Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 08.08.2017, 23:49   #3
Frustine
 
Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163  und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy    (1) - Standard

Neue Logfiles (1)



Hallo Matthias,

als erstes Vielen Dank für Deine Zeit und Mühe!

Dann ein kleiner Nachtrag zu Problemen seit den Funden:
- das Disconnect-Plugin funktioniert heute wieder nicht
- Mozilla "zickt" etwas (Videos hängen sich auf, was aber schon vorher vorkam; eine Weiterleitung nach dem Login hier führte auf eine leere Seite).

Nachfolgend die gewünschten Files. Ich muss sie wieder aufteilen in mehrere Beiträge.

(Bei der Befolgung der Anleitungen gab es einpaar Problemchen, die wahrscheinlich unerheblich sind. Ich konnte die Tools nicht direkt auf dem Desktop speichern -sondern nur mit Ausschneiden und Einfügen -, da ich beim Downloaden nicht nach dem Zielordner nicht gefragt wurde.
Bei FRST schlug einmal Windows (Firewall? windowseigener Virenscanner? - habe leider nicht darauf geachtet) an, gab aber nach Bestätigung Ruhe. Daher habe ich nichts deaktiviert.
Da ich nicht unter dem Stichwort PC-Dummi im Internet verewigt sein will, habe ich den TDSSKiller-Report erst zwecks Ersetzen des Usernamens in den Editor kopiert.)

1. TDSS-KIller
Teil1:
Code:
ATTFilter
23:11:34.0852 0x2560  TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
23:11:34.0852 0x2560  UEFI system
23:11:40.0808 0x2560  ============================================================
23:11:40.0808 0x2560  Current date / time: 2017/08/08 23:11:40.0808
23:11:40.0809 0x2560  SystemInfo:
23:11:40.0809 0x2560  
23:11:40.0809 0x2560  OS Version: 10.0.14393 ServicePack: 0.0
23:11:40.0809 0x2560  Product type: Workstation
23:11:40.0809 0x2560  ComputerName: DESKTOP-DKB7J2N
23:11:40.0809 0x2560  UserName: *****
23:11:40.0809 0x2560  Windows directory: C:\windows
23:11:40.0809 0x2560  System windows directory: C:\windows
23:11:40.0809 0x2560  Running under WOW64
23:11:40.0809 0x2560  Processor architecture: Intel x64
23:11:40.0809 0x2560  Number of processors: 4
23:11:40.0809 0x2560  Page size: 0x1000
23:11:40.0809 0x2560  Boot type: Normal boot
23:11:40.0809 0x2560  CodeIntegrityOptions = 0x0000C001
23:11:40.0809 0x2560  ============================================================
23:11:40.0841 0x2560  KLMD registered as C:\windows\system32\drivers\55245872.sys
23:11:40.0841 0x2560  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.1480, osProperties = 0x19
23:11:40.0872 0x2560  System UUID: {E9C73706-2AAA-F26A-973D-24ECA5A8561D}
23:11:41.0221 0x2560  Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:11:41.0224 0x2560  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:11:41.0231 0x2560  Drive \Device\Harddisk3\DR5 - Size: 0x3BBA00000 ( 14.93 Gb ), SectorSize: 0x200, Cylinders: 0x79D, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:11:41.0232 0x2560  ============================================================
23:11:41.0232 0x2560  \Device\Harddisk0\DR0:
23:11:41.0232 0x2560  GPT partitions:
23:11:41.0233 0x2560  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {9E1FF3F7-3E36-4837-AABA-8AA909391D03}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
23:11:41.0233 0x2560  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {82D0FB55-1EE0-43E8-B275-48986BCB2D11}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000
23:11:41.0233 0x2560  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C56F3AE9-5E3D-4CED-9251-2597CBC36B56}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x1B27E000
23:11:41.0233 0x2560  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {C382E17D-FD7B-4692-8002-735E41EF7F13}, Name: Basic data partition, StartLBA 0x1B2F0800, BlocksNum 0x2802000
23:11:41.0233 0x2560  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {4E5AF831-8264-4017-8B7F-B76A8EF81481}, Name: Basic data partition, StartLBA 0x1DAF3000, BlocksNum 0x200000
23:11:41.0233 0x2560  MBR partitions:
23:11:41.0233 0x2560  \Device\Harddisk1\DR1:
23:11:41.0235 0x2560  MBR partitions:
23:11:41.0235 0x2560  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02
23:11:41.0235 0x2560  \Device\Harddisk3\DR5:
23:11:41.0236 0x2560  MBR partitions:
23:11:41.0236 0x2560  ============================================================
23:11:41.0236 0x2560  C: <-> \Device\Harddisk0\DR0\Partition3
23:11:41.0237 0x2560  D: <-> \Device\Harddisk0\DR0\Partition4
23:11:41.0243 0x2560  G: <-> \Device\Harddisk1\DR1\Partition1
23:11:41.0243 0x2560  ============================================================
23:11:41.0243 0x2560  Initialize success
23:11:41.0243 0x2560  ============================================================
23:13:15.0001 0x048c  ============================================================
23:13:15.0001 0x048c  Scan started
23:13:15.0001 0x048c  Mode: Manual; SigCheck; TDLFS; 
23:13:15.0002 0x048c  ============================================================
23:13:15.0002 0x048c  KSN ping started
23:13:35.0171 0x048c  KSN ping finished: true
23:13:36.0029 0x048c  ================ Scan system memory ========================
23:13:36.0029 0x048c  System memory - ok
23:13:36.0029 0x048c  ================ Scan services =============================
23:13:36.0068 0x048c  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\windows\System32\drivers\1394ohci.sys
23:13:36.0109 0x048c  1394ohci - ok
23:13:36.0119 0x048c  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware           C:\windows\system32\drivers\3ware.sys
23:13:36.0132 0x048c  3ware - ok
23:13:36.0146 0x048c  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\windows\system32\drivers\ACPI.sys
23:13:36.0168 0x048c  ACPI - ok
23:13:36.0173 0x048c  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev         C:\windows\System32\drivers\AcpiDev.sys
23:13:36.0185 0x048c  AcpiDev - ok
23:13:36.0192 0x048c  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\windows\system32\Drivers\acpiex.sys
23:13:36.0201 0x048c  acpiex - ok
23:13:36.0205 0x048c  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\windows\System32\drivers\acpipagr.sys
23:13:36.0218 0x048c  acpipagr - ok
23:13:36.0222 0x048c  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi         C:\windows\System32\drivers\acpipmi.sys
23:13:36.0232 0x048c  AcpiPmi - ok
23:13:36.0235 0x048c  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\windows\System32\drivers\acpitime.sys
23:13:36.0246 0x048c  acpitime - ok
23:13:36.0251 0x048c  [ 9B112FDA1D5FB7B75627461001AC692A, 2EDF7C8FD59CD5FCD19FA528F60CBD6DDB9A8076AE0280B11D8EA8EAF7D39958 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:13:36.0260 0x048c  AdobeARMservice - ok
23:13:36.0276 0x048c  [ C58A2B0A6C05AA317DF808FF56B0F24B, 9A2A31D0AFFC60C69F3E2402A4A66F8FEC3D70A24AFBE8283D09358406BDC3DC ] AdobeFlashPlayerUpdateSvc C:\windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:13:36.0286 0x048c  AdobeFlashPlayerUpdateSvc - ok
23:13:36.0302 0x048c  [ 8C7110E20E99F20F0FF9979869241D8E, 4C3D2CB26FC337704137F0ED5333534110E71CCA48AB1C945D9A65DACB1C0093 ] ADP80XX         C:\windows\system32\drivers\ADP80XX.SYS
23:13:36.0318 0x048c  ADP80XX - ok
23:13:36.0338 0x048c  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD             C:\windows\system32\drivers\afd.sys
23:13:36.0358 0x048c  AFD - ok
23:13:36.0364 0x048c  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache         C:\windows\system32\DRIVERS\ahcache.sys
23:13:36.0382 0x048c  ahcache - ok
23:13:36.0385 0x048c  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\windows\System32\AJRouter.dll
23:13:36.0395 0x048c  AJRouter - ok
23:13:36.0399 0x048c  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG             C:\windows\System32\alg.exe
23:13:36.0412 0x048c  ALG - ok
23:13:36.0416 0x048c  [ D03124A92936B3B1D38AC31D9B5582F8, F47146DBCBA9CCA89425405CF8CF2894BD4FEE5B9E650BFA9BE1E19B6405188A ] ambakdrv        C:\windows\system32\ambakdrv.sys
23:13:36.0424 0x048c  ambakdrv - ok
23:13:36.0428 0x048c  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8           C:\windows\System32\drivers\amdk8.sys
23:13:36.0441 0x048c  AmdK8 - ok
23:13:36.0446 0x048c  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\windows\System32\drivers\amdppm.sys
23:13:36.0460 0x048c  AmdPPM - ok
23:13:36.0464 0x048c  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata         C:\windows\system32\drivers\amdsata.sys
23:13:36.0474 0x048c  amdsata - ok
23:13:36.0481 0x048c  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
23:13:36.0494 0x048c  amdsbs - ok
23:13:36.0497 0x048c  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata         C:\windows\system32\drivers\amdxata.sys
23:13:36.0507 0x048c  amdxata - ok
23:13:36.0513 0x048c  [ 98B78382C46541F2FFBFFB4CB3C709A2, AD9B8BAA2C129154419F780D76D3948E334E7BFBC0A1B521C18DBE57B089B445 ] ammntdrv        C:\windows\system32\ammntdrv.sys
23:13:36.0521 0x048c  ammntdrv - ok
23:13:36.0529 0x048c  [ 301167E69BDE24CE24FB53376C422B3B, B244D86866DB7E79609A161DC6D3A5C04BF3A806C670D5D3024FE50DFFC0C2CE ] amwrtdrv        C:\windows\system32\amwrtdrv.sys
23:13:36.0534 0x048c  amwrtdrv - ok
23:13:36.0541 0x048c  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID           C:\windows\system32\drivers\appid.sys
23:13:36.0551 0x048c  AppID - ok
23:13:36.0558 0x048c  [ 0A7C202CDBFD295363A09DE1A2C05F45, AB516BB714CAD60994A42710E7747FB50A5890F71BD8880BF86096CC485DE393 ] AppIDSvc        C:\windows\System32\appidsvc.dll
23:13:36.0571 0x048c  AppIDSvc - ok
23:13:36.0580 0x048c  [ 79A87DD43331290A276C02DC396BF530, D0781DC027EE60C94831A2C9C3DD741F8F2100A253CD847E7FCFA59919014278 ] Appinfo         C:\windows\System32\appinfo.dll
23:13:36.0592 0x048c  Appinfo - ok
23:13:36.0595 0x048c  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr   C:\windows\system32\drivers\applockerfltr.sys
23:13:36.0610 0x048c  applockerfltr - ok
23:13:36.0616 0x048c  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt         C:\windows\System32\appmgmts.dll
23:13:36.0630 0x048c  AppMgmt - ok
23:13:36.0644 0x048c  [ 7552751C3F43335F030029EB83D6EC0D, 608E18DAAD34FB5F1D3333034CC9682AC7D166C54B1EAD011696F8122F9F3B6A ] AppReadiness    C:\windows\system32\AppReadiness.dll
23:13:36.0666 0x048c  AppReadiness - ok
23:13:36.0683 0x048c  [ 524CD6F52AE14D6C01424A846352D33E, 758EC66C0D4F5D1F2BB601A170676B67D462D46BB3F5BED89D37748C8992166A ] AppVClient      C:\windows\system32\AppVClient.exe
23:13:36.0706 0x048c  AppVClient - ok
23:13:36.0712 0x048c  [ B66ED2CB37F7E4696A51612AFBA08834, 70BA67AF7F1290E3145B873B53516F138E50D8AAC80CD00CBA66467ABC6643CB ] AppvStrm        C:\windows\system32\drivers\AppvStrm.sys
23:13:36.0722 0x048c  AppvStrm - ok
23:13:36.0731 0x048c  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr       C:\windows\system32\drivers\AppvVemgr.sys
23:13:36.0742 0x048c  AppvVemgr - ok
23:13:36.0747 0x048c  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs         C:\windows\system32\drivers\AppvVfs.sys
23:13:36.0758 0x048c  AppvVfs - ok
23:13:36.0796 0x048c  [ FBEA76FBAC93A1DE7B3071936263DAB6, 5B1A2E29D5EA529F4D77327A0D315529D342CCF9CFC394EEF56916B6F2FBEB36 ] AppXSvc         C:\windows\system32\appxdeploymentserver.dll
23:13:36.0861 0x048c  AppXSvc - ok
23:13:36.0870 0x048c  [ 14EA18334A6D0345C0379236E766D451, 73D67563717EA0B8C4BD504ED0D35A4D1C77AEA86B60471145F945F53AC668C8 ] arcsas          C:\windows\system32\drivers\arcsas.sys
23:13:36.0880 0x048c  arcsas - ok
23:13:36.0883 0x048c  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\windows\System32\drivers\asyncmac.sys
23:13:36.0896 0x048c  AsyncMac - ok
23:13:36.0899 0x048c  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi           C:\windows\system32\drivers\atapi.sys
23:13:36.0908 0x048c  atapi - ok
23:13:36.0917 0x048c  [ 44D50F4B55BEE38C97A6CBECEBC59384, 43C35E5547E5180B25726F90E0B94149DE1099FD507A6357A6A284A2749433F3 ] AudioEndpointBuilder C:\windows\System32\AudioEndpointBuilder.dll
23:13:36.0936 0x048c  AudioEndpointBuilder - ok
23:13:36.0954 0x048c  [ 36A9B38EA06A8C14CC82E0C8004A6635, 959E6B359D89E112976AF488F2756F770B491AE53ED07E9D31B4A3D8A7F33C80 ] Audiosrv        C:\windows\System32\Audiosrv.dll
23:13:36.0984 0x048c  Audiosrv - ok
23:13:37.0073 0x048c  [ 401DE45B4A49F9B7C70BA8592DF7D8E9, 58CE96D1CF88D2E4BE31331B93750E56023C5078FAE295009FAC69D38A3E47AA ] AVKProxy        C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
23:13:37.0168 0x048c  AVKProxy - ok
23:13:37.0180 0x048c  AVKService - ok
23:13:37.0232 0x048c  [ 8A9F5A2458E8A0FB84853A5D4E8EDB33, D6F732C3C6AE0B7B6EE4ACFBA9C3832814991BDAC56A36E54ABDBF1AEA8690EB ] AVKWCtl         C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe
23:13:37.0289 0x048c  AVKWCtl - ok
23:13:37.0303 0x048c  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\windows\System32\AxInstSV.dll
23:13:37.0317 0x048c  AxInstSV - ok
23:13:37.0329 0x048c  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv         C:\windows\system32\drivers\bxvbda.sys
23:13:37.0349 0x048c  b06bdrv - ok
23:13:37.0354 0x048c  [ 9A04EBBD91ACFB9B3E30876E4061CE1E, FAFF87792B3545A0C892FCEE03BA42FD3A5EFE4E63AFFE05DAD1AB579583CF6D ] Backupper Service C:\Program Files (x86)\AOMEI Backupper\ABService.exe
23:13:37.0363 0x048c  Backupper Service - ok
23:13:37.0367 0x048c  [ 94D6B95485BFA35D81524B0EBA0F7569, 14A32CD501B1D816526A75A9EB3782E6C4FF78831628F257050AD2BA73733F57 ] BasicDisplay    C:\windows\System32\drivers\BasicDisplay.sys
23:13:37.0381 0x048c  BasicDisplay - ok
23:13:37.0385 0x048c  [ 72ABA6AC74F7AA9C9A4AC61BE628ADD1, 4B0F0B9224A3CA52F9F17FCE7A7DCABBDF2DC0B084EAA1B89807B58D0F866788 ] BasicRender     C:\windows\System32\drivers\BasicRender.sys
23:13:37.0395 0x048c  BasicRender - ok
23:13:37.0401 0x048c  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn           C:\windows\System32\drivers\bcmfn.sys
23:13:37.0413 0x048c  bcmfn - ok
23:13:37.0417 0x048c  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\windows\System32\drivers\bcmfn2.sys
23:13:37.0428 0x048c  bcmfn2 - ok
23:13:37.0437 0x048c  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\windows\System32\bdesvc.dll
23:13:37.0462 0x048c  BDESVC - ok
23:13:37.0465 0x048c  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\windows\system32\drivers\Beep.sys
23:13:37.0474 0x048c  Beep - ok
23:13:37.0492 0x048c  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE             C:\windows\System32\bfe.dll
23:13:37.0520 0x048c  BFE - ok
23:13:37.0542 0x048c  [ A344054D9965A116EC99C9AE63729782, 5A522EFD0BB30A997C221B4018E457E46447CB891A48977461C0EAE95FECA04C ] BITS            C:\windows\System32\qmgr.dll
23:13:37.0580 0x048c  BITS - ok
23:13:37.0587 0x048c  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
23:13:37.0599 0x048c  bowser - ok
23:13:37.0616 0x048c  [ 82A93A0772A29EB6E41438D9AE5ECDBD, 2C0EBA86DA33B763B6EBCF3D0A936FB92E0F36FD3D18D0812A33FC5FF1906C3C ] BrokerInfrastructure C:\windows\System32\bisrv.dll
23:13:37.0647 0x048c  BrokerInfrastructure - ok
23:13:37.0653 0x048c  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser         C:\windows\System32\browser.dll
23:13:37.0665 0x048c  Browser - ok
23:13:37.0669 0x048c  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\windows\System32\drivers\BthAvrcpTg.sys
23:13:37.0679 0x048c  BthAvrcpTg - ok
23:13:37.0683 0x048c  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum       C:\windows\System32\drivers\bthhfenum.sys
23:13:37.0696 0x048c  BthHFEnum - ok
23:13:37.0701 0x048c  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\windows\System32\drivers\BthHFHid.sys
23:13:37.0712 0x048c  bthhfhid - ok
23:13:37.0720 0x048c  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\windows\System32\BthHFSrv.dll
23:13:37.0738 0x048c  BthHFSrv - ok
23:13:37.0742 0x048c  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\windows\System32\drivers\bthmodem.sys
23:13:37.0753 0x048c  BTHMODEM - ok
23:13:37.0759 0x048c  [ 577FFA2B0B8572587FEB825F42453E81, D1BA449B7A535D0F6BC2EDE75D2CBA585E3A00FE552E244F342FB4ACA029A9A5 ] bthserv         C:\windows\system32\bthserv.dll
23:13:37.0772 0x048c  bthserv - ok
23:13:37.0776 0x048c  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\windows\System32\drivers\buttonconverter.sys
23:13:37.0791 0x048c  buttonconverter - ok
23:13:37.0798 0x048c  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\windows\System32\drivers\capimg.sys
23:13:37.0808 0x048c  CapImg - ok
23:13:37.0817 0x048c  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
23:13:37.0830 0x048c  cdfs - ok
23:13:37.0840 0x048c  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\windows\System32\CDPSvc.dll
23:13:37.0863 0x048c  CDPSvc - ok
23:13:37.0871 0x048c  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\windows\System32\CDPUserSvc.dll
23:13:37.0889 0x048c  CDPUserSvc - ok
23:13:37.0903 0x048c  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom           C:\windows\System32\drivers\cdrom.sys
23:13:37.0916 0x048c  cdrom - ok
23:13:37.0921 0x048c  [ F99E6C664A3D503878DAD628088AF855, C73E0F2F10C42600D98EFB4960ED9B186E8C41F0EDA5EBE9E85DB212AFF5DE79 ] CertPropSvc     C:\windows\System32\certprop.dll
23:13:37.0938 0x048c  CertPropSvc - ok
23:13:37.0946 0x048c  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi       C:\windows\system32\drivers\cht4sx64.sys
23:13:37.0958 0x048c  cht4iscsi - ok
23:13:37.0996 0x048c  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd         C:\windows\System32\drivers\cht4vx64.sys
23:13:38.0040 0x048c  cht4vbd - ok
23:13:38.0052 0x048c  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\windows\System32\drivers\circlass.sys
23:13:38.0063 0x048c  circlass - ok
23:13:38.0073 0x048c  [ 792B891721F098A50C9ED95D3E549B5A, 06B371A6FB900A9D2385609696E64F1AD2F34C2D597959B9B05EDF2A8DFBD8EC ] CLFS            C:\windows\system32\drivers\CLFS.sys
23:13:38.0088 0x048c  CLFS - ok
23:13:38.0142 0x048c  [ 1EE9C94393B5AB32FB0EA8B39E7B73CE, A6D1F1589A6243EED024BE06F3BA7D12021376C5B685B2748052D79FEABAD814 ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
23:13:38.0193 0x048c  ClickToRunSvc - ok
23:13:38.0213 0x048c  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC         C:\windows\System32\ClipSVC.dll
23:13:38.0236 0x048c  ClipSVC - ok
23:13:38.0241 0x048c  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg           C:\windows\System32\drivers\registry.sys
23:13:38.0255 0x048c  clreg - ok
23:13:38.0266 0x048c  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\windows\System32\drivers\CmBatt.sys
23:13:38.0274 0x048c  CmBatt - ok
23:13:38.0287 0x048c  [ 6DEB975950920360BB4C62D6EF9E60B8, C8A6BB267A3EF932E373D07A5FE44B0FA27CECBE7A12BC93EA89574DDA69B41F ] CNG             C:\windows\system32\Drivers\cng.sys
23:13:38.0309 0x048c  CNG - ok
23:13:38.0314 0x048c  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist     C:\windows\system32\DRIVERS\cnghwassist.sys
23:13:38.0321 0x048c  cnghwassist - ok
23:13:38.0334 0x048c  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
23:13:38.0343 0x048c  CompositeBus - ok
23:13:38.0347 0x048c  COMSysApp - ok
23:13:38.0352 0x048c  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\windows\system32\drivers\condrv.sys
23:13:38.0359 0x048c  condrv - ok
23:13:38.0379 0x048c  [ 28E13353F8AED53ABD6668FAAEC7677F, AC2765C64678869D8FAF6008C8B5E2424A4DD6FDD9E8A8EF169ADA7E8107D201 ] CoreMessagingRegistrar C:\windows\system32\coremessaging.dll
23:13:38.0400 0x048c  CoreMessagingRegistrar - ok
23:13:38.0418 0x048c  [ FF1C98FFD97C242415C20B7333867CE9, 021038EDF31EEDCCC4809399E1F0AD6C7CC679EAD18B3A87D1E62079B8942AA4 ] cphs            C:\windows\SysWow64\IntelCpHeciSvc.exe
23:13:38.0432 0x048c  cphs - ok
23:13:38.0442 0x048c  [ 74A3122EA25C7A73DA75DB7BD1AD2968, 02C0BAECCE4AE3FB6A361DAF487316EB0A0468B76F1DE60A44B08AE10625309D ] cplspcon        C:\windows\system32\IntelCpHDCPSvc.exe
23:13:38.0456 0x048c  cplspcon - ok
23:13:38.0459 0x048c  cpuz139 - ok
23:13:38.0466 0x048c  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\windows\system32\cryptsvc.dll
23:13:38.0477 0x048c  CryptSvc - ok
23:13:38.0490 0x048c  [ EC2EA2F6C6D23315C20B4829F00D0440, BF1F47C3485E9112FB64F582DFA4679455203574F82A5ADB222BDA1FED1601E6 ] CSC             C:\windows\system32\drivers\csc.sys
23:13:38.0514 0x048c  CSC - ok
23:13:38.0528 0x048c  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\windows\System32\cscsvc.dll
23:13:38.0555 0x048c  CscService - ok
23:13:38.0559 0x048c  [ 3BBD0073265DA6D3EFBA54B26E5D8236, 3C10C8BEC0D8AC41A3FBD589F41A83D6345C1FDD04B8B99063B2F5670CF10B18 ] dam             C:\windows\system32\drivers\dam.sys
23:13:38.0571 0x048c  dam - ok
23:13:38.0576 0x048c  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate        C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
23:13:38.0585 0x048c  dbupdate - ok
23:13:38.0590 0x048c  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem       C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
23:13:38.0597 0x048c  dbupdatem - ok
23:13:38.0600 0x048c  dbx - ok
23:13:38.0604 0x048c  [ 930FD1D8C3C2811BF6358DFE66D5A83D, 2A07FCDF616918EABD6EF39262D6B8C04F9FAC261F8C266A1A3C0AE52BBF8A71 ] DbxSvc          C:\windows\system32\DbxSvc.exe
23:13:38.0610 0x048c  DbxSvc - ok
23:13:38.0632 0x048c  [ 4A7015195E49A3BA7DB967B277B21E9D, 2EE10950BC0E2B13303491725FB3F0D3AF63518B7D1593BCC4BF503F4A11F408 ] DcomLaunch      C:\windows\system32\rpcss.dll
23:13:38.0665 0x048c  DcomLaunch - ok
23:13:38.0671 0x048c  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\windows\system32\dcpsvc.dll
23:13:38.0687 0x048c  DcpSvc - ok
23:13:38.0698 0x048c  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc       C:\windows\System32\defragsvc.dll
23:13:38.0723 0x048c  defragsvc - ok
23:13:38.0735 0x048c  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\windows\system32\das.dll
23:13:38.0754 0x048c  DeviceAssociationService - ok
23:13:38.0759 0x048c  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall   C:\windows\system32\umpnpmgr.dll
23:13:38.0777 0x048c  DeviceInstall - ok
23:13:38.0782 0x048c  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\windows\system32\DevQueryBroker.dll
23:13:38.0792 0x048c  DevQueryBroker - ok
23:13:38.0797 0x048c  [ 385E6F76E684E7EEEECBBB156C45D191, 2BF808B095625DB9613683508B8D8B194ED1810FA0519C272BB0DF42563B9BD4 ] Dfsc            C:\windows\system32\Drivers\dfsc.sys
23:13:38.0810 0x048c  Dfsc - ok
23:13:38.0821 0x048c  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\windows\system32\dhcpcore.dll
23:13:38.0839 0x048c  Dhcp - ok
23:13:38.0844 0x048c  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
23:13:38.0858 0x048c  diagnosticshub.standardcollector.service - ok
23:13:38.0891 0x048c  [ 8420D9DD3E79AB28B5EBE79F050BA8BC, 45DD92F804E720636BDBE4CE9CB46594425988BEAE66CDDA8DD7EBBB47E16C7C ] DiagTrack       C:\windows\system32\diagtrack.dll
23:13:38.0945 0x048c  DiagTrack - ok
23:13:38.0954 0x048c  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\windows\system32\drivers\disk.sys
23:13:38.0962 0x048c  disk - ok
23:13:38.0976 0x048c  [ DD1DFB1551BD861BBCCC4374C054520A, 7371D9201E67659B052DFDAEFE60514C8402239498F86D1706114E3D7023A85C ] DmEnrollmentSvc C:\windows\system32\Windows.Internal.Management.dll
23:13:38.0995 0x048c  DmEnrollmentSvc - ok
23:13:39.0000 0x048c  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc           C:\windows\System32\drivers\dmvsc.sys
23:13:39.0010 0x048c  dmvsc - ok
23:13:39.0014 0x048c  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\windows\system32\dmwappushsvc.dll
23:13:39.0031 0x048c  dmwappushservice - ok
23:13:39.0040 0x048c  [ 86E507EE1457D7FA463BBF05BA76EB1E, 2D2D05CED57C22F41684DC6DD00ACECDF708407493286B2D4007068154E436FF ] Dnscache        C:\windows\System32\dnsrslvr.dll
23:13:39.0058 0x048c  Dnscache - ok
23:13:39.0066 0x048c  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc         C:\windows\System32\dot3svc.dll
23:13:39.0080 0x048c  dot3svc - ok
23:13:39.0088 0x048c  [ 27069CFFF29B7F04F4B1BB10154BE52B, 6869626F9A1D3F64224883C5E661638CEE893A3E29651C7B9302A03E52180415 ] dot4            C:\windows\system32\DRIVERS\Dot4.sys
23:13:39.0095 0x048c  dot4 - ok
23:13:39.0100 0x048c  [ 0BD906A79F9CE3013F7D9D0AC45F9F9D, 2F7D5082E7E226D5EBEA164A8ACEE0A447C96EB1829224A6EFA3E7B4EFEE1D14 ] Dot4Print       C:\windows\System32\drivers\Dot4Prt.sys
23:13:39.0105 0x048c  Dot4Print - ok
23:13:39.0109 0x048c  [ B7D595F2F464F7B628AD53F06547792C, F5D06A91EF54FBF56305FCC882B854350B266B2A005D80CC77AEBC2929440729 ] dot4usb         C:\windows\system32\DRIVERS\dot4usb.sys
23:13:39.0114 0x048c  dot4usb - ok
23:13:39.0120 0x048c  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS             C:\windows\system32\dps.dll
23:13:39.0136 0x048c  DPS - ok
23:13:39.0140 0x048c  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud         C:\windows\system32\DRIVERS\drmkaud.sys
23:13:39.0149 0x048c  drmkaud - ok
23:13:39.0155 0x048c  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\windows\System32\DeviceSetupManager.dll
23:13:39.0173 0x048c  DsmSvc - ok
23:13:39.0178 0x048c  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc           C:\windows\System32\DsSvc.dll
23:13:39.0194 0x048c  DsSvc - ok
23:13:39.0230 0x048c  [ C867FABEFF1A553330093384D022F963, 85910F3D2BAB804308DFB31DB16178B6A8EE0D3C9B3695F4E4F2DAF14EA98BAD ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys
23:13:39.0276 0x048c  DXGKrnl - ok
23:13:39.0284 0x048c  [ 6D4159694E1754F262E326B52A3B305A, B9A4E40A5D80FEDD1037EAED958F9F9EFED41EB01ADA73D51B5DCD86E27E0CBF ] e1edc438-f640-4184-a443-d2a7c37a01dc C:\SYSPREP\OA30\690b33e1-0462-4e84-9bea-c7552b45432a.sys
23:13:39.0291 0x048c  e1edc438-f640-4184-a443-d2a7c37a01dc - ok
23:13:39.0303 0x048c  [ 83E4A14F851341C933C3235BFB882ECA, 152EDEF6B566D010FE519FE4B046050A5281069B48AFF8A2395D7D2BD0519701 ] e1iexpress      C:\windows\System32\drivers\e1i63x64.sys
23:13:39.0323 0x048c  e1iexpress - ok
23:13:39.0328 0x048c  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost         C:\windows\System32\eapsvc.dll
23:13:39.0346 0x048c  EapHost - ok
23:13:39.0404 0x048c  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv           C:\windows\system32\drivers\evbda.sys
23:13:39.0471 0x048c  ebdrv - ok
23:13:39.0480 0x048c  [ EA0D394EF9A9F225A5C4BD6EC83FE78A, 960EE6EC293B7CF62F2E6F49ED197783C7AD860E4DD23BAA0200D300D31E8B56 ] EFS             C:\windows\System32\lsass.exe
23:13:39.0490 0x048c  EFS - ok
23:13:39.0494 0x048c  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass     C:\windows\system32\drivers\EhStorClass.sys
23:13:39.0503 0x048c  EhStorClass - ok
23:13:39.0508 0x048c  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\windows\system32\drivers\EhStorTcgDrv.sys
23:13:39.0518 0x048c  EhStorTcgDrv - ok
23:13:39.0523 0x048c  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\windows\System32\embeddedmodesvc.dll
23:13:39.0539 0x048c  embeddedmode - ok
23:13:39.0547 0x048c  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc       C:\windows\system32\EnterpriseAppMgmtSvc.dll
23:13:39.0563 0x048c  EntAppSvc - ok
23:13:39.0568 0x048c  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\windows\System32\drivers\errdev.sys
23:13:39.0580 0x048c  ErrDev - ok
23:13:39.0594 0x048c  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem     C:\windows\system32\es.dll
23:13:39.0614 0x048c  EventSystem - ok
23:13:39.0626 0x048c  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat           C:\windows\system32\drivers\exfat.sys
23:13:39.0645 0x048c  exfat - ok
23:13:39.0654 0x048c  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat         C:\windows\system32\drivers\fastfat.sys
23:13:39.0668 0x048c  fastfat - ok
23:13:39.0680 0x048c  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax             C:\windows\system32\fxssvc.exe
23:13:39.0705 0x048c  Fax - ok
23:13:39.0709 0x048c  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc             C:\windows\System32\drivers\fdc.sys
23:13:39.0719 0x048c  fdc - ok
23:13:39.0723 0x048c  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost         C:\windows\system32\fdPHost.dll
23:13:39.0735 0x048c  fdPHost - ok
23:13:39.0741 0x048c  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\windows\system32\fdrespub.dll
23:13:39.0753 0x048c  FDResPub - ok
23:13:39.0758 0x048c  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc           C:\windows\system32\fhsvc.dll
23:13:39.0772 0x048c  fhsvc - ok
23:13:39.0776 0x048c  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt       C:\windows\system32\drivers\filecrypt.sys
23:13:39.0786 0x048c  FileCrypt - ok
23:13:39.0791 0x048c  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
23:13:39.0799 0x048c  FileInfo - ok
23:13:39.0806 0x048c  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace       C:\windows\system32\drivers\filetrace.sys
23:13:39.0819 0x048c  Filetrace - ok
23:13:39.0822 0x048c  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\windows\System32\drivers\flpydisk.sys
23:13:39.0832 0x048c  flpydisk - ok
23:13:39.0843 0x048c  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
23:13:39.0858 0x048c  FltMgr - ok
23:13:39.0891 0x048c  [ 5070B37B20DDC257AF93EB0BE8AB5690, B6ADFC68F07F8C84B79DE8E93E4735AB35146632563BA2C4279809A8DA4BE6BC ] FontCache       C:\windows\system32\FntCache.dll
23:13:39.0942 0x048c  FontCache - ok
23:13:39.0949 0x048c  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:13:39.0957 0x048c  FontCache3.0.0.0 - ok
23:13:39.0974 0x048c  [ CD7CD19E72EA2F597D01FC68ECD2F28E, 4E8BAA4AEF28B043780E2FEFFEB5E4DF4E2FB3211CE617D2DBAFB6C7B7DBBDFD ] FrameServer     C:\windows\system32\FrameServer.dll
23:13:40.0005 0x048c  FrameServer - ok
23:13:40.0009 0x048c  [ B07A40B5A7A58B8C75663A572A46084C, 01F34EAFD4A86FF6AFC015BE2D155A53ED8186BD6DA1A05CCEC8425417A8E320 ] FsDepends       C:\windows\system32\drivers\FsDepends.sys
23:13:40.0018 0x048c  FsDepends - ok
23:13:40.0022 0x048c  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
23:13:40.0029 0x048c  Fs_Rec - ok
23:13:40.0042 0x048c  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
23:13:40.0062 0x048c  fvevol - ok
23:13:40.0069 0x048c  [ 5C9BB17C90FF7E41B37FF303E66E8B7E, 30DFE4E54F02265D1C88EE776B3D94DC6170C393C5A207F603CA4DAE3A062924 ] GDBehave        C:\windows\system32\drivers\GDBehave.sys
23:13:40.0078 0x048c  GDBehave - ok
23:13:40.0083 0x048c  [ 1314062567B9ED86BFFDE5D8C48C52AE, 01DE02308E478F50DBFE4C6EAE9D0C052C1575283F2C182388E2028F3BF2E756 ] GDElam          C:\windows\system32\DRIVERS\GDElam.sys
23:13:40.0096 0x048c  GDElam - ok
23:13:40.0100 0x048c  [ D48DAF24329226E8797CE4AF53D90FBC, 5F0B25F55CA27647FA24558B55DCD267889DCA29DC6F8857C820F45913F28D06 ] GDKBB           C:\windows\system32\drivers\GDKBB64.sys
23:13:40.0108 0x048c  GDKBB - ok
23:13:40.0112 0x048c  [ FC20CC3F6B87E9C26B01D8A6DDE6D847, C62B802E217160996073CDEBE7010C1C89FE26B89A09FF9F236642CDEDF2D19B ] GDKBFlt         C:\windows\system32\drivers\GDKBFlt64.sys
23:13:40.0118 0x048c  GDKBFlt - ok
23:13:40.0127 0x048c  [ 6AE13510BD818420767003E59A5CE7B9, C3B27A183BC02F9C2F1D0BE9DE0E187B0DAE3607954C9B4C7008B6EBF4902DDF ] GDMnIcpt        C:\windows\system32\drivers\MiniIcpt.sys
23:13:40.0140 0x048c  GDMnIcpt - ok
23:13:40.0145 0x048c  [ DC5200C3055D6EB5355F8975FB38E9EE, 6E1E059DDEF04F1B0761570B75BF2914256243F1398E682BF4DF00AF3CE44585 ] GDPkIcpt        C:\windows\system32\drivers\PktIcpt.sys
23:13:40.0153 0x048c  GDPkIcpt - ok
23:13:40.0169 0x048c  [ 9BDF6478C4474BC571E1B94DCB77A157, 57C23520CF13A32200206B73EFAD82BE7C05E6F51BE443F84E7864FC7D73485C ] GDScan          C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
23:13:40.0189 0x048c  GDScan - ok
23:13:40.0194 0x048c  [ 7D9BBF500FE0C59434C73588A592BFA7, B9B7EB8B7BCB06188A7671574611247286E0EFBD620245EAD17D41DEA0CBC2DF ] gdwfpcd         C:\windows\system32\drivers\gdwfpcd64.sys
23:13:40.0200 0x048c  gdwfpcd - ok
23:13:40.0207 0x048c  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\windows\System32\drivers\vmgencounter.sys
23:13:40.0217 0x048c  gencounter - ok
23:13:40.0222 0x048c  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\windows\System32\drivers\genericusbfn.sys
23:13:40.0231 0x048c  genericusbfn - ok
23:13:40.0237 0x048c  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101     C:\windows\system32\Drivers\msgpioclx.sys
23:13:40.0248 0x048c  GPIOClx0101 - ok
23:13:40.0272 0x048c  [ 8997353398C8466ECD183942D5FCC65B, C73FD5FFD71003F7FDDC17F59812BD6860992FA35EC0ECC8DE37D935606B485B ] gpsvc           C:\windows\System32\gpsvc.dll
23:13:40.0311 0x048c  gpsvc - ok
23:13:40.0315 0x048c  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\windows\system32\drivers\gpuenergydrv.sys
23:13:40.0326 0x048c  GpuEnergyDrv - ok
23:13:40.0331 0x048c  [ 7F2DEAC8C1F91EA86FD0E50A340C3348, 5FB43B9AEC482AF95E71E11E9A96E65BDE9D1A25F9B42EE7051866D2A3EF0098 ] GRD             C:\windows\system32\drivers\GRD.sys
23:13:40.0341 0x048c  GRD - ok
23:13:40.0350 0x048c  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\windows\system32\DRIVERS\HdAudio.sys
23:13:40.0370 0x048c  HdAudAddService - ok
23:13:40.0376 0x048c  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\windows\System32\drivers\HDAudBus.sys
23:13:40.0388 0x048c  HDAudBus - ok
23:13:40.0392 0x048c  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt         C:\windows\System32\drivers\HidBatt.sys
23:13:40.0399 0x048c  HidBatt - ok
23:13:40.0407 0x048c  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\windows\System32\drivers\hidbth.sys
23:13:40.0420 0x048c  HidBth - ok
23:13:40.0425 0x048c  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\windows\System32\drivers\hidi2c.sys
23:13:40.0434 0x048c  hidi2c - ok
23:13:40.0440 0x048c  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\windows\System32\drivers\hidinterrupt.sys
23:13:40.0448 0x048c  hidinterrupt - ok
23:13:40.0451 0x048c  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr           C:\windows\System32\drivers\hidir.sys
23:13:40.0464 0x048c  HidIr - ok
23:13:40.0468 0x048c  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv         C:\windows\system32\hidserv.dll
23:13:40.0479 0x048c  hidserv - ok
23:13:40.0484 0x048c  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\windows\System32\drivers\hidusb.sys
23:13:40.0497 0x048c  HidUsb - ok
23:13:40.0504 0x048c  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\windows\system32\ListSvc.dll
23:13:40.0521 0x048c  HomeGroupListener - ok
23:13:40.0530 0x048c  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\windows\system32\provsvc.dll
23:13:40.0555 0x048c  HomeGroupProvider - ok
23:13:40.0560 0x048c  [ DCD75DED063C6625AAD5F28A7F86279F, A27C0E70577EA4FCD9CBB3DD63A280FA099AD3F367D7107385E38635F00C5BA3 ] HookCentre      C:\windows\system32\drivers\HookCentre.sys
23:13:40.0568 0x048c  HookCentre - ok
23:13:40.0580 0x048c  [ 0D0213498683414DDE29B1686A4C08D5, E9B64406C04B6E55CBD17E7C47B023CEA11FEE07B791154129D6F4F29D15AB7F ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
23:13:40.0590 0x048c  hpqcxs08 - ok
23:13:40.0594 0x048c  [ EE281DD6843F3F697C1AD7933EEB1E9B, 1ECE31C2150B92DDC1DCBBCECFE3E979F2C60B3F106280E3167BEC0269BF7A41 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
23:13:40.0601 0x048c  hpqddsvc - ok
23:13:40.0610 0x048c  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
23:13:40.0618 0x048c  HpSAMD - ok
23:13:40.0638 0x048c  [ C995EA1C6915D897E06D41AF95B9312C, 65DE6599F1C735BBDCCE4728F7F98167BCA0BF1B8D4218BBF7546B025C9A38BD ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
23:13:40.0668 0x048c  HPSLPSVC - detected UnsignedFile.Multi.Generic ( 1 )
23:13:41.0086 0x048c  Detect skipped due to KSN trusted
23:13:41.0086 0x048c  HPSLPSVC - ok
23:13:41.0144 0x048c  [ EC5DA4E49586AAB1E148CC8038DE3A5E, B6AEE3D0FB1CFA305541C6794666D60EFDE857022FF064CD5EA6E479A3B25024 ] HTTP            C:\windows\system32\drivers\HTTP.sys
23:13:41.0185 0x048c  HTTP - ok
23:13:41.0192 0x048c  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\windows\System32\hvhostsvc.dll
23:13:41.0202 0x048c  HvHost - ok
23:13:41.0208 0x048c  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice       C:\windows\system32\drivers\hvservice.sys
23:13:41.0218 0x048c  hvservice - ok
23:13:41.0223 0x048c  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
23:13:41.0231 0x048c  hwpolicy - ok
23:13:41.0234 0x048c  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\windows\System32\drivers\hyperkbd.sys
23:13:41.0246 0x048c  hyperkbd - ok
23:13:41.0250 0x048c  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\windows\System32\drivers\i8042prt.sys
23:13:41.0266 0x048c  i8042prt - ok
23:13:41.0270 0x048c  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\windows\System32\drivers\iagpio.sys
23:13:41.0282 0x048c  iagpio - ok
23:13:41.0288 0x048c  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c           C:\windows\System32\drivers\iai2c.sys
23:13:41.0302 0x048c  iai2c - ok
23:13:41.0309 0x048c  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\windows\System32\drivers\iaLPSS2i_GPIO2.sys
23:13:41.0319 0x048c  iaLPSS2i_GPIO2 - ok
23:13:41.0327 0x048c  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\windows\System32\drivers\iaLPSS2i_I2C.sys
23:13:41.0336 0x048c  iaLPSS2i_I2C - ok
23:13:41.0340 0x048c  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\windows\System32\drivers\iaLPSSi_GPIO.sys
23:13:41.0347 0x048c  iaLPSSi_GPIO - ok
23:13:41.0352 0x048c  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\windows\System32\drivers\iaLPSSi_I2C.sys
23:13:41.0365 0x048c  iaLPSSi_I2C - ok
23:13:41.0393 0x048c  [ 5C9AAE902452EF47D8C9EA5838E666B9, 9171558EE78B555312FD8D99EDF85849A4CDE87142EB91DB9E8AF92A1DDF664E ] iaStorA         C:\windows\system32\drivers\iaStorA.sys
23:13:41.0421 0x048c  iaStorA - ok
23:13:41.0437 0x048c  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\windows\system32\drivers\iaStorAV.sys
23:13:41.0457 0x048c  iaStorAV - ok
23:13:41.0464 0x048c  [ 31BD488EE7F6ED608A7418F6A7C6948D, BB7DC889C0F73FDE089FC0E52D321F29CBB5A65A3D9F90B0B3A730EF938B6178 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
23:13:41.0470 0x048c  IAStorDataMgrSvc - ok
23:13:41.0484 0x048c  [ 414CD8EF8034FC54112813CF85E1A59F, 9811DBBAF16F6772CF1F4C303449F43C4F20D51A2E827791A305727A8B9B7656 ] iaStorS         C:\windows\system32\drivers\iaStorS.sys
23:13:41.0502 0x048c  iaStorS - ok
23:13:41.0513 0x048c  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV         C:\windows\system32\drivers\iaStorV.sys
23:13:41.0530 0x048c  iaStorV - ok
23:13:41.0542 0x048c  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus           C:\windows\System32\drivers\ibbus.sys
23:13:41.0559 0x048c  ibbus - ok
23:13:41.0566 0x048c  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\windows\System32\tetheringservice.dll
23:13:41.0583 0x048c  icssvc - ok
23:13:41.0697 0x048c  [ 5CA89903583421A79775497179A8F7B9, 8BEBBD693EC17EAF0FB439EE6DEDFF094ED6C0001058B3886411C8D053B13E98 ] igfx            C:\windows\system32\DRIVERS\igdkmd64.sys
23:13:41.0823 0x048c  igfx - ok
23:13:41.0841 0x048c  [ 005B55BE1A7ED2FA53B83C82A8E081E9, EF8481F3762F88B036A541D12C23A9F8D00156DCF6FCE39DB122E1D1C75778F6 ] igfxCUIService2.0.0.0 C:\windows\system32\igfxCUIService.exe
23:13:41.0855 0x048c  igfxCUIService2.0.0.0 - ok
23:13:41.0874 0x048c  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\windows\System32\ikeext.dll
23:13:41.0905 0x048c  IKEEXT - ok
23:13:41.0912 0x048c  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd     C:\windows\System32\drivers\IndirectKmd.sys
23:13:41.0921 0x048c  IndirectKmd - ok
23:13:41.0929 0x048c  [ 9321A61A25C7961D9F36852ECAA86F55, F8965FDCE668692C3785AFA3559159F9A18287BC0D53ABB21902895A8ECF221B ] inpoutx64       C:\windows\system32\Drivers\inpoutx64.sys
23:13:41.0934 0x048c  inpoutx64 - ok
23:13:42.0014 0x048c  [ CE0F5362F02288F675A4894EAF64FB8B, F7D1542D1197B4196A87DD97403DE3A2A36D7804837DCF05CA76E8DCAA28C74A ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
23:13:42.0098 0x048c  IntcAzAudAddService - ok
23:13:42.0121 0x048c  [ 75EF6707AC6470DBE7F7EE6AD7020851, D5E55683B6C9A5AF150BA167ED2FB779B5E673F7268FC241658D8446C58DBA7C ] IntcDAud        C:\windows\system32\DRIVERS\IntcDAud.sys
23:13:42.0141 0x048c  IntcDAud - ok
23:13:42.0162 0x048c  [ AE32376564771525DCDD2F0280619E1A, 233B7B272DCD9080DE7C9593EB7993745D1037EA87B69617E7176F074DFD5968 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
23:13:42.0191 0x048c  Intel(R) Capability Licensing Service TCP IP Interface - ok
23:13:42.0201 0x048c  [ 56BA2118E48D0BBB980ADAA830220C1D, 88FF0A1E7A87D1B50F90D3088436BE91CFEC6BB3B888EB536D6537468DDC8C29 ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
23:13:42.0215 0x048c  Intel(R) Security Assist - detected UnsignedFile.Multi.Generic ( 1 )
23:13:42.0857 0x048c  Detect skipped due to KSN trusted
23:13:42.0857 0x048c  Intel(R) Security Assist - ok
23:13:42.0865 0x048c  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\windows\system32\drivers\intelide.sys
23:13:42.0882 0x048c  intelide - ok
23:13:42.0889 0x048c  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\windows\system32\drivers\intelpep.sys
23:13:42.0902 0x048c  intelpep - ok
23:13:42.0907 0x048c  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\windows\System32\drivers\intelppm.sys
23:13:42.0921 0x048c  intelppm - ok
23:13:42.0925 0x048c  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\windows\system32\drivers\iorate.sys
23:13:42.0937 0x048c  iorate - ok
23:13:42.0941 0x048c  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
23:13:42.0953 0x048c  IpFilterDriver - ok
23:13:42.0972 0x048c  [ 68C50E8E4265698BE6835156F4DD5008, 5B9CBBCE99315E5569E6733F13E91A687A36F536A68A2B670CC24C4BCC4EAFF4 ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
23:13:43.0004 0x048c  iphlpsvc - ok
23:13:43.0010 0x048c  [ 10D01A3657AC8E8004C83D613163DE1E, F9389F1BF87A2D28899F50D270DA6F48B0912CFAF06CEE566697B041DBE92F9C ] IPMIDRV         C:\windows\System32\drivers\IPMIDrv.sys
23:13:43.0023 0x048c  IPMIDRV - ok
23:13:43.0029 0x048c  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT           C:\windows\system32\drivers\ipnat.sys
23:13:43.0048 0x048c  IPNAT - ok
23:13:43.0055 0x048c  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\windows\system32\drivers\irda.sys
23:13:43.0070 0x048c  irda - ok
23:13:43.0073 0x048c  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\windows\system32\drivers\irenum.sys
23:13:43.0083 0x048c  IRENUM - ok
23:13:43.0089 0x048c  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon           C:\windows\System32\irmon.dll
23:13:43.0102 0x048c  irmon - ok
23:13:43.0104 0x048c  [ 8CA2C261AB69D0195BED81E58EDF167D, B192B7E42543C277BF8F6D48649DA4C121E6C23BDD0B51A973BA7A2D95525478 ] isaHelperSvc    C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
23:13:43.0108 0x048c  isaHelperSvc - detected UnsignedFile.Multi.Generic ( 1 )
23:13:44.0008 0x048c  Detect skipped due to KSN trusted
23:13:44.0008 0x048c  isaHelperSvc - ok
23:13:44.0016 0x048c  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\windows\system32\drivers\isapnp.sys
23:13:44.0036 0x048c  isapnp - ok
23:13:44.0047 0x048c  [ CA20F4621AB8CD3F69199DE21B5B41C4, 0AFFC66DD10D4D15139337E5ED343A2ABBB26CC8A83B3BDF6AD10C68B3931A7C ] iScsiPrt        C:\windows\System32\drivers\msiscsi.sys
23:13:44.0067 0x048c  iScsiPrt - ok
23:13:44.0073 0x048c  [ 025A4E7D215B3ECF28D12BAE1C54889D, 3F678A9871CA7680D2B455031A57ACB74CCA9076C908A678A88735C8BD192FCE ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
23:13:44.0087 0x048c  jhi_service - ok
23:13:44.0091 0x048c  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\windows\System32\drivers\kbdclass.sys
23:13:44.0101 0x048c  kbdclass - ok
23:13:44.0105 0x048c  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\windows\System32\drivers\kbdhid.sys
23:13:44.0117 0x048c  kbdhid - ok
23:13:44.0121 0x048c  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic           C:\windows\System32\drivers\kdnic.sys
23:13:44.0137 0x048c  kdnic - ok
23:13:44.0141 0x048c  [ EA0D394EF9A9F225A5C4BD6EC83FE78A, 960EE6EC293B7CF62F2E6F49ED197783C7AD860E4DD23BAA0200D300D31E8B56 ] KeyIso          C:\windows\system32\lsass.exe
23:13:44.0151 0x048c  KeyIso - ok
23:13:44.0156 0x048c  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
23:13:44.0166 0x048c  KSecDD - ok
23:13:44.0175 0x048c  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys
23:13:44.0186 0x048c  KSecPkg - ok
23:13:44.0189 0x048c  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk         C:\windows\system32\drivers\ksthunk.sys
23:13:44.0203 0x048c  ksthunk - ok
23:13:44.0211 0x048c  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm           C:\windows\system32\msdtckrm.dll
23:13:44.0232 0x048c  KtmRm - ok
23:13:44.0241 0x048c  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\windows\system32\srvsvc.dll
23:13:44.0261 0x048c  LanmanServer - ok
23:13:44.0269 0x048c  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
23:13:44.0288 0x048c  LanmanWorkstation - ok
23:13:44.0294 0x048c  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc           C:\windows\System32\lfsvc.dll
23:13:44.0305 0x048c  lfsvc - ok
23:13:44.0309 0x048c  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\windows\system32\LicenseManagerSvc.dll
23:13:44.0320 0x048c  LicenseManager - ok
23:13:44.0324 0x048c  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\windows\system32\drivers\lltdio.sys
23:13:44.0338 0x048c  lltdio - ok
23:13:44.0346 0x048c  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc         C:\windows\System32\lltdsvc.dll
23:13:44.0362 0x048c  lltdsvc - ok
23:13:44.0365 0x048c  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts         C:\windows\System32\lmhsvc.dll
23:13:44.0380 0x048c  lmhosts - ok
23:13:44.0391 0x048c  [ B77C2CCB7C1BC3836B3AB5644E63739E, 917749905E68FEE0D8A5752F77CC4EB313990875B02387D294029F9FC5E4ADD0 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
23:13:44.0405 0x048c  LMS - ok
23:13:44.0411 0x048c  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS         C:\windows\system32\drivers\lsi_sas.sys
23:13:44.0422 0x048c  LSI_SAS - ok
23:13:44.0427 0x048c  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i       C:\windows\system32\drivers\lsi_sas2i.sys
23:13:44.0437 0x048c  LSI_SAS2i - ok
23:13:44.0442 0x048c  [ 29C6CE40B2F724E9349D84486C53E6F9, EF11526F3333E71D4C09AE20C7A4BCEBC463962401E6F02D8DC361D55874504F ] LSI_SAS3        C:\windows\system32\drivers\lsi_sas3.sys
23:13:44.0450 0x048c  LSI_SAS3 - ok
23:13:44.0458 0x048c  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i       C:\windows\system32\drivers\lsi_sas3i.sys
23:13:44.0468 0x048c  LSI_SAS3i - ok
23:13:44.0472 0x048c  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS         C:\windows\system32\drivers\lsi_sss.sys
23:13:44.0480 0x048c  LSI_SSS - ok
23:13:44.0497 0x048c  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM             C:\windows\System32\lsm.dll
23:13:44.0524 0x048c  LSM - ok
23:13:44.0530 0x048c  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv           C:\windows\system32\drivers\luafv.sys
23:13:44.0547 0x048c  luafv - ok
23:13:44.0553 0x048c  [ 9F699136FA1A8A170C2C05D7790A5FC0, 4363C527BD2FC9FD8937E9866CA200809AC87B64EA57084491BAB6DEB8ED9E87 ] MapsBroker      C:\windows\System32\moshost.dll
23:13:44.0564 0x048c  MapsBroker - ok
23:13:44.0637 0x048c  [ D76E56108E6482905D3FAEA0649919E4, E10285889570A01E544B027F4A17BA7242E5E3EF93D20A19B05091DB237C6DD1 ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
23:13:44.0712 0x048c  MBAMService - ok
23:13:44.0726 0x048c  [ C3549BE8C1FE4ECBEE21DAD3378F6CD0, E4FB6856C1A8B9185322EFC4AF31A3748365ED2E3E4FB6DF57B35569D8D42AAD ] MBAMSwissArmy   C:\windows\system32\drivers\MBAMSwissArmy.sys
23:13:44.0738 0x048c  MBAMSwissArmy - ok
23:13:44.0743 0x048c  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas         C:\windows\system32\drivers\megasas.sys
23:13:44.0753 0x048c  megasas - ok
23:13:44.0757 0x048c  [ D1A6E4B7115177EF76F8356FD974818C, F89714BFE4C26BEBBA48732E5A91C9F2727F193AD7DD236EAE957D9039C814C1 ] megasas2        C:\windows\system32\drivers\megasas2.sys
23:13:44.0765 0x048c  megasas2 - ok
23:13:44.0773 0x048c  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i       C:\windows\system32\drivers\MegaSas2i.sys
23:13:44.0781 0x048c  megasas2i - ok
23:13:44.0794 0x048c  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\windows\system32\drivers\megasr.sys
23:13:44.0815 0x048c  megasr - ok
23:13:44.0823 0x048c  [ 220B49994DCFAC3BB242A8C3047E58A2, B01EA1751CE80E357DB643938F603DAE11A7F88B7B1187D769C5A3209A932E64 ] MEIx64          C:\windows\System32\drivers\TeeDriverW8x64.sys
23:13:44.0833 0x048c  MEIx64 - ok
23:13:44.0839 0x048c  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\windows\System32\MessagingService.dll
23:13:44.0850 0x048c  MessagingService - ok
23:13:44.0875 0x048c  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\windows\System32\drivers\mlx4_bus.sys
23:13:44.0903 0x048c  mlx4_bus - ok
23:13:44.0908 0x048c  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS           C:\windows\system32\drivers\mmcss.sys
23:13:44.0918 0x048c  MMCSS - ok
23:13:44.0923 0x048c  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem           C:\windows\system32\drivers\modem.sys
23:13:44.0932 0x048c  Modem - ok
23:13:44.0937 0x048c  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor         C:\windows\System32\drivers\monitor.sys
23:13:44.0950 0x048c  monitor - ok
23:13:44.0955 0x048c  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\windows\System32\drivers\mouclass.sys
23:13:44.0963 0x048c  mouclass - ok
23:13:44.0968 0x048c  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\windows\System32\drivers\mouhid.sys
23:13:44.0980 0x048c  mouhid - ok
23:13:44.0984 0x048c  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
23:13:44.0994 0x048c  mountmgr - ok
23:13:44.0999 0x048c  [ 5732AC84ABFB3C8EB4B07E5F55AA8FE0, F2120B78F826E982D7F144B583D505B021E927B1EADD450A3ABBC1D05E91AD61 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:13:45.0011 0x048c  MozillaMaintenance - ok
23:13:45.0015 0x048c  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
23:13:45.0026 0x048c  mpsdrv - ok
23:13:45.0044 0x048c  [ A231E1861F7AA9CCC24B97176BBA838D, CDAB9A25CC55B71E8A83E50504B12E948D7A88F035918E4F94E3624E4AA0A28D ] MpsSvc          C:\windows\system32\mpssvc.dll
23:13:45.0074 0x048c  MpsSvc - ok
23:13:45.0080 0x048c  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
23:13:45.0095 0x048c  MRxDAV - ok
23:13:45.0105 0x048c  [ D559FF28B1AD9B1E15A4186E785E61F6, 4B22A740E86CA10B1B43E36CBE9A50B53D1E5504C25694C8FF3A514DF699E99C ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
23:13:45.0121 0x048c  mrxsmb - ok
23:13:45.0131 0x048c  [ CFE8297B003C85AEFB506BDDEE3E67FA, F42F2CCDB80D7F83B122FE2CFB9ED19464DAA763E6CB9272C7A1F91DF441154E ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
23:13:45.0149 0x048c  mrxsmb10 - ok
23:13:45.0158 0x048c  [ D66BB32A4C26F170F43F098BBAE245AD, 934C30358963DA85ACB749CF6A2167D9B615C5B7479F9BF73FE65C9914C177D0 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
23:13:45.0168 0x048c  mrxsmb20 - ok
23:13:45.0177 0x048c  [ 85669C51BA3BBD4CF6457C280BFAEA0C, 11D92B85B7EA837B8294B5A160E35BDE6C91FF78873B076E3B823F16384618AF ] MsBridge        C:\windows\system32\drivers\bridge.sys
23:13:45.0188 0x048c  MsBridge - ok
23:13:45.0193 0x048c  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC           C:\windows\System32\msdtc.exe
23:13:45.0207 0x048c  MSDTC - ok
23:13:45.0213 0x048c  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\windows\system32\drivers\Msfs.sys
23:13:45.0223 0x048c  Msfs - ok
23:13:45.0226 0x048c  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32     C:\windows\System32\drivers\msgpiowin32.sys
23:13:45.0234 0x048c  msgpiowin32 - ok
23:13:45.0238 0x048c  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys
23:13:45.0247 0x048c  mshidkmdf - ok
23:13:45.0250 0x048c  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf       C:\windows\System32\drivers\mshidumdf.sys
23:13:45.0262 0x048c  mshidumdf - ok
23:13:45.0266 0x048c  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
23:13:45.0274 0x048c  msisadrv - ok
23:13:45.0280 0x048c  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI         C:\windows\system32\iscsiexe.dll
23:13:45.0295 0x048c  MSiSCSI - ok
23:13:45.0298 0x048c  msiserver - ok
23:13:45.0303 0x048c  [ 4586CDA25B7866DD9505CEECF9DB3C74, B94CE1A7C1B6FFEF7AA33AEC30C27E01E44E6E56A4274705684BFBB738F95BCF ] MSKSSRV         C:\windows\system32\DRIVERS\MSKSSRV.sys
23:13:45.0314 0x048c  MSKSSRV - ok
23:13:45.0318 0x048c  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\windows\system32\drivers\mslldp.sys
23:13:45.0331 0x048c  MsLldp - ok
23:13:45.0334 0x048c  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\windows\system32\DRIVERS\MSPCLOCK.sys
23:13:45.0348 0x048c  MSPCLOCK - ok
23:13:45.0352 0x048c  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM           C:\windows\system32\DRIVERS\MSPQM.sys
23:13:45.0366 0x048c  MSPQM - ok
23:13:45.0375 0x048c  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC           C:\windows\system32\drivers\MsRPC.sys
23:13:45.0389 0x048c  MsRPC - ok
23:13:45.0395 0x048c  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\windows\system32\drivers\mssecflt.sys
23:13:45.0409 0x048c  MsSecFlt - ok
23:13:45.0412 0x048c  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\windows\System32\drivers\mssmbios.sys
23:13:45.0421 0x048c  mssmbios - ok
23:13:45.0424 0x048c  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE           C:\windows\system32\DRIVERS\MSTEE.sys
23:13:45.0438 0x048c  MSTEE - ok
23:13:45.0442 0x048c  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\windows\System32\drivers\MTConfig.sys
23:13:45.0450 0x048c  MTConfig - ok
23:13:45.0457 0x048c  [ A2A906C0D38BFE1D780251D044BDBD4D, 7898F93CF4C0ABE761329F0BE43A12BDFB894465BBE5131D98D5BA6A10B3B1FD ] Mup             C:\windows\system32\Drivers\mup.sys
23:13:45.0467 0x048c  Mup - ok
23:13:45.0471 0x048c  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\windows\system32\drivers\mvumis.sys
23:13:45.0480 0x048c  mvumis - ok
23:13:45.0494 0x048c  [ A5FA29F748BBF38FC3FAE4B54FA20A93, 8912F08967CFDD2A74593C9D23F43D6487D1920969C380B39BA8EA4672B24C3B ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys
23:13:45.0515 0x048c  NativeWifiP - ok
23:13:45.0521 0x048c  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\windows\System32\ncasvc.dll
23:13:45.0539 0x048c  NcaSvc - ok
23:13:45.0547 0x048c  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\windows\System32\ncbservice.dll
23:13:45.0565 0x048c  NcbService - ok
23:13:45.0569 0x048c  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\windows\System32\NcdAutoSetup.dll
23:13:45.0588 0x048c  NcdAutoSetup - ok
23:13:45.0593 0x048c  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\windows\System32\drivers\ndfltr.sys
23:13:45.0601 0x048c  ndfltr - ok
23:13:45.0625 0x048c  [ A530D0C58A657BCD1629816B887661CB, EF8E25018D64F7D0EE1E05C24E0B0DB25B0ACCF13DE0FEDAF8F0AF70BC025462 ] NDIS            C:\windows\system32\drivers\ndis.sys
23:13:45.0655 0x048c  NDIS - ok
23:13:45.0662 0x048c  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap         C:\windows\system32\drivers\ndiscap.sys
23:13:45.0673 0x048c  NdisCap - ok
23:13:45.0677 0x048c  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\windows\system32\drivers\NdisImPlatform.sys
23:13:45.0692 0x048c  NdisImPlatform - ok
23:13:45.0698 0x048c  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
23:13:45.0712 0x048c  NdisTapi - ok
23:13:45.0716 0x048c  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio         C:\windows\system32\drivers\ndisuio.sys
23:13:45.0727 0x048c  Ndisuio - ok
23:13:45.0730 0x048c  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\windows\System32\drivers\NdisVirtualBus.sys
23:13:45.0742 0x048c  NdisVirtualBus - ok
23:13:45.0747 0x048c  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan         C:\windows\System32\drivers\ndiswan.sys
23:13:45.0765 0x048c  NdisWan - ok
23:13:45.0772 0x048c  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy   C:\windows\system32\DRIVERS\ndiswan.sys
23:13:45.0790 0x048c  ndiswanlegacy - ok
23:13:45.0794 0x048c  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy         C:\windows\system32\DRIVERS\NDProxy.sys
23:13:45.0810 0x048c  ndproxy - ok
23:13:45.0814 0x048c  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu             C:\windows\system32\drivers\Ndu.sys
23:13:45.0831 0x048c  Ndu - ok
23:13:45.0835 0x048c  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\System32\HPZinw12.dll
23:13:45.0842 0x048c  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
23:13:46.0196 0x048c  Detect skipped due to KSN trusted
23:13:46.0196 0x048c  Net Driver HPZ12 - ok
23:13:46.0210 0x048c  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\windows\system32\drivers\NetAdapterCx.sys
23:13:46.0248 0x048c  NetAdapterCx - ok
23:13:46.0254 0x048c  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS         C:\windows\system32\drivers\netbios.sys
23:13:46.0266 0x048c  NetBIOS - ok
23:13:46.0277 0x048c  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT           C:\windows\system32\DRIVERS\netbt.sys
23:13:46.0296 0x048c  NetBT - ok
23:13:46.0300 0x048c  [ EA0D394EF9A9F225A5C4BD6EC83FE78A, 960EE6EC293B7CF62F2E6F49ED197783C7AD860E4DD23BAA0200D300D31E8B56 ] Netlogon        C:\windows\system32\lsass.exe
23:13:46.0309 0x048c  Netlogon - ok
23:13:46.0316 0x048c  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\windows\System32\netman.dll
23:13:46.0335 0x048c  Netman - ok
23:13:46.0346 0x048c  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\windows\System32\netprofmsvc.dll
23:13:46.0368 0x048c  netprofm - ok
23:13:46.0376 0x048c  [ E0981C2DA535C7D579601C967210E25E, C4EF0A5E34B91D34481FA80904A5A71F22D837029A8EC9F95DE3C1F9BC68F8C0 ] NetSetupSvc     C:\windows\System32\NetSetupSvc.dll
23:13:46.0393 0x048c  NetSetupSvc - ok
23:13:46.0401 0x048c  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:13:46.0412 0x048c  NetTcpPortSharing - ok
23:13:46.0421 0x048c  [ 5B934F4E9725CB774FA9649D5ECB8F02, 173E8A754C014C13E1CD0155C178DAF108C1A81B2264015CD6998EE9CB2516DA ] NgcCtnrSvc      C:\windows\System32\NgcCtnrSvc.dll
23:13:46.0438 0x048c  NgcCtnrSvc - ok
23:13:46.0460 0x048c  [ 00A0987633FADDDEAFC24AF3C6821A59, 72ADCD823AC8D8CA3937AB8220AF30AFCCFA2BAE47FB1991530EFCCC48A190B6 ] NgcSvc          C:\windows\system32\ngcsvc.dll
23:13:46.0494 0x048c  NgcSvc - ok
23:13:46.0504 0x048c  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\windows\System32\nlasvc.dll
23:13:46.0522 0x048c  NlaSvc - ok
23:13:46.0530 0x048c  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\windows\system32\drivers\Npfs.sys
23:13:46.0542 0x048c  Npfs - ok
23:13:46.0546 0x048c  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig       C:\windows\System32\drivers\npsvctrig.sys
23:13:46.0556 0x048c  npsvctrig - ok
23:13:46.0561 0x048c  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi             C:\windows\system32\nsisvc.dll
23:13:46.0570 0x048c  nsi - ok
23:13:46.0575 0x048c  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
23:13:46.0586 0x048c  nsiproxy - ok
23:13:46.0626 0x048c  [ 1668185FD94CDFB8E148A6C7DC76B4DB, 7D3E3AC97BD01EA30BAF4123092A8FA3B12F9E2120E0A3FA99855982B5944214 ] NTFS            C:\windows\system32\drivers\NTFS.sys
23:13:46.0673 0x048c  NTFS - ok
23:13:46.0680 0x048c  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\windows\system32\drivers\Null.sys
23:13:46.0689 0x048c  Null - ok
23:13:46.0699 0x048c  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\windows\system32\drivers\nvraid.sys
23:13:46.0710 0x048c  nvraid - ok
23:13:46.0715 0x048c  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\windows\system32\drivers\nvstor.sys
23:13:46.0728 0x048c  nvstor - ok
23:13:46.0738 0x048c  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
23:13:46.0751 0x048c  odserv - ok
23:13:46.0760 0x048c  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\windows\System32\APHostService.dll
23:13:46.0779 0x048c  OneSyncSvc - ok
23:13:46.0786 0x048c  [ 0CC20BD62B5A34C2A6C537F3BE74A026, 0C79DE467BEF17D520C7DBC00DB75394EBB6D4CF272A02A72CD5947F37D73867 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:13:46.0802 0x048c  ose - detected UnsignedFile.Multi.Generic ( 1 )
23:13:47.0154 0x048c  Detect skipped due to KSN trusted
23:13:47.0154 0x048c  ose - ok
23:13:47.0175 0x048c  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
23:13:47.0205 0x048c  p2pimsvc - ok
23:13:47.0223 0x048c  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\windows\system32\p2psvc.dll
23:13:47.0252 0x048c  p2psvc - ok
23:13:47.0257 0x048c  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport         C:\windows\System32\drivers\parport.sys
23:13:47.0270 0x048c  Parport - ok
23:13:47.0274 0x048c  [ 0553ECB742278C8F4CFA28B43FF20EAD, ACD7F5BC36573BCEC2C3413DEA687034ECC101EDD3C1544B264BBA29EFCE3425 ] partmgr         C:\windows\system32\drivers\partmgr.sys
23:13:47.0286 0x048c  partmgr - ok
23:13:47.0297 0x048c  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\windows\System32\pcasvc.dll
23:13:47.0316 0x048c  PcaSvc - ok
23:13:47.0325 0x048c  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci             C:\windows\system32\drivers\pci.sys
23:13:47.0340 0x048c  pci - ok
23:13:47.0344 0x048c  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\windows\system32\drivers\pciide.sys
23:13:47.0352 0x048c  pciide - ok
23:13:47.0357 0x048c  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
23:13:47.0372 0x048c  pcmcia - ok
23:13:47.0375 0x048c  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw             C:\windows\system32\drivers\pcw.sys
23:13:47.0385 0x048c  pcw - ok
23:13:47.0390 0x048c  [ 382D493B91B816D12C6F775E7896ED29, A1AECF74577CA229FD096DFAA67C8E00FA4A648F5BD72DBF4C8BDA99F325C6A5 ] pdc             C:\windows\system32\drivers\pdc.sys
23:13:47.0401 0x048c  pdc - ok
23:13:47.0407 0x048c  [ 7010C81B0A81D26CE89E43DE9688C3F2, C0D69A0D6F8E92FCA1947843DF35637997F347FB4A01C2F523FC92F869B24DBA ] PDF24           C:\Program Files (x86)\PDF24\pdf24.exe
23:13:47.0420 0x048c  PDF24 - ok
23:13:47.0435 0x048c  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\windows\system32\drivers\peauth.sys
23:13:47.0467 0x048c  PEAUTH - ok
23:13:47.0500 0x048c  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc     C:\windows\system32\peerdistsvc.dll
23:13:47.0556 0x048c  PeerDistSvc - ok
23:13:47.0565 0x048c  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i       C:\windows\system32\drivers\percsas2i.sys
23:13:47.0575 0x048c  percsas2i - ok
23:13:47.0581 0x048c  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i       C:\windows\system32\drivers\percsas3i.sys
23:13:47.0589 0x048c  percsas3i - ok
23:13:47.0604 0x048c  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\windows\SysWow64\perfhost.exe
23:13:47.0616 0x048c  PerfHost - ok
23:13:47.0637 0x048c  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\windows\System32\PhoneService.dll
23:13:47.0667 0x048c  PhoneSvc - ok
23:13:47.0674 0x048c  [ C7A94D99CDF054248EFBD9B93D096DA6, F59F0EB5B17DC078E47D044B1126A786D67DC149AC9614CDA6AA1226EEE3EF55 ] PimIndexMaintenanceSvc C:\windows\System32\PimIndexMaintenance.dll
23:13:47.0690 0x048c  PimIndexMaintenanceSvc - ok
23:13:47.0718 0x048c  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla             C:\windows\system32\pla.dll
23:13:47.0766 0x048c  pla - ok
23:13:47.0775 0x048c  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\windows\system32\umpnpmgr.dll
23:13:47.0792 0x048c  PlugPlay - ok
23:13:47.0797 0x048c  [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\System32\HPZipm12.dll
23:13:47.0805 0x048c  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
23:13:48.0142 0x048c  Detect skipped due to KSN trusted
23:13:48.0142 0x048c  Pml Driver HPZ12 - ok
23:13:48.0150 0x048c  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll
23:13:48.0169 0x048c  PNRPAutoReg - ok
23:13:48.0179 0x048c  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc         C:\windows\system32\pnrpsvc.dll
23:13:48.0201 0x048c  PNRPsvc - ok
23:13:48.0211 0x048c  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent     C:\windows\System32\ipsecsvc.dll
23:13:48.0232 0x048c  PolicyAgent - ok
23:13:48.0238 0x048c  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power           C:\windows\system32\umpo.dll
23:13:48.0253 0x048c  Power - ok
23:13:48.0257 0x048c  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\windows\System32\drivers\raspptp.sys
23:13:48.0273 0x048c  PptpMiniport - ok
23:13:48.0323 0x048c  [ 30AA256A85C1A7B17A590B1C5244D28E, 2C1FB30DEF53C37CA0D0CA54B65CB8572C53DDFB430DE57F964253F1082ACEA0 ] PrintNotify     C:\windows\system32\spool\drivers\x64\3\PrintConfig.dll
23:13:48.0406 0x048c  PrintNotify - ok
23:13:48.0415 0x048c  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor       C:\windows\System32\drivers\processr.sys
23:13:48.0427 0x048c  Processor - ok
23:13:48.0436 0x048c  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc         C:\windows\system32\profsvc.dll
23:13:48.0457 0x048c  ProfSvc - ok
23:13:48.0463 0x048c  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\windows\system32\drivers\pacer.sys
23:13:48.0474 0x048c  Psched - ok
23:13:48.0482 0x048c  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE           C:\windows\system32\qwave.dll
23:13:48.0500 0x048c  QWAVE - ok
23:13:48.0503 0x048c  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
23:13:48.0513 0x048c  QWAVEdrv - ok
23:13:48.0518 0x048c  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
23:13:48.0527 0x048c  RasAcd - ok
23:13:48.0533 0x048c  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn     C:\windows\System32\drivers\AgileVpn.sys
23:13:48.0546 0x048c  RasAgileVpn - ok
23:13:48.0552 0x048c  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto         C:\windows\System32\rasauto.dll
23:13:48.0565 0x048c  RasAuto - ok
23:13:48.0572 0x048c  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp         C:\windows\System32\drivers\rasl2tp.sys
23:13:48.0587 0x048c  Rasl2tp - ok
23:13:48.0601 0x048c  [ 28C80449AC9CA09A6DBADF4940C125A7, A827E3A2D7DF67073CCE63C63168B2F4067C7D36E89BB99D4C6F17E46BECEB56 ] RasMan          C:\windows\System32\rasmans.dll
23:13:48.0626 0x048c  RasMan - ok
23:13:48.0630 0x048c  [ 726857E441D1D67F57694A1B613ABD34, 564027EF2E80F99595282FF76B6D339045B7E9AFE72D8DDF2D6EB0D98C329834 ] RasPppoe        C:\windows\System32\drivers\raspppoe.sys
23:13:48.0642 0x048c  RasPppoe - ok
23:13:48.0646 0x048c  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp         C:\windows\System32\drivers\rassstp.sys
23:13:48.0665 0x048c  RasSstp - ok
23:13:48.0676 0x048c  [ 1A49C9F966A04D031DAD4C73C49D5288, 05C8690948EAA2A55A208D8D34118C27FD5C7D7AEEF4FAD1346E40BBE586946D ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys
23:13:48.0694 0x048c  rdbss - ok
23:13:48.0700 0x048c  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\windows\System32\drivers\rdpbus.sys
23:13:48.0710 0x048c  rdpbus - ok
23:13:48.0715 0x048c  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR           C:\windows\system32\drivers\rdpdr.sys
23:13:48.0727 0x048c  RDPDR - ok
23:13:48.0738 0x048c  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
23:13:48.0746 0x048c  RdpVideoMiniport - ok
23:13:48.0755 0x048c  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
23:13:48.0769 0x048c  rdyboost - ok
23:13:48.0787 0x048c  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\windows\system32\drivers\ReFSv1.sys
23:13:48.0810 0x048c  ReFSv1 - ok
23:13:48.0826 0x048c  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\windows\System32\mprdim.dll
23:13:48.0847 0x048c  RemoteAccess - ok
23:13:48.0856 0x048c  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\windows\system32\regsvc.dll
23:13:48.0873 0x048c  RemoteRegistry - ok
23:13:48.0887 0x048c  [ 6FF3A30B1220D939D6120646BD5801F3, A526A24912FC5401E96796E41A4945D549486464067179201BCB25BF53049862 ] RetailDemo      C:\windows\system32\RDXService.dll
23:13:48.0911 0x048c  RetailDemo - ok
23:13:48.0917 0x048c  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc           C:\windows\System32\RMapi.dll
23:13:48.0929 0x048c  RmSvc - ok
23:13:48.0935 0x048c  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
23:13:48.0948 0x048c  RpcEptMapper - ok
23:13:48.0953 0x048c  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\windows\system32\locator.exe
23:13:48.0963 0x048c  RpcLocator - ok
23:13:48.0983 0x048c  [ 4A7015195E49A3BA7DB967B277B21E9D, 2EE10950BC0E2B13303491725FB3F0D3AF63518B7D1593BCC4BF503F4A11F408 ] RpcSs           C:\windows\system32\rpcss.dll
23:13:49.0013 0x048c  RpcSs - ok
23:13:49.0021 0x048c  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\windows\system32\drivers\rspndr.sys
23:13:49.0032 0x048c  rspndr - ok
23:13:49.0052 0x048c  [ FE60C5DF8F5C7499C181E84A2D878D80, B696508589D1AE9AEE4EE95844C69775EC6D31DD5CE6F2BCD8A96D468FE087E0 ] rt640x64        C:\windows\System32\drivers\rt640x64.sys
23:13:49.0073 0x048c  rt640x64 - ok
23:13:49.0077 0x048c  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap           C:\windows\System32\drivers\vms3cap.sys
23:13:49.0089 0x048c  s3cap - ok
23:13:49.0093 0x048c  [ EA0D394EF9A9F225A5C4BD6EC83FE78A, 960EE6EC293B7CF62F2E6F49ED197783C7AD860E4DD23BAA0200D300D31E8B56 ] SamSs           C:\windows\system32\lsass.exe
23:13:49.0103 0x048c  SamSs - ok
23:13:49.0107 0x048c  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
23:13:49.0117 0x048c  sbp2port - ok
23:13:49.0125 0x048c  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\windows\System32\SCardSvr.dll
23:13:49.0144 0x048c  SCardSvr - ok
23:13:49.0152 0x048c  [ 3FE129F92033059B84885E1F5D458EF3, 87AA6EEA47DD5DC7141DBA7A499594DC7B1E2B315370EA8F5C2FCD1FDF2FEA4C ] ScDeviceEnum    C:\windows\System32\ScDeviceEnum.dll
23:13:49.0168 0x048c  ScDeviceEnum - ok
23:13:49.0174 0x048c  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
23:13:49.0185 0x048c  scfilter - ok
23:13:49.0203 0x048c  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\windows\system32\schedsvc.dll
23:13:49.0241 0x048c  Schedule - ok
23:13:49.0246 0x048c  [ 227A7AAD04CB11116F8B935CA31F0D04, E91A2DAEF7D73115EE957FB546EF43E9610B149D3ECB911E8A687E1259D42D21 ] scmbus          C:\windows\system32\drivers\scmbus.sys
23:13:49.0256 0x048c  scmbus - ok
23:13:49.0261 0x048c  [ F5923C4B0D5B1EB04CFE145F41A8B0B8, A59E755DA28A474767DE28472DB4F09F6D44A20F8C327D33D8596E56A980E8F4 ] scmdisk0101     C:\windows\System32\drivers\scmdisk0101.sys
23:13:49.0273 0x048c  scmdisk0101 - ok
23:13:49.0279 0x048c  [ F99E6C664A3D503878DAD628088AF855, C73E0F2F10C42600D98EFB4960ED9B186E8C41F0EDA5EBE9E85DB212AFF5DE79 ] SCPolicySvc     C:\windows\System32\certprop.dll
23:13:49.0294 0x048c  SCPolicySvc - ok
23:13:49.0302 0x048c  [ 08ED027CD8A43E3412BDD134A43B13E8, F5E0D7CBF2980F4B74056EC4696234F1A24E7CFE945EEB0B250498B1D934721A ] sdbus           C:\windows\System32\drivers\sdbus.sys
23:13:49.0314 0x048c  sdbus - ok
23:13:49.0320 0x048c  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\windows\System32\SDRSVC.dll
23:13:49.0334 0x048c  SDRSVC - ok
23:13:49.0343 0x048c  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\windows\System32\drivers\sdstor.sys
23:13:49.0352 0x048c  sdstor - ok
23:13:49.0356 0x048c  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\windows\system32\seclogon.dll
23:13:49.0365 0x048c  seclogon - ok
23:13:49.0374 0x048c  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\windows\System32\sens.dll
23:13:49.0386 0x048c  SENS - ok
23:13:49.0388 0x048c  Sense - ok
23:13:49.0412 0x048c  [ CF2AEB951CFC56D4F6CF2D66218B673C, CEA0B0E0251EA198893830080EE4CB8A9F18ADBF1F6FEFFC9C7E8AB4588D0639 ] SensorDataService C:\windows\System32\SensorDataService.exe
23:13:49.0453 0x048c  SensorDataService - ok
23:13:49.0466 0x048c  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService   C:\windows\system32\SensorService.dll
23:13:49.0489 0x048c  SensorService - ok
23:13:49.0495 0x048c  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\windows\system32\sensrsvc.dll
23:13:49.0508 0x048c  SensrSvc - ok
23:13:49.0512 0x048c  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx           C:\windows\system32\drivers\SerCx.sys
23:13:49.0521 0x048c  SerCx - ok
23:13:49.0527 0x048c  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\windows\system32\drivers\SerCx2.sys
23:13:49.0540 0x048c  SerCx2 - ok
23:13:49.0543 0x048c  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum         C:\windows\System32\drivers\serenum.sys
23:13:49.0553 0x048c  Serenum - ok
23:13:49.0558 0x048c  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\windows\System32\drivers\serial.sys
23:13:49.0572 0x048c  Serial - ok
23:13:49.0575 0x048c  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\windows\System32\drivers\sermouse.sys
23:13:49.0586 0x048c  sermouse - ok
23:13:49.0599 0x048c  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\windows\system32\sessenv.dll
23:13:49.0621 0x048c  SessionEnv - ok
23:13:49.0625 0x048c  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy         C:\windows\System32\drivers\sfloppy.sys
23:13:49.0636 0x048c  sfloppy - ok
23:13:49.0649 0x048c  [ E38BE81F0F6D9C74E420A82BC6A02AFE, 25D7594FD1BE0B303F9777ACBA702ACD0C27B00D21F82659989C40636851A330 ] SharedAccess    C:\windows\System32\ipnathlp.dll
23:13:49.0672 0x048c  SharedAccess - ok
23:13:49.0685 0x048c  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\windows\System32\shsvcs.dll
23:13:49.0716 0x048c  ShellHWDetection - ok
23:13:49.0724 0x048c  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\windows\system32\Windows.SharedPC.AccountManager.dll
23:13:49.0741 0x048c  shpamsvc - ok
23:13:49.0744 0x048c  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
23:13:49.0753 0x048c  SiSRaid2 - ok
23:13:49.0758 0x048c  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
23:13:49.0766 0x048c  SiSRaid4 - ok
23:13:49.0774 0x048c  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost         C:\windows\System32\smphost.dll
23:13:49.0784 0x048c  smphost - ok
23:13:49.0797 0x048c  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter       C:\windows\system32\SmsRouterSvc.dll
23:13:49.0824 0x048c  SmsRouter - ok
23:13:49.0831 0x048c  [ 01275E832DB5A5159379A9C67AF51BBF, 0335D361C19562E89052DDEDCDBD1825E64DF04F723CFF7D8D1C1CE9B89D12AB ] SNMPTRAP        C:\windows\System32\snmptrap.exe
23:13:49.0841 0x048c  SNMPTRAP - ok
23:13:49.0853 0x048c  [ C933E0DC14AA0B09B2D49F01CE10674B, 83F6D04765B7B7A2016415BAE169164B0E62B4FD994C276F13630A9C0D0E6C90 ] spaceport       C:\windows\system32\drivers\spaceport.sys
23:13:49.0873 0x048c  spaceport - ok
23:13:49.0877 0x048c  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx           C:\windows\system32\drivers\SpbCx.sys
23:13:49.0888 0x048c  SpbCx - ok
23:13:49.0905 0x048c  [ 1DFE222F8D6A422B7ADC909E0C8840DA, 96761691CF4447710D65573044A1005F2F0F89443DF581A30B97D7944940BB70 ] Spooler         C:\windows\System32\spoolsv.exe
23:13:49.0933 0x048c  Spooler - ok
23:13:50.0017 0x048c  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\windows\system32\sppsvc.exe
23:13:50.0128 0x048c  sppsvc - ok
23:13:50.0144 0x048c  [ 2E0F160AFE1EB7E8C21D6FE782FFFE0B, 0CA845468E42F0448FD7BECFA4E75E8548E20CAAA0DE0C37FFFACF7EB16CE0DE ] srv             C:\windows\system32\DRIVERS\srv.sys
23:13:50.0162 0x048c  srv - ok
23:13:50.0177 0x048c  [ A0BDA7332A9EE59062A7037D161C8715, C08818E52B64BDB194A2434C3F479360C960A99AD08F81CF51D64B7D92EBE0CB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
23:13:50.0204 0x048c  srv2 - ok
23:13:50.0214 0x048c  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
23:13:50.0229 0x048c  srvnet - ok
23:13:50.0235 0x048c  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV         C:\windows\System32\ssdpsrv.dll
23:13:50.0252 0x048c  SSDPSRV - ok
23:13:50.0262 0x048c  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc         C:\windows\system32\sstpsvc.dll
23:13:50.0278 0x048c  SstpSvc - ok
23:13:50.0343 0x048c  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\windows\system32\windows.staterepository.dll
23:13:50.0446 0x048c  StateRepository - ok
23:13:50.0454 0x048c  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\windows\system32\drivers\stexstor.sys
23:13:50.0465 0x048c  stexstor - ok
23:13:50.0479 0x048c  [ 505F32DE573ECEDF398DB9E2FC0D5E45, 0F257200BD79C7A62C39279B1C0AF9032028B23561DB71DA9903366A0DF88E5C ] stisvc          C:\windows\System32\wiaservc.dll
23:13:50.0507 0x048c  stisvc - ok
23:13:50.0513 0x048c  [ 6BC6023E866489D22CE30E18846B80D9, FD0D13332F3E267524A9FA7FEC128298D4905722807C172AE8E3DFE445C28DB1 ] storahci        C:\windows\system32\drivers\storahci.sys
23:13:50.0525 0x048c  storahci - ok
23:13:50.0530 0x048c  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt         C:\windows\system32\drivers\vmstorfl.sys
23:13:50.0541 0x048c  storflt - ok
23:13:50.0545 0x048c  [ 53D13EA98FDB37DBF8749E950CFD9EAD, 93122D9F4884154364384E1ABC5637540EE8BD5AF4D3E97B744D1FE5552A7AD6 ] stornvme        C:\windows\system32\drivers\stornvme.sys
23:13:50.0553 0x048c  stornvme - ok
23:13:50.0560 0x048c  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\windows\system32\drivers\storqosflt.sys
23:13:50.0573 0x048c  storqosflt - ok
23:13:50.0585 0x048c  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc         C:\windows\system32\storsvc.dll
23:13:50.0604 0x048c  StorSvc - ok
23:13:50.0612 0x048c  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs         C:\windows\system32\drivers\storufs.sys
23:13:50.0619 0x048c  storufs - ok
23:13:50.0624 0x048c  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc         C:\windows\system32\drivers\storvsc.sys
23:13:50.0632 0x048c  storvsc - ok
23:13:50.0636 0x048c  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc           C:\windows\system32\svsvc.dll
23:13:50.0651 0x048c  svsvc - ok
23:13:50.0655 0x048c  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\windows\System32\drivers\swenum.sys
23:13:50.0666 0x048c  swenum - ok
23:13:50.0677 0x048c  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv           C:\windows\System32\swprv.dll
23:13:50.0701 0x048c  swprv - ok
23:13:50.0706 0x048c  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\windows\System32\drivers\Synth3dVsc.sys
23:13:50.0716 0x048c  Synth3dVsc - ok
23:13:50.0734 0x048c  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain         C:\windows\system32\sysmain.dll
23:13:50.0770 0x048c  SysMain - ok
23:13:50.0784 0x048c  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\windows\System32\SystemEventsBrokerServer.dll
23:13:50.0804 0x048c  SystemEventsBroker - ok
23:13:50.0814 0x048c  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\windows\System32\TabSvc.dll
23:13:50.0828 0x048c  TabletInputService - ok
23:13:50.0835 0x048c  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv         C:\windows\System32\tapisrv.dll
23:13:50.0853 0x048c  TapiSrv - ok
23:13:50.0900 0x048c  [ 90F942B1D2B6F99B106833F417E8654F, 5CC7419A9356E0BE16BEE21A5D7B6EF2E5951581F6584EA84F9FED45DD44BA72 ] Tcpip           C:\windows\system32\drivers\tcpip.sys
23:13:50.0953 0x048c  Tcpip - ok
23:13:50.0997 0x048c  [ 90F942B1D2B6F99B106833F417E8654F, 5CC7419A9356E0BE16BEE21A5D7B6EF2E5951581F6584EA84F9FED45DD44BA72 ] Tcpip6          C:\windows\system32\drivers\tcpip.sys
23:13:51.0052 0x048c  Tcpip6 - ok
23:13:51.0065 0x048c  [ 14A6ED9AD702CE1F1CE34756EB41834F, 3BD985C9EBBA12BF66D0492F21D3551888DB612BDB736B11B7C7B0E475A8314A ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
23:13:51.0076 0x048c  tcpipreg - ok
23:13:51.0082 0x048c  [ 0E9EC7550A76347EA677761155494ADE, DE97C6F35B5FA76A35C9C79312264B3A91043B8A46CD09CE91909E2FCC66076D ] tdx             C:\windows\system32\DRIVERS\tdx.sys
23:13:51.0094 0x048c  tdx - ok
23:13:51.0098 0x048c  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\windows\System32\drivers\terminpt.sys
23:13:51.0105 0x048c  terminpt - ok
23:13:51.0126 0x048c  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService     C:\windows\System32\termsrv.dll
23:13:51.0161 0x048c  TermService - ok
23:13:51.0166 0x048c  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\windows\system32\themeservice.dll
23:13:51.0184 0x048c  Themes - ok
23:13:51.0191 0x048c  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\windows\system32\TieringEngineService.exe
23:13:51.0212 0x048c  TieringEngineService - ok
23:13:51.0225 0x048c  [ A9965F69CBD9D4CF42D34D502EFE34DE, 365D361CB1B99A846A07500DA06F99925C5C0096561EB005DAB936F70F98B249 ] tiledatamodelsvc C:\windows\system32\tileobjserver.dll
23:13:51.0252 0x048c  tiledatamodelsvc - ok
23:13:51.0258 0x048c  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc   C:\windows\System32\TimeBrokerServer.dll
23:13:51.0272 0x048c  TimeBrokerSvc - ok
23:13:51.0280 0x048c  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM             C:\windows\System32\drivers\tpm.sys
23:13:51.0293 0x048c  TPM - ok
23:13:51.0299 0x048c  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\windows\System32\trkwks.dll
23:13:51.0312 0x048c  TrkWks - ok
23:13:51.0317 0x048c  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
23:13:51.0331 0x048c  TrustedInstaller - ok
23:13:51.0336 0x048c  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\windows\system32\drivers\TsUsbFlt.sys
23:13:51.0348 0x048c  tsusbflt - ok
23:13:51.0352 0x048c  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD         C:\windows\System32\drivers\TsUsbGD.sys
23:13:51.0363 0x048c  TsUsbGD - ok
23:13:51.0368 0x048c  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\windows\System32\drivers\tsusbhub.sys
23:13:51.0382 0x048c  tsusbhub - ok
23:13:51.0388 0x048c  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\windows\System32\drivers\tunnel.sys
23:13:51.0401 0x048c  tunnel - ok
23:13:51.0406 0x048c  [ 13781908186770ABE9F8EBCC2B45B138, 4BEC8466254E0C6492CC55CE344A6173878CFA040238C6BE5842E5209F066DEE ] tzautoupdate    C:\windows\system32\tzautoupdate.dll
23:13:51.0420 0x048c  tzautoupdate - ok
23:13:51.0427 0x048c  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\windows\System32\drivers\uaspstor.sys
23:13:51.0436 0x048c  UASPStor - ok
23:13:51.0441 0x048c  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101       C:\windows\system32\Drivers\UcmCx.sys
23:13:51.0455 0x048c  UcmCx0101 - ok
23:13:51.0460 0x048c  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\windows\system32\Drivers\UcmTcpciCx.sys
23:13:51.0471 0x048c  UcmTcpciCx0101 - ok
23:13:51.0476 0x048c  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi         C:\windows\System32\drivers\UcmUcsi.sys
23:13:51.0487 0x048c  UcmUcsi - ok
23:13:51.0494 0x048c  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\windows\system32\drivers\ucx01000.sys
23:13:51.0505 0x048c  Ucx01000 - ok
23:13:51.0511 0x048c  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx           C:\windows\system32\drivers\udecx.sys
23:13:51.0521 0x048c  UdeCx - ok
23:13:51.0531 0x048c  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
23:13:51.0552 0x048c  udfs - ok
         
__________________

 

Themen zu Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1)
.dll, administratorrechte, adobe flash player, auftrag, autorun, blockiert, defender, explorer, externe festplatte, festplatte, firefox, flash player, frage, gdata, gen:variant.razy.203163, homepage, infizierte, mozilla, opera, programm, prozesse, realtek, registry, security, services.exe, trojan.agent.spy, trojan.generickd.5624497, virus, windows, windowsapps




Ähnliche Themen: Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1)


  1. Virus: Trojan.NSIS.Androm.5 (Engine A) auf neuem Rechner gefunden
    Plagegeister aller Art und deren Bekämpfung - 17.01.2017 (3)
  2. Virus: JS:Trojan.Cryxos.27 (Engine A)
    Log-Analyse und Auswertung - 06.01.2017 (9)
  3. Virus: Gen:Variant.Zusy.133061 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 14.04.2015 (9)
  4. Virus "Gen:Variant.Kazy.418613 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 08.12.2014 (9)
  5. Win 8.1: Virusfund Trojan.GenericKD.2011851 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 07.12.2014 (4)
  6. Virus: Win32.Trojan.Agent.RLUV02 (Engine B) gefunden
    Log-Analyse und Auswertung - 07.10.2014 (11)
  7. Viren : Trojan.GenericKD.1843822 - Gen:Variant.Adware.BHO.Agent.4 - Trojan.Ciusky.Gen.13
    Plagegeister aller Art und deren Bekämpfung - 08.09.2014 (3)
  8. W 8.1,Trojaner kann von mir nicht entfernt werden.Virus: Trojan.GenericKD.1673711 (Engine A),Virus: Win32.Trojan.Pirpi.A (Engine B)
    Plagegeister aller Art und deren Bekämpfung - 21.08.2014 (3)
  9. Trojan.GenericKD.942439 / Trojan.GenericKD.1305731 u.a.
    Log-Analyse und Auswertung - 11.07.2014 (19)
  10. Win 8: Virusfund Trojan.GenericKD 1687892 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 03.06.2014 (3)
  11. WIN 7: Virusfund Trojan.GenericKD.1631929 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 08.04.2014 (3)
  12. variant of Java/Exploit.CVE-2013-2423.Q trojan - Landespolizeidirection-Virus
    Log-Analyse und Auswertung - 12.05.2013 (15)
  13. Gdata zeigt Meldung von Trojan.Sirefef.JC (Engine A) Datei: 00000001.@ ...
    Plagegeister aller Art und deren Bekämpfung - 04.09.2012 (16)
  14. Gen.Variant.Barys.718 Trojaner/Virus oder fehmeldung von GData?
    Plagegeister aller Art und deren Bekämpfung - 30.04.2012 (1)
  15. Windows gesperrt, BKA Virus, Trojan.Agent, Heuristics Shuriken, trojan.vupx.pl1 etc.
    Log-Analyse und Auswertung - 04.03.2012 (3)
  16. Infizierte Webseite: Trojan.JS.Agent.EUZ (Engine A), HTML:ImgHack-A [Trj] (Engine B)
    Log-Analyse und Auswertung - 31.01.2012 (1)
  17. Virus: Trojan.Generic.5295221 (Engine-A) gefunden und PC wird immer langsamer
    Plagegeister aller Art und deren Bekämpfung - 21.04.2011 (8)

Zum Thema Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1) - Hallo Matthias, als erstes Vielen Dank für Deine Zeit und Mühe! Dann ein kleiner Nachtrag zu Problemen seit den Funden: - das Disconnect-Plugin funktioniert heute wieder nicht - Mozilla "zickt" - Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1)...
Archiv
Du betrachtest: Malwarefunde (GData Engine A bzw. MBAM): Virus:Gen:Variant.Razy.203163 und Virus:Trojan.GenericKD.5624497 bzw. Trojan.Agent.Spy (1) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.