Trojaner-Board - Name: b33bxgek.th Virus: Win32: Malware-gen (sagt Avast)

Ok dann war es eben die Konsole. Ich hatte dafür auf mein Windowssymbol rechts unten geklickt, dann auf "Neu starten" und shift gedrückt gehalten, danach erweiterte Optionen und dann Eingabeaufforderung. DOS ja da hast du recht, ich habe mich da vertan.

Nun ging FRST. Windows hatte vorher das Programm geblockt. Ist ja jetzt auch egal...oder? :confused::crazy:

Nunja hier die FRST-Log :)

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-02-2017

durchgeführt von -007-009- (Administrator) auf Z-1759-Z (21-02-2017 14:20:47)

Gestartet von C:\Users\-007-009-\Desktop

Geladene Profile: -007-009- (Verfügbare Profile: -007-009- & DefaultAppPool)

Platform: Windows 10 Education Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(AVAST Software) Q:\Programme\Avast!\AvastSvc.exe

(AVAST Software) Q:\Programme\Avast!\afwServ.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(VMware, Inc.) Q:\Programme\VM Ware Player\vmware-authd.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe

(Mozilla Corporation) Q:\Programme\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(AVAST Software) Q:\Programme\Avast!\AvastUI.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-11-04] (Razer Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => Q:\Programme\Avast!\AvLaunch.exe [205512 2017-02-17] (AVAST Software)

HKLM\...\Providers\du03mv7b: C:\Program Files (x86)\Plocersp Log\local64spl.dll [307712 2017-02-17] ()

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => Q:\Programme\Avast!\ashShA64.dll [2017-02-17] (AVAST Software)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Q:\Programme\Avast!\ashShA64.dll [2017-02-17] (AVAST Software)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{007ee2e4-dffb-4635-b548-4143c78d2414}: [DhcpNameServer] 192.168.42.129

Tcpip\..\Interfaces\{00fe9e70-ae42-44a8-8f5c-bc6ff957f196}: [NameServer] 77.234.40.79

Tcpip\..\Interfaces\{40a765a3-c78e-484b-aed0-79a4b6483a62}: [NameServer] 192.168.2.166

Tcpip\..\Interfaces\{40a765a3-c78e-484b-aed0-79a4b6483a62}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\S-1-5-21-303598687-36277840-1408844204-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
 

FireFox:

========

FF DefaultProfile: cr26mr9j.default

FF ProfilePath: C:\Users\-007-009-\AppData\Roaming\Mozilla\Firefox\Profiles\cr26mr9j.default [2017-02-21]

FF Homepage: Mozilla\Firefox\Profiles\cr26mr9j.default -> www.google.de

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.ftp", "212.66.152.231"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.ftp_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.socks", "212.66.152.231"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.socks_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.ssl", "212.66.152.231"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> backup.ssl_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> ftp", "192.168.100.1"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> ftp_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> http", "192.168.100.1"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> http_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> share_proxy_settings", true

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> socks", "192.168.100.1"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> socks_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> socks_remote_dns", true

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> ssl", "192.168.100.1"

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> ssl_port", 8080

FF NetworkProxy: Mozilla\Firefox\Profiles\cr26mr9j.default -> type", 4

FF Extension: (NoScript) - C:\Users\-007-009-\AppData\Roaming\Mozilla\Firefox\Profiles\cr26mr9j.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-18]

FF Extension: (Tamper Data) - C:\Users\-007-009-\AppData\Roaming\Mozilla\Firefox\Profiles\cr26mr9j.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi [2016-04-27]

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - Q:\Programme\Avast!\WebRep\FF

FF Extension: (Avast Online Security) - Q:\Programme\Avast!\WebRep\FF [2016-09-10]

FF HKLM\...\Firefox\Extensions: [sp@avast.com] - Q:\Programme\Avast!\SafePrice\FF

FF Extension: (Avast SafePrice) - Q:\Programme\Avast!\SafePrice\FF [2016-09-10]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - Q:\Programme\Avast!\WebRep\FF

FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - Q:\Programme\Avast!\SafePrice\FF

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-22] ()

FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-26] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-26] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-22] ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2012-04-14] (Google)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

StartMenuInternet: FIREFOX.EXE - Q:\Programme\Mozilla Firefox\firefox.exe
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 aswbIDSAgent; Q:\Programme\Avast!\x64\aswidsagenta.exe [7142136 2017-02-17] (AVAST Software s.r.o.)

R2 avast! Antivirus; Q:\Programme\Avast!\AvastSvc.exe [262736 2017-02-17] (AVAST Software)

R2 avast! Firewall; Q:\Programme\Avast!\afwServ.exe [278784 2017-02-17] (AVAST Software)

S4 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-10] (NVIDIA Corporation)

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2016-12-29] ()

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-25] ()

S4 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]

R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)

R2 VMAuthdService; Q:\Programme\VM Ware Player\vmware-authd.exe [86744 2014-06-12] (VMware, Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-17] (AVAST Software s.r.o.)

R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-17] (AVAST Software s.r.o.)

R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-17] (AVAST Software s.r.o.)

R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-17] (AVAST Software s.r.o.)

S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-17] (AVAST Software)

R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-17] (AVAST Software)

R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-17] (AVAST Software)

R1 aswNetSec; C:\WINDOWS\system32\drivers\aswNetSec.sys [456456 2017-02-17] (AVAST Software)

R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-17] (AVAST Software)

R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-17] (AVAST Software)

R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-17] (AVAST Software)

R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-17] (AVAST Software)

S2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-17] (AVAST Software)

S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [44640 2016-03-25] (The OpenVPN Project)

R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-17] (AVAST Software)

S3 AVerAF35; C:\WINDOWS\System32\Drivers\AVerAF35.sys [813720 2016-03-30] (AVerMedia TECHNOLOGIES, Inc.)

S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-30] (Windows (R) Win 7 DDK provider)

S3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45208 2016-04-15] (Logitech Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyHidFilter; C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys [74920 2016-04-19] (Logitech Inc.)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

S3 lgLowAudio; C:\WINDOWS\system32\drivers\lgLowAudio.sys [26264 2015-11-20] (Logitech Inc.)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-23] (Malwarebytes)

R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2016-02-03] ()

S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_0cc477a6fec64d8c\nvlddmkm.sys [14516664 2017-02-10] (NVIDIA Corporation)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek                                            )

R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)

R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)

R2 VMparport; C:\WINDOWS\system32\drivers\VMparport.sys [32472 2014-06-12] (VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)

S3 VSPerfDrv110; Q:\Programme\Microsoft Visual Studio Premium 2012\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-02-21 14:20 - 2017-02-21 14:20 - 00042166 _____ C:\Users\-007-009-\Desktop\Addition.txt

2017-02-21 14:19 - 2017-02-21 14:20 - 00014259 _____ C:\Users\-007-009-\Desktop\FRST.txt

2017-02-21 14:19 - 2017-02-21 14:19 - 00000000 ____D C:\ProgramData\SWCUTemp

2017-02-21 13:54 - 2017-02-21 14:20 - 00000000 ____D C:\FRST

2017-02-20 19:26 - 2017-02-20 19:26 - 00000016 _____ C:\ProgramData\mntemp

2017-02-20 18:44 - 2017-02-21 14:19 - 02422784 _____ (Farbar) C:\Users\-007-009-\Desktop\FRST64.exe

2017-02-20 14:56 - 2017-02-21 13:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-02-20 14:53 - 2017-02-20 23:34 - 00000000 ____D C:\AdwCleaner

2017-02-20 14:37 - 2017-02-20 14:37 - 00000000 ___RD C:\Users\-007-009-\Documents\Scanned Documents

2017-02-20 14:37 - 2017-02-20 14:37 - 00000000 ____D C:\Users\-007-009-\Documents\Fax

2017-02-20 14:17 - 2017-02-20 14:17 - 00000000 ____D C:\ProgramData\Apple

2017-02-19 12:23 - 2017-02-19 12:23 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\NVIDIA

2017-02-19 11:50 - 2017-02-19 11:50 - 00000000 ____D C:\Users\-007-009-\AppData\Local\NVIDIA Corporation

2017-02-19 11:44 - 2017-02-19 11:44 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-02-19 11:44 - 2017-02-19 11:44 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-02-19 11:44 - 2017-02-19 11:44 - 00003804 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-02-19 11:44 - 2017-02-19 11:44 - 00003642 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-02-19 11:44 - 2017-02-19 11:44 - 00003600 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-02-19 11:43 - 2017-02-21 13:57 - 00000000 ____D C:\ProgramData\NVIDIA

2017-02-19 11:43 - 2017-02-19 11:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2017-02-19 11:43 - 2017-02-19 11:43 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2017-02-19 11:43 - 2017-02-19 11:43 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2017-02-19 11:43 - 2017-02-10 03:33 - 00512960 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2017-02-19 11:43 - 2017-02-10 03:33 - 00418752 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 07791217 _____ C:\WINDOWS\system32\nvcoproc.bin

2017-02-19 11:43 - 2017-02-09 23:57 - 06403640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 02477504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 00548288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll

2017-02-19 11:43 - 2017-01-26 01:13 - 00103936 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2017-02-19 11:43 - 2017-01-26 01:12 - 00326656 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2017-02-19 11:43 - 2017-01-26 01:09 - 00322560 _____ C:\WINDOWS\system32\vulkan-1.dll

2017-02-19 11:43 - 2017-01-26 01:09 - 00118272 _____ C:\WINDOWS\system32\vulkaninfo.exe

2017-02-19 11:42 - 2017-02-10 03:33 - 40192056 _____ C:\WINDOWS\system32\nvcompiler.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 35272760 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 34979384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 28242488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 19007016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 14674896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 11122728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 11019704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 09305984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 08990072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 04078008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 03597128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 03168192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 02717752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 01983424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437866.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 01600056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 01589696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437866.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 01052096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00991288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00959424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00946456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00944224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00910784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00721952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00719856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00687224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00618416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00605120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00576192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00573448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00499136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00483384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00447984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00217528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

2017-02-19 11:42 - 2017-02-10 03:33 - 00047664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll

2017-02-19 11:42 - 2017-02-10 03:33 - 00043556 _____ C:\WINDOWS\system32\nvinfo.pb

2017-02-19 11:42 - 2017-02-10 03:33 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json

2017-02-19 11:42 - 2017-02-10 03:33 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json

2017-02-19 11:40 - 2017-02-19 11:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2017-02-19 11:35 - 2017-02-19 11:33 - 00189112 _____ (Power Admin LLC) C:\WINDOWS\PAExec.exe

2017-02-17 19:31 - 2017-02-17 19:31 - 00000000 ____D C:\Users\-007-009-\AppData\Local\Crashpad

2017-02-17 18:55 - 2017-02-17 18:55 - 00000000 ____D C:\WINDOWS\LastGood

2017-02-17 18:39 - 2017-02-17 18:39 - 00000121 _____ C:\WINDOWS\SysWOW64\mon.txt

2017-02-17 18:30 - 2017-02-17 18:30 - 00000000 ___HD C:\$AV_ASW

2017-02-17 16:44 - 2017-02-21 13:47 - 00004906 _____ C:\WINDOWS\System32\Tasks\Jacilevunupy

2017-02-17 16:44 - 2017-02-20 14:33 - 00000000 ____D C:\Program Files (x86)\Plocersp Log

2017-02-17 16:17 - 2017-02-17 16:17 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e5 Secure Download Manager

2017-02-17 15:20 - 2017-02-17 15:20 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2017-02-17 15:20 - 2017-02-17 15:20 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys

2017-02-17 15:20 - 2017-02-17 15:20 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys

2017-02-17 15:20 - 2017-02-17 15:20 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys

2017-02-17 15:20 - 2017-02-17 15:20 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys

2017-02-17 15:20 - 2017-02-17 15:20 - 00003958 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update

2017-02-14 19:46 - 2017-02-14 19:46 - 00000000 ____D C:\Nexon

2017-02-14 19:45 - 2017-02-14 19:45 - 00000000 ____D C:\Users\-007-009-\AppData\Local\NexonLauncher

2017-02-14 19:44 - 2017-02-14 19:46 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\NexonLauncher

2017-02-08 17:22 - 2017-02-20 22:42 - 00000000 ____D C:\Users\-007-009-\AppData\Local\CrashDumps

2017-02-08 14:54 - 2017-02-20 23:18 - 00000000 ____D C:\Users\-007-009-\Desktop\Programme

2017-02-08 14:54 - 2017-02-14 16:44 - 00000000 ____D C:\Users\-007-009-\Desktop\Spiele

2017-02-08 14:54 - 2017-01-19 01:09 - 00000374 _____ C:\Users\-007-009-\Desktop\LAN.lnk

2017-02-08 14:45 - 2017-02-20 15:54 - 00000000 ____D C:\Temp

2017-02-08 14:44 - 2017-02-10 00:13 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat

2017-02-08 14:44 - 2017-02-08 14:44 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2017-02-04 16:48 - 2017-02-04 19:46 - 00542968 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-27 12:08 - 2017-01-27 12:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software

2017-01-27 12:08 - 2017-01-27 12:08 - 00000000 ____D C:\Program Files\Common Files\AV

2017-01-26 01:13 - 2017-01-26 01:13 - 00103936 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-39-1.exe

2017-01-26 01:12 - 2017-01-26 01:12 - 00326656 _____ C:\WINDOWS\SysWOW64\vulkan-1-1-0-39-1.dll

2017-01-26 01:09 - 2017-01-26 01:09 - 00322560 _____ C:\WINDOWS\system32\vulkan-1-1-0-39-1.dll

2017-01-26 01:09 - 2017-01-26 01:09 - 00118272 _____ C:\WINDOWS\system32\vulkaninfo-1-1-0-39-1.exe

2017-01-25 12:21 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2017-01-25 12:21 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-02-21 14:02 - 2016-11-16 08:40 - 08398534 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-02-21 14:02 - 2016-07-16 23:57 - 04185532 _____ C:\WINDOWS\system32\perfh007.dat

2017-02-21 14:02 - 2016-07-16 23:57 - 01162332 _____ C:\WINDOWS\system32\perfc007.dat

2017-02-21 13:57 - 2016-11-26 17:41 - 00000000 ____D C:\Users\-007-009-\AppData\LocalLow\Mozilla

2017-02-21 13:57 - 2016-07-30 19:14 - 00000000 ____D C:\ProgramData\VMware

2017-02-21 13:52 - 2016-07-16 07:04 - 00131072 _____ C:\WINDOWS\system32\config\BBI

2017-02-21 13:47 - 2016-12-20 19:46 - 00003200 _____ C:\WINDOWS\System32\Tasks\{A1E8D652-1A08-40F0-8BBC-C42A78DC480E}

2017-02-21 13:33 - 2016-02-03 20:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2017-02-21 00:13 - 2016-02-03 22:13 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\TS3Client

2017-02-20 23:35 - 2016-11-16 08:41 - 00000000 ____D C:\Users\-007-009-

2017-02-20 22:48 - 2016-02-04 19:10 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\OBS

2017-02-20 18:46 - 2016-02-20 16:19 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\vlc

2017-02-20 18:14 - 2016-11-16 08:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2017-02-20 17:16 - 2016-02-03 21:17 - 00000000 ____D C:\Program Files\Recuva

2017-02-20 03:31 - 2016-02-16 19:56 - 00007611 _____ C:\Users\-007-009-\AppData\Local\Resmon.ResmonCfg

2017-02-19 18:32 - 2016-02-04 18:05 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\Anvsoft

2017-02-19 11:58 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF

2017-02-19 11:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help

2017-02-19 11:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-02-19 02:21 - 2016-02-28 13:56 - 00000000 ____D C:\Users\-007-009-\Documents\Visual Studio 2012

2017-02-18 20:39 - 2016-11-24 14:42 - 00000000 ____D C:\Users\-007-009-\Documents\VirtualDJ

2017-02-18 11:28 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2017-02-17 18:45 - 2016-11-16 08:52 - 00004030 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1458943400

2017-02-17 18:45 - 2016-03-25 23:03 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk

2017-02-17 15:21 - 2016-03-25 19:02 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys

2017-02-17 15:20 - 2016-04-27 16:59 - 00456456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys

2017-02-17 15:20 - 2016-03-25 23:03 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148734128068704

2017-02-17 15:20 - 2016-03-25 19:02 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys

2017-02-17 15:20 - 2016-03-25 19:02 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys

2017-02-17 15:20 - 2016-03-25 18:45 - 00000000 ____D C:\ProgramData\AVAST Software

2017-02-17 13:43 - 2016-07-30 19:15 - 00000000 ____D C:\Users\-007-009-\AppData\Local\VMware

2017-02-17 11:46 - 2016-12-24 12:13 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\VMware

2017-02-12 04:52 - 2017-01-18 18:05 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\Electrum

2017-02-07 18:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF

2017-02-07 17:00 - 2016-11-29 21:45 - 00000000 ____D C:\Users\-007-009-\AppData\Local\ElevatedDiagnostics

2017-02-06 20:59 - 2016-02-03 22:06 - 00000000 ____D C:\Users\-007-009-\AppData\Local\Ubisoft Game Launcher

2017-02-04 16:48 - 2016-03-30 19:04 - 00000000 ____D C:\Users\-007-009-\Documents\My Games

2017-02-03 20:19 - 2016-07-24 19:11 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\.technic

2017-02-01 23:17 - 2016-12-17 13:48 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe

2017-02-01 23:17 - 2016-03-30 19:05 - 00281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr

2017-02-01 18:25 - 2016-08-15 08:56 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\Audacity

2017-01-29 14:37 - 2016-12-30 13:26 - 00000600 _____ C:\Users\-007-009-\AppData\Local\PUTTY.RND

2017-01-26 17:49 - 2016-02-25 18:14 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2017-01-25 18:39 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-22 18:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2017-01-22 17:00 - 2016-02-14 16:47 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\TeamViewer

2017-01-22 16:30 - 2016-12-17 21:55 - 00000000 ____D C:\Users\-007-009-\AppData\Roaming\.minecraft

2017-01-22 16:06 - 2016-02-16 19:56 - 00000000 ____D C:\Users\-007-009-\AppData\Local\Adobe

2017-01-22 15:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2017-01-22 15:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed

2017-01-22 00:07 - 2016-05-13 18:40 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-05-20 17:56 - 2016-08-01 08:43 - 0003945 _____ () C:\Users\-007-009-\AppData\Roaming\LTspiceIV.ini

2016-12-30 13:26 - 2017-01-29 14:37 - 0000600 _____ () C:\Users\-007-009-\AppData\Local\PUTTY.RND

2016-04-12 20:13 - 2016-04-12 20:13 - 0000218 _____ () C:\Users\-007-009-\AppData\Local\recently-used.xbel

2016-02-16 19:56 - 2017-02-20 03:31 - 0007611 _____ () C:\Users\-007-009-\AppData\Local\Resmon.ResmonCfg

2017-02-20 19:26 - 2017-02-20 19:26 - 0000016 _____ () C:\ProgramData\mntemp
 

Einige Dateien in TEMP:

====================

2017-02-21 13:32 - 2017-02-21 13:32 - 7097928 _____ (VS Revo Group                                               ) C:\Users\-007-009-\AppData\Local\Temp\VSUSetup.exe
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-02-11 18:39
 

==================== Ende von FRST.txt ============================

Hier die Addition-Log:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-02-2017

durchgeführt von -007-009- (21-02-2017 14:21:14)

Gestartet von C:\Users\-007-009-\Desktop

Windows 10 Education Version 1607 (X64) (2016-11-16 07:54:00)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

-007-009- (S-1-5-21-303598687-36277840-1408844204-1001 - Administrator - Enabled) => C:\Users\-007-009-

Administrator (S-1-5-21-303598687-36277840-1408844204-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-303598687-36277840-1408844204-503 - Limited - Disabled)

Gast (S-1-5-21-303598687-36277840-1408844204-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-303598687-36277840-1408844204-1008 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

FW: Avast Antivirus (Disabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)

Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)

Ansel (Version: 378.66 - NVIDIA Corporation) Hidden

Any Video Converter 5.9.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)

Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)

Audiosurf (HKLM\...\Steam App 12900) (Version:  - Dylan Fitterer)

AutoIt v3.3.14.2 (HKLM-x32\...\AutoItv3) (Version: 3.3.14.2 - AutoIt Team)

Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.1.2286 - AVAST Software)

BitPay version 1.2.1 (HKLM-x32\...\2d1002d7-ee34-4f60-bd29-0c871ba0c195_is1) (Version: 1.2.1 - BitPay)

Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden

Boson X (HKLM\...\Steam App 302610) (Version:  - Ian MacLarty)

CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)

Discord (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden

e5 Secure Download Manager (HKLM-x32\...\{A66F82FB-85EE-48D2-B19C-3A98147D5167}) (Version: 3.2.249.0 - Kivuto Solutions Inc.)

Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{0A1A1D48-DB23-443A-BC7B-49255D138020}) (Version: 11.1.20702.00 - Microsoft Corporation)

Far Cry 3 (HKLM-x32\...\Uplay Install 46) (Version:  - Ubisoft)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

GameRanger (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\GameRanger) (Version:  - GameRanger Technologies)

Ghost Recon Phantoms - EU (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\61e5da2b7c463135) (Version: 1.36.9879.2 - Ubisoft)

gmax (HKLM-x32\...\{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}) (Version: 4.4.0.125 - Discreet)

Google Earth (HKLM-x32\...\{28E82311-8616-11E1-BEB0-B8AC6F97B88E}) (Version: 6.2.2.6613 - Google)

GPL Ghostscript 9.00 (HKLM-x32\...\GPL Ghostscript 9.00) (Version:  - )

Hex Workshop v6.8 (HKLM\...\{A36AC685-4435-4C16-861F-221231DE165D}) (Version: 6.8.0.5419 - BreakPoint Software)

IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)

IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )

IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )

Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)

LibreOffice 5.1.2.2 (HKLM\...\{7A6851F9-0867-4CB4-9017-35ECA0CBA162}) (Version: 5.1.2.2 - The Document Foundation)

LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden

LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden

Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

LTspice IV (HKLM-x32\...\LTspice IV) (Version:  - )

Metro 2033 Redux (HKLM\...\Steam App 286690) (Version:  - 4A GAMES)

Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation)

Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)

Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)

Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation)

Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31125 - Microsoft Corporation)

Microsoft Visual Studio Premium 2012 (HKLM-x32\...\{9c715d29-b6e0-43b3-b620-66088712ee37}) (Version: 11.0.50727.26 - Microsoft Corporation)

Microsoft Web Deploy 3.0 (HKLM\...\{AA72C306-30BE-4BB1-9E42-59552BAD2CDF}) (Version: 3.1236.1631 - Microsoft Corporation)

Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)

Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation)

Mozilla Firefox 45.0.2 (x64 de) (HKLM\...\Mozilla Firefox 45.0.2 (x64 de)) (Version: 45.0.2 - Mozilla)

Mozilla Firefox 50.1.0 (x64 de) (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\Mozilla Firefox 50.1.0 (x64 de)) (Version: 50.1.0 - Mozilla)

Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA Grafiktreiber 378.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.66 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

Platform (x32 Version: 1.43 - VIA Technologies, Inc.) Hidden

PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden

Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)

Python 2.7.11 (HKLM-x32\...\{16E52445-1392-469F-9ADB-FC03AF00CD61}) (Version: 2.7.11150 - Python Software Foundation)

Python 3.5.2 (32-bit) (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)

Python 3.5.2 Add to Path (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden

Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)

Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.1104 - Razer Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)

Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SafeZone Stable 3.55.2393.561 (x32 Version: 3.55.2393.561 - Avast Software) Hidden

Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)

SciTE4AutoIt3 16.306.1237.0 (HKLM-x32\...\SciTE4AutoIt3) (Version: 16.306.1237.0 - Jos van der Zande)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Super Hexagon (HKLM\...\Steam App 221640) (Version:  - Terry Cavanagh)

SystemTools DumpSec (HKLM-x32\...\SystemTools DumpSec) (Version: 2.8.6 - SystemTools Software Inc)

TeamSpeak 3 Client (HKU\S-1-5-21-303598687-36277840-1408844204-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

the Renegade mod tools (HKLM-x32\...\the Renegade mod tools) (Version:  - )

TreeSize Free V3.4.4 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.4.4 - JAM Software)

Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)

UpdateAssistant (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden

Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)

VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.43 - VIA Technologies, Inc.)

VirtualDJ PRO Full (HKLM-x32\...\{4769E972-2E92-49C5-B6F9-465EFD0C4D94}) (Version: 7.0.5 - Atomix Productions)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)

VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.3 - VMware, Inc)

VMware Player (Version: 6.0.3 - VMware, Inc.) Hidden

Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)

WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden

WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)

Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)

Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-303598687-36277840-1408844204-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\-007-009-\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\FileSyncShell64.dll => Kein (Der Dateneintrag hat 7 mehr Zeichen).

CustomCLSID: HKU\S-1-5-21-303598687-36277840-1408844204-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\-007-009-\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\FileSyncShell64.dll => Kein (Der Dateneintrag hat 7 mehr Zeichen).

CustomCLSID: HKU\S-1-5-21-303598687-36277840-1408844204-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\-007-009-\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\FileSyncShell64.dll => Kein (Der Dateneintrag hat 7 mehr Zeichen).
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0A097E71-9D61-469C-B808-A7BE0F38D5C3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-10] (NVIDIA Corporation)

Task: {177FFA73-7B38-4798-9014-636A489918B3} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)

Task: {2C3D1ADD-EF8E-4276-B9D3-C233DF15C53C} - System32\Tasks\Jacilevunupy => "msiexec" /i hxxp://d2buh1bf1g584w.cloudfront.net/msi/rel.php?u=SamsungXSSDX850XPROX128GB_S24ZNSAG348229T&amp;v=2017217 /q

Task: {2E73C1E7-FADA-45AE-BA7D-F7E4AB6A3C58} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-10] (NVIDIA Corporation)

Task: {41267286-88A3-4D4C-8A01-14571E677ED4} - System32\Tasks\SafeZone scheduled Autoupdate 1458943400 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-02-15] (Avast Software)

Task: {7954A2A5-3A36-4A51-A891-FD28C2577C31} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-10] (NVIDIA Corporation)

Task: {84E8A67A-6268-4AC1-8572-A60BD57CA751} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)

Task: {BC70A922-15F2-4B42-9337-5F9D0CA9B1DA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [2016-09-12] (Microsoft Corporation)

Task: {D0D65046-3728-46F6-A126-01FCA1BE8A39} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-02-10] (NVIDIA Corporation)

Task: {D152B598-177A-4881-A123-0F5E87F70750} - System32\Tasks\Avast Emergency Update => Q:\Programme\Avast!\AvEmUpdate.exe [2017-02-17] (AVAST Software)

Task: {D5EB9886-59C6-4EA6-A243-24C138095D32} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-10] (NVIDIA Corporation)

Task: {DF075055-2CA5-4913-8E7E-01EA1CC2F19B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)

Task: {F10B9976-D43A-43E8-8733-4D0F5A1E7022} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)

Task: {F7F4122C-D319-4BAF-8596-CB012077422A} - System32\Tasks\{A1E8D652-1A08-40F0-8BBC-C42A78DC480E} => pcalua.exe -a H:\Downloads\Windows2000-KB904706-v2-x86-DEU.exe -d H:\Downloads
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\-007-009-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki

Shortcut: C:\Users\-007-009-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
 

ShortcutWithArgument: C:\Users\-007-009-\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2fae1f4995fc9e7f\NexonLauncher.lnk -> Q:\Spiele\Nexon\Nexon Launcher\bin\nexon_client\nexon_client.exe (The NWJS Community) -> --user-data-dir="C:\Users\-007-009-\AppData\Local\NexonLauncher\User Data" --profile-directory=Default --app-id=dobbaijafcbikgimjpakclacfgeagffm
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-12-16 10:56 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2017-02-19 11:43 - 2017-02-09 23:57 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2017-02-17 16:44 - 2017-02-17 16:44 - 00307712 _____ () C:\Program Files (x86)\Plocersp Log\local64spl.dll

2016-03-30 19:04 - 2016-12-29 19:37 - 00076888 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe

2016-09-25 00:20 - 2016-09-25 00:21 - 00189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

2016-12-16 10:56 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () Q:\Programme\Notepad++\NppShell_06.dll

2016-11-26 17:47 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2017-01-10 19:45 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2017-01-10 19:44 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2017-01-10 19:44 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-01-10 19:44 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2017-01-10 19:44 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2017-01-10 19:44 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2014-06-12 18:22 - 2014-06-12 18:22 - 01261272 _____ () Q:\Programme\VM Ware Player\libxml2.dll

2016-02-03 19:35 - 2014-09-28 17:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll

2016-12-01 09:59 - 2016-12-01 09:59 - 00143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll

2017-02-17 15:20 - 2017-02-17 15:20 - 00170216 _____ () Q:\Programme\Avast!\JsonRpcServer.dll

2016-07-01 18:11 - 2016-07-01 18:11 - 48936448 _____ () Q:\Programme\Avast!\libcef.dll

2017-02-17 15:20 - 2017-02-17 15:20 - 00289328 _____ () Q:\Programme\Avast!\gaming_mode_ui.dll

2017-02-17 15:20 - 2017-02-17 15:20 - 00655056 _____ () Q:\Programme\Avast!\ffl2.dll

2016-12-16 10:56 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2015-07-10 12:04 - 2017-02-20 23:34 - 00000832 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-303598687-36277840-1408844204-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\-007-009-\Pictures\Desktop\Cloud Server der Telekom vom Rechenzentrum in Bier.jpg

DNS Servers: 192.168.2.166

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: avast! SecureLine TAP Adapter v3

Description: avast! SecureLine TAP Adapter v3

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: TAP-Windows Provider V9

Service: aswTap

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: VMware Virtual Ethernet Adapter for VMnet1

Description: VMware Virtual Ethernet Adapter for VMnet1

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: VMware, Inc.

Service: VMnetAdapter

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: VMware Virtual Ethernet Adapter for VMnet8

Description: VMware Virtual Ethernet Adapter for VMnet8

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: VMware, Inc.

Service: VMnetAdapter

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (02/20/2017 10:42:02 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x1c80

Startzeit der fehlerhaften Anwendung: 0x01d28bc0a5498c52

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 61487b6c-5dbe-410b-a03d-660347d50f49

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 09:51:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x23e8

Startzeit der fehlerhaften Anwendung: 0x01d28bbac95653b2

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 78361d10-d276-488b-a5e8-9b2cabf0c334

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 09:42:55 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x1a44

Startzeit der fehlerhaften Anwendung: 0x01d28bb9dc2dee07

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 1eadcdef-b90f-422c-9dda-ef2e766a22ce

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 02:22:37 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm devenv.exe, Version 11.0.50727.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 984
 

Startzeit: 01d28b7c57ed91eb
 

Beendigungszeit: 6
 

Anwendungspfad: Q:\Programme\Microsoft Visual Studio Premium 2012\Common7\IDE\devenv.exe
 

Berichts-ID: a31132fd-f76f-11e6-9eba-ac220b25eef7
 

Vollständiger Name des fehlerhaften Pakets: 
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID:
 

Error: (02/20/2017 03:15:49 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x7b4

Startzeit der fehlerhaften Anwendung: 0x01d28b1be31c917c

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 17238243-bed1-46d4-adc2-0f99734cb0f4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 03:15:43 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: libstdc++-6.dll, Version: 0.0.0.0, Zeitstempel: 0x51b5fc2c

Ausnahmecode: 0x40000015

Fehleroffset: 0x0001a17d

ID des fehlerhaften Prozesses: 0x7b4

Startzeit der fehlerhaften Anwendung: 0x01d28b1be31c917c

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: Q:\spiele\OpenHexagonV1.92\libstdc++-6.dll

Berichtskennung: a46e1716-eff7-41f3-99d8-f800e3e54a35

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 02:32:49 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0004fe97

ID des fehlerhaften Prozesses: 0x1fc

Startzeit der fehlerhaften Anwendung: 0x01d28b193843f841

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Berichtskennung: f1dd9f3f-722a-4201-af7b-9a17ba886b64

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/20/2017 02:32:12 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x1850

Startzeit der fehlerhaften Anwendung: 0x01d28b18e58664db

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 8e272bc6-09c2-41a5-8187-343e3f295214

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/19/2017 11:29:13 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0004fe97

ID des fehlerhaften Prozesses: 0x7e0

Startzeit der fehlerhaften Anwendung: 0x01d28aff07c080c0

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Berichtskennung: b8f77567-a3ff-48bb-9e81-44bc1671a8e8

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (02/19/2017 11:19:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SSVOpenHexagon.exe, Version: 0.0.0.0, Zeitstempel: 0x51bdd381

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000043

ID des fehlerhaften Prozesses: 0x13c8

Startzeit der fehlerhaften Anwendung: 0x01d28afdfdf3dc46

Pfad der fehlerhaften Anwendung: Q:\spiele\OpenHexagonV1.92\SSVOpenHexagon.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 6aafdb0a-4fc7-478f-904d-71bb0bba3b01

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (02/21/2017 01:57:33 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/21/2017 01:52:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 und der APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/21/2017 01:31:28 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/21/2017 12:13:52 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 und der APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/20/2017 11:36:10 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/20/2017 11:35:20 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 und der APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (02/20/2017 11:34:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "VMware USB Arbitration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (02/20/2017 11:34:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "VMware DHCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/20/2017 11:34:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "VMware Authorization Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/20/2017 11:34:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: AMD FX(tm)-8350 Eight-Core Processor 

Prozentuale Nutzung des RAM: 13%

Installierter physikalischer RAM: 16366.11 MB

Verfügbarer physikalischer RAM: 14227.77 MB

Summe virtueller Speicher: 16566.11 MB

Verfügbarer virtueller Speicher: 14425.22 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:118.75 GB) (Free:94.63 GB) NTFS

Drive h: (Seagate Expansion Drive) (Fixed) (Total:931.51 GB) (Free:626.79 GB) NTFS

Drive i: () (Removable) (Total:57.7 GB) (Free:54.52 GB) NTFS

Drive q: (Volume) (Fixed) (Total:119.12 GB) (Free:77.74 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 7CC7D97E)

Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=118.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 30F4D803)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 4 (Size: 57.7 GB) (Disk ID: 558AAEC9)

Partition 1: (Active) - (Size=57.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Der jhdbca und dieser Plocersplog Ordner waren also Viren. Ok also darf ich behaupten das ich mein System kenne? :rolleyes::D. Gehts noch weiter oder ist jetzt alles wieder in Ordnung/Sauber?
Gruß!

Malwarebyte´s Antirootkit-Log:

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2017.02.21.05

  rootkit: v2017.02.15.01
 

Windows 10 x64 NTFS

Internet Explorer 11.576.14393.0

-007-009- :: Z-1759-Z [administrator]
 

21.02.2017 16:23:41

mbar-log-2017-02-21 (16-23-41).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 399588

Time elapsed: 10 minute(s), 46 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 3

HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\PRINT\PROVIDERS\DU03MV7B (Adware.Sasquor.SPL) -> Delete on reboot. [138634712385ac8aed717a0c0ef27f81]

HKU\.DEFAULT\SOFTWARE\jhdbca (Adware.Elex) -> Delete on reboot. [9ffa980d0e9a41f5a5d8c3e4b05010f0]

HKU\S-1-5-18\SOFTWARE\jhdbca (Adware.Elex) -> Delete on reboot. [514830758721a492f77ee3c57f8143bd]
 

Registry Values Detected: 1

HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\PRINT\PROVIDERS\du03mv7b|Name (Adware.Sasquor.SPL) -> Data: C:\Program Files (x86)\Plocersp Log\local64spl.dll -> Delete on reboot. [138634712385ac8aed717a0c0ef27f81]
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 1

C:\Program Files (x86)\Plocersp Log\local64spl.dll (Adware.Elex) -> Delete on reboot. [e0b9eeb7d2d66ccafeda24dc6a97f010]
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Kaspersky TDSSKiller-Log:

Code:

16:38:44.0576 0x09ec  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01

16:38:46.0883 0x09ec  ============================================================

16:38:46.0883 0x09ec  Current date / time: 2017/02/21 16:38:46.0883

16:38:46.0883 0x09ec  SystemInfo:

16:38:46.0885 0x09ec  

16:38:46.0885 0x09ec  OS Version: 10.0.14393 ServicePack: 0.0

16:38:46.0885 0x09ec  Product type: Workstation

16:38:46.0885 0x09ec  ComputerName: Z-1759-Z

16:38:46.0885 0x09ec  UserName: -007-009-

16:38:46.0885 0x09ec  Windows directory: C:\WINDOWS

16:38:46.0885 0x09ec  System windows directory: C:\WINDOWS

16:38:46.0885 0x09ec  Running under WOW64

16:38:46.0885 0x09ec  Processor architecture: Intel x64

16:38:46.0885 0x09ec  Number of processors: 8

16:38:46.0885 0x09ec  Page size: 0x1000

16:38:46.0886 0x09ec  Boot type: Normal boot

16:38:46.0886 0x09ec  CodeIntegrityOptions = 0x00000001

16:38:46.0886 0x09ec  ============================================================

16:38:46.0963 0x09ec  KLMD registered as C:\WINDOWS\system32\drivers\17847300.sys

16:38:46.0963 0x09ec  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.693, osProperties = 0x19

16:38:47.0199 0x09ec  System UUID: {4177BD28-A88A-2199-057D-1049A6E961D9}

16:38:47.0563 0x09ec  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:38:47.0563 0x09ec  Drive \Device\Harddisk1\DR1 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:38:47.0572 0x09ec  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB5E00 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

16:38:47.0885 0x09ec  Drive \Device\Harddisk3\DR3 - Size: 0xE6D000000 ( 57.70 Gb ), SectorSize: 0x200, Cylinders: 0x1D6C, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

16:38:47.0896 0x09ec  ============================================================

16:38:47.0896 0x09ec  \Device\Harddisk0\DR0:

16:38:47.0898 0x09ec  MBR partitions:

16:38:47.0898 0x09ec  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xFA000

16:38:47.0898 0x09ec  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xFA800, BlocksNum 0xED81000

16:38:47.0898 0x09ec  \Device\Harddisk1\DR1:

16:38:47.0900 0x09ec  GPT partitions:

16:38:47.0901 0x09ec  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {90276AB8-B83D-4C23-9A63-AA56C81951B1}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000

16:38:47.0901 0x09ec  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {A6A61D34-026E-4FC0-89ED-228CD8D128A7}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0xEE3B800

16:38:47.0901 0x09ec  MBR partitions:

16:38:47.0901 0x09ec  \Device\Harddisk2\DR2:

16:38:47.0901 0x09ec  MBR partitions:

16:38:47.0901 0x09ec  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800

16:38:47.0901 0x09ec  \Device\Harddisk3\DR3:

16:38:47.0902 0x09ec  MBR partitions:

16:38:47.0902 0x09ec  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7367FC1

16:38:47.0902 0x09ec  ============================================================

16:38:47.0903 0x09ec  C: <-> \Device\Harddisk0\DR0\Partition2

16:38:47.0926 0x09ec  H: <-> \Device\Harddisk2\DR2\Partition1

16:38:47.0929 0x09ec  Q: <-> \Device\Harddisk1\DR1\Partition2

16:38:47.0929 0x09ec  ============================================================

16:38:47.0929 0x09ec  Initialize success

16:38:47.0929 0x09ec  ============================================================

16:39:25.0421 0x238c  ============================================================

16:39:25.0421 0x238c  Scan started

16:39:25.0421 0x238c  Mode: Manual; SigCheck; TDLFS; 

16:39:25.0421 0x238c  ============================================================

16:39:25.0421 0x238c  KSN ping started

16:39:30.0602 0x238c  KSN ping finished: true

16:39:30.0948 0x238c  ================ Scan system memory ========================

16:39:30.0948 0x238c  System memory - ok

16:39:30.0948 0x238c  ================ Scan services =============================

16:39:30.0986 0x238c  1394ohci - ok

16:39:30.0989 0x238c  3ware - ok

16:39:30.0994 0x238c  ACPI - ok

16:39:30.0996 0x238c  AcpiDev - ok

16:39:30.0999 0x238c  acpiex - ok

16:39:31.0003 0x238c  acpipagr - ok

16:39:31.0006 0x238c  AcpiPmi - ok

16:39:31.0009 0x238c  acpitime - ok

16:39:31.0015 0x238c  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

16:39:31.0055 0x238c  AdobeARMservice - ok

16:39:31.0064 0x238c  ADP80XX - ok

16:39:31.0069 0x238c  AFD - ok

16:39:31.0074 0x238c  ahcache - ok

16:39:31.0078 0x238c  AJRouter - ok

16:39:31.0081 0x238c  ALG - ok

16:39:31.0084 0x238c  AmdK8 - ok

16:39:31.0088 0x238c  AmdPPM - ok

16:39:31.0091 0x238c  amdsata - ok

16:39:31.0095 0x238c  amdsbs - ok

16:39:31.0098 0x238c  amdxata - ok

16:39:31.0102 0x238c  AppHostSvc - ok

16:39:31.0105 0x238c  AppID - ok

16:39:31.0109 0x238c  AppIDSvc - ok

16:39:31.0112 0x238c  Appinfo - ok

16:39:31.0115 0x238c  applockerfltr - ok

16:39:31.0118 0x238c  AppMgmt - ok

16:39:31.0122 0x238c  AppReadiness - ok

16:39:31.0126 0x238c  AppVClient - ok

16:39:31.0129 0x238c  AppvStrm - ok

16:39:31.0133 0x238c  AppvVemgr - ok

16:39:31.0136 0x238c  AppvVfs - ok

16:39:31.0139 0x238c  AppXSvc - ok

16:39:31.0143 0x238c  arcsas - ok

16:39:31.0156 0x238c  aspnet_state - ok

16:39:31.0307 0x238c  [ AE3D994671A0497B9EA53E0CB686A471, 56F91FC9FF57D17FAB6B6B92CE25AC4ACFB9EF4EF79B81EECED021A1C29E6BF0 ] aswbIDSAgent    Q:\Programme\Avast!\x64\aswidsagenta.exe

16:39:31.0491 0x238c  aswbIDSAgent - ok

16:39:31.0511 0x238c  [ 6F75DD4F4FD75123D25A0617EECE6FDE, F58C08B2FB0E096D707AEB24B4DFDD6039D09858D66452243D30ABD2A1DA90B3 ] aswbidsdriver   C:\WINDOWS\system32\drivers\aswbidsdrivera.sys

16:39:31.0540 0x238c  aswbidsdriver - ok

16:39:31.0548 0x238c  [ 40C2E8C97ECA864335FA3F0078B6B5EF, 4269F0DB1DC2CD49E23F344C6289F9474FE74119F262645B4478EF6DD1D0A577 ] aswbidsh        C:\WINDOWS\system32\drivers\aswbidsha.sys

16:39:31.0568 0x238c  aswbidsh - ok

16:39:31.0578 0x238c  [ 92CF5055E25B608B54B42A88F805ACD4, 4C33AFE136FDD1EC5E67006720A2BD9B00501135805C1A9E69550505134AF294 ] aswblog         C:\WINDOWS\system32\drivers\aswbloga.sys

16:39:31.0604 0x238c  aswblog - ok

16:39:31.0609 0x238c  [ B322161C7CFC1F81B77CC87AD5D85BBA, 348198F7FA06C3729B87388A1782E982C8D4ED2AE6E424A0568AA68851585A21 ] aswbuniv        C:\WINDOWS\system32\drivers\aswbuniva.sys

16:39:31.0625 0x238c  aswbuniv - ok

16:39:31.0630 0x238c  [ 1CB55C233334A3A3DACDD99647753055, BE4A23F38BD5233346DB01FA6E9387B3B3FAC3669AEF3E8DEF89F5464FFCF0D9 ] aswHwid         C:\WINDOWS\system32\drivers\aswHwid.sys

16:39:31.0649 0x238c  aswHwid - ok

16:39:31.0654 0x238c  [ 18ABFE3C4878E2F410A23383DB850CF6, 9F348C071FCAE2595FBFD0488050393900AEFDDEAD898514AB68C9CDE7409A07 ] aswKbd          C:\WINDOWS\system32\drivers\aswKbd.sys

16:39:31.0671 0x238c  aswKbd - ok

16:39:31.0676 0x238c  [ 7534937F601E1CF6D63BCFD3768982F0, 8A509E2B2A0A176ACE7C7302C55566171F244F49C011CF42881F79088304059B ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys

16:39:31.0700 0x238c  aswMonFlt - ok

16:39:31.0712 0x238c  [ 2D36950E1ABE3905F2DC28BBDABA1187, 6A299FFD9CDD4E86F05703FA9F23D2C090BA77A64CE393611DB125C326BE092F ] aswNetSec       C:\WINDOWS\system32\drivers\aswNetSec.sys

16:39:31.0731 0x238c  aswNetSec - ok

16:39:31.0737 0x238c  [ 29EF51E9D17276AFAA354AE09A543688, 9BB26119F876AA67C637B7642687555DB5B1D61683BCF30F0BF1C8C53EA17340 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys

16:39:31.0758 0x238c  aswRdr - ok

16:39:31.0763 0x238c  [ EF03E68187720D35092E3D6858064170, C81B7005C50D7CFC0FED24DB42BA435F3C04898C0F7C4A58772D0439F45B5AA4 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys

16:39:31.0783 0x238c  aswRvrt - ok

16:39:31.0806 0x238c  [ 9A95D9A2726393975C3DD50751085B83, 37187F8BF05F7C6EA33B798F92282109DEF5C1806D5CFAB334DB1F9FD429CE49 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys

16:39:31.0865 0x238c  aswSnx - ok

16:39:31.0880 0x238c  [ 11DF322991B0E54278D5EBB7C7E3BCC8, CF133C27E740DD3D1BA84DFDFC668B279832995E8CE21F029CE978CA0575425F ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys

16:39:31.0921 0x238c  aswSP - ok

16:39:31.0929 0x238c  [ 69AE094434DCDB5ABE292F4EBD261C9B, CBD3D8216B8C4D4A6A6A5D5BDCC7E77EC3F4BD4428C231E2C406A0205504BE44 ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys

16:39:31.0940 0x238c  aswStm - ok

16:39:31.0945 0x238c  [ E4ABC023E251D2BB6B98C9FCAF5CF16D, 2A94320A3EF16E641B693BF6EABABB57C891B914B00F73ACD7ADB8CA5089EC40 ] aswTap          C:\WINDOWS\System32\drivers\aswTap.sys

16:39:31.0963 0x238c  aswTap - ok

16:39:31.0973 0x238c  [ FF7843417D319B14F96AC4D883D5BEEA, 3283AD20E23F8C15A1C35B0431B32A9EB8B79D8AD6CAF0C5305E26C43DA10B97 ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys

16:39:32.0004 0x238c  aswVmm - ok

16:39:32.0008 0x238c  AsyncMac - ok

16:39:32.0011 0x238c  atapi - ok

16:39:32.0014 0x238c  AudioEndpointBuilder - ok

16:39:32.0018 0x238c  Audiosrv - ok

16:39:32.0027 0x238c  [ EE5315059F4F7AF1E0E2082CF914839C, 4B41A3A1E19A3E14E11BD9F8A9FE97465E01E8F9B7DE7580F689BF723C246A42 ] avast! Antivirus Q:\Programme\Avast!\AvastSvc.exe

16:39:32.0041 0x238c  avast! Antivirus - ok

16:39:32.0051 0x238c  [ F1AD1E531E90B312BEB5F1E6B5A80A97, 23B59750E3F2B7B15026574DAAFE15030436CA044A9E26CD4DF69B670B2C4F87 ] avast! Firewall Q:\Programme\Avast!\afwServ.exe

16:39:32.0064 0x238c  avast! Firewall - ok

16:39:32.0084 0x238c  [ 85D7960265C55C141A36DD4F2EBF3CE3, 09A8D45D1AAC9CE74749C58A0F5FC441D9CDEE1CBA41F47EC8D9D59605C92992 ] AVerAF35        C:\WINDOWS\System32\Drivers\AVerAF35.sys

16:39:32.0139 0x238c  AVerAF35 - ok

16:39:32.0145 0x238c  AxInstSV - ok

16:39:32.0148 0x238c  b06bdrv - ok

16:39:32.0151 0x238c  BasicDisplay - ok

16:39:32.0155 0x238c  BasicRender - ok

16:39:32.0160 0x238c  bcmfn - ok

16:39:32.0164 0x238c  bcmfn2 - ok

16:39:32.0167 0x238c  BDESVC - ok

16:39:32.0170 0x238c  Beep - ok

16:39:32.0173 0x238c  BFE - ok

16:39:32.0177 0x238c  BITS - ok

16:39:32.0180 0x238c  bowser - ok

16:39:32.0183 0x238c  BrokerInfrastructure - ok

16:39:32.0187 0x238c  BthAvrcpTg - ok

16:39:32.0190 0x238c  BthHFEnum - ok

16:39:32.0193 0x238c  bthhfhid - ok

16:39:32.0197 0x238c  BthHFSrv - ok

16:39:32.0200 0x238c  BTHMODEM - ok

16:39:32.0205 0x238c  bthserv - ok

16:39:32.0209 0x238c  buttonconverter - ok

16:39:32.0214 0x238c  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys

16:39:32.0247 0x238c  CapImg - ok

16:39:32.0250 0x238c  cdfs - ok

16:39:32.0254 0x238c  CDPSvc - ok

16:39:32.0257 0x238c  CDPUserSvc - ok

16:39:32.0262 0x238c  cdrom - ok

16:39:32.0265 0x238c  CertPropSvc - ok

16:39:32.0270 0x238c  cht4iscsi - ok

16:39:32.0273 0x238c  cht4vbd - ok

16:39:32.0277 0x238c  circlass - ok

16:39:32.0280 0x238c  CLFS - ok

16:39:32.0283 0x238c  ClipSVC - ok

16:39:32.0287 0x238c  clreg - ok

16:39:32.0295 0x238c  CmBatt - ok

16:39:32.0299 0x238c  [ 84FC81FF9F291A0FC8D10933C1748F66, 46B6C64659A24C1D4917963FECEC2D6AED516C047762F0B4E67651CF8241A7D8 ] CM_VENDER_CMD   C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys

16:39:32.0316 0x238c  CM_VENDER_CMD - ok

16:39:32.0319 0x238c  CNG - ok

16:39:32.0323 0x238c  cnghwassist - ok

16:39:32.0337 0x238c  CompositeBus - ok

16:39:32.0340 0x238c  COMSysApp - ok

16:39:32.0344 0x238c  condrv - ok

16:39:32.0347 0x238c  CoreMessagingRegistrar - ok

16:39:32.0353 0x238c  CryptSvc - ok

16:39:32.0358 0x238c  CSC - ok

16:39:32.0361 0x238c  CscService - ok

16:39:32.0365 0x238c  dam - ok

16:39:32.0370 0x238c  DcomLaunch - ok

16:39:32.0373 0x238c  DcpSvc - ok

16:39:32.0376 0x238c  defragsvc - ok

16:39:32.0380 0x238c  DeviceAssociationService - ok

16:39:32.0384 0x238c  DeviceInstall - ok

16:39:32.0387 0x238c  DevQueryBroker - ok

16:39:32.0391 0x238c  Dfsc - ok

16:39:32.0395 0x238c  Dhcp - ok

16:39:32.0399 0x238c  diagnosticshub.standardcollector.service - ok

16:39:32.0402 0x238c  DiagTrack - ok

16:39:32.0406 0x238c  disk - ok

16:39:32.0409 0x238c  DmEnrollmentSvc - ok

16:39:32.0413 0x238c  dmvsc - ok

16:39:32.0416 0x238c  dmwappushservice - ok

16:39:32.0419 0x238c  Dnscache - ok

16:39:32.0424 0x238c  dot3svc - ok

16:39:32.0427 0x238c  DPS - ok

16:39:32.0431 0x238c  drmkaud - ok

16:39:32.0434 0x238c  DsmSvc - ok

16:39:32.0438 0x238c  DsSvc - ok

16:39:32.0442 0x238c  DXGKrnl - ok

16:39:32.0445 0x238c  EapHost - ok

16:39:32.0448 0x238c  ebdrv - ok

16:39:32.0451 0x238c  EFS - ok

16:39:32.0455 0x238c  EhStorClass - ok

16:39:32.0460 0x238c  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys

16:39:32.0487 0x238c  EhStorTcgDrv - ok

16:39:32.0492 0x238c  embeddedmode - ok

16:39:32.0496 0x238c  EntAppSvc - ok

16:39:32.0499 0x238c  ErrDev - ok

16:39:32.0505 0x238c  EventSystem - ok

16:39:32.0509 0x238c  exfat - ok

16:39:32.0512 0x238c  fastfat - ok

16:39:32.0515 0x238c  Fax - ok

16:39:32.0519 0x238c  fdc - ok

16:39:32.0522 0x238c  fdPHost - ok

16:39:32.0525 0x238c  FDResPub - ok

16:39:32.0529 0x238c  fhsvc - ok

16:39:32.0532 0x238c  FileCrypt - ok

16:39:32.0536 0x238c  FileInfo - ok

16:39:32.0539 0x238c  Filetrace - ok

16:39:32.0543 0x238c  flpydisk - ok

16:39:32.0546 0x238c  FltMgr - ok

16:39:32.0550 0x238c  FontCache - ok

16:39:32.0553 0x238c  FontCache3.0.0.0 - ok

16:39:32.0556 0x238c  FrameServer - ok

16:39:32.0559 0x238c  FsDepends - ok

16:39:32.0563 0x238c  Fs_Rec - ok

16:39:32.0570 0x238c  [ 895BA1CFF25E867CE5A52073E905C93B, A417065E831B768BD76364EC1E5FEDAADF172DCD1E6C2A134CB311EDDC2DC477 ] fussvc          C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe

16:39:32.0582 0x238c  fussvc - detected UnsignedFile.Multi.Generic ( 1 )

16:39:35.0861 0x238c  Detect skipped due to KSN trusted

16:39:35.0861 0x238c  fussvc - ok

16:39:35.0864 0x238c  fvevol - ok

16:39:35.0868 0x238c  gencounter - ok

16:39:35.0871 0x238c  genericusbfn - ok

16:39:35.0874 0x238c  GPIOClx0101 - ok

16:39:35.0878 0x238c  gpsvc - ok

16:39:35.0881 0x238c  GpuEnergyDrv - ok

16:39:35.0885 0x238c  [ BDDBCFF870442B3C24C158CD53079132, 62314C296ACF1EF9EB38FB70B66B57D1BB9917C8536B39892272D172BC58A5C3 ] hcmon           C:\WINDOWS\system32\drivers\hcmon.sys

16:39:35.0903 0x238c  hcmon - ok

16:39:35.0907 0x238c  HdAudAddService - ok

16:39:35.0910 0x238c  HDAudBus - ok

16:39:35.0913 0x238c  HidBatt - ok

16:39:35.0916 0x238c  HidBth - ok

16:39:35.0921 0x238c  hidi2c - ok

16:39:35.0924 0x238c  hidinterrupt - ok

16:39:35.0928 0x238c  HidIr - ok

16:39:35.0931 0x238c  hidserv - ok

16:39:35.0936 0x238c  HidUsb - ok

16:39:35.0939 0x238c  HomeGroupListener - ok

16:39:35.0943 0x238c  HomeGroupProvider - ok

16:39:35.0946 0x238c  HpSAMD - ok

16:39:35.0949 0x238c  HTTP - ok

16:39:35.0952 0x238c  HvHost - ok

16:39:35.0955 0x238c  hvservice - ok

16:39:35.0959 0x238c  hwpolicy - ok

16:39:35.0963 0x238c  hyperkbd - ok

16:39:35.0966 0x238c  i8042prt - ok

16:39:35.0970 0x238c  iagpio - ok

16:39:35.0973 0x238c  iai2c - ok

16:39:35.0977 0x238c  iaLPSS2i_GPIO2 - ok

16:39:35.0980 0x238c  iaLPSS2i_I2C - ok

16:39:35.0984 0x238c  iaLPSSi_GPIO - ok

16:39:35.0987 0x238c  iaLPSSi_I2C - ok

16:39:35.0991 0x238c  iaStorAV - ok

16:39:35.0994 0x238c  iaStorV - ok

16:39:35.0998 0x238c  ibbus - ok

16:39:36.0001 0x238c  icssvc - ok

16:39:36.0004 0x238c  IKEEXT - ok

16:39:36.0007 0x238c  IndirectKmd - ok

16:39:36.0014 0x238c  intelide - ok

16:39:36.0018 0x238c  intelpep - ok

16:39:36.0021 0x238c  intelppm - ok

16:39:36.0025 0x238c  iorate - ok

16:39:36.0028 0x238c  IpFilterDriver - ok

16:39:36.0032 0x238c  iphlpsvc - ok

16:39:36.0035 0x238c  IPMIDRV - ok

16:39:36.0039 0x238c  IPNAT - ok

16:39:36.0042 0x238c  irda - ok

16:39:36.0046 0x238c  IRENUM - ok

16:39:36.0049 0x238c  irmon - ok

16:39:36.0053 0x238c  isapnp - ok

16:39:36.0056 0x238c  iScsiPrt - ok

16:39:36.0060 0x238c  kbdclass - ok

16:39:36.0063 0x238c  kbdhid - ok

16:39:36.0067 0x238c  kdnic - ok

16:39:36.0070 0x238c  KeyIso - ok

16:39:36.0074 0x238c  KSecDD - ok

16:39:36.0077 0x238c  KSecPkg - ok

16:39:36.0081 0x238c  ksthunk - ok

16:39:36.0084 0x238c  KtmRm - ok

16:39:36.0088 0x238c  [ 35649357A0578F7E208ECCB87884C756, FEEEF17E6B1E697EEC169B0CBAFF68DA45DFADC039DD52F93C83BEB46ADA4322 ] ladfGSS         C:\WINDOWS\system32\drivers\ladfGSS.sys

16:39:36.0108 0x238c  ladfGSS - ok

16:39:36.0119 0x238c  [ 305BB2AC00D46542E0A653AB63F4ABB1, E3BE57A0EBB1194656D20C11688863A7864B06223419F688D82881F9F49604B6 ] LADF_CaptureOnly C:\WINDOWS\system32\DRIVERS\ladfGSCamd64.sys

16:39:36.0136 0x238c  LADF_CaptureOnly - ok

16:39:36.0143 0x238c  [ 28CDDC7D478A6313F55077416DCBD0DE, EE4174FC9444856DF0693D1A5F16EB88352A3B012AA82D49C462980703981A7A ] LADF_RenderOnly C:\WINDOWS\system32\DRIVERS\ladfGSRamd64.sys

16:39:36.0163 0x238c  LADF_RenderOnly - ok

16:39:36.0166 0x238c  LanmanServer - ok

16:39:36.0170 0x238c  LanmanWorkstation - ok

16:39:36.0174 0x238c  lfsvc - ok

16:39:36.0179 0x238c  [ 5E7641AECAC4CFC7B4B442B461A25C83, 1F6AF4ED863C17A1A326A4CB0D289EAABFAD748A6B0A7CE40CF842694572FDB7 ] LGBusEnum       C:\WINDOWS\system32\drivers\LGBusEnum.sys

16:39:36.0200 0x238c  LGBusEnum - ok

16:39:36.0204 0x238c  [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp      C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys

16:39:36.0220 0x238c  LGCoreTemp - ok

16:39:36.0225 0x238c  [ 822A0DFDF63EEF9786C3946EAA98FDF7, 940F1DE2610BBBC728BBDB2AAABBD232AB4B3F53530A0D54EB50416D89C133DC ] LGJoyHidFilter  C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys

16:39:36.0246 0x238c  LGJoyHidFilter - ok

16:39:36.0251 0x238c  [ 7D24DEBE7BC0C01A30A9A65806B61453, 342E758AD6F88E3FA83B69F26836A9F54D1A3BE344D1D2F9C6394E085E5FCA92 ] LGJoyXlCore     C:\WINDOWS\system32\drivers\LGJoyXlCore.sys

16:39:36.0271 0x238c  LGJoyXlCore - ok

16:39:36.0276 0x238c  [ 07B1C1927BAE6431D3DFB1816DF05BBA, 9B296F6E801D14CE89F5E3EA9B3962EE99E1D3E22077D075F5B0EE4FE3CAB65E ] lgLowAudio      C:\WINDOWS\system32\drivers\lgLowAudio.sys

16:39:36.0293 0x238c  lgLowAudio - ok

16:39:36.0297 0x238c  [ DBEAB45BA2B47C057F3BAE5AD0654173, 9660B803F4AD4BD3427F1A24D09B2712E4DC0E25A18942984AF01750D77C118C ] LGVirHid        C:\WINDOWS\system32\drivers\LGVirHid.sys

16:39:36.0317 0x238c  LGVirHid - ok

16:39:36.0321 0x238c  LicenseManager - ok

16:39:36.0324 0x238c  lltdio - ok

16:39:36.0327 0x238c  lltdsvc - ok

16:39:36.0331 0x238c  lmhosts - ok

16:39:36.0337 0x238c  [ B78534B305C93D18CAED123E1F9346E5, 19FE198E0D7C81AAF1A00700AB85F19E37E4198EDB8A59C55D1766E03D9E060F ] LogiRegistryService C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

16:39:36.0347 0x238c  LogiRegistryService - ok

16:39:36.0352 0x238c  LSI_SAS - ok

16:39:36.0355 0x238c  LSI_SAS2i - ok

16:39:36.0359 0x238c  LSI_SAS3i - ok

16:39:36.0362 0x238c  LSI_SSS - ok

16:39:36.0366 0x238c  LSM - ok

16:39:36.0369 0x238c  luafv - ok

16:39:36.0373 0x238c  MapsBroker - ok

16:39:36.0376 0x238c  megasas - ok

16:39:36.0381 0x238c  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\WINDOWS\system32\drivers\MegaSas2i.sys

16:39:36.0403 0x238c  megasas2i - ok

16:39:36.0407 0x238c  megasr - ok

16:39:36.0410 0x238c  MessagingService - ok

16:39:36.0415 0x238c  mlx4_bus - ok

16:39:36.0419 0x238c  MMCSS - ok

16:39:36.0422 0x238c  Modem - ok

16:39:36.0425 0x238c  monitor - ok

16:39:36.0428 0x238c  mouclass - ok

16:39:36.0432 0x238c  mouhid - ok

16:39:36.0435 0x238c  mountmgr - ok

16:39:36.0438 0x238c  mpsdrv - ok

16:39:36.0442 0x238c  MpsSvc - ok

16:39:36.0445 0x238c  MRxDAV - ok

16:39:36.0449 0x238c  mrxsmb - ok

16:39:36.0452 0x238c  mrxsmb20 - ok

16:39:36.0456 0x238c  MsBridge - ok

16:39:36.0460 0x238c  MSDTC - ok

16:39:36.0466 0x238c  Msfs - ok

16:39:36.0469 0x238c  msgpiowin32 - ok

16:39:36.0473 0x238c  mshidkmdf - ok

16:39:36.0477 0x238c  mshidumdf - ok

16:39:36.0480 0x238c  msisadrv - ok

16:39:36.0484 0x238c  MSiSCSI - ok

16:39:36.0487 0x238c  msiserver - ok

16:39:36.0491 0x238c  MSKSSRV - ok

16:39:36.0494 0x238c  MsLldp - ok

16:39:36.0497 0x238c  MSPCLOCK - ok

16:39:36.0501 0x238c  MSPQM - ok

16:39:36.0504 0x238c  MsRPC - ok

16:39:36.0510 0x238c  MsSecFlt - ok

16:39:36.0513 0x238c  mssmbios - ok

16:39:36.0517 0x238c  MSTEE - ok

16:39:36.0520 0x238c  MTConfig - ok

16:39:36.0524 0x238c  [ 640617B6E682A150C36BE39D78547F6C, 784F712E9DC3EEE81F07946BBA08AA2BEAC7B3961E430B75043645EF7ECA715C ] MTsensor        C:\WINDOWS\system32\DRIVERS\ASACPI.sys

16:39:36.0541 0x238c  MTsensor - ok

16:39:36.0545 0x238c  Mup - ok

16:39:36.0548 0x238c  mvumis - ok

16:39:36.0553 0x238c  NativeWifiP - ok

16:39:36.0557 0x238c  NcaSvc - ok

16:39:36.0560 0x238c  NcbService - ok

16:39:36.0563 0x238c  NcdAutoSetup - ok

16:39:36.0567 0x238c  ndfltr - ok

16:39:36.0571 0x238c  NDIS - ok

16:39:36.0574 0x238c  NdisCap - ok

16:39:36.0577 0x238c  NdisImPlatform - ok

16:39:36.0581 0x238c  NdisTapi - ok

16:39:36.0584 0x238c  Ndisuio - ok

16:39:36.0587 0x238c  NdisVirtualBus - ok

16:39:36.0590 0x238c  NdisWan - ok

16:39:36.0594 0x238c  ndiswanlegacy - ok

16:39:36.0597 0x238c  ndproxy - ok

16:39:36.0600 0x238c  Ndu - ok

16:39:36.0604 0x238c  NetAdapterCx - ok

16:39:36.0607 0x238c  NetBIOS - ok

16:39:36.0612 0x238c  NetBT - ok

16:39:36.0615 0x238c  Netlogon - ok

16:39:36.0618 0x238c  Netman - ok

16:39:36.0622 0x238c  netprofm - ok

16:39:36.0625 0x238c  NetSetupSvc - ok

16:39:36.0631 0x238c  NetTcpPortSharing - ok

16:39:36.0636 0x238c  NgcCtnrSvc - ok

16:39:36.0640 0x238c  NgcSvc - ok

16:39:36.0643 0x238c  NlaSvc - ok

16:39:36.0646 0x238c  Npfs - ok

16:39:36.0650 0x238c  npsvctrig - ok

16:39:36.0653 0x238c  nsi - ok

16:39:36.0656 0x238c  nsiproxy - ok

16:39:36.0661 0x238c  NTFS - ok

16:39:36.0665 0x238c  Null - ok

16:39:36.0674 0x238c  [ 207A78939B7BBA0EFE8BFA947A35E71C, BB7DDFED575F81CAB958DDC7CFF2D798EB14DAE633F49FA2229D98BDC489C0EE ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys

16:39:36.0688 0x238c  NVHDA - ok

16:39:36.0985 0x238c  [ 9337A5F17702A0FFE1E6C6978619B872, 8D4505BA62977BFE8C01F1ABD027AFBAEAA0D3EA6336865E46C28818471B196E ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_0cc477a6fec64d8c\nvlddmkm.sys

16:39:37.0329 0x238c  nvlddmkm - ok

16:39:37.0355 0x238c  nvraid - ok

16:39:37.0358 0x238c  nvstor - ok

16:39:37.0362 0x238c  OneSyncSvc - ok

16:39:37.0367 0x238c  p2pimsvc - ok

16:39:37.0371 0x238c  p2psvc - ok

16:39:37.0376 0x238c  Parport - ok

16:39:37.0379 0x238c  partmgr - ok

16:39:37.0383 0x238c  PcaSvc - ok

16:39:37.0393 0x238c  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\WINDOWS\system32\drivers\pci.sys

16:39:37.0428 0x238c  pci - ok

16:39:37.0433 0x238c  pciide - ok

16:39:37.0436 0x238c  pcmcia - ok

16:39:37.0440 0x238c  pcw - ok

16:39:37.0444 0x238c  pdc - ok

16:39:37.0447 0x238c  PEAUTH - ok

16:39:37.0451 0x238c  PeerDistSvc - ok

16:39:37.0454 0x238c  percsas2i - ok

16:39:37.0458 0x238c  percsas3i - ok

16:39:37.0480 0x238c  PerfHost - ok

16:39:37.0488 0x238c  PhoneSvc - ok

16:39:37.0492 0x238c  PimIndexMaintenanceSvc - ok

16:39:37.0498 0x238c  pla - ok

16:39:37.0502 0x238c  PlugPlay - ok

16:39:37.0505 0x238c  PnkBstrA - ok

16:39:37.0509 0x238c  PNRPAutoReg - ok

16:39:37.0512 0x238c  PNRPsvc - ok

16:39:37.0516 0x238c  PolicyAgent - ok

16:39:37.0521 0x238c  Power - ok

16:39:37.0525 0x238c  PptpMiniport - ok

16:39:37.0595 0x238c  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll

16:39:37.0718 0x238c  PrintNotify - ok

16:39:37.0727 0x238c  Processor - ok

16:39:37.0731 0x238c  ProfSvc - ok

16:39:37.0734 0x238c  Psched - ok

16:39:37.0738 0x238c  QWAVE - ok

16:39:37.0741 0x238c  QWAVEdrv - ok

16:39:37.0745 0x238c  RasAcd - ok

16:39:37.0748 0x238c  RasAgileVpn - ok

16:39:37.0752 0x238c  RasAuto - ok

16:39:37.0756 0x238c  Rasl2tp - ok

16:39:37.0760 0x238c  RasMan - ok

16:39:37.0763 0x238c  RasPppoe - ok

16:39:37.0767 0x238c  RasSstp - ok

16:39:37.0775 0x238c  [ 5753CD9159718444F6D9E1634B984BF5, A4D6FB6583724F3DDDBA768D7786EB7E3AB1C8074F66DA9462BBB159CDFA2868 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

16:39:37.0786 0x238c  Razer Game Scanner Service - ok

16:39:37.0790 0x238c  rdbss - ok

16:39:37.0795 0x238c  rdpbus - ok

16:39:37.0799 0x238c  RDPDR - ok

16:39:37.0806 0x238c  RdpVideoMiniport - ok

16:39:37.0810 0x238c  rdyboost - ok

16:39:37.0813 0x238c  ReFSv1 - ok

16:39:37.0819 0x238c  RemoteAccess - ok

16:39:37.0823 0x238c  RemoteRegistry - ok

16:39:37.0827 0x238c  RetailDemo - ok

16:39:37.0831 0x238c  RmSvc - ok

16:39:37.0835 0x238c  RpcEptMapper - ok

16:39:37.0839 0x238c  RpcLocator - ok

16:39:37.0843 0x238c  RpcSs - ok

16:39:37.0846 0x238c  rspndr - ok

16:39:37.0867 0x238c  [ 12A3D1530E3F67B8664EBA923A3981E4, 8670C39EB0A7C37C17D014A8917493B776DE0829B55EFED13D91B6FA7B81CA11 ] rt640x64        C:\WINDOWS\System32\drivers\rt640x64.sys

16:39:37.0919 0x238c  rt640x64 - ok

16:39:37.0925 0x238c  [ 30A186D6A2A2853EEFAD7011E212E41B, 367B8FCCF29470C9237FC1F0EAEB59AE51E33778BC9914A2730AC7DDBC84942B ] rzpmgrk         C:\WINDOWS\system32\drivers\rzpmgrk.sys

16:39:37.0935 0x238c  rzpmgrk - ok

16:39:37.0941 0x238c  [ F8A13D4413A93DD005FAD116CBD6B6F7, 8ED0C00920CE76E832701D45117ED00B12E20588CB6FE8039FBCCDFEF9841047 ] rzpnk           C:\Windows\system32\drivers\rzpnk.sys

16:39:37.0962 0x238c  rzpnk - ok

16:39:37.0971 0x238c  [ 421497E425AFB40502013F362E4FA230, 20E2372BEE4BFB21138CA574C9806EC399DDA9D3439F3C391E34ABB2E518106D ] rzudd           C:\WINDOWS\System32\drivers\rzudd.sys

16:39:37.0983 0x238c  rzudd - ok

16:39:37.0988 0x238c  s3cap - ok

16:39:37.0991 0x238c  SamSs - ok

16:39:37.0995 0x238c  sbp2port - ok

16:39:37.0999 0x238c  SCardSvr - ok

16:39:38.0003 0x238c  ScDeviceEnum - ok

16:39:38.0006 0x238c  scfilter - ok

16:39:38.0010 0x238c  Schedule - ok

16:39:38.0014 0x238c  scmbus - ok

16:39:38.0017 0x238c  scmdisk0101 - ok

16:39:38.0022 0x238c  SCPolicySvc - ok

16:39:38.0031 0x238c  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys

16:39:38.0064 0x238c  sdbus - ok

16:39:38.0068 0x238c  SDRSVC - ok

16:39:38.0072 0x238c  sdstor - ok

16:39:38.0076 0x238c  seclogon - ok

16:39:38.0080 0x238c  SENS - ok

16:39:38.0082 0x238c  Sense - ok

16:39:38.0088 0x238c  SensorDataService - ok

16:39:38.0091 0x238c  SensorService - ok

16:39:38.0095 0x238c  SensorsSimulatorDriver - ok

16:39:38.0099 0x238c  SensrSvc - ok

16:39:38.0102 0x238c  SerCx - ok

16:39:38.0106 0x238c  SerCx2 - ok

16:39:38.0110 0x238c  Serenum - ok

16:39:38.0113 0x238c  Serial - ok

16:39:38.0117 0x238c  sermouse - ok

16:39:38.0127 0x238c  SessionEnv - ok

16:39:38.0131 0x238c  sfloppy - ok

16:39:38.0136 0x238c  SharedAccess - ok

16:39:38.0140 0x238c  ShellHWDetection - ok

16:39:38.0144 0x238c  shpamsvc - ok

16:39:38.0148 0x238c  SiSRaid2 - ok

16:39:38.0152 0x238c  SiSRaid4 - ok

16:39:38.0156 0x238c  smphost - ok

16:39:38.0161 0x238c  SmsRouter - ok

16:39:38.0169 0x238c  SNMPTRAP - ok

16:39:38.0184 0x238c  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys

16:39:38.0232 0x238c  spaceport - ok

16:39:38.0237 0x238c  SpbCx - ok

16:39:38.0242 0x238c  Spooler - ok

16:39:38.0246 0x238c  sppsvc - ok

16:39:38.0252 0x238c  [ EAD5300C93946B0250A309E2BF2BE4CF, 6B9131D94ED31F838B1820EE67F068C4741B69D5C655587C89C9477986BD270F ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:39:38.0266 0x238c  SQLWriter - ok

16:39:38.0270 0x238c  srv2 - ok

16:39:38.0274 0x238c  srvnet - ok

16:39:38.0279 0x238c  SSDPSRV - ok

16:39:38.0283 0x238c  SstpSvc - ok

16:39:38.0287 0x238c  StateRepository - ok

16:39:38.0318 0x238c  [ 596DC69BB40A96FCA4B19D9D1E221E34, 3469D3B2E9A88E39C14AE2E3DD5EC3D91FBB88CA568D794555B397B50E64AB15 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

16:39:38.0360 0x238c  Steam Client Service - ok

16:39:38.0367 0x238c  stexstor - ok

16:39:38.0371 0x238c  stisvc - ok

16:39:38.0375 0x238c  storahci - ok

16:39:38.0380 0x238c  storflt - ok

16:39:38.0385 0x238c  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys

16:39:38.0409 0x238c  stornvme - ok

16:39:38.0413 0x238c  storqosflt - ok

16:39:38.0418 0x238c  StorSvc - ok

16:39:38.0422 0x238c  storufs - ok

16:39:38.0426 0x238c  storvsc - ok

16:39:38.0430 0x238c  svsvc - ok

16:39:38.0435 0x238c  swenum - ok

16:39:38.0439 0x238c  swprv - ok

16:39:38.0444 0x238c  Synth3dVsc - ok

16:39:38.0448 0x238c  SysMain - ok

16:39:38.0452 0x238c  SystemEventsBroker - ok

16:39:38.0457 0x238c  TabletInputService - ok

16:39:38.0461 0x238c  TapiSrv - ok

16:39:38.0465 0x238c  Tcpip - ok

16:39:38.0469 0x238c  Tcpip6 - ok

16:39:38.0476 0x238c  tcpipreg - ok

16:39:38.0482 0x238c  tdx - ok

16:39:38.0488 0x238c  [ BB676D2C7AD5E7131D12417E4691F9B9, C6DE7D8C08C2F059C696E9D63FC55692C8CB37FECF92F5A863D7D2C5AF3B425F ] Te.Service      C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe

16:39:38.0499 0x238c  Te.Service - detected UnsignedFile.Multi.Generic ( 1 )

16:39:41.0586 0x238c  Detect skipped due to KSN trusted

16:39:41.0586 0x238c  Te.Service - ok

16:39:41.0590 0x238c  terminpt - ok

16:39:41.0594 0x238c  TermService - ok

16:39:41.0598 0x238c  Themes - ok

16:39:41.0603 0x238c  TieringEngineService - ok

16:39:41.0606 0x238c  tiledatamodelsvc - ok

16:39:41.0611 0x238c  TimeBrokerSvc - ok

16:39:41.0619 0x238c  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\WINDOWS\System32\drivers\tpm.sys

16:39:41.0650 0x238c  TPM - ok

16:39:41.0655 0x238c  TrkWks - ok

16:39:41.0658 0x238c  TrustedInstaller - ok

16:39:41.0665 0x238c  tsusbflt - ok

16:39:41.0669 0x238c  TsUsbGD - ok

16:39:41.0673 0x238c  tsusbhub - ok

16:39:41.0677 0x238c  tunnel - ok

16:39:41.0681 0x238c  tzautoupdate - ok

16:39:41.0685 0x238c  UASPStor - ok

16:39:41.0688 0x238c  UcmCx0101 - ok

16:39:41.0693 0x238c  UcmTcpciCx0101 - ok

16:39:41.0696 0x238c  UcmUcsi - ok

16:39:41.0700 0x238c  Ucx01000 - ok

16:39:41.0704 0x238c  UdeCx - ok

16:39:41.0709 0x238c  udfs - ok

16:39:41.0713 0x238c  UEFI - ok

16:39:41.0717 0x238c  UevAgentDriver - ok

16:39:41.0721 0x238c  UevAgentService - ok

16:39:41.0725 0x238c  Ufx01000 - ok

16:39:41.0729 0x238c  UfxChipidea - ok

16:39:41.0733 0x238c  ufxsynopsys - ok

16:39:41.0742 0x238c  UI0Detect - ok

16:39:41.0745 0x238c  umbus - ok

16:39:41.0749 0x238c  UmPass - ok

16:39:41.0754 0x238c  UmRdpService - ok

16:39:41.0758 0x238c  UnistoreSvc - ok

16:39:41.0765 0x238c  upnphost - ok

16:39:41.0769 0x238c  UrsChipidea - ok

16:39:41.0773 0x238c  UrsCx01000 - ok

16:39:41.0777 0x238c  UrsSynopsys - ok

16:39:41.0781 0x238c  usbaudio - ok

16:39:41.0785 0x238c  usbccgp - ok

16:39:41.0789 0x238c  usbcir - ok

16:39:41.0793 0x238c  usbehci - ok

16:39:41.0797 0x238c  usbhub - ok

16:39:41.0801 0x238c  USBHUB3 - ok

16:39:41.0805 0x238c  usbohci - ok

16:39:41.0809 0x238c  usbprint - ok

16:39:41.0813 0x238c  usbser - ok

16:39:41.0817 0x238c  USBSTOR - ok

16:39:41.0821 0x238c  usbuhci - ok

16:39:41.0825 0x238c  USBXHCI - ok

16:39:41.0829 0x238c  usb_rndisx - ok

16:39:41.0833 0x238c  UserDataSvc - ok

16:39:41.0840 0x238c  UserManager - ok

16:39:41.0844 0x238c  UsoSvc - ok

16:39:41.0849 0x238c  VaultSvc - ok

16:39:41.0853 0x238c  vdrvroot - ok

16:39:41.0857 0x238c  vds - ok

16:39:41.0861 0x238c  VerifierExt - ok

16:39:41.0879 0x238c  [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys

16:39:41.0931 0x238c  vhdmp - ok

16:39:41.0936 0x238c  vhf - ok

16:39:41.0954 0x238c  [ 20D3701C516BB42F81A22EB727B9E419, 08A8D12626A322790C6679554D49AE388E33316121226DE9FCA9C22C8F509C56 ] VIAHdAudAddService C:\WINDOWS\system32\drivers\viahduaa.sys

16:39:42.0000 0x238c  VIAHdAudAddService - ok

16:39:42.0006 0x238c  [ 097A1A16F9F38715CEAA092DE626F517, 5D51D74C3264ADEA1A50F6620150B284E54C5294A548D1BC940B3B5FF5343998 ] VIAKaraokeService C:\WINDOWS\system32\viakaraokesrv.exe

16:39:42.0307 0x238c  VIAKaraokeService - ok

16:39:42.0318 0x238c  [ 2562943B90AFA9829097FB4274276D1D, EE003EF7A3EC49CFEF2EED841482721D7A89368967BFC44CE8DD9D3BDAF0572F ] VMAuthdService  Q:\Programme\VM Ware Player\vmware-authd.exe

16:39:42.0326 0x238c  VMAuthdService - ok

16:39:42.0330 0x238c  vmbus - ok

16:39:42.0334 0x238c  VMBusHID - ok

16:39:42.0340 0x238c  [ BE8E5E5D53ACF71D4E8E686B68C99B04, 4F30A360095FCB2627068FA6A65A951688058E8FDDF5CE895E2AE39500A413B1 ] vmci            C:\WINDOWS\system32\drivers\vmci.sys

16:39:42.0349 0x238c  vmci - ok

16:39:42.0354 0x238c  vmgid - ok

16:39:42.0358 0x238c  vmicguestinterface - ok

16:39:42.0362 0x238c  vmicheartbeat - ok

16:39:42.0367 0x238c  vmickvpexchange - ok

16:39:42.0371 0x238c  vmicrdv - ok

16:39:42.0375 0x238c  vmicshutdown - ok

16:39:42.0379 0x238c  vmictimesync - ok

16:39:42.0383 0x238c  vmicvmsession - ok

16:39:42.0388 0x238c  vmicvss - ok

16:39:42.0393 0x238c  [ 4F19996D0765835797EC7B5F35D12240, FD4D222A373C3DF2B9FC7877C0EC050BF71A6C700FB52984E44FD25E49755A11 ] vmkbd           C:\WINDOWS\system32\drivers\VMkbd.sys

16:39:42.0410 0x238c  vmkbd - ok

16:39:42.0415 0x238c  [ 18AA5F4A3B1204AD00045EE5AD39BCDB, 0211A8E94F169A2A52CD39CD580293907EBE104E52038DC36B988DE1CA7F2392 ] VMnetAdapter    C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys

16:39:42.0432 0x238c  VMnetAdapter - ok

16:39:42.0438 0x238c  [ 04CD4347CD9E8C40F78AD51F7FF426D0, BCA3E593E118BCA30142B23CD1CBE6905442D31C3DEB4C71B06D721E601F7BD8 ] VMnetBridge     C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys

16:39:42.0456 0x238c  VMnetBridge - ok

16:39:42.0484 0x238c  [ 05A869D1B12B08B5601487CA534B5021, 07A4BE681C0C0B23CBD5C05715DAA887D4DDE6D99251BC5D748F321940C23315 ] VMnetDHCP       C:\WINDOWS\SYSWOW64\VMNETDHCP.EXE

16:39:42.0612 0x238c  VMnetDHCP - ok

16:39:42.0618 0x238c  [ F550680013FEA869820CB8320FAA2352, AA98DB7E71737DD8574ADB2DD9531C1DD46BABE99F89ED87D681D6C21BFA0D1C ] VMnetuserif     C:\WINDOWS\system32\drivers\vmnetuserif.sys

16:39:42.0636 0x238c  VMnetuserif - ok

16:39:42.0641 0x238c  [ 396BB5901811148B2999134161FC86B3, 359112FAA69115BDFC212C3BA98DD3E9E73E29F0DC4DE13DBFCAAF4130F4680E ] VMparport       C:\WINDOWS\system32\drivers\VMparport.sys

16:39:42.0660 0x238c  VMparport - ok

16:39:42.0683 0x238c  [ 41FAE6618768DC93D98DDAF3F8282D3E, 95995542026CC111B8FFAA01AC9E55B2F942A9108F5F00502A35339C13BBF20D ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

16:39:42.0710 0x238c  VMUSBArbService - ok

16:39:42.0726 0x238c  [ F13B73E932CACDDE5ED825BDF7AA9637, 4B6C8D82324314294AE439ACDE933E6C8E77635ADE933BC52A0CD9A68927702D ] VMware NAT Service C:\WINDOWS\SYSWOW64\VMNAT.EXE

16:39:42.0749 0x238c  VMware NAT Service - ok

16:39:42.0755 0x238c  [ 227E4EA654B4D52C2AAA8B1DCD5C45DE, 7D9A675A6481D288846D7F22AE15EC62DF31C9385C83D875586EE371CC9C3410 ] vmx86           C:\WINDOWS\system32\drivers\vmx86.sys

16:39:42.0764 0x238c  vmx86 - ok

16:39:42.0769 0x238c  volmgr - ok

16:39:42.0773 0x238c  volmgrx - ok

16:39:42.0779 0x238c  volsnap - ok

16:39:42.0783 0x238c  volume - ok

16:39:42.0789 0x238c  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys

16:39:42.0813 0x238c  vpci - ok

16:39:42.0818 0x238c  vsmraid - ok

16:39:42.0824 0x238c  [ CB4D2E3C5E8BFA3CF6AFFF6DDC6CC70D, 32A891045AF36FEAC62373894B98ABDCEA437978BDE027169C22EBC2C72D586E ] vsock           C:\WINDOWS\system32\drivers\vsock.sys

16:39:42.0843 0x238c  vsock - ok

16:39:42.0858 0x238c  [ F972436B5ED08069A1E7D623B77C226A, FA01505B5EC392ADE55019C22588D2F3608CBF9A6B03A44203F3587D372F8342 ] VSPerfDrv110    Q:\Programme\Microsoft Visual Studio Premium 2012\Team Tools\Performance Tools\x64\VSPerfDrv110.sys

16:39:42.0879 0x238c  VSPerfDrv110 - ok

16:39:42.0884 0x238c  VSS - ok

16:39:42.0889 0x238c  VSTXRAID - ok

16:39:42.0894 0x238c  vwifibus - ok

16:39:42.0898 0x238c  vwififlt - ok

16:39:42.0903 0x238c  W32Time - ok

16:39:42.0907 0x238c  w3logsvc - ok

16:39:42.0911 0x238c  WacomPen - ok

16:39:42.0916 0x238c  WalletService - ok

16:39:42.0921 0x238c  wanarp - ok

16:39:42.0925 0x238c  wanarpv6 - ok

16:39:42.0930 0x238c  WAS - ok

16:39:42.0934 0x238c  wbengine - ok

16:39:42.0939 0x238c  WbioSrvc - ok

16:39:42.0943 0x238c  wcifs - ok

16:39:42.0949 0x238c  Wcmsvc - ok

16:39:42.0954 0x238c  wcncsvc - ok

16:39:42.0959 0x238c  wcnfs - ok

16:39:42.0963 0x238c  WdBoot - ok

16:39:42.0968 0x238c  Wdf01000 - ok

16:39:42.0972 0x238c  WdFilter - ok

16:39:42.0977 0x238c  WdiServiceHost - ok

16:39:42.0982 0x238c  WdiSystemHost - ok

16:39:42.0986 0x238c  wdiwifi - ok

16:39:42.0991 0x238c  WdNisDrv - ok

16:39:42.0995 0x238c  WdNisSvc - ok

16:39:43.0000 0x238c  WebClient - ok

16:39:43.0004 0x238c  Wecsvc - ok

16:39:43.0009 0x238c  WEPHOSTSVC - ok

16:39:43.0014 0x238c  wercplsupport - ok

16:39:43.0018 0x238c  WerSvc - ok

16:39:43.0023 0x238c  WFPLWFS - ok

16:39:43.0028 0x238c  WiaRpc - ok

16:39:43.0032 0x238c  WIMMount - ok

16:39:43.0035 0x238c  WinDefend - ok

16:39:43.0046 0x238c  WindowsTrustedRT - ok

16:39:43.0051 0x238c  WindowsTrustedRTProxy - ok

16:39:43.0055 0x238c  WinHttpAutoProxySvc - ok

16:39:43.0060 0x238c  WinMad - ok

16:39:43.0068 0x238c  Winmgmt - ok

16:39:43.0073 0x238c  WinRM - ok

16:39:43.0082 0x238c  WINUSB - ok

16:39:43.0087 0x238c  WinVerbs - ok

16:39:43.0092 0x238c  wisvc - ok

16:39:43.0097 0x238c  WlanSvc - ok

16:39:43.0102 0x238c  wlidsvc - ok

16:39:43.0106 0x238c  WmiAcpi - ok

16:39:43.0113 0x238c  wmiApSrv - ok

16:39:43.0117 0x238c  WMPNetworkSvc - ok

16:39:43.0122 0x238c  Wof - ok

16:39:43.0130 0x238c  WPDBusEnum - ok

16:39:43.0135 0x238c  WpdUpFltr - ok

16:39:43.0140 0x238c  WpnService - ok

16:39:43.0144 0x238c  WpnUserService - ok

16:39:43.0152 0x238c  ws2ifsl - ok

16:39:43.0157 0x238c  wscsvc - ok

16:39:43.0161 0x238c  WSearch - ok

16:39:43.0169 0x238c  wuauserv - ok

16:39:43.0173 0x238c  WudfPf - ok

16:39:43.0178 0x238c  WUDFRd - ok

16:39:43.0182 0x238c  wudfsvc - ok

16:39:43.0187 0x238c  WUDFWpdFs - ok

16:39:43.0191 0x238c  WUDFWpdMtp - ok

16:39:43.0196 0x238c  WwanSvc - ok

16:39:43.0201 0x238c  XblAuthManager - ok

16:39:43.0206 0x238c  XblGameSave - ok

16:39:43.0216 0x238c  [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip         C:\WINDOWS\System32\drivers\xboxgip.sys

16:39:43.0263 0x238c  xboxgip - ok

16:39:43.0269 0x238c  XboxNetApiSvc - ok

16:39:43.0274 0x238c  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\WINDOWS\System32\drivers\xinputhid.sys

16:39:43.0299 0x238c  xinputhid - ok

16:39:43.0315 0x238c  ================ Scan global ===============================

16:39:43.0334 0x238c  [ Global ] - ok

16:39:43.0334 0x238c  ================ Scan MBR ==================================

16:39:43.0336 0x238c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

16:39:43.0397 0x238c  \Device\Harddisk0\DR0 - ok

16:39:43.0402 0x238c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

16:39:43.0422 0x238c  \Device\Harddisk1\DR1 - ok

16:39:43.0425 0x238c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2

16:39:43.0786 0x238c  \Device\Harddisk2\DR2 - ok

16:39:43.0790 0x238c  [ 373F4DAF56249FD107189CCBA61161EB ] \Device\Harddisk3\DR3

16:39:43.0931 0x238c  \Device\Harddisk3\DR3 - ok

16:39:43.0931 0x238c  ================ Scan VBR ==================================

16:39:43.0933 0x238c  [ 83F445321C35C67F127CD3166C85CDF7 ] \Device\Harddisk0\DR0\Partition1

16:39:43.0934 0x238c  \Device\Harddisk0\DR0\Partition1 - ok

16:39:43.0936 0x238c  [ 4F1E6A146D13C619CE312109B618C31E ] \Device\Harddisk0\DR0\Partition2

16:39:43.0937 0x238c  \Device\Harddisk0\DR0\Partition2 - ok

16:39:43.0942 0x238c  [ 00B6CDF571AA8A34726DFD7D584105C8 ] \Device\Harddisk1\DR1\Partition1

16:39:43.0942 0x238c  \Device\Harddisk1\DR1\Partition1 - ok

16:39:43.0944 0x238c  [ E381CD8C0602E1016F17614797D832BF ] \Device\Harddisk1\DR1\Partition2

16:39:43.0945 0x238c  \Device\Harddisk1\DR1\Partition2 - ok

16:39:43.0947 0x238c  [ E2EEFD8BCE158069F8F14D2AA080A2C9 ] \Device\Harddisk2\DR2\Partition1

16:39:43.0948 0x238c  \Device\Harddisk2\DR2\Partition1 - ok

16:39:43.0952 0x238c  [ 3845461D4FCA392626E0FC1010477043 ] \Device\Harddisk3\DR3\Partition1

16:39:43.0956 0x238c  \Device\Harddisk3\DR3\Partition1 - ok

16:39:43.0957 0x238c  ================ Scan generic autorun ======================

16:39:44.0277 0x238c  [ 1BDEB33CEAA541F6FCB19D9C342FBF86, F7DF33410511011317915F2EC3E571D249F1C92D5E35485313BF4DE9999D534C ] C:\Program Files\Logitech Gaming Software\LCore.exe

16:39:44.0582 0x238c  Launch LCore - ok

16:39:44.0621 0x238c  OneDriveSetup - ok

16:39:44.0623 0x238c  OneDriveSetup - ok

16:39:44.0625 0x238c  OneDriveSetup - ok

16:39:44.0627 0x238c  WAB Migrate - ok

16:39:44.0628 0x238c  Waiting for KSN requests completion. In queue: 21

16:39:45.0629 0x238c  Waiting for KSN requests completion. In queue: 21

16:39:46.0630 0x238c  Waiting for KSN requests completion. In queue: 21

16:39:47.0631 0x238c  Waiting for KSN requests completion. In queue: 21

16:39:48.0643 0x238c  AV detected via SS2: Avast Antivirus, Q:\Programme\Avast!\wsc_proxy.exe ( 17.1.3394.0 ), 0x41000 ( enabled : updated )

16:39:48.0644 0x238c  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )

16:39:48.0645 0x238c  FW detected via SS2: Avast Antivirus, Q:\Programme\Avast!\wsc_proxy.exe ( 17.1.3394.0 ), 0x41010 ( enabled )

16:39:58.0767 0x238c  ============================================================

16:39:58.0767 0x238c  Scan finished

16:39:58.0767 0x238c  ============================================================

16:39:58.0774 0x2384  Detected object count: 0

16:39:58.0774 0x2384  Actual detected object count: 0

16:40:32.0670 0x23f0  ============================================================

16:40:32.0670 0x23f0  Scan started

16:40:32.0670 0x23f0  Mode: Manual; SigCheck; TDLFS; 

16:40:32.0670 0x23f0  ============================================================

16:40:32.0670 0x23f0  KSN ping started

16:40:37.0882 0x23f0  KSN ping finished: true

16:40:38.0170 0x23f0  ================ Scan system memory ========================

16:40:38.0170 0x23f0  System memory - ok

16:40:38.0171 0x23f0  ================ Scan services =============================

16:40:38.0207 0x23f0  1394ohci - ok

16:40:38.0211 0x23f0  3ware - ok

16:40:38.0215 0x23f0  ACPI - ok

16:40:38.0218 0x23f0  AcpiDev - ok

16:40:38.0222 0x23f0  acpiex - ok

16:40:38.0226 0x23f0  acpipagr - ok

16:40:38.0229 0x23f0  AcpiPmi - ok

16:40:38.0232 0x23f0  acpitime - ok

16:40:38.0238 0x23f0  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

16:40:38.0250 0x23f0  AdobeARMservice - ok

16:40:38.0255 0x23f0  ADP80XX - ok

16:40:38.0261 0x23f0  AFD - ok

16:40:38.0266 0x23f0  ahcache - ok

16:40:38.0269 0x23f0  AJRouter - ok

16:40:38.0273 0x23f0  ALG - ok

16:40:38.0276 0x23f0  AmdK8 - ok

16:40:38.0280 0x23f0  AmdPPM - ok

16:40:38.0283 0x23f0  amdsata - ok

16:40:38.0287 0x23f0  amdsbs - ok

16:40:38.0291 0x23f0  amdxata - ok

16:40:38.0295 0x23f0  AppHostSvc - ok

16:40:38.0299 0x23f0  AppID - ok

16:40:38.0302 0x23f0  AppIDSvc - ok

16:40:38.0305 0x23f0  Appinfo - ok

16:40:38.0309 0x23f0  applockerfltr - ok

16:40:38.0312 0x23f0  AppMgmt - ok

16:40:38.0316 0x23f0  AppReadiness - ok

16:40:38.0319 0x23f0  AppVClient - ok

16:40:38.0322 0x23f0  AppvStrm - ok

16:40:38.0326 0x23f0  AppvVemgr - ok

16:40:38.0329 0x23f0  AppvVfs - ok

16:40:38.0333 0x23f0  AppXSvc - ok

16:40:38.0337 0x23f0  arcsas - ok

16:40:38.0348 0x23f0  aspnet_state - ok

16:40:38.0501 0x23f0  [ AE3D994671A0497B9EA53E0CB686A471, 56F91FC9FF57D17FAB6B6B92CE25AC4ACFB9EF4EF79B81EECED021A1C29E6BF0 ] aswbIDSAgent    Q:\Programme\Avast!\x64\aswidsagenta.exe

16:40:38.0653 0x23f0  aswbIDSAgent - ok

16:40:38.0676 0x23f0  [ 6F75DD4F4FD75123D25A0617EECE6FDE, F58C08B2FB0E096D707AEB24B4DFDD6039D09858D66452243D30ABD2A1DA90B3 ] aswbidsdriver   C:\WINDOWS\system32\drivers\aswbidsdrivera.sys

16:40:38.0703 0x23f0  aswbidsdriver - ok

16:40:38.0711 0x23f0  [ 40C2E8C97ECA864335FA3F0078B6B5EF, 4269F0DB1DC2CD49E23F344C6289F9474FE74119F262645B4478EF6DD1D0A577 ] aswbidsh        C:\WINDOWS\system32\drivers\aswbidsha.sys

16:40:38.0730 0x23f0  aswbidsh - ok

16:40:38.0740 0x23f0  [ 92CF5055E25B608B54B42A88F805ACD4, 4C33AFE136FDD1EC5E67006720A2BD9B00501135805C1A9E69550505134AF294 ] aswblog         C:\WINDOWS\system32\drivers\aswbloga.sys

16:40:38.0763 0x23f0  aswblog - ok

16:40:38.0768 0x23f0  [ B322161C7CFC1F81B77CC87AD5D85BBA, 348198F7FA06C3729B87388A1782E982C8D4ED2AE6E424A0568AA68851585A21 ] aswbuniv        C:\WINDOWS\system32\drivers\aswbuniva.sys

16:40:38.0783 0x23f0  aswbuniv - ok

16:40:38.0787 0x23f0  [ 1CB55C233334A3A3DACDD99647753055, BE4A23F38BD5233346DB01FA6E9387B3B3FAC3669AEF3E8DEF89F5464FFCF0D9 ] aswHwid         C:\WINDOWS\system32\drivers\aswHwid.sys

16:40:38.0803 0x23f0  aswHwid - ok

16:40:38.0808 0x23f0  [ 18ABFE3C4878E2F410A23383DB850CF6, 9F348C071FCAE2595FBFD0488050393900AEFDDEAD898514AB68C9CDE7409A07 ] aswKbd          C:\WINDOWS\system32\drivers\aswKbd.sys

16:40:38.0822 0x23f0  aswKbd - ok

16:40:38.0828 0x23f0  [ 7534937F601E1CF6D63BCFD3768982F0, 8A509E2B2A0A176ACE7C7302C55566171F244F49C011CF42881F79088304059B ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys

16:40:38.0847 0x23f0  aswMonFlt - ok

16:40:38.0860 0x23f0  [ 2D36950E1ABE3905F2DC28BBDABA1187, 6A299FFD9CDD4E86F05703FA9F23D2C090BA77A64CE393611DB125C326BE092F ] aswNetSec       C:\WINDOWS\system32\drivers\aswNetSec.sys

16:40:38.0877 0x23f0  aswNetSec - ok

16:40:38.0883 0x23f0  [ 29EF51E9D17276AFAA354AE09A543688, 9BB26119F876AA67C637B7642687555DB5B1D61683BCF30F0BF1C8C53EA17340 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys

16:40:38.0901 0x23f0  aswRdr - ok

16:40:38.0906 0x23f0  [ EF03E68187720D35092E3D6858064170, C81B7005C50D7CFC0FED24DB42BA435F3C04898C0F7C4A58772D0439F45B5AA4 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys

16:40:38.0922 0x23f0  aswRvrt - ok

16:40:38.0946 0x23f0  [ 9A95D9A2726393975C3DD50751085B83, 37187F8BF05F7C6EA33B798F92282109DEF5C1806D5CFAB334DB1F9FD429CE49 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys

16:40:38.0996 0x23f0  aswSnx - ok

16:40:39.0014 0x23f0  [ 11DF322991B0E54278D5EBB7C7E3BCC8, CF133C27E740DD3D1BA84DFDFC668B279832995E8CE21F029CE978CA0575425F ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys

16:40:39.0047 0x23f0  aswSP - ok

16:40:39.0055 0x23f0  [ 69AE094434DCDB5ABE292F4EBD261C9B, CBD3D8216B8C4D4A6A6A5D5BDCC7E77EC3F4BD4428C231E2C406A0205504BE44 ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys

16:40:39.0066 0x23f0  aswStm - ok

16:40:39.0070 0x23f0  [ E4ABC023E251D2BB6B98C9FCAF5CF16D, 2A94320A3EF16E641B693BF6EABABB57C891B914B00F73ACD7ADB8CA5089EC40 ] aswTap          C:\WINDOWS\System32\drivers\aswTap.sys

16:40:39.0086 0x23f0  aswTap - ok

16:40:39.0097 0x23f0  [ FF7843417D319B14F96AC4D883D5BEEA, 3283AD20E23F8C15A1C35B0431B32A9EB8B79D8AD6CAF0C5305E26C43DA10B97 ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys

16:40:39.0121 0x23f0  aswVmm - ok

16:40:39.0125 0x23f0  AsyncMac - ok

16:40:39.0129 0x23f0  atapi - ok

16:40:39.0133 0x23f0  AudioEndpointBuilder - ok

16:40:39.0136 0x23f0  Audiosrv - ok

16:40:39.0146 0x23f0  [ EE5315059F4F7AF1E0E2082CF914839C, 4B41A3A1E19A3E14E11BD9F8A9FE97465E01E8F9B7DE7580F689BF723C246A42 ] avast! Antivirus Q:\Programme\Avast!\AvastSvc.exe

16:40:39.0159 0x23f0  avast! Antivirus - ok

16:40:39.0170 0x23f0  [ F1AD1E531E90B312BEB5F1E6B5A80A97, 23B59750E3F2B7B15026574DAAFE15030436CA044A9E26CD4DF69B670B2C4F87 ] avast! Firewall Q:\Programme\Avast!\afwServ.exe

16:40:39.0183 0x23f0  avast! Firewall - ok

16:40:39.0202 0x23f0  [ 85D7960265C55C141A36DD4F2EBF3CE3, 09A8D45D1AAC9CE74749C58A0F5FC441D9CDEE1CBA41F47EC8D9D59605C92992 ] AVerAF35        C:\WINDOWS\System32\Drivers\AVerAF35.sys

16:40:39.0249 0x23f0  AVerAF35 - ok

16:40:39.0254 0x23f0  AxInstSV - ok

16:40:39.0258 0x23f0  b06bdrv - ok

16:40:39.0261 0x23f0  BasicDisplay - ok

16:40:39.0265 0x23f0  BasicRender - ok

16:40:39.0269 0x23f0  bcmfn - ok

16:40:39.0273 0x23f0  bcmfn2 - ok

16:40:39.0276 0x23f0  BDESVC - ok

16:40:39.0280 0x23f0  Beep - ok

16:40:39.0283 0x23f0  BFE - ok

16:40:39.0288 0x23f0  BITS - ok

16:40:39.0291 0x23f0  bowser - ok

16:40:39.0294 0x23f0  BrokerInfrastructure - ok

16:40:39.0298 0x23f0  BthAvrcpTg - ok

16:40:39.0301 0x23f0  BthHFEnum - ok

16:40:39.0304 0x23f0  bthhfhid - ok

16:40:39.0308 0x23f0  BthHFSrv - ok

16:40:39.0311 0x23f0  BTHMODEM - ok

16:40:39.0316 0x23f0  bthserv - ok

16:40:39.0321 0x23f0  buttonconverter - ok

16:40:39.0327 0x23f0  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys

16:40:39.0352 0x23f0  CapImg - ok

16:40:39.0356 0x23f0  cdfs - ok

16:40:39.0359 0x23f0  CDPSvc - ok

16:40:39.0363 0x23f0  CDPUserSvc - ok

16:40:39.0367 0x23f0  cdrom - ok

16:40:39.0370 0x23f0  CertPropSvc - ok

16:40:39.0375 0x23f0  cht4iscsi - ok

16:40:39.0378 0x23f0  cht4vbd - ok

16:40:39.0382 0x23f0  circlass - ok

16:40:39.0385 0x23f0  CLFS - ok

16:40:39.0389 0x23f0  ClipSVC - ok

16:40:39.0392 0x23f0  clreg - ok

16:40:39.0402 0x23f0  CmBatt - ok

16:40:39.0406 0x23f0  [ 84FC81FF9F291A0FC8D10933C1748F66, 46B6C64659A24C1D4917963FECEC2D6AED516C047762F0B4E67651CF8241A7D8 ] CM_VENDER_CMD   C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys

16:40:39.0421 0x23f0  CM_VENDER_CMD - ok

16:40:39.0424 0x23f0  CNG - ok

16:40:39.0428 0x23f0  cnghwassist - ok

16:40:39.0442 0x23f0  CompositeBus - ok

16:40:39.0445 0x23f0  COMSysApp - ok

16:40:39.0449 0x23f0  condrv - ok

16:40:39.0452 0x23f0  CoreMessagingRegistrar - ok

16:40:39.0458 0x23f0  CryptSvc - ok

16:40:39.0461 0x23f0  CSC - ok

16:40:39.0464 0x23f0  CscService - ok

16:40:39.0467 0x23f0  dam - ok

16:40:39.0471 0x23f0  DcomLaunch - ok

16:40:39.0474 0x23f0  DcpSvc - ok

16:40:39.0478 0x23f0  defragsvc - ok

16:40:39.0481 0x23f0  DeviceAssociationService - ok

16:40:39.0484 0x23f0  DeviceInstall - ok

16:40:39.0488 0x23f0  DevQueryBroker - ok

16:40:39.0491 0x23f0  Dfsc - ok

16:40:39.0496 0x23f0  Dhcp - ok

16:40:39.0499 0x23f0  diagnosticshub.standardcollector.service - ok

16:40:39.0503 0x23f0  DiagTrack - ok

16:40:39.0506 0x23f0  disk - ok

16:40:39.0509 0x23f0  DmEnrollmentSvc - ok

16:40:39.0513 0x23f0  dmvsc - ok

16:40:39.0516 0x23f0  dmwappushservice - ok

16:40:39.0519 0x23f0  Dnscache - ok

16:40:39.0524 0x23f0  dot3svc - ok

16:40:39.0527 0x23f0  DPS - ok

16:40:39.0531 0x23f0  drmkaud - ok

16:40:39.0534 0x23f0  DsmSvc - ok

16:40:39.0538 0x23f0  DsSvc - ok

16:40:39.0541 0x23f0  DXGKrnl - ok

16:40:39.0545 0x23f0  EapHost - ok

16:40:39.0548 0x23f0  ebdrv - ok

16:40:39.0552 0x23f0  EFS - ok

16:40:39.0555 0x23f0  EhStorClass - ok

16:40:39.0561 0x23f0  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys

16:40:39.0583 0x23f0  EhStorTcgDrv - ok

16:40:39.0587 0x23f0  embeddedmode - ok

16:40:39.0591 0x23f0  EntAppSvc - ok

16:40:39.0594 0x23f0  ErrDev - ok

16:40:39.0600 0x23f0  EventSystem - ok

16:40:39.0603 0x23f0  exfat - ok

16:40:39.0606 0x23f0  fastfat - ok

16:40:39.0609 0x23f0  Fax - ok

16:40:39.0612 0x23f0  fdc - ok

16:40:39.0616 0x23f0  fdPHost - ok

16:40:39.0619 0x23f0  FDResPub - ok

16:40:39.0622 0x23f0  fhsvc - ok

16:40:39.0625 0x23f0  FileCrypt - ok

16:40:39.0629 0x23f0  FileInfo - ok

16:40:39.0632 0x23f0  Filetrace - ok

16:40:39.0635 0x23f0  flpydisk - ok

16:40:39.0638 0x23f0  FltMgr - ok

16:40:39.0642 0x23f0  FontCache - ok

16:40:39.0645 0x23f0  FontCache3.0.0.0 - ok

16:40:39.0649 0x23f0  FrameServer - ok

16:40:39.0652 0x23f0  FsDepends - ok

16:40:39.0656 0x23f0  Fs_Rec - ok

16:40:39.0663 0x23f0  [ 895BA1CFF25E867CE5A52073E905C93B, A417065E831B768BD76364EC1E5FEDAADF172DCD1E6C2A134CB311EDDC2DC477 ] fussvc          C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe

16:40:39.0672 0x23f0  fussvc - detected UnsignedFile.Multi.Generic ( 1 )

16:40:39.0673 0x23f0  Detect skipped due to KSN trusted

16:40:39.0673 0x23f0  fussvc - ok

16:40:39.0676 0x23f0  fvevol - ok

16:40:39.0680 0x23f0  gencounter - ok

16:40:39.0683 0x23f0  genericusbfn - ok

16:40:39.0686 0x23f0  GPIOClx0101 - ok

16:40:39.0691 0x23f0  gpsvc - ok

16:40:39.0693 0x23f0  GpuEnergyDrv - ok

16:40:39.0699 0x23f0  [ BDDBCFF870442B3C24C158CD53079132, 62314C296ACF1EF9EB38FB70B66B57D1BB9917C8536B39892272D172BC58A5C3 ] hcmon           C:\WINDOWS\system32\drivers\hcmon.sys

16:40:39.0715 0x23f0  hcmon - ok

16:40:39.0718 0x23f0  HdAudAddService - ok

16:40:39.0722 0x23f0  HDAudBus - ok

16:40:39.0725 0x23f0  HidBatt - ok

16:40:39.0728 0x23f0  HidBth - ok

16:40:39.0732 0x23f0  hidi2c - ok

16:40:39.0735 0x23f0  hidinterrupt - ok

16:40:39.0738 0x23f0  HidIr - ok

16:40:39.0741 0x23f0  hidserv - ok

16:40:39.0744 0x23f0  HidUsb - ok

16:40:39.0747 0x23f0  HomeGroupListener - ok

16:40:39.0750 0x23f0  HomeGroupProvider - ok

16:40:39.0753 0x23f0  HpSAMD - ok

16:40:39.0757 0x23f0  HTTP - ok

16:40:39.0760 0x23f0  HvHost - ok

16:40:39.0764 0x23f0  hvservice - ok

16:40:39.0767 0x23f0  hwpolicy - ok

16:40:39.0771 0x23f0  hyperkbd - ok

16:40:39.0774 0x23f0  i8042prt - ok

16:40:39.0777 0x23f0  iagpio - ok

16:40:39.0781 0x23f0  iai2c - ok

16:40:39.0784 0x23f0  iaLPSS2i_GPIO2 - ok

16:40:39.0788 0x23f0  iaLPSS2i_I2C - ok

16:40:39.0791 0x23f0  iaLPSSi_GPIO - ok

16:40:39.0795 0x23f0  iaLPSSi_I2C - ok

16:40:39.0798 0x23f0  iaStorAV - ok

16:40:39.0802 0x23f0  iaStorV - ok

16:40:39.0805 0x23f0  ibbus - ok

16:40:39.0809 0x23f0  icssvc - ok

16:40:39.0812 0x23f0  IKEEXT - ok

16:40:39.0816 0x23f0  IndirectKmd - ok

16:40:39.0823 0x23f0  intelide - ok

16:40:39.0826 0x23f0  intelpep - ok

16:40:39.0830 0x23f0  intelppm - ok

16:40:39.0833 0x23f0  iorate - ok

16:40:39.0837 0x23f0  IpFilterDriver - ok

16:40:39.0841 0x23f0  iphlpsvc - ok

16:40:39.0844 0x23f0  IPMIDRV - ok

16:40:39.0847 0x23f0  IPNAT - ok

16:40:39.0850 0x23f0  irda - ok

16:40:39.0853 0x23f0  IRENUM - ok

16:40:39.0857 0x23f0  irmon - ok

16:40:39.0860 0x23f0  isapnp - ok

16:40:39.0864 0x23f0  iScsiPrt - ok

16:40:39.0868 0x23f0  kbdclass - ok

16:40:39.0871 0x23f0  kbdhid - ok

16:40:39.0874 0x23f0  kdnic - ok

16:40:39.0878 0x23f0  KeyIso - ok

16:40:39.0881 0x23f0  KSecDD - ok

16:40:39.0885 0x23f0  KSecPkg - ok

16:40:39.0888 0x23f0  ksthunk - ok

16:40:39.0892 0x23f0  KtmRm - ok

16:40:39.0896 0x23f0  [ 35649357A0578F7E208ECCB87884C756, FEEEF17E6B1E697EEC169B0CBAFF68DA45DFADC039DD52F93C83BEB46ADA4322 ] ladfGSS         C:\WINDOWS\system32\drivers\ladfGSS.sys

16:40:39.0912 0x23f0  ladfGSS - ok

16:40:39.0924 0x23f0  [ 305BB2AC00D46542E0A653AB63F4ABB1, E3BE57A0EBB1194656D20C11688863A7864B06223419F688D82881F9F49604B6 ] LADF_CaptureOnly C:\WINDOWS\system32\DRIVERS\ladfGSCamd64.sys

16:40:39.0940 0x23f0  LADF_CaptureOnly - ok

16:40:39.0946 0x23f0  [ 28CDDC7D478A6313F55077416DCBD0DE, EE4174FC9444856DF0693D1A5F16EB88352A3B012AA82D49C462980703981A7A ] LADF_RenderOnly C:\WINDOWS\system32\DRIVERS\ladfGSRamd64.sys

16:40:39.0963 0x23f0  LADF_RenderOnly - ok

16:40:39.0966 0x23f0  LanmanServer - ok

16:40:39.0970 0x23f0  LanmanWorkstation - ok

16:40:39.0974 0x23f0  lfsvc - ok

16:40:39.0979 0x23f0  [ 5E7641AECAC4CFC7B4B442B461A25C83, 1F6AF4ED863C17A1A326A4CB0D289EAABFAD748A6B0A7CE40CF842694572FDB7 ] LGBusEnum       C:\WINDOWS\system32\drivers\LGBusEnum.sys

16:40:39.0995 0x23f0  LGBusEnum - ok

16:40:39.0999 0x23f0  [ 2D7F1C02B94D6F0F3E10107E5EA8E141, 93B266F38C3C3EAAB475D81597ABBD7CC07943035068BB6FD670DBBE15DE0131 ] LGCoreTemp      C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys

16:40:40.0013 0x23f0  LGCoreTemp - ok

16:40:40.0018 0x23f0  [ 822A0DFDF63EEF9786C3946EAA98FDF7, 940F1DE2610BBBC728BBDB2AAABBD232AB4B3F53530A0D54EB50416D89C133DC ] LGJoyHidFilter  C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys

16:40:40.0036 0x23f0  LGJoyHidFilter - ok

16:40:40.0041 0x23f0  [ 7D24DEBE7BC0C01A30A9A65806B61453, 342E758AD6F88E3FA83B69F26836A9F54D1A3BE344D1D2F9C6394E085E5FCA92 ] LGJoyXlCore     C:\WINDOWS\system32\drivers\LGJoyXlCore.sys

16:40:40.0058 0x23f0  LGJoyXlCore - ok

16:40:40.0062 0x23f0  [ 07B1C1927BAE6431D3DFB1816DF05BBA, 9B296F6E801D14CE89F5E3EA9B3962EE99E1D3E22077D075F5B0EE4FE3CAB65E ] lgLowAudio      C:\WINDOWS\system32\drivers\lgLowAudio.sys

16:40:40.0077 0x23f0  lgLowAudio - ok

16:40:40.0081 0x23f0  [ DBEAB45BA2B47C057F3BAE5AD0654173, 9660B803F4AD4BD3427F1A24D09B2712E4DC0E25A18942984AF01750D77C118C ] LGVirHid        C:\WINDOWS\system32\drivers\LGVirHid.sys

16:40:40.0097 0x23f0  LGVirHid - ok

16:40:40.0101 0x23f0  LicenseManager - ok

16:40:40.0104 0x23f0  lltdio - ok

16:40:40.0108 0x23f0  lltdsvc - ok

16:40:40.0111 0x23f0  lmhosts - ok

16:40:40.0117 0x23f0  [ B78534B305C93D18CAED123E1F9346E5, 19FE198E0D7C81AAF1A00700AB85F19E37E4198EDB8A59C55D1766E03D9E060F ] LogiRegistryService C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

16:40:40.0127 0x23f0  LogiRegistryService - ok

16:40:40.0133 0x23f0  LSI_SAS - ok

16:40:40.0136 0x23f0  LSI_SAS2i - ok

16:40:40.0140 0x23f0  LSI_SAS3i - ok

16:40:40.0143 0x23f0  LSI_SSS - ok

16:40:40.0147 0x23f0  LSM - ok

16:40:40.0150 0x23f0  luafv - ok

16:40:40.0154 0x23f0  MapsBroker - ok

16:40:40.0157 0x23f0  megasas - ok

16:40:40.0162 0x23f0  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\WINDOWS\system32\drivers\MegaSas2i.sys

16:40:40.0181 0x23f0  megasas2i - ok

16:40:40.0185 0x23f0  megasr - ok

16:40:40.0189 0x23f0  MessagingService - ok

16:40:40.0194 0x23f0  mlx4_bus - ok

16:40:40.0197 0x23f0  MMCSS - ok

16:40:40.0200 0x23f0  Modem - ok

16:40:40.0203 0x23f0  monitor - ok

16:40:40.0207 0x23f0  mouclass - ok

16:40:40.0210 0x23f0  mouhid - ok

16:40:40.0213 0x23f0  mountmgr - ok

16:40:40.0216 0x23f0  mpsdrv - ok

16:40:40.0220 0x23f0  MpsSvc - ok

16:40:40.0223 0x23f0  MRxDAV - ok

16:40:40.0226 0x23f0  mrxsmb - ok

16:40:40.0230 0x23f0  mrxsmb20 - ok

16:40:40.0233 0x23f0  MsBridge - ok

16:40:40.0236 0x23f0  MSDTC - ok

16:40:40.0242 0x23f0  Msfs - ok

16:40:40.0246 0x23f0  msgpiowin32 - ok

16:40:40.0249 0x23f0  mshidkmdf - ok

16:40:40.0252 0x23f0  mshidumdf - ok

16:40:40.0256 0x23f0  msisadrv - ok

16:40:40.0259 0x23f0  MSiSCSI - ok

16:40:40.0262 0x23f0  msiserver - ok

16:40:40.0266 0x23f0  MSKSSRV - ok

16:40:40.0269 0x23f0  MsLldp - ok

16:40:40.0272 0x23f0  MSPCLOCK - ok

16:40:40.0275 0x23f0  MSPQM - ok

16:40:40.0278 0x23f0  MsRPC - ok

16:40:40.0283 0x23f0  MsSecFlt - ok

16:40:40.0288 0x23f0  mssmbios - ok

16:40:40.0291 0x23f0  MSTEE - ok

16:40:40.0294 0x23f0  MTConfig - ok

16:40:40.0298 0x23f0  [ 640617B6E682A150C36BE39D78547F6C, 784F712E9DC3EEE81F07946BBA08AA2BEAC7B3961E430B75043645EF7ECA715C ] MTsensor        C:\WINDOWS\system32\DRIVERS\ASACPI.sys

16:40:40.0312 0x23f0  MTsensor - ok

16:40:40.0316 0x23f0  Mup - ok

16:40:40.0320 0x23f0  mvumis - ok

16:40:40.0325 0x23f0  NativeWifiP - ok

16:40:40.0328 0x23f0  NcaSvc - ok

16:40:40.0331 0x23f0  NcbService - ok

16:40:40.0335 0x23f0  NcdAutoSetup - ok

16:40:40.0338 0x23f0  ndfltr - ok

16:40:40.0342 0x23f0  NDIS - ok

16:40:40.0345 0x23f0  NdisCap - ok

16:40:40.0349 0x23f0  NdisImPlatform - ok

16:40:40.0352 0x23f0  NdisTapi - ok

16:40:40.0356 0x23f0  Ndisuio - ok

16:40:40.0359 0x23f0  NdisVirtualBus - ok

16:40:40.0362 0x23f0  NdisWan - ok

16:40:40.0366 0x23f0  ndiswanlegacy - ok

16:40:40.0369 0x23f0  ndproxy - ok

16:40:40.0373 0x23f0  Ndu - ok

16:40:40.0376 0x23f0  NetAdapterCx - ok

16:40:40.0379 0x23f0  NetBIOS - ok

16:40:40.0384 0x23f0  NetBT - ok

16:40:40.0388 0x23f0  Netlogon - ok

16:40:40.0392 0x23f0  Netman - ok

16:40:40.0395 0x23f0  netprofm - ok

16:40:40.0399 0x23f0  NetSetupSvc - ok

16:40:40.0405 0x23f0  NetTcpPortSharing - ok

16:40:40.0410 0x23f0  NgcCtnrSvc - ok

16:40:40.0413 0x23f0  NgcSvc - ok

16:40:40.0417 0x23f0  NlaSvc - ok

16:40:40.0420 0x23f0  Npfs - ok

16:40:40.0424 0x23f0  npsvctrig - ok

16:40:40.0427 0x23f0  nsi - ok

16:40:40.0430 0x23f0  nsiproxy - ok

16:40:40.0435 0x23f0  NTFS - ok

16:40:40.0439 0x23f0  Null - ok

16:40:40.0448 0x23f0  [ 207A78939B7BBA0EFE8BFA947A35E71C, BB7DDFED575F81CAB958DDC7CFF2D798EB14DAE633F49FA2229D98BDC489C0EE ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys

16:40:40.0461 0x23f0  NVHDA - ok

16:40:40.0762 0x23f0  [ 9337A5F17702A0FFE1E6C6978619B872, 8D4505BA62977BFE8C01F1ABD027AFBAEAA0D3EA6336865E46C28818471B196E ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_0cc477a6fec64d8c\nvlddmkm.sys

16:40:41.0054 0x23f0  nvlddmkm - ok

16:40:41.0084 0x23f0  nvraid - ok

16:40:41.0088 0x23f0  nvstor - ok

16:40:41.0092 0x23f0  OneSyncSvc - ok

16:40:41.0097 0x23f0  p2pimsvc - ok

16:40:41.0101 0x23f0  p2psvc - ok

16:40:41.0106 0x23f0  Parport - ok

16:40:41.0109 0x23f0  partmgr - ok

16:40:41.0113 0x23f0  PcaSvc - ok

16:40:41.0123 0x23f0  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\WINDOWS\system32\drivers\pci.sys

16:40:41.0155 0x23f0  pci - ok

16:40:41.0160 0x23f0  pciide - ok

16:40:41.0163 0x23f0  pcmcia - ok

16:40:41.0168 0x23f0  pcw - ok

16:40:41.0171 0x23f0  pdc - ok

16:40:41.0175 0x23f0  PEAUTH - ok

16:40:41.0179 0x23f0  PeerDistSvc - ok

16:40:41.0183 0x23f0  percsas2i - ok

16:40:41.0187 0x23f0  percsas3i - ok

16:40:41.0209 0x23f0  PerfHost - ok

16:40:41.0218 0x23f0  PhoneSvc - ok

16:40:41.0222 0x23f0  PimIndexMaintenanceSvc - ok

16:40:41.0228 0x23f0  pla - ok

16:40:41.0231 0x23f0  PlugPlay - ok

16:40:41.0235 0x23f0  PnkBstrA - ok

16:40:41.0238 0x23f0  PNRPAutoReg - ok

16:40:41.0242 0x23f0  PNRPsvc - ok

16:40:41.0245 0x23f0  PolicyAgent - ok

16:40:41.0251 0x23f0  Power - ok

16:40:41.0254 0x23f0  PptpMiniport - ok

16:40:41.0327 0x23f0  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll

16:40:41.0438 0x23f0  PrintNotify - ok

16:40:41.0450 0x23f0  Processor - ok

16:40:41.0454 0x23f0  ProfSvc - ok

16:40:41.0458 0x23f0  Psched - ok

16:40:41.0461 0x23f0  QWAVE - ok

16:40:41.0465 0x23f0  QWAVEdrv - ok

16:40:41.0469 0x23f0  RasAcd - ok

16:40:41.0472 0x23f0  RasAgileVpn - ok

16:40:41.0476 0x23f0  RasAuto - ok

16:40:41.0479 0x23f0  Rasl2tp - ok

16:40:41.0483 0x23f0  RasMan - ok

16:40:41.0487 0x23f0  RasPppoe - ok

16:40:41.0491 0x23f0  RasSstp - ok

16:40:41.0499 0x23f0  [ 5753CD9159718444F6D9E1634B984BF5, A4D6FB6583724F3DDDBA768D7786EB7E3AB1C8074F66DA9462BBB159CDFA2868 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

16:40:41.0510 0x23f0  Razer Game Scanner Service - ok

16:40:41.0515 0x23f0  rdbss - ok

16:40:41.0520 0x23f0  rdpbus - ok

16:40:41.0524 0x23f0  RDPDR - ok

16:40:41.0532 0x23f0  RdpVideoMiniport - ok

16:40:41.0536 0x23f0  rdyboost - ok

16:40:41.0539 0x23f0  ReFSv1 - ok

16:40:41.0545 0x23f0  RemoteAccess - ok

16:40:41.0549 0x23f0  RemoteRegistry - ok

16:40:41.0552 0x23f0  RetailDemo - ok

16:40:41.0556 0x23f0  RmSvc - ok

16:40:41.0560 0x23f0  RpcEptMapper - ok

16:40:41.0564 0x23f0  RpcLocator - ok

16:40:41.0568 0x23f0  RpcSs - ok

16:40:41.0572 0x23f0  rspndr - ok

16:40:41.0593 0x23f0  [ 12A3D1530E3F67B8664EBA923A3981E4, 8670C39EB0A7C37C17D014A8917493B776DE0829B55EFED13D91B6FA7B81CA11 ] rt640x64        C:\WINDOWS\System32\drivers\rt640x64.sys

16:40:41.0636 0x23f0  rt640x64 - ok

16:40:41.0642 0x23f0  [ 30A186D6A2A2853EEFAD7011E212E41B, 367B8FCCF29470C9237FC1F0EAEB59AE51E33778BC9914A2730AC7DDBC84942B ] rzpmgrk         C:\WINDOWS\system32\drivers\rzpmgrk.sys

16:40:41.0651 0x23f0  rzpmgrk - ok

16:40:41.0658 0x23f0  [ F8A13D4413A93DD005FAD116CBD6B6F7, 8ED0C00920CE76E832701D45117ED00B12E20588CB6FE8039FBCCDFEF9841047 ] rzpnk           C:\Windows\system32\drivers\rzpnk.sys

16:40:41.0675 0x23f0  rzpnk - ok

16:40:41.0684 0x23f0  [ 421497E425AFB40502013F362E4FA230, 20E2372BEE4BFB21138CA574C9806EC399DDA9D3439F3C391E34ABB2E518106D ] rzudd           C:\WINDOWS\System32\drivers\rzudd.sys

16:40:41.0696 0x23f0  rzudd - ok

16:40:41.0700 0x23f0  s3cap - ok

16:40:41.0704 0x23f0  SamSs - ok

16:40:41.0708 0x23f0  sbp2port - ok

16:40:41.0712 0x23f0  SCardSvr - ok

16:40:41.0716 0x23f0  ScDeviceEnum - ok

16:40:41.0720 0x23f0  scfilter - ok

16:40:41.0724 0x23f0  Schedule - ok

16:40:41.0727 0x23f0  scmbus - ok

16:40:41.0731 0x23f0  scmdisk0101 - ok

16:40:41.0735 0x23f0  SCPolicySvc - ok

16:40:41.0745 0x23f0  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys

16:40:41.0773 0x23f0  sdbus - ok

16:40:41.0778 0x23f0  SDRSVC - ok

16:40:41.0781 0x23f0  sdstor - ok

16:40:41.0785 0x23f0  seclogon - ok

16:40:41.0789 0x23f0  SENS - ok

16:40:41.0792 0x23f0  Sense - ok

16:40:41.0797 0x23f0  SensorDataService - ok

16:40:41.0802 0x23f0  SensorService - ok

16:40:41.0805 0x23f0  SensorsSimulatorDriver - ok

16:40:41.0809 0x23f0  SensrSvc - ok

16:40:41.0813 0x23f0  SerCx - ok

16:40:41.0816 0x23f0  SerCx2 - ok

16:40:41.0820 0x23f0  Serenum - ok

16:40:41.0824 0x23f0  Serial - ok

16:40:41.0828 0x23f0  sermouse - ok

16:40:41.0837 0x23f0  SessionEnv - ok

16:40:41.0841 0x23f0  sfloppy - ok

16:40:41.0845 0x23f0  SharedAccess - ok

16:40:41.0849 0x23f0  ShellHWDetection - ok

16:40:41.0854 0x23f0  shpamsvc - ok

16:40:41.0858 0x23f0  SiSRaid2 - ok

16:40:41.0862 0x23f0  SiSRaid4 - ok

16:40:41.0866 0x23f0  smphost - ok

16:40:41.0870 0x23f0  SmsRouter - ok

16:40:41.0878 0x23f0  SNMPTRAP - ok

16:40:41.0893 0x23f0  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys

16:40:41.0932 0x23f0  spaceport - ok

16:40:41.0939 0x23f0  SpbCx - ok

16:40:41.0943 0x23f0  Spooler - ok

16:40:41.0948 0x23f0  sppsvc - ok

16:40:41.0954 0x23f0  [ EAD5300C93946B0250A309E2BF2BE4CF, 6B9131D94ED31F838B1820EE67F068C4741B69D5C655587C89C9477986BD270F ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

16:40:41.0967 0x23f0  SQLWriter - ok

16:40:41.0972 0x23f0  srv2 - ok

16:40:41.0976 0x23f0  srvnet - ok

16:40:41.0980 0x23f0  SSDPSRV - ok

16:40:41.0984 0x23f0  SstpSvc - ok

16:40:41.0989 0x23f0  StateRepository - ok

16:40:42.0021 0x23f0  [ 596DC69BB40A96FCA4B19D9D1E221E34, 3469D3B2E9A88E39C14AE2E3DD5EC3D91FBB88CA568D794555B397B50E64AB15 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe

16:40:42.0057 0x23f0  Steam Client Service - ok

16:40:42.0064 0x23f0  stexstor - ok

16:40:42.0068 0x23f0  stisvc - ok

16:40:42.0072 0x23f0  storahci - ok

16:40:42.0077 0x23f0  storflt - ok

16:40:42.0082 0x23f0  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys

16:40:42.0103 0x23f0  stornvme - ok

16:40:42.0108 0x23f0  storqosflt - ok

16:40:42.0112 0x23f0  StorSvc - ok

16:40:42.0116 0x23f0  storufs - ok

16:40:42.0120 0x23f0  storvsc - ok

16:40:42.0124 0x23f0  svsvc - ok

16:40:42.0128 0x23f0  swenum - ok

16:40:42.0132 0x23f0  swprv - ok

16:40:42.0136 0x23f0  Synth3dVsc - ok

16:40:42.0141 0x23f0  SysMain - ok

16:40:42.0146 0x23f0  SystemEventsBroker - ok

16:40:42.0150 0x23f0  TabletInputService - ok

16:40:42.0154 0x23f0  TapiSrv - ok

16:40:42.0158 0x23f0  Tcpip - ok

16:40:42.0164 0x23f0  Tcpip6 - ok

16:40:42.0170 0x23f0  tcpipreg - ok

16:40:42.0176 0x23f0  tdx - ok

16:40:42.0182 0x23f0  [ BB676D2C7AD5E7131D12417E4691F9B9, C6DE7D8C08C2F059C696E9D63FC55692C8CB37FECF92F5A863D7D2C5AF3B425F ] Te.Service      C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe

16:40:42.0191 0x23f0  Te.Service - detected UnsignedFile.Multi.Generic ( 1 )

16:40:42.0191 0x23f0  Detect skipped due to KSN trusted

16:40:42.0191 0x23f0  Te.Service - ok

16:40:42.0196 0x23f0  terminpt - ok

16:40:42.0200 0x23f0  TermService - ok

16:40:42.0204 0x23f0  Themes - ok

16:40:42.0208 0x23f0  TieringEngineService - ok

16:40:42.0212 0x23f0  tiledatamodelsvc - ok

16:40:42.0216 0x23f0  TimeBrokerSvc - ok

16:40:42.0224 0x23f0  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\WINDOWS\System32\drivers\tpm.sys

16:40:42.0250 0x23f0  TPM - ok

16:40:42.0255 0x23f0  TrkWks - ok

16:40:42.0258 0x23f0  TrustedInstaller - ok

16:40:42.0264 0x23f0  tsusbflt - ok

16:40:42.0269 0x23f0  TsUsbGD - ok

16:40:42.0273 0x23f0  tsusbhub - ok

16:40:42.0277 0x23f0  tunnel - ok

16:40:42.0281 0x23f0  tzautoupdate - ok

16:40:42.0285 0x23f0  UASPStor - ok

16:40:42.0289 0x23f0  UcmCx0101 - ok

16:40:42.0293 0x23f0  UcmTcpciCx0101 - ok

16:40:42.0297 0x23f0  UcmUcsi - ok

16:40:42.0301 0x23f0  Ucx01000 - ok

16:40:42.0305 0x23f0  UdeCx - ok

16:40:42.0309 0x23f0  udfs - ok

16:40:42.0313 0x23f0  UEFI - ok

16:40:42.0317 0x23f0  UevAgentDriver - ok

16:40:42.0321 0x23f0  UevAgentService - ok

16:40:42.0325 0x23f0  Ufx01000 - ok

16:40:42.0329 0x23f0  UfxChipidea - ok

16:40:42.0333 0x23f0  ufxsynopsys - ok

16:40:42.0341 0x23f0  UI0Detect - ok

16:40:42.0345 0x23f0  umbus - ok

16:40:42.0350 0x23f0  UmPass - ok

16:40:42.0354 0x23f0  UmRdpService - ok

16:40:42.0358 0x23f0  UnistoreSvc - ok

16:40:42.0364 0x23f0  upnphost - ok

16:40:42.0368 0x23f0  UrsChipidea - ok

16:40:42.0372 0x23f0  UrsCx01000 - ok

16:40:42.0376 0x23f0  UrsSynopsys - ok

16:40:42.0380 0x23f0  usbaudio - ok

16:40:42.0384 0x23f0  usbccgp - ok

16:40:42.0389 0x23f0  usbcir - ok

16:40:42.0393 0x23f0  usbehci - ok

16:40:42.0398 0x23f0  usbhub - ok

16:40:42.0402 0x23f0  USBHUB3 - ok

16:40:42.0406 0x23f0  usbohci - ok

16:40:42.0410 0x23f0  usbprint - ok

16:40:42.0414 0x23f0  usbser - ok

16:40:42.0419 0x23f0  USBSTOR - ok

16:40:42.0423 0x23f0  usbuhci - ok

16:40:42.0427 0x23f0  USBXHCI - ok

16:40:42.0431 0x23f0  usb_rndisx - ok

16:40:42.0435 0x23f0  UserDataSvc - ok

16:40:42.0443 0x23f0  UserManager - ok

16:40:42.0447 0x23f0  UsoSvc - ok

16:40:42.0451 0x23f0  VaultSvc - ok

16:40:42.0455 0x23f0  vdrvroot - ok

16:40:42.0459 0x23f0  vds - ok

16:40:42.0464 0x23f0  VerifierExt - ok

16:40:42.0482 0x23f0  [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys

16:40:42.0526 0x23f0  vhdmp - ok

16:40:42.0532 0x23f0  vhf - ok

16:40:42.0549 0x23f0  [ 20D3701C516BB42F81A22EB727B9E419, 08A8D12626A322790C6679554D49AE388E33316121226DE9FCA9C22C8F509C56 ] VIAHdAudAddService C:\WINDOWS\system32\drivers\viahduaa.sys

16:40:42.0587 0x23f0  VIAHdAudAddService - ok

16:40:42.0593 0x23f0  [ 097A1A16F9F38715CEAA092DE626F517, 5D51D74C3264ADEA1A50F6620150B284E54C5294A548D1BC940B3B5FF5343998 ] VIAKaraokeService C:\WINDOWS\system32\viakaraokesrv.exe

16:40:42.0617 0x23f0  VIAKaraokeService - ok

16:40:42.0627 0x23f0  [ 2562943B90AFA9829097FB4274276D1D, EE003EF7A3EC49CFEF2EED841482721D7A89368967BFC44CE8DD9D3BDAF0572F ] VMAuthdService  Q:\Programme\VM Ware Player\vmware-authd.exe

16:40:42.0636 0x23f0  VMAuthdService - ok

16:40:42.0640 0x23f0  vmbus - ok

16:40:42.0645 0x23f0  VMBusHID - ok

16:40:42.0650 0x23f0  [ BE8E5E5D53ACF71D4E8E686B68C99B04, 4F30A360095FCB2627068FA6A65A951688058E8FDDF5CE895E2AE39500A413B1 ] vmci            C:\WINDOWS\system32\drivers\vmci.sys

16:40:42.0660 0x23f0  vmci - ok

16:40:42.0664 0x23f0  vmgid - ok

16:40:42.0668 0x23f0  vmicguestinterface - ok

16:40:42.0672 0x23f0  vmicheartbeat - ok

16:40:42.0676 0x23f0  vmickvpexchange - ok

16:40:42.0680 0x23f0  vmicrdv - ok

16:40:42.0684 0x23f0  vmicshutdown - ok

16:40:42.0688 0x23f0  vmictimesync - ok

16:40:42.0692 0x23f0  vmicvmsession - ok

16:40:42.0696 0x23f0  vmicvss - ok

16:40:42.0702 0x23f0  [ 4F19996D0765835797EC7B5F35D12240, FD4D222A373C3DF2B9FC7877C0EC050BF71A6C700FB52984E44FD25E49755A11 ] vmkbd           C:\WINDOWS\system32\drivers\VMkbd.sys

16:40:42.0717 0x23f0  vmkbd - ok

16:40:42.0722 0x23f0  [ 18AA5F4A3B1204AD00045EE5AD39BCDB, 0211A8E94F169A2A52CD39CD580293907EBE104E52038DC36B988DE1CA7F2392 ] VMnetAdapter    C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys

16:40:42.0736 0x23f0  VMnetAdapter - ok

16:40:42.0742 0x23f0  [ 04CD4347CD9E8C40F78AD51F7FF426D0, BCA3E593E118BCA30142B23CD1CBE6905442D31C3DEB4C71B06D721E601F7BD8 ] VMnetBridge     C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys

16:40:42.0757 0x23f0  VMnetBridge - ok

16:40:42.0785 0x23f0  [ 05A869D1B12B08B5601487CA534B5021, 07A4BE681C0C0B23CBD5C05715DAA887D4DDE6D99251BC5D748F321940C23315 ] VMnetDHCP       C:\WINDOWS\SYSWOW64\VMNETDHCP.EXE

16:40:42.0811 0x23f0  VMnetDHCP - ok

16:40:42.0817 0x23f0  [ F550680013FEA869820CB8320FAA2352, AA98DB7E71737DD8574ADB2DD9531C1DD46BABE99F89ED87D681D6C21BFA0D1C ] VMnetuserif     C:\WINDOWS\system32\drivers\vmnetuserif.sys

16:40:42.0832 0x23f0  VMnetuserif - ok

16:40:42.0837 0x23f0  [ 396BB5901811148B2999134161FC86B3, 359112FAA69115BDFC212C3BA98DD3E9E73E29F0DC4DE13DBFCAAF4130F4680E ] VMparport       C:\WINDOWS\system32\drivers\VMparport.sys

16:40:42.0852 0x23f0  VMparport - ok

16:40:42.0875 0x23f0  [ 41FAE6618768DC93D98DDAF3F8282D3E, 95995542026CC111B8FFAA01AC9E55B2F942A9108F5F00502A35339C13BBF20D ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

16:40:42.0900 0x23f0  VMUSBArbService - ok

16:40:42.0918 0x23f0  [ F13B73E932CACDDE5ED825BDF7AA9637, 4B6C8D82324314294AE439ACDE933E6C8E77635ADE933BC52A0CD9A68927702D ] VMware NAT Service C:\WINDOWS\SYSWOW64\VMNAT.EXE

16:40:42.0940 0x23f0  VMware NAT Service - ok

16:40:42.0946 0x23f0  [ 227E4EA654B4D52C2AAA8B1DCD5C45DE, 7D9A675A6481D288846D7F22AE15EC62DF31C9385C83D875586EE371CC9C3410 ] vmx86           C:\WINDOWS\system32\drivers\vmx86.sys

16:40:42.0956 0x23f0  vmx86 - ok

16:40:42.0961 0x23f0  volmgr - ok

16:40:42.0965 0x23f0  volmgrx - ok

16:40:42.0969 0x23f0  volsnap - ok

16:40:42.0973 0x23f0  volume - ok

16:40:42.0978 0x23f0  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys

16:40:42.0999 0x23f0  vpci - ok

16:40:43.0004 0x23f0  vsmraid - ok

16:40:43.0010 0x23f0  [ CB4D2E3C5E8BFA3CF6AFFF6DDC6CC70D, 32A891045AF36FEAC62373894B98ABDCEA437978BDE027169C22EBC2C72D586E ] vsock           C:\WINDOWS\system32\drivers\vsock.sys

16:40:43.0026 0x23f0  vsock - ok

16:40:43.0042 0x23f0  [ F972436B5ED08069A1E7D623B77C226A, FA01505B5EC392ADE55019C22588D2F3608CBF9A6B03A44203F3587D372F8342 ] VSPerfDrv110    Q:\Programme\Microsoft Visual Studio Premium 2012\Team Tools\Performance Tools\x64\VSPerfDrv110.sys

16:40:43.0059 0x23f0  VSPerfDrv110 - ok

16:40:43.0064 0x23f0  VSS - ok

16:40:43.0067 0x23f0  VSTXRAID - ok

16:40:43.0072 0x23f0  vwifibus - ok

16:40:43.0076 0x23f0  vwififlt - ok

16:40:43.0081 0x23f0  W32Time - ok

16:40:43.0084 0x23f0  w3logsvc - ok

16:40:43.0088 0x23f0  WacomPen - ok

16:40:43.0093 0x23f0  WalletService - ok

16:40:43.0097 0x23f0  wanarp - ok

16:40:43.0101 0x23f0  wanarpv6 - ok

16:40:43.0106 0x23f0  WAS - ok

16:40:43.0110 0x23f0  wbengine - ok

16:40:43.0116 0x23f0  WbioSrvc - ok

16:40:43.0120 0x23f0  wcifs - ok

16:40:43.0123 0x23f0  Wcmsvc - ok

16:40:43.0128 0x23f0  wcncsvc - ok

16:40:43.0132 0x23f0  wcnfs - ok

16:40:43.0137 0x23f0  WdBoot - ok

16:40:43.0140 0x23f0  Wdf01000 - ok

16:40:43.0145 0x23f0  WdFilter - ok

16:40:43.0150 0x23f0  WdiServiceHost - ok

16:40:43.0154 0x23f0  WdiSystemHost - ok

16:40:43.0158 0x23f0  wdiwifi - ok

16:40:43.0162 0x23f0  WdNisDrv - ok

16:40:43.0166 0x23f0  WdNisSvc - ok

16:40:43.0171 0x23f0  WebClient - ok

16:40:43.0175 0x23f0  Wecsvc - ok

16:40:43.0180 0x23f0  WEPHOSTSVC - ok

16:40:43.0185 0x23f0  wercplsupport - ok

16:40:43.0190 0x23f0  WerSvc - ok

16:40:43.0193 0x23f0  WFPLWFS - ok

16:40:43.0199 0x23f0  WiaRpc - ok

16:40:43.0203 0x23f0  WIMMount - ok

16:40:43.0205 0x23f0  WinDefend - ok

16:40:43.0216 0x23f0  WindowsTrustedRT - ok

16:40:43.0220 0x23f0  WindowsTrustedRTProxy - ok

16:40:43.0225 0x23f0  WinHttpAutoProxySvc - ok

16:40:43.0230 0x23f0  WinMad - ok

16:40:43.0237 0x23f0  Winmgmt - ok

16:40:43.0242 0x23f0  WinRM - ok

16:40:43.0251 0x23f0  WINUSB - ok

16:40:43.0257 0x23f0  WinVerbs - ok

16:40:43.0261 0x23f0  wisvc - ok

16:40:43.0265 0x23f0  WlanSvc - ok

16:40:43.0269 0x23f0  wlidsvc - ok

16:40:43.0273 0x23f0  WmiAcpi - ok

16:40:43.0280 0x23f0  wmiApSrv - ok

16:40:43.0284 0x23f0  WMPNetworkSvc - ok

16:40:43.0289 0x23f0  Wof - ok

16:40:43.0297 0x23f0  WPDBusEnum - ok

16:40:43.0301 0x23f0  WpdUpFltr - ok

16:40:43.0306 0x23f0  WpnService - ok

16:40:43.0310 0x23f0  WpnUserService - ok

16:40:43.0317 0x23f0  ws2ifsl - ok

16:40:43.0322 0x23f0  wscsvc - ok

16:40:43.0327 0x23f0  WSearch - ok

16:40:43.0333 0x23f0  wuauserv - ok

16:40:43.0338 0x23f0  WudfPf - ok

16:40:43.0343 0x23f0  WUDFRd - ok

16:40:43.0347 0x23f0  wudfsvc - ok

16:40:43.0351 0x23f0  WUDFWpdFs - ok

16:40:43.0355 0x23f0  WUDFWpdMtp - ok

16:40:43.0360 0x23f0  WwanSvc - ok

16:40:43.0365 0x23f0  XblAuthManager - ok

16:40:43.0369 0x23f0  XblGameSave - ok

16:40:43.0379 0x23f0  [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip         C:\WINDOWS\System32\drivers\xboxgip.sys

16:40:43.0419 0x23f0  xboxgip - ok

16:40:43.0426 0x23f0  XboxNetApiSvc - ok

16:40:43.0430 0x23f0  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid       C:\WINDOWS\System32\drivers\xinputhid.sys

16:40:43.0452 0x23f0  xinputhid - ok

16:40:43.0469 0x23f0  ================ Scan global ===============================

16:40:43.0485 0x23f0  [ Global ] - ok

16:40:43.0486 0x23f0  ================ Scan MBR ==================================

16:40:43.0488 0x23f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

16:40:43.0546 0x23f0  \Device\Harddisk0\DR0 - ok

16:40:43.0550 0x23f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

16:40:43.0571 0x23f0  \Device\Harddisk1\DR1 - ok

16:40:43.0573 0x23f0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2

16:40:43.0602 0x23f0  \Device\Harddisk2\DR2 - ok

16:40:43.0606 0x23f0  [ 373F4DAF56249FD107189CCBA61161EB ] \Device\Harddisk3\DR3

16:40:43.0747 0x23f0  \Device\Harddisk3\DR3 - ok

16:40:43.0747 0x23f0  ================ Scan VBR ==================================

16:40:43.0751 0x23f0  [ 83F445321C35C67F127CD3166C85CDF7 ] \Device\Harddisk0\DR0\Partition1

16:40:43.0752 0x23f0  \Device\Harddisk0\DR0\Partition1 - ok

16:40:43.0754 0x23f0  [ 4F1E6A146D13C619CE312109B618C31E ] \Device\Harddisk0\DR0\Partition2

16:40:43.0756 0x23f0  \Device\Harddisk0\DR0\Partition2 - ok

16:40:43.0761 0x23f0  [ 00B6CDF571AA8A34726DFD7D584105C8 ] \Device\Harddisk1\DR1\Partition1

16:40:43.0761 0x23f0  \Device\Harddisk1\DR1\Partition1 - ok

16:40:43.0763 0x23f0  [ E381CD8C0602E1016F17614797D832BF ] \Device\Harddisk1\DR1\Partition2

16:40:43.0764 0x23f0  \Device\Harddisk1\DR1\Partition2 - ok

16:40:43.0766 0x23f0  [ E2EEFD8BCE158069F8F14D2AA080A2C9 ] \Device\Harddisk2\DR2\Partition1

16:40:43.0767 0x23f0  \Device\Harddisk2\DR2\Partition1 - ok

16:40:43.0771 0x23f0  [ 3845461D4FCA392626E0FC1010477043 ] \Device\Harddisk3\DR3\Partition1

16:40:43.0775 0x23f0  \Device\Harddisk3\DR3\Partition1 - ok

16:40:43.0776 0x23f0  ================ Scan generic autorun ======================

16:40:44.0099 0x23f0  [ 1BDEB33CEAA541F6FCB19D9C342FBF86, F7DF33410511011317915F2EC3E571D249F1C92D5E35485313BF4DE9999D534C ] C:\Program Files\Logitech Gaming Software\LCore.exe

16:40:44.0403 0x23f0  Launch LCore - ok

16:40:44.0443 0x23f0  OneDriveSetup - ok

16:40:44.0446 0x23f0  OneDriveSetup - ok

16:40:44.0448 0x23f0  OneDriveSetup - ok

16:40:44.0449 0x23f0  WAB Migrate - ok

16:40:44.0454 0x23f0  AV detected via SS2: Avast Antivirus, Q:\Programme\Avast!\wsc_proxy.exe ( 17.1.3394.0 ), 0x41000 ( enabled : updated )

16:40:44.0455 0x23f0  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )

16:40:44.0456 0x23f0  FW detected via SS2: Avast Antivirus, Q:\Programme\Avast!\wsc_proxy.exe ( 17.1.3394.0 ), 0x41010 ( enabled )

16:40:49.0605 0x23f0  ============================================================

16:40:49.0605 0x23f0  Scan finished

16:40:49.0605 0x23f0  ============================================================

16:40:49.0610 0x23d4  Detected object count: 0

16:40:49.0610 0x23d4  Actual detected object count: 0

Ich habe mir selber die Logs von MBAR angeguckt. Es waren Objekte in der Registry.
Ich wollte fragen ob dieser Thread auch zur "jhdbca"-Geschichte passt?:
http://www.trojaner-board.de/184151-...-ultimate.html

Und dann habe ich noch eine Frage zur Registry:

Ich habe einen Ordner mit diesem Namen 4 mal:

1. HKCU\SOFTWARE\BB6E08ABDA77AEA3E5F310C19FCB8022
zu 1) hier befinden sich 3 Dateien drinne mit dem Name c,d und o.
Ich finde es seltsam das sie vor 4 Tagen erstellt wurden.
Den Ordner kenne ich auch nicht. Was sind das für Dateien?

2. HKLM\SOFTWARE\BB6E08ABDA77AEA3E5F310C19FCB8022
zu 2) Ich finde in diesem Ordner eine Datei mit dem Namen:
{EFD519A3-DC49-498A-8DD4-AD1DA8F97FCD}

3. HKLM\SOFTWARE\WOW6432Node\BB6E08ABDA77AEA3E5F310C19FCB8022
zu 3) Ich finde in diesem Ordner eine Datei mit dem Namen, gleich dem darüber:
{EFD519A3-DC49-498A-8DD4-AD1DA8F97FCD}

4. HKUS\S-1-5-21-303598687-36277840-1408844204-1001\SOFTWARE
\BB6E08ABDA77AEA3E5F310C19FCB8022
zu 4) Ich finde in diesem Ordner wieder 3 Dateien mit den Namen c,d und o

Current User bedeutet aktueller Nutzer oder? Dann muss ich ja Punkt 4. sein? Und was macht der Schlüssel nun? Außerdem ist ja der Schlüssel noch lokal auf der Maschine.
Ich hoffe ich frage nicht zu viel.

Gruß. :)