Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Windows 10 Tabs öffnen sich automatisch (https://www.trojaner-board.de/183809-windows-10-tabs-oeffnen-automatisch.html)

Yvi1993 05.01.2017 08:28
Windows 10 Tabs öffnen sich automatisch
 
Hallo Liebes Team,
seid einiger Zeit habe ich das Problem das sich auf meinem Rechner (Windows 10)
immer wieder egal ob Internet Explorer oder Chrome selbstständig meist leere Tabs öffnen.
Ich benutze Kaspersky als Anti Virenprogramm dieses findet auch nichts.
Habe es ebenfalls mit Malewarebytes versucht aber auch dort lässt sich nichts finden und nun
bin ich ziemlich ratlos.
Da ich mich mit Computern jetzt nicht so gut auskenne und ihr ja immer die Logfiles braucht, stellt sich mir die Frage wie ich an diese ran komme?

MFG

Yvi :confused:

cosinus 05.01.2017 09:09
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Yvi1993 05.01.2017 14:06
Logfiles FRS.txt
 
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von User1 (Administrator) auf DESKTOP-6NS9837 (05-01-2017 14:04:06)
Gestartet von C:\Users\User1\Downloads
Geladene Profile: User1 (Verfügbare Profile: defaultuser0 & User1)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Malwarebytes) E:\Anti-Malware\MBAMService.exe
(Electronic Arts) E:\Origins\OriginWebHelperService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) E:\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\User1\AppData\Local\Razer\InGameEngine\cache\RzSynapse\rzcefrenderprocess.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.350_none_43278ee965418581\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473024 2016-10-21] (Realtek Semiconductor)
HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [691560 2016-04-22] ()
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9037832 2016-10-21] (Realtek Semiconductor)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => E:\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178912 2016-05-25] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-10-31] (Razer Inc.)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8944344 2016-09-28] (Piriform Ltd)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\Run: [Steam] => E:\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {7ab9537e-a1e4-11e6-824f-806e6f6e6963} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\Autorun.hta
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {8f822d66-a84f-11e6-8254-806e6f6e6963} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\Autorun.hta
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {ebaf5045-b171-11e6-825d-806e6f6e6963} - "D:\Setup.exe"
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {f0d9c0be-b1a4-11e6-8259-806e6f6e6963} - "D:\DVDSetup.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-11-24]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{563dd4a2-a91d-477b-a920-3e511208712c}: [DhcpNameServer] 192.168.1.10
Tcpip\..\Interfaces\{9f8fb24a-5964-484b-a48a-55f9a45f09fb}: [DhcpNameServer] 192.168.179.1
Tcpip\..\Interfaces\{d6152445-4f23-4949-a60a-057b6211b4ec}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{f9fe0009-6bc5-4d4f-abc4-210594062ecb}: [DhcpNameServer] 192.168.1.10

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-08]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Präsentationen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-12]
CHR Extension: (Google Docs) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-12]
CHR Extension: (Google Drive) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-12]
CHR Extension: (YouTube) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-12]
CHR Extension: (Advanced System Surfing Protection) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\egdoebijggplldfolgeepnnfhfnoglak [2016-11-24]
CHR Extension: (Google Tabellen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-12]
CHR Extension: (Google Docs Offline) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-12]
CHR Extension: (AdBlock) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-12]
CHR Extension: (Google Mail) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-14]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [448496 2016-11-01] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-01-28] (Rivet Networks)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; E:\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origins\OriginClientService.exe [2119688 2016-12-23] (Electronic Arts)
R2 Origin Web Helper Service; E:\Origins\OriginWebHelperService.exe [2180624 2016-12-23] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-25] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 athr; C:\Windows\System32\drivers\athw10x.sys [4316456 2016-11-11] (Qualcomm Atheros Communications, Inc.)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [144456 2016-01-22] (Rivet Networks, LLC.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2016-12-14] ()
R1 HWiNFO32; C:\Windows\SysWoW64\drivers\HWiNFO64A.SYS [27552 2016-09-12] (REALiX(tm))
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-07-20] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-07-20] (Intel Corporation)
S3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [345872 2016-05-26] (Intel Corporation)
R3 KillerEth; C:\Windows\System32\drivers\e2xw10x64.sys [162456 2016-11-23] (Qualcomm Atheros, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [191312 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\drivers\klhk.sys [435032 2016-11-23] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [182360 2016-12-08] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1019616 2016-12-08] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [57424 2016-12-08] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [218920 2016-12-09] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [85984 2016-12-15] ()
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [245512 2016-12-09] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [104720 2016-12-09] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [164888 2016-12-09] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [134880 2016-12-08] (AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2016-12-29] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2017-01-05] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-05] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-05] (Malwarebytes)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_410e5247be0e5f00\nvlddmkm.sys [14174256 2016-11-18] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-09-23] (Realtek Semiconductor Corp.)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [943112 2016-11-03] (Realtek                                            )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [413912 2016-11-11] (Realsil Semiconductor Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-09-07] (Razer, Inc.)
S3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [3481696 2015-06-24] (Sonix Co. Ltd.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [66168 2015-10-28] (Synaptics Incorporated)
R3 UHSfiltv; C:\Windows\system32\drivers\UHSfiltv.sys [32264 2015-07-22] (Creative Technology Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\User1\AppData\Local\Temp\ALSysIO64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 14:04 - 2017-01-05 14:04 - 00021631 _____ C:\Users\User1\Downloads\FRST.txt
2017-01-05 14:03 - 2017-01-05 14:03 - 02418176 _____ (Farbar) C:\Users\User1\Downloads\FRST64.exe
2017-01-05 08:10 - 2017-01-05 14:04 - 00000000 ____D C:\FRST
2017-01-05 07:46 - 2017-01-05 08:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-05 06:43 - 2017-01-05 06:43 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-05 06:38 - 2017-01-05 06:38 - 00000499 _____ C:\Users\Public\Desktop\Recuva.lnk
2017-01-05 06:38 - 2017-01-05 06:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2017-01-05 06:37 - 2017-01-05 06:37 - 05562976 _____ (Piriform Ltd) C:\Users\User1\Downloads\rcsetup153.exe
2016-12-31 10:26 - 2016-12-31 10:26 - 00000000 ____D C:\Program Files\Common Files\INCA Shared
2016-12-31 10:26 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des
2016-12-31 10:26 - 2005-01-03 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys
2016-12-31 10:26 - 2003-07-18 22:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd
2016-12-29 12:42 - 2016-12-29 12:42 - 11122883 _____ C:\Users\User1\Downloads\LifeInTheWoodsBasic.zip
2016-12-29 12:40 - 2016-12-29 12:51 - 00000000 ____D C:\Users\User1\AppData\Roaming\.minecraft
2016-12-29 12:40 - 2016-12-29 12:40 - 00000000 ____D C:\Users\User1\AppData\Roaming\java
2016-12-29 12:40 - 2016-12-29 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-12-29 12:39 - 2016-12-29 12:39 - 02314240 _____ C:\Users\User1\Downloads\MinecraftInstaller.msi
2016-12-29 10:58 - 2016-12-29 10:58 - 00000000 ____D C:\Users\User1\AppData\Roaming\LolClient
2016-12-29 10:11 - 2016-12-29 10:11 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (3).exe
2016-12-29 10:11 - 2016-12-29 10:11 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (2).exe
2016-12-28 20:18 - 2016-12-29 10:25 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-28 20:17 - 2017-01-05 07:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-28 20:17 - 2017-01-05 06:41 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-28 20:17 - 2017-01-05 06:41 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-28 20:17 - 2017-01-05 06:41 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-28 20:17 - 2016-12-28 20:20 - 00091584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-28 20:17 - 2016-12-28 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-28 20:17 - 2016-12-14 12:55 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-28 20:16 - 2016-12-28 20:17 - 54199488 _____ (Malwarebytes ) C:\Users\User1\Downloads\mb3-setup-computerbild.8000-3.0.5.1299.exe
2016-12-28 20:02 - 2016-12-29 10:13 - 00000000 ____D C:\AdwCleaner
2016-12-28 20:02 - 2016-12-28 20:02 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (1).exe
2016-12-24 15:18 - 2016-12-24 15:18 - 00000000 ____D C:\ProgramData\Riot Games
2016-12-24 15:17 - 2016-12-24 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-12-24 15:17 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-12-24 15:17 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-12-24 15:17 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-12-24 15:16 - 2016-12-24 15:17 - 00000000 ____D C:\Users\User1\AppData\Roaming\Riot Games
2016-12-24 15:16 - 2016-12-24 15:16 - 31876824 _____ (Riot Games) C:\Users\User1\Downloads\LeagueofLegends_EUW_Installer_2016_11_10.exe
2016-12-23 22:17 - 2016-12-31 12:40 - 00000000 ____D C:\Users\User1\Documents\Electronic Arts
2016-12-23 21:46 - 2016-12-29 14:27 - 00000000 ____D C:\Users\User1\Desktop\Spiele
2016-12-23 21:46 - 2016-12-23 21:46 - 00000000 ____D C:\Users\User1\Desktop\Scirvener
2016-12-23 21:43 - 2016-12-23 21:43 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041.exe
2016-12-23 20:22 - 2015-04-14 16:09 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2016-12-21 16:45 - 2016-12-21 16:46 - 00006332 _____ C:\Users\User1\Documents\cc_20161221_164556.reg
2016-12-18 11:16 - 2016-12-18 11:16 - 915729729 _____ C:\Users\User1\Downloads\Bless Fan Package.rar
2016-12-17 20:11 - 2016-12-29 10:27 - 00000000 ____D C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2016-12-17 20:10 - 2016-12-17 20:10 - 04385216 _____ (MY.COM B.V.) C:\Users\User1\Downloads\RevelationOnlineLoader_8098d244b4986b278b653ae0834e2f21__de.exe
2016-12-17 19:55 - 2016-12-17 19:55 - 00000000 ____D C:\Users\User1\AppData\LocalLow\Unity
2016-12-17 17:23 - 2016-12-17 17:23 - 00000000 ____D C:\Users\User1\AppData\Roaming\FiraxisLive
2016-12-17 12:59 - 2016-12-17 12:59 - 00003628 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 12:59 - 2016-12-17 12:59 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-15 15:14 - 2016-12-15 15:14 - 00085984 _____ C:\Windows\system32\Drivers\klupd_klif_kimul.sys
2016-12-14 17:43 - 2016-12-14 17:43 - 00000000 ____D C:\Users\User1\AppData\Local\Chromium
2016-12-13 19:51 - 2016-12-13 19:51 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 19:51 - 2013-03-24 05:00 - 00391168 _____ (CANON INC.) C:\Windows\system32\CNMLMBR.DLL
2016-12-13 19:41 - 2016-12-13 19:45 - 00101499 _____ C:\Users\User1\Documents\klangkugeln.pdf
2016-12-13 19:37 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-13 19:37 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-13 19:37 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-13 19:37 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-13 19:37 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-13 19:37 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-13 19:37 - 2016-12-09 11:32 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-13 19:37 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-13 19:37 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-13 19:37 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-12-13 19:37 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-13 19:37 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 11:15 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-13 19:37 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-13 19:37 - 2016-12-09 11:09 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2016-12-13 19:37 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-12-13 19:37 - 2016-12-09 10:47 - 22563328 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:45 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:38 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-13 19:37 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 23677952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:29 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 08129536 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-13 19:37 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-13 19:37 - 2016-12-09 10:24 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-13 19:37 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 01512960 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-13 19:37 - 2016-12-09 10:19 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-12-13 19:37 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-13 19:37 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-10 20:48 - 2016-12-10 20:48 - 00000000 ____D C:\Users\User1\AppData\LocalLow\SKS
2016-12-09 16:25 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-09 16:25 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-09 16:25 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-09 16:25 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-09 16:25 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-09 16:25 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-09 16:25 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-09 16:25 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-09 16:25 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-09 16:25 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-09 16:25 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-09 16:25 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-09 16:25 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-09 16:25 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-09 16:25 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-09 16:25 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-09 16:25 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-09 16:25 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-12-09 16:25 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-09 16:25 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-09 16:25 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-09 16:25 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-09 16:25 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-09 16:25 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-09 16:25 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-09 16:25 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-09 16:25 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-09 16:25 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-09 16:25 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-09 16:25 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-09 16:25 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-09 16:25 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-09 16:25 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-09 16:25 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-09 16:25 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-09 16:25 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-09 16:25 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-09 16:25 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-09 16:25 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-09 16:25 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-12-09 16:25 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-12-09 16:25 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-09 16:25 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-12-09 16:25 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-09 16:25 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-09 16:25 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-09 16:25 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-09 16:25 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-09 16:25 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-09 16:25 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-09 16:25 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-09 16:25 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-09 16:25 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-09 16:25 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-09 16:25 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-09 16:25 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-09 16:25 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-12-09 16:25 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-12-09 16:25 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-12-09 16:25 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-12-09 16:25 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
2016-12-09 16:25 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-12-09 16:25 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-12-09 16:25 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-12-09 16:25 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-09 16:25 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
2016-12-09 16:25 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-12-09 16:25 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-12-09 16:25 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-12-09 16:25 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-09 16:25 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-12-09 16:25 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-09 16:25 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-12-09 16:25 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2016-12-09 16:25 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-12-09 16:25 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-12-09 16:25 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-12-09 16:25 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-12-09 16:25 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-12-09 16:25 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-12-09 16:25 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2016-12-09 16:25 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-12-09 16:25 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-12-09 16:25 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2016-12-09 16:25 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-12-09 16:25 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2016-12-09 16:25 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-12-09 16:25 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2016-12-09 16:25 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-12-09 16:25 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2016-12-09 16:25 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-12-09 16:25 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2016-12-09 16:25 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-12-09 16:25 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-12-09 16:25 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-12-09 13:58 - 2016-12-09 13:58 - 00245512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00218920 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00164888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00104720 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2016-12-08 15:47 - 2016-12-08 15:47 - 07586311 _____ C:\Users\User1\Documents\bvc.pdf
2016-12-08 15:47 - 2016-12-08 15:47 - 00000000 ____D C:\Users\User1\AppData\LocalLow\Temp
2016-12-08 15:41 - 2016-12-08 15:41 - 01665710 _____ C:\Users\User1\Downloads\antworten_sachkunde.pdf
2016-12-08 15:40 - 2016-12-08 15:40 - 00609225 _____ C:\Users\User1\Downloads\fragen_sachkunde.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 14:02 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF
2017-01-05 14:01 - 2016-11-23 11:26 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-05 14:00 - 2016-11-23 19:03 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-05 14:00 - 2016-11-11 21:46 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-05 08:29 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-01-05 08:06 - 2016-09-09 20:48 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-01-05 07:58 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-05 07:58 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness
2017-01-05 06:45 - 2016-09-09 20:57 - 02357756 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-05 06:45 - 2016-07-16 23:51 - 00975980 _____ C:\Windows\system32\perfh007.dat
2017-01-05 06:45 - 2016-07-16 23:51 - 00225590 _____ C:\Windows\system32\perfc007.dat
2017-01-05 06:41 - 2016-09-09 20:53 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-05 06:40 - 2016-09-09 20:49 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-05 06:40 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-01-03 18:54 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1
2016-12-31 23:46 - 2016-11-24 18:24 - 00000000 ____D C:\ProgramData\Origin
2016-12-31 23:46 - 2016-09-09 20:53 - 00524288 ___SH C:\Users\User1\NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 23:46 - 2016-09-09 20:53 - 00065536 ___SH C:\Users\User1\NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TM.blf
2016-12-31 23:43 - 2016-11-24 18:25 - 00000000 ____D C:\Users\User1\AppData\Roaming\Origin
2016-12-31 23:25 - 2016-11-24 18:22 - 00000000 ____D C:\Users\User1\AppData\Local\Battle.net
2016-12-31 22:22 - 2016-11-26 20:53 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2016-12-31 10:26 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64
2016-12-31 10:26 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files\Common Files
2016-12-31 10:25 - 2016-07-16 12:47 - 00000000 __SHD C:\Windows\Installer
2016-12-29 21:36 - 2016-11-25 13:55 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-12-29 12:40 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1\AppData\Roaming
2016-12-29 10:30 - 2016-11-23 20:13 - 00000000 ____D C:\Users\User1\Documents\My Games
2016-12-29 10:29 - 2016-11-24 11:17 - 00000000 ____D C:\MSI
2016-12-29 10:29 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files (x86)
2016-12-29 10:26 - 2016-09-12 09:45 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-29 10:26 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files
2016-12-29 10:22 - 2016-07-16 07:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2016-12-28 20:18 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\drivers
2016-12-28 20:06 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1\AppData\Local\Packages
2016-12-28 20:05 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\Logs
2016-12-24 15:17 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Tasks
2016-12-24 13:46 - 2016-11-26 20:53 - 00000000 ____D C:\Users\User1\Documents\Heroes of the Storm
2016-12-24 11:43 - 2016-11-24 11:19 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-23 22:17 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Documents
2016-12-22 16:14 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Saved Games
2016-12-21 16:41 - 2016-11-25 13:52 - 00000000 ____D C:\Users\User1\AppData\Local\CrashDumps
2016-12-21 16:41 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\debug
2016-12-17 20:11 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-17 20:10 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Pictures
2016-12-17 19:55 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1\AppData\LocalLow
2016-12-15 15:21 - 2016-09-09 20:50 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{f5b135e6-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000002.regtrans-ms
2016-12-15 15:19 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache
2016-12-15 15:07 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\assembly
2016-12-14 17:43 - 2016-11-23 19:25 - 00000000 ____D C:\Users\User1\AppData\Local\Steam
2016-12-14 17:34 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-14 15:01 - 2016-09-09 20:48 - 00194296 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-14 07:35 - 2016-09-09 20:48 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{f5b135f1-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000001.regtrans-ms
2016-12-14 07:35 - 2016-09-09 20:48 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{f5b135f1-4b48-11e6-80cb-e41d2d012050}.TM.blf
2016-12-14 07:35 - 2016-07-16 12:47 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\de-DE
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Boot
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppPatch
2016-12-14 07:22 - 2016-09-12 09:47 - 00002267 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-14 06:48 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp
2016-12-14 06:46 - 2016-09-12 09:40 - 00000000 ____D C:\Windows\system32\MRT
2016-12-14 06:45 - 2016-09-12 09:40 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-13 19:52 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-09 20:15 - 2016-09-09 20:53 - 00000402 ___SH C:\Users\User1\Documents\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000282 ___SH C:\Users\User1\Downloads\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000282 ___SH C:\Users\User1\Desktop\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000174 ___SH C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000174 ___SH C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Searches
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Music
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Links
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Favorites
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Contacts
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-09 20:15 - 2016-07-16 07:04 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\wbem
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing
2016-12-09 16:16 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-12-08 15:03 - 2016-11-23 19:04 - 00001476 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2016-12-08 15:03 - 2016-11-23 19:03 - 01019616 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-12-08 15:03 - 2016-06-20 23:41 - 00057424 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys
2016-12-08 15:03 - 2016-06-02 22:39 - 00134880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-23 13:26 - 2016-11-23 13:26 - 1307648 _____ () C:\Users\User1\AppData\Local\file__0.localstorage
2016-09-09 20:57 - 2016-09-09 20:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-05 06:55

==================== Ende von FRST.txt ============================

Yvi1993 05.01.2017 14:07
Addition.txt
 
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von User1 (05-01-2017 14:04:43)
Gestartet von C:\Users\User1\Downloads
Windows 10 Pro Version 1607 (X64) (2016-09-09 19:53:08)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3303905599-2245439626-354554511-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3303905599-2245439626-354554511-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-3303905599-2245439626-354554511-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-3303905599-2245439626-354554511-501 - Limited - Disabled)
User1 (S-1-5-21-3303905599-2245439626-354554511-1001 - Administrator - Enabled) => C:\Users\User1

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ansel (Version: 375.95 - NVIDIA Corporation) Hidden
ApoDispatchConfigurator (Version: 2.2.601 - Nahimic) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
AudioLaunchpadConfigurator (Version: 2.2.601 - Nahimic) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
CheckDevicesConfigurator (Version: 2.2.601 - Nahimic) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
Die Sims™ 3 Wildes Studentenleben (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 University Life) (Version: 1.0.0.0 - Electronic Arts Inc.)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.25.136.1020 - Electronic Arts Inc.)
Dishonored 2 (HKLM\...\Steam App 403640) (Version:  - Arkane Studios)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Killer Bandwidth Control Filter Driver (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer E240x Drivers (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer Network Manager (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1125 - Rivet Networks)
LauncherSetup (Version: 2.2.601 - Nahimic) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 12.6.0.0 - Lightworks)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Nahimic 2 (HKLM-x32\...\{3e7434ed-dffc-4264-a656-0087f9a875e6}) (Version: 2.2.6 - Nahimic)
Nahimic2UISetup (Version: 2.2.601 - Nahimic) Hidden
NahimicSettingsConfigurator (Version: 2.2.601 - Nahimic) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.95 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.95 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
Planet Coaster (HKLM\...\Steam App 493340) (Version:  - Frontier Developments)
ProductDaemonSetup (Version: 2.2.601 - Nahimic) Hidden
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.1031 - Razer Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7960 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Scrap Mechanic (HKLM\...\Steam App 387990) (Version:  - Axolot Games)
Sherlock Holmes: The Devil's Daughter (HKLM\...\Steam App 350640) (Version:  - Frogwares)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sid Meier's Civilization VI (HKLM\...\Steam App 289070) (Version:  - Firaxis)
SonicMapperConfigurator (Version: 2.2.601 - Nahimic) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Forest (HKLM\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Long Dark (HKLM\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.55 - TuneUp Software) Hidden
UIInstallUpgrade (Version: 2.2.601 - Nahimic) Hidden
Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.) <==== ACHTUNG
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Weapons of Mythology - New Age - (HKLM\...\Steam App 523190) (Version:  - Gamemag)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3532E62E-151F-4832-820F-1D747FA26D65} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {36C6A83C-846F-47CB-90BA-DDEE4579365B} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {39546669-1F60-46A6-B2E9-220D613AD929} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {48528ED7-A926-4DDB-9520-1DD979F1C2B6} - System32\Tasks\Driver Booster SkipUAC (User1) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {5121F5D9-0FA5-4174-89BF-B437F1598280} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {5D69CD75-14E7-4FCD-A6C0-94DFA38A997C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {5E954971-DEAF-47DD-B56D-68A453553DAE} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [2016-04-22] ()
Task: {682BDE58-6941-44DD-A3B3-3A26813B2DEB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {789A892E-6BFB-4408-960B-7F344176D323} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {8A009B95-EC9C-4FEE-B4E1-FC2B68CA1A00} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe [2016-04-22] ()
Task: {ACC5724B-4F37-4691-8E7A-C7A42334A65A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-12] (Google Inc.)
Task: {C2F59D90-4850-42CF-90A4-F242829312CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C7957681-C2E4-4ACB-9A5A-0DA8384463E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CD9C479D-068D-44C0-BE9E-3AA912BB93F3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CDF761A3-5D0F-481F-A7B0-44AEF6305A0C} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\User1\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {D657AAA1-C3A8-4BB5-A87A-F8B458894A06} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe [2016-04-22] ()
Task: {E20B44BD-1AC8-40BE-84E4-39F9DA6B05DA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-12] (Google Inc.)
Task: {E9DE188A-0D4F-4526-88B8-1F72EDCBB822} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {EB868EF2-7486-4B3E-8BBF-2DD0E4724975} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-11-23 11:57 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-09-25 00:20 - 2016-09-25 00:21 - 00189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2016-12-28 20:17 - 2016-12-14 12:55 - 02259232 _____ () E:\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-28 20:17 - 2016-12-14 12:55 - 02813904 _____ () E:\ANTI-MALWARE\arwlib.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-11-23 11:26 - 2016-11-17 02:03 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-09-12 09:40 - 2016-09-12 09:40 - 01864384 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-04-22 17:53 - 2016-04-22 17:53 - 00211816 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
2016-04-22 17:53 - 2016-04-22 17:53 - 00285032 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
2016-11-03 12:00 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-11 22:55 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-11 22:55 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-11 22:55 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-11 22:55 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-11 22:55 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-11 22:55 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-11 22:55 - 2016-11-02 11:13 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-04-22 17:50 - 2016-04-22 17:50 - 00691560 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
2016-04-22 17:50 - 2016-04-22 17:50 - 01962496 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2svc32.exe
2016-04-22 17:53 - 2016-04-22 17:53 - 00500224 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2svc64.exe
2016-09-28 17:25 - 2016-09-28 17:25 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-12-15 14:58 - 2016-12-15 14:58 - 00055808 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.23.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2016-12-23 19:56 - 2016-12-23 19:56 - 02493440 _____ () E:\Origins\libGLESv2.dll
2016-05-25 22:52 - 2016-05-25 22:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-04-22 17:49 - 2016-04-22 17:49 - 00180584 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2DevProps.dll
2016-04-22 17:47 - 2016-04-22 17:47 - 00252264 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2OSD.dll
2016-11-23 11:57 - 2016-11-17 11:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-11-23 11:57 - 2016-11-17 11:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-09-12 09:39 - 2016-09-12 09:39 - 01383616 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2016-09-12 09:40 - 2016-09-12 09:40 - 00118976 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll
2016-11-23 11:57 - 2016-11-17 14:44 - 60817344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-11-01 08:58 - 2016-11-01 08:58 - 00143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 50656768 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 01874944 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libglesv2.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 00075264 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libegl.dll
2016-12-14 07:22 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 07:22 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 12:47 - 2016-07-16 12:45 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img3.jpg
DNS Servers: 192.168.192.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{429DE816-4FBD-42EE-B638-711BAFE6B702}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{65303912-7997-4DC7-A35A-3337BE31B493}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{DF13E15C-D484-4B92-9B7D-D76EB8EDE98C}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{DC49F3EC-25CD-487E-938D-216EDD544179}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{ADB22972-1CBD-409C-97E6-DC3E02CF18B4}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{829F417C-3502-430E-BE1D-DF49304A2EC2}] => E:\Steam\Steam.exe
FirewallRules: [{630D374E-DA6E-4E75-9EB5-AAA094AEE159}] => E:\Steam\Steam.exe
FirewallRules: [{7D64997E-069A-45B6-9D31-4F1DB3F5486A}] => E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{9A93C7A7-1A02-475D-A753-D40A80EFC3B1}] => E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{E040FDB7-D1EF-45BB-9B08-968610D69074}] => E:\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{755CCBFD-BEF1-4A7A-A5F1-6A7709D4D1AD}] => E:\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{9E63854F-7F3A-4660-B540-62512A195337}] => E:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{3542887B-8F96-4B9D-87C5-9F617B9981D7}] => E:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{E7262040-3705-4850-9D7F-2AD728E5F533}] => E:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{88E46CE9-BD25-4A47-9AD7-7EBFBC575E29}] => E:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{80D08ACC-04E3-4BEC-B63E-FF1506AA2681}] => E:\Steam\steamapps\common\Scrap Mechanic\Release\ScrapMechanic.exe
FirewallRules: [{A8AEA435-CFFE-4BB5-AF25-CB654D8899A2}] => E:\Steam\steamapps\common\Scrap Mechanic\Release\ScrapMechanic.exe
FirewallRules: [{EA713A1E-AEA1-4CF9-869C-619A64325955}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{1779807D-5B84-4419-97D7-8B44C2A78F46}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{3EE69F64-03CF-434A-B5C9-EE31ADD7006D}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{352C809B-9DB9-4F6C-BC5A-10169520A223}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{76495409-2962-44FC-B895-B8857EE2B451}] => E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{D0B11EC6-97BF-4D6F-8960-C780B2991A77}] => E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{B3CD45DC-8487-4CA2-A294-B5AFBACAC170}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7EB39559-6210-452B-9EEC-AC37585B8D09}] => E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F315852F-24F0-4C83-8239-444C7448CE12}] => E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{50617EDE-E957-4F87-A354-43593333CABA}] => E:\Steam\steamapps\common\Weapons of Mythology - New Age -\Weapons Of Mythology New Age.exe
FirewallRules: [{278EBC98-2332-4728-A265-A1A83A8B2849}] => E:\Steam\steamapps\common\Weapons of Mythology - New Age -\Weapons Of Mythology New Age.exe
FirewallRules: [{A14A0E3F-66B6-4BC5-A005-A4112F6E260E}] => E:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{65D2B53C-373B-49E0-A0C8-D39682072A6F}] => E:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{785A686F-05E1-4C74-B922-99CE5B22DE78}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{D18C3D10-2EB8-41A0-8C29-241D6B8420BC}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{1307ADC0-7EA4-43E3-BA39-16F7978ADF77}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{B1D50E74-3D0A-4E2F-AF20-7D8EC5E39ED2}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{468BEF7B-EEFB-4735-BEF5-C0A17177E818}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{AE26E809-ECCC-4193-96C3-9A04D11B7979}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{AB3EA093-C758-40E5-8007-2172EC5B5BAF}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{151DD038-B952-4380-9730-4837936F60F4}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{B1DC4F83-FF15-4568-A1A4-3483A857CF1D}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{D7ABA18E-7C47-4DEF-9300-7C23C7F5B326}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{8989120D-C8C6-48ED-B039-B1F7EA0D5D63}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{C9A92BAC-8EBC-41E4-9DCA-E9B09FFCD19A}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{D4EAF82B-B3BE-4CF8-9E85-EB4D0E3CD45C}] => E:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{F8860564-0FF8-4275-981F-86C67DD0D21B}] => E:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/05/2017 07:45:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1980
Startzeit der fehlerhaften Anwendung: 0x01d2671e3938b202
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: e6809586-75cd-4a1b-b313-8a086fa729ca
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:45:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1980
Startzeit der fehlerhaften Anwendung: 0x01d2671e3938b202
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 27dc32dd-ea65-4d82-af44-f4706ce506d7
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:37:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x28cc
Startzeit der fehlerhaften Anwendung: 0x01d2671e32c8f052
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 957bd5e6-a5bb-4015-8e81-4a4c39054892
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:37:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x28cc
Startzeit der fehlerhaften Anwendung: 0x01d2671e32c8f052
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 7ae786f1-8f29-4b3b-b8ea-7e7dfb6efe09
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 082f714b-2ca0-466f-917a-ad8342edd102
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: c31be262-3e31-4dbe-9915-7b18fa9d645b
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: a9d5f30e-4cf2-46a8-978a-bc532f7d017c
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 5c0d9125-b7f7-4d6b-a61d-fd4c254c6c6b
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 94565fd3-ec42-48ea-b184-6ecae19fbe30
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:35:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x25c8
Startzeit der fehlerhaften Anwendung: 0x01d2671d993e0f09
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 375219bc-3d8c-4153-87ce-258df185962b
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge


Systemfehler:
=============
Error: (01/05/2017 02:04:37 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6NS9837)
Description: Der Server "{37998346-3765-45B1-8C66-AA88CA6B20B8}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/05/2017 02:02:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet:
Unbekannter Fehler

Error: (01/05/2017 02:00:45 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 07:58:44 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: Candy Crush Soda Saga

Error: (01/05/2017 07:58:44 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: Candy Crush Soda Saga

Error: (01/05/2017 07:58:38 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: Microsoft Engagement Framework

Error: (01/05/2017 07:58:19 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: Minecraft: Windows 10 Edition

Error: (01/05/2017 07:57:57 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: Facebook

Error: (01/05/2017 07:57:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: MSN News

Error: (01/05/2017 07:57:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d01 fehlgeschlagen: MSN News


CodeIntegrity:
===================================
  Date: 2017-01-05 07:33:04.458
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:33:03.164
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:33:03.153
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:32:44.054
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:32:43.696
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:11.837
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:11.834
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:05.700
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:05.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2016-12-23 21:49:55.308
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 16333.83 MB
Verfügbarer physikalischer RAM: 13041.78 MB
Summe virtueller Speicher: 18765.83 MB
Verfügbarer virtueller Speicher: 15073.7 MB

==================== Laufwerke ================================

Drive c: (SSD) (Fixed) (Total:255.51 GB) (Free:196.89 GB) NTFS
Drive d: (TuneUp Utilities) (CDROM) (Total:0.26 GB) (Free:0 GB) CDFS
Drive e: (HDD) (Fixed) (Total:931.39 GB) (Free:706.47 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (Size: 256.2 GB) (Disk ID: 1349CB3B)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus 05.01.2017 18:32
1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Yvi1993 05.01.2017 18:46
TDSSKiller
 
Code:
18:34:58.0438 0x2e30  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
18:34:58.0438 0x2e30  UEFI system
18:35:02.0227 0x2e30  ============================================================
18:35:02.0227 0x2e30  Current date / time: 2017/01/05 18:35:02.0227
18:35:02.0230 0x2e30  SystemInfo:
18:35:02.0230 0x2e30 
18:35:02.0230 0x2e30  OS Version: 10.0.14393 ServicePack: 0.0
18:35:02.0230 0x2e30  Product type: Workstation
18:35:02.0230 0x2e30  ComputerName: DESKTOP-6NS9837
18:35:02.0230 0x2e30  UserName: User1
18:35:02.0230 0x2e30  Windows directory: C:\Windows
18:35:02.0230 0x2e30  System windows directory: C:\Windows
18:35:02.0230 0x2e30  Running under WOW64
18:35:02.0230 0x2e30  Processor architecture: Intel x64
18:35:02.0230 0x2e30  Number of processors: 4
18:35:02.0230 0x2e30  Page size: 0x1000
18:35:02.0230 0x2e30  Boot type: Normal boot
18:35:02.0230 0x2e30  CodeIntegrityOptions = 0x00000001
18:35:02.0230 0x2e30  ============================================================
18:35:02.0395 0x2e30  KLMD registered as C:\Windows\system32\drivers\64184519.sys
18:35:02.0395 0x2e30  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.576, osProperties = 0x19
18:35:02.0593 0x2e30  System UUID: {BDC32FED-319A-972D-E53A-FA313F0416A8}
18:35:03.0191 0x2e30  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:35:03.0192 0x2e30  Drive \Device\Harddisk1\DR1 - Size: 0x400B1AA000 ( 256.17 Gb ), SectorSize: 0x200, Cylinders: 0x82A1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:35:03.0198 0x2e30  ============================================================
18:35:03.0198 0x2e30  \Device\Harddisk0\DR0:
18:35:03.0200 0x2e30  GPT partitions:
18:35:03.0200 0x2e30  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {77651BF8-B66F-4536-AABB-5E103FF24CB8}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
18:35:03.0200 0x2e30  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {42E6F29F-4DE1-4C4A-A71D-4CA759FE84C0}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000
18:35:03.0200 0x2e30  MBR partitions:
18:35:03.0200 0x2e30  \Device\Harddisk1\DR1:
18:35:03.0200 0x2e30  GPT partitions:
18:35:03.0201 0x2e30  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {308C02BE-7BE0-4E7E-9566-0C17EE006FEA}, Name: , StartLBA 0x22, BlocksNum 0x40000
18:35:03.0201 0x2e30  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {289CB0E0-40DE-4644-B398-46940A71FD7C}, Name: , StartLBA 0x40800, BlocksNum 0xE1000
18:35:03.0201 0x2e30  \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {279EEDC0-8A6B-4B96-920C-C8D925B32E62}, Name: , StartLBA 0x121800, BlocksNum 0x32000
18:35:03.0201 0x2e30  \Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {14526AAF-1F1E-4507-A4AC-48DD23BB5072}, Name: , StartLBA 0x153800, BlocksNum 0x1FF05000
18:35:03.0201 0x2e30  MBR partitions:
18:35:03.0201 0x2e30  ============================================================
18:35:03.0201 0x2e30  C: <-> \Device\Harddisk1\DR1\Partition4
18:35:03.0216 0x2e30  E: <-> \Device\Harddisk0\DR0\Partition2
18:35:03.0216 0x2e30  ============================================================
18:35:03.0216 0x2e30  Initialize success
18:35:03.0216 0x2e30  ============================================================
18:35:10.0765 0x1db4  ============================================================
18:35:10.0765 0x1db4  Scan started
18:35:10.0765 0x1db4  Mode: Manual;
18:35:10.0765 0x1db4  ============================================================
18:35:10.0765 0x1db4  KSN ping started
18:35:11.0847 0x1db4  KSN ping finished: true
18:35:12.0332 0x1db4  ================ Scan system memory ========================
18:35:12.0332 0x1db4  System memory - ok
18:35:12.0332 0x1db4  ================ Scan services =============================
18:35:12.0363 0x1db4  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
18:35:12.0367 0x1db4  1394ohci - ok
18:35:12.0380 0x1db4  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware          C:\Windows\system32\drivers\3ware.sys
18:35:12.0382 0x1db4  3ware - ok
18:35:12.0397 0x1db4  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:35:12.0406 0x1db4  ACPI - ok
18:35:12.0410 0x1db4  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev        C:\Windows\System32\drivers\AcpiDev.sys
18:35:12.0411 0x1db4  AcpiDev - ok
18:35:12.0422 0x1db4  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
18:35:12.0424 0x1db4  acpiex - ok
18:35:12.0427 0x1db4  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
18:35:12.0428 0x1db4  acpipagr - ok
18:35:12.0431 0x1db4  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
18:35:12.0433 0x1db4  AcpiPmi - ok
18:35:12.0435 0x1db4  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
18:35:12.0436 0x1db4  acpitime - ok
18:35:12.0440 0x1db4  [ E13DE7CD2B62254DD4FF658B7798A37D, 9FCCC90DEF6BE83F8C41D4552D235A7BB5534954D2E7CB7B1C336A31FCCAB3AD ] ACPIVPC        C:\Windows\System32\drivers\AcpiVpc.sys
18:35:12.0441 0x1db4  ACPIVPC - ok
18:35:12.0447 0x1db4  [ DC00FD73505DAEDD99CAF4533B0C05BD, 2863D1F0587B79254FBE093C191C73892768CF2AC59BEF97745EE66CEE3473AF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
18:35:12.0449 0x1db4  AdobeARMservice - ok
18:35:12.0471 0x1db4  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
18:35:12.0484 0x1db4  ADP80XX - ok
18:35:12.0498 0x1db4  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD            C:\Windows\system32\drivers\afd.sys
18:35:12.0505 0x1db4  AFD - ok
18:35:12.0512 0x1db4  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
18:35:12.0516 0x1db4  ahcache - ok
18:35:12.0519 0x1db4  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll
18:35:12.0520 0x1db4  AJRouter - ok
18:35:12.0523 0x1db4  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG            C:\Windows\System32\alg.exe
18:35:12.0525 0x1db4  ALG - ok
18:35:12.0532 0x1db4  ALSysIO - ok
18:35:12.0536 0x1db4  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
18:35:12.0538 0x1db4  AmdK8 - ok
18:35:12.0542 0x1db4  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
18:35:12.0544 0x1db4  AmdPPM - ok
18:35:12.0548 0x1db4  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
18:35:12.0549 0x1db4  amdsata - ok
18:35:12.0556 0x1db4  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
18:35:12.0561 0x1db4  amdsbs - ok
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.04.10
  rootkit: v2016.11.20.01

Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
User1 :: DESKTOP-6NS9837 [administrator]

05.01.2017 07:46:29
mbar-log-2017-01-05 (07-46-29).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 353407
Time elapsed: 6 minute(s), 27 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 05.01.2017 18:56
1. Log vom tdsskiller ist unvollständig
2. tdsskiller wurde nicht lt. Anleitung eingestellt

Yvi1993 05.01.2017 19:11
hoffe habe jetzt alles richtig gemacht :)
 
Code:
19:04:05.0421 0x2f6c  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
19:04:05.0421 0x2f6c  UEFI system
19:04:08.0547 0x2f6c  ============================================================
19:04:08.0547 0x2f6c  Current date / time: 2017/01/05 19:04:08.0547
19:04:08.0550 0x2f6c  SystemInfo:
19:04:08.0550 0x2f6c 
19:04:08.0550 0x2f6c  OS Version: 10.0.14393 ServicePack: 0.0
19:04:08.0550 0x2f6c  Product type: Workstation
19:04:08.0550 0x2f6c  ComputerName: DESKTOP-6NS9837
19:04:08.0551 0x2f6c  UserName: User1
19:04:08.0551 0x2f6c  Windows directory: C:\Windows
19:04:08.0551 0x2f6c  System windows directory: C:\Windows
19:04:08.0551 0x2f6c  Running under WOW64
19:04:08.0551 0x2f6c  Processor architecture: Intel x64
19:04:08.0551 0x2f6c  Number of processors: 4
19:04:08.0551 0x2f6c  Page size: 0x1000
19:04:08.0551 0x2f6c  Boot type: Normal boot
19:04:08.0551 0x2f6c  CodeIntegrityOptions = 0x00000001
19:04:08.0551 0x2f6c  ============================================================
19:04:08.0696 0x2f6c  KLMD registered as C:\Windows\system32\drivers\40459998.sys
19:04:08.0696 0x2f6c  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.576, osProperties = 0x19
19:04:08.0896 0x2f6c  System UUID: {BDC32FED-319A-972D-E53A-FA313F0416A8}
19:04:09.0487 0x2f6c  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:04:09.0487 0x2f6c  Drive \Device\Harddisk1\DR1 - Size: 0x400B1AA000 ( 256.17 Gb ), SectorSize: 0x200, Cylinders: 0x82A1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:04:09.0497 0x2f6c  ============================================================
19:04:09.0497 0x2f6c  \Device\Harddisk0\DR0:
19:04:09.0497 0x2f6c  GPT partitions:
19:04:09.0497 0x2f6c  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {77651BF8-B66F-4536-AABB-5E103FF24CB8}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
19:04:09.0497 0x2f6c  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {42E6F29F-4DE1-4C4A-A71D-4CA759FE84C0}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000
19:04:09.0497 0x2f6c  MBR partitions:
19:04:09.0497 0x2f6c  \Device\Harddisk1\DR1:
19:04:09.0497 0x2f6c  GPT partitions:
19:04:09.0497 0x2f6c  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {308C02BE-7BE0-4E7E-9566-0C17EE006FEA}, Name: , StartLBA 0x22, BlocksNum 0x40000
19:04:09.0497 0x2f6c  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {289CB0E0-40DE-4644-B398-46940A71FD7C}, Name: , StartLBA 0x40800, BlocksNum 0xE1000
19:04:09.0497 0x2f6c  \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {279EEDC0-8A6B-4B96-920C-C8D925B32E62}, Name: , StartLBA 0x121800, BlocksNum 0x32000
19:04:09.0497 0x2f6c  \Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {14526AAF-1F1E-4507-A4AC-48DD23BB5072}, Name: , StartLBA 0x153800, BlocksNum 0x1FF05000
19:04:09.0499 0x2f6c  MBR partitions:
19:04:09.0499 0x2f6c  ============================================================
19:04:09.0499 0x2f6c  C: <-> \Device\Harddisk1\DR1\Partition4
19:04:09.0512 0x2f6c  E: <-> \Device\Harddisk0\DR0\Partition2
19:04:09.0512 0x2f6c  ============================================================
19:04:09.0512 0x2f6c  Initialize success
19:04:09.0512 0x2f6c  ============================================================
19:05:09.0730 0x2790  ============================================================
19:05:09.0730 0x2790  Scan started
19:05:09.0730 0x2790  Mode: Manual; SigCheck; TDLFS;
19:05:09.0730 0x2790  ============================================================
19:05:09.0730 0x2790  KSN ping started
19:05:10.0941 0x2790  KSN ping finished: true
19:05:11.0394 0x2790  ================ Scan system memory ========================
19:05:11.0394 0x2790  System memory - ok
19:05:11.0395 0x2790  ================ Scan services =============================
19:05:11.0425 0x2790  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
19:05:11.0497 0x2790  1394ohci - ok
19:05:11.0507 0x2790  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware          C:\Windows\system32\drivers\3ware.sys
19:05:11.0522 0x2790  3ware - ok
19:05:11.0536 0x2790  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\Windows\system32\drivers\ACPI.sys
19:05:11.0563 0x2790  ACPI - ok
19:05:11.0566 0x2790  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev        C:\Windows\System32\drivers\AcpiDev.sys
19:05:11.0585 0x2790  AcpiDev - ok
19:05:11.0589 0x2790  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
19:05:11.0602 0x2790  acpiex - ok
19:05:11.0606 0x2790  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
19:05:11.0623 0x2790  acpipagr - ok
19:05:11.0626 0x2790  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi        C:\Windows\System32\drivers\acpipmi.sys
19:05:11.0642 0x2790  AcpiPmi - ok
19:05:11.0645 0x2790  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
19:05:11.0659 0x2790  acpitime - ok
19:05:11.0663 0x2790  [ E13DE7CD2B62254DD4FF658B7798A37D, 9FCCC90DEF6BE83F8C41D4552D235A7BB5534954D2E7CB7B1C336A31FCCAB3AD ] ACPIVPC        C:\Windows\System32\drivers\AcpiVpc.sys
19:05:11.0679 0x2790  ACPIVPC - ok
19:05:11.0684 0x2790  [ DC00FD73505DAEDD99CAF4533B0C05BD, 2863D1F0587B79254FBE093C191C73892768CF2AC59BEF97745EE66CEE3473AF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:05:11.0693 0x2790  AdobeARMservice - ok
19:05:11.0713 0x2790  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX        C:\Windows\system32\drivers\ADP80XX.SYS
19:05:11.0743 0x2790  ADP80XX - ok
19:05:11.0757 0x2790  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD            C:\Windows\system32\drivers\afd.sys
19:05:11.0783 0x2790  AFD - ok
19:05:11.0789 0x2790  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache        C:\Windows\system32\DRIVERS\ahcache.sys
19:05:11.0812 0x2790  ahcache - ok
19:05:11.0815 0x2790  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\Windows\System32\AJRouter.dll
19:05:11.0833 0x2790  AJRouter - ok
19:05:11.0837 0x2790  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG            C:\Windows\System32\alg.exe
19:05:11.0857 0x2790  ALG - ok
19:05:11.0865 0x2790  ALSysIO - ok
19:05:11.0869 0x2790  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8          C:\Windows\System32\drivers\amdk8.sys
19:05:11.0889 0x2790  AmdK8 - ok
19:05:11.0893 0x2790  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
19:05:11.0910 0x2790  AmdPPM - ok
19:05:11.0914 0x2790  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
19:05:11.0926 0x2790  amdsata - ok
19:05:11.0932 0x2790  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
19:05:11.0948 0x2790  amdsbs - ok
19:05:11.0951 0x2790  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata        C:\Windows\system32\drivers\amdxata.sys
19:05:11.0965 0x2790  amdxata - ok
19:05:11.0970 0x2790  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID          C:\Windows\system32\drivers\appid.sys
19:05:11.0988 0x2790  AppID - ok
19:05:11.0993 0x2790  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\Windows\System32\appidsvc.dll
19:05:12.0015 0x2790  AppIDSvc - ok
19:05:12.0019 0x2790  [ 73FAA5517CCD1332F00192A303CF2026, 75636222BFF381A3EECA010752DF7DC1603A395B91FF7FBF92127B5CA8EFFEE5 ] Appinfo        C:\Windows\System32\appinfo.dll
19:05:12.0038 0x2790  Appinfo - ok
19:05:12.0041 0x2790  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr  C:\Windows\system32\drivers\applockerfltr.sys
19:05:12.0065 0x2790  applockerfltr - ok
19:05:12.0070 0x2790  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt        C:\Windows\System32\appmgmts.dll
19:05:12.0091 0x2790  AppMgmt - ok
19:05:12.0102 0x2790  [ A0746EF6C5AB7A17A67BC167167499C1, 1D2154D3AFC5219293EDD508C7726E7756FB72BF04F73861C575D1FE5C553411 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
19:05:12.0133 0x2790  AppReadiness - ok
19:05:12.0148 0x2790  [ 6010A920FDE5BFE4EA056F9736FBDC06, F55F68D5AD1F272BC285E716E02090C62FC87476DD6CE7ABA6BE7EF8EF6178DE ] AppVClient      C:\Windows\system32\AppVClient.exe
19:05:12.0177 0x2790  AppVClient - ok
19:05:12.0181 0x2790  [ B66ED2CB37F7E4696A51612AFBA08834, 70BA67AF7F1290E3145B873B53516F138E50D8AAC80CD00CBA66467ABC6643CB ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
19:05:12.0195 0x2790  AppvStrm - ok
19:05:12.0205 0x2790  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr      C:\Windows\system32\drivers\AppvVemgr.sys
19:05:12.0218 0x2790  AppvVemgr - ok
19:05:12.0223 0x2790  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs        C:\Windows\system32\drivers\AppvVfs.sys
19:05:12.0236 0x2790  AppvVfs - ok
19:05:12.0271 0x2790  [ 2C1CEC25F6D92871F38960E2E84CC3EE, 979DB74192644A71F3031EB29480ECEFE014B916636D85AACD64292CB58494A5 ] AppXSvc        C:\Windows\system32\appxdeploymentserver.dll
19:05:12.0344 0x2790  AppXSvc - ok
19:05:12.0351 0x2790  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
19:05:12.0365 0x2790  arcsas - ok
19:05:12.0369 0x2790  [ 9B480B472D6826E7257C90E2D0EE2954, C52C198602D180011A9345AE6F108EC4B1FD91234AF2E6296B2E39C1888B0D4D ] aswHwid        C:\Windows\system32\drivers\aswHwid.sys
19:05:12.0382 0x2790  aswHwid - ok
19:05:12.0386 0x2790  [ 1BB00571CC2C78463ABD7E9C32970758, BF523468754CB1628D66F28B06FAF7C545C5724801B04888517A2FB4BF9582BF ] aswMonFlt      C:\Windows\system32\drivers\aswMonFlt.sys
19:05:12.0397 0x2790  aswMonFlt - ok
19:05:12.0401 0x2790  [ 7010B57D708DA5C9686A5923EE621776, 5A554B8941C156EC341C602F34679A7475802B19EE6A99AA29AE2628A123ECB1 ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
19:05:12.0412 0x2790  aswRdr - ok
19:05:12.0416 0x2790  [ 937885085BFE5BD08EC1BC0245DD203B, 6DDD89245EEA3B8106C5F2EB6FA8CF525F3B42AA7032276DE78953E06FE7F4B4 ] aswRvrt        C:\Windows\system32\drivers\aswRvrt.sys
19:05:12.0425 0x2790  aswRvrt - ok
19:05:12.0442 0x2790  [ 0B6352251C5D84130DF4252D33D266C2, C6A2E0074A7FCFB5799949431F5660B9AF6441001EA9B609F7B3900F4007EBD0 ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
19:05:12.0465 0x2790  aswSnx - ok
19:05:12.0476 0x2790  [ 28213B34725B18387CC1B8C3D73858A1, D86113D89C62F090B393B68B522581248AEF3568F8FD0FF86B3625F2E6DD4DB8 ] aswSP          C:\Windows\system32\drivers\aswSP.sys
19:05:12.0493 0x2790  aswSP - ok
19:05:12.0499 0x2790  [ 9C58B6E9663D0A76D00D83E43C765BDF, 3F474932E77318CD450A3A9C89667D2B26A7E3FAB9AA95D97FF3B1979623A7F2 ] aswStm          C:\Windows\system32\drivers\aswStm.sys
19:05:12.0510 0x2790  aswStm - ok
19:05:12.0519 0x2790  [ D60D9201739400F0FBDB9E36A3212D91, 01A17516AB7F4D2C72E2DC51F7B49D1C4F50F564992F78A71E73821D7F8220E7 ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
19:05:12.0532 0x2790  aswVmm - ok
19:05:12.0535 0x2790  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
19:05:12.0553 0x2790  AsyncMac - ok
19:05:12.0556 0x2790  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi          C:\Windows\system32\drivers\atapi.sys
19:05:12.0567 0x2790  atapi - ok
19:05:12.0631 0x2790  [ 9E6592755C8A8C2C716FBC36D49D7D43, 51A86935971D2E62E8902769B503201C4FA69E08C822B66DBDDD3A42585BABE2 ] athr            C:\Windows\System32\drivers\athw10x.sys
19:05:12.0703 0x2790  athr - ok
19:05:12.0714 0x2790  [ 59F44051BCD479E70446506B7E4E78BB, CB58E55196EC702DC85916F963A3C16D429C141391F9AA7F415BD63E7328C4C6 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
19:05:12.0741 0x2790  AudioEndpointBuilder - ok
19:05:12.0758 0x2790  [ 1C986DC8F4FDA1B040AC1176FB24467F, DEDA2FF4D0369348C2A74D29FB08AC86219BBCFDF44C59339BC39A25AE0727EB ] Audiosrv        C:\Windows\System32\Audiosrv.dll
19:05:12.0801 0x2790  Audiosrv - ok
19:05:12.0808 0x2790  [ F4E0580B5789474385E7ACB189C4AF2C, DB5BE2C852AC102AB8EB186362E582E250B843BA52B3B71AF08A5FDA8A6F91AF ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
19:05:12.0820 0x2790  avast! Antivirus - ok
19:05:12.0828 0x2790  [ 03B45C52179E8DAE51A0F685C30D06D6, E06F066B4BFE5344BBF5749B9B8B8CFBA0C02920FD2B9C73BDDA7E34F1785DA7 ] AVP17.0.0      C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
19:05:12.0840 0x2790  AVP17.0.0 - ok
19:05:12.0846 0x2790  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
19:05:12.0864 0x2790  AxInstSV - ok
19:05:12.0875 0x2790  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
19:05:12.0895 0x2790  b06bdrv - ok
19:05:12.0898 0x2790  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
19:05:12.0916 0x2790  BasicDisplay - ok
19:05:12.0919 0x2790  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender    C:\Windows\System32\drivers\BasicRender.sys
19:05:12.0933 0x2790  BasicRender - ok
19:05:12.0937 0x2790  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn          C:\Windows\System32\drivers\bcmfn.sys
19:05:12.0952 0x2790  bcmfn - ok
19:05:12.0955 0x2790  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
19:05:12.0970 0x2790  bcmfn2 - ok
19:05:12.0979 0x2790  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\Windows\System32\bdesvc.dll
19:05:13.0009 0x2790  BDESVC - ok
19:05:13.0012 0x2790  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\Windows\system32\drivers\Beep.sys
19:05:13.0030 0x2790  Beep - ok
19:05:13.0048 0x2790  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE            C:\Windows\System32\bfe.dll
19:05:13.0083 0x2790  BFE - ok
19:05:13.0088 0x2790  [ A9C299A036F7BAB662868D7250BAC799, A45B440A4BD2595E524E9ADA4CAFBF7768983B75C792BA38A22734A0B4512573 ] BfLwf          C:\Windows\system32\DRIVERS\bwcW10x64.sys
19:05:13.0100 0x2790  BfLwf - ok
19:05:13.0118 0x2790  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\Windows\System32\qmgr.dll
19:05:13.0162 0x2790  BITS - ok
19:05:13.0167 0x2790  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
19:05:13.0185 0x2790  bowser - ok
19:05:13.0199 0x2790  [ 2447BD15B41298622CC662249CD0F496, 013A326D2E3BF68D654BBABE2F1E5DF0FF0A153A4B95D570EE28F9BC0F5A78C3 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
19:05:13.0238 0x2790  BrokerInfrastructure - ok
19:05:13.0243 0x2790  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser        C:\Windows\System32\browser.dll
19:05:13.0263 0x2790  Browser - ok
19:05:13.0275 0x2790  [ 2922536D781DDF1F8321FB64F8A713C3, 2D93CD8C1FFC302F61AA0D504410CE4B9BD91DDAC37846C3401E44226FB7E36F ] BtFilter        C:\Windows\system32\DRIVERS\btfilter.sys
19:05:13.0297 0x2790  BtFilter - ok
19:05:13.0301 0x2790  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
19:05:13.0319 0x2790  BthAvrcpTg - ok
19:05:13.0323 0x2790  [ 77630A51FAF6A07922FEE835F4DED8F6, E096A9DC12885FD19575346A9693A66D0DDFF96C3155AD2040F2BF4249D1D609 ] BthEnum        C:\Windows\System32\drivers\BthEnum.sys
19:05:13.0342 0x2790  BthEnum - ok
19:05:13.0346 0x2790  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum      C:\Windows\System32\drivers\bthhfenum.sys
19:05:13.0362 0x2790  BthHFEnum - ok
19:05:13.0365 0x2790  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
19:05:13.0379 0x2790  bthhfhid - ok
19:05:13.0387 0x2790  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
19:05:13.0415 0x2790  BthHFSrv - ok
19:05:13.0421 0x2790  [ 0AB691736D4D4029444AF62DE59CFD37, C1C22EFBF67331B87AB261BBF9813009257437BA02F728EC2DFA1A49ECC5FABF ] BthLEEnum      C:\Windows\System32\drivers\BthLEEnum.sys
19:05:13.0441 0x2790  BthLEEnum - ok
19:05:13.0444 0x2790  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
19:05:13.0460 0x2790  BTHMODEM - ok
19:05:13.0464 0x2790  [ 224BA1CB1F3C702F0D001D2AFC9793B1, F139F6F78C716E1167E16530AE31E4A26C2A69467BCB08A9A52A101B31DF7771 ] BthPan          C:\Windows\System32\drivers\bthpan.sys
19:05:13.0483 0x2790  BthPan - ok
19:05:13.0500 0x2790  [ 851ED52AE3E62CD5374BD4BBFF7A9DAB, 381281CB7D8FC4026092330B06E24BC84EEF79EE3C97E21900D950D7D9AB2FC3 ] BTHPORT        C:\Windows\System32\drivers\BTHport.sys
19:05:13.0536 0x2790  BTHPORT - ok
19:05:13.0541 0x2790  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv        C:\Windows\system32\bthserv.dll
19:05:13.0617 0x2790  bthserv - ok
19:05:13.0622 0x2790  [ DC5955E589C55E2313D69B64E1A183F3, 06D703246D0813DE53D62885C8B7381135783673FF4BDDD5CC38FEB54901BB76 ] BTHUSB          C:\Windows\System32\drivers\BTHUSB.sys
19:05:13.0638 0x2790  BTHUSB - ok
19:05:13.0642 0x2790  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
19:05:13.0660 0x2790  buttonconverter - ok
19:05:13.0666 0x2790  [ E6B613546ED6D2FFFF1D263BAC7721B8, 429CB42B52645900F1AF4BAB6A404047C0F5C24E9753CA07A08BCED2771B56B7 ] ByteFenceService C:\Program Files\ByteFence\ByteFenceService.exe
19:05:13.0678 0x2790  ByteFenceService - ok
19:05:13.0682 0x2790  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\Windows\System32\drivers\capimg.sys
19:05:13.0702 0x2790  CapImg - ok
19:05:13.0706 0x2790  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
19:05:13.0725 0x2790  cdfs - ok
19:05:13.0734 0x2790  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
19:05:13.0760 0x2790  CDPSvc - ok
19:05:13.0767 0x2790  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
19:05:13.0789 0x2790  CDPUserSvc - ok
19:05:13.0796 0x2790  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom          C:\Windows\System32\drivers\cdrom.sys
19:05:13.0817 0x2790  cdrom - ok
19:05:13.0823 0x2790  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] CertPropSvc    C:\Windows\System32\certprop.dll
19:05:13.0843 0x2790  CertPropSvc - ok
19:05:13.0852 0x2790  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi      C:\Windows\system32\drivers\cht4sx64.sys
19:05:13.0868 0x2790  cht4iscsi - ok
19:05:13.0900 0x2790  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd        C:\Windows\System32\drivers\cht4vx64.sys
19:05:13.0947 0x2790  cht4vbd - ok
19:05:13.0952 0x2790  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\Windows\System32\drivers\circlass.sys
19:05:13.0968 0x2790  circlass - ok
19:05:13.0977 0x2790  [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
19:05:13.0994 0x2790  CLFS - ok
19:05:14.0009 0x2790  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC        C:\Windows\System32\ClipSVC.dll
19:05:14.0036 0x2790  ClipSVC - ok
19:05:14.0040 0x2790  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg          C:\Windows\System32\drivers\registry.sys
19:05:14.0058 0x2790  clreg - ok
19:05:14.0065 0x2790  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
19:05:14.0079 0x2790  CmBatt - ok
19:05:14.0086 0x2790  [ B29A764A1E76473CD9D64C9438705C19, CD0497EB84DE60E1E491CA495AF981A8DFC4949BB373C1978CAF1BCF4321D30E ] cm_km          C:\Windows\system32\DRIVERS\cm_km.sys
19:05:14.0099 0x2790  cm_km - ok
19:05:14.0111 0x2790  [ B0D9B87B795B7833C9152441CBD55CC4, D86C0FE8BF03D6F3330E16728FE6645AE910F95D23A9EFBDF3A50F45AB5D525B ] CNG            C:\Windows\system32\Drivers\cng.sys
19:05:14.0132 0x2790  CNG - ok
19:05:14.0136 0x2790  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist    C:\Windows\system32\DRIVERS\cnghwassist.sys
19:05:14.0150 0x2790  cnghwassist - ok
19:05:14.0160 0x2790  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
19:05:14.0175 0x2790  CompositeBus - ok
19:05:14.0178 0x2790  COMSysApp - ok
19:05:14.0181 0x2790  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\Windows\system32\drivers\condrv.sys
19:05:14.0193 0x2790  condrv - ok
19:05:14.0207 0x2790  [ 5DE2049D5F57C1D142F36FA9CE443693, E6C2807C0B1EF90C11EB39634693B76EACE6CC675777776112835212A334F328 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
19:05:14.0234 0x2790  CoreMessagingRegistrar - ok
19:05:14.0252 0x2790  [ 75C568E62A2BD89A869C34119A66D19B, 2954F25E511947728FE50AA76ACECE0B6952D1984301027F499E2F3DAAEB65D3 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
19:05:14.0268 0x2790  cphs - ok
19:05:14.0277 0x2790  [ 0FBCAA4ECCD17513E4D3BFF3C86DF62E, E1129A4D38883BBBF84ECA32CFB2AE001C9175D337572E0ED2BD5253C858C3A3 ] cplspcon        C:\Windows\system32\IntelCpHDCPSvc.exe
19:05:14.0293 0x2790  cplspcon - ok
19:05:14.0299 0x2790  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
19:05:14.0319 0x2790  CryptSvc - ok
19:05:14.0329 0x2790  [ 03214883D52FAD46573233852344C72C, 63DCCDD895EB804D205ABB8EA381B34FB0879D09E4D0EB0B28F9B2BB1024BAB7 ] CSC            C:\Windows\system32\drivers\csc.sys
19:05:14.0358 0x2790  CSC - ok
19:05:14.0373 0x2790  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\Windows\System32\cscsvc.dll
19:05:14.0405 0x2790  CscService - ok
19:05:14.0409 0x2790  [ 039B5A8CBD5C75D1C46DF15F7C74D136, A5C8A41F2D406D37E147939F2058373ED091BFCC00CA7E829F887638CD3A2F64 ] dam            C:\Windows\system32\drivers\dam.sys
19:05:14.0427 0x2790  dam - ok
19:05:14.0443 0x2790  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\Windows\system32\rpcss.dll
19:05:14.0481 0x2790  DcomLaunch - ok
19:05:14.0487 0x2790  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
19:05:14.0509 0x2790  DcpSvc - ok
19:05:14.0520 0x2790  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc      C:\Windows\System32\defragsvc.dll
19:05:14.0550 0x2790  defragsvc - ok
19:05:14.0559 0x2790  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\Windows\system32\das.dll
19:05:14.0586 0x2790  DeviceAssociationService - ok
19:05:14.0591 0x2790  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall  C:\Windows\system32\umpnpmgr.dll
19:05:14.0614 0x2790  DeviceInstall - ok
19:05:14.0617 0x2790  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
19:05:14.0639 0x2790  DevQueryBroker - ok
19:05:14.0644 0x2790  [ 0D1D392ED2597F295956D058D33BD7C3, 2F7FE5A06D880F9E2A46C9803DD249DC40C2898C04E946D14E7EECCCC9F2B24F ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
19:05:14.0665 0x2790  Dfsc - ok
19:05:14.0669 0x2790  [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
19:05:14.0680 0x2790  dg_ssudbus - ok
19:05:14.0688 0x2790  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\Windows\system32\dhcpcore.dll
19:05:14.0715 0x2790  Dhcp - ok
19:05:14.0720 0x2790  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
19:05:14.0738 0x2790  diagnosticshub.standardcollector.service - ok
19:05:14.0769 0x2790  [ CAD14E0AD1F03397E9B1C8733D76BEF4, 0035EF35F6520B1DF0E599C8A06D4163C52576BCE0976BF729B44DECDC506627 ] DiagTrack      C:\Windows\system32\diagtrack.dll
19:05:14.0839 0x2790  DiagTrack - ok
19:05:14.0845 0x2790  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\Windows\system32\drivers\disk.sys
19:05:14.0857 0x2790  disk - ok
19:05:14.0867 0x2790  [ 09CF47A74BFB480B8262FCEE222004B6, F5CD0ACA04BCB95984595CC2E17BC9E92865091A0A3BCAD4B06438A1570E7696 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
19:05:14.0895 0x2790  DmEnrollmentSvc - ok
19:05:14.0898 0x2790  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc          C:\Windows\System32\drivers\dmvsc.sys
19:05:14.0914 0x2790  dmvsc - ok
19:05:14.0918 0x2790  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
19:05:14.0942 0x2790  dmwappushservice - ok
19:05:14.0949 0x2790  [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache        C:\Windows\System32\dnsrslvr.dll
19:05:14.0973 0x2790  Dnscache - ok
19:05:14.0980 0x2790  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc        C:\Windows\System32\dot3svc.dll
19:05:15.0004 0x2790  dot3svc - ok
19:05:15.0009 0x2790  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS            C:\Windows\system32\dps.dll
19:05:15.0034 0x2790  DPS - ok
19:05:15.0036 0x2790  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud        C:\Windows\system32\DRIVERS\drmkaud.sys
19:05:15.0051 0x2790  drmkaud - ok
19:05:15.0057 0x2790  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
19:05:15.0082 0x2790  DsmSvc - ok
19:05:15.0088 0x2790  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc          C:\Windows\System32\DsSvc.dll
19:05:15.0108 0x2790  DsSvc - ok
19:05:15.0142 0x2790  [ 19F2B54EE8861D90579BD0E3AE5182F9, FDD4F091C61C8C20550C8F68375ABD7ED718A733F680F0F0367D4796C302BA14 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
19:05:15.0189 0x2790  DXGKrnl - ok
19:05:15.0196 0x2790  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost        C:\Windows\System32\eapsvc.dll
19:05:15.0219 0x2790  EapHost - ok
19:05:15.0269 0x2790  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
19:05:15.0336 0x2790  ebdrv - ok
19:05:15.0343 0x2790  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS            C:\Windows\System32\lsass.exe
19:05:15.0355 0x2790  EFS - ok
19:05:15.0359 0x2790  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass    C:\Windows\system32\drivers\EhStorClass.sys
19:05:15.0372 0x2790  EhStorClass - ok
19:05:15.0377 0x2790  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
19:05:15.0389 0x2790  EhStorTcgDrv - ok
19:05:15.0394 0x2790  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
19:05:15.0415 0x2790  embeddedmode - ok
19:05:15.0422 0x2790  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc      C:\Windows\system32\EnterpriseAppMgmtSvc.dll
19:05:15.0448 0x2790  EntAppSvc - ok
19:05:15.0451 0x2790  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
19:05:15.0468 0x2790  ErrDev - ok
19:05:15.0473 0x2790  [ 4D7F3114147C31390262F19F74E5BF07, E89F5304149B51327DFE1314AE13352923B752BC24585FF42F28EF5F00936A6A ] ESProtectionDriver C:\Windows\system32\drivers\mbae64.sys
19:05:15.0483 0x2790  ESProtectionDriver - ok
19:05:15.0495 0x2790  [ 6BD85B39B7B23F03B24CF641ED29147B, 850F21750BB39E5239B1584E1117844CAAAF6A5C58E79366552309F917675CE5 ] ETD            C:\Windows\system32\DRIVERS\ETD.sys
19:05:15.0512 0x2790  ETD - ok
19:05:15.0524 0x2790  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem    C:\Windows\system32\es.dll
19:05:15.0550 0x2790  EventSystem - ok
19:05:15.0558 0x2790  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat          C:\Windows\system32\drivers\exfat.sys
19:05:15.0582 0x2790  exfat - ok
19:05:15.0591 0x2790  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat        C:\Windows\system32\drivers\fastfat.sys
19:05:15.0607 0x2790  fastfat - ok
19:05:15.0620 0x2790  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax            C:\Windows\system32\fxssvc.exe
19:05:15.0654 0x2790  Fax - ok
19:05:15.0657 0x2790  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc            C:\Windows\System32\drivers\fdc.sys
19:05:15.0673 0x2790  fdc - ok
19:05:15.0676 0x2790  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost        C:\Windows\system32\fdPHost.dll
19:05:15.0697 0x2790  fdPHost - ok
19:05:15.0700 0x2790  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\Windows\system32\fdrespub.dll
19:05:15.0717 0x2790  FDResPub - ok
19:05:15.0722 0x2790  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc          C:\Windows\system32\fhsvc.dll
19:05:15.0741 0x2790  fhsvc - ok
19:05:15.0745 0x2790  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt      C:\Windows\system32\drivers\filecrypt.sys
19:05:15.0763 0x2790  FileCrypt - ok
19:05:15.0767 0x2790  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
19:05:15.0780 0x2790  FileInfo - ok
19:05:15.0782 0x2790  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
19:05:15.0802 0x2790  Filetrace - ok
19:05:15.0805 0x2790  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
19:05:15.0820 0x2790  flpydisk - ok
19:05:15.0829 0x2790  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
19:05:15.0848 0x2790  FltMgr - ok
19:05:15.0877 0x2790  [ 49BF5C8182C3D2D6CD9F7EEDF1CFDB66, 0977EBE86B57FC370D27CA69D58122397D5D5369AF0C8DBCC492AE7AD55CBA2B ] FontCache      C:\Windows\system32\FntCache.dll
19:05:15.0937 0x2790  FontCache - ok
19:05:15.0943 0x2790  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:05:15.0954 0x2790  FontCache3.0.0.0 - ok
19:05:15.0969 0x2790  [ 8B52024D3A5C3A12F1C4D75D30A976C5, 982F1C783966C9A6D255AA7DBAB6D225EBE0050A36176B8DE85E8ADBFE17FDF1 ] FrameServer    C:\Windows\system32\FrameServer.dll
19:05:16.0006 0x2790  FrameServer - ok
19:05:16.0011 0x2790  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
19:05:16.0023 0x2790  FsDepends - ok
19:05:16.0026 0x2790  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
19:05:16.0037 0x2790  Fs_Rec - ok
19:05:16.0051 0x2790  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
19:05:16.0073 0x2790  fvevol - ok
19:05:16.0077 0x2790  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
19:05:16.0094 0x2790  gencounter - ok
19:05:16.0097 0x2790  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
19:05:16.0114 0x2790  genericusbfn - ok
19:05:16.0119 0x2790  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101    C:\Windows\system32\Drivers\msgpioclx.sys
19:05:16.0133 0x2790  GPIOClx0101 - ok
19:05:16.0152 0x2790  [ 713A176494CEC107E663CAD6C2B27F77, 76871D8CFBA8FCD8CFF96208AE84C658EBEC60270D978898B90EE9451AA1BCE1 ] gpsvc          C:\Windows\System32\gpsvc.dll
19:05:16.0202 0x2790  gpsvc - ok
19:05:16.0205 0x2790  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
19:05:16.0221 0x2790  GpuEnergyDrv - ok
19:05:16.0227 0x2790  [ 50FCC5C822A6B4FC6F377EE9F9F37C7B, 57BD4032367D91EF19931E927127AA1D54DA6118B36C219B0FFD95326A2FFCA0 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:05:16.0238 0x2790  gupdate - ok
19:05:16.0242 0x2790  [ 50FCC5C822A6B4FC6F377EE9F9F37C7B, 57BD4032367D91EF19931E927127AA1D54DA6118B36C219B0FFD95326A2FFCA0 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:05:16.0255 0x2790  gupdatem - ok
19:05:16.0264 0x2790  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
19:05:16.0290 0x2790  HdAudAddService - ok
19:05:16.0294 0x2790  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
19:05:16.0310 0x2790  HDAudBus - ok
19:05:16.0314 0x2790  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt        C:\Windows\System32\drivers\HidBatt.sys
19:05:16.0325 0x2790  HidBatt - ok
19:05:16.0329 0x2790  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\Windows\System32\drivers\hidbth.sys
19:05:16.0346 0x2790  HidBth - ok
19:05:16.0349 0x2790  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
19:05:16.0364 0x2790  hidi2c - ok
19:05:16.0367 0x2790  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
19:05:16.0378 0x2790  hidinterrupt - ok
19:05:16.0382 0x2790  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr          C:\Windows\System32\drivers\hidir.sys
19:05:16.0397 0x2790  HidIr - ok
19:05:16.0401 0x2790  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv        C:\Windows\system32\hidserv.dll
19:05:16.0418 0x2790  hidserv - ok
19:05:16.0422 0x2790  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
19:05:16.0439 0x2790  HidUsb - ok
19:05:16.0447 0x2790  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:05:16.0473 0x2790  HomeGroupListener - ok
19:05:16.0483 0x2790  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:05:16.0512 0x2790  HomeGroupProvider - ok
19:05:16.0516 0x2790  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
19:05:16.0528 0x2790  HpSAMD - ok
19:05:16.0548 0x2790  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
19:05:16.0578 0x2790  HTTP - ok
19:05:16.0583 0x2790  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\Windows\System32\hvhostsvc.dll
19:05:16.0601 0x2790  HvHost - ok
19:05:16.0604 0x2790  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice      C:\Windows\system32\drivers\hvservice.sys
19:05:16.0616 0x2790  hvservice - ok
19:05:16.0629 0x2790  [ EF558A02D734A1403583E95CCEEC2487, F0D052DAF48A62E4A90D067BFCB5EE9563804DE68D0EA82E0E11C8D16AD19D29 ] HWiNFO32        C:\Windows\SysWoW64\drivers\HWiNFO64A.SYS
19:05:16.0639 0x2790  HWiNFO32 - ok
19:05:16.0641 0x2790  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
19:05:16.0656 0x2790  hwpolicy - ok
19:05:16.0658 0x2790  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
19:05:16.0677 0x2790  hyperkbd - ok
19:05:16.0682 0x2790  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
19:05:16.0700 0x2790  i8042prt - ok
19:05:16.0704 0x2790  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\Windows\System32\drivers\iagpio.sys
19:05:16.0722 0x2790  iagpio - ok
19:05:16.0725 0x2790  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c          C:\Windows\System32\drivers\iai2c.sys
19:05:16.0742 0x2790  iai2c - ok
19:05:16.0747 0x2790  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys
19:05:16.0762 0x2790  iaLPSS2i_GPIO2 - ok
19:05:16.0768 0x2790  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\Windows\System32\drivers\iaLPSS2i_I2C.sys
19:05:16.0779 0x2790  iaLPSS2i_I2C - ok
19:05:16.0784 0x2790  [ 82488F82A68274CC466645A7C0BF4D2A, 13D82EF2948E28E3BE4A2495534674EB5D0B312C880618E06D50C9DA56C5FF5B ] iaLPSS2_GPIO2  C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys
19:05:16.0794 0x2790  iaLPSS2_GPIO2 - ok
19:05:16.0801 0x2790  [ E0F6721DD9BA31948CAB9D027C9EE255, 16EBFD26A76803F9157FD49DC3787B8235DE835C5924797B1C7A0B55CAE76B5F ] iaLPSS2_I2C    C:\Windows\System32\drivers\iaLPSS2_I2C.sys
19:05:16.0813 0x2790  iaLPSS2_I2C - ok
19:05:16.0816 0x2790  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
19:05:16.0825 0x2790  iaLPSSi_GPIO - ok
19:05:16.0830 0x2790  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C    C:\Windows\System32\drivers\iaLPSSi_I2C.sys
19:05:16.0846 0x2790  iaLPSSi_I2C - ok
19:05:16.0861 0x2790  [ 7675D8E247732F45F60AA450BA2C207D, DBB591E56BBF9A93BE66A993D143A97964CC628457CF47EB5231D0DF62B59ADE ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
19:05:16.0885 0x2790  iaStorA - ok
19:05:16.0898 0x2790  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
19:05:16.0920 0x2790  iaStorAV - ok
19:05:16.0929 0x2790  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
19:05:16.0946 0x2790  iaStorV - ok
19:05:16.0957 0x2790  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus          C:\Windows\System32\drivers\ibbus.sys
19:05:16.0977 0x2790  ibbus - ok
19:05:16.0980 0x2790  ibtsiva - ok
19:05:16.0988 0x2790  [ 445E2B8B742D430CDD979FF8551B97BA, C9DA1B2FAD3875ECAF6360D844204266C986F917B5272699BE00A1D5F99839EB ] ibtusb          C:\Windows\system32\DRIVERS\ibtusb.sys
19:05:17.0002 0x2790  ibtusb - ok
19:05:17.0008 0x2790  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\Windows\System32\tetheringservice.dll
19:05:17.0032 0x2790  icssvc - ok
19:05:17.0144 0x2790  [ 658287D76E8D77C08AE98989F99B8948, DBA67B5772E1FE43ABDB3908A1CF86D76F2774BABC20359D2511F06A2A8CAC57 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
19:05:17.0273 0x2790  igfx - ok
19:05:17.0288 0x2790  [ A105AD05696D55E6E4F078ED850F6305, 8121A4226D2941EDD4809D516E7684E5C7164ADCF5AA4C8BC6620110625D3E8D ] igfxCUIService2.0.0.0 C:\Windows\system32\igfxCUIService.exe
19:05:17.0303 0x2790  igfxCUIService2.0.0.0 - ok
19:05:17.0320 0x2790  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\Windows\System32\ikeext.dll
19:05:17.0357 0x2790  IKEEXT - ok
19:05:17.0361 0x2790  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd    C:\Windows\System32\drivers\IndirectKmd.sys
19:05:17.0379 0x2790  IndirectKmd - ok
19:05:17.0383 0x2790  [ AFA7F1696B431C07729E9BF2565D6045, 77966485A23581C079A480BEC13982AB926F5C62686F48A44F8C562B3C67745B ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
19:05:17.0394 0x2790  intaud_WaveExtensible - ok
19:05:17.0472 0x2790  [ 86236BC32512027B32A3E124C7306A7D, A9BFA35E4AD007EC556703B890FB2B3B6C34B3BA98E5DF53FB03A70D377F8B13 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:05:17.0557 0x2790  IntcAzAudAddService - ok
19:05:17.0572 0x2790  [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
19:05:17.0589 0x2790  IntcDAud - ok
19:05:17.0608 0x2790  [ AE32376564771525DCDD2F0280619E1A, 233B7B272DCD9080DE7C9593EB7993745D1037EA87B69617E7176F074DFD5968 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
19:05:17.0636 0x2790  Intel(R) Capability Licensing Service TCP IP Interface - ok
19:05:17.0645 0x2790  [ 56BA2118E48D0BBB980ADAA830220C1D, 88FF0A1E7A87D1B50F90D3088436BE91CFEC6BB3B888EB536D6537468DDC8C29 ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
19:05:17.0659 0x2790  Intel(R) Security Assist - detected UnsignedFile.Multi.Generic ( 1 )
19:05:18.0846 0x2790  Detect skipped due to KSN trusted
19:05:18.0847 0x2790  Intel(R) Security Assist - ok
19:05:18.0850 0x2790  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\Windows\system32\drivers\intelide.sys
19:05:18.0861 0x2790  intelide - ok
19:05:18.0865 0x2790  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\Windows\system32\drivers\intelpep.sys
19:05:18.0877 0x2790  intelpep - ok
19:05:18.0882 0x2790  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
19:05:18.0905 0x2790  intelppm - ok
19:05:18.0909 0x2790  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\Windows\system32\drivers\iorate.sys
19:05:18.0925 0x2790  iorate - ok
19:05:18.0929 0x2790  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:05:18.0947 0x2790  IpFilterDriver - ok
19:05:18.0964 0x2790  [ EF1BB0EF8A12C32DD88C409706B8145E, 7AEDE717C258C29592CC8AEC40F61617E5382646E5141E1C0941882ACE5C5758 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
19:05:19.0007 0x2790  iphlpsvc - ok
19:05:19.0012 0x2790  [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV        C:\Windows\System32\drivers\IPMIDrv.sys
19:05:19.0024 0x2790  IPMIDRV - ok
19:05:19.0030 0x2790  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
19:05:19.0050 0x2790  IPNAT - ok
19:05:19.0055 0x2790  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\Windows\system32\drivers\irda.sys
19:05:19.0073 0x2790  irda - ok
19:05:19.0077 0x2790  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
19:05:19.0092 0x2790  IRENUM - ok
19:05:19.0096 0x2790  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon          C:\Windows\System32\irmon.dll
19:05:19.0116 0x2790  irmon - ok
19:05:19.0118 0x2790  [ 8CA2C261AB69D0195BED81E58EDF167D, B192B7E42543C277BF8F6D48649DA4C121E6C23BDD0B51A973BA7A2D95525478 ] isaHelperSvc    C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
19:05:19.0125 0x2790  isaHelperSvc - detected UnsignedFile.Multi.Generic ( 1 )
19:05:20.0256 0x2790  Detect skipped due to KSN trusted
19:05:20.0256 0x2790  isaHelperSvc - ok
19:05:20.0263 0x2790  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
19:05:20.0275 0x2790  isapnp - ok
19:05:20.0282 0x2790  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
19:05:20.0298 0x2790  iScsiPrt - ok
19:05:20.0301 0x2790  [ DA0A946E6C4228B659FA798EF0B075C1, BC2F5710D6165615CD578A970BC154C8DB1ECCA5725D09A29954E9BE8FAC0ED7 ] iwdbus          C:\Windows\System32\drivers\iwdbus.sys
19:05:20.0312 0x2790  iwdbus - ok
19:05:20.0318 0x2790  [ 025A4E7D215B3ECF28D12BAE1C54889D, 3F678A9871CA7680D2B455031A57ACB74CCA9076C908A678A88735C8BD192FCE ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
19:05:20.0330 0x2790  jhi_service - ok
19:05:20.0334 0x2790  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
19:05:20.0349 0x2790  kbdclass - ok
19:05:20.0353 0x2790  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
19:05:20.0373 0x2790  kbdhid - ok
19:05:20.0376 0x2790  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic          C:\Windows\System32\drivers\kdnic.sys
19:05:20.0392 0x2790  kdnic - ok
19:05:20.0396 0x2790  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\Windows\system32\lsass.exe
19:05:20.0408 0x2790  KeyIso - ok
19:05:20.0417 0x2790  [ 2B3FA3CB022478DE79721CA25612C5EF, 8A639764C37E61ADE1A09973D3C66BA6D6BB92D174BD03D55AABC9F01837FD51 ] Killer Service V2 C:\Program Files\Killer Networking\Network Manager\KillerService.exe
19:05:20.0432 0x2790  Killer Service V2 - ok
19:05:20.0438 0x2790  [ F4B2D598BBDA47CA29024AC52F1804CC, 7866C7F95A711325B48F08A494478E09BAC603466865255229952A8320CDF366 ] KillerEth      C:\Windows\System32\drivers\e2xw10x64.sys
19:05:20.0448 0x2790  KillerEth - ok
19:05:20.0452 0x2790  KingoSoftService - ok
19:05:20.0465 0x2790  [ 97E3E8F35632EECD0ABD2DE6519A9666, ABE96FDEB1076E380D7FB4975C020B43ED4E821097EFC6AFE8C75D764167D6E8 ] kl1            C:\Windows\system32\DRIVERS\kl1.sys
19:05:20.0482 0x2790  kl1 - ok
19:05:20.0487 0x2790  [ B01AD8DA034EE42D4C2282F77FDB03AE, 3FF55F3CEE4A0E5D559F04F5A639297EA0F36580720E94CF9DD56DEBF2E98F39 ] klbackupdisk    C:\Windows\system32\DRIVERS\klbackupdisk.sys
19:05:20.0497 0x2790  klbackupdisk - ok
19:05:20.0501 0x2790  [ 10549B5BFD9A3DCF4FFA6287236FA959, 6BDFA335A8E3A69425CB23230660D3168CB82911ACB3AAAF85C19263511EAF51 ] klbackupflt    C:\Windows\system32\DRIVERS\klbackupflt.sys
19:05:20.0511 0x2790  klbackupflt - ok
19:05:20.0516 0x2790  [ 7DAA9047F50BF5A3F8C147719FC520AF, 0740387075AF46DB1E9AEE3B12C65A06EDFE58EADB8B562C36CB1FEFF9905C26 ] kldisk          C:\Windows\system32\DRIVERS\kldisk.sys
19:05:20.0526 0x2790  kldisk - ok
19:05:20.0529 0x2790  [ 5766A27C85EE813029831D125D2EFB45, BB5BAFD5A58E80C7F0B8D24121352E0386B3422FFC16B56F1D1B1C6A482AC9F0 ] klelam          C:\Windows\system32\DRIVERS\klelam.sys
19:05:20.0542 0x2790  klelam - ok
19:05:20.0548 0x2790  [ 63FD545876EF4248BE3C8788D8270758, 5FF6529F8D7F94848E68142D8B2CAA446342AF95644C9223E689E303E8AB7336 ] klflt          C:\Windows\system32\DRIVERS\klflt.sys
19:05:20.0563 0x2790  klflt - ok
19:05:20.0573 0x2790  [ 3524D3B8F5BEF8C01EAF7EEFFA5EAB3F, 0908A6E3E62017F7099900850D58A1B775D808F7DC0951B09781689DF3994DA2 ] klhk            C:\Windows\System32\drivers\klhk.sys
19:05:20.0588 0x2790  klhk - ok
19:05:20.0598 0x2790  [ 7796EAD58D8C1A42AAB6B6CA9A3F106C, 7DA8A05A0210F63C7D120DCF0101AD895D53368C0DED23E275F2BA79239FCE28 ] klids          C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys
19:05:20.0610 0x2790  klids - ok
19:05:20.0628 0x2790  [ 2CE22F21119A089277B067A1B1BDC592, 7CDE229899B6344967098FB03C7C1C360CC3DC2DCC096F8AAC6CC96536FF1AE9 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys
19:05:20.0653 0x2790  KLIF - ok
19:05:20.0657 0x2790  [ 6357C533C30650361110DBAF59A25DF8, FA8CF6292CCBC7E23527D968E54CD773706CF091E35563B0CF9F8A1DF0B724B9 ] KLIM6          C:\Windows\system32\DRIVERS\klim6.sys
19:05:20.0667 0x2790  KLIM6 - ok
19:05:20.0670 0x2790  [ 5480CC93737F48282552C84FA7EBA59B, B7D92424399B647132F6B9409FE75EAA310C984F796FC0B65BBE2EA180110968 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys
19:05:20.0681 0x2790  klkbdflt - ok
19:05:20.0684 0x2790  [ FD47C92A63B6EADEA830BFA96C06EAEE, C15C39B6FA53CBD01A2F95243845C4B706B4229F8FFB75C7128819B9CEE5B2CB ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys
19:05:20.0694 0x2790  klmouflt - ok
19:05:20.0697 0x2790  [ 6B0C605591C892CBB683F63EA47822DC, E74C0A0501A1B4B56B417402108521F34DA6A23FCD1C05E4E524E41EBA0906FF ] klpd            C:\Windows\system32\DRIVERS\klpd.sys
19:05:20.0707 0x2790  klpd - ok
19:05:20.0711 0x2790  [ 828B042A95F055648DA190DF6C7AB1B6, 0457B0EF03BCB4CC1297EB25A25C162937F456BF406EC7B1A5E9A0AA13A9BCD7 ] kltap          C:\Windows\System32\drivers\kltap.sys
19:05:20.0721 0x2790  kltap - ok
19:05:20.0727 0x2790  [ 66516A704F1D378E58B85D79633C103D, 54E3EB342D2FD17CF742A8ACADCA81A553216AA289955DD176A54D6414727DA5 ] klupd_klif_arkmon C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
19:05:20.0739 0x2790  klupd_klif_arkmon - ok
19:05:20.0744 0x2790  [ 941727CDC11A0E1A407B602D88CD58CB, 8E290245A42E75FC532A72A850BAF5516BA7488BEF015F46CA9D215BCA0D7CE0 ] klupd_klif_kimul C:\Windows\system32\Drivers\klupd_klif_kimul.sys
19:05:20.0757 0x2790  klupd_klif_kimul - ok
19:05:20.0764 0x2790  [ 55FC7F42A5AA55A265CE466227ABD0DE, AB72152F39460327D74DB693BFB36A93BC2D752653D3633BB7F439DC4B9AB081 ] klupd_klif_klark C:\Windows\system32\Drivers\klupd_klif_klark.sys
19:05:20.0780 0x2790  klupd_klif_klark - ok
19:05:20.0784 0x2790  [ D7709E365C10F99DE58BB688C45358B7, C028FB885B7A4AFB98FD2B8EABF99E913F480891A9ED859FE5B4E077BDE8ACB5 ] klupd_klif_klbg C:\Windows\system32\Drivers\klupd_klif_klbg.sys
19:05:20.0794 0x2790  klupd_klif_klbg - ok
19:05:20.0800 0x2790  [ 8D7E0B5D4F843D39AA1F644B2578B0EE, C4A8E569A253738AA7B7CDE8D0E987954D1DA6BE6F32D962BD458CA5275A5D76 ] klupd_klif_mark C:\Windows\system32\Drivers\klupd_klif_mark.sys
19:05:20.0813 0x2790  klupd_klif_mark - ok
19:05:20.0819 0x2790  [ D7F0B46844565E2ED68AC99AF0F4263F, AB419CBC29F96703237127AC4178A5365D4CCA010BAB1BD66D100D635E6E89B8 ] klvssbrigde64  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe
19:05:20.0829 0x2790  klvssbrigde64 - ok
19:05:20.0833 0x2790  [ 4C5305295B51BA72FC9C8CDAB32F95C3, 0E5850AC4CA14D971E7B04FED23CB2F6CEEE2796E905AADA0104677982ECD58A ] klwfp          C:\Windows\system32\DRIVERS\klwfp.sys
19:05:20.0843 0x2790  klwfp - ok
19:05:20.0848 0x2790  [ EF1AFCADCA485B3846D7A8B71F87509B, C27B579742389ACD8804EC372CBA3C4FDFFB1A8AA6280AE1353BC089E8E34C76 ] Klwtp          C:\Windows\system32\DRIVERS\klwtp.sys
19:05:20.0859 0x2790  Klwtp - ok
19:05:20.0865 0x2790  [ 67EFD862ACEFCB9687523832C62FA584, B3C9A36C535B706EB19E5C5437705E8C5EC71F45115A2C97E1348462EC2A3922 ] kneps          C:\Windows\system32\DRIVERS\kneps.sys
19:05:20.0876 0x2790  kneps - ok
19:05:20.0884 0x2790  [ EFF5EA6088DB81C6EF6EDCDA5EE79909, 4D364B0BF012C335FA3B25BDF042D4AF672D961B9B48CB7C5BE34FCFD1D64979 ] KSDE1.0.0      C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
19:05:20.0896 0x2790  KSDE1.0.0 - ok
19:05:20.0901 0x2790  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
19:05:20.0914 0x2790  KSecDD - ok
19:05:20.0920 0x2790  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
19:05:20.0933 0x2790  KSecPkg - ok
19:05:20.0939 0x2790  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
19:05:20.0960 0x2790  ksthunk - ok
19:05:20.0969 0x2790  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm          C:\Windows\system32\msdtckrm.dll
19:05:20.0995 0x2790  KtmRm - ok
19:05:21.0003 0x2790  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\Windows\system32\srvsvc.dll
19:05:21.0028 0x2790  LanmanServer - ok
19:05:21.0036 0x2790  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:05:21.0059 0x2790  LanmanWorkstation - ok
19:05:21.0064 0x2790  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc          C:\Windows\System32\lfsvc.dll
19:05:21.0082 0x2790  lfsvc - ok
19:05:21.0085 0x2790  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
19:05:21.0102 0x2790  LicenseManager - ok
19:05:21.0105 0x2790  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\Windows\system32\drivers\lltdio.sys
19:05:21.0128 0x2790  lltdio - ok
19:05:21.0136 0x2790  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
19:05:21.0157 0x2790  lltdsvc - ok
19:05:21.0160 0x2790  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts        C:\Windows\System32\lmhsvc.dll
19:05:21.0180 0x2790  lmhosts - ok
19:05:21.0189 0x2790  [ B77C2CCB7C1BC3836B3AB5644E63739E, 917749905E68FEE0D8A5752F77CC4EB313990875B02387D294029F9FC5E4ADD0 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19:05:21.0205 0x2790  LMS - ok
19:05:21.0211 0x2790  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
19:05:21.0224 0x2790  LSI_SAS - ok
19:05:21.0228 0x2790  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i      C:\Windows\system32\drivers\lsi_sas2i.sys
19:05:21.0240 0x2790  LSI_SAS2i - ok
19:05:21.0245 0x2790  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i      C:\Windows\system32\drivers\lsi_sas3i.sys
19:05:21.0257 0x2790  LSI_SAS3i - ok
19:05:21.0261 0x2790  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS        C:\Windows\system32\drivers\lsi_sss.sys
19:05:21.0274 0x2790  LSI_SSS - ok
19:05:21.0288 0x2790  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM            C:\Windows\System32\lsm.dll
19:05:21.0321 0x2790  LSM - ok
19:05:21.0326 0x2790  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv          C:\Windows\system32\drivers\luafv.sys
19:05:21.0345 0x2790  luafv - ok
19:05:21.0349 0x2790  [ CAAF0CD70FEE7C5110B1E62804E41B17, 48482A6C8D2296C4DC613304637C8DBB7DD1DB39326F27650EBCA6FD2793BCFD ] MapsBroker      C:\Windows\System32\moshost.dll
19:05:21.0372 0x2790  MapsBroker - ok
19:05:21.0378 0x2790  [ 3BEC6134F1E45AEF5E971F69F0D38510, 245D7CEEB6561166EE0472551D39A9D3CFDDA52A6BF2E924AB243CCA7FBC9009 ] MBAMChameleon  C:\Windows\system32\drivers\MBAMChameleon.sys
19:05:21.0394 0x2790  MBAMChameleon - ok
19:05:21.0399 0x2790  [ F3960CA85778E5D7611EE0F501972340, 0DE5C8509A9A66C8185B9FAA7EAF69C0FA9C28CD9DE84AA23E128E4FF8E06BF4 ] MBAMFarflt      C:\Windows\system32\drivers\farflt.sys
19:05:21.0410 0x2790  MBAMFarflt - ok
19:05:21.0413 0x2790  [ 88BD122C3A35DE63D75D382DF75554CE, ABDF59543CAD186A6ED4E66257205D9CF5047732A5DA74A96A28B468B41BC396 ] MBAMProtection  C:\Windows\system32\drivers\mbam.sys
19:05:21.0423 0x2790  MBAMProtection - ok
19:05:21.0528 0x2790  [ 28E521A6ABA9DE062A3719452816F495, B312A37DA052229DFB19353170CD5828582F8AC6426E857CA7C8ACA0DD91C160 ] MBAMService    E:\Anti-Malware\mbamservice.exe
19:05:21.0608 0x2790  MBAMService - ok
19:05:21.0621 0x2790  [ ABB371D9AEF728B0489B0E6872B4A1C0, E9539A4F85FE30F5BAED742778CA74C879995728668ABE6877C37633716D8770 ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
19:05:21.0634 0x2790  MBAMSwissArmy - ok
19:05:21.0638 0x2790  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas        C:\Windows\system32\drivers\megasas.sys
19:05:21.0649 0x2790  megasas - ok
19:05:21.0653 0x2790  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i      C:\Windows\system32\drivers\MegaSas2i.sys
19:05:21.0665 0x2790  megasas2i - ok
19:05:21.0677 0x2790  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\Windows\system32\drivers\megasr.sys
19:05:21.0697 0x2790  megasr - ok
19:05:21.0704 0x2790  [ 220B49994DCFAC3BB242A8C3047E58A2, B01EA1751CE80E357DB643938F603DAE11A7F88B7B1187D769C5A3209A932E64 ] MEIx64          C:\Windows\System32\drivers\TeeDriverW8x64.sys
19:05:21.0718 0x2790  MEIx64 - ok
19:05:21.0723 0x2790  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\Windows\System32\MessagingService.dll
19:05:21.0739 0x2790  MessagingService - ok
19:05:21.0757 0x2790  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
19:05:21.0783 0x2790  mlx4_bus - ok
19:05:21.0787 0x2790  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS          C:\Windows\system32\drivers\mmcss.sys
19:05:21.0808 0x2790  MMCSS - ok
19:05:21.0811 0x2790  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem          C:\Windows\system32\drivers\modem.sys
19:05:21.0828 0x2790  Modem - ok
19:05:21.0831 0x2790  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor        C:\Windows\System32\drivers\monitor.sys
19:05:21.0846 0x2790  monitor - ok
19:05:21.0850 0x2790  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
19:05:21.0862 0x2790  mouclass - ok
19:05:21.0865 0x2790  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\Windows\System32\drivers\mouhid.sys
19:05:21.0901 0x2790  mouhid - ok
19:05:21.0906 0x2790  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
19:05:21.0918 0x2790  mountmgr - ok
19:05:21.0923 0x2790  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
19:05:21.0942 0x2790  mpsdrv - ok
19:05:21.0960 0x2790  [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc          C:\Windows\system32\mpssvc.dll
19:05:22.0000 0x2790  MpsSvc - ok
19:05:22.0007 0x2790  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
19:05:22.0027 0x2790  MRxDAV - ok
19:05:22.0037 0x2790  [ E671EDAB0726E05ECEF4058B4CD73C4D, 9F4C50E635CE2204E3291C8D3D7F658A969E80722B8B6F0304228D9B434C20EA ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
19:05:22.0056 0x2790  mrxsmb - ok
19:05:22.0063 0x2790  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:05:22.0085 0x2790  mrxsmb10 - ok
19:05:22.0092 0x2790  [ 93A77008A8932FC84A173C4E97E52874, B7510CF7998C538D68BD2ECDC512A0BFC7CB7362F598EE4110F728427AFF0F5A ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:05:22.0106 0x2790  mrxsmb20 - ok
19:05:22.0111 0x2790  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
19:05:22.0128 0x2790  MsBridge - ok
19:05:22.0133 0x2790  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC          C:\Windows\System32\msdtc.exe
19:05:22.0151 0x2790  MSDTC - ok
19:05:22.0158 0x2790  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
19:05:22.0175 0x2790  Msfs - ok
19:05:22.0179 0x2790  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32    C:\Windows\System32\drivers\msgpiowin32.sys
19:05:22.0193 0x2790  msgpiowin32 - ok
19:05:22.0196 0x2790  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
19:05:22.0217 0x2790  mshidkmdf - ok
19:05:22.0220 0x2790  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf      C:\Windows\System32\drivers\mshidumdf.sys
19:05:22.0237 0x2790  mshidumdf - ok
19:05:22.0239 0x2790  MSICDSetup - ok
19:05:22.0243 0x2790  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
19:05:22.0254 0x2790  msisadrv - ok
19:05:22.0260 0x2790  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
19:05:22.0280 0x2790  MSiSCSI - ok
19:05:22.0283 0x2790  msiserver - ok
19:05:22.0286 0x2790  [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV        C:\Windows\system32\DRIVERS\MSKSSRV.sys
19:05:22.0304 0x2790  MSKSSRV - ok
19:05:22.0309 0x2790  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
19:05:22.0326 0x2790  MsLldp - ok
19:05:22.0329 0x2790  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\Windows\system32\DRIVERS\MSPCLOCK.sys
19:05:22.0347 0x2790  MSPCLOCK - ok
19:05:22.0350 0x2790  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM          C:\Windows\system32\DRIVERS\MSPQM.sys
19:05:22.0368 0x2790  MSPQM - ok
19:05:22.0377 0x2790  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
19:05:22.0395 0x2790  MsRPC - ok
19:05:22.0403 0x2790  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
19:05:22.0419 0x2790  MsSecFlt - ok
19:05:22.0423 0x2790  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
19:05:22.0434 0x2790  mssmbios - ok
19:05:22.0438 0x2790  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE          C:\Windows\system32\DRIVERS\MSTEE.sys
19:05:22.0457 0x2790  MSTEE - ok
19:05:22.0460 0x2790  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
19:05:22.0475 0x2790  MTConfig - ok
19:05:22.0479 0x2790  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup            C:\Windows\system32\Drivers\mup.sys
19:05:22.0492 0x2790  Mup - ok
19:05:22.0496 0x2790  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
19:05:22.0509 0x2790  mvumis - ok
19:05:22.0522 0x2790  [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
19:05:22.0551 0x2790  NativeWifiP - ok
19:05:22.0556 0x2790  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\Windows\System32\ncasvc.dll
19:05:22.0578 0x2790  NcaSvc - ok
19:05:22.0588 0x2790  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\Windows\System32\ncbservice.dll
19:05:22.0615 0x2790  NcbService - ok
19:05:22.0620 0x2790  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
19:05:22.0653 0x2790  NcdAutoSetup - ok
19:05:22.0657 0x2790  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
19:05:22.0670 0x2790  ndfltr - ok
19:05:22.0691 0x2790  [ D5564FC81350458ED570528C4E3B1CCF, DD3C5012492EF9BCE3BE635BBB3AA40B3C5F5FDBD795A76B327D9C994102AC2B ] NDIS            C:\Windows\system32\drivers\ndis.sys
19:05:22.0722 0x2790  NDIS - ok
19:05:22.0728 0x2790  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap        C:\Windows\system32\drivers\ndiscap.sys
19:05:22.0744 0x2790  NdisCap - ok
19:05:22.0750 0x2790  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
19:05:22.0770 0x2790  NdisImPlatform - ok
19:05:22.0774 0x2790  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
19:05:22.0792 0x2790  NdisTapi - ok
19:05:22.0796 0x2790  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio        C:\Windows\system32\drivers\ndisuio.sys
19:05:22.0816 0x2790  Ndisuio - ok
19:05:22.0820 0x2790  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
19:05:22.0840 0x2790  NdisVirtualBus - ok
19:05:22.0846 0x2790  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan        C:\Windows\System32\drivers\ndiswan.sys
19:05:22.0868 0x2790  NdisWan - ok
19:05:22.0874 0x2790  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy  C:\Windows\system32\DRIVERS\ndiswan.sys
19:05:22.0897 0x2790  ndiswanlegacy - ok
19:05:22.0901 0x2790  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy        C:\Windows\system32\DRIVERS\NDProxy.sys
19:05:22.0920 0x2790  ndproxy - ok
19:05:22.0925 0x2790  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu            C:\Windows\system32\drivers\Ndu.sys
19:05:22.0946 0x2790  Ndu - ok
19:05:22.0951 0x2790  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
19:05:22.0970 0x2790  NetAdapterCx - ok
19:05:22.0974 0x2790  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS        C:\Windows\system32\drivers\netbios.sys
19:05:22.0986 0x2790  NetBIOS - ok
19:05:22.0994 0x2790  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
19:05:23.0019 0x2790  NetBT - ok
19:05:23.0024 0x2790  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\Windows\system32\lsass.exe
19:05:23.0040 0x2790  Netlogon - ok
19:05:23.0047 0x2790  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\Windows\System32\netman.dll
19:05:23.0068 0x2790  Netman - ok
19:05:23.0079 0x2790  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\Windows\System32\netprofmsvc.dll
19:05:23.0109 0x2790  netprofm - ok
19:05:23.0117 0x2790  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc    C:\Windows\System32\NetSetupSvc.dll
19:05:23.0141 0x2790  NetSetupSvc - ok
19:05:23.0149 0x2790  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:05:23.0161 0x2790  NetTcpPortSharing - ok
19:05:23.0214 0x2790  [ 1F91B1E5FD41BDC3DF8AFFB81C8AA277, B8CB13863C1F0C589C008E191A393DF241F3067DD7CADE02B3B7D36B28BBA2ED ] NETwNb64        C:\Windows\System32\drivers\Netwbw02.sys
19:05:23.0308 0x2790  NETwNb64 - ok
19:05:23.0319 0x2790  [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
19:05:23.0345 0x2790  NgcCtnrSvc - ok
19:05:23.0363 0x2790  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\Windows\system32\ngcsvc.dll
19:05:23.0404 0x2790  NgcSvc - ok
19:05:23.0414 0x2790  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\Windows\System32\nlasvc.dll
19:05:23.0443 0x2790  NlaSvc - ok
19:05:23.0448 0x2790  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
19:05:23.0466 0x2790  Npfs - ok
19:05:23.0469 0x2790  npggsvc - ok
19:05:23.0472 0x2790  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig      C:\Windows\System32\drivers\npsvctrig.sys
19:05:23.0489 0x2790  npsvctrig - ok
19:05:23.0493 0x2790  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi            C:\Windows\system32\nsisvc.dll
19:05:23.0511 0x2790  nsi - ok
19:05:23.0514 0x2790  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
19:05:23.0530 0x2790  nsiproxy - ok
19:05:23.0568 0x2790  [ DB69C6DA8B3DDFDC547D455CA23A8250, AE495CEB18924C8B21F7F150FF17CD00880F2E222D7B5155661798E0535D63C4 ] NTFS            C:\Windows\system32\drivers\NTFS.sys
19:05:23.0617 0x2790  NTFS - ok
19:05:23.0620 0x2790  NTIOLib_1_0_C - ok
19:05:23.0628 0x2790  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\Windows\system32\drivers\Null.sys
19:05:23.0646 0x2790  Null - ok
19:05:23.0656 0x2790  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
19:05:23.0672 0x2790  NvContainerLocalSystem - ok
19:05:23.0680 0x2790  [ 5CE986C82313E6F9D0973E2A74A0BA20, 9367D5A8257EA15B0DBCD6C8FDBFDF0B5B132A7C436E4F03AD84B958112DFA28 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
19:05:23.0695 0x2790  NvContainerNetworkService - ok
19:05:23.0703 0x2790  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
19:05:23.0715 0x2790  NVHDA - ok
19:05:23.0734 0x2790  [ 0B7CFF94C247E661A9D5F7FDAB2F726B, 16D651A50347131CC6B96EB17096EFB22F9767572964E6C12CA1BF928E6C1397 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
19:05:23.0760 0x2790  NVIDIA Wireless Controller Service - ok
19:05:23.0965 0x2790  [ 70BC7D732B4AA50EC77D262A89E63E08, 781507DB55582F8BD367020DA844DA6A5D75005E416A2E843255E0F4CA8F896D ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_410e5247be0e5f00\nvlddmkm.sys
19:05:24.0181 0x2790  nvlddmkm - ok
19:05:24.0196 0x2790  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
19:05:24.0209 0x2790  nvraid - ok
19:05:24.0215 0x2790  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\Windows\system32\drivers\nvstor.sys
19:05:24.0228 0x2790  nvstor - ok
19:05:24.0232 0x2790  [ 5FA3A8CE5BAA23E2C9D18EA154017BC4, 6C2B0546FB9D8A4C7A747AB776BB98C8A90D2745FA0D293FA63DABBF67C7ED58 ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
19:05:24.0241 0x2790  NvStreamKms - ok
19:05:24.0245 0x2790  [ 1D54A108BFAD4ED568E393518769F516, D0BE8343784DDD2B7CADFC85779CC72C78D49601E9C746D13D8134CE38DD920F ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
19:05:24.0257 0x2790  nvvad_WaveExtensible - ok
19:05:24.0266 0x2790  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\Windows\System32\APHostService.dll
19:05:24.0291 0x2790  OneSyncSvc - ok
19:05:24.0365 0x2790  [ AD851D818F399DD946A9C17AB2156F22, 4A541E7A3A3164581BFB9080DE0976E18F6DD00E39458EBBCBD3B2445708BEB5 ] Origin Client Service E:\Origins\OriginClientService.exe
19:05:24.0405 0x2790  Origin Client Service - ok
19:05:24.0450 0x2790  [ 788363C87EBD90AC1EAD2DC5A9A40759, B565663B459414C5C9F81451D9A127D62CDF605BC2A9E686F74A2E4FD44A9B43 ] Origin Web Helper Service E:\Origins\OriginWebHelperService.exe
19:05:24.0490 0x2790  Origin Web Helper Service - ok
19:05:24.0504 0x2790  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
19:05:24.0531 0x2790  p2pimsvc - ok
19:05:24.0540 0x2790  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\Windows\system32\p2psvc.dll
19:05:24.0565 0x2790  p2psvc - ok
19:05:24.0570 0x2790  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport        C:\Windows\System32\drivers\parport.sys
19:05:24.0587 0x2790  Parport - ok

Yvi1993 05.01.2017 19:11
Code:
19:05:24.0592 0x2790  [ CDBD029BAEC8D09F6FBD404632D9AF28, 71F4401150CD4C9C6BBF2DA854CF07EA2F8C9BBE900833858F49134DDAF14414 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
19:05:24.0605 0x2790  partmgr - ok
19:05:24.0616 0x2790  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\Windows\System32\pcasvc.dll
19:05:24.0637 0x2790  PcaSvc - ok
19:05:24.0646 0x2790  [ E2DD2E5BDCCD225670831B439826065B, 0153F1CE26D402C03CFC155F428EBA04D6EA8E19A28AF629B1CE347363B7697C ] pci            C:\Windows\system32\drivers\pci.sys
19:05:24.0665 0x2790  pci - ok
19:05:24.0669 0x2790  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\Windows\system32\drivers\pciide.sys
19:05:24.0685 0x2790  pciide - ok
19:05:24.0690 0x2790  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
19:05:24.0703 0x2790  pcmcia - ok
19:05:24.0711 0x2790  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw            C:\Windows\system32\drivers\pcw.sys
19:05:24.0723 0x2790  pcw - ok
19:05:24.0728 0x2790  [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc            C:\Windows\system32\drivers\pdc.sys
19:05:24.0740 0x2790  pdc - ok
19:05:24.0755 0x2790  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
19:05:24.0788 0x2790  PEAUTH - ok
19:05:24.0820 0x2790  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
19:05:24.0889 0x2790  PeerDistSvc - ok
19:05:24.0895 0x2790  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i      C:\Windows\system32\drivers\percsas2i.sys
19:05:24.0906 0x2790  percsas2i - ok
19:05:24.0911 0x2790  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i      C:\Windows\system32\drivers\percsas3i.sys
19:05:24.0923 0x2790  percsas3i - ok
19:05:24.0937 0x2790  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
19:05:24.0954 0x2790  PerfHost - ok
19:05:24.0974 0x2790  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\Windows\System32\PhoneService.dll
19:05:25.0009 0x2790  PhoneSvc - ok
19:05:25.0018 0x2790  [ B4AB2C0177715FFAED88A1223212043A, 1920792ADC78DD51EF98B6A9634D686EAED0848FB7EF74A0DCD3AEBA5AF41EC6 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
19:05:25.0040 0x2790  PimIndexMaintenanceSvc - ok
19:05:25.0066 0x2790  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla            C:\Windows\system32\pla.dll
19:05:25.0119 0x2790  pla - ok
19:05:25.0126 0x2790  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
19:05:25.0146 0x2790  PlugPlay - ok
19:05:25.0150 0x2790  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
19:05:25.0165 0x2790  PNRPAutoReg - ok
19:05:25.0175 0x2790  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
19:05:25.0197 0x2790  PNRPsvc - ok
19:05:25.0207 0x2790  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
19:05:25.0233 0x2790  PolicyAgent - ok
19:05:25.0239 0x2790  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power          C:\Windows\system32\umpo.dll
19:05:25.0259 0x2790  Power - ok
19:05:25.0264 0x2790  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
19:05:25.0288 0x2790  PptpMiniport - ok
19:05:25.0341 0x2790  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify    C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
19:05:25.0440 0x2790  PrintNotify - ok
19:05:25.0447 0x2790  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor      C:\Windows\System32\drivers\processr.sys
19:05:25.0464 0x2790  Processor - ok
19:05:25.0473 0x2790  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc        C:\Windows\system32\profsvc.dll
19:05:25.0504 0x2790  ProfSvc - ok
19:05:25.0511 0x2790  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\Windows\system32\drivers\pacer.sys
19:05:25.0524 0x2790  Psched - ok
19:05:25.0532 0x2790  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE          C:\Windows\system32\qwave.dll
19:05:25.0555 0x2790  QWAVE - ok
19:05:25.0559 0x2790  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
19:05:25.0574 0x2790  QWAVEdrv - ok
19:05:25.0577 0x2790  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
19:05:25.0591 0x2790  RasAcd - ok
19:05:25.0597 0x2790  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn    C:\Windows\System32\drivers\AgileVpn.sys
19:05:25.0615 0x2790  RasAgileVpn - ok
19:05:25.0619 0x2790  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto        C:\Windows\System32\rasauto.dll
19:05:25.0637 0x2790  RasAuto - ok
19:05:25.0642 0x2790  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp        C:\Windows\System32\drivers\rasl2tp.sys
19:05:25.0663 0x2790  Rasl2tp - ok
19:05:25.0677 0x2790  [ F79BFB5588B777C71734C1D1EC129D07, 9B9D70EC8978AAC19B2B94694EE1B9957C13DFDDFCBE8AA82C5F0D0EA04CDBDF ] RasMan          C:\Windows\System32\rasmans.dll
19:05:25.0713 0x2790  RasMan - ok
19:05:25.0718 0x2790  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
19:05:25.0734 0x2790  RasPppoe - ok
19:05:25.0739 0x2790  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp        C:\Windows\System32\drivers\rassstp.sys
19:05:25.0759 0x2790  RasSstp - ok
19:05:25.0766 0x2790  [ 5753CD9159718444F6D9E1634B984BF5, A4D6FB6583724F3DDDBA768D7786EB7E3AB1C8074F66DA9462BBB159CDFA2868 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
19:05:25.0778 0x2790  Razer Game Scanner Service - ok
19:05:25.0788 0x2790  [ AF6963414B820B7C45578ED3300438A7, C00F60FD72608E6983D32642768AECE891DD816FADFA7B872BA88091C16B95D7 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
19:05:25.0806 0x2790  rdbss - ok
19:05:25.0812 0x2790  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
19:05:25.0828 0x2790  rdpbus - ok
19:05:25.0834 0x2790  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
19:05:25.0853 0x2790  RDPDR - ok
19:05:25.0860 0x2790  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:05:25.0871 0x2790  RdpVideoMiniport - ok
19:05:25.0879 0x2790  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
19:05:25.0898 0x2790  rdyboost - ok
19:05:25.0916 0x2790  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
19:05:25.0943 0x2790  ReFSv1 - ok
19:05:25.0957 0x2790  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\Windows\System32\mprdim.dll
19:05:25.0987 0x2790  RemoteAccess - ok
19:05:25.0993 0x2790  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
19:05:26.0016 0x2790  RemoteRegistry - ok
19:05:26.0030 0x2790  [ 0660F4A14F9D2A2F59B26B1D74F1A6D0, A9443B6B7ED1ECA22AC960A2C6A2BE18C0BA58CD7BCF60E7AA617CD3662D122D ] RetailDemo      C:\Windows\system32\RDXService.dll
19:05:26.0069 0x2790  RetailDemo - ok
19:05:26.0075 0x2790  [ E82F3B1918C6A5FE6EB761CDF1E772AF, 0C993FCB7BFD6E01B70A1821E0DEAFA2CB241AF8C2E6D4CC120F59C1B5F6FF5F ] RFCOMM          C:\Windows\System32\drivers\rfcomm.sys
19:05:26.0097 0x2790  RFCOMM - ok
19:05:26.0103 0x2790  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc          C:\Windows\System32\RMapi.dll
19:05:26.0123 0x2790  RmSvc - ok
19:05:26.0128 0x2790  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
19:05:26.0146 0x2790  RpcEptMapper - ok
19:05:26.0149 0x2790  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\Windows\system32\locator.exe
19:05:26.0164 0x2790  RpcLocator - ok
19:05:26.0180 0x2790  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs          C:\Windows\system32\rpcss.dll
19:05:26.0217 0x2790  RpcSs - ok
19:05:26.0225 0x2790  [ 5BEBB8AFA0203EE5283C1049647F7B3C, 6B98A3965951E3BF7A098E033C7AF9F66563E71B6747BC6319519B691A471072 ] RSP2STOR        C:\Windows\system32\DRIVERS\RtsP2Stor.sys
19:05:26.0239 0x2790  RSP2STOR - ok
19:05:26.0244 0x2790  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\Windows\system32\drivers\rspndr.sys
19:05:26.0260 0x2790  rspndr - ok
19:05:26.0277 0x2790  [ 62F6CEF17A33CA0F97033E0F0ABB4020, B47577F910EB444F5C992B8DFC4A6586606C50F55482DBA82AB4B20A52DA48D6 ] rt640x64        C:\Windows\System32\drivers\rt640x64.sys
19:05:26.0302 0x2790  rt640x64 - ok
19:05:26.0312 0x2790  [ 1E3B00B7645272F9033DDA2E26A0285B, 36E8BA7F2356227650E00AE85857BC06DB15E2A93132A4A5FCBC60E1E8EC33C4 ] rtop            C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
19:05:26.0324 0x2790  rtop - ok
19:05:26.0335 0x2790  [ AE4607D7C7AA83A863BFA214483E8EE4, 828CC9F40BAB2F65AF75608D37ED17EF608E73E911132DD085F0685F163EFEC6 ] RTSUER          C:\Windows\system32\Drivers\RtsUer.sys
19:05:26.0349 0x2790  RTSUER - ok
19:05:26.0353 0x2790  [ 55FFB814690A7D8A9E592B3DE1E0F6B6, 860F42D44D8C811D657BAF404939AE3451D6E766BAFFD6FD4912E313683EA316 ] rzendpt        C:\Windows\System32\drivers\rzendpt.sys
19:05:26.0363 0x2790  rzendpt - ok
19:05:26.0367 0x2790  [ 21B6EA7F223FF574AA4C1A0635224E54, F4A8774A0CBD9887C9FD07E7C8A1A2D5BC3731140024E44821C60C2A507C6EC4 ] rzmpos          C:\Windows\System32\drivers\rzmpos.sys
19:05:26.0377 0x2790  rzmpos - ok
19:05:26.0381 0x2790  [ 30A186D6A2A2853EEFAD7011E212E41B, 367B8FCCF29470C9237FC1F0EAEB59AE51E33778BC9914A2730AC7DDBC84942B ] rzpmgrk        C:\Windows\system32\drivers\rzpmgrk.sys
19:05:26.0391 0x2790  rzpmgrk - ok
19:05:26.0396 0x2790  [ B4598C05D5440250633E25933FFF42B0, A66D2FB7EF7350EA74D4290C57FB62BC59C6EA93F759D4CA93C3FEBCA7AEB512 ] rzpnk          C:\Windows\system32\drivers\rzpnk.sys
19:05:26.0406 0x2790  rzpnk - ok
19:05:26.0413 0x2790  [ 421497E425AFB40502013F362E4FA230, 20E2372BEE4BFB21138CA574C9806EC399DDA9D3439F3C391E34ABB2E518106D ] rzudd          C:\Windows\System32\drivers\rzudd.sys
19:05:26.0424 0x2790  rzudd - ok
19:05:26.0429 0x2790  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap          C:\Windows\System32\drivers\vms3cap.sys
19:05:26.0443 0x2790  s3cap - ok
19:05:26.0447 0x2790  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs          C:\Windows\system32\lsass.exe
19:05:26.0458 0x2790  SamSs - ok
19:05:26.0464 0x2790  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
19:05:26.0476 0x2790  sbp2port - ok
19:05:26.0484 0x2790  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
19:05:26.0510 0x2790  SCardSvr - ok
19:05:26.0518 0x2790  [ 9EE060D6560FFBFBDB2ED5D6ED192294, 14387B69CD26D12BE31A23251B6AA8EDFC4D6CDE4FA558F0950DE91D2DD03946 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
19:05:26.0539 0x2790  ScDeviceEnum - ok
19:05:26.0543 0x2790  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
19:05:26.0559 0x2790  scfilter - ok
19:05:26.0576 0x2790  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\Windows\system32\schedsvc.dll
19:05:26.0618 0x2790  Schedule - ok
19:05:26.0623 0x2790  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\Windows\system32\drivers\scmbus.sys
19:05:26.0636 0x2790  scmbus - ok
19:05:26.0641 0x2790  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101    C:\Windows\System32\drivers\scmdisk0101.sys
19:05:26.0658 0x2790  scmdisk0101 - ok
19:05:26.0664 0x2790  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] SCPolicySvc    C:\Windows\System32\certprop.dll
19:05:26.0684 0x2790  SCPolicySvc - ok
19:05:26.0692 0x2790  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus          C:\Windows\System32\drivers\sdbus.sys
19:05:26.0713 0x2790  sdbus - ok
19:05:26.0719 0x2790  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\Windows\System32\SDRSVC.dll
19:05:26.0740 0x2790  SDRSVC - ok
19:05:26.0745 0x2790  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
19:05:26.0758 0x2790  sdstor - ok
19:05:26.0761 0x2790  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\Windows\system32\seclogon.dll
19:05:26.0779 0x2790  seclogon - ok
19:05:26.0783 0x2790  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\Windows\System32\sens.dll
19:05:26.0802 0x2790  SENS - ok
19:05:26.0804 0x2790  Sense - ok
19:05:26.0827 0x2790  [ 2B4E090D06C60853C5C00CF255F9E02A, 4D4DBA7B04519622612BD4A4F28318CA2F5646C84CAFF8C5ACC9BF4C6031894E ] SensorDataService C:\Windows\System32\SensorDataService.exe
19:05:26.0871 0x2790  SensorDataService - ok
19:05:26.0882 0x2790  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService  C:\Windows\system32\SensorService.dll
19:05:26.0913 0x2790  SensorService - ok
19:05:26.0919 0x2790  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
19:05:26.0941 0x2790  SensrSvc - ok
19:05:26.0945 0x2790  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx          C:\Windows\system32\drivers\SerCx.sys
19:05:26.0957 0x2790  SerCx - ok
19:05:26.0962 0x2790  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
19:05:26.0975 0x2790  SerCx2 - ok
19:05:26.0979 0x2790  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum        C:\Windows\System32\drivers\serenum.sys
19:05:26.0994 0x2790  Serenum - ok
19:05:26.0998 0x2790  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\Windows\System32\drivers\serial.sys
19:05:27.0014 0x2790  Serial - ok
19:05:27.0018 0x2790  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\Windows\System32\drivers\sermouse.sys
19:05:27.0034 0x2790  sermouse - ok
19:05:27.0048 0x2790  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\Windows\system32\sessenv.dll
19:05:27.0072 0x2790  SessionEnv - ok
19:05:27.0076 0x2790  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy        C:\Windows\System32\drivers\sfloppy.sys
19:05:27.0091 0x2790  sfloppy - ok
19:05:27.0104 0x2790  [ 832E933AA8DB9FD4733B96D8B6484D3F, 3A8E3D7ECA192EEE154CB568073B7211FDA06078EFC3BC7E961563A1BFDD0CAA ] SharedAccess    C:\Windows\System32\ipnathlp.dll
19:05:27.0136 0x2790  SharedAccess - ok
19:05:27.0150 0x2790  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:05:27.0184 0x2790  ShellHWDetection - ok
19:05:27.0190 0x2790  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
19:05:27.0210 0x2790  shpamsvc - ok
19:05:27.0214 0x2790  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
19:05:27.0226 0x2790  SiSRaid2 - ok
19:05:27.0230 0x2790  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
19:05:27.0242 0x2790  SiSRaid4 - ok
19:05:27.0246 0x2790  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost        C:\Windows\System32\smphost.dll
19:05:27.0264 0x2790  smphost - ok
19:05:27.0276 0x2790  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter      C:\Windows\system32\SmsRouterSvc.dll
19:05:27.0307 0x2790  SmsRouter - ok
19:05:27.0317 0x2790  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
19:05:27.0336 0x2790  SNMPTRAP - ok
19:05:27.0388 0x2790  [ BAD3D2689B3A4BC770CDD07B5B5AEBED, BA59C0BF99840FAD1537DAA5F6DCC45ED262E22F1D7E6D73AEBFF50A5C8F584D ] SNP2UVC        C:\Windows\system32\DRIVERS\snp2uvc.sys
19:05:27.0447 0x2790  SNP2UVC - ok
19:05:27.0465 0x2790  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport      C:\Windows\system32\drivers\spaceport.sys
19:05:27.0486 0x2790  spaceport - ok
19:05:27.0491 0x2790  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx          C:\Windows\system32\drivers\SpbCx.sys
19:05:27.0503 0x2790  SpbCx - ok
19:05:27.0519 0x2790  [ 79DCE27E8C4CF6701BFE49EC2446BBF6, F51CBB7A45C3C878F41653FD5FBDC93CC302712B7725DAAB4D3475A1F4771E3D ] Spooler        C:\Windows\System32\spoolsv.exe
19:05:27.0552 0x2790  Spooler - ok
19:05:27.0635 0x2790  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\Windows\system32\sppsvc.exe
19:05:27.0745 0x2790  sppsvc - ok
19:05:27.0762 0x2790  [ E83830BB74AE8CBECEA0ECD94DE436F9, 4A34569A34260324EBD629039E1BF45A3527FC75B22D9A3DB6360A6EB365483A ] srv            C:\Windows\system32\DRIVERS\srv.sys
19:05:27.0786 0x2790  srv - ok
19:05:27.0801 0x2790  [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
19:05:27.0833 0x2790  srv2 - ok
19:05:27.0841 0x2790  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
19:05:27.0860 0x2790  srvnet - ok
19:05:27.0867 0x2790  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
19:05:27.0890 0x2790  SSDPSRV - ok
19:05:27.0897 0x2790  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
19:05:27.0918 0x2790  SstpSvc - ok
19:05:27.0924 0x2790  [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm        C:\Windows\system32\DRIVERS\ssudmdm.sys
19:05:27.0939 0x2790  ssudmdm - ok
19:05:28.0000 0x2790  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\Windows\system32\windows.staterepository.dll
19:05:28.0118 0x2790  StateRepository - ok
19:05:28.0147 0x2790  [ 9867A86327E8AE3806305F1BCF01211A, CCDDB2560B30D27CE662F1B02710E1FAA9331E6A27D9A6629EEDED2CBA822062 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
19:05:28.0177 0x2790  Steam Client Service - ok
19:05:28.0182 0x2790  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
19:05:28.0193 0x2790  stexstor - ok
19:05:28.0206 0x2790  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\Windows\System32\wiaservc.dll
19:05:28.0242 0x2790  stisvc - ok
19:05:28.0248 0x2790  [ 53EB8CE34B55A1EE63424C8DB7388BFC, 5AB59117BA8A2844EB8693CCC19B217AE039B28C87519F96E1C845FE9BF456C2 ] storahci        C:\Windows\system32\drivers\storahci.sys
19:05:28.0261 0x2790  storahci - ok
19:05:28.0265 0x2790  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
19:05:28.0276 0x2790  storflt - ok
19:05:28.0281 0x2790  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\Windows\system32\drivers\stornvme.sys
19:05:28.0293 0x2790  stornvme - ok
19:05:28.0298 0x2790  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
19:05:28.0317 0x2790  storqosflt - ok
19:05:28.0327 0x2790  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc        C:\Windows\system32\storsvc.dll
19:05:28.0356 0x2790  StorSvc - ok
19:05:28.0361 0x2790  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs        C:\Windows\system32\drivers\storufs.sys
19:05:28.0372 0x2790  storufs - ok
19:05:28.0376 0x2790  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
19:05:28.0389 0x2790  storvsc - ok
19:05:28.0393 0x2790  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc          C:\Windows\system32\svsvc.dll
19:05:28.0410 0x2790  svsvc - ok
19:05:28.0414 0x2790  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\Windows\System32\drivers\swenum.sys
19:05:28.0425 0x2790  swenum - ok
19:05:28.0436 0x2790  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv          C:\Windows\System32\swprv.dll
19:05:28.0465 0x2790  swprv - ok
19:05:28.0469 0x2790  [ 50A11202CD60C90149907D53D34EF98F, 45C3E79EF6ABC9D3BADC6AB9E66DA8AFDC6CDDA68C3B5D20193D7D1AA8271EFA ] SynRMIHID      C:\Windows\system32\DRIVERS\SynRMIHID.sys
19:05:28.0480 0x2790  SynRMIHID - ok
19:05:28.0484 0x2790  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
19:05:28.0501 0x2790  Synth3dVsc - ok
19:05:28.0520 0x2790  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain        C:\Windows\system32\sysmain.dll
19:05:28.0563 0x2790  SysMain - ok
19:05:28.0573 0x2790  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
19:05:28.0599 0x2790  SystemEventsBroker - ok
19:05:28.0605 0x2790  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:05:28.0625 0x2790  TabletInputService - ok
19:05:28.0633 0x2790  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv        C:\Windows\System32\tapisrv.dll
19:05:28.0655 0x2790  TapiSrv - ok
19:05:28.0696 0x2790  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
19:05:28.0754 0x2790  Tcpip - ok
19:05:28.0799 0x2790  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
19:05:28.0854 0x2790  Tcpip6 - ok
19:05:28.0865 0x2790  [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
19:05:28.0882 0x2790  tcpipreg - ok
19:05:28.0891 0x2790  [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
19:05:28.0903 0x2790  tdx - ok
19:05:28.0908 0x2790  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
19:05:28.0919 0x2790  terminpt - ok
19:05:28.0938 0x2790  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService    C:\Windows\System32\termsrv.dll
19:05:28.0982 0x2790  TermService - ok
19:05:28.0988 0x2790  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\Windows\system32\themeservice.dll
19:05:29.0008 0x2790  Themes - ok
19:05:29.0017 0x2790  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
19:05:29.0041 0x2790  TieringEngineService - ok
19:05:29.0053 0x2790  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
19:05:29.0086 0x2790  tiledatamodelsvc - ok
19:05:29.0094 0x2790  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc  C:\Windows\System32\TimeBrokerServer.dll
19:05:29.0114 0x2790  TimeBrokerSvc - ok
19:05:29.0122 0x2790  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM            C:\Windows\System32\drivers\tpm.sys
19:05:29.0137 0x2790  TPM - ok
19:05:29.0143 0x2790  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\Windows\System32\trkwks.dll
19:05:29.0164 0x2790  TrkWks - ok
19:05:29.0170 0x2790  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:05:29.0192 0x2790  TrustedInstaller - ok
19:05:29.0198 0x2790  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\Windows\system32\drivers\TsUsbFlt.sys
19:05:29.0215 0x2790  tsusbflt - ok
19:05:29.0220 0x2790  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD        C:\Windows\System32\drivers\TsUsbGD.sys
19:05:29.0234 0x2790  TsUsbGD - ok
19:05:29.0240 0x2790  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
19:05:29.0259 0x2790  tsusbhub - ok
19:05:29.0266 0x2790  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
19:05:29.0284 0x2790  tunnel - ok
19:05:29.0290 0x2790  [ F723552F65D44FE693DB1A383825B3A8, EF8C343C4EB5EEA4EC830378EF576CCD6CD4EEDEDD486C0F29697044E8C71F45 ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
19:05:29.0309 0x2790  tzautoupdate - ok
19:05:29.0314 0x2790  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
19:05:29.0325 0x2790  UASPStor - ok
19:05:29.0332 0x2790  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101      C:\Windows\system32\Drivers\UcmCx.sys
19:05:29.0349 0x2790  UcmCx0101 - ok
19:05:29.0354 0x2790  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
19:05:29.0374 0x2790  UcmTcpciCx0101 - ok
19:05:29.0378 0x2790  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi        C:\Windows\System32\drivers\UcmUcsi.sys
19:05:29.0396 0x2790  UcmUcsi - ok
19:05:29.0403 0x2790  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
19:05:29.0419 0x2790  Ucx01000 - ok
19:05:29.0424 0x2790  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx          C:\Windows\system32\drivers\udecx.sys
19:05:29.0441 0x2790  UdeCx - ok
19:05:29.0450 0x2790  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
19:05:29.0476 0x2790  udfs - ok
19:05:29.0480 0x2790  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
19:05:29.0491 0x2790  UEFI - ok
19:05:29.0495 0x2790  [ 166B17AE1DD24D8BA8CA474C7C31148F, D34E786277093278F58EFAC957279DC4ED43A190538C875B80F5B1E0A0C30381 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
19:05:29.0507 0x2790  UevAgentDriver - ok
19:05:29.0531 0x2790  [ FCA4D901FB9934DAB82ED31C4EE89A11, 8EDF8DD71C13DE77AC83D1086670E9E90C69DE379F1CF768C8B9C789254C04AA ] UevAgentService C:\Windows\system32\AgentService.exe
19:05:29.0575 0x2790  UevAgentService - ok
19:05:29.0585 0x2790  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
19:05:29.0603 0x2790  Ufx01000 - ok
19:05:29.0609 0x2790  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea    C:\Windows\System32\drivers\UfxChipidea.sys
19:05:29.0621 0x2790  UfxChipidea - ok
19:05:29.0627 0x2790  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys    C:\Windows\System32\drivers\ufxsynopsys.sys
19:05:29.0640 0x2790  ufxsynopsys - ok
19:05:29.0648 0x2790  [ 60ED10E6373966FE44CAC9CEC77B2433, 14CB93F174793D53BABFC00EF20C9F05F97D802B92052BA7476DEA83737EB582 ] UHSfiltv        C:\Windows\system32\drivers\UHSfiltv.sys
19:05:29.0659 0x2790  UHSfiltv - ok
19:05:29.0664 0x2790  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
19:05:29.0681 0x2790  UI0Detect - ok
19:05:29.0685 0x2790  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus          C:\Windows\System32\drivers\umbus.sys
19:05:29.0701 0x2790  umbus - ok
19:05:29.0705 0x2790  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\Windows\System32\drivers\umpass.sys
19:05:29.0719 0x2790  UmPass - ok
19:05:29.0727 0x2790  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\Windows\System32\umrdp.dll
19:05:29.0749 0x2790  UmRdpService - ok
19:05:29.0770 0x2790  [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc    C:\Windows\System32\unistore.dll
19:05:29.0818 0x2790  UnistoreSvc - ok
19:05:29.0831 0x2790  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\Windows\System32\upnphost.dll
19:05:29.0861 0x2790  upnphost - ok
19:05:29.0866 0x2790  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea    C:\Windows\System32\drivers\urschipidea.sys
19:05:29.0877 0x2790  UrsChipidea - ok
19:05:29.0881 0x2790  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
19:05:29.0892 0x2790  UrsCx01000 - ok
19:05:29.0897 0x2790  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys    C:\Windows\System32\drivers\urssynopsys.sys
19:05:29.0908 0x2790  UrsSynopsys - ok
19:05:29.0913 0x2790  [ 93F169DE94DBAC5DAF4755AFF10193DD, 381E6751EB97426B9BF30929E4B82A665D1ED985DA60BE18D3C17CF2BB41F848 ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
19:05:29.0931 0x2790  usbaudio - ok
19:05:29.0937 0x2790  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp        C:\Windows\System32\drivers\usbccgp.sys
19:05:29.0951 0x2790  usbccgp - ok
19:05:29.0956 0x2790  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\Windows\System32\drivers\usbcir.sys
19:05:29.0972 0x2790  usbcir - ok
19:05:29.0977 0x2790  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci        C:\Windows\System32\drivers\usbehci.sys
19:05:29.0991 0x2790  usbehci - ok
19:05:30.0003 0x2790  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
19:05:30.0023 0x2790  usbhub - ok
19:05:30.0035 0x2790  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3        C:\Windows\System32\drivers\UsbHub3.sys
19:05:30.0056 0x2790  USBHUB3 - ok
19:05:30.0061 0x2790  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci        C:\Windows\System32\drivers\usbohci.sys
19:05:30.0074 0x2790  usbohci - ok
19:05:30.0078 0x2790  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
19:05:30.0093 0x2790  usbprint - ok
19:05:30.0100 0x2790  [ 4BAAADF7DA222BB74E9A0A01CCF42A80, 1578A275F62DDD5DD22A8ADCBF575EBA77041CABA0C7E4FFC181F8AB9236953B ] usbrndis6      C:\Windows\System32\drivers\usb80236.sys
19:05:30.0117 0x2790  usbrndis6 - ok
19:05:30.0122 0x2790  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\Windows\System32\drivers\usbser.sys
19:05:30.0138 0x2790  usbser - ok
19:05:30.0144 0x2790  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR        C:\Windows\System32\drivers\USBSTOR.SYS
19:05:30.0157 0x2790  USBSTOR - ok
19:05:30.0161 0x2790  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci        C:\Windows\System32\drivers\usbuhci.sys
19:05:30.0176 0x2790  usbuhci - ok
19:05:30.0183 0x2790  [ B4F448F2424492F99F83D3676A453553, 42F1396616EA93BF91EA847B185C321B189F1A5138CA19D22397E8DB6D576973 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
19:05:30.0208 0x2790  usbvideo - ok
19:05:30.0218 0x2790  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI        C:\Windows\System32\drivers\USBXHCI.SYS
19:05:30.0235 0x2790  USBXHCI - ok
19:05:30.0240 0x2790  [ 836828E40B9EEFBC77B3032DB677555C, 8AC045B43086E800B03412895D4DBCF506D1B729791CF24EB2ECA3F0F1C9BDEB ] usb_rndisx      C:\Windows\System32\drivers\usb8023x.sys
19:05:30.0254 0x2790  usb_rndisx - ok
19:05:30.0280 0x2790  [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc    C:\Windows\System32\userdataservice.dll
19:05:30.0333 0x2790  UserDataSvc - ok
19:05:30.0355 0x2790  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager    C:\Windows\System32\usermgr.dll
19:05:30.0399 0x2790  UserManager - ok
19:05:30.0413 0x2790  [ C75B1B48BCAADEB0275C1EBE2EAE742D, 19875B87BDB23E5B60D6D3173FDF7A7634E81E43501529A56FFCCEE21B7E3B71 ] UsoSvc          C:\Windows\system32\usocore.dll
19:05:30.0444 0x2790  UsoSvc - ok
19:05:30.0448 0x2790  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\Windows\system32\lsass.exe
19:05:30.0461 0x2790  VaultSvc - ok
19:05:30.0465 0x2790  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
19:05:30.0476 0x2790  vdrvroot - ok
19:05:30.0492 0x2790  [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds            C:\Windows\System32\vds.exe
19:05:30.0525 0x2790  vds - ok
19:05:30.0532 0x2790  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt    C:\Windows\system32\drivers\VerifierExt.sys
19:05:30.0546 0x2790  VerifierExt - ok
19:05:30.0562 0x2790  [ 46ADD0CD4473AAEF1C68266A803F704D, D521E46891253884CF8285E864FAE63F2E8E0974AD8D2EB4D910E8A35350844F ] vhdmp          C:\Windows\System32\drivers\vhdmp.sys
19:05:30.0585 0x2790  vhdmp - ok
19:05:30.0590 0x2790  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf            C:\Windows\System32\drivers\vhf.sys
19:05:30.0608 0x2790  vhf - ok
19:05:30.0614 0x2790  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus          C:\Windows\system32\drivers\vmbus.sys
19:05:30.0629 0x2790  vmbus - ok
19:05:30.0633 0x2790  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
19:05:30.0648 0x2790  VMBusHID - ok
19:05:30.0652 0x2790  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid          C:\Windows\System32\drivers\vmgid.sys
19:05:30.0667 0x2790  vmgid - ok
19:05:30.0675 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\Windows\System32\icsvc.dll
19:05:30.0700 0x2790  vmicguestinterface - ok
19:05:30.0707 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat  C:\Windows\System32\icsvc.dll
19:05:30.0728 0x2790  vmicheartbeat - ok
19:05:30.0735 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\Windows\System32\icsvc.dll
19:05:30.0756 0x2790  vmickvpexchange - ok
19:05:30.0766 0x2790  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicrdv        C:\Windows\System32\icsvcext.dll
19:05:30.0791 0x2790  vmicrdv - ok
19:05:30.0799 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\Windows\System32\icsvc.dll
19:05:30.0826 0x2790  vmicshutdown - ok
19:05:30.0834 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\Windows\System32\icsvc.dll
19:05:30.0855 0x2790  vmictimesync - ok
19:05:30.0862 0x2790  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession  C:\Windows\System32\icsvc.dll
19:05:30.0882 0x2790  vmicvmsession - ok
19:05:30.0892 0x2790  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicvss        C:\Windows\System32\icsvcext.dll
19:05:30.0913 0x2790  vmicvss - ok
19:05:30.0918 0x2790  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
19:05:30.0930 0x2790  volmgr - ok
19:05:30.0939 0x2790  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
19:05:30.0956 0x2790  volmgrx - ok
19:05:30.0966 0x2790  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
19:05:30.0985 0x2790  volsnap - ok
19:05:30.0989 0x2790  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\Windows\system32\drivers\volume.sys
19:05:31.0000 0x2790  volume - ok
19:05:31.0005 0x2790  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\Windows\System32\drivers\vpci.sys
19:05:31.0021 0x2790  vpci - ok
19:05:31.0028 0x2790  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
19:05:31.0042 0x2790  vsmraid - ok
19:05:31.0066 0x2790  [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS            C:\Windows\system32\vssvc.exe
19:05:31.0115 0x2790  VSS - ok
19:05:31.0128 0x2790  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
19:05:31.0144 0x2790  VSTXRAID - ok
19:05:31.0148 0x2790  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
19:05:31.0165 0x2790  vwifibus - ok
19:05:31.0170 0x2790  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
19:05:31.0186 0x2790  vwififlt - ok
19:05:31.0190 0x2790  [ 59920894C38A827091A06AF559834E47, 8B40FE0B1BA3B2A79BFF70803D039DB921F85C978724722E5E5AFF188FA75471 ] vwifimp        C:\Windows\System32\drivers\vwifimp.sys
19:05:31.0205 0x2790  vwifimp - ok
19:05:31.0216 0x2790  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time        C:\Windows\system32\w32time.dll
19:05:31.0248 0x2790  W32Time - ok
19:05:31.0253 0x2790  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
19:05:31.0267 0x2790  WacomPen - ok
19:05:31.0278 0x2790  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService  C:\Windows\system32\WalletService.dll
19:05:31.0305 0x2790  WalletService - ok
19:05:31.0311 0x2790  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
19:05:31.0331 0x2790  wanarp - ok
19:05:31.0335 0x2790  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
19:05:31.0354 0x2790  wanarpv6 - ok
19:05:31.0381 0x2790  [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine        C:\Windows\system32\wbengine.exe
19:05:31.0440 0x2790  wbengine - ok
19:05:31.0458 0x2790  [ 7C4FAE7A8D55C897E5AE681B245A005F, 7E1E6299579BF02E89C5B828A1C19A43FF4E1F43D46D058F8DC0A8E6421C86A7 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
19:05:31.0496 0x2790  WbioSrvc - ok
19:05:31.0502 0x2790  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs          C:\Windows\system32\drivers\wcifs.sys
19:05:31.0514 0x2790  wcifs - ok
19:05:31.0529 0x2790  [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
19:05:31.0567 0x2790  Wcmsvc - ok
19:05:31.0579 0x2790  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc        C:\Windows\System32\wcncsvc.dll
19:05:31.0608 0x2790  wcncsvc - ok
19:05:31.0613 0x2790  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs          C:\Windows\system32\drivers\wcnfs.sys
19:05:31.0631 0x2790  wcnfs - ok
19:05:31.0636 0x2790  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
19:05:31.0650 0x2790  WdBoot - ok
19:05:31.0667 0x2790  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
19:05:31.0690 0x2790  Wdf01000 - ok
19:05:31.0710 0x2790  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
19:05:31.0727 0x2790  WdFilter - ok
19:05:31.0732 0x2790  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\Windows\system32\wdi.dll
19:05:31.0752 0x2790  WdiServiceHost - ok
19:05:31.0756 0x2790  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost  C:\Windows\system32\wdi.dll
19:05:31.0776 0x2790  WdiSystemHost - ok
19:05:31.0792 0x2790  [ 8CB606A3057355FD5A9DBDD1A0AC94EF, 6DD0B4A2270633086EBB569A00B87430EE6EF173525E341404B15845B57BE86D ] wdiwifi        C:\Windows\system32\DRIVERS\wdiwifi.sys
19:05:31.0822 0x2790  wdiwifi - ok
19:05:31.0830 0x2790  [ 9955F303C20C4F58DB6645C6248DE1C8, 1A04B5C0EF2FE0CDBA054104727C54A02072B829BEAF4F3E4D16E581B50593F1 ] wdm_usb        C:\Windows\system32\DRIVERS\usb2ser.sys
19:05:31.0847 0x2790  wdm_usb - ok
19:05:31.0853 0x2790  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
19:05:31.0866 0x2790  WdNisDrv - ok
19:05:31.0869 0x2790  WdNisSvc - ok
19:05:31.0877 0x2790  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient      C:\Windows\System32\webclnt.dll
19:05:31.0899 0x2790  WebClient - ok
19:05:31.0906 0x2790  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\Windows\system32\wecsvc.dll
19:05:31.0931 0x2790  Wecsvc - ok
19:05:31.0935 0x2790  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
19:05:31.0953 0x2790  WEPHOSTSVC - ok
19:05:31.0959 0x2790  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport  C:\Windows\System32\wercplsupport.dll
19:05:31.0981 0x2790  wercplsupport - ok
19:05:31.0987 0x2790  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\Windows\System32\WerSvc.dll
19:05:32.0008 0x2790  WerSvc - ok
19:05:32.0015 0x2790  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS        C:\Windows\system32\drivers\wfplwfs.sys
19:05:32.0032 0x2790  WFPLWFS - ok
19:05:32.0037 0x2790  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\Windows\System32\wiarpc.dll
19:05:32.0057 0x2790  WiaRpc - ok
19:05:32.0061 0x2790  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
19:05:32.0072 0x2790  WIMMount - ok
19:05:32.0075 0x2790  WinDefend - ok
19:05:32.0085 0x2790  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
19:05:32.0098 0x2790  WindowsTrustedRT - ok
19:05:32.0102 0x2790  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
19:05:32.0113 0x2790  WindowsTrustedRTProxy - ok
19:05:32.0129 0x2790  [ C2A3B07F0118D61086C99BDCBAB6A6A3, 04D646BEF1C6F427503C594F0ECBB33140C3991A3A7AFB66B2C9581E358F9FD2 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
19:05:32.0164 0x2790  WinHttpAutoProxySvc - ok
19:05:32.0169 0x2790  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\Windows\System32\drivers\winmad.sys
19:05:32.0180 0x2790  WinMad - ok
19:05:32.0189 0x2790  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
19:05:32.0211 0x2790  Winmgmt - ok
19:05:32.0256 0x2790  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM          C:\Windows\system32\WsmSvc.dll
19:05:32.0346 0x2790  WinRM - ok
19:05:32.0358 0x2790  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
19:05:32.0373 0x2790  WINUSB - ok
19:05:32.0378 0x2790  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
19:05:32.0390 0x2790  WinVerbs - ok
19:05:32.0404 0x2790  [ ECD999D8412A3473C26B118F89DB9908, 5FB9B93E4B5482CCFF01D805DFA386FD8D3441BC81E7BD5DF89EE3078FD724F3 ] wisvc          C:\Windows\system32\flightsettings.dll
19:05:32.0437 0x2790  wisvc - ok
19:05:32.0477 0x2790  [ 7671078AEF4C0203B053A9642C401FF7, BBFADA89CD31F20ADDBFAFAD2E492C72D82BF2F8B823BB6773F04D229B62534C ] WlanSvc        C:\Windows\System32\wlansvc.dll
19:05:32.0548 0x2790  WlanSvc - ok
19:05:32.0586 0x2790  [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc        C:\Windows\system32\wlidsvc.dll
19:05:32.0659 0x2790  wlidsvc - ok
19:05:32.0665 0x2790  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi        C:\Windows\System32\drivers\wmiacpi.sys
19:05:32.0680 0x2790  WmiAcpi - ok
19:05:32.0691 0x2790  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
19:05:32.0710 0x2790  wmiApSrv - ok
19:05:32.0713 0x2790  WMPNetworkSvc - ok
19:05:32.0721 0x2790  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof            C:\Windows\system32\drivers\Wof.sys
19:05:32.0735 0x2790  Wof - ok
19:05:32.0769 0x2790  [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
19:05:32.0864 0x2790  workfolderssvc - ok
19:05:32.0871 0x2790  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
19:05:32.0892 0x2790  WPDBusEnum - ok
19:05:32.0897 0x2790  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr      C:\Windows\system32\drivers\WpdUpFltr.sys
19:05:32.0907 0x2790  WpdUpFltr - ok
19:05:32.0915 0x2790  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\Windows\system32\WpnService.dll
19:05:32.0938 0x2790  WpnService - ok
19:05:32.0943 0x2790  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\Windows\System32\WpnUserService.dll
19:05:32.0961 0x2790  WpnUserService - ok
19:05:32.0968 0x2790  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
19:05:32.0985 0x2790  ws2ifsl - ok
19:05:32.0991 0x2790  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\Windows\System32\wscsvc.dll
19:05:33.0013 0x2790  wscsvc - ok
19:05:33.0017 0x2790  [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice  C:\Windows\System32\drivers\WSDPrint.sys
19:05:33.0033 0x2790  WSDPrintDevice - ok
19:05:33.0037 0x2790  [ 46E4A69825A7554A5DB784A55F8AD203, 7F347054FCDD5DEF93083D420E56EBE5EEBBAE2BD2FED9B2E75E85149DE52780 ] WSDScan        C:\Windows\system32\DRIVERS\WSDScan.sys
19:05:33.0053 0x2790  WSDScan - ok
19:05:33.0057 0x2790  WSearch - ok
19:05:33.0098 0x2790  [ 5163F5BABAE1FF8CCC0AFD60B6EDD20A, E4F3FC2D7E9995DD34D6DD392D33B51649077985ECA0BF2AF0552D72DC3DF08E ] wuauserv        C:\Windows\system32\wuaueng.dll
19:05:33.0175 0x2790  wuauserv - ok
19:05:33.0182 0x2790  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
19:05:33.0199 0x2790  WudfPf - ok
19:05:33.0206 0x2790  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\Windows\system32\drivers\WudfRd.sys
19:05:33.0226 0x2790  WUDFRd - ok
19:05:33.0232 0x2790  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
19:05:33.0249 0x2790  wudfsvc - ok
19:05:33.0256 0x2790  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs      C:\Windows\system32\DRIVERS\WUDFRd.sys
19:05:33.0279 0x2790  WUDFWpdFs - ok
19:05:33.0287 0x2790  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
19:05:33.0305 0x2790  WUDFWpdMtp - ok
19:05:33.0328 0x2790  [ E231728BC515A4B85543AF74A1FEDFCB, 5D250D7D789B5BB56BFA2E7A109BCEB3686B7636C54D89F4E9804101D145C955 ] WwanSvc        C:\Windows\System32\wwansvc.dll
19:05:33.0378 0x2790  WwanSvc - ok
19:05:33.0398 0x2790  [ F39D6915451D9226AC9A5E7AE70E2ABA, E05D678DC0423A4D0EB8B3BB5A942721BB4F3B0BED22748252DBD6053FE956F1 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
19:05:33.0440 0x2790  XblAuthManager - ok
19:05:33.0462 0x2790  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave    C:\Windows\System32\XblGameSave.dll
19:05:33.0509 0x2790  XblGameSave - ok
19:05:33.0518 0x2790  [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip        C:\Windows\System32\drivers\xboxgip.sys
19:05:33.0541 0x2790  xboxgip - ok
19:05:33.0560 0x2790  [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc  C:\Windows\system32\XboxNetApiSvc.dll
19:05:33.0605 0x2790  XboxNetApiSvc - ok
19:05:33.0611 0x2790  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid      C:\Windows\System32\drivers\xinputhid.sys
19:05:33.0626 0x2790  xinputhid - ok
19:05:33.0628 0x2790  ================ Scan global ===============================
19:05:33.0633 0x2790  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\Windows\system32\basesrv.dll
19:05:33.0639 0x2790  [ C509CCD23B086DFC9EAF86E280043672, BF431DC1C618BAF0CB67976C5A8BCCDC3F3CB266F83C614D605BA559BA8EDFD8 ] C:\Windows\system32\winsrv.dll
19:05:33.0645 0x2790  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\Windows\system32\sxssrv.dll
19:05:33.0655 0x2790  [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\Windows\system32\services.exe
19:05:33.0662 0x2790  [ Global ] - ok
19:05:33.0662 0x2790  ================ Scan MBR ==================================
19:05:33.0675 0x2790  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:05:33.0741 0x2790  \Device\Harddisk0\DR0 - ok
19:05:33.0746 0x2790  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
19:05:33.0764 0x2790  \Device\Harddisk1\DR1 - ok
19:05:33.0765 0x2790  ================ Scan VBR ==================================
19:05:33.0766 0x2790  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition1
19:05:33.0766 0x2790  \Device\Harddisk0\DR0\Partition1 - ok
19:05:33.0798 0x2790  [ 7D6BED9601F04D8101AB300670AE4582 ] \Device\Harddisk0\DR0\Partition2
19:05:33.0799 0x2790  \Device\Harddisk0\DR0\Partition2 - ok
19:05:33.0801 0x2790  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1
19:05:33.0801 0x2790  \Device\Harddisk1\DR1\Partition1 - ok
19:05:33.0803 0x2790  [ FBD6C43245002F3B5AC7D1DF0C8B737C ] \Device\Harddisk1\DR1\Partition2
19:05:33.0805 0x2790  \Device\Harddisk1\DR1\Partition2 - ok
19:05:33.0806 0x2790  [ 3667AB74489876BDBFC8872365259F10 ] \Device\Harddisk1\DR1\Partition3
19:05:33.0806 0x2790  \Device\Harddisk1\DR1\Partition3 - ok
19:05:33.0809 0x2790  [ 17C48690D40597759DF5E46997AE1F5E ] \Device\Harddisk1\DR1\Partition4
19:05:33.0811 0x2790  \Device\Harddisk1\DR1\Partition4 - ok
19:05:33.0811 0x2790  ================ Scan generic autorun ======================
19:05:33.0835 0x2790  [ 57946DCD3AEE6F0CEB764336F9AF073F, 7DAFF6624811BF536780B96AD8AB9845097E762B13FF4AB7D0F6DBECB8DF7D63 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
19:05:33.0865 0x2790  RtHDVBg_LENOVO_DOLBYDRAGON - ok
19:05:33.0879 0x2790  [ 84AA8972CC2570465DCCB6CEEDD89AB9, 85A379BD4D257A665DF3CEC79328AEBDFDEB0E27AE94B3AA304F356DC6605253 ] C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
19:05:33.0900 0x2790  Nahimic2UILauncher - ok
19:05:33.0904 0x2790  [ C7645D43451C6D94D87F4D07BDE59C89, 495BBA47FC43EE23054FCD419F2F00457162D1C04296900C6AEA551102A810F3 ] C:\Windows\system32\rundll32.exe
19:05:33.0925 0x2790  ShadowPlay - ok
19:05:34.0052 0x2790  [ 08B627D08EDC160BFB8C13C1F26BCF87, 9F71CAE092F1BFE04620EAFF359A3EC1F4D08397EDCA40974943C79FDB72D79F ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
19:05:34.0188 0x2790  RTHDVCPL - ok
19:05:34.0199 0x2790  WindowsDefender - ok
19:05:34.0267 0x2790  [ 666FEA598D1776C7F8EDD7746F0F7F59, 54E330BCDBAB646B555DACC15F9CFB0AD6A05BF4E273F73C5133259EEE976C21 ] E:\ANTI-MALWARE\mbamtray.exe
19:05:34.0314 0x2790  Malwarebytes TrayApp - ok
19:05:34.0324 0x2790  [ 77B3161CA6E0F2F94DB70CE9216FCE3B, 705A31350CBC69248E03B6174B92605BC1176AA77B6C67DC0AC14680A7247A22 ] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
19:05:34.0335 0x2790  IMSS - ok
19:05:34.0472 0x2790  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:05:34.0625 0x2790  OneDriveSetup - ok
19:05:34.0757 0x2790  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:05:34.0891 0x2790  OneDriveSetup - ok
19:05:35.0028 0x2790  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:05:35.0163 0x2790  OneDriveSetup - ok
19:05:35.0186 0x2790  [ 1D7DD340E13DF9585EABB849CFC3E11B, 31CCD9753402DC030C641214B4ECB48A757BCD9F427A143A88745C62EFF87766 ] C:\Users\User1\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:05:35.0205 0x2790  OneDrive - ok
19:05:35.0332 0x2790  [ A70E699E0B0DD9C2B3B35E9A8167F903, 6CC7AFFEED646AA9C46C709C8B36751CA9EBCDDC70438ECE1D1328E6C1A02421 ] C:\Program Files\CCleaner\CCleaner64.exe
19:05:35.0466 0x2790  CCleaner Monitoring - ok
19:05:35.0556 0x2790  [ FF206944E3A8590FABE10FB2C321AA6D, 77C555667674C9E4473C64921C5F2A7D723FBE28A73EB5EBAA777CD04D11C06B ] E:\Steam\steam.exe
19:05:35.0605 0x2790  Steam - ok
19:05:35.0609 0x2790  Waiting for KSN requests completion. In queue: 274
19:05:36.0610 0x2790  Waiting for KSN requests completion. In queue: 274
19:05:37.0629 0x2790  AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.611 ), 0x41000 ( enabled : updated )
19:05:37.0630 0x2790  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
19:05:37.0630 0x2790  AV detected via SS2: Avast Antivirus, C:\Program Files\AVAST Software\Avast\wsc_proxy.exe ( 12.3.3154.0 ), 0x40000 ( disabled : updated )
19:05:37.0631 0x2790  AV detected via SS2: Malwarebytes, E:\Anti-Malware\MBAMWsc.exe ( 3.0.0.134 ), 0x61000 ( enabled : updated )
19:05:37.0632 0x2790  FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.611 ), 0x41010 ( enabled )
19:05:38.0759 0x2790  ============================================================
19:05:38.0759 0x2790  Scan finished
19:05:38.0759 0x2790  ============================================================
19:05:38.0767 0x0ab8  Detected object count: 0
19:05:38.0767 0x0ab8  Actual detected object count: 0

cosinus 05.01.2017 19:18
So wars richtig :daumenhoc


Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


Yvi1993 05.01.2017 19:43
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Pro x64
Ran by User1 (Administrator) on 05.01.2017 at 19:31:42,58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.01.2017 at 19:35:32,54
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
# AdwCleaner v6.041 - Bericht erstellt am 05/01/2017 um 19:40:56
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2017-01-05.1 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : User1 - DESKTOP-6NS9837
# Gestartet von : C:\Users\User1\Downloads\AdwCleaner_6.041 (4).exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

[-] Dienst gelöscht: rtop
[-] Dienst gelöscht: ByteFenceService


***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Program Files\ByteFence
[-] Ordner gelöscht: C:\ProgramData\ByteFence
[-] Ordner gelöscht: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware


***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****

[-] Aufgabe gelöscht: ByteFence


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ByteFenceService
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ByteFenceService
[-] Schlüssel gelöscht: HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Software\ByteFence
[-] Schlüssel gelöscht: HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Software\PRODUCTSETUP
[-] Schlüssel gelöscht: HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Software\csastats
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\ByteFence
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\csastats
[-] Schlüssel gelöscht: HKLM\SOFTWARE\ByteFence
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\ByteFence
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\csastats
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\ByteFence
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Directory\shell\ByteFence Folder Scan
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\*\shell\ByteFence File Scan


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2506 Bytes] - [05/01/2017 19:40:56]
C:\AdwCleaner\AdwCleaner[S0].txt - [2554 Bytes] - [05/01/2017 19:40:08]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2652 Bytes] ##########

cosinus 05.01.2017 19:58
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Yvi1993 05.01.2017 20:06
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von User1 (Administrator) auf DESKTOP-6NS9837 (05-01-2017 20:04:25)
Gestartet von C:\Users\User1\Downloads
Geladene Profile: User1 (Verfügbare Profile: defaultuser0 & User1)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
() C:\Users\User1\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Electronic Arts) E:\Origins\OriginWebHelperService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Valve Corporation) E:\Steam\Steam.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\User1\AppData\Local\Razer\InGameEngine\cache\RzSynapse\rzcefrenderprocess.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Farbar) C:\Users\User1\Downloads\FRST64 (1).exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473024 2016-10-21] (Realtek Semiconductor)
HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [691560 2016-04-22] ()
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9037832 2016-10-21] (Realtek Semiconductor)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178912 2016-05-25] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-10-31] (Razer Inc.)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8944344 2016-09-28] (Piriform Ltd)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\Run: [Steam] => E:\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {7ab9537e-a1e4-11e6-824f-806e6f6e6963} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\Autorun.hta
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {8f822d66-a84f-11e6-8254-806e6f6e6963} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\Autorun.hta
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {ebaf5045-b171-11e6-825d-806e6f6e6963} - "D:\Setup.exe"
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\...\MountPoints2: {f0d9c0be-b1a4-11e6-8259-806e6f6e6963} - "D:\DVDSetup.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-11-24]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{563dd4a2-a91d-477b-a920-3e511208712c}: [DhcpNameServer] 192.168.1.10
Tcpip\..\Interfaces\{9f8fb24a-5964-484b-a48a-55f9a45f09fb}: [DhcpNameServer] 192.168.179.1
Tcpip\..\Interfaces\{d6152445-4f23-4949-a60a-057b6211b4ec}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{f9fe0009-6bc5-4d4f-abc4-210594062ecb}: [DhcpNameServer] 192.168.1.10

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-08]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Präsentationen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-12]
CHR Extension: (Google Docs) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-12]
CHR Extension: (Google Drive) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-12]
CHR Extension: (YouTube) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-12]
CHR Extension: (Advanced System Surfing Protection) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\egdoebijggplldfolgeepnnfhfnoglak [2016-11-24]
CHR Extension: (Google Tabellen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-12]
CHR Extension: (Google Docs Offline) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-12]
CHR Extension: (AdBlock) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-12]
CHR Extension: (Google Mail) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-14]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [448496 2016-11-01] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-01-28] (Rivet Networks)
R2 KingoSoftService; C:\Users\User1\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\checkupdate.exe [367584 2016-10-19] ()
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origins\OriginClientService.exe [2119688 2016-12-23] (Electronic Arts)
R2 Origin Web Helper Service; E:\Origins\OriginWebHelperService.exe [2180624 2016-12-23] (Electronic Arts)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-25] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 athr; C:\Windows\System32\drivers\athw10x.sys [4316456 2016-11-11] (Qualcomm Atheros Communications, Inc.)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [144456 2016-01-22] (Rivet Networks, LLC.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWoW64\drivers\HWiNFO64A.SYS [27552 2016-09-12] (REALiX(tm))
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-07-20] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-07-20] (Intel Corporation)
S3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [345872 2016-05-26] (Intel Corporation)
R3 KillerEth; C:\Windows\System32\drivers\e2xw10x64.sys [162456 2016-11-23] (Qualcomm Atheros, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [191312 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\drivers\klhk.sys [435032 2016-11-23] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [182360 2016-12-08] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1019616 2016-12-08] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [57424 2016-12-08] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [218920 2016-12-09] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [85984 2016-12-15] ()
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [245512 2016-12-09] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [104720 2016-12-09] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [164888 2016-12-09] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [134880 2016-12-08] (AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_410e5247be0e5f00\nvlddmkm.sys [14174256 2016-11-18] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-09-23] (Realtek Semiconductor Corp.)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [943112 2016-11-03] (Realtek                                            )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [413912 2016-11-11] (Realsil Semiconductor Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-09-07] (Razer, Inc.)
S3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [3481696 2015-06-24] (Sonix Co. Ltd.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [66168 2015-10-28] (Synaptics Incorporated)
R3 UHSfiltv; C:\Windows\system32\drivers\UHSfiltv.sys [32264 2015-07-22] (Creative Technology Ltd.)
S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [23040 2016-07-16] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\User1\AppData\Local\Temp\ALSysIO64.sys [X]
U0 aswVmm; kein ImagePath
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 20:04 - 2017-01-05 20:04 - 02418176 _____ (Farbar) C:\Users\User1\Downloads\FRST64 (1).exe
2017-01-05 19:37 - 2017-01-05 19:40 - 00000000 ____D C:\AdwCleaner
2017-01-05 19:37 - 2017-01-05 19:37 - 03977168 _____ C:\Users\User1\Downloads\AdwCleaner_6.041 (4).exe
2017-01-05 19:35 - 2017-01-05 19:35 - 00000546 _____ C:\Users\User1\Desktop\JRT.txt
2017-01-05 19:31 - 2017-01-05 19:31 - 01663040 _____ (Malwarebytes) C:\Users\User1\Downloads\JRT (1).exe
2017-01-05 19:26 - 2017-01-05 19:26 - 01663040 _____ (Malwarebytes) C:\Users\User1\Downloads\JRT.exe
2017-01-05 19:04 - 2017-01-05 19:08 - 00297410 _____ C:\TDSSKiller.3.1.0.12_05.01.2017_19.04.05_log.txt
2017-01-05 18:51 - 2017-01-05 18:51 - 00000000 ____D C:\Users\User1\AppData\Local\ESET
2017-01-05 18:36 - 2017-01-05 18:42 - 00296638 _____ C:\TDSSKiller.3.1.0.12_05.01.2017_18.36.54_log.txt
2017-01-05 18:34 - 2017-01-05 18:35 - 00016888 _____ C:\Users\User1\Desktop\TDSSKiller.3.1.0.12_05.01.2017_18.34.58_log.txt
2017-01-05 18:34 - 2017-01-05 18:34 - 16563352 _____ (Malwarebytes Corp.) C:\Users\User1\Downloads\mbar-1.09.3.1001.exe
2017-01-05 18:34 - 2017-01-05 18:34 - 04747704 _____ (AO Kaspersky Lab) C:\Users\User1\Downloads\tdsskiller.exe
2017-01-05 16:45 - 2017-01-05 19:25 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-05 16:45 - 2017-01-05 17:31 - 00000163 _____ C:\Users\User1\AppData\Local\uts.ini
2017-01-05 16:45 - 2017-01-05 16:45 - 00000000 ____D C:\Users\User1\AppData\Roaming\Kingosoft
2017-01-05 16:45 - 2017-01-05 16:45 - 00000000 ____D C:\Users\User1\AppData\Local\uts
2017-01-05 16:45 - 2017-01-05 16:45 - 00000000 ____D C:\Users\User1\AppData\Local\Kingosoft
2017-01-05 16:45 - 2017-01-05 16:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingo ROOT
2017-01-05 16:44 - 2017-01-05 16:44 - 01345872 _____ ( ) C:\Users\User1\Downloads\KingoRoot.exe
2017-01-05 14:32 - 2017-01-05 14:32 - 00000000 ____D C:\Users\User1\AppData\Local\Aiseesoft Studio
2017-01-05 14:32 - 2017-01-05 14:32 - 00000000 ____D C:\Users\User1\.android
2017-01-05 14:31 - 2017-01-05 14:31 - 00000754 _____ C:\Users\Public\Desktop\FoneLab für Android.lnk
2017-01-05 14:31 - 2017-01-05 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft
2017-01-05 14:31 - 2017-01-05 14:31 - 00000000 ____D C:\ProgramData\Aiseesoft Studio
2017-01-05 14:30 - 2017-01-05 14:30 - 41414008 _____ (Aiseesoft Studio ) C:\Users\User1\Downloads\as-android-recovery.exe
2017-01-05 14:23 - 2017-01-05 14:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01007.Wdf
2017-01-05 14:04 - 2017-01-05 20:04 - 00021344 _____ C:\Users\User1\Downloads\FRST.txt
2017-01-05 14:04 - 2017-01-05 14:05 - 00045302 _____ C:\Users\User1\Downloads\Addition.txt
2017-01-05 14:03 - 2017-01-05 14:03 - 02418176 _____ (Farbar) C:\Users\User1\Downloads\FRST64.exe
2017-01-05 08:10 - 2017-01-05 20:04 - 00000000 ____D C:\FRST
2017-01-05 07:46 - 2017-01-05 18:46 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-05 06:43 - 2017-01-05 06:43 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-05 06:38 - 2017-01-05 06:38 - 00000499 _____ C:\Users\Public\Desktop\Recuva.lnk
2017-01-05 06:38 - 2017-01-05 06:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2017-01-05 06:37 - 2017-01-05 06:37 - 05562976 _____ (Piriform Ltd) C:\Users\User1\Downloads\rcsetup153.exe
2016-12-31 10:26 - 2016-12-31 10:26 - 00000000 ____D C:\Program Files\Common Files\INCA Shared
2016-12-31 10:26 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des
2016-12-31 10:26 - 2005-01-03 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys
2016-12-31 10:26 - 2003-07-18 22:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd
2016-12-29 12:42 - 2016-12-29 12:42 - 11122883 _____ C:\Users\User1\Downloads\LifeInTheWoodsBasic.zip
2016-12-29 12:40 - 2016-12-29 12:51 - 00000000 ____D C:\Users\User1\AppData\Roaming\.minecraft
2016-12-29 12:40 - 2016-12-29 12:40 - 00000000 ____D C:\Users\User1\AppData\Roaming\java
2016-12-29 12:40 - 2016-12-29 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-12-29 12:39 - 2016-12-29 12:39 - 02314240 _____ C:\Users\User1\Downloads\MinecraftInstaller.msi
2016-12-29 10:58 - 2016-12-29 10:58 - 00000000 ____D C:\Users\User1\AppData\Roaming\LolClient
2016-12-29 10:11 - 2016-12-29 10:11 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (3).exe
2016-12-29 10:11 - 2016-12-29 10:11 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (2).exe
2016-12-28 20:17 - 2017-01-05 19:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-28 20:16 - 2016-12-28 20:17 - 54199488 _____ (Malwarebytes ) C:\Users\User1\Downloads\mb3-setup-computerbild.8000-3.0.5.1299.exe
2016-12-28 20:02 - 2016-12-28 20:02 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041 (1).exe
2016-12-24 15:18 - 2016-12-24 15:18 - 00000000 ____D C:\ProgramData\Riot Games
2016-12-24 15:17 - 2016-12-24 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-12-24 15:17 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-12-24 15:17 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-12-24 15:17 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-12-24 15:16 - 2016-12-24 15:17 - 00000000 ____D C:\Users\User1\AppData\Roaming\Riot Games
2016-12-24 15:16 - 2016-12-24 15:16 - 31876824 _____ (Riot Games) C:\Users\User1\Downloads\LeagueofLegends_EUW_Installer_2016_11_10.exe
2016-12-23 22:17 - 2016-12-31 12:40 - 00000000 ____D C:\Users\User1\Documents\Electronic Arts
2016-12-23 21:46 - 2016-12-29 14:27 - 00000000 ____D C:\Users\User1\Desktop\Spiele
2016-12-23 21:46 - 2016-12-23 21:46 - 00000000 ____D C:\Users\User1\Desktop\Scirvener
2016-12-23 21:43 - 2016-12-23 21:43 - 03977168 _____ C:\Users\User1\Downloads\adwcleaner_6.041.exe
2016-12-23 20:22 - 2015-04-14 16:09 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2016-12-21 16:45 - 2016-12-21 16:46 - 00006332 _____ C:\Users\User1\Documents\cc_20161221_164556.reg
2016-12-18 11:16 - 2016-12-18 11:16 - 915729729 _____ C:\Users\User1\Downloads\Bless Fan Package.rar
2016-12-17 20:11 - 2016-12-29 10:27 - 00000000 ____D C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2016-12-17 20:10 - 2016-12-17 20:10 - 04385216 _____ (MY.COM B.V.) C:\Users\User1\Downloads\RevelationOnlineLoader_8098d244b4986b278b653ae0834e2f21__de.exe
2016-12-17 19:55 - 2016-12-17 19:55 - 00000000 ____D C:\Users\User1\AppData\LocalLow\Unity
2016-12-17 17:23 - 2016-12-17 17:23 - 00000000 ____D C:\Users\User1\AppData\Roaming\FiraxisLive
2016-12-17 12:59 - 2016-12-17 12:59 - 00003628 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 12:59 - 2016-12-17 12:59 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-15 15:14 - 2016-12-15 15:14 - 00085984 _____ C:\Windows\system32\Drivers\klupd_klif_kimul.sys
2016-12-14 17:43 - 2016-12-14 17:43 - 00000000 ____D C:\Users\User1\AppData\Local\Chromium
2016-12-13 19:51 - 2016-12-13 19:51 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-12-13 19:51 - 2013-03-24 05:00 - 00391168 _____ (CANON INC.) C:\Windows\system32\CNMLMBR.DLL
2016-12-13 19:41 - 2016-12-13 19:45 - 00101499 _____ C:\Users\User1\Documents\klangkugeln.pdf
2016-12-13 19:37 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-12-13 19:37 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-12-13 19:37 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-13 19:37 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-12-13 19:37 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-13 19:37 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-13 19:37 - 2016-12-09 11:32 - 07816032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-13 19:37 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-12-13 19:37 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-12-13 19:37 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-12-13 19:37 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2016-12-13 19:37 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2016-12-13 19:37 - 2016-12-09 11:18 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-13 19:37 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 11:15 - 01988560 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-12-13 19:37 - 2016-12-09 11:14 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2016-12-13 19:37 - 2016-12-09 11:11 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-13 19:37 - 2016-12-09 11:09 - 00455520 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2016-12-13 19:37 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-12-13 19:37 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-12-13 19:37 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-12-13 19:37 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-13 19:37 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-12-13 19:37 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-12-13 19:37 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2016-12-13 19:37 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-12-13 19:37 - 2016-12-09 10:47 - 22563328 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:45 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WordBreakers.dll
2016-12-13 19:37 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-12-13 19:37 - 2016-12-09 10:38 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:37 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-12-13 19:37 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-12-13 19:37 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-12-13 19:37 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 23677952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-12-13 19:37 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-12-13 19:37 - 2016-12-09 10:29 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-12-13 19:37 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 08129536 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:26 - 01692672 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-12-13 19:37 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2016-12-13 19:37 - 2016-12-09 10:24 - 02275840 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-12-13 19:37 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:22 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:21 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 01512960 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-12-13 19:37 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2016-12-13 19:37 - 2016-12-09 10:19 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2016-12-13 19:37 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2016-12-13 19:37 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-12-13 19:37 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-12-13 19:37 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputLocaleManager.dll
2016-12-13 19:37 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EditBufferTestHook.dll
2016-12-13 19:37 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-12-13 19:37 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-12-13 19:37 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-12-13 19:37 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-12-10 20:48 - 2016-12-10 20:48 - 00000000 ____D C:\Users\User1\AppData\LocalLow\SKS
2016-12-09 16:25 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-12-09 16:25 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-12-09 16:25 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-12-09 16:25 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-09 16:25 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-12-09 16:25 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-12-09 16:25 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2016-12-09 16:25 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2016-12-09 16:25 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-12-09 16:25 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-12-09 16:25 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-12-09 16:25 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-12-09 16:25 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-12-09 16:25 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-12-09 16:25 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-09 16:25 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-12-09 16:25 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-12-09 16:25 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-12-09 16:25 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-12-09 16:25 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-12-09 16:25 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-12-09 16:25 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2016-12-09 16:25 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\Windows\system32\mfaudiocnv.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-12-09 16:25 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-12-09 16:25 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-12-09 16:25 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-12-09 16:25 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-12-09 16:25 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-12-09 16:25 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-12-09 16:25 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\CbtBackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\NetCfgNotifyObjectHost.exe
2016-12-09 16:25 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2016-12-09 16:25 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-12-09 16:25 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-09 16:25 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\ReportingCSP.dll
2016-12-09 16:25 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2016-12-09 16:25 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-12-09 16:25 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2016-12-09 16:25 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-12-09 16:25 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2016-12-09 16:25 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-12-09 16:25 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll
2016-12-09 16:25 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-12-09 16:25 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-12-09 16:25 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\EDPCleanup.exe
2016-12-09 16:25 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2016-12-09 16:25 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-12-09 16:25 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-12-09 16:25 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2016-12-09 16:25 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-12-09 16:25 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2016-12-09 16:25 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2016-12-09 16:25 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-12-09 16:25 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-12-09 16:25 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-12-09 16:25 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-12-09 16:25 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\ProvSysprep.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-12-09 16:25 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2016-12-09 16:25 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-09 16:25 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-12-09 16:25 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-12-09 16:25 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-12-09 16:25 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-12-09 16:25 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-12-09 16:25 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2016-12-09 16:25 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-12-09 16:25 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpoext.dll
2016-12-09 16:25 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-12-09 16:25 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\dialserver.dll
2016-12-09 16:25 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\Windows\system32\SRHInproc.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-12-09 16:25 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-12-09 16:25 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-12-09 16:25 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-12-09 16:25 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-12-09 16:25 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2016-12-09 16:25 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2016-12-09 16:25 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-12-09 16:25 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-12-09 16:25 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-12-09 16:25 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2016-12-09 16:25 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-12-09 16:25 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-12-09 16:25 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-12-09 16:25 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-09 16:25 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2016-12-09 16:25 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-09 16:25 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2016-12-09 16:25 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfaudiocnv.dll
2016-12-09 16:25 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-12-09 16:25 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-12-09 16:25 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-12-09 16:25 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-09 16:25 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetCfgNotifyObjectHost.exe
2016-12-09 16:25 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-12-09 16:25 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-12-09 16:25 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-12-09 16:25 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2016-12-09 16:25 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-09 16:25 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-12-09 16:25 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-09 16:25 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-12-09 16:25 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2016-12-09 16:25 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-12-09 16:25 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-12-09 16:25 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-12-09 16:25 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-12-09 16:25 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2016-12-09 16:25 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-12-09 16:25 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-12-09 16:25 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-12-09 16:25 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-12-09 16:25 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2016-12-09 16:25 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-12-09 16:25 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-12-09 16:25 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-12-09 16:25 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2016-12-09 16:25 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-12-09 16:25 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcuiu.dll
2016-12-09 16:25 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-12-09 16:25 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2016-12-09 16:25 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-12-09 16:25 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll
2016-12-09 16:25 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2016-12-09 16:25 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-12-09 16:25 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxclu.dll
2016-12-09 16:25 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-12-09 16:25 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-12-09 16:25 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-12-09 16:25 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-12-09 16:25 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-12-09 13:58 - 2016-12-09 13:58 - 00245512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00218920 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00164888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2016-12-09 13:57 - 2016-12-09 13:57 - 00104720 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2016-12-08 15:47 - 2016-12-08 15:47 - 07586311 _____ C:\Users\User1\Documents\bvc.pdf
2016-12-08 15:47 - 2016-12-08 15:47 - 00000000 ____D C:\Users\User1\AppData\LocalLow\Temp
2016-12-08 15:41 - 2016-12-08 15:41 - 01665710 _____ C:\Users\User1\Downloads\antworten_sachkunde.pdf
2016-12-08 15:40 - 2016-12-08 15:40 - 00609225 _____ C:\Users\User1\Downloads\fragen_sachkunde.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 19:47 - 2016-09-09 20:57 - 02503706 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-05 19:47 - 2016-07-16 23:51 - 01054420 _____ C:\Windows\system32\perfh007.dat
2017-01-05 19:47 - 2016-07-16 23:51 - 00248180 _____ C:\Windows\system32\perfc007.dat
2017-01-05 19:44 - 2016-11-23 19:03 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-05 19:42 - 2016-11-23 11:26 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-05 19:41 - 2016-11-11 21:46 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-05 19:41 - 2016-09-09 20:49 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-05 19:41 - 2016-07-16 07:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-01-05 19:25 - 2016-07-16 12:45 - 00000000 ____D C:\Windows\INF
2017-01-05 19:22 - 2016-07-16 07:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-01-05 18:50 - 2016-11-25 13:52 - 00000000 ____D C:\Users\User1\AppData\Local\CrashDumps
2017-01-05 18:50 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-01-05 18:28 - 2016-09-09 20:48 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-01-05 14:32 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1
2017-01-05 07:58 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-05 07:58 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppReadiness
2017-01-05 06:41 - 2016-09-09 20:53 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-31 23:46 - 2016-11-24 18:24 - 00000000 ____D C:\ProgramData\Origin
2016-12-31 23:46 - 2016-09-09 20:53 - 00524288 ___SH C:\Users\User1\NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 23:46 - 2016-09-09 20:53 - 00065536 ___SH C:\Users\User1\NTUSER.DAT{f5b13604-4b48-11e6-80cb-e41d2d012050}.TM.blf
2016-12-31 23:43 - 2016-11-24 18:25 - 00000000 ____D C:\Users\User1\AppData\Roaming\Origin
2016-12-31 23:25 - 2016-11-24 18:22 - 00000000 ____D C:\Users\User1\AppData\Local\Battle.net
2016-12-31 10:26 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files\Common Files
2016-12-31 10:25 - 2016-07-16 12:47 - 00000000 __SHD C:\Windows\Installer
2016-12-29 21:36 - 2016-11-25 13:55 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-12-29 10:30 - 2016-11-23 20:13 - 00000000 ____D C:\Users\User1\Documents\My Games
2016-12-29 10:29 - 2016-11-24 11:17 - 00000000 ____D C:\MSI
2016-12-29 10:26 - 2016-09-12 09:45 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-28 20:06 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1\AppData\Local\Packages
2016-12-28 20:05 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\Logs
2016-12-24 15:17 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\Tasks
2016-12-24 13:46 - 2016-11-26 20:53 - 00000000 ____D C:\Users\User1\Documents\Heroes of the Storm
2016-12-24 11:43 - 2016-11-24 11:19 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-23 22:17 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Documents
2016-12-22 16:14 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Saved Games
2016-12-21 16:41 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\debug
2016-12-17 20:11 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-17 20:10 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Pictures
2016-12-17 19:55 - 2016-09-09 20:53 - 00000000 ____D C:\Users\User1\AppData\LocalLow
2016-12-15 15:21 - 2016-09-09 20:50 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{f5b135e6-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000002.regtrans-ms
2016-12-15 15:19 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\rescache
2016-12-15 15:07 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\assembly
2016-12-14 17:43 - 2016-11-23 19:25 - 00000000 ____D C:\Users\User1\AppData\Local\Steam
2016-12-14 17:34 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-14 15:01 - 2016-09-09 20:48 - 00194296 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-14 07:35 - 2016-09-09 20:48 - 00524288 ___SH C:\Windows\system32\config\DRIVERS{f5b135f1-4b48-11e6-80cb-e41d2d012050}.TMContainer00000000000000000001.regtrans-ms
2016-12-14 07:35 - 2016-09-09 20:48 - 00065536 ___SH C:\Windows\system32\config\DRIVERS{f5b135f1-4b48-11e6-80cb-e41d2d012050}.TM.blf
2016-12-14 07:35 - 2016-07-16 12:47 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\de-DE
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\Boot
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\ShellExperiences
2016-12-14 07:35 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\AppPatch
2016-12-14 07:22 - 2016-09-12 09:47 - 00002267 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-14 06:48 - 2016-07-16 12:36 - 00000000 ____D C:\Windows\CbsTemp
2016-12-14 06:46 - 2016-09-12 09:40 - 00000000 ____D C:\Windows\system32\MRT
2016-12-14 06:45 - 2016-09-12 09:40 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-13 19:52 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-09 20:15 - 2016-09-09 20:53 - 00000402 ___SH C:\Users\User1\Documents\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000282 ___SH C:\Users\User1\Downloads\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000282 ___SH C:\Users\User1\Desktop\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000174 ___SH C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000174 ___SH C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Searches
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Music
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Links
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Favorites
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\Contacts
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-09 20:15 - 2016-09-09 20:53 - 00000000 ___RD C:\Users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-09 20:15 - 2016-07-16 07:04 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\wbem
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\system32\oobe
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Windows\bcastdvr
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-09 20:14 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Sysprep
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\Dism
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\system32\CatRoot
2016-12-09 20:14 - 2016-07-16 07:04 - 00000000 ____D C:\Windows\servicing
2016-12-09 16:16 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2016-12-08 15:03 - 2016-11-23 19:04 - 00001476 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2016-12-08 15:03 - 2016-11-23 19:03 - 01019616 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-12-08 15:03 - 2016-06-20 23:41 - 00057424 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys
2016-12-08 15:03 - 2016-06-02 22:39 - 00134880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-23 13:26 - 2016-11-23 13:26 - 1307648 _____ () C:\Users\User1\AppData\Local\file__0.localstorage
2017-01-05 16:45 - 2017-01-05 17:31 - 0000163 _____ () C:\Users\User1\AppData\Local\uts.ini
2016-09-09 20:57 - 2016-09-09 20:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\User1\AppData\Local\Temp\libeay32.dll
C:\Users\User1\AppData\Local\Temp\msvcr120.dll
C:\Users\User1\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-05 06:55

==================== Ende von FRST.txt ============================

Yvi1993 05.01.2017 20:07
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von User1 (05-01-2017 20:04:47)
Gestartet von C:\Users\User1\Downloads
Windows 10 Pro Version 1607 (X64) (2016-09-09 19:53:08)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3303905599-2245439626-354554511-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3303905599-2245439626-354554511-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-3303905599-2245439626-354554511-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-3303905599-2245439626-354554511-501 - Limited - Disabled)
User1 (S-1-5-21-3303905599-2245439626-354554511-1001 - Administrator - Enabled) => C:\Users\User1

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ansel (Version: 375.95 - NVIDIA Corporation) Hidden
ApoDispatchConfigurator (Version: 2.2.601 - Nahimic) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
AudioLaunchpadConfigurator (Version: 2.2.601 - Nahimic) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
CheckDevicesConfigurator (Version: 2.2.601 - Nahimic) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
Die Sims™ 3 Wildes Studentenleben (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 University Life) (Version: 1.0.0.0 - Electronic Arts Inc.)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.25.136.1020 - Electronic Arts Inc.)
Dishonored 2 (HKLM\...\Steam App 403640) (Version:  - Arkane Studios)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
FoneLab für Android 1.1.30 (HKLM-x32\...\{7A7ACBDD-FED6-4ec5-BD26-5549FEB5B968}_is1) (Version: 1.1.30 - Aiseesoft Studio)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (x32 Version: 17.0.0.611 - Kaspersky Lab) Hidden
Killer Bandwidth Control Filter Driver (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer E240x Drivers (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer Network Manager (Version: 1.1.57.1125 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1125 - Rivet Networks)
Kingo ROOT version 1.4.9.2848 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.4.9.2848 - Kingosoft Technology Ltd.)
LauncherSetup (Version: 2.2.601 - Nahimic) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 12.6.0.0 - Lightworks)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Nahimic 2 (HKLM-x32\...\{3e7434ed-dffc-4264-a656-0087f9a875e6}) (Version: 2.2.6 - Nahimic)
Nahimic2UISetup (Version: 2.2.601 - Nahimic) Hidden
NahimicSettingsConfigurator (Version: 2.2.601 - Nahimic) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.95 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.95 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
Planet Coaster (HKLM\...\Steam App 493340) (Version:  - Frontier Developments)
ProductDaemonSetup (Version: 2.2.601 - Nahimic) Hidden
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.1031 - Razer Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7960 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Scrap Mechanic (HKLM\...\Steam App 387990) (Version:  - Axolot Games)
Sherlock Holmes: The Devil's Daughter (HKLM\...\Steam App 350640) (Version:  - Frogwares)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sid Meier's Civilization VI (HKLM\...\Steam App 289070) (Version:  - Firaxis)
SonicMapperConfigurator (Version: 2.2.601 - Nahimic) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Forest (HKLM\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Long Dark (HKLM\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.55 - TuneUp Software) Hidden
UIInstallUpgrade (Version: 2.2.601 - Nahimic) Hidden
Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.) <==== ACHTUNG
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Weapons of Mythology - New Age - (HKLM\...\Steam App 523190) (Version:  - Gamemag)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {3532E62E-151F-4832-820F-1D747FA26D65} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {36C6A83C-846F-47CB-90BA-DDEE4579365B} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-02-19] (Intel(R) Corporation)
Task: {39546669-1F60-46A6-B2E9-220D613AD929} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {5121F5D9-0FA5-4174-89BF-B437F1598280} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {5D69CD75-14E7-4FCD-A6C0-94DFA38A997C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {5E954971-DEAF-47DD-B56D-68A453553DAE} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [2016-04-22] ()
Task: {682BDE58-6941-44DD-A3B3-3A26813B2DEB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {789A892E-6BFB-4408-960B-7F344176D323} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {8A009B95-EC9C-4FEE-B4E1-FC2B68CA1A00} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe [2016-04-22] ()
Task: {ACC5724B-4F37-4691-8E7A-C7A42334A65A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-12] (Google Inc.)
Task: {C2F59D90-4850-42CF-90A4-F242829312CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C7957681-C2E4-4ACB-9A5A-0DA8384463E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CD9C479D-068D-44C0-BE9E-3AA912BB93F3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CDF761A3-5D0F-481F-A7B0-44AEF6305A0C} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\User1\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {D657AAA1-C3A8-4BB5-A87A-F8B458894A06} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe [2016-04-22] ()
Task: {E20B44BD-1AC8-40BE-84E4-39F9DA6B05DA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-12] (Google Inc.)
Task: {E9DE188A-0D4F-4526-88B8-1F72EDCBB822} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {EB868EF2-7486-4B3E-8BBF-2DD0E4724975} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-01-05 16:45 - 2016-10-19 10:23 - 00017376 _____ () C:\Users\User1\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe
2016-09-25 00:20 - 2016-09-25 00:21 - 00189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2016-11-23 11:57 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-12-13 19:37 - 2016-12-09 11:29 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-09-12 09:40 - 2016-09-12 09:40 - 01864384 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-04-22 17:53 - 2016-04-22 17:53 - 00211816 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
2016-04-22 17:53 - 2016-04-22 17:53 - 00285032 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
2016-11-23 11:26 - 2016-11-17 02:03 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-11-03 12:00 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-13 19:37 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-11 22:55 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-11 22:55 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-11 22:55 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-11 22:55 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-11 22:55 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-11 22:55 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-04-22 17:50 - 2016-04-22 17:50 - 00691560 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
2016-04-22 17:50 - 2016-04-22 17:50 - 01962496 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2svc32.exe
2016-04-22 17:53 - 2016-04-22 17:53 - 00500224 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2svc64.exe
2016-09-28 17:25 - 2016-09-28 17:25 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-12-15 14:58 - 2016-12-15 14:58 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-15 14:58 - 2016-12-15 14:58 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-15 14:58 - 2016-12-15 14:58 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-15 14:58 - 2016-12-15 14:58 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 00865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2016-12-23 19:56 - 2016-12-23 19:56 - 02493440 _____ () E:\Origins\libGLESv2.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-23 11:57 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-04-22 17:49 - 2016-04-22 17:49 - 00180584 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2DevProps.dll
2016-04-22 17:47 - 2016-04-22 17:47 - 00252264 _____ () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2OSD.dll
2016-11-23 11:57 - 2016-11-17 11:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-11-23 11:57 - 2016-11-17 11:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-11-23 11:57 - 2016-11-17 11:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-09-12 09:39 - 2016-09-12 09:39 - 01383616 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2016-09-12 09:40 - 2016-09-12 09:40 - 00118976 _____ () C:\Users\User1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll
2016-11-23 11:57 - 2016-11-17 14:44 - 60817344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-11-01 08:58 - 2016-11-01 08:58 - 00143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 50656768 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 01874944 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libglesv2.dll
2016-11-25 15:38 - 2016-09-07 21:42 - 00075264 _____ () C:\Users\User1\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libegl.dll
2016-12-14 07:22 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 07:22 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-05-25 22:52 - 2016-05-25 22:52 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-07-16 12:47 - 2017-01-05 19:25 - 00002024 ____A C:\Windows\system32\Drivers\etc\hosts

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 api.recommendedsw.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com
0.0.0.0 cdn.appround.biz
0.0.0.0 cdn.bigspeedpro.com
0.0.0.0 cdn.bispd.com

Da befinden sich 4 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3303905599-2245439626-354554511-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img3.jpg
DNS Servers: 192.168.192.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{429DE816-4FBD-42EE-B638-711BAFE6B702}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{65303912-7997-4DC7-A35A-3337BE31B493}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{DF13E15C-D484-4B92-9B7D-D76EB8EDE98C}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{DC49F3EC-25CD-487E-938D-216EDD544179}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{ADB22972-1CBD-409C-97E6-DC3E02CF18B4}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{829F417C-3502-430E-BE1D-DF49304A2EC2}] => E:\Steam\Steam.exe
FirewallRules: [{630D374E-DA6E-4E75-9EB5-AAA094AEE159}] => E:\Steam\Steam.exe
FirewallRules: [{7D64997E-069A-45B6-9D31-4F1DB3F5486A}] => E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{9A93C7A7-1A02-475D-A753-D40A80EFC3B1}] => E:\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{E040FDB7-D1EF-45BB-9B08-968610D69074}] => E:\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{755CCBFD-BEF1-4A7A-A5F1-6A7709D4D1AD}] => E:\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe
FirewallRules: [{9E63854F-7F3A-4660-B540-62512A195337}] => E:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{3542887B-8F96-4B9D-87C5-9F617B9981D7}] => E:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{E7262040-3705-4850-9D7F-2AD728E5F533}] => E:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{88E46CE9-BD25-4A47-9AD7-7EBFBC575E29}] => E:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{80D08ACC-04E3-4BEC-B63E-FF1506AA2681}] => E:\Steam\steamapps\common\Scrap Mechanic\Release\ScrapMechanic.exe
FirewallRules: [{A8AEA435-CFFE-4BB5-AF25-CB654D8899A2}] => E:\Steam\steamapps\common\Scrap Mechanic\Release\ScrapMechanic.exe
FirewallRules: [{EA713A1E-AEA1-4CF9-869C-619A64325955}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{1779807D-5B84-4419-97D7-8B44C2A78F46}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{3EE69F64-03CF-434A-B5C9-EE31ADD7006D}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{352C809B-9DB9-4F6C-BC5A-10169520A223}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{76495409-2962-44FC-B895-B8857EE2B451}] => E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{D0B11EC6-97BF-4D6F-8960-C780B2991A77}] => E:\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{B3CD45DC-8487-4CA2-A294-B5AFBACAC170}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7EB39559-6210-452B-9EEC-AC37585B8D09}] => E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F315852F-24F0-4C83-8239-444C7448CE12}] => E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{50617EDE-E957-4F87-A354-43593333CABA}] => E:\Steam\steamapps\common\Weapons of Mythology - New Age -\Weapons Of Mythology New Age.exe
FirewallRules: [{278EBC98-2332-4728-A265-A1A83A8B2849}] => E:\Steam\steamapps\common\Weapons of Mythology - New Age -\Weapons Of Mythology New Age.exe
FirewallRules: [{A14A0E3F-66B6-4BC5-A005-A4112F6E260E}] => E:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{65D2B53C-373B-49E0-A0C8-D39682072A6F}] => E:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{785A686F-05E1-4C74-B922-99CE5B22DE78}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{D18C3D10-2EB8-41A0-8C29-241D6B8420BC}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{1307ADC0-7EA4-43E3-BA39-16F7978ADF77}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{B1D50E74-3D0A-4E2F-AF20-7D8EC5E39ED2}] => E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{468BEF7B-EEFB-4735-BEF5-C0A17177E818}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{AE26E809-ECCC-4193-96C3-9A04D11B7979}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{AB3EA093-C758-40E5-8007-2172EC5B5BAF}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{151DD038-B952-4380-9730-4837936F60F4}] => E:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{B1DC4F83-FF15-4568-A1A4-3483A857CF1D}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{D7ABA18E-7C47-4DEF-9300-7C23C7F5B326}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{8989120D-C8C6-48ED-B039-B1F7EA0D5D63}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{C9A92BAC-8EBC-41E4-9DCA-E9B09FFCD19A}] => E:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{D4EAF82B-B3BE-4CF8-9E85-EB4D0E3CD45C}] => E:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{F8860564-0FF8-4275-981F-86C67DD0D21B}] => E:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/05/2017 07:31:43 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\User1\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"; Beschreibung = JRT Pre-Junkware Removal; Fehler = 0x80070422).

Error: (01/05/2017 07:27:06 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\User1\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"; Beschreibung = JRT Pre-Junkware Removal; Fehler = 0x80070422).

Error: (01/05/2017 07:25:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: RzSynapse.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
  bei Razer.Emily.Common.RzProtocol.GetFWVersion(UInt32, UInt32, Int64, System.String ByRef)
  bei Razer.Emily.Common.RzDevice.ReadFWVersion()
  bei Razer.Emily.Common.RzDevice.getDeviceInfo()
  bei Razer.Emily.Common.RzDevice.RefreshData()
  bei Razer.Emily.UI.App.plugUnplug(System.Collections.Generic.List`1<Razer.Emily.Common.RzDevice>, Boolean)
  bei Razer.Emily.UI.App+<>c__DisplayClass1b.<ReportActiveDevices>b__1a()
  bei System.Threading.Tasks.Task.InnerInvoke()
  bei System.Threading.Tasks.Task.Execute()
  bei System.Threading.Tasks.Task.ExecutionContextCallback(System.Object)
  bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.Tasks.Task.ExecuteWithThreadLocal(System.Threading.Tasks.Task ByRef)
  bei System.Threading.Tasks.Task.ExecuteEntry(Boolean)
  bei System.Threading.Tasks.Task.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (01/05/2017 07:00:30 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/05/2017 06:50:29 PM) (Source: ESENT) (EventID: 455) (User: )
Description: CCleaner64 (10308) testing: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\User1\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (01/05/2017 06:50:29 PM) (Source: ESENT) (EventID: 489) (User: )
Description: CCleaner64 (10308) testing: Der Versuch, die Datei "C:\Users\User1\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (01/05/2017 06:35:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: {885943EF-A4E3-4A9A-BBB3-35DA10F29DE8}.exe, Version: 3.1.0.12, Zeitstempel: 0x581ffeb3
Name des fehlerhaften Moduls: {885943EF-A4E3-4A9A-BBB3-35DA10F29DE8}.exe, Version: 3.1.0.12, Zeitstempel: 0x581ffeb3
Ausnahmecode: 0x40000015
Fehleroffset: 0x0014376c
ID des fehlerhaften Prozesses: 0x1198
Startzeit der fehlerhaften Anwendung: 0x01d2677a08bd2754
Pfad der fehlerhaften Anwendung: C:\Users\User1\AppData\Local\Temp\{C360F441-825E-40F5-8410-03887139760E}\{885943EF-A4E3-4A9A-BBB3-35DA10F29DE8}.exe
Pfad des fehlerhaften Moduls: C:\Users\User1\AppData\Local\Temp\{C360F441-825E-40F5-8410-03887139760E}\{885943EF-A4E3-4A9A-BBB3-35DA10F29DE8}.exe
Berichtskennung: ac09182c-c88f-4e2d-b8a5-9c5d89b44969
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/05/2017 04:46:08 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\AVAST Software\Avast\setup\iplugins\IStats.dll".
Die abhängige Assemblierung "Avast.VC110.CRT,processorArchitecture="x86",publicKeyToken="2036b14a11e83e4a",type="win32",version="11.0.60610.1"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/05/2017 07:45:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1980
Startzeit der fehlerhaften Anwendung: 0x01d2671e3938b202
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: e6809586-75cd-4a1b-b313-8a086fa729ca
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/05/2017 07:45:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1980
Startzeit der fehlerhaften Anwendung: 0x01d2671e3938b202
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 27dc32dd-ea65-4d82-af44-f4706ce506d7
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge


Systemfehler:
=============
Error: (01/05/2017 07:45:45 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6NS9837)
Description: Der Server "{37998346-3765-45B1-8C66-AA88CA6B20B8}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/05/2017 07:43:59 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet:
Unbekannter Fehler

Error: (01/05/2017 07:42:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/05/2017 07:41:09 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (01/05/2017 07:40:47 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet:
Unbekannter Fehler

Error: (01/05/2017 07:40:44 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "NVIDIA LocalSystem Container" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (01/05/2017 07:40:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/05/2017 07:40:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kaspersky Secure Connection Service 1.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/05/2017 07:40:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/05/2017 07:40:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2017-01-05 07:33:04.458
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:33:03.164
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:33:03.153
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:32:44.054
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 07:32:43.696
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:11.837
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:11.834
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:05.700
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-01-05 06:50:05.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.

  Date: 2016-12-23 21:49:55.308
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 16%
Installierter physikalischer RAM: 16333.83 MB
Verfügbarer physikalischer RAM: 13618.25 MB
Summe virtueller Speicher: 18765.83 MB
Verfügbarer virtueller Speicher: 15643.64 MB

==================== Laufwerke ================================

Drive c: (SSD) (Fixed) (Total:255.51 GB) (Free:197.33 GB) NTFS
Drive d: (TuneUp Utilities) (CDROM) (Total:0.26 GB) (Free:0 GB) CDFS
Drive e: (HDD) (Fixed) (Total:931.39 GB) (Free:705.1 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (Size: 256.2 GB) (Disk ID: 1349CB3B)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus 06.01.2017 10:55
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKLM-x32\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Alle Zeitangaben in WEZ +1. Es ist jetzt 00:57 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131