API tools faq
paste
Advertisement
Guest User

OTL.log

a guest
Feb 27th, 2019
148
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 98.39 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 13.02.2019 11:56:21 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Schwarz\Downloads
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.17134.0)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 7,95 Gb Total Physical Memory | 4,38 Gb Available Physical Memory | 55,13% Memory free
  8. 15,95 Gb Paging File | 11,87 Gb Available in Paging File | 74,42% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 697,71 Gb Total Space | 597,90 Gb Free Space | 85,70% Space Free | Partition Type: NTFS
  13. Drive G: | 14,44 Gb Total Space | 14,44 Gb Free Space | 99,98% Space Free | Partition Type: FAT32
  14.  
  15. Computer Name: JOHANNES-LAPTOP | User Name: Schwarz | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - File not found --
  22. PRC - [2019.02.13 11:50:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Schwarz\Downloads\OTL.exe
  23. PRC - [2018.12.19 10:44:22 | 000,292,648 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
  24. PRC - [2018.10.21 12:38:44 | 000,662,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe
  25. PRC - [2018.08.13 23:27:08 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  26. PRC - [2018.05.15 20:20:03 | 000,194,632 | ---- | M] (APN LLC.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
  27. PRC - [2017.10.12 11:23:36 | 000,428,000 | ---- | M] (Haufe-Lexware GmbH & Co. KG) -- C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
  28. PRC - [2017.10.03 20:02:16 | 000,061,408 | ---- | M] (Haufe-Lexware GmbH & Co. KG) -- C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
  29. PRC - [2016.07.22 08:21:08 | 000,754,784 | ---- | M] (DEVGURU Co., LTD.) -- C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
  30.  
  31.  
  32. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  33.  
  34. MOD - [2017.10.12 11:32:12 | 000,174,560 | ---- | M] () -- C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll
  35. MOD - [2017.10.12 11:32:10 | 000,041,440 | ---- | M] () -- C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll
  36. MOD - [2015.12.14 21:36:29 | 000,012,800 | ---- | M] () -- C:\Users\Schwarz\AppData\Local\Kit Touch\{5B3E1CCE-DF53-3C3B-0411-AA97006722D8}\vcxodo.dll
  37.  
  38.  
  39. [color=#E56717]========== Services (SafeList) ==========[/color]
  40.  
  41. SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService)
  42. SRV:[b]64bit:[/b] - [2019.01.01 14:43:48 | 001,364,992 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\bcastdvruserservice.dll -- (BcastDVRUserService)
  43. SRV:[b]64bit:[/b] - [2019.01.01 07:46:47 | 000,153,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  44. SRV:[b]64bit:[/b] - [2019.01.01 07:42:29 | 002,247,680 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  45. SRV:[b]64bit:[/b] - [2018.12.14 07:55:44 | 003,396,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  46. SRV:[b]64bit:[/b] - [2018.12.08 09:04:40 | 000,885,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  47. SRV:[b]64bit:[/b] - [2018.12.08 08:36:37 | 003,090,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  48. SRV:[b]64bit:[/b] - [2018.12.08 08:36:32 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc)
  49. SRV:[b]64bit:[/b] - [2018.12.08 08:36:23 | 000,153,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
  50. SRV:[b]64bit:[/b] - [2018.12.08 08:34:36 | 000,684,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  51. SRV:[b]64bit:[/b] - [2018.12.08 08:33:16 | 000,949,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  52. SRV:[b]64bit:[/b] - [2018.12.08 08:33:10 | 001,457,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  53. SRV:[b]64bit:[/b] - [2018.11.09 03:20:34 | 000,092,160 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  54. SRV:[b]64bit:[/b] - [2018.11.09 03:20:24 | 000,399,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\BthAvctpSvc.dll -- (BthAvctpSvc)
  55. SRV:[b]64bit:[/b] - [2018.11.09 03:18:38 | 001,487,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\InstallService.dll -- (InstallService)
  56. SRV:[b]64bit:[/b] - [2018.11.09 03:18:30 | 000,514,048 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\BTAGService.dll -- (BTAGService)
  57. SRV:[b]64bit:[/b] - [2018.11.09 03:16:42 | 001,364,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc)
  58. SRV:[b]64bit:[/b] - [2018.11.09 03:16:04 | 000,308,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  59. SRV:[b]64bit:[/b] - [2018.11.01 07:59:14 | 000,241,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  60. SRV:[b]64bit:[/b] - [2018.11.01 07:57:53 | 000,835,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  61. SRV:[b]64bit:[/b] - [2018.11.01 07:57:04 | 000,281,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  62. SRV:[b]64bit:[/b] - [2018.11.01 07:56:33 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  63. SRV:[b]64bit:[/b] - [2018.11.01 07:56:19 | 001,395,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker)
  64. SRV:[b]64bit:[/b] - [2018.11.01 07:53:51 | 001,373,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  65. SRV:[b]64bit:[/b] - [2018.10.21 08:16:03 | 000,847,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  66. SRV:[b]64bit:[/b] - [2018.10.21 08:14:53 | 000,632,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  67. SRV:[b]64bit:[/b] - [2018.10.21 08:14:29 | 000,453,632 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
  68. SRV:[b]64bit:[/b] - [2018.09.08 04:26:46 | 000,784,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  69. SRV:[b]64bit:[/b] - [2018.09.08 04:24:26 | 000,463,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  70. SRV:[b]64bit:[/b] - [2018.08.28 07:45:57 | 000,713,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc)
  71. SRV:[b]64bit:[/b] - [2018.08.09 05:25:14 | 000,392,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WaaSMedicSvc.dll -- (WaaSMedicSvc)
  72. SRV:[b]64bit:[/b] - [2018.08.03 04:41:01 | 000,061,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
  73. SRV:[b]64bit:[/b] - [2018.08.03 04:15:02 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  74. SRV:[b]64bit:[/b] - [2018.07.14 05:23:08 | 000,760,888 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService)
  75. SRV:[b]64bit:[/b] - [2018.07.14 04:54:10 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall)
  76. SRV:[b]64bit:[/b] - [2018.07.14 04:53:02 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc)
  77. SRV:[b]64bit:[/b] - [2018.07.06 07:58:32 | 000,091,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  78. SRV:[b]64bit:[/b] - [2018.06.15 05:41:49 | 000,235,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  79. SRV:[b]64bit:[/b] - [2018.06.15 05:41:36 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc)
  80. SRV:[b]64bit:[/b] - [2018.06.15 05:40:59 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  81. SRV:[b]64bit:[/b] - [2018.06.08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum)
  82. SRV:[b]64bit:[/b] - [2018.06.08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  83. SRV:[b]64bit:[/b] - [2018.06.08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
  84. SRV:[b]64bit:[/b] - [2018.06.08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
  85. SRV:[b]64bit:[/b] - [2018.06.08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  86. SRV:[b]64bit:[/b] - [2018.06.01 00:14:47 | 001,456,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WpcDesktopMonSvc.dll -- (WpcMonSvc)
  87. SRV:[b]64bit:[/b] - [2018.04.12 18:30:09 | 000,083,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\inetsrv\w3logsvc.dll -- (w3logsvc)
  88. SRV:[b]64bit:[/b] - [2018.04.12 18:30:05 | 000,026,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mqsvc.exe -- (MSMQ)
  89. SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  90. SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,427,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  91. SRV:[b]64bit:[/b] - [2018.04.12 00:35:21 | 000,400,896 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Windows.Devices.Picker.dll -- (DevicePickerUserSvc)
  92. SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,824,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication)
  93. SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,590,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  94. SRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,121,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  95. SRV:[b]64bit:[/b] - [2018.04.12 00:34:41 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  96. SRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  97. SRV:[b]64bit:[/b] - [2018.04.12 00:34:39 | 000,219,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc)
  98. SRV:[b]64bit:[/b] - [2018.04.12 00:34:38 | 000,671,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  99. SRV:[b]64bit:[/b] - [2018.04.12 00:34:37 | 000,303,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  100. SRV:[b]64bit:[/b] - [2018.04.12 00:34:37 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  101. SRV:[b]64bit:[/b] - [2018.04.12 00:34:34 | 001,273,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  102. SRV:[b]64bit:[/b] - [2018.04.12 00:34:33 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
  103. SRV:[b]64bit:[/b] - [2018.04.12 00:34:25 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  104. SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 001,027,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  105. SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 000,081,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  106. SRV:[b]64bit:[/b] - [2018.04.12 00:34:24 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  107. SRV:[b]64bit:[/b] - [2018.04.12 00:34:23 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  108. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  109. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,335,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  110. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,089,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  111. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_a0ff9bf)
  112. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_a0ff9bf)
  113. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_a0ff9bf)
  114. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_a0ff9bf)
  115. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_a0ff9bf)
  116. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_a0ff9bf)
  117. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_a0ff9bf)
  118. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_a0ff9bf)
  119. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicePickerUserSvc_a0ff9bf)
  120. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_a0ff9bf)
  121. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BluetoothUserService_a0ff9bf)
  122. SRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BcastDVRUserService_a0ff9bf)
  123. SRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,750,080 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc)
  124. SRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,195,584 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
  125. SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,712,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  126. SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  127. SRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  128. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 001,495,040 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  129. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 001,220,096 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  130. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,582,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  131. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,345,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  132. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,280,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  133. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  134. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,176,128 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
  135. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,096,768 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
  136. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc)
  137. SRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,044,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  138. SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 001,248,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc)
  139. SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,376,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  140. SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,048,640 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  141. SRV:[b]64bit:[/b] - [2018.04.12 00:34:10 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  142. SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 001,308,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  143. SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  144. SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc)
  145. SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,059,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xbgmsvc.exe -- (xbgm)
  146. SRV:[b]64bit:[/b] - [2018.04.12 00:34:08 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc)
  147. SRV:[b]64bit:[/b] - [2018.04.12 00:34:07 | 001,115,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  148. SRV:[b]64bit:[/b] - [2018.04.12 00:34:06 | 001,033,584 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  149. SRV:[b]64bit:[/b] - [2018.04.12 00:34:06 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  150. SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 001,148,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  151. SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,411,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vac.dll -- (VacSvc)
  152. SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,199,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LanguageOverlayServer.dll -- (LxpSvc)
  153. SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,163,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SgrmBroker.exe -- (SgrmBroker)
  154. SRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  155. SRV:[b]64bit:[/b] - [2018.04.12 00:34:02 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll -- (BluetoothUserService)
  156. SRV:[b]64bit:[/b] - [2018.04.12 00:34:02 | 000,063,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc)
  157. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 002,197,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  158. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
  159. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
  160. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  161. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  162. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  163. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  164. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  165. SRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  166. SRV:[b]64bit:[/b] - [2018.04.12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  167. SRV:[b]64bit:[/b] - [2018.04.10 22:05:00 | 000,324,608 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  168. SRV:[b]64bit:[/b] - [2018.03.10 19:20:00 | 000,495,616 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe -- (ssh-agent)
  169. SRV:[b]64bit:[/b] - [2016.10.03 23:40:22 | 003,037,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc)
  170. SRV:[b]64bit:[/b] - [2015.12.18 20:01:42 | 000,255,472 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  171. SRV:[b]64bit:[/b] - [2010.09.09 17:26:34 | 000,162,824 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\GFNEXSrv.exe -- (GFNEXSrv)
  172. SRV - [2019.01.11 13:28:44 | 000,325,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\rempl\sedsvc.exe -- (sedsvc)
  173. SRV - [2018.12.12 14:52:15 | 000,328,648 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360\Engine\22.16.3.21\NortonSecurity.exe -- (NortonSecurity)
  174. SRV - [2018.12.12 14:43:16 | 000,915,712 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360\Engine\22.16.3.21\nsWscSvc.exe -- (nsWscSvc)
  175. SRV - [2018.12.12 06:11:56 | 000,443,872 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe -- (GoogleChromeElevationService)
  176. SRV - [2018.12.08 08:45:30 | 000,567,256 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  177. SRV - [2018.11.09 02:26:19 | 001,110,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService)
  178. SRV - [2018.11.01 05:28:23 | 001,000,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker)
  179. SRV - [2018.10.23 18:30:54 | 003,917,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe -- (WdNisSvc)
  180. SRV - [2018.10.23 18:30:53 | 000,114,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe -- (WinDefend)
  181. SRV - [2018.09.25 23:22:34 | 000,713,816 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Windows\RtkBtManServ.exe -- (RtkBtManServ)
  182. SRV - [2018.08.13 23:27:08 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  183. SRV - [2018.06.15 05:46:52 | 000,593,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  184. SRV - [2018.06.08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
  185. SRV - [2018.06.08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc)
  186. SRV - [2018.05.15 20:20:03 | 000,194,632 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
  187. SRV - [2018.04.12 18:30:13 | 000,500,736 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
  188. SRV - [2018.04.12 18:30:13 | 000,500,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
  189. SRV - [2018.04.12 18:30:13 | 000,072,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\w3logsvc.dll -- (w3logsvc)
  190. SRV - [2018.04.12 18:30:13 | 000,057,344 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
  191. SRV - [2018.04.12 00:35:22 | 000,312,832 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc)
  192. SRV - [2018.04.12 00:34:57 | 000,138,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
  193. SRV - [2018.04.12 00:34:45 | 000,965,632 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
  194. SRV - [2018.04.12 00:34:45 | 000,072,192 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate)
  195. SRV - [2018.04.12 00:34:45 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  196. SRV - [2018.04.12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  197. SRV - [2017.10.03 20:02:16 | 000,061,408 | ---- | M] (Haufe-Lexware GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe -- (Lexware_Update_Service)
  198. SRV - [2017.05.04 21:38:58 | 000,278,616 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Programme\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService)
  199. SRV - [2016.12.25 10:24:19 | 000,270,936 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  200. SRV - [2016.07.22 08:21:08 | 000,754,784 | ---- | M] (DEVGURU Co., LTD.) [Auto | Running] -- C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe -- (ss_conn_service)
  201. SRV - [2016.02.29 15:43:02 | 000,211,136 | ---- | M] (Essentware) [Disabled | Stopped] -- C:\Programme\Essentware\Common\AccountService.exe -- (AccountService)
  202. SRV - [2014.07.19 04:16:46 | 005,132,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
  203. SRV - [2011.11.25 18:52:36 | 000,138,152 | ---- | M] (TOSHIBA Corporation) [Disabled | Stopped] -- C:\Programme\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
  204. SRV - [2011.07.11 17:16:06 | 000,057,216 | ---- | M] (TOSHIBA Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
  205. SRV - [2010.09.09 17:26:34 | 000,162,824 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysWOW64\GFNEXSrv.exe -- (GFNEXSrv)
  206.  
  207.  
  208. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  209.  
  210. DRV:[b]64bit:[/b] - [2019.01.01 08:14:46 | 000,076,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
  211. DRV:[b]64bit:[/b] - [2018.12.12 13:44:42 | 000,567,024 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\symnets.sys -- (SymNetS)
  212. DRV:[b]64bit:[/b] - [2018.12.12 13:44:27 | 001,969,328 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\SymEFASI64.sys -- (SymEFASI)
  213. DRV:[b]64bit:[/b] - [2018.12.12 13:44:27 | 000,025,744 | ---- | M] (Symantec Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\SymELAM.sys -- (SymELAM)
  214. DRV:[b]64bit:[/b] - [2018.12.12 13:44:14 | 001,011,056 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\wpCtrlDrv.sys -- (wpCtrlDrv_NGC)
  215. DRV:[b]64bit:[/b] - [2018.12.12 13:42:58 | 000,308,416 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\IRONx64.sys -- (SymIRON)
  216. DRV:[b]64bit:[/b] - [2018.12.12 13:42:12 | 000,189,152 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\ccsetx64.sys -- (ccSet_NGC)
  217. DRV:[b]64bit:[/b] - [2018.12.12 13:41:55 | 000,855,256 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\srtsp64.sys -- (SRTSP)
  218. DRV:[b]64bit:[/b] - [2018.12.12 13:41:55 | 000,049,880 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NGCx64\1610030.015\srtspx64.sys -- (SRTSPX)
  219. DRV:[b]64bit:[/b] - [2018.12.08 13:27:09 | 000,082,432 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  220. DRV:[b]64bit:[/b] - [2018.12.08 09:12:40 | 000,092,688 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bindflt.sys -- (bindflt)
  221. DRV:[b]64bit:[/b] - [2018.12.08 09:04:38 | 000,058,168 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
  222. DRV:[b]64bit:[/b] - [2018.12.08 08:38:30 | 000,083,456 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
  223. DRV:[b]64bit:[/b] - [2018.12.08 08:36:56 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  224. DRV:[b]64bit:[/b] - [2018.11.09 03:49:37 | 000,565,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  225. DRV:[b]64bit:[/b] - [2018.11.09 03:21:11 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  226. DRV:[b]64bit:[/b] - [2018.10.23 18:30:55 | 000,060,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv)
  227. DRV:[b]64bit:[/b] - [2018.10.23 18:30:54 | 000,328,696 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter)
  228. DRV:[b]64bit:[/b] - [2018.10.23 18:30:54 | 000,046,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot)
  229. DRV:[b]64bit:[/b] - [2018.10.21 08:46:42 | 000,611,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  230. DRV:[b]64bit:[/b] - [2018.10.21 08:19:52 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  231. DRV:[b]64bit:[/b] - [2018.10.21 08:19:29 | 000,228,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat)
  232. DRV:[b]64bit:[/b] - [2018.10.21 08:17:38 | 000,787,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  233. DRV:[b]64bit:[/b] - [2018.08.09 05:55:01 | 000,230,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  234. DRV:[b]64bit:[/b] - [2018.08.03 04:47:12 | 000,128,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
  235. DRV:[b]64bit:[/b] - [2018.08.03 04:40:48 | 000,228,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  236. DRV:[b]64bit:[/b] - [2018.08.03 04:39:58 | 000,075,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  237. DRV:[b]64bit:[/b] - [2018.08.03 04:17:05 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
  238. DRV:[b]64bit:[/b] - [2018.07.14 04:55:22 | 000,414,720 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt)
  239. DRV:[b]64bit:[/b] - [2018.06.15 08:10:52 | 000,048,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  240. DRV:[b]64bit:[/b] - [2018.06.15 06:08:16 | 001,921,944 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)
  241. DRV:[b]64bit:[/b] - [2018.06.15 06:08:14 | 000,072,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  242. DRV:[b]64bit:[/b] - [2018.06.15 06:08:05 | 000,945,568 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
  243. DRV:[b]64bit:[/b] - [2018.06.15 05:44:07 | 000,295,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  244. DRV:[b]64bit:[/b] - [2018.06.14 15:08:33 | 000,099,920 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
  245. DRV:[b]64bit:[/b] - [2018.06.08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  246. DRV:[b]64bit:[/b] - [2018.06.08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  247. DRV:[b]64bit:[/b] - [2018.06.01 00:14:38 | 000,382,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  248. DRV:[b]64bit:[/b] - [2018.06.01 00:14:38 | 000,105,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  249. DRV:[b]64bit:[/b] - [2018.04.12 18:30:05 | 000,178,688 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mqac.sys -- (MQAC)
  250. DRV:[b]64bit:[/b] - [2018.04.12 17:18:23 | 000,037,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  251. DRV:[b]64bit:[/b] - [2018.04.12 17:18:22 | 000,057,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter)
  252. DRV:[b]64bit:[/b] - [2018.04.12 17:18:20 | 000,030,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  253. DRV:[b]64bit:[/b] - [2018.04.12 00:34:43 | 000,119,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
  254. DRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,091,544 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  255. DRV:[b]64bit:[/b] - [2018.04.12 00:34:40 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam)
  256. DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  257. DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  258. DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afunix.sys -- (afunix)
  259. DRV:[b]64bit:[/b] - [2018.04.12 00:34:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  260. DRV:[b]64bit:[/b] - [2018.04.12 00:34:28 | 000,254,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  261. DRV:[b]64bit:[/b] - [2018.04.12 00:34:25 | 000,088,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  262. DRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,175,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
  263. DRV:[b]64bit:[/b] - [2018.04.12 00:34:22 | 000,034,208 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  264. DRV:[b]64bit:[/b] - [2018.04.12 00:34:20 | 000,217,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  265. DRV:[b]64bit:[/b] - [2018.04.12 00:34:20 | 000,209,816 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  266. DRV:[b]64bit:[/b] - [2018.04.12 00:34:19 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
  267. DRV:[b]64bit:[/b] - [2018.04.12 00:34:15 | 000,021,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys -- (WdmCompanionFilter)
  268. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,282,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  269. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,154,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  270. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,152,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
  271. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,151,960 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
  272. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  273. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,075,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  274. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,067,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  275. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,039,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  276. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
  277. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101)
  278. DRV:[b]64bit:[/b] - [2018.04.12 00:34:14 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  279. DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,169,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  280. DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,082,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  281. DRV:[b]64bit:[/b] - [2018.04.12 00:34:12 | 000,055,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  282. DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,128,000 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  283. DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,063,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SgrmAgent.sys -- (SgrmAgent)
  284. DRV:[b]64bit:[/b] - [2018.04.12 00:34:04 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  285. DRV:[b]64bit:[/b] - [2018.04.12 00:33:58 | 000,030,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  286. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,140,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  287. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,127,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  288. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  289. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,055,808 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  290. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  291. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,039,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk)
  292. DRV:[b]64bit:[/b] - [2018.04.12 00:33:54 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT)
  293. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,434,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  294. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,287,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  295. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,097,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  296. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  297. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,054,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  298. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  299. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  300. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  301. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  302. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  303. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  304. DRV:[b]64bit:[/b] - [2018.04.12 00:33:52 | 000,018,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  305. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,144,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  306. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,098,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  307. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,086,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys -- (BthLEEnum)
  308. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,029,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  309. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,028,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  310. DRV:[b]64bit:[/b] - [2018.04.12 00:33:51 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  311. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 001,836,952 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
  312. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,885,144 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAVC.sys -- (iaStorAVC)
  313. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,842,648 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  314. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,604,160 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
  315. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,526,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  316. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,505,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost)
  317. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,321,432 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
  318. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,305,560 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  319. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
  320. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,156,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  321. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,108,952 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  322. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,105,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem)
  323. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimm.sys -- (nvdimm)
  324. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,079,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  325. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  326. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,064,920 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  327. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  328. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  329. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,061,848 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  330. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,058,776 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  331. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,056,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip)
  332. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  333. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,038,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt)
  334. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  335. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  336. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,033,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hvcrash.sys -- (hvcrash)
  337. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,033,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd)
  338. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,032,152 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  339. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,031,128 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  340. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
  341. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum)
  342. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  343. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,016,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
  344. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  345. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  346. DRV:[b]64bit:[/b] - [2018.04.12 00:33:49 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  347. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 003,419,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  348. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 001,135,520 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  349. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,533,912 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  350. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,259,480 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  351. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,177,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  352. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,145,816 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ItSas35i.sys -- (ItSas35i)
  353. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,128,408 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  354. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,124,312 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  355. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  356. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,107,416 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  357. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy)
  358. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,083,360 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  359. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,082,848 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  360. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,082,328 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\megasas35i.sys -- (megasas35i)
  361. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,075,160 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i)
  362. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,064,408 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  363. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,063,904 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  364. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  365. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,027,032 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  366. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
  367. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM)
  368. DRV:[b]64bit:[/b] - [2018.04.12 00:33:48 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  369. DRV:[b]64bit:[/b] - [2018.04.12 00:33:47 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
  370. DRV:[b]64bit:[/b] - [2018.04.12 00:33:47 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
  371. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 003,717,120 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane_13.sys -- (rtwlane_13)
  372. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,174,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P)
  373. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  374. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,118,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  375. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  376. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,091,648 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  377. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,088,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P)
  378. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
  379. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD)
  380. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus)
  381. DRV:[b]64bit:[/b] - [2018.04.12 00:33:45 | 000,036,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
  382. DRV:[b]64bit:[/b] - [2017.05.04 21:38:40 | 000,943,192 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  383. DRV:[b]64bit:[/b] - [2016.09.02 23:40:44 | 000,052,904 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  384. DRV:[b]64bit:[/b] - [2016.07.22 08:21:06 | 000,164,992 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  385. DRV:[b]64bit:[/b] - [2016.07.22 08:21:06 | 000,130,688 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  386. DRV:[b]64bit:[/b] - [2016.07.21 20:24:44 | 000,053,888 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
  387. DRV:[b]64bit:[/b] - [2016.07.01 21:15:34 | 000,124,160 | ---- | M] (ASIX Electronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ax88772.sys -- (AX88772)
  388. DRV:[b]64bit:[/b] - [2015.12.18 20:01:42 | 021,648,880 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  389. DRV:[b]64bit:[/b] - [2015.12.18 20:01:42 | 000,674,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  390. DRV:[b]64bit:[/b] - [2015.10.21 16:10:30 | 000,065,792 | ---- | M] (Realtek Microelectronics) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter2)
  391. DRV:[b]64bit:[/b] - [2015.10.21 16:10:30 | 000,065,792 | ---- | M] (Realtek Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter)
  392. DRV:[b]64bit:[/b] - [2015.10.21 16:09:05 | 000,045,728 | ---- | M] (Toshiba Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Thotkey.sys -- (Thotkey)
  393. DRV:[b]64bit:[/b] - [2015.10.08 18:34:16 | 000,051,392 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
  394. DRV:[b]64bit:[/b] - [2015.05.28 06:00:44 | 000,102,912 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService)
  395. DRV:[b]64bit:[/b] - [2012.07.17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  396. DRV:[b]64bit:[/b] - [2012.02.27 03:01:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  397. DRV:[b]64bit:[/b] - [2011.02.08 19:07:00 | 000,038,096 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
  398. DRV:[b]64bit:[/b] - [2008.08.01 01:01:00 | 000,306,560 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\OA002Vid.sys -- (OA002Vid)
  399. DRV:[b]64bit:[/b] - [2008.06.03 17:30:38 | 000,168,864 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\OA002Ufd.sys -- (OA002Ufd)
  400. DRV:[b]64bit:[/b] - [2007.06.08 01:00:02 | 000,219,544 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\OA002Afx.sys -- (OA002Afx)
  401. DRV - [2019.02.11 16:44:32 | 001,934,048 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\BASHDefs\20190211.005\BHDrvx64.sys -- (BHDrvx64)
  402. DRV - [2019.01.28 23:36:49 | 000,678,616 | ---- | M] (Symantec Corporation) [File_System | Disabled | Stopped] -- C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\SymPlatform\SymEvnt.sys -- (SymEvnt)
  403. DRV - [2019.01.22 01:27:33 | 001,424,904 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\IPSDefs\20190211.061\IDSvia64.sys -- (IDSVia64)
  404. DRV - [2018.12.04 21:01:07 | 000,153,296 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
  405. DRV - [2018.12.04 20:49:26 | 000,515,792 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
  406. DRV - [2018.04.12 00:34:58 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix)
  407. DRV - [2018.04.12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum)
  408. DRV - [2018.04.12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus)
  409.  
  410.  
  411. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  412.  
  413.  
  414. [color=#E56717]========== Internet Explorer ==========[/color]
  415.  
  416. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  417. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  418. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
  419. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://www.sweet-page.com/web/?type=ds&ts=1395590491&from=cor&uid=TOSHIBAXMQ01ABD075_13VKSCNWSXX13VKSCNWS&q={searchTerms}
  420. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1074&systemid=406&v=a12627-343&apn_uid=1832350232934054&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
  421. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  422. IE - HKLM\..\SearchScopes,DefaultScope =
  423. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  424.  
  425. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1402565563&from=wpm0612&uid=TOSHIBAXMQ01ABD075_13VKSCNWSXX13VKSCNWS
  426. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
  427. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
  428. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
  429. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 81 9B E6 36 C5 3E CF 01 [binary data]
  430. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = BD F7 3F 72 73 60 D2 01 [binary data]
  431. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
  432. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
  433. IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  434. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
  435. IE - HKCU\..\SearchScopes\{B94F936B-E364-4412-9BC3-AADD47EF89A0}: "URL" = https://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
  436. IE - HKCU\..\SearchScopes\{e4a1ece8-ed94-4f93-80ea-75f978ceaf24}: "URL" =
  437. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  438. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>
  439.  
  440. [color=#E56717]========== FireFox ==========[/color]
  441.  
  442. FF - prefs.js..browser.search.countryCode: "DE"
  443. FF - prefs.js..browser.search.region: "DE"
  444. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:48.0.2
  445. FF - user.js - File not found
  446.  
  447. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll File not found
  448. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll ( Microsoft Corporation)
  449. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll ()
  450. FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: File not found
  451. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.101.2: C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  452. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2: C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll (Oracle Corporation)
  453. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll ( Microsoft Corporation)
  454. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
  455. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll (Google Inc.)
  456. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll (Google Inc.)
  457. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  458. FF - HKCU\Software\MozillaPlugins\@zoom.us/ZoomVideoPlugin: C:\Users\Schwarz\AppData\Roaming\Zoom\bin\npzoomplugin.dll (Zoom Video Communications, Inc.)
  459.  
  460. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}: C:\PROGRAM FILES\V-BATES\FIREFOX
  461. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}: C:\Program Files\V-bates\Firefox
  462. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quick_start@gmail.com: C:\Users\Schwarz\AppData\Roaming\Mozilla\Firefox\Profiles\8weucufo.default\extensions\quick_start@gmail.com
  463. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Users\Schwarz\AppData\Roaming\Mozilla\Firefox\Profiles\8weucufo.default\extensions\faststartff@gmail.com
  464. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\shortcutff@gmail.com: C:\Users\Schwarz\AppData\Roaming\Mozilla\Firefox\Profiles\8weucufo.default\extensions\shortcutff@gmail.com
  465.  
  466. [2014.03.23 14:49:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\Extensions
  467. [2016.09.11 13:20:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\Firefox\Profiles\yizta3nx.default-1473595236628\extensions
  468. [2016.09.11 13:20:39 | 000,023,373 | ---- | M] () (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\firefox\profiles\yizta3nx.default-1473595236628\extensions\firefox-hotfix@mozilla.org.xpi
  469. [2016.09.11 13:20:38 | 000,006,321 | ---- | M] () (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\firefox\profiles\yizta3nx.default-1473595236628\features\{d0c7e923-1fbd-4e81-8139-2f0dce0295ca}\e10srollout@mozilla.org.xpi
  470. [2016.09.11 13:20:44 | 000,781,661 | ---- | M] () (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\firefox\profiles\yizta3nx.default-1473595236628\features\{d0c7e923-1fbd-4e81-8139-2f0dce0295ca}\firefox@getpocket.com.xpi
  471. [2016.09.11 13:20:54 | 002,034,437 | ---- | M] () (No name found) -- C:\Users\Schwarz\AppData\Roaming\mozilla\firefox\profiles\yizta3nx.default-1473595236628\features\{d0c7e923-1fbd-4e81-8139-2f0dce0295ca}\loop@mozilla.org.xpi
  472. [2016.09.13 09:58:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  473.  
  474. [color=#E56717]========== Chrome ==========[/color]
  475.  
  476. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\
  477. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\agdhembpgcpfegeigidembjopfhghnpj\1.2.0.2_0\
  478. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\
  479. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  480. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apicngidjjeegmfbfgpobchlpliidibm\13.855.14.48369_0\
  481. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  482. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bomhoanbpkeifgklbpebekfgblgficjn\2.0.42_0\
  483. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  484. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\15.1.0.6_0\
  485. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\epjncljanmdaajainajcdpfhepmgcjga\13.831.14.27789_0\
  486. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\
  487. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc\5.0.15_1\
  488. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\2.6.6.1986_0\
  489. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkfcgceminipbgjnnimdkejmlaecebj\1.0.0.1_0\
  490. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc\1.0.0.20_0\
  491. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.7_0\
  492. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh\2.0.26_0\
  493. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif\1.0.5_0\
  494. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgjfgplpablkjnlkjmjdecgdpfankdle\1.4.35_0\
  495. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\10.2.0.9950_0\
  496. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlikepnkghhlnkgeejmlkfeheihlehne\1.1.8_0\
  497. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\
  498. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  499. CHR - Extension: No name found = C:\Users\Schwarz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\7118.1015.0.0_0\
  500.  
  501. O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  502. O2:[b]64bit:[/b] - BHO: (Skype for Business Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  503. O2:[b]64bit:[/b] - BHO: (Norton Password Manager) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\22.16.3.21\coIEPlg.dll (Symantec Corporation)
  504. O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll (Microsoft Corporation)
  505. O2 - BHO: (no name) - {04b93bad-361d-561a-8b0a-79299d443db4} - No CLSID value found.
  506. O2 - BHO: (no name) - {10AD2C61-0898-4348-8600-14A342F22AC3} - No CLSID value found.
  507. O2 - BHO: (Norton Password Manager) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine32\22.16.3.21\coIEPlg.dll (Symantec Corporation)
  508. O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\IPS\IPSBHO.DLL File not found
  509. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll (Oracle Corporation)
  510. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll (Oracle Corporation)
  511. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.16.3.21\coIEPlg.dll (Symantec Corporation)
  512. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine32\22.16.3.21\coIEPlg.dll (Symantec Corporation)
  513. O4:[b]64bit:[/b] - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
  514. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  515. O4:[b]64bit:[/b] - HKLM..\Run: [SecurityHealth] C:\Programme\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
  516. O4:[b]64bit:[/b] - HKLM..\Run: [TosSENotify] C:\Programme\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
  517. O4 - HKLM..\Run: [ApnTBMon] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
  518. O4 - HKLM..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)
  519. O4 - HKLM..\Run: [LexwareInfoService] C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe (Haufe-Lexware GmbH & Co. KG)
  520. O4 - HKLM..\Run: [OV3_Monitor] C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe (Olympus Corporation)
  521. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  522. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  523. O4 - HKCU..\Run: [com.squirrel.WhatsApp.WhatsApp] C:\ProgramData\Schwarz\WhatsApp\Update.exe --processStart "WhatsApp.exe" File not found
  524. O4 - HKCU..\Run: [OneDrive] C:\Users\Schwarz\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
  525. O4 - HKCU..\Run: [OV3_Monitor] C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe (Olympus Corporation)
  526. O4 - HKCU..\Run: [Zoom] C:\Users\Schwarz\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)
  527. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  528. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  529. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  530. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  531. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  532. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2
  533. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2
  534. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1
  535. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1
  536. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\SearchScopes present
  537. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
  538. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
  539. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
  540. O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
  541. O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
  542. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
  543. O9:[b]64bit:[/b] - Extra Button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  544. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  545. O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
  546. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
  547. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
  548. O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
  549. O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
  550. O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
  551. O13[b]64bit:[/b] - gopher Prefix: missing
  552. O13 - gopher Prefix: missing
  553. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  554. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
  555. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{41a07157-8845-4801-b531-ade9f44c7d26}: DhcpNameServer = 192.168.178.1
  556. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5357fdf7-9242-4440-99ad-dd6f52c62745}: DhcpNameServer = 192.168.178.1
  557. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9982bc50-a124-4f48-b501-f8a7d1714ad4}: DhcpNameServer = 192.168.42.129
  558. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a47eef92-4fb2-43f5-9dce-3b76a0a22ecc}: DhcpNameServer = 192.168.178.1
  559. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{cb4a0d23-7a7d-4a20-91ab-a365b8ae6c7d}: DhcpNameServer = 192.168.178.1
  560. O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
  561. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  562. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  563. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  564. O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Programme\Microsoft Office 15\root\office15\msosb.dll (Microsoft Corporation)
  565. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  566. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  567. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  568. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  569. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  570. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  571. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  572. O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - File not found
  573. O30 - LSA: Security Packages - (livessp) - File not found
  574. O32 - HKLM CDRom: AutoRun - 1
  575. O34 - HKLM BootExecute: (autocheck autochk *)
  576. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  577. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  578. O35 - HKLM\..comfile [open] -- "%1" %*
  579. O35 - HKLM\..exefile [open] -- "%1" %*
  580. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  581. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  582. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  583. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  584. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  585. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  586.  
  587. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  588.  
  589. [3415.10.21 20:43:25 | 000,000,000 | ---D | C] -- C:\Users\Schwarz\AppData\Local\MicrosoftEdge
  590. [2019.01.28 14:07:42 | 000,102,792 | ---- | C] (DataDesign AG) -- C:\WINDOWS\SysWow64\ddBACCTM.cpl
  591. [2019.01.28 14:07:42 | 000,098,696 | ---- | C] (DataDesign AG) -- C:\WINDOWS\SysWow64\DDBACCPL.CPL
  592. [2019.01.19 15:04:36 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
  593. [2019.01.14 19:57:27 | 000,000,000 | ---D | C] -- C:\Users\Schwarz\Documents\2019
  594. [9 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
  595. [3 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
  596. [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  597. [10 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]
  598.  
  599. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  600.  
  601. [2019.02.13 12:27:21 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  602. [2019.02.13 11:33:51 | 2109,181,951 | -HS- | M] () -- C:\hiberfil.sys
  603. [2019.02.13 10:40:32 | 001,162,047 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\NGCx64\1610030.015\VT20190213.005
  604. [2019.02.12 21:45:24 | 004,261,656 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\NGCx64\1610030.015\Cat.DB
  605. [2019.01.28 14:07:42 | 000,102,792 | ---- | M] (DataDesign AG) -- C:\WINDOWS\SysWow64\ddBACCTM.cpl
  606. [2019.01.28 14:07:42 | 000,098,696 | ---- | M] (DataDesign AG) -- C:\WINDOWS\SysWow64\DDBACCPL.CPL
  607. [2019.01.26 20:23:32 | 000,002,086 | ---- | M] () -- C:\Users\Public\Desktop\Canon IJ Network Tool.lnk
  608. [2019.01.26 19:41:42 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  609. [2019.01.22 20:14:15 | 000,002,335 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security.lnk
  610. [2019.01.15 21:06:49 | 004,822,490 | ---- | M] () -- C:\Users\Schwarz\Documents\IMG_20190115_0001.jpg
  611. [9 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
  612. [3 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
  613. [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  614. [10 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]
  615.  
  616. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  617.  
  618. [2019.02.10 10:08:39 | 000,002,434 | ---- | C] () -- C:\Users\Schwarz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  619. [2019.01.15 21:06:49 | 004,822,490 | ---- | C] () -- C:\Users\Schwarz\Documents\IMG_20190115_0001.jpg
  620. [2018.12.28 21:08:05 | 000,003,584 | ---- | C] () -- C:\Users\Schwarz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  621. [2018.09.25 23:12:54 | 000,073,232 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8814ae_new.dll
  622. [2018.09.25 23:12:54 | 000,070,644 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192ee_new.dll
  623. [2018.09.25 23:12:54 | 000,067,324 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8192eu_new.dll
  624. [2018.09.25 23:12:54 | 000,064,048 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_new.dll
  625. [2018.09.25 23:12:54 | 000,057,708 | ---- | C] () -- C:\WINDOWS\rtl8723d_mp_chip_bt40_fw_asic_rom_patch_new.dll
  626. [2018.09.25 23:12:54 | 000,051,272 | ---- | C] () -- C:\WINDOWS\rtl8761a_mp_chip_bt40_fw_asic_rom_patch_8812ae_new.dll
  627. [2018.09.25 23:12:54 | 000,051,068 | ---- | C] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new.dll
  628. [2018.09.25 23:12:54 | 000,051,016 | ---- | C] () -- C:\WINDOWS\rtl8723b_mp_chip_bt40_fw_asic_rom_patch_new_s1.dll
  629. [2018.09.25 23:12:54 | 000,049,080 | ---- | C] () -- C:\WINDOWS\rtl8822b_mp_chip_bt40_fw_asic_rom_patch_new.dll
  630. [2018.09.25 23:12:54 | 000,045,648 | ---- | C] () -- C:\WINDOWS\rtl8821c_mp_chip_bt40_fw_asic_rom_patch_new.dll
  631. [2018.09.25 23:12:54 | 000,038,012 | ---- | C] () -- C:\WINDOWS\rtl8821a_mp_chip_bt40_fw_asic_rom_patch_new.dll
  632. [2018.09.25 23:12:54 | 000,037,100 | ---- | C] () -- C:\WINDOWS\rlt8723a_chip_bt40_fw_asic_rom_patch.dll
  633. [2018.09.25 23:12:54 | 000,003,128 | ---- | C] () -- C:\WINDOWS\PidVid_List.dll
  634. [2018.08.13 09:28:52 | 000,139,232 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNTvmc116.dll
  635. [2018.08.13 09:28:50 | 000,325,088 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNT116.dll
  636. [2018.08.13 09:28:50 | 000,075,744 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNTvm116.dll
  637. [2018.06.13 19:38:24 | 002,841,312 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll
  638. [2018.06.01 00:20:48 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  639. [2018.06.01 00:14:56 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat
  640. [2018.04.12 00:38:34 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  641. [2018.04.12 00:38:34 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  642. [2018.04.12 00:34:55 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  643. [2018.04.12 00:34:50 | 000,054,272 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  644. [2018.04.12 00:34:49 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  645. [2018.04.12 00:34:47 | 000,364,200 | ---- | C] () -- C:\WINDOWS\SysWow64\InputHost.dll
  646. [2018.04.12 00:34:46 | 003,575,808 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll
  647. [2018.04.12 00:34:46 | 000,025,600 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe
  648. [2018.04.12 00:34:45 | 000,329,216 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll
  649. [2018.04.12 00:34:45 | 000,223,232 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll
  650. [2018.04.12 00:34:45 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
  651. [2018.04.12 00:34:45 | 000,111,616 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll
  652. [2018.04.12 00:34:45 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll
  653. [2018.04.12 00:34:36 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  654. [2018.04.12 00:34:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  655. [2017.10.12 11:51:56 | 000,323,040 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNT115.dll
  656. [2017.10.12 11:51:56 | 000,139,232 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNTvmc115.dll
  657. [2017.10.12 11:51:56 | 000,075,744 | ---- | C] () -- C:\WINDOWS\SysWow64\LxDNTvm115.dll
  658. [2017.07.20 00:01:52 | 001,908,732 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
  659. [2017.07.19 23:59:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
  660. [2014.08.18 08:23:44 | 000,000,000 | ---- | C] () -- C:\Users\Schwarz\AppData\Local\{D0E89715-80BC-47D3-BFBB-B9F486601C6B}
  661. [2014.08.16 13:54:23 | 000,002,930 | ---- | C] () -- C:\Users\Schwarz\AppData\Roaming\aps.scan.results
  662. [2014.08.16 13:54:23 | 000,001,206 | ---- | C] () -- C:\Users\Schwarz\AppData\Roaming\aps.scan.quick.results
  663. [2014.07.15 19:00:19 | 000,000,700 | ---- | C] () -- C:\Users\Schwarz\Johannes - Verknüpfung.lnk
  664. [2014.05.26 09:39:34 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  665. [2014.03.24 11:12:34 | 000,000,145 | ---- | C] () -- C:\Users\Schwarz\AppData\Roaming\WB.CFG
  666. [2014.03.23 17:05:37 | 000,000,322 | ---- | C] () -- C:\Users\Schwarz\AppData\Roaming\aps.uninstall.scan.results
  667.  
  668. [color=#E56717]========== ZeroAccess Check ==========[/color]
  669.  
  670.  
  671. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  672.  
  673. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  674.  
  675. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  676.  
  677. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  678.  
  679. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  680. "" = C:\Windows\SysNative\windows.storage.dll -- [2018.12.08 09:05:08 | 007,436,216 | ---- | M] (Microsoft Corporation)
  681. "ThreadingModel" = Apartment
  682.  
  683. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  684. "" = %SystemRoot%\system32\windows.storage.dll -- [2018.12.08 08:45:52 | 006,043,496 | ---- | M] (Microsoft Corporation)
  685. "ThreadingModel" = Apartment
  686.  
  687. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  688. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2018.04.12 00:34:40 | 000,973,312 | ---- | M] (Microsoft Corporation)
  689. "ThreadingModel" = Free
  690.  
  691. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  692. "" = %systemroot%\system32\wbem\fastprox.dll -- [2018.04.12 00:34:55 | 000,785,408 | ---- | M] (Microsoft Corporation)
  693. "ThreadingModel" = Free
  694.  
  695. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  696. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2018.04.12 00:34:40 | 000,524,288 | ---- | M] (Microsoft Corporation)
  697. "ThreadingModel" = Both
  698.  
  699. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  700.  
  701. [color=#E56717]========== LOP Check ==========[/color]
  702.  
  703. [2014.07.19 20:32:07 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\337Games
  704. [2014.07.29 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Activeris
  705. [2014.08.16 13:54:17 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\ap_logs
  706. [2014.11.24 14:02:17 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Avery
  707. [2015.11.16 20:38:48 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Canon
  708. [2014.07.26 12:59:47 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\DataDesign
  709. [2016.10.27 20:02:54 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Hyper.WEB
  710. [2015.05.13 19:17:46 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\InetStat
  711. [2018.02.14 20:21:22 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Lexware
  712. [2014.03.23 10:56:24 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\library_dir
  713. [2014.03.24 14:56:05 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Opera Software
  714. [2014.07.08 16:15:19 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\PriceMeterUpdater
  715. [2014.03.25 09:39:04 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Probit Software
  716. [2018.03.17 11:20:22 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Samsung
  717. [2017.04.06 12:48:48 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Sparda
  718. [2017.04.13 11:17:25 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\SpardaSecureApp
  719. [2014.05.27 15:26:34 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\systweak
  720. [2014.09.26 11:28:28 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Thunderbird
  721. [2017.04.06 12:48:48 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\UninstallData
  722. [2019.02.13 11:44:57 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\WhatsApp
  723. [2014.03.13 12:20:33 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\WinBatch
  724. [2014.10.03 11:48:44 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Windows Live Writer
  725. [2018.12.04 21:26:24 | 000,000,000 | ---D | M] -- C:\Users\Schwarz\AppData\Roaming\Zoom
  726.  
  727. [color=#E56717]========== Purity Check ==========[/color]
  728.  
  729.  
  730.  
  731. [color=#E56717]========== Alternate Data Streams ==========[/color]
  732.  
  733. @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:C5831B98
  734. @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:373E1720
  735. @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:AD022376
  736.  
  737. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!