| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7: Verdächtiger Link in E-Mail angeklickt - Spybot WarnungWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
06.03.2015, 14:43
| #1 |
 |  Windows 7: Verdächtiger Link in E-Mail angeklickt - Spybot Warnung Hallo, nun habe ich alles weitere erledigt. Der TDSSKiller hat mir zwei Logfiles ausgegeben: Code:
ATTFilter 13:49:29.0673 0x11b4 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
13:49:54.0943 0x11b4 ============================================================
13:49:54.0943 0x11b4 Current date / time: 2015/03/06 13:49:54.0943
13:49:54.0943 0x11b4 SystemInfo:
13:49:54.0943 0x11b4
13:49:54.0943 0x11b4 OS Version: 6.1.7601 ServicePack: 1.0
13:49:54.0943 0x11b4 Product type: Workstation
13:49:54.0943 0x11b4 ComputerName: BENE-PC
13:49:54.0943 0x11b4 UserName: Bene
13:49:54.0943 0x11b4 Windows directory: C:\Windows
13:49:54.0953 0x11b4 System windows directory: C:\Windows
13:49:54.0953 0x11b4 Running under WOW64
13:49:54.0953 0x11b4 Processor architecture: Intel x64
13:49:54.0953 0x11b4 Number of processors: 8
13:49:54.0953 0x11b4 Page size: 0x1000
13:49:54.0953 0x11b4 Boot type: Normal boot
13:49:54.0953 0x11b4 ============================================================
13:49:55.0593 0x11b4 KLMD registered as C:\Windows\system32\drivers\35229603.sys
13:49:56.0783 0x11b4 System UUID: {3664B65E-E74E-9F9D-8E26-1E70D795A60A}
13:49:57.0213 0x11b4 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 ( 698.64 Gb ), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:49:57.0223 0x11b4 ============================================================
13:49:57.0223 0x11b4 \Device\Harddisk0\DR0:
13:49:57.0223 0x11b4 MBR partitions:
13:49:57.0223 0x11b4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3200800, BlocksNum 0x258D4000
13:49:57.0223 0x11b4 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x28AD4800, BlocksNum 0x2EA71800
13:49:57.0223 0x11b4 ============================================================
13:49:57.0263 0x11b4 C: <-> \Device\Harddisk0\DR0\Partition1
13:49:57.0303 0x11b4 D: <-> \Device\Harddisk0\DR0\Partition2
13:49:57.0303 0x11b4 ============================================================
13:49:57.0303 0x11b4 Initialize success
13:49:57.0303 0x11b4 ============================================================
13:51:25.0233 0x0f98 ============================================================
13:51:25.0233 0x0f98 Scan started
13:51:25.0233 0x0f98 Mode: Manual; SigCheck; TDLFS;
13:51:25.0233 0x0f98 ============================================================
13:51:25.0233 0x0f98 KSN ping started
13:51:38.0743 0x0f98 KSN ping finished: true
13:51:39.0863 0x0f98 ================ Scan system memory ========================
13:51:39.0863 0x0f98 System memory - ok
13:51:39.0863 0x0f98 ================ Scan services =============================
13:51:40.0093 0x0f98 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
13:51:40.0273 0x0f98 1394ohci - ok
13:51:40.0393 0x0f98 [ ADC420616C501B45D26C0FD3EF1E54E4, 29FC41D40A35AC5476E2A673CE5B12684E0CFA12A1AEBEEBE5883FBA5CA68B67 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
13:51:40.0453 0x0f98 ACDaemon - ok
13:51:40.0483 0x0f98 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
13:51:40.0503 0x0f98 ACPI - ok
13:51:40.0533 0x0f98 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
13:51:40.0633 0x0f98 AcpiPmi - ok
13:51:40.0703 0x0f98 [ 8B46D5A1D3EF08232C04D0EAFB871FB2, 5306F8452EF675851CB0015F9E5C5EB750137D6D65C9CB7E47F8EF5B10A44D10 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
13:51:40.0753 0x0f98 Adobe LM Service - detected UnsignedFile.Multi.Generic ( 1 )
13:51:43.0183 0x0f98 Detect skipped due to KSN trusted
13:51:43.0183 0x0f98 Adobe LM Service - ok
13:51:43.0363 0x0f98 [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
13:51:43.0393 0x0f98 AdobeARMservice - ok
13:51:43.0583 0x0f98 [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
13:51:43.0613 0x0f98 AdobeFlashPlayerUpdateSvc - ok
13:51:43.0673 0x0f98 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
13:51:43.0723 0x0f98 adp94xx - ok
13:51:43.0753 0x0f98 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
13:51:43.0773 0x0f98 adpahci - ok
13:51:43.0793 0x0f98 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
13:51:43.0813 0x0f98 adpu320 - ok
13:51:43.0853 0x0f98 [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
13:51:44.0003 0x0f98 AeLookupSvc - ok
13:51:44.0093 0x0f98 [ 6E79A119B0CE418FE44E0C824BF3F039, 7C7E8ED41EFCDB20C1A0C038BB6C53CDBE6709E3573C8A93B4059C0CD08759EB ] AFBAgent C:\Windows\system32\FBAgent.exe
13:51:44.0113 0x0f98 AFBAgent - ok
13:51:44.0163 0x0f98 [ 6CCD1135320109D6B219F1A6E04AD9F6, B97D4DF46DF0EFC106BD3E248C70809F3F47DF3FD1CA039A0A3923E1FA05A969 ] Afc C:\Windows\syswow64\drivers\Afc.sys
13:51:44.0193 0x0f98 Afc - ok
13:51:44.0253 0x0f98 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
13:51:44.0353 0x0f98 AFD - ok
13:51:44.0393 0x0f98 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
13:51:44.0433 0x0f98 agp440 - ok
13:51:44.0493 0x0f98 [ 14370049D8C9912EAC7603809A77C378, A135C6220F42BC884F0038DF7A08126C463FA46BBC80CDDE29BEF3DC41C94F8D ] AiCharger C:\Windows\system32\DRIVERS\AiCharger.sys
13:51:44.0513 0x0f98 AiCharger - ok
13:51:44.0553 0x0f98 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
13:51:44.0623 0x0f98 ALG - ok
13:51:44.0673 0x0f98 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
13:51:44.0703 0x0f98 aliide - ok
13:51:44.0723 0x0f98 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
13:51:44.0743 0x0f98 amdide - ok
13:51:44.0793 0x0f98 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
13:51:44.0863 0x0f98 AmdK8 - ok
13:51:44.0883 0x0f98 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
13:51:44.0913 0x0f98 AmdPPM - ok
13:51:44.0943 0x0f98 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
13:51:44.0963 0x0f98 amdsata - ok
13:51:44.0983 0x0f98 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
13:51:45.0003 0x0f98 amdsbs - ok
13:51:45.0023 0x0f98 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
13:51:45.0043 0x0f98 amdxata - ok
13:51:45.0193 0x0f98 [ 963F57EDF1A5C72AC66173F3B7CB329B, 0934361B0A55F4C082D70F264FAB5D36BAC482C135275AE552D442E64B3D5C1D ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
13:51:45.0233 0x0f98 AntiVirSchedulerService - ok
13:51:45.0293 0x0f98 [ 963F57EDF1A5C72AC66173F3B7CB329B, 0934361B0A55F4C082D70F264FAB5D36BAC482C135275AE552D442E64B3D5C1D ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
13:51:45.0333 0x0f98 AntiVirService - ok
13:51:45.0383 0x0f98 [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys
13:51:45.0553 0x0f98 AppID - ok
13:51:45.0583 0x0f98 [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
13:51:45.0653 0x0f98 AppIDSvc - ok
13:51:45.0723 0x0f98 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
13:51:45.0753 0x0f98 Appinfo - ok
13:51:45.0783 0x0f98 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
13:51:45.0813 0x0f98 arc - ok
13:51:45.0843 0x0f98 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
13:51:45.0863 0x0f98 arcsas - ok
13:51:45.0953 0x0f98 [ 18E5C2F937F9DEB8C282DF66A3761925, 30294C381F8C7DCB45EF9BCF572F410FF47630E12D5AA02259C6C80F07BEF495 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
13:51:45.0963 0x0f98 ASLDRService - ok
13:51:45.0973 0x0f98 [ 4C016FD76ED5C05E84CA8CAB77993961, 025E7BE9FCEFD6A83F4471BBA0C11F1C11BD5047047D26626DA24EE9A419CDC4 ] ASMMAP64 C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
13:51:45.0983 0x0f98 ASMMAP64 - ok
13:51:46.0273 0x0f98 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
13:51:46.0293 0x0f98 aspnet_state - ok
13:51:46.0323 0x0f98 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
13:51:46.0373 0x0f98 AsyncMac - ok
13:51:46.0413 0x0f98 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
13:51:46.0433 0x0f98 atapi - ok
13:51:46.0523 0x0f98 [ F8633CDD09647A64EE8DB550630427FF, 565F32E6B1E8451B2DD866E4997336A47B8DC6669392BDAAF252C35C0383E8A3 ] athr C:\Windows\system32\DRIVERS\athrx.sys
13:51:46.0713 0x0f98 athr - ok
13:51:46.0743 0x0f98 [ 7910158929571214A959D5A6D16DD9C0, 9B4F8A3AF9E09B2F772EEF1CB8F7EAB8A226068784837F375AE97B89B0B3A383 ] ATKGFNEXSrv C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
13:51:46.0753 0x0f98 ATKGFNEXSrv - ok
13:51:46.0803 0x0f98 [ AC31727F9946E9009480708E4D1B9986, D1D5DC2A377D37483E10BF5F96D670712718BC27C753E86ABBB6C0708992E7C9 ] ATKWMIACPIIO C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
13:51:46.0823 0x0f98 ATKWMIACPIIO - ok
13:51:46.0913 0x0f98 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
13:51:47.0013 0x0f98 AudioEndpointBuilder - ok
13:51:47.0063 0x0f98 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll
13:51:47.0083 0x0f98 AudioSrv - ok
13:51:47.0153 0x0f98 [ 00BF66D168E1A7AA7E1C9F458BBA0B34, 3D3C42E87B3649819EED685D93417D61EB84FE39B3F4D4943721AE74026DE11B ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
13:51:47.0193 0x0f98 avgntflt - ok
13:51:47.0223 0x0f98 [ 055D318220DD4593F2A8C8FF83707D36, 93566931D019D4D4C35C3E2E4E9BAF87BEF863E1B40B2B03ED87EF5C28F908DE ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
13:51:47.0243 0x0f98 avipbb - ok
13:51:47.0263 0x0f98 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
13:51:47.0273 0x0f98 avkmgr - ok
13:51:47.0323 0x0f98 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
13:51:47.0393 0x0f98 AxInstSV - ok
13:51:47.0453 0x0f98 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
13:51:47.0543 0x0f98 b06bdrv - ok
13:51:47.0593 0x0f98 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
13:51:47.0653 0x0f98 b57nd60a - ok
13:51:47.0693 0x0f98 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
13:51:47.0733 0x0f98 BDESVC - ok
13:51:47.0773 0x0f98 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
13:51:47.0843 0x0f98 Beep - ok
13:51:47.0903 0x0f98 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
13:51:47.0943 0x0f98 BFE - ok
13:51:47.0993 0x0f98 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
13:51:48.0103 0x0f98 BITS - ok
13:51:48.0143 0x0f98 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
13:51:48.0173 0x0f98 blbdrive - ok
13:51:48.0253 0x0f98 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
13:51:48.0323 0x0f98 bowser - ok
13:51:48.0353 0x0f98 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
13:51:48.0403 0x0f98 BrFiltLo - ok
13:51:48.0433 0x0f98 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
13:51:48.0453 0x0f98 BrFiltUp - ok
13:51:48.0473 0x0f98 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
13:51:48.0503 0x0f98 Browser - ok
13:51:48.0563 0x0f98 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
13:51:48.0613 0x0f98 Brserid - ok
13:51:48.0643 0x0f98 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
13:51:48.0673 0x0f98 BrSerWdm - ok
13:51:48.0693 0x0f98 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
13:51:48.0733 0x0f98 BrUsbMdm - ok
13:51:48.0743 0x0f98 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
13:51:48.0793 0x0f98 BrUsbSer - ok
13:51:48.0833 0x0f98 [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
13:51:48.0883 0x0f98 BthEnum - ok
13:51:48.0913 0x0f98 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
13:51:48.0963 0x0f98 BTHMODEM - ok
13:51:48.0993 0x0f98 [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
13:51:49.0033 0x0f98 BthPan - ok
13:51:49.0093 0x0f98 [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
13:51:49.0153 0x0f98 BTHPORT - ok
13:51:49.0203 0x0f98 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
13:51:49.0283 0x0f98 bthserv - ok
13:51:49.0343 0x0f98 [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
13:51:49.0363 0x0f98 BTHUSB - ok
13:51:49.0413 0x0f98 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
13:51:49.0493 0x0f98 cdfs - ok
13:51:49.0553 0x0f98 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
13:51:49.0603 0x0f98 cdrom - ok
13:51:49.0643 0x0f98 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
13:51:49.0683 0x0f98 CertPropSvc - ok
13:51:49.0723 0x0f98 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
13:51:49.0743 0x0f98 circlass - ok
13:51:49.0763 0x0f98 [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
13:51:49.0783 0x0f98 CLFS - ok
13:51:49.0863 0x0f98 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:51:49.0903 0x0f98 clr_optimization_v2.0.50727_32 - ok
13:51:49.0943 0x0f98 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
13:51:50.0033 0x0f98 clr_optimization_v2.0.50727_64 - ok
13:51:50.0113 0x0f98 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:51:50.0133 0x0f98 clr_optimization_v4.0.30319_32 - ok
13:51:50.0173 0x0f98 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
13:51:50.0183 0x0f98 clr_optimization_v4.0.30319_64 - ok
13:51:50.0213 0x0f98 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
13:51:50.0243 0x0f98 CmBatt - ok
13:51:50.0273 0x0f98 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
13:51:50.0293 0x0f98 cmdide - ok
13:51:50.0343 0x0f98 [ E45CDE1C8340DFEDF1D6724263F39E5B, 8B8091D0A8FF08170F34DA01A4201DAE7C3D026226BC77B5C2EC67657C670168 ] CNG C:\Windows\system32\Drivers\cng.sys
13:51:50.0403 0x0f98 CNG - ok
13:51:50.0453 0x0f98 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
13:51:50.0483 0x0f98 Compbatt - ok
13:51:50.0503 0x0f98 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
13:51:50.0543 0x0f98 CompositeBus - ok
13:51:50.0563 0x0f98 COMSysApp - ok
13:51:50.0663 0x0f98 [ 08F934092E0429BADF88E9F91DB0F61E, 6E9091C006FFFF261DC61C8E9A45219E47C351296E5355FC4B7242F30E1DDFE3 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
13:51:50.0703 0x0f98 cphs - ok
13:51:50.0723 0x0f98 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
13:51:50.0743 0x0f98 crcdisk - ok
13:51:50.0773 0x0f98 [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc C:\Windows\system32\cryptsvc.dll
13:51:50.0823 0x0f98 CryptSvc - ok
13:51:50.0893 0x0f98 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
13:51:50.0963 0x0f98 DcomLaunch - ok
13:51:51.0023 0x0f98 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
13:51:51.0083 0x0f98 defragsvc - ok
13:51:51.0113 0x0f98 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
13:51:51.0163 0x0f98 DfsC - ok
13:51:51.0233 0x0f98 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
13:51:51.0273 0x0f98 Dhcp - ok
13:51:51.0293 0x0f98 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
13:51:51.0373 0x0f98 discache - ok
13:51:51.0443 0x0f98 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys
13:51:51.0483 0x0f98 Disk - ok
13:51:51.0563 0x0f98 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
13:51:51.0603 0x0f98 Dnscache - ok
13:51:51.0683 0x0f98 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
13:51:51.0773 0x0f98 dot3svc - ok
13:51:51.0823 0x0f98 [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
13:51:51.0883 0x0f98 Dot4 - ok
13:51:51.0903 0x0f98 [ E9F5969233C5D89F3C35E3A66A52A361, C4BD35795C78FB11E6022372CB25DEB570730EFDAD3DC1584368235FF622638C ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
13:51:51.0953 0x0f98 Dot4Print - ok
13:51:51.0973 0x0f98 [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
13:51:52.0003 0x0f98 dot4usb - ok
13:51:52.0043 0x0f98 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
13:51:52.0123 0x0f98 DPS - ok
13:51:52.0173 0x0f98 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
13:51:52.0233 0x0f98 drmkaud - ok
13:51:52.0283 0x0f98 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
13:51:52.0323 0x0f98 DXGKrnl - ok
13:51:52.0383 0x0f98 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
13:51:52.0453 0x0f98 EapHost - ok
13:51:52.0923 0x0f98 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
13:51:53.0173 0x0f98 ebdrv - ok
13:51:53.0213 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] EFS C:\Windows\System32\lsass.exe
13:51:53.0263 0x0f98 EFS - ok
13:51:53.0473 0x0f98 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
13:51:53.0563 0x0f98 ehRecvr - ok
13:51:53.0593 0x0f98 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
13:51:53.0643 0x0f98 ehSched - ok
13:51:53.0733 0x0f98 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
13:51:53.0823 0x0f98 elxstor - ok
13:51:53.0833 0x0f98 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
13:51:53.0863 0x0f98 ErrDev - ok
13:51:53.0923 0x0f98 [ 4C120D2B2EA269EAE7A5744794EB6DB1, 11CD724908CB6327E4E8CFBC908B090AFC33B929FF0DBDC08D8368771E4AA0C9 ] ETD C:\Windows\system32\DRIVERS\ETD.sys
13:51:53.0943 0x0f98 ETD - ok
13:51:53.0993 0x0f98 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
13:51:54.0063 0x0f98 EventSystem - ok
13:51:54.0093 0x0f98 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
13:51:54.0133 0x0f98 exfat - ok
13:51:54.0163 0x0f98 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
13:51:54.0213 0x0f98 fastfat - ok
13:51:54.0293 0x0f98 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
13:51:54.0353 0x0f98 Fax - ok
13:51:54.0393 0x0f98 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
13:51:54.0423 0x0f98 fdc - ok
13:51:54.0453 0x0f98 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
13:51:54.0503 0x0f98 fdPHost - ok
13:51:54.0523 0x0f98 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
13:51:54.0593 0x0f98 FDResPub - ok
13:51:54.0613 0x0f98 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
13:51:54.0633 0x0f98 FileInfo - ok
13:51:54.0643 0x0f98 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
13:51:54.0693 0x0f98 Filetrace - ok
13:51:54.0723 0x0f98 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
13:51:54.0753 0x0f98 flpydisk - ok
13:51:54.0803 0x0f98 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
13:51:54.0843 0x0f98 FltMgr - ok
13:51:54.0963 0x0f98 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
13:51:55.0033 0x0f98 FontCache - ok
13:51:55.0083 0x0f98 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:51:55.0113 0x0f98 FontCache3.0.0.0 - ok
13:51:55.0123 0x0f98 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
13:51:55.0143 0x0f98 FsDepends - ok
13:51:55.0183 0x0f98 [ 6C06701BF1DB05405804D7EB610991CE, 75DEB2204D9AC338ED7C4742BEFAFA0AFC7E42B2C1B54A57DF8A1AD097D9EC3E ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
13:51:55.0223 0x0f98 fssfltr - ok
13:51:55.0523 0x0f98 [ 4CE9DAC1518FF7E77BD213E6394B9D77, D7D0D29DF93AC7DC5F85E385EEB45306C7BD87ACA7AAC5A8D47893D120C32C03 ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
13:51:55.0613 0x0f98 fsssvc - ok
13:51:55.0683 0x0f98 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
13:51:55.0693 0x0f98 Fs_Rec - ok
13:51:55.0723 0x0f98 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
13:51:55.0753 0x0f98 fvevol - ok
13:51:55.0793 0x0f98 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
13:51:55.0823 0x0f98 gagp30kx - ok
13:51:55.0883 0x0f98 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
13:51:55.0933 0x0f98 gpsvc - ok
13:51:55.0953 0x0f98 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
13:51:55.0993 0x0f98 hcw85cir - ok
13:51:56.0043 0x0f98 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
13:51:56.0143 0x0f98 HdAudAddService - ok
13:51:56.0193 0x0f98 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
13:51:56.0243 0x0f98 HDAudBus - ok
13:51:56.0263 0x0f98 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
13:51:56.0313 0x0f98 HidBatt - ok
13:51:56.0343 0x0f98 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
13:51:56.0403 0x0f98 HidBth - ok
13:51:56.0443 0x0f98 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
13:51:56.0493 0x0f98 HidIr - ok
13:51:56.0533 0x0f98 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
13:51:56.0603 0x0f98 hidserv - ok
13:51:56.0673 0x0f98 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
13:51:56.0703 0x0f98 HidUsb - ok
13:51:56.0733 0x0f98 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
13:51:56.0793 0x0f98 hkmsvc - ok
13:51:56.0823 0x0f98 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:51:56.0853 0x0f98 HomeGroupListener - ok
13:51:56.0893 0x0f98 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:51:56.0933 0x0f98 HomeGroupProvider - ok
13:51:57.0093 0x0f98 [ DA10FDFC1E3185B95C4A9F6E42638A23, 8864E16378D841061C9BCE734A2592F4832980E5150ECA0C601691CE7417A34D ] HostService C:\Users\Bene\AppData\Roaming\Host System\host.exe
13:51:57.0193 0x0f98 HostService - detected UnsignedFile.Multi.Generic ( 1 )
13:51:59.0653 0x0f98 HostService ( UnsignedFile.Multi.Generic ) - warning
13:52:02.0353 0x0f98 [ 97AAC45A375168C6A2297BEEB9692E31, 9C7285988D0C5DE8E3608F4E9F50A5C9398FFD0DA0F4C965C953859001FC76C8 ] hpqcxs08 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
13:52:02.0373 0x0f98 hpqcxs08 - ok
13:52:02.0403 0x0f98 [ 19A4FB67B1C97EA18EDFF44340973CD9, F1B6A7C1E450FF9A1D10F315F17D42DFE8390E88FF1AED4DE35237C4B81FC81D ] hpqddsvc C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
13:52:02.0413 0x0f98 hpqddsvc - ok
13:52:02.0443 0x0f98 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
13:52:02.0483 0x0f98 HpSAMD - ok
13:52:02.0693 0x0f98 [ F37882F128EFACEFE353E0BAE2766909, 2F9D21613500F092DFC0DB879180B549EE615D9B07408A5CC1A7F84663B2F47A ] HPSLPSVC C:\Users\Bene\AppData\Local\Temp\7zS1DCB\hpslpsvc64.dll
13:52:02.0753 0x0f98 HPSLPSVC - detected UnsignedFile.Multi.Generic ( 1 )
13:52:05.0173 0x0f98 Detect skipped due to KSN trusted
13:52:05.0173 0x0f98 HPSLPSVC - ok
13:52:05.0243 0x0f98 [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
13:52:05.0323 0x0f98 HTTP - ok
13:52:05.0353 0x0f98 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
13:52:05.0383 0x0f98 hwpolicy - ok
13:52:05.0423 0x0f98 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
13:52:05.0473 0x0f98 i8042prt - ok
13:52:05.0573 0x0f98 [ D469B77687E12FE43E344806740B624D, DFDD486FD040813BF4E5DDB504CF9E0BFBF6D4E540DDDA4829F9B675ACF63E89 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
13:52:05.0593 0x0f98 iaStor - ok
13:52:05.0663 0x0f98 [ 983FC69644DDF0486C8DFEA262948D1A, 329EC95117C31E61F6D22D79CFF339D70A70522710E7DC0CED06EC95E6D4B34F ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
13:52:05.0683 0x0f98 IAStorDataMgrSvc - ok
13:52:05.0773 0x0f98 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
13:52:05.0853 0x0f98 iaStorV - ok
13:52:05.0963 0x0f98 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
13:52:06.0063 0x0f98 idsvc - ok
13:52:06.0083 0x0f98 IEEtwCollectorService - ok
13:52:06.0333 0x0f98 [ 8C44E6B688790E2AD3846C97661C54F1, CB487D167EDA3C1E30BD5FB8F98C15EB9E75A6FB793009C2F1BBCAAB4285F772 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
13:52:06.0573 0x0f98 igfx - ok
13:52:06.0623 0x0f98 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
13:52:06.0663 0x0f98 iirsp - ok
13:52:06.0743 0x0f98 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
13:52:06.0813 0x0f98 IKEEXT - ok
13:52:07.0003 0x0f98 [ E53B926B51CF92F50A3AD0C5016805DD, 8F2052C0A33198CAB0E421FABDB06D7F26130991E7864112D80542DB82FD1CF5 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
13:52:07.0073 0x0f98 IntcAzAudAddService - ok
13:52:07.0163 0x0f98 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
13:52:07.0203 0x0f98 intelide - ok
13:52:07.0243 0x0f98 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
13:52:07.0273 0x0f98 intelppm - ok
13:52:07.0343 0x0f98 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
13:52:07.0423 0x0f98 IPBusEnum - ok
13:52:07.0443 0x0f98 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:52:07.0493 0x0f98 IpFilterDriver - ok
13:52:07.0673 0x0f98 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
13:52:07.0733 0x0f98 iphlpsvc - ok
13:52:07.0753 0x0f98 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
13:52:07.0793 0x0f98 IPMIDRV - ok
13:52:07.0823 0x0f98 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
13:52:07.0913 0x0f98 IPNAT - ok
13:52:07.0943 0x0f98 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
13:52:08.0013 0x0f98 IRENUM - ok
13:52:08.0033 0x0f98 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
13:52:08.0053 0x0f98 isapnp - ok
13:52:08.0083 0x0f98 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
13:52:08.0113 0x0f98 iScsiPrt - ok
13:52:08.0133 0x0f98 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
13:52:08.0153 0x0f98 kbdclass - ok
13:52:08.0183 0x0f98 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
13:52:08.0243 0x0f98 kbdhid - ok
13:52:08.0303 0x0f98 [ E63EF8C3271D014F14E2469CE75FECB4, 3A8DFA4B446AFDC35F01FD5218D0BEBC510A1E3DE9976210F00D19767D0F9069 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys
13:52:08.0333 0x0f98 kbfiltr - ok
13:52:08.0353 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] KeyIso C:\Windows\system32\lsass.exe
13:52:08.0383 0x0f98 KeyIso - ok
13:52:08.0413 0x0f98 [ C60C6B9A2E50B0404F6789C62B428C03, 0DFFAACBA038FB3D994049E7BBC8E0C63CB8B4A68C4AB770AD995B66B017C25B ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
13:52:08.0443 0x0f98 KSecDD - ok
13:52:08.0463 0x0f98 [ 78D152A9FD5747FF6AA89C79F0346F62, 69138077E84E5324751E3C8B80D05BE58EDF03CEC84F69B734537F10F6998F3B ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
13:52:08.0493 0x0f98 KSecPkg - ok
13:52:08.0523 0x0f98 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
13:52:08.0573 0x0f98 ksthunk - ok
13:52:08.0613 0x0f98 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
13:52:08.0653 0x0f98 KtmRm - ok
13:52:08.0683 0x0f98 [ 033B4AED2C5519072C0D81E00804D003, 6C450A604C382416C482FED43098B4E95BD61B480B0CEFD728A269446AF18708 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys
13:52:08.0693 0x0f98 L1C - ok
13:52:08.0733 0x0f98 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
13:52:08.0783 0x0f98 LanmanServer - ok
13:52:08.0803 0x0f98 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:52:08.0843 0x0f98 LanmanWorkstation - ok
13:52:08.0963 0x0f98 [ D186AAAE72691136BDE00BBB41F48D12, C64885A726C0642C92BC4993667696DFEC8D284C20872D58E49786EE280A01ED ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
13:52:09.0003 0x0f98 LBTServ - ok
13:52:09.0043 0x0f98 [ 77D5786C6A7765503884E38706C9FD5E, 827DC2069AA0997DB87E118AAAA53575D97A89147C1451464986F8D68A329D41 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
13:52:09.0053 0x0f98 LHidFilt - ok
13:52:09.0083 0x0f98 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
13:52:09.0163 0x0f98 lltdio - ok
13:52:09.0213 0x0f98 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
13:52:09.0293 0x0f98 lltdsvc - ok
13:52:09.0313 0x0f98 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
13:52:09.0343 0x0f98 lmhosts - ok
13:52:09.0373 0x0f98 [ F84023FB2E3DEA06103501974A2EDB44, 38144EB7DE7F0B33F9C3E637715834CD0860CCE11915C77065000949767D98DF ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
13:52:09.0413 0x0f98 LMouFilt - ok
13:52:09.0483 0x0f98 [ 98B16E756243BEA9410E32025B19C06F, C4F8663FF4C2F1123CC92D88004090AD06ED12FCD07706AE168333A33B269A53 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
13:52:09.0553 0x0f98 LMS - ok
13:52:09.0583 0x0f98 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
13:52:09.0613 0x0f98 LSI_FC - ok
13:52:09.0623 0x0f98 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
13:52:09.0643 0x0f98 LSI_SAS - ok
13:52:09.0663 0x0f98 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
13:52:09.0673 0x0f98 LSI_SAS2 - ok
13:52:09.0693 0x0f98 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
13:52:09.0713 0x0f98 LSI_SCSI - ok
13:52:09.0723 0x0f98 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
13:52:09.0773 0x0f98 luafv - ok
13:52:09.0793 0x0f98 [ 97355D9AAC9EC42A7DFC9664F81FC699, B96E483271F326135F2CB7797A7EEFFCA275761FE75134849DCAA812E26523B8 ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
13:52:09.0813 0x0f98 LUsbFilt - ok
13:52:09.0833 0x0f98 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
13:52:09.0853 0x0f98 Mcx2Svc - ok
13:52:09.0873 0x0f98 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
13:52:09.0883 0x0f98 megasas - ok
13:52:09.0913 0x0f98 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
13:52:09.0933 0x0f98 MegaSR - ok
13:52:09.0983 0x0f98 [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
13:52:10.0013 0x0f98 MEIx64 - ok
13:52:10.0033 0x0f98 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
13:52:10.0083 0x0f98 MMCSS - ok
13:52:10.0093 0x0f98 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
13:52:10.0123 0x0f98 Modem - ok
13:52:10.0153 0x0f98 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
13:52:10.0213 0x0f98 monitor - ok
13:52:10.0243 0x0f98 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
13:52:10.0263 0x0f98 mouclass - ok
13:52:10.0283 0x0f98 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
13:52:10.0323 0x0f98 mouhid - ok
13:52:10.0353 0x0f98 [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
13:52:10.0383 0x0f98 mountmgr - ok
13:52:10.0453 0x0f98 [ 707E98CC15C2224C078C9E71FF1889BC, 958416FE081436FDBF7F2BEBBB2795C54CC4F3F349D6DF463296A7BBA3404F13 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
13:52:10.0513 0x0f98 MozillaMaintenance - ok
13:52:10.0533 0x0f98 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
13:52:10.0563 0x0f98 mpio - ok
13:52:10.0583 0x0f98 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
13:52:10.0623 0x0f98 mpsdrv - ok
13:52:10.0723 0x0f98 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
13:52:10.0783 0x0f98 MpsSvc - ok
13:52:10.0863 0x0f98 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
13:52:10.0953 0x0f98 MRxDAV - ok
13:52:11.0013 0x0f98 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
13:52:11.0093 0x0f98 mrxsmb - ok
13:52:11.0153 0x0f98 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:52:11.0193 0x0f98 mrxsmb10 - ok
13:52:11.0213 0x0f98 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:52:11.0243 0x0f98 mrxsmb20 - ok
13:52:11.0273 0x0f98 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
13:52:11.0303 0x0f98 msahci - ok
13:52:11.0333 0x0f98 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
13:52:11.0363 0x0f98 msdsm - ok
13:52:11.0383 0x0f98 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
13:52:11.0413 0x0f98 MSDTC - ok
13:52:11.0433 0x0f98 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
13:52:11.0473 0x0f98 Msfs - ok
13:52:11.0483 0x0f98 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
13:52:11.0523 0x0f98 mshidkmdf - ok
13:52:11.0543 0x0f98 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
13:52:11.0553 0x0f98 msisadrv - ok
13:52:11.0593 0x0f98 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
13:52:11.0643 0x0f98 MSiSCSI - ok
13:52:11.0653 0x0f98 msiserver - ok
13:52:11.0673 0x0f98 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
13:52:11.0723 0x0f98 MSKSSRV - ok
13:52:11.0723 0x0f98 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
13:52:11.0763 0x0f98 MSPCLOCK - ok
13:52:11.0793 0x0f98 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
13:52:11.0853 0x0f98 MSPQM - ok
13:52:11.0893 0x0f98 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
13:52:11.0913 0x0f98 MsRPC - ok
13:52:11.0923 0x0f98 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
13:52:11.0933 0x0f98 mssmbios - ok
13:52:11.0943 0x0f98 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
13:52:11.0983 0x0f98 MSTEE - ok
13:52:11.0983 0x0f98 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
13:52:12.0003 0x0f98 MTConfig - ok
13:52:12.0013 0x0f98 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
13:52:12.0033 0x0f98 Mup - ok
13:52:12.0073 0x0f98 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
13:52:12.0133 0x0f98 napagent - ok
13:52:12.0203 0x0f98 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
13:52:12.0283 0x0f98 NativeWifiP - ok
13:52:12.0413 0x0f98 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
13:52:12.0433 0x0f98 NDIS - ok
13:52:12.0493 0x0f98 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
13:52:12.0593 0x0f98 NdisCap - ok
13:52:12.0623 0x0f98 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
13:52:12.0673 0x0f98 NdisTapi - ok
13:52:12.0693 0x0f98 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
13:52:12.0763 0x0f98 Ndisuio - ok
13:52:12.0783 0x0f98 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
13:52:12.0833 0x0f98 NdisWan - ok
13:52:12.0873 0x0f98 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
13:52:12.0933 0x0f98 NDProxy - ok
13:52:13.0003 0x0f98 [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
13:52:13.0033 0x0f98 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
13:52:15.0413 0x0f98 Detect skipped due to KSN trusted
13:52:15.0413 0x0f98 Net Driver HPZ12 - ok
13:52:15.0443 0x0f98 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
13:52:15.0533 0x0f98 NetBIOS - ok
13:52:15.0563 0x0f98 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
13:52:15.0613 0x0f98 NetBT - ok
13:52:15.0643 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] Netlogon C:\Windows\system32\lsass.exe
13:52:15.0653 0x0f98 Netlogon - ok
13:52:15.0713 0x0f98 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
13:52:15.0753 0x0f98 Netman - ok
13:52:15.0863 0x0f98 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:15.0903 0x0f98 NetMsmqActivator - ok
13:52:15.0933 0x0f98 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:15.0963 0x0f98 NetPipeActivator - ok
13:52:16.0073 0x0f98 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
13:52:16.0133 0x0f98 netprofm - ok
13:52:16.0133 0x0f98 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:16.0153 0x0f98 NetTcpActivator - ok
13:52:16.0153 0x0f98 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:16.0163 0x0f98 NetTcpPortSharing - ok
13:52:16.0203 0x0f98 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
13:52:16.0223 0x0f98 nfrd960 - ok
13:52:16.0263 0x0f98 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
13:52:16.0293 0x0f98 NlaSvc - ok
13:52:16.0343 0x0f98 [ 4B300DC9B143C99674B6ECD917384155, 74E9DFD1A589B31D62E263930993C0682BB2A74E89ACFF8FAC75E6B71D9A892A ] nmwcdcx64 C:\Windows\system32\drivers\ccdcmbox64.sys
13:52:16.0413 0x0f98 nmwcdcx64 - ok
13:52:16.0443 0x0f98 [ DD1D06C2A7E048766482256AB8C755CF, 66494042C114F1795D4190654A07E418240D34C4B3241F6ADACA84823290F263 ] nmwcdx64 C:\Windows\system32\drivers\ccdcmbx64.sys
13:52:16.0503 0x0f98 nmwcdx64 - ok
13:52:16.0513 0x0f98 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
13:52:16.0553 0x0f98 Npfs - ok
13:52:16.0613 0x0f98 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
13:52:16.0673 0x0f98 nsi - ok
13:52:16.0693 0x0f98 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
13:52:16.0723 0x0f98 nsiproxy - ok
13:52:16.0863 0x0f98 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
13:52:17.0033 0x0f98 Ntfs - ok
13:52:17.0053 0x0f98 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
13:52:17.0113 0x0f98 Null - ok
13:52:17.0153 0x0f98 [ 0EBC9D13CD96C15B1B18D8678A609E4B, B10896DE16B0C102DFB3E73A6C11A1982C5B428015DAE1F8776BCEF94A0F75C6 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
13:52:17.0213 0x0f98 nusb3hub - ok
13:52:17.0273 0x0f98 [ 7BDEC000D56D485021D9C1E63C2F81CA, 7F1303FD0371AF8715BFC38433B730C797170AEF10C7DB845B7B547DA8DBB5D5 ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
13:52:17.0343 0x0f98 nusb3xhc - ok
13:52:17.0403 0x0f98 [ F2662FDC20518EE8A8EED4F61BA42349, 4E8810345AA7D878DC21AE0A2E6ED201FC90EE112D6D13961A8D697A98716B3F ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
13:52:17.0453 0x0f98 NVHDA - ok
13:52:17.0963 0x0f98 [ 7AF12D21E89C7A09579398B9F3666530, DF10763830479D742A86A42ACC4868687303BF58CFD1091A13939A8816B132EA ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
13:52:18.0243 0x0f98 nvlddmkm - ok
13:52:18.0293 0x0f98 [ 724B17D3C9DE2F2DC47C46744D77FC9E, E6B09D1651CDFA1719E25770EFF921B28BF87769B5E2DBABE5C168001F2902CC ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
13:52:18.0303 0x0f98 nvpciflt - ok
13:52:18.0333 0x0f98 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
13:52:18.0353 0x0f98 nvraid - ok
13:52:18.0403 0x0f98 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
13:52:18.0443 0x0f98 nvstor - ok
13:52:18.0623 0x0f98 [ 73F0C1D4671DF00FA0CC86107A2CD4FF, E24449B99EECD73C4AD26EE410E25036957AFE5CCACBEA98DE4A0DBDEDAEAAF4 ] NVSvc C:\Windows\system32\nvvsvc.exe
13:52:18.0683 0x0f98 NVSvc - ok
13:52:18.0833 0x0f98 [ E9B95BB82E5E12EE31AFE275CE4A35F9, 5255D35070A06182C1F77B4C67F3915BCB605560FD2F2E42EF786288605854B7 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
13:52:18.0963 0x0f98 nvUpdatusService - ok
13:52:18.0993 0x0f98 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
13:52:19.0013 0x0f98 nv_agp - ok
13:52:19.0153 0x0f98 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
13:52:19.0213 0x0f98 odserv - ok
13:52:19.0223 0x0f98 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
13:52:19.0243 0x0f98 ohci1394 - ok
13:52:19.0273 0x0f98 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:52:19.0313 0x0f98 ose - ok
13:52:19.0373 0x0f98 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
13:52:19.0403 0x0f98 p2pimsvc - ok
13:52:19.0433 0x0f98 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
13:52:19.0473 0x0f98 p2psvc - ok
13:52:19.0503 0x0f98 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys
13:52:19.0533 0x0f98 Parport - ok
13:52:19.0553 0x0f98 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
13:52:19.0573 0x0f98 partmgr - ok
13:52:19.0583 0x0f98 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
13:52:19.0613 0x0f98 PcaSvc - ok
13:52:19.0663 0x0f98 [ BC0018C2D29F655188A0ED3FA94FDB24, BCF7F2CA5E30F569AEB69049BA3C196982C72EA7264CFBA59D7123041BA96E5A ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
13:52:19.0703 0x0f98 pccsmcfd - ok
13:52:19.0753 0x0f98 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
13:52:19.0773 0x0f98 pci - ok
13:52:19.0793 0x0f98 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
13:52:19.0803 0x0f98 pciide - ok
13:52:19.0813 0x0f98 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
13:52:19.0833 0x0f98 pcmcia - ok
13:52:19.0843 0x0f98 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
13:52:19.0863 0x0f98 pcw - ok
13:52:19.0893 0x0f98 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
13:52:19.0953 0x0f98 PEAUTH - ok
13:52:20.0023 0x0f98 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
13:52:20.0083 0x0f98 PerfHost - ok
13:52:20.0173 0x0f98 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
13:52:20.0233 0x0f98 pla - ok
13:52:20.0333 0x0f98 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
13:52:20.0363 0x0f98 PlugPlay - ok
13:52:20.0433 0x0f98 [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
13:52:20.0473 0x0f98 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
13:52:22.0953 0x0f98 Detect skipped due to KSN trusted
13:52:22.0953 0x0f98 Pml Driver HPZ12 - ok
13:52:22.0973 0x0f98 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
13:52:23.0023 0x0f98 PNRPAutoReg - ok
13:52:23.0043 0x0f98 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
13:52:23.0053 0x0f98 PNRPsvc - ok
13:52:23.0103 0x0f98 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
13:52:23.0153 0x0f98 PolicyAgent - ok
13:52:23.0184 0x0f98 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
13:52:23.0234 0x0f98 Power - ok
13:52:23.0284 0x0f98 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
13:52:23.0334 0x0f98 PptpMiniport - ok
13:52:23.0364 0x0f98 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
13:52:23.0404 0x0f98 Processor - ok
13:52:23.0474 0x0f98 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
13:52:23.0514 0x0f98 ProfSvc - ok
13:52:23.0524 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] ProtectedStorage C:\Windows\system32\lsass.exe
13:52:23.0534 0x0f98 ProtectedStorage - ok
13:52:23.0554 0x0f98 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
13:52:23.0584 0x0f98 Psched - ok
13:52:23.0644 0x0f98 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
13:52:23.0724 0x0f98 ql2300 - ok
13:52:23.0754 0x0f98 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
13:52:23.0774 0x0f98 ql40xx - ok
13:52:23.0824 0x0f98 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
13:52:23.0854 0x0f98 QWAVE - ok
13:52:23.0864 0x0f98 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
13:52:23.0884 0x0f98 QWAVEdrv - ok
13:52:23.0894 0x0f98 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
13:52:23.0934 0x0f98 RasAcd - ok
13:52:23.0964 0x0f98 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
13:52:24.0024 0x0f98 RasAgileVpn - ok
13:52:24.0034 0x0f98 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
13:52:24.0074 0x0f98 RasAuto - ok
13:52:24.0084 0x0f98 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
13:52:24.0134 0x0f98 Rasl2tp - ok
13:52:24.0164 0x0f98 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
13:52:24.0214 0x0f98 RasMan - ok
13:52:24.0234 0x0f98 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
13:52:24.0284 0x0f98 RasPppoe - ok
13:52:24.0304 0x0f98 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
13:52:24.0354 0x0f98 RasSstp - ok
13:52:24.0374 0x0f98 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
13:52:24.0414 0x0f98 rdbss - ok
13:52:24.0464 0x0f98 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
13:52:24.0504 0x0f98 rdpbus - ok
13:52:24.0534 0x0f98 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
13:52:24.0584 0x0f98 RDPCDD - ok
13:52:24.0614 0x0f98 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
13:52:24.0654 0x0f98 RDPENCDD - ok
13:52:24.0674 0x0f98 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
13:52:24.0704 0x0f98 RDPREFMP - ok
13:52:24.0764 0x0f98 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
13:52:24.0804 0x0f98 RDPWD - ok
13:52:24.0844 0x0f98 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
13:52:24.0864 0x0f98 rdyboost - ok
13:52:24.0904 0x0f98 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
13:52:24.0964 0x0f98 RemoteAccess - ok
13:52:24.0994 0x0f98 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
13:52:25.0044 0x0f98 RemoteRegistry - ok
13:52:25.0084 0x0f98 [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
13:52:25.0124 0x0f98 RFCOMM - ok
13:52:25.0144 0x0f98 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
13:52:25.0194 0x0f98 RpcEptMapper - ok
13:52:25.0224 0x0f98 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
13:52:25.0254 0x0f98 RpcLocator - ok
13:52:25.0274 0x0f98 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
13:52:25.0314 0x0f98 RpcSs - ok
13:52:25.0354 0x0f98 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
13:52:25.0384 0x0f98 rspndr - ok
13:52:25.0454 0x0f98 [ E54A5586A28D0630A79A68BBAB84BFCF, F6FBF1E4C64351CEB205DDCD17C35EA26439E98F3528F96AE326959A7C26B488 ] RSUSBVSTOR C:\Windows\system32\Drivers\RtsUVStor.sys
13:52:25.0474 0x0f98 RSUSBVSTOR - ok
13:52:25.0564 0x0f98 [ ED5873F7DFB2F96D37F13322211B6BDC, 26CAE8FD1CFDB568D6A881CDE973F9929013EB0403347E5D19CABAA215012381 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
13:52:25.0584 0x0f98 RTL8167 - ok
13:52:25.0604 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] SamSs C:\Windows\system32\lsass.exe
13:52:25.0604 0x0f98 SamSs - ok
13:52:25.0634 0x0f98 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
13:52:25.0654 0x0f98 sbp2port - ok
13:52:25.0694 0x0f98 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
13:52:25.0734 0x0f98 SCardSvr - ok
13:52:25.0754 0x0f98 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
13:52:25.0794 0x0f98 scfilter - ok
13:52:25.0894 0x0f98 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
13:52:25.0974 0x0f98 Schedule - ok
13:52:26.0014 0x0f98 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
13:52:26.0034 0x0f98 SCPolicySvc - ok
13:52:26.0074 0x0f98 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
13:52:26.0094 0x0f98 SDRSVC - ok
13:52:26.0234 0x0f98 [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
13:52:26.0284 0x0f98 SDScannerService - ok
13:52:26.0354 0x0f98 [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
13:52:26.0404 0x0f98 SDUpdateService - ok
13:52:26.0444 0x0f98 [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
13:52:26.0454 0x0f98 SDWSCService - ok
13:52:26.0584 0x0f98 [ 4A5809A1D796E2675AC0332BF7B0CB11, 7EEEC85A397F04A9460DC37A070D115E19114D9A3E5D9D7E8021F60A7986C8C1 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
13:52:26.0614 0x0f98 SeaPort - ok
13:52:26.0674 0x0f98 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
13:52:26.0754 0x0f98 secdrv - ok
13:52:26.0784 0x0f98 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
13:52:26.0814 0x0f98 seclogon - ok
13:52:26.0834 0x0f98 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
13:52:26.0874 0x0f98 SENS - ok
13:52:26.0914 0x0f98 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
13:52:26.0944 0x0f98 SensrSvc - ok
13:52:27.0004 0x0f98 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\drivers\serenum.sys
13:52:27.0034 0x0f98 Serenum - ok
13:52:27.0044 0x0f98 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\drivers\serial.sys
13:52:27.0064 0x0f98 Serial - ok
13:52:27.0104 0x0f98 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
13:52:27.0124 0x0f98 sermouse - ok
13:52:27.0244 0x0f98 [ 8988D1F32F56B3CD3F0F6C39F8A91A98, FCFA23245AE9AA7EAFE13DD59C123CFC97A5061480831F13A0F6323341927D99 ] ServiceLayer C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
13:52:27.0334 0x0f98 ServiceLayer - detected UnsignedFile.Multi.Generic ( 1 )
13:52:29.0734 0x0f98 Detect skipped due to KSN trusted
13:52:29.0734 0x0f98 ServiceLayer - ok
13:52:29.0764 0x0f98 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
13:52:29.0814 0x0f98 SessionEnv - ok
13:52:29.0844 0x0f98 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
13:52:29.0864 0x0f98 sffdisk - ok
13:52:29.0874 0x0f98 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
13:52:29.0924 0x0f98 sffp_mmc - ok
13:52:29.0944 0x0f98 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
13:52:29.0984 0x0f98 sffp_sd - ok
13:52:29.0994 0x0f98 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
13:52:30.0024 0x0f98 sfloppy - ok
13:52:30.0104 0x0f98 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
13:52:30.0244 0x0f98 SharedAccess - ok
13:52:30.0294 0x0f98 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:52:30.0354 0x0f98 ShellHWDetection - ok
13:52:30.0384 0x0f98 [ 1BC348CF6BAA90EC8E533EF6E6A69933, 2B26F6EB701F48E092DED6A7B888F24736F2899EE81D54DD4B1E9DF7CFD36E7A ] SiSGbeLH C:\Windows\system32\DRIVERS\SiSG664.sys
13:52:30.0444 0x0f98 SiSGbeLH - ok
13:52:30.0484 0x0f98 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
13:52:30.0524 0x0f98 SiSRaid2 - ok
13:52:30.0544 0x0f98 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
13:52:30.0574 0x0f98 SiSRaid4 - ok
13:52:30.0654 0x0f98 [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
13:52:30.0744 0x0f98 SkypeUpdate - ok
13:52:30.0774 0x0f98 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
13:52:30.0804 0x0f98 Smb - ok
13:52:30.0844 0x0f98 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
13:52:30.0884 0x0f98 SNMPTRAP - ok
13:52:30.0894 0x0f98 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
13:52:30.0914 0x0f98 spldr - ok
13:52:30.0944 0x0f98 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
13:52:30.0964 0x0f98 Spooler - ok
13:52:31.0074 0x0f98 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
13:52:31.0184 0x0f98 sppsvc - ok
13:52:31.0224 0x0f98 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
13:52:31.0304 0x0f98 sppuinotify - ok
13:52:31.0374 0x0f98 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
13:52:31.0464 0x0f98 srv - ok
13:52:31.0524 0x0f98 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
13:52:31.0574 0x0f98 srv2 - ok
13:52:31.0714 0x0f98 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
13:52:31.0774 0x0f98 srvnet - ok
13:52:31.0804 0x0f98 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
13:52:31.0894 0x0f98 SSDPSRV - ok
13:52:31.0914 0x0f98 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
13:52:31.0974 0x0f98 SstpSvc - ok
13:52:32.0074 0x0f98 [ A08F74F7AC9DA6A184B34DC3EAE9DFF9, F8082A39188A88C113A8108B05040A05DAAAE827B8785C5F478F481C2A85EFE3 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
13:52:32.0104 0x0f98 Stereo Service - ok
13:52:32.0124 0x0f98 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
13:52:32.0144 0x0f98 stexstor - ok
13:52:32.0184 0x0f98 [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
13:52:32.0214 0x0f98 StillCam - ok
13:52:32.0284 0x0f98 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
13:52:32.0454 0x0f98 stisvc - ok
13:52:32.0484 0x0f98 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
13:52:32.0494 0x0f98 swenum - ok
13:52:32.0544 0x0f98 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
13:52:32.0594 0x0f98 swprv - ok
13:52:32.0694 0x0f98 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
13:52:32.0774 0x0f98 SysMain - ok
13:52:32.0794 0x0f98 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
13:52:32.0824 0x0f98 TabletInputService - ok
13:52:32.0854 0x0f98 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
13:52:32.0914 0x0f98 TapiSrv - ok
13:52:32.0944 0x0f98 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
13:52:32.0974 0x0f98 TBS - ok
13:52:33.0034 0x0f98 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
13:52:33.0094 0x0f98 Tcpip - ok
13:52:33.0254 0x0f98 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
13:52:33.0304 0x0f98 TCPIP6 - ok
13:52:33.0334 0x0f98 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
13:52:33.0364 0x0f98 tcpipreg - ok
13:52:33.0384 0x0f98 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
13:52:33.0414 0x0f98 TDPIPE - ok
13:52:33.0444 0x0f98 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
13:52:33.0484 0x0f98 TDTCP - ok
13:52:33.0524 0x0f98 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys
13:52:33.0594 0x0f98 tdx - ok
13:52:33.0634 0x0f98 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
13:52:33.0644 0x0f98 TermDD - ok
13:52:33.0684 0x0f98 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
13:52:33.0714 0x0f98 TermService - ok
13:52:33.0734 0x0f98 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
13:52:33.0764 0x0f98 Themes - ok
13:52:33.0794 0x0f98 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
13:52:33.0824 0x0f98 THREADORDER - ok
13:52:33.0844 0x0f98 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
13:52:33.0884 0x0f98 TrkWks - ok
13:52:33.0954 0x0f98 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:52:33.0984 0x0f98 TrustedInstaller - ok
13:52:34.0014 0x0f98 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
13:52:34.0024 0x0f98 tssecsrv - ok
13:52:34.0084 0x0f98 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
13:52:34.0114 0x0f98 TsUsbFlt - ok
13:52:34.0134 0x0f98 [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
13:52:34.0154 0x0f98 TsUsbGD - ok
13:52:34.0184 0x0f98 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
13:52:34.0264 0x0f98 tunnel - ok
13:52:34.0324 0x0f98 [ FD24F98D2898BE093FE926604BE7DB99, F9851C57A2ED838AC76BB19FE2F62BB81C57DBBE2A2555F738B5D6725D39AD61 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys
13:52:34.0354 0x0f98 TurboB - ok
13:52:34.0444 0x0f98 [ 600B406A04D90F577FEA8A88D7379F08, 77CC8E8AFB6F571A42D916C0B2FEFFD3A7A32A455C78228B407C6C9B6DED8CAD ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
13:52:34.0484 0x0f98 TurboBoost - ok
13:52:34.0534 0x0f98 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
13:52:34.0574 0x0f98 uagp35 - ok
13:52:34.0634 0x0f98 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
13:52:34.0724 0x0f98 udfs - ok
13:52:34.0754 0x0f98 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
13:52:34.0794 0x0f98 UI0Detect - ok
13:52:34.0814 0x0f98 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
13:52:34.0854 0x0f98 uliagpkx - ok
13:52:34.0914 0x0f98 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
13:52:34.0944 0x0f98 umbus - ok
13:52:34.0974 0x0f98 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
13:52:35.0014 0x0f98 UmPass - ok
13:52:35.0644 0x0f98 [ 7A78ED1088890114DFDE2C4AB038D6B6, B52357594A90A8BCF5F96FA630F52BB1274A2FE814AF0270D21C892871D076FC ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
13:52:35.0884 0x0f98 UNS - ok
13:52:35.0944 0x0f98 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
13:52:35.0994 0x0f98 upnphost - ok
13:52:36.0044 0x0f98 [ 69405C5429EF448B319F08042B897FC6, 5AF83C4EAB2C698F4BE18DC355A0F3B3D21C5159C3099780B00A3649238B6115 ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
13:52:36.0064 0x0f98 upperdev - ok
13:52:36.0104 0x0f98 [ 9494736E4865F9B3A0A525EE9AB0D991, BDD7973C2105B97B28C73492861D77288D8B4B715856DFF246AF9DB2415B4B41 ] USB28xxBGA C:\Windows\system32\DRIVERS\emBDA64.sys
13:52:36.0144 0x0f98 USB28xxBGA - ok
13:52:36.0184 0x0f98 [ 612FC1CB117CCF62D3C55488C8AEBD82, D26E702939758471A0E168C815B07D5AF043565ADB45AD0D4DB0C0179205B9E4 ] USB28xxOEM C:\Windows\system32\DRIVERS\emOEM64.sys
13:52:36.0274 0x0f98 USB28xxOEM - ok
13:52:36.0324 0x0f98 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
13:52:36.0374 0x0f98 usbaudio - ok
13:52:36.0404 0x0f98 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
13:52:36.0414 0x0f98 usbccgp - ok
13:52:36.0464 0x0f98 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
13:52:36.0504 0x0f98 usbcir - ok
13:52:36.0524 0x0f98 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\drivers\usbehci.sys
13:52:36.0534 0x0f98 usbehci - ok
13:52:36.0584 0x0f98 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
13:52:36.0624 0x0f98 usbhub - ok
13:52:36.0644 0x0f98 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys
13:52:36.0674 0x0f98 usbohci - ok
13:52:36.0704 0x0f98 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
13:52:36.0734 0x0f98 usbprint - ok
13:52:36.0784 0x0f98 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
13:52:36.0804 0x0f98 usbscan - ok
13:52:36.0824 0x0f98 [ B57B4F0BEC4270A281B9F8537EB2FA04, 554273482EE85F010DC62E412C9933E65BD63AA09911BD25D86F86D2618EF382 ] usbser C:\Windows\system32\DRIVERS\usbser.sys
13:52:36.0854 0x0f98 usbser - ok
13:52:36.0914 0x0f98 [ 0305D5F7D5751D0AE763250EB78DC5D7, 6F17879B528FC74626F9F9356D36453B935196834919BC0D2612C096EF2ADB74 ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys
13:52:36.0934 0x0f98 UsbserFilt - ok
13:52:36.0964 0x0f98 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
13:52:36.0984 0x0f98 USBSTOR - ok
13:52:37.0004 0x0f98 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
13:52:37.0044 0x0f98 usbuhci - ok
13:52:37.0094 0x0f98 [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
13:52:37.0114 0x0f98 usbvideo - ok
13:52:37.0184 0x0f98 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
13:52:37.0204 0x0f98 UxSms - ok
13:52:37.0224 0x0f98 [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] VaultSvc C:\Windows\system32\lsass.exe
13:52:37.0234 0x0f98 VaultSvc - ok
13:52:37.0274 0x0f98 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
13:52:37.0284 0x0f98 vdrvroot - ok
13:52:37.0314 0x0f98 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
13:52:37.0374 0x0f98 vds - ok
13:52:37.0424 0x0f98 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
13:52:37.0494 0x0f98 vga - ok
13:52:37.0504 0x0f98 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
13:52:37.0544 0x0f98 VgaSave - ok
13:52:37.0604 0x0f98 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
13:52:37.0624 0x0f98 vhdmp - ok
13:52:37.0644 0x0f98 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
13:52:37.0654 0x0f98 viaide - ok
13:52:37.0684 0x0f98 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
13:52:37.0694 0x0f98 volmgr - ok
13:52:37.0744 0x0f98 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
13:52:37.0764 0x0f98 volmgrx - ok
13:52:37.0774 0x0f98 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
13:52:37.0794 0x0f98 volsnap - ok
13:52:37.0834 0x0f98 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
13:52:37.0844 0x0f98 vsmraid - ok
13:52:37.0914 0x0f98 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
13:52:38.0014 0x0f98 VSS - ok
13:52:38.0034 0x0f98 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
13:52:38.0044 0x0f98 vwifibus - ok
13:52:38.0054 0x0f98 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
13:52:38.0084 0x0f98 vwififlt - ok
13:52:38.0114 0x0f98 [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
13:52:38.0154 0x0f98 vwifimp - ok
13:52:38.0244 0x0f98 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
13:52:38.0334 0x0f98 W32Time - ok
13:52:38.0354 0x0f98 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
13:52:38.0374 0x0f98 WacomPen - ok
13:52:38.0404 0x0f98 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
13:52:38.0444 0x0f98 WANARP - ok
13:52:38.0464 0x0f98 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
13:52:38.0494 0x0f98 Wanarpv6 - ok
13:52:38.0634 0x0f98 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
13:52:38.0674 0x0f98 WatAdminSvc - ok
13:52:38.0964 0x0f98 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
13:52:39.0104 0x0f98 wbengine - ok
13:52:39.0144 0x0f98 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
13:52:39.0174 0x0f98 WbioSrvc - ok
13:52:39.0224 0x0f98 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
13:52:39.0254 0x0f98 wcncsvc - ok
13:52:39.0264 0x0f98 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
13:52:39.0294 0x0f98 WcsPlugInService - ok
13:52:39.0324 0x0f98 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
13:52:39.0334 0x0f98 Wd - ok
13:52:39.0374 0x0f98 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
13:52:39.0414 0x0f98 Wdf01000 - ok
13:52:39.0464 0x0f98 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
13:52:39.0514 0x0f98 WdiServiceHost - ok
13:52:39.0524 0x0f98 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll
13:52:39.0544 0x0f98 WdiSystemHost - ok
13:52:39.0614 0x0f98 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll
13:52:39.0654 0x0f98 WebClient - ok
13:52:39.0684 0x0f98 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
13:52:39.0724 0x0f98 Wecsvc - ok
13:52:39.0734 0x0f98 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
13:52:39.0774 0x0f98 wercplsupport - ok
13:52:39.0804 0x0f98 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
13:52:39.0834 0x0f98 WerSvc - ok
13:52:39.0864 0x0f98 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
13:52:39.0894 0x0f98 WfpLwf - ok
13:52:39.0954 0x0f98 [ 52DED146E4797E6CCF94799E8E22BB2A, 57A29260D81AA3AD3F8C29E9CFA7CE3970D7A8BF673ADD9B256EE76C7DEC080E ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
13:52:39.0994 0x0f98 WimFltr - ok
13:52:40.0024 0x0f98 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
13:52:40.0044 0x0f98 WIMMount - ok
13:52:40.0054 0x0f98 WinDefend - ok
13:52:40.0064 0x0f98 WinHttpAutoProxySvc - ok
13:52:40.0154 0x0f98 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
13:52:40.0224 0x0f98 Winmgmt - ok
13:52:40.0324 0x0f98 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
13:52:40.0404 0x0f98 WinRM - ok
13:52:40.0474 0x0f98 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
13:52:40.0504 0x0f98 WinUsb - ok
13:52:40.0634 0x0f98 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
13:52:40.0684 0x0f98 Wlansvc - ok
13:52:40.0754 0x0f98 [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
13:52:40.0794 0x0f98 wlcrasvc - ok
13:52:40.0984 0x0f98 [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
13:52:41.0064 0x0f98 wlidsvc - ok
13:52:41.0104 0x0f98 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
13:52:41.0114 0x0f98 WmiAcpi - ok
13:52:41.0144 0x0f98 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
13:52:41.0214 0x0f98 wmiApSrv - ok
13:52:41.0234 0x0f98 WMPNetworkSvc - ok
13:52:41.0264 0x0f98 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
13:52:41.0294 0x0f98 WPCSvc - ok
13:52:41.0324 0x0f98 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
13:52:41.0374 0x0f98 WPDBusEnum - ok
13:52:41.0394 0x0f98 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
13:52:41.0474 0x0f98 ws2ifsl - ok
13:52:41.0494 0x0f98 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
13:52:41.0534 0x0f98 wscsvc - ok
13:52:41.0594 0x0f98 [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
13:52:41.0694 0x0f98 WSDPrintDevice - ok
13:52:41.0694 0x0f98 WSearch - ok
13:52:41.0844 0x0f98 [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll
13:52:41.0944 0x0f98 wuauserv - ok
13:52:42.0004 0x0f98 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
13:52:42.0044 0x0f98 WudfPf - ok
13:52:42.0104 0x0f98 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
13:52:42.0164 0x0f98 WUDFRd - ok
13:52:42.0204 0x0f98 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
13:52:42.0214 0x0f98 wudfsvc - ok
13:52:42.0284 0x0f98 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
13:52:42.0324 0x0f98 WwanSvc - ok
13:52:42.0364 0x0f98 ================ Scan global ===============================
13:52:42.0394 0x0f98 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
13:52:42.0474 0x0f98 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
13:52:42.0494 0x0f98 [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
13:52:42.0514 0x0f98 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
13:52:42.0594 0x0f98 [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
13:52:42.0614 0x0f98 [ Global ] - ok
13:52:42.0614 0x0f98 ================ Scan MBR ==================================
13:52:42.0634 0x0f98 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:52:43.0304 0x0f98 \Device\Harddisk0\DR0 - ok
13:52:43.0304 0x0f98 ================ Scan VBR ==================================
13:52:43.0314 0x0f98 [ D500CD9C6507CD14283037CD412095C7 ] \Device\Harddisk0\DR0\Partition1
13:52:43.0314 0x0f98 \Device\Harddisk0\DR0\Partition1 - ok
13:52:43.0364 0x0f98 [ 75FA113FBA5A4CE45BAF872E97F05214 ] \Device\Harddisk0\DR0\Partition2
13:52:43.0374 0x0f98 \Device\Harddisk0\DR0\Partition2 - ok
13:52:43.0374 0x0f98 ================ Scan generic autorun ======================
13:52:43.0554 0x0f98 [ ACA27AC29ED33D5EE0E6A325C162B88F, 8D39BD1D73BB642A4404A32097621D3C6C8FA8272939089505C39FCD4A0207FD ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
13:52:43.0624 0x0f98 RtHDVBg - ok
13:52:43.0634 0x0f98 ETDCtrl - ok
13:52:43.0634 0x0f98 IntelTBRunOnce - ok
13:52:43.0814 0x0f98 [ 9401DC5119D4E64F91CDAD7124C0260A, B762AC2EDDCD159D63495FAFC2226189600243F72B1A968CF40527A0F343A682 ] C:\Program Files\Logitech\SetPointP\SetPoint.exe
13:52:43.0954 0x0f98 EvtMgr6 - ok
13:52:43.0994 0x0f98 [ 28062B17191C9450BF6C6C3EF8C7EB27, 4859C5708DFD119021F7B7FFB38F0B316675E1E4D5D51A10D4265F712CF8CDB6 ] C:\Windows\system32\igfxtray.exe
13:52:44.0004 0x0f98 IgfxTray - ok
13:52:44.0074 0x0f98 [ 28FC280487F0BAAE5E8119257C4EEF8C, F574BC70B79B77912FC683B3EB0BE6929E7758284ED5B47008E18B0E4A4A09FD ] C:\Windows\system32\hkcmd.exe
13:52:44.0104 0x0f98 HotKeysCmds - ok
13:52:44.0134 0x0f98 [ F29BEA821C753E4F00177690F70CDC13, 0EDB40F4A4C23553C0288E6E3AD65E7B523F6764C87C6C36C3ECB0C1940C5176 ] C:\Windows\system32\igfxpers.exe
13:52:44.0154 0x0f98 Persistence - ok
13:52:44.0224 0x0f98 [ 41D1214B86A06FD29423A797EBDA17E4, ABC79107DDD5890C54B844CD5C69747121083DA69A77C02068D2B9C349FB1614 ] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
13:52:44.0234 0x0f98 IAStorIcon - ok
13:52:44.0294 0x0f98 [ 9D51EA92A612B37E76E5E4621650C50A, 00BD61C8527A80C0F684882379A0AC2E5A54E8BBECC797087B960CDC8454C373 ] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
13:52:44.0314 0x0f98 NUSB3MON - ok
13:52:44.0534 0x0f98 [ 36E7CE6EA4C190AA88C25CDD3C89D84C, F5F927116329982712310295CBFB3B9EA228FF9A7054E6BCB395B37C45D8DEA8 ] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
13:52:44.0654 0x0f98 Wireless Console 3 - detected UnsignedFile.Multi.Generic ( 1 )
13:52:54.0654 0x0f98 Wireless Console 3 ( UnsignedFile.Multi.Generic ) - warning
13:52:58.0184 0x0f98 [ 5AA3EEE267C9784819C2153FFAF19B5A, 794F648C34CB8AD3B2ACDBCD194F53BCC4928016E37EE992FE8E721929EF1414 ] C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
13:52:58.0204 0x0f98 USBChargerPlusTray - ok
13:52:58.0324 0x0f98 [ 085F30DB0B38903940A4141E675BDC08, 3ABFB79C850D2B1976DB4DEF69AA031C4E18B5E240316908DDD16DEA4050365A ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
13:52:58.0354 0x0f98 avgnt - ok
13:52:58.0424 0x0f98 [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
13:52:58.0444 0x0f98 HP Software Update - ok
13:52:58.0534 0x0f98 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:58.0664 0x0f98 Sidebar - ok
13:52:58.0694 0x0f98 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:58.0724 0x0f98 mctadmin - ok
13:52:58.0764 0x0f98 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:58.0794 0x0f98 Sidebar - ok
13:52:58.0804 0x0f98 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:58.0814 0x0f98 mctadmin - ok
13:52:58.0854 0x0f98 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:58.0884 0x0f98 Sidebar - ok
13:52:58.0954 0x0f98 [ 6BF7676296D5359AFC135A5397000053, D31B9BCB856D6EFDEA27E4D4D341FF939BCBF0E8C97786B447C2074B3C68298E ] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
13:52:59.0004 0x0f98 ISUSPM - ok
13:52:59.0014 0x0f98 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:59.0044 0x0f98 mctadmin - ok
13:52:59.0084 0x0f98 [ B22CB67919EBAD88B0E8BB9CDA446010, 2F744FEAC48EDE7D6B6D2727F7DDFA80B26D9E3B0009741B00992B19AD85E128 ] C:\Windows\System32\StikyNot.exe
13:52:59.0104 0x0f98 RESTART_STICKY_NOTES - ok
13:52:59.0114 0x0f98 Waiting for KSN requests completion. In queue: 11
13:53:00.0115 0x0f98 Waiting for KSN requests completion. In queue: 11
13:53:01.0115 0x0f98 Waiting for KSN requests completion. In queue: 11
13:53:02.0205 0x0f98 AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.8.650 ), 0x41000 ( enabled : updated )
13:53:02.0245 0x0f98 Win FW state via NFP2: enabled
13:53:04.0665 0x0f98 ============================================================
13:53:04.0665 0x0f98 Scan finished
13:53:04.0665 0x0f98 ============================================================
13:53:04.0675 0x1340 Detected object count: 2
13:53:04.0675 0x1340 Actual detected object count: 2
13:54:08.0845 0x1340 HostService ( UnsignedFile.Multi.Generic ) - skipped by user
13:54:08.0845 0x1340 HostService ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:54:08.0845 0x1340 Wireless Console 3 ( UnsignedFile.Multi.Generic ) - skipped by user
13:54:08.0845 0x1340 Wireless Console 3 ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:55:00.0965 0x161c Deinitialize success
Code:
ATTFilter 13:46:23.0659 0x0510 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
13:47:51.0959 0x0510 ============================================================
13:47:51.0959 0x0510 Current date / time: 2015/03/06 13:47:51.0959
13:47:51.0959 0x0510 SystemInfo:
13:47:51.0959 0x0510
13:47:51.0959 0x0510 OS Version: 6.1.7601 ServicePack: 1.0
13:47:51.0959 0x0510 Product type: Workstation
13:47:51.0960 0x0510 ComputerName: BENE-PC
13:47:51.0960 0x0510 UserName: Bene
13:47:51.0960 0x0510 Windows directory: C:\Windows
13:47:51.0960 0x0510 System windows directory: C:\Windows
13:47:51.0960 0x0510 Running under WOW64
13:47:51.0960 0x0510 Processor architecture: Intel x64
13:47:51.0960 0x0510 Number of processors: 8
13:47:51.0960 0x0510 Page size: 0x1000
13:47:51.0960 0x0510 Boot type: Normal boot
13:47:51.0960 0x0510 ============================================================
13:47:56.0393 0x0510 KLMD registered as C:\Windows\system32\drivers\61311849.sys
13:47:56.0952 0x0510 System UUID: {3664B65E-E74E-9F9D-8E26-1E70D795A60A}
13:47:57.0551 0x0510 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 ( 698.64 Gb ), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:47:57.0560 0x0510 ============================================================
13:47:57.0560 0x0510 \Device\Harddisk0\DR0:
13:47:57.0562 0x0510 MBR partitions:
13:47:57.0562 0x0510 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3200800, BlocksNum 0x258D4000
13:47:57.0562 0x0510 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x28AD4800, BlocksNum 0x2EA71800
13:47:57.0562 0x0510 ============================================================
13:47:57.0730 0x0510 C: <-> \Device\Harddisk0\DR0\Partition1
13:47:57.0884 0x0510 D: <-> \Device\Harddisk0\DR0\Partition2
13:47:57.0884 0x0510 ============================================================
13:47:57.0885 0x0510 Initialize success
13:47:57.0885 0x0510 ============================================================
13:49:18.0043 0x01d0 Deinitialize success
|
|
06.03.2015, 14:44
| #2 |
| | Windows 7: Verdächtiger Link in E-Mail angeklickt - Spybot Warnung Hier der zweite Teil.
__________________mbar.exe hat nichts gefunden, Logfile: Code:
ATTFilter ---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
(c) Malwarebytes Corporation 2011-2012
OS version: 6.1.7601 Windows 7 Service Pack 1 x64
Account is Administrative
Internet Explorer version: 11.0.9600.17633
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.195000 GHz
Memory total: 8494485504, free: 5865172992
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
(c) Malwarebytes Corporation 2011-2012
OS version: 6.1.7601 Windows 7 Service Pack 1 x64
Account is Administrative
Internet Explorer version: 11.0.9600.17633
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.195000 GHz
Memory total: 8494485504, free: 5913341952
Downloaded database version: v2015.03.06.03
Downloaded database version: v2015.02.25.01
Downloaded database version: v2014.12.06.01
=======================================
Initializing...
------------ Kernel report ------------
03/06/2015 14:04:44
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\compbatt.sys
\SystemRoot\system32\drivers\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\iaStor.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\system32\DRIVERS\nvpciflt.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\avkmgr.sys
\SystemRoot\system32\DRIVERS\avipbb.sys
\??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\Drivers\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\igdkmd64.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\DRIVERS\AiCharger.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\nusb3xhc.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\ETD.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\kbfiltr.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\SysWOW64\drivers\Afc.sys
\SystemRoot\system32\DRIVERS\wmiacpi.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\system32\DRIVERS\nusb3hub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_iaStor.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\avgntflt.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\DRIVERS\TurboB.sys
\??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
\SystemRoot\system32\DRIVERS\vwifimp.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------
Done!
Scan started
Database versions:
main: v2015.03.06.03
rootkit: v2015.02.25.01
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007aed790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007aed250, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007aed790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80074ff050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: AE14F3C6
Partition information:
Partition 0 type is Other (0x1c)
Partition is NOT ACTIVE.
Partition starts at LBA: 2048 Numsec = 52428800
Partition 1 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 52430848 Numsec = 630013952
Partition file system is NTFS
Partition is bootable
Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 682444800 Numsec = 782702592
Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Disk Size: 750156374016 bytes
Sector size: 512 bytes
Done!
Scan finished
=======================================
Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-52430848-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished
Viele Grüße Bene |
|
| Themen zu Windows 7: Verdächtiger Link in E-Mail angeklickt - Spybot Warnung |
| aktiv, bli, browser, data, dll, e-mail, explorer.exe, helper.exe, infected, installation, link, microsoft, pcs, rechner, registry, seite, setup, software, spybot, system, trojaner, ups, ups-mail, version, warnung, windows, windows 7 |
Hybrid-Darstellung
