:14.0927 0x1338  GPT partitions:

19:47:14.0927 0x1338  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {0293B41B-61ED-415E-BD9D-1EAF3BCFBE78}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000

19:47:14.0927 0x1338  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {D5D5364E-3417-4B55-8BE9-FA1B399C6817}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000

19:47:14.0927 0x1338  MBR partitions:

19:47:14.0927 0x1338  ============================================================

19:47:14.0929 0x1338  C: <-> \Device\Harddisk0\DR0\Partition3

19:47:14.0941 0x1338  D: <-> \Device\Harddisk1\DR1\Partition2

19:47:14.0941 0x1338  ============================================================

19:47:14.0941 0x1338  Initialize success

19:47:14.0941 0x1338  ============================================================

19:48:50.0297 0x18dc  ============================================================

19:48:50.0297 0x18dc  Scan started

19:48:50.0297 0x18dc  Mode: Manual; SigCheck; TDLFS; 

19:48:50.0297 0x18dc  ============================================================

19:48:50.0297 0x18dc  KSN ping started

19:48:50.0359 0x18dc  KSN ping finished: true

19:48:50.0625 0x18dc  ================ Scan system memory ========================

19:48:50.0625 0x18dc  System memory - ok

19:48:50.0625 0x18dc  ================ Scan services =============================

19:48:50.0656 0x18dc  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys

19:48:50.0687 0x18dc  1394ohci - ok

19:48:50.0703 0x18dc  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\Windows\system32\drivers\3ware.sys

19:48:50.0703 0x18dc  3ware - ok

19:48:50.0719 0x18dc  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys

19:48:50.0734 0x18dc  ACPI - ok

19:48:50.0734 0x18dc  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\Windows\System32\drivers\AcpiDev.sys

19:48:50.0750 0x18dc  AcpiDev - ok

19:48:50.0766 0x18dc  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys

19:48:50.0766 0x18dc  acpiex - ok

19:48:50.0766 0x18dc  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys

19:48:50.0781 0x18dc  acpipagr - ok

19:48:50.0781 0x18dc  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys

19:48:50.0812 0x18dc  AcpiPmi - ok

19:48:50.0812 0x18dc  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys

19:48:50.0828 0x18dc  acpitime - ok

19:48:50.0844 0x18dc  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS

19:48:50.0859 0x18dc  ADP80XX - ok

19:48:50.0875 0x18dc  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD             C:\Windows\system32\drivers\afd.sys

19:48:50.0891 0x18dc  AFD - ok

19:48:50.0891 0x18dc  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys

19:48:50.0922 0x18dc  ahcache - ok

19:48:50.0922 0x18dc  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll

19:48:50.0937 0x18dc  AJRouter - ok

19:48:50.0937 0x18dc  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\Windows\System32\alg.exe

19:48:50.0969 0x18dc  ALG - ok

19:48:50.0969 0x18dc  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\Windows\System32\drivers\amdk8.sys

19:48:50.0984 0x18dc  AmdK8 - ok

19:48:51.0000 0x18dc  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys

19:48:51.0016 0x18dc  AmdPPM - ok

19:48:51.0016 0x18dc  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

19:48:51.0016 0x18dc  amdsata - ok

19:48:51.0031 0x18dc  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

19:48:51.0031 0x18dc  amdsbs - ok

19:48:51.0031 0x18dc  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\Windows\system32\drivers\amdxata.sys

19:48:51.0047 0x18dc  amdxata - ok

19:48:51.0047 0x18dc  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\Windows\system32\drivers\appid.sys

19:48:51.0047 0x18dc  AppID - ok

19:48:51.0062 0x18dc  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\Windows\System32\appidsvc.dll

19:48:51.0078 0x18dc  AppIDSvc - ok

19:48:51.0094 0x18dc  [ 73FAA5517CCD1332F00192A303CF2026, 75636222BFF381A3EECA010752DF7DC1603A395B91FF7FBF92127B5CA8EFFEE5 ] Appinfo         C:\Windows\System32\appinfo.dll

19:48:51.0109 0x18dc  Appinfo - ok

19:48:51.0109 0x18dc  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\Windows\system32\drivers\applockerfltr.sys

19:48:51.0141 0x18dc  applockerfltr - ok

19:48:51.0141 0x18dc  [ A0746EF6C5AB7A17A67BC167167499C1, 1D2154D3AFC5219293EDD508C7726E7756FB72BF04F73861C575D1FE5C553411 ] AppReadiness    C:\Windows\system32\AppReadiness.dll

19:48:51.0172 0x18dc  AppReadiness - ok

19:48:51.0203 0x18dc  [ 6F34FD381EB64ED66A1A34C7F18F1CE2, 530D7913B4E361A6E15ACE09EB2AE7B9B92940C18F7E45776ECB9685719C780D ] AppXSvc         C:\Windows\system32\appxdeploymentserver.dll

19:48:51.0250 0x18dc  AppXSvc - ok

19:48:51.0266 0x18dc  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

19:48:51.0266 0x18dc  arcsas - ok

19:48:51.0281 0x18dc  [ BBF8F831C7720DD5135D8C4C8325187A, 2630C68200D7BD49A5772830D6B369C0EC337C2558A9562DD564DF042249ECC0 ] asComSvc        C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

19:48:51.0312 0x18dc  asComSvc - ok

19:48:51.0312 0x18dc  [ 798DE15F187C1F013095BBBEB6FB6197, 436CCAB6F62FA2D29827916E054ADE7ACAE485B3DE1D3E5C6C62D3DEBF1480E7 ] AsIO            C:\Windows\syswow64\drivers\AsIO.sys

19:48:51.0328 0x18dc  AsIO - ok

19:48:51.0344 0x18dc  [ 2A406837E07A9B6BC3BAAC70467548B1, 3D0C0519DF6D66786E73D52D8C2A43E7DD8F4E792DB50A47D0916E6FFFBC4D95 ] AsRogAuraService C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe

19:48:51.0359 0x18dc  AsRogAuraService - ok

19:48:51.0359 0x18dc  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys

19:48:51.0375 0x18dc  AsyncMac - ok

19:48:51.0375 0x18dc  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\Windows\system32\drivers\atapi.sys

19:48:51.0391 0x18dc  atapi - ok

19:48:51.0391 0x18dc  [ 59F44051BCD479E70446506B7E4E78BB, CB58E55196EC702DC85916F963A3C16D429C141391F9AA7F415BD63E7328C4C6 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll

19:48:51.0406 0x18dc  AudioEndpointBuilder - ok

19:48:51.0422 0x18dc  [ 1C986DC8F4FDA1B040AC1176FB24467F, DEDA2FF4D0369348C2A74D29FB08AC86219BBCFDF44C59339BC39A25AE0727EB ] Audiosrv        C:\Windows\System32\Audiosrv.dll

19:48:51.0453 0x18dc  Audiosrv - ok

19:48:51.0453 0x18dc  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

19:48:51.0484 0x18dc  AxInstSV - ok

19:48:51.0484 0x18dc  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

19:48:51.0500 0x18dc  b06bdrv - ok

19:48:51.0500 0x18dc  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys

19:48:51.0531 0x18dc  BasicDisplay - ok

19:48:51.0531 0x18dc  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys

19:48:51.0547 0x18dc  BasicRender - ok

19:48:51.0547 0x18dc  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\Windows\System32\drivers\bcmfn.sys

19:48:51.0562 0x18dc  bcmfn - ok

19:48:51.0562 0x18dc  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys

19:48:51.0578 0x18dc  bcmfn2 - ok

19:48:51.0578 0x18dc  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\Windows\System32\bdesvc.dll

19:48:51.0609 0x18dc  BDESVC - ok

19:48:51.0609 0x18dc  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\Windows\system32\drivers\Beep.sys

19:48:51.0625 0x18dc  Beep - ok

19:48:51.0641 0x18dc  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\Windows\System32\bfe.dll

19:48:51.0672 0x18dc  BFE - ok

19:48:51.0688 0x18dc  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\Windows\System32\qmgr.dll

19:48:51.0719 0x18dc  BITS - ok

19:48:51.0734 0x18dc  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

19:48:51.0750 0x18dc  bowser - ok

19:48:51.0766 0x18dc  [ 2447BD15B41298622CC662249CD0F496, 013A326D2E3BF68D654BBABE2F1E5DF0FF0A153A4B95D570EE28F9BC0F5A78C3 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll

19:48:51.0797 0x18dc  BrokerInfrastructure - ok

19:48:51.0797 0x18dc  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\Windows\System32\browser.dll

19:48:51.0828 0x18dc  Browser - ok

19:48:51.0828 0x18dc  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys

19:48:51.0844 0x18dc  BthAvrcpTg - ok

19:48:51.0844 0x18dc  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys

19:48:51.0859 0x18dc  BthHFEnum - ok

19:48:51.0859 0x18dc  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys

19:48:51.0875 0x18dc  bthhfhid - ok

19:48:51.0875 0x18dc  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll

19:48:51.0906 0x18dc  BthHFSrv - ok

19:48:51.0906 0x18dc  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys

19:48:51.0922 0x18dc  BTHMODEM - ok

19:48:51.0922 0x18dc  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv         C:\Windows\system32\bthserv.dll

19:48:51.0953 0x18dc  bthserv - ok

19:48:51.0953 0x18dc  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys

19:48:51.0969 0x18dc  buttonconverter - ok

19:48:51.0969 0x18dc  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\Windows\System32\drivers\capimg.sys

19:48:51.0984 0x18dc  CapImg - ok

19:48:52.0000 0x18dc  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

19:48:52.0016 0x18dc  cdfs - ok

19:48:52.0016 0x18dc  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\Windows\System32\CDPSvc.dll

19:48:52.0047 0x18dc  CDPSvc - ok

19:48:52.0047 0x18dc  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll

19:48:52.0063 0x18dc  CDPUserSvc - ok

19:48:52.0063 0x18dc  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\Windows\System32\drivers\cdrom.sys

19:48:52.0078 0x18dc  cdrom - ok

19:48:52.0078 0x18dc  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] CertPropSvc     C:\Windows\System32\certprop.dll

19:48:52.0109 0x18dc  CertPropSvc - ok

19:48:52.0109 0x18dc  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\Windows\system32\drivers\cht4sx64.sys

19:48:52.0125 0x18dc  cht4iscsi - ok

19:48:52.0156 0x18dc  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\Windows\System32\drivers\cht4vx64.sys

19:48:52.0188 0x18dc  cht4vbd - ok

19:48:52.0188 0x18dc  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\Windows\System32\drivers\circlass.sys

19:48:52.0203 0x18dc  circlass - ok

19:48:52.0219 0x18dc  [ 39591D8510CEC3BA6ED4330EE689B791, E827DEA20AB338308D6E4EEFEF551088088B77CD10BF08C8BE568090E04172E2 ] CLFS            C:\Windows\system32\drivers\CLFS.sys

19:48:52.0219 0x18dc  CLFS - ok

19:48:52.0281 0x18dc  [ 4B6F8B7BFDB04916CC11F07114ABC4B0, E2D9FB4D23231943FF8B3AC8EA87B194F965197EA1C25186733AAF034F4EE33A ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe

19:48:52.0313 0x18dc  ClickToRunSvc - ok

19:48:52.0328 0x18dc  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\Windows\System32\ClipSVC.dll

19:48:52.0344 0x18dc  ClipSVC - ok

19:48:52.0359 0x18dc  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\Windows\System32\drivers\registry.sys

19:48:52.0375 0x18dc  clreg - ok

19:48:52.0375 0x18dc  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys

19:48:52.0391 0x18dc  CmBatt - ok

19:48:52.0406 0x18dc  [ 3E502EB1701CF54CF237B6250FBE38EA, E63F6F45D3990ACBCA96003F67C83697BA5B74B89F972C5E9CC45F90D05519FF ] CNG             C:\Windows\system32\Drivers\cng.sys

19:48:52.0422 0x18dc  CNG - ok

19:48:52.0422 0x18dc  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\Windows\system32\DRIVERS\cnghwassist.sys

19:48:52.0422 0x18dc  cnghwassist - ok

19:48:52.0438 0x18dc  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys

19:48:52.0453 0x18dc  CompositeBus - ok

19:48:52.0453 0x18dc  COMSysApp - ok

19:48:52.0453 0x18dc  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\Windows\system32\drivers\condrv.sys

19:48:52.0453 0x18dc  condrv - ok

19:48:52.0469 0x18dc  [ 99F910BE9520B7AED8ED670F1E268CBD, 486920B98DC9B1D6C653141B05F5B26D4BF2C45454B6DEC92EF3419B0A2DF2B1 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll

19:48:52.0484 0x18dc  CoreMessagingRegistrar - ok

19:48:52.0484 0x18dc  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

19:48:52.0516 0x18dc  CryptSvc - ok

19:48:52.0516 0x18dc  [ 039B5A8CBD5C75D1C46DF15F7C74D136, A5C8A41F2D406D37E147939F2058373ED091BFCC00CA7E829F887638CD3A2F64 ] dam             C:\Windows\system32\drivers\dam.sys

19:48:52.0516 0x18dc  dam - ok

19:48:52.0531 0x18dc  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\Windows\system32\rpcss.dll

19:48:52.0563 0x18dc  DcomLaunch - ok

19:48:52.0563 0x18dc  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\Windows\system32\dcpsvc.dll

19:48:52.0594 0x18dc  DcpSvc - ok

19:48:52.0594 0x18dc  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\Windows\System32\defragsvc.dll

19:48:52.0625 0x18dc  defragsvc - ok

19:48:52.0641 0x18dc  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\Windows\system32\das.dll

19:48:52.0656 0x18dc  DeviceAssociationService - ok

19:48:52.0672 0x18dc  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll

19:48:52.0688 0x18dc  DeviceInstall - ok

19:48:52.0688 0x18dc  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll

19:48:52.0719 0x18dc  DevQueryBroker - ok

19:48:52.0719 0x18dc  [ 0D1D392ED2597F295956D058D33BD7C3, 2F7FE5A06D880F9E2A46C9803DD249DC40C2898C04E946D14E7EECCCC9F2B24F ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys

19:48:52.0750 0x18dc  Dfsc - ok

19:48:52.0750 0x18dc  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\Windows\system32\dhcpcore.dll

19:48:52.0781 0x18dc  Dhcp - ok

19:48:52.0781 0x18dc  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

19:48:52.0813 0x18dc  diagnosticshub.standardcollector.service - ok

19:48:52.0844 0x18dc  [ CAD14E0AD1F03397E9B1C8733D76BEF4, 0035EF35F6520B1DF0E599C8A06D4163C52576BCE0976BF729B44DECDC506627 ] DiagTrack       C:\Windows\system32\diagtrack.dll

19:48:52.0891 0x18dc  DiagTrack - ok

19:48:52.0906 0x18dc  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\Windows\system32\drivers\disk.sys

19:48:52.0906 0x18dc  disk - ok

19:48:52.0922 0x18dc  [ 09CF47A74BFB480B8262FCEE222004B6, F5CD0ACA04BCB95984595CC2E17BC9E92865091A0A3BCAD4B06438A1570E7696 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll

19:48:52.0938 0x18dc  DmEnrollmentSvc - ok

19:48:52.0938 0x18dc  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys

19:48:52.0953 0x18dc  dmvsc - ok

19:48:52.0953 0x18dc  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll

19:48:52.0985 0x18dc  dmwappushservice - ok

19:48:52.0985 0x18dc  [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache        C:\Windows\System32\dnsrslvr.dll

19:48:53.0000 0x18dc  Dnscache - ok

19:48:53.0016 0x18dc  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\Windows\System32\dot3svc.dll

19:48:53.0031 0x18dc  dot3svc - ok

19:48:53.0047 0x18dc  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\Windows\system32\dps.dll

19:48:53.0063 0x18dc  DPS - ok

19:48:53.0078 0x18dc  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\Windows\system32\DRIVERS\drmkaud.sys

19:48:53.0078 0x18dc  drmkaud - ok

19:48:53.0531 0x18dc  [ CC8C8479B0C9FC6803B6905D99158FE4, 9D701773C8BDEAB044FF98D16D530B8402837D0CAAF848F9CCFB96A2931B58E9 ] Ds3Service      D:\PS3 Controller\ScpServer\bin\ScpService.exe

19:48:53.0547 0x18dc  Ds3Service - detected UnsignedFile.Multi.Generic ( 1 )

19:48:53.0641 0x18dc  Ds3Service ( UnsignedFile.Multi.Generic ) - warning

19:48:53.0735 0x18dc  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll

19:48:53.0750 0x18dc  DsmSvc - ok

19:48:53.0766 0x18dc  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\Windows\System32\DsSvc.dll

19:48:53.0781 0x18dc  DsSvc - ok

19:48:53.0813 0x18dc  [ D218D4D333A959F1003D5A57A4B6F34E, F25DD186F97AE5C09DFC13C10B19E590EC6FFCB6BE19C54B25C7FC5FF24A56AE ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

19:48:53.0844 0x18dc  DXGKrnl - ok

19:48:53.0860 0x18dc  [ E063D7568233B6B007A6B18BE3751861, A0352D03B5B73EB219E57B9550D3D7CE41D07A70D8ED43E3AC2BBCE1E6684CE2 ] e1dexpress      C:\Windows\system32\DRIVERS\e1d65x64.sys

19:48:53.0875 0x18dc  e1dexpress - ok

19:48:53.0891 0x18dc  e1edc438-f640-4184-a443-d2a7c37a01dc - ok

19:48:53.0891 0x18dc  [ 83E4A14F851341C933C3235BFB882ECA, 152EDEF6B566D010FE519FE4B046050A5281069B48AFF8A2395D7D2BD0519701 ] e1iexpress      C:\Windows\System32\drivers\e1i63x64.sys

19:48:53.0922 0x18dc  e1iexpress - ok

19:48:53.0922 0x18dc  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\Windows\System32\eapsvc.dll

19:48:53.0953 0x18dc  EapHost - ok

19:48:54.0000 0x18dc  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\Windows\system32\drivers\evbda.sys

19:48:54.0047 0x18dc  ebdrv - ok

19:48:54.0047 0x18dc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS             C:\Windows\System32\lsass.exe

19:48:54.0063 0x18dc  EFS - ok

19:48:54.0063 0x18dc  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys

19:48:54.0078 0x18dc  EhStorClass - ok

19:48:54.0078 0x18dc  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys

19:48:54.0078 0x18dc  EhStorTcgDrv - ok

19:48:54.0094 0x18dc  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll

19:48:54.0110 0x18dc  embeddedmode - ok

19:48:54.0110 0x18dc  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc       C:\Windows\system32\EnterpriseAppMgmtSvc.dll

19:48:54.0125 0x18dc  EntAppSvc - ok

19:48:54.0125 0x18dc  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\Windows\System32\drivers\errdev.sys

19:48:54.0141 0x18dc  ErrDev - ok

19:48:54.0157 0x18dc  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\Windows\system32\es.dll

19:48:54.0188 0x18dc  EventSystem - ok

19:48:54.0188 0x18dc  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\Windows\system32\drivers\exfat.sys

19:48:54.0203 0x18dc  exfat - ok

19:48:54.0219 0x18dc  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat         C:\Windows\system32\drivers\fastfat.sys

19:48:54.0219 0x18dc  fastfat - ok

19:48:54.0235 0x18dc  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\Windows\system32\fxssvc.exe

19:48:54.0282 0x18dc  Fax - ok

19:48:54.0282 0x18dc  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\Windows\System32\drivers\fdc.sys

19:48:54.0297 0x18dc  fdc - ok

19:48:54.0297 0x18dc  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\Windows\system32\fdPHost.dll

19:48:54.0313 0x18dc  fdPHost - ok

19:48:54.0313 0x18dc  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\Windows\system32\fdrespub.dll

19:48:54.0344 0x18dc  FDResPub - ok

19:48:54.0344 0x18dc  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\Windows\system32\fhsvc.dll

19:48:54.0360 0x18dc  fhsvc - ok

19:48:54.0360 0x18dc  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\Windows\system32\drivers\filecrypt.sys

19:48:54.0391 0x18dc  FileCrypt - ok

19:48:54.0391 0x18dc  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

19:48:54.0391 0x18dc  FileInfo - ok

19:48:54.0391 0x18dc  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

19:48:54.0422 0x18dc  Filetrace - ok

19:48:54.0422 0x18dc  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys

19:48:54.0438 0x18dc  flpydisk - ok

19:48:54.0438 0x18dc  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

19:48:54.0453 0x18dc  FltMgr - ok

19:48:54.0485 0x18dc  [ 49BF5C8182C3D2D6CD9F7EEDF1CFDB66, 0977EBE86B57FC370D27CA69D58122397D5D5369AF0C8DBCC492AE7AD55CBA2B ] FontCache       C:\Windows\system32\FntCache.dll

19:48:54.0532 0x18dc  FontCache - ok

19:48:54.0532 0x18dc  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

19:48:54.0547 0x18dc  FontCache3.0.0.0 - ok

19:48:54.0547 0x18dc  [ 8B52024D3A5C3A12F1C4D75D30A976C5, 982F1C783966C9A6D255AA7DBAB6D225EBE0050A36176B8DE85E8ADBFE17FDF1 ] FrameServer     C:\Windows\system32\FrameServer.dll

19:48:54.0594 0x18dc  FrameServer - ok

19:48:54.0594 0x18dc  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

19:48:54.0594 0x18dc  FsDepends - ok

19:48:54.0594 0x18dc  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

19:48:54.0610 0x18dc  Fs_Rec - ok

19:48:54.0610 0x18dc  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

19:48:54.0625 0x18dc  fvevol - ok

19:48:54.0641 0x18dc  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys

19:48:54.0657 0x18dc  gencounter - ok

19:48:54.0657 0x18dc  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys

19:48:54.0672 0x18dc  genericusbfn - ok

19:48:54.0672 0x18dc  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys

19:48:54.0688 0x18dc  GPIOClx0101 - ok

19:48:54.0703 0x18dc  [ 713A176494CEC107E663CAD6C2B27F77, 76871D8CFBA8FCD8CFF96208AE84C658EBEC60270D978898B90EE9451AA1BCE1 ] gpsvc           C:\Windows\System32\gpsvc.dll

19:48:54.0750 0x18dc  gpsvc - ok

19:48:54.0750 0x18dc  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys

19:48:54.0766 0x18dc  GpuEnergyDrv - ok

19:48:54.0766 0x18dc  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys

19:48:54.0797 0x18dc  HdAudAddService - ok

19:48:54.0797 0x18dc  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys

19:48:54.0813 0x18dc  HDAudBus - ok

19:48:54.0813 0x18dc  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys

19:48:54.0829 0x18dc  HidBatt - ok

19:48:54.0829 0x18dc  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\Windows\System32\drivers\hidbth.sys

19:48:54.0844 0x18dc  HidBth - ok

19:48:54.0844 0x18dc  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys

19:48:54.0860 0x18dc  hidi2c - ok

19:48:54.0860 0x18dc  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys

19:48:54.0860 0x18dc  hidinterrupt - ok

19:48:54.0860 0x18dc  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\Windows\System32\drivers\hidir.sys

19:48:54.0875 0x18dc  HidIr - ok

19:48:54.0891 0x18dc  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\Windows\system32\hidserv.dll

19:48:54.0907 0x18dc  hidserv - ok

19:48:54.0907 0x18dc  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\Windows\System32\drivers\hidusb.sys

19:48:54.0922 0x18dc  HidUsb - ok

19:48:54.0938 0x18dc  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

19:48:54.0953 0x18dc  HomeGroupListener - ok

19:48:54.0969 0x18dc  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

19:48:54.0985 0x18dc  HomeGroupProvider - ok

19:48:55.0000 0x18dc  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

19:48:55.0000 0x18dc  HpSAMD - ok

19:48:55.0016 0x18dc  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

19:48:55.0047 0x18dc  HTTP - ok

19:48:55.0047 0x18dc  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\Windows\System32\hvhostsvc.dll

19:48:55.0063 0x18dc  HvHost - ok

19:48:55.0063 0x18dc  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice       C:\Windows\system32\drivers\hvservice.sys

19:48:55.0079 0x18dc  hvservice - ok

19:48:55.0079 0x18dc  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

19:48:55.0079 0x18dc  hwpolicy - ok

19:48:55.0079 0x18dc  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys

19:48:55.0094 0x18dc  hyperkbd - ok

19:48:55.0094 0x18dc  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys

19:48:55.0125 0x18dc  i8042prt - ok

19:48:55.0125 0x18dc  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\Windows\System32\drivers\iagpio.sys

19:48:55.0141 0x18dc  iagpio - ok

19:48:55.0141 0x18dc  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\Windows\System32\drivers\iai2c.sys

19:48:55.0157 0x18dc  iai2c - ok

19:48:55.0157 0x18dc  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys

19:48:55.0172 0x18dc  iaLPSS2i_GPIO2 - ok

19:48:55.0172 0x18dc  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\Windows\System32\drivers\iaLPSS2i_I2C.sys

19:48:55.0188 0x18dc  iaLPSS2i_I2C - ok

19:48:55.0188 0x18dc  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys

19:48:55.0188 0x18dc  iaLPSSi_GPIO - ok

19:48:55.0204 0x18dc  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\Windows\System32\drivers\iaLPSSi_I2C.sys

19:48:55.0219 0x18dc  iaLPSSi_I2C - ok

19:48:55.0235 0x18dc  [ 5C9AAE902452EF47D8C9EA5838E666B9, 9171558EE78B555312FD8D99EDF85849A4CDE87142EB91DB9E8AF92A1DDF664E ] iaStorA         C:\Windows\system32\drivers\iaStorA.sys

19:48:55.0266 0x18dc  iaStorA - ok

19:48:55.0282 0x18dc  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys

19:48:55.0282 0x18dc  iaStorAV - ok

19:48:55.0297 0x18dc  [ 31BD488EE7F6ED608A7418F6A7C6948D, BB7DC889C0F73FDE089FC0E52D321F29CBB5A65A3D9F90B0B3A730EF938B6178 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

19:48:55.0297 0x18dc  IAStorDataMgrSvc - ok

19:48:55.0297 0x18dc  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

19:48:55.0313 0x18dc  iaStorV - ok

19:48:55.0329 0x18dc  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\Windows\System32\drivers\ibbus.sys

19:48:55.0344 0x18dc  ibbus - ok

19:48:55.0344 0x18dc  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\Windows\System32\tetheringservice.dll

19:48:55.0360 0x18dc  icssvc - ok

19:48:55.0375 0x18dc  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\Windows\System32\ikeext.dll

19:48:55.0422 0x18dc  IKEEXT - ok

19:48:55.0422 0x18dc  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\Windows\System32\drivers\IndirectKmd.sys

19:48:55.0438 0x18dc  IndirectKmd - ok

19:48:55.0516 0x18dc  [ EE5BAA695F61E5EB8977FBDEB0BED0A5, 638D4053AA8C01C202528E89657E385E69BE6AF82159D8D303B4A519D4DF9A5C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

19:48:55.0594 0x18dc  IntcAzAudAddService - ok

19:48:55.0610 0x18dc  [ AE32376564771525DCDD2F0280619E1A, 233B7B272DCD9080DE7C9593EB7993745D1037EA87B69617E7176F074DFD5968 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

19:48:55.0750 0x18dc  Intel(R) Capability Licensing Service TCP IP Interface - ok

19:48:55.0750 0x18dc  [ C62883CF7A273ABE2220035DA37117DA, 7A7FB8413F51C9324DA864A758CF7D52AD2857C7FF182A352EB743E19B9CF0D7 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe

19:48:55.0766 0x18dc  Intel(R) PROSet Monitoring Service - ok

19:48:55.0782 0x18dc  [ 56BA2118E48D0BBB980ADAA830220C1D, 88FF0A1E7A87D1B50F90D3088436BE91CFEC6BB3B888EB536D6537468DDC8C29 ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

19:48:55.0797 0x18dc  Intel(R) Security Assist - detected UnsignedFile.Multi.Generic ( 1 )

19:48:55.0875 0x18dc  Detect skipped due to KSN trusted

19:48:55.0875 0x18dc  Intel(R) Security Assist - ok

19:48:55.0875 0x18dc  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\Windows\system32\drivers\intelide.sys

19:48:55.0891 0x18dc  intelide - ok

19:48:55.0891 0x18dc  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\Windows\system32\drivers\intelpep.sys

19:48:55.0891 0x18dc  intelpep - ok

19:48:55.0891 0x18dc  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\Windows\System32\drivers\intelppm.sys

19:48:55.0907 0x18dc  intelppm - ok

19:48:55.0907 0x18dc  IOMap - ok

19:48:55.0922 0x18dc  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\Windows\system32\drivers\iorate.sys

19:48:55.0922 0x18dc  iorate - ok

19:48:55.0922 0x18dc  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

19:48:55.0938 0x18dc  IpFilterDriver - ok

19:48:55.0954 0x18dc  [ EF1BB0EF8A12C32DD88C409706B8145E, 7AEDE717C258C29592CC8AEC40F61617E5382646E5141E1C0941882ACE5C5758 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

19:48:56.0000 0x18dc  iphlpsvc - ok

19:48:56.0000 0x18dc  [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys

19:48:56.0000 0x18dc  IPMIDRV - ok

19:48:56.0016 0x18dc  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

19:48:56.0032 0x18dc  IPNAT - ok

19:48:56.0032 0x18dc  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\Windows\system32\drivers\irda.sys

19:48:56.0047 0x18dc  irda - ok

19:48:56.0047 0x18dc  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

19:48:56.0063 0x18dc  IRENUM - ok

19:48:56.0063 0x18dc  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\Windows\System32\irmon.dll

19:48:56.0079 0x18dc  irmon - ok

19:48:56.0079 0x18dc  [ 8CA2C261AB69D0195BED81E58EDF167D, B192B7E42543C277BF8F6D48649DA4C121E6C23BDD0B51A973BA7A2D95525478 ] isaHelperSvc    C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe

19:48:56.0094 0x18dc  isaHelperSvc - detected UnsignedFile.Multi.Generic ( 1 )

19:48:56.0157 0x18dc  Detect skipped due to KSN trusted

19:48:56.0157 0x18dc  isaHelperSvc - ok

19:48:56.0157 0x18dc  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

19:48:56.0157 0x18dc  isapnp - ok

19:48:56.0172 0x18dc  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys

19:48:56.0172 0x18dc  iScsiPrt - ok

19:48:56.0188 0x18dc  [ 025A4E7D215B3ECF28D12BAE1C54889D, 3F678A9871CA7680D2B455031A57ACB74CCA9076C908A678A88735C8BD192FCE ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

19:48:56.0188 0x18dc  jhi_service - ok

19:48:56.0188 0x18dc  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys

19:48:56.0204 0x18dc  kbdclass - ok

19:48:56.0204 0x18dc  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys

19:48:56.0219 0x18dc  kbdhid - ok

19:48:56.0219 0x18dc  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\Windows\System32\drivers\kdnic.sys

19:48:56.0235 0x18dc  kdnic - ok

19:48:56.0235 0x18dc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\Windows\system32\lsass.exe

19:48:56.0235 0x18dc  KeyIso - ok

19:48:56.0251 0x18dc  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

19:48:56.0251 0x18dc  KSecDD - ok

19:48:56.0251 0x18dc  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

19:48:56.0266 0x18dc  KSecPkg - ok

19:48:56.0266 0x18dc  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

19:48:56.0282 0x18dc  ksthunk - ok

19:48:56.0297 0x18dc  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\Windows\system32\msdtckrm.dll

19:48:56.0313 0x18dc  KtmRm - ok

19:48:56.0329 0x18dc  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\Windows\system32\srvsvc.dll

19:48:56.0344 0x18dc  LanmanServer - ok

19:48:56.0344 0x18dc  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

19:48:56.0360 0x18dc  LanmanWorkstation - ok

19:48:56.0376 0x18dc  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\Windows\System32\lfsvc.dll

19:48:56.0391 0x18dc  lfsvc - ok

19:48:56.0391 0x18dc  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll

19:48:56.0422 0x18dc  LicenseManager - ok

19:48:56.0422 0x18dc  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\Windows\system32\drivers\lltdio.sys

19:48:56.0438 0x18dc  lltdio - ok

19:48:56.0438 0x18dc  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

19:48:56.0469 0x18dc  lltdsvc - ok

19:48:56.0469 0x18dc  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\Windows\System32\lmhsvc.dll

19:48:56.0485 0x18dc  lmhosts - ok

19:48:56.0485 0x18dc  [ B77C2CCB7C1BC3836B3AB5644E63739E, 917749905E68FEE0D8A5752F77CC4EB313990875B02387D294029F9FC5E4ADD0 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

19:48:56.0501 0x18dc  LMS - ok

19:48:56.0501 0x18dc  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

19:48:56.0516 0x18dc  LSI_SAS - ok

19:48:56.0516 0x18dc  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\Windows\system32\drivers\lsi_sas2i.sys

19:48:56.0516 0x18dc  LSI_SAS2i - ok

19:48:56.0532 0x18dc  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\Windows\system32\drivers\lsi_sas3i.sys

19:48:56.0532 0x18dc  LSI_SAS3i - ok

19:48:56.0532 0x18dc  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys

19:48:56.0547 0x18dc  LSI_SSS - ok

19:48:56.0547 0x18dc  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM             C:\Windows\System32\lsm.dll

19:48:56.0579 0x18dc  LSM - ok

19:48:56.0579 0x18dc  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\Windows\system32\drivers\luafv.sys

19:48:56.0594 0x18dc  luafv - ok

19:48:56.0610 0x18dc  [ CAAF0CD70FEE7C5110B1E62804E41B17, 48482A6C8D2296C4DC613304637C8DBB7DD1DB39326F27650EBCA6FD2793BCFD ] MapsBroker      C:\Windows\System32\moshost.dll

19:48:56.0610 0x18dc  MapsBroker - ok

19:48:56.0626 0x18dc  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\Windows\system32\drivers\megasas.sys

19:48:56.0626 0x18dc  megasas - ok

19:48:56.0626 0x18dc  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\Windows\system32\drivers\MegaSas2i.sys

19:48:56.0626 0x18dc  megasas2i - ok

19:48:56.0641 0x18dc  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\Windows\system32\drivers\megasr.sys

19:48:56.0657 0x18dc  megasr - ok

19:48:56.0657 0x18dc  [ 220B49994DCFAC3BB242A8C3047E58A2, B01EA1751CE80E357DB643938F603DAE11A7F88B7B1187D769C5A3209A932E64 ] MEIx64          C:\Windows\System32\drivers\TeeDriverW8x64.sys

19:48:56.0672 0x18dc  MEIx64 - ok

19:48:56.0688 0x18dc  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\Windows\System32\MessagingService.dll

19:48:56.0704 0x18dc  MessagingService - ok

19:48:56.0719 0x18dc  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys

19:48:56.0735 0x18dc  mlx4_bus - ok

19:48:56.0735 0x18dc  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\Windows\system32\drivers\mmcss.sys

19:48:56.0751 0x18dc  MMCSS - ok

19:48:56.0751 0x18dc  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem           C:\Windows\system32\drivers\modem.sys

19:48:56.0766 0x18dc  Modem - ok

19:48:56.0766 0x18dc  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\Windows\System32\drivers\monitor.sys

19:48:56.0782 0x18dc  monitor - ok

19:48:56.0782 0x18dc  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\Windows\System32\drivers\mouclass.sys

19:48:56.0797 0x18dc  mouclass - ok

19:48:56.0797 0x18dc  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\Windows\System32\drivers\mouhid.sys

19:48:56.0813 0x18dc  mouhid - ok

19:48:56.0813 0x18dc  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

19:48:56.0829 0x18dc  mountmgr - ok

19:48:56.0829 0x18dc  [ 7AAFF443581F9B6F86CDF761ED0A437D, 6E159C875F5666E6D17C58628EEAF79818697355AFE213CE778BD3FEA04248C0 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

19:48:56.0829 0x18dc  MozillaMaintenance - ok

19:48:56.0844 0x18dc  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

19:48:56.0860 0x18dc  mpsdrv - ok

19:48:56.0876 0x18dc  [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc          C:\Windows\system32\mpssvc.dll

19:48:56.0907 0x18dc  MpsSvc - ok

19:48:56.0907 0x18dc  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

19:48:56.0938 0x18dc  MRxDAV - ok

19:48:56.0938 0x18dc  [ E671EDAB0726E05ECEF4058B4CD73C4D, 9F4C50E635CE2204E3291C8D3D7F658A969E80722B8B6F0304228D9B434C20EA ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

19:48:56.0954 0x18dc  mrxsmb - ok

19:48:56.0954 0x18dc  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

19:48:56.0985 0x18dc  mrxsmb10 - ok

19:48:56.0985 0x18dc  [ 93A77008A8932FC84A173C4E97E52874, B7510CF7998C538D68BD2ECDC512A0BFC7CB7362F598EE4110F728427AFF0F5A ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

19:48:56.0985 0x18dc  mrxsmb20 - ok

19:48:57.0001 0x18dc  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\Windows\system32\drivers\bridge.sys

19:48:57.0016 0x18dc  MsBridge - ok

19:48:57.0016 0x18dc  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\Windows\System32\msdtc.exe

19:48:57.0032 0x18dc  MSDTC - ok

19:48:57.0047 0x18dc  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

19:48:57.0063 0x18dc  Msfs - ok

19:48:57.0063 0x18dc  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys

19:48:57.0063 0x18dc  msgpiowin32 - ok

19:48:57.0063 0x18dc  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

19:48:57.0094 0x18dc  mshidkmdf - ok

19:48:57.0094 0x18dc  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys

19:48:57.0110 0x18dc  mshidumdf - ok

19:48:57.0110 0x18dc  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

19:48:57.0110 0x18dc  msisadrv - ok

19:48:57.0110 0x18dc  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

19:48:57.0141 0x18dc  MSiSCSI - ok

19:48:57.0141 0x18dc  msiserver - ok

19:48:57.0141 0x18dc  [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV         C:\Windows\system32\DRIVERS\MSKSSRV.sys

19:48:57.0157 0x18dc  MSKSSRV - ok

19:48:57.0157 0x18dc  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\Windows\system32\drivers\mslldp.sys

19:48:57.0172 0x18dc  MsLldp - ok

19:48:57.0188 0x18dc  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys

19:48:57.0204 0x18dc  MSPCLOCK - ok

19:48:57.0204 0x18dc  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\Windows\system32\DRIVERS\MSPQM.sys

19:48:57.0219 0x18dc  MSPQM - ok

19:48:57.0219 0x18dc  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

19:48:57.0235 0x18dc  MsRPC - ok

19:48:57.0235 0x18dc  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys

19:48:57.0251 0x18dc  mssmbios - ok

19:48:57.0251 0x18dc  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\Windows\system32\DRIVERS\MSTEE.sys

19:48:57.0266 0x18dc  MSTEE - ok

19:48:57.0266 0x18dc  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys

19:48:57.0282 0x18dc  MTConfig - ok

19:48:57.0282 0x18dc  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup             C:\Windows\system32\Drivers\mup.sys

19:48:57.0282 0x18dc  Mup - ok

19:48:57.0297 0x18dc  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\Windows\system32\drivers\mvumis.sys

19:48:57.0297 0x18dc  mvumis - ok

19:48:57.0297 0x18dc  [ A43715BB2C8B54AE841F4FED6AB27649, 6C0A8D072BF621850262C8EC82A9F3351F8F346100BEF3DA2C11FA458B4D15B9 ] NAL             C:\Windows\system32\Drivers\iqvw64e.sys

19:48:57.0313 0x18dc  NAL - ok

19:48:57.0329 0x18dc  [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

19:48:57.0360 0x18dc  NativeWifiP - ok

19:48:57.0360 0x18dc  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\Windows\System32\ncasvc.dll

19:48:57.0391 0x18dc  NcaSvc - ok

19:48:57.0391 0x18dc  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\Windows\System32\ncbservice.dll

19:48:57.0423 0x18dc  NcbService - ok

19:48:57.0423 0x18dc  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll

19:48:57.0438 0x18dc  NcdAutoSetup - ok

19:48:57.0438 0x18dc  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys

19:48:57.0454 0x18dc  ndfltr - ok

19:48:57.0469 0x18dc  [ D5564FC81350458ED570528C4E3B1CCF, DD3C5012492EF9BCE3BE635BBB3AA40B3C5F5FDBD795A76B327D9C994102AC2B ] NDIS            C:\Windows\system32\drivers\ndis.sys

19:48:57.0501 0x18dc  NDIS - ok

19:48:57.0501 0x18dc  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\Windows\system32\drivers\ndiscap.sys

19:48:57.0516 0x18dc  NdisCap - ok

19:48:57.0516 0x18dc  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys

19:48:57.0532 0x18dc  NdisImPlatform - ok

19:48:57.0532 0x18dc  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

19:48:57.0563 0x18dc  NdisTapi - ok

19:48:57.0563 0x18dc  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\Windows\system32\drivers\ndisuio.sys

19:48:57.0579 0x18dc  Ndisuio - ok

19:48:57.0579 0x18dc  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys

19:48:57.0594 0x18dc  NdisVirtualBus - ok

19:48:57.0594 0x18dc  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\Windows\System32\drivers\ndiswan.sys

19:48:57.0610 0x18dc  NdisWan - ok

19:48:57.0626 0x18dc  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\Windows\system32\DRIVERS\ndiswan.sys

19:48:57.0641 0x18dc  ndiswanlegacy - ok

19:48:57.0641 0x18dc  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\Windows\system32\DRIVERS\NDProxy.sys

19:48:57.0657 0x18dc  ndproxy - ok

19:48:57.0657 0x18dc  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\Windows\system32\drivers\Ndu.sys

19:48:57.0673 0x18dc  Ndu - ok

19:48:57.0673 0x18dc  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys

19:48:57.0704 0x18dc  NetAdapterCx - ok

19:48:57.0704 0x18dc  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\Windows\system32\drivers\netbios.sys

19:48:57.0704 0x18dc  NetBIOS - ok

19:48:57.0719 0x18dc  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

19:48:57.0735 0x18dc  NetBT - ok

19:48:57.0735 0x18dc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\Windows\system32\lsass.exe

19:48:57.0751 0x18dc  Netlogon - ok

19:48:57.0751 0x18dc  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\Windows\System32\netman.dll

19:48:57.0766 0x18dc  Netman - ok

19:48:57.0782 0x18dc  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\Windows\System32\netprofmsvc.dll

19:48:57.0813 0x18dc  netprofm - ok

19:48:57.0813 0x18dc  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc     C:\Windows\System32\NetSetupSvc.dll

19:48:57.0844 0x18dc  NetSetupSvc - ok

19:48:57.0844 0x18dc  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:48:57.0860 0x18dc  NetTcpPortSharing - ok

19:48:57.0860 0x18dc  [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll

19:48:57.0891 0x18dc  NgcCtnrSvc - ok

19:48:57.0907 0x18dc  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\Windows\system32\ngcsvc.dll

19:48:57.0938 0x18dc  NgcSvc - ok

19:48:57.0954 0x18dc  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\Windows\System32\nlasvc.dll

19:48:57.0969 0x18dc  NlaSvc - ok

19:48:57.0969 0x18dc  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

19:48:57.0985 0x18dc  Npfs - ok

19:48:57.0985 0x18dc  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys

19:48:58.0016 0x18dc  npsvctrig - ok

19:48:58.0016 0x18dc  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\Windows\system32\nsisvc.dll

19:48:58.0032 0x18dc  nsi - ok

19:48:58.0032 0x18dc  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

19:48:58.0048 0x18dc  nsiproxy - ok

19:48:58.0079 0x18dc  [ DB69C6DA8B3DDFDC547D455CA23A8250, AE495CEB18924C8B21F7F150FF17CD00880F2E222D7B5155661798E0535D63C4 ] NTFS            C:\Windows\system32\drivers\NTFS.sys

19:48:58.0126 0x18dc  NTFS - ok

19:48:58.0126 0x18dc  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\Windows\system32\drivers\Null.sys

19:48:58.0157 0x18dc  Null - ok

19:48:58.0173 0x18dc  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

19:48:58.0173 0x18dc  NvContainerLocalSystem - ok

19:48:58.0188 0x18dc  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

19:48:58.0188 0x18dc  NvContainerNetworkService - ok

19:48:58.0204 0x18dc  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

19:48:58.0204 0x18dc  NVHDA - ok

19:48:58.0219 0x18dc  [ 0B7CFF94C247E661A9D5F7FDAB2F726B, 16D651A50347131CC6B96EB17096EFB22F9767572964E6C12CA1BF928E6C1397 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

19:48:58.0235 0x18dc  NVIDIA Wireless Controller Service - ok

19:48:58.0454 0x18dc  [ E79DD58B356C597B4E287389A64E729D, AB18B0AF985B0C49C063C2D0D137A7A6EFCD323C2044A5DBD8C85FC455D180FB ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7bb3101ce32915cc\nvlddmkm.sys

19:48:58.0626 0x18dc  nvlddmkm - ok

19:48:58.0641 0x18dc  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

19:48:58.0641 0x18dc  nvraid - ok

19:48:58.0641 0x18dc  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\Windows\system32\drivers\nvstor.sys

19:48:58.0657 0x18dc  nvstor - ok

19:48:58.0657 0x18dc  [ 5FA3A8CE5BAA23E2C9D18EA154017BC4, 6C2B0546FB9D8A4C7A747AB776BB98C8A90D2745FA0D293FA63DABBF67C7ED58 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

19:48:58.0657 0x18dc  NvStreamKms - ok

19:48:58.0673 0x18dc  [ F9F912215C57ECAEBEF2A00DDB25A225, DAC1616CF76482B585C8A2D0E52DF2BA23CC86421374353F568C706A99457269 ] NvStUSB         C:\Windows\System32\drivers\nvstusb.sys

19:48:58.0673 0x18dc  NvStUSB - ok

19:48:58.0673 0x18dc  [ D0860F3EBB023BB26AAA5D462349CF6A, CCDFAD208A8E9CFF5DE1C7A415AFD65FA2932ACB71BFACD95A36FC0263EE6795 ] NVSWCFilter     C:\Windows\System32\drivers\nvswcfilter.sys

19:48:58.0688 0x18dc  NVSWCFilter - ok

19:48:58.0688 0x18dc  [ 1D54A108BFAD4ED568E393518769F516, D0BE8343784DDD2B7CADFC85779CC72C78D49601E9C746D13D8134CE38DD920F ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys

19:48:58.0688 0x18dc  nvvad_WaveExtensible - ok

19:48:58.0704 0x18dc  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\Windows\System32\APHostService.dll

19:48:58.0720 0x18dc  OneSyncSvc - ok

19:48:58.0813 0x18dc  [ AD851D818F399DD946A9C17AB2156F22, 4A541E7A3A3164581BFB9080DE0976E18F6DD00E39458EBBCBD3B2445708BEB5 ] Origin Client Service D:\Origin\OriginClientService.exe

19:48:58.0876 0x18dc  Origin Client Service - ok

19:48:58.0923 0x18dc  [ 788363C87EBD90AC1EAD2DC5A9A40759, B565663B459414C5C9F81451D9A127D62CDF605BC2A9E686F74A2E4FD44A9B43 ] Origin Web Helper Service D:\Origin\OriginWebHelperService.exe

19:48:58.0954 0x18dc  Origin Web Helper Service - ok

19:48:58.0954 0x18dc  [ 90488CE0BF08D3FCCF090E9A3CD16945, 7ACEACCEDAD2D25CB79689E4F6A2840AACA743ADA078371D7C9225A1C4C12DE3 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

19:48:58.0970 0x18dc  ose - ok

19:48:58.0970 0x18dc  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

19:48:59.0001 0x18dc  p2pimsvc - ok

19:48:59.0001 0x18dc  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\Windows\system32\p2psvc.dll

19:48:59.0032 0x18dc  p2psvc - ok

19:48:59.0032 0x18dc  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\Windows\System32\drivers\parport.sys

19:48:59.0048 0x18dc  Parport - ok

19:48:59.0063 0x18dc  [ CDBD029BAEC8D09F6FBD404632D9AF28, 71F4401150CD4C9C6BBF2DA854CF07EA2F8C9BBE900833858F49134DDAF14414 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

19:48:59.0063 0x18dc  partmgr - ok

19:48:59.0079 0x18dc  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\Windows\System32\pcasvc.dll

19:48:59.0079 0x18dc  PcaSvc - ok

19:48:59.0095 0x18dc  [ E2DD2E5BDCCD225670831B439826065B, 0153F1CE26D402C03CFC155F428EBA04D6EA8E19A28AF629B1CE347363B7697C ] pci             C:\Windows\system32\drivers\pci.sys

19:48:59.0095 0x18dc  pci - ok

19:48:59.0110 0x18dc  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\Windows\system32\drivers\pciide.sys

19:48:59.0110 0x18dc  pciide - ok

19:48:59.0110 0x18dc  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

19:48:59.0126 0x18dc  pcmcia - ok

19:48:59.0126 0x18dc  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\Windows\system32\drivers\pcw.sys

19:48:59.0126 0x18dc  pcw - ok

19:48:59.0126 0x18dc  [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc             C:\Windows\system32\drivers\pdc.sys

19:48:59.0141 0x18dc  pdc - ok

19:48:59.0157 0x18dc  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

19:48:59.0188 0x18dc  PEAUTH - ok

19:48:59.0188 0x18dc  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\Windows\system32\drivers\percsas2i.sys

19:48:59.0188 0x18dc  percsas2i - ok

19:48:59.0188 0x18dc  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\Windows\system32\drivers\percsas3i.sys

19:48:59.0204 0x18dc  percsas3i - ok

19:48:59.0204 0x18dc  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

19:48:59.0235 0x18dc  PerfHost - ok

19:48:59.0251 0x18dc  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\Windows\System32\PhoneService.dll

19:48:59.0282 0x18dc  PhoneSvc - ok

19:48:59.0282 0x18dc  [ B4AB2C0177715FFAED88A1223212043A, 1920792ADC78DD51EF98B6A9634D686EAED0848FB7EF74A0DCD3AEBA5AF41EC6 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll

19:48:59.0313 0x18dc  PimIndexMaintenanceSvc - ok

19:48:59.0329 0x18dc  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\Windows\system32\pla.dll

19:48:59.0376 0x18dc  pla - ok

19:48:59.0376 0x18dc  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

19:48:59.0391 0x18dc  PlugPlay - ok

19:48:59.0391 0x18dc  [ 48FEC6E1A1171DFE9633FD628C99B548, 8211CE48677CEEFFB17C857F112205FC104B56D4798EC2133C55B9BB3328D03F ] PNPMEM          C:\Windows\System32\drivers\pnpmem.sys

19:48:59.0407 0x18dc  PNPMEM - ok

19:48:59.0407 0x18dc  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

19:48:59.0423 0x18dc  PNRPAutoReg - ok

19:48:59.0438 0x18dc  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

19:48:59.0454 0x18dc  PNRPsvc - ok

19:48:59.0454 0x18dc  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

19:48:59.0485 0x18dc  PolicyAgent - ok

19:48:59.0485 0x18dc  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\Windows\system32\umpo.dll

19:48:59.0501 0x18dc  Power - ok

19:48:59.0501 0x18dc  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys

19:48:59.0516 0x18dc  PptpMiniport - ok

19:48:59.0579 0x18dc  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll

19:48:59.0657 0x18dc  PrintNotify - ok

19:48:59.0673 0x18dc  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\Windows\System32\drivers\processr.sys

19:48:59.0673 0x18dc  Processor - ok

19:48:59.0688 0x18dc  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc         C:\Windows\system32\profsvc.dll

19:48:59.0720 0x18dc  ProfSvc - ok

19:48:59.0720 0x18dc  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\Windows\system32\drivers\pacer.sys

19:48:59.0720 0x18dc  Psched - ok

19:48:59.0735 0x18dc  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\Windows\system32\qwave.dll

19:48:59.0751 0x18dc  QWAVE - ok

19:48:59.0767 0x18dc  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

19:48:59.0782 0x18dc  QWAVEdrv - ok

19:48:59.0782 0x18dc  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

19:48:59.0798 0x18dc  RasAcd - ok

19:48:59.0798 0x18dc  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\Windows\System32\drivers\AgileVpn.sys

19:48:59.0813 0x18dc  RasAgileVpn - ok

19:48:59.0813 0x18dc  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\Windows\System32\rasauto.dll

19:48:59.0829 0x18dc  RasAuto - ok

19:48:59.0845 0x18dc  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\Windows\System32\drivers\rasl2tp.sys

19:48:59.0860 0x18dc  Rasl2tp - ok

19:48:59.0860 0x18dc  [ F79BFB5588B777C71734C1D1EC129D07, 9B9D70EC8978AAC19B2B94694EE1B9957C13DFDDFCBE8AA82C5F0D0EA04CDBDF ] RasMan          C:\Windows\System32\rasmans.dll

19:48:59.0892 0x18dc  RasMan - ok

19:48:59.0892 0x18dc  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\Windows\System32\drivers\raspppoe.sys

19:48:59.0907 0x18dc  RasPppoe - ok

19:48:59.0907 0x18dc  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\Windows\System32\drivers\rassstp.sys

19:48:59.0923 0x18dc  RasSstp - ok

19:48:59.0938 0x18dc  [ AF6963414B820B7C45578ED3300438A7, C00F60FD72608E6983D32642768AECE891DD816FADFA7B872BA88091C16B95D7 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

19:48:59.0954 0x18dc  rdbss - ok

19:48:59.0954 0x18dc  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys

19:48:59.0970 0x18dc  rdpbus - ok

19:48:59.0970 0x18dc  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

19:48:59.0985 0x18dc  RDPDR - ok

19:49:00.0001 0x18dc  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

19:49:00.0001 0x18dc  RdpVideoMiniport - ok

19:49:00.0001 0x18dc  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

19:49:00.0017 0x18dc  rdyboost - ok

19:49:00.0032 0x18dc  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys

19:49:00.0048 0x18dc  ReFSv1 - ok

19:49:00.0063 0x18dc  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\Windows\System32\mprdim.dll

19:49:00.0095 0x18dc  RemoteAccess - ok

19:49:00.0095 0x18dc  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

19:49:00.0110 0x18dc  RemoteRegistry - ok

19:49:00.0126 0x18dc  [ 0660F4A14F9D2A2F59B26B1D74F1A6D0, A9443B6B7ED1ECA22AC960A2C6A2BE18C0BA58CD7BCF60E7AA617CD3662D122D ] RetailDemo      C:\Windows\system32\RDXService.dll

19:49:00.0142 0x18dc  RetailDemo - ok

19:49:00.0157 0x18dc  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc           C:\Windows\System32\RMapi.dll

19:49:00.0173 0x18dc  RmSvc - ok

19:49:00.0173 0x18dc  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

19:49:00.0188 0x18dc  RpcEptMapper - ok

19:49:00.0204 0x18dc  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\Windows\system32\locator.exe

19:49:00.0220 0x18dc  RpcLocator - ok

19:49:00.0235 0x18dc  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs           C:\Windows\system32\rpcss.dll

19:49:00.0251 0x18dc  RpcSs - ok

19:49:00.0267 0x18dc  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\Windows\system32\drivers\rspndr.sys

19:49:00.0267 0x18dc  rspndr - ok

19:49:00.0282 0x18dc  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys

19:49:00.0282 0x18dc  s3cap - ok

19:49:00.0298 0x18dc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs           C:\Windows\system32\lsass.exe

19:49:00.0298 0x18dc  SamSs - ok

19:49:00.0298 0x18dc  [ 347D5333ADA148459FD30BBCC4DD04D6, 36C25E50FC18398C2637CA57B362D20A52ECF7DFB93D943BE139DB718F2692C8 ] SbieDrv         C:\Program Files\Sandboxie\SbieDrv.sys

19:49:00.0313 0x18dc  SbieDrv - ok

19:49:00.0313 0x18dc  [ FD4BCA0C24A675E49526B3983C07F6C2, D3192D1E95A80C823E5647C3EBC50389DCBA5CB2913529F80F9F4E9959CB9A0A ] SbieSvc         C:\Program Files\Sandboxie\SbieSvc.exe

19:49:00.0329 0x18dc  SbieSvc - ok

19:49:00.0329 0x18dc  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

19:49:00.0329 0x18dc  sbp2port - ok

19:49:00.0345 0x18dc  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

19:49:00.0360 0x18dc  SCardSvr - ok

19:49:00.0376 0x18dc  [ 9EE060D6560FFBFBDB2ED5D6ED192294, 14387B69CD26D12BE31A23251B6AA8EDFC4D6CDE4FA558F0950DE91D2DD03946 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll

19:49:00.0392 0x18dc  ScDeviceEnum - ok

19:49:00.0392 0x18dc  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

19:49:00.0407 0x18dc  scfilter - ok

19:49:00.0423 0x18dc  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\Windows\system32\schedsvc.dll

19:49:00.0470 0x18dc  Schedule - ok

19:49:00.0470 0x18dc  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\Windows\system32\drivers\scmbus.sys

19:49:00.0485 0x18dc  scmbus - ok

19:49:00.0485 0x18dc  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101     C:\Windows\System32\drivers\scmdisk0101.sys

19:49:00.0501 0x18dc  scmdisk0101 - ok

19:49:00.0501 0x18dc  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] SCPolicySvc     C:\Windows\System32\certprop.dll

19:49:00.0517 0x18dc  SCPolicySvc - ok

19:49:00.0517 0x18dc  [ 0447065A6E10774EFCECFDD0EB970A79, 384A9AC72E756F96D43EE4B144A466564476AFD8778092C979116BB29A514433 ] ScpVBus         C:\Windows\System32\drivers\ScpVBus.sys

19:49:00.0532 0x18dc  ScpVBus - ok

19:49:00.0532 0x18dc  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\Windows\System32\drivers\sdbus.sys

19:49:00.0548 0x18dc  sdbus - ok

19:49:00.0548 0x18dc  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\Windows\System32\SDRSVC.dll

19:49:00.0579 0x18dc  SDRSVC - ok

19:49:00.0579 0x18dc  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\Windows\System32\drivers\sdstor.sys

19:49:00.0579 0x18dc  sdstor - ok

19:49:00.0579 0x18dc  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\Windows\system32\seclogon.dll

19:49:00.0610 0x18dc  seclogon - ok

19:49:00.0610 0x18dc  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\Windows\System32\sens.dll

19:49:00.0626 0x18dc  SENS - ok

19:49:00.0642 0x18dc  [ 2B4E090D06C60853C5C00CF255F9E02A, 4D4DBA7B04519622612BD4A4F28318CA2F5646C84CAFF8C5ACC9BF4C6031894E ] SensorDataService C:\Windows\System32\SensorDataService.exe

19:49:00.0689 0x18dc  SensorDataService - ok

19:49:00.0704 0x18dc  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService   C:\Windows\system32\SensorService.dll

19:49:00.0720 0x18dc  SensorService - ok

19:49:00.0735 0x18dc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] SensorsHIDClassDriver C:\Windows\System32\drivers\WUDFRd.sys

19:49:00.0751 0x18dc  SensorsHIDClassDriver - ok

19:49:00.0751 0x18dc  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

19:49:00.0782 0x18dc  SensrSvc - ok

19:49:00.0782 0x18dc  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\Windows\system32\drivers\SerCx.sys

19:49:00.0782 0x18dc  SerCx - ok

19:49:00.0798 0x18dc  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys

19:49:00.0798 0x18dc  SerCx2 - ok

19:49:00.0798 0x18dc  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\Windows\System32\drivers\serenum.sys

19:49:00.0813 0x18dc  Serenum - ok

19:49:00.0813 0x18dc  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\Windows\System32\drivers\serial.sys

19:49:00.0829 0x18dc  Serial - ok

19:49:00.0829 0x18dc  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\Windows\System32\drivers\sermouse.sys

19:49:00.0845 0x18dc  sermouse - ok

19:49:00.0860 0x18dc  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\Windows\system32\sessenv.dll

19:49:00.0876 0x18dc  SessionEnv - ok

19:49:00.0892 0x18dc  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys

19:49:00.0892 0x18dc  sfloppy - ok

19:49:00.0907 0x18dc  [ 832E933AA8DB9FD4733B96D8B6484D3F, 3A8E3D7ECA192EEE154CB568073B7211FDA06078EFC3BC7E961563A1BFDD0CAA ] SharedAccess    C:\Windows\System32\ipnathlp.dll

19:49:00.0939 0x18dc  SharedAccess - ok

19:49:00.0954 0x18dc  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\Windows\System32\shsvcs.dll

19:49:00.0985 0x18dc  ShellHWDetection - ok

19:49:00.0985 0x18dc  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll

19:49:01.0001 0x18dc  shpamsvc - ok

Code:

19:49:01.0017 0x18dc  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

19:49:01.0017 0x18dc  SiSRaid2 - ok

19:49:01.0017 0x18dc  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

19:49:01.0032 0x18dc  SiSRaid4 - ok

19:49:01.0032 0x18dc  [ 3B0333C3A787B0CC290DF5A2F9C7EF18, C36011CE937C50308D974D418A27FEA6D15460B3BC219ED0218F4C322B1FDFF2 ] SIVDriver       C:\Windows\system32\Drivers\SIVX64.sys

19:49:01.0048 0x18dc  SIVDriver - ok

19:49:01.0048 0x18dc  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost         C:\Windows\System32\smphost.dll

19:49:01.0064 0x18dc  smphost - ok

19:49:01.0079 0x18dc  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\Windows\system32\SmsRouterSvc.dll

19:49:01.0110 0x18dc  SmsRouter - ok

19:49:01.0110 0x18dc  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

19:49:01.0126 0x18dc  SNMPTRAP - ok

19:49:01.0142 0x18dc  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport       C:\Windows\system32\drivers\spaceport.sys

19:49:01.0157 0x18dc  spaceport - ok

19:49:01.0157 0x18dc  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys

19:49:01.0173 0x18dc  SpbCx - ok

19:49:01.0173 0x18dc  [ 79DCE27E8C4CF6701BFE49EC2446BBF6, F51CBB7A45C3C878F41653FD5FBDC93CC302712B7725DAAB4D3475A1F4771E3D ] Spooler         C:\Windows\System32\spoolsv.exe

19:49:01.0204 0x18dc  Spooler - ok

19:49:01.0282 0x18dc  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\Windows\system32\sppsvc.exe

19:49:01.0376 0x18dc  sppsvc - ok

19:49:01.0376 0x18dc  [ E83830BB74AE8CBECEA0ECD94DE436F9, 4A34569A34260324EBD629039E1BF45A3527FC75B22D9A3DB6360A6EB365483A ] srv             C:\Windows\system32\DRIVERS\srv.sys

19:49:01.0407 0x18dc  srv - ok

19:49:01.0423 0x18dc  [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

19:49:01.0454 0x18dc  srv2 - ok

19:49:01.0454 0x18dc  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

19:49:01.0470 0x18dc  srvnet - ok

19:49:01.0485 0x18dc  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

19:49:01.0501 0x18dc  SSDPSRV - ok

19:49:01.0517 0x18dc  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

19:49:01.0532 0x18dc  SstpSvc - ok

19:49:01.0595 0x18dc  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\Windows\system32\windows.staterepository.dll

19:49:01.0689 0x18dc  StateRepository - ok

19:49:01.0704 0x18dc  [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

19:49:01.0735 0x18dc  Steam Client Service - ok

19:49:01.0735 0x18dc  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\Windows\system32\drivers\stexstor.sys

19:49:01.0735 0x18dc  stexstor - ok

19:49:01.0751 0x18dc  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\Windows\System32\wiaservc.dll

19:49:01.0782 0x18dc  stisvc - ok

19:49:01.0782 0x18dc  [ 53EB8CE34B55A1EE63424C8DB7388BFC, 5AB59117BA8A2844EB8693CCC19B217AE039B28C87519F96E1C845FE9BF456C2 ] storahci        C:\Windows\system32\drivers\storahci.sys

19:49:01.0798 0x18dc  storahci - ok

19:49:01.0798 0x18dc  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

19:49:01.0798 0x18dc  storflt - ok

19:49:01.0798 0x18dc  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\Windows\system32\drivers\stornvme.sys

19:49:01.0814 0x18dc  stornvme - ok

19:49:01.0814 0x18dc  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys

19:49:01.0829 0x18dc  storqosflt - ok

19:49:01.0845 0x18dc  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc         C:\Windows\system32\storsvc.dll

19:49:01.0861 0x18dc  StorSvc - ok

19:49:01.0861 0x18dc  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\Windows\system32\drivers\storufs.sys

19:49:01.0861 0x18dc  storufs - ok

19:49:01.0861 0x18dc  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

19:49:01.0876 0x18dc  storvsc - ok

19:49:01.0876 0x18dc  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\Windows\system32\svsvc.dll

19:49:01.0892 0x18dc  svsvc - ok

19:49:01.0892 0x18dc  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\Windows\System32\drivers\swenum.sys

19:49:01.0907 0x18dc  swenum - ok

19:49:01.0907 0x18dc  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\Windows\System32\swprv.dll

19:49:01.0939 0x18dc  swprv - ok

19:49:01.0939 0x18dc  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys

19:49:01.0954 0x18dc  Synth3dVsc - ok

19:49:01.0970 0x18dc  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\Windows\system32\sysmain.dll

19:49:02.0001 0x18dc  SysMain - ok

19:49:02.0017 0x18dc  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll

19:49:02.0048 0x18dc  SystemEventsBroker - ok

19:49:02.0048 0x18dc  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\Windows\System32\TabSvc.dll

19:49:02.0064 0x18dc  TabletInputService - ok

19:49:02.0079 0x18dc  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\Windows\System32\tapisrv.dll

19:49:02.0095 0x18dc  TapiSrv - ok

19:49:02.0126 0x18dc  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

19:49:02.0173 0x18dc  Tcpip - ok

19:49:02.0220 0x18dc  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys

19:49:02.0251 0x18dc  Tcpip6 - ok

19:49:02.0267 0x18dc  [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

19:49:02.0282 0x18dc  tcpipreg - ok

19:49:02.0282 0x18dc  [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

19:49:02.0282 0x18dc  tdx - ok

19:49:02.0298 0x18dc  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\Windows\System32\drivers\terminpt.sys

19:49:02.0298 0x18dc  terminpt - ok

19:49:02.0314 0x18dc  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\Windows\System32\termsrv.dll

19:49:02.0345 0x18dc  TermService - ok

19:49:02.0345 0x18dc  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\Windows\system32\themeservice.dll

19:49:02.0376 0x18dc  Themes - ok

19:49:02.0376 0x18dc  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\Windows\system32\TieringEngineService.exe

19:49:02.0407 0x18dc  TieringEngineService - ok

19:49:02.0423 0x18dc  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll

19:49:02.0439 0x18dc  tiledatamodelsvc - ok

19:49:02.0454 0x18dc  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\Windows\System32\TimeBrokerServer.dll

19:49:02.0470 0x18dc  TimeBrokerSvc - ok

19:49:02.0470 0x18dc  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\Windows\System32\drivers\tpm.sys

19:49:02.0486 0x18dc  TPM - ok

19:49:02.0486 0x18dc  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\Windows\System32\trkwks.dll

19:49:02.0501 0x18dc  TrkWks - ok

19:49:02.0501 0x18dc  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

19:49:02.0517 0x18dc  TrustedInstaller - ok

19:49:02.0532 0x18dc  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\Windows\system32\drivers\TsUsbFlt.sys

19:49:02.0548 0x18dc  tsusbflt - ok

19:49:02.0548 0x18dc  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys

19:49:02.0564 0x18dc  TsUsbGD - ok

19:49:02.0564 0x18dc  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\Windows\System32\drivers\tunnel.sys

19:49:02.0579 0x18dc  tunnel - ok

19:49:02.0579 0x18dc  [ F723552F65D44FE693DB1A383825B3A8, EF8C343C4EB5EEA4EC830378EF576CCD6CD4EEDEDD486C0F29697044E8C71F45 ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll

19:49:02.0611 0x18dc  tzautoupdate - ok

19:49:02.0611 0x18dc  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys

19:49:02.0611 0x18dc  UASPStor - ok

19:49:02.0626 0x18dc  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\Windows\system32\Drivers\UcmCx.sys

19:49:02.0642 0x18dc  UcmCx0101 - ok

19:49:02.0642 0x18dc  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys

19:49:02.0657 0x18dc  UcmTcpciCx0101 - ok

19:49:02.0657 0x18dc  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\Windows\System32\drivers\UcmUcsi.sys

19:49:02.0673 0x18dc  UcmUcsi - ok

19:49:02.0673 0x18dc  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys

19:49:02.0689 0x18dc  Ucx01000 - ok

19:49:02.0689 0x18dc  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\Windows\system32\drivers\udecx.sys

19:49:02.0704 0x18dc  UdeCx - ok

19:49:02.0720 0x18dc  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

19:49:02.0736 0x18dc  udfs - ok

19:49:02.0736 0x18dc  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\Windows\System32\drivers\UEFI.sys

19:49:02.0751 0x18dc  UEFI - ok

19:49:02.0751 0x18dc  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys

19:49:02.0751 0x18dc  Ufx01000 - ok

19:49:02.0767 0x18dc  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea     C:\Windows\System32\drivers\UfxChipidea.sys

19:49:02.0767 0x18dc  UfxChipidea - ok

19:49:02.0767 0x18dc  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys     C:\Windows\System32\drivers\ufxsynopsys.sys

19:49:02.0782 0x18dc  ufxsynopsys - ok

19:49:02.0782 0x18dc  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

19:49:02.0798 0x18dc  UI0Detect - ok

19:49:02.0798 0x18dc  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus           C:\Windows\System32\drivers\umbus.sys

19:49:02.0814 0x18dc  umbus - ok

19:49:02.0829 0x18dc  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\Windows\System32\drivers\umpass.sys

19:49:02.0829 0x18dc  UmPass - ok

19:49:02.0845 0x18dc  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\Windows\System32\umrdp.dll

19:49:02.0861 0x18dc  UmRdpService - ok

19:49:02.0876 0x18dc  [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc     C:\Windows\System32\unistore.dll

19:49:02.0923 0x18dc  UnistoreSvc - ok

19:49:02.0939 0x18dc  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\Windows\System32\upnphost.dll

19:49:02.0954 0x18dc  upnphost - ok

19:49:02.0970 0x18dc  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea     C:\Windows\System32\drivers\urschipidea.sys

19:49:02.0970 0x18dc  UrsChipidea - ok

19:49:02.0970 0x18dc  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys

19:49:02.0986 0x18dc  UrsCx01000 - ok

19:49:02.0986 0x18dc  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys     C:\Windows\System32\drivers\urssynopsys.sys

19:49:02.0986 0x18dc  UrsSynopsys - ok

19:49:02.0986 0x18dc  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys

19:49:03.0001 0x18dc  usbccgp - ok

19:49:03.0001 0x18dc  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\Windows\System32\drivers\usbcir.sys

19:49:03.0017 0x18dc  usbcir - ok

19:49:03.0017 0x18dc  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci         C:\Windows\System32\drivers\usbehci.sys

19:49:03.0033 0x18dc  usbehci - ok

19:49:03.0033 0x18dc  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\Windows\System32\drivers\usbhub.sys

19:49:03.0048 0x18dc  usbhub - ok

19:49:03.0064 0x18dc  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys

19:49:03.0064 0x18dc  USBHUB3 - ok

19:49:03.0079 0x18dc  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci         C:\Windows\System32\drivers\usbohci.sys

19:49:03.0095 0x18dc  usbohci - ok

19:49:03.0095 0x18dc  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\Windows\System32\drivers\usbprint.sys

19:49:03.0111 0x18dc  usbprint - ok

19:49:03.0126 0x18dc  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\Windows\System32\drivers\usbser.sys

19:49:03.0158 0x18dc  usbser - ok

19:49:03.0158 0x18dc  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS

19:49:03.0173 0x18dc  USBSTOR - ok

19:49:03.0173 0x18dc  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys

19:49:03.0189 0x18dc  usbuhci - ok

19:49:03.0189 0x18dc  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS

19:49:03.0204 0x18dc  USBXHCI - ok

19:49:03.0220 0x18dc  [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc     C:\Windows\System32\userdataservice.dll

19:49:03.0267 0x18dc  UserDataSvc - ok

19:49:03.0283 0x18dc  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager     C:\Windows\System32\usermgr.dll

19:49:03.0329 0x18dc  UserManager - ok

19:49:03.0345 0x18dc  [ C75B1B48BCAADEB0275C1EBE2EAE742D, 19875B87BDB23E5B60D6D3173FDF7A7634E81E43501529A56FFCCEE21B7E3B71 ] UsoSvc          C:\Windows\system32\usocore.dll

19:49:03.0376 0x18dc  UsoSvc - ok

19:49:03.0376 0x18dc  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\Windows\system32\lsass.exe

19:49:03.0392 0x18dc  VaultSvc - ok

19:49:03.0392 0x18dc  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

19:49:03.0392 0x18dc  vdrvroot - ok

19:49:03.0408 0x18dc  [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds             C:\Windows\System32\vds.exe

19:49:03.0439 0x18dc  vds - ok

19:49:03.0454 0x18dc  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys

19:49:03.0454 0x18dc  VerifierExt - ok

19:49:03.0470 0x18dc  [ 46ADD0CD4473AAEF1C68266A803F704D, D521E46891253884CF8285E864FAE63F2E8E0974AD8D2EB4D910E8A35350844F ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys

19:49:03.0486 0x18dc  vhdmp - ok

19:49:03.0486 0x18dc  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf             C:\Windows\System32\drivers\vhf.sys

19:49:03.0501 0x18dc  vhf - ok

19:49:03.0501 0x18dc  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus           C:\Windows\system32\drivers\vmbus.sys

19:49:03.0517 0x18dc  vmbus - ok

19:49:03.0517 0x18dc  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys

19:49:03.0533 0x18dc  VMBusHID - ok

19:49:03.0533 0x18dc  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid           C:\Windows\System32\drivers\vmgid.sys

19:49:03.0548 0x18dc  vmgid - ok

19:49:03.0548 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\Windows\System32\icsvc.dll

19:49:03.0579 0x18dc  vmicguestinterface - ok

19:49:03.0579 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat   C:\Windows\System32\icsvc.dll

19:49:03.0595 0x18dc  vmicheartbeat - ok

19:49:03.0595 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\Windows\System32\icsvc.dll

19:49:03.0611 0x18dc  vmickvpexchange - ok

19:49:03.0611 0x18dc  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicrdv         C:\Windows\System32\icsvcext.dll

19:49:03.0642 0x18dc  vmicrdv - ok

19:49:03.0642 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\Windows\System32\icsvc.dll

19:49:03.0658 0x18dc  vmicshutdown - ok

19:49:03.0658 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\Windows\System32\icsvc.dll

19:49:03.0673 0x18dc  vmictimesync - ok

19:49:03.0689 0x18dc  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession   C:\Windows\System32\icsvc.dll

19:49:03.0689 0x18dc  vmicvmsession - ok

19:49:03.0704 0x18dc  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicvss         C:\Windows\System32\icsvcext.dll

19:49:03.0720 0x18dc  vmicvss - ok

19:49:03.0720 0x18dc  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

19:49:03.0720 0x18dc  volmgr - ok

19:49:03.0736 0x18dc  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

19:49:03.0736 0x18dc  volmgrx - ok

19:49:03.0751 0x18dc  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

19:49:03.0767 0x18dc  volsnap - ok

19:49:03.0767 0x18dc  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\Windows\system32\drivers\volume.sys

19:49:03.0767 0x18dc  volume - ok

19:49:03.0767 0x18dc  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\Windows\System32\drivers\vpci.sys

19:49:03.0783 0x18dc  vpci - ok

19:49:03.0783 0x18dc  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

19:49:03.0783 0x18dc  vsmraid - ok

19:49:03.0814 0x18dc  [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS             C:\Windows\system32\vssvc.exe

19:49:03.0861 0x18dc  VSS - ok

19:49:03.0861 0x18dc  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys

19:49:03.0876 0x18dc  VSTXRAID - ok

19:49:03.0876 0x18dc  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

19:49:03.0892 0x18dc  vwifibus - ok

19:49:03.0892 0x18dc  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys

19:49:03.0908 0x18dc  vwififlt - ok

19:49:03.0923 0x18dc  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time         C:\Windows\system32\w32time.dll

19:49:03.0954 0x18dc  W32Time - ok

19:49:03.0954 0x18dc  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys

19:49:03.0970 0x18dc  WacomPen - ok

19:49:03.0970 0x18dc  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService   C:\Windows\system32\WalletService.dll

19:49:04.0001 0x18dc  WalletService - ok

19:49:04.0001 0x18dc  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

19:49:04.0017 0x18dc  wanarp - ok

19:49:04.0017 0x18dc  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

19:49:04.0033 0x18dc  wanarpv6 - ok

19:49:04.0064 0x18dc  [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine        C:\Windows\system32\wbengine.exe

19:49:04.0111 0x18dc  wbengine - ok

19:49:04.0126 0x18dc  [ 7C4FAE7A8D55C897E5AE681B245A005F, 7E1E6299579BF02E89C5B828A1C19A43FF4E1F43D46D058F8DC0A8E6421C86A7 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

19:49:04.0158 0x18dc  WbioSrvc - ok

19:49:04.0173 0x18dc  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs           C:\Windows\system32\drivers\wcifs.sys

19:49:04.0173 0x18dc  wcifs - ok

19:49:04.0189 0x18dc  [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll

19:49:04.0220 0x18dc  Wcmsvc - ok

19:49:04.0236 0x18dc  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc         C:\Windows\System32\wcncsvc.dll

19:49:04.0251 0x18dc  wcncsvc - ok

19:49:04.0267 0x18dc  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs           C:\Windows\system32\drivers\wcnfs.sys

19:49:04.0283 0x18dc  wcnfs - ok

19:49:04.0283 0x18dc  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys

19:49:04.0283 0x18dc  WdBoot - ok

19:49:04.0298 0x18dc  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

19:49:04.0314 0x18dc  Wdf01000 - ok

19:49:04.0330 0x18dc  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys

19:49:04.0330 0x18dc  WdFilter - ok

19:49:04.0330 0x18dc  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\Windows\system32\wdi.dll

19:49:04.0361 0x18dc  WdiServiceHost - ok

19:49:04.0361 0x18dc  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost   C:\Windows\system32\wdi.dll

19:49:04.0361 0x18dc  WdiSystemHost - ok

19:49:04.0376 0x18dc  [ 8CB606A3057355FD5A9DBDD1A0AC94EF, 6DD0B4A2270633086EBB569A00B87430EE6EF173525E341404B15845B57BE86D ] wdiwifi         C:\Windows\system32\DRIVERS\wdiwifi.sys

19:49:04.0408 0x18dc  wdiwifi - ok

19:49:04.0408 0x18dc  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys

19:49:04.0423 0x18dc  WdNisDrv - ok

19:49:04.0423 0x18dc  WdNisSvc - ok

19:49:04.0423 0x18dc  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient       C:\Windows\System32\webclnt.dll

19:49:04.0455 0x18dc  WebClient - ok

19:49:04.0455 0x18dc  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\Windows\system32\wecsvc.dll

19:49:04.0470 0x18dc  Wecsvc - ok

19:49:04.0486 0x18dc  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll

19:49:04.0501 0x18dc  WEPHOSTSVC - ok

19:49:04.0501 0x18dc  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport   C:\Windows\System32\wercplsupport.dll

19:49:04.0533 0x18dc  wercplsupport - ok

19:49:04.0533 0x18dc  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\Windows\System32\WerSvc.dll

19:49:04.0548 0x18dc  WerSvc - ok

19:49:04.0564 0x18dc  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS         C:\Windows\system32\drivers\wfplwfs.sys

19:49:04.0564 0x18dc  WFPLWFS - ok

19:49:04.0564 0x18dc  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\Windows\System32\wiarpc.dll

19:49:04.0580 0x18dc  WiaRpc - ok

19:49:04.0595 0x18dc  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

19:49:04.0595 0x18dc  WIMMount - ok

19:49:04.0595 0x18dc  WinDefend - ok

19:49:04.0595 0x18dc  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys

19:49:04.0611 0x18dc  WindowsTrustedRT - ok

19:49:04.0611 0x18dc  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys

19:49:04.0611 0x18dc  WindowsTrustedRTProxy - ok

19:49:04.0626 0x18dc  [ C2A3B07F0118D61086C99BDCBAB6A6A3, 04D646BEF1C6F427503C594F0ECBB33140C3991A3A7AFB66B2C9581E358F9FD2 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll

19:49:04.0658 0x18dc  WinHttpAutoProxySvc - ok

19:49:04.0658 0x18dc  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\Windows\System32\drivers\winmad.sys

19:49:04.0673 0x18dc  WinMad - ok

19:49:04.0673 0x18dc  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

19:49:04.0705 0x18dc  Winmgmt - ok

19:49:04.0736 0x18dc  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM           C:\Windows\system32\WsmSvc.dll

19:49:04.0798 0x18dc  WinRM - ok

19:49:04.0814 0x18dc  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS

19:49:04.0830 0x18dc  WINUSB - ok

19:49:04.0830 0x18dc  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys

19:49:04.0830 0x18dc  WinVerbs - ok

19:49:04.0845 0x18dc  [ ECD999D8412A3473C26B118F89DB9908, 5FB9B93E4B5482CCFF01D805DFA386FD8D3441BC81E7BD5DF89EE3078FD724F3 ] wisvc           C:\Windows\system32\flightsettings.dll

19:49:04.0876 0x18dc  wisvc - ok

19:49:04.0908 0x18dc  [ 7671078AEF4C0203B053A9642C401FF7, BBFADA89CD31F20ADDBFAFAD2E492C72D82BF2F8B823BB6773F04D229B62534C ] WlanSvc         C:\Windows\System32\wlansvc.dll

19:49:04.0970 0x18dc  WlanSvc - ok

19:49:05.0001 0x18dc  [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc         C:\Windows\system32\wlidsvc.dll

19:49:05.0048 0x18dc  wlidsvc - ok

19:49:05.0064 0x18dc  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys

19:49:05.0064 0x18dc  WmiAcpi - ok

19:49:05.0080 0x18dc  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

19:49:05.0095 0x18dc  wmiApSrv - ok

19:49:05.0095 0x18dc  WMPNetworkSvc - ok

19:49:05.0111 0x18dc  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof             C:\Windows\system32\drivers\Wof.sys

19:49:05.0111 0x18dc  Wof - ok

19:49:05.0142 0x18dc  [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll

19:49:05.0189 0x18dc  workfolderssvc - ok

19:49:05.0205 0x18dc  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

19:49:05.0220 0x18dc  WPDBusEnum - ok

19:49:05.0220 0x18dc  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys

19:49:05.0236 0x18dc  WpdUpFltr - ok

19:49:05.0236 0x18dc  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\Windows\system32\WpnService.dll

19:49:05.0251 0x18dc  WpnService - ok

19:49:05.0267 0x18dc  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\Windows\System32\WpnUserService.dll

19:49:05.0283 0x18dc  WpnUserService - ok

19:49:05.0283 0x18dc  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

19:49:05.0298 0x18dc  ws2ifsl - ok

19:49:05.0298 0x18dc  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\Windows\System32\wscsvc.dll

19:49:05.0314 0x18dc  wscsvc - ok

19:49:05.0314 0x18dc  WSearch - ok

19:49:05.0361 0x18dc  [ 5163F5BABAE1FF8CCC0AFD60B6EDD20A, E4F3FC2D7E9995DD34D6DD392D33B51649077985ECA0BF2AF0552D72DC3DF08E ] wuauserv        C:\Windows\system32\wuaueng.dll

19:49:05.0408 0x18dc  wuauserv - ok

19:49:05.0408 0x18dc  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

19:49:05.0423 0x18dc  WudfPf - ok

19:49:05.0439 0x18dc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys

19:49:05.0439 0x18dc  WUDFRd - ok

19:49:05.0455 0x18dc  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

19:49:05.0470 0x18dc  wudfsvc - ok

19:49:05.0470 0x18dc  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys

19:49:05.0486 0x18dc  WUDFWpdFs - ok

19:49:05.0502 0x18dc  [ E231728BC515A4B85543AF74A1FEDFCB, 5D250D7D789B5BB56BFA2E7A109BCEB3686B7636C54D89F4E9804101D145C955 ] WwanSvc         C:\Windows\System32\wwansvc.dll

19:49:05.0548 0x18dc  WwanSvc - ok

19:49:05.0564 0x18dc  [ F39D6915451D9226AC9A5E7AE70E2ABA, E05D678DC0423A4D0EB8B3BB5A942721BB4F3B0BED22748252DBD6053FE956F1 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll

19:49:05.0611 0x18dc  XblAuthManager - ok

19:49:05.0627 0x18dc  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave     C:\Windows\System32\XblGameSave.dll

19:49:05.0689 0x18dc  XblGameSave - ok

19:49:05.0689 0x18dc  [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip         C:\Windows\System32\drivers\xboxgip.sys

19:49:05.0705 0x18dc  xboxgip - ok

19:49:05.0736 0x18dc  [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc   C:\Windows\system32\XboxNetApiSvc.dll

19:49:05.0783 0x18dc  XboxNetApiSvc - ok

19:49:05.0783 0x18dc  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\Windows\System32\drivers\xinputhid.sys

19:49:05.0798 0x18dc  xinputhid - ok

19:49:05.0798 0x18dc  [ 80D89A9C089F1FADCDFD3C593B67E9EF, 88E0C708C0BFCC140AD7763F6BE586EFEF1CADDDAD7850A4065AF6507CD7A672 ] xusb22          C:\Windows\System32\drivers\xusb22.sys

19:49:05.0814 0x18dc  xusb22 - ok

19:49:05.0814 0x18dc  ================ Scan global ===============================

19:49:05.0830 0x18dc  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\Windows\system32\basesrv.dll

19:49:05.0830 0x18dc  [ C509CCD23B086DFC9EAF86E280043672, BF431DC1C618BAF0CB67976C5A8BCCDC3F3CB266F83C614D605BA559BA8EDFD8 ] C:\Windows\system32\winsrv.dll

19:49:05.0830 0x18dc  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\Windows\system32\sxssrv.dll

19:49:05.0845 0x18dc  [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\Windows\system32\services.exe

19:49:05.0845 0x18dc  [ Global ] - ok

19:49:05.0845 0x18dc  ================ Scan MBR ==================================

19:49:05.0845 0x18dc  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0

19:49:05.0861 0x18dc  \Device\Harddisk0\DR0 - ok

19:49:05.0877 0x18dc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

19:49:05.0939 0x18dc  \Device\Harddisk1\DR1 - ok

19:49:05.0939 0x18dc  ================ Scan VBR ==================================

19:49:05.0939 0x18dc  [ 5C561B9DACFB1D056B3B497D2418E1DD ] \Device\Harddisk0\DR0\Partition1

19:49:05.0939 0x18dc  \Device\Harddisk0\DR0\Partition1 - ok

19:49:05.0939 0x18dc  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition2

19:49:05.0939 0x18dc  \Device\Harddisk0\DR0\Partition2 - ok

19:49:05.0939 0x18dc  [ D559D6AA73CA6830179B454AAF56092F ] \Device\Harddisk0\DR0\Partition3

19:49:05.0955 0x18dc  \Device\Harddisk0\DR0\Partition3 - ok

19:49:05.0955 0x18dc  [ C5F02F98F6AB963F1100C342987BC426 ] \Device\Harddisk0\DR0\Partition4

19:49:05.0955 0x18dc  \Device\Harddisk0\DR0\Partition4 - ok

19:49:05.0955 0x18dc  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1

19:49:05.0955 0x18dc  \Device\Harddisk1\DR1\Partition1 - ok

19:49:05.0955 0x18dc  [ 2973D38EB0B383D75E240C03E2EED351 ] \Device\Harddisk1\DR1\Partition2

19:49:05.0955 0x18dc  \Device\Harddisk1\DR1\Partition2 - ok

19:49:05.0955 0x18dc  ================ Scan generic autorun ======================

19:49:05.0955 0x18dc  [ A8012BE61DC9CEFA5C41C2DA995812BD, 63D64926B700AD5378C7A719CD71906382EAAA1BE3CB2EE22D9A63D13E12C272 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe

19:49:05.0986 0x18dc  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )

19:49:06.0048 0x18dc  Detect skipped due to KSN trusted

19:49:06.0048 0x18dc  IAStorIcon - ok

19:49:06.0048 0x18dc  [ C7645D43451C6D94D87F4D07BDE59C89, 495BBA47FC43EE23054FCD419F2F00457162D1C04296900C6AEA551102A810F3 ] C:\Windows\system32\rundll32.exe

19:49:06.0064 0x18dc  ShadowPlay - ok

19:49:06.0205 0x18dc  [ 252193CE990576103BCE536C7B2B86D5, F994919BE14D6EFE8BF30A4DCEFB13DEFCEB23EBDAC6C75C6DEDF3330D78C7FA ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

19:49:06.0314 0x18dc  RTHDVCPL - ok

19:49:06.0314 0x18dc  WindowsDefender - ok

19:49:06.0455 0x18dc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe

19:49:06.0564 0x18dc  OneDriveSetup - ok

19:49:06.0689 0x18dc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe

19:49:06.0799 0x18dc  OneDriveSetup - ok

19:49:06.0924 0x18dc  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe

19:49:07.0033 0x18dc  OneDriveSetup - ok

19:49:07.0049 0x18dc  [ 1D7DD340E13DF9585EABB849CFC3E11B, 31CCD9753402DC030C641214B4ECB48A757BCD9F427A143A88745C62EFF87766 ] C:\Users\Alex\AppData\Local\Microsoft\OneDrive\OneDrive.exe

19:49:07.0064 0x18dc  OneDrive - ok

19:49:07.0080 0x18dc  [ 8D636AAD14D28CA493863DEFC739BC6E, DE871DCF0A463487DAC2964BE2CD2E9A73A2EFF28D8C5C7BC01440B2881CE68B ] C:\Program Files\Sandboxie\SbieCtrl.exe

19:49:07.0095 0x18dc  SandboxieControl - ok

19:49:07.0189 0x18dc  [ D2CE6EA0E9F641D7153462D40C6B4193, 3AAE5239F951E29497D759326BDC23E19644B763DC5661CA4E4980418195C37D ] D:\Steam\steam.exe

19:49:07.0517 0x18dc  Steam - ok

19:49:07.0533 0x18dc  [ F51BB12D8977D26C1A4CDA348770D9F1, DDA35CD8F8A6591B83821B5180D457740E0B820CCE000BC7FB1B78FB4AEAD3BA ] C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe

19:49:07.0799 0x18dc  SpybotPostWindows10UpgradeReInstall - detected UnsignedFile.Multi.Generic ( 1 )

19:49:07.0861 0x18dc  Detect skipped due to KSN trusted

19:49:07.0861 0x18dc  SpybotPostWindows10UpgradeReInstall - ok

19:49:07.0861 0x18dc  Waiting for KSN requests completion. In queue: 212

19:49:08.0877 0x18dc  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )

19:49:08.0893 0x18dc  Win FW state via NFP2: enabled ( trusted )

19:49:08.0986 0x18dc  ============================================================

19:49:08.0986 0x18dc  Scan finished

19:49:08.0986 0x18dc  ============================================================

19:49:08.0986 0x1928  Detected object count: 1

19:49:08.0986 0x1928  Actual detected object count: 1

19:49:57.0754 0x1928  Ds3Service ( UnsignedFile.Multi.Generic ) - skipped by user

19:49:57.0754 0x1928  Ds3Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

19:50:20.0819 0x1984  Deinitialize success

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Als ich gerade ins Internet ging sprang bei Google wieder dieses "security search" suchfeld auf. Soll in Windows Defender wieder anmachen?

Code:

# AdwCleaner v6.040 - Bericht erstellt am 11/12/2016 um 20:38:10

# Aktualisiert am 02/12/2016 von Malwarebytes

# Datenbank : 2016-12-11.2 [Lokal]

# Betriebssystem : Windows 10 Home  (X64)

# Benutzername : Alex - DESKTOP-LR01EJK

# Gestartet von : C:\Users\Alex\Downloads\AdwCleaner_6.040.exe

# Modus: Löschen

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht: C:\ProgramData\FFinder LTD

[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\FFinder LTD
 
 

***** [ Dateien ] *****
 
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKLM\SOFTWARE\FFinder LTD
 
 

***** [ Browser ] *****
 
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C0].txt - [1115 Bytes] - [11/12/2016 20:38:10]

C:\AdwCleaner\AdwCleaner[S0].txt - [1394 Bytes] - [11/12/2016 20:32:43]

C:\AdwCleaner\AdwCleaner[S1].txt - [1466 Bytes] - [11/12/2016 20:37:47]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1334 Bytes] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.9 (09.30.2016)

Operating System: Windows 10 Home x64 

Ran by Alex (Administrator) on 11.12.2016 at 20:42:44,90

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 1 
 

Successfully deleted: C:\Windows\wininit.ini (File) 
 
 
 

Registry: 1 
 

Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\e1edc438-f640-4184-a443-d2a7c37a01dc (Registry Key) 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 11.12.2016 at 20:43:08,98

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016

durchgeführt von Alex (Administrator) auf DESKTOP-LR01EJK (11-12-2016 21:11:55)

Gestartet von C:\Users\Alex\Downloads

Geladene Profile: Alex (Verfügbare Profile: defaultuser0 & Alex)

Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Scarlet.Crush Productions) D:\PS3 Controller\ScpServer\bin\ScpService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

(Electronic Arts) D:\Origin\OriginWebHelperService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-09-02] (Realtek Semiconductor)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-15] (Microsoft Corporation)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [798352 2016-09-22] (Sandboxie Holdings, LLC)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [Steam] => D:\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{d3b14608-4b74-4114-97da-446aac2fb833}: [DhcpNameServer] 192.168.0.1
 

Internet Explorer:

==================

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-12-06] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-06] (Microsoft Corporation)
 

FireFox:

========

FF DefaultProfile: a98suup4.default

FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\a98suup4.default [2016-12-11]

FF Homepage: Mozilla\Firefox\Profiles\a98suup4.default -> hxxp://www.google.at

FF Extension: (Adblock Plus) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\a98suup4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-05]

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-06] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-01] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-01] (NVIDIA Corporation)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\122587843.js [2016-12-07] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\122587843.cfg [2016-12-07] <==== ACHTUNG
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2016-09-06] ()

R2 AsRogAuraService; C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe [659416 2016-09-07] (ASUSTek Computer Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3073216 2016-10-30] (Microsoft Corporation)

R2 Ds3Service; D:\PS3 Controller\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)

R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-26] (Intel Corporation)

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-01] (NVIDIA Corporation)

R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)

S3 Origin Client Service; D:\Origin\OriginClientService.exe [2119688 2016-12-06] (Electronic Arts)

R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2180624 2016-12-06] (Electronic Arts)

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197264 2016-09-22] (Sandboxie Holdings, LLC)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-09-06] ()

R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [559080 2016-04-19] (Intel Corporation)

S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7bb3101ce32915cc\nvlddmkm.sys [14181304 2016-12-03] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)

S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [26560 2016-11-11] (Windows (R) Win 7 DDK provider)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [204944 2016-09-22] (Sandboxie Holdings, LLC)

R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [168080 2016-03-02] (Ray Hinchliffe)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

U0 aswVmm; kein ImagePath

S3 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-11 20:43 - 2016-12-11 20:43 - 00000715 _____ C:\Users\Alex\Desktop\JRT.txt

2016-12-11 20:41 - 2016-12-11 20:42 - 01631928 _____ (Malwarebytes) C:\Users\Alex\Downloads\JRT.exe

2016-12-11 20:30 - 2016-12-11 20:38 - 00000000 ____D C:\AdwCleaner

2016-12-11 20:28 - 2016-12-11 20:30 - 03968464 _____ C:\Users\Alex\Downloads\AdwCleaner_6.040.exe

2016-12-11 19:47 - 2016-12-11 19:50 - 00258646 _____ C:\TDSSKiller.3.1.0.12_11.12.2016_19.47.09_log.txt

2016-12-11 19:46 - 2016-12-11 19:47 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Alex\Downloads\tdsskiller.exe

2016-12-11 19:31 - 2016-12-11 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-12-11 19:31 - 2016-12-11 19:39 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-12-11 19:31 - 2016-12-11 19:31 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-12-11 19:28 - 2016-12-11 19:28 - 00000000 ____D C:\Users\Alex\Downloads\MBAR

2016-12-11 19:26 - 2016-12-11 19:45 - 00000000 ____D C:\Users\Alex\Desktop\mbar

2016-12-11 19:26 - 2016-12-11 19:39 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-12-11 14:43 - 2016-12-11 14:43 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job

2016-12-11 14:39 - 2016-12-11 16:04 - 07344400 _____ (AVAST Software) C:\Users\Alex\Downloads\avastclear.exe

2016-12-10 19:23 - 2016-12-10 19:23 - 00001086 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk

2016-12-10 19:23 - 2016-12-10 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-12-10 19:23 - 2016-12-10 19:23 - 00000000 ____D C:\Program Files\VS Revo Group

2016-12-10 19:22 - 2016-12-10 19:23 - 07100088 _____ (VS Revo Group ) C:\Users\Alex\Downloads\revosetup201.exe

2016-12-10 18:31 - 2016-12-11 21:11 - 00011128 _____ C:\Users\Alex\Downloads\FRST.txt

2016-12-10 18:31 - 2016-12-11 21:11 - 00000000 ____D C:\FRST

2016-12-10 18:31 - 2016-12-11 18:53 - 00034382 _____ C:\Users\Alex\Downloads\Addition.txt

2016-12-10 18:30 - 2016-12-10 18:30 - 02420224 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe

2016-12-09 17:39 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2016-12-09 17:39 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2016-12-09 17:39 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll

2016-12-09 17:39 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-12-09 17:39 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-12-09 17:39 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2016-12-09 17:39 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll

2016-12-09 17:39 - 2016-11-11 11:09 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll

2016-12-09 17:39 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll

2016-12-09 17:39 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll

2016-12-09 17:39 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2016-12-09 17:39 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2016-12-09 17:39 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 02189152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-12-09 17:39 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 01738048 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 00658264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys

2016-12-09 17:39 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2016-12-09 17:39 - 2016-11-11 11:01 - 00401760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-12-09 17:39 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys

2016-12-09 17:39 - 2016-11-11 10:59 - 02913136 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2016-12-09 17:39 - 2016-11-11 10:59 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2016-12-09 17:39 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2016-12-09 17:39 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 08170048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2016-12-09 17:39 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2016-12-09 17:39 - 2016-11-11 10:56 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00241496 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe

2016-12-09 17:39 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll

2016-12-09 17:39 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll

2016-12-09 17:39 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll

2016-12-09 17:39 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-12-09 17:39 - 2016-11-11 10:51 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe

2016-12-09 17:39 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2016-12-09 17:39 - 2016-11-11 10:31 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2016-12-09 17:39 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll

2016-12-09 17:39 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll

2016-12-09 17:39 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe

2016-12-09 17:39 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-12-09 17:39 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe

2016-12-09 17:39 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe

2016-12-09 17:39 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys

2016-12-09 17:39 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll

2016-12-09 17:39 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll

2016-12-09 17:39 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys

2016-12-09 17:39 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe

2016-12-09 17:39 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe

2016-12-09 17:39 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll

2016-12-09 17:39 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll

2016-12-09 17:39 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll

2016-12-09 17:39 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll

2016-12-09 17:39 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe

2016-12-09 17:39 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe

2016-12-09 17:39 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll

2016-12-09 17:39 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe

2016-12-09 17:39 - 2016-11-11 10:20 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll

2016-12-09 17:39 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe

2016-12-09 17:39 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe

2016-12-09 17:39 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2016-12-09 17:39 - 2016-11-11 10:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll

2016-12-09 17:39 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl

2016-12-09 17:39 - 2016-11-11 10:17 - 01004032 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2016-12-09 17:39 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll

2016-12-09 17:39 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll

2016-12-09 17:39 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-12-09 17:39 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll

2016-12-09 17:39 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2016-12-09 17:39 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2016-12-09 17:39 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll

2016-12-09 17:39 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll

2016-12-09 17:39 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll

2016-12-09 17:39 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 23678464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2016-12-09 17:39 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll

2016-12-09 17:39 - 2016-11-11 10:10 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-12-09 17:39 - 2016-11-11 10:10 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 05111296 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2016-12-09 17:39 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 08127488 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll

2016-12-09 17:39 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2016-12-09 17:39 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2016-12-09 17:39 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll

2016-12-09 17:39 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll

2016-12-09 17:39 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2016-12-09 17:39 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe

2016-12-09 17:39 - 2016-11-11 10:04 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2016-12-09 17:39 - 2016-11-11 10:04 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe

2016-12-09 17:39 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2016-12-09 17:39 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2016-12-09 17:39 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll

2016-12-09 17:39 - 2016-11-11 10:03 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll

2016-12-09 17:39 - 2016-11-11 10:02 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2016-12-09 17:39 - 2016-11-11 10:01 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll

2016-12-09 17:39 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll

2016-12-09 17:39 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2016-12-09 17:39 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-12-09 17:39 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-12-09 17:39 - 2016-11-11 08:56 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll

2016-12-09 17:39 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll

2016-12-09 17:39 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll

2016-12-09 17:39 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 01503032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll

2016-12-09 17:39 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2016-12-09 17:39 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2016-12-09 17:39 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 06668032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll

2016-12-09 17:39 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll

2016-12-09 17:39 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2016-12-09 17:39 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe

2016-12-09 17:39 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2016-12-09 17:39 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-12-09 17:39 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe

2016-12-09 17:39 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe

2016-12-09 17:39 - 2016-11-11 08:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys

2016-12-09 17:39 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe

2016-12-09 17:39 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll

2016-12-09 17:39 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll

2016-12-09 17:39 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-12-09 17:39 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll

2016-12-09 17:39 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll

2016-12-09 17:39 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe

2016-12-09 17:39 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll

2016-12-09 17:39 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll

2016-12-09 17:39 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe

2016-12-09 17:39 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll

2016-12-09 17:39 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe

2016-12-09 17:39 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll

2016-12-09 17:39 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe

2016-12-09 17:39 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl

2016-12-09 17:39 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2016-12-09 17:39 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll

2016-12-09 17:39 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2016-12-09 17:39 - 2016-11-11 08:16 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2016-12-09 17:39 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 17:39 - 2016-11-11 08:16 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll

2016-12-09 17:39 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll

2016-12-09 17:39 - 2016-11-11 08:14 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-12-09 17:39 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll

2016-12-09 17:39 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll

2016-12-09 17:39 - 2016-11-11 08:13 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2016-12-09 17:39 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll

2016-12-09 17:39 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll

2016-12-09 17:39 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 03196416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll

2016-12-09 17:39 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll

2016-12-09 17:39 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe

2016-12-09 17:39 - 2016-11-11 08:06 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll

2016-12-09 17:39 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2016-12-09 17:39 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00873472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll

2016-12-09 17:39 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll

2016-12-09 17:39 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll

2016-12-09 17:39 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2016-12-09 17:39 - 2016-11-11 08:01 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys

2016-12-09 17:39 - 2016-11-11 07:40 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll

2016-12-09 17:38 - 2016-12-09 17:38 - 00000000 ____D C:\Users\Alex\Documents\ProcAlyzer Dumps

2016-12-09 17:11 - 2016-12-09 17:11 - 00000000 ____D C:\Program Files\Common Files\AV

2016-12-09 17:11 - 2016-12-09 17:11 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2016-12-09 17:08 - 2016-12-10 19:25 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2016-12-09 17:08 - 2016-12-09 17:08 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2016-12-08 14:55 - 2015-10-30 19:13 - 00549656 _____ C:\Users\Alex\Downloads\SGTA50015.bak

2016-12-08 14:55 - 2015-10-30 19:13 - 00549656 _____ C:\Users\Alex\Downloads\SGTA50015

2016-12-08 14:55 - 2015-05-07 01:06 - 00000236 _____ C:\Users\Alex\Downloads\Installation.txt

2016-12-08 14:52 - 2016-12-08 14:52 - 00537431 _____ C:\Users\Alex\Downloads\ac6092-100save61.rar

2016-12-07 21:12 - 2016-12-07 21:13 - 00324608 _____ (MyFHL) C:\Users\Alex\Downloads\FHL-BH-Editor.exe

2016-12-07 20:56 - 2016-12-07 20:57 - 04053928 _____ C:\Users\Alex\Downloads\BootsUpdate2016.zip

2016-12-07 20:34 - 2016-12-07 20:34 - 00000000 ____D C:\Program Files (x86)\Origin Games

2016-12-06 19:35 - 2016-12-06 19:35 - 00000000 ____D C:\Users\Alex\AppData\Local\Rockstar Games

2016-12-06 19:34 - 2016-12-07 13:46 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2016-12-06 19:34 - 2016-12-06 19:36 - 00000000 ____D C:\Users\Alex\Documents\Rockstar Games

2016-12-06 19:34 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2016-12-06 19:34 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2016-12-06 19:30 - 2016-12-06 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2016-12-06 18:00 - 2016-12-07 13:46 - 00000000 ____D C:\Program Files\Rockstar Games

2016-12-06 12:59 - 2016-12-06 12:59 - 00001510 _____ C:\Users\Alex\Desktop\GeForce Experience.lnk

2016-12-06 10:28 - 2016-12-06 10:28 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2016-12-06 10:28 - 2016-12-01 18:04 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2016-12-06 10:28 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll

2016-12-06 10:28 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll

2016-12-06 10:28 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2016-12-06 10:28 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe

2016-12-06 10:27 - 2016-12-01 21:02 - 34711096 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10912744 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10803880 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 10354984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 09158432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 08762072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 02954808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 02587704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437619.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437619.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00975296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00683824 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00642576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00617880 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00573072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00439864 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll

2016-12-06 10:27 - 2016-12-01 21:02 - 00327224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2016-12-06 10:26 - 2016-12-01 21:02 - 40125496 _____ C:\Windows\system32\nvcompiler.dll

2016-12-06 10:26 - 2016-12-01 21:02 - 35222976 _____ C:\Windows\SysWOW64\nvcompiler.dll

2016-12-06 10:15 - 2016-12-06 11:59 - 00000000 ____D C:\Users\Alex\Documents\Overwatch

2016-12-06 10:15 - 2016-12-06 10:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\NVIDIA

2016-12-06 10:11 - 2016-11-17 14:45 - 00101824 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2016-12-06 10:11 - 2016-11-17 14:45 - 00091584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2016-12-06 09:44 - 2016-12-06 10:09 - 00000000 ____D C:\Users\Alex\Documents\FIFA 16

2016-12-06 09:40 - 2013-05-19 08:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys

2016-12-06 09:39 - 2013-01-07 15:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2016-12-06 09:39 - 2013-01-07 15:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll

2016-12-06 09:38 - 2016-12-06 09:38 - 10571443 _____ C:\Users\Alex\Downloads\SCP-DS-Driver-Package-1.2.0.160.7z

2016-12-06 09:38 - 2016-12-06 09:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2016-12-06 09:26 - 2016-12-06 09:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 16

2016-12-06 08:58 - 2016-12-08 01:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Origin

2016-12-06 08:58 - 2016-12-06 08:59 - 00000000 ____D C:\Users\Alex\AppData\Local\Origin

2016-12-06 08:58 - 2016-12-06 08:58 - 00000000 ____D C:\Users\Alex\.QtWebEngineProcess

2016-12-06 08:58 - 2016-12-06 08:58 - 00000000 ____D C:\Users\Alex\.Origin

2016-12-06 08:53 - 2016-12-08 01:39 - 00000000 ____D C:\ProgramData\Origin

2016-12-06 08:53 - 2016-12-06 09:45 - 00000000 ____D C:\ProgramData\Electronic Arts

2016-12-06 08:53 - 2016-12-06 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

2016-12-05 21:46 - 2016-12-07 11:02 - 00000000 ____D C:\Program Files (x86)\Overwatch

2016-12-05 21:45 - 2016-12-08 14:12 - 00000000 ____D C:\Users\Alex\AppData\Local\Battle.net

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\Users\Alex\AppData\Local\Blizzard Entertainment

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2016-12-05 21:45 - 2016-12-05 21:45 - 00000000 ____D C:\ProgramData\Blizzard Entertainment

2016-12-05 21:43 - 2016-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Battle.net

2016-12-05 21:43 - 2016-12-05 21:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Battle.net

2016-12-05 21:42 - 2016-12-05 21:43 - 00000000 ____D C:\ProgramData\Battle.net

2016-12-05 21:42 - 2016-12-05 21:42 - 03126768 _____ (Blizzard Entertainment) C:\Users\Alex\Downloads\Battle.net-Setup.exe

2016-12-05 21:28 - 2016-12-05 21:28 - 00000000 ____D C:\Users\Alex\Documents\My Games

2016-12-05 19:50 - 2016-12-05 19:50 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-05 16:35 - 2016-12-05 16:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RandyRants.com

2016-12-05 16:35 - 2016-12-05 16:35 - 00000000 ____D C:\Program Files (x86)\RandyRants.com

2016-12-05 16:28 - 2016-12-05 16:28 - 00000000 ____D C:\Users\Alex\AppData\Local\Steam

2016-12-05 16:25 - 2016-12-05 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-05 16:23 - 2016-12-05 16:23 - 01446792 _____ C:\Users\Alex\Downloads\SteamSetup.exe

2016-12-05 16:02 - 2016-12-05 16:02 - 00001292 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TERA-launcher.lnk

2016-12-05 15:44 - 2016-12-05 15:44 - 00000000 ____D C:\Users\Alex\AppData\Local\Solid State Networks

2016-12-05 15:22 - 2016-12-05 15:43 - 00000000 ____D C:\Program Files (x86)\TERA

2016-12-05 15:11 - 2016-12-07 13:48 - 00001852 _____ C:\Windows\Sandboxie.ini

2016-12-05 15:11 - 2016-12-05 15:11 - 00000000 ___RD C:\Sandbox

2016-12-05 15:11 - 2016-12-05 15:10 - 00000962 _____ C:\Users\Alex\Desktop\Sandboxed Web Browser.lnk

2016-12-05 15:10 - 2016-12-05 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie

2016-12-05 15:10 - 2016-12-05 15:10 - 00000000 ____D C:\Program Files\Sandboxie

2016-12-05 15:08 - 2016-12-05 15:08 - 01496584 _____ C:\Users\Alex\Downloads\Sandboxie - CHIP-Installer.exe

2016-12-05 15:08 - 2016-12-05 15:08 - 00000000 ____D C:\Users\Alex\AppData\Local\Downloaded Installations

2016-12-05 15:06 - 2016-12-11 20:43 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Mozilla

2016-12-05 15:05 - 2016-12-07 20:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-12-05 15:05 - 2016-12-05 16:33 - 00000000 ____D C:\Users\Alex\AppData\Local\Mozilla

2016-12-05 15:05 - 2016-12-05 15:06 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Mozilla

2016-12-05 15:05 - 2016-12-05 15:05 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2016-12-05 15:05 - 2016-12-05 15:05 - 00001223 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2016-12-05 15:05 - 2016-12-05 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-12-05 15:04 - 2016-12-05 15:04 - 00243696 _____ C:\Users\Alex\Downloads\Firefox Setup Stub 50.0.2.exe

2016-12-05 15:00 - 2016-12-05 15:00 - 00000000 ____D C:\Users\Alex\AppData\Local\CEF

2016-12-05 14:56 - 2016-12-11 16:05 - 00000000 ____D C:\Program Files\AVAST Software

2016-12-05 14:56 - 2016-12-05 14:56 - 06253640 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup_online.exe

2016-12-05 14:49 - 2016-12-11 16:17 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps

2016-12-05 14:48 - 2016-12-05 14:48 - 00000335 _____ C:\Users\Alex\Desktop\Computer.lnk

2016-12-05 14:45 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Macromedia

2016-12-05 14:45 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Intel Corporation

2016-12-05 14:44 - 2016-12-05 14:45 - 00002387 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-12-05 14:44 - 2016-12-05 14:45 - 00000000 ___RD C:\Users\Alex\OneDrive

2016-12-05 14:44 - 2016-12-05 14:45 - 00000000 ____D C:\Users\Alex\AppData\Local\MicrosoftEdge

2016-12-05 14:44 - 2016-12-05 14:44 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype

2016-12-05 14:43 - 2016-12-05 15:19 - 00000000 ____D C:\Program Files (x86)\Razer

2016-12-05 14:43 - 2016-12-05 14:43 - 00000000 ____D C:\ProgramData\Razer

2016-12-05 14:42 - 2016-12-11 19:38 - 00000000 ____D C:\Users\Alex

2016-12-05 14:42 - 2016-12-09 17:14 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA Corporation

2016-12-05 14:42 - 2016-12-06 10:15 - 00000000 ____D C:\Users\Alex\AppData\Local\NVIDIA

2016-12-05 14:42 - 2016-12-05 15:31 - 00000000 ____D C:\Users\Alex\AppData\Local\Packages

2016-12-05 14:42 - 2016-12-05 15:21 - 00000000 ____D C:\Users\Alex\AppData\Local\ConnectedDevicesPlatform

2016-12-05 14:42 - 2016-12-05 14:42 - 00000020 ___SH C:\Users\Alex\ntuser.ini

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Vorlagen

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Startmenü

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Netzwerkumgebung

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Lokale Einstellungen

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Eigene Dateien

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Druckumgebung

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Videos

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Musik

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Documents\Eigene Bilder

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Verlauf

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\AppData\Local\Anwendungsdaten

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 _SHDL C:\Users\Alex\Anwendungsdaten

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Adobe

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\VirtualStore

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\TileDataLayer

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\Users\Alex\AppData\Local\Publishers

2016-12-05 14:42 - 2016-12-05 14:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2016-12-05 14:41 - 2016-12-05 14:42 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\NVIDIA Corporation

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\NVIDIA

2016-12-05 14:41 - 2016-12-05 14:41 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform

2016-12-05 14:40 - 2016-12-05 14:40 - 00000020 ___SH C:\Users\defaultuser0\ntuser.ini

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\My Documents

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Videos

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Pictures

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 _SHDL C:\Users\defaultuser0\Documents\My Music

2016-12-05 14:40 - 2016-12-05 14:40 - 00000000 ____D C:\Users\defaultuser0

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Public\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\My Documents

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Users\Default User\Documents\My Music

2016-12-05 14:39 - 2016-12-05 14:39 - 00000000 _SHDL C:\Documents and Settings

2016-11-30 05:06 - 2016-03-02 10:54 - 00168080 _____ (Ray Hinchliffe) C:\Windows\system32\Drivers\SIVX64.sys

2016-11-16 22:20 - 2016-11-16 22:20 - 00000786 _____ C:\Users\Public\Desktop\AURA.lnk

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\Windows\System32\Tasks\ASUS

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2016-11-16 22:20 - 2016-11-16 22:20 - 00000000 ____D C:\Program Files (x86)\ASUS

2016-11-16 22:20 - 2016-09-06 10:41 - 00028672 _____ (ASUSTek Computer Inc.) C:\Windows\SysWOW64\AsIO.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00015232 _____ C:\Windows\SysWOW64\Drivers\AsIO.sys

2016-11-16 22:12 - 2016-05-18 20:42 - 00405560 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe

2016-11-16 22:12 - 2016-05-18 20:42 - 00001904 ____N C:\Windows\system32\SetupBD.din

2016-11-16 22:09 - 2016-11-16 22:09 - 00000012 _____ C:\Windows\csup.txt

2016-11-16 22:09 - 2016-11-16 22:09 - 00000000 ____D C:\Windows\logo

2016-11-16 22:09 - 2016-05-10 10:13 - 00003130 _____ C:\Windows\system32\e1d65x64.din

2016-11-16 22:09 - 2016-04-19 23:18 - 00559080 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d65x64.sys

2016-11-16 22:09 - 2014-04-18 21:17 - 00125728 _____ (Intel Corporation) C:\Windows\system32\NicCo4.dll

2016-11-16 21:43 - 2016-12-06 18:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-11-16 21:43 - 2016-11-30 05:01 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2016-11-16 21:43 - 2016-11-17 19:57 - 00000000 ___HD C:\Program Files (x86)\Temp

2016-11-16 21:43 - 2016-11-17 19:57 - 00000000 ____D C:\Program Files (x86)\Realtek

2016-11-16 21:43 - 2016-11-16 21:43 - 00000000 ____D C:\Program Files\Realtek

2016-11-16 21:43 - 2016-09-02 13:13 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2016-11-16 21:43 - 2016-09-02 13:13 - 07019638 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT

2016-11-16 21:43 - 2016-09-02 13:13 - 05793528 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 05593616 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 05303304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2016-11-16 21:43 - 2016-09-02 13:13 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 03203592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 03133848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2016-11-16 21:43 - 2016-09-02 13:13 - 02071592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 01360520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00105312 _____ C:\Windows\system32\audioLibVc.dll

2016-11-16 21:43 - 2016-09-02 13:13 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll

2016-11-16 21:42 - 2016-12-11 20:42 - 00000000 ____D C:\ProgramData\NVIDIA

2016-11-16 21:42 - 2016-12-06 10:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-06 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-06 10:11 - 00004000 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003972 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003936 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003910 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003748 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00003706 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2016-11-16 21:42 - 2016-12-06 10:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-11-16 21:42 - 2016-12-01 18:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat

2016-11-16 21:42 - 2016-12-01 18:32 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00546752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2016-11-16 21:42 - 2016-12-01 18:32 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2016-11-16 21:42 - 2016-11-30 10:34 - 07607057 _____ C:\Windows\system32\nvcoproc.bin

2016-11-16 21:42 - 2016-11-17 14:45 - 01854400 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01452480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2016-11-16 21:42 - 2016-11-11 00:51 - 00215608 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2016-11-16 21:42 - 2016-11-11 00:51 - 00203320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2016-11-16 21:41 - 2016-12-06 10:11 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-11-16 21:41 - 2016-12-01 21:02 - 28202040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 03934320 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 03474064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2016-11-16 21:41 - 2016-12-01 21:02 - 00042296 _____ C:\Windows\system32\nvinfo.pb

2016-11-16 21:41 - 2016-11-17 14:45 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2016-11-16 21:41 - 2016-11-16 21:41 - 04970328 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2016-11-16 21:41 - 2016-11-16 21:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2016-11-16 21:41 - 2016-11-11 00:51 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437586.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437586.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 00469568 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2016-11-16 21:41 - 2016-11-11 00:51 - 00026560 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\nvswcfilter.sys

2016-11-16 21:41 - 2016-11-11 00:51 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json

2016-11-16 21:41 - 2016-11-11 00:51 - 00000669 _____ C:\Windows\system32\nv-vk64.json

2016-11-16 21:40 - 2016-12-05 14:39 - 00003118 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification

2016-11-16 21:40 - 2016-11-16 22:12 - 00000000 ____D C:\Program Files\Intel

2016-11-16 21:40 - 2016-11-16 21:41 - 00000000 ____D C:\Program Files (x86)\Intel

2016-11-16 21:40 - 2016-11-16 21:40 - 00000000 ____D C:\ProgramData\Intel

Code:

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-11 20:45 - 2016-08-22 21:18 - 00816738 _____ C:\Windows\system32\perfh007.dat

2016-12-11 20:45 - 2016-08-22 21:18 - 00184394 _____ C:\Windows\system32\perfc007.dat

2016-12-11 20:45 - 2016-08-22 20:55 - 02196638 _____ C:\Windows\system32\PerfStringBackup.INI

2016-12-11 20:38 - 2016-08-22 20:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-12-11 20:38 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI

2016-12-11 19:38 - 2016-08-22 20:45 - 00000000 ____D C:\Windows\ServiceProfiles

2016-12-11 14:13 - 2016-08-22 20:45 - 00000000 ____D C:\Windows\system32\SleepStudy

2016-12-11 10:03 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache

2016-12-10 23:18 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp

2016-12-10 23:15 - 2016-08-22 21:18 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\winrm

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\WCN

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\slmgr

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts

2016-12-10 23:15 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\winrm

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\F12

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\SysWOW64\DiagSvcs

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\MUI

2016-12-10 23:15 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\Com

2016-12-10 23:15 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\WCN

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\slmgr

2016-12-10 23:14 - 2016-07-16 15:14 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\F12

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\dsc

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\MiracastView

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\SystemResetPlatform

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\MUI

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\migwiz

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Com

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\PolicyDefinitions

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\IME

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Help

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2016-12-10 23:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism

2016-12-10 23:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ___SD C:\Windows\system32\DiagSvcs

2016-12-10 23:10 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe

2016-12-10 14:38 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness

2016-12-09 22:55 - 2016-08-22 20:51 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-12-09 22:53 - 2016-08-22 20:45 - 00230168 _____ C:\Windows\system32\FNTCACHE.DAT

2016-12-09 22:53 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences

2016-12-09 21:00 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr

2016-12-09 17:22 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll

2016-12-09 17:13 - 2016-08-22 21:02 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-12-09 10:48 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-06 21:12 - 2016-08-22 21:01 - 00000000 ____D C:\Windows\system32\MRT

2016-12-06 21:11 - 2016-08-22 21:01 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-12-06 09:26 - 2016-08-22 21:13 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-06 08:53 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2016-12-06 08:41 - 2016-09-15 20:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-12-06 08:41 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-12-06 07:36 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\appcompat

2016-12-05 14:44 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports

2016-12-05 14:42 - 2016-09-15 20:48 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk

2016-12-05 14:42 - 2016-09-15 20:48 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2016-12-05 14:42 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioDatabase

2016-12-05 14:39 - 2016-09-15 19:40 - 00002834 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task

2016-11-29 13:24 - 2016-08-22 21:13 - 00000000 ____D C:\Windows\Panther

2016-11-16 22:09 - 2016-07-16 12:47 - 00028672 _____ C:\Windows\system32\config\BCD-Template
 

Einige Dateien in TEMP:

====================

C:\Users\Alex\AppData\Local\Temp\libeay32.dll

C:\Users\Alex\AppData\Local\Temp\msvcr120.dll

C:\Users\Alex\AppData\Local\Temp\nvSCPAPI64.dll

C:\Users\Alex\AppData\Local\Temp\nvStInst.exe

C:\Users\Alex\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-08-22 20:45
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgeführt von Alex (11-12-2016 21:12:12)

Gestartet von C:\Users\Alex\Downloads

Windows 10 Home Version 1607 (X64) (2016-12-05 13:41:03)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4067737683-66589609-3790051880-500 - Administrator - Disabled)

Alex (S-1-5-21-4067737683-66589609-3790051880-1001 - Administrator - Enabled) => C:\Users\Alex

DefaultAccount (S-1-5-21-4067737683-66589609-3790051880-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-4067737683-66589609-3790051880-1000 - Limited - Disabled) => C:\Users\defaultuser0

Gast (S-1-5-21-4067737683-66589609-3790051880-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

Ansel (Version: 376.19 - NVIDIA Corporation) Hidden

AURA (HKLM-x32\...\{5899CD4F-8764-4303-A0D9-C60A62CFC24F}) (Version: 1.03.34 - ASUSTeK Computer Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.44.20513.9 - Electronic Arts)

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

Intel(R) Chipset Device Software (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)

Intel(R) Network Connections 21.0.504.0 (HKLM\...\PROSetDX) (Version: 21.0.504.0 - Intel)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)

Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)

Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2 - Mozilla)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.19 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)

NVIDIA Grafiktreiber 376.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.19 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden

NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7426.1015 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden

Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7926 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.0.1 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.1 - VS Revo Group, Ltd.)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix, Inc.)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.8 - Rockstar Games)

Sandboxie 5.14 (64-bit) (HKLM\...\Sandboxie) (Version: 5.14 - Sandboxie Holdings, LLC)

SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)

SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {23DB1194-2699-461E-BDE1-7ED8D79F8D60} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)

Task: {2F798073-5921-406F-BE8B-85C61F6BC84F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)

Task: {44EC7DA1-51BD-4D27-928D-5750E3B3B150} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)

Task: {5C7277B9-50B7-472F-9534-1761481675CC} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe [2016-09-07] ()

Task: {5D291C82-5CED-437E-9D9A-F24478400B02} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {78C2378C-4D38-4FC1-AE7C-F8CB2F3E5D8F} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe

Task: {7A58E8C9-2D9C-48AE-AA87-A169F19B13E1} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)

Task: {7D4A05D8-0F1E-466E-BF40-A8A0DF1450A7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

Task: {97DFDCA6-BF5B-4384-BDDB-9D205F66CE39} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

Task: {C3C96A71-1DCF-4722-90F8-AE05BBF66CB0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {C5A61984-B1AA-4801-9804-D566553A901F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)

Task: {CA3115CB-3822-45C6-8626-C353047C833B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {E3A16248-7583-482A-9A86-091F001453EC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {E72BE8EB-6098-476C-8B88-3EF5F21B342C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)

Task: {E7BD70D7-8F76-4896-9066-D23B698404B4} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2016-12-09 17:39 - 2016-11-11 11:10 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll

2016-12-05 14:44 - 2016-12-05 14:44 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-12-05 15:32 - 2016-12-05 15:33 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-12-05 15:32 - 2016-12-05 15:33 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-12-05 15:32 - 2016-12-05 15:33 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll

2016-09-15 20:31 - 2016-09-15 20:31 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-12-09 17:39 - 2016-11-11 10:23 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-10 15:26 - 2016-11-10 15:26 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-11-16 22:20 - 2016-12-11 20:38 - 00037160 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2016-11-16 22:20 - 2016-09-06 10:41 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2016-12-06 08:58 - 2016-12-06 08:58 - 02493440 _____ () D:\Origin\libGLESv2.dll

2016-05-26 07:52 - 2016-05-26 07:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-16 21:42 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2016-07-16 12:47 - 2016-07-16 12:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\Control Panel\Desktop\\Wallpaper -> D:\Hintergründe\4164628-swiss-night-sky.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

HKLM\...\StartupApproved\Run: => "IAStorIcon"

HKLM\...\StartupApproved\Run: => "ShadowPlay"

HKLM\...\StartupApproved\Run32: => "SDTray"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "SandboxieControl"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [{5BF9D695-52CF-4FFF-8383-F9F25B747B60}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{BD33E3ED-C3D2-4F0D-A4CC-CCAC65D5BB2B}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{B8017C8F-5959-47BC-B2EA-D0755B290EB9}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{EF488DCF-834F-4D27-AD52-011C1690521F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{6083522A-0933-4AB6-8218-DE9EFDD26EDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{C1D677AB-2302-46C4-BFEC-6271F3442961}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{6ACA591E-6F67-4513-A449-0D9589E51C25}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{8AB570F1-EBF6-445C-91EC-7821ACF2D41C}] => D:\Steam\Steam.exe

FirewallRules: [{65902F1B-C346-42ED-9F8B-B0E203496A09}] => D:\Steam\Steam.exe

FirewallRules: [{8B5AAD3A-B21B-4751-8B2A-DC33433EE901}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe

FirewallRules: [{A4CEEC40-A1A6-41A1-ADD9-A8B91E5484E8}] => D:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe

FirewallRules: [TCP Query User{54A29375-0345-4477-A18F-EB9FE2C3823D}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe

FirewallRules: [UDP Query User{52D9FA87-64B9-4746-A77B-A6A4B38D9458}D:\program files (x86)\origin games\fifa 16\fifa16.exe] => D:\program files (x86)\origin games\fifa 16\fifa16.exe

FirewallRules: [TCP Query User{2CFC7F7E-46F7-456D-803D-9FFBD2165633}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [UDP Query User{1D98C62D-969C-4414-9681-CB78CEFA7893}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{7FE07775-C168-48AC-8B35-446B5FD01387}] => C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{A9EE4B31-AFF8-4B98-ABF1-19E973EA742F}] => C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{79C302DB-08A2-46A9-BC55-7511D697D80A}] => D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{BD77F7EE-CEB8-496B-AEE6-1550A633F760}] => D:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/11/2016 04:17:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Name des fehlerhaften Moduls: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Ausnahmecode: 0xc000041d

Fehleroffset: 0x01323e28

ID des fehlerhaften Prozesses: 0x1e40

Startzeit der fehlerhaften Anwendung: 0x01d253c184b6938b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Berichtskennung: 6ed67925-8b92-42d7-bcd3-d8ce84cb9481

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2016 04:17:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Name des fehlerhaften Moduls: TERA.exe, Version: 2.0.1.1, Zeitstempel: 0x582ed354

Ausnahmecode: 0xc0000005

Fehleroffset: 0x01323e28

ID des fehlerhaften Prozesses: 0x1e40

Startzeit der fehlerhaften Anwendung: 0x01d253c184b6938b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\TERA\Client\Binaries\TERA.exe

Berichtskennung: b49cc07f-a448-467a-b624-b4ab67b51ae7

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2016 02:46:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:46:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:44:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (12/11/2016 02:44:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-LR01EJK)

Description: Bei der Aktivierung der App „Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 
 

Systemfehler:

=============

Error: (12/11/2016 08:42:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/11/2016 08:39:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IOMap" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (12/11/2016 08:39:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/11/2016 08:38:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
 

Error: (12/11/2016 08:38:29 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

Die Anforderung wird nicht unterstützt.
 
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (12/11/2016 08:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Security Assist" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/11/2016 08:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/11/2016 08:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/11/2016 08:37:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/11/2016 08:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2016-12-11 19:38:35.481

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-11 16:05:49.639

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-11 14:47:23.129

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-10 19:34:21.945

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-10 17:44:07.754

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 22:53:58.469

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 17:12:50.392

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-09 08:26:51.333

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-06 10:39:16.313

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\iqvw64e.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-12-06 08:48:20.413

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 11%

Installierter physikalischer RAM: 16314.54 MB

Verfügbarer physikalischer RAM: 14393.43 MB

Summe virtueller Speicher: 18746.54 MB

Verfügbarer virtueller Speicher: 16538.74 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:222.86 GB) (Free:73.16 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (D1-P1) (Fixed) (Total:931.39 GB) (Free:908.24 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 223.6 GB) (Disk ID: FE63FFAE)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\122587843.js [2016-12-07] <==== ACHTUNG

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\122587843.cfg [2016-12-07] <==== ACHTUNG

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe

U0 aswVmm; kein ImagePath

C:\Program Files (x86)\Spybot - Search & Destroy 2

C:\ProgramData\Spybot - Search & Destroy

C:\Windows\System32\Tasks\Safer-Networking

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgeführt von Alex (11-12-2016 21:24:14) Run:1

Gestartet von C:\Users\Alex\Downloads

Geladene Profile: Alex (Verfügbare Profile: defaultuser0 & Alex)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\122587843.js [2016-12-07] <==== ACHTUNG

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\122587843.cfg [2016-12-07] <==== ACHTUNG

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe

U0 aswVmm; kein ImagePath

C:\Program Files (x86)\Spybot - Search & Destroy 2

C:\ProgramData\Spybot - Search & Destroy

C:\Windows\System32\Tasks\Safer-Networking

emptytemp:

         

*****************
 

C:\Program Files (x86)\mozilla firefox\defaults\pref\122587843.js => erfolgreich verschoben

C:\Program Files (x86)\mozilla firefox\122587843.cfg => erfolgreich verschoben

HKU\S-1-5-21-4067737683-66589609-3790051880-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotPostWindows10UpgradeReInstall => Wert erfolgreich entfernt

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Schlüssel erfolgreich entfernt

HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden. 

hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => Wert erfolgreich wiederhergestellt

aswVmm => Dienst erfolgreich entfernt

C:\Program Files (x86)\Spybot - Search & Destroy 2 => erfolgreich verschoben

C:\ProgramData\Spybot - Search & Destroy => erfolgreich verschoben

C:\Windows\System32\Tasks\Safer-Networking => erfolgreich verschoben
 

=========== EmptyTemp: ==========
 

BITS transfer queue => 0 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19220772 B

Java, Flash, Steam htmlcache => 59975045 B

Windows/system/drivers => 14122754 B

Edge => 30789504 B

Chrome => 0 B

Firefox => 382326053 B

Opera => 0 B
 

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 128 B

LocalService => 18996 B

NetworkService => 0 B

defaultuser0 => 128 B

Alex => 382734444 B
 

RecycleBin => 0 B

EmptyTemp: => 848 MB temporäre Dateien entfernt.
 

================================
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 21:24:17 ====

Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:

1. Schritt: MBAM

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

3. Schritt: SecurityCheck

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

MBAM

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 11.12.2016

Suchlaufzeit: 21:35

Protokolldatei: mbam.txt

Administrator: Ja
 

Version: 2.2.1.1043

Malware-Datenbank: v2016.12.11.05

Rootkit-Datenbank: v2016.11.20.01

Lizenz: Testversion

Malware-Schutz: Aktiviert

Schutz vor bösartigen Websites: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 10

CPU: x64

Dateisystem: NTFS

Benutzer: Alex
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 307172

Abgelaufene Zeit: 3 Min., 29 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 1

PUP.Optional.DownloadSponsor, C:\Users\Alex\Downloads\Sandboxie - CHIP-Installer.exe, In Quarantäne, [34dd0ed8eeac4de9570f6c342ad6a759], 
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=9c8d8479a9ebdc4ea1819b25e9963d63

# end=init

# utc_time=2016-12-11 08:43:57

# local_time=2016-12-11 09:43:57 (+0100, Mitteleuropäische Zeit)

# country="Austria"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 31701

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=9c8d8479a9ebdc4ea1819b25e9963d63

# end=updated

# utc_time=2016-12-11 08:47:34

# local_time=2016-12-11 09:47:34 (+0100, Mitteleuropäische Zeit)

# country="Austria"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=9c8d8479a9ebdc4ea1819b25e9963d63

# engine=31701

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-12-11 09:13:48

# local_time=2016-12-11 10:13:48 (+0100, Mitteleuropäische Zeit)

# country="Austria"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 6536 12821444 0 0

# scanned=268921

# found=0

# cleaned=0

# scan_time=1573

Security Check

Code:

 Results of screen317's Security Check version 1.009  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Windows Defender   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Mozilla Firefox (50.0.2) 
 ````````Process Check: objlist.exe by Laurent````````  

 Windows Defender MSMpEng.exe 

 Windows Defender MSASCuiL.exe   

 Windows Defender MpCmdRun.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

Zitat:

C:\Users\Alex\Downloads\Sandboxie - CHIP-Installer.exe

In Zukunft keine Downloads mehr von chip.de!!!

Von chip lädst du in Zukunft besser nix mehr. Die verarschen ihre Kunden aus reiner Profitgier. Siehe auch http://www.trojaner-board.de/168364-...mpfehlung.html und CHIP-Installer - was ist das? - Anleitungen