Trojaner-Board
Seite 1 von 5 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   msi cr70 erkennt kamera nicht weder interne noch externe, win7,downspeedtest (https://www.trojaner-board.de/183924-msi-cr70-erkennt-kamera-weder-interne-noch-externe-win7-downspeedtest.html)

milkit54 12.01.2017 23:53
msi cr70 erkennt kamera nicht weder interne noch externe, win7,downspeedtest
 
Hallo zusammen hier bittet ein ziemlich verwirrter und MS kranker unwissender Anwender um evtl mögliche Hilfe. Fehler meinerseits bitte ich schon jetzt zu entschuldigen Danke
ich starte mal den Versuch
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-01-2017
durchgeführt von Micha (Administrator) auf MICHA-MSI (12-01-2017 10:46:44)
Gestartet von C:\Users\Micha\Downloads
Geladene Profile: Micha (Verfügbare Profile: Micha & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareService.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe
(MSI) C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Anti-Theft\Engine\1.6.0.17\ccSvcHst.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(PLUMBYTES) C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\ws.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\RtkBleServ.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Anti-Theft\Engine\1.6.0.17\ccSvcHst.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(MSI) C:\Program Files (x86)\SCM\Radio Manager.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareTray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(© 2015 Microsoft Corporation) C:\Users\Micha\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
() C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\SymcPCCULaunchSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\scalc.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Micha\Downloads\FRST64(1).exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-21] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [253440 2013-04-23] (Realtek Semiconductor Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2875728 2013-03-04] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Radio Manager] => C:\Program Files (x86)\SCM\Radio Manager.exe [406920 2013-07-05] (MSI)
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [399528 2013-07-05] (MSI)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Windows Mobile-based device management] => C:\windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareTray.exe [9533688 2016-12-15] ()
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2011-10-13] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [230696 2011-10-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [490480 2013-02-01] (MSI)
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2014-03-18] (shbox.de)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1153448 2016-08-10] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-10-05] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1367360 2014-12-16] (Lavasoft)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [EPSON SX100 Series (Kopie 1)] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE [221696 2008-02-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [EPSON SX100 Series] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE [221696 2008-02-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [EPSON SX100 Series (Kopie 2)] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE [221696 2008-02-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-10-05] (Apple Inc.)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [BingSvc] => C:\Users\Micha\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27230168 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-18\...\Run: [EPSON SX100 Series] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE [221696 2008-02-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-18\...\RunOnce: [panda] => reg.exe delete "HKCU\Software\AppDataLow\Software\panda" /f
HKU\S-1-5-18\...\RunOnce: [panda_XP] => reg.exe delete "HKCU\Software\panda" /f
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop(777).ini [2009-07-14] ()
Startup: C:\Users\Micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.6.lnk [2013-07-31]
ShortcutTarget: Intel(R) Turbo Boost Technology Monitor 2.6.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
GroupPolicyScripts-x32: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog9-x64 01 C:\windows\system32\LavasoftTcpService64.dll [358736 2014-12-16] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\windows\system32\LavasoftTcpService64.dll [358736 2014-12-16] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\windows\system32\LavasoftTcpService64.dll [358736 2014-12-16] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\windows\system32\LavasoftTcpService64.dll [358736 2014-12-16] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\windows\system32\LavasoftTcpService64.dll [358736 2014-12-16] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{19590355-955C-4F75-9574-A5178867FB8F}: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{7AFF0EF0-F8B5-4E22-BED7-5BAC51243C58}: [NameServer] 193.189.244.206 193.189.244.225

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.n-tv.de/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {2BA0719B-B10C-4176-8BB1-AF2B6E7453E0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAM3&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {2BA0719B-B10C-4176-8BB1-AF2B6E7453E0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAM3&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={18DC9A1B-75F8-4C91-A21F-328A8F8FCFB0}&mid=2f112f36b90e47cd86aa856e587a95e0-b67d740e056757739f071bdf1b00435729c4d0a4&lang=de&ds=AVG&coid=avgtbavg&cmpid=1016tb&pr=fr&d=2015-01-05 13:55:51&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> {2BA0719B-B10C-4176-8BB1-AF2B6E7453E0} URL =
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_2&idate=2015-05-27&ent=ch_668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.de/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={18DC9A1B-75F8-4C91-A21F-328A8F8FCFB0}&mid=2f112f36b90e47cd86aa856e587a95e0-b67d740e056757739f071bdf1b00435729c4d0a4&lang=de&ds=AVG&coid=avgtbavg&cmpid=1016tb&pr=fr&d=2015-01-05 13:55:51&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2198626584-3468660724-23365673-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_test01_150105&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2016-08-10] (Qihu 360 Software Co., Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2016-08-10] (Qihu 360 Software Co., Ltd.)
Toolbar: HKLM-x32 - Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

FireFox:
========
FF ProfilePath: C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766 [2017-01-12]
FF NewTab: Mozilla\Firefox\Profiles\0h0153di.default-1478642192766 -> hxxp://hp.myway.com/downspeedtest/ttab02/index.html?coId=db9de8384d8040ac93524301c1b30367&subId=undefined&ln=de&n=783924d7&ptb=4E16B681-6380-4409-98AE-5BA6F85B170D&st=tab&p2=%5EBXM%5Exdm001%5ETTAB02%5Ede&si=undefined
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\0h0153di.default-1478642192766 -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\0h0153di.default-1478642192766 -> Google
FF Homepage: Mozilla\Firefox\Profiles\0h0153di.default-1478642192766 -> hxxp://www.n-tv.de/
FF Extension: (Test Pilot) - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\Extensions\@testpilot-addon.xpi [2017-01-11]
FF Extension: (GMX MailCheck) - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\Extensions\browser-mailcheck@gmx.net [2016-11-23]
FF Extension: (Awesome Screenshot - Capture, Annotate & More) - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2017-01-10]
FF Extension: (Page Shot) - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\Extensions\jid1-NeEaf3sAHdKHPA@jetpack.xpi [2017-01-11]
FF Extension: (DownSpeedTest) - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\Extensions\_dqMembers_@www.downspeedtest.com [2017-01-09]
FF SearchPlugin: C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\searchplugins\avg-secure-search.xml [2016-12-09]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: (PDF Architect 2 Creator) - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-20] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [WebProtection@360safe.com] - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox
FF Extension: (360-Internetschutz) - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox [2016-05-26]
FF HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\jsjjbqd4.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2198626584-3468660724-23365673-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: (McAfee Security Scan Plus) - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] [ist nicht signiert]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pandasecuritytb.xml [2015-05-27]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-10-18]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-02-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-02-16] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=de-de
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://pandasecurity.mystart.com/results.php?searchsource=omnibar&pr=vmn&id=pandasecuritytb&v=2_3&ent=ds_671&q={searchTerms}
CHR DefaultSearchKeyword: Default -> yahoo
CHR Profile: C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default [2017-01-04]
CHR Extension: (Google Präsentationen) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-13]
CHR Extension: (Google Docs) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-13]
CHR Extension: (Google Drive) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-10]
CHR Extension: (YouTube) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-10]
CHR Extension: (Google-Suche) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-10]
CHR Extension: (Yahoo!) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdhbkaahephniejapepaiggngjnedpci [2015-07-22]
CHR Extension: (Google Tabellen) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-13]
CHR Extension: (MSN Homepage) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkcgfbgohboipdhliafmacjnhjbhmim [2016-12-18]
CHR Extension: (Google Docs Offline) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-22]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-22]
CHR Extension: (Google Mail) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-13]
CHR Extension: (Chrome Media Router) - C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-18]
CHR HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fdhbkaahephniejapepaiggngjnedpci] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-04-02] (Realtek Semiconductor Corporation) [Datei ist nicht signiert]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [47104 2013-04-26] () [Datei ist nicht signiert]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Datei ist nicht signiert]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Datei ist nicht signiert]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-16] (Intel Corporation)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareService.exe [630976 2016-12-15] ()
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1351512 2014-12-16] (Lavasoft Limited)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2013-07-05] (Micro-Star International Co., Ltd.) [Datei ist nicht signiert]
R2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [12800 2010-07-17] (MSI) [Datei ist nicht signiert]
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [143856 2013-02-01] (MSI)
R2 NAT; C:\Program Files (x86)\Norton Anti-Theft\Engine\1.6.0.17\ccSvcHst.exe [143928 2012-08-19] (Symantec Corporation)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4230016 2013-01-28] (Symantec Corporation)
R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\SymcPCCULaunchSvc.exe [123320 2012-08-13] (Symantec Corporation)
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-10-02] (Visicom Media Inc.)
R2 pbamw_service; C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe [125712 2016-11-08] (PLUMBYTES)
R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe [126392 2012-08-13] (Symantec Corporation)
R2 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
R2 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [914344 2016-08-10] (QIHU 360 SOFTWARE CO. LIMITED)
R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [42496 2013-04-26] (Realtek Semiconductor Corporation) [Datei ist nicht signiert]
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-12-16] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 360AntiHacker; C:\windows\System32\Drivers\360AntiHacker64.sys [151784 2016-08-10] (360.cn)
R3 360AvFlt; C:\windows\System32\DRIVERS\360AvFlt.sys [86248 2016-08-10] (360.cn)
R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2016-08-10] (360.cn)
R1 360Box64; C:\windows\System32\DRIVERS\360Box64.sys [330472 2016-08-10] (360.cn)
R1 360Camera; C:\windows\System32\Drivers\360Camera64.sys [40520 2015-07-09] (360.cn)
R1 360fsflt; C:\windows\System32\DRIVERS\360FsFlt.sys [391392 2016-08-10] (360.cn)
R1 BAPIDRV; C:\windows\System32\DRIVERS\BAPIDRV64.sys [190696 2016-08-10] (360.cn)
R3 ccSet_NARA; C:\windows\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
S3 ccSet_NAT; C:\windows\system32\drivers\NATx64\0106000.011\ccSetx64.sys [168096 2012-08-07] (Symantec Corporation)
R1 ESProtectionDriver; C:\windows\system32\drivers\mbae64.sys [77416 2016-12-14] ()
S3 ewusbnet; C:\windows\System32\DRIVERS\ewusbnet.sys [246224 2009-12-07] (Huawei Technologies Co., Ltd.)
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.129.0\gzflt.sys [161592 2016-04-28] (BitDefender LLC)
S3 hwusbdev; C:\windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\windows\System32\drivers\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R3 L1C; C:\windows\System32\DRIVERS\L1C62x64.sys [118504 2013-05-07] (Qualcomm Atheros Co., Ltd.)
R2 MBAMChameleon; C:\windows\system32\drivers\MBAMChameleon.sys [176064 2017-01-10] (Malwarebytes)
R3 MBAMFarflt; C:\windows\system32\drivers\farflt.sys [102856 2017-01-11] (Malwarebytes)
R3 MBAMProtection; C:\windows\system32\drivers\mbam.sys [43968 2017-01-11] (Malwarebytes)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [250816 2017-01-11] (Malwarebytes)
R3 MBAMWebProtection; C:\windows\system32\drivers\mwac.sys [81696 2017-01-12] (Malwarebytes)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S3 RtkAvrcp; C:\windows\system32\drivers\RtkAvrcp.sys [61152 2012-12-27] (Realtek Semiconductor Corporation)
S3 RtkAvrcpCtrlr; C:\windows\system32\drivers\RtkAvrcpCtrlr.sys [66376 2013-04-08] (Realtek Semiconductor Corporation)
R3 RtkBtFilter; C:\windows\System32\DRIVERS\RtkBtfilter.sys [535624 2013-03-28] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation                          )
S3 SWDUMon; C:\windows\System32\DRIVERS\SWDUMon.sys [13920 2017-01-04] ()
S3 Trufos; C:\windows\System32\DRIVERS\Trufos.sys [485512 2016-04-28] (BitDefender S.R.L.)
S3 MGHwCtrl; \??\C:\Program Files\MSI\MSI Software Install\MGHwCtrl.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-12 10:45 - 2017-01-12 10:45 - 02419200 _____ (Farbar) C:\Users\Micha\Downloads\FRST64(1).exe
2017-01-11 12:41 - 2017-01-11 12:41 - 00000111 ____H C:\Users\Micha\Documents\.~lock.Insolvenz-1.ods#
2017-01-10 20:59 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2017-01-10 20:59 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2017-01-10 20:59 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2017-01-10 20:59 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcrypt.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2017-01-10 20:59 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2017-01-10 20:59 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2017-01-10 20:59 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2017-01-10 20:59 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2017-01-10 20:59 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2017-01-10 20:59 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2017-01-10 20:59 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2017-01-10 20:59 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2017-01-10 20:59 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2017-01-10 20:56 - 2017-01-10 20:56 - 00083124 _____ C:\Users\Micha\Downloads\FRST01102017.txt
2017-01-10 20:55 - 2017-01-10 20:55 - 00041706 _____ C:\Users\Micha\Downloads\Addition01102017.txt
2017-01-10 16:22 - 2017-01-10 16:22 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-01-10 16:22 - 2017-01-10 16:22 - 00000000 ____D C:\Users\DefaultAppPool
2017-01-10 16:22 - 2016-11-30 06:27 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\AVG
2017-01-10 16:22 - 2013-07-31 22:25 - 00002110 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2017-01-10 16:22 - 2013-07-31 19:31 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2017-01-10 15:44 - 2017-01-10 15:44 - 00002485 _____ C:\Users\Public\Desktop\DriverUpdate.lnk
2017-01-10 15:44 - 2017-01-10 15:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
2017-01-10 15:44 - 2017-01-10 15:44 - 00000000 ____D C:\Program Files (x86)\DriverUpdate
2017-01-10 09:57 - 2017-01-10 09:57 - 00000000 ____D C:\Users\Micha\AppData\Local\{12A8CCFE-3C33-4995-BAD8-074E4C5B22FD}
2017-01-10 09:38 - 2017-01-10 09:38 - 00176064 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMChameleon.sys
2017-01-10 09:37 - 2017-01-12 09:50 - 00081696 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys
2017-01-10 09:37 - 2017-01-11 01:27 - 00102856 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys
2017-01-10 09:37 - 2017-01-11 01:27 - 00043968 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2017-01-10 09:37 - 2017-01-11 01:26 - 00250816 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-10 09:37 - 2017-01-10 09:37 - 00001837 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-10 09:37 - 2017-01-10 09:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-10 09:37 - 2017-01-10 09:37 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-10 09:37 - 2016-12-14 12:55 - 00077416 _____ C:\windows\system32\Drivers\mbae64.sys
2017-01-10 09:35 - 2017-01-10 09:36 - 54199488 _____ (Malwarebytes ) C:\Users\Micha\Downloads\mb3-setup-consumer-3.0.5.1299(1).exe
2017-01-10 08:39 - 2017-01-10 08:39 - 00000000 ____D C:\Users\Micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plumbytes Anti-Malware
2017-01-10 08:39 - 2017-01-10 08:39 - 00000000 ____D C:\Program Files\Plumbytes Software
2017-01-10 08:38 - 2017-01-10 08:38 - 00881904 _____ C:\Users\Micha\Downloads\antimalwaresetup.exe
2017-01-09 19:19 - 2017-01-09 19:19 - 00041077 _____ C:\Users\Micha\Desktop\Addition.txt
2017-01-09 15:57 - 2017-01-10 20:53 - 00041703 _____ C:\Users\Micha\Downloads\Addition.txt
2017-01-09 15:55 - 2017-01-12 10:47 - 00031700 _____ C:\Users\Micha\Downloads\FRST.txt
2017-01-09 15:55 - 2017-01-12 10:46 - 00000000 ____D C:\FRST
2017-01-09 15:54 - 2017-01-09 15:54 - 02419200 _____ (Farbar) C:\Users\Micha\Downloads\FRST64.exe
2017-01-05 20:02 - 2017-01-05 20:02 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-01-05 20:02 - 2017-01-05 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-01-05 00:41 - 2015-07-16 20:12 - 06131200 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2017-01-05 00:41 - 2015-07-16 20:12 - 00856064 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2017-01-05 00:41 - 2015-07-16 20:12 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2017-01-05 00:41 - 2015-07-16 20:11 - 07077376 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2017-01-05 00:41 - 2015-07-16 20:11 - 01057792 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2017-01-05 00:41 - 2015-07-16 20:11 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2017-01-05 00:41 - 2015-07-11 14:15 - 00429568 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2017-01-04 19:30 - 2015-12-20 19:50 - 03180544 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2017-01-04 19:30 - 2015-12-20 19:50 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2017-01-04 19:30 - 2015-12-20 15:08 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2017-01-04 19:29 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2017-01-04 15:35 - 2017-01-04 15:35 - 00021286 _____ C:\Users\Micha\Desktop\scan malebyte 04012017.txt
2017-01-04 15:08 - 2017-01-04 15:08 - 54199488 _____ (Malwarebytes ) C:\Users\Micha\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-04 13:53 - 2017-01-04 13:53 - 13425152 _____ (ReviverSoft) C:\Users\Micha\Downloads\DriverReviverSetup_ppc(2).exe
2017-01-04 10:30 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2017-01-04 10:30 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2017-01-04 10:30 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2017-01-04 10:30 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2017-01-04 10:30 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2017-01-04 10:30 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2017-01-04 10:30 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2017-01-04 10:30 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2017-01-04 10:30 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2017-01-04 10:30 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2017-01-04 10:28 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2017-01-04 10:28 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbGD.sys
2017-01-04 10:28 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpendp_winip.dll
2017-01-04 10:28 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2017-01-04 10:25 - 2015-08-05 18:56 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\icaapi.dll
2017-01-04 10:25 - 2015-08-05 18:06 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2017-01-04 09:59 - 2017-01-04 09:59 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2017-01-04 09:25 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\kbdgeoqw.dll
2017-01-04 09:25 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZEL.DLL
2017-01-04 09:25 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZE.DLL
2017-01-04 09:25 - 2015-12-16 19:48 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZE.DLL
2017-01-04 09:25 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdgeoqw.dll
2017-01-04 09:25 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZEL.DLL
2017-01-04 02:04 - 2017-01-04 02:04 - 03279864 _____ (SPAMfighter ApS) C:\Users\Micha\Downloads\DRIVERfighter_Web(1).exe
2017-01-04 01:18 - 2017-01-04 10:38 - 00013920 _____ C:\windows\system32\Drivers\SWDUMon.sys
2017-01-04 01:18 - 2017-01-04 01:18 - 00000000 ____D C:\Users\Micha\AppData\Local\Downloaded Installers
2017-01-04 01:18 - 2017-01-04 01:18 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc
2017-01-04 01:03 - 2017-01-04 01:04 - 00000000 ____D C:\Users\Micha\AppData\Roaming\Fighters
2017-01-04 01:02 - 2017-01-04 02:18 - 00000000 ____D C:\ProgramData\Fighters
2017-01-04 01:00 - 2017-01-04 01:01 - 03279864 _____ (SPAMfighter ApS) C:\Users\Micha\Downloads\DRIVERfighter_Web.exe
2017-01-04 00:56 - 2017-01-04 14:12 - 00000000 ____D C:\Program Files\ReviverSoft
2017-01-04 00:54 - 2017-01-04 00:55 - 13425152 _____ (ReviverSoft) C:\Users\Micha\Downloads\DriverReviverSetup_ppc(1).exe
2016-12-30 10:41 - 2016-12-30 10:41 - 00178564 _____ C:\Users\Micha\Downloads\HERMES_label_2016-12-30_10_40_52.pdf
2016-12-30 10:35 - 2016-12-30 10:35 - 00178968 _____ C:\Users\Micha\Downloads\HERMES_label_2016-12-30_10_33_49.pdf
2016-12-24 23:14 - 2016-12-24 23:14 - 00025199 _____ C:\Users\Micha\Documents\freelancer200855.vcf
2016-12-24 10:33 - 2012-06-01 06:39 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\wamregps.dll
2016-12-24 10:33 - 2012-06-01 06:36 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\iisRtl.dll
2016-12-24 10:33 - 2012-06-01 06:36 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\iisrstap.dll
2016-12-24 10:33 - 2012-06-01 06:35 - 00060928 _____ (Microsoft Corporation) C:\windows\system32\ahadmin.dll
2016-12-24 10:33 - 2012-06-01 06:34 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\admwprox.dll
2016-12-24 10:33 - 2012-06-01 06:33 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\iisreset.exe
2016-12-24 10:33 - 2012-06-01 05:40 - 00010752 _____ (Microsoft Corporation) C:\windows\SysWOW64\wamregps.dll
2016-12-24 10:33 - 2012-06-01 05:37 - 00154624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iisRtl.dll
2016-12-24 10:33 - 2012-06-01 05:37 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\iisrstap.dll
2016-12-24 10:33 - 2012-06-01 05:35 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\admwprox.dll
2016-12-24 10:33 - 2012-06-01 05:35 - 00026624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ahadmin.dll
2016-12-24 10:33 - 2012-06-01 05:34 - 00015360 _____ (Microsoft Corporation) C:\windows\SysWOW64\iisreset.exe
2016-12-24 02:30 - 2017-01-11 01:20 - 02210866 ____H C:\Users\Micha\AppData\Local\IconCache.db
2016-12-23 23:18 - 2016-12-23 23:18 - 00000000 ____D C:\windows\SysWOW64\BestPractices
2016-12-23 23:18 - 2016-12-23 23:18 - 00000000 ____D C:\windows\system32\BestPractices
2016-12-23 23:18 - 2016-12-23 23:18 - 00000000 ____D C:\inetpub
2016-12-23 17:25 - 2016-12-23 17:25 - 43886552 _____ (Skype Technologies S.A.) C:\Users\Micha\Downloads\SkypeSetupFull(2).exe
2016-12-23 17:25 - 2016-12-23 17:25 - 00003142 _____ C:\windows\System32\Tasks\{42239007-962A-405B-897B-E4E0207270AF}
2016-12-23 17:23 - 2016-12-23 17:24 - 01463424 _____ (Skype Technologies S.A.) C:\Users\Micha\Downloads\skypesetup.exe
2016-12-23 16:13 - 2017-01-03 14:27 - 00524288 ___SH C:\windows\system32\config\components{2f89a682-c922-11e6-aa72-54271e9e7c13}.TMContainer00000000000000000001.regtrans-ms
2016-12-23 16:13 - 2017-01-03 14:27 - 00065536 ___SH C:\windows\system32\config\components{2f89a682-c922-11e6-aa72-54271e9e7c13}.TM.blf
2016-12-23 16:13 - 2016-12-23 16:17 - 00524288 ___SH C:\windows\system32\config\components{2f89a682-c922-11e6-aa72-54271e9e7c13}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 15:52 - 2016-12-23 15:52 - 00000000 __SHD C:\found.000
2016-12-18 14:28 - 2016-12-18 14:28 - 00000000 ____D C:\Users\Micha\Tracing
2016-12-18 14:25 - 2016-12-18 14:25 - 43872728 _____ (Skype Technologies S.A.) C:\Users\Micha\Downloads\SkypeSetupFull(1).exe
2016-12-18 14:20 - 2016-12-18 14:20 - 43878872 _____ (Skype Technologies S.A.) C:\Users\Micha\Downloads\SkypeSetupFull.exe
2016-12-18 14:12 - 2017-01-12 10:48 - 00000000 ____D C:\Users\Micha\AppData\Roaming\Skype
2016-12-18 14:12 - 2016-12-18 14:28 - 00000000 ____D C:\Users\Micha\AppData\Local\Skype
2016-12-18 11:45 - 2016-12-18 11:45 - 00003202 _____ C:\windows\System32\Tasks\{7C15C6ED-AB8F-4479-AB67-B366BCA58406}
2016-12-18 11:00 - 2017-01-04 15:36 - 00000000 ____D C:\Users\Micha\AppData\Local\SlimWare Utilities Inc
2016-12-18 11:00 - 2016-12-18 11:00 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2016-12-16 09:55 - 2016-12-16 09:57 - 00000000 ____D C:\Users\Micha\Documents\Fax
2016-12-16 09:55 - 2016-12-16 09:55 - 00000000 ___RD C:\Users\Micha\Documents\Scanned Documents
2016-12-16 01:19 - 2016-12-16 01:19 - 00307001 _____ C:\Users\Micha\Downloads\urkunden(2).jpeg
2016-12-15 19:15 - 2016-12-15 19:15 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2016-12-15 19:13 - 2016-12-15 19:13 - 02586928 _____ C:\Users\Micha\Downloads\Adaware_Installer(7).exe
2016-12-14 03:58 - 2016-11-21 19:12 - 00109568 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2016-12-14 03:58 - 2016-11-20 17:19 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2016-12-14 03:58 - 2016-11-20 15:07 - 00467392 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2016-12-14 03:58 - 2016-11-17 17:41 - 00370920 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2016-12-14 03:58 - 2016-11-15 00:27 - 00394448 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-12-14 03:58 - 2016-11-14 23:39 - 00346320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-12-14 03:58 - 2016-11-12 20:48 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2016-12-14 03:58 - 2016-11-12 20:48 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2016-12-14 03:58 - 2016-11-12 20:28 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2016-12-14 03:58 - 2016-11-12 20:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2016-12-14 03:58 - 2016-11-12 20:26 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2016-12-14 03:58 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-12-14 03:58 - 2016-11-12 20:25 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2016-12-14 03:58 - 2016-11-12 20:21 - 02896384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-12-14 03:58 - 2016-11-12 20:15 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2016-12-14 03:58 - 2016-11-12 20:14 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2016-12-14 03:58 - 2016-11-12 20:09 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2016-12-14 03:58 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-12-14 03:58 - 2016-11-12 20:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2016-12-14 03:58 - 2016-11-12 20:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2016-12-14 03:58 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-12-14 03:58 - 2016-11-12 20:07 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2016-12-14 03:58 - 2016-11-12 19:56 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2016-12-14 03:58 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-12-14 03:58 - 2016-11-12 19:52 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2016-12-14 03:58 - 2016-11-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2016-12-14 03:58 - 2016-11-12 19:41 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 03:58 - 2016-11-12 19:40 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2016-12-14 03:58 - 2016-11-12 19:35 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2016-12-14 03:58 - 2016-11-12 19:34 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-12-14 03:58 - 2016-11-12 19:31 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-12-14 03:58 - 2016-11-12 19:30 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2016-12-14 03:58 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-12-14 03:58 - 2016-11-12 19:29 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2016-12-14 03:58 - 2016-11-12 19:29 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2016-12-14 03:58 - 2016-11-12 19:28 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2016-12-14 03:58 - 2016-11-12 19:27 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-12-14 03:58 - 2016-11-12 19:20 - 02287616 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-12-14 03:58 - 2016-11-12 19:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2016-12-14 03:58 - 2016-11-12 19:19 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2016-12-14 03:58 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-12-14 03:58 - 2016-11-12 19:15 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2016-12-14 03:58 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-12-14 03:58 - 2016-11-12 19:14 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2016-12-14 03:58 - 2016-11-12 19:14 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-12-14 03:58 - 2016-11-12 19:14 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2016-12-14 03:58 - 2016-11-12 19:11 - 00725504 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-12-14 03:58 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-12-14 03:58 - 2016-11-12 19:08 - 02131456 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-12-14 03:58 - 2016-11-12 19:08 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2016-12-14 03:58 - 2016-11-12 19:03 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2016-12-14 03:58 - 2016-11-12 18:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-12-14 03:58 - 2016-11-12 18:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2016-12-14 03:58 - 2016-11-12 18:52 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2016-12-14 03:58 - 2016-11-12 18:51 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2016-12-14 03:58 - 2016-11-12 18:49 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-12-14 03:58 - 2016-11-12 18:47 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2016-12-14 03:58 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-12-14 03:58 - 2016-11-12 18:40 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-12-14 03:58 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-12-14 03:58 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-12-14 03:58 - 2016-11-12 18:36 - 02055680 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-12-14 03:58 - 2016-11-12 18:36 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2016-12-14 03:58 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-12-14 03:58 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-12-14 03:58 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-12-14 03:58 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-12-14 03:58 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-12-14 03:58 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-12-14 03:58 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-12-14 03:58 - 2016-11-10 17:32 - 01009152 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2016-12-14 03:58 - 2016-11-10 17:19 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2016-12-14 03:58 - 2016-11-09 17:41 - 00114408 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2016-12-14 03:58 - 2016-11-09 17:33 - 03244032 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2016-12-14 03:58 - 2016-11-09 17:33 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2016-12-14 03:58 - 2016-11-09 17:33 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2016-12-14 03:58 - 2016-11-09 17:33 - 00070144 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2016-12-14 03:58 - 2016-11-09 17:33 - 00025088 _____ (Microsoft Corporation) C:\windows\system32\msimsg.dll
2016-12-14 03:58 - 2016-11-09 17:33 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2016-12-14 03:58 - 2016-11-09 17:17 - 02365440 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2016-12-14 03:58 - 2016-11-09 17:17 - 01806848 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2016-12-14 03:58 - 2016-11-09 17:17 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2016-12-14 03:58 - 2016-11-09 17:17 - 00025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msimsg.dll
2016-12-14 03:58 - 2016-11-09 17:17 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2016-12-14 03:58 - 2016-11-09 17:02 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe
2016-12-14 03:58 - 2016-11-09 16:55 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe
2016-12-14 03:58 - 2016-11-06 17:33 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2016-12-14 03:58 - 2016-11-06 17:16 - 00312832 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2016-12-14 03:58 - 2016-11-06 17:01 - 03219456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-12-14 03:58 - 2016-10-27 16:33 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2016-12-14 03:58 - 2016-10-27 16:20 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2016-12-14 03:58 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2016-12-14 03:58 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-12-14 03:58 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2016-12-14 03:58 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2016-12-14 03:58 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2016-12-14 03:58 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2016-12-14 03:58 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2016-12-14 03:58 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2016-12-14 03:58 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2016-12-14 03:58 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-12-14 03:58 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-12-14 03:58 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\bcdedit.exe
2016-12-14 03:58 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-12-14 03:58 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2016-12-14 03:58 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2016-12-14 03:58 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2016-12-14 03:58 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2016-12-14 03:58 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 03:58 - 2016-10-11 14:18 - 00419648 _____ C:\windows\SysWOW64\locale.nls
2016-12-14 03:58 - 2016-10-11 14:17 - 00419648 _____ C:\windows\system32\locale.nls
2016-12-14 03:58 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2016-12-14 03:58 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2016-12-14 03:58 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2016-12-14 03:58 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2016-12-14 03:58 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2016-12-14 03:58 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2016-12-14 03:58 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2016-12-14 03:58 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2016-12-14 03:58 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2016-12-13 11:53 - 2016-12-13 11:53 - 00180102 _____ C:\Users\Micha\Downloads\HERMES_label_2016-12-13_11_37_40(1).pdf
2016-12-13 11:38 - 2016-12-13 11:38 - 00180102 _____ C:\Users\Micha\Downloads\HERMES_label_2016-12-13_11_37_40.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-12 10:17 - 2014-12-14 15:17 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2017-01-12 09:08 - 2016-11-22 11:54 - 00000000 ____D C:\Users\Micha\AppData\LocalLow\Mozilla
2017-01-12 08:01 - 2009-07-14 05:45 - 00024432 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-12 08:01 - 2009-07-14 05:45 - 00024432 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-11 21:01 - 2014-12-19 21:37 - 00010240 _____ C:\Users\Micha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-01-11 12:42 - 2015-07-15 11:33 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-11 12:40 - 2015-01-21 09:55 - 00004476 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-11 12:38 - 2015-05-27 15:08 - 00000000 ____D C:\ProgramData\panda_url_filtering
2017-01-11 01:40 - 2015-07-26 08:18 - 00000000 ____D C:\Users\Micha\AppData\LocalLow\360WD
2017-01-11 01:29 - 2015-02-27 20:57 - 00000000 ____D C:\Users\Micha\AppData\Local\FreePDF_XP
2017-01-11 01:27 - 2013-07-31 21:55 - 00000000 ____D C:\ProgramData\Realtek
2017-01-11 01:26 - 2016-12-05 21:00 - 00002312 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2017-01-11 01:25 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
2017-01-11 01:25 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-01-11 00:03 - 2014-12-14 16:17 - 00000000 ____D C:\windows\system32\MRT
2017-01-11 00:02 - 2014-12-20 03:20 - 135657872 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2017-01-10 16:17 - 2014-12-14 15:17 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2017-01-10 16:17 - 2014-12-14 15:17 - 00000000 ____D C:\windows\system32\Macromed
2017-01-10 16:17 - 2013-07-31 22:22 - 00802904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2017-01-10 16:17 - 2013-07-31 22:22 - 00144472 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-10 16:17 - 2013-07-31 22:22 - 00000000 ____D C:\windows\SysWOW64\Macromed
2017-01-10 09:37 - 2016-11-06 01:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-09 15:53 - 2015-09-21 09:06 - 00000000 __SHD C:\$360Section
2017-01-09 15:53 - 2015-09-02 15:13 - 00000000 ____D C:\ProgramData\360Quarant
2017-01-05 20:02 - 2013-07-31 22:29 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-01-05 20:02 - 2013-07-31 22:28 - 00000000 ____D C:\ProgramData\Skype
2017-01-04 13:31 - 2014-12-14 15:54 - 00000000 ____D C:\Program Files (x86)\chip
2017-01-04 10:35 - 2009-07-14 05:45 - 00313104 _____ C:\windows\system32\FNTCACHE.DAT
2017-01-04 10:34 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions
2017-01-04 10:34 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2017-01-04 10:31 - 2013-07-31 21:39 - 01687534 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2017-01-04 10:31 - 2013-07-31 19:42 - 00738178 _____ C:\windows\system32\perfh007.dat
2017-01-04 10:31 - 2013-07-31 19:42 - 00160894 _____ C:\windows\system32\perfc007.dat
2017-01-04 10:31 - 2009-07-14 06:13 - 01687534 _____ C:\windows\system32\PerfStringBackup.INI
2017-01-04 10:31 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\inetsrv
2017-01-04 09:47 - 2016-06-30 15:21 - 00000000 ____D C:\Users\Micha\AppData\Local\ElevatedDiagnostics
2017-01-04 09:01 - 2015-07-24 19:27 - 00000000 ____D C:\ProgramData\360safe
2017-01-04 02:21 - 2014-12-14 00:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2017-01-04 02:05 - 2009-07-14 03:34 - 00000568 _____ C:\windows\win.ini
2017-01-03 17:08 - 2015-09-24 19:26 - 00000356 _____ C:\Users\Micha\Desktop\Zitate.txt
2016-12-28 22:36 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2016-12-25 00:18 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\migration
2016-12-25 00:18 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\inetsrv
2016-12-25 00:18 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\migration
2016-12-24 23:11 - 2014-12-19 22:43 - 00000000 ____D C:\Users\Micha\Documents\Youcam
2016-12-24 20:13 - 2009-07-14 04:18 - 00000000 __SHD C:\$Recycle.Bin
2016-12-24 00:58 - 2014-12-31 14:21 - 00000000 ____D C:\ProgramData\Freemake
2016-12-24 00:58 - 2014-12-31 14:21 - 00000000 ____D C:\Program Files (x86)\Freemake
2016-12-24 00:48 - 2015-07-30 22:30 - 00000000 _RSHD C:\360SANDBOX
2016-12-24 00:00 - 2009-07-14 04:20 - 00000000 __RSD C:\windows\assembly
2016-12-24 00:00 - 2009-07-14 04:20 - 00000000 ____D C:\windows\Microsoft.NET
2016-12-23 23:52 - 2014-12-14 00:06 - 00000000 ___RD C:\Users\Micha\Videos
2016-12-23 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-23 23:18 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-23 23:18 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-12-23 23:18 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Drivers\etc
2016-12-23 23:18 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-12-23 21:47 - 2016-01-21 10:17 - 00000000 ____D C:\Program Files (x86)\pandasecuritytb
2016-12-23 19:30 - 2009-07-14 04:20 - 00000000 ____D C:\windows\AppPatch
2016-12-23 15:29 - 2016-11-02 17:00 - 00524288 ___SH C:\windows\system32\config\components{36abe97a-a115-11e6-9f6c-54271e9e7c13}.TMContainer00000000000000000002.regtrans-ms
2016-12-23 15:29 - 2016-11-02 17:00 - 00065536 ___SH C:\windows\system32\config\components{36abe97a-a115-11e6-9f6c-54271e9e7c13}.TM.blf
2016-12-23 15:02 - 2016-11-02 17:00 - 00524288 ___SH C:\windows\system32\config\components{36abe97a-a115-11e6-9f6c-54271e9e7c13}.TMContainer00000000000000000001.regtrans-ms
2016-12-18 14:28 - 2014-12-14 00:06 - 00000000 ____D C:\Users\Micha\AppData\Local\Microsoft
2016-12-18 14:28 - 2014-12-14 00:06 - 00000000 ____D C:\Users\Micha
2016-12-18 12:19 - 2014-12-14 00:07 - 00072008 _____ C:\Users\Micha\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-18 12:13 - 2015-05-27 15:05 - 00000000 ____D C:\Program Files (x86)\Panda Security
2016-12-18 12:07 - 2015-05-27 15:03 - 00000000 ____D C:\ProgramData\Panda Security
2016-12-18 12:06 - 2015-05-27 15:06 - 00000000 ____D C:\Users\Micha\AppData\Roaming\Panda Security
2016-12-18 11:00 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-18 01:40 - 2014-12-14 00:06 - 00000000 ___RD C:\Users\Micha\Pictures
2016-12-17 01:20 - 2014-12-21 14:52 - 00003542 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 01:20 - 2014-12-21 14:52 - 00003414 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-15 22:58 - 2016-12-07 07:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-15 22:58 - 2014-12-14 14:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-15 22:00 - 2014-12-27 00:03 - 00000000 ____D C:\Users\Micha\AppData\Roaming\Apple Computer
2016-12-15 19:17 - 2015-01-05 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2016-12-15 19:15 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files
2016-12-15 11:19 - 2014-12-21 14:53 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-15 11:19 - 2014-12-21 14:53 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\it-IT
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\fr-FR
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\es-ES
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\SysWOW64\en-US
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\it-IT
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\fr-FR
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\es-ES
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\en-US
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Boot
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-15 03:29 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Internet Explorer

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Micha\AppData\Roaming\FODX
2014-12-14 00:06 - 2017-01-12 08:48 - 0077464 _____ () C:\Users\Micha\AppData\Local\BTServer.log
2014-12-19 21:37 - 2017-01-11 21:01 - 0010240 _____ () C:\Users\Micha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Einige Dateien in TEMP:
====================
C:\Users\Micha\AppData\Local\Temp\DllMonoCtrl.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 14:36

==================== Ende von FRST.txt ============================
hoffe hier ist noch etwas zu retten, danke MS-Michael

milkit54 13.01.2017 00:06
Teil 2 Addition zu MSI CR70 erkennt Kameras nicht
 
hier kommt Teil 2
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 11-01-2017
durchgeführt von Micha (12-01-2017 10:48:56)
Gestartet von C:\Users\Micha\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2014-12-13 23:06:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2198626584-3468660724-23365673-500 - Administrator - Disabled)
Gast (S-1-5-21-2198626584-3468660724-23365673-501 - Limited - Disabled)
Micha (S-1-5-21-2198626584-3468660724-23365673-1000 - Administrator - Enabled) => C:\Users\Micha

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Ad-Aware Antivirus (Enabled - Up to date) {B0CC18C6-E527-6EE6-874C-9D19920E5619}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: 360 Total Security (Enabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D}
AS: 360 Total Security (Enabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Ad-Aware Antivirus (Enabled - Up to date) {0BADF922-C31D-6168-BDFC-A66BE9891CA4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

360 Total Security (HKLM-x32\...\360TotalSecurity) (Version: 8.8.0.1020 - 360 Security Center)
Ad-Aware Antivirus (HKLM\...\{AD9CEBD6-442D-4979-9D1D-E1050F2E272D}_AdAwareUpdater) (Version: 11.15.1046.10613 - Lavasoft)
Ad-Aware Web Companion (x32 Version: 1.1.844.1586 - Lavasoft) Hidden
AdAwareInstaller (Version: 11.15.1046.10613 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.15.1046.10613 - Lavasoft) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20053 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
AntimalwareEngine (Version: 3.0.129.0 - Lavasoft) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BurnRecovery (HKLM-x32\...\{2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F}) (Version: 3.0.1103.1801 - Micro-Star International Co., Ltd.)
Camera RAW Plug-In for EPSON Creativity Suite (HKLM-x32\...\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}) (Version: 2.1.0.0 - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.31 - Cliqz.com)
concept/design onlineTV 11 (HKLM-x32\...\{8A4C3184-DA2F-4553-BF61-83F5690C3048}_is1) (Version: 11.0.0.0 - concept/design GmbH)
CX4300_5500_DX4400 Handbuch (HKLM-x32\...\CX4300_5500_DX4400 Handbuch) (Version:  - )
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4612 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Desktopicon amazon.de (HKLM\...\DesktopIconAmazon) (Version: 1.0.1 - )
DriverUpdate (HKLM-x32\...\DriverUpdate) (Version: 2.7.3 - Slimware Utilities Holdings, Inc.)
DriverUpdate (x32 Version: 2.7.3 - Slimware Utilities Holdings, Inc.) Hidden
EPSON Attach To Email (HKLM-x32\...\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}) (Version: 1.01.0000 - SEIKO EPSON)
EPSON Attach To Email (x32 Version: 1.01.0000 - SEIKO EPSON) Hidden
EPSON Copy Utility 3 (HKLM-x32\...\{67EDD823-135A-4D59-87BD-950616D6E857}) (Version: 3.2.0.0 - )
EPSON File Manager (HKLM-x32\...\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}) (Version: 1.3.0.0 - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
EPSON Scan Assistant (HKLM-x32\...\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}) (Version: 1.10.00 - )
EPSON SX100 Series Printer Uninstall (HKLM\...\EPSON SX100 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - SEIKO EPSON Corporation)
ETDWare PS/2-X64 11.13.2.4_WHQL (HKLM\...\Elantech) (Version: 11.13.2.4 - ELAN Microelectronic Corp.)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.15) (Version: 9.15 - Artifex Software Inc.)
iCloud (HKLM\...\{29AAC3D3-23FC-496D-8266-0E3833686758}) (Version: 6.0.2.10 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3186 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LavasoftTcpService (x32 Version: 2.2.9.5 - Lavasoft) Hidden
MAGIX Music Maker 16 Download-Version (HKLM-x32\...\MAGIX Music Maker 16 Download-Version D) (Version: 16.0.3.0 - MAGIX AG)
MAGIX Online Druck Service (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)
MAGIX Screenshare (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (HKLM-x32\...\MAGIX Speed burnR D) (Version: 7.0.2.6 - MAGIX AG)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 16.002.03.01.40 - Huawei Technologies Co.,Ltd)
Movavi Video Suite 14 (HKLM-x32\...\Movavi Video Suite 14) (Version: 14.0.1 - Movavi)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
MSI Battery Calibration (HKLM-x32\...\{619FA785-489B-4D22-911F-82D6EDF5BDB0}) (Version: 1.0.0.1 - Micro-Star International Co., Ltd.)
MSI HOUSE (HKLM-x32\...\{DA5597C9-9216-44FF-9670-D1E48817B998}) (Version: 10.07.1601 - MSI)
MSI Software Install (HKLM-x32\...\{332EBFE0-C39E-42D1-99B5-ABBBECAD71B6}) (Version: 4.0.1105.1701 - Micro-Star International Co., Ltd.)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Anti-Theft (HKLM-x32\...\NAT) (Version: 1.6.0.17 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.7.0.24 - Symantec Corporation)
Norton Online Backup ARA (x32 Version: 4.3.0.14 - Symantec Corporation) Hidden
Norton PC Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.18.16 - Symantec Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Panda Security Toolbar (HKLM-x32\...\pandasecuritytb) (Version: 4.3.1.9 - Panda Security and Visicom Media Inc.)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.728.728.042813 - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6914 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0212 - )
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd)
SCM (HKLM\...\{CA85D7A7-6B45-4011-9BCC-C01F31EDE157}) (Version: 14.013.07054 -  )
Shotcut (HKLM-x32\...\Shotcut) (Version:  - )
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SoftMaker FreeOffice (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB02}) (Version: 1.0.3475 - SoftMaker Software GmbH)
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.017 - MSI)
Sweepi 5.4.00 (HKLM-x32\...\Sweepi_is1) (Version: 5.4.00 - YooApplications)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Web Companion (HKLM-x32\...\{D5116390-5C95-4FEA-A719-78C3C8B5DFB5}_WebCompanion) (Version: 1.1.844.1586 - Lavasoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinZip 19.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E4}) (Version: 19.0.11293 - WinZip Computing, S.L. )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {17608ADD-35B5-4F2A-A369-E67C96C0B20E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {2B68F8A1-F7BA-4699-885D-EAF51F2DBD90} - System32\Tasks\{551F8A14-3EE5-4B8B-83D3-D11EB5BC5F15} => pcalua.exe -a "C:\Program Files (x86)\FreePDF_XP\setup.exe" -d "C:\Program Files (x86)\Mozilla Firefox" -c C:\Users\Micha\AppData\Local\Temp\Paketschein-14.pdf <==== ACHTUNG
Task: {3CDF7212-D471-42F4-A121-ED4D70251682} - System32\Tasks\{7C15C6ED-AB8F-4479-AB67-B366BCA58406} => pcalua.exe -a "C:\Program Files (x86)\DriverUpdate\UninstallStub.exe" -c --log {a9888f42-bffe-4aca-ac10-51983972c2df}
Task: {3DA3586E-C068-4460-B103-15DDD7C51B40} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3E09C0A2-D6E6-407F-A239-AAAECEF79B78} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {3F283151-7529-496F-9366-FCAEC83C2694} - System32\Tasks\1215tbUpdateInfo => C:\ProgramData\Avg_Update_1215tb\1215tb_{4D479988-B227-4153-A15F-3D6D13E85735}.exe
Task: {58A9DC7B-AC64-4449-B51A-1CA3922D1961} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.3.0.14\\Ara.exe [2013-08-27] (Symantec Corporation)
Task: {63050248-0821-4CF1-A0FA-3D7C370A627F} - System32\Tasks\{42239007-962A-405B-897B-E4E0207270AF} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=7.24.0.104&amp;LastError=404
Task: {96FEB751-76F6-4B79-B85A-B188D39EBB02} - System32\Tasks\{DDE7AD7B-E373-4700-9749-EFD63E11B429} => C:\Windows\twain_32\escndv\escndv.exe [2008-04-06] (SEIKO EPSON CORP.)
Task: {B2A759E8-D7A6-40F4-8583-1B21178BF297} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {CB02601F-EC46-425D-981C-29E9B6680ED3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {DF814115-C649-4F46-9705-DDBEC44F373C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {E499296A-F20A-4ACE-9CD0-242A1F09B9A3} - System32\Tasks\{129E23B6-40C3-4E2D-BA39-481FE58B2A62} => C:\Program Files\PDFCreator\PDFCreator.exe [2014-12-16] (pdfforge)
Task: {FB0D8A3E-E462-456A-A960-0E05DB4FE8BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-01-09 01:19 - 2012-06-21 07:25 - 00113152 _____ () C:\windows\System32\redmon64.dll
2013-07-31 21:55 - 2013-04-26 00:32 - 00047104 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2016-12-15 13:02 - 2016-12-15 13:02 - 00630976 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareService.exe
2016-12-15 13:06 - 2016-12-15 13:06 - 00122104 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_thread-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00030968 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_system-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00039672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_chrono-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00067832 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_date_time-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00145144 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_filesystem-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00733432 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_log-vc140-mt-1_61.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00525048 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_locale-vc140-mt-1_61.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 11504888 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareServiceKernel.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 03713272 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\RCF.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 01001208 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_regex-vc140-mt-1_61.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01061624 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareActivation.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00634616 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareApplicationUpdater.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00843000 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareGamingMode.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00120568 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareReset.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00142584 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareTime.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01025272 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareDefinitionsUpdater.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00904440 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareDefinitionsUpdaterScheduler.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01468664 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareIgnoreList.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00252664 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareQuarantine.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01644280 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareAntiMalwareEngine.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00223992 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareAntiRootkitEngine.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01192184 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareScannerHistory.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01370360 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareScanner.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00039672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_timer-vc140-mt-1_61.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01030904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareScannerScheduler.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01212152 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareRealTimeProtection.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 02879736 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareIncompatibles.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01524472 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareAntiSpam.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01456376 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareAntiPhishing.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 03462904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareParentalControl.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01599224 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareWebProtection.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01339640 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareEmailProtection.dll
2016-12-15 13:06 - 2016-12-15 13:06 - 00073464 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\boost_iostreams-vc140-mt-1_61.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01645816 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareNetworkProtection.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01042680 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwarePromo.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00475384 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareFeedback.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 03165944 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareThreatWorkAlliance.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01325304 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwarePinCode.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01044216 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareNotice.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01597688 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareAvcEngine.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01496312 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareRealTimeProtectionHistory.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 01380088 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareStatistics.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00015208 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
2014-12-16 12:08 - 2014-12-16 12:08 - 00012144 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Service.Logger.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00032616 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WcfService.dll
2017-01-10 09:37 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-10 09:37 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2017-01-10 09:37 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2013-07-31 21:55 - 2013-04-09 22:42 - 00265728 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\SkypePlugin.exe
2016-12-15 13:05 - 2016-12-15 13:05 - 09533688 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareTray.exe
2016-12-15 13:05 - 2016-12-15 13:05 - 02479864 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\HtmlFramework.dll
2016-12-15 13:05 - 2016-12-15 13:05 - 00871672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.15.1046.10613\AdAwareTrayDefaultSkin.dll
2012-05-30 21:15 - 2012-05-30 21:15 - 00404008 _____ () C:\Program Files\Intel\TurboBoost\de\SignalIslandUi.resources.dll
2015-07-24 19:26 - 2016-08-10 11:54 - 01153448 _____ () C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
2015-07-24 19:27 - 2016-08-10 11:54 - 00099240 _____ () C:\Program Files (x86)\360\Total Security\deepscan\qutmload.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00070464 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00171368 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00089928 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.adblocker.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00033136 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Repositories.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00015696 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.SqlLite.dll
2014-12-16 12:10 - 2014-12-16 12:10 - 00041304 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.PUP.Management.dll
2014-12-16 12:08 - 2014-12-16 12:08 - 00039256 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.CSharp.Utilities.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2015-07-24 19:27 - 2016-08-10 11:54 - 00582056 _____ () C:\Program Files (x86)\360\Total Security\safemon\wdui2.dll
2013-07-31 21:37 - 2013-02-16 00:15 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-10-21 15:50 - 2015-10-21 15:50 - 00988160 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2015-10-21 15:49 - 2015-10-21 15:49 - 00170496 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2015-10-21 15:49 - 2015-10-21 15:49 - 00136192 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec-mscrypto.dll
2015-10-21 15:49 - 2015-10-21 15:49 - 00303616 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LavasoftAdAwareService11 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LavasoftAdAwareService11 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Micha\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 192.168.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{F5428C65-02FD-4258-9D3B-DBA9131CD043}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{58EAA851-0F4D-4025-A9FA-82AAC4EEC077}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{FC62AAD4-D5DF-4232-B263-4FC654D0457F}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{9D370156-D01D-4231-A5C5-E72B2D7C382D}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{EB01AC34-1000-4725-AB7E-266EF7070BAE}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6AED153C-CE2F-4F79-A73D-5DA437D8EDD9}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{27B32960-48B2-478E-B66F-31E31A65D5F6}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{57A32D00-9BC9-4428-A8F3-767162CDE081}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{4AE2CA5C-F80C-436A-B9FF-2E8E125414F6}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{4B1F3D68-AEF2-4EE3-A176-82754C956CCF}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{535793E5-DA7A-48C6-9675-333B3C13480E}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1A36325C-7D02-4CAE-968A-A8054B57A386}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EEBD56D9-AD50-4F27-871C-9FFB87C817E6}] => C:\Program Files (x86)\pandasecuritytb\cleanupie.exe
FirewallRules: [{DD826058-D556-4DB6-B195-3CFDAD7FE9C3}] => C:\Program Files (x86)\pandasecuritytb\cleanupie.exe
FirewallRules: [{1B35008A-2B15-4C6A-A7D9-6EF5E4509617}] => C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{933C0AF3-CFB0-49D7-8613-7113DE462D2F}] => C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{4E8E84F9-07C1-415A-A528-90BE6E2BCCBC}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{36E73BFD-7CEF-4516-8259-755DA03A06E5}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CED2D614-329E-4C55-BAF4-F84F23D9BBB5}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4CAD39BB-8FD9-48ED-9A96-B3DABD7B4683}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{60005B18-84B8-4665-9D35-482C3A16A343}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2FA7CE91-EAFF-49F9-B2DF-C5687CA4B179}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{72F59172-3120-434F-8648-B19F920FA80F}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{76C646E5-E59E-4079-91C6-6DB2955E5955}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4DC1F09C-7F6A-457F-B2C1-BF9062AD8B33}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{739F15EC-D12D-44B2-97C9-92DABE022A21}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe

==================== Wiederherstellungspunkte =========================

10-11-2016 06:10:16 Windows Update
26-11-2016 13:55:57 Geplanter Prüfpunkt
27-11-2016 17:27:32 Installed Windows Mobile-Gerätecenter
05-12-2016 20:53:37 AA11
09-12-2016 20:06:44 Removed Visual Studio 2012 x86 Redistributables
09-12-2016 20:08:07 Removed Visual Studio 2012 x64 Redistributables
15-12-2016 03:00:20 Windows Update
15-12-2016 19:14:17 AA11
16-12-2016 01:31:33 Windows Update
18-12-2016 11:42:27 Removed DriverUpdate
18-12-2016 11:45:52 Removed DriverUpdate
23-12-2016 16:08:55 Wiederherstellungsvorgang
23-12-2016 23:16:31 Windows Modules Installer
25-12-2016 00:00:28 Windows Update
03-01-2017 23:19:17 Wiederherstellungsvorgang
04-01-2017 01:02:43 Installed DRIVERfighter.
04-01-2017 02:23:30 Removed DriverUpdate
04-01-2017 09:36:49 Windows Update
04-01-2017 09:58:19 Windows Update
04-01-2017 10:00:56 Windows Update
04-01-2017 10:02:20 Windows Update
04-01-2017 10:26:13 Windows Update
04-01-2017 13:27:41 Removed DriverUpdate
04-01-2017 13:30:28 Removed CHIP Best Deal
04-01-2017 13:44:48 Konfiguriert Camera RAW Plug-In for EPSON Creativity Suite
04-01-2017 14:01:35 Driver Reviver (04/01/2017 14:01)
04-01-2017 17:31:04 Removed Skype™ 7.30
04-01-2017 18:18:15 Windows Update
05-01-2017 00:00:55 Windows Update
05-01-2017 00:41:14 Windows Update
05-01-2017 00:48:52 Windows Update
05-01-2017 00:54:51 Windows Update
10-01-2017 15:42:24 Installed DriverUpdate
10-01-2017 19:40:37 Windows Update
10-01-2017 19:45:26 Windows Update
10-01-2017 19:56:24 Windows Update
10-01-2017 19:58:33 Windows Update
10-01-2017 20:27:38 Windows Update
11-01-2017 00:00:21 Windows Update
11-01-2017 01:01:28 Wiederherstellungsvorgang

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : This device is disabled because the firmware of the device did not give it the required resources. (Code 29)
Resolution: Enable the device in the BIOS of the device.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/12/2017 08:42:48 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 351876

Error: (01/12/2017 08:42:48 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 351876

Error: (01/12/2017 08:42:48 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/12/2017 08:42:44 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 348600

Error: (01/12/2017 08:42:44 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 348600

Error: (01/12/2017 08:42:44 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/12/2017 08:42:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 339349

Error: (01/12/2017 08:42:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 339349

Error: (01/12/2017 08:42:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/12/2017 08:42:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 331971


Systemfehler:
=============
Error: (01/12/2017 08:47:23 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (01/12/2017 07:50:33 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.

Error: (01/12/2017 01:30:59 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.

Error: (01/11/2017 11:52:46 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst RapiMgr erreicht.

Error: (01/11/2017 11:52:49 AM) (Source: DCOM) (EventID: 10001) (User: )
Description: Ein DCOM-Server konnte nicht gestartet werden: {C39EE728-D419-4BD4-A3EF-EDA059DBD935} als /. Fehler:
"5"
Aufgetreten beim Start dieses Befehls:
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/11/2017 01:21:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (01/11/2017 01:05:08 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst QHActiveDefense erreicht.

Error: (01/11/2017 01:04:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (01/11/2017 12:28:23 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows-Audio" wurde nicht richtig gestartet.

Error: (01/11/2017 12:24:59 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{49BD2028-1523-11D1-AD79-00C04FD8FDFF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Pentium(R) CPU 3560M @ 2.40GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 4016.81 MB
Verfügbarer physikalischer RAM: 1449.62 MB
Summe virtueller Speicher: 8031.8 MB
Verfügbarer virtueller Speicher: 4073.84 MB

==================== Laufwerke ================================

Drive c: (OS_Install) (Fixed) (Total:272.65 GB) (Free:119.02 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:181.77 GB) (Free:181.63 GB) NTFS
Drive w: (BIOS_RVY) (Fixed) (Total:11.24 GB) (Free:0.28 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C54CB572)
Partition 1: (Not Active) - (Size=11.2 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=27)
Partition 3: (Not Active) - (Size=272.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=181.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 13.01.2017 09:26
Hi,

- das hat was mit Schädlingen zu tun?
- gab es Virenfunde deines AVs, wenn ja, Log dazu??

cosinus 13.01.2017 09:26
edit: Themen wurden zusammengeführt

milkit54 13.01.2017 10:52
Zitat:
Zitat von cosinus (Beitrag 1633844)
Hi,

- das hat was mit Schädlingen zu tun?
- gab es Virenfunde deines AVs, wenn ja, Log dazu??
Hi Cosinus,
sorry für meine Unzulänglichkeit. ich habe mich bemüht alles zu senden was ich

nach der Anleitung hatte, ich stellte fest, daß meine Startseite ständig und "automatisch" von "down speed test" geändert wurde. Microsoft zeigt mir Treiberprobleme mit toredo tunneling adapter an und die automatische Erkennung über usb funktioniert nicht mehr bzw wewrden als Unkown Device angezeigt (roblembehandlung nicht möglich)
funde von 360 Total Security habe ich nicht mitbekommen.
Wäre nett wenn du mir sagst wie ich an den log rankomme, bitte für "Unwissende Anwender"
PS meine Ms macht heute mehr Probleme als sonst. Gruß MS-Michael

cosinus 13.01.2017 11:01
Wir haben keine bebilderten Anleitungen für jeden Virenscanner den es auf der Welt gibt. Du solltest da schonmal selbst im Menü der Software nach den Logs schauen.

Die Logs von Malwarebytes findet du im Verlauf.

milkit54 13.01.2017 11:43
die logs Malwarebytes hatte ich eigentlich schon geschick sende ihn aber gerne mit den vom avs suche ich sofort

Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 04.01.17
Scan-Zeit: 15:21
Protokolldatei: scan malebyte 04012017.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.925
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Micha-MSI\Micha

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 367832
Abgelaufene Zeit: 10 Min., 43 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 1
PUP.Optional.DriverUpdate, C:\PROGRAM FILES\SLIMSERVICE\SLIMSERVICEFACTORY.EXE, Keine Aktion durch Benutzer, [1207], [335824],1.0.925

Modul: 1
PUP.Optional.DriverUpdate, C:\PROGRAM FILES\SLIMSERVICE\SLIMSERVICEFACTORY.EXE, Keine Aktion durch Benutzer, [1207], [335824],1.0.925

Registrierungsschlüssel: 37
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{149622B2-F1C5-492D-BFDF-8E5ED85854A0}, Keine Aktion durch Benutzer, [1207], [335820],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{149622B2-F1C5-492D-BFDF-8E5ED85854A0}, Keine Aktion durch Benutzer, [1207], [335820],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\APPID\{149622B2-F1C5-492D-BFDF-8E5ED85854A0}, Keine Aktion durch Benutzer, [1207], [335820],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Keine Aktion durch Benutzer, [1317], [332494],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Keine Aktion durch Benutzer, [1317], [332494],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Keine Aktion durch Benutzer, [1317], [332494],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A5FF3EB5-BF62-4D59-84DF-DC518E46FCB3}, Keine Aktion durch Benutzer, [1207], [335824],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A5FF3EB5-BF62-4D59-84DF-DC518E46FCB3}, Keine Aktion durch Benutzer, [1207], [335824],1.0.925
PUP.Optional.DriverUpdate, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SlimService, Keine Aktion durch Benutzer, [1207], [335824],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\TYPELIB\{A5FF3EB5-BF62-4D59-84DF-DC518E46FCB3}, Keine Aktion durch Benutzer, [1207], [335824],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}, Keine Aktion durch Benutzer, [1317], [327205],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine, Keine Aktion durch Benutzer, [1317], [327205],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine.1, Keine Aktion durch Benutzer, [1317], [327205],1.0.925
PUP.Optional.Reimage, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, Keine Aktion durch Benutzer, [1317], [327205],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\CLSID\{6DC6EE87-F3BB-40EB-BCEE-12F7D6E3EEDF}, Keine Aktion durch Benutzer, [1207], [335836],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\APPID\{1BD47D21-01F4-4538-9290-39FD569A0F24}, Keine Aktion durch Benutzer, [1207], [335822],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{1BD47D21-01F4-4538-9290-39FD569A0F24}, Keine Aktion durch Benutzer, [1207], [335822],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{1BD47D21-01F4-4538-9290-39FD569A0F24}, Keine Aktion durch Benutzer, [1207], [335822],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}, Keine Aktion durch Benutzer, [1317], [327206],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\TYPELIB\{95F57E4A-1FFA-4814-9AEC-34D22DF3D8FA}, Keine Aktion durch Benutzer, [1207], [335828],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{95F57E4A-1FFA-4814-9AEC-34D22DF3D8FA}, Keine Aktion durch Benutzer, [1207], [335828],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{95F57E4A-1FFA-4814-9AEC-34D22DF3D8FA}, Keine Aktion durch Benutzer, [1207], [335828],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\CLSID\{959D527D-6C27-4879-A644-065526D6969C}, Keine Aktion durch Benutzer, [1207], [335833],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\CLASSES\CLSID\{BAF87BD0-A924-4108-AFA5-A5FA720A2E86}, Keine Aktion durch Benutzer, [1207], [335831],1.0.925
PUP.Optional.SlimCleanerPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SlimCleaner Plus, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, Keine Aktion durch Benutzer, [1317], [327193],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\SLIMWARE UTILITIES INC\DriverUpdate, Keine Aktion durch Benutzer, [1207], [338931],1.0.925
PUP.Optional.SlimCleanerPlus, HKLM\SOFTWARE\WOW6432NODE\SLIMWARE UTILITIES INC\SlimCleaner Plus, Keine Aktion durch Benutzer, [1657], [338932],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\REI_AxControl.DLL, Keine Aktion durch Benutzer, [1317], [327193],1.0.925
PUP.Optional.SlimCleanerPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{ABA29C63-B22D-45F8-BA20-7C8EF17B5E62}, Keine Aktion durch Benutzer, [1657], [335437],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\Reimage Repair, Keine Aktion durch Benutzer, [1317], [336077],1.0.925
PUP.Optional.Reimage, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\Reimage, Keine Aktion durch Benutzer, [1317], [357494],1.0.925
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, Keine Aktion durch Benutzer, [1317], [327193],1.0.925
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\SLIMWARE UTILITIES? INC.\DriverApp, Keine Aktion durch Benutzer, [1207], [341522],1.0.925
PUP.Optional.Reimage, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., Keine Aktion durch Benutzer, [1317], [327203],1.0.925
PUP.Optional.DriverUpdate, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\SLIMWARE UTILITIES INC\DriverUpdate, Keine Aktion durch Benutzer, [1207], [341521],1.0.925
PUP.Optional.Reimage, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\REIMAGE\PC REPAIR, Keine Aktion durch Benutzer, [1317], [327204],1.0.925

Registrierungswert: 2
PUP.Optional.SlimCleanerPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{ABA29C63-B22D-45F8-BA20-7C8EF17B5E62}|DISPLAYNAME, Keine Aktion durch Benutzer, [1657], [335437],1.0.925
PUP.Optional.Reimage, HKU\S-1-5-21-2198626584-3468660724-23365673-1000\SOFTWARE\REIMAGE\PC REPAIR|QUITMESSAGE, Keine Aktion durch Benutzer, [1317], [327204],1.0.925

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 7
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\PROGRAM FILES\SlimCleaner Plus, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Images, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\USERS\MICHA\APPDATA\LOCAL\SlimWare Utilities Inc\DriverUpdate, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.SlimCleanerPlus, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\SLIMCLEANER PLUS, Keine Aktion durch Benutzer, [1657], [331461],1.0.925
PUP.Optional.SlimCleanerPlus, C:\PROGRAM FILES\SLIMSERVICE, Keine Aktion durch Benutzer, [1657], [331454],1.0.925

Datei: 93
PUP.Optional.DriverUpdate, C:\PROGRAM FILES\SLIMSERVICE\SLIMSERVICEFACTORY.EXE, Keine Aktion durch Benutzer, [1207], [335824],1.0.925
PUP.Optional.DriverUpdate, C:\PROGRAM FILES\SLIMSERVICE\SLIMSERVICE.EXE, Keine Aktion durch Benutzer, [1207], [335828],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\hi.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\am.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ar.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\bg.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\bn.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ca.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\cs.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\da.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\de.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\el.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\en-GB.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\en-US.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\es-419.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\es.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\et.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\fa.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\fi.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\fil.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\fr.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\gu.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\he.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\hr.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\hu.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\id.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\it.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ja.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\kn.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ko.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\lt.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\lv.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ml.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\mr.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ms.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\nb.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\nl.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\pl.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\pt-BR.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\pt-PT.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ro.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ru.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\sk.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\sl.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\sr.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\sv.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\sw.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\ta.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\te.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\th.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\tr.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\uk.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\vi.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\zh-CN.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\locales\zh-TW.pak, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\default.ui, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\main.ui, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\mdp.exe, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\Open-Source Licenses.txt, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimCleaner Plus\UninstallStub.exe, Keine Aktion durch Benutzer, [1657], [331458],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Images\acer.png, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  01-18-02 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  01-18-17 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  01-22-23 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  01-22-29 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  09-11-34 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  09-42-29 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  10-08-08 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Logs\2017-01-04  10-38-07 0.log, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\ignores.dat, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\rupdates.db, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\settings.db, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\supdates.db, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\SWDUMon.cat, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\SWDUMon.inf, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.DriverUpdate, C:\Users\Micha\AppData\Local\SlimWare Utilities Inc\DriverUpdate\SWDUMon.sys, Keine Aktion durch Benutzer, [1207], [341510],1.0.925
PUP.Optional.SlimCleanerPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus\SlimCleaner Plus.lnk, Keine Aktion durch Benutzer, [1657], [331461],1.0.925
PUP.Optional.SlimCleanerPlus, C:\USERS\PUBLIC\DESKTOP\SLIMCLEANER PLUS.LNK, Keine Aktion durch Benutzer, [1657], [331453],1.0.925
PUP.Optional.SlimCleanerPlus, C:\PROGRAM FILES\SLIMSERVICE\CLEANER.DB, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\Analyze.MyD, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\Full.MyD, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\icudt46l.dat, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\MyDefragDll.dll, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\Quick.MyD, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\Ssd.MyD, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.SlimCleanerPlus, C:\Program Files\SlimService\UnifiedLogger.dll, Keine Aktion durch Benutzer, [1657], [331454],1.0.925
PUP.Optional.Slimware, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\SCP34E7.TMP.EXE, Keine Aktion durch Benutzer, [1931], [338168],1.0.925
PUP.Optional.Reimage, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\REIMAGE.LOG, Keine Aktion durch Benutzer, [1317], [334717],1.0.925
PUP.Optional.Reimage, C:\WINDOWS\TEMP\REIMAGE.LOG, Keine Aktion durch Benutzer, [1317], [334717],1.0.925
PUP.Optional.DriverUpdate, C:\USERS\MICHA\DOWNLOADS\DRIVERUPDATE-SETUP.EXE, Keine Aktion durch Benutzer, [1207], [331447],1.0.925
PUP.Optional.Reimage, C:\USERS\MICHA\DOWNLOADS\REIMAGEREPAIR.EXE, Keine Aktion durch Benutzer, [1317], [331559],1.0.925
PUP.Optional.SpeedItUp, C:\WINDOWS\REIMAGE.INI, Keine Aktion durch Benutzer, [1421], [329423],1.0.925

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
soll ich noch mal malwarebytes laufen lassen?

cosinus 13.01.2017 11:48
Nein, aber tu dir einen Gefallen und deinstalliere Ad-Aware (unnötig bis unbrauchbar) sowie das schlechte China-AV 360 Total Security, dann gehts weiter.

milkit54 13.01.2017 13:06
Zitat:
Zitat von cosinus (Beitrag 1633845)
edit: Themen wurden zusammengeführt
Hi Cosinus die beiden Programme sind deinstalliert
jedoch erfolgte dann ein Neustart und jetzt ist der mailverlauf im trojanerboard nicht mehr drin ?

Zitat:
Zitat von cosinus (Beitrag 1633870)
Nein, aber tu dir einen Gefallen und deinstalliere Ad-Aware (unnötig bis unbrauchbar) sowie das schlechte China-AV 360 Total Security, dann gehts weiter.
die beiden sind deinstalliert, jedoch ist am ende ein neustart gelaufen, das nur zur info
Gruß MS-Micha

cosinus 13.01.2017 14:20
1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

milkit54 13.01.2017 18:27
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.13.09
  rootkit: v2016.11.20.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18537
Micha :: MICHA-MSI [administrator]

13.01.2017 15:23:14
mbar-log-2017-01-13 (15-23-14).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 353297
Time elapsed: 27 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DesktopIconAmazon (Trojan.Downloader) -> Delete on reboot. [2a4377046741b482b837dacf758b52ae]

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Micha\AppData\Roaming\DesktopIconAmazon\desktopicon-Amazon.exe (Trojan.Downloader) -> Delete on reboot. [2a4377046741b482b837dacf758b52ae]

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
17:09:40.0009 0x19d8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
17:09:55.0989 0x19d8  ============================================================
17:09:55.0989 0x19d8  Current date / time: 2017/01/13 17:09:55.0989
17:09:55.0989 0x19d8  SystemInfo:
17:09:55.0989 0x19d8 
17:09:55.0989 0x19d8  OS Version: 6.1.7601 ServicePack: 1.0
17:09:55.0989 0x19d8  Product type: Workstation
17:09:55.0990 0x19d8  ComputerName: MICHA-MSI
17:09:55.0990 0x19d8  UserName: Micha
17:09:55.0990 0x19d8  Windows directory: C:\windows
17:09:55.0990 0x19d8  System windows directory: C:\windows
17:09:55.0990 0x19d8  Running under WOW64
17:09:55.0990 0x19d8  Processor architecture: Intel x64
17:09:55.0990 0x19d8  Number of processors: 2
17:09:55.0990 0x19d8  Page size: 0x1000
17:09:55.0990 0x19d8  Boot type: Normal boot
17:09:55.0991 0x19d8  CodeIntegrityOptions = 0x00000001
17:09:55.0991 0x19d8  ============================================================
17:09:58.0355 0x19d8  KLMD registered as C:\windows\system32\drivers\82067764.sys
17:09:58.0355 0x19d8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x1
17:09:58.0749 0x19d8  System UUID: {200DC177-E40D-48B4-4F9D-F09300A0C18B}
17:09:59.0472 0x19d8  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:09:59.0485 0x19d8  ============================================================
17:09:59.0485 0x19d8  \Device\Harddisk0\DR0:
17:09:59.0486 0x19d8  MBR partitions:
17:09:59.0486 0x19d8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x16AC800, BlocksNum 0x2214F000
17:09:59.0486 0x19d8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x237FB800, BlocksNum 0x16B8A800
17:09:59.0486 0x19d8  ============================================================
17:09:59.0534 0x19d8  C: <-> \Device\Harddisk0\DR0\Partition1
17:09:59.0606 0x19d8  D: <-> \Device\Harddisk0\DR0\Partition2
17:09:59.0663 0x19d8  ============================================================
17:09:59.0663 0x19d8  Initialize success
17:09:59.0663 0x19d8  ============================================================
17:11:00.0233 0x1ab4  ============================================================
17:11:00.0233 0x1ab4  Scan started
17:11:00.0233 0x1ab4  Mode: Manual;
17:11:00.0233 0x1ab4  ============================================================
17:11:00.0233 0x1ab4  KSN ping started
17:11:12.0452 0x1ab4  KSN ping finished: true
17:11:13.0510 0x1ab4  ================ Scan system memory ========================
17:11:13.0510 0x1ab4  System memory - ok
17:11:13.0510 0x1ab4  ================ Scan services =============================
17:11:13.0720 0x1ab4  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
17:11:13.0730 0x1ab4  1394ohci - ok
17:11:13.0790 0x1ab4  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\windows\system32\drivers\ACPI.sys
17:11:13.0800 0x1ab4  ACPI - ok
17:11:13.0810 0x1ab4  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\windows\system32\drivers\acpipmi.sys
17:11:13.0810 0x1ab4  AcpiPmi - ok
17:11:13.0910 0x1ab4  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:11:13.0910 0x1ab4  AdobeARMservice - ok
17:11:14.0000 0x1ab4  [ CA363F172E1978FD155764F2840B0BE8, CB14E2C94ABB8C8809F4E96472F6D1A9A3A0860217631F592E0F62F043165575 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
17:11:14.0010 0x1ab4  AdobeFlashPlayerUpdateSvc - ok
17:11:14.0049 0x1ab4  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\windows\system32\drivers\adp94xx.sys
17:11:14.0059 0x1ab4  adp94xx - ok
17:11:14.0078 0x1ab4  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\windows\system32\drivers\adpahci.sys
17:11:14.0085 0x1ab4  adpahci - ok
17:11:14.0102 0x1ab4  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\windows\system32\drivers\adpu320.sys
17:11:14.0106 0x1ab4  adpu320 - ok
17:11:14.0153 0x1ab4  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc    C:\windows\System32\aelupsvc.dll
17:11:14.0157 0x1ab4  AeLookupSvc - ok
17:11:14.0229 0x1ab4  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD            C:\windows\system32\drivers\afd.sys
17:11:14.0256 0x1ab4  AFD - ok
17:11:14.0272 0x1ab4  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\windows\system32\drivers\agp440.sys
17:11:14.0275 0x1ab4  agp440 - ok
17:11:14.0294 0x1ab4  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\windows\System32\alg.exe
17:11:14.0297 0x1ab4  ALG - ok
17:11:14.0323 0x1ab4  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\windows\system32\drivers\aliide.sys
17:11:14.0324 0x1ab4  aliide - ok
17:11:14.0334 0x1ab4  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\windows\system32\drivers\amdide.sys
17:11:14.0344 0x1ab4  amdide - ok
17:11:14.0354 0x1ab4  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\windows\system32\drivers\amdk8.sys
17:11:14.0354 0x1ab4  AmdK8 - ok
17:11:14.0364 0x1ab4  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\windows\system32\drivers\amdppm.sys
17:11:14.0364 0x1ab4  AmdPPM - ok
17:11:14.0384 0x1ab4  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\windows\system32\drivers\amdsata.sys
17:11:14.0394 0x1ab4  amdsata - ok
17:11:14.0414 0x1ab4  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
17:11:14.0414 0x1ab4  amdsbs - ok
17:11:14.0434 0x1ab4  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\windows\system32\drivers\amdxata.sys
17:11:14.0434 0x1ab4  amdxata - ok
17:11:14.0514 0x1ab4  [ 59D01FA91962C9C1E9B4022B2D3B46DB, 3A111588538B77F010B5C900FB8425DDE55A08DBAC308CA7FB7BD9FCCCDEC69F ] AppHostSvc      C:\windows\system32\inetsrv\apphostsvc.dll
17:11:14.0514 0x1ab4  AppHostSvc - ok
17:11:14.0554 0x1ab4  [ FCE5C79717A487BDC71F3DEC78A684CA, F5520F112A4EBDD10444AA5E9FDB9125219FCF768FEB95AB608BC84D60136816 ] AppID          C:\windows\system32\drivers\appid.sys
17:11:14.0554 0x1ab4  AppID - ok
17:11:14.0584 0x1ab4  [ 8921E1D8AE5171691F186A7C5B98B630, 4A37313BB94D4B49D0294C9439AD0793DE328F9F4DA1C47E34E6ACEA46AF6E14 ] AppIDSvc        C:\windows\System32\appidsvc.dll
17:11:14.0594 0x1ab4  AppIDSvc - ok
17:11:14.0614 0x1ab4  [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo        C:\windows\System32\appinfo.dll
17:11:14.0614 0x1ab4  Appinfo - ok
17:11:14.0654 0x1ab4  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\windows\system32\drivers\arc.sys
17:11:14.0664 0x1ab4  arc - ok
17:11:14.0674 0x1ab4  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\windows\system32\drivers\arcsas.sys
17:11:14.0674 0x1ab4  arcsas - ok
17:11:14.0766 0x1ab4  [ EE424A5CE56E3923D59BB7DE2E15036D, 8B8196870EFE74D43EDA72674021A46846D370E97A6A058134D84A721AECD091 ] aspnet_state    C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
17:11:14.0776 0x1ab4  aspnet_state - ok
17:11:14.0816 0x1ab4  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
17:11:14.0816 0x1ab4  AsyncMac - ok
17:11:14.0856 0x1ab4  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\windows\system32\drivers\atapi.sys
17:11:14.0856 0x1ab4  atapi - ok
17:11:14.0936 0x1ab4  [ E857EEE6B92AAA473EBB3465ADD8F7E7, 1C7E4737E649A025B3C4974A4F7D1353EAB85561FC8ED54E5C22A777E1A189B3 ] athr            C:\windows\system32\DRIVERS\athrx.sys
17:11:14.0977 0x1ab4  athr - ok
17:11:15.0018 0x1ab4  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
17:11:15.0046 0x1ab4  AudioEndpointBuilder - ok
17:11:15.0062 0x1ab4  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\windows\System32\Audiosrv.dll
17:11:15.0074 0x1ab4  AudioSrv - ok
17:11:15.0135 0x1ab4  [ C4EEE661379D86429ACEAB31F3FD0391, D67F5D6863B066D974567521A00A48C50F0D9B6F6B16565FF8958E2020C651FD ] AvrcpService    C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
17:11:15.0136 0x1ab4  AvrcpService - ok
17:11:15.0156 0x1ab4  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\windows\System32\AxInstSV.dll
17:11:15.0159 0x1ab4  AxInstSV - ok
17:11:15.0196 0x1ab4  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\windows\system32\drivers\bxvbda.sys
17:11:15.0206 0x1ab4  b06bdrv - ok
17:11:15.0229 0x1ab4  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\windows\system32\DRIVERS\b57nd60a.sys
17:11:15.0235 0x1ab4  b57nd60a - ok
17:11:15.0251 0x1ab4  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\windows\System32\bdesvc.dll
17:11:15.0254 0x1ab4  BDESVC - ok
17:11:15.0285 0x1ab4  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\windows\system32\drivers\Beep.sys
17:11:15.0286 0x1ab4  Beep - ok
17:11:15.0350 0x1ab4  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\windows\System32\bfe.dll
17:11:15.0380 0x1ab4  BFE - ok
17:11:15.0470 0x1ab4  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\windows\System32\qmgr.dll
17:11:15.0510 0x1ab4  BITS - ok
17:11:15.0550 0x1ab4  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\windows\system32\drivers\blbdrive.sys
17:11:15.0560 0x1ab4  blbdrive - ok
17:11:15.0670 0x1ab4  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:11:15.0690 0x1ab4  Bonjour Service - ok
17:11:15.0730 0x1ab4  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\windows\system32\DRIVERS\bowser.sys
17:11:15.0730 0x1ab4  bowser - ok
17:11:15.0740 0x1ab4  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\windows\system32\drivers\BrFiltLo.sys
17:11:15.0740 0x1ab4  BrFiltLo - ok
17:11:15.0760 0x1ab4  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\windows\system32\drivers\BrFiltUp.sys
17:11:15.0760 0x1ab4  BrFiltUp - ok
17:11:15.0770 0x1ab4  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\windows\System32\browser.dll
17:11:15.0770 0x1ab4  Browser - ok
17:11:15.0800 0x1ab4  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\windows\System32\Drivers\Brserid.sys
17:11:15.0810 0x1ab4  Brserid - ok
17:11:15.0810 0x1ab4  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
17:11:15.0810 0x1ab4  BrSerWdm - ok
17:11:15.0820 0x1ab4  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
17:11:15.0820 0x1ab4  BrUsbMdm - ok
17:11:15.0820 0x1ab4  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
17:11:15.0820 0x1ab4  BrUsbSer - ok
17:11:15.0850 0x1ab4  [ FB38F90DE58996A4906A04F1152C3C3B, DA4A226FAE045174891A0EBFA03E1905CAF0AA25ADDBBCFBE369A853A63A83C6 ] BTDevManager    C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
17:11:15.0850 0x1ab4  BTDevManager - ok
17:11:15.0880 0x1ab4  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum        C:\windows\system32\DRIVERS\BthEnum.sys
17:11:15.0890 0x1ab4  BthEnum - ok
17:11:15.0900 0x1ab4  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\windows\system32\drivers\bthmodem.sys
17:11:15.0900 0x1ab4  BTHMODEM - ok
17:11:15.0940 0x1ab4  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
17:11:15.0950 0x1ab4  BthPan - ok
17:11:15.0970 0x1ab4  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT        C:\windows\system32\Drivers\BTHport.sys
17:11:15.0980 0x1ab4  BTHPORT - ok
17:11:16.0010 0x1ab4  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\windows\system32\bthserv.dll
17:11:16.0010 0x1ab4  bthserv - ok
17:11:16.0030 0x1ab4  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\windows\system32\Drivers\BTHUSB.sys
17:11:16.0030 0x1ab4  BTHUSB - ok
17:11:16.0083 0x1ab4  [ E41F70406C34F1CB667B4B27D81AD162, 8869C7EB9CBF68B90640765D15DB5B8DACEF45025C1E580AA94D96E32560274B ] ccSet_NARA      C:\windows\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys
17:11:16.0093 0x1ab4  ccSet_NARA - ok
17:11:16.0138 0x1ab4  [ A5C13600F63EB92F8D15123D64BA9895, 16683BDDD32525741FDE4505B9C224382047CC8EE9A7DB35FF0FDF32F7D731F8 ] ccSet_NAT      C:\windows\system32\drivers\NATx64\0106000.011\ccSetx64.sys
17:11:16.0143 0x1ab4  ccSet_NAT - ok
17:11:16.0172 0x1ab4  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
17:11:16.0175 0x1ab4  cdfs - ok
17:11:16.0208 0x1ab4  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\windows\system32\DRIVERS\cdrom.sys
17:11:16.0211 0x1ab4  cdrom - ok
17:11:16.0231 0x1ab4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\windows\System32\certprop.dll
17:11:16.0235 0x1ab4  CertPropSvc - ok
17:11:16.0250 0x1ab4  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\windows\system32\drivers\circlass.sys
17:11:16.0252 0x1ab4  circlass - ok
17:11:16.0287 0x1ab4  [ FF60401F1C659CA2ED4BAE85D3FD14DA, 71EEA0078E1545A2F80B0020BE7113843B713DE1A5CC20D9810BD9F3889A4DB0 ] CISVC          C:\windows\system32\CISVC.EXE
17:11:16.0289 0x1ab4  CISVC - ok
17:11:16.0356 0x1ab4  [ 3D67C27DD17B254D7915FA16A5AE3573, 5B3A6C6A7F940C06362775DAF13CEADA37C7AA84A509458A57C23B4369970A90 ] CLFS            C:\windows\system32\CLFS.sys
17:11:16.0366 0x1ab4  CLFS - ok
17:11:16.0434 0x1ab4  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:11:16.0440 0x1ab4  clr_optimization_v2.0.50727_32 - ok
17:11:16.0490 0x1ab4  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:11:16.0497 0x1ab4  clr_optimization_v2.0.50727_64 - ok
17:11:16.0557 0x1ab4  [ 5BAF4F1296D4D91FC28560CDB4C37C4B, ACA4BC57ED1F8432F18F0F215EC7FF956BAEF6E02760779E264E4008A979E9DD ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:11:16.0565 0x1ab4  clr_optimization_v4.0.30319_32 - ok
17:11:16.0610 0x1ab4  [ 569B54004A7E85A74FD92841DE6058E2, 58949313D0F6B1C06359B2F3C68E29940B1655A17E93FFC3718F6D2EAE1633E4 ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:11:16.0640 0x1ab4  clr_optimization_v4.0.30319_64 - ok
17:11:16.0680 0x1ab4  [ E13A438F9E51DD034730678E33B73290, 3BB111DFDAEAB8DA6124600C7F6E080C2950A0BB420803FC12560343E1A9280A ] clwvd          C:\windows\system32\DRIVERS\clwvd.sys
17:11:16.0680 0x1ab4  clwvd - ok
17:11:16.0710 0x1ab4  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
17:11:16.0720 0x1ab4  CmBatt - ok
17:11:16.0738 0x1ab4  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\windows\system32\drivers\cmdide.sys
17:11:16.0739 0x1ab4  cmdide - ok
17:11:16.0762 0x1ab4  [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG            C:\windows\system32\Drivers\cng.sys
17:11:16.0772 0x1ab4  CNG - ok
17:11:16.0782 0x1ab4  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\windows\system32\drivers\compbatt.sys
17:11:16.0792 0x1ab4  Compbatt - ok
17:11:16.0812 0x1ab4  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys
17:11:16.0812 0x1ab4  CompositeBus - ok
17:11:16.0812 0x1ab4  COMSysApp - ok
17:11:16.0932 0x1ab4  [ 3A92DDB2F7B7FE2E71AA1418804EBC3C, 1B84033A6DDB9D371AC34F8D65AB0F729E8A77B0D26C8DCA0965CE265474BD64 ] cphs            C:\windows\SysWow64\IntelCpHeciSvc.exe
17:11:16.0942 0x1ab4  cphs - ok
17:11:16.0962 0x1ab4  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\windows\system32\drivers\crcdisk.sys
17:11:16.0972 0x1ab4  crcdisk - ok
17:11:16.0992 0x1ab4  [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc        C:\windows\system32\cryptsvc.dll
17:11:17.0002 0x1ab4  CryptSvc - ok
17:11:17.0037 0x1ab4  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch      C:\windows\system32\rpcss.dll
17:11:17.0047 0x1ab4  DcomLaunch - ok
17:11:17.0088 0x1ab4  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\windows\System32\defragsvc.dll
17:11:17.0095 0x1ab4  defragsvc - ok
17:11:17.0165 0x1ab4  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\windows\system32\Drivers\dfsc.sys
17:11:17.0168 0x1ab4  DfsC - ok
17:11:17.0192 0x1ab4  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\windows\system32\dhcpcore.dll
17:11:17.0199 0x1ab4  Dhcp - ok
17:11:17.0290 0x1ab4  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack      C:\windows\system32\diagtrack.dll
17:11:17.0457 0x1ab4  DiagTrack - ok
17:11:17.0487 0x1ab4  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\windows\system32\drivers\discache.sys
17:11:17.0487 0x1ab4  discache - ok
17:11:17.0517 0x1ab4  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\windows\system32\drivers\disk.sys
17:11:17.0527 0x1ab4  Disk - ok
17:11:17.0557 0x1ab4  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\windows\System32\dnsrslvr.dll
17:11:17.0557 0x1ab4  Dnscache - ok
17:11:17.0577 0x1ab4  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\windows\System32\dot3svc.dll
17:11:17.0587 0x1ab4  dot3svc - ok
17:11:17.0607 0x1ab4  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\windows\system32\dps.dll
17:11:17.0607 0x1ab4  DPS - ok
17:11:17.0627 0x1ab4  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud        C:\windows\system32\drivers\drmkaud.sys
17:11:17.0627 0x1ab4  drmkaud - ok
17:11:17.0737 0x1ab4  [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl        C:\windows\System32\drivers\dxgkrnl.sys
17:11:17.0797 0x1ab4  DXGKrnl - ok
17:11:17.0817 0x1ab4  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\windows\System32\eapsvc.dll
17:11:17.0827 0x1ab4  EapHost - ok
17:11:17.0977 0x1ab4  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\windows\system32\drivers\evbda.sys
17:11:18.0079 0x1ab4  ebdrv - ok
17:11:18.0118 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] EFS            C:\windows\System32\lsass.exe
17:11:18.0119 0x1ab4  EFS - ok
17:11:18.0202 0x1ab4  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\windows\ehome\ehRecvr.exe
17:11:18.0228 0x1ab4  ehRecvr - ok
17:11:18.0239 0x1ab4  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\windows\ehome\ehsched.exe
17:11:18.0243 0x1ab4  ehSched - ok
17:11:18.0279 0x1ab4  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\windows\system32\drivers\elxstor.sys
17:11:18.0298 0x1ab4  elxstor - ok
17:11:18.0301 0x1ab4  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\windows\system32\drivers\errdev.sys
17:11:18.0301 0x1ab4  ErrDev - ok
17:11:18.0341 0x1ab4  [ 4D7F3114147C31390262F19F74E5BF07, E89F5304149B51327DFE1314AE13352923B752BC24585FF42F28EF5F00936A6A ] ESProtectionDriver C:\windows\system32\drivers\mbae64.sys
17:11:18.0341 0x1ab4  ESProtectionDriver - ok
17:11:18.0361 0x1ab4  [ 39EC51A5BC3E1C0D438E8AC70956DE0A, 456AE9C6E059442CA627AAB667CA498AA6F6A6812A177DCCB36D9CC24F11231A ] ETD            C:\windows\system32\DRIVERS\ETD.sys
17:11:18.0371 0x1ab4  ETD - ok
17:11:18.0431 0x1ab4  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\windows\system32\es.dll
17:11:18.0461 0x1ab4  EventSystem - ok
17:11:18.0501 0x1ab4  [ 8ADACFFAD67394C711698EA074CE3BAB, 02793393584762224D87C487D80080D6DBCD09192098A7A1399CA16C17886C5D ] ewusbnet        C:\windows\system32\DRIVERS\ewusbnet.sys
17:11:18.0511 0x1ab4  ewusbnet - ok
17:11:18.0551 0x1ab4  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\windows\system32\drivers\exfat.sys
17:11:18.0561 0x1ab4  exfat - ok
17:11:18.0621 0x1ab4  Fabs - ok
17:11:18.0661 0x1ab4  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\windows\system32\drivers\fastfat.sys
17:11:18.0681 0x1ab4  fastfat - ok
17:11:18.0741 0x1ab4  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\windows\system32\fxssvc.exe
17:11:18.0771 0x1ab4  Fax - ok
17:11:18.0801 0x1ab4  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\windows\system32\drivers\fdc.sys
17:11:18.0801 0x1ab4  fdc - ok
17:11:18.0841 0x1ab4  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\windows\system32\fdPHost.dll
17:11:18.0841 0x1ab4  fdPHost - ok
17:11:18.0861 0x1ab4  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\windows\system32\fdrespub.dll
17:11:18.0861 0x1ab4  FDResPub - ok
17:11:18.0911 0x1ab4  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
17:11:18.0911 0x1ab4  FileInfo - ok
17:11:18.0921 0x1ab4  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\windows\system32\drivers\filetrace.sys
17:11:18.0931 0x1ab4  Filetrace - ok
17:11:19.0031 0x1ab4  [ FFF1130F7C9FA01D093A1EDFC5CCE8FC, 159EAA1893D871C309A063829CB3BC51A019FBCA1E07530B5CA1A382B2CCAF61 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
17:11:19.0122 0x1ab4  FirebirdServerMAGIXInstance - ok
17:11:19.0152 0x1ab4  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\windows\system32\drivers\flpydisk.sys
17:11:19.0153 0x1ab4  flpydisk - ok
17:11:19.0194 0x1ab4  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
17:11:19.0203 0x1ab4  FltMgr - ok
17:11:19.0300 0x1ab4  [ 700A5373FA66F1DAAECBD2CFB88C73ED, D6C1C4C846BC24EB6539ECC701A456FA53BB6679C79391F5B70580D47B6CE395 ] FontCache      C:\windows\system32\FntCache.dll
17:11:19.0339 0x1ab4  FontCache - ok
17:11:19.0376 0x1ab4  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:11:19.0386 0x1ab4  FontCache3.0.0.0 - ok
17:11:19.0406 0x1ab4  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\windows\system32\drivers\FsDepends.sys
17:11:19.0416 0x1ab4  FsDepends - ok
17:11:19.0456 0x1ab4  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
17:11:19.0466 0x1ab4  Fs_Rec - ok
17:11:19.0506 0x1ab4  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
17:11:19.0516 0x1ab4  fvevol - ok
17:11:19.0536 0x1ab4  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys
17:11:19.0546 0x1ab4  gagp30kx - ok
17:11:19.0606 0x1ab4  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc          C:\windows\System32\gpsvc.dll
17:11:19.0636 0x1ab4  gpsvc - ok
17:11:19.0716 0x1ab4  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:11:19.0716 0x1ab4  gupdate - ok
17:11:19.0746 0x1ab4  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:11:19.0746 0x1ab4  gupdatem - ok
17:11:19.0766 0x1ab4  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
17:11:19.0766 0x1ab4  hcw85cir - ok
17:11:19.0786 0x1ab4  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
17:11:19.0806 0x1ab4  HdAudAddService - ok
17:11:19.0836 0x1ab4  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\windows\system32\DRIVERS\HDAudBus.sys
17:11:19.0836 0x1ab4  HDAudBus - ok
17:11:19.0856 0x1ab4  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\windows\system32\drivers\HidBatt.sys
17:11:19.0866 0x1ab4  HidBatt - ok
17:11:19.0866 0x1ab4  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\windows\system32\drivers\hidbth.sys
17:11:19.0876 0x1ab4  HidBth - ok
17:11:19.0876 0x1ab4  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\windows\system32\drivers\hidir.sys
17:11:19.0876 0x1ab4  HidIr - ok
17:11:19.0916 0x1ab4  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\windows\system32\hidserv.dll
17:11:19.0916 0x1ab4  hidserv - ok
17:11:19.0956 0x1ab4  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys
17:11:19.0956 0x1ab4  HidUsb - ok
17:11:19.0986 0x1ab4  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\windows\system32\kmsvc.dll
17:11:19.0996 0x1ab4  hkmsvc - ok
17:11:20.0016 0x1ab4  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\windows\system32\ListSvc.dll
17:11:20.0016 0x1ab4  HomeGroupListener - ok
17:11:20.0046 0x1ab4  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\windows\system32\provsvc.dll
17:11:20.0046 0x1ab4  HomeGroupProvider - ok
17:11:20.0086 0x1ab4  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
17:11:20.0088 0x1ab4  HpSAMD - ok
17:11:20.0151 0x1ab4  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\windows\system32\drivers\HTTP.sys
17:11:20.0174 0x1ab4  HTTP - ok
17:11:20.0207 0x1ab4  [ D969D0E26C5B1E813B17066A8318D5D4, 27308902D216CD38F40B9341F40AFDCFEC09EA3122FB88E7C7A5C42D0433315D ] hwdatacard      C:\windows\system32\DRIVERS\ewusbmdm.sys
17:11:20.0210 0x1ab4  hwdatacard - ok
17:11:20.0231 0x1ab4  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
17:11:20.0232 0x1ab4  hwpolicy - ok
17:11:20.0263 0x1ab4  [ B45B3647BA32749B94FA689175EC8C26, F0876ECA6FA66A296DB7E11FA9E4094D96064AE87EC21CC752C9B7E6A7DFEDD2 ] hwusbdev        C:\windows\system32\DRIVERS\ewusbdev.sys
17:11:20.0266 0x1ab4  hwusbdev - ok
17:11:20.0289 0x1ab4  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\windows\system32\DRIVERS\i8042prt.sys
17:11:20.0292 0x1ab4  i8042prt - ok
17:11:20.0320 0x1ab4  [ B9E489CC1EA3284FEED33799DC70612D, 0DD714A3A37C391B38F4EEEB3F85C3C3C056F4AAB4A5EFA63835AD967BC25B51 ] iaStorA        C:\windows\system32\drivers\iaStorA.sys
17:11:20.0331 0x1ab4  iaStorA - ok
17:11:20.0402 0x1ab4  [ 3AEE4C821114AC707699A28988F27ABB, 033A25A19E2A649DA059AE3BCACB8605C00D4F10D356C5E3167B84C01B9359A9 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
17:11:20.0402 0x1ab4  IAStorDataMgrSvc - ok
17:11:20.0462 0x1ab4  [ CC096E5C9BAABEB8EF12CDFAFFD888CF, 9D61736CB83DE04FC44FB25122AB6D09951C915E577E1A18188D4D5F35EACD76 ] iaStorF        C:\windows\system32\drivers\iaStorF.sys
17:11:20.0462 0x1ab4  iaStorF - ok
17:11:20.0502 0x1ab4  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\windows\system32\drivers\iaStorV.sys
17:11:20.0532 0x1ab4  iaStorV - ok
17:11:20.0582 0x1ab4  [ 1B904E09172A2D63CB728F56B9DC72AA, E83D8A55319B378EB76A88EF778F69F560C8F2541BBD58151754509008D1A2C5 ] ICCWDT          C:\windows\system32\DRIVERS\ICCWDT.sys
17:11:20.0582 0x1ab4  ICCWDT - ok
17:11:20.0652 0x1ab4  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:11:20.0692 0x1ab4  idsvc - ok
17:11:20.0702 0x1ab4  IEEtwCollectorService - ok
17:11:20.0882 0x1ab4  [ 5268F385C889BB942E0F9596DE83373F, 011280191EEF8053CD413734A0B08F5DF88CD8408CD8354AABF2216F4C59F921 ] igfx            C:\windows\system32\DRIVERS\igdkmd64.sys
17:11:21.0012 0x1ab4  igfx - ok
17:11:21.0043 0x1ab4  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\windows\system32\drivers\iirsp.sys
17:11:21.0045 0x1ab4  iirsp - ok
17:11:21.0086 0x1ab4  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\windows\System32\ikeext.dll
17:11:21.0120 0x1ab4  IKEEXT - ok
17:11:21.0277 0x1ab4  [ D739148367AAE1DA0C12160DE141ECED, 471E6EA03F2BD7DD1E2812B56EFB00EDDCAA87E974833B75114B8EE93DC358A5 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
17:11:21.0410 0x1ab4  IntcAzAudAddService - ok
17:11:21.0462 0x1ab4  [ 0E0B99617ED3FDB6C5F0E2D62709B5DF, A656CA3A60E62BE16A015150B23136CE150F9876B4035E9E8D8E73D1707B37A4 ] IntcDAud        C:\windows\system32\DRIVERS\IntcDAud.sys
17:11:21.0469 0x1ab4  IntcDAud - ok
17:11:21.0528 0x1ab4  [ C6128F2E3DC6156C6F8828F9F1B96010, 612C1191AFB8F69BA5634E8C52BDDE608F57D98FA4C76C5A337676A5F1E8191D ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
17:11:21.0562 0x1ab4  Intel(R) Capability Licensing Service Interface - ok
17:11:21.0605 0x1ab4  [ 729AB4F0608E95EFF8FDEF23596283E2, 62A2091FF440C65505AB3E38436A86D9B0978BCB9485960EFCE0C5CBC8E06201 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
17:11:21.0637 0x1ab4  Intel(R) Capability Licensing Service TCP IP Interface - ok
17:11:21.0667 0x1ab4  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\windows\system32\drivers\intelide.sys
17:11:21.0667 0x1ab4  intelide - ok
17:11:21.0707 0x1ab4  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
17:11:21.0707 0x1ab4  intelppm - ok
17:11:21.0727 0x1ab4  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\windows\system32\ipbusenum.dll
17:11:21.0737 0x1ab4  IPBusEnum - ok
17:11:21.0747 0x1ab4  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
17:11:21.0747 0x1ab4  IpFilterDriver - ok
17:11:21.0777 0x1ab4  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
17:11:21.0797 0x1ab4  iphlpsvc - ok
17:11:21.0797 0x1ab4  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\windows\system32\drivers\IPMIDrv.sys
17:11:21.0807 0x1ab4  IPMIDRV - ok
17:11:21.0807 0x1ab4  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\windows\system32\drivers\ipnat.sys
17:11:21.0807 0x1ab4  IPNAT - ok
17:11:21.0817 0x1ab4  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\windows\system32\drivers\irenum.sys
17:11:21.0827 0x1ab4  IRENUM - ok
17:11:21.0837 0x1ab4  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\windows\system32\drivers\isapnp.sys
17:11:21.0837 0x1ab4  isapnp - ok
17:11:21.0867 0x1ab4  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
17:11:21.0877 0x1ab4  iScsiPrt - ok
17:11:21.0897 0x1ab4  [ 78D369F8A81A341109FBA1DB64B4C512, E584F693255CCBF7006E7D35984149CF599BB0849A8F02EFDD6223DF0D606049 ] iusb3hcs        C:\windows\system32\drivers\iusb3hcs.sys
17:11:21.0897 0x1ab4  iusb3hcs - ok
17:11:21.0967 0x1ab4  [ 5B632ABA038CE2E2D5D2D1115C6B26D1, 605A8FFA704E4369CF9D17DF8630DC9E196B8920D47F1CC5151759E60B234C1F ] iusb3hub        C:\windows\system32\DRIVERS\iusb3hub.sys
17:11:22.0017 0x1ab4  iusb3hub - ok
17:11:22.0068 0x1ab4  [ EA841584EF59528D11F20355770E427E, 515737761BB2A0A233F4AD141E28D93E3B9789320A15B7D5FB3DB5AC3CD8E249 ] iusb3xhc        C:\windows\system32\DRIVERS\iusb3xhc.sys
17:11:22.0092 0x1ab4  iusb3xhc - ok
17:11:22.0146 0x1ab4  [ 924019BC58FEDDE04A08C45EC1CF1847, F18C581FE5C25C5BE4514185AD44C561EB715B98AFBE81EF0D673E103EA8E8EE ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
17:11:22.0150 0x1ab4  jhi_service - ok
17:11:22.0174 0x1ab4  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys
17:11:22.0176 0x1ab4  kbdclass - ok
17:11:22.0186 0x1ab4  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
17:11:22.0188 0x1ab4  kbdhid - ok
17:11:22.0203 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] KeyIso          C:\windows\system32\lsass.exe
17:11:22.0204 0x1ab4  KeyIso - ok
17:11:22.0241 0x1ab4  [ 6F5F0C6160EF237F0243C1E416EEBA98, 8BA8AA0D71350A74E294A731226B1638C6059013D645ABDE7188F7733E320FBD ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
17:11:22.0244 0x1ab4  KSecDD - ok
17:11:22.0266 0x1ab4  [ 05529E53B286FD60E7EF04EF138CABFD, 6C045750DCD3EE76F748582513AD4FA99C0E8E56B616725CD48DCA1068FF8923 ] KSecPkg        C:\windows\system32\Drivers\ksecpkg.sys
17:11:22.0269 0x1ab4  KSecPkg - ok
17:11:22.0284 0x1ab4  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\windows\system32\drivers\ksthunk.sys
17:11:22.0285 0x1ab4  ksthunk - ok
17:11:22.0328 0x1ab4  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\windows\system32\msdtckrm.dll
17:11:22.0348 0x1ab4  KtmRm - ok
17:11:22.0358 0x1ab4  [ A6131EE7C440992458688C7D0989C584, 94FEB4A6677262BAA590F77329141D9F539D3466D6E9473D639880AA6D5A103C ] L1C            C:\windows\system32\DRIVERS\L1C62x64.sys
17:11:22.0368 0x1ab4  L1C - ok
17:11:22.0408 0x1ab4  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\windows\system32\srvsvc.dll
17:11:22.0448 0x1ab4  LanmanServer - ok
17:11:22.0478 0x1ab4  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
17:11:22.0488 0x1ab4  LanmanWorkstation - ok
17:11:22.0618 0x1ab4  [ B91987F22C206191683F50085B160F4B, B55452540A9C28F14CDEB0A4514E2C6D0440710441673356485CA18165863AE7 ] LavasoftTcpService C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
17:11:22.0648 0x1ab4  LavasoftTcpService - ok
17:11:22.0658 0x1ab4  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
17:11:22.0658 0x1ab4  lltdio - ok
17:11:22.0698 0x1ab4  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\windows\System32\lltdsvc.dll
17:11:22.0698 0x1ab4  lltdsvc - ok
17:11:22.0708 0x1ab4  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\windows\System32\lmhsvc.dll
17:11:22.0708 0x1ab4  lmhosts - ok
17:11:22.0758 0x1ab4  [ EC90A0554EAC7E37139F2DAD8C56FB04, F62DBB7B174A270700631EA590B3293FE558940FB72F84C242391530E1DF78B5 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
17:11:22.0768 0x1ab4  LMS - ok
17:11:22.0798 0x1ab4  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\windows\system32\drivers\lsi_fc.sys
17:11:22.0798 0x1ab4  LSI_FC - ok
17:11:22.0808 0x1ab4  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\windows\system32\drivers\lsi_sas.sys
17:11:22.0818 0x1ab4  LSI_SAS - ok
17:11:22.0828 0x1ab4  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys
17:11:22.0828 0x1ab4  LSI_SAS2 - ok
17:11:22.0828 0x1ab4  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys
17:11:22.0838 0x1ab4  LSI_SCSI - ok
17:11:22.0878 0x1ab4  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\windows\system32\drivers\luafv.sys
17:11:22.0878 0x1ab4  luafv - ok
17:11:22.0898 0x1ab4  [ 3BEC6134F1E45AEF5E971F69F0D38510, 245D7CEEB6561166EE0472551D39A9D3CFDDA52A6BF2E924AB243CCA7FBC9009 ] MBAMChameleon  C:\windows\system32\drivers\MBAMChameleon.sys
17:11:22.0908 0x1ab4  MBAMChameleon - ok
17:11:22.0968 0x1ab4  [ F3960CA85778E5D7611EE0F501972340, 0DE5C8509A9A66C8185B9FAA7EAF69C0FA9C28CD9DE84AA23E128E4FF8E06BF4 ] MBAMFarflt      C:\windows\system32\drivers\farflt.sys
17:11:22.0978 0x1ab4  MBAMFarflt - ok
17:11:23.0045 0x1ab4  [ 88BD122C3A35DE63D75D382DF75554CE, ABDF59543CAD186A6ED4E66257205D9CF5047732A5DA74A96A28B468B41BC396 ] MBAMProtection  C:\windows\system32\drivers\mbam.sys
17:11:23.0048 0x1ab4  MBAMProtection - ok
17:11:23.0230 0x1ab4  [ 28E521A6ABA9DE062A3719452816F495, B312A37DA052229DFB19353170CD5828582F8AC6426E857CA7C8ACA0DD91C160 ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
17:11:23.0301 0x1ab4  MBAMService - ok
17:11:23.0345 0x1ab4  [ ABB371D9AEF728B0489B0E6872B4A1C0, E9539A4F85FE30F5BAED742778CA74C879995728668ABE6877C37633716D8770 ] MBAMSwissArmy  C:\windows\system32\drivers\MBAMSwissArmy.sys
17:11:23.0355 0x1ab4  MBAMSwissArmy - ok
17:11:23.0395 0x1ab4  [ 8FF2D95CBA49B405C5DE27039FF0BF35, 03BF7FC7F1C2C76EDB583BA342EA1C325DB8058517744EF2A78529D3938F4DC1 ] MBfilt          C:\windows\system32\drivers\MBfilt64.sys
17:11:23.0395 0x1ab4  MBfilt - ok
17:11:23.0495 0x1ab4  [ 1704A8189EE5580AB147CFD25C5C8770, DFA076FD36B5CC844D4BE3B865E9A1F809E14CCB1D78D82A2D8D8EE38210E6EB ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
17:11:23.0525 0x1ab4  McComponentHostService - ok
17:11:23.0545 0x1ab4  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\windows\system32\Mcx2Svc.dll
17:11:23.0555 0x1ab4  Mcx2Svc - ok
17:11:23.0565 0x1ab4  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\windows\system32\drivers\megasas.sys
17:11:23.0565 0x1ab4  megasas - ok
17:11:23.0575 0x1ab4  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys
17:11:23.0585 0x1ab4  MegaSR - ok
17:11:23.0615 0x1ab4  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\windows\system32\drivers\HECIx64.sys
17:11:23.0625 0x1ab4  MEIx64 - ok
17:11:23.0645 0x1ab4  MGHwCtrl - ok
17:11:23.0685 0x1ab4  [ 71C6748EE8DE938532057EF10B4B7E44, 455175332156939B3CDA4511A2A6C213ABBFDB85EEECA98B6AB014C994F532C4 ] Micro Star SCM  C:\Program Files (x86)\SCM\MSIService.exe
17:11:23.0695 0x1ab4  Micro Star SCM - ok
17:11:23.0715 0x1ab4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\windows\system32\mmcss.dll
17:11:23.0725 0x1ab4  MMCSS - ok
17:11:23.0745 0x1ab4  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\windows\system32\drivers\modem.sys
17:11:23.0755 0x1ab4  Modem - ok
17:11:23.0795 0x1ab4  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\windows\system32\DRIVERS\monitor.sys
17:11:23.0795 0x1ab4  monitor - ok
17:11:23.0815 0x1ab4  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
17:11:23.0815 0x1ab4  mouclass - ok
17:11:23.0845 0x1ab4  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
17:11:23.0845 0x1ab4  mouhid - ok
17:11:23.0885 0x1ab4  [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
17:11:23.0895 0x1ab4  mountmgr - ok
17:11:23.0945 0x1ab4  [ E464A0A92E2E354D07DDA713D3E10DE4, D5CF213F03DF54EF9933027A7A7D4413371C1ECBFF61E4DE818D50FA72C8C5FC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:11:23.0965 0x1ab4  MozillaMaintenance - ok
17:11:24.0005 0x1ab4  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\windows\system32\drivers\mpio.sys
17:11:24.0005 0x1ab4  mpio - ok
17:11:24.0048 0x1ab4  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
17:11:24.0050 0x1ab4  mpsdrv - ok
17:11:24.0094 0x1ab4  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\windows\system32\mpssvc.dll
17:11:24.0129 0x1ab4  MpsSvc - ok
17:11:24.0168 0x1ab4  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
17:11:24.0172 0x1ab4  MRxDAV - ok
17:11:24.0211 0x1ab4  [ 632E8A00090E4F85F304E152C92C7F2C, A3098941251A8327C95E6B1122384D54FB0ED705A9215577D968EA5B5FD88C87 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
17:11:24.0219 0x1ab4  mrxsmb - ok
17:11:24.0273 0x1ab4  [ 0D9C05484F2F4BD9D33A615D5DBE67EA, 1E164B631B1CD85DD5B205284CB547B189609946490AAABD22741743BFB413DF ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
17:11:24.0293 0x1ab4  mrxsmb10 - ok
17:11:24.0325 0x1ab4  [ 6123E6FECC1C164022868FB1982271BE, 417E6C7AFF8B014B31AFCC202B0DCEECBDBB73205DF8C3EFC7E313664E284178 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
17:11:24.0325 0x1ab4  mrxsmb20 - ok
17:11:24.0355 0x1ab4  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\windows\system32\drivers\msahci.sys
17:11:24.0355 0x1ab4  msahci - ok
17:11:24.0385 0x1ab4  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\windows\system32\drivers\msdsm.sys
17:11:24.0395 0x1ab4  msdsm - ok
17:11:24.0425 0x1ab4  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\windows\System32\msdtc.exe
17:11:24.0435 0x1ab4  MSDTC - ok
17:11:24.0445 0x1ab4  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\windows\system32\drivers\Msfs.sys
17:11:24.0455 0x1ab4  Msfs - ok
17:11:24.0465 0x1ab4  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\windows\System32\drivers\mshidkmdf.sys
17:11:24.0465 0x1ab4  mshidkmdf - ok
17:11:24.0515 0x1ab4  [ 87B9DAF6D123EC06C19B41D5295441AD, 2066EA70D85B9F17CA3121D69DB25E2E17C4AFAECB68CC97FFF4A3062099FF0C ] MSI Foundation Service C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe
17:11:24.0515 0x1ab4  MSI Foundation Service - ok
17:11:24.0555 0x1ab4  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
17:11:24.0555 0x1ab4  msisadrv - ok
17:11:24.0585 0x1ab4  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\windows\system32\iscsiexe.dll
17:11:24.0595 0x1ab4  MSiSCSI - ok
17:11:24.0605 0x1ab4  msiserver - ok
17:11:24.0625 0x1ab4  [ 6DC2A478749CB24DC2DCE92A92DE3288, 86D74A6002E16C0ED7B9A933E88DF006E3D9299D14D29A05D61B5BD48E05BE87 ] MSI_SuperCharger C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
17:11:24.0625 0x1ab4  MSI_SuperCharger - ok
17:11:24.0655 0x1ab4  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\windows\system32\drivers\MSKSSRV.sys
17:11:24.0655 0x1ab4  MSKSSRV - ok
17:11:24.0665 0x1ab4  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
17:11:24.0665 0x1ab4  MSPCLOCK - ok
17:11:24.0685 0x1ab4  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\windows\system32\drivers\MSPQM.sys
17:11:24.0685 0x1ab4  MSPQM - ok
17:11:24.0715 0x1ab4  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\windows\system32\drivers\MsRPC.sys
17:11:24.0725 0x1ab4  MsRPC - ok
17:11:24.0755 0x1ab4  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\windows\system32\drivers\mssmbios.sys
17:11:24.0755 0x1ab4  mssmbios - ok
17:11:24.0765 0x1ab4  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\windows\system32\drivers\MSTEE.sys
17:11:24.0765 0x1ab4  MSTEE - ok
17:11:24.0775 0x1ab4  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\windows\system32\drivers\MTConfig.sys
17:11:24.0775 0x1ab4  MTConfig - ok
17:11:24.0795 0x1ab4  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\windows\system32\Drivers\mup.sys
17:11:24.0795 0x1ab4  Mup - ok
17:11:24.0825 0x1ab4  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\windows\system32\qagentRT.dll
17:11:24.0835 0x1ab4  napagent - ok
17:11:24.0885 0x1ab4  [ 8D11DA92F83D8C8281689739BEF05FD5, AD1D95CE084D1BD8310F6AA1CB27BEA98D9354E334AEC448AD6E6F68B52EEBC7 ] NAT            C:\Program Files (x86)\Norton Anti-Theft\Engine\1.6.0.17\ccSvcHst.exe
17:11:24.0885 0x1ab4  NAT - ok
17:11:24.0935 0x1ab4  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\windows\system32\DRIVERS\nwifi.sys
17:11:24.0965 0x1ab4  NativeWifiP - ok
17:11:25.0061 0x1ab4  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\windows\system32\drivers\ndis.sys
17:11:25.0111 0x1ab4  NDIS - ok
17:11:25.0176 0x1ab4  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\windows\system32\DRIVERS\ndiscap.sys
17:11:25.0178 0x1ab4  NdisCap - ok
17:11:25.0195 0x1ab4  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
17:11:25.0197 0x1ab4  NdisTapi - ok
17:11:25.0232 0x1ab4  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\windows\system32\DRIVERS\ndisuio.sys
17:11:25.0236 0x1ab4  Ndisuio - ok
17:11:25.0252 0x1ab4  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\windows\system32\DRIVERS\ndiswan.sys
17:11:25.0257 0x1ab4  NdisWan - ok
17:11:25.0292 0x1ab4  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\windows\system32\drivers\NDProxy.sys
17:11:25.0294 0x1ab4  NDProxy - ok
17:11:25.0311 0x1ab4  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\windows\system32\DRIVERS\netbios.sys
17:11:25.0321 0x1ab4  NetBIOS - ok
17:11:25.0381 0x1ab4  [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT          C:\windows\system32\DRIVERS\netbt.sys
17:11:25.0391 0x1ab4  NetBT - ok
17:11:25.0421 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] Netlogon        C:\windows\system32\lsass.exe
17:11:25.0421 0x1ab4  Netlogon - ok
17:11:25.0471 0x1ab4  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\windows\System32\netman.dll
17:11:25.0511 0x1ab4  Netman - ok
17:11:25.0581 0x1ab4  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:11:25.0601 0x1ab4  NetMsmqActivator - ok
17:11:25.0611 0x1ab4  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:11:25.0611 0x1ab4  NetPipeActivator - ok
17:11:25.0641 0x1ab4  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\windows\System32\netprofm.dll
17:11:25.0651 0x1ab4  netprofm - ok
17:11:25.0661 0x1ab4  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:11:25.0661 0x1ab4  NetTcpActivator - ok
17:11:25.0671 0x1ab4  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:11:25.0671 0x1ab4  NetTcpPortSharing - ok
17:11:25.0701 0x1ab4  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\windows\system32\drivers\nfrd960.sys
17:11:25.0701 0x1ab4  nfrd960 - ok
17:11:25.0721 0x1ab4  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\windows\System32\nlasvc.dll
17:11:25.0731 0x1ab4  NlaSvc - ok
17:11:25.0901 0x1ab4  [ FD8082D64C151589F12A4F620DBA3030, 649D61BF958ED50C0B5F7E0D2E633D20C8AAA00706A7AE9528DA78E2B6B3492E ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
17:11:26.0031 0x1ab4  NOBU - ok
17:11:26.0065 0x1ab4  Norton PC Checkup Application Launcher - ok
17:11:26.0086 0x1ab4  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\windows\system32\drivers\Npfs.sys
17:11:26.0087 0x1ab4  Npfs - ok
17:11:26.0106 0x1ab4  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\windows\system32\nsisvc.dll
17:11:26.0109 0x1ab4  nsi - ok
17:11:26.0157 0x1ab4  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
17:11:26.0158 0x1ab4  nsiproxy - ok
17:11:26.0252 0x1ab4  [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
17:11:26.0303 0x1ab4  Ntfs - ok
17:11:26.0364 0x1ab4  [ 23CF3DA010497EB2BF39A5C5A57E437C, 39CFDE7D401EFCE4F550E0A9461F5FC4D71FA07235E1336E4F0B4882BD76550E ] NTIOLib_1_0_3  C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys
17:11:26.0364 0x1ab4  NTIOLib_1_0_3 - ok
17:11:26.0414 0x1ab4  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\windows\system32\drivers\Null.sys
17:11:26.0414 0x1ab4  Null - ok
17:11:26.0444 0x1ab4  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\windows\system32\drivers\nvraid.sys
17:11:26.0454 0x1ab4  nvraid - ok
17:11:26.0454 0x1ab4  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\windows\system32\drivers\nvstor.sys
17:11:26.0464 0x1ab4  nvstor - ok
17:11:26.0474 0x1ab4  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
17:11:26.0474 0x1ab4  nv_agp - ok
17:11:26.0484 0x1ab4  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
17:11:26.0484 0x1ab4  ohci1394 - ok
17:11:26.0514 0x1ab4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
17:11:26.0524 0x1ab4  p2pimsvc - ok
17:11:26.0554 0x1ab4  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\windows\system32\p2psvc.dll
17:11:26.0564 0x1ab4  p2psvc - ok
17:11:26.0584 0x1ab4  panda_url_filtering - ok
17:11:26.0634 0x1ab4  [ 6925454E20B184E482CD65F297D51DB5, 9386542E9B20C370FCB275C7F8005DAD45C86BBC2F7B8DB3552FA49B474C5EED ] panda_url_filteringd C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys
17:11:26.0634 0x1ab4  panda_url_filteringd - ok
17:11:26.0664 0x1ab4  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\windows\system32\drivers\parport.sys
17:11:26.0674 0x1ab4  Parport - ok
17:11:26.0704 0x1ab4  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\windows\system32\drivers\partmgr.sys
17:11:26.0704 0x1ab4  partmgr - ok
17:11:26.0814 0x1ab4  [ 64DAD6D8A41725325BDAD78E566ACB34, 6599C5C1F8DF5BB85C0DBE4300DF1F4C015E00720B28951149D5924D65FD3DF8 ] pbamw_service  C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe
17:11:26.0824 0x1ab4  pbamw_service - ok
17:11:26.0864 0x1ab4  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\windows\System32\pcasvc.dll
17:11:26.0884 0x1ab4  PcaSvc - ok
17:11:26.0924 0x1ab4  [ 2F86BE1818C2D7AC90478E3323EE7FCB, CE721FCFFDC9D24483DEB6BB77DAFEBE79BA143CA2EE68BF28E2A9297AADB2D4 ] PCCUJobMgr      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe
17:11:26.0924 0x1ab4  PCCUJobMgr - ok
17:11:26.0974 0x1ab4  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\windows\system32\drivers\pci.sys
17:11:26.0984 0x1ab4  pci - ok
17:11:27.0014 0x1ab4  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\windows\system32\drivers\pciide.sys
17:11:27.0014 0x1ab4  pciide - ok
17:11:27.0051 0x1ab4  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
17:11:27.0062 0x1ab4  pcmcia - ok
17:11:27.0107 0x1ab4  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\windows\system32\drivers\pcw.sys
17:11:27.0109 0x1ab4  pcw - ok
17:11:27.0208 0x1ab4  [ 8F98C4BC605261B4B6E568FE791EB67A, 7B0D99D972A60423F7378BEE886061695FDA79B59AFF939744A130721E0174A1 ] PDF Architect 2 C:\Program Files (x86)\PDF Architect 2\ws.exe
17:11:27.0265 0x1ab4  PDF Architect 2 - ok
17:11:27.0355 0x1ab4  [ B2309F132A31AF03C0A249AEDE8CF289, BBAE32AA55E495ACB9A8089C090ADD78BE1DC16233CAA61BBED1456CA718D430 ] PDF Architect 2 Creator C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
17:11:27.0365 0x1ab4  PDF Architect 2 Creator - ok
17:11:27.0405 0x1ab4  [ 9077A3059AB47834633AEAAED465F3D9, 9CA662E9CBA30795E4E5DAB3E309D2062FFDC2053C261054E24EF7EE5300F69F ] pdfforge CrashHandler C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
17:11:27.0435 0x1ab4  pdfforge CrashHandler - ok
17:11:27.0505 0x1ab4  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\windows\system32\drivers\peauth.sys
17:11:27.0535 0x1ab4  PEAUTH - ok
17:11:27.0605 0x1ab4  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\windows\SysWow64\perfhost.exe
17:11:27.0605 0x1ab4  PerfHost - ok
17:11:27.0685 0x1ab4  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\windows\system32\pla.dll
17:11:27.0735 0x1ab4  pla - ok
17:11:27.0795 0x1ab4  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\windows\system32\umpnpmgr.dll
17:11:27.0815 0x1ab4  PlugPlay - ok
17:11:27.0835 0x1ab4  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\windows\system32\pnrpauto.dll
17:11:27.0835 0x1ab4  PNRPAutoReg - ok
17:11:27.0855 0x1ab4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\windows\system32\pnrpsvc.dll
17:11:27.0865 0x1ab4  PNRPsvc - ok
17:11:27.0895 0x1ab4  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent    C:\windows\System32\ipsecsvc.dll
17:11:27.0905 0x1ab4  PolicyAgent - ok
17:11:27.0935 0x1ab4  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\windows\system32\umpo.dll
17:11:27.0935 0x1ab4  Power - ok
17:11:27.0955 0x1ab4  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
17:11:27.0955 0x1ab4  PptpMiniport - ok
17:11:27.0985 0x1ab4  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\windows\system32\drivers\processr.sys
17:11:27.0985 0x1ab4  Processor - ok
17:11:28.0005 0x1ab4  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\windows\system32\profsvc.dll
17:11:28.0015 0x1ab4  ProfSvc - ok
17:11:28.0037 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] ProtectedStorage C:\windows\system32\lsass.exe
17:11:28.0039 0x1ab4  ProtectedStorage - ok
17:11:28.0086 0x1ab4  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\windows\system32\DRIVERS\pacer.sys
17:11:28.0090 0x1ab4  Psched - ok
17:11:28.0147 0x1ab4  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\windows\system32\drivers\ql2300.sys
17:11:28.0191 0x1ab4  ql2300 - ok
17:11:28.0209 0x1ab4  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\windows\system32\drivers\ql40xx.sys
17:11:28.0212 0x1ab4  ql40xx - ok
17:11:28.0245 0x1ab4  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\windows\system32\qwave.dll
17:11:28.0253 0x1ab4  QWAVE - ok
17:11:28.0266 0x1ab4  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
17:11:28.0268 0x1ab4  QWAVEdrv - ok
17:11:28.0327 0x1ab4  [ A55E7D0D873B2C97585B3B5926AC6ADE, 3BE3895DA7F0888E85B1941525878BA0846A8F215AD39ED8138BB39615468E32 ] RapiMgr        C:\windows\WindowsMobile\rapimgr.dll
17:11:28.0337 0x1ab4  RapiMgr - ok
17:11:28.0357 0x1ab4  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
17:11:28.0357 0x1ab4  RasAcd - ok
17:11:28.0377 0x1ab4  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\windows\system32\DRIVERS\AgileVpn.sys
17:11:28.0377 0x1ab4  RasAgileVpn - ok
17:11:28.0407 0x1ab4  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\windows\System32\rasauto.dll
17:11:28.0407 0x1ab4  RasAuto - ok
17:11:28.0447 0x1ab4  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\windows\system32\DRIVERS\rasl2tp.sys
17:11:28.0447 0x1ab4  Rasl2tp - ok
17:11:28.0477 0x1ab4  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\windows\System32\rasmans.dll
17:11:28.0487 0x1ab4  RasMan - ok
17:11:28.0497 0x1ab4  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
17:11:28.0507 0x1ab4  RasPppoe - ok
17:11:28.0517 0x1ab4  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\windows\system32\DRIVERS\rassstp.sys
17:11:28.0517 0x1ab4  RasSstp - ok
17:11:28.0587 0x1ab4  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\windows\system32\DRIVERS\rdbss.sys
17:11:28.0617 0x1ab4  rdbss - ok
17:11:28.0627 0x1ab4  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\windows\system32\drivers\rdpbus.sys
17:11:28.0637 0x1ab4  rdpbus - ok
17:11:28.0647 0x1ab4  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
17:11:28.0647 0x1ab4  RDPCDD - ok
17:11:28.0667 0x1ab4  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
17:11:28.0667 0x1ab4  RDPENCDD - ok
17:11:28.0677 0x1ab4  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
17:11:28.0677 0x1ab4  RDPREFMP - ok
17:11:28.0767 0x1ab4  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
17:11:28.0767 0x1ab4  RdpVideoMiniport - ok
17:11:28.0807 0x1ab4  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\windows\system32\drivers\RDPWD.sys
17:11:28.0807 0x1ab4  RDPWD - ok
17:11:28.0837 0x1ab4  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
17:11:28.0837 0x1ab4  rdyboost - ok
17:11:28.0887 0x1ab4  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\windows\System32\mprdim.dll
17:11:28.0897 0x1ab4  RemoteAccess - ok
17:11:28.0917 0x1ab4  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\windows\system32\regsvc.dll
17:11:28.0927 0x1ab4  RemoteRegistry - ok
17:11:28.0957 0x1ab4  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys
17:11:28.0967 0x1ab4  RFCOMM - ok
17:11:28.0977 0x1ab4  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
17:11:28.0987 0x1ab4  RpcEptMapper - ok
17:11:28.0997 0x1ab4  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\windows\system32\locator.exe
17:11:28.0997 0x1ab4  RpcLocator - ok
17:11:29.0087 0x1ab4  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs          C:\windows\system32\rpcss.dll
17:11:29.0102 0x1ab4  RpcSs - ok
17:11:29.0143 0x1ab4  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
17:11:29.0146 0x1ab4  rspndr - ok
17:11:29.0201 0x1ab4  [ 135A64530D7699AD48F29D73A658DD11, 35838AE8ACFD9047C68DD0C8910557A82998E5CD778D5B98D4767AFA4BCE85BB ] RSUSBSTOR      C:\windows\System32\Drivers\RtsUStor.sys
17:11:29.0206 0x1ab4  RSUSBSTOR - ok
17:11:29.0253 0x1ab4  [ 8FA11ECB00AED22ACFEA154B7981D9E6, E72363AB33B17B4942187DADEC8DD9ECB047D2BCAE359148FA2F70EEF935264E ] RtkAvrcp        C:\windows\system32\drivers\RtkAvrcp.sys
17:11:29.0257 0x1ab4  RtkAvrcp - ok
17:11:29.0285 0x1ab4  [ 8008A68D94F4CF164CD636E8A4F8FB0A, 3E8E9DFC397737798AEE920A75D5355651FF823685309641711E9A6396AA6D5F ] RtkAvrcpCtrlr  C:\windows\system32\drivers\RtkAvrcpCtrlr.sys
17:11:29.0289 0x1ab4  RtkAvrcpCtrlr - ok
17:11:29.0343 0x1ab4  [ 543AFFECD35CFABD4490661F83685A0D, 819C022284E54C950D1144B9260C944D493CB4646713B30790818EFC99B82CCB ] RtkBleServ      C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe
17:11:29.0343 0x1ab4  RtkBleServ - ok
17:11:29.0393 0x1ab4  [ 0772C3A9B2AB1907FCB68F2109F18E3B, FECAF1916CE9224D1784F5F99267B95A21969937DB57833FCD6C6118D0A442DC ] RtkBtFilter    C:\windows\system32\DRIVERS\RtkBtfilter.sys
17:11:29.0433 0x1ab4  RtkBtFilter - ok
17:11:29.0553 0x1ab4  [ F84917461BDB7C51B2ED7FF062B3A64A, 0DC81BA49BDDB4F425F526A21357E1CF70C94D67E99B3020E9FF14B680851EEC ] RTWlanE        C:\windows\system32\DRIVERS\rtwlane.sys
17:11:29.0613 0x1ab4  RTWlanE - ok
17:11:29.0633 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] SamSs          C:\windows\system32\lsass.exe
17:11:29.0643 0x1ab4  SamSs - ok
17:11:29.0673 0x1ab4  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
17:11:29.0683 0x1ab4  sbp2port - ok
17:11:29.0733 0x1ab4  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\windows\System32\SCardSvr.dll
17:11:29.0753 0x1ab4  SCardSvr - ok
17:11:29.0793 0x1ab4  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
17:11:29.0793 0x1ab4  scfilter - ok
17:11:29.0883 0x1ab4  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\windows\system32\schedsvc.dll
17:11:29.0923 0x1ab4  Schedule - ok
17:11:29.0953 0x1ab4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\windows\System32\certprop.dll
17:11:29.0953 0x1ab4  SCPolicySvc - ok
17:11:29.0973 0x1ab4  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\windows\System32\SDRSVC.dll
17:11:29.0983 0x1ab4  SDRSVC - ok
17:11:30.0049 0x1ab4  [ 07EEDE29DF77E80EC93AE709CCD80B41, B5DF5F3108815094F0259004E093F56551A70AF6CBE02C3CBDC894589E3ADD38 ] SearchProtectionService C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
17:11:30.0051 0x1ab4  SearchProtectionService - ok
17:11:30.0099 0x1ab4  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\windows\system32\drivers\secdrv.sys
17:11:30.0102 0x1ab4  secdrv - ok
17:11:30.0136 0x1ab4  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\windows\system32\seclogon.dll
17:11:30.0139 0x1ab4  seclogon - ok
17:11:30.0166 0x1ab4  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\windows\System32\sens.dll
17:11:30.0170 0x1ab4  SENS - ok
17:11:30.0185 0x1ab4  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\windows\system32\sensrsvc.dll
17:11:30.0187 0x1ab4  SensrSvc - ok
17:11:30.0204 0x1ab4  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\windows\system32\drivers\serenum.sys
17:11:30.0206 0x1ab4  Serenum - ok
17:11:30.0210 0x1ab4  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\windows\system32\drivers\serial.sys
17:11:30.0214 0x1ab4  Serial - ok
17:11:30.0217 0x1ab4  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\windows\system32\drivers\sermouse.sys
17:11:30.0218 0x1ab4  sermouse - ok
17:11:30.0236 0x1ab4  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\windows\system32\sessenv.dll
17:11:30.0240 0x1ab4  SessionEnv - ok
17:11:30.0245 0x1ab4  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\windows\system32\drivers\sffdisk.sys
17:11:30.0246 0x1ab4  sffdisk - ok
17:11:30.0250 0x1ab4  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
17:11:30.0251 0x1ab4  sffp_mmc - ok
17:11:30.0255 0x1ab4  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\windows\system32\drivers\sffp_sd.sys
17:11:30.0256 0x1ab4  sffp_sd - ok
17:11:30.0262 0x1ab4  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\windows\system32\drivers\sfloppy.sys
17:11:30.0264 0x1ab4  sfloppy - ok
17:11:30.0319 0x1ab4  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\windows\System32\ipnathlp.dll
17:11:30.0319 0x1ab4  SharedAccess - ok
17:11:30.0349 0x1ab4  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\windows\System32\shsvcs.dll
17:11:30.0359 0x1ab4  ShellHWDetection - ok
17:11:30.0379 0x1ab4  [ E9E830D540EDEDED650F906628468548, 9800160C6807B28A2A1E57810151473C96F1484F2EF75D3E378E8C96440CD4CE ] simptcp        C:\windows\System32\tcpsvcs.exe
17:11:30.0379 0x1ab4  simptcp - ok
17:11:30.0399 0x1ab4  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
17:11:30.0409 0x1ab4  SiSRaid2 - ok
17:11:30.0409 0x1ab4  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
17:11:30.0409 0x1ab4  SiSRaid4 - ok
17:11:30.0509 0x1ab4  [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
17:11:30.0529 0x1ab4  SkypeUpdate - ok
17:11:30.0539 0x1ab4  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\windows\system32\DRIVERS\smb.sys
17:11:30.0539 0x1ab4  Smb - ok
17:11:30.0579 0x1ab4  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
17:11:30.0579 0x1ab4  SNMPTRAP - ok
17:11:30.0619 0x1ab4  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\windows\system32\drivers\spldr.sys
17:11:30.0619 0x1ab4  spldr - ok
17:11:30.0649 0x1ab4  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\windows\System32\spoolsv.exe
17:11:30.0669 0x1ab4  Spooler - ok
17:11:30.0769 0x1ab4  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\windows\system32\sppsvc.exe
17:11:30.0899 0x1ab4  sppsvc - ok
17:11:30.0959 0x1ab4  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\windows\system32\sppuinotify.dll
17:11:30.0969 0x1ab4  sppuinotify - ok
17:11:31.0074 0x1ab4  [ EC666682FE8344CF7E6ED69E74FA9F4F, DCD2A1C046425630689E2C9A6A6E356FE5A2A6664D12C20CFE236FCB32240DF9 ] srv            C:\windows\system32\DRIVERS\srv.sys
17:11:31.0091 0x1ab4  srv - ok
17:11:31.0125 0x1ab4  [ E450C0318DCE8ED28ED272C8806B8495, D2FD459F8C5E42103EF2F71421FA175A4F0821F8C2A3763093122D433D1C50FB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
17:11:31.0134 0x1ab4  srv2 - ok
17:11:31.0149 0x1ab4  [ 9C12C78AD36C23D925711A4640228225, FF72C23F2A08EDF0C41BAF1EB0245AB44FF91365C5466F09C47A8F0928D20994 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
17:11:31.0153 0x1ab4  srvnet - ok
17:11:31.0230 0x1ab4  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\windows\System32\ssdpsrv.dll
17:11:31.0235 0x1ab4  SSDPSRV - ok
17:11:31.0360 0x1ab4  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\windows\system32\sstpsvc.dll
17:11:31.0369 0x1ab4  SstpSvc - ok
17:11:31.0403 0x1ab4  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\windows\system32\drivers\stexstor.sys
17:11:31.0406 0x1ab4  stexstor - ok
17:11:31.0474 0x1ab4  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\windows\System32\wiaservc.dll
17:11:31.0520 0x1ab4  stisvc - ok
17:11:31.0575 0x1ab4  [ 04CF20310145DEC63D5387BEAFF77D9A, 5017AF8C2DFBFE1F9946FF5AF229D62D141118EA923EEFA994EB4C7B52DEF208 ] SWDUMon        C:\windows\system32\DRIVERS\SWDUMon.sys
17:11:31.0577 0x1ab4  SWDUMon - ok
17:11:31.0591 0x1ab4  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\windows\system32\drivers\swenum.sys
17:11:31.0593 0x1ab4  swenum - ok
17:11:31.0627 0x1ab4  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\windows\System32\swprv.dll
17:11:31.0647 0x1ab4  swprv - ok
17:11:31.0787 0x1ab4  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain        C:\windows\system32\sysmain.dll
17:11:31.0907 0x1ab4  SysMain - ok
17:11:31.0947 0x1ab4  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\windows\System32\TabSvc.dll
17:11:31.0947 0x1ab4  TabletInputService - ok
17:11:31.0967 0x1ab4  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\windows\System32\tapisrv.dll
17:11:31.0977 0x1ab4  TapiSrv - ok
17:11:32.0037 0x1ab4  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] Tcpip          C:\windows\system32\drivers\tcpip.sys
17:11:32.0102 0x1ab4  Tcpip - ok
17:11:32.0146 0x1ab4  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
17:11:32.0183 0x1ab4  TCPIP6 - ok
17:11:32.0221 0x1ab4  [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
17:11:32.0223 0x1ab4  tcpipreg - ok
17:11:32.0254 0x1ab4  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
17:11:32.0256 0x1ab4  TDPIPE - ok
17:11:32.0286 0x1ab4  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\windows\system32\drivers\tdtcp.sys
17:11:32.0288 0x1ab4  TDTCP - ok
17:11:32.0323 0x1ab4  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx            C:\windows\system32\DRIVERS\tdx.sys
17:11:32.0333 0x1ab4  tdx - ok
17:11:32.0353 0x1ab4  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\windows\system32\drivers\termdd.sys
17:11:32.0363 0x1ab4  TermDD - ok
17:11:32.0423 0x1ab4  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\windows\System32\termsrv.dll
17:11:32.0453 0x1ab4  TermService - ok
17:11:32.0463 0x1ab4  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\windows\system32\themeservice.dll
17:11:32.0473 0x1ab4  Themes - ok
17:11:32.0493 0x1ab4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\windows\system32\mmcss.dll
17:11:32.0503 0x1ab4  THREADORDER - ok
17:11:32.0523 0x1ab4  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\windows\System32\trkwks.dll
17:11:32.0523 0x1ab4  TrkWks - ok
17:11:32.0573 0x1ab4  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
17:11:32.0573 0x1ab4  TrustedInstaller - ok
17:11:32.0613 0x1ab4  [ 19BEDA57F3E0A06B8D5EB6D619BD5624, 952D5FAFD662C93628C12A6F7EB8E240A44216C0A15CBD2F5016BC357CBFE821 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
17:11:32.0613 0x1ab4  tssecsrv - ok
17:11:32.0643 0x1ab4  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
17:11:32.0643 0x1ab4  TsUsbFlt - ok
17:11:32.0683 0x1ab4  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\windows\system32\drivers\TsUsbGD.sys
17:11:32.0683 0x1ab4  TsUsbGD - ok
17:11:32.0723 0x1ab4  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
17:11:32.0733 0x1ab4  tunnel - ok
17:11:32.0773 0x1ab4  [ 42350E49DA754D2D77362FDAE3491651, F29E8BA444ECB0484066B02C0A3DCE09B8417159EE37D7A2E05D4C06A98449C4 ] TurboB          C:\windows\system32\DRIVERS\TurboB.sys
17:11:32.0773 0x1ab4  TurboB - ok
17:11:32.0843 0x1ab4  [ 4F4B0AB2FB69C414CCBCEF7CF2E1C8D8, E1F197554369C97DBF61389346B4CB0233F40AAA2575F5D2FEC809AC9123FC69 ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe
17:11:32.0853 0x1ab4  TurboBoost - ok
17:11:32.0873 0x1ab4  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\windows\system32\drivers\uagp35.sys
17:11:32.0873 0x1ab4  uagp35 - ok
17:11:32.0903 0x1ab4  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
17:11:32.0913 0x1ab4  udfs - ok
17:11:32.0943 0x1ab4  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\windows\system32\UI0Detect.exe
17:11:32.0953 0x1ab4  UI0Detect - ok
17:11:32.0963 0x1ab4  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
17:11:32.0963 0x1ab4  uliagpkx - ok
17:11:32.0993 0x1ab4  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\windows\system32\DRIVERS\umbus.sys
17:11:32.0993 0x1ab4  umbus - ok
17:11:32.0993 0x1ab4  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\windows\system32\drivers\umpass.sys
17:11:33.0003 0x1ab4  UmPass - ok
17:11:33.0071 0x1ab4  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\windows\System32\upnphost.dll
17:11:33.0085 0x1ab4  upnphost - ok
17:11:33.0109 0x1ab4  [ 28B81917A195B67617AF7DCF4DFE5736, 40A4D2AAE1BDE5ABA8708ED150396E913C566ECD5CDA40D6C6DB256F1B9FD4A9 ] usbccgp        C:\windows\system32\DRIVERS\usbccgp.sys
17:11:33.0112 0x1ab4  usbccgp - ok
17:11:33.0139 0x1ab4  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\windows\system32\drivers\usbcir.sys
17:11:33.0142 0x1ab4  usbcir - ok
17:11:33.0226 0x1ab4  [ B626F048318DAE65A3317F0592BE592C, 284D8FFE1D35F852EFDA182A72288AC3A10D6ED825FE2CC5812497D3FE291AF1 ] usbehci        C:\windows\system32\drivers\usbehci.sys
17:11:33.0228 0x1ab4  usbehci - ok
17:11:33.0291 0x1ab4  [ 390109E8E05BA00375DCB1ED64DC60AF, B8628502590B423BEFB6F7C8C69FAD0667AD0746FF6B444EE02016E8E1052B78 ] usbhub          C:\windows\system32\drivers\usbhub.sys
17:11:33.0306 0x1ab4  usbhub - ok
17:11:33.0403 0x1ab4  [ B4DF0F4C1D9D25DFE1DAD1D8670F1D4F, 4317C2DEDC639527B53864BAEC46CBE022D298C0503E29E1072DD1C851D92BFC ] usbohci        C:\windows\system32\drivers\usbohci.sys
17:11:33.0403 0x1ab4  usbohci - ok
17:11:33.0433 0x1ab4  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
17:11:33.0433 0x1ab4  usbprint - ok
17:11:33.0533 0x1ab4  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan        C:\windows\system32\DRIVERS\usbscan.sys
17:11:33.0533 0x1ab4  usbscan - ok
17:11:33.0583 0x1ab4  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR        C:\windows\system32\drivers\USBSTOR.SYS
17:11:33.0583 0x1ab4  USBSTOR - ok
17:11:33.0643 0x1ab4  [ CFEAAF96E666E3DCBD8F6DFF516784AE, 006218A3DB5851790CC0A7F3DCD7B3AF82F624DA679296DE507AFD36C5468317 ] usbuhci        C:\windows\system32\drivers\usbuhci.sys
17:11:33.0643 0x1ab4  usbuhci - ok
17:11:33.0683 0x1ab4  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\windows\system32\Drivers\usbvideo.sys
17:11:33.0703 0x1ab4  usbvideo - ok
17:11:33.0733 0x1ab4  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\windows\System32\uxsms.dll
17:11:33.0733 0x1ab4  UxSms - ok
17:11:33.0753 0x1ab4  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] VaultSvc        C:\windows\system32\lsass.exe
17:11:33.0763 0x1ab4  VaultSvc - ok
17:11:33.0793 0x1ab4  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
17:11:33.0803 0x1ab4  vdrvroot - ok
17:11:33.0863 0x1ab4  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\windows\System32\vds.exe
17:11:33.0913 0x1ab4  vds - ok
17:11:33.0953 0x1ab4  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\windows\system32\DRIVERS\vgapnp.sys
17:11:33.0953 0x1ab4  vga - ok
17:11:33.0983 0x1ab4  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\windows\System32\drivers\vga.sys
17:11:33.0983 0x1ab4  VgaSave - ok
17:11:33.0993 0x1ab4  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\windows\system32\drivers\vhdmp.sys
17:11:34.0003 0x1ab4  vhdmp - ok
17:11:34.0033 0x1ab4  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\windows\system32\drivers\viaide.sys
17:11:34.0033 0x1ab4  viaide - ok
17:11:34.0050 0x1ab4  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\windows\system32\drivers\volmgr.sys
17:11:34.0053 0x1ab4  volmgr - ok
17:11:34.0069 0x1ab4  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\windows\system32\drivers\volmgrx.sys
17:11:34.0077 0x1ab4  volmgrx - ok
17:11:34.0124 0x1ab4  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\windows\system32\drivers\volsnap.sys
17:11:34.0131 0x1ab4  volsnap - ok
17:11:34.0164 0x1ab4  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\windows\system32\drivers\vsmraid.sys
17:11:34.0168 0x1ab4  vsmraid - ok
17:11:34.0224 0x1ab4  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\windows\system32\vssvc.exe
17:11:34.0291 0x1ab4  VSS - ok
17:11:34.0333 0x1ab4  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
17:11:34.0333 0x1ab4  vwifibus - ok
17:11:34.0363 0x1ab4  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
17:11:34.0363 0x1ab4  vwififlt - ok
17:11:34.0383 0x1ab4  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp        C:\windows\system32\DRIVERS\vwifimp.sys
17:11:34.0383 0x1ab4  vwifimp - ok
17:11:34.0403 0x1ab4  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\windows\system32\w32time.dll
17:11:34.0413 0x1ab4  W32Time - ok
17:11:34.0513 0x1ab4  [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] W3SVC          C:\windows\system32\inetsrv\iisw3adm.dll
17:11:34.0573 0x1ab4  W3SVC - ok
17:11:34.0633 0x1ab4  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\windows\system32\drivers\wacompen.sys
17:11:34.0643 0x1ab4  WacomPen - ok
17:11:34.0663 0x1ab4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
17:11:34.0673 0x1ab4  WANARP - ok
17:11:34.0713 0x1ab4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
17:11:34.0723 0x1ab4  Wanarpv6 - ok
17:11:34.0793 0x1ab4  [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] WAS            C:\windows\system32\inetsrv\iisw3adm.dll
17:11:34.0803 0x1ab4  WAS - ok
17:11:34.0863 0x1ab4  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\windows\system32\wbengine.exe
17:11:34.0903 0x1ab4  wbengine - ok
17:11:34.0913 0x1ab4  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
17:11:34.0923 0x1ab4  WbioSrvc - ok
17:11:34.0953 0x1ab4  [ 8BDA6DB43AA54E8BB5E0794541DDC209, 8753C507BE77B019A3403AF5252434A01DB9F9332E58AC3783ABCE3D21AD9DD4 ] WcesComm        C:\windows\WindowsMobile\wcescomm.dll
17:11:34.0963 0x1ab4  WcesComm - ok
17:11:34.0993 0x1ab4  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\windows\System32\wcncsvc.dll
17:11:35.0003 0x1ab4  wcncsvc - ok
17:11:35.0043 0x1ab4  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
17:11:35.0046 0x1ab4  WcsPlugInService - ok
17:11:35.0086 0x1ab4  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\windows\system32\drivers\wd.sys
17:11:35.0087 0x1ab4  Wd - ok
17:11:35.0172 0x1ab4  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
17:11:35.0188 0x1ab4  Wdf01000 - ok
17:11:35.0218 0x1ab4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\windows\system32\wdi.dll
17:11:35.0221 0x1ab4  WdiServiceHost - ok
17:11:35.0231 0x1ab4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\windows\system32\wdi.dll
17:11:35.0235 0x1ab4  WdiSystemHost - ok
17:11:35.0281 0x1ab4  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient      C:\windows\System32\webclnt.dll
17:11:35.0303 0x1ab4  WebClient - ok
17:11:35.0329 0x1ab4  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\windows\system32\wecsvc.dll
17:11:35.0339 0x1ab4  Wecsvc - ok
17:11:35.0369 0x1ab4  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\windows\System32\wercplsupport.dll
17:11:35.0379 0x1ab4  wercplsupport - ok
17:11:35.0399 0x1ab4  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\windows\System32\WerSvc.dll
17:11:35.0399 0x1ab4  WerSvc - ok
17:11:35.0439 0x1ab4  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
17:11:35.0439 0x1ab4  WfpLwf - ok
17:11:35.0449 0x1ab4  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\windows\system32\drivers\wimmount.sys
17:11:35.0459 0x1ab4  WIMMount - ok
17:11:35.0479 0x1ab4  WinDefend - ok
17:11:35.0489 0x1ab4  WinHttpAutoProxySvc - ok
17:11:35.0569 0x1ab4  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\windows\system32\wbem\WMIsvc.dll
17:11:35.0589 0x1ab4  Winmgmt - ok
17:11:35.0729 0x1ab4  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM          C:\windows\system32\WsmSvc.dll
17:11:35.0829 0x1ab4  WinRM - ok
17:11:35.0909 0x1ab4  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys
17:11:35.0919 0x1ab4  WinUsb - ok
17:11:35.0979 0x1ab4  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\windows\System32\wlansvc.dll
17:11:36.0061 0x1ab4  Wlansvc - ok
17:11:36.0232 0x1ab4  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:11:36.0287 0x1ab4  wlidsvc - ok
17:11:36.0331 0x1ab4  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\windows\system32\drivers\wmiacpi.sys
17:11:36.0331 0x1ab4  WmiAcpi - ok
17:11:36.0381 0x1ab4  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
17:11:36.0391 0x1ab4  wmiApSrv - ok
17:11:36.0411 0x1ab4  WMPNetworkSvc - ok
17:11:36.0431 0x1ab4  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\windows\System32\wpcsvc.dll
17:11:36.0431 0x1ab4  WPCSvc - ok
17:11:36.0451 0x1ab4  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
17:11:36.0461 0x1ab4  WPDBusEnum - ok
17:11:36.0491 0x1ab4  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\windows\system32\drivers\ws2ifsl.sys
17:11:36.0491 0x1ab4  ws2ifsl - ok
17:11:36.0511 0x1ab4  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\windows\System32\wscsvc.dll
17:11:36.0511 0x1ab4  wscsvc - ok
17:11:36.0521 0x1ab4  WSearch - ok
17:11:36.0661 0x1ab4  [ 31F32E0C1A8BA9A37EEC23DE5F27F847, 0180832BC6172C9A4C32B5B222BB3F91EA615A5EBDA98DB79ED4FED258C2D257 ] wuauserv        C:\windows\system32\wuaueng.dll
17:11:36.0741 0x1ab4  wuauserv - ok
17:11:36.0771 0x1ab4  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
17:11:36.0781 0x1ab4  WudfPf - ok
17:11:36.0821 0x1ab4  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
17:11:36.0831 0x1ab4  WUDFRd - ok
17:11:36.0851 0x1ab4  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\windows\System32\WUDFSvc.dll
17:11:36.0861 0x1ab4  wudfsvc - ok
17:11:36.0881 0x1ab4  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\windows\System32\wwansvc.dll
17:11:36.0881 0x1ab4  WwanSvc - ok
17:11:36.0901 0x1ab4  ================ Scan global ===============================
17:11:36.0961 0x1ab4  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\windows\system32\basesrv.dll
17:11:37.0001 0x1ab4  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
17:11:37.0060 0x1ab4  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
17:11:37.0105 0x1ab4  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\windows\system32\sxssrv.dll
17:11:37.0141 0x1ab4  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\windows\system32\services.exe
17:11:37.0149 0x1ab4  [ Global ] - ok
17:11:37.0151 0x1ab4  ================ Scan MBR ==================================
17:11:37.0173 0x1ab4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:11:37.0553 0x1ab4  \Device\Harddisk0\DR0 - ok
17:11:37.0553 0x1ab4  ================ Scan VBR ==================================
17:11:37.0573 0x1ab4  [ 0705F560CF61D5EE61FCE46DC97D99F9 ] \Device\Harddisk0\DR0\Partition1
17:11:37.0573 0x1ab4  \Device\Harddisk0\DR0\Partition1 - ok
17:11:37.0593 0x1ab4  [ 89E86E8C7CA58358959D25AD32A5A90E ] \Device\Harddisk0\DR0\Partition2
17:11:37.0593 0x1ab4  \Device\Harddisk0\DR0\Partition2 - ok
17:11:37.0593 0x1ab4  ================ Scan generic autorun ======================
17:11:38.0043 0x1ab4  [ E05849E5D0E51EB52080E7D2987B9D3B, E68E43CF0FFD69C193C5B692A019CE13D3FB58197E5827720B3ACDDE0812AAFA ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
17:11:38.0384 0x1ab4  RTHDVCPL - ok
17:11:38.0416 0x1ab4  [ 8B87D9E466055B958EE24270BF187512, 7A1994398C5A2CEB7738006F375C12E5AAC9142786783189E7C57AB8E1E75F3C ] C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe
17:11:38.0416 0x1ab4  BtServer - ok
17:11:38.0556 0x1ab4  [ 0A892ED5ECB5C821DE71EF523DC71C78, 47F54D1148C615BE2E4F3355F5392B530A843736E7B9DFB888871F24B6E355CA ] C:\Program Files\Elantech\ETDCtrl.exe
17:11:38.0606 0x1ab4  ETDCtrl - ok
17:11:38.0666 0x1ab4  [ 815F6E3727453C978FFD721B2BDF48A5, E33A85E8EF80C662C84F705080585B35A899F8E588E8481D48538BA1224B5E57 ] C:\Program Files (x86)\SCM\Radio Manager.exe
17:11:38.0666 0x1ab4  Radio Manager - ok
17:11:38.0696 0x1ab4  [ 679119AAB80584EA5646B53F4779F86E, 57BE842AF59544ABE7E8F6AF2E0E106E7F7C681A2923BD156403F6E8335BAD5D ] C:\Program Files (x86)\SCM\SCM.exe
17:11:38.0706 0x1ab4  SCM - ok
17:11:38.0706 0x1ab4  IntelTBRunOnce - ok
17:11:38.0736 0x1ab4  [ 2E48CB664239B71FA40D9583FCB39860, EAFF430D91AD30AEF9D9FA6E7F3CB6217C6ACD519F1EE31351506445EED15D9C ] C:\windows\system32\igfxtray.exe
17:11:38.0746 0x1ab4  IgfxTray - ok
17:11:38.0776 0x1ab4  [ A491FFC9A3E69336AA5D4A065B42C8F8, 7DE6E7FD751C40B6CD1D059CC086307E0D11620642A36805C56C0F451E4412CD ] C:\windows\system32\hkcmd.exe
17:11:38.0776 0x1ab4  HotKeysCmds - ok
17:11:38.0796 0x1ab4  [ FF6659185BD54E9E5DE619CA1C2CD5B2, 0573634F7F69A41E0CAFCEDA8203DA26726BF77CBD6FD9FB9258D78691629E30 ] C:\windows\system32\igfxpers.exe
17:11:38.0806 0x1ab4  Persistence - ok
17:11:38.0846 0x1ab4  [ 233A10D4B3F6897899112E4EC60F1906, 1F7E768E57064938114DF2EFC5B219EB0D30A7D9E574924E9CED054462505AF0 ] C:\windows\WindowsMobile\wmdcBase.exe
17:11:38.0866 0x1ab4  Windows Mobile-based device management - ok
17:11:39.0056 0x1ab4  [ 666FEA598D1776C7F8EDD7746F0F7F59, 54E330BCDBAB646B555DACC15F9CFB0AD6A05BF4E273F73C5133259EEE976C21 ] C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
17:11:39.0104 0x1ab4  Malwarebytes TrayApp - ok
17:11:39.0136 0x1ab4  [ B00F98FF6FE8682FF941BEB2559BF191, EB443E294C5609F426BF6EE388F3A4B71EFE2C6A8216C0F6DE7AE6DB382BF620 ] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
17:11:39.0139 0x1ab4  YouCam Mirage - ok
17:11:39.0168 0x1ab4  [ 15A69FE13459EF81FB2105CC986AF394, 2078EAFEA0F00D155EDE6DA40BFBE6E8347DB19078FBD52DFA2122FB439BD9E9 ] C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe
17:11:39.0172 0x1ab4  YouCam Tray - ok
17:11:39.0234 0x1ab4  [ 27B3D4706E8EBC4B870F1D177EBC54B2, 34CD55E4BA687E38BD88B36A25B187DFF591F2D747ADD4D9BD22C071B48468F0 ] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
17:11:39.0243 0x1ab4  Super-Charger - ok
17:11:39.0351 0x1ab4  [ 2B282A4050FE3B4B70EF9E3070BBFF78, 019B667781F5CE411AEB569EAA4095FA2B9942E43A6A1DFC6EEBB2DA214131FE ] C:\Program Files (x86)\FreePDF_XP\fpassist.exe
17:11:39.0371 0x1ab4  FreePDF Assistant - ok
17:11:39.0531 0x1ab4  [ AF905BC023A0018F7325FD4B0019B5C0, 9F65DE0C3D8B90295B70528ADD2411CC1771AC089B70ABEC426D6F2D5D7A104A ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
17:11:39.0531 0x1ab4  APSDaemon - ok
17:11:39.0621 0x1ab4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
17:11:39.0671 0x1ab4  Sidebar - ok
17:11:39.0701 0x1ab4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
17:11:39.0701 0x1ab4  mctadmin - ok
17:11:39.0741 0x1ab4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
17:11:39.0761 0x1ab4  Sidebar - ok
17:11:39.0771 0x1ab4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
17:11:39.0771 0x1ab4  mctadmin - ok
17:11:39.0831 0x1ab4  [ B88EC3510D74D3E7C2F7E68610DA8C45, 09A5715B65A19F7447C247484E1D5B096434EA9EC03689E48F781B6F33C0B858 ] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
17:11:39.0861 0x1ab4  Web Companion - ok
17:11:39.0881 0x1ab4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
17:11:39.0901 0x1ab4  Sidebar - ok
17:11:39.0911 0x1ab4  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
17:11:39.0911 0x1ab4  mctadmin - ok
17:11:39.0911 0x1ab4  Waiting for KSN requests completion. In queue: 135
17:11:40.0953 0x1ab4  AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.134 ), 0x61000 ( enabled : updated )
17:11:40.0983 0x1ab4  Win FW state via NFP2: enabled ( trusted )
17:11:41.0154 0x1ab4  ============================================================
17:11:41.0154 0x1ab4  Scan finished
17:11:41.0154 0x1ab4  ============================================================
17:11:41.0162 0x18e0  Detected object count: 0
17:11:41.0162 0x18e0  Actual detected object count: 0
17:12:20.0654 0x18f4  Deinitialize success

cosinus 13.01.2017 19:03
Zitat:
17:11:00.0233 0x1ab4 Scan started
17:11:00.0233 0x1ab4 Mode: Manual;
tdsskiller wurde falsch eingestellt, bitte Anleitung richtig lesen und umsetzen

milkit54 13.01.2017 21:36
Entschuldigung Cosinus, hoffe diesmal habe ich es rchtig gemacht. MS-Michael

Code:
21:12:52.0112 0x187c  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
21:13:51.0747 0x187c  ============================================================
21:13:51.0747 0x187c  Current date / time: 2017/01/13 21:13:51.0747
21:13:51.0747 0x187c  SystemInfo:
21:13:51.0747 0x187c 
21:13:51.0747 0x187c  OS Version: 6.1.7601 ServicePack: 1.0
21:13:51.0747 0x187c  Product type: Workstation
21:13:51.0747 0x187c  ComputerName: MICHA-MSI
21:13:51.0747 0x187c  UserName: Micha
21:13:51.0747 0x187c  Windows directory: C:\windows
21:13:51.0747 0x187c  System windows directory: C:\windows
21:13:51.0747 0x187c  Running under WOW64
21:13:51.0747 0x187c  Processor architecture: Intel x64
21:13:51.0747 0x187c  Number of processors: 2
21:13:51.0747 0x187c  Page size: 0x1000
21:13:51.0747 0x187c  Boot type: Normal boot
21:13:51.0747 0x187c  CodeIntegrityOptions = 0x00000001
21:13:51.0747 0x187c  ============================================================
21:13:53.0395 0x187c  KLMD registered as C:\windows\system32\drivers\09792759.sys
21:13:53.0395 0x187c  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x1
21:13:53.0737 0x187c  System UUID: {200DC177-E40D-48B4-4F9D-F09300A0C18B}
21:13:54.0369 0x187c  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:13:54.0389 0x187c  ============================================================
21:13:54.0389 0x187c  \Device\Harddisk0\DR0:
21:13:54.0389 0x187c  MBR partitions:
21:13:54.0389 0x187c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x16AC800, BlocksNum 0x2214F000
21:13:54.0389 0x187c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x237FB800, BlocksNum 0x16B8A800
21:13:54.0389 0x187c  ============================================================
21:13:54.0409 0x187c  C: <-> \Device\Harddisk0\DR0\Partition1
21:13:54.0459 0x187c  D: <-> \Device\Harddisk0\DR0\Partition2
21:13:54.0459 0x187c  ============================================================
21:13:54.0459 0x187c  Initialize success
21:13:54.0459 0x187c  ============================================================
21:19:21.0816 0x187c  ============================================================
21:19:21.0816 0x187c  Scan started
21:19:21.0816 0x187c  Mode: Manual; SigCheck; TDLFS;
21:19:21.0816 0x187c  ============================================================
21:19:21.0816 0x187c  KSN ping started
21:19:34.0125 0x187c  KSN ping finished: true
21:19:35.0113 0x187c  ================ Scan system memory ========================
21:19:35.0113 0x187c  System memory - ok
21:19:35.0113 0x187c  ================ Scan services =============================
21:19:35.0263 0x187c  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
21:19:35.0463 0x187c  1394ohci - ok
21:19:35.0503 0x187c  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\windows\system32\drivers\ACPI.sys
21:19:35.0523 0x187c  ACPI - ok
21:19:35.0533 0x187c  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\windows\system32\drivers\acpipmi.sys
21:19:35.0633 0x187c  AcpiPmi - ok
21:19:35.0743 0x187c  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:19:35.0853 0x187c  AdobeARMservice - ok
21:19:35.0973 0x187c  [ CA363F172E1978FD155764F2840B0BE8, CB14E2C94ABB8C8809F4E96472F6D1A9A3A0860217631F592E0F62F043165575 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:19:36.0039 0x187c  AdobeFlashPlayerUpdateSvc - ok
21:19:36.0083 0x187c  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\windows\system32\drivers\adp94xx.sys
21:19:36.0106 0x187c  adp94xx - ok
21:19:36.0122 0x187c  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\windows\system32\drivers\adpahci.sys
21:19:36.0142 0x187c  adpahci - ok
21:19:36.0158 0x187c  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\windows\system32\drivers\adpu320.sys
21:19:36.0174 0x187c  adpu320 - ok
21:19:36.0218 0x187c  [ 262D7C87D0AC20B96EF9877D3CA478A0, 54F7E5A5F8991C5525500C1ECCF3D3135D13F48866C366E52DF1D052DB2EE15B ] AeLookupSvc    C:\windows\System32\aelupsvc.dll
21:19:36.0268 0x187c  AeLookupSvc - ok
21:19:36.0328 0x187c  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD            C:\windows\system32\drivers\afd.sys
21:19:36.0428 0x187c  AFD - ok
21:19:36.0468 0x187c  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\windows\system32\drivers\agp440.sys
21:19:36.0488 0x187c  agp440 - ok
21:19:36.0528 0x187c  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\windows\System32\alg.exe
21:19:36.0588 0x187c  ALG - ok
21:19:36.0618 0x187c  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\windows\system32\drivers\aliide.sys
21:19:36.0628 0x187c  aliide - ok
21:19:36.0658 0x187c  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\windows\system32\drivers\amdide.sys
21:19:36.0678 0x187c  amdide - ok
21:19:36.0698 0x187c  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\windows\system32\drivers\amdk8.sys
21:19:36.0738 0x187c  AmdK8 - ok
21:19:36.0748 0x187c  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\windows\system32\drivers\amdppm.sys
21:19:36.0788 0x187c  AmdPPM - ok
21:19:36.0808 0x187c  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\windows\system32\drivers\amdsata.sys
21:19:36.0828 0x187c  amdsata - ok
21:19:36.0848 0x187c  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
21:19:36.0868 0x187c  amdsbs - ok
21:19:36.0888 0x187c  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\windows\system32\drivers\amdxata.sys
21:19:36.0898 0x187c  amdxata - ok
21:19:36.0978 0x187c  [ 59D01FA91962C9C1E9B4022B2D3B46DB, 3A111588538B77F010B5C900FB8425DDE55A08DBAC308CA7FB7BD9FCCCDEC69F ] AppHostSvc      C:\windows\system32\inetsrv\apphostsvc.dll
21:19:37.0068 0x187c  AppHostSvc - ok
21:19:37.0112 0x187c  [ FCE5C79717A487BDC71F3DEC78A684CA, F5520F112A4EBDD10444AA5E9FDB9125219FCF768FEB95AB608BC84D60136816 ] AppID          C:\windows\system32\drivers\appid.sys
21:19:37.0193 0x187c  AppID - ok
21:19:37.0244 0x187c  [ 8921E1D8AE5171691F186A7C5B98B630, 4A37313BB94D4B49D0294C9439AD0793DE328F9F4DA1C47E34E6ACEA46AF6E14 ] AppIDSvc        C:\windows\System32\appidsvc.dll
21:19:37.0279 0x187c  AppIDSvc - ok
21:19:37.0301 0x187c  [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo        C:\windows\System32\appinfo.dll
21:19:37.0311 0x187c  Appinfo - ok
21:19:37.0341 0x187c  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\windows\system32\drivers\arc.sys
21:19:37.0361 0x187c  arc - ok
21:19:37.0361 0x187c  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\windows\system32\drivers\arcsas.sys
21:19:37.0381 0x187c  arcsas - ok
21:19:37.0471 0x187c  [ EE424A5CE56E3923D59BB7DE2E15036D, 8B8196870EFE74D43EDA72674021A46846D370E97A6A058134D84A721AECD091 ] aspnet_state    C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:19:37.0501 0x187c  aspnet_state - ok
21:19:37.0541 0x187c  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
21:19:37.0721 0x187c  AsyncMac - ok
21:19:37.0761 0x187c  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\windows\system32\drivers\atapi.sys
21:19:37.0801 0x187c  atapi - ok
21:19:37.0861 0x187c  [ E857EEE6B92AAA473EBB3465ADD8F7E7, 1C7E4737E649A025B3C4974A4F7D1353EAB85561FC8ED54E5C22A777E1A189B3 ] athr            C:\windows\system32\DRIVERS\athrx.sys
21:19:37.0973 0x187c  athr - ok
21:19:38.0077 0x187c  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
21:19:38.0183 0x187c  AudioEndpointBuilder - ok
21:19:38.0225 0x187c  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\windows\System32\Audiosrv.dll
21:19:38.0260 0x187c  AudioSrv - ok
21:19:38.0353 0x187c  [ C4EEE661379D86429ACEAB31F3FD0391, D67F5D6863B066D974567521A00A48C50F0D9B6F6B16565FF8958E2020C651FD ] AvrcpService    C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe
21:19:38.0403 0x187c  AvrcpService - detected UnsignedFile.Multi.Generic ( 1 )
21:19:38.0573 0x187c  Detect skipped due to KSN trusted
21:19:38.0573 0x187c  AvrcpService - ok
21:19:38.0623 0x187c  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\windows\System32\AxInstSV.dll
21:19:38.0723 0x187c  AxInstSV - ok
21:19:38.0763 0x187c  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\windows\system32\drivers\bxvbda.sys
21:19:38.0853 0x187c  b06bdrv - ok
21:19:38.0873 0x187c  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\windows\system32\DRIVERS\b57nd60a.sys
21:19:38.0935 0x187c  b57nd60a - ok
21:19:38.0965 0x187c  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\windows\System32\bdesvc.dll
21:19:39.0015 0x187c  BDESVC - ok
21:19:39.0056 0x187c  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\windows\system32\drivers\Beep.sys
21:19:39.0113 0x187c  Beep - ok
21:19:39.0166 0x187c  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\windows\System32\bfe.dll
21:19:39.0235 0x187c  BFE - ok
21:19:39.0321 0x187c  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\windows\System32\qmgr.dll
21:19:39.0511 0x187c  BITS - ok
21:19:39.0571 0x187c  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\windows\system32\drivers\blbdrive.sys
21:19:39.0621 0x187c  blbdrive - ok
21:19:39.0731 0x187c  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:19:39.0761 0x187c  Bonjour Service - ok
21:19:39.0811 0x187c  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\windows\system32\DRIVERS\bowser.sys
21:19:39.0891 0x187c  bowser - ok
21:19:39.0911 0x187c  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\windows\system32\drivers\BrFiltLo.sys
21:19:39.0951 0x187c  BrFiltLo - ok
21:19:39.0971 0x187c  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\windows\system32\drivers\BrFiltUp.sys
21:19:40.0021 0x187c  BrFiltUp - ok
21:19:40.0056 0x187c  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\windows\System32\browser.dll
21:19:40.0105 0x187c  Browser - ok
21:19:40.0114 0x187c  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\windows\System32\Drivers\Brserid.sys
21:19:40.0194 0x187c  Brserid - ok
21:19:40.0199 0x187c  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
21:19:40.0233 0x187c  BrSerWdm - ok
21:19:40.0238 0x187c  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
21:19:40.0258 0x187c  BrUsbMdm - ok
21:19:40.0262 0x187c  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
21:19:40.0292 0x187c  BrUsbSer - ok
21:19:40.0315 0x187c  [ FB38F90DE58996A4906A04F1152C3C3B, DA4A226FAE045174891A0EBFA03E1905CAF0AA25ADDBBCFBE369A853A63A83C6 ] BTDevManager    C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
21:19:40.0345 0x187c  BTDevManager - detected UnsignedFile.Multi.Generic ( 1 )
21:19:40.0717 0x187c  Detect skipped due to KSN trusted
21:19:40.0717 0x187c  BTDevManager - ok
21:19:40.0747 0x187c  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum        C:\windows\system32\DRIVERS\BthEnum.sys
21:19:40.0857 0x187c  BthEnum - ok
21:19:40.0867 0x187c  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\windows\system32\drivers\bthmodem.sys
21:19:40.0927 0x187c  BTHMODEM - ok
21:19:40.0979 0x187c  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
21:19:41.0009 0x187c  BthPan - ok
21:19:41.0039 0x187c  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT        C:\windows\system32\Drivers\BTHport.sys
21:19:41.0131 0x187c  BTHPORT - ok
21:19:41.0170 0x187c  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\windows\system32\bthserv.dll
21:19:41.0227 0x187c  bthserv - ok
21:19:41.0264 0x187c  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\windows\system32\Drivers\BTHUSB.sys
21:19:41.0306 0x187c  BTHUSB - ok
21:19:41.0351 0x187c  [ E41F70406C34F1CB667B4B27D81AD162, 8869C7EB9CBF68B90640765D15DB5B8DACEF45025C1E580AA94D96E32560274B ] ccSet_NARA      C:\windows\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys
21:19:41.0371 0x187c  ccSet_NARA - ok
21:19:41.0401 0x187c  [ A5C13600F63EB92F8D15123D64BA9895, 16683BDDD32525741FDE4505B9C224382047CC8EE9A7DB35FF0FDF32F7D731F8 ] ccSet_NAT      C:\windows\system32\drivers\NATx64\0106000.011\ccSetx64.sys
21:19:41.0411 0x187c  ccSet_NAT - ok
21:19:41.0441 0x187c  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
21:19:41.0481 0x187c  cdfs - ok
21:19:41.0511 0x187c  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\windows\system32\DRIVERS\cdrom.sys
21:19:41.0541 0x187c  cdrom - ok
21:19:41.0571 0x187c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\windows\System32\certprop.dll
21:19:41.0621 0x187c  CertPropSvc - ok
21:19:41.0641 0x187c  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\windows\system32\drivers\circlass.sys
21:19:41.0671 0x187c  circlass - ok
21:19:41.0691 0x187c  [ FF60401F1C659CA2ED4BAE85D3FD14DA, 71EEA0078E1545A2F80B0020BE7113843B713DE1A5CC20D9810BD9F3889A4DB0 ] CISVC          C:\windows\system32\CISVC.EXE
21:19:41.0731 0x187c  CISVC - ok
21:19:41.0791 0x187c  [ 3D67C27DD17B254D7915FA16A5AE3573, 5B3A6C6A7F940C06362775DAF13CEADA37C7AA84A509458A57C23B4369970A90 ] CLFS            C:\windows\system32\CLFS.sys
21:19:41.0821 0x187c  CLFS - ok
21:19:41.0881 0x187c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:19:41.0901 0x187c  clr_optimization_v2.0.50727_32 - ok
21:19:41.0951 0x187c  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:19:41.0961 0x187c  clr_optimization_v2.0.50727_64 - ok
21:19:42.0001 0x187c  [ 5BAF4F1296D4D91FC28560CDB4C37C4B, ACA4BC57ED1F8432F18F0F215EC7FF956BAEF6E02760779E264E4008A979E9DD ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:19:42.0021 0x187c  clr_optimization_v4.0.30319_32 - ok
21:19:42.0062 0x187c  [ 569B54004A7E85A74FD92841DE6058E2, 58949313D0F6B1C06359B2F3C68E29940B1655A17E93FFC3718F6D2EAE1633E4 ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:19:42.0080 0x187c  clr_optimization_v4.0.30319_64 - ok
21:19:42.0112 0x187c  [ E13A438F9E51DD034730678E33B73290, 3BB111DFDAEAB8DA6124600C7F6E080C2950A0BB420803FC12560343E1A9280A ] clwvd          C:\windows\system32\DRIVERS\clwvd.sys
21:19:42.0125 0x187c  clwvd - ok
21:19:42.0140 0x187c  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
21:19:42.0173 0x187c  CmBatt - ok
21:19:42.0192 0x187c  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\windows\system32\drivers\cmdide.sys
21:19:42.0205 0x187c  cmdide - ok
21:19:42.0230 0x187c  [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG            C:\windows\system32\Drivers\cng.sys
21:19:42.0258 0x187c  CNG - ok
21:19:42.0278 0x187c  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\windows\system32\drivers\compbatt.sys
21:19:42.0291 0x187c  Compbatt - ok
21:19:42.0304 0x187c  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys
21:19:42.0336 0x187c  CompositeBus - ok
21:19:42.0336 0x187c  COMSysApp - ok
21:19:42.0446 0x187c  [ 3A92DDB2F7B7FE2E71AA1418804EBC3C, 1B84033A6DDB9D371AC34F8D65AB0F729E8A77B0D26C8DCA0965CE265474BD64 ] cphs            C:\windows\SysWow64\IntelCpHeciSvc.exe
21:19:42.0486 0x187c  cphs - ok
21:19:42.0496 0x187c  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\windows\system32\drivers\crcdisk.sys
21:19:42.0516 0x187c  crcdisk - ok
21:19:42.0546 0x187c  [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc        C:\windows\system32\cryptsvc.dll
21:19:42.0596 0x187c  CryptSvc - ok
21:19:42.0626 0x187c  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] DcomLaunch      C:\windows\system32\rpcss.dll
21:19:42.0716 0x187c  DcomLaunch - ok
21:19:42.0756 0x187c  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\windows\System32\defragsvc.dll
21:19:42.0816 0x187c  defragsvc - ok
21:19:42.0876 0x187c  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\windows\system32\Drivers\dfsc.sys
21:19:42.0956 0x187c  DfsC - ok
21:19:42.0986 0x187c  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\windows\system32\dhcpcore.dll
21:19:43.0026 0x187c  Dhcp - ok
21:19:43.0115 0x187c  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack      C:\windows\system32\diagtrack.dll
21:19:43.0220 0x187c  DiagTrack - ok
21:19:43.0258 0x187c  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\windows\system32\drivers\discache.sys
21:19:43.0292 0x187c  discache - ok
21:19:43.0330 0x187c  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\windows\system32\drivers\disk.sys
21:19:43.0340 0x187c  Disk - ok
21:19:43.0370 0x187c  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\windows\System32\dnsrslvr.dll
21:19:43.0420 0x187c  Dnscache - ok
21:19:43.0440 0x187c  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\windows\System32\dot3svc.dll
21:19:43.0480 0x187c  dot3svc - ok
21:19:43.0500 0x187c  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\windows\system32\dps.dll
21:19:43.0550 0x187c  DPS - ok
21:19:43.0570 0x187c  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud        C:\windows\system32\drivers\drmkaud.sys
21:19:43.0630 0x187c  drmkaud - ok
21:19:43.0740 0x187c  [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl        C:\windows\System32\drivers\dxgkrnl.sys
21:19:43.0770 0x187c  DXGKrnl - ok
21:19:43.0800 0x187c  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\windows\System32\eapsvc.dll
21:19:43.0840 0x187c  EapHost - ok
21:19:43.0954 0x187c  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\windows\system32\drivers\evbda.sys
21:19:44.0062 0x187c  ebdrv - ok
21:19:44.0103 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] EFS            C:\windows\System32\lsass.exe
21:19:44.0131 0x187c  EFS - ok
21:19:44.0189 0x187c  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\windows\ehome\ehRecvr.exe
21:19:44.0237 0x187c  ehRecvr - ok
21:19:44.0258 0x187c  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\windows\ehome\ehsched.exe
21:19:44.0295 0x187c  ehSched - ok
21:19:44.0339 0x187c  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\windows\system32\drivers\elxstor.sys
21:19:44.0359 0x187c  elxstor - ok
21:19:44.0359 0x187c  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\windows\system32\drivers\errdev.sys
21:19:44.0389 0x187c  ErrDev - ok
21:19:44.0429 0x187c  [ 4D7F3114147C31390262F19F74E5BF07, E89F5304149B51327DFE1314AE13352923B752BC24585FF42F28EF5F00936A6A ] ESProtectionDriver C:\windows\system32\drivers\mbae64.sys
21:19:44.0459 0x187c  ESProtectionDriver - ok
21:19:44.0479 0x187c  [ 39EC51A5BC3E1C0D438E8AC70956DE0A, 456AE9C6E059442CA627AAB667CA498AA6F6A6812A177DCCB36D9CC24F11231A ] ETD            C:\windows\system32\DRIVERS\ETD.sys
21:19:44.0499 0x187c  ETD - ok
21:19:44.0569 0x187c  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\windows\system32\es.dll
21:19:44.0651 0x187c  EventSystem - ok
21:19:44.0681 0x187c  [ 8ADACFFAD67394C711698EA074CE3BAB, 02793393584762224D87C487D80080D6DBCD09192098A7A1399CA16C17886C5D ] ewusbnet        C:\windows\system32\DRIVERS\ewusbnet.sys
21:19:44.0741 0x187c  ewusbnet - ok
21:19:44.0771 0x187c  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\windows\system32\drivers\exfat.sys
21:19:44.0861 0x187c  exfat - ok
21:19:44.0931 0x187c  Fabs - ok
21:19:44.0961 0x187c  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\windows\system32\drivers\fastfat.sys
21:19:45.0011 0x187c  fastfat - ok
21:19:45.0077 0x187c  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\windows\system32\fxssvc.exe
21:19:45.0132 0x187c  Fax - ok
21:19:45.0158 0x187c  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\windows\system32\drivers\fdc.sys
21:19:45.0185 0x187c  fdc - ok
21:19:45.0216 0x187c  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\windows\system32\fdPHost.dll
21:19:45.0263 0x187c  fdPHost - ok
21:19:45.0289 0x187c  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\windows\system32\fdrespub.dll
21:19:45.0324 0x187c  FDResPub - ok
21:19:45.0376 0x187c  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
21:19:45.0406 0x187c  FileInfo - ok
21:19:45.0416 0x187c  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\windows\system32\drivers\filetrace.sys
21:19:45.0466 0x187c  Filetrace - ok
21:19:45.0576 0x187c  [ FFF1130F7C9FA01D093A1EDFC5CCE8FC, 159EAA1893D871C309A063829CB3BC51A019FBCA1E07530B5CA1A382B2CCAF61 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
21:19:45.0676 0x187c  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic ( 1 )
21:19:45.0896 0x187c  Detect skipped due to KSN trusted
21:19:45.0896 0x187c  FirebirdServerMAGIXInstance - ok
21:19:45.0916 0x187c  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\windows\system32\drivers\flpydisk.sys
21:19:45.0956 0x187c  flpydisk - ok
21:19:46.0006 0x187c  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
21:19:46.0026 0x187c  FltMgr - ok
21:19:46.0086 0x187c  [ 700A5373FA66F1DAAECBD2CFB88C73ED, D6C1C4C846BC24EB6539ECC701A456FA53BB6679C79391F5B70580D47B6CE395 ] FontCache      C:\windows\system32\FntCache.dll
21:19:46.0188 0x187c  FontCache - ok
21:19:46.0228 0x187c  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:19:46.0258 0x187c  FontCache3.0.0.0 - ok
21:19:46.0278 0x187c  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\windows\system32\drivers\FsDepends.sys
21:19:46.0298 0x187c  FsDepends - ok
21:19:46.0338 0x187c  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
21:19:46.0358 0x187c  Fs_Rec - ok
21:19:46.0378 0x187c  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
21:19:46.0398 0x187c  fvevol - ok
21:19:46.0418 0x187c  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys
21:19:46.0438 0x187c  gagp30kx - ok
21:19:46.0488 0x187c  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc          C:\windows\System32\gpsvc.dll
21:19:46.0558 0x187c  gpsvc - ok
21:19:46.0618 0x187c  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:19:46.0638 0x187c  gupdate - ok
21:19:46.0649 0x187c  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:19:46.0664 0x187c  gupdatem - ok
21:19:46.0680 0x187c  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
21:19:46.0760 0x187c  hcw85cir - ok
21:19:46.0790 0x187c  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
21:19:46.0830 0x187c  HdAudAddService - ok
21:19:46.0860 0x187c  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\windows\system32\DRIVERS\HDAudBus.sys
21:19:46.0920 0x187c  HDAudBus - ok
21:19:46.0940 0x187c  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\windows\system32\drivers\HidBatt.sys
21:19:46.0960 0x187c  HidBatt - ok
21:19:46.0970 0x187c  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\windows\system32\drivers\hidbth.sys
21:19:47.0010 0x187c  HidBth - ok
21:19:47.0020 0x187c  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\windows\system32\drivers\hidir.sys
21:19:47.0068 0x187c  HidIr - ok
21:19:47.0100 0x187c  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\windows\system32\hidserv.dll
21:19:47.0155 0x187c  hidserv - ok
21:19:47.0195 0x187c  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys
21:19:47.0242 0x187c  HidUsb - ok
21:19:47.0266 0x187c  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\windows\system32\kmsvc.dll
21:19:47.0315 0x187c  hkmsvc - ok
21:19:47.0335 0x187c  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\windows\system32\ListSvc.dll
21:19:47.0375 0x187c  HomeGroupListener - ok
21:19:47.0405 0x187c  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\windows\system32\provsvc.dll
21:19:47.0445 0x187c  HomeGroupProvider - ok
21:19:47.0485 0x187c  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
21:19:47.0525 0x187c  HpSAMD - ok
21:19:47.0615 0x187c  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\windows\system32\drivers\HTTP.sys
21:19:47.0665 0x187c  HTTP - ok
21:19:47.0705 0x187c  [ D969D0E26C5B1E813B17066A8318D5D4, 27308902D216CD38F40B9341F40AFDCFEC09EA3122FB88E7C7A5C42D0433315D ] hwdatacard      C:\windows\system32\DRIVERS\ewusbmdm.sys
21:19:47.0745 0x187c  hwdatacard - ok
21:19:47.0785 0x187c  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
21:19:47.0825 0x187c  hwpolicy - ok
21:19:47.0865 0x187c  [ B45B3647BA32749B94FA689175EC8C26, F0876ECA6FA66A296DB7E11FA9E4094D96064AE87EC21CC752C9B7E6A7DFEDD2 ] hwusbdev        C:\windows\system32\DRIVERS\ewusbdev.sys
21:19:47.0915 0x187c  hwusbdev - ok
21:19:47.0958 0x187c  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\windows\system32\DRIVERS\i8042prt.sys
21:19:47.0986 0x187c  i8042prt - ok
21:19:48.0027 0x187c  [ B9E489CC1EA3284FEED33799DC70612D, 0DD714A3A37C391B38F4EEEB3F85C3C3C056F4AAB4A5EFA63835AD967BC25B51 ] iaStorA        C:\windows\system32\drivers\iaStorA.sys
21:19:48.0063 0x187c  iaStorA - ok
21:19:48.0162 0x187c  [ 3AEE4C821114AC707699A28988F27ABB, 033A25A19E2A649DA059AE3BCACB8605C00D4F10D356C5E3167B84C01B9359A9 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:19:48.0184 0x187c  IAStorDataMgrSvc - ok
21:19:48.0230 0x187c  [ CC096E5C9BAABEB8EF12CDFAFFD888CF, 9D61736CB83DE04FC44FB25122AB6D09951C915E577E1A18188D4D5F35EACD76 ] iaStorF        C:\windows\system32\drivers\iaStorF.sys
21:19:48.0243 0x187c  iaStorF - ok
21:19:48.0274 0x187c  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\windows\system32\drivers\iaStorV.sys
21:19:48.0295 0x187c  iaStorV - ok
21:19:48.0341 0x187c  [ 1B904E09172A2D63CB728F56B9DC72AA, E83D8A55319B378EB76A88EF778F69F560C8F2541BBD58151754509008D1A2C5 ] ICCWDT          C:\windows\system32\DRIVERS\ICCWDT.sys
21:19:48.0370 0x187c  ICCWDT - ok
21:19:48.0450 0x187c  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:19:48.0490 0x187c  idsvc - ok
21:19:48.0500 0x187c  IEEtwCollectorService - ok
21:19:48.0676 0x187c  [ 5268F385C889BB942E0F9596DE83373F, 011280191EEF8053CD413734A0B08F5DF88CD8408CD8354AABF2216F4C59F921 ] igfx            C:\windows\system32\DRIVERS\igdkmd64.sys
21:19:48.0850 0x187c  igfx - ok
21:19:48.0900 0x187c  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\windows\system32\drivers\iirsp.sys
21:19:48.0930 0x187c  iirsp - ok
21:19:48.0982 0x187c  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\windows\System32\ikeext.dll
21:19:49.0056 0x187c  IKEEXT - ok
21:19:49.0228 0x187c  [ D739148367AAE1DA0C12160DE141ECED, 471E6EA03F2BD7DD1E2812B56EFB00EDDCAA87E974833B75114B8EE93DC358A5 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
21:19:49.0312 0x187c  IntcAzAudAddService - ok
21:19:49.0380 0x187c  [ 0E0B99617ED3FDB6C5F0E2D62709B5DF, A656CA3A60E62BE16A015150B23136CE150F9876B4035E9E8D8E73D1707B37A4 ] IntcDAud        C:\windows\system32\DRIVERS\IntcDAud.sys
21:19:49.0430 0x187c  IntcDAud - ok
21:19:49.0500 0x187c  [ C6128F2E3DC6156C6F8828F9F1B96010, 612C1191AFB8F69BA5634E8C52BDDE608F57D98FA4C76C5A337676A5F1E8191D ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
21:19:49.0540 0x187c  Intel(R) Capability Licensing Service Interface - detected UnsignedFile.Multi.Generic ( 1 )
21:19:49.0922 0x187c  Detect skipped due to KSN trusted
21:19:49.0922 0x187c  Intel(R) Capability Licensing Service Interface - ok
21:19:49.0972 0x187c  [ 729AB4F0608E95EFF8FDEF23596283E2, 62A2091FF440C65505AB3E38436A86D9B0978BCB9485960EFCE0C5CBC8E06201 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
21:19:50.0044 0x187c  Intel(R) Capability Licensing Service TCP IP Interface - ok
21:19:50.0064 0x187c  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\windows\system32\drivers\intelide.sys
21:19:50.0074 0x187c  intelide - ok
21:19:50.0114 0x187c  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
21:19:50.0174 0x187c  intelppm - ok
21:19:50.0204 0x187c  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\windows\system32\ipbusenum.dll
21:19:50.0254 0x187c  IPBusEnum - ok
21:19:50.0274 0x187c  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
21:19:50.0314 0x187c  IpFilterDriver - ok
21:19:50.0344 0x187c  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
21:19:50.0374 0x187c  iphlpsvc - ok
21:19:50.0374 0x187c  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\windows\system32\drivers\IPMIDrv.sys
21:19:50.0404 0x187c  IPMIDRV - ok
21:19:50.0424 0x187c  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\windows\system32\drivers\ipnat.sys
21:19:50.0474 0x187c  IPNAT - ok
21:19:50.0494 0x187c  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\windows\system32\drivers\irenum.sys
21:19:50.0564 0x187c  IRENUM - ok
21:19:50.0584 0x187c  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\windows\system32\drivers\isapnp.sys
21:19:50.0614 0x187c  isapnp - ok
21:19:50.0644 0x187c  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
21:19:50.0674 0x187c  iScsiPrt - ok
21:19:50.0684 0x187c  [ 78D369F8A81A341109FBA1DB64B4C512, E584F693255CCBF7006E7D35984149CF599BB0849A8F02EFDD6223DF0D606049 ] iusb3hcs        C:\windows\system32\drivers\iusb3hcs.sys
21:19:50.0704 0x187c  iusb3hcs - ok
21:19:50.0784 0x187c  [ 5B632ABA038CE2E2D5D2D1115C6B26D1, 605A8FFA704E4369CF9D17DF8630DC9E196B8920D47F1CC5151759E60B234C1F ] iusb3hub        C:\windows\system32\DRIVERS\iusb3hub.sys
21:19:50.0824 0x187c  iusb3hub - ok
21:19:50.0876 0x187c  [ EA841584EF59528D11F20355770E427E, 515737761BB2A0A233F4AD141E28D93E3B9789320A15B7D5FB3DB5AC3CD8E249 ] iusb3xhc        C:\windows\system32\DRIVERS\iusb3xhc.sys
21:19:50.0896 0x187c  iusb3xhc - ok
21:19:50.0972 0x187c  [ 924019BC58FEDDE04A08C45EC1CF1847, F18C581FE5C25C5BE4514185AD44C561EB715B98AFBE81EF0D673E103EA8E8EE ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
21:19:51.0007 0x187c  jhi_service - ok
21:19:51.0038 0x187c  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys
21:19:51.0058 0x187c  kbdclass - ok
21:19:51.0072 0x187c  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
21:19:51.0103 0x187c  kbdhid - ok
21:19:51.0122 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] KeyIso          C:\windows\system32\lsass.exe
21:19:51.0137 0x187c  KeyIso - ok
21:19:51.0174 0x187c  [ 6F5F0C6160EF237F0243C1E416EEBA98, 8BA8AA0D71350A74E294A731226B1638C6059013D645ABDE7188F7733E320FBD ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
21:19:51.0206 0x187c  KSecDD - ok
21:19:51.0230 0x187c  [ 05529E53B286FD60E7EF04EF138CABFD, 6C045750DCD3EE76F748582513AD4FA99C0E8E56B616725CD48DCA1068FF8923 ] KSecPkg        C:\windows\system32\Drivers\ksecpkg.sys
21:19:51.0246 0x187c  KSecPkg - ok
21:19:51.0281 0x187c  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\windows\system32\drivers\ksthunk.sys
21:19:51.0325 0x187c  ksthunk - ok
21:19:51.0395 0x187c  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\windows\system32\msdtckrm.dll
21:19:51.0505 0x187c  KtmRm - ok
21:19:51.0525 0x187c  [ A6131EE7C440992458688C7D0989C584, 94FEB4A6677262BAA590F77329141D9F539D3466D6E9473D639880AA6D5A103C ] L1C            C:\windows\system32\DRIVERS\L1C62x64.sys
21:19:51.0535 0x187c  L1C - ok
21:19:51.0595 0x187c  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\windows\system32\srvsvc.dll
21:19:51.0705 0x187c  LanmanServer - ok
21:19:51.0725 0x187c  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
21:19:51.0775 0x187c  LanmanWorkstation - ok
21:19:51.0895 0x187c  [ B91987F22C206191683F50085B160F4B, B55452540A9C28F14CDEB0A4514E2C6D0440710441673356485CA18165863AE7 ] LavasoftTcpService C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe
21:19:51.0935 0x187c  LavasoftTcpService - ok
21:19:51.0955 0x187c  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
21:19:52.0015 0x187c  lltdio - ok
21:19:52.0071 0x187c  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\windows\System32\lltdsvc.dll
21:19:52.0122 0x187c  lltdsvc - ok
21:19:52.0143 0x187c  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\windows\System32\lmhsvc.dll
21:19:52.0195 0x187c  lmhosts - ok
21:19:52.0263 0x187c  [ EC90A0554EAC7E37139F2DAD8C56FB04, F62DBB7B174A270700631EA590B3293FE558940FB72F84C242391530E1DF78B5 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:19:52.0287 0x187c  LMS - ok
21:19:52.0305 0x187c  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\windows\system32\drivers\lsi_fc.sys
21:19:52.0320 0x187c  LSI_FC - ok
21:19:52.0331 0x187c  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\windows\system32\drivers\lsi_sas.sys
21:19:52.0341 0x187c  LSI_SAS - ok
21:19:52.0361 0x187c  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys
21:19:52.0381 0x187c  LSI_SAS2 - ok
21:19:52.0381 0x187c  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys
21:19:52.0401 0x187c  LSI_SCSI - ok
21:19:52.0441 0x187c  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\windows\system32\drivers\luafv.sys
21:19:52.0471 0x187c  luafv - ok
21:19:52.0501 0x187c  [ 3BEC6134F1E45AEF5E971F69F0D38510, 245D7CEEB6561166EE0472551D39A9D3CFDDA52A6BF2E924AB243CCA7FBC9009 ] MBAMChameleon  C:\windows\system32\drivers\MBAMChameleon.sys
21:19:52.0511 0x187c  MBAMChameleon - ok
21:19:52.0571 0x187c  [ F3960CA85778E5D7611EE0F501972340, 0DE5C8509A9A66C8185B9FAA7EAF69C0FA9C28CD9DE84AA23E128E4FF8E06BF4 ] MBAMFarflt      C:\windows\system32\drivers\farflt.sys
21:19:52.0611 0x187c  MBAMFarflt - ok
21:19:52.0671 0x187c  [ 88BD122C3A35DE63D75D382DF75554CE, ABDF59543CAD186A6ED4E66257205D9CF5047732A5DA74A96A28B468B41BC396 ] MBAMProtection  C:\windows\system32\drivers\mbam.sys
21:19:52.0711 0x187c  MBAMProtection - ok
21:19:52.0943 0x187c  [ 28E521A6ABA9DE062A3719452816F495, B312A37DA052229DFB19353170CD5828582F8AC6426E857CA7C8ACA0DD91C160 ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
21:19:53.0062 0x187c  MBAMService - ok
21:19:53.0103 0x187c  [ ABB371D9AEF728B0489B0E6872B4A1C0, E9539A4F85FE30F5BAED742778CA74C879995728668ABE6877C37633716D8770 ] MBAMSwissArmy  C:\windows\system32\drivers\MBAMSwissArmy.sys
21:19:53.0121 0x187c  MBAMSwissArmy - ok
21:19:53.0171 0x187c  [ 8FF2D95CBA49B405C5DE27039FF0BF35, 03BF7FC7F1C2C76EDB583BA342EA1C325DB8058517744EF2A78529D3938F4DC1 ] MBfilt          C:\windows\system32\drivers\MBfilt64.sys
21:19:53.0198 0x187c  MBfilt - ok
21:19:53.0291 0x187c  [ 1704A8189EE5580AB147CFD25C5C8770, DFA076FD36B5CC844D4BE3B865E9A1F809E14CCB1D78D82A2D8D8EE38210E6EB ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
21:19:53.0319 0x187c  McComponentHostService - ok
21:19:53.0339 0x187c  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\windows\system32\Mcx2Svc.dll
21:19:53.0389 0x187c  Mcx2Svc - ok
21:19:53.0429 0x187c  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\windows\system32\drivers\megasas.sys
21:19:53.0459 0x187c  megasas - ok
21:19:53.0479 0x187c  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys
21:19:53.0499 0x187c  MegaSR - ok
21:19:53.0519 0x187c  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\windows\system32\drivers\HECIx64.sys
21:19:53.0539 0x187c  MEIx64 - ok
21:19:53.0549 0x187c  MGHwCtrl - ok
21:19:53.0599 0x187c  [ 71C6748EE8DE938532057EF10B4B7E44, 455175332156939B3CDA4511A2A6C213ABBFDB85EEECA98B6AB014C994F532C4 ] Micro Star SCM  C:\Program Files (x86)\SCM\MSIService.exe
21:19:53.0609 0x187c  Micro Star SCM - detected UnsignedFile.Multi.Generic ( 1 )
21:19:53.0819 0x187c  Detect skipped due to KSN trusted
21:19:53.0819 0x187c  Micro Star SCM - ok
21:19:53.0859 0x187c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\windows\system32\mmcss.dll
21:19:53.0949 0x187c  MMCSS - ok
21:19:53.0999 0x187c  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\windows\system32\drivers\modem.sys
21:19:54.0065 0x187c  Modem - ok
21:19:54.0099 0x187c  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\windows\system32\DRIVERS\monitor.sys
21:19:54.0137 0x187c  monitor - ok
21:19:54.0153 0x187c  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
21:19:54.0166 0x187c  mouclass - ok
21:19:54.0198 0x187c  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
21:19:54.0249 0x187c  mouhid - ok
21:19:54.0283 0x187c  [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
21:19:54.0304 0x187c  mountmgr - ok
21:19:54.0383 0x187c  [ E464A0A92E2E354D07DDA713D3E10DE4, D5CF213F03DF54EF9933027A7A7D4413371C1ECBFF61E4DE818D50FA72C8C5FC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:19:54.0393 0x187c  MozillaMaintenance - ok
21:19:54.0433 0x187c  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\windows\system32\drivers\mpio.sys
21:19:56.0460 0x187c  mpio - ok
21:19:56.0550 0x187c  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
21:19:56.0610 0x187c  mpsdrv - ok
21:19:56.0660 0x187c  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\windows\system32\mpssvc.dll
21:19:56.0720 0x187c  MpsSvc - ok
21:19:56.0760 0x187c  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
21:19:56.0790 0x187c  MRxDAV - ok
21:19:56.0830 0x187c  [ 632E8A00090E4F85F304E152C92C7F2C, A3098941251A8327C95E6B1122384D54FB0ED705A9215577D968EA5B5FD88C87 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
21:19:56.0910 0x187c  mrxsmb - ok
21:19:56.0960 0x187c  [ 0D9C05484F2F4BD9D33A615D5DBE67EA, 1E164B631B1CD85DD5B205284CB547B189609946490AAABD22741743BFB413DF ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
21:19:56.0980 0x187c  mrxsmb10 - ok
21:19:57.0030 0x187c  [ 6123E6FECC1C164022868FB1982271BE, 417E6C7AFF8B014B31AFCC202B0DCEECBDBB73205DF8C3EFC7E313664E284178 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
21:19:57.0078 0x187c  mrxsmb20 - ok
21:19:57.0098 0x187c  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\windows\system32\drivers\msahci.sys
21:19:57.0119 0x187c  msahci - ok
21:19:57.0154 0x187c  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\windows\system32\drivers\msdsm.sys
21:19:57.0169 0x187c  msdsm - ok
21:19:57.0211 0x187c  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\windows\System32\msdtc.exe
21:19:57.0271 0x187c  MSDTC - ok
21:19:57.0314 0x187c  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\windows\system32\drivers\Msfs.sys
21:19:57.0368 0x187c  Msfs - ok
21:19:57.0378 0x187c  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\windows\System32\drivers\mshidkmdf.sys
21:19:57.0438 0x187c  mshidkmdf - ok
21:19:57.0488 0x187c  [ 87B9DAF6D123EC06C19B41D5295441AD, 2066EA70D85B9F17CA3121D69DB25E2E17C4AFAECB68CC97FFF4A3062099FF0C ] MSI Foundation Service C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe
21:19:57.0508 0x187c  MSI Foundation Service - detected UnsignedFile.Multi.Generic ( 1 )
21:19:58.0048 0x187c  Detect skipped due to KSN trusted
21:19:58.0048 0x187c  MSI Foundation Service - ok
21:19:58.0098 0x187c  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
21:19:58.0118 0x187c  msisadrv - ok
21:19:58.0158 0x187c  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\windows\system32\iscsiexe.dll
21:19:58.0208 0x187c  MSiSCSI - ok
21:19:58.0208 0x187c  msiserver - ok
21:19:58.0248 0x187c  [ 6DC2A478749CB24DC2DCE92A92DE3288, 86D74A6002E16C0ED7B9A933E88DF006E3D9299D14D29A05D61B5BD48E05BE87 ] MSI_SuperCharger C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
21:19:58.0268 0x187c  MSI_SuperCharger - ok
21:19:58.0278 0x187c  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\windows\system32\drivers\MSKSSRV.sys
21:19:58.0328 0x187c  MSKSSRV - ok
21:19:58.0328 0x187c  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
21:19:58.0368 0x187c  MSPCLOCK - ok
21:19:58.0388 0x187c  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\windows\system32\drivers\MSPQM.sys
21:19:58.0418 0x187c  MSPQM - ok
21:19:58.0448 0x187c  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\windows\system32\drivers\MsRPC.sys
21:19:58.0468 0x187c  MsRPC - ok
21:19:58.0508 0x187c  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\windows\system32\drivers\mssmbios.sys
21:19:58.0518 0x187c  mssmbios - ok
21:19:58.0518 0x187c  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\windows\system32\drivers\MSTEE.sys
21:19:58.0568 0x187c  MSTEE - ok
21:19:58.0578 0x187c  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\windows\system32\drivers\MTConfig.sys
21:19:58.0608 0x187c  MTConfig - ok
21:19:58.0628 0x187c  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\windows\system32\Drivers\mup.sys
21:19:58.0638 0x187c  Mup - ok
21:19:58.0668 0x187c  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\windows\system32\qagentRT.dll
21:19:58.0728 0x187c  napagent - ok
21:19:58.0788 0x187c  [ 8D11DA92F83D8C8281689739BEF05FD5, AD1D95CE084D1BD8310F6AA1CB27BEA98D9354E334AEC448AD6E6F68B52EEBC7 ] NAT            C:\Program Files (x86)\Norton Anti-Theft\Engine\1.6.0.17\ccSvcHst.exe
21:19:58.0798 0x187c  NAT - ok
21:19:58.0838 0x187c  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\windows\system32\DRIVERS\nwifi.sys
21:19:58.0868 0x187c  NativeWifiP - ok
21:19:58.0918 0x187c  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\windows\system32\drivers\ndis.sys
21:19:58.0948 0x187c  NDIS - ok
21:19:58.0978 0x187c  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\windows\system32\DRIVERS\ndiscap.sys
21:19:59.0029 0x187c  NdisCap - ok
21:19:59.0052 0x187c  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
21:19:59.0112 0x187c  NdisTapi - ok
21:19:59.0143 0x187c  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\windows\system32\DRIVERS\ndisuio.sys
21:19:59.0196 0x187c  Ndisuio - ok
21:19:59.0217 0x187c  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\windows\system32\DRIVERS\ndiswan.sys
21:19:59.0263 0x187c  NdisWan - ok
21:19:59.0292 0x187c  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\windows\system32\drivers\NDProxy.sys
21:19:59.0336 0x187c  NDProxy - ok
21:19:59.0346 0x187c  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\windows\system32\DRIVERS\netbios.sys
21:19:59.0396 0x187c  NetBIOS - ok
21:19:59.0446 0x187c  [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT          C:\windows\system32\DRIVERS\netbt.sys
21:19:59.0466 0x187c  NetBT - ok
21:19:59.0486 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] Netlogon        C:\windows\system32\lsass.exe
21:19:59.0506 0x187c  Netlogon - ok
21:19:59.0536 0x187c  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\windows\System32\netman.dll
21:19:59.0576 0x187c  Netman - ok
21:19:59.0636 0x187c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:59.0676 0x187c  NetMsmqActivator - ok
21:19:59.0686 0x187c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:59.0706 0x187c  NetPipeActivator - ok
21:19:59.0746 0x187c  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\windows\System32\netprofm.dll
21:19:59.0796 0x187c  netprofm - ok
21:19:59.0806 0x187c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:59.0826 0x187c  NetTcpActivator - ok
21:19:59.0826 0x187c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:59.0846 0x187c  NetTcpPortSharing - ok
21:19:59.0866 0x187c  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\windows\system32\drivers\nfrd960.sys
21:19:59.0876 0x187c  nfrd960 - ok
21:19:59.0906 0x187c  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\windows\System32\nlasvc.dll
21:19:59.0956 0x187c  NlaSvc - ok
21:20:00.0116 0x187c  [ FD8082D64C151589F12A4F620DBA3030, 649D61BF958ED50C0B5F7E0D2E633D20C8AAA00706A7AE9528DA78E2B6B3492E ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
21:20:00.0218 0x187c  NOBU - ok
21:20:00.0248 0x187c  Norton PC Checkup Application Launcher - ok
21:20:00.0268 0x187c  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\windows\system32\drivers\Npfs.sys
21:20:00.0328 0x187c  Npfs - ok
21:20:00.0358 0x187c  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\windows\system32\nsisvc.dll
21:20:00.0408 0x187c  nsi - ok
21:20:00.0438 0x187c  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
21:20:00.0508 0x187c  nsiproxy - ok
21:20:00.0588 0x187c  [ 47B2D0B31BDC3EBE6090228E2BA3764D, 984A4B38300954164BCBF57EC1A09C18B53779E60A26E9618B50E26016735787 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
21:20:00.0628 0x187c  Ntfs - ok
21:20:00.0688 0x187c  [ 23CF3DA010497EB2BF39A5C5A57E437C, 39CFDE7D401EFCE4F550E0A9461F5FC4D71FA07235E1336E4F0B4882BD76550E ] NTIOLib_1_0_3  C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys
21:20:00.0718 0x187c  NTIOLib_1_0_3 - ok
21:20:00.0768 0x187c  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\windows\system32\drivers\Null.sys
21:20:00.0808 0x187c  Null - ok
21:20:00.0828 0x187c  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\windows\system32\drivers\nvraid.sys
21:20:00.0848 0x187c  nvraid - ok
21:20:00.0848 0x187c  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\windows\system32\drivers\nvstor.sys
21:20:00.0868 0x187c  nvstor - ok
21:20:00.0868 0x187c  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
21:20:00.0888 0x187c  nv_agp - ok
21:20:00.0888 0x187c  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
21:20:00.0908 0x187c  ohci1394 - ok
21:20:00.0938 0x187c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
21:20:01.0038 0x187c  p2pimsvc - ok
21:20:01.0070 0x187c  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\windows\system32\p2psvc.dll
21:20:01.0120 0x187c  p2psvc - ok
21:20:01.0143 0x187c  panda_url_filtering - ok
21:20:01.0190 0x187c  [ 6925454E20B184E482CD65F297D51DB5, 9386542E9B20C370FCB275C7F8005DAD45C86BBC2F7B8DB3552FA49B474C5EED ] panda_url_filteringd C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys
21:20:01.0204 0x187c  panda_url_filteringd - ok
21:20:01.0234 0x187c  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\windows\system32\drivers\parport.sys
21:20:01.0264 0x187c  Parport - ok
21:20:01.0293 0x187c  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\windows\system32\drivers\partmgr.sys
21:20:01.0308 0x187c  partmgr - ok
21:20:01.0425 0x187c  [ 64DAD6D8A41725325BDAD78E566ACB34, 6599C5C1F8DF5BB85C0DBE4300DF1F4C015E00720B28951149D5924D65FD3DF8 ] pbamw_service  C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe
21:20:01.0465 0x187c  pbamw_service - ok
21:20:01.0495 0x187c  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\windows\System32\pcasvc.dll
21:20:01.0565 0x187c  PcaSvc - ok
21:20:01.0595 0x187c  [ 2F86BE1818C2D7AC90478E3323EE7FCB, CE721FCFFDC9D24483DEB6BB77DAFEBE79BA143CA2EE68BF28E2A9297AADB2D4 ] PCCUJobMgr      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe
21:20:01.0605 0x187c  PCCUJobMgr - ok
21:20:01.0655 0x187c  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\windows\system32\drivers\pci.sys
21:20:01.0665 0x187c  pci - ok
21:20:01.0685 0x187c  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\windows\system32\drivers\pciide.sys
21:20:01.0705 0x187c  pciide - ok
21:20:01.0715 0x187c  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
21:20:01.0735 0x187c  pcmcia - ok
21:20:01.0765 0x187c  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\windows\system32\drivers\pcw.sys
21:20:01.0785 0x187c  pcw - ok
21:20:01.0895 0x187c  [ 8F98C4BC605261B4B6E568FE791EB67A, 7B0D99D972A60423F7378BEE886061695FDA79B59AFF939744A130721E0174A1 ] PDF Architect 2 C:\Program Files (x86)\PDF Architect 2\ws.exe
21:20:01.0945 0x187c  PDF Architect 2 - ok
21:20:01.0985 0x187c  [ B2309F132A31AF03C0A249AEDE8CF289, BBAE32AA55E495ACB9A8089C090ADD78BE1DC16233CAA61BBED1456CA718D430 ] PDF Architect 2 Creator C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
21:20:02.0015 0x187c  PDF Architect 2 Creator - ok
21:20:02.0054 0x187c  [ 9077A3059AB47834633AEAAED465F3D9, 9CA662E9CBA30795E4E5DAB3E309D2062FFDC2053C261054E24EF7EE5300F69F ] pdfforge CrashHandler C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe
21:20:02.0082 0x187c  pdfforge CrashHandler - ok
21:20:02.0136 0x187c  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\windows\system32\drivers\peauth.sys
21:20:02.0182 0x187c  PEAUTH - ok
21:20:02.0248 0x187c  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\windows\SysWow64\perfhost.exe
21:20:02.0301 0x187c  PerfHost - ok
21:20:02.0377 0x187c  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\windows\system32\pla.dll
21:20:02.0447 0x187c  pla - ok
21:20:02.0517 0x187c  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\windows\system32\umpnpmgr.dll
21:20:02.0577 0x187c  PlugPlay - ok
21:20:02.0587 0x187c  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\windows\system32\pnrpauto.dll
21:20:02.0617 0x187c  PNRPAutoReg - ok
21:20:02.0637 0x187c  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\windows\system32\pnrpsvc.dll
21:20:02.0667 0x187c  PNRPsvc - ok
21:20:02.0697 0x187c  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent    C:\windows\System32\ipsecsvc.dll
21:20:02.0747 0x187c  PolicyAgent - ok
21:20:02.0767 0x187c  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\windows\system32\umpo.dll
21:20:02.0817 0x187c  Power - ok
21:20:02.0857 0x187c  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
21:20:02.0897 0x187c  PptpMiniport - ok
21:20:02.0937 0x187c  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\windows\system32\drivers\processr.sys
21:20:02.0977 0x187c  Processor - ok
21:20:03.0007 0x187c  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\windows\system32\profsvc.dll
21:20:03.0086 0x187c  ProfSvc - ok
21:20:03.0112 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] ProtectedStorage C:\windows\system32\lsass.exe
21:20:03.0134 0x187c  ProtectedStorage - ok
21:20:03.0172 0x187c  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\windows\system32\DRIVERS\pacer.sys
21:20:03.0223 0x187c  Psched - ok
21:20:03.0275 0x187c  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\windows\system32\drivers\ql2300.sys
21:20:03.0319 0x187c  ql2300 - ok
21:20:03.0335 0x187c  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\windows\system32\drivers\ql40xx.sys
21:20:03.0345 0x187c  ql40xx - ok
21:20:03.0375 0x187c  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\windows\system32\qwave.dll
21:20:03.0395 0x187c  QWAVE - ok
21:20:03.0405 0x187c  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
21:20:03.0435 0x187c  QWAVEdrv - ok
21:20:03.0505 0x187c  [ A55E7D0D873B2C97585B3B5926AC6ADE, 3BE3895DA7F0888E85B1941525878BA0846A8F215AD39ED8138BB39615468E32 ] RapiMgr        C:\windows\WindowsMobile\rapimgr.dll
21:20:03.0545 0x187c  RapiMgr - ok
21:20:03.0555 0x187c  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
21:20:03.0625 0x187c  RasAcd - ok
21:20:03.0645 0x187c  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\windows\system32\DRIVERS\AgileVpn.sys
21:20:03.0685 0x187c  RasAgileVpn - ok
21:20:03.0705 0x187c  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\windows\System32\rasauto.dll
21:20:03.0745 0x187c  RasAuto - ok
21:20:03.0775 0x187c  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\windows\system32\DRIVERS\rasl2tp.sys
21:20:03.0805 0x187c  Rasl2tp - ok
21:20:03.0825 0x187c  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\windows\System32\rasmans.dll
21:20:03.0875 0x187c  RasMan - ok
21:20:03.0895 0x187c  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
21:20:03.0945 0x187c  RasPppoe - ok
21:20:03.0955 0x187c  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\windows\system32\DRIVERS\rassstp.sys
21:20:04.0005 0x187c  RasSstp - ok
21:20:04.0065 0x187c  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\windows\system32\DRIVERS\rdbss.sys
21:20:04.0125 0x187c  rdbss - ok
21:20:04.0135 0x187c  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\windows\system32\drivers\rdpbus.sys
21:20:04.0175 0x187c  rdpbus - ok
21:20:04.0195 0x187c  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
21:20:04.0245 0x187c  RDPCDD - ok
21:20:04.0255 0x187c  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
21:20:04.0305 0x187c  RDPENCDD - ok
21:20:04.0325 0x187c  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
21:20:04.0375 0x187c  RDPREFMP - ok
21:20:04.0465 0x187c  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
21:20:04.0535 0x187c  RdpVideoMiniport - ok
21:20:04.0575 0x187c  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\windows\system32\drivers\RDPWD.sys
21:20:04.0645 0x187c  RDPWD - ok
21:20:04.0675 0x187c  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
21:20:04.0705 0x187c  rdyboost - ok
21:20:04.0747 0x187c  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\windows\System32\mprdim.dll
21:20:04.0807 0x187c  RemoteAccess - ok
21:20:04.0827 0x187c  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\windows\system32\regsvc.dll
21:20:04.0877 0x187c  RemoteRegistry - ok
21:20:04.0907 0x187c  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys
21:20:04.0937 0x187c  RFCOMM - ok
21:20:04.0967 0x187c  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
21:20:05.0017 0x187c  RpcEptMapper - ok
21:20:05.0064 0x187c  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\windows\system32\locator.exe
21:20:05.0130 0x187c  RpcLocator - ok
21:20:05.0175 0x187c  [ 622C96AFB07BB82C8650B47172137AC4, B74CEA5A3F4945E5A3EAE7AF1B1FA75F611C65C6FACE393052A512FA81B0C17C ] RpcSs          C:\windows\system32\rpcss.dll
21:20:05.0207 0x187c  RpcSs - ok
21:20:05.0274 0x187c  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
21:20:05.0361 0x187c  rspndr - ok
21:20:05.0411 0x187c  [ 135A64530D7699AD48F29D73A658DD11, 35838AE8ACFD9047C68DD0C8910557A82998E5CD778D5B98D4767AFA4BCE85BB ] RSUSBSTOR      C:\windows\System32\Drivers\RtsUStor.sys
21:20:05.0431 0x187c  RSUSBSTOR - ok
21:20:05.0461 0x187c  [ 8FA11ECB00AED22ACFEA154B7981D9E6, E72363AB33B17B4942187DADEC8DD9ECB047D2BCAE359148FA2F70EEF935264E ] RtkAvrcp        C:\windows\system32\drivers\RtkAvrcp.sys
21:20:05.0471 0x187c  RtkAvrcp - ok
21:20:05.0491 0x187c  [ 8008A68D94F4CF164CD636E8A4F8FB0A, 3E8E9DFC397737798AEE920A75D5355651FF823685309641711E9A6396AA6D5F ] RtkAvrcpCtrlr  C:\windows\system32\drivers\RtkAvrcpCtrlr.sys
21:20:05.0511 0x187c  RtkAvrcpCtrlr - ok
21:20:05.0561 0x187c  [ 543AFFECD35CFABD4490661F83685A0D, 819C022284E54C950D1144B9260C944D493CB4646713B30790818EFC99B82CCB ] RtkBleServ      C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe
21:20:05.0561 0x187c  RtkBleServ - detected UnsignedFile.Multi.Generic ( 1 )
21:20:05.0801 0x187c  Detect skipped due to KSN trusted
21:20:05.0801 0x187c  RtkBleServ - ok
21:20:05.0841 0x187c  [ 0772C3A9B2AB1907FCB68F2109F18E3B, FECAF1916CE9224D1784F5F99267B95A21969937DB57833FCD6C6118D0A442DC ] RtkBtFilter    C:\windows\system32\DRIVERS\RtkBtfilter.sys
21:20:05.0871 0x187c  RtkBtFilter - ok
21:20:05.0981 0x187c  [ F84917461BDB7C51B2ED7FF062B3A64A, 0DC81BA49BDDB4F425F526A21357E1CF70C94D67E99B3020E9FF14B680851EEC ] RTWlanE        C:\windows\system32\DRIVERS\rtwlane.sys
21:20:06.0021 0x187c  RTWlanE - ok
21:20:06.0057 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] SamSs          C:\windows\system32\lsass.exe
21:20:06.0076 0x187c  SamSs - ok
21:20:06.0107 0x187c  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
21:20:06.0130 0x187c  sbp2port - ok
21:20:06.0177 0x187c  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\windows\System32\SCardSvr.dll
21:20:06.0228 0x187c  SCardSvr - ok
21:20:06.0245 0x187c  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
21:20:06.0291 0x187c  scfilter - ok
21:20:06.0354 0x187c  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\windows\system32\schedsvc.dll
21:20:06.0424 0x187c  Schedule - ok
21:20:06.0444 0x187c  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\windows\System32\certprop.dll
21:20:06.0484 0x187c  SCPolicySvc - ok
21:20:06.0514 0x187c  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\windows\System32\SDRSVC.dll
21:20:06.0544 0x187c  SDRSVC - ok
21:20:06.0607 0x187c  [ 07EEDE29DF77E80EC93AE709CCD80B41, B5DF5F3108815094F0259004E093F56551A70AF6CBE02C3CBDC894589E3ADD38 ] SearchProtectionService C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
21:20:06.0641 0x187c  SearchProtectionService - ok
21:20:06.0691 0x187c  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\windows\system32\drivers\secdrv.sys
21:20:06.0759 0x187c  secdrv - ok
21:20:06.0794 0x187c  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\windows\system32\seclogon.dll
21:20:06.0842 0x187c  seclogon - ok
21:20:06.0869 0x187c  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\windows\System32\sens.dll
21:20:06.0907 0x187c  SENS - ok
21:20:06.0927 0x187c  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\windows\system32\sensrsvc.dll
21:20:06.0977 0x187c  SensrSvc - ok
21:20:06.0987 0x187c  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\windows\system32\drivers\serenum.sys
21:20:07.0007 0x187c  Serenum - ok
21:20:07.0017 0x187c  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\windows\system32\drivers\serial.sys
21:20:07.0057 0x187c  Serial - ok
21:20:07.0061 0x187c  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\windows\system32\drivers\sermouse.sys
21:20:07.0077 0x187c  sermouse - ok
21:20:07.0104 0x187c  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\windows\system32\sessenv.dll
21:20:07.0164 0x187c  SessionEnv - ok
21:20:07.0170 0x187c  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\windows\system32\drivers\sffdisk.sys
21:20:07.0196 0x187c  sffdisk - ok
21:20:07.0200 0x187c  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
21:20:07.0227 0x187c  sffp_mmc - ok
21:20:07.0230 0x187c  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\windows\system32\drivers\sffp_sd.sys
21:20:07.0262 0x187c  sffp_sd - ok
21:20:07.0265 0x187c  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\windows\system32\drivers\sfloppy.sys
21:20:07.0281 0x187c  sfloppy - ok
21:20:07.0336 0x187c  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\windows\System32\ipnathlp.dll
21:20:07.0386 0x187c  SharedAccess - ok
21:20:07.0446 0x187c  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\windows\System32\shsvcs.dll
21:20:07.0526 0x187c  ShellHWDetection - ok
21:20:07.0556 0x187c  [ E9E830D540EDEDED650F906628468548, 9800160C6807B28A2A1E57810151473C96F1484F2EF75D3E378E8C96440CD4CE ] simptcp        C:\windows\System32\tcpsvcs.exe
21:20:07.0576 0x187c  simptcp - ok
21:20:07.0606 0x187c  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
21:20:07.0616 0x187c  SiSRaid2 - ok
21:20:07.0626 0x187c  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
21:20:07.0636 0x187c  SiSRaid4 - ok
21:20:07.0746 0x187c  [ F3AAB7DF6408431C762D8721B68F46E4, 56ED764AA660955B8B06322703D086B3A52106625A83CCAF195B08BCBDEDA88F ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
21:20:07.0786 0x187c  SkypeUpdate - ok
21:20:07.0796 0x187c  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\windows\system32\DRIVERS\smb.sys
21:20:07.0836 0x187c  Smb - ok
21:20:07.0876 0x187c  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
21:20:07.0896 0x187c  SNMPTRAP - ok
21:20:07.0926 0x187c  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\windows\system32\drivers\spldr.sys
21:20:07.0936 0x187c  spldr - ok
21:20:07.0966 0x187c  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\windows\System32\spoolsv.exe
21:20:08.0006 0x187c  Spooler - ok
21:20:08.0115 0x187c  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\windows\system32\sppsvc.exe
21:20:08.0241 0x187c  sppsvc - ok
21:20:08.0271 0x187c  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\windows\system32\sppuinotify.dll
21:20:08.0316 0x187c  sppuinotify - ok
21:20:08.0406 0x187c  [ EC666682FE8344CF7E6ED69E74FA9F4F, DCD2A1C046425630689E2C9A6A6E356FE5A2A6664D12C20CFE236FCB32240DF9 ] srv            C:\windows\system32\DRIVERS\srv.sys
21:20:08.0466 0x187c  srv - ok
21:20:08.0506 0x187c  [ E450C0318DCE8ED28ED272C8806B8495, D2FD459F8C5E42103EF2F71421FA175A4F0821F8C2A3763093122D433D1C50FB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
21:20:08.0536 0x187c  srv2 - ok
21:20:08.0566 0x187c  [ 9C12C78AD36C23D925711A4640228225, FF72C23F2A08EDF0C41BAF1EB0245AB44FF91365C5466F09C47A8F0928D20994 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
21:20:08.0586 0x187c  srvnet - ok
21:20:08.0616 0x187c  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\windows\System32\ssdpsrv.dll
21:20:08.0666 0x187c  SSDPSRV - ok
21:20:08.0676 0x187c  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\windows\system32\sstpsvc.dll
21:20:08.0726 0x187c  SstpSvc - ok
21:20:08.0756 0x187c  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\windows\system32\drivers\stexstor.sys
21:20:08.0766 0x187c  stexstor - ok
21:20:08.0826 0x187c  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\windows\System32\wiaservc.dll
21:20:08.0876 0x187c  stisvc - ok
21:20:08.0926 0x187c  [ 04CF20310145DEC63D5387BEAFF77D9A, 5017AF8C2DFBFE1F9946FF5AF229D62D141118EA923EEFA994EB4C7B52DEF208 ] SWDUMon        C:\windows\system32\DRIVERS\SWDUMon.sys
21:20:08.0936 0x187c  SWDUMon - ok
21:20:08.0956 0x187c  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\windows\system32\drivers\swenum.sys
21:20:08.0966 0x187c  swenum - ok
21:20:09.0006 0x187c  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\windows\System32\swprv.dll
21:20:09.0126 0x187c  swprv - ok
21:20:09.0196 0x187c  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain        C:\windows\system32\sysmain.dll
21:20:09.0258 0x187c  SysMain - ok
21:20:09.0278 0x187c  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\windows\System32\TabSvc.dll
21:20:09.0308 0x187c  TabletInputService - ok
21:20:09.0338 0x187c  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\windows\System32\tapisrv.dll
21:20:09.0378 0x187c  TapiSrv - ok
21:20:09.0448 0x187c  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] Tcpip          C:\windows\system32\drivers\tcpip.sys
21:20:09.0498 0x187c  Tcpip - ok
21:20:09.0568 0x187c  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
21:20:09.0618 0x187c  TCPIP6 - ok
21:20:09.0648 0x187c  [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
21:20:09.0688 0x187c  tcpipreg - ok
21:20:09.0718 0x187c  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
21:20:09.0748 0x187c  TDPIPE - ok
21:20:09.0778 0x187c  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\windows\system32\drivers\tdtcp.sys
21:20:09.0808 0x187c  TDTCP - ok
21:20:09.0868 0x187c  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx            C:\windows\system32\DRIVERS\tdx.sys
21:20:09.0918 0x187c  tdx - ok
21:20:09.0938 0x187c  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\windows\system32\drivers\termdd.sys
21:20:09.0958 0x187c  TermDD - ok
21:20:10.0008 0x187c  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\windows\System32\termsrv.dll
21:20:10.0068 0x187c  TermService - ok
21:20:10.0088 0x187c  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\windows\system32\themeservice.dll
21:20:10.0108 0x187c  Themes - ok
21:20:10.0138 0x187c  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\windows\system32\mmcss.dll
21:20:10.0178 0x187c  THREADORDER - ok
21:20:10.0198 0x187c  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\windows\System32\trkwks.dll
21:20:10.0238 0x187c  TrkWks - ok
21:20:10.0278 0x187c  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
21:20:10.0328 0x187c  TrustedInstaller - ok
21:20:10.0358 0x187c  [ 19BEDA57F3E0A06B8D5EB6D619BD5624, 952D5FAFD662C93628C12A6F7EB8E240A44216C0A15CBD2F5016BC357CBFE821 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
21:20:10.0428 0x187c  tssecsrv - ok
21:20:10.0468 0x187c  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
21:20:10.0528 0x187c  TsUsbFlt - ok
21:20:10.0568 0x187c  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\windows\system32\drivers\TsUsbGD.sys
21:20:10.0618 0x187c  TsUsbGD - ok
21:20:10.0668 0x187c  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
21:20:10.0738 0x187c  tunnel - ok
21:20:10.0778 0x187c  [ 42350E49DA754D2D77362FDAE3491651, F29E8BA444ECB0484066B02C0A3DCE09B8417159EE37D7A2E05D4C06A98449C4 ] TurboB          C:\windows\system32\DRIVERS\TurboB.sys
21:20:10.0788 0x187c  TurboB - ok
21:20:10.0858 0x187c  [ 4F4B0AB2FB69C414CCBCEF7CF2E1C8D8, E1F197554369C97DBF61389346B4CB0233F40AAA2575F5D2FEC809AC9123FC69 ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe
21:20:10.0878 0x187c  TurboBoost - ok
21:20:10.0898 0x187c  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\windows\system32\drivers\uagp35.sys
21:20:10.0908 0x187c  uagp35 - ok
21:20:10.0918 0x187c  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
21:20:10.0958 0x187c  udfs - ok
21:20:10.0988 0x187c  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\windows\system32\UI0Detect.exe
21:20:11.0018 0x187c  UI0Detect - ok
21:20:11.0038 0x187c  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
21:20:11.0056 0x187c  uliagpkx - ok
21:20:11.0083 0x187c  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\windows\system32\DRIVERS\umbus.sys
21:20:11.0112 0x187c  umbus - ok
21:20:11.0127 0x187c  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\windows\system32\drivers\umpass.sys
21:20:11.0153 0x187c  UmPass - ok
21:20:11.0191 0x187c  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\windows\System32\upnphost.dll
21:20:11.0250 0x187c  upnphost - ok
21:20:11.0284 0x187c  [ 28B81917A195B67617AF7DCF4DFE5736, 40A4D2AAE1BDE5ABA8708ED150396E913C566ECD5CDA40D6C6DB256F1B9FD4A9 ] usbccgp        C:\windows\system32\DRIVERS\usbccgp.sys
21:20:11.0332 0x187c  usbccgp - ok
21:20:11.0362 0x187c  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\windows\system32\drivers\usbcir.sys
21:20:11.0412 0x187c  usbcir - ok
21:20:11.0462 0x187c  [ B626F048318DAE65A3317F0592BE592C, 284D8FFE1D35F852EFDA182A72288AC3A10D6ED825FE2CC5812497D3FE291AF1 ] usbehci        C:\windows\system32\drivers\usbehci.sys
21:20:11.0542 0x187c  usbehci - ok
21:20:11.0582 0x187c  [ 390109E8E05BA00375DCB1ED64DC60AF, B8628502590B423BEFB6F7C8C69FAD0667AD0746FF6B444EE02016E8E1052B78 ] usbhub          C:\windows\system32\drivers\usbhub.sys
21:20:11.0632 0x187c  usbhub - ok
21:20:11.0652 0x187c  [ B4DF0F4C1D9D25DFE1DAD1D8670F1D4F, 4317C2DEDC639527B53864BAEC46CBE022D298C0503E29E1072DD1C851D92BFC ] usbohci        C:\windows\system32\drivers\usbohci.sys
21:20:11.0672 0x187c  usbohci - ok
21:20:11.0692 0x187c  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
21:20:11.0722 0x187c  usbprint - ok
21:20:11.0762 0x187c  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan        C:\windows\system32\DRIVERS\usbscan.sys
21:20:11.0812 0x187c  usbscan - ok
21:20:11.0842 0x187c  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR        C:\windows\system32\drivers\USBSTOR.SYS
21:20:11.0892 0x187c  USBSTOR - ok
21:20:11.0952 0x187c  [ CFEAAF96E666E3DCBD8F6DFF516784AE, 006218A3DB5851790CC0A7F3DCD7B3AF82F624DA679296DE507AFD36C5468317 ] usbuhci        C:\windows\system32\drivers\usbuhci.sys
21:20:11.0982 0x187c  usbuhci - ok
21:20:12.0022 0x187c  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\windows\system32\Drivers\usbvideo.sys
21:20:12.0052 0x187c  usbvideo - ok
21:20:12.0092 0x187c  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\windows\System32\uxsms.dll
21:20:12.0152 0x187c  UxSms - ok
21:20:12.0172 0x187c  [ 1F9335A2C68B65E7D95985FA50968EA0, A0918C943F9CF5C6DB9440222B8E3B0DD645068B44E18253F275509550C0DF4D ] VaultSvc        C:\windows\system32\lsass.exe
21:20:12.0202 0x187c  VaultSvc - ok
21:20:12.0242 0x187c  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
21:20:12.0252 0x187c  vdrvroot - ok
21:20:12.0272 0x187c  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\windows\System32\vds.exe
21:20:12.0332 0x187c  vds - ok
21:20:12.0352 0x187c  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\windows\system32\DRIVERS\vgapnp.sys
21:20:12.0372 0x187c  vga - ok
21:20:12.0402 0x187c  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\windows\System32\drivers\vga.sys
21:20:12.0442 0x187c  VgaSave - ok
21:20:12.0452 0x187c  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\windows\system32\drivers\vhdmp.sys
21:20:12.0462 0x187c  vhdmp - ok
21:20:12.0492 0x187c  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\windows\system32\drivers\viaide.sys
21:20:12.0512 0x187c  viaide - ok
21:20:12.0522 0x187c  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\windows\system32\drivers\volmgr.sys
21:20:12.0532 0x187c  volmgr - ok
21:20:12.0552 0x187c  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\windows\system32\drivers\volmgrx.sys
21:20:12.0572 0x187c  volmgrx - ok
21:20:12.0602 0x187c  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\windows\system32\drivers\volsnap.sys
21:20:12.0622 0x187c  volsnap - ok
21:20:12.0642 0x187c  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\windows\system32\drivers\vsmraid.sys
21:20:12.0662 0x187c  vsmraid - ok
21:20:12.0712 0x187c  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\windows\system32\vssvc.exe
21:20:12.0782 0x187c  VSS - ok
21:20:12.0812 0x187c  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
21:20:12.0862 0x187c  vwifibus - ok
21:20:12.0904 0x187c  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
21:20:12.0944 0x187c  vwififlt - ok
21:20:12.0974 0x187c  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp        C:\windows\system32\DRIVERS\vwifimp.sys
21:20:12.0994 0x187c  vwifimp - ok
21:20:13.0014 0x187c  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\windows\system32\w32time.dll
21:20:13.0075 0x187c  W32Time - ok
21:20:13.0155 0x187c  [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] W3SVC          C:\windows\system32\inetsrv\iisw3adm.dll
21:20:13.0188 0x187c  W3SVC - ok
21:20:13.0214 0x187c  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\windows\system32\drivers\wacompen.sys
21:20:13.0241 0x187c  WacomPen - ok
21:20:13.0264 0x187c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
21:20:13.0298 0x187c  WANARP - ok
21:20:13.0317 0x187c  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
21:20:13.0347 0x187c  Wanarpv6 - ok
21:20:13.0397 0x187c  [ B32009DB1972E7F2C227499289C4384A, D491CD90ACE895EC60A5A2F995EAE39F8ED662B71BC548C3FF5BBDBC60054788 ] WAS            C:\windows\system32\inetsrv\iisw3adm.dll
21:20:13.0417 0x187c  WAS - ok
21:20:13.0477 0x187c  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\windows\system32\wbengine.exe
21:20:13.0537 0x187c  wbengine - ok
21:20:13.0547 0x187c  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
21:20:13.0567 0x187c  WbioSrvc - ok
21:20:13.0607 0x187c  [ 8BDA6DB43AA54E8BB5E0794541DDC209, 8753C507BE77B019A3403AF5252434A01DB9F9332E58AC3783ABCE3D21AD9DD4 ] WcesComm        C:\windows\WindowsMobile\wcescomm.dll
21:20:13.0627 0x187c  WcesComm - ok
21:20:13.0657 0x187c  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\windows\System32\wcncsvc.dll
21:20:13.0687 0x187c  wcncsvc - ok
21:20:13.0697 0x187c  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
21:20:13.0737 0x187c  WcsPlugInService - ok
21:20:13.0767 0x187c  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\windows\system32\drivers\wd.sys
21:20:13.0777 0x187c  Wd - ok
21:20:13.0827 0x187c  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
21:20:13.0857 0x187c  Wdf01000 - ok
21:20:13.0897 0x187c  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\windows\system32\wdi.dll
21:20:13.0927 0x187c  WdiServiceHost - ok
21:20:13.0947 0x187c  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\windows\system32\wdi.dll
21:20:13.0967 0x187c  WdiSystemHost - ok
21:20:13.0997 0x187c  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient      C:\windows\System32\webclnt.dll
21:20:14.0027 0x187c  WebClient - ok
21:20:14.0062 0x187c  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\windows\system32\wecsvc.dll
21:20:14.0102 0x187c  Wecsvc - ok
21:20:14.0114 0x187c  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\windows\System32\wercplsupport.dll
21:20:14.0174 0x187c  wercplsupport - ok
21:20:14.0194 0x187c  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\windows\System32\WerSvc.dll
21:20:14.0233 0x187c  WerSvc - ok
21:20:14.0255 0x187c  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
21:20:14.0288 0x187c  WfpLwf - ok
21:20:14.0307 0x187c  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\windows\system32\drivers\wimmount.sys
21:20:14.0317 0x187c  WIMMount - ok
21:20:14.0347 0x187c  WinDefend - ok
21:20:14.0347 0x187c  WinHttpAutoProxySvc - ok
21:20:14.0417 0x187c  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\windows\system32\wbem\WMIsvc.dll
21:20:14.0487 0x187c  Winmgmt - ok
21:20:14.0567 0x187c  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM          C:\windows\system32\WsmSvc.dll
21:20:14.0647 0x187c  WinRM - ok
21:20:14.0697 0x187c  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys
21:20:14.0737 0x187c  WinUsb - ok
21:20:14.0777 0x187c  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\windows\System32\wlansvc.dll
21:20:14.0817 0x187c  Wlansvc - ok
21:20:14.0937 0x187c  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:20:14.0987 0x187c  wlidsvc - ok
21:20:15.0043 0x187c  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\windows\system32\drivers\wmiacpi.sys
21:20:15.0076 0x187c  WmiAcpi - ok
21:20:15.0113 0x187c  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
21:20:15.0149 0x187c  wmiApSrv - ok
21:20:15.0169 0x187c  WMPNetworkSvc - ok
21:20:15.0185 0x187c  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\windows\System32\wpcsvc.dll
21:20:15.0224 0x187c  WPCSvc - ok
21:20:15.0240 0x187c  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
21:20:15.0272 0x187c  WPDBusEnum - ok
21:20:15.0301 0x187c  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\windows\system32\drivers\ws2ifsl.sys
21:20:15.0328 0x187c  ws2ifsl - ok
21:20:15.0348 0x187c  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\windows\System32\wscsvc.dll
21:20:15.0408 0x187c  wscsvc - ok
21:20:15.0418 0x187c  WSearch - ok
21:20:15.0568 0x187c  [ 31F32E0C1A8BA9A37EEC23DE5F27F847, 0180832BC6172C9A4C32B5B222BB3F91EA615A5EBDA98DB79ED4FED258C2D257 ] wuauserv        C:\windows\system32\wuaueng.dll
21:20:15.0688 0x187c  wuauserv - ok
21:20:15.0718 0x187c  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
21:20:15.0758 0x187c  WudfPf - ok
21:20:15.0808 0x187c  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
21:20:15.0868 0x187c  WUDFRd - ok
21:20:15.0888 0x187c  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\windows\System32\WUDFSvc.dll
21:20:15.0938 0x187c  wudfsvc - ok
21:20:15.0968 0x187c  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\windows\System32\wwansvc.dll
21:20:16.0018 0x187c  WwanSvc - ok
21:20:16.0051 0x187c  ================ Scan global ===============================
21:20:16.0103 0x187c  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\windows\system32\basesrv.dll
21:20:16.0128 0x187c  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
21:20:16.0149 0x187c  [ 93E5D2B763374F484918A0909724B3EB, 900F1CCAEFCF77AB678C74D542ABDDA7134CD33D7811537E2829FC69E99F2B3E ] C:\windows\system32\winsrv.dll
21:20:16.0187 0x187c  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\windows\system32\sxssrv.dll
21:20:16.0211 0x187c  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\windows\system32\services.exe
21:20:16.0218 0x187c  [ Global ] - ok
21:20:16.0218 0x187c  ================ Scan MBR ==================================
21:20:16.0233 0x187c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:20:16.0650 0x187c  \Device\Harddisk0\DR0 - ok
21:20:16.0652 0x187c  ================ Scan VBR ==================================
21:20:16.0655 0x187c  [ 0705F560CF61D5EE61FCE46DC97D99F9 ] \Device\Harddisk0\DR0\Partition1
21:20:16.0658 0x187c  \Device\Harddisk0\DR0\Partition1 - ok
21:20:16.0663 0x187c  [ 89E86E8C7CA58358959D25AD32A5A90E ] \Device\Harddisk0\DR0\Partition2
21:20:16.0666 0x187c  \Device\Harddisk0\DR0\Partition2 - ok
21:20:16.0667 0x187c  ================ Scan generic autorun ======================
21:20:17.0095 0x187c  [ E05849E5D0E51EB52080E7D2987B9D3B, E68E43CF0FFD69C193C5B692A019CE13D3FB58197E5827720B3ACDDE0812AAFA ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
21:20:17.0410 0x187c  RTHDVCPL - ok
21:20:17.0490 0x187c  [ 8B87D9E466055B958EE24270BF187512, 7A1994398C5A2CEB7738006F375C12E5AAC9142786783189E7C57AB8E1E75F3C ] C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe
21:20:17.0530 0x187c  BtServer - detected UnsignedFile.Multi.Generic ( 1 )
21:20:17.0940 0x187c  Detect skipped due to KSN trusted
21:20:17.0940 0x187c  BtServer - ok
21:20:18.0100 0x187c  [ 0A892ED5ECB5C821DE71EF523DC71C78, 47F54D1148C615BE2E4F3355F5392B530A843736E7B9DFB888871F24B6E355CA ] C:\Program Files\Elantech\ETDCtrl.exe
21:20:18.0180 0x187c  ETDCtrl - ok
21:20:18.0237 0x187c  [ 815F6E3727453C978FFD721B2BDF48A5, E33A85E8EF80C662C84F705080585B35A899F8E588E8481D48538BA1224B5E57 ] C:\Program Files (x86)\SCM\Radio Manager.exe
21:20:18.0253 0x187c  Radio Manager - detected UnsignedFile.Multi.Generic ( 1 )
21:20:18.0596 0x187c  Detect skipped due to KSN trusted
21:20:18.0596 0x187c  Radio Manager - ok
21:20:18.0666 0x187c  [ 679119AAB80584EA5646B53F4779F86E, 57BE842AF59544ABE7E8F6AF2E0E106E7F7C681A2923BD156403F6E8335BAD5D ] C:\Program Files (x86)\SCM\SCM.exe
21:20:18.0716 0x187c  SCM - detected UnsignedFile.Multi.Generic ( 1 )
21:20:19.0263 0x187c  Detect skipped due to KSN trusted
21:20:19.0263 0x187c  SCM - ok
21:20:19.0265 0x187c  IntelTBRunOnce - ok
21:20:19.0300 0x187c  [ 2E48CB664239B71FA40D9583FCB39860, EAFF430D91AD30AEF9D9FA6E7F3CB6217C6ACD519F1EE31351506445EED15D9C ] C:\windows\system32\igfxtray.exe
21:20:19.0316 0x187c  IgfxTray - ok
21:20:19.0343 0x187c  [ A491FFC9A3E69336AA5D4A065B42C8F8, 7DE6E7FD751C40B6CD1D059CC086307E0D11620642A36805C56C0F451E4412CD ] C:\windows\system32\hkcmd.exe
21:20:19.0363 0x187c  HotKeysCmds - ok
21:20:19.0383 0x187c  [ FF6659185BD54E9E5DE619CA1C2CD5B2, 0573634F7F69A41E0CAFCEDA8203DA26726BF77CBD6FD9FB9258D78691629E30 ] C:\windows\system32\igfxpers.exe
21:20:19.0403 0x187c  Persistence - ok
21:20:19.0453 0x187c  [ 233A10D4B3F6897899112E4EC60F1906, 1F7E768E57064938114DF2EFC5B219EB0D30A7D9E574924E9CED054462505AF0 ] C:\windows\WindowsMobile\wmdcBase.exe
21:20:19.0473 0x187c  Windows Mobile-based device management - ok
21:20:19.0683 0x187c  [ 666FEA598D1776C7F8EDD7746F0F7F59, 54E330BCDBAB646B555DACC15F9CFB0AD6A05BF4E273F73C5133259EEE976C21 ] C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
21:20:19.0743 0x187c  Malwarebytes TrayApp - ok
21:20:19.0783 0x187c  [ B00F98FF6FE8682FF941BEB2559BF191, EB443E294C5609F426BF6EE388F3A4B71EFE2C6A8216C0F6DE7AE6DB382BF620 ] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
21:20:19.0813 0x187c  YouCam Mirage - ok
21:20:19.0843 0x187c  [ 15A69FE13459EF81FB2105CC986AF394, 2078EAFEA0F00D155EDE6DA40BFBE6E8347DB19078FBD52DFA2122FB439BD9E9 ] C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe
21:20:19.0853 0x187c  YouCam Tray - ok
21:20:19.0933 0x187c  [ 27B3D4706E8EBC4B870F1D177EBC54B2, 34CD55E4BA687E38BD88B36A25B187DFF591F2D747ADD4D9BD22C071B48468F0 ] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
21:20:19.0983 0x187c  Super-Charger - ok
21:20:20.0037 0x187c  [ 2B282A4050FE3B4B70EF9E3070BBFF78, 019B667781F5CE411AEB569EAA4095FA2B9942E43A6A1DFC6EEBB2DA214131FE ] C:\Program Files (x86)\FreePDF_XP\fpassist.exe
21:20:20.0068 0x187c  FreePDF Assistant - detected UnsignedFile.Multi.Generic ( 1 )
21:20:20.0447 0x187c  Detect skipped due to KSN trusted
21:20:20.0447 0x187c  FreePDF Assistant - ok
21:20:20.0617 0x187c  [ AF905BC023A0018F7325FD4B0019B5C0, 9F65DE0C3D8B90295B70528ADD2411CC1771AC089B70ABEC426D6F2D5D7A104A ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
21:20:20.0647 0x187c  APSDaemon - ok
21:20:20.0737 0x187c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:20:20.0797 0x187c  Sidebar - ok
21:20:20.0827 0x187c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:20:20.0857 0x187c  mctadmin - ok
21:20:20.0907 0x187c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:20:20.0947 0x187c  Sidebar - ok
21:20:20.0947 0x187c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:20:20.0967 0x187c  mctadmin - ok
21:20:21.0017 0x187c  [ B88EC3510D74D3E7C2F7E68610DA8C45, 09A5715B65A19F7447C247484E1D5B096434EA9EC03689E48F781B6F33C0B858 ] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
21:20:21.0057 0x187c  Web Companion - ok
21:20:21.0092 0x187c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:20:21.0131 0x187c  Sidebar - ok
21:20:21.0137 0x187c  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:20:21.0158 0x187c  mctadmin - ok
21:20:21.0161 0x187c  Waiting for KSN requests completion. In queue: 124
21:20:22.0163 0x187c  Waiting for KSN requests completion. In queue: 124
21:20:23.0215 0x187c  AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.134 ), 0x61000 ( enabled : updated )
21:20:23.0222 0x187c  Win FW state via NFP2: enabled ( trusted )
21:20:23.0390 0x187c  ============================================================
21:20:23.0390 0x187c  Scan finished
21:20:23.0390 0x187c  ============================================================
21:20:23.0400 0x1090  Detected object count: 0
21:20:23.0400 0x1090  Actual detected object count: 0

cosinus 13.01.2017 22:03
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


milkit54 14.01.2017 20:04
Hallo Cosinus,
vorab erstmal Entschuldigung. Ich mußte unterbrechen. Hoffe jedoch das trotzdem etwas brauchbares herausgekoomen ist. Leider geht die Maus nicht, so daß ich über touchpad arbeiten mußte, und mir war nicht klar wie ich die Schutzsoftware beenden soll/kann sorry.

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Home Premium x64
Ran by Micha (Administrator) on 14.01.2017 at 18:26:46,08
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 2

Failed to delete: C:\ProgramData\lavasoft\web companion (Folder)
Failed to delete: C:\Program Files (x86)\lavasoft\web companion (Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.01.2017 at 18:30:06,19
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
# AdwCleaner v6.042 - Bericht erstellt am 14/01/2017 um 19:16:29
# Aktualisiert am 06/01/2017 von Malwarebytes
# Datenbank : 2017-01-11.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Micha - MICHA-MSI
# Gestartet von : C:\Users\Micha\Desktop\AdwCleaner_6.042.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Dienst Gefunden: swdumon
Dienst Gefunden: LavasoftTcpService
Dienst Gefunden: SearchProtectionService


***** [ Ordner ] *****

Ordner Gefunden: C:\ProgramData\Avg_Update_0215tb
Ordner Gefunden: C:\ProgramData\Avg_Update_1215tb
Ordner Gefunden: C:\windows\Installer\{A9888F42-BFFE-4ACA-AC10-51983972C2DF}
Ordner Gefunden: C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\extensions\_dqMembers_@www.downspeedtest.com
Ordner Gefunden: C:\Users\Micha\AppData\LocalLow\pandasecuritytb
Ordner Gefunden: C:\Users\Micha\AppData\Roaming\RHEng
Ordner Gefunden: C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\DownSpeedTest_dq
Ordner Gefunden: C:\ProgramData\lavasoft\web companion
Ordner Gefunden: C:\ProgramData\Application Data\lavasoft\web companion
Ordner Gefunden: C:\Program Files (x86)\lavasoft\web companion
Ordner Gefunden: C:\Program Files (x86)\pandasecuritytb
Ordner Gefunden: C:\windows\SysWOW64\config\systemprofile\AppData\LocalLow\avg web tuneup
Ordner Gefunden: C:\windows\SysWOW64\config\systemprofile\AppData\LocalLow\pandasecuritytb


***** [ Dateien ] *****

Datei Gefunden: C:\windows\SysNative\LavasoftTcpService64.dll
Datei Gefunden: C:\windows\SysNative\LavasoftTcpServiceOff.ini
Datei Gefunden: C:\windows\SysWOW64\lavasofttcpservice.dll
Datei Gefunden: C:\windows\SysWOW64\LavasoftTcpServiceOff.ini
Datei Gefunden: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Datei Gefunden: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Datei Gefunden: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Datei Gefunden: C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage
Datei Gefunden: C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage-journal


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schädlichen Schlüssel gefunden.


***** [ Verknüpfungen ] *****

Keine infizierten Verknüpfungen gefunden.


***** [ Aufgabenplanung ] *****

Keine schädlichen Aufgaben gefunden.


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A9888F42-BFFE-4ACA-AC10-51983972C2DF}
Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A9888F42-BFFE-4ACA-AC10-51983972C2DF}_is1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
Schlüssel Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Schlüssel Gefunden: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Schlüssel Gefunden: HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Software\Ciuvo
Schlüssel Gefunden: HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Software\SlimWare Utilities Inc
Schlüssel Gefunden: HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Software\AppDataLow\Software\adawarebp
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2198626584-3468660724-23365673-1000\Software\Ciuvo
Schlüssel Gefunden: HKCU\Software\Ciuvo
Schlüssel Gefunden: HKCU\Software\SlimWare Utilities Inc
Schlüssel Gefunden: HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gefunden: HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
Schlüssel Gefunden: HKLM\SOFTWARE\SlimWare Utilities Inc
Schlüssel Gefunden: HKLM\SOFTWARE\Lavasoft\Web Companion
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2198626584-3468660724-23365673-1000\Software\Ciuvo
Schlüssel Gefunden: [x64] HKCU\Software\Ciuvo
Schlüssel Gefunden: [x64] HKCU\Software\SlimWare Utilities Inc
Schlüssel Gefunden: [x64] HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Reimage
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Schlüssel Gefunden: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Schlüssel Gefunden: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mysearch.avg.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Schlüssel Gefunden: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mysearch.avg.com
Wert Gefunden: HKU\S-1-5-21-2198626584-3468660724-23365673-1000\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Wert Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Wert Gefunden: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]


***** [ Internetbrowser ] *****

Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "browser.startup.homepage" -  "hxxp://hp.myway.com/downspeedtest/ttab02/index.html?coId=db9de8384d804
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.BUTTON_STRUCTURE" -  "[{\"b\":224180039,\"c\":\"mindspark.m
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.prev" -  "hxxp://www.n-tv.de"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.savedPrev" -  "true"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.tb" -  "hxxp://hp.myway.com/downsp
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.startup.page.savedPrev" -  1
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.startup.page.tb" -  1
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.browser.version.last" -  "50.0"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.coId" -  "db9de8384d8040ac93524301c1b30367"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.firstKnownVersion" -  "7.102.10.3827"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.homepage" -  "hxxp://hp.myway.com/downspeedtest/ttab02/inde
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.hp.enabled" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.hp.guardType" -  "HPR"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.hp.user.defined" -  false
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.initialized" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installType" -  "XPI"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.dlpCountryCode" -  "DE"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.installDate" -  "2017010903"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.partnerId" -  "^BXM^xdm001^TTAB02^de"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.pixelUrl" -  "hxxp://www.downspeedtest.com/ins
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.success" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.installation.toolbarId" -  "4E16B681-6380-4409-98AE-5BA6F85
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.lastActivePing" -  "1484403901982"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.lastKnownVersion" -  "7.102.10.3827"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.lssState" -  "{\"previousLocales\":[\"de\",\"en-US\",\"en\"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.options.defaultSearch" -  false
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.options.homePageEnabled" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.options.keywordEnabled" -  false
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.options.tabEnabled" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.partnerPixelFired" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.productDeliveryOption.language" -  "de"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.productDeliveryOption.newTabURL" -  "hxxp://hp.myway.com/do
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.productDeliveryOption.type" -  "ToolTab"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.successUrl" -  "hxxp://www.downspeedtest.com/installComplet
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.toolbarCollapsed" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.uninstallSurveyUrl" -  "hxxp://www.research.net/r/HYSCVNM?C
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark._dqMembers_.uninstallTasks" -  "{\"prefBranchesToDelete\":[\"extensions
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark.hp.enabled" -  true
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark.hp.enabled.guid" -  "downspeedtest@mindspark.com"
Firefox pref Gefunden: [C:\Users\Micha\AppData\Roaming\Mozilla\Firefox\Profiles\0h0153di.default-1478642192766\prefs.js] - "extensions.toolbar.mindspark.lastInstalled" -  "downspeedtest@mindspark.com"
Chrome pref Gefunden: [C:\Users\Micha\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - bopakagnckmlgajfccecajhnimjiiedh

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [17914 Bytes] - [14/01/2017 19:16:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17988 Bytes] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:56 Uhr.
Seite 1 von 5 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131