Trojaner-Board - Weiterleitung von FF auf Schädlingsseite?

Hallo zusammen,

nach dem Einlesen hier im Forum, hoffe ich auf eure Hilfe oder vielleicht auch Entwarnung.

vorab zur Info: Der Rechner wird für Office-Arbeiten genutzt, dazu hier und da mal etwas Musik auf Youtube. Also kein Spiele-PC oder vergleichbares, falls das relevant sein sollte.

Nachdem ich mir heute erstmalig ein Video auf YT ansehen wollte, wurde beim Klicken auf das gewünschte Video ein weiterer Tab geöffnet und es wurde eine Art "Windows-Seite" angezeigt, auf der optisch und sogar akkustisch ?? auf einen Virus hingewiesen wurde, der u. a. sensible Daten weitergeben würde. FF lies sich erst nach einigen Versuchen mit dem Task-Manager schließen - da FF nicht reagiert hat, die akkustischen Hinweise aber trotzdem immer wieder verzerrt abgespielt wurden.

Das Problem ist danach nicht mehr aufgetreten, dazu auch keine Fehlermeldungen - was mein ungutes Gefühl aber nicht verbessert.

Allerdings "fühlt" sich der Rechner ungewohnt langsamer an ohne das neue Programme oder Daten installiert wurden. Mir ist natürlich bewusst, dass eure Hilfe nicht zur Kernsanierung gedacht ist. Wenn der Zusammenhang zu einem Schädling und ein Schädling selbst ausgeschlossen werden kann, wäre mir schon geholfen.

Soweit ich es verstanden habe, geht es mit FRST los.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01

durchgeführt von Bir (Administrator) auf XXX (01-05-2018 20:21:22)

Gestartet von G:\CompNeu\FRST

Geladene Profile: Bir (Verfügbare Profile: Bir)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Avira Operations GmbH & Co. KG) D:\AntiV\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) D:\AntiV\Avira\AntiVir Desktop\avshadow.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) D:\AntiV\Avira\AntiVir Desktop\sched.exe

() D:\Steuer\2013\AAVUpdateManager\aavus.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe

(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe

(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Geek Software GmbH) D:\PDF Creator\PDF24\pdf24.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe

(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Avira Operations GmbH & Co. KG) D:\AntiV\Avira\AntiVir Desktop\avgnt.exe

(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe

(Mozilla Corporation) D:\Mozilla\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9222760 2010-06-02] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1481320 2010-06-02] (Realtek Semiconductor)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)

HKLM\...\Run: [HotkeyApp] => C:\Program Files\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron)

HKLM\...\Run: [LMgrVolOSD] => C:\Program Files\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)

HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM\...\Run: [Wbutton] => C:\Program Files\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)

HKLM\...\Run: [PDFPrint] => D:\PDF Creator\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\AviraSpeedup\Avira.SystemSpeedup.Core.Common.Starter.exe [14952 2016-02-26] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-03-28] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [AviraSpeedup] => C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe [312120 2016-02-26] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-29] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2013-09-30]

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.192.1

Tcpip\..\Interfaces\{7B343192-26E0-4932-95C1-9AAFC28AC700}: [DhcpNameServer] 192.168.192.1

Tcpip\..\Interfaces\{91734A2F-C336-4BE9-8362-AA7479B0E354}: [DhcpNameServer] 192.168.192.1
 

Internet Explorer:

==================

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://medion.msn.com

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://medion.msn.com/

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.aldi.com/

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.aldi.com

SearchScopes: HKLM -> DefaultScope Wert fehlt

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)

BHO: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei

BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab

DPF: {CAFEEFAC-0018-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Bir\AppData\Roaming\Mozilla\Firefox\Profiles\ysxgrw54.default

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll [2014-10-22] ()

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()

FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_40\bin\new_plugin\npjp2.dll [Keine Datei]

FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-04] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Extension: Kein Name - C:\Users\Bir\AppData\Roaming\Mozilla\Firefox\Profiles\ysxgrw54.default\Extensions\abs@avira.com.xpi [2018-04-22]

StartMenuInternet: FIREFOX.EXE - D:\Mozilla\firefox.exe
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AAV UpdateService; D:\Steuer\2013\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2013-09-30] () [Datei ist nicht signiert]

S2 AntiVirMailService; D:\AntiV\Avira\AntiVir Desktop\avmailc7.exe [879128 2018-04-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; D:\AntiV\Avira\AntiVir Desktop\sched.exe [224472 2018-04-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; D:\AntiV\Avira\AntiVir Desktop\avguard.exe [224472 2018-04-29] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [449240 2018-03-28] (Avira Operations GmbH & Co. KG)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [918160 2015-03-28] (NVIDIA Corporation)

S2 MBAMService; G:\CompNeu\MBAM\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [20696720 2015-03-28] (NVIDIA Corporation)

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2010-02-12] () [Datei ist nicht signiert]

R2 SpeedupService; C:\Program Files\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe [24224 2016-02-26] (Avira Operations GmbH & Co. KG)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.)

R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10) [Datei ist nicht signiert]

S3 Amdu32prn; kein ImagePath

S2 AntiVirWebService; "D:\AntiVir\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [46440 2017-06-20] (Avira Operations GmbH & Co. KG)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [141792 2018-04-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [147368 2018-04-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35840 2017-04-26] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [59000 2017-04-26] (Avira Operations GmbH & Co. KG)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)

S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [786400 2009-08-13] (DiBcom SA)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)

R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [26768 2015-03-13] (NVIDIA Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-03-28] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2014-11-22] (NVIDIA Corporation)

S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2018-05-01 14:15 - 2018-05-01 14:15 - 00005919 _____ C:\Users\Bir\Desktop\u33.ashprj

2018-05-01 13:22 - 2018-05-01 13:24 - 00211160 _____ C:\TDSSKiller.3.1.0.9_01.05.2018_13.22.44_log.txt

2018-04-30 13:09 - 2018-04-30 13:09 - 00005549 _____ C:\Users\Bir\Desktop\u.ashprj

2018-04-29 17:08 - 2018-04-29 17:08 - 00001082 _____ C:\Users\Public\Desktop\Avira.lnk

2018-04-22 18:38 - 2018-03-31 03:39 - 04046528 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2018-04-22 18:38 - 2018-03-31 03:39 - 03958464 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2018-04-22 18:38 - 2018-03-31 03:39 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll

2018-04-22 18:38 - 2018-03-31 03:39 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2018-04-22 18:38 - 2018-03-31 03:39 - 00137920 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll

2018-04-22 18:38 - 2018-03-31 03:39 - 00137920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2018-04-22 18:38 - 2018-03-31 03:39 - 00067264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2018-04-22 18:38 - 2018-03-31 03:12 - 01310480 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2018-04-22 18:38 - 2018-03-31 03:09 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2018-04-22 18:38 - 2018-03-31 02:51 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2018-04-22 18:38 - 2018-03-31 02:51 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2018-04-22 18:38 - 2018-03-31 02:51 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2018-04-22 18:38 - 2018-03-31 02:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2018-04-22 18:38 - 2018-03-31 02:51 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2018-04-22 18:38 - 2018-03-31 02:49 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2018-04-22 18:38 - 2018-03-31 02:49 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys

2018-04-22 18:38 - 2018-03-31 02:47 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2018-04-22 18:38 - 2018-03-31 02:47 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2018-04-22 18:38 - 2018-03-31 02:47 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2018-04-22 18:38 - 2018-03-31 02:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2018-04-22 18:38 - 2018-03-31 02:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2018-04-22 18:38 - 2018-03-31 02:47 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2018-04-22 18:38 - 2018-03-31 02:47 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2018-04-22 18:38 - 2018-03-28 09:18 - 02404352 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2018-04-22 18:38 - 2018-03-23 19:59 - 00348824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2018-04-22 18:38 - 2018-03-22 23:26 - 20287488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2018-04-22 18:38 - 2018-03-22 23:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2018-04-22 18:38 - 2018-03-22 23:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2018-04-22 18:38 - 2018-03-22 22:52 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2018-04-22 18:38 - 2018-03-22 22:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2018-04-22 18:38 - 2018-03-22 22:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2018-04-22 18:38 - 2018-03-22 22:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2018-04-22 18:38 - 2018-03-22 22:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2018-04-22 18:38 - 2018-03-22 22:48 - 02295296 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2018-04-22 18:38 - 2018-03-22 22:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2018-04-22 18:38 - 2018-03-22 22:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2018-04-22 18:38 - 2018-03-22 22:43 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2018-04-22 18:38 - 2018-03-22 22:42 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2018-04-22 18:38 - 2018-03-22 22:42 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2018-04-22 18:38 - 2018-03-22 22:42 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2018-04-22 18:38 - 2018-03-22 22:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2018-04-22 18:38 - 2018-03-22 22:36 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2018-04-22 18:38 - 2018-03-22 22:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2018-04-22 18:38 - 2018-03-22 22:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2018-04-22 18:38 - 2018-03-22 22:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2018-04-22 18:38 - 2018-03-22 22:28 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2018-04-22 18:38 - 2018-03-22 22:25 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2018-04-22 18:38 - 2018-03-22 22:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2018-04-22 18:38 - 2018-03-22 22:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2018-04-22 18:38 - 2018-03-22 22:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2018-04-22 18:38 - 2018-03-22 22:21 - 04496896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2018-04-22 18:38 - 2018-03-22 22:20 - 13680128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2018-04-22 18:38 - 2018-03-22 22:17 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2018-04-22 18:38 - 2018-03-22 22:15 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2018-04-22 18:38 - 2018-03-22 22:15 - 00692224 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2018-04-22 18:38 - 2018-03-22 22:14 - 02059776 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2018-04-22 18:38 - 2018-03-22 22:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2018-04-22 18:38 - 2018-03-22 21:55 - 02767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2018-04-22 18:38 - 2018-03-22 21:52 - 01313792 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2018-04-22 18:38 - 2018-03-22 21:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2018-04-22 18:38 - 2018-03-10 19:11 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll

2018-04-22 18:38 - 2018-03-09 20:18 - 00309440 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2018-04-22 18:38 - 2018-03-09 20:12 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll

2018-04-22 18:38 - 2018-03-09 20:12 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2018-04-22 18:38 - 2018-03-09 20:12 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2018-04-22 18:38 - 2018-03-09 20:11 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2018-04-22 18:38 - 2018-03-09 19:31 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2018-04-22 18:38 - 2018-03-06 20:13 - 00148160 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll

2018-04-22 18:38 - 2018-03-06 20:11 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll

2018-04-22 18:38 - 2018-03-06 20:11 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll

2018-04-22 18:38 - 2018-02-22 05:06 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2018-04-22 18:38 - 2018-02-18 23:34 - 00535616 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2018-04-22 18:38 - 2018-02-10 20:49 - 00162496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00154304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00104640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NV_AGP.SYS

2018-04-22 18:38 - 2018-02-10 20:49 - 00057024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ULIAGPKX.SYS

2018-04-22 18:38 - 2018-02-10 20:49 - 00053440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00052928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00052928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VIAAGP.SYS

2018-04-22 18:38 - 2018-02-10 20:49 - 00051904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SISAGP.SYS

2018-04-22 18:38 - 2018-02-10 20:49 - 00046272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\isapnp.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00032448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vdrvroot.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00027840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mssmbios.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00021696 _____ (Microsoft Corporation) C:\Windows\system32\streamci.dll

2018-04-22 18:38 - 2018-02-10 20:49 - 00013504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msisadrv.sys

2018-04-22 18:38 - 2018-02-10 20:49 - 00011840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\swenum.sys

2018-04-22 18:38 - 2018-02-10 20:48 - 00274624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2018-04-22 18:38 - 2018-02-10 20:48 - 00052928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AMDAGP.SYS

2018-04-22 18:38 - 2018-02-10 20:48 - 00052928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AGP440.sys

2018-04-22 18:38 - 2018-02-10 20:23 - 02292224 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll

2018-04-22 18:38 - 2018-02-10 20:23 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll

2018-04-22 18:38 - 2018-02-10 20:23 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\racpldlg.dll

2018-04-22 18:38 - 2018-02-10 20:23 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\msrahc.dll

2018-04-22 18:38 - 2018-02-10 19:36 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe

2018-04-22 18:38 - 2018-02-10 19:36 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\sdchange.exe

2018-04-22 18:38 - 2018-02-10 19:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmiacpi.sys

2018-04-22 18:38 - 2018-02-10 19:36 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\MsraLegacy.tlb

2018-04-22 18:38 - 2018-02-10 19:36 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\errdev.sys

2018-04-22 18:38 - 2018-02-02 20:54 - 00105152 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2018-04-22 18:38 - 2018-02-02 20:29 - 02365952 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2018-04-22 18:38 - 2018-02-02 20:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2018-04-22 18:38 - 2018-02-02 20:29 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2018-04-22 18:38 - 2018-02-02 20:28 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2018-04-22 18:38 - 2018-02-02 20:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2018-04-22 18:38 - 2018-02-02 19:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2018-04-22 18:38 - 2018-01-25 16:04 - 00922944 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00066392 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00019800 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00016216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00015704 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00013656 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll

2018-04-22 18:38 - 2018-01-25 16:04 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll

2018-04-22 18:38 - 2018-01-15 21:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2018-04-22 18:38 - 2018-01-12 18:29 - 01309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2018-04-22 18:38 - 2018-01-12 18:29 - 00250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2018-04-22 18:38 - 2018-01-12 18:29 - 00240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2018-04-22 18:38 - 2018-01-12 18:29 - 00187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2018-04-22 18:38 - 2018-01-12 18:26 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll

2018-04-22 18:38 - 2018-01-12 18:26 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2018-04-22 18:38 - 2018-01-12 18:16 - 03405824 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe

2018-04-22 18:38 - 2018-01-12 18:05 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2018-04-22 18:38 - 2018-01-12 18:05 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2018-04-22 18:38 - 2018-01-12 18:05 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys

2018-04-22 18:38 - 2018-01-11 18:22 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 12880384 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 01417728 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 01155584 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00564736 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\traffic.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wshnetbs.dll

2018-04-22 18:38 - 2018-01-01 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:54 - 01214184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2018-04-22 18:38 - 2018-01-01 03:54 - 00712936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2018-04-22 18:38 - 2018-01-01 03:54 - 00201960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2018-04-22 18:38 - 2018-01-01 03:54 - 00173288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2018-04-22 18:38 - 2018-01-01 03:50 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2018-04-22 18:38 - 2018-01-01 03:43 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys

2018-04-22 18:38 - 2018-01-01 03:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys

2018-04-22 18:38 - 2018-01-01 03:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys

2018-04-22 18:38 - 2018-01-01 03:43 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll

2018-04-22 18:38 - 2018-01-01 03:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll

2018-04-22 18:38 - 2018-01-01 03:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll

2018-04-22 18:38 - 2018-01-01 03:38 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2018-04-22 18:38 - 2018-01-01 03:36 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2018-04-22 18:38 - 2018-01-01 03:36 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2018-04-22 18:38 - 2018-01-01 03:35 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2018-04-22 18:38 - 2018-01-01 03:35 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2018-04-22 18:38 - 2018-01-01 03:35 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2018-04-22 18:38 - 2018-01-01 03:35 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2018-04-22 18:38 - 2018-01-01 03:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 01176576 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2018-04-22 18:38 - 2017-12-05 19:08 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll

2018-04-22 18:38 - 2017-12-05 17:54 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe

2018-04-22 18:38 - 2017-12-05 17:49 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll

2018-04-22 18:38 - 2017-11-04 17:10 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll

2018-04-22 18:38 - 2017-11-04 17:10 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll

2018-04-22 18:38 - 2017-11-02 17:11 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll

2018-04-22 18:38 - 2017-11-02 17:11 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\rtm.dll

2018-04-22 18:38 - 2017-11-02 17:11 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll

2018-04-22 18:38 - 2017-11-02 16:56 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iprtprio.dll

2018-04-22 18:38 - 2017-10-18 03:55 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2018-04-22 18:38 - 2017-10-18 03:55 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2018-04-22 18:38 - 2017-10-17 00:46 - 00953344 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 12574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2018-04-22 18:38 - 2017-10-12 02:37 - 11410944 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2018-04-22 18:38 - 2017-10-12 02:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2018-04-22 18:38 - 2017-10-12 02:26 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2018-04-22 18:38 - 2017-10-12 02:26 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2018-04-22 18:38 - 2017-10-12 02:25 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2018-04-22 18:38 - 2017-10-12 02:25 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll

2018-04-22 18:38 - 2017-10-12 02:24 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2018-04-22 18:38 - 2017-10-12 02:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2018-04-22 18:38 - 2017-10-12 02:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2018-04-22 18:38 - 2017-10-12 02:14 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2018-04-22 18:38 - 2017-10-12 02:14 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys

2018-04-22 18:33 - 2018-03-14 19:18 - 00116928 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2018-04-22 18:33 - 2018-03-14 19:14 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 01893376 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2018-04-22 18:33 - 2018-03-14 15:04 - 01319424 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2018-04-22 18:33 - 2018-03-14 15:04 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2018-04-22 18:26 - 2018-04-22 18:26 - 00000493 _____ C:\Users\Bir\Desktop\Windows Update - Verknüpfung.lnk
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2018-05-01 20:21 - 2013-10-01 17:54 - 00000000 ____D C:\FRST

2018-05-01 19:46 - 2017-01-15 17:23 - 00000000 ____D C:\Users\Bir\AppData\LocalLow\Mozilla

2018-05-01 19:21 - 2009-07-14 06:34 - 00018912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2018-05-01 19:21 - 2009-07-14 06:34 - 00018912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2018-05-01 19:11 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2018-05-01 19:10 - 2014-02-11 12:28 - 00000000 ____D C:\ProgramData\NVIDIA

2018-04-29 19:11 - 2015-08-30 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2018-04-29 19:09 - 2014-10-22 16:58 - 00147368 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2018-04-29 19:09 - 2014-10-22 16:58 - 00141792 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2018-04-29 17:17 - 2013-04-01 03:46 - 00000000 ____D C:\Users\Bir\AppData\Roaming\Mozilla

2018-04-29 17:10 - 2013-07-29 21:09 - 01620796 _____ C:\Windows\system32\PerfStringBackup.INI

2018-04-29 17:10 - 2009-07-14 10:47 - 00699786 _____ C:\Windows\system32\perfh007.dat

2018-04-29 17:10 - 2009-07-14 10:47 - 00149636 _____ C:\Windows\system32\perfc007.dat

2018-04-29 17:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf

2018-04-29 17:08 - 2014-10-22 17:08 - 00000000 ____D C:\ProgramData\Package Cache

2018-04-22 19:01 - 2009-07-14 06:33 - 00292320 _____ C:\Windows\system32\FNTCACHE.DAT

2018-04-22 18:58 - 2015-04-15 19:35 - 00000000 ____D C:\Windows\system32\appraiser

2018-04-22 18:58 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Setup

2018-04-22 18:44 - 2013-07-27 08:49 - 00000000 ____D C:\Windows\system32\MRT

2018-04-22 18:40 - 2017-11-03 15:03 - 133987696 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe

2018-04-22 18:40 - 2013-07-29 21:44 - 133987696 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Einige Dateien in TEMP:

====================

C:\Users\Bir\AppData\Local\Temp\avgnt.exe

C:\Users\Bir\AppData\Local\Temp\Quarantine.exe

C:\Users\Bir\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2017-11-03 16:59
 

==================== Ende vom FRST.txt ============================

Additon.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:05-03-2016 01

durchgeführt von Bir (2018-05-01 20:21:49)

Gestartet von G:\CompNeu\FRST

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2013-07-29 19:05:04)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2348862762-2397161920-170712824-500 - Administrator - Disabled)

Bir (S-1-5-21-2348862762-2397161920-170712824-1001 - Administrator - Enabled) => C:\Users\Bir

Gast (S-1-5-21-2348862762-2397161920-170712824-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2348862762-2397161920-170712824-1007 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}

AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)

Adobe Photoshop CS (HKLM\...\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}) (Version: CS - Adobe Systems, Inc.)

Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)

Apple Application Support (HKLM\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{941B4CE7-3F5D-443E-A8B7-56A420D2EAFD}) (Version: 7.1.2.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.27 - Atheros Communications Inc.)

Avira (HKLM\...\{4b629f54-1d82-40c9-9979-4485bb58d155}) (Version: 1.2.109.23832 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.2.109.23832 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.36.163 - Avira Operations GmbH & Co. KG)

AVM FRITZ!Box Dokumentation (HKLM\...\AVMFBox) (Version:  - AVM Berlin)

AVM FRITZ!Box Druckeranschluss (HKLM\...\AVMFBoxPrinter) (Version:  - AVM Berlin)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 3.28 - Piriform)

Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden

CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden

CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2602 - CyberLink Corp.)

CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1410a - CyberLink Corp.)

CyberLink MediaShow Espresso (HKLM\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.5.1412_24021 - CyberLink Corp.)

CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)

CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2718 - CyberLink Corp.)

CyberLink PowerDVD 9 (HKLM\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2925.52 - CyberLink Corp.)

CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)

CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2326 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.2626 - CyberLink Corp.)

FormsForWeb® Filler 3.4.3 (HKLM\...\{27692B66-0FC6-454E-AE22-D31C32B607B3}) (Version: 3.4.3 - Lucom GmbH)

Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )

Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2182 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

iTunes (HKLM\...\{0A37EE62-9A58-420D-90CC-4E52153112EE}) (Version: 11.3.0.54 - Apple Inc.)

Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Launch Manager (HKLM\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.2 - Wistron Corp.)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Medion Home Cinema (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.1505 - CyberLink Corp.)

Medion Home Cinema (Version: 8.0.1505 - CyberLink Corp.) Hidden

Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)

Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 5.0.1 (x86 de) (HKLM\...\Mozilla Firefox 5.0.1 (x86 de)) (Version: 5.0.1 - Mozilla)

Mozilla Firefox 59.0.3 (x86 en-US) (HKU\S-1-5-21-2348862762-2397161920-170712824-1001\...\Mozilla Firefox 59.0.3 (x86 en-US)) (Version: 59.0.3 - Mozilla)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)

NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5912 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6128 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0148 - REALTEK Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden

SteuerSparErklärung 2014 (HKLM\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.15.109 - Akademische Arbeitsgemeinschaft)

Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version:  - )

WinRAR 5.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

WinZip 19.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E4}) (Version: 19.0.11293 - WinZip Computing, S.L. )

X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {3BC263EC-50D2-4776-B1A5-F77C0A9C61F0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-19] (Piriform Ltd)

Task: {4D8FAB3B-EF5A-49C9-8FB4-C2D68E74A72E} - System32\Tasks\{7B0953E2-95A0-4906-9FD2-521B134C1D88} => pcalua.exe -a G:\Downloads\TagesSetup.exe -d G:\Downloads

Task: {F28C53B7-4B20-4276-906A-EE50A9AF6145} - System32\Tasks\Avira_Antivirus_Systray => D:\AntiV\Avira\AntiVir Desktop\avgnt.exe [2018-04-29] (Avira Operations GmbH & Co. KG)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-02-11 12:26 - 2015-03-13 21:43 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2014-02-11 12:27 - 2015-03-13 17:57 - 00107664 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll

2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () D:\Steuer\2013\AAVUpdateManager\aavus.exe

2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll.dll

2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2015-04-15 18:13 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll

2010-08-09 14:14 - 2010-02-12 16:20 - 00244904 _____ () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2018-04-29 19:26 - 2018-04-29 19:26 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\8b2735283053bf2e36ca30eb2677286e\IsdiInterop.ni.dll

2010-08-09 14:36 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2348862762-2397161920-170712824-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Bir\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.192.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{CF0F651F-B00B-4CDF-A6BF-3332D1BC3B52}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{19FAB056-4CC4-4312-8794-D90808A50F63}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{1C11F206-7CB0-4806-AF68-271EF583E094}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{5F9E9511-346D-4F1E-A49E-35ADCE0A3002}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{7E215AE7-87C6-4E2D-83C5-CDF4B9D299AF}] => (Allow) svchost.exe

FirewallRules: [{6113BED1-5EAE-4B06-9D41-D45A231C9FF4}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{F8CF15C9-06BB-42AC-9FC6-C25DD85ECAC5}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe

FirewallRules: [{51D9E062-BC3E-460A-9DA1-EC00C0E61AFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{967BB4E1-1EEF-40B2-BBD8-BCA977DF6D74}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{101694CC-978D-4204-AF2E-84C24C6CE28B}] => (Allow) C:\Program Files\CyberLink\PowerDVD9\PowerDVD9.EXE

FirewallRules: [{723B0637-366C-4656-A5FD-0C7A6C8C38EF}] => (Allow) C:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe

FirewallRules: [{E9184F33-BE24-436E-BDF9-BFE32BE9A9C3}] => (Allow) E:\fsetup.exe

FirewallRules: [{E831C5CF-2D2D-45F9-89C3-8E10DFE4735F}] => (Allow) E:\fsetup.exe

FirewallRules: [{7FF8583D-812F-4D6C-8FDB-01BB3D394770}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{342A44BB-3762-4D9A-8EAA-0B2097EB54E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{039CA9F5-C1BB-4286-8BE5-075690F667E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{633D6896-5608-41ED-82FB-63A67C388D78}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{8078898A-9AA8-4843-A055-8E90383545CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A5E38184-D1E8-4F41-983D-6087871E2E33}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{ECC07440-87EA-44DE-8373-55DBE9CCE8E2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{DF278C4D-04F6-4996-97A6-6AC8D7AD0451}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [TCP Query User{AD4914EB-97C8-47C5-832D-20BFFEEDDF7B}G:\anno\anno1701.exe] => (Block) G:\anno\anno1701.exe

FirewallRules: [UDP Query User{4B687021-BCC1-4E0F-85DA-1EC9FE29C7D7}G:\anno\anno1701.exe] => (Block) G:\anno\anno1701.exe

FirewallRules: [{5778D119-DE0D-4341-868D-B1DB47A7EAA1}] => (Allow) C:\Program Files\iTunes\iTunes.exe
 

==================== Wiederherstellungspunkte =========================
 

03-11-2017 14:22:18 Windows Update

03-11-2017 15:01:04 IKEA Home Planner wird entfernt

03-11-2017 15:02:53 Windows Update

04-11-2017 13:14:56 Installed FormsForWeb® Filler 3.4.3

04-11-2017 13:17:39 Removed FormsForWeb® Filler 3.2.3

04-11-2017 14:45:12 Windows Update

22-04-2018 18:39:23 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Microsoft Virtual WiFi Miniport Adapter

Description: Microsoft Virtual WiFi Miniport Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/01/2018 07:21:38 PM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
 

Error: (05/01/2018 07:13:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0040f257

ID des fehlerhaften Prozesses: 0xb38

Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0

Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1

Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2

Berichtskennung: NvStreamNetworkService.exe3
 

Error: (05/01/2018 03:31:44 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]
 

Error: (05/01/2018 01:19:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0040f257

ID des fehlerhaften Prozesses: 0x83c

Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0

Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1

Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2

Berichtskennung: NvStreamNetworkService.exe3
 

Error: (05/01/2018 01:15:27 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]
 

Error: (05/01/2018 01:01:40 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0040f257

ID des fehlerhaften Prozesses: 0xcd4

Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0

Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1

Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2

Berichtskennung: NvStreamNetworkService.exe3
 

Error: (04/30/2018 01:10:35 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]
 

Error: (04/30/2018 12:17:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0040f257

ID des fehlerhaften Prozesses: 0xbd0

Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0

Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1

Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2

Berichtskennung: NvStreamNetworkService.exe3
 

Error: (04/29/2018 08:08:07 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )

Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]
 

Error: (04/29/2018 05:05:13 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0040f257

ID des fehlerhaften Prozesses: 0xc14

Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0

Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1

Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2

Berichtskennung: NvStreamNetworkService.exe3
 
 

Systemfehler:

=============

Error: (05/01/2018 07:13:19 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Avira Email-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
 

Error: (05/01/2018 07:13:14 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Avira Email-Schutz" wurde nicht richtig gestartet.
 

Error: (05/01/2018 07:11:52 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (05/01/2018 07:11:52 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 70.
 

Error: (05/01/2018 07:11:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/01/2018 01:19:15 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Avira Email-Schutz" wurde mit folgendem dienstspezifischem Fehler beendet: %%1.
 

Error: (05/01/2018 01:19:12 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Avira Email-Schutz" wurde nicht richtig gestartet.
 

Error: (05/01/2018 01:17:49 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (05/01/2018 01:17:49 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 70.
 

Error: (05/01/2018 01:17:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz

Prozentuale Nutzung des RAM: 51%

Installierter physikalischer RAM: 3253.42 MB

Verfügbarer physikalischer RAM: 1574.8 MB

Summe virtueller Speicher: 6505.2 MB

Verfügbarer virtueller Speicher: 3825.59 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:296.01 GB) (Free:241.2 GB) NTFS

Drive d: (Programme) (Fixed) (Total:117.19 GB) (Free:114.69 GB) NTFS

Drive f: (Daten) (Fixed) (Total:97.66 GB) (Free:91.29 GB) NTFS

Drive g: (Sonstiges) (Fixed) (Total:84.22 GB) (Free:62.58 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 2BD2C32A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=296 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=299.1 GB) - (Type=OF Extended)

Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
 

==================== Ende vom Addition.txt ============================

Ach so. Nein, da hast du etwas falsch verstanden. Aber ihr habt bestimmt eure Erfahrungen gemacht, weshalb ich die Reaktion durchaus verstehen kann.

Es ging mir nur darum, dass ich zwischenzeitlich nicht komplett ohne Schutz unterwegs bin, weil ich bisher nur Avira kannte.

TDSS

Code:

21:30:18.0935 0x0ecc  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17

21:30:46.0344 0x0ecc  ============================================================

21:30:46.0344 0x0ecc  Current date / time: 2018/05/03 21:30:46.0344

21:30:46.0344 0x0ecc  SystemInfo:

21:30:46.0344 0x0ecc  

21:30:46.0344 0x0ecc  OS Version: 6.1.7601 ServicePack: 1.0

21:30:46.0344 0x0ecc  Product type: Workstation

21:30:46.0344 0x0ecc  ComputerName: XXX

21:30:46.0344 0x0ecc  UserName: Bir

21:30:46.0344 0x0ecc  Windows directory: C:\Windows

21:30:46.0344 0x0ecc  System windows directory: C:\Windows

21:30:46.0344 0x0ecc  Processor architecture: Intel x86

21:30:46.0344 0x0ecc  Number of processors: 4

21:30:46.0344 0x0ecc  Page size: 0x1000

21:30:46.0344 0x0ecc  Boot type: Normal boot

21:30:46.0344 0x0ecc  CodeIntegrityOptions = 0x00000000

21:30:46.0344 0x0ecc  ============================================================

21:30:49.0433 0x0ecc  KLMD registered as C:\Windows\system32\drivers\22029910.sys

21:30:49.0433 0x0ecc  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.24094, osProperties = 0x0

21:30:49.0761 0x0ecc  System UUID: {674E4E5F-3A51-1EC6-D422-A6D4B12FC2B5}

21:30:50.0088 0x0ecc  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 ( 596.17 Gb ), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

21:30:50.0104 0x0ecc  ============================================================

21:30:50.0104 0x0ecc  \Device\Harddisk0\DR0:

21:30:50.0120 0x0ecc  MBR partitions:

21:30:50.0120 0x0ecc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

21:30:50.0120 0x0ecc  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x25004000

21:30:50.0135 0x0ecc  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x25037000, BlocksNum 0xEA60000

21:30:50.0182 0x0ecc  \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x33A97800, BlocksNum 0xC350000

21:30:50.0229 0x0ecc  \Device\Harddisk0\DR0\Partition5: MBR, Type 0x7, StartLBA 0x3FDE8000, BlocksNum 0xA86E800

21:30:50.0229 0x0ecc  ============================================================

21:30:50.0307 0x0ecc  C: <-> \Device\Harddisk0\DR0\Partition2

21:30:50.0369 0x0ecc  D: <-> \Device\Harddisk0\DR0\Partition3

21:30:50.0416 0x0ecc  F: <-> \Device\Harddisk0\DR0\Partition4

21:30:50.0494 0x0ecc  G: <-> \Device\Harddisk0\DR0\Partition5

21:30:50.0494 0x0ecc  ============================================================

21:30:50.0494 0x0ecc  Initialize success

21:30:50.0494 0x0ecc  ============================================================

21:33:48.0586 0x0864  ============================================================

21:33:48.0586 0x0864  Scan started

21:33:48.0586 0x0864  Mode: Manual; SigCheck; TDLFS; 

21:33:48.0586 0x0864  ============================================================

21:33:48.0586 0x0864  KSN ping started

21:33:50.0801 0x0864  KSN ping finished: true

21:33:51.0300 0x0864  ================ Scan system memory ========================

21:33:51.0300 0x0864  System memory - ok

21:33:51.0300 0x0864  ================ Scan services =============================

21:33:51.0487 0x0864  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

21:33:51.0565 0x0864  1394ohci - ok

21:33:51.0675 0x0864  [ 7EEB488346FBFA3731276C3EE8A8FD9E, 97D2E49C2E615E38E8176F1C1551BF452CC6A00787FF90845EFF27A4E6E20B1F ] AAV UpdateService D:\Steuer\2013\AAVUpdateManager\aavus.exe

21:33:51.0690 0x0864  AAV UpdateService - ok

21:33:51.0737 0x0864  [ 108620696430A4A98D0F7FF1192A5E87, 942D6EC0425450AD68AC3A1F8E41B48D935946A1C8A0CB1D3A7D03D784E83484 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

21:33:51.0768 0x0864  ACPI - ok

21:33:51.0815 0x0864  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

21:33:51.0815 0x0864  AcpiPmi - ok

21:33:51.0909 0x0864  [ F84C9DEE4698DF3C1D76801B7B1B55D7, 071A3938ED7B9E20E30E873011C8039382C7EFE90D39EC8C0F3E457B2873406E ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

21:33:51.0924 0x0864  Adobe LM Service - detected UnsignedFile.Multi.Generic ( 1 )

21:33:54.0155 0x0864  Detect skipped due to KSN trusted

21:33:54.0155 0x0864  Adobe LM Service - ok

21:33:54.0233 0x0864  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

21:33:54.0264 0x0864  adp94xx - ok

21:33:54.0280 0x0864  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

21:33:54.0295 0x0864  adpahci - ok

21:33:54.0295 0x0864  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

21:33:54.0311 0x0864  adpu320 - ok

21:33:54.0342 0x0864  [ 39AEAECE9F42407F176FE130D790BFBE, 19010DF87BDC1884268098CC04B4B15ECB710C94054A57157C0F9B7A795BDB28 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

21:33:54.0373 0x0864  AeLookupSvc - ok

21:33:54.0451 0x0864  [ F582FC7976F1248AC5FBD6875C626B41, E65532B4E9924ECFF892C0A62312CBC070BFF7B1C4737E6CF8C4ED638BCD030F ] AFD             C:\Windows\system32\drivers\afd.sys

21:33:54.0467 0x0864  AFD - ok

21:33:54.0514 0x0864  [ C54F82AC5C4FDAD3930BD8DDDA4618DD, 4E8A2969BAE5D0D39FE80C4953B11E5731FD5B845D7E6765C20B296D1C16D8F8 ] agp440          C:\Windows\system32\drivers\agp440.sys

21:33:54.0545 0x0864  agp440 - ok

21:33:54.0576 0x0864  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys

21:33:54.0592 0x0864  aic78xx - ok

21:33:54.0607 0x0864  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe

21:33:54.0623 0x0864  ALG - ok

21:33:54.0654 0x0864  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys

21:33:54.0670 0x0864  aliide - ok

21:33:54.0685 0x0864  [ 9ACE631D227532F22C1E1899BB409605, EDDC21A4D582F987B842B93510A3D2669D2EA745F2BA559E4355E46BCDBE9923 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

21:33:54.0701 0x0864  amdagp - ok

21:33:54.0717 0x0864  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys

21:33:54.0717 0x0864  amdide - ok

21:33:54.0748 0x0864  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

21:33:54.0763 0x0864  AmdK8 - ok

21:33:54.0779 0x0864  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

21:33:54.0795 0x0864  AmdPPM - ok

21:33:54.0826 0x0864  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

21:33:54.0841 0x0864  amdsata - ok

21:33:54.0857 0x0864  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

21:33:54.0873 0x0864  amdsbs - ok

21:33:54.0904 0x0864  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

21:33:54.0919 0x0864  amdxata - ok

21:33:54.0951 0x0864  [ 66F54DE5D984EF0B60754CAF6BC7C306, CA51D7E76D72B197DA738F1409AB264639870C6BCCEEAAE37F806AB6ECFDC215 ] AppID           C:\Windows\system32\drivers\appid.sys

21:33:54.0966 0x0864  AppID - ok

21:33:55.0013 0x0864  [ 629DFCB95B94FFC3990A738E3D24A273, BC346EBB8EF8F860DF1F15081BADD30BB97938DAFEBC418A516B48711B4B3372 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

21:33:55.0029 0x0864  AppIDSvc - ok

21:33:55.0044 0x0864  [ CC96C08FCD638C0F450B0DCD962320E1, C4FA4BDC4542E7C148B7DB021ADA3DBA39007207C943C0E952EC069E37E55EAA ] Appinfo         C:\Windows\System32\appinfo.dll

21:33:55.0075 0x0864  Appinfo - ok

21:33:55.0153 0x0864  [ 6B73E94F9FE82D45781B8C8A09483082, C35EEAE7457168387A7C77A315524A3703ABDE49D9F23F59057315D9249D3473 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

21:33:55.0185 0x0864  Apple Mobile Device - ok

21:33:55.0216 0x0864  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\DRIVERS\arc.sys

21:33:55.0231 0x0864  arc - ok

21:33:55.0231 0x0864  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

21:33:55.0247 0x0864  arcsas - ok

21:33:55.0372 0x0864  [ A7BC8002C5A5DE2C781203076AAF0DC5, FA3B80E827CD1BA22C853E4C40F2AE37741C26D970886A50AB09F7753B003CAD ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

21:33:55.0403 0x0864  aspnet_state - ok

21:33:55.0419 0x0864  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

21:33:55.0450 0x0864  AsyncMac - ok

21:33:55.0481 0x0864  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys

21:33:55.0497 0x0864  atapi - ok

21:33:55.0559 0x0864  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

21:33:55.0575 0x0864  AudioEndpointBuilder - ok

21:33:55.0590 0x0864  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] Audiosrv        C:\Windows\System32\Audiosrv.dll

21:33:55.0621 0x0864  Audiosrv - ok

21:33:55.0653 0x0864  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll

21:33:55.0668 0x0864  AxInstSV - ok

21:33:55.0715 0x0864  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys

21:33:55.0746 0x0864  b06bdrv - ok

21:33:55.0777 0x0864  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys

21:33:55.0793 0x0864  b57nd60x - ok

21:33:55.0824 0x0864  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll

21:33:55.0840 0x0864  BDESVC - ok

21:33:55.0855 0x0864  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys

21:33:55.0887 0x0864  Beep - ok

21:33:55.0933 0x0864  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll

21:33:55.0965 0x0864  BFE - ok

21:33:55.0996 0x0864  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll

21:33:56.0043 0x0864  BITS - ok

21:33:56.0074 0x0864  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

21:33:56.0089 0x0864  blbdrive - ok

21:33:56.0167 0x0864  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

21:33:56.0199 0x0864  Bonjour Service - ok

21:33:56.0245 0x0864  [ 28AF7D4427868B7CE4C00CAB1864C7F6, AAE5303878AF0F7AA18069A8FCD99639EBC34622B456AF86C5E4F27858196E06 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

21:33:56.0261 0x0864  bowser - ok

21:33:56.0277 0x0864  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

21:33:56.0292 0x0864  BrFiltLo - ok

21:33:56.0308 0x0864  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

21:33:56.0323 0x0864  BrFiltUp - ok

21:33:56.0386 0x0864  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll

21:33:56.0417 0x0864  Browser - ok

21:33:56.0433 0x0864  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

21:33:56.0464 0x0864  Brserid - ok

21:33:56.0479 0x0864  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

21:33:56.0495 0x0864  BrSerWdm - ok

21:33:56.0511 0x0864  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

21:33:56.0526 0x0864  BrUsbMdm - ok

21:33:56.0526 0x0864  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

21:33:56.0542 0x0864  BrUsbSer - ok

21:33:56.0557 0x0864  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

21:33:56.0573 0x0864  BTHMODEM - ok

21:33:56.0604 0x0864  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll

21:33:56.0635 0x0864  bthserv - ok

21:33:56.0667 0x0864  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

21:33:56.0698 0x0864  cdfs - ok

21:33:56.0745 0x0864  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\drivers\cdrom.sys

21:33:56.0760 0x0864  cdrom - ok

21:33:56.0791 0x0864  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll

21:33:56.0823 0x0864  CertPropSvc - ok

21:33:56.0838 0x0864  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

21:33:56.0854 0x0864  circlass - ok

21:33:56.0901 0x0864  [ E4967C6AAFE48EC62B8B9AD82D8ABCCE, F8E88F93B0C374BDFF749CA3A1850BA7F91F0811A3CFFC1EBEDEFE98702635B4 ] CLFS            C:\Windows\system32\CLFS.sys

21:33:56.0916 0x0864  CLFS - ok

21:33:56.0994 0x0864  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

21:33:57.0025 0x0864  clr_optimization_v2.0.50727_32 - ok

21:33:57.0057 0x0864  [ 7761FBD826C16A007D6386FBFB846241, 7E9DD121488C8652F33059EBCA648D2319B9D3328EEA3F2AEBA1BFB90C0805EB ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

21:33:57.0072 0x0864  clr_optimization_v4.0.30319_32 - ok

21:33:57.0088 0x0864  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

21:33:57.0103 0x0864  CmBatt - ok

21:33:57.0119 0x0864  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

21:33:57.0135 0x0864  cmdide - ok

21:33:57.0166 0x0864  [ 7F7D4B16389CEF932950F6B2604D2601, E7C32734DAA75A00866A0F961C945BF7CC7A29D3A9806041D0046BC9FD3ACC5A ] CNG             C:\Windows\system32\Drivers\cng.sys

21:33:57.0197 0x0864  CNG - ok

21:33:57.0213 0x0864  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

21:33:57.0228 0x0864  Compbatt - ok

21:33:57.0259 0x0864  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

21:33:57.0275 0x0864  CompositeBus - ok

21:33:57.0306 0x0864  COMSysApp - ok

21:33:57.0306 0x0864  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

21:33:57.0322 0x0864  crcdisk - ok

21:33:57.0369 0x0864  [ 27607C3219A98ADECDB355628D48E17B, 2A12FB8AA8AF0094D112FD465C0C955E688315669AD65E694D65EEFB8FAD54EF ] CryptSvc        C:\Windows\system32\cryptsvc.dll

21:33:57.0400 0x0864  CryptSvc - ok

21:33:57.0478 0x0864  [ B4D1D62A09F09CB2DFD55628350CDAFB, 7DD3CE77D88B5AFAC4B6187F4CA6D50B7BD3398207163B2A1E4C76467801FF28 ] cvhsvc          C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

21:33:57.0509 0x0864  cvhsvc - ok

21:33:57.0556 0x0864  [ BF1B8CFDE3B075F2DA2652C3D35EC212, 6431A1EDA5B8C365570FF1B6E942459EADD01C849D65AB02C0F3035DD15CACCC ] DcomLaunch      C:\Windows\system32\rpcss.dll

21:33:57.0587 0x0864  DcomLaunch - ok

21:33:57.0618 0x0864  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll

21:33:57.0649 0x0864  defragsvc - ok

21:33:57.0696 0x0864  [ 2962AB36BF231188BBECF58A5E93798D, 9108DF0813EBB9BB3189B18B3A54BA7E56C17F9429AE16AB02A2493EBFE44ED9 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

21:33:57.0712 0x0864  DfsC - ok

21:33:57.0743 0x0864  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll

21:33:57.0759 0x0864  Dhcp - ok

21:33:57.0883 0x0864  [ 58F9BFBAE3C25D1A349DF0C6ECE8F9DF, FF1CFC9B323BCE2CFC06F9B2A98A29396832134FD61A570C1971A7240899E526 ] DiagTrack       C:\Windows\system32\diagtrack.dll

21:33:57.0915 0x0864  DiagTrack - ok

21:33:57.0946 0x0864  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys

21:33:57.0977 0x0864  discache - ok

21:33:58.0024 0x0864  [ B7B470F163002A0D0E381EE45834BF6B, 5B5E204341A6B1689C3F8717C41782B1A077A026F8B19DA3DE08CA44AB1D95B2 ] Disk            C:\Windows\system32\drivers\disk.sys

21:33:58.0039 0x0864  Disk - ok

21:33:58.0055 0x0864  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll

21:33:58.0086 0x0864  Dnscache - ok

21:33:58.0133 0x0864  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll

21:33:58.0180 0x0864  dot3svc - ok

21:33:58.0227 0x0864  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll

21:33:58.0289 0x0864  DPS - ok

21:33:58.0367 0x0864  [ A3F684B866A7D89AE396276CE7AFD416, 1E4C034B7B106FA403B13842A199D88A33B492A577B58CDDAE0B4706266B9565 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

21:33:58.0383 0x0864  drmkaud - ok

21:33:58.0461 0x0864  [ 897AE9430D037B056CF76A49CF588542, 02767A3CF7AFF9ECF251808DF2B3B4CABFBDF3EF59E15498B0985298991D8B91 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

21:33:58.0492 0x0864  DXGKrnl - ok

21:33:58.0523 0x0864  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll

21:33:58.0570 0x0864  EapHost - ok

21:33:58.0710 0x0864  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys

21:33:58.0819 0x0864  ebdrv - ok

21:33:58.0866 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] EFS             C:\Windows\System32\lsass.exe

21:33:58.0882 0x0864  EFS - ok

21:33:58.0960 0x0864  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

21:33:58.0991 0x0864  ehRecvr - ok

21:33:59.0022 0x0864  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe

21:33:59.0038 0x0864  ehSched - ok

21:33:59.0100 0x0864  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

21:33:59.0116 0x0864  elxstor - ok

21:33:59.0147 0x0864  [ 406B0275A4C0B97E263F5BAAAEF8C993, 498DAE6099A1D31E802B745749D8C561DDD7489F63215845BD099517E19321B7 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

21:33:59.0163 0x0864  ErrDev - ok

21:33:59.0194 0x0864  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll

21:33:59.0225 0x0864  EventSystem - ok

21:33:59.0272 0x0864  [ 53E8732CC70CC0991839DF9FC8996E4A, D14F6CAAF1F71647F12C6BDF1CD3EE7ADFAB0B292760AC197B876F0868853A72 ] exfat           C:\Windows\system32\drivers\exfat.sys

21:33:59.0303 0x0864  exfat - ok

21:33:59.0319 0x0864  [ 24F422E5D7517FEBDA2324116F1A7BE6, 3D54FFB59F7E4F9CC1189D8808B1F17EE7C4A6DE2A13C74CA5B6A47D5E759C53 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

21:33:59.0334 0x0864  fastfat - ok

21:33:59.0381 0x0864  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe

21:33:59.0397 0x0864  Fax - ok

21:33:59.0444 0x0864  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

21:33:59.0444 0x0864  fdc - ok

21:33:59.0459 0x0864  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll

21:33:59.0490 0x0864  fdPHost - ok

21:33:59.0506 0x0864  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll

21:33:59.0537 0x0864  FDResPub - ok

21:33:59.0568 0x0864  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

21:33:59.0568 0x0864  FileInfo - ok

21:33:59.0584 0x0864  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

21:33:59.0615 0x0864  Filetrace - ok

21:33:59.0631 0x0864  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

21:33:59.0646 0x0864  flpydisk - ok

21:33:59.0678 0x0864  [ F07B0E42088848BDC9F2C91780231E9D, 5877AFAD50C3252C00F45BFD528F67B4FDC3DB2F5E673CCE192A02B95A9CE809 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

21:33:59.0693 0x0864  FltMgr - ok

21:33:59.0756 0x0864  [ B5259B75BFDE00A5CDFD8D70444C8E3C, 3526602AA212B43351644AFB91E0D9CEFB778461BAAD2331B6BBF76FB14EEE86 ] FontCache       C:\Windows\system32\FntCache.dll

21:33:59.0787 0x0864  FontCache - ok

21:33:59.0865 0x0864  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

21:33:59.0880 0x0864  FontCache3.0.0.0 - ok

21:33:59.0927 0x0864  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

21:33:59.0943 0x0864  FsDepends - ok

21:33:59.0974 0x0864  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

21:33:59.0990 0x0864  Fs_Rec - ok

21:34:00.0021 0x0864  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

21:34:00.0052 0x0864  fvevol - ok

21:34:00.0083 0x0864  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

21:34:00.0099 0x0864  gagp30kx - ok

21:34:00.0146 0x0864  [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

21:34:00.0161 0x0864  GEARAspiWDM - ok

21:34:00.0286 0x0864  [ 0FB5169E831027B297CEAE030D61616E, 8E286CFD7F9763D20226B55CF9F03B0DE4A5CDE11B5C053242F2E608F3A8C610 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

21:34:00.0333 0x0864  GfExperienceService - ok

21:34:00.0411 0x0864  [ 8DA745095F6B73BB5B8266BF773DA1FA, 3EA614A9B8D4F61704A8754B014C8F6AC60551435BC4D9F2E761955905DA89F3 ] gpsvc           C:\Windows\System32\gpsvc.dll

21:34:00.0442 0x0864  gpsvc - ok

21:34:00.0473 0x0864  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

21:34:00.0489 0x0864  hcw85cir - ok

21:34:00.0551 0x0864  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

21:34:00.0567 0x0864  HDAudBus - ok

21:34:00.0582 0x0864  [ A88485DC6A7136C10D9A6C7E38FDFE3C, B651823E5F6D13B086B00440AD17C7C2756F079DD9290E0FEB1A3A48D0104F8C ] HECI            C:\Windows\system32\DRIVERS\HECI.sys

21:34:00.0598 0x0864  HECI - ok

21:34:00.0614 0x0864  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

21:34:00.0629 0x0864  HidBatt - ok

21:34:00.0645 0x0864  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

21:34:00.0660 0x0864  HidBth - ok

21:34:00.0676 0x0864  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

21:34:00.0692 0x0864  HidIr - ok

21:34:00.0738 0x0864  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll

21:34:00.0785 0x0864  hidserv - ok

21:34:00.0848 0x0864  [ AE003D56CF949FDF25CE9D4858512586, 48BD42A2BC633140D251B8BFFD2AB7C980663972DCA3DE4C1EF53CAA9EC4BFD5 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

21:34:00.0863 0x0864  HidUsb - ok

21:34:00.0894 0x0864  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll

21:34:00.0957 0x0864  hkmsvc - ok

21:34:00.0988 0x0864  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll

21:34:01.0004 0x0864  HomeGroupListener - ok

21:34:01.0035 0x0864  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

21:34:01.0050 0x0864  HomeGroupProvider - ok

21:34:01.0082 0x0864  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

21:34:01.0097 0x0864  HpSAMD - ok

21:34:01.0160 0x0864  [ E6D40D774076BCD7119CB7FAAA1A6004, 9F650F2A5E40EFBDEFD41BFA720F9A56083D0551C0523C4BD8AF4FDB4A758304 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

21:34:01.0206 0x0864  HTTP - ok

21:34:01.0253 0x0864  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

21:34:01.0269 0x0864  hwpolicy - ok

21:34:01.0300 0x0864  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

21:34:01.0316 0x0864  i8042prt - ok

21:34:01.0347 0x0864  [ 26541A068572F650A2FA490726FE81BE, 9D6EF745731D45C4482274BE9C56300BBE8843D6C182F0E5C621AB121DBE371E ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys

21:34:01.0362 0x0864  iaStor - ok

21:34:01.0440 0x0864  [ 31A0E93CDF29007D6C6FFFB632F375ED, CA464928E9868B9A09C324DBBC8DA41A01C5C486B43578FC695250D523DE555B ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

21:34:01.0456 0x0864  IAStorDataMgrSvc - ok

21:34:01.0503 0x0864  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

21:34:01.0518 0x0864  iaStorV - ok

21:34:01.0628 0x0864  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

21:34:01.0659 0x0864  idsvc - ok

21:34:01.0706 0x0864  IEEtwCollectorService - ok

21:34:02.0080 0x0864  [ 40F8A0F85BCE94F766808AEEE8F96FA8, 7D80BA9501F42CD5B41337F7C69B8CD7E57D1EC1C516ECAC2002DF66A8826C78 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys

21:34:02.0501 0x0864  igfx - ok

21:34:02.0532 0x0864  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

21:34:02.0548 0x0864  iirsp - ok

21:34:02.0642 0x0864  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll

21:34:02.0673 0x0864  IKEEXT - ok

21:34:02.0704 0x0864  [ E3C36AC5AE87EC970AE8EA2A93D59AE1, 8403A5243DF38EFC35A0200760EC081E42467744AF25A1F2168D5A8198AF6A5B ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys

21:34:02.0720 0x0864  Impcd - ok

21:34:02.0876 0x0864  [ ACEC5BBEE4AA34D74BE0E2E512CC2026, DBE4672B0ABA876FBE51EF36CA0AF1EABD00F793984E9A2A90C2A757E7953C34 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

21:34:02.0969 0x0864  IntcAzAudAddService - ok

21:34:03.0000 0x0864  [ AF6D1E38BCE11DABA4C01D6A6DE94410, 0913444FE63FF47C99A3F002368C05574DE9AE7973CA5832FFC6C88F9F12B574 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys

21:34:03.0016 0x0864  IntcDAud - ok

21:34:03.0047 0x0864  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys

21:34:03.0063 0x0864  intelide - ok

21:34:03.0110 0x0864  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

21:34:03.0141 0x0864  intelppm - ok

21:34:03.0156 0x0864  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

21:34:03.0203 0x0864  IPBusEnum - ok

21:34:03.0234 0x0864  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

21:34:03.0266 0x0864  IpFilterDriver - ok

21:34:03.0312 0x0864  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

21:34:03.0344 0x0864  iphlpsvc - ok

21:34:03.0375 0x0864  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

21:34:03.0390 0x0864  IPMIDRV - ok

21:34:03.0406 0x0864  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

21:34:03.0453 0x0864  IPNAT - ok

21:34:03.0578 0x0864  [ 33813E4F82AEC696762EAD9EDADC9FE3, D0045D6782523B7B6FCFE4A6C864F081B522E409D9E5F031A7B8584910CEE3F5 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

21:34:03.0609 0x0864  iPod Service - ok

21:34:03.0640 0x0864  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

21:34:03.0640 0x0864  IRENUM - ok

21:34:03.0671 0x0864  [ AF8267DEB9D6D8B05041875DBF278274, 137A35BF063CC0078D9C2956839D9FAA602042FEA388C9E9A3AE1AB43B19CF91 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

21:34:03.0687 0x0864  isapnp - ok

21:34:03.0718 0x0864  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

21:34:03.0734 0x0864  iScsiPrt - ok

21:34:03.0765 0x0864  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys

21:34:03.0765 0x0864  kbdclass - ok

21:34:03.0812 0x0864  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys

21:34:03.0827 0x0864  kbdhid - ok

21:34:03.0858 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] KeyIso          C:\Windows\system32\lsass.exe

21:34:03.0874 0x0864  KeyIso - ok

21:34:03.0921 0x0864  [ 2E2EC681BA86CB29018C9F4C04ED911E, 7F3E7173B92B7CC481ED57C817E9F1FF01094AE755D3D5C3B0324F316D659A1B ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

21:34:03.0936 0x0864  KSecDD - ok

21:34:03.0983 0x0864  [ 15B7E38878D1738E34D7EBC77870C15F, 7E178709606E02D2CD160179882C874CE0E2D214F0C1DC50BA0210FE488E2817 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

21:34:03.0999 0x0864  KSecPkg - ok

21:34:04.0030 0x0864  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll

21:34:04.0077 0x0864  KtmRm - ok

21:34:04.0108 0x0864  [ 4566FD5F4416E7FEF3600E4B30D086C3, 8AF3E81D4BFE974D7419D1C7EFA7D2910AEA38A44C932A5EC83DAAAD995B7AB7 ] L1C             C:\Windows\system32\DRIVERS\L1C62x86.sys

21:34:04.0124 0x0864  L1C - ok

21:34:04.0139 0x0864  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll

21:34:04.0170 0x0864  LanmanServer - ok

21:34:04.0217 0x0864  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

21:34:04.0248 0x0864  LanmanWorkstation - ok

21:34:04.0295 0x0864  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

21:34:04.0326 0x0864  lltdio - ok

21:34:04.0342 0x0864  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

21:34:04.0389 0x0864  lltdsvc - ok

21:34:04.0404 0x0864  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll

21:34:04.0436 0x0864  lmhosts - ok

21:34:04.0529 0x0864  [ 1E2F802846EB944E0333EFEE7C9532A8, 86EB59BF238E3DB8AF9E379B0BAE5AEC734C15598E665062B2E19C0A58BEF783 ] LMS             C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

21:34:04.0545 0x0864  LMS - ok

21:34:04.0560 0x0864  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

21:34:04.0576 0x0864  LSI_FC - ok

21:34:04.0592 0x0864  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

21:34:04.0607 0x0864  LSI_SAS - ok

21:34:04.0623 0x0864  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

21:34:04.0638 0x0864  LSI_SAS2 - ok

21:34:04.0638 0x0864  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

21:34:04.0654 0x0864  LSI_SCSI - ok

21:34:04.0685 0x0864  [ 4BA509FEF4DB0B683C46821ACDF20B9E, 89545321811222862E4FFF46B33EA9EA4D260C8B478222F754AB53B8406F2EC4 ] luafv           C:\Windows\system32\drivers\luafv.sys

21:34:04.0701 0x0864  luafv - ok

21:34:04.0763 0x0864  [ 40C7F4B63337414F967AC53E0520B06B, 1E42F17F17B8BF748EFB15112EDA2DBD76761A011673B654020084AEC02089F1 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

21:34:04.0763 0x0864  MBAMProtector - ok

21:34:04.0919 0x0864  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService     G:\CompNeu\MBAM\Malwarebytes Anti-Malware\mbamservice.exe

21:34:04.0966 0x0864  MBAMService - ok

21:34:04.0997 0x0864  [ 63254775FE0F974F5316B4EC3F163038, 05C83C2A8C29075C25E506AA4554906096320DF5517EE550724A1DE35A7A5206 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

21:34:05.0013 0x0864  MBAMWebAccessControl - ok

21:34:05.0044 0x0864  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

21:34:05.0060 0x0864  Mcx2Svc - ok

21:34:05.0075 0x0864  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

21:34:05.0091 0x0864  megasas - ok

21:34:05.0122 0x0864  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

21:34:05.0138 0x0864  MegaSR - ok

21:34:05.0169 0x0864  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll

21:34:05.0184 0x0864  MMCSS - ok

21:34:05.0247 0x0864  [ 5B9CA81817E046666E7ABF8B9B101545, 6DD02C4C991198AC515847DAAEF7A3DF379636649FDB2623A0FBD8B51DADD523 ] mod7700         C:\Windows\system32\DRIVERS\mod7700.sys

21:34:05.0278 0x0864  mod7700 - ok

21:34:05.0294 0x0864  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys

21:34:05.0325 0x0864  Modem - ok

21:34:05.0340 0x0864  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

21:34:05.0356 0x0864  monitor - ok

21:34:05.0372 0x0864  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\drivers\mouclass.sys

21:34:05.0372 0x0864  mouclass - ok

21:34:05.0403 0x0864  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

21:34:05.0434 0x0864  mouhid - ok

21:34:05.0481 0x0864  [ 9664F55623B43FD85D5642A202976AEE, 9349DADF639BBF7478EFA2398696FEC416554865AD4DEA91BD9A5E7D9F0C3D49 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

21:34:05.0512 0x0864  mountmgr - ok

21:34:05.0559 0x0864  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys

21:34:05.0574 0x0864  mpio - ok

21:34:05.0606 0x0864  [ 20BE6173FD814436000DED25973D3FDC, 94BED3209ACB74334CA9CFDAC20C07609954BCBF1DB5286F89E6A80C18CD82AF ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

21:34:05.0621 0x0864  mpsdrv - ok

21:34:05.0699 0x0864  [ A9E7CF7F09C78623FB0B0357E21B6FAC, D9CC6C99BF4B111030E5C45163F8DF262857305E489B4F6A0265E692EDBD27B5 ] MpsSvc          C:\Windows\system32\mpssvc.dll

21:34:05.0730 0x0864  MpsSvc - ok

21:34:05.0777 0x0864  [ 06AC0310138E4B2C35AF7344D18BC686, FCDB6CC851EC47F92FFF764717A44FF5D5D0E179C215B3C6E77FB9BEA4DE1908 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

21:34:05.0793 0x0864  MRxDAV - ok

21:34:05.0808 0x0864  [ 0B61CCFE19A3A6259112D75AB075DA63, 22438CCF7D1D6B2A6BA4700073B8B03585A83E2B652ECD24310BBC8CD71F3085 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

21:34:05.0824 0x0864  mrxsmb - ok

21:34:05.0871 0x0864  [ 4028CBB329C8F8C3ABD86529156D3BD7, 8F9CB6FF0C015BC46C7D4E4D117E098CF48894432F481EEF2B662C78922FDD30 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

21:34:05.0902 0x0864  mrxsmb10 - ok

21:34:05.0933 0x0864  [ E168EA7E61C65DD7AA4E1A29BEBD4336, 489A739E456ACF9802741CFD741BE54D81656B5346DCB54AA456C59979412992 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

21:34:05.0949 0x0864  mrxsmb20 - ok

21:34:05.0964 0x0864  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys

21:34:05.0980 0x0864  msahci - ok

21:34:05.0996 0x0864  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

21:34:06.0011 0x0864  msdsm - ok

21:34:06.0042 0x0864  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe

21:34:06.0058 0x0864  MSDTC - ok

21:34:06.0089 0x0864  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys

21:34:06.0120 0x0864  Msfs - ok

21:34:06.0136 0x0864  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

21:34:06.0152 0x0864  mshidkmdf - ok

21:34:06.0198 0x0864  [ 621E468CD3AB1776F04F229476F3CCAE, 55B2CDD50EAC60AE506D1D3BE3AEB258284DFD1CDA0F089648E4AE203B109430 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

21:34:06.0214 0x0864  msisadrv - ok

21:34:06.0261 0x0864  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

21:34:06.0308 0x0864  MSiSCSI - ok

21:34:06.0323 0x0864  msiserver - ok

21:34:06.0339 0x0864  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

21:34:06.0370 0x0864  MSKSSRV - ok

21:34:06.0386 0x0864  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

21:34:06.0417 0x0864  MSPCLOCK - ok

21:34:06.0417 0x0864  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

21:34:06.0448 0x0864  MSPQM - ok

21:34:06.0479 0x0864  [ F337CF6CECD0AD92F000EA0359DC1869, 487B04DBDBDDC8C8500D2C9A12ABC72129712BFD4BDEA4E60139E3CF15648496 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

21:34:06.0495 0x0864  MsRPC - ok

21:34:06.0526 0x0864  [ 641D3E30B4EB29E33DCEB9508B306A09, 7D211387F7E205AB72F0A79D318D0DAD09CBB1BDCE93DF0AE8235DC7A13B2005 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

21:34:06.0526 0x0864  mssmbios - ok

21:34:06.0557 0x0864  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

21:34:06.0588 0x0864  MSTEE - ok

21:34:06.0588 0x0864  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

21:34:06.0620 0x0864  MTConfig - ok

21:34:06.0651 0x0864  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys

21:34:06.0666 0x0864  Mup - ok

21:34:06.0698 0x0864  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll

21:34:06.0729 0x0864  napagent - ok

21:34:06.0791 0x0864  [ 5F2B9CD280C48A8015AD70FCF4DFB758, F50D118BDCE35654CCA153CA2FC9123D014038494FBCBAFE0514D956DCB2D44D ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

21:34:06.0822 0x0864  NativeWifiP - ok

21:34:06.0869 0x0864  [ F241CF64EC874861775B81F122532B94, AFDE8CC6D87614DEAE368B25D6891C00B94F7824117392EF21C50B1DF6055364 ] NDIS            C:\Windows\system32\drivers\ndis.sys

21:34:06.0900 0x0864  NDIS - ok

21:34:06.0916 0x0864  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

21:34:06.0947 0x0864  NdisCap - ok

21:34:06.0963 0x0864  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

21:34:06.0994 0x0864  NdisTapi - ok

21:34:07.0025 0x0864  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

21:34:07.0041 0x0864  Ndisuio - ok

21:34:07.0072 0x0864  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

21:34:07.0103 0x0864  NdisWan - ok

21:34:07.0134 0x0864  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

21:34:07.0150 0x0864  NDProxy - ok

21:34:07.0197 0x0864  [ EB806AED1697ABD9A0D21BB00888233C, 7A0489E165977E6F357601A3C35EAA904C318190B76CE731D313F75BE73C65EC ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

21:34:07.0197 0x0864  NetBIOS - ok

21:34:07.0259 0x0864  [ 2E226E666C6E11DC8C850071A90BE2DC, 5BE2ADBBEA0E5C20031FADB85461D6F68788095B6553B4EBC7A031D7EE1995AD ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

21:34:07.0290 0x0864  NetBT - ok

21:34:07.0306 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] Netlogon        C:\Windows\system32\lsass.exe

21:34:07.0322 0x0864  Netlogon - ok

21:34:07.0384 0x0864  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll

21:34:07.0431 0x0864  Netman - ok

21:34:07.0462 0x0864  [ 51CD641EFF20C9FFBA2C0F72C269795E, ADA16CBCF4C915EDE7BB57C5B6562077918380C55D9E967B87421A24BD43DDE7 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

21:34:07.0478 0x0864  NetMsmqActivator - ok

21:34:07.0478 0x0864  [ 51CD641EFF20C9FFBA2C0F72C269795E, ADA16CBCF4C915EDE7BB57C5B6562077918380C55D9E967B87421A24BD43DDE7 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

21:34:07.0493 0x0864  NetPipeActivator - ok

21:34:07.0524 0x0864  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll

21:34:07.0571 0x0864  netprofm - ok

21:34:07.0571 0x0864  [ 51CD641EFF20C9FFBA2C0F72C269795E, ADA16CBCF4C915EDE7BB57C5B6562077918380C55D9E967B87421A24BD43DDE7 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

21:34:07.0587 0x0864  NetTcpActivator - ok

21:34:07.0602 0x0864  [ 51CD641EFF20C9FFBA2C0F72C269795E, ADA16CBCF4C915EDE7BB57C5B6562077918380C55D9E967B87421A24BD43DDE7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

21:34:07.0618 0x0864  NetTcpPortSharing - ok

21:34:07.0649 0x0864  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

21:34:07.0665 0x0864  nfrd960 - ok

21:34:07.0696 0x0864  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll

21:34:07.0712 0x0864  NlaSvc - ok

21:34:07.0727 0x0864  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

21:34:07.0758 0x0864  Npfs - ok

21:34:07.0790 0x0864  [ 6937652377C07F86EF195F1BF5423143, 02F109ABC3543296E70541367A7A6103F38704DAF9A5CDBA2D798EF5592CF663 ] nsi             C:\Windows\system32\nsisvc.dll

21:34:07.0805 0x0864  nsi - ok

21:34:07.0852 0x0864  [ C68AA651F93450ECA51A60D45A8E266C, 0AF79071CE5007F968D4028158200312F0C6B6A2114CF0990A638DBFE897E009 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

21:34:07.0883 0x0864  nsiproxy - ok

21:34:07.0946 0x0864  [ F0CCA0FFC94FE93C03E00A6646D6A3D1, 238AB3D6D19AA3058608B3EFD294EB4E1F88B8130DDD284B4EDDD2A3B597AC09 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

21:34:07.0992 0x0864  Ntfs - ok

21:34:08.0024 0x0864  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys

21:34:08.0055 0x0864  Null - ok

21:34:08.0070 0x0864  [ 03AD379554B50FA1802BE4EC2E291E92, DCF2B5DB1C8BDF2473E454F974EA6445C3EEC111252D859EC2EC3F6833390271 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

21:34:08.0086 0x0864  nusb3hub - ok

21:34:08.0117 0x0864  [ 06FE87C9D181AF5F04D192E604E10E6C, 27BBB521C68EAD123117DCD1DEA7436833EC0CFB62F6B6A5AC12E5A2996C7595 ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

21:34:08.0117 0x0864  nusb3xhc - ok

21:34:08.0414 0x0864  [ 593184CE76FDAAC328843CCCC579C19D, 6BBCD3AE5E5BA33677E3D8FCC1415E33FF5AFFF10072FD7C815DBCC663A1C4EA ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

21:34:08.0632 0x0864  nvlddmkm - ok

21:34:08.0788 0x0864  [ F758A5752CA282925CE3324FDBBADBED, E9DE21AE4509BC401FE7BD717E1585BDEAF2E016A4DC8BB829DD43F54101923F ] NvNetworkService C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe

21:34:08.0850 0x0864  NvNetworkService - ok

21:34:08.0882 0x0864  [ D9B8302B6E8DF800615CC42000E00156, 399F315687CFD142B717952B184EFC7C690F5B59FF963175FE68A33ABF2E9966 ] nvpciflt        C:\Windows\system32\DRIVERS\nvpciflt.sys

21:34:08.0897 0x0864  nvpciflt - ok

21:34:08.0928 0x0864  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

21:34:08.0944 0x0864  nvraid - ok

21:34:08.0960 0x0864  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

21:34:08.0975 0x0864  nvstor - ok

21:34:09.0053 0x0864  [ 0F2139C1C337BCB02E6638D67E90926C, 72B23BEDFAA62E73F2BE1C514DA9589CB6A1399EE370C26DF526EC218456F061 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

21:34:09.0069 0x0864  NvStreamKms - ok

21:34:09.0724 0x0864  [ A0758AF99D157258A970D08ECEF4F378, E763F45B2EC987F6E478E83558B08170434B6BDFDF14A429303912E21C721134 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

21:34:10.0332 0x0864  NvStreamSvc - ok

21:34:10.0410 0x0864  [ F8068FD29809634B6BB2DF5AB9E30AC9, E43D6198A5AD99D44E8531DD9FCE5D778980BAA51A2BF9AB98C6A54216288B65 ] nvsvc           C:\Windows\system32\nvvsvc.exe

21:34:10.0442 0x0864  nvsvc - ok

21:34:10.0473 0x0864  [ 3EEDE5E218F0978D802CE3196E8B9028, CEC193159C3EC91A48365A4EF50FF9F6D270B36840234F8B0751EFC1946B1D8F ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad32v.sys

21:34:10.0473 0x0864  nvvad_WaveExtensible - ok

21:34:10.0504 0x0864  [ 2F29F8F9BC3E16CDABFF52063FE18313, 1B5E2528F4D43936D76D6D7DE56CECBDDF3B61B8B5F120FAAE4A020E242CC2B3 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

21:34:10.0520 0x0864  nv_agp - ok

21:34:10.0566 0x0864  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

21:34:10.0582 0x0864  ohci1394 - ok

21:34:10.0629 0x0864  [ D30981DA22F2EDB8678AF50B634A9587, 0758ACE093D62226EF045CF080A038A16CAA42FD007B4133052828DB28ABBC60 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

21:34:10.0644 0x0864  ose - ok

21:34:10.0832 0x0864  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

21:34:11.0034 0x0864  osppsvc - ok

21:34:11.0097 0x0864  [ 13AE66AAABC48BEC5C2A7149BE7649EA, 9E30217BBF1707F86ED8E48F5A4F3DAA1E72A33B26D2315C9A400BF4E811D6F7 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

21:34:11.0112 0x0864  p2pimsvc - ok

21:34:11.0159 0x0864  [ 3160E4D1773C4B7CFFE6A40F75B37AC3, F816EAB7C6CAF1D09423E6579600729688EE99D798D51A67CFC6D4F2F8B97D33 ] p2psvc          C:\Windows\system32\p2psvc.dll

21:34:11.0190 0x0864  p2psvc - ok

21:34:11.0237 0x0864  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys

21:34:11.0237 0x0864  Parport - ok

21:34:11.0268 0x0864  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

21:34:11.0284 0x0864  partmgr - ok

21:34:11.0284 0x0864  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys

21:34:11.0300 0x0864  Parvdm - ok

21:34:11.0331 0x0864  [ 84752B402BF64CCDDF11816FEDF12DB4, 184DDFCEEE8C5B492415270FC640B8D584B3D79E7BADCE4DE7CDD74CC8C60130 ] PcaSvc          C:\Windows\System32\pcasvc.dll

21:34:11.0362 0x0864  PcaSvc - ok

21:34:11.0393 0x0864  [ 38B70674B96E69B5AFA4A6B13834E894, D4E20CC291A8819255759E1EF21C35572D9898A35E2D2FD336FDAC8212DF31BD ] pci             C:\Windows\system32\drivers\pci.sys

21:34:11.0409 0x0864  pci - ok

21:34:11.0440 0x0864  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys

21:34:11.0456 0x0864  pciide - ok

21:34:11.0471 0x0864  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

21:34:11.0487 0x0864  pcmcia - ok

21:34:11.0518 0x0864  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys

21:34:11.0518 0x0864  pcw - ok

21:34:11.0596 0x0864  [ 0C941A3F148B4228867908F98F394461, 6D5F575F2E796C5EA8F9F3F96F9ACD935E274210A105C9365102B448E9AE2031 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

21:34:11.0643 0x0864  PEAUTH - ok

21:34:11.0736 0x0864  [ 09B61B4894B05723BACE59F46EF892D4, 1BEA7E4A38935C2F1DF4AF503704E4B3A19B0E5658D83F5C36013DF0D6F3BC6D ] pla             C:\Windows\system32\pla.dll

21:34:11.0799 0x0864  pla - ok

21:34:11.0830 0x0864  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

21:34:11.0861 0x0864  PlugPlay - ok

21:34:11.0892 0x0864  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

21:34:11.0892 0x0864  PNRPAutoReg - ok

21:34:11.0924 0x0864  [ 13AE66AAABC48BEC5C2A7149BE7649EA, 9E30217BBF1707F86ED8E48F5A4F3DAA1E72A33B26D2315C9A400BF4E811D6F7 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

21:34:11.0955 0x0864  PNRPsvc - ok

21:34:11.0986 0x0864  [ A2FEA7E16D8D056D2FF1EE93F9C73FB1, 6BC8C1B37274B50573F3DAC043DBD9B29B93F527290392842CD94910014D0C74 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

21:34:12.0002 0x0864  PolicyAgent - ok

21:34:12.0048 0x0864  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll

21:34:12.0080 0x0864  Power - ok

21:34:12.0111 0x0864  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

21:34:12.0142 0x0864  PptpMiniport - ok

21:34:12.0173 0x0864  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

21:34:12.0189 0x0864  Processor - ok

21:34:12.0220 0x0864  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll

21:34:12.0236 0x0864  ProfSvc - ok

21:34:12.0251 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] ProtectedStorage C:\Windows\system32\lsass.exe

21:34:12.0251 0x0864  ProtectedStorage - ok

21:34:12.0298 0x0864  [ DC0453903820086F9043C513FFC4E4AA, 2068E89F2B29629CE3DDB8E3B6E2728B3D8FF92991D68D866FAC7FDA7851CA6E ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

21:34:12.0329 0x0864  Psched - ok

21:34:12.0392 0x0864  [ A6A7AD767BF5141665F5C675F671B3E1, 11D43F732C3B82679E53516F83E675B60B0EFEDE3F4EE3C42AC752AD8D5155AF ] PSI_SVC_2       c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

21:34:12.0407 0x0864  PSI_SVC_2 - ok

21:34:12.0485 0x0864  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

21:34:12.0532 0x0864  ql2300 - ok

21:34:12.0563 0x0864  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

21:34:12.0579 0x0864  ql40xx - ok

21:34:12.0610 0x0864  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll

21:34:12.0641 0x0864  QWAVE - ok

21:34:12.0657 0x0864  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

21:34:12.0688 0x0864  QWAVEdrv - ok

21:34:12.0704 0x0864  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

21:34:12.0750 0x0864  RasAcd - ok

21:34:12.0797 0x0864  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

21:34:12.0813 0x0864  RasAgileVpn - ok

21:34:12.0844 0x0864  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll

21:34:12.0875 0x0864  RasAuto - ok

21:34:12.0891 0x0864  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

21:34:12.0922 0x0864  Rasl2tp - ok

21:34:12.0953 0x0864  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll

21:34:12.0984 0x0864  RasMan - ok

21:34:13.0016 0x0864  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

21:34:13.0047 0x0864  RasPppoe - ok

21:34:13.0062 0x0864  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

21:34:13.0094 0x0864  RasSstp - ok

21:34:13.0125 0x0864  [ 856D4FDA0F2FACEDD68ED8B6C52BCA14, BE3E606B82CE843151810539BF6C43FA0F9F8BB22F8089DB4B0888630C3DDE2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

21:34:13.0156 0x0864  rdbss - ok

21:34:13.0187 0x0864  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

21:34:13.0203 0x0864  rdpbus - ok

21:34:13.0218 0x0864  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

21:34:13.0250 0x0864  RDPCDD - ok

21:34:13.0265 0x0864  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

21:34:13.0296 0x0864  RDPENCDD - ok

21:34:13.0312 0x0864  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

21:34:13.0328 0x0864  RDPREFMP - ok

21:34:13.0437 0x0864  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

21:34:13.0468 0x0864  RdpVideoMiniport - ok

21:34:13.0499 0x0864  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

21:34:13.0530 0x0864  RDPWD - ok

21:34:13.0546 0x0864  [ 2AA7FB156B876CAC20FC1FDEB2D1E95C, E1E8DB066B8256691A55C4ACFC7988D31E2E3D34F3AD0181454F0B10A4D165DE ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

21:34:13.0562 0x0864  rdyboost - ok

21:34:13.0593 0x0864  [ 149FE64A2BD27129CB731D09AF4ACDDE, 3B8E21A8E97348EC96EF24286EB6CF7EE517AD9C271D0E4EF918153D577E48F1 ] RemoteAccess    C:\Windows\System32\mprdim.dll

21:34:13.0608 0x0864  RemoteAccess - ok

21:34:13.0655 0x0864  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll

21:34:13.0686 0x0864  RemoteRegistry - ok

21:34:13.0749 0x0864  [ F12A68ED55053940CADD59CA5E3468DD, 75331E6DA4E30717085E7D8131989241EBC492DC3EE455546F91DA9DFFFD2BFC ] RichVideo       C:\Program Files\CyberLink\Shared files\RichVideo.exe

21:34:13.0764 0x0864  RichVideo - detected UnsignedFile.Multi.Generic ( 1 )

21:34:16.0011 0x0864  Detect skipped due to KSN trusted

21:34:16.0011 0x0864  RichVideo - ok

21:34:16.0026 0x0864  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

21:34:16.0073 0x0864  RpcEptMapper - ok

21:34:16.0104 0x0864  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe

21:34:16.0120 0x0864  RpcLocator - ok

21:34:16.0151 0x0864  [ BF1B8CFDE3B075F2DA2652C3D35EC212, 6431A1EDA5B8C365570FF1B6E942459EADD01C849D65AB02C0F3035DD15CACCC ] RpcSs           C:\Windows\system32\rpcss.dll

21:34:16.0167 0x0864  RpcSs - ok

21:34:16.0214 0x0864  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

21:34:16.0260 0x0864  rspndr - ok

21:34:16.0307 0x0864  [ 0340A381B920A6E68178B832889F33F8, 725B829D44AF88EBB404DA8E62679F0A412AF15EB5E5B2A60344A44E3BDA1B92 ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys

21:34:16.0323 0x0864  RSUSBSTOR - ok

21:34:16.0354 0x0864  [ 7DFD48E24479B68B258D8770121155A0, 3B5F7309403C46855DB888CF2058B07C9029690DBC7FB3224BAC7BE5547D2D57 ] RTL8167         C:\Windows\system32\DRIVERS\Rt86win7.sys

21:34:16.0370 0x0864  RTL8167 - ok

21:34:16.0448 0x0864  [ B5E9979FBB26FC059BD87A81F763D5DA, 1EE2FB1CB2F86FBE1589ACE3542E0003CC88499406A3EF37073CCA45651F493D ] rtl8192se       C:\Windows\system32\DRIVERS\rtl8192se.sys

21:34:16.0479 0x0864  rtl8192se - ok

21:34:16.0494 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] SamSs           C:\Windows\system32\lsass.exe

21:34:16.0510 0x0864  SamSs - ok

21:34:16.0557 0x0864  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

21:34:16.0588 0x0864  sbp2port - ok

21:34:16.0635 0x0864  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

21:34:16.0666 0x0864  SCardSvr - ok

21:34:16.0697 0x0864  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

21:34:16.0728 0x0864  scfilter - ok

21:34:16.0791 0x0864  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\Windows\system32\schedsvc.dll

21:34:16.0822 0x0864  Schedule - ok

21:34:16.0838 0x0864  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll

21:34:16.0869 0x0864  SCPolicySvc - ok

21:34:16.0900 0x0864  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

21:34:16.0916 0x0864  SDRSVC - ok

21:34:16.0947 0x0864  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

21:34:16.0962 0x0864  secdrv - ok

21:34:16.0994 0x0864  [ 38CBFFED5FC39CDFE6B4014401ED2629, 7BA730E2EDB8387190E45DA2F475BFE42AB3B12319DE088BD8E9F59227EDA4DD ] seclogon        C:\Windows\system32\seclogon.dll

21:34:17.0009 0x0864  seclogon - ok

21:34:17.0040 0x0864  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll

21:34:17.0072 0x0864  SENS - ok

21:34:17.0087 0x0864  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

21:34:17.0134 0x0864  SensrSvc - ok

21:34:17.0165 0x0864  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

21:34:17.0181 0x0864  Serenum - ok

21:34:17.0196 0x0864  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys

21:34:17.0228 0x0864  Serial - ok

21:34:17.0243 0x0864  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

21:34:17.0259 0x0864  sermouse - ok

21:34:17.0306 0x0864  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll

21:34:17.0337 0x0864  SessionEnv - ok

21:34:17.0368 0x0864  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

21:34:17.0384 0x0864  sffdisk - ok

21:34:17.0399 0x0864  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

21:34:17.0415 0x0864  sffp_mmc - ok

21:34:17.0415 0x0864  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

21:34:17.0430 0x0864  sffp_sd - ok

21:34:17.0446 0x0864  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

21:34:17.0462 0x0864  sfloppy - ok

21:34:17.0508 0x0864  [ EC5C79BD81F0C55DF53F4818D4F1C2C8, B9650F484CF918781CA3B02278F19E73FA3B619133F75C0C42FEB788A183E0CB ] Sftfs           C:\Windows\system32\DRIVERS\Sftfslh.sys

21:34:17.0540 0x0864  Sftfs - ok

21:34:17.0586 0x0864  [ 1AEBDC693C74EA55FE05D51FA6573EBC, 92E3A6C8D3B5193BD2831DD47C4C58419F72ABC2C21C71A9A690CCFC2D05CBB0 ] sftlist         C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

21:34:17.0602 0x0864  sftlist - ok

21:34:17.0633 0x0864  [ A224670FB892A205E4D99E06C0B85C7C, 3E2E401FF5E0E9EE4C2BE9F5C3144086F5AB015789C36D7263BBAB59FEEB74C7 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaylh.sys

21:34:17.0649 0x0864  Sftplay - ok

21:34:17.0664 0x0864  [ 9D354D425FB55CDF0EDC7F67FBC5B04E, C3B68F8B5F34B73EF6588DCBB67BE7CB3E59918E7A58D90A83E3D8EBB6ECA291 ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys

21:34:17.0664 0x0864  Sftredir - ok

21:34:17.0680 0x0864  [ F369D6B89AA610174A4E90C8513B7C7A, 2AEFA10F57C0ED0466611957DED5425363608E88414DD7DCF74E182117B12F5A ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys

21:34:17.0680 0x0864  Sftvol - ok

21:34:17.0696 0x0864  [ 19D34534176E62F35DDB7DC7B7FF2A87, DBBB9155B62482E4782E5302193586514880734BD3617FDCB51798EB404758D6 ] sftvsa          C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

21:34:17.0711 0x0864  sftvsa - ok

21:34:17.0758 0x0864  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll

21:34:17.0789 0x0864  SharedAccess - ok

21:34:17.0836 0x0864  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

21:34:17.0867 0x0864  ShellHWDetection - ok

21:34:17.0883 0x0864  [ F6431A68115477694CC8E772051119C4, 590E2EC24352EFB3D911C7FE67FD8395D60160CFFC15E5208E832B7AA122FA84 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

21:34:17.0898 0x0864  sisagp - ok

21:34:17.0930 0x0864  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

21:34:17.0961 0x0864  SiSRaid2 - ok

21:34:17.0992 0x0864  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

21:34:17.0992 0x0864  SiSRaid4 - ok

21:34:18.0023 0x0864  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

21:34:18.0054 0x0864  Smb - ok

21:34:18.0086 0x0864  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

21:34:18.0101 0x0864  SNMPTRAP - ok

21:34:18.0148 0x0864  [ 13942BF96D0802300EE0054C09425B49, B24DD750060143FA6AD5CB31EF272C3639B4BB617762FD30713EEE3443A02FDF ] SpeedupService  C:\Program Files\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe

21:34:18.0164 0x0864  SpeedupService - ok

21:34:18.0179 0x0864  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys

21:34:18.0195 0x0864  spldr - ok

21:34:18.0226 0x0864  [ E3A9C44EB94D3821AD752CD7C7A8AE8F, ABB91C3E7788439E5514894002E08BE86527D518770E78858990B7D49B5BE4DA ] Spooler         C:\Windows\System32\spoolsv.exe

21:34:18.0257 0x0864  Spooler - ok

21:34:18.0413 0x0864  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe

21:34:18.0522 0x0864  sppsvc - ok

21:34:18.0569 0x0864  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll

21:34:18.0585 0x0864  sppuinotify - ok

21:34:18.0632 0x0864  [ 0D702F909C178474660AEA2DD385F2EB, F959043B0DE97364ADE847CBD667E40740AD1F20E9F9AA79E0E00F7140389350 ] srv             C:\Windows\system32\DRIVERS\srv.sys

21:34:18.0663 0x0864  srv - ok

21:34:18.0694 0x0864  [ E820CCE246A33A933FD7268ECA431528, 0E50F5C3A3BF98BBE8A0B492E590640B9E60563780F4067B867D3D4CFDA5F2CD ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

21:34:18.0710 0x0864  srv2 - ok

21:34:18.0756 0x0864  [ 5D423D81728D54566A4806C819BC2652, 036AE9391B81AEDC2B32261A100DC7EC4B2E6C173C86A7E33D57C64C2B897E82 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

21:34:18.0772 0x0864  srvnet - ok

21:34:18.0803 0x0864  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

21:34:18.0834 0x0864  SSDPSRV - ok

21:34:18.0850 0x0864  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

21:34:18.0881 0x0864  SstpSvc - ok

21:34:18.0959 0x0864  [ EE92DAB3EF6ADF13992CD5732B8B56C0, D057F2843FC002AF401ED48E2BC235E2449A5EC1F9790F4F579EE3BBA07C8E0F ] Stereo Service  C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

21:34:18.0990 0x0864  Stereo Service - ok

21:34:19.0006 0x0864  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

21:34:19.0022 0x0864  stexstor - ok

21:34:19.0084 0x0864  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll

21:34:19.0115 0x0864  StiSvc - ok

21:34:19.0146 0x0864  [ 09CC36B58A2F308DC7BBA5E32C2D610A, 22CC4FD411F2D4CC08754FAD6E7C51C12347922AF74BFE3586B3DC786EF70219 ] swenum          C:\Windows\system32\drivers\swenum.sys

21:34:19.0162 0x0864  swenum - ok

21:34:19.0193 0x0864  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll

21:34:19.0224 0x0864  swprv - ok

21:34:19.0302 0x0864  [ 63B01C516B6F79678CBBD1F192A7C689, 6A9FEC7E8667D7DB255F52E1D8326B23CC31D2F72DC9F01C2F4B9C5AE8EF5246 ] SysMain         C:\Windows\system32\sysmain.dll

21:34:19.0349 0x0864  SysMain - ok

21:34:19.0380 0x0864  [ A5243B41F0FAAC2DA7410A6D2CF6FED8, 0FB09722787A5ADCCAE83ECDF2215630341F55E4911AABECE99CD8861E044422 ] TabletInputService C:\Windows\System32\TabSvc.dll

21:34:19.0380 0x0864  TabletInputService - ok

21:34:19.0412 0x0864  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll

21:34:19.0458 0x0864  TapiSrv - ok

21:34:19.0536 0x0864  [ 6A9E1018611E1EACB61D7B51B228D24F, 6B8D0B3EBB26808644A7AB0391DAA5D196602DEB50FB179EE191C8D1C761FEA6 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

21:34:19.0583 0x0864  Tcpip - ok

21:34:19.0630 0x0864  [ 6A9E1018611E1EACB61D7B51B228D24F, 6B8D0B3EBB26808644A7AB0391DAA5D196602DEB50FB179EE191C8D1C761FEA6 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

21:34:19.0677 0x0864  TCPIP6 - ok

21:34:19.0708 0x0864  [ A4BF8BE9D1F7D563C7868AC7B2561545, E3C2FFE53373E5255DC388E0C81CCE965E432EFAF52C85B5B3B3918815114073 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

21:34:19.0724 0x0864  tcpipreg - ok

21:34:19.0739 0x0864  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

21:34:19.0755 0x0864  TDPIPE - ok

21:34:19.0786 0x0864  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

21:34:19.0786 0x0864  TDTCP - ok

21:34:19.0833 0x0864  [ 8F143F86FDD8CF4F7BD25973C5983F9D, D3ECB70C5ACAFB6C07CB2104FBEA3FA965299F1BE84D33334DB0FAAA88F738A5 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

21:34:19.0848 0x0864  tdx - ok

21:34:19.0880 0x0864  [ A195C59AB3A95D0ABB2A830DEE18BA5A, D73435BE1102D9971F6395CBF5EDE476B212C2B4211F6779112D0AE148DFE299 ] TermDD          C:\Windows\system32\drivers\termdd.sys

21:34:19.0895 0x0864  TermDD - ok

21:34:19.0942 0x0864  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll

21:34:19.0973 0x0864  TermService - ok

21:34:19.0989 0x0864  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll

21:34:20.0020 0x0864  Themes - ok

21:34:20.0051 0x0864  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll

21:34:20.0082 0x0864  THREADORDER - ok

21:34:20.0129 0x0864  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll

21:34:20.0160 0x0864  TrkWks - ok

21:34:20.0207 0x0864  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

21:34:20.0238 0x0864  TrustedInstaller - ok

21:34:20.0270 0x0864  [ 6841C85446F906E4584D43A70484E318, 5B1FD34DC82EC534F4527A4019F3BC910147CA3A54E3F36984C0712307329089 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

21:34:20.0285 0x0864  tssecsrv - ok

21:34:20.0316 0x0864  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

21:34:20.0348 0x0864  TsUsbFlt - ok

21:34:20.0394 0x0864  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

21:34:20.0426 0x0864  tunnel - ok

21:34:20.0457 0x0864  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

21:34:20.0457 0x0864  uagp35 - ok

21:34:20.0504 0x0864  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

21:34:20.0535 0x0864  udfs - ok

21:34:20.0582 0x0864  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe

21:34:20.0582 0x0864  UI0Detect - ok

21:34:20.0660 0x0864  [ B67EC49FF15FE5E894B0A8A1A9472200, 42489EB37953800223B76D29683DC8723696880BE8DE646C441DFD147830CA0A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

21:34:20.0675 0x0864  uliagpkx - ok

21:34:20.0706 0x0864  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

21:34:20.0706 0x0864  umbus - ok

21:34:20.0738 0x0864  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

21:34:20.0753 0x0864  UmPass - ok

21:34:20.0894 0x0864  [ AF905F4966CFC8B973623AB150CD4B2B, E1BF0481A584C10AE4A927A01A1E6B76036C18FAF7AB38D9B78641F5808D9888 ] UNS             C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

21:34:20.0956 0x0864  UNS - ok

21:34:21.0003 0x0864  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll

21:34:21.0034 0x0864  upnphost - ok

21:34:21.0050 0x0864  [ 6E421CCC57059B0186C6259CA3B6DFC9, E348BF23CCD6C14FD10C1689BBDC77E125245331F97BFE60D4C8FD9A8711CB59 ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys

21:34:21.0065 0x0864  USBAAPL - ok

21:34:21.0081 0x0864  [ 87632869F4350B7CE711B356B1936B2B, 9E67211ACFC637F8C6B6AD5BE9CC61B69FEDF73408A1B678818200CFB0A0E585 ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys

21:34:21.0096 0x0864  usbccgp - ok

21:34:21.0143 0x0864  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys

21:34:21.0174 0x0864  usbcir - ok

21:34:21.0206 0x0864  [ EF8127E7E612694F4E8FFDA37D9D00E4, 15E05CD77B1411728A314267FCDC1A1B32E5D003DB9E6D216025149AF2006D4E ] usbehci         C:\Windows\system32\drivers\usbehci.sys

21:34:21.0221 0x0864  usbehci - ok

21:34:21.0237 0x0864  [ 711E9F7CA6F9A2351F4F97F31004E589, DD9CFE415A95A1BA96A0108B7DD05E07861DFB28E6A08E024C32DAF208B5FB11 ] usbhub          C:\Windows\system32\drivers\usbhub.sys

21:34:21.0252 0x0864  usbhub - ok

21:34:21.0268 0x0864  [ 831F708F06CD5BF3933FBDFB388C606D, 9EE74338CF3FFD54B71AECBFD2CCC78512C92860A43663CE9A253150C332D881 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

21:34:21.0284 0x0864  usbohci - ok

21:34:21.0315 0x0864  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

21:34:21.0330 0x0864  usbprint - ok

21:34:21.0362 0x0864  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\Windows\system32\drivers\usbscan.sys

21:34:21.0377 0x0864  usbscan - ok

21:34:21.0408 0x0864  [ 144DA53294922A84FFAA3D90B1453745, A8DC6B534E4526E2226CF6C9D53A4B6B251D2F23728E41737063D24024C5266F ] USBSTOR         C:\Windows\system32\drivers\USBSTOR.SYS

21:34:21.0424 0x0864  USBSTOR - ok

21:34:21.0440 0x0864  [ 89BDF895EB76E3EC1C02EEF5AA18928D, 9CF4C787E75D59A713BCA2C1191A2492110B79F298AABC4608745125529D4DE3 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

21:34:21.0455 0x0864  usbuhci - ok

21:34:21.0471 0x0864  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll

21:34:21.0502 0x0864  UxSms - ok

21:34:21.0518 0x0864  [ AC201FCBC246F2B98BFF6EF34F9B202F, 40B210BBFF7EF6F09C23B85F0C27D7E71981551C78B0530E92CA9FF1AC66A17D ] VaultSvc        C:\Windows\system32\lsass.exe

21:34:21.0533 0x0864  VaultSvc - ok

21:34:21.0580 0x0864  [ 85DA3F86D58E4A3F041C41D951C53EDA, 522D83C3B40BCA10DBA865747D3BF45194671B6312DB86A24E954A0463B8D2EA ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

21:34:21.0596 0x0864  vdrvroot - ok

21:34:21.0658 0x0864  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe

21:34:21.0689 0x0864  vds - ok

21:34:21.0720 0x0864  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

21:34:21.0752 0x0864  vga - ok

21:34:21.0767 0x0864  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys

21:34:21.0798 0x0864  VgaSave - ok

21:34:21.0814 0x0864  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

21:34:21.0830 0x0864  vhdmp - ok

21:34:21.0861 0x0864  [ B085CD21FE6E9C51E6AC1C2B7DF7EC2F, B4BA53E976E216BA16ED357692E5BAA5D9820F4A36E433DDD48D661213FFE4DD ] viaagp          C:\Windows\system32\drivers\viaagp.sys

21:34:21.0876 0x0864  viaagp - ok

21:34:21.0892 0x0864  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys

21:34:21.0908 0x0864  ViaC7 - ok

21:34:21.0939 0x0864  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys

21:34:21.0939 0x0864  viaide - ok

21:34:21.0970 0x0864  [ DC114DF0E9C458A8A65C1DC616689CBB, A0A2D352DB4CC72D317F54A6275D315E2D2C6462E8BB9EBD5D813903B22E9745 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

21:34:21.0986 0x0864  volmgr - ok

21:34:22.0017 0x0864  [ 21D83DD717E8D681364A5E44A5459717, 2D938D07132A2D37FB164CA322A93951729D6AF65BA8BAF8493D02B203F13243 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

21:34:22.0032 0x0864  volmgrx - ok

21:34:22.0064 0x0864  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

21:34:22.0079 0x0864  volsnap - ok

21:34:22.0110 0x0864  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

21:34:22.0126 0x0864  vsmraid - ok

21:34:22.0173 0x0864  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe

21:34:22.0235 0x0864  VSS - ok

21:34:22.0251 0x0864  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

21:34:22.0251 0x0864  vwifibus - ok

21:34:22.0282 0x0864  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

21:34:22.0298 0x0864  vwififlt - ok

21:34:22.0298 0x0864  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

21:34:22.0313 0x0864  vwifimp - ok

21:34:22.0344 0x0864  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll

21:34:22.0376 0x0864  W32Time - ok

21:34:22.0407 0x0864  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

21:34:22.0438 0x0864  WacomPen - ok

21:34:22.0469 0x0864  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

21:34:22.0500 0x0864  WANARP - ok

21:34:22.0500 0x0864  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

21:34:22.0532 0x0864  Wanarpv6 - ok

21:34:22.0594 0x0864  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe

21:34:22.0672 0x0864  wbengine - ok

21:34:22.0703 0x0864  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

21:34:22.0734 0x0864  WbioSrvc - ok

21:34:22.0766 0x0864  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll

21:34:22.0781 0x0864  wcncsvc - ok

21:34:22.0812 0x0864  [ 2AF284D0737FE5BCB3581DA8C536CDF7, 44C5B99F42E7FBEBDDF38FF50D862518C2AE88C66EF5CD230980AEBC8C734AC7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

21:34:22.0828 0x0864  WcsPlugInService - ok

21:34:22.0859 0x0864  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

21:34:22.0875 0x0864  Wd - ok

21:34:22.0906 0x0864  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

21:34:22.0937 0x0864  Wdf01000 - ok

21:34:22.0968 0x0864  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll

21:34:23.0015 0x0864  WdiServiceHost - ok

21:34:23.0015 0x0864  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll

21:34:23.0031 0x0864  WdiSystemHost - ok

21:34:23.0078 0x0864  [ DC54D7A40B6E18E5C7F592F836D163FF, 436AF3B94EAE6CBD2516A63235AE1D6EC4F1FCAA0F974A9672BB5AB2A846BB2C ] WebClient       C:\Windows\System32\webclnt.dll

21:34:23.0093 0x0864  WebClient - ok

21:34:23.0124 0x0864  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll

21:34:23.0171 0x0864  Wecsvc - ok

21:34:23.0187 0x0864  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

21:34:23.0218 0x0864  wercplsupport - ok

21:34:23.0249 0x0864  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll

21:34:23.0265 0x0864  WerSvc - ok

21:34:23.0296 0x0864  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

21:34:23.0312 0x0864  WfpLwf - ok

21:34:23.0327 0x0864  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

21:34:23.0343 0x0864  WIMMount - ok

21:34:23.0421 0x0864  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

21:34:23.0452 0x0864  WinDefend - ok

21:34:23.0468 0x0864  WinHttpAutoProxySvc - ok

21:34:23.0514 0x0864  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

21:34:23.0546 0x0864  Winmgmt - ok

21:34:23.0624 0x0864  [ 8949A93520F7008C3B7AD320A0EEA267, F77C6BF73B300347FEB3D02C7A1F98807546D95E10E499D385B7F00D1366CC59 ] WinRM           C:\Windows\system32\WsmSvc.dll

21:34:23.0686 0x0864  WinRM - ok

21:34:23.0748 0x0864  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys

21:34:23.0780 0x0864  WinUsb - ok

21:34:23.0842 0x0864  [ 4C69A8E2E159C1C59BC4B688E9DD7F8C, 235C7A41425846EFE4966490EB7F72AA768B3FE1665843BF58520DDBD6822A74 ] WisLMSvc        C:\Program Files\Launch Manager\WisLMSvc.exe

21:34:23.0858 0x0864  WisLMSvc - ok

21:34:23.0936 0x0864  [ BB5D5249C49DB0D9B08AFB220019E1CF, 5DD01888BC303891FC5690D3F4EA795F185B934D985FC0F48DC30CC0718E5123 ] Wlansvc         C:\Windows\System32\wlansvc.dll

21:34:23.0967 0x0864  Wlansvc - ok

21:34:24.0014 0x0864  [ 5FBD0275F0517F8A1E04FDDE749B3AF5, DDABA6CA9F38E515EF29A504F03D5AF7FB262F0506DC92B5B3D938986F8CBA23 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

21:34:24.0029 0x0864  WmiAcpi - ok

21:34:24.0060 0x0864  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

21:34:24.0076 0x0864  wmiApSrv - ok

21:34:24.0170 0x0864  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

21:34:24.0216 0x0864  WMPNetworkSvc - ok

21:34:24.0232 0x0864  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

21:34:24.0248 0x0864  WPCSvc - ok

21:34:24.0279 0x0864  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

21:34:24.0294 0x0864  WPDBusEnum - ok

21:34:24.0310 0x0864  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

21:34:24.0341 0x0864  ws2ifsl - ok

21:34:24.0357 0x0864  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll

21:34:24.0372 0x0864  wscsvc - ok

21:34:24.0372 0x0864  WSearch - ok

21:34:24.0466 0x0864  [ 8E6E93DFE1C8C1732E4B2C843CE4ABA5, 354C2BC424D92AE09EADBCAD92299C392C57AFB543EAC1B0F7675A907E9BCEE5 ] wuauserv        C:\Windows\system32\wuaueng.dll

21:34:24.0544 0x0864  wuauserv - ok

21:34:24.0575 0x0864  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

21:34:24.0591 0x0864  WudfPf - ok

21:34:24.0653 0x0864  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys

21:34:24.0684 0x0864  WUDFRd - ok

21:34:24.0716 0x0864  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

21:34:24.0731 0x0864  wudfsvc - ok

21:34:24.0762 0x0864  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll

21:34:24.0794 0x0864  WwanSvc - ok

21:34:24.0825 0x0864  [ 5A0C788C5BC5F2C993CB60940ADCF95E, FEEC158466040A6528E7FC8D33706B50D2F03479E0B62DF8F06B69A1A850A9FB ] x10nets         C:\Program Files\Common Files\X10\Common\X10nets.exe

21:34:24.0840 0x0864  x10nets - detected UnsignedFile.Multi.Generic ( 1 )

21:34:27.0087 0x0864  Detect skipped due to KSN trusted

21:34:27.0087 0x0864  x10nets - ok

21:34:27.0118 0x0864  [ 378DC1B0B1F62A7488EE8D31A3C6E949, 8334CBC479797DC82551D38DFF1AEF5E41E4C6427D410C633DECC95C4FB84C0E ] XUIF            C:\Windows\System32\Drivers\x10ufx2.sys

21:34:27.0134 0x0864  XUIF - ok

21:34:27.0165 0x0864  ================ Scan global ===============================

21:34:27.0196 0x0864  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll

21:34:27.0227 0x0864  [ 592BAD5F644146B4268DB31FB4EFE39B, 9AB45F56A10007D08776EA474382254BFFD90CDDE51FE0A3E1D9E33D9A356DA1 ] C:\Windows\system32\winsrv.dll

21:34:27.0243 0x0864  [ 592BAD5F644146B4268DB31FB4EFE39B, 9AB45F56A10007D08776EA474382254BFFD90CDDE51FE0A3E1D9E33D9A356DA1 ] C:\Windows\system32\winsrv.dll

21:34:27.0274 0x0864  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll

21:34:27.0305 0x0864  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe

21:34:27.0321 0x0864  [ Global ] - ok

21:34:27.0321 0x0864  ================ Scan MBR ==================================

21:34:27.0321 0x0864  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

21:34:27.0633 0x0864  \Device\Harddisk0\DR0 - ok

21:34:27.0633 0x0864  ================ Scan VBR ==================================

21:34:27.0633 0x0864  [ B0D5A8FBF3D19023AA16814C187EBAFB ] \Device\Harddisk0\DR0\Partition1

21:34:27.0633 0x0864  \Device\Harddisk0\DR0\Partition1 - ok

21:34:27.0648 0x0864  [ 12873E03DEBB2696E095BB5EE5EBAA3E ] \Device\Harddisk0\DR0\Partition2

21:34:27.0648 0x0864  \Device\Harddisk0\DR0\Partition2 - ok

21:34:27.0680 0x0864  [ 4A4BE542ABF134653DBCEEA06872AC67 ] \Device\Harddisk0\DR0\Partition3

21:34:27.0680 0x0864  \Device\Harddisk0\DR0\Partition3 - ok

21:34:27.0711 0x0864  [ 802B717DA33EC3A7FDDCB7966983454B ] \Device\Harddisk0\DR0\Partition4

21:34:27.0711 0x0864  \Device\Harddisk0\DR0\Partition4 - ok

21:34:27.0726 0x0864  [ D52EE131BDEA85673372B7EBB3C8E69C ] \Device\Harddisk0\DR0\Partition5

21:34:27.0726 0x0864  \Device\Harddisk0\DR0\Partition5 - ok

21:34:27.0726 0x0864  ================ Scan generic autorun ======================

21:34:27.0773 0x0864  [ 157B5DF2CBCE17A0CEECB0FF4297700E, D212EC0108D92FF3A84CF6DCA81F11DF028F1C5217FCA4CD47EE1A170FCAC10D ] C:\Windows\system32\igfxtray.exe

21:34:27.0789 0x0864  IgfxTray - ok

21:34:27.0804 0x0864  [ FEC63BCD1A1DDE7A990223D0F12655D7, FFBE21587263DA615D06BBFDCC5A2AACA99528266BAB15C9AE37B57EC5B4D113 ] C:\Windows\system32\igfxpers.exe

21:34:27.0820 0x0864  Persistence - ok

21:34:28.0116 0x0864  [ 1FF6220D9CBFAC929E62ADA893C9F357, 9117852465969A9B12D364CCF51A8026BC3D8BA5D2B82212CAF7157E2D577AB7 ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

21:34:28.0460 0x0864  RtHDVCpl - ok

21:34:28.0569 0x0864  [ C8215BBCA8F3E0E2A1B18C9BB51C042B, EEF2C61178DE052EA4AD7CF0106439CA17B212BAF53A2D3FA4C0169A26A15E3B ] C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe

21:34:28.0616 0x0864  RtHDVBg - ok

21:34:28.0662 0x0864  [ 57B4D34232852BFE4453BE571DF90D21, 3D329499D7BCACAE5F6377F988B90714F5A8301784CDB22D5B54A2266AC50D79 ] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

21:34:28.0662 0x0864  CLMLServer - ok

21:34:28.0709 0x0864  [ 8D2851FC8807D456319C721AE3809824, 3AB40A5538C04CC536523E1AB890BBD4BA648134BB594B852EB8434DCE80632C ] C:\Program Files\Launch Manager\HotkeyApp.exe

21:34:28.0756 0x0864  HotkeyApp - detected UnsignedFile.Multi.Generic ( 1 )

21:34:30.0940 0x0864  Detect skipped due to KSN trusted

21:34:30.0940 0x0864  HotkeyApp - ok

21:34:30.0971 0x0864  [ DFA1067EA4157BCCCFD48F052066A076, 5E5B60C20CFF1F3F9D45588B0E0AEB59C3F4C11089CCB52AA92890773BAA081F ] C:\Program Files\Launch Manager\OSD.exe

21:34:30.0987 0x0864  LMgrVolOSD - ok

21:34:31.0034 0x0864  [ 51C8885B6A00904C0252704C9FB0F43A, BF2F58E6697DB10F3D6FB3859FADC2CE1D3CDD318E487E02FDC2BE171AF6CA29 ] C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

21:34:31.0034 0x0864  NUSB3MON - ok

21:34:31.0065 0x0864  [ 94D2739E7F421BC0EE0B32387B78B619, D7835E81FD08EBBFBDF44712D48CBF4311A89FF505ADD4DF4ECC46A2ECCD6F1B ] C:\Program Files\Launch Manager\Wbutton.exe

21:34:31.0080 0x0864  Wbutton - ok

21:34:31.0221 0x0864  [ 638644168D9B5B5093AD84C9C162B550, BDBAB13BA6D369B7F87F721518F7EBD4B14D85B80BCC1E37FA929BB77200401B ] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe

21:34:31.0299 0x0864  NvBackend - ok

21:34:31.0361 0x0864  [ 603668084332DDB58D8C5AACE30B04FC, B6FA6BBE18D433F41F96640726444B7CB9D669BAE87A545E1408391B9469EDB9 ] C:\Program Files\iTunes\iTunesHelper.exe

21:34:31.0377 0x0864  iTunesHelper - ok

21:34:31.0439 0x0864  [ 2199723879C9F75A709680E2935C052F, DDD5B5CC86463284D9137372CB8541D1258AC020EA811F1AD3735809F314B086 ] D:\PDF Creator\PDF24\pdf24.exe

21:34:31.0455 0x0864  PDFPrint - ok

21:34:31.0548 0x0864  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

21:34:31.0595 0x0864  Sidebar - ok

21:34:31.0642 0x0864  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

21:34:31.0673 0x0864  mctadmin - ok

21:34:31.0704 0x0864  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

21:34:31.0751 0x0864  Sidebar - ok

21:34:31.0751 0x0864  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

21:34:31.0767 0x0864  mctadmin - ok

21:34:31.0798 0x0864  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\sidebar.exe

21:34:31.0845 0x0864  Sidebar - ok

21:34:31.0845 0x0864  Waiting for KSN requests completion. In queue: 156

21:34:32.0859 0x0864  Waiting for KSN requests completion. In queue: 156

21:34:33.0873 0x0864  Waiting for KSN requests completion. In queue: 156

21:34:34.0918 0x0864  Win FW state via NFP2: enabled ( trusted )

21:34:37.0149 0x0864  ============================================================

21:34:37.0149 0x0864  Scan finished

21:34:37.0149 0x0864  ============================================================

21:34:37.0164 0x1094  Detected object count: 0

21:34:37.0164 0x1094  Actual detected object count: 0