|
Plagegeister aller Art und deren Bekämpfung: ESET Fund - LogfileWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.09.2017, 21:53 | #1 |
| ESET Fund - Logfile Hallo, ich habe unten den Log von ESET angehängt. Sowohl Malwarebytes als auch der Adware Cleaner finden nichts. Beunruhigt mich ein wenig... Code:
ATTFilter C:\Users\Chris\AppData\Local\Mozilla\Firefox\Profiles\rt6zi3x3.default-1493766385897\cache2\entries\AFDFE1D00350DD8ADB200356B1E741E65B878A7F MSIL/KeyLogger.KeyProwler.B Anwendung |
06.09.2017, 10:51 | #2 |
/// TB-Ausbilder | ESET Fund - LogfileMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Um die Bereinigung möchlichst effektiv und schnell gestalten zu können, bitte ich um Beachtung der folgenden Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags: So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt 2 Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
06.09.2017, 11:04 | #3 |
| ESET Fund - LogfileCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-08-2017 durchgeführt von Chris (06-09-2017 11:59:04) Gestartet von C:\Users\Chris\Downloads Windows 10 Home Version 1703 (X64) (2017-04-19 22:50:26) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2085067102-2347417263-2365046495-500 - Administrator - Disabled) Chris (S-1-5-21-2085067102-2347417263-2365046495-1001 - Administrator - Enabled) => C:\Users\Chris DefaultAccount (S-1-5-21-2085067102-2347417263-2365046495-503 - Limited - Disabled) Gast (S-1-5-21-2085067102-2347417263-2365046495-501 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 15.14 (HKLM-x32\...\7-Zip) (Version: 15.14 - Igor Pavlov) Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated) Adobe Photoshop Lightroom 4.4 64-bit (HKLM\...\{11A955CD-4398-405A-886D-E464C3618FBF}) (Version: 4.4.1 - Adobe) Akamai NetSession Interface (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version: - Ubisoft) Anno1701 (HKLM-x32\...\Uplay Install 2835) (Version: - Ubisoft) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.41 - NVIDIA Corporation) Hidden Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Deadlight (HKLM\...\Steam App 211400) (Version: - Tequila Works, S.L.) Dropbox (HKLM-x32\...\Dropbox) (Version: 33.4.23 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - ) HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.29.01 - Hyperionics Technology LLC) Imo Messenger (HKLM-x32\...\{C24BA4A6-1B25-45A1-9613-8B4E992826B5}) (Version: 1.0.6 - PageBites, Inc) Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation) Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation) Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) Knuddels Standalone App (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Knuddels App ) (Version: "2015.12.6.0" - "Knuddels App") Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) ManyCam 2.6.55 (remove only) (HKLM-x32\...\ManyCam) (Version: 2.6.55 - ManyCam LLC) MFC RunTime files (HKLM-x32\...\{70C592EC-AE9B-4734-928B-676E824FB41E}) (Version: 1.0.0 - Extensoft) Hidden Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee) Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 55.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 55.0.3 (x86 de)) (Version: 55.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 55.0.3.6445 - Mozilla) Mozilla Thunderbird 45.8.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.8.0 (x86 de)) (Version: 45.8.0 - Mozilla) MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version: - ) netis Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0193 - netis Systems Co.,Ltd.) NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 385.41 - NVIDIA Corporation) NVIDIA GeForce Experience 3.9.0.61 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.61 - NVIDIA Corporation) NVIDIA Grafiktreiber 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.41 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.321.0 - Tracker Software Products Ltd) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.) Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.39 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.) Spotify (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Spotify) (Version: 1.0.60.492.gbb40dab8 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) The Walking Dead (HKLM\...\Steam App 207610) (Version: - Telltale Games) Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version: - Ubisoft) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Viber (HKLM-x32\...\{36E3DCB1-78E8-405A-8088-DFEE6BAB7BFF}) (Version: 6.8.2.878 - Viber Media Inc.) Hidden Viber (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\{190bc592-977d-4ebf-be51-225bed62e481}) (Version: 6.8.2.878 - Viber Media Inc.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.) Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 34.11.2016.27 - Ruiware) WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) XviD MPEG-4 Video Codec (HKLM-x32\...\XviD_is1) (Version: XviD-1.0.3-20122004 - XviD Team (Koepi)) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) ContextMenuHandlers1-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ContextMenuHandlers1-x32: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\Secure Eraser\SecEraser64.dll [2016-02-03] () ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes) ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) ContextMenuHandlers4-x32: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-08-22] (NVIDIA Corporation) ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes) ContextMenuHandlers6-x32: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\Secure Eraser\SecEraser64.dll [2016-02-03] () ContextMenuHandlers6-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers6-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {01F75D02-88A8-4415-82A6-CE9CB48DCEE0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-04-16] (Dropbox, Inc.) Task: {1514BBE3-E84A-4D9B-88D9-43D5B0AA9531} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-18] (NVIDIA Corporation) Task: {3127170E-627D-4258-9046-27531C873ED8} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {42661BCB-AAA8-4D5F-AE20-C24079689118} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-14] (Google Inc.) Task: {5DEB8E8B-81EE-48AD-8B1C-924D46DB3201} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-18] (NVIDIA Corporation) Task: {77C71BCE-DF35-46FF-B703-B19F61AC6D11} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-18] (NVIDIA Corporation) Task: {A2758957-7E91-4DE2-90D0-61D99D4B0CCB} - System32\Tasks\{2E2CE07B-4A22-40E3-B7DB-A94E8F2C6065} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?source=lightinstaller&page=tsMain Task: {A45ABF86-8FAB-42D0-BE17-37B4906AE157} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-11] (Adobe Systems Incorporated) Task: {A530E947-85A6-41C0-BE0F-5051844B2239} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-18] (NVIDIA Corporation) Task: {A7A31280-0758-4A15-9A25-21158FDEC16B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-09] (Microsoft Corporation) Task: {AD9AA984-C7BA-4E53-8B6C-6243F400FC1D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-14] (Google Inc.) Task: {B37E1130-8DEC-400D-9C37-DDE0796E80CE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-08-18] (NVIDIA Corporation) Task: {B7E16A0F-C747-4E25-850C-7DBD17C1949C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-08-18] (NVIDIA Corporation) Task: {C561EB14-8CFE-4069-BBE9-B974B425ED9E} - System32\Tasks\TrackerAutoUpdate => D:\Tracker Software\Update\TrackerUpdate.exe [2017-03-06] (Tracker Software Products (Canada) Ltd.) Task: {DF925662-4A94-4046-B400-177FA2C39028} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-04-16] (Dropbox, Inc.) Task: {EFE7496C-FC16-4E29-AEAC-EE250067B59C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-08-18] (NVIDIA Corporation) Task: {F968F975-AC39-4B58-B387-C0BB69F4E4D8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-18] (NVIDIA Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => D:\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\Users\Chris\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2017-01-01 20:51 - 2017-08-18 06:36 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-04-20 00:44 - 2017-08-22 01:10 - 000133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-03-18 22:59 - 2017-03-20 06:36 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-05-31 18:31 - 2017-08-21 18:33 - 000372736 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotrobrowserhelper.exe 2015-07-11 00:37 - 2015-07-11 00:37 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2017-01-01 20:51 - 2017-08-18 06:36 - 069807552 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2017-01-01 20:51 - 2017-08-18 06:36 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2009-01-27 14:44 - 2009-01-27 14:42 - 000019456 _____ () D:\Free Video Converter\videocore.dll 2009-01-27 14:44 - 2009-01-27 14:42 - 006963712 _____ () D:\Free Video Converter\videotrans.dll 2009-01-27 14:44 - 2009-01-27 14:42 - 000452608 _____ () D:\Free Video Converter\videoformat.dll 2016-03-14 21:15 - 2016-03-14 21:15 - 000166912 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\binkw32.dll 2017-05-31 18:35 - 2017-05-31 18:35 - 067718656 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\libcef.dll 2016-03-14 21:15 - 2016-03-14 21:15 - 000077824 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\vorbisfile.dll 2016-03-14 21:15 - 2016-03-14 21:15 - 000184320 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lua51.dll 2016-03-14 21:15 - 2016-03-14 21:15 - 000049152 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\ogg.dll 2016-03-14 21:15 - 2016-03-14 21:15 - 001060864 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\vorbis.dll 2016-03-14 22:44 - 2017-05-31 18:31 - 001922560 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\libglesv2.dll 2016-03-14 22:44 - 2017-05-31 18:31 - 000079872 _____ () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\libegl.dll 2017-07-24 15:57 - 2017-07-24 15:57 - 001991640 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll 2011-05-13 06:46 - 2011-05-13 06:46 - 000498760 _____ () D:\ManyCam\Bin\cximagecrt.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2015-10-30 09:24 - 2015-10-30 09:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Chris\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{11f462d9-2000-4ae7-8f3b-0642b2ffd935}.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{F06DD1A8-C957-4E93-BD98-330369B69E0A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{0F6AB393-4268-4E0C-8E24-5DED7A07D392}] => (Block) D:\qtox\bin\qtox.exe FirewallRules: [{0C2FA4B5-A3B9-49DA-BA6A-999CC7B716AE}] => (Block) D:\qtox\bin\qtox.exe FirewallRules: [UDP Query User{0DBBBF3C-91E5-4AD7-90BF-D87E504D94A5}D:\qtox\bin\qtox.exe] => (Allow) D:\qtox\bin\qtox.exe FirewallRules: [TCP Query User{9962B292-8B55-4369-9CAA-93AA038AD957}D:\qtox\bin\qtox.exe] => (Allow) D:\qtox\bin\qtox.exe FirewallRules: [UDP Query User{BC641ECA-BA91-4A03-8291-7BFD38155864}D:\ubisoft\for honor\forhonorbeta\forhonor.exe] => (Allow) D:\ubisoft\for honor\forhonorbeta\forhonor.exe FirewallRules: [TCP Query User{5EAC7426-FC3E-4CC8-AA26-70419E473DC0}D:\ubisoft\for honor\forhonorbeta\forhonor.exe] => (Allow) D:\ubisoft\for honor\forhonorbeta\forhonor.exe FirewallRules: [{27B7A7E9-52F9-426F-8701-E3E6C2CC1CD8}] => (Allow) D:\Ubisoft\Neuer Ordner\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe FirewallRules: [{201C7FE2-223D-43C1-B7BD-5098B243AB0D}] => (Allow) D:\Ubisoft\Neuer Ordner\Tom Clancy's Rainbow Six Siege\RainbowSixGame.exe FirewallRules: [{42AE3F03-BDB0-4EED-A98A-31515639D50B}] => (Allow) D:\Ubisoft\Neuer Ordner\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [{0A514671-7FB6-4B5E-84FC-9D538FB8FF88}] => (Allow) D:\Ubisoft\Neuer Ordner\Tom Clancy's Rainbow Six Siege\RainbowSix.exe FirewallRules: [{06325CE9-BDB2-408E-AE27-ABCF69C5CB97}] => (Allow) D:\Ubisoft\Anno 2205\Bin\Win64\Anno2205.exe FirewallRules: [{81F61CB2-745A-4539-80B9-878BF089CA6A}] => (Allow) D:\Ubisoft\Assassin's Creed II\UPlayBrowser.exe FirewallRules: [{088C10F5-3D83-4093-85E3-AF96C01B1FCF}] => (Allow) D:\Ubisoft\Assassin's Creed II\UPlayBrowser.exe FirewallRules: [{6A519412-2B07-4BF6-94FF-252E51CCE5E0}] => (Allow) D:\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe FirewallRules: [{735D0EDD-4C6A-4F4E-B6D5-6356C01C62B8}] => (Allow) D:\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe FirewallRules: [{A386E0FC-2559-4433-9A23-7C4151536D8E}] => (Allow) D:\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe FirewallRules: [{9FA2CF16-5EC5-40DC-B777-42446D47BCEE}] => (Allow) D:\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe FirewallRules: [{50E02735-6DB6-4450-B9EB-E3D6271481DA}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{7044EC4A-4ADD-4EA5-AC0E-79BAA7A1180A}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{2CA6C599-C573-43FF-95B4-035EE8708F87}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{5F27A7CA-4C2C-4FEF-BB26-C4ED874A30A9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{D11E5A30-AD83-4D19-B8A0-6C54C88ADC61}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{92A85300-F70B-4A42-A2AA-49F73AAE0243}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{CA9F0CE5-430E-4408-BCD9-84F382617D59}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{19CACF43-7A15-41A9-94A7-80B819A93565}] => (Allow) D:\Steam\steamapps\common\Deadlight\Binaries\Win32\LOTDGame.exe FirewallRules: [{BEE8C6A0-F562-4B52-B138-32A6DA87F199}] => (Allow) D:\Steam\steamapps\common\Deadlight\Binaries\Win32\LOTDGame.exe FirewallRules: [UDP Query User{92C9167B-ADC7-4DC3-B985-A3079FA1C5D1}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{F2CCFF41-5159-447A-893C-E6B1267F7490}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{133011E3-66A3-4029-ACD0-67D9F352A8EC}C:\users\chris\knuddels-stapp\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\chris\knuddels-stapp\commonfiles\java\bin\javaw.exe FirewallRules: [TCP Query User{D595D634-2A0E-4D5F-9B1F-C03998F2EDFE}C:\users\chris\knuddels-stapp\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\chris\knuddels-stapp\commonfiles\java\bin\javaw.exe FirewallRules: [{75214EA1-E104-45FF-95F1-B28D73291FDC}] => (Allow) LPort=1900 FirewallRules: [{3F767099-AB22-46EE-8227-66C7B488277C}] => (Allow) LPort=2869 FirewallRules: [{2D4CBE06-750C-4BBB-8C49-3D944845F12D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{8B7CEE7F-2DD7-4A0E-AE13-04F74C34F002}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{48F6365B-BA62-4E2C-B945-17768DAA787F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{98575832-8285-4D19-A4B8-AEAFB7D5CA69}C:\users\chris\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\chris\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{19A3B84A-10BE-4751-AEF5-1633F0C3301C}C:\users\chris\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\chris\appdata\local\akamai\netsession_win.exe FirewallRules: [{B04720A5-8D7F-45A8-972B-033E54CF0FFF}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{B1F7CC13-CAAF-4593-B432-8A3512307827}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{74007E34-C52E-4760-B362-BF7537146471}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{1E60E0CA-5C42-4171-AD8C-E5E1B1D454D5}] => (Allow) D:\Steam\bin\steamwebhelper.exe FirewallRules: [{5854A898-A87A-4B74-B202-A1B47C48715D}] => (Allow) D:\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe FirewallRules: [{014D2387-E39A-41B9-803E-0A263344B7C1}] => (Allow) D:\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe FirewallRules: [TCP Query User{891C6FDD-CF68-46CA-8EB9-0FE1B24957D5}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [UDP Query User{869CF435-5417-43AC-9F5F-FEBEFE78C62A}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [TCP Query User{F0A32B70-289F-4070-9CCB-31538FB402C7}C:\users\chris\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\chris\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{DAD85C45-431B-4DD6-A525-B426A459FE9C}C:\users\chris\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\chris\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{E88FDFBF-0AB6-428C-8165-0F310CFB3C2C}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [UDP Query User{622B407F-52D7-48AC-90A4-6BD14F84933F}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe FirewallRules: [TCP Query User{E715626D-5355-4642-A41F-4CC92AC4F94F}D:\emule\emule.exe] => (Allow) D:\emule\emule.exe FirewallRules: [UDP Query User{8AE1D52E-CD4C-41E4-83C7-919B8467C612}D:\emule\emule.exe] => (Allow) D:\emule\emule.exe FirewallRules: [{181360E1-C9E8-455D-99E6-131683220D3C}] => (Block) D:\emule\emule.exe FirewallRules: [{12AE60BE-F879-4319-A0DC-BE9AEAD0CE48}] => (Block) D:\emule\emule.exe FirewallRules: [{9B963806-17CD-42F6-B078-76750AC2B05B}] => (Allow) D:\Ubisoft\Ghost Recon\Tom Clancy's Ghost Recon Wildlands\GRW.exe FirewallRules: [{D47B4FFB-E69F-45BC-BD16-C470BC99218F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{A050C922-C3C2-42AA-B0EB-B889E257BD63}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F81D3F84-72DE-4523-A187-0BCD877F994A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{6C9A50C6-0305-4DAA-B023-1C51409418D0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{4C39EB8A-AAD2-4FC5-AC55-036B88368DD9}C:\program files (x86)\camfrog\camfrog video chat\camfrog video chat.exe] => (Allow) C:\program files (x86)\camfrog\camfrog video chat\camfrog video chat.exe FirewallRules: [UDP Query User{0EC380D1-FC5F-4D4D-AA4E-4B992272779C}C:\program files (x86)\camfrog\camfrog video chat\camfrog video chat.exe] => (Allow) C:\program files (x86)\camfrog\camfrog video chat\camfrog video chat.exe FirewallRules: [{576CBA41-7BBA-4EB2-9892-BCF7A63D1740}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{94EA7E85-CE9E-4360-8C86-6CF46261E0CF}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe FirewallRules: [{1C7E90A7-51ED-438E-A96F-37FE9FEB7EEA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 18-08-2017 08:13:12 Installed Imo Messenger 25-08-2017 12:47:42 Geplanter Prüfpunkt 02-09-2017 16:15:06 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (09/05/2017 04:13:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0x19c8 Startzeit der fehlerhaften Anwendung: 0x01d3264d1dee7d53 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: fb4921b1-8335-4f9c-aa00-c02958d3f4ad Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/05/2017 03:43:34 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm lotroclient.exe, Version 2101.59.1642.4160 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2134 Startzeit: 01d3264c6d9cfc61 Beendigungszeit: 4294967295 Anwendungspfad: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Berichts-ID: 947397c1-a3e2-45f5-aff1-9b2a37b3310e Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Error: (09/05/2017 03:38:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0xf78 Startzeit der fehlerhaften Anwendung: 0x01d3263a64d11dc6 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: fba8c4af-630c-4693-b36b-ebc2cf8115ef Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/04/2017 05:47:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0x20b4 Startzeit der fehlerhaften Anwendung: 0x01d32586b6d06980 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: a98593a3-8ec8-4de2-bc88-8ad4679a5935 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/04/2017 04:03:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0x1f50 Startzeit der fehlerhaften Anwendung: 0x01d3257c77cdd09a Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: 3c0b3c1e-fa77-4e96-ba2a-5ef26672aaf7 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/04/2017 02:49:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0x1ad0 Startzeit der fehlerhaften Anwendung: 0x01d32571d07665a0 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: 68a7e92b-741e-4a98-a3b3-9bbe47ef54fa Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/03/2017 08:17:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: lotroclient.exe, Version: 2101.59.1642.4160, Zeitstempel: 0x59961434 Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xd51d5c5e Ausnahmecode: 0xc0000017 Fehleroffset: 0x000d3611 ID des fehlerhaften Prozesses: 0x12a0 Startzeit der fehlerhaften Anwendung: 0x01d324d389aa6424 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll Berichtskennung: 674fa043-5d80-4579-addc-95ab81ed7161 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (09/03/2017 06:38:27 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest. Error: (09/03/2017 06:37:45 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Chris\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest. Error: (09/03/2017 08:36:43 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest. Systemfehler: ============= Error: (09/05/2017 10:05:55 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/05/2017 09:40:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/05/2017 03:43:29 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/05/2017 03:38:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/05/2017 01:29:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/03/2017 08:17:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (09/03/2017 06:38:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/03/2017 06:38:16 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys Error: (09/03/2017 06:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/03/2017 06:38:15 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys CodeIntegrity: =================================== Date: 2017-09-03 09:29:50.616 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-01 16:23:21.945 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-29 14:15:55.427 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-25 12:45:46.295 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-22 17:05:53.215 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-11 18:21:05.831 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-06 04:43:48.436 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-07-22 16:55:29.591 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-20 16:17:22.869 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-06 20:08:01.647 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz Prozentuale Nutzung des RAM: 37% Installierter physikalischer RAM: 16346.72 MB Verfügbarer physikalischer RAM: 10282.47 MB Summe virtueller Speicher: 18778.72 MB Verfügbarer virtueller Speicher: 12095.72 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:222.98 GB) (Free:59.37 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (D1-P1) (Fixed) (Total:931.51 GB) (Free:188.01 GB) NTFS Drive e: (TOSHIBA EXT) (Fixed) (Total:931.51 GB) (Free:438.56 GB) NTFS Drive f: (GRW) (CDROM) (Total:7.94 GB) (Free:0 GB) UDF ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: EF94E5D9) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=500 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 38E4ADF8) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 67EB62E7) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017 durchgeführt von Chris (Administrator) auf DESKTOP-2M6NKLL (06-09-2017 11:58:35) Gestartet von C:\Users\Chris\Downloads Geladene Profile: Chris (Verfügbare Profile: Chris) Platform: Windows 10 Home Version 1703 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Akamai Technologies, Inc.) C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe (Ruiware) D:\WinPatrol\WinPatrol.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (Spotify Ltd) C:\Users\Chris\AppData\Roaming\Spotify\SpotifyWebHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_26_0_0_151.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_26_0_0_151.exe (Standing Stone Games, LLC.) C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotroclient.exe () C:\Program Files (x86)\Turbine\Der Herr der Ringe Online\lotrobrowserhelper.exe (Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe (Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-08-22] (Dropbox, Inc.) HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.) HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [WinPatrol] => D:\WinPatrol\winpatrol.exe [1231240 2016-11-14] (Ruiware) HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [Spotify Web Helper] => C:\Users\Chris\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1580144 2017-08-16] (Spotify Ltd) HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\MountPoints2: {9f0c9932-d46e-11e6-9698-d8cb8ae0c9b8} - "F:\autorun.exe" HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [804352 2017-03-18] (Microsoft Corporation) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{19eb9ae3-527e-44e3-bbd5-7d176c4ff30d}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{9a9780da-5392-447d-830c-de21e4f15d60}: [DhcpNameServer] 172.17.2.1 172.17.2.1 Tcpip\..\Interfaces\{ae647b26-9842-48b9-8376-c59f5f8cabab}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{da0ba8eb-9cdd-48eb-84c1-7c479440b9ea}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Internet Explorer: ================== BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-22] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-22] (Oracle Corporation) FireFox: ======== FF DefaultProfile: rt6zi3x3.default-1493766385897 FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\rt6zi3x3.default-1493766385897 [2017-09-06] FF Extension: (Tamper Data Icon Redux) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\rt6zi3x3.default-1493766385897\Extensions\tamperdataiconredux@frizzip.com.xpi [2017-09-02] FF Extension: (Adblock Plus) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\rt6zi3x3.default-1493766385897\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-08] FF Extension: (Firefox Screenshots) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\rt6zi3x3.default-1493766385897\features\{61aa93cf-e72a-46fb-ae85-f8dc13c51730}\screenshots@mozilla.org.xpi [2017-09-02] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-11] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-03-06] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.2.6 -> D:\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-11] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-03-06] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-22] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-22] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-08-22] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-08-22] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> D:\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [Keine Datei] FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2017-03-06] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2017-09-02] () Chrome: ======= CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default [2017-09-02] CHR Extension: (Google Präsentationen) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-14] CHR Extension: (Google Docs) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-14] CHR Extension: (Google Drive) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-14] CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-14] CHR Extension: (Google Tabellen) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-14] CHR Extension: (Avira Browserschutz) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-06-18] CHR Extension: (Google Docs Offline) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-30] CHR Extension: (Skype) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-09-02] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-02] CHR Extension: (Google Mail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-14] CHR Extension: (Chrome Media Router) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-02] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-04-16] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-04-16] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-08-22] (Dropbox, Inc.) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [383016 2017-05-17] (EasyAntiCheat Ltd) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-11] (Intel Corporation) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-08-22] (NVIDIA Corporation) S2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R1 MpKsl53e08b5f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{21384C1D-6071-4663-9403-A97A741E1BE7}\MpKsl53e08b5f.sys [44928 2017-09-05] (Microsoft Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ce1961376673184c\nvlddmkm.sys [15600248 2017-08-22] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation) U5 NvStUSB; C:\Windows\System32\Drivers\NvStUSB.sys [469688 2016-01-23] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57976 2017-08-22] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-05-04] (Realtek ) R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2017-03-18] (Realtek Semiconductor Corporation ) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [159952 2015-11-14] (Ray Hinchliffe) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R3 VCSVADHWSer; C:\WINDOWS\system32\DRIVERS\vcsvad.sys [29320 2015-10-01] (AVSOFT Corp.) R3 voxaldriver; C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys [43472 2016-07-27] () S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-09-06 11:58 - 2017-09-06 11:58 - 002395648 _____ (Farbar) C:\Users\Chris\Downloads\FRST64.exe 2017-09-06 11:58 - 2017-09-06 11:58 - 000016862 _____ C:\Users\Chris\Downloads\FRST.txt 2017-09-06 11:58 - 2017-09-06 11:58 - 000000000 ____D C:\FRST 2017-09-04 17:48 - 2017-09-04 18:11 - 009572162 _____ C:\Users\Chris\Desktop\clip0653.avi 2017-09-02 19:47 - 2017-09-02 19:47 - 000000000 ____D C:\Program Files (x86)\ESET 2017-09-02 18:50 - 2017-09-02 18:50 - 000000234 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World Editor.url 2017-09-02 18:50 - 2017-09-02 18:50 - 000000234 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anno 1701.url 2017-09-02 18:50 - 2017-09-02 18:50 - 000000234 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anno 1701 Add-On.url 2017-09-02 18:20 - 2017-09-02 22:29 - 000000000 ____D C:\AdwCleaner 2017-09-02 18:18 - 2017-09-02 18:19 - 008182736 _____ (Malwarebytes) C:\Users\Chris\Downloads\AdwCleaner_7.0.2.1.exe 2017-09-02 18:18 - 2017-09-02 18:19 - 002870984 _____ (ESET) C:\Users\Chris\Downloads\esetsmartinstaller_deu.exe 2017-08-27 17:12 - 2017-08-27 17:13 - 000000000 ____D C:\Users\Chris\AppData\Local\Viber 2017-08-25 13:50 - 2017-08-25 13:50 - 000000000 ____D C:\WINDOWS\LastGood 2017-08-25 13:50 - 2017-08-22 00:33 - 000135800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-08-25 13:48 - 2017-08-22 03:01 - 040240248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 035924600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 035314112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 029019072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 023132184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 018849456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 013782904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 012225984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 011692344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 010072768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 004162496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 003590592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438541.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001597888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438541.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001292096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001289840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001068152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001008816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001007280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 001004992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000972736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000924280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000781544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000725112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000690320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000618744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000617232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000584312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000578056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000499320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-08-25 13:48 - 2017-08-22 03:01 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-08-25 13:48 - 2017-08-22 03:01 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-08-24 06:52 - 2017-09-02 19:43 - 085458944 _____ C:\WINDOWS\system32\config\SOFTWARE 2017-08-24 06:50 - 2017-08-24 06:50 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware 2017-08-23 22:33 - 2017-08-23 22:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-08-22 18:55 - 2017-08-22 18:55 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2017-08-22 18:55 - 2017-08-22 18:55 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2017-08-22 18:55 - 2017-08-22 18:55 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2017-08-22 18:55 - 2017-08-22 18:55 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2017-08-18 08:13 - 2017-08-18 08:13 - 000002075 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Imo Messenger.lnk 2017-08-18 08:13 - 2017-08-18 08:13 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Imo Messenger 2017-08-15 03:59 - 2017-08-15 03:59 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2017-08-15 03:58 - 2017-08-10 02:34 - 001988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438528.dll 2017-08-15 03:58 - 2017-08-10 02:34 - 001598072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438528.dll 2017-08-09 22:21 - 2017-09-03 20:13 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-08-09 22:21 - 2017-08-09 22:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2017-08-09 22:21 - 2016-03-10 14:09 - 000065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2017-08-09 22:21 - 2016-03-10 14:08 - 000140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2017-08-09 22:21 - 2016-03-10 14:08 - 000027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-08-09 13:15 - 2017-08-01 04:39 - 008319392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-08-09 13:15 - 2017-08-01 04:38 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-08-09 13:15 - 2017-08-01 04:38 - 000382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-08-09 13:15 - 2017-08-01 04:36 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-08-09 13:15 - 2017-08-01 04:36 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-08-09 13:15 - 2017-08-01 04:36 - 000119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-08-09 13:15 - 2017-08-01 04:35 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2017-08-09 13:15 - 2017-08-01 04:35 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2017-08-09 13:15 - 2017-08-01 04:34 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2017-08-09 13:15 - 2017-08-01 04:34 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2017-08-09 13:15 - 2017-08-01 04:34 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-08-09 13:15 - 2017-08-01 04:34 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2017-08-09 13:15 - 2017-08-01 04:33 - 000473240 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-08-09 13:15 - 2017-08-01 04:32 - 002444704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-08-09 13:15 - 2017-08-01 04:32 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-08-09 13:15 - 2017-08-01 04:32 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-08-09 13:15 - 2017-08-01 04:31 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-08-09 13:15 - 2017-08-01 04:31 - 002645680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-08-09 13:15 - 2017-08-01 04:31 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-08-09 13:15 - 2017-08-01 04:31 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll 2017-08-09 13:15 - 2017-08-01 04:30 - 000723680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2017-08-09 13:15 - 2017-08-01 04:30 - 000411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-08-09 13:15 - 2017-08-01 04:30 - 000410160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2017-08-09 13:15 - 2017-08-01 04:30 - 000315288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2017-08-09 13:15 - 2017-08-01 04:30 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2017-08-09 13:15 - 2017-08-01 04:30 - 000143736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2017-08-09 13:15 - 2017-08-01 04:30 - 000082336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys 2017-08-09 13:15 - 2017-08-01 04:26 - 000204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll 2017-08-09 13:15 - 2017-08-01 04:20 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-08-09 13:15 - 2017-08-01 04:20 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2017-08-09 13:15 - 2017-08-01 04:20 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2017-08-09 13:15 - 2017-08-01 04:18 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-08-09 13:15 - 2017-08-01 04:18 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-08-09 13:15 - 2017-08-01 04:17 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll 2017-08-09 13:15 - 2017-08-01 04:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-08-09 13:15 - 2017-08-01 04:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll 2017-08-09 13:15 - 2017-08-01 04:13 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-08-09 13:15 - 2017-08-01 04:13 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-08-09 13:15 - 2017-08-01 04:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll 2017-08-09 13:15 - 2017-08-01 04:12 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-08-09 13:15 - 2017-08-01 04:12 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll 2017-08-09 13:15 - 2017-08-01 04:10 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-08-09 13:15 - 2017-08-01 04:09 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2017-08-09 13:15 - 2017-08-01 04:08 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll 2017-08-09 13:15 - 2017-08-01 04:07 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-08-09 13:15 - 2017-08-01 04:07 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-08-09 13:15 - 2017-08-01 04:07 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-08-09 13:15 - 2017-08-01 04:06 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-08-09 13:15 - 2017-08-01 04:04 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-08-09 13:15 - 2017-08-01 04:04 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-08-09 13:15 - 2017-08-01 04:03 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-08-09 13:15 - 2017-08-01 03:57 - 023677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-08-09 13:15 - 2017-08-01 03:45 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-08-09 13:15 - 2017-08-01 03:45 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2017-08-09 13:15 - 2017-08-01 03:45 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2017-08-09 13:15 - 2017-08-01 03:45 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2017-08-09 13:15 - 2017-08-01 03:44 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2017-08-09 13:15 - 2017-08-01 03:44 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys 2017-08-09 13:15 - 2017-08-01 03:44 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2017-08-09 13:15 - 2017-08-01 03:42 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-08-09 13:15 - 2017-08-01 03:41 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2017-08-09 13:15 - 2017-08-01 03:41 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-08-09 13:15 - 2017-08-01 03:41 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll 2017-08-09 13:15 - 2017-08-01 03:40 - 017366528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-08-09 13:15 - 2017-08-01 03:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2017-08-09 13:15 - 2017-08-01 03:39 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll 2017-08-09 13:15 - 2017-08-01 03:38 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll 2017-08-09 13:15 - 2017-08-01 03:38 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll 2017-08-09 13:15 - 2017-08-01 03:37 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2017-08-09 13:15 - 2017-08-01 03:37 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-08-09 13:15 - 2017-08-01 03:37 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll 2017-08-09 13:15 - 2017-08-01 03:36 - 023681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-08-09 13:15 - 2017-08-01 03:35 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-08-09 13:15 - 2017-08-01 03:34 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-08-09 13:15 - 2017-08-01 03:33 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-08-09 13:15 - 2017-08-01 03:33 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll 2017-08-09 13:15 - 2017-08-01 03:32 - 007336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-08-09 13:15 - 2017-08-01 03:32 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2017-08-09 13:15 - 2017-08-01 03:31 - 012786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-08-09 13:15 - 2017-08-01 03:31 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-08-09 13:15 - 2017-08-01 03:31 - 001396736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-08-09 13:15 - 2017-08-01 03:30 - 008209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-08-09 13:15 - 2017-08-01 03:30 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-08-09 13:15 - 2017-08-01 03:30 - 002055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-08-09 13:15 - 2017-08-01 03:30 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-08-09 13:15 - 2017-08-01 03:30 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2017-08-09 13:15 - 2017-08-01 03:28 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-08-09 13:15 - 2017-08-01 03:28 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-08-09 13:15 - 2017-08-01 03:27 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-08-09 13:15 - 2017-08-01 03:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll 2017-08-09 13:15 - 2017-08-01 03:27 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2017-08-09 13:15 - 2017-08-01 03:26 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2017-08-09 13:15 - 2017-08-01 03:25 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll 2017-08-09 13:15 - 2017-08-01 03:25 - 000194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2017-08-09 13:15 - 2017-08-01 03:25 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-08-09 13:15 - 2017-08-01 00:45 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-09-06 11:10 - 2016-03-14 18:33 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Skype 2017-09-06 11:07 - 2017-04-20 00:44 - 000000000 ____D C:\Users\Chris 2017-09-06 11:07 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps 2017-09-06 11:07 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-09-06 11:06 - 2017-04-20 00:48 - 000004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{ACDD8A9F-8B92-4124-84B2-3AD08B1F1B95} 2017-09-06 11:03 - 2017-04-20 00:44 - 000000000 ____D C:\ProgramData\NVIDIA 2017-09-05 21:23 - 2017-04-20 00:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-09-05 18:28 - 2016-03-19 01:47 - 000000000 ____D C:\Users\Chris\AppData\Roaming\vlc 2017-09-05 16:13 - 2016-03-14 22:44 - 000000000 ____D C:\Users\Chris\AppData\Local\CrashDumps 2017-09-05 15:41 - 2016-03-14 19:39 - 000000000 ____D C:\Users\Chris\AppData\Roaming\TS3Client 2017-09-02 19:51 - 2017-04-20 15:18 - 003190326 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-09-02 19:51 - 2017-03-20 06:35 - 001521456 _____ C:\WINDOWS\system32\perfh007.dat 2017-09-02 19:51 - 2017-03-20 06:35 - 000369504 _____ C:\WINDOWS\system32\perfc007.dat 2017-09-02 19:45 - 2016-11-18 16:16 - 000000000 ____D C:\Users\Chris\AppData\LocalLow\Mozilla 2017-09-02 19:44 - 2017-04-20 00:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-09-02 19:44 - 2017-03-18 23:03 - 000000000 __RSD C:\WINDOWS\Media 2017-09-02 19:43 - 2017-03-18 13:40 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2017-09-02 19:23 - 2017-01-29 17:00 - 000000000 ____D C:\Users\Chris\AppData\Local\Ubisoft Game Launcher 2017-09-02 18:22 - 2017-07-21 17:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-09-02 18:22 - 2016-03-14 18:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-09-02 18:21 - 2016-11-19 14:31 - 000000000 ____D C:\Users\Chris\AppData\Local\Downloaded Installations 2017-08-31 00:12 - 2016-11-07 20:51 - 000000000 ____D C:\Users\Chris\AppData\Local\Spotify 2017-08-30 22:20 - 2016-11-07 20:50 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Spotify 2017-08-29 01:41 - 2016-03-14 20:54 - 000002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-08-28 14:42 - 2017-03-06 16:58 - 000000000 ____D C:\Users\Chris\AppData\Roaming\tox 2017-08-27 18:10 - 2017-06-18 16:39 - 000000000 ____D C:\Users\Chris\Documents\ViberDownloads 2017-08-27 18:10 - 2017-06-18 16:38 - 000000000 ____D C:\Users\Chris\AppData\Roaming\ViberPC 2017-08-25 13:50 - 2017-04-20 00:44 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-08-25 13:50 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF 2017-08-25 13:50 - 2016-03-14 18:32 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2017-08-25 13:50 - 2016-02-18 17:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-08-23 22:33 - 2016-04-16 12:47 - 000000000 ____D C:\Program Files (x86)\Dropbox 2017-08-22 03:01 - 2017-04-25 22:11 - 000046453 _____ C:\WINDOWS\system32\nvinfo.pb 2017-08-22 03:01 - 2017-04-11 17:47 - 000057976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-08-22 03:01 - 2017-04-06 21:33 - 004210360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-08-22 03:01 - 2017-04-06 21:33 - 003712024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 006463424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 002479224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 001762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 000549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 000392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 000082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-08-22 01:10 - 2017-04-20 00:44 - 000069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-08-22 00:54 - 2017-04-20 00:44 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-08-21 19:51 - 2017-05-12 02:25 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:51 - 2017-04-20 00:48 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:51 - 2017-04-20 00:48 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:51 - 2017-04-20 00:43 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-08-21 19:51 - 2017-04-20 00:43 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-08-21 19:50 - 2017-04-20 00:48 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:50 - 2017-04-20 00:48 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:50 - 2017-04-20 00:48 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:50 - 2017-04-20 00:48 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-21 19:50 - 2017-04-20 00:48 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-08-19 09:10 - 2017-04-20 00:44 - 008142301 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-08-18 06:37 - 2017-01-01 20:51 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2017-08-18 06:37 - 2017-01-01 20:51 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2017-08-18 06:37 - 2017-01-01 20:51 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2017-08-18 06:37 - 2017-01-01 20:51 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2017-08-18 06:37 - 2017-01-01 20:51 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2017-08-18 06:36 - 2017-07-21 18:20 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2017-08-18 06:36 - 2017-07-21 18:20 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2017-08-18 03:53 - 2016-02-02 17:28 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-08-17 18:26 - 2017-04-06 21:35 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2017-08-14 14:47 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache 2017-08-13 01:48 - 2016-09-10 02:04 - 000000000 ____D C:\Users\Chris\AppData\Local\Windows Live 2017-08-11 12:21 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-08-11 12:21 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\Macromed 2017-08-10 16:20 - 2017-04-20 00:43 - 000391800 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-08-09 22:03 - 2016-03-14 18:33 - 000000000 ____D C:\ProgramData\Skype 2017-08-09 13:17 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-08-09 13:16 - 2016-02-02 17:27 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-08-09 13:15 - 2016-02-02 17:27 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-08-09 11:01 - 2016-03-14 18:21 - 000000000 ____D C:\Users\Chris\AppData\Local\Packages ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-07-27 22:37 - 2016-07-27 22:37 - 000001167 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt 2016-07-27 22:37 - 2016-07-27 22:37 - 000000000 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2016-08-31 00:51 - 2017-05-23 01:16 - 000020480 _____ () C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-04-20 00:44 - 2017-04-20 00:44 - 000000000 ____H () C:\ProgramData\DP45977C.lfl 2017-03-19 15:21 - 2017-03-19 15:21 - 000005041 _____ () C:\ProgramData\mudtcpaz.vzs 2016-12-15 21:42 - 2017-01-10 23:54 - 000005943 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-15 21:42 - 2017-01-09 21:30 - 000018438 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-09-02 16:14 ==================== Ende von FRST.txt ============================ [/CODE] |
06.09.2017, 11:10 | #4 |
| ESET Fund - LogfileCode:
ATTFilter 12:06:00.0503 0x24a8 TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02 12:06:07.0080 0x24a8 ============================================================ 12:06:07.0080 0x24a8 Current date / time: 2017/09/06 12:06:07.0080 12:06:07.0080 0x24a8 SystemInfo: 12:06:07.0080 0x24a8 12:06:07.0080 0x24a8 OS Version: 10.0.15063 ServicePack: 0.0 12:06:07.0080 0x24a8 Product type: Workstation 12:06:07.0080 0x24a8 ComputerName: DESKTOP-2M6NKLL 12:06:07.0080 0x24a8 UserName: Chris 12:06:07.0080 0x24a8 Windows directory: C:\WINDOWS 12:06:07.0080 0x24a8 System windows directory: C:\WINDOWS 12:06:07.0080 0x24a8 Running under WOW64 12:06:07.0080 0x24a8 Processor architecture: Intel x64 12:06:07.0080 0x24a8 Number of processors: 4 12:06:07.0080 0x24a8 Page size: 0x1000 12:06:07.0080 0x24a8 Boot type: Normal boot 12:06:07.0080 0x24a8 CodeIntegrityOptions = 0x00000001 12:06:07.0080 0x24a8 ============================================================ 12:06:07.0117 0x24a8 KLMD registered as C:\WINDOWS\system32\drivers\12777433.sys 12:06:07.0117 0x24a8 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 15063.0, osProperties = 0x19 12:06:07.0622 0x24a8 System UUID: {8FEA8537-B393-472F-4EA1-33DD1E3E1F33} 12:06:08.0033 0x24a8 Drive \Device\Harddisk0\DR0 - Size: 0x37E4896000 ( 223.57 Gb ), SectorSize: 0x200, Cylinders: 0x7201, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 12:06:08.0034 0x24a8 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 12:06:08.0035 0x24a8 Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 12:06:11.0059 0x24a8 ============================================================ 12:06:11.0059 0x24a8 \Device\Harddisk0\DR0: 12:06:11.0059 0x24a8 MBR partitions: 12:06:11.0059 0x24a8 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 12:06:11.0059 0x24a8 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1BDF7000 12:06:11.0059 0x24a8 \Device\Harddisk1\DR1: 12:06:11.0060 0x24a8 MBR partitions: 12:06:11.0060 0x24a8 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800 12:06:11.0060 0x24a8 \Device\Harddisk2\DR2: 12:06:11.0060 0x24a8 MBR partitions: 12:06:11.0060 0x24a8 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800 12:06:11.0060 0x24a8 ============================================================ 12:06:11.0061 0x24a8 C: <-> \Device\Harddisk0\DR0\Partition2 12:06:11.0685 0x24a8 D: <-> \Device\Harddisk1\DR1\Partition1 12:06:11.0731 0x24a8 E: <-> \Device\Harddisk2\DR2\Partition1 12:06:11.0731 0x24a8 ============================================================ 12:06:11.0731 0x24a8 Initialize success 12:06:11.0731 0x24a8 ============================================================ 12:06:20.0674 0x1d20 ============================================================ 12:06:20.0674 0x1d20 Scan started 12:06:20.0674 0x1d20 Mode: Manual; 12:06:20.0674 0x1d20 ============================================================ 12:06:20.0674 0x1d20 KSN ping started 12:06:20.0714 0x1d20 KSN ping finished: true 12:06:21.0449 0x1d20 ================ Scan system memory ======================== 12:06:21.0449 0x1d20 System memory - ok 12:06:21.0450 0x1d20 ================ Scan services ============================= 12:06:21.0480 0x1d20 [ AAB860A5E606B9621E130D8C29D3F305, 93466620433B27F3BCFECDA26DD420AD1E5219034BA3B4E930EDED6D6728AE5C ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys 12:06:21.0483 0x1d20 1394ohci - ok 12:06:21.0492 0x1d20 [ 4140B14929C555E9513D59A2EEB5C471, 39A8400B3AA7FB1D8EBE87E65F89881AB23B6AE911BECAEC1FD86C7DADD4F1AA ] 3ware C:\WINDOWS\system32\drivers\3ware.sys 12:06:21.0494 0x1d20 3ware - ok 12:06:21.0509 0x1d20 [ AC251B31370C1E00F577928260B8939F, D60946F1C43A8C2B9C989A1E259FDA44055F94766615F344CF8E28A7F104BC70 ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys 12:06:21.0519 0x1d20 ACPI - ok 12:06:21.0522 0x1d20 [ 3E5E5DAE5CAEC0209C93D3AD8128D8A0, 5CFA4D715AE8D928EA11F213C5A7B0B1C1705D2A8FF041E0A1988E645E669C54 ] AcpiDev C:\WINDOWS\System32\drivers\AcpiDev.sys 12:06:21.0523 0x1d20 AcpiDev - ok 12:06:21.0528 0x1d20 [ F72D7CC7E7A97A09757313F3B4C7E17A, 36E3363380C51A2DB58D3177655A0A75DAA977C00C5A9C60A189068C0AFDC643 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys 12:06:21.0529 0x1d20 acpiex - ok 12:06:21.0533 0x1d20 [ F04B6F53FBDB2B6B0451AE53DE19F0C9, 41A8C314A46867BAA45CD9666AAF734AD45B74E2033A8E66D93E17CDDAD66578 ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys 12:06:21.0533 0x1d20 acpipagr - ok 12:06:21.0536 0x1d20 [ C347A6095F3BE417D24F1E1349F4AF0F, 72C9D759BB132985AF55860658DC01F08590A2BD7E976FCF25E1314C5AA1D37B ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys 12:06:21.0536 0x1d20 AcpiPmi - ok 12:06:21.0538 0x1d20 [ 686BFFC47454DD2F58795C2EE891CA9F, 6CC4B6679914742D700A8373DED2DD9A821CA5284D4D73493BA0855DB8E6520A ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys 12:06:21.0539 0x1d20 acpitime - ok 12:06:21.0555 0x1d20 [ C52B8980692CACB057742C450D734149, BB2D7034592B6EBBECE5A73FB625E1352FD59972620523022CABA68EE00B7B98 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe 12:06:21.0558 0x1d20 AdobeFlashPlayerUpdateSvc - ok 12:06:21.0581 0x1d20 [ FBDA59118E59B3722248C66BAD89CAA9, 11AB83499757E3143834348DE39E85D56EC853071C96337C3ADD8A1E374C6CBC ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS 12:06:21.0595 0x1d20 ADP80XX - ok 12:06:21.0611 0x1d20 [ AC1928C2F7505BD556C552F153B062AB, B48EA30F76DEA57868CA74CC775DD60257021A3DE10CE101B8BEFA1CE9D22CF4 ] AFD C:\WINDOWS\system32\drivers\afd.sys 12:06:21.0618 0x1d20 AFD - ok 12:06:21.0626 0x1d20 [ 1D914C996F2C3134E2344BB74F79BCF6, D27AF01BA29784555AF7D2E89A3A65E81D6AFE1D3C7E8F9367F06D9DF5F88069 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys 12:06:21.0628 0x1d20 ahcache - ok 12:06:21.0632 0x1d20 [ 41856B40EE15F96DEC8755AB01FA3CF7, 33C3C899AF9CA15BE5A4CF097FF43DF3F0DBA0E48B6F1E28AE3E76AD76A1C361 ] AJRouter C:\WINDOWS\System32\AJRouter.dll 12:06:21.0633 0x1d20 AJRouter - ok 12:06:21.0636 0x1d20 [ F485CA5559DB37A4882467A4F7D58BEA, A1C648EFE12A5A3356BC0949372ADD0FF0CA2F5A8F992EB71C87E9C0D5C92BB2 ] ALG C:\WINDOWS\System32\alg.exe 12:06:21.0638 0x1d20 ALG - ok 12:06:21.0644 0x1d20 [ 9C39FBA94FFEF04561D13ED0D1B50DD0, 53FA118DEF37F0BA6030B9CB4C17019E6B5934941514756D66143B7BB66D7CA1 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys 12:06:21.0646 0x1d20 AmdK8 - ok 12:06:21.0652 0x1d20 [ 395D56FA2E22A10AE4774440D086F559, 24D7CBE9B82DC8900D9A5E345347FEC330D47FDBD1517A2AC10218BA2A9DFAA9 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys 12:06:21.0654 0x1d20 AmdPPM - ok 12:06:21.0662 0x1d20 [ EB729A9ADCB9F9C406B533F95E2F67D4, EDCB8E39C503FF30ECB82F368242179E2788C12B4FD9B557F38380A934E7D8E7 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys 12:06:21.0663 0x1d20 amdsata - ok 12:06:21.0670 0x1d20 [ 3B5C5C696F33FE61F1922533B03B9316, C9BAAA9B02547C66A276A31958DFD2A289C5963A4EE3FF306535565240D816CC ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys 12:06:21.0673 0x1d20 amdsbs - ok 12:06:21.0677 0x1d20 [ A7D45A303FF8A9493C96C4B804051E6E, 6074C264876A398039D3F89905A486ABA5BDACA038B79920A34323B38CFCB358 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys 12:06:21.0677 0x1d20 amdxata - ok 12:06:21.0683 0x1d20 [ 5180537517C27375B1F2CB37ED599FAF, 121BF0E3BDE068CC1E1E9B24DC334BA29348725E9BFB790699E4CC66664A4C3D ] AppID C:\WINDOWS\system32\drivers\appid.sys 12:06:21.0685 0x1d20 AppID - ok 12:06:21.0689 0x1d20 [ F7FEBF66A705F18DC063DFD259F15102, 394DA8A7355573C4D81C375450DF5C5B2FA6360E246B06FDE8E7F9ADF21360FA ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll 12:06:21.0691 0x1d20 AppIDSvc - ok 12:06:21.0698 0x1d20 [ 13D7FEA71091D1EAD8ADDD10BFFEA06D, A707CAC76CBF0334E2FCE3220147B382F5E44DEF9E23DD459CF7C40F27771695 ] Appinfo C:\WINDOWS\System32\appinfo.dll 12:06:21.0699 0x1d20 Appinfo - ok 12:06:21.0703 0x1d20 [ EAF36A714E16A69B8B4ED7591CBA77B6, 11FE2A5D991FB8AF78F4E78FB6DF02005EC5404DC298FE2D4E7774BB0011AB52 ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys 12:06:21.0703 0x1d20 applockerfltr - ok 12:06:21.0716 0x1d20 [ 91DB5775249920FD245851E0BC97D8C4, FCB53766AB377EF2E385CD2F6D0D2CEF485C07A5EAAB68FB1C798E6264832386 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll 12:06:21.0723 0x1d20 AppReadiness - ok 12:06:21.0769 0x1d20 [ A61222D41CE44B0C3592CEB57AB20B71, F7A136EF4850D76AF1868A8C93C201B3B00FCA1D9EDE77F65BAD04530CC84221 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll 12:06:21.0803 0x1d20 AppXSvc - ok 12:06:21.0809 0x1d20 [ 6E456A94B9BD7F6B4758729BCEDE40C3, 2F3146AC960992FA947A8E8C4D5497624A5BC69B7A3EECA117AD599C70DDE8E3 ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys 12:06:21.0811 0x1d20 arcsas - ok 12:06:21.0814 0x1d20 [ 766F3A7E42AFCF74265FAC78987D1665, 8FE82913DF5CF79B49B28B3CD782AF09FF30585A37473AE3E518A26C5D6453D0 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys 12:06:21.0815 0x1d20 AsyncMac - ok 12:06:21.0818 0x1d20 [ 01733BEEE02E51F712330D5909BD701C, A583B482DBE701A752EDFDEAE2EF16D7160DFEA6077E0C8EF013828E285D960A ] atapi C:\WINDOWS\system32\drivers\atapi.sys 12:06:21.0818 0x1d20 atapi - ok 12:06:21.0832 0x1d20 [ 329F315D04B64BC185A59FE17A2AD6CE, B9721AD1641E3E96D1C07294884506EBED5D05921A9F9FC263711C28AD040693 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll 12:06:21.0840 0x1d20 AudioEndpointBuilder - ok 12:06:21.0864 0x1d20 [ 67ADB26CC1B504E9566B9106277DE92B, AF137C9FE9B3A231C7662F2E59EF12482396CFD8AC020DF6BDBFDD9A1209A98D ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll 12:06:21.0880 0x1d20 Audiosrv - ok 12:06:21.0887 0x1d20 [ 6086B5EE0DA4600B2EC2725D82DEB74E, C67CA7021D710CFDCF62B17A2B2890E61E4F1E3D956312688454FD85738C303F ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll 12:06:21.0888 0x1d20 AxInstSV - ok 12:06:21.0900 0x1d20 [ 0914A5E66C0775CE11960452A6434FEC, 978C1E20023841FBFEF0CEAFE09EDB679612C8E5986C6E40C1F6D0835112D13E ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys 12:06:21.0906 0x1d20 b06bdrv - ok 12:06:21.0911 0x1d20 [ F8129321B1874D4386F7FEB754BC3380, 7264E7E2A339E456C0A1A40FDFAE0D202905467400B93FA0700498B86172337F ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys 12:06:21.0912 0x1d20 BasicDisplay - ok 12:06:21.0916 0x1d20 [ E2BFD01BD0ECF2BDE9420022147952A4, 7798211996143067787881A1362D07B95CF688E96192E3627D30347C719D40CB ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys 12:06:21.0916 0x1d20 BasicRender - ok 12:06:21.0920 0x1d20 [ 739D089777D2B66DBE7201E5EA4BA2D7, 9AD12E18A042C5B8EFB19297BC2E7BD1FEF75A138FEFB64C6BF0261FD3E53AB1 ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys 12:06:21.0920 0x1d20 bcmfn2 - ok 12:06:21.0930 0x1d20 [ C3B27514035315E3C1FCE64E69E253ED, 03AF100927077AD608C5EA47A17081CEA849F44C471AF978F410B83E2ABA5AE7 ] BDESVC C:\WINDOWS\System32\bdesvc.dll 12:06:21.0935 0x1d20 BDESVC - ok 12:06:21.0938 0x1d20 [ ED03D2ACE378C9EB8BB957ABBD85B951, E9AE3025DC4956B736651B20AEA665909C2B468F9AE3E317F545DD4EEEA7D9E8 ] Beep C:\WINDOWS\system32\drivers\Beep.sys 12:06:21.0938 0x1d20 Beep - ok 12:06:21.0956 0x1d20 [ 1FDC6CB56572203E6F4BF4E3FB30B886, 81D5C77C823DC078EEEB2DABEE5203D542C824E04FEDD96AA58F96037C065155 ] BFE C:\WINDOWS\System32\bfe.dll 12:06:21.0966 0x1d20 BFE - ok 12:06:21.0988 0x1d20 [ 5C0D4DBACB90D9ECE77907F4F6CF9EF6, FC29F03FB7E58A9ED17A34BC2D8E39533070B8B23D1A110622C3A213BF48CD2D ] BITS C:\WINDOWS\System32\qmgr.dll 12:06:22.0002 0x1d20 BITS - ok 12:06:22.0007 0x1d20 [ 2342B8619193B0D9FAC0D02C69DCE74A, 06A1512C9750ACD154DE8873DE6628355B7195759CE54FA96097EA6D56BE320E ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys 12:06:22.0008 0x1d20 bowser - ok 12:06:22.0025 0x1d20 [ 06373FF017097FD40D60219980871FA0, 9366823AA3C248DD06FBFA237DCFDB2A9B7F93BA7115D235792DD81DDDA79C1F ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll 12:06:22.0035 0x1d20 BrokerInfrastructure - ok 12:06:22.0041 0x1d20 [ 9C7F445B018AB4744B6E0C657B5D1833, 83D04F5E3D4BA46BBD8A67764A60F5731F86B0BE3A85C2858E002ABCC362F592 ] Browser C:\WINDOWS\System32\browser.dll 12:06:22.0042 0x1d20 Browser - ok 12:06:22.0047 0x1d20 [ AF57F0B0E284BE06860A7B701341324D, F94E44C777FDC049158B7BF73DAFCDB103D08493AC898D1C928771650F664412 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 12:06:22.0048 0x1d20 BthAvrcpTg - ok 12:06:22.0052 0x1d20 [ E1E55BA45510B2B0309E2C77ABEB1BFE, EA7BDEC354190F1033B14847606220D414C1A52C938C9327A4765032D28B6960 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys 12:06:22.0053 0x1d20 BthHFEnum - ok 12:06:22.0057 0x1d20 [ 336A9C0254A0178ED50281B6EDF5B836, C9C454C6EC4FF5897B1873A7E90D1CE8122E43783E978A570CEA75E15F65DE97 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys 12:06:22.0058 0x1d20 bthhfhid - ok 12:06:22.0071 0x1d20 [ D8428BEF4033C7BFCD981074E2318F89, 9C0692F8387BAD94CCA4E36B59701A7A7B8FDCB5377B4C2CA75424583835E112 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll 12:06:22.0076 0x1d20 BthHFSrv - ok 12:06:22.0082 0x1d20 [ 5428242193611BF91DDBF4F58900A55A, 91D59B0D0C7CA3DBBA8CA7CAD1E24845A224F451FC1880BE8CB7C1585AC79080 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys 12:06:22.0083 0x1d20 BTHMODEM - ok 12:06:22.0089 0x1d20 [ 6927D295017E9F1A5D655A8F3A122672, 4B686C93056924580390440B49C721BD9039D5C972994D8EA96CA848B786B693 ] bthserv C:\WINDOWS\system32\bthserv.dll 12:06:22.0091 0x1d20 bthserv - ok 12:06:22.0096 0x1d20 [ 102CAA11BA89290D48FBFD2E04274BA0, 9C6786AD6C8BE5AF7538BAD553C401B0D7443E533CDE59E975CF3E07EF262F0C ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys 12:06:22.0096 0x1d20 buttonconverter - ok 12:06:22.0100 0x1d20 [ 029434AC0A3935F9125ABBD08BF7C30B, 742338B882488CA83F502ACEBFEDC2783B8D9D6C391FE1088988276315A065F6 ] CAD C:\WINDOWS\System32\drivers\CAD.sys 12:06:22.0101 0x1d20 CAD - ok 12:06:22.0105 0x1d20 [ 307AE8BC9B45772DA02FB952A1D86C35, 4983AC71C8E164D9E6669D345925B4FBEDD0A0A4566887E7ECC56C996B66DBD4 ] CapImg C:\WINDOWS\System32\drivers\capimg.sys 12:06:22.0107 0x1d20 CapImg - ok 12:06:22.0112 0x1d20 [ B6E5AD7C83A5254DEE9D86023C0E5A81, 40F297406A025378A6273535475C1FF8C99BC6502B17C0E161131DA754D7974B ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys 12:06:22.0113 0x1d20 cdfs - ok 12:06:22.0130 0x1d20 [ A0E5905465CBCCB63FE915F5B08752A8, 435B39A8B1684FFE9F2720A2CD11AF5A5F55E701709939756322C2CD6A22E0FA ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll 12:06:22.0141 0x1d20 CDPSvc - ok 12:06:22.0153 0x1d20 [ 618DA70D0D90DF3602259C1B121794DD, D2AF7967DE38F3B7C10824A1C900A145F45C57C0F179753A85989406600C4279 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll 12:06:22.0159 0x1d20 CDPUserSvc - ok 12:06:22.0167 0x1d20 [ ABE77AD954BC3D72F559CF0C381E50BC, D0F24B023D7CADD4893AAF223A9BAC00B2C58D552E0C314B506C01767FB74133 ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys 12:06:22.0170 0x1d20 cdrom - ok 12:06:22.0175 0x1d20 [ 62E13528B9F900A5662E243D4315F10B, B3F4868E80A3A2EDEC19E5AA32C96FF90B08D6B9BD35B80EA01E6A098D46040B ] CertPropSvc C:\WINDOWS\System32\certprop.dll 12:06:22.0178 0x1d20 CertPropSvc - ok 12:06:22.0187 0x1d20 [ 05EA22CFC40EDE05BF6E3BC782E5204C, F0C9C692FC31387E9D19426D3253317B6BA86D7118E3884C11E3287695006443 ] cht4iscsi C:\WINDOWS\system32\drivers\cht4sx64.sys 12:06:22.0191 0x1d20 cht4iscsi - ok 12:06:22.0226 0x1d20 [ 863E1C9F6750446DFB9EDCAEC3531367, 88C5EE76FD85640EB1440DEFC7B6CB918E18DC09507BA91FAE285370B8C7D56A ] cht4vbd C:\WINDOWS\System32\drivers\cht4vx64.sys 12:06:22.0251 0x1d20 cht4vbd - ok 12:06:22.0256 0x1d20 [ 3E416539352B007AD0610BF34AC15D31, E2041129770B24AE95C5EC4B507477C72DFE8CB08D412E2621BF67207F9DEB8C ] circlass C:\WINDOWS\System32\drivers\circlass.sys 12:06:22.0257 0x1d20 circlass - ok 12:06:22.0260 0x1d20 [ 616E1ED94FA7F96D429D985FDB203D2E, EA681C442AA0F7D424C8DABD8D1C14653E61BDE740C0BC4C6C308B5FB4FE67AA ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys 12:06:22.0260 0x1d20 CldFlt - ok 12:06:22.0271 0x1d20 [ AF0BF03C8574DD026FAF9A82A64C2D04, 363BF0C42181FA4CFBC3DB504F48496D62023F0E4A858DC8F739C08CC5AFA228 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys 12:06:22.0276 0x1d20 CLFS - ok 12:06:22.0294 0x1d20 [ F34283DE289AF82A97BCE6563D1E2BB4, 9725D041322AF70030E11EEF0FDB7D01FF2CF105FD90A4AF08F71E54725234C9 ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll 12:06:22.0304 0x1d20 ClipSVC - ok 12:06:22.0307 0x1d20 [ 5118CFC33BBB51C7E3ED441B7085AD26, 8D33864FF750926C4B95827FFAD24C558DE8A90FC5B2663084DEAB5ADBBFAFD2 ] clreg C:\WINDOWS\System32\drivers\registry.sys 12:06:22.0308 0x1d20 clreg - ok 12:06:22.0315 0x1d20 [ 232F3A3AC3A2FB32C5C46503A6517073, 9E0232E095471E6C8825E870F5842838F1AE515E56410F6A5CC3D58A9A4AF33A ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys 12:06:22.0316 0x1d20 CmBatt - ok 12:06:22.0328 0x1d20 [ 3413CE81E02C091F33C4C3DD3071630F, 4758A2BB2FD453E9867C04CC420D12B279BB97E3C4E664A7058EA5F1EC63D04C ] CNG C:\WINDOWS\system32\Drivers\cng.sys 12:06:22.0336 0x1d20 CNG - ok 12:06:22.0340 0x1d20 [ E1BFF774FF67CA951A5DFF0E104FB132, 68809C4B72C54CEDE3AD33F5634E15A0225A67B391F9012EC7CEBA8AFC6EC3D5 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys 12:06:22.0340 0x1d20 cnghwassist - ok 12:06:22.0351 0x1d20 [ DFDAEDB857BC18764F0D8ECDCC3C1499, AE12E908BAF53C605A17A9FB1AFD6BFBEC75EBE45D893541281473C197C71FED ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys 12:06:22.0352 0x1d20 CompositeBus - ok 12:06:22.0354 0x1d20 COMSysApp - ok 12:06:22.0357 0x1d20 [ 04532711732BE9DBC364E88E4A9EC18A, FCEB1F486E146A3FE7307397C1EB6760BFD8A327545F81C546F7134B08615B9E ] condrv C:\WINDOWS\system32\drivers\condrv.sys 12:06:22.0358 0x1d20 condrv - ok 12:06:22.0377 0x1d20 [ 9B7A6AD43CAA322C4E04B4E52FD7CDAD, D59F55602C273372F8787B35AC62192ED99CAD72BFF8BF03DF7BDD9E9BC37EE4 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll 12:06:22.0388 0x1d20 CoreMessagingRegistrar - ok 12:06:22.0394 0x1d20 [ 1F7F1A15B807BC7B241BB2FEEA79BC92, D756E2247757C274F3470B46FCDBB63317C05E8E66FDA9DB7ABF3A6820933D4C ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll 12:06:22.0396 0x1d20 CryptSvc - ok 12:06:22.0401 0x1d20 [ F51953EC4B9AACD92A3B3CE66E05CEF4, D39C9696213F53F89209000F245AC178B342A84E46EE766B634BB8DB86A26BB8 ] dam C:\WINDOWS\system32\drivers\dam.sys 12:06:22.0403 0x1d20 dam - ok 12:06:22.0409 0x1d20 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 12:06:22.0411 0x1d20 dbupdate - ok 12:06:22.0417 0x1d20 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 12:06:22.0419 0x1d20 dbupdatem - ok 12:06:22.0422 0x1d20 [ 8602EFC7DE488A8010A4027653D70BC2, 5A99E7608200AB065ECD070089C371CB3406A08A13B3080C83CB3910EE0E3E85 ] DbxSvc C:\WINDOWS\system32\DbxSvc.exe 12:06:22.0423 0x1d20 DbxSvc - ok 12:06:22.0445 0x1d20 [ 0E79A4C76CAAA0CFE9CA42C13E5AA086, C4D90EDA54216CC7897128D39517E4E18195BF28254796C6D0684E2C7DB90642 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 12:06:22.0459 0x1d20 DcomLaunch - ok 12:06:22.0474 0x1d20 [ 1175E107082287A58A756239F48E1A73, 0DB2017061D94FAC95CEBD7C4729E42018A92698D72CEE3EA412A9D14DB8D552 ] defragsvc C:\WINDOWS\System32\defragsvc.dll 12:06:22.0480 0x1d20 defragsvc - ok 12:06:22.0493 0x1d20 [ BBCAC50027D030E07EC7E5C36469FAFF, FEF39659F21D2AE676E4882FBAF5A881C534BB7EA26E5EFF9F7B5F8B952D6532 ] DeviceAssociationService C:\WINDOWS\system32\das.dll 12:06:22.0499 0x1d20 DeviceAssociationService - ok 12:06:22.0504 0x1d20 [ A2BACEBAC01BE7A6656B454E75C23262, C2C168718A341D48679AC4CA8005BD06E9F1F0D1F7C72D3C30A7A8CE1F665A43 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll 12:06:22.0506 0x1d20 DeviceInstall - ok 12:06:22.0519 0x1d20 [ 5B84093D490A6B060C8BE60BA52C876F, D34A854418A66529B18313A50E6D7EAB982611AD9AB0335245AE764FE0602C22 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll 12:06:22.0529 0x1d20 DevicesFlowUserSvc - ok 12:06:22.0534 0x1d20 [ F08F70BBD833BAA3BF0D5E500CBEE6CC, 8BB99E6D96CB8B25036549030986EC267C26BF1FC66E4EB00A3E41FE3BB5DE70 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll 12:06:22.0535 0x1d20 DevQueryBroker - ok 12:06:22.0541 0x1d20 [ 185A4519B7764F4DEF714D890A7A9FD2, 9805D9DB42D11582583EA3F0FFEE9EF2B0C536DA99A9A3D3863B2669B1CC34A7 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys 12:06:22.0543 0x1d20 Dfsc - ok 12:06:22.0550 0x1d20 [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys 12:06:22.0551 0x1d20 dg_ssudbus - ok 12:06:22.0561 0x1d20 [ BC5188B3F35BB8070888441A2A740465, 05C18A3DC1BD96C6751E76DBF57C47E526A1F9DF5E013B20B69EA0159CD6CE56 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll 12:06:22.0566 0x1d20 Dhcp - ok 12:06:22.0571 0x1d20 [ 5DF493C7954890EEC65CC2A21D479F76, 67087AAAC2AF93F265077AA392444E32DC299918A843A8AECFBE73636A5F2314 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 12:06:22.0573 0x1d20 diagnosticshub.standardcollector.service - ok 12:06:22.0613 0x1d20 [ 7AA8614A390EE2FB79BDD11154CF1A61, 32B27D6C010AAB3FF9E1FBCE2E750042A1EBB0736821B1EF3BB8D979892F85B5 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll 12:06:22.0643 0x1d20 DiagTrack - ok 12:06:22.0650 0x1d20 [ 1203EA16F36C5BEB2509FB7CC03DC178, 195209CB711E5BDE24A50C88AA62F32E8AE26F6A83B423374FCA41444F55D1CE ] Disk C:\WINDOWS\system32\drivers\disk.sys 12:06:22.0651 0x1d20 Disk - ok 12:06:22.0663 0x1d20 [ 8BCFD0A4900E197DFA8679A13128EC79, DF09F3996F25F025E171DF3EF068BB9AC2DEC79BFCBCA5D58E9158CD7AD785B6 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll 12:06:22.0671 0x1d20 DmEnrollmentSvc - ok 12:06:22.0675 0x1d20 [ 038B8B76284BC291EC75B005BB3EB13F, FE7BD7CF833C4A96ABF4FD6EBAB829CC4D8096780A22A313035D7E49BBA12D36 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys 12:06:22.0676 0x1d20 dmvsc - ok 12:06:22.0680 0x1d20 [ 32C76DFE2586EBECFFA4112E9196591C, 190C294F50B96B13D0B776F7C19DCB47EAACBEE999CBA50236CF8C856CF38B17 ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll 12:06:22.0681 0x1d20 dmwappushservice - ok 12:06:22.0690 0x1d20 [ FC3AA34608A69BDAC67E31FB70C8A720, 38815F527DF963B4A7D93895776DDD618BD29782B1FA74EB1A7319AE58739A06 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 12:06:22.0694 0x1d20 Dnscache - ok 12:06:22.0703 0x1d20 [ F08CB37830A1F9950E8B2F7B1F78CC7E, E4E75645893597F6A02B98DC4F126A664F5DEF7B1CD4C2DEE5CA8ED18DB64C9C ] dot3svc C:\WINDOWS\System32\dot3svc.dll 12:06:22.0706 0x1d20 dot3svc - ok 12:06:22.0712 0x1d20 [ 3425E26D0A7792F2EE7745C0336C2062, 54A3AFFC31C2641BCE1877F2CBA61D2CD7191BA39FD5B3659491E4E307570C1E ] DPS C:\WINDOWS\system32\dps.dll 12:06:22.0715 0x1d20 DPS - ok 12:06:22.0718 0x1d20 [ 3D934A1C02EB6979CF45C70A71F580EC, 279B325E18ABF82FF523095D8D5958A3A48C7B7A4F64BD562DDED1D0662B608A ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys 12:06:22.0718 0x1d20 drmkaud - ok 12:06:22.0724 0x1d20 [ 5E92CB292D676634058E6C62653C9227, CE35C51B444664641306B4C2E21978B3418B58B2A973B19B908D86FE723FB4C4 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll 12:06:22.0727 0x1d20 DsmSvc - ok 12:06:22.0736 0x1d20 [ 682D7DF9704217DD8716307F9E2EEC05, A8D36414A7316C59995CF9689DD84B2FD3FECE47E39F515C81BC3C439890E993 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll 12:06:22.0740 0x1d20 DusmSvc - ok 12:06:22.0779 0x1d20 [ F1D8A5A6C39586717822C2AAB70663F4, 527CC5D18DF9B114352B49AC0645831C6C4F3FFA76692BDC2D9A90E9D14E5000 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys 12:06:22.0808 0x1d20 DXGKrnl - ok 12:06:22.0815 0x1d20 [ ECA1628436628362856ACF239E6AFD29, 19051DC348918B863E0A272CF56891B8CB49E7E705B8BAC7663D36C797A7B962 ] EapHost C:\WINDOWS\System32\eapsvc.dll 12:06:22.0816 0x1d20 EapHost - ok 12:06:22.0818 0x1d20 EasyAntiCheat - ok 12:06:22.0870 0x1d20 [ D64CD3AE93125EDA383190C2AF607E70, 3D180B96C6A2318842FA03AE5F703320A93CF1F440FF7D0E6F6F9BAD98F2FA02 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys 12:06:22.0910 0x1d20 ebdrv - ok 12:06:22.0919 0x1d20 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] EFS C:\WINDOWS\System32\lsass.exe 12:06:22.0920 0x1d20 EFS - ok 12:06:22.0924 0x1d20 [ FFBB37982E6D24AEC7A2E5459098EAC9, E89DD74540088ECAC9E802D7A059C0A6E3E5412BD42E5E9F26258724458EF8DB ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys 12:06:22.0926 0x1d20 EhStorClass - ok 12:06:22.0930 0x1d20 [ ABF38D02E01D6ED87AE1DF65FC5DF62D, 57D48609DA30F60016D2ADEB9A772942FB39A117247EB63FAE3FCF50D726B698 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys 12:06:22.0932 0x1d20 EhStorTcgDrv - ok 12:06:22.0938 0x1d20 [ 5E4AB60D50F368A09275F4055D621EDC, C840F5DF3C0813EC6CB9BA0C3C91F2C6410227A6255DEF5FA94C8AC1E43E36A0 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll 12:06:22.0940 0x1d20 embeddedmode - ok 12:06:22.0948 0x1d20 [ CA966CED8970A60FB00A3592564EF093, 4BD904032445235EE69DAA0024E0FB3D8B2325D897A683E334754EB3CA90AB39 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 12:06:22.0952 0x1d20 EntAppSvc - ok 12:06:22.0955 0x1d20 [ B9A59B4AD516E38C39FA416398B96CCB, 4630A9AD414476B47F634F2EB5659597797222A8938B68847B97FECCE1A1B5F8 ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys 12:06:22.0955 0x1d20 ErrDev - ok 12:06:22.0970 0x1d20 [ 1541374239F33512D7F4D24ED1E9238C, 8B1548D4052A72175EB6ADA9FD4286ACD5041E1CE071DCAC3760BB227FCD3621 ] EventSystem C:\WINDOWS\system32\es.dll 12:06:22.0976 0x1d20 EventSystem - ok 12:06:22.0986 0x1d20 [ 9C4D88E8614487AD85A6F18A71A7298F, EE6F48C89D6379C7361484EAE7C7FAAA477D48032BFDD0D363E48642E62EADF4 ] exfat C:\WINDOWS\system32\drivers\exfat.sys 12:06:22.0990 0x1d20 exfat - ok 12:06:22.0999 0x1d20 [ C61014A176ECAAF97589E6FC979CE786, FB913AC647B68DB9854367BB1E53A504A85833966211279C8D7171698F743B27 ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys 12:06:23.0004 0x1d20 fastfat - ok 12:06:23.0018 0x1d20 [ ECC5AEFEA31F1A078E954305B8CA6373, 15948D017E3B52D3B4BBEC047F963BD77247E24A59F0532B6A023B0C4159FC84 ] Fax C:\WINDOWS\system32\fxssvc.exe 12:06:23.0026 0x1d20 Fax - ok 12:06:23.0030 0x1d20 [ 853081957BA148F38FD8DE4390CFCF4A, 37C92C7ABA55A5FF7094F77F8EBEEE1F4BEE161CEC6B01A50FC0D0C39E36C142 ] fdc C:\WINDOWS\System32\drivers\fdc.sys 12:06:23.0031 0x1d20 fdc - ok 12:06:23.0034 0x1d20 [ 885C06C35CC8FAEDDE3CDA36B72CA2A9, FF6584E7AF2FB540B2183665C3E216BE98DE953CEA6A7E4C5F13514BE4AAC9D3 ] fdPHost C:\WINDOWS\system32\fdPHost.dll 12:06:23.0034 0x1d20 fdPHost - ok 12:06:23.0037 0x1d20 [ 367E878C79D9F391E3D53B6BBC1B6386, 739D89F6954E17B73F53702CFF8EE985FB241255D962A83BAF1A20E783CAF466 ] FDResPub C:\WINDOWS\system32\fdrespub.dll 12:06:23.0038 0x1d20 FDResPub - ok 12:06:23.0042 0x1d20 [ 514F6A0B83527DD6ACCC8B21A57B10E3, EA3D401E42D05BA39E5874513DFB895A086BECE4D69FC1AC12F85F326A435A4B ] fhsvc C:\WINDOWS\system32\fhsvc.dll 12:06:23.0044 0x1d20 fhsvc - ok 12:06:23.0048 0x1d20 [ 27E764D6460504B7271AFECE7A59FB76, A32B08142068BF042B3E47C0CA7F4FCFD07A37807B1B8DAAE614F3A132475D52 ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys 12:06:23.0049 0x1d20 FileCrypt - ok 12:06:23.0053 0x1d20 [ 3D6087F51110F3CC0DA89385354F8C5E, 49FF976C3391A257BCD4B048BF6D1273F8537005E32D65E5F272AF3294639F05 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys 12:06:23.0054 0x1d20 FileInfo - ok 12:06:23.0057 0x1d20 [ 057E95E53C38260C4EF49B3A077770CD, 7008E71663046FF1D91D9DC3570094561C812067E1CA07715A1D2E4F787207AE ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys 12:06:23.0058 0x1d20 Filetrace - ok 12:06:23.0061 0x1d20 [ 90B2983D8495C26345A1DC5F0C3BB07B, 50D834D40C27EEF5023556A77B13D3335789333E302A73DF221CD86D156FDEE9 ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys 12:06:23.0062 0x1d20 flpydisk - ok 12:06:23.0071 0x1d20 [ A84261F75F490E45CFEDBA77EFE4F67E, 292BA04D8996140255E4B6105015C2A640890BEFB6C022E30E0D9CBF45D5F4DB ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 12:06:23.0076 0x1d20 FltMgr - ok 12:06:23.0107 0x1d20 [ 3020F526B7E94A178D3EBF958397F7BC, DD0105BBEFFA7E1F54BC2199C7DB60F9C650D76DA36598E934F45D44BCE1DE3A ] FontCache C:\WINDOWS\system32\FntCache.dll 12:06:23.0130 0x1d20 FontCache - ok 12:06:23.0136 0x1d20 [ B282011D13BBEEA0273DF33C5E776D55, B4AF068BBB09D0F546F5590FCDD745250CFD58DD3A8ABF5DC26670FA32D181FB ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 12:06:23.0137 0x1d20 FontCache3.0.0.0 - ok 12:06:23.0149 0x1d20 [ 58811D00A582A89B7839B4B2CE7302BE, D2B6C197BD257B462FC3E8E7A8E7C3F910282FDAA61DB00ADB64DA0698C203C7 ] FrameServer C:\WINDOWS\system32\FrameServer.dll 12:06:23.0156 0x1d20 FrameServer - ok 12:06:23.0161 0x1d20 [ D2814848206DFC18EB8D3D069FAE703E, A62263CDF9261B692423473F4FF23B01AC864C05850BA5591EB9019906B4A08B ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys 12:06:23.0162 0x1d20 FsDepends - ok 12:06:23.0166 0x1d20 [ AE7EDF845F41ACA3B74567C3CE20E987, 6159C227C85912B03D8C35A1EF91705AE6C1C23C7228D6FCC0A9529844798E1B ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 12:06:23.0167 0x1d20 Fs_Rec - ok 12:06:23.0182 0x1d20 [ 560AE7760EC108F92D2EA8638CC805CF, 6DA48D05641367477315B26A4466EF41BBB3896EF3DB0C050B86033C39C38C4E ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys 12:06:23.0190 0x1d20 fvevol - ok 12:06:23.0194 0x1d20 [ 4616F61E24B3AEA6E0E4EA7D69531EF4, 34CB16F68E4A4D19346C7FEC29BB5FE09BAAEC19EA730C9B93450F940D124D49 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys 12:06:23.0194 0x1d20 gencounter - ok 12:06:23.0198 0x1d20 [ 23174BB6937459B924BB8EF667FB28EF, 6675B87F4DE9CCA96B6BAB9F77C4E0B377828613D9FFB03F7D443AF11321F157 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys 12:06:23.0199 0x1d20 genericusbfn - ok 12:06:23.0204 0x1d20 [ 4B11CFBE1D9B73A9D865F6AB26F800BA, BD76CB5AF0EE6DD404875A4C36622C6BC8CCF2975C47E28DD305EB041C6C0B91 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys 12:06:23.0206 0x1d20 GPIOClx0101 - ok 12:06:23.0229 0x1d20 [ CF22C0941409C772AA1568DC4F89A111, ED5895F024E64B672EB3FAE6C456FA0D30A068CF2B475A7EE988DEA4DCD6D8DE ] gpsvc C:\WINDOWS\System32\gpsvc.dll 12:06:23.0244 0x1d20 gpsvc - ok 12:06:23.0248 0x1d20 [ 3FC3FCF557D0BE3D724EA10642E1F6FF, 744D0DDE748A1B681087668CB893F9A60A2BBE80A71098944E75B6A9AA934C82 ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys 12:06:23.0249 0x1d20 GpuEnergyDrv - ok 12:06:23.0254 0x1d20 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:06:23.0256 0x1d20 gupdate - ok 12:06:23.0260 0x1d20 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:06:23.0262 0x1d20 gupdatem - ok 12:06:23.0267 0x1d20 [ 02B9639D9997E95CDF2F4C4F3BDCC73D, 612F472A72E44199E0B1ECEE6FF2836359039402212CBD26D1A1CDDAC61052A9 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys 12:06:23.0268 0x1d20 HDAudBus - ok 12:06:23.0271 0x1d20 [ 9F90819E301C70A3A042FC05D3E41B5F, D2175786775D08686264001ABAA4B61DC08A847666F6B9A2A64D10BFC022F646 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys 12:06:23.0272 0x1d20 HidBatt - ok 12:06:23.0277 0x1d20 [ 3CA3244C45B25F3B3ED9445C195E40EB, 9C43B31DAB473D29069D0D6BC130660424FE2414BA519107641FA1561C10C76D ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys 12:06:23.0278 0x1d20 HidBth - ok 12:06:23.0282 0x1d20 [ 55DAF856F9633DD2519BA4E942870F02, 5283548CB93EB46C5FD3B08E45C97BBFB33D47F11F89560508775889FBF2F754 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys 12:06:23.0283 0x1d20 hidi2c - ok 12:06:23.0286 0x1d20 [ E34216A190D9BF8EAA666F6903BCD0EF, DA8529DAF903B447CC5FF2D112F670696549A4B66F54DF9A8C8C615D969CD477 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys 12:06:23.0287 0x1d20 hidinterrupt - ok 12:06:23.0290 0x1d20 [ 852DBB5185996AD8C73872A43A453729, 8C20331AE99E280799407CC5FCF88F8F645C331604230876A2CD7C253B9BD633 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys 12:06:23.0290 0x1d20 HidIr - ok 12:06:23.0294 0x1d20 [ 6339CC87F0F610D1575C9A419940602A, B2A054ED0B669FA54E250EC2926955B1D944FA1FB2AF5B590C181CB2E9D297BA ] hidserv C:\WINDOWS\system32\hidserv.dll 12:06:23.0295 0x1d20 hidserv - ok 12:06:23.0298 0x1d20 [ C1A608120DE0DF52E51B8BAF86AF19F9, F3529822E78CFCA2E323A75926A833529889E40BB9602B287CC343C496CB2062 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys 12:06:23.0299 0x1d20 HidUsb - ok 12:06:23.0306 0x1d20 [ BD1CF47172B97707DFC66ADA741AE2BE, 9607AB7074FC54D88FDF6E2A31506BCF8ECBF8FD651BB5CEA2421471C24BCED1 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll 12:06:23.0309 0x1d20 HomeGroupListener - ok 12:06:23.0320 0x1d20 [ A004895B838003BAE2281DAF193B6A09, 587FCDCEF769B2AED12551B6426477B764CB8A025E692D4EC8B24E1CBA1C06E3 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll 12:06:23.0327 0x1d20 HomeGroupProvider - ok 12:06:23.0332 0x1d20 [ 8ADD9CA3E0F18CEA11EA6FAED794A228, B46BA885ED8253A253B1C87C331CA145F7F397AF49853038B3F1EDAF81B2C4BA ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys 12:06:23.0333 0x1d20 HpSAMD - ok 12:06:23.0353 0x1d20 [ BB1AE72906564A6E81B79D73A05AE21F, 9BAC18FE0F99479E7B2AB804A0B4C286E55155A8C051CC7D20CE94798EEA0721 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys 12:06:23.0366 0x1d20 HTTP - ok 12:06:23.0370 0x1d20 [ D3C45F1B5BB3EE772CDA416A4A3EEB9B, 97CD988CF307EBCC34F37F130F4F2C989DD17E70B2498DB1929B566A3387887B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll 12:06:23.0372 0x1d20 HvHost - ok 12:06:23.0376 0x1d20 [ F60F8390B635156593F7493AE898AFB0, AC5E58CDA12072C5FDBFEA0FA009CE2E251D143FC0878B2658ECCCF797B8B0EC ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys 12:06:23.0377 0x1d20 hvservice - ok 12:06:23.0380 0x1d20 [ 563F5FC3B46A70A91AB6C8822AC8BF25, 43E647A7752D7444BF306E38571130AB778AA2A6892782C6C1112E47FBEFBC87 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys 12:06:23.0381 0x1d20 hwpolicy - ok 12:06:23.0384 0x1d20 [ C082249BC3E972C8A132D9EC6AD9EAD5, D69EEFD97CF5E0BD64D11DE1C331D02A9BE522BB93A40FF32ED434D960B85D39 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys 12:06:23.0384 0x1d20 hyperkbd - ok 12:06:23.0389 0x1d20 [ C6C8315E3262FAE460529C6DA2951682, 4ADBFA6601209BF6F5A9797721CBE2011905775CF4E266D7B42F89915D477E95 ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys 12:06:23.0390 0x1d20 i8042prt - ok 12:06:23.0394 0x1d20 [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio C:\WINDOWS\System32\drivers\iagpio.sys 12:06:23.0394 0x1d20 iagpio - ok 12:06:23.0398 0x1d20 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys 12:06:23.0400 0x1d20 iai2c - ok 12:06:23.0404 0x1d20 [ 42962355A7911407026E920E7252E3E5, 4A4016A53ED61354C81C594968339E6F3CCCFF4A64F8F28AD008ED8137E05AD2 ] iaLPSS2i_GPIO2 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 12:06:23.0405 0x1d20 iaLPSS2i_GPIO2 - ok 12:06:23.0410 0x1d20 [ BD47B2FEABFA48C6224D43EE9EA9BC06, 304628CA458AA7B1B8B1CFF12074AD75C1CE7BD41820B99607D7FA99A817D007 ] iaLPSS2i_GPIO2_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys 12:06:23.0411 0x1d20 iaLPSS2i_GPIO2_BXT_P - ok 12:06:23.0417 0x1d20 [ 2184CB3A65888F446FCD6DBA9F073F4C, 0B3D63EC7F61BFAD490C123084965A9F38DBFE587AC9DAE6F4E6B68AD8093DB2 ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 12:06:23.0419 0x1d20 iaLPSS2i_I2C - ok 12:06:23.0424 0x1d20 [ 4126F8DA08CE7924A3AE6F7235F85D5F, 668DC1D09496A95F44C07C5C1F6ED7D3EFC6F89523B2744A86B460E5BECAEFB5 ] iaLPSS2i_I2C_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys 12:06:23.0426 0x1d20 iaLPSS2i_I2C_BXT_P - ok 12:06:23.0434 0x1d20 [ 9B8332A96AAB15F061B0AA0DDCEEC7CC, 3EB36ABECEFD4354726F96E43D6FF46D20C3ED4863AA2D67A28CFC9FE76BE269 ] iaLPSS2_I2C C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys 12:06:23.0436 0x1d20 iaLPSS2_I2C - ok 12:06:23.0444 0x1d20 [ C6194F1036294CF77D782A19C303B902, 9D22BBE8A9080024DA1444956D70FA12D5A983641A579FB3310D2C6DB0E3F9B5 ] iaLPSS2_UART2 C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys 12:06:23.0448 0x1d20 iaLPSS2_UART2 - ok 12:06:23.0452 0x1d20 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 12:06:23.0452 0x1d20 iaLPSSi_GPIO - ok 12:06:23.0457 0x1d20 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys 12:06:23.0458 0x1d20 iaLPSSi_I2C - ok 12:06:23.0483 0x1d20 [ 12859E1215AA083A42E7ADCDE5C061D1, 262F9C65C3FA7EB69C4FA7C6547E1C79DB49697A083309909BC78726A116557F ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys 12:06:23.0500 0x1d20 iaStorA - ok 12:06:23.0514 0x1d20 [ D820075D3395BED28FC57AEF8FBA666F, 7589CCCD355D2685C0E6D317AB39F0DB061153E6859A0F53834B001643CFDF57 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys 12:06:23.0523 0x1d20 iaStorAV - ok 12:06:23.0528 0x1d20 [ 14E3DB5ADA7E2187A404129F4E5CE336, 5925C8E9DC00A6C682D6A3B37C6EBF2C325D37C8E4BF584F0B5AAC5A7B666E47 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe 12:06:23.0529 0x1d20 IAStorDataMgrSvc - ok 12:06:23.0540 0x1d20 [ A243E0CE8644378C9A9D015ABC3EDA27, 0C72F6D39DD64A16F54BCE185F4D8E670D386823F6364E9ED284F7F8DE11CBF5 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys 12:06:23.0544 0x1d20 iaStorV - ok 12:06:23.0558 0x1d20 [ E16E4FC9F250E48CB2CAD93E59D010E2, EFF558EDD63DB0FD8BA240E94BD5999106233B95BF86BFB99EE9B897F41C542B ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys 12:06:23.0564 0x1d20 ibbus - ok 12:06:23.0571 0x1d20 [ E3061D5ABA80394D29E26EA58AF7F69A, 9BCF1AD2CC9C7E48FD350F9D59797E17F355C840EDE428143764F93716159C20 ] icssvc C:\WINDOWS\System32\tetheringservice.dll 12:06:23.0575 0x1d20 icssvc - ok 12:06:23.0594 0x1d20 [ E9E4BB312F6B544392F44D513FAA2243, 3E6917BCE9F1AF554D57FED9E76B33F36D92145B0090A5F8F64E2A53EB4C54A4 ] IKEEXT C:\WINDOWS\System32\ikeext.dll 12:06:23.0605 0x1d20 IKEEXT - ok 12:06:23.0610 0x1d20 [ 0E33BC018502E7FDE77C343055D9C626, CD1C60E8EDAA044E03E5776962E091C1288204033A57A799D446F9B058D6AD59 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys 12:06:23.0611 0x1d20 IndirectKmd - ok 12:06:23.0680 0x1d20 [ 3A2D6740F51BE48C0FD01AD907329DEE, 4FD899CD6E3B3D5C9803E52CB72F002B6CFC144D524FAF6845CF6D115EC6E059 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys 12:06:23.0733 0x1d20 IntcAzAudAddService - ok 12:06:23.0754 0x1d20 [ B63CF22D1AD2ABDC39D85851B2BEAA6D, 37E9043BABB5895BFD2B59AFB60C438B992C6EAA1B5FDE5B3445314343F4C406 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe 12:06:23.0764 0x1d20 Intel(R) Capability Licensing Service TCP IP Interface - ok 12:06:23.0773 0x1d20 [ 8213094EA736A9C575AB0E22AD09B0BA, 12670A466B5AA37283BD4CB481D000DE3AE2A8D1BD159F67A41703A6FE5675EC ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe 12:06:23.0777 0x1d20 Intel(R) Security Assist - ok 12:06:23.0781 0x1d20 [ 4B7F8A1AAC7172DB6918A0E10E1D78A3, 1E9922AF9B5458F23A379EDCD61B615B6E53BAF8927237C1C7DCC04122CCF417 ] intelide C:\WINDOWS\system32\drivers\intelide.sys 12:06:23.0781 0x1d20 intelide - ok 12:06:23.0785 0x1d20 [ 0A3DBE89C965FFB7C0D0E38834E77B90, 0166BE79228ED6B3D7AA1BACB4F1BB68357DBF70DF778B2F8A3776E374EE690C ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys 12:06:23.0786 0x1d20 intelpep - ok 12:06:23.0792 0x1d20 [ 64EC687A811DC4F69DF3816F073352AA, F70942B67448DF9848F32F88D37E1E0C548CE9FEFC4376628D7CBEF62494D8E1 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys 12:06:23.0794 0x1d20 intelppm - ok 12:06:23.0798 0x1d20 [ 549C278119FF539C3B219C55B98B0E87, B4C15AB0C77EAB6C5ADEBD014F610BBFC537EAEB0E3960636624001C8A5DE56E ] iorate C:\WINDOWS\system32\drivers\iorate.sys 12:06:23.0799 0x1d20 iorate - ok 12:06:23.0802 0x1d20 [ A0F9F2E87F0C751FE164D90EB44A9B63, BE816F17E43E5F80AC65E913AB7F9E77B8D6B70B90A784CB00C907D3DAFFD4DB ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 12:06:23.0804 0x1d20 IpFilterDriver - ok 12:06:23.0822 0x1d20 [ 57A93FCF94FAB8C2161335E56C81CD16, 4A642E4FF70DA209074B78EC50B76A024DB5D01B8C9FCC405A64AF0F1A7EA389 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll 12:06:23.0834 0x1d20 iphlpsvc - ok 12:06:23.0839 0x1d20 [ 656DDB34996A96539BA6E2843B5F2A77, EDC3F1A2BA38A9655361A20B6C8001984AEB1A530C5385CF6EC0AF595305DBC7 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys 12:06:23.0841 0x1d20 IPMIDRV - ok 12:06:23.0847 0x1d20 [ DCC05E5EAA580C97F13B434FAFACED85, 5C6CFD3D9FAEB7274E05F3D19D3AA064624500C616650DE227B849B505662BB4 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys 12:06:23.0850 0x1d20 IPNAT - ok 12:06:23.0853 0x1d20 [ 9A6B993A95CCA15502DE3C980508DC44, 370A1A4531A72CFBF331ED274913925A269115A13E3A6B5E1821FB48DD7242AE ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll 12:06:23.0854 0x1d20 IpxlatCfgSvc - ok 12:06:23.0859 0x1d20 [ 9035C10C7EB8CF7C87CEA82A62EBB43A, A0DA94E80E503DB3C2877CE1BCDC70B3FCC6861ADFBCCE66C6D2592BD63F27DC ] irda C:\WINDOWS\system32\drivers\irda.sys 12:06:23.0861 0x1d20 irda - ok 12:06:23.0864 0x1d20 [ E7FD479E3298F3C8852A0D2F092BDB35, 07F2E779268EBBF4F32ED1C8423493B36BA823905E71B524C6AEBA0093193307 ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys 12:06:23.0865 0x1d20 IRENUM - ok 12:06:23.0868 0x1d20 [ 65B145143F6E5E1B5A213F0D9F4C4C44, 0E390BD8D7B4B9562E8FEE0D109DCE0D9EA823FD2D20B39FFACE3331F30FE5BC ] irmon C:\WINDOWS\System32\irmon.dll 12:06:23.0869 0x1d20 irmon - ok 12:06:23.0870 0x1d20 [ 1DFC3CCA51785254C5604238BB1A5467, 31451A90A91AEE14C6B24F84CB9816E5C77179D411B8B3E8547F538235BEEFB0 ] isaHelperSvc C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe 12:06:23.0870 0x1d20 isaHelperSvc - ok 12:06:23.0874 0x1d20 [ 7FE3B3A30FA20F27AF7022A01C2266BA, 8AB924F08ABF1DCB154B6A3BDB7E3E5A863008B5AFF8E3DB9759848774E00E8A ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys 12:06:23.0874 0x1d20 isapnp - ok 12:06:23.0881 0x1d20 [ 618707F3F742BF67AB578808171F60EB, AC9322483A450856B60F61D0CC58380148C52451863364C6FF3A2FAB4173A7A5 ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys 12:06:23.0884 0x1d20 iScsiPrt - ok 12:06:23.0891 0x1d20 [ DE70C5C10803C700DC1CFDE2D5CF207A, 4D11DE8B986C6966B66E1D6E931A72A1E9FA8D0B5B9EF57EF3EEDD09D0BE0B4E ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe 12:06:23.0894 0x1d20 jhi_service - ok 12:06:23.0898 0x1d20 [ D36B404BF979297C6572AEF98B2594F2, CB2F4E6589936D35D59CA70B39A29D091540EA125BE4B937AF92CEA0C6D0AAEB ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys 12:06:23.0899 0x1d20 kbdclass - ok 12:06:23.0902 0x1d20 [ 7E2036A846789D6D6A2EE21915017EE1, 82AF85CA30B440E453F7694C7EDABB5D2DB213AD2FE8620B92667DFB492229A1 ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys 12:06:23.0903 0x1d20 kbdhid - ok 12:06:23.0906 0x1d20 [ 4C054B8E901F41F5743DADE8A29FF256, 1009CC2503E08AFEA849BA83135C2D75C573FC4D6EFB5DBCDCC7ACB17AF83152 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys 12:06:23.0907 0x1d20 kdnic - ok 12:06:23.0910 0x1d20 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] KeyIso C:\WINDOWS\system32\lsass.exe 12:06:23.0912 0x1d20 KeyIso - ok 12:06:23.0918 0x1d20 [ BA7A5838866618A4E82FBC05B8923605, 96E898C7768BED66487A00E02B2E50516602BCF54E6648F5528E3334AE8527EB ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys 12:06:23.0919 0x1d20 KSecDD - ok 12:06:23.0925 0x1d20 [ 6629CAA1F157088B9EDD1EAD24C6D753, 3E5F3BCB34F4B52BE46B96F9F720FE5FB37A01D4E408875F6BB89F5B5C5A3900 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys 12:06:23.0927 0x1d20 KSecPkg - ok 12:06:23.0931 0x1d20 [ 9778205F28DC4F2EFFCC146647FE5CF0, 6B7EFFB08C7757A2830745920A624F89DBD5B323E0A884932FECF06471894F9D ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys 12:06:23.0931 0x1d20 ksthunk - ok 12:06:23.0940 0x1d20 [ 08F9C3F7FE3019BF53B1405B1820528F, E90940533F88A33C396E1DF9D186E945F030315FB2201E479F144E27387333CA ] KtmRm C:\WINDOWS\system32\msdtckrm.dll 12:06:23.0946 0x1d20 KtmRm - ok 12:06:23.0955 0x1d20 [ ECFFCC67C47A86CA32D0953428699210, F5A06E82FDC092549623FD41C82B082092529808BA12339DE5B1D72B9B12072D ] LanmanServer C:\WINDOWS\system32\srvsvc.dll 12:06:23.0959 0x1d20 LanmanServer - ok 12:06:23.0967 0x1d20 [ B82D6C634638534E41748FCEC909E55D, C286EB7B3E780549F77E75B4B9F053861D82EFDCD43B1308848A08D23EFADDCA ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll 12:06:23.0972 0x1d20 LanmanWorkstation - ok 12:06:23.0977 0x1d20 [ AF1077E89AD4458EC9B1CABB35595346, 762AE3218B7B05032C4199F0AE9ABCC822C3DF88BBB09536202B6B26A7944024 ] lfsvc C:\WINDOWS\System32\lfsvc.dll 12:06:23.0978 0x1d20 lfsvc - ok 12:06:23.0981 0x1d20 [ C0CB3B9F1F92C36B91309FDACCDF918B, 5D40C11388A48323D9D9AC18A950B09E2654092BC2F9DE45779A9354668BA18E ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll 12:06:23.0983 0x1d20 LicenseManager - ok 12:06:23.0986 0x1d20 [ FC37745959DFA4871759E4DCC836227A, 8B63F798440FD0A34E2F2940B2598238BC852EF3EFD22147A77AB4BA6FB9E704 ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys 12:06:23.0987 0x1d20 lltdio - ok 12:06:23.0994 0x1d20 [ 1797F544956D46966C67A2F7879403A9, D7820D2F8E936FF13D709BA1BD0541AABA8402F38698FE96DAE70B4E7A730835 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll 12:06:23.0998 0x1d20 lltdsvc - ok 12:06:24.0002 0x1d20 [ AE561CB0813D4DFA7D3E4471B2B70F5F, 344EA5E02D04098F032353962C1B70B0F578BCCD2843C70D6330B3F967D2FDB5 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll 12:06:24.0003 0x1d20 lmhosts - ok 12:06:24.0013 0x1d20 [ 1CE3A27B6B0658F4242AB2DECE69704E, FB705D43554478FA438CE600DAD65C5885858ABF9FCB5D9CC6E5F7C87FD6A853 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 12:06:24.0018 0x1d20 LMS - ok 12:06:24.0024 0x1d20 [ 16C9D4D822CCA795A72DC88B25A577CC, AEF93AA4E815F90C1A42D574C6DE7EF31FE69AD7B78B8E1AC7C27304F3CD7959 ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys 12:06:24.0025 0x1d20 LSI_SAS - ok 12:06:24.0031 0x1d20 [ 920F0CFCED5F28A31B79F1C470649D11, 5A5F390F2FD7C26807E7896E9F8F94EE7E69FE3C4B247BEA515588EB076148EF ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys 12:06:24.0033 0x1d20 LSI_SAS2i - ok 12:06:24.0037 0x1d20 [ 0FE63316F1C70A0F759A449FAC64C24B, CF99D62FDA862095BA1EB57DD58CEC070E0552E15B6F454B87D593707132636B ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys 12:06:24.0038 0x1d20 LSI_SAS3i - ok 12:06:24.0042 0x1d20 [ 80E82C46B27A923A3744531069B63857, C73A200FC2A009D19F2C26FAC07489EA0F4329CD7A1D80EB3200B19DFC883F8D ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys 12:06:24.0043 0x1d20 LSI_SSS - ok 12:06:24.0061 0x1d20 [ A69A59CD52D26443FF728FD52283598C, E416481B23CDADBB9E608E49C9DC9A520D14935E92CA9B63E7763692DB382D7D ] LSM C:\WINDOWS\System32\lsm.dll 12:06:24.0071 0x1d20 LSM - ok 12:06:24.0076 0x1d20 [ 88F5570C04766EE561FF129B2F93030C, A36F7FF563F813EC0F69E5BFB76C58A1C9824F54BA1729C4096E8B7B7C8D90EC ] luafv C:\WINDOWS\system32\drivers\luafv.sys 12:06:24.0077 0x1d20 luafv - ok 12:06:24.0086 0x1d20 [ A0A527569856B9814E8920F52EBB67F5, 4347277C84B47E4CC048850BDEFB258CFB3B476AA99FD503FD71FBB70FFF5ACF ] lvrs64 C:\WINDOWS\system32\DRIVERS\lvrs64.sys 12:06:24.0090 0x1d20 lvrs64 - ok 12:06:24.0163 0x1d20 [ 415E344294D1C0D04627B29146F68481, B4A1A05BDF07E8F226A98E51F62BE18BE2C046A084C495BD8A95CABC79FD0614 ] LVUVC64 C:\WINDOWS\system32\DRIVERS\lvuvc64.sys 12:06:24.0218 0x1d20 LVUVC64 - ok 12:06:24.0225 0x1d20 [ D33E2B74CF8B3A652BF0A9FBD068E87A, 46465387D04C2E5648D1CBD415E5D8757944A3C987A2497450F82D153BF7E868 ] ManyCam C:\WINDOWS\system32\DRIVERS\ManyCam_x64.sys 12:06:24.0225 0x1d20 ManyCam - ok 12:06:24.0230 0x1d20 [ D365217A6D4528ABB41B40C8FBD227E8, 340129785A5788A8FFE0E1B339A616D290F7504F3658F63E1A3B169B38460FBF ] MapsBroker C:\WINDOWS\System32\moshost.dll 12:06:24.0232 0x1d20 MapsBroker - ok 12:06:24.0242 0x1d20 [ C3EED732789052C98A2613A7E1C37CDA, D71735C8FB772EEB7F3F304CD79D8D774A9A285A94365DE0E635F61357EC9F0F ] mausbhost C:\WINDOWS\System32\drivers\mausbhost.sys 12:06:24.0247 0x1d20 mausbhost - ok 12:06:24.0250 0x1d20 [ 4DCE65116A28488593FF5A6A18B03DB0, AAFA7E7C1C9A38B8CF5CE530F96028191F52B1FDD2790246E413B63CF7C5F02A ] mausbip C:\WINDOWS\System32\drivers\mausbip.sys 12:06:24.0251 0x1d20 mausbip - ok 12:06:24.0254 0x1d20 [ 0609BF877A2F4DEECC62EEE220AB6242, 393268836EB055669997BD05866487497AFC396C9516DA4C4F143679B1DDCA6E ] megasas C:\WINDOWS\system32\drivers\megasas.sys 12:06:24.0255 0x1d20 megasas - ok 12:06:24.0258 0x1d20 [ EEC64C8D498D121607C7615FDFBEE4D0, B605B9886C1A05C999B005AEA6D0677DF632E2F34F4FF03F09C2E6C05F554D50 ] megasas2i C:\WINDOWS\system32\drivers\MegaSas2i.sys 12:06:24.0259 0x1d20 megasas2i - ok 12:06:24.0272 0x1d20 [ 2B7D3B206833D769218A1F4BE2D73B97, 25901A5E931DC3659993448E59ABC3601B7B0ED9AFEF0F5ECC139D0D0442F73B ] megasr C:\WINDOWS\system32\drivers\megasr.sys 12:06:24.0279 0x1d20 megasr - ok 12:06:24.0285 0x1d20 [ 48F64A35BA9F2E4AC0587DDA555FF951, 77FE2BE86ADCE103F4220A641139C42B1407CF8EFFEB66F841ABF9CFC3621558 ] MEIx64 C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys 12:06:24.0287 0x1d20 MEIx64 - ok 12:06:24.0291 0x1d20 [ 4F708DA590EDBCC124FB79066D44759B, B8DA803299AF5FDE1594CF958EA6B99D4B99E8163438A70A692CA33A96DBF8DE ] MessagingService C:\WINDOWS\System32\MessagingService.dll 12:06:24.0292 0x1d20 MessagingService - ok 12:06:24.0310 0x1d20 [ 89257B8D3826B5629CF7F73F97DA44F9, F056D67EC82072BA209FF7942862862FDF562F8C038F3128861C387F8F63B494 ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys 12:06:24.0320 0x1d20 mlx4_bus - ok 12:06:24.0324 0x1d20 [ 9AE3C0CC0865B1618A3C97744A6A9E9B, BF72AEF0360AC278B36ED31E5BFC2E8F72136B0952490A105CB6929654C97F6C ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys 12:06:24.0325 0x1d20 MMCSS - ok 12:06:24.0329 0x1d20 [ 0CD29540C32C2E2E0E3D7E9832752AF3, E64C3F5323C59D53409E33E88989FDD2A38B5B602336FC1D8C3702CA9B5EBFC7 ] Modem C:\WINDOWS\system32\drivers\modem.sys 12:06:24.0330 0x1d20 Modem - ok 12:06:24.0333 0x1d20 [ 534477FCAFDFCA6B841BFA06BD26BCC5, 96404FDF0BA2127A3BD24319637EC0C8BE8C42618D9FEDF66F41C5F72840D427 ] monitor C:\WINDOWS\System32\drivers\monitor.sys 12:06:24.0334 0x1d20 monitor - ok 12:06:24.0337 0x1d20 [ F5D4E18A70BA069D479154442CDEB60D, 96345E88BC6A50415E112A4B4CFDF3F4306EA049741C5B0A2BFFC142F15EB5CB ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys 12:06:24.0338 0x1d20 mouclass - ok 12:06:24.0341 0x1d20 [ 5C09868963B0C076AC3BC7759A46B7B1, 64CD200A8D90CDC31317009636A3BB6574ABF04BCAC903F93C47823C40CC03F6 ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys 12:06:24.0342 0x1d20 mouhid - ok 12:06:24.0346 0x1d20 [ 8BF7039787036529B98E50AE86A0E46B, 69C04D012D026A14E2D2A138EDA79227F9BE4BE1892D517DCDB797F2A5AEDB14 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys 12:06:24.0347 0x1d20 mountmgr - ok 12:06:24.0353 0x1d20 [ 0EACD4459D14FBB121A0F8202F170225, 6C63A3D69D6A44E6E03863D2256A5C6EF2DCA56B18DC90B8F3AE8C8DF5D303EF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 12:06:24.0355 0x1d20 MozillaMaintenance - ok 12:06:24.0362 0x1d20 [ AA12FAF01013F63348B722D3588550FF, AADE8C93BFE0830AE43AD649F62D7D7E25FC14107B172815EF9F4069C19ADFCC ] MpKsl53e08b5f C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{21384C1D-6071-4663-9403-A97A741E1BE7}\MpKsl53e08b5f.sys 12:06:24.0362 0x1d20 MpKsl53e08b5f - ok 12:06:24.0366 0x1d20 [ AD118EC95E9EF4D5223D681D8F183567, 395B76626956F5B7992676B9CA57B2CA075F0CDA881E14B3ED07ABE2DC0EEDBC ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys 12:06:24.0367 0x1d20 mpsdrv - ok 12:06:24.0385 0x1d20 [ 97106D80FD861D5762D5B93D1058D053, 4236FD178ECFC8978FFB3FC0890F357BB4AE10F88AF696617CCD24D93360BA3C ] MpsSvc C:\WINDOWS\system32\mpssvc.dll 12:06:24.0398 0x1d20 MpsSvc - ok 12:06:24.0403 0x1d20 [ D14C297933C82B8CB0B5CBBA4DDC830B, 2EF356F5373F16A7AE2421187FC5C150C09452C835229275B7403181D65C210F ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys 12:06:24.0405 0x1d20 MRxDAV - ok 12:06:24.0418 0x1d20 [ F2AD1B72C5A6475FB5FF332E1980DF88, 41E24496FBD61C0A333F567DA7C4E38C5A792724FB56448189099F60114749D5 ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 12:06:24.0424 0x1d20 mrxsmb - ok 12:06:24.0434 0x1d20 [ 84700F40C0E41AEA91F8F3D6218A8A68, 72BB529367095EE19F299232648B7E347590C9F4F89DE3FDA41724BFCAC1F49C ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys 12:06:24.0437 0x1d20 mrxsmb10 - ok 12:06:24.0445 0x1d20 [ B855479BA6A74349CEF8061808C90201, BA70A9EBC2E2895419C5D46806153DCA061E3C836F3D97A622E7672140107F81 ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys 12:06:24.0448 0x1d20 mrxsmb20 - ok 12:06:24.0452 0x1d20 [ 44A8A52763381E5DCAE122330191493C, 578630611F151C6D20D52145312F4A824C6FF80E27F282A2109BA6E54FDDC9BB ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys 12:06:24.0454 0x1d20 MsBridge - ok 12:06:24.0458 0x1d20 [ 41C5D9B52F4A1B30C3F7219D601CF12C, E1C1B1CED19D32FA1B765C7C380B9E749893B2018CF358F448E40DA60CB63166 ] MSDTC C:\WINDOWS\System32\msdtc.exe 12:06:24.0461 0x1d20 MSDTC - ok 12:06:24.0467 0x1d20 [ 92C00BD9616F353CA59A755C33269757, E67F05A4A1C44137CCAC0C7292A7010B5920172ACAE32638600E231F28F33035 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 12:06:24.0468 0x1d20 Msfs - ok 12:06:24.0471 0x1d20 [ F27EC8F7A0A779276E5DA2E70C2B01EE, A450DB309F84CAFFCE2A720612BDB260D88E9C390D2BC60874D73A55D8567E04 ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys 12:06:24.0472 0x1d20 msgpiowin32 - ok 12:06:24.0475 0x1d20 [ CBA955A54C9446CAAD28C76789D3B071, F6CA1BECA35B13B7CCC9FFB325FACF22713F6B81E8A6540C9967A462E425BBEC ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys 12:06:24.0475 0x1d20 mshidkmdf - ok 12:06:24.0478 0x1d20 [ E8E568EF60677E4534F387C53EE1B35F, 2E250EE1A9AE8AFDCA5216BED87328B05713386BD7E61C66A74EF021F2AFE7D7 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys 12:06:24.0478 0x1d20 mshidumdf - ok 12:06:24.0481 0x1d20 [ 16376B7B0730C04DD1A2C0CC8E09E420, 2F39D3254FD272E277B5496A8C93A7CBFBF80F6004AE0343BE9F09C538975910 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys 12:06:24.0482 0x1d20 msisadrv - ok 12:06:24.0487 0x1d20 [ 75FE54E84C1EB0C9C5E09F9FD5928ECC, 971CFEE8FB8364D17CD392E32A32AE57BE6461EAB6C580B52E6D752D4CFDD6B3 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll 12:06:24.0489 0x1d20 MSiSCSI - ok 12:06:24.0492 0x1d20 msiserver - ok 12:06:24.0495 0x1d20 [ C2939119A17E52D74191EFC1E4CDEE09, B5738A32B02CDD816F086BA84C733D9597A0193F42C068D7B90E386D1CA92EE1 ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys 12:06:24.0495 0x1d20 MSKSSRV - ok 12:06:24.0499 0x1d20 [ E40B960078A15D4901265D32E071C42D, AC11B8221C8F529FE3CA6FEB99AF699664C86008A732C3A8E6B1CE31C2272454 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys 12:06:24.0500 0x1d20 MsLldp - ok 12:06:24.0503 0x1d20 [ B4860AB91DC4E73936F0FF504D6B4B07, 7371093D9EB62218D20F6B8B3C88CBF01932AEA2923ED119962A78BE46E5A939 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys 12:06:24.0503 0x1d20 MSPCLOCK - ok 12:06:24.0505 0x1d20 [ 8EDC45C3F7F64A51C98B59E24648F74B, 445731F32A37A99FAB3CD5D178A84FB4F835727826211FF18623409D29FF3A1A ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys 12:06:24.0506 0x1d20 MSPQM - ok 12:06:24.0514 0x1d20 [ 7DA5FAC2A49D30CA5B7B96B8B26281AC, 168C3AA5C7318184D8F67EA832920FCE64E11D4CC418517D7BDACB9632F0BEA8 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys 12:06:24.0518 0x1d20 MsRPC - ok 12:06:24.0523 0x1d20 [ 7E3365C8BC83DCE88D6226BB5C7170C4, 69D741039CAAFCA93A4CC09CEC14F117527D732A6CF3077AA83E935B03EC3F9C ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys 12:06:24.0524 0x1d20 mssmbios - ok 12:06:24.0527 0x1d20 [ 09D51564E49181E9928910D6B91C920E, FB3C918820ACF4506AC49478709B4D4C6489BA0B5113E666C34B916CA5CD6DE7 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys 12:06:24.0527 0x1d20 MSTEE - ok 12:06:24.0531 0x1d20 [ 793AE56A3946EAD5F906C28D294FEFE6, BB563D088084026606C2FBD30A0850BA18363CC173CC6C77272D727CA6C1F9BD ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys 12:06:24.0532 0x1d20 MTConfig - ok 12:06:24.0536 0x1d20 [ E35F51C7474A26680627477462715206, 435490915CDD416D666B64C6B4526285EC946E6918CFA85585692B9ED43518B6 ] Mup C:\WINDOWS\system32\Drivers\mup.sys 12:06:24.0537 0x1d20 Mup - ok 12:06:24.0543 0x1d20 [ 74BD1149BF50F1E24934042A3BD17C90, DC4626DC4D629CA7DF336EC7E6435F27D2E252D81945E57F4BF2C981DBCD9B45 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys 12:06:24.0544 0x1d20 mvumis - ok 12:06:24.0557 0x1d20 [ 39C772E20B8C61858F969E4D60699D89, 32146D265CD315597C48FB233D77DDACB0FEDDB7E800A0F411A67844BB3ACC67 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys 12:06:24.0564 0x1d20 NativeWifiP - ok 12:06:24.0579 0x1d20 [ BC80F85C129F12A5F64D6741A120B539, AD410F13BCBDE54F98E353BD4DAF30CC5A0A9990FC4F1AB3623EF3175EEBCAF7 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll 12:06:24.0588 0x1d20 NaturalAuthentication - ok 12:06:24.0595 0x1d20 [ F2EA6F3165E154C24C084AC35DD6C3F8, 4F8CB75770945F5A28CC308917A124109F7462CE933695B9CAA3FE2CAE76C445 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll 12:06:24.0597 0x1d20 NcaSvc - ok 12:06:24.0606 0x1d20 [ 9B3C6582CFB91BA2A04B1D06D8E2FB98, 431E6B075FD24002724E8A2ED9FB3221AD66D1F1D021B56466187D97E5B43A1F ] NcbService C:\WINDOWS\System32\ncbservice.dll 12:06:24.0611 0x1d20 NcbService - ok 12:06:24.0616 0x1d20 [ 932E2E43078A3D786A46A5428F21B314, 17F1CC3388D80F1E1850063114C1EB72EEA149D9C8FA3501C0F9EB55C9E0C58D ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll 12:06:24.0618 0x1d20 NcdAutoSetup - ok 12:06:24.0622 0x1d20 [ 0FFE8AF1B94C5FD54E6ACC6DAE990D31, B67D3CA3460D4700D8B83EFE4B6A7AA940650E84D985484FBAA1EE80F3632133 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys 12:06:24.0623 0x1d20 ndfltr - ok 12:06:24.0645 0x1d20 [ 59F3D5FEF4A24871C07C279762DA8624, 00DD19E3FBC7FCFE2768409E2B4AE931205D53A22072D958950E8FBA1D14F071 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys 12:06:24.0660 0x1d20 NDIS - ok 12:06:24.0665 0x1d20 [ 4EA73CFDEE4A628D387D95464A131F29, 38A6E2389FA9B20A7AFDF3CFCD13B66489B92D853EE486BF81019F0A36A142E1 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys 12:06:24.0665 0x1d20 NdisCap - ok 12:06:24.0670 0x1d20 [ EB127689AF6F24091AB73538A556257F, BC25067D355084D6893E9262750433044C28893BB27A67BF7AF5008742C6D359 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys 12:06:24.0672 0x1d20 NdisImPlatform - ok 12:06:24.0674 0x1d20 [ 73B4C72FB6170A08C64BDA92DE93ECF7, 766BBE659232F0F5EAEE577EE88091FB76175BC52D65B9637126069C97E795D4 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12:06:24.0675 0x1d20 NdisTapi - ok 12:06:24.0679 0x1d20 [ 6704F27EB15A5B30AA7FA5A4F4D1FD47, 841F99B3C751F4D4E23C0E7B5C275B4871C1D5EF937A93129DF64DF49F6B6736 ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys 12:06:24.0680 0x1d20 Ndisuio - ok 12:06:24.0682 0x1d20 [ FE87CCAA89433FC306A80F15E848F4B2, 3269FDF53DA59057E066D582FCBB96B71C8063B8F488856A9DEA414B4797E43A ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 12:06:24.0683 0x1d20 NdisVirtualBus - ok 12:06:24.0689 0x1d20 [ 94517BC9F29A1B73D377F1BF1C3DCA34, 45A34D7AAA851C643E80C0F61CBF8544B8A2E8E7DAB2D5AB6F3A34FDEE4AB0B3 ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys 12:06:24.0691 0x1d20 NdisWan - ok 12:06:24.0698 0x1d20 [ 94517BC9F29A1B73D377F1BF1C3DCA34, 45A34D7AAA851C643E80C0F61CBF8544B8A2E8E7DAB2D5AB6F3A34FDEE4AB0B3 ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys 12:06:24.0700 0x1d20 ndiswanlegacy - ok 12:06:24.0704 0x1d20 [ AC6AC99075732F5C29DB0004DD5B1AC6, 684EC821EF5C60DA540CA36EC192B09E62440AAD5B13F0F4C23DDC4A9B96F28C ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys 12:06:24.0705 0x1d20 ndproxy - ok 12:06:24.0709 0x1d20 [ 9AC090451D92E6081EB89CDA83D74189, D4D442412F112853AA8D88DFB5F695AE4E8E2C361905992537EE53BE675FECE8 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys 12:06:24.0711 0x1d20 Ndu - ok 12:06:24.0716 0x1d20 [ A115DDB2C7805C41EEC9A5276FF5764E, FC81D0BE2DAAC6E7161C0FC5C90050022A39AD50E28040D5357C0E1FD6C0B6B5 ] NetAdapterCx C:\WINDOWS\system32\drivers\NetAdapterCx.sys 12:06:24.0717 0x1d20 NetAdapterCx - ok 12:06:24.0721 0x1d20 [ F420B6CAB5151A38E4DBBFFB500C11DA, 271F495B261461B8EA847BFDD87C155E6DC1B6236C161B8253A1F023706B1B1D ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys 12:06:24.0722 0x1d20 NetBIOS - ok 12:06:24.0731 0x1d20 [ 30C2F67EC84EB11B22011620107E0325, 98088685F457566FD8D13B83A0BF6B06CDC70AC156B67BF87A8A8446C150C1F3 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 12:06:24.0734 0x1d20 NetBT - ok 12:06:24.0738 0x1d20 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] Netlogon C:\WINDOWS\system32\lsass.exe 12:06:24.0740 0x1d20 Netlogon - ok 12:06:24.0747 0x1d20 [ D9FF8CA42C3541F4840693F17143C595, B05FB0B6439B34BD93EE59DC48BBE3D712A7428EFBFE37A887CE8546E57EE68F ] Netman C:\WINDOWS\System32\netman.dll 12:06:24.0750 0x1d20 Netman - ok 12:06:24.0762 0x1d20 [ 96173660A4DD4A56E4B8938A67DAD9B7, F1D8F94625C6461DB89F8D3BDC73748F8A7F3446694BD1F148AF9BE6F17E9543 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll 12:06:24.0768 0x1d20 netprofm - ok 12:06:24.0776 0x1d20 [ 79C810D49E6D2825F51B0D7CAA6E2FAD, 19B7FB87FC8CE8FEA456F06D32099ED5B69FE38D2954580D4CEC32998D206E9F ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll 12:06:24.0780 0x1d20 NetSetupSvc - ok 12:06:24.0788 0x1d20 [ 4D37150AB4D61598919AB70ACFD1369A, 9ABF73213988ED9AA72B2658F8B91967A24C7CC2049859D86CE9C51A4AB57A84 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 12:06:24.0793 0x1d20 NetTcpPortSharing - ok 12:06:24.0798 0x1d20 [ 8C03F2F5A9E93AEB08B3AEE51552394A, F95185FB8D5FDEAB39E593488BA6ABCFA9C081BFED05008E0CD95F29B894AFC8 ] netvsc C:\WINDOWS\System32\drivers\netvsc.sys 12:06:24.0800 0x1d20 netvsc - ok 12:06:24.0813 0x1d20 [ 0C124EAC0EF7B3767280C94A8C03615B, D10216726A221C8FBC67C47F4B266C271A7C7A4438F77AC44BB561E0A6EB6D34 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll 12:06:24.0819 0x1d20 NgcCtnrSvc - ok 12:06:24.0838 0x1d20 [ 9ECFD7DD594DBEAED3A2889045B2DCBD, 984B10A88E304B805153C49B3D618315926635A270AB34D2976E7AA5AE00E2F4 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll 12:06:24.0852 0x1d20 NgcSvc - ok 12:06:24.0861 0x1d20 [ 50F98CD010326B58F09082BACF3123AE, 124446A2905E23BB3F5763E347842F3F511EC44C37C2F85E409F73EC8F53924E ] NlaSvc C:\WINDOWS\System32\nlasvc.dll 12:06:24.0867 0x1d20 NlaSvc - ok 12:06:24.0871 0x1d20 [ 6D8F6A9C53CFB0C49E8251A442B7283F, C3E913E4997C35A9B4C2E613A499F01D15264EAB699B93269B690B2A74A70E9A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 12:06:24.0872 0x1d20 Npfs - ok 12:06:24.0875 0x1d20 [ BABF7E1757D6908941C9F9CBD66A5EF0, 323E743CB26583763A9C5DE64E7E08138CB8D3E2DE0A8BCE9F774E1C7426E7F8 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys 12:06:24.0876 0x1d20 npsvctrig - ok 12:06:24.0880 0x1d20 [ A85EB5721C7203AAAAAA04F551960CD9, E61ED728E154799346C749159BFE36FAEB2CE64FC5735F533B910017D66A7EE5 ] nsi C:\WINDOWS\system32\nsisvc.dll 12:06:24.0881 0x1d20 nsi - ok 12:06:24.0884 0x1d20 [ 7A6BA778B48DF9FB7AC231D4FF6E3248, 5959CA59C75D2C4DD8A539CAA8D99EF6A0CB5AA3F0D485B14C8B35911748F1F7 ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys 12:06:24.0885 0x1d20 nsiproxy - ok 12:06:24.0922 0x1d20 [ 075F8C81457804BB79DD33FE69A96C57, EFAA1C6CEEC995E87EB15DA40178EA3534A73C8F6ADCF5F3FEC1C7BB99B78687 ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys 12:06:24.0956 0x1d20 NTFS - ok 12:06:24.0960 0x1d20 [ 4FFB2D5655D10700D5B8E205C4DB86BD, 69078960669A373F9C2D47AF2ED841619831106B681EBAAEAAE5BD569A54CE6D ] Null C:\WINDOWS\system32\drivers\Null.sys 12:06:24.0960 0x1d20 Null - ok 12:06:24.0971 0x1d20 [ 1154A31459B0E6D973DA40876240E832, 6740A717633566873388570D00CF64676F8249F65006BDDA0C8E90A426655458 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe 12:06:24.0977 0x1d20 NvContainerLocalSystem - ok 12:06:24.0988 0x1d20 [ 1154A31459B0E6D973DA40876240E832, 6740A717633566873388570D00CF64676F8249F65006BDDA0C8E90A426655458 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe 12:06:24.0994 0x1d20 NvContainerNetworkService - ok 12:06:24.0999 0x1d20 [ 99EB6376EC2C03CE5F668577651E3454, A783FFBF89A9074E2074ACAF3F55862DF2F05CAFEAF6A2D509DDA665EB0D59CB ] nvdimmn C:\WINDOWS\System32\drivers\nvdimmn.sys 12:06:25.0000 0x1d20 nvdimmn - ok 12:06:25.0007 0x1d20 [ 4938CCA6E12A7FDA5324FFF0DF5DB8EC, 053D4D21014020C0D39F7BFC480EAE1458E1ABA1C40E11190204C4A2CB0D46EF ] NVHDA C:\WINDOWS\system32\drivers\nvhda64v.sys 12:06:25.0010 0x1d20 NVHDA - ok 12:06:25.0236 0x1d20 [ 862280E4CB288B0C471794A443D2451D, 149A65EAC50C720AB9D0047ADACC22E5002D90CC7D1B095DFC48064C5A2716A4 ] nvlddmkm C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ce1961376673184c\nvlddmkm.sys 12:06:25.0421 0x1d20 nvlddmkm - ok 12:06:25.0442 0x1d20 [ 3DB2E9E207358BFBD09B77B5119ECA5B, 55FED85EFC06B7AB5031D9986E4E4D2FA8841C549081ABBA9F9D9BBAB7852B37 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys 12:06:25.0444 0x1d20 nvraid - ok 12:06:25.0451 0x1d20 [ 4C04BFBD4DB2EECCC47F5FA39D65BB6E, 9312DC4F7000991946D92D87DD9D37D70E336629EDBA553BFC79804049E34B73 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys 12:06:25.0453 0x1d20 nvstor - ok 12:06:25.0456 0x1d20 [ DF8E3DD83BA7558DC155092A2B6E53DA, 5E7D4F52937A1619DE495D1EA90AD28CBEED8C6C3FA7797E9EA9E36CBBF0BE2C ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 12:06:25.0457 0x1d20 NvStreamKms - ok 12:06:25.0470 0x1d20 [ 11E9791C1F356DC51156A9DCF241F641, B6012B5EEDA5794CA685E2428FD7C64FC8F988431798C61FC13B1DEA8851846C ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe 12:06:25.0474 0x1d20 NvTelemetryContainer - ok 12:06:25.0478 0x1d20 [ 3569074FE33A57E74A49E9B71A316714, 12EA5B1BAD6B535B4C8D822557712D13DF5EAD26CB4BC85B9309664BFB20200D ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys 12:06:25.0479 0x1d20 nvvad_WaveExtensible - ok 12:06:25.0482 0x1d20 [ 7D26C9E05D610ACA4548EF0E480ED20D, ED42F78603090E6E9CC67943429A72920BD9D1293E7772903E086B6CC240B673 ] nvvhci C:\WINDOWS\System32\drivers\nvvhci.sys 12:06:25.0483 0x1d20 nvvhci - ok 12:06:25.0498 0x1d20 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 12:06:25.0503 0x1d20 odserv - ok 12:06:25.0512 0x1d20 [ 0D611DC17E48B6F8DD466A089170D118, E55A78E2CC6A0A5F7B8F0B75DFB2297FBC3B959C4FDEFBEA1C6C4E7706724AEB ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll 12:06:25.0517 0x1d20 OneSyncSvc - ok 12:06:25.0522 0x1d20 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 12:06:25.0524 0x1d20 ose - ok 12:06:25.0534 0x1d20 [ F5F10CE848CAF07A12A7B92290DBA38A, AC6AC13B692D07A6853B24A6396F1C3388586FD5D528F79FA3E373428D54D29A ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll 12:06:25.0539 0x1d20 p2pimsvc - ok 12:06:25.0550 0x1d20 [ D1A9C22A98A10EB11A190B8FC7C07C6A, 1DE5F07E707DA9D833F105A8D948BBAEF0172DB2147D9A665EC7320F88D57B9E ] p2psvc C:\WINDOWS\system32\p2psvc.dll 12:06:25.0555 0x1d20 p2psvc - ok 12:06:25.0560 0x1d20 [ 2CC6C325B271C7CA60F374F8F868CB45, 569391CA5DF003ED33CAA89FD38834641023C24F7FAE2261F6DA8ABC5CC9C3C9 ] Parport C:\WINDOWS\System32\drivers\parport.sys 12:06:25.0562 0x1d20 Parport - ok 12:06:25.0567 0x1d20 [ 664B7DDEE982ADF5EAB480C75B9F6218, 1D1403CBD75916B83EEFA9B235E237583C40025C87C13676247F1EAD3F1D33EE ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys 12:06:25.0570 0x1d20 partmgr - ok 12:06:25.0581 0x1d20 [ 72ABB842C15A6C3AC3D954308C6BF206, 8F2A69E3BE43BCD2C8A39153062216B5CCEC9FA62205EC8A23FAB209DFAE7062 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll 12:06:25.0588 0x1d20 PcaSvc - ok 12:06:25.0598 0x1d20 [ C5B74C6D87E77BC64DEBD1BF57DEB375, AEBC86E404D4E3985D9FBAD9913AC52127DDE7C79062830717CDFEEA4CD7CC0B ] pci C:\WINDOWS\system32\drivers\pci.sys 12:06:25.0602 0x1d20 pci - ok 12:06:25.0605 0x1d20 [ CFB85CB7A6F6926EA0EB96EDFB3C8A91, 7B3A58C165DF231BB202D8A2036272932439864F8EBDC62811E2BEFA8B36FC01 ] pciide C:\WINDOWS\system32\drivers\pciide.sys 12:06:25.0605 0x1d20 pciide - ok 12:06:25.0610 0x1d20 [ 13B7D84B397A90E82682C47A15C3A98D, 7F897DA83209381A8C26B34416899E276256AB587DC4E2B60B185CAC8D1877F0 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys 12:06:25.0612 0x1d20 pcmcia - ok 12:06:25.0617 0x1d20 [ 76EA512FD9D4673CF7A57775EE8922E2, 6D2B90616A46BC4F9BB6BACBD78EB33C23834987365C87617AFC2E147871C984 ] pcw C:\WINDOWS\system32\drivers\pcw.sys 12:06:25.0617 0x1d20 pcw - ok 12:06:25.0622 0x1d20 [ 10E48E45A03A7F4C2B7C11738BE87816, 44870E26C3B75D51F5035DE78E62F3EFF222D314DAACBD60AE40BF34BC706F2E ] pdc C:\WINDOWS\system32\drivers\pdc.sys 12:06:25.0623 0x1d20 pdc - ok 12:06:25.0637 0x1d20 [ 4F190BA3C9BD2F0277BCBF480F396091, F09613C76350706992B39D7EA9B859D28F00790E5AC17CA7D49C3E270B9D8994 ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys 12:06:25.0645 0x1d20 PEAUTH - ok 12:06:25.0650 0x1d20 [ FE52FF97A094609429FEF098EDC6FB08, 6762ED340048AF61B756CB7B576BE2057768FDB677623D01F2A592727C0E5A00 ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys 12:06:25.0651 0x1d20 percsas2i - ok 12:06:25.0654 0x1d20 [ FCA143274792F12383C35902E801E83A, 87D93226E32153794993035553C9935D07242631E182460D8ED13650175C0F01 ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys 12:06:25.0655 0x1d20 percsas3i - ok 12:06:25.0669 0x1d20 [ 4DAD2C73778D41F951B33854936E7BDC, 1421FDA2D083D5923422A038C54603BF798C48DDB7244DBEDA46D537B8CE1534 ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe 12:06:25.0670 0x1d20 PerfHost - ok 12:06:25.0686 0x1d20 [ B730E963A31B73938A76D7B80666D60D, FADF452637E2EB50CC8C0E75956FE01F029C587F6EF2F8B347213263DE9D3A80 ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll 12:06:25.0697 0x1d20 PhoneSvc - ok 12:06:25.0704 0x1d20 [ 97D85602B8131C487EB08A36F7343F5E, BEDC106AF06358D40BB034390645A5BFF9C138CFD51B5997D32614741D3D2372 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll 12:06:25.0708 0x1d20 PimIndexMaintenanceSvc - ok 12:06:25.0751 0x1d20 [ F9FB601621FF33376F3908C2C27C6EF4, 8689565D4FD1C68826EA0A9C2B44377A2AEC3CD812595F0D32904D8FA5809672 ] pla C:\WINDOWS\system32\pla.dll 12:06:25.0769 0x1d20 pla - ok 12:06:25.0775 0x1d20 [ A2BACEBAC01BE7A6656B454E75C23262, C2C168718A341D48679AC4CA8005BD06E9F1F0D1F7C72D3C30A7A8CE1F665A43 ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll 12:06:25.0778 0x1d20 PlugPlay - ok 12:06:25.0782 0x1d20 [ 414CA4DCC31D795882B25ADC1DACE779, AFD8D9AA24C64DD9569FDCBE65171810FE27AF24B8DD2941FECE6245EABB6AAC ] pmem C:\WINDOWS\System32\drivers\pmem.sys 12:06:25.0783 0x1d20 pmem - ok 12:06:25.0786 0x1d20 [ D54385DD5A39A5636D1587FC9ECFC337, DEEA5D433CB2DA55AE58C7C5431A1249C94B61606F0A75E4A44D516619060263 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll 12:06:25.0788 0x1d20 PNRPAutoReg - ok 12:06:25.0796 0x1d20 [ F5F10CE848CAF07A12A7B92290DBA38A, AC6AC13B692D07A6853B24A6396F1C3388586FD5D528F79FA3E373428D54D29A ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll 12:06:25.0801 0x1d20 PNRPsvc - ok 12:06:25.0812 0x1d20 [ 118E91AEE8F6DDAD088F955498CF2487, F4447C64CF1F36432E0FF09B6712DCE61BF28E3499F20C6C69E80D98B42D671E ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll 12:06:25.0817 0x1d20 PolicyAgent - ok 12:06:25.0824 0x1d20 [ F6A0B848F75CF55E3980EA0FADCBA317, 11D8B12B4DE867B180965B0F2FD0F362265C518F76FE3351A2B7C9C2FFC5E137 ] Power C:\WINDOWS\system32\umpo.dll 12:06:25.0827 0x1d20 Power - ok 12:06:25.0831 0x1d20 [ D292D7FADCEE481CC64A9DE8FE9C3347, BD870A375E33CD8434CA97FFE9C2F84E58C6CD0EAEEEE8922172CB01F9674B55 ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys 12:06:25.0832 0x1d20 PptpMiniport - ok 12:06:25.0876 0x1d20 [ 5404E7A968A26DF03793B6F68536594D, BE5A85581E87EFE4DB43AD17B8D42D3F7F32364AEEC1416DBB94279C4A203FF2 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll 12:06:25.0909 0x1d20 PrintNotify - ok 12:06:25.0917 0x1d20 [ D57CF871B3977731A91FE9611A54C7C1, B6C7F685716A88D0978377B83C5320C88EED0CAA44A001849AAFF71E4E0682E7 ] Processor C:\WINDOWS\System32\drivers\processr.sys 12:06:25.0919 0x1d20 Processor - ok 12:06:25.0929 0x1d20 [ 56A7713DE64B16FB309D132E88FDB098, A658C8DCA87442F33B726A9B2060B20393D83B8658D0894C046CAFEAB00E2D8A ] ProfSvc C:\WINDOWS\system32\profsvc.dll 12:06:25.0935 0x1d20 ProfSvc - ok 12:06:25.0940 0x1d20 [ B60431D2A046AD97F8427F6E568370F5, CD488E343585A5AC19D9AAF88BF0BB7EEA1BC48F6DA4A4FBF9BE5A04ECF5040B ] Psched C:\WINDOWS\system32\drivers\pacer.sys 12:06:25.0942 0x1d20 Psched - ok 12:06:25.0951 0x1d20 [ E0DCCA2A78516D155A6485CCA99F0EA5, EAFD24F815ECD6373BEC8E75B24FB54694CB8E4FF430FB6886F9B5B1C1762BFC ] QWAVE C:\WINDOWS\system32\qwave.dll 12:06:25.0955 0x1d20 QWAVE - ok 12:06:25.0959 0x1d20 [ A2B0F46FBA2521E7E732BDBDB1238515, 7F0FEFB09770BF5889D6C2219F68399C962A3F1071E70C4951B6FDAE196CF041 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys 12:06:25.0960 0x1d20 QWAVEdrv - ok 12:06:25.0964 0x1d20 [ EA9EB06EFC325CD2ACF5DF2F26A4894E, 32AC7EDB42CDA736E2AD9AB67795735F16234D9BD80D56FDAE5B8B3C3C1CC26F ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 12:06:25.0964 0x1d20 RasAcd - ok 12:06:25.0969 0x1d20 [ 4E9379389D0A851DD19D130C8FAEFBD0, 279A25EF8949A5BAF311CA75493A5F89F74A02711EF875F67D0A95849B409C00 ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys 12:06:25.0970 0x1d20 RasAgileVpn - ok 12:06:25.0974 0x1d20 [ 3E8CB44832FE3F96047187291523CDA1, 999A10D4D50CD2C39309FDC04A9F4CB0959BA061AE9305D4DF7F00F37F3813F9 ] RasAuto C:\WINDOWS\System32\rasauto.dll 12:06:25.0977 0x1d20 RasAuto - ok 12:06:25.0981 0x1d20 [ 5279EC98F6218D29EADDFECCC0D80E9A, 6F376FC3BEFA9F521635192177962AF1F41173502EC067896B7C2A5FB71E7A3B ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys 12:06:25.0983 0x1d20 Rasl2tp - ok 12:06:26.0006 0x1d20 [ D5E9823BC7CD1149917CC49AD4052D94, 4A40400FC1B43EF3EADA420F9898AF2A24585199B6F11AA8C2E7E15E2CDA3BAA ] RasMan C:\WINDOWS\System32\rasmans.dll 12:06:26.0019 0x1d20 RasMan - ok 12:06:26.0023 0x1d20 [ D7FF75ED7A48FD60A573C9E959CF4DB5, C67673E2D678527F8C07C9BCC487D385B92282D9D73396CFB01F14F5211CA991 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 12:06:26.0024 0x1d20 RasPppoe - ok 12:06:26.0029 0x1d20 [ 6A4E45A7F17FA0B4B1B48C550E311944, 1E84A559B7AA5F07E8156D223EFFB1B2B43D1E4E90E561D8DF2C257FFBCFDC0D ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys 12:06:26.0030 0x1d20 RasSstp - ok 12:06:26.0041 0x1d20 [ F2C575A9657F7B2E027C6CE7BC8F1A2D, 5D002488CCEDCEBF0542F508FCE47DC9105C67D5685489970048437BD243AC0E ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 12:06:26.0047 0x1d20 rdbss - ok 12:06:26.0051 0x1d20 [ 9414B22E093243636D362BF8C8C12A67, 575CE91AFADD771CBF86377962EDFAF70150BBA575F8DF144FEE6CC1C0FF88E0 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys 12:06:26.0051 0x1d20 rdpbus - ok 12:06:26.0057 0x1d20 [ 53A01D3FDB701AC5D9DDE4140227E3D9, 833AF0BAAB49B58C71C684D2AA20B900C27E19DDCE5E15355C7ABAAB33BC7673 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys 12:06:26.0060 0x1d20 RDPDR - ok 12:06:26.0065 0x1d20 [ DF32ED51DC0C3F6F3B1C4CEF71B8B426, DBEAD271B5DE6439E3106BDDB8B1E47D7BA47AE203CF3E1F8924CE02FDCA6E0B ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys 12:06:26.0066 0x1d20 RdpVideoMiniport - ok 12:06:26.0073 0x1d20 [ 2369A5B651308E0C3458143976E9B03B, 0EDE99F7E2A7668E90C2FCA11D4BCE0676FBEA2CCFB57A004827CE5FE96D1584 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys 12:06:26.0077 0x1d20 rdyboost - ok 12:06:26.0107 0x1d20 [ 3581FB9529035F8EC6DB681664CA70B1, 0C7BCD6A3B4248683C52B69F0B373D5929C2375F9BBF6CA80C480A8E7446A30C ] ReFS C:\WINDOWS\system32\drivers\ReFS.sys 12:06:26.0127 0x1d20 ReFS - ok 12:06:26.0151 0x1d20 [ 79E1ADE19D8B7C56EF29D098EAF57AD0, 295D0F04359A00849759976710F6CB83DB96E5007946930EA19865620EA3EFE7 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys 12:06:26.0162 0x1d20 ReFSv1 - ok 12:06:26.0174 0x1d20 [ D91C597DE82E1500525945E1FFF24B0F, 3F5837A743715FB2CCBFC9458FBE010AED170B46515925D4C7C59BBAC792F695 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 12:06:26.0181 0x1d20 RemoteAccess - ok 12:06:26.0187 0x1d20 [ 19D1072193DAF71C97E5A05FC7673BB3, 313C3762CCC490C20B5561A78E6002E7A52F0142B370F17849DD4AB2F0AF6513 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 12:06:26.0190 0x1d20 RemoteRegistry - ok 12:06:26.0203 0x1d20 [ A12D167F73C3E285AC623BCA62B3A8BC, 6E8213808C22C0688BD40721FBBBAA88BFEFA1BD304BC19AA015FC541CA5BF84 ] RetailDemo C:\WINDOWS\system32\RDXService.dll 12:06:26.0212 0x1d20 RetailDemo - ok 12:06:26.0218 0x1d20 [ D31B2CD9458D2E212A5F24D56D2FB8D5, D8EC0BDB9D143C050A48217C57AA1BA6D60EEFEF67A98441064BD8FD339987DD ] RmSvc C:\WINDOWS\System32\RMapi.dll 12:06:26.0221 0x1d20 RmSvc - ok 12:06:26.0224 0x1d20 [ C79F1F7C8A5FCBE90E3C833299AA1F59, 7969E79B2095BDA144AA369DE21F49C9FAD272B5864B2F0FD28CB28D148F2AD6 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll 12:06:26.0226 0x1d20 RpcEptMapper - ok 12:06:26.0229 0x1d20 [ 1CE6928C1587F9760F7C3A036786CAE8, 3E4F5371E0DDDBA612BF61891D17D691DCAFB2E1010BBD84737FBD98DA8C03DE ] RpcLocator C:\WINDOWS\system32\locator.exe 12:06:26.0230 0x1d20 RpcLocator - ok 12:06:26.0249 0x1d20 [ 0E79A4C76CAAA0CFE9CA42C13E5AA086, C4D90EDA54216CC7897128D39517E4E18195BF28254796C6D0684E2C7DB90642 ] RpcSs C:\WINDOWS\system32\rpcss.dll 12:06:26.0263 0x1d20 RpcSs - ok 12:06:26.0268 0x1d20 [ E87EECED9287C275B6CF30EB598B1D77, D0C5D4E37A3FAD422C0ECFFAB53904D9FD5385129DE2BC5AF75D91CD016EA6AC ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys 12:06:26.0269 0x1d20 rspndr - ok 12:06:26.0286 0x1d20 [ 2B6FC4ABC7C8259D094590189F14C0F0, 906C9E11386FAD7173B2C245E624FBD51BA987202C49B87BA889614E3B20C05A ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys 12:06:26.0297 0x1d20 rt640x64 - ok 12:06:26.0358 0x1d20 [ 9748533EAF7F9E3D8F3F7A0AF066B31D, BB8D21BF26568ECE0599D8469121C73A6AE847203C110B6F0B94B5E7F76D6DF6 ] rtwlane_13 C:\WINDOWS\System32\drivers\rtwlane_13.sys 12:06:26.0401 0x1d20 rtwlane_13 - ok 12:06:26.0407 0x1d20 [ 6308366D3CDEA5F427CFF4BCF0081B4E, ABB91A41C09A1607C66BD380FD0A3EECAAF9AD534856CCC78DE1A4E450ADB07F ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys 12:06:26.0407 0x1d20 s3cap - ok 12:06:26.0411 0x1d20 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] SamSs C:\WINDOWS\system32\lsass.exe 12:06:26.0413 0x1d20 SamSs - ok 12:06:26.0417 0x1d20 [ 33B2DC5C2F19DA89F862484E23D9833D, 1C3BD1804767D087BE1510EEDCE94FFAC096922C821A123DB1BACDA5777246A7 ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys 12:06:26.0419 0x1d20 sbp2port - ok 12:06:26.0425 0x1d20 [ 53F03A8A228D6C8016139A4B2583A2D8, 8EA046C7537B2D926D3AE1F058A9880F823EBEA6DC77F312082EDE1722F08236 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll 12:06:26.0429 0x1d20 SCardSvr - ok 12:06:26.0435 0x1d20 [ CBCC25CDF5D30ACB253CC92ADC7D569C, 0DF0DE3B0F0007E4F3D663EB7CC503C38B5A99F5859A6BD8564F8153F1D925D5 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll 12:06:26.0439 0x1d20 ScDeviceEnum - ok 12:06:26.0443 0x1d20 [ 5CFEEFCC6FAD1FD09ACCFBD652DDD85B, F90104CC42073ACD48A2FCCEDF58B57D8663223406ECB0A270140A053E9260B3 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys 12:06:26.0443 0x1d20 scfilter - ok 12:06:26.0459 0x1d20 [ 5BBFA6CA63E8A5BB8FA2FA84A5562CE2, C74CD0A76473343A8620D26C96F7300026C295EDF61B8A336AB326DFE861678D ] Schedule C:\WINDOWS\system32\schedsvc.dll 12:06:26.0471 0x1d20 Schedule - ok 12:06:26.0475 0x1d20 [ 5C8620FAC0E3C1658C8EF7AD7BB7EA5F, FEBE7FC79FCDF692167D82DE54031FD68BD2941544007EEB3D82C21E7F1C5C83 ] scmbus C:\WINDOWS\system32\drivers\scmbus.sys 12:06:26.0477 0x1d20 scmbus - ok 12:06:26.0483 0x1d20 [ 62E13528B9F900A5662E243D4315F10B, B3F4868E80A3A2EDEC19E5AA32C96FF90B08D6B9BD35B80EA01E6A098D46040B ] SCPolicySvc C:\WINDOWS\System32\certprop.dll 12:06:26.0486 0x1d20 SCPolicySvc - ok 12:06:26.0490 0x1d20 [ 7B4B2DC611AA997D2AE45181FE378A5A, 0AD2D09BAC6C2D58BC6882A98AAF629A827B7AF763CC4E01B210B6D1BD15A9AB ] ScreamBAudioSvc C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys 12:06:26.0491 0x1d20 ScreamBAudioSvc - ok 12:06:26.0499 0x1d20 [ 71A494A502F24465317E88E80F6C0C2C, D85F139982804B8419D7CCF01F35CCDDA580BA5276A6261D0662028080F7765B ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys 12:06:26.0502 0x1d20 sdbus - ok 12:06:26.0505 0x1d20 [ 464B615872981015AC4FEEBDEA83A063, 5CF491352B267241CA11F08E72E6EA668A595662561892E0D02CCA5B71172E14 ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys 12:06:26.0506 0x1d20 SDFRd - ok 12:06:26.0511 0x1d20 [ 847F01FB8504425BB255856A14278A86, 41997D25D12779CA79551988C56FA0A302367076B09A82F620858EDDDBFCE3FF ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll 12:06:26.0514 0x1d20 SDRSVC - ok 12:06:26.0518 0x1d20 [ 6BC219F1D9CDE08CEB9084ADB41FBA01, DA8AC3B42A72515A1976961976203A52D4C8636586EB5EF6B466AAF967A6567E ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys 12:06:26.0519 0x1d20 sdstor - ok 12:06:26.0523 0x1d20 [ 2AE8505519C7E8A903DD7BE793A79846, 7044B1BC183E028BCFB544489B033F0968F033696F9816F354329ABD26C6EE7E ] seclogon C:\WINDOWS\system32\seclogon.dll 12:06:26.0524 0x1d20 seclogon - ok 12:06:26.0533 0x1d20 [ 1D4F5F50BEA1329FAEFA5D15F683F87F, C5E0BFFB4E4589AAD87D8BA0F779DC94ED6F85A8003B71D0A858CC32912A3F0F ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe 12:06:26.0537 0x1d20 SecurityHealthService - ok 12:06:26.0561 0x1d20 [ 77FB9BE8EDDCC999D09F2B1A7878A2A9, 589774C006A339FCA9772C37C9103C73C8592E018553804B97F34E2A0069A3F7 ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll 12:06:26.0575 0x1d20 SEMgrSvc - ok 12:06:26.0580 0x1d20 [ 25456AF499A0C9C4A93CFAC70BDE9CC2, 885C1A9C8BFA73D9C9C454759DF871237F7C0F28D879E98B4BE0D0113C549B09 ] SENS C:\WINDOWS\System32\sens.dll 12:06:26.0582 0x1d20 SENS - ok 12:06:26.0606 0x1d20 [ 892C955E1081412942F64679E0DD7A5D, 6A28012270FA1FB3BB279102C67FA5296564630181C887E1EA6EA1F952A30C37 ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe 12:06:26.0622 0x1d20 SensorDataService - ok 12:06:26.0634 0x1d20 [ AA4BA5CCB3B01E23605ACE13F4A94ECE, 7D8374FA03C33CFC7EA7CF680F81B0090AB22076E389EB6B6233F696FC63E1B0 ] SensorService C:\WINDOWS\system32\SensorService.dll 12:06:26.0641 0x1d20 SensorService - ok 12:06:26.0649 0x1d20 [ 00897F867A525D2118DF98E2DCADA050, ADAEB414EE5F3EFE90AE8A56136FB0165CF68962661FE0B937150235DE1F4DE6 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll 12:06:26.0652 0x1d20 SensrSvc - ok 12:06:26.0656 0x1d20 [ 585329F62195A4B7AAD0A95F6EC89751, E7ADED97ACA8E8E06C368E24702C22D4C2B0B9495DEA24A2DC2A30782099BDCE ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys 12:06:26.0657 0x1d20 SerCx - ok 12:06:26.0664 0x1d20 [ C8F4FDA8B3D039D7947344614FF5BFB2, 1A3B88EC59F2A820AFE4F3AC65F7149EAC68672D1F0D729CBB575694005A8911 ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys 12:06:26.0666 0x1d20 SerCx2 - ok 12:06:26.0669 0x1d20 [ E5B450E4E0DC1591254BF9CCF6C57B40, 958E7378D9BDE1F2EBE736D8D9912D56835A606AABDD042443A35CA37EC70F11 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys 12:06:26.0670 0x1d20 Serenum - ok 12:06:26.0673 0x1d20 [ 628D8DD136F92316BFEB58FA005338B7, 0CDA673D31F40EBD07E9F67667DB6077F23DCADE2DD8376AB550575224625D44 ] Serial C:\WINDOWS\System32\drivers\serial.sys 12:06:26.0674 0x1d20 Serial - ok 12:06:26.0677 0x1d20 [ E5BA0B7353ADC5C95AB466D2E4DC89B1, 98F2A22ED892B2610C85EAAAB51DF25939599955A27611FCE9E68C3701CFD4EA ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys 12:06:26.0678 0x1d20 sermouse - ok 12:06:26.0690 0x1d20 [ 043D7B39E693C610036BD56DF30EF440, 329D29CE1CB5F502B7DFCBE24878CA61EC56787A1B02195E19499701B194DE08 ] SessionEnv C:\WINDOWS\system32\sessenv.dll 12:06:26.0696 0x1d20 SessionEnv - ok 12:06:26.0699 0x1d20 [ 15CFCC4692DA8887B977CE5FC5181084, 31D86E122E35AB9E7275F2B0573EE98770BBE517ED3B9CCED97F4969C9A619F9 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys 12:06:26.0700 0x1d20 sfloppy - ok 12:06:26.0711 0x1d20 [ 87B083252816171A17F833CBCB7AA85E, 200AB93CEF384791DC9B04D2AF17877CA10595B2CEDF4B9505E367A2382C4AB7 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 12:06:26.0719 0x1d20 SharedAccess - ok 12:06:26.0733 0x1d20 [ 490F6144273A85A3CFF3D416850E0611, F703D32580405B9CEF0E601222C2CE584B076B2E58710D66A15AFEA2A6907514 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 12:06:26.0742 0x1d20 ShellHWDetection - ok 12:06:26.0748 0x1d20 [ 7CA2E9B6EDC87FCCA9C49D3D9BE62B65, 3FE1A2DD8581BF8D29EA2000424EB992BCA8E00986F107C22489D006F729D2E3 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll 12:06:26.0752 0x1d20 shpamsvc - ok 12:06:26.0755 0x1d20 [ 2339F6B45E1D863B1D327F3AFD75A675, 03304ADC42EF6E8F671C8AA78A0D3E40408D870FBF2DA2B31A1727F86EF8F213 ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys 12:06:26.0756 0x1d20 SiSRaid2 - ok 12:06:26.0760 0x1d20 [ F520D50AD7266ED31D25DF4C8EA6BC2D, F68CF9EFB8319E59A8D9C24A36A198185DD79CBACD14510F5450F0024F0CD4D3 ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys 12:06:26.0761 0x1d20 SiSRaid4 - ok 12:06:26.0767 0x1d20 [ 9C5AA4F37CE79CB0C04516C51A02D753, 3904188973F74113701C0C3AB8C153FB1E2F874CFA5A463E799CE3BDCEE60745 ] SIVDriver C:\Windows\system32\Drivers\SIVX64.sys 12:06:26.0769 0x1d20 SIVDriver - ok 12:06:26.0778 0x1d20 [ FBEB3BE7765B6C27891E9D1D8CE7F626, BC116E67268C8AA37C1EFA04C796A184C9292DBA771004FFA12F26D6C9619AF1 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 12:06:26.0782 0x1d20 SkypeUpdate - ok 12:06:26.0785 0x1d20 [ 70A2FD5F5B7B1A5E1146BE45E4DFB75D, 598824F06BBC2E37B9A6474411637C73233C8D2E13AE963C3229279A8519A9D3 ] smphost C:\WINDOWS\System32\smphost.dll 12:06:26.0787 0x1d20 smphost - ok 12:06:26.0799 0x1d20 [ 15684D78C67B63475EABAB5A6ECF32A8, 46BA6830BC42839E22F600ED591E23611E092C2342702F403553BB0B9177E835 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll 12:06:26.0807 0x1d20 SmsRouter - ok 12:06:26.0811 0x1d20 [ 9977AFF389C0C32DE419226564886E09, 453ABAB020E3ACD04A45BD05B224C182A47534C23023C4E1AD1903E5377B3CCF ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe 12:06:26.0813 0x1d20 SNMPTRAP - ok 12:06:26.0826 0x1d20 [ 2334ED0B61CAE7E7B1B454674206CDAC, 4EAA11805C2282E0306A381CF56E4B28D83C68BA1B401BFD512AE70C05C8A4CD ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys 12:06:26.0833 0x1d20 spaceport - ok 12:06:26.0836 0x1d20 [ F3F0B8CAC1F3E6C3382EAFCE762475AD, 9F2EB373FB9216CDA71965979EE5E18F3AFDD26FF7E0C09DD7C3D880205C2554 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys 12:06:26.0837 0x1d20 SpatialGraphFilter - ok 12:06:26.0840 0x1d20 [ 83E82B0E292DCDE4C75B9241BF0FB300, 494D2FD4CD082CC416CA5FF1ABE06BDC65A769F371CF0E18AD25C380B45AEE32 ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys 12:06:26.0842 0x1d20 SpbCx - ok 12:06:26.0858 0x1d20 [ 10CD42898C9E4849193E78A87337B2E9, 7C4FCB36EE1AF92C6962F14AE6DEF2CB154468EC3963DCDB9BDF8398C98B475B ] spectrum C:\WINDOWS\system32\spectrum.exe 12:06:26.0870 0x1d20 spectrum - ok 12:06:26.0885 0x1d20 [ 29D813B5D84BC2C26BBC607CAA57A675, 2C4D5F4E2F7B6580E22ABF67690B0D32CAF5063DEA79E6F57E565782973F3990 ] Spooler C:\WINDOWS\System32\spoolsv.exe 12:06:26.0896 0x1d20 Spooler - ok 12:06:26.0982 0x1d20 [ E910861720DE6EDFB5CC6158CE3C7E17, 526BA8EEB9EE5312FEC39753D728E05F49AD81132346A354C95D4D4938001E2B ] sppsvc C:\WINDOWS\system32\sppsvc.exe 12:06:27.0036 0x1d20 sppsvc - ok 12:06:27.0049 0x1d20 [ 36EAC4FE629FC036632F13EC14788FD1, 6AEE37816306FE46FA99EADB23E98CE6A6674C11ED847F1F5575926E26B09F9A ] srv C:\WINDOWS\system32\DRIVERS\srv.sys 12:06:27.0054 0x1d20 srv - ok 12:06:27.0069 0x1d20 [ A84B05C7C2A233497BE1D518A662C326, 85B291B6783AD48F2111B46050311A553BE6D6A7C3D90861DC010FA65730D2B5 ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys 12:06:27.0078 0x1d20 srv2 - ok 12:06:27.0086 0x1d20 [ 0351B28EEDFBD6C8CC69A7224A098CFA, D1D08D63F773CAEEA66585D090C073C0748AE96A2AAE8487E4B8BA54F7E59558 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys 12:06:27.0089 0x1d20 srvnet - ok 12:06:27.0097 0x1d20 [ E95A6C339AE68515897B2E4C6B0842CA, 29DD7E83CD68432EAE4A7ED92CDA40AA52028F5FBB52152F0A1C752B572C2684 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 12:06:27.0100 0x1d20 SSDPSRV - ok 12:06:27.0108 0x1d20 [ FBD45746B2EDEECA10CCA6A861F8049B, 34383B0A07A93E0FA89CA32CD45AC5061F73723B2A9E0BF4AF93A53F70F1678E ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll 12:06:27.0112 0x1d20 SstpSvc - ok 12:06:27.0119 0x1d20 [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys 12:06:27.0121 0x1d20 ssudmdm - ok 12:06:27.0201 0x1d20 [ AE1918EED1E4925778B92061CC2B8D18, 21B3D1685906BC4BA3C8A54C40ABC631F2F312926111BCE48AFEA8B96942DF22 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll 12:06:27.0262 0x1d20 StateRepository - ok 12:06:27.0290 0x1d20 [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe 12:06:27.0307 0x1d20 Steam Client Service - ok 12:06:27.0311 0x1d20 [ D40C589F80EB1C511263D0547C0259AE, A0236F6BB515AE006CC4C9F40FCCE250407888757A3646BB4BCB59EF8EEF1311 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys 12:06:27.0312 0x1d20 stexstor - ok 12:06:27.0326 0x1d20 [ F83F43CD328E6CEEAAC27612F3EB1FF5, E3D35E5154CD228301806706E6EADCA36E9113EAF44BC06E3C43B2E902187326 ] stisvc C:\WINDOWS\System32\wiaservc.dll 12:06:27.0335 0x1d20 stisvc - ok 12:06:27.0340 0x1d20 [ 576A818562069B1E091CC719C143AED2, 48880CF4D33033E9A6024C2A0AD673AFBCE400C74574913F8E24717BA6BADE7C ] storahci C:\WINDOWS\system32\drivers\storahci.sys 12:06:27.0342 0x1d20 storahci - ok 12:06:27.0346 0x1d20 [ E5F703788DFA05411F1469E96838F438, A7E8D2DC23E23EA52B068C71D9387E69FF49798A27CE0243A994A2B1B09FA042 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys 12:06:27.0347 0x1d20 storflt - ok 12:06:27.0351 0x1d20 [ 0D0128244FF55EAD3F878D3FE542DBA5, 4FCFA1B2113E07264A71A22298CA6E9FDC2AB722E0AE184A8F5656C18113A858 ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys 12:06:27.0352 0x1d20 stornvme - ok 12:06:27.0356 0x1d20 [ 3A62FF78619258E6126C5C4B4CC82C8E, C72CC295680B35E0EEE5A5310E0241E2FFE0E540BFAA49C35C06AA882229C1CD ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys 12:06:27.0358 0x1d20 storqosflt - ok 12:06:27.0375 0x1d20 [ 212CB512B785E218667CCA56C4BFD71D, 5FD4CFEE5AB2187D928632076E6AD5C2C53D66884479C4D34930DCFCA3CCEE34 ] StorSvc C:\WINDOWS\system32\storsvc.dll 12:06:27.0385 0x1d20 StorSvc - ok 12:06:27.0388 0x1d20 [ C6097966F8EA3B288070CDF7C3C8C3E8, D12C4AF3E54DCE1E5DC9C8AA0E83420F481DC0165A7F7845083A85BABC102D37 ] storufs C:\WINDOWS\system32\drivers\storufs.sys 12:06:27.0389 0x1d20 storufs - ok 12:06:27.0391 0x1d20 [ 3DC3B17E92DA02E36B4138733DF6C1AC, 398F20B6D6DAF6DA950C149F63F3B23864E1478119BFE53218C220CEADEC800D ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys 12:06:27.0392 0x1d20 storvsc - ok 12:06:27.0396 0x1d20 [ D284AB2CA6C30317D142D38CE1F848BE, 4C9EAE174F5C673CA550C9382E85CE7DAF5DC9965495BAB09078B634A4CDD4FB ] svsvc C:\WINDOWS\system32\svsvc.dll 12:06:27.0398 0x1d20 svsvc - ok 12:06:27.0401 0x1d20 [ 2BC4D0EBC2467FE90302AE0AFAF23768, CF8BCC9CA1FBA8407FD044613A2497BEEC641DE463B076F0ED1FA7674C202ADE ] swenum C:\WINDOWS\System32\drivers\swenum.sys 12:06:27.0402 0x1d20 swenum - ok 12:06:27.0415 0x1d20 [ 13985DA558FBCBFD9108A2CACB5FE494, DD457A73E82147AA90C36D695A47E862FF90D96FB1E22760FAB5780F7C332A46 ] swprv C:\WINDOWS\System32\swprv.dll 12:06:27.0421 0x1d20 swprv - ok 12:06:27.0425 0x1d20 [ 572F81CF08972D53BAFFC2A110A2A586, D9AF8EBB31CE097849F93FC8C0F06178B2E1CA8C48D08BBDD85174CCD64A16D6 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys 12:06:27.0426 0x1d20 Synth3dVsc - ok 12:06:27.0445 0x1d20 [ 7C29BBF63178BB6788AD1C2B231150A5, 5114AC1260C5447D3B21C7C56D825C1E77FCE388C5630D0200C8256F69EFA6B4 ] SysMain C:\WINDOWS\system32\sysmain.dll 12:06:27.0457 0x1d20 SysMain - ok 12:06:27.0466 0x1d20 [ 97E0FD613D031EAA73E8AD259169AC22, E86E9B9C18AF2E79D7CF80B177A12D89418CDBD3CBB74307809DD0377408DB82 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll 12:06:27.0470 0x1d20 SystemEventsBroker - ok 12:06:27.0475 0x1d20 [ 7750219DFABC38261575B6CEFBF84EC6, 50DF85E34AF7C1343281AD0EF34FD94AB0E279DA5C61976ABA0135B8F013C543 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll 12:06:27.0479 0x1d20 TabletInputService - ok 12:06:27.0488 0x1d20 [ C1C6A802C2A9A57029D4347E251F4D18, 9F75B7F003C829FFDB2CDC98231D32FE988754D23873048FA4F6EB82ED1DCED4 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 12:06:27.0493 0x1d20 TapiSrv - ok 12:06:27.0535 0x1d20 [ 02481DA7952E87F0EF007B54E0216DA8, E32BD56991560F608C843AF1CC6E4885435D8B13E9EE0003450C4B87D6CEF29D ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys 12:06:27.0566 0x1d20 Tcpip - ok 12:06:27.0608 0x1d20 [ 02481DA7952E87F0EF007B54E0216DA8, E32BD56991560F608C843AF1CC6E4885435D8B13E9EE0003450C4B87D6CEF29D ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys 12:06:27.0639 0x1d20 Tcpip6 - ok 12:06:27.0645 0x1d20 [ 1C35A5C62D110346379C55E39A3D547C, 5BDBD593AB51ECA5A6B703E86F300E3B2B153E128BEB9A006ABD827AE726BD62 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys 12:06:27.0646 0x1d20 tcpipreg - ok 12:06:27.0652 0x1d20 [ D74756DD1518D28A09CDA99696273FA4, F01DDF8CDBBC70BB086970C324E60CF7A1828CA6DE5A4F5B1BA4686BC31C4058 ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys 12:06:27.0654 0x1d20 tdx - ok 12:06:27.0657 0x1d20 [ 96A35CDBA661D41C5A3914257CA1D200, 691ABBAA99C673E7D0B81D811BCC60976C3EC050F2B39B35B87A3BCC211F119A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys 12:06:27.0658 0x1d20 terminpt - ok 12:06:27.0675 0x1d20 [ 0B5C6D1683CDE89B3488326C60EA6EF2, 3B822CF005FA3002F27FF9BF39E7E133987230DA3481CFCF99F3B2B6B373A718 ] TermService C:\WINDOWS\System32\termsrv.dll 12:06:27.0688 0x1d20 TermService - ok 12:06:27.0692 0x1d20 [ 6568EF1B30101979107055B7E515EE58, A318082E5FDD79C9F85E8C00A78EBFA0EC44B1046976E85633DC7BD123DA38B9 ] Themes C:\WINDOWS\system32\themeservice.dll 12:06:27.0694 0x1d20 Themes - ok 12:06:27.0702 0x1d20 [ 2ABC11CFC2F03A919AF78A6E3E29C570, 54D91F89993A0FF090E2213EED92DE3659DCB693FBDA5932E31C6D6D7CFC8E80 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe 12:06:27.0707 0x1d20 TieringEngineService - ok 12:06:27.0719 0x1d20 [ 4F9A5CE9F3C75AF1EE4B00D5E69F7CF7, 5FEE41C10629E89BD372E5D6C05A78FC0F2C394F4DE7C70AACC8720C6C6590DA ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll 12:06:27.0728 0x1d20 tiledatamodelsvc - ok 12:06:27.0734 0x1d20 [ E59D4F92FE11B47AB727C6D192CC977F, 1DA06663889A20A1B22DDF90E5C99A5668023C0B89E252F3E820C0D1964B1948 ] TimeBrokerSvc C:\WINDOWS\System32\TimeBrokerServer.dll 12:06:27.0737 0x1d20 TimeBrokerSvc - ok 12:06:27.0757 0x1d20 [ 5379471B971D29EFCECBA87200C9FBFC, 7621258DA5EF0F4B2FFC344BCE0B6442E0AEE6BA795B65EBB5786D7A7C208A1F ] TokenBroker C:\WINDOWS\System32\TokenBroker.dll 12:06:27.0770 0x1d20 TokenBroker - ok 12:06:27.0777 0x1d20 [ F76A92975340DAA99939DA297D677EA8, 51DA87E921BBA21BF39D7D9B691CEF8B1D2BCE2BBB0BA5B3C12B7E98CB5C702E ] TPM C:\WINDOWS\System32\drivers\tpm.sys 12:06:27.0780 0x1d20 TPM - ok 12:06:27.0785 0x1d20 [ 85E0D4431D61675A94EA99C9E1F56436, 9FA750703E04D20A62DBB0185CBDD70AFC4573FB65F86E61AAF7CF7A7D8E1E3E ] TrkWks C:\WINDOWS\System32\trkwks.dll 12:06:27.0787 0x1d20 TrkWks - ok 12:06:27.0791 0x1d20 [ F21A69013A67B372675F523262AC1E33, C3F910E375C0F4B7FFA6F6D755622FF6B0CAE36DF691C938DE177C94815FE3C8 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe 12:06:27.0793 0x1d20 TrustedInstaller - ok 12:06:27.0798 0x1d20 [ 9856BCCD1CD5DE4D17E8DBBA7CEFC688, F4B532DCE6F4728092848FE7B2FC05AB921EC7B3FDD7E62AB40EE0029C008398 ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys 12:06:27.0799 0x1d20 TsUsbFlt - ok 12:06:27.0802 0x1d20 [ 837AD2B941E721BCCEB7EF137E2DEE18, 84BE22616A50467B1957434C8BD19C8B0FC3B21CD77FFB8E16A09347CEAE0F4E ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys 12:06:27.0802 0x1d20 TsUsbGD - ok 12:06:27.0807 0x1d20 [ B3142C6118703E98EB0510CF7B43D0F2, 40FDCBAA2AD93026AD479BF8C1B4EE7A4E2E65590608B6B1C5DEB3C4716E5C03 ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys 12:06:27.0809 0x1d20 tunnel - ok 12:06:27.0814 0x1d20 [ B097B77121A057AB6D70C647636978D4, 10F78A18AC898CDD0FA91D6FA29B8B45C6D8F6CE65B064C39256EB20FC6CD085 ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll 12:06:27.0817 0x1d20 tzautoupdate - ok 12:06:27.0821 0x1d20 [ B4C846ABD462558D45CA578C855759C3, E0F0DD39A6C101C2209CA46EF2B5A5F4559843C9EE37CC08ED78D9E124A566D2 ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys 12:06:27.0822 0x1d20 UASPStor - ok 12:06:27.0827 0x1d20 [ 5C2C0296D9EE7DC92A3F14642FBE656D, 94A7D549EC53C71095AD8DE4DB8F846D1DB3438FE2679E41DCAE62C34C0654DD ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys 12:06:27.0829 0x1d20 UcmCx0101 - ok 12:06:27.0835 0x1d20 [ 8BB64E04CD97AD8C68543181D93E2AFC, FBA2FB9A9906721BAD42CDFFCCE0234AF3F72B83E2571E526801F19173B7C9CE ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys 12:06:27.0837 0x1d20 UcmTcpciCx0101 - ok 12:06:27.0840 0x1d20 [ F083A400FB9CB8ADD1783848CB1C76F0, 7E543E5F81C04AF486ACC08B94F785B9702B743C96079241925C385BF8411EB9 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys 12:06:27.0841 0x1d20 UcmUcsi - ok 12:06:27.0847 0x1d20 [ 5D4EAF3D0911338CB8FDB088386D6DCA, 1AC5B494C39570E66C4D4F867C6B8E37C174FB5D67C2865B07247122F60F8895 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys 12:06:27.0849 0x1d20 Ucx01000 - ok 12:06:27.0853 0x1d20 [ 384E1F0D84B465820416338E52FE7C2B, 8F82778332EA1199987BA569536CBED8FEAF5E9D920321B0C9DFCBDDD91EEA35 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys 12:06:27.0853 0x1d20 UdeCx - ok 12:06:27.0862 0x1d20 [ C82BE75239D412057C9E3DB1785680C6, AE712E40440F5725DA41C95C3E558B5E9ABB17C55B70297DD40D7D1BDA7CE45D ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys 12:06:27.0866 0x1d20 udfs - ok 12:06:27.0869 0x1d20 [ CCDF6EFF952BF3BF34DC17600F479397, 2A2009B3C4BD1A44F1C6E334CB0A7DD02443BCE1EB48837C1C70A2A04CC7C54A ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys 12:06:27.0869 0x1d20 UEFI - ok 12:06:27.0876 0x1d20 [ 00BEF71C45FD6B06E7525E7B31EFA88C, C0BDE8CB41BF9A34E395EA86756637E4CD6B88EF1C842364ECA639948D6CD59A ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys 12:06:27.0879 0x1d20 Ufx01000 - ok 12:06:27.0884 0x1d20 [ 9450AB15C30CF7D1F23C8A42E778C3A2, E62455008ED5B7220AEE62E0F459A67E26FB2878349ABA5AAF0164C2E7A8C0E9 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys 12:06:27.0885 0x1d20 UfxChipidea - ok 12:06:27.0890 0x1d20 [ CEE12C7A689BDF448715024A7E0EB9C3, EC48E1469800E34A71C8A97A6F2F0B7C67385BCB8438844E6967DE0A82E39B94 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys 12:06:27.0891 0x1d20 ufxsynopsys - ok 12:06:27.0898 0x1d20 [ 5A2F610B31CC3FD23D3E20C1D5F1EF52, D470B7C1CAE066C2DCDBA47001913FB1A7C9CC5B200FB8324DB896B641C1A132 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe 12:06:27.0900 0x1d20 UI0Detect - ok 12:06:27.0903 0x1d20 [ F39ED750EDF5948FA8CD99D1F4EC9372, AE42AE50DE09F26D3CA4ACDCD5ECABD59D26926707030F0532A885266FE83EF9 ] umbus C:\WINDOWS\System32\drivers\umbus.sys 12:06:27.0904 0x1d20 umbus - ok 12:06:27.0906 0x1d20 [ 55984D4E64C2F8E4223542CBCC15EDEB, ECBC832FBBA6AFCAEDEBB2728FA4A6DDCF52A6421929E72CA29B61CDBED840DF ] UmPass C:\WINDOWS\System32\drivers\umpass.sys 12:06:27.0907 0x1d20 UmPass - ok 12:06:27.0914 0x1d20 [ FBEF4641E3E08A03CA84AF5C393CA86B, 9A14A0FB645AB6DD0B49F3A14FBF38FECC65796F2503324E93994113CC7AD52F ] UmRdpService C:\WINDOWS\System32\umrdp.dll 12:06:27.0918 0x1d20 UmRdpService - ok 12:06:27.0939 0x1d20 [ 5B17D5E9FBF65ED93078DEB687357BAF, 00BC68F16E36681254E72D8D39006F695D38246EAB6ABC6F40E5305D5ACE26A1 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll 12:06:27.0954 0x1d20 UnistoreSvc - ok 12:06:27.0966 0x1d20 [ BBB6BDBE5ADCE6F87F70623D5A1EC5BC, E8BD5804FF82417890A9D1A44096B174E81A8C7AD3059B1F0C62740E0B39D137 ] upnphost C:\WINDOWS\System32\upnphost.dll 12:06:27.0972 0x1d20 upnphost - ok 12:06:27.0976 0x1d20 [ 4D23214CB8B1C36B82061280EB8FDAB3, 387C01A7F9D8F89ED894EDF894AAAF8830DD7C90DF2F12A2CB4C4E9C7CB773BE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys 12:06:27.0976 0x1d20 UrsChipidea - ok 12:06:27.0980 0x1d20 [ 4329D880DB96B504F0DDC991A7374CCD, 1486BEF2C03ED281B24A17D3C18FEA2360E37A6B46D1A67D4690CD871B0A13DA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys 12:06:27.0981 0x1d20 UrsCx01000 - ok 12:06:27.0984 0x1d20 [ 93FAD0AC5879F274FA248A49E3F3EA33, D936F408E23040B33F30AB3B43D8B8BB9F3CCF2549E821F4C47357987AFF386F ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys 12:06:27.0984 0x1d20 UrsSynopsys - ok 12:06:27.0990 0x1d20 [ FC318082D0793B76C766A8DFD4C247C5, F547C643A16D580BD96BC20DC901A8210875812EDABD57DD65F20A915A877CB3 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys 12:06:27.0992 0x1d20 usbaudio - ok 12:06:27.0998 0x1d20 [ 6B09AA6A04C8261E787B6523229E7159, F97BED424E988AC6272D51025FD0D3180E89BAF0FFC83DAB609774D6269B353A ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys 12:06:28.0000 0x1d20 usbccgp - ok 12:06:28.0004 0x1d20 [ ECE3AD18B4C22ED0C4AB1A2AD9AC32C8, 2062D400305075E886CF2C9D710A1C48B3F4AD48E7A75A77C66547357E96CB6E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys 12:06:28.0005 0x1d20 usbcir - ok 12:06:28.0009 0x1d20 [ F8BCB536866474C6D8008F4C69B778A1, F86F4330DE2F50D48559C1ED46168ADB8F6AA7C8FE3834FFE00085C1783C5750 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys 12:06:28.0011 0x1d20 usbehci - ok 12:06:28.0022 0x1d20 [ 1F723DA014062DBF3288B408A7611845, 0CCC9360259E6FBC510BBF69AE991A53A92516023AAC32C60A44BD3B43371C66 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys 12:06:28.0029 0x1d20 usbhub - ok 12:06:28.0041 0x1d20 [ 0939AD44244AA9D348187015083E17DF, D48C8032333D30019BC5FD4BAF97A2AB1A80488D4881F3437C3D5341DE5294CA ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys 12:06:28.0048 0x1d20 USBHUB3 - ok 12:06:28.0051 0x1d20 [ BE6ED98FD0D3FE5FB11762AD7CCD6C96, 54C6C929CA55EA6770474F7E230190FC7574C1FA52437B564B3B5FA4D6106D8A ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys 12:06:28.0052 0x1d20 usbohci - ok |
06.09.2017, 11:11 | #5 |
| ESET Fund - LogfileCode:
ATTFilter 12:06:28.0054 0x1d20 [ CEE43CD5357DB8786CE6E2C430841AE4, 50F4629AE488A12D18EFFAD486D2F95545049AB1F6A3248BA44D2132EEC9A653 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys 12:06:28.0055 0x1d20 usbprint - ok 12:06:28.0058 0x1d20 [ 99F0738B320B7A8D11351A32F68AA5F1, DAA887C31E3F56245C15F04044C12B6E832FA7E837F4107376A6F8D8E3A99FEC ] usbser C:\WINDOWS\System32\drivers\usbser.sys 12:06:28.0059 0x1d20 usbser - ok 12:06:28.0063 0x1d20 [ 67E26F56CF7EACCBD9C9F75343A3D7C2, 210FA280897CCCB2458E9E683A8B4CA8A5DF9606B54F8B9CE05CA4AA6FD810AB ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS 12:06:28.0065 0x1d20 USBSTOR - ok 12:06:28.0068 0x1d20 [ 7BA802C9F73A84B75BB22538ADA495BE, 7D97E6305168C4CA86AB9BD5B63300156DFE97032251CB83DB1D4C4DB9C28DC8 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys 12:06:28.0069 0x1d20 usbuhci - ok 12:06:28.0076 0x1d20 [ 7DB399A665C703B053930A4B5FFBA0E7, 82E4A0CD17A251D1FCD75EA2548F16BE29B47A8B83F5C27D776748FE75024FD4 ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys 12:06:28.0079 0x1d20 usbvideo - ok 12:06:28.0089 0x1d20 [ 50E70B3A95138AA4A30B095270EE0DE6, 9B7072C36230102A089C4A6DFE1980CD9DB28E566EF02830600DEBAF3AAD31C7 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS 12:06:28.0093 0x1d20 USBXHCI - ok 12:06:28.0123 0x1d20 [ 3156FFFB2B3BF5375814F777D343AD9F, C4E63043EB9D9227CDD487608AF9BA25C755D85E5FF8E63C2079D68CCC79E4BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll 12:06:28.0143 0x1d20 UserDataSvc - ok 12:06:28.0162 0x1d20 [ C0E60CC6D48013728C7E4168D61A0B39, CA283312E9669BCC74A3B5E6332502D1CAA7148C049B94AF3996F3C7CD2676EF ] UserManager C:\WINDOWS\System32\usermgr.dll 12:06:28.0173 0x1d20 UserManager - ok 12:06:28.0187 0x1d20 [ 65D70A530105E0576641493D6292C9EA, 1059285060E700449C6BB99DB0E5E4FF4A32215323F45C11DA7617785F073276 ] UsoSvc C:\WINDOWS\system32\usocore.dll 12:06:28.0196 0x1d20 UsoSvc - ok 12:06:28.0200 0x1d20 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] VaultSvc C:\WINDOWS\system32\lsass.exe 12:06:28.0202 0x1d20 VaultSvc - ok 12:06:28.0205 0x1d20 [ 370DDBA4C7ACB60910EE4E504E527181, 656D90FB7C24487C6EBBF64A5019B858D9FEBC7B82C62FE1E5EE050ABFFA9CDE ] VCSVADHWSer C:\WINDOWS\system32\DRIVERS\vcsvad.sys 12:06:28.0205 0x1d20 VCSVADHWSer - ok 12:06:28.0209 0x1d20 [ C1EC9211C7759D2487FD30934AA3EE96, 6914BB8B44550DFE75E5A3772E93ADF8459EB621CA400BDD9B7E3185A09B6F9A ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys 12:06:28.0209 0x1d20 vdrvroot - ok 12:06:28.0223 0x1d20 [ 374CD93271184F04988FDC1C25B3E855, 09727093C5F7B258867C16D41F7F9835BF549CC339288BFE01A8F34AC7E93E23 ] vds C:\WINDOWS\System32\vds.exe 12:06:28.0232 0x1d20 vds - ok 12:06:28.0240 0x1d20 [ C83F3BC00651448DB127D497CF955089, 31B8838CEED08E7D5DD8635A805A8010798BD9B10A3775FAFDB576FBD7303D39 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys 12:06:28.0243 0x1d20 VerifierExt - ok 12:06:28.0258 0x1d20 [ 0E12F5F6B1C813D17AFDA197C4394423, B0AFDFE0E12633C6D984DA366197BE09ED2649BAFF525FA0DE84701E5B335DB9 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys 12:06:28.0266 0x1d20 vhdmp - ok 12:06:28.0270 0x1d20 [ 1AD096A5C00E522398D0092D875A8CB6, 6959FCD6DD2115CD293DBD4BCD6D1BA0AE4F7495A9BBB48F7388384EEABB38E9 ] vhf C:\WINDOWS\System32\drivers\vhf.sys 12:06:28.0271 0x1d20 vhf - ok 12:06:28.0275 0x1d20 [ EE9A22CFD9AEDD7B52F98B0272494609, F668131BABD048857F011A471936B52EDF0F2A42CB6000ACB4E0E43F88782AAD ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys 12:06:28.0277 0x1d20 vmbus - ok 12:06:28.0280 0x1d20 [ BFBD0895926FD98A03AD6BB845B569B7, 5B7913ACD6CC132B2F36B079BC5F897C21884A7F21046B8996CC3D74C4B6DA4C ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys 12:06:28.0281 0x1d20 VMBusHID - ok 12:06:28.0284 0x1d20 [ C123C97D351C56C75FE5335AB18255EE, 67315E332E863E5C233BA113826A5DEEE08C1A0A3358E6AC21F25DC5EAC86D07 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys 12:06:28.0284 0x1d20 vmgid - ok 12:06:28.0291 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll 12:06:28.0295 0x1d20 vmicguestinterface - ok 12:06:28.0301 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll 12:06:28.0305 0x1d20 vmicheartbeat - ok 12:06:28.0312 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll 12:06:28.0316 0x1d20 vmickvpexchange - ok 12:06:28.0324 0x1d20 [ F8F380ABEAFBC589FF6D2D96267C1210, 0CFA3D9E88D984BAFED8E08102BF4DC4077856C6C8C1EBD8D4C4D0D49B673F44 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll 12:06:28.0328 0x1d20 vmicrdv - ok 12:06:28.0335 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll 12:06:28.0339 0x1d20 vmicshutdown - ok 12:06:28.0346 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmictimesync C:\WINDOWS\System32\icsvc.dll 12:06:28.0350 0x1d20 vmictimesync - ok 12:06:28.0356 0x1d20 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll 12:06:28.0360 0x1d20 vmicvmsession - ok 12:06:28.0367 0x1d20 [ F8F380ABEAFBC589FF6D2D96267C1210, 0CFA3D9E88D984BAFED8E08102BF4DC4077856C6C8C1EBD8D4C4D0D49B673F44 ] vmicvss C:\WINDOWS\System32\icsvcext.dll 12:06:28.0371 0x1d20 vmicvss - ok 12:06:28.0374 0x1d20 [ 0AB9C264F13E2A070A8CF10EDD099ED2, 2E7EB4EE8DCBBCA497CC0E7F4BE057627E9702B6FAF56A7DBCA1325236C880EC ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys 12:06:28.0375 0x1d20 volmgr - ok 12:06:28.0384 0x1d20 [ 6EE608257C1137A25B402EF8FC77E83A, 3AE684EBA32563468AD917155C93220F938460A699FBFC3DB8436F83C0C54209 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys 12:06:28.0388 0x1d20 volmgrx - ok 12:06:28.0398 0x1d20 [ E3429DBBEA3965BB96E24B16EF4A2551, 0CEE2DEF75C6761DA67AFD3BBF8DEEB1331796719EB84D658B3E517DEC824B49 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys 12:06:28.0403 0x1d20 volsnap - ok 12:06:28.0406 0x1d20 [ 86E790B503C771E674C7DF8FFCBFEFDB, 634B27C4FA363A2165D3D6929D3B22F41EE06198C579A70D446A48830924467B ] volume C:\WINDOWS\system32\drivers\volume.sys 12:06:28.0407 0x1d20 volume - ok 12:06:28.0410 0x1d20 [ D640A9761286113E7B53E6AFC23D9467, 33610F561636836B16EBEC354C595E4D5E2140ECF5316582870F1F7E3F2ECB02 ] voxaldriver C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys 12:06:28.0412 0x1d20 voxaldriver - ok 12:06:28.0416 0x1d20 [ B25589A0892E6DF8CC07E5CB48BFC954, DA29974426EFD4472A3828FA0EF31AD3860AA8068AB66B5F4BE6A412BC3E73E9 ] vpci C:\WINDOWS\System32\drivers\vpci.sys 12:06:28.0417 0x1d20 vpci - ok 12:06:28.0422 0x1d20 [ AA4466A47D2CA7ECE3DCF5256017DCC3, 83414BFBD3DF1CB7417F0F55709E8180D97FA20A74581C34EAAFF667FBEBFD93 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys 12:06:28.0424 0x1d20 vsmraid - ok 12:06:28.0450 0x1d20 [ 0BB73BF6FDDD19DE3DE9377EA95E4C64, 74B6E612F9E009A5E43B603BCAD854F3711F6C8A7ED0328B1E3A9B2D4C9EA342 ] VSS C:\WINDOWS\system32\vssvc.exe 12:06:28.0469 0x1d20 VSS - ok 12:06:28.0478 0x1d20 [ 98BB6C9AD39D8F2E883093F28282FAEC, 63F4036A1DB23C20AAEEC1CA8ABDE9B46FA09A55EA4E5DB0C0B5D6D58ABAD62F ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys 12:06:28.0481 0x1d20 VSTXRAID - ok 12:06:28.0484 0x1d20 [ B47026E109828102266CBE2F5F9AD113, 28C76B34C48BACEA267A208CC758BB55539323B16300E869AE71B6A99A849AB5 ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys 12:06:28.0485 0x1d20 vwifibus - ok 12:06:28.0488 0x1d20 [ 799ECD541A9B2764B36A22A095885365, E255E74682927D662294AA3F88FDA211EEE603466EB264E8941C3BACC6A0E530 ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys 12:06:28.0489 0x1d20 vwififlt - ok 12:06:28.0493 0x1d20 [ 82CA088A33517D1C8571D6850CC13D7E, 0401A08EAF36DB393B74FE8693C60F62EDE10BBC9300C76812C7D01B6AE9A051 ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys 12:06:28.0494 0x1d20 vwifimp - ok 12:06:28.0506 0x1d20 [ E75460AC4E936BFC0703021DB0BB17B8, D9985C3206B503659FD2F4EE7FD0B9AF8CB2DE821BFD68B13C9E3BD9CE5AEF6B ] W32Time C:\WINDOWS\system32\w32time.dll 12:06:28.0513 0x1d20 W32Time - ok 12:06:28.0517 0x1d20 [ F0F477541F7AF67CC05DA1CF4921A500, F7DD2F49B61C484596DE3893683B1172A138386BD71F54BFCF37A31005C7368F ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys 12:06:28.0518 0x1d20 WacomPen - ok 12:06:28.0528 0x1d20 [ A0957CBC1C054A87EE7A65A994102A96, CB6339F3F67D0E33C26E6756F88869574B84426B20C907E094F83B9DC5E36A3E ] WalletService C:\WINDOWS\system32\WalletService.dll 12:06:28.0534 0x1d20 WalletService - ok 12:06:28.0538 0x1d20 [ FDD16EF9177A8A2EF08A7FA3D3EFAA13, 148F34CBEEF0CE87103C76294AE5BE318F990A5FE7A5EDE6F47D85361248582B ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 12:06:28.0539 0x1d20 wanarp - ok 12:06:28.0542 0x1d20 [ FDD16EF9177A8A2EF08A7FA3D3EFAA13, 148F34CBEEF0CE87103C76294AE5BE318F990A5FE7A5EDE6F47D85361248582B ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys 12:06:28.0544 0x1d20 wanarpv6 - ok 12:06:28.0570 0x1d20 [ EA0524A2A01792796EC80AE2FE08307A, 68CC0F3451C6797222411C276376C7741C96C45E628DD77FB1FB17C10DC0EA8A ] wbengine C:\WINDOWS\system32\wbengine.exe 12:06:28.0588 0x1d20 wbengine - ok 12:06:28.0607 0x1d20 [ 39A0B8DD517E3CBF0A6EED5A12BB182F, A25E7D3DC4DF9D0439627CFA0C4AD2292FDF29F4EFC832AEA5A2F774766F76D7 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll 12:06:28.0619 0x1d20 WbioSrvc - ok 12:06:28.0624 0x1d20 [ 923200B78F5284D674A3712204D0FEFA, 4B00785D2E9D12052C2C8E80C568606E0148AA230285D4018A0A603E16224CEE ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys 12:06:28.0626 0x1d20 wcifs - ok 12:06:28.0640 0x1d20 [ 9DDD15FCE0BE61F25C20CC7E2A96B77C, 072E6B3D86CD4F4A55305986E3848A47B7E8000FF5AEFE8A206FD4F7BE958872 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll 12:06:28.0651 0x1d20 Wcmsvc - ok 12:06:28.0662 0x1d20 [ 2C396871F724DDF871A2EF4CADE5151D, 8CAD8A393F0CC447432E1BED21A691E25356F7DBC06E3887138A6F86CB1D656D ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll 12:06:28.0669 0x1d20 wcncsvc - ok 12:06:28.0673 0x1d20 [ 1737BEF60CA384423CE4B32AF1C2BFFC, D61353D3B2EAEDFDCBB5DB3AD27E76396CC7755AFF01233307EAA1967493DE63 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys 12:06:28.0674 0x1d20 wcnfs - ok 12:06:28.0677 0x1d20 [ 38130C1C5FE0E08820EE57E1B087B659, 3705AA4699D4C402C0BBC5BC4E1EE67CB4A4B9C27702E88952A76891C3A3F496 ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys 12:06:28.0678 0x1d20 WdBoot - ok 12:06:28.0695 0x1d20 [ 0C6CBF3490EE5F0D62B5820568CA30B8, 97EDEC84DA72A900D7740B8763DDDAB600628F3F1E1DDE1212383C2E60FDC77C ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys 12:06:28.0705 0x1d20 Wdf01000 - ok 12:06:28.0714 0x1d20 [ F7B6CB0F9ECD28848E2BDACEAB0D9204, B64D91A36600AEBE656F0514AF8653C294DE88054FE6DBB7B1A6D0A23D2A5131 ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys 12:06:28.0717 0x1d20 WdFilter - ok 12:06:28.0722 0x1d20 [ 501CB5E6999B7336BE5D0D401013D251, D4581E4FD8BE65D611E763AE88D2982A785036B2A93F2A00D3A3A395AB2AD5B3 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll 12:06:28.0724 0x1d20 WdiServiceHost - ok 12:06:28.0727 0x1d20 [ 501CB5E6999B7336BE5D0D401013D251, D4581E4FD8BE65D611E763AE88D2982A785036B2A93F2A00D3A3A395AB2AD5B3 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll 12:06:28.0730 0x1d20 WdiSystemHost - ok 12:06:28.0745 0x1d20 [ BF45B43BA47D0FA769CE5AFBF7104F01, CBEEC0E915162BEBFCD2CA9EF72C02E82AFAB2A016F1750A7982975A94599CF6 ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys 12:06:28.0754 0x1d20 wdiwifi - ok 12:06:28.0759 0x1d20 [ 82A4F22C884B4BAE8B531640859F9871, 1C662557F671FA680E7CC2FC565B198470E421778BD03749CD05B2928568C430 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys 12:06:28.0761 0x1d20 WdNisDrv - ok 12:06:28.0763 0x1d20 WdNisSvc - ok 12:06:28.0770 0x1d20 [ 9066FE8EAB91E15437CB3C43757F2A65, 1F8B3D8C90C7862CCAB91D170F49E7F1D58FABAFA1C8DDDE1796404D1DD98707 ] WebClient C:\WINDOWS\System32\webclnt.dll 12:06:28.0774 0x1d20 WebClient - ok 12:06:28.0780 0x1d20 [ F322B8E6C5614E7975C8BF34B7A6710E, 299816001856E8C91BFBB9C48D87B7ACBD5A39F6A65147F5AE6EDB3065A893E9 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll 12:06:28.0784 0x1d20 Wecsvc - ok 12:06:28.0787 0x1d20 [ 04CA184EB5743DE5A2CCEEF2DB2DA8B3, E16921496F57B78A152A103F8D58601C9687360048A6CB51E76A96E3B64CC0FA ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll 12:06:28.0789 0x1d20 WEPHOSTSVC - ok 12:06:28.0793 0x1d20 [ 0941A50663B7F3BAB62687AC0E03A31B, 8AA98C22332217B3996028461747B88274D49B246FA432DB7B7C169527C75D14 ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll 12:06:28.0796 0x1d20 wercplsupport - ok 12:06:28.0801 0x1d20 [ 8DF4E4631338E8EE7CCDF7D6DC55D3A8, 043D0AF7FD1073603D8586E0BE9646FE3E8679A317AC18845811856A6E5027E1 ] WerSvc C:\WINDOWS\System32\WerSvc.dll 12:06:28.0805 0x1d20 WerSvc - ok 12:06:28.0816 0x1d20 [ 4D64719B4819CA22A046EC32809BBD98, 0ABD6C7D039E57F5637E843388FA8D52072237061EB75C7CDEBC9E13A6C8F06E ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll 12:06:28.0824 0x1d20 WFDSConMgrSvc - ok 12:06:28.0831 0x1d20 [ 3C8F0ABD00E197101DCF43FEF8FB0D76, AF5C68B85EE1503ACD4AEA1D997F816C34293A77791D59A605DC18450B4906DE ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys 12:06:28.0833 0x1d20 WFPLWFS - ok 12:06:28.0836 0x1d20 [ 2DEB40D6837956CE08A8F9EB3ECA5A01, B40D23E54CDF6BE05D6C5DA536BF6D998E79EDE9C391A42452F9F69EE206EA1E ] WiaRpc C:\WINDOWS\System32\wiarpc.dll 12:06:28.0839 0x1d20 WiaRpc - ok 12:06:28.0842 0x1d20 [ 75014BF6510D4C6C69EEE5B7743A52AF, 11AEEF4D52C35E5A7006713836ECF1198A53CD02736E792B1C698144CA1363F0 ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys 12:06:28.0843 0x1d20 WIMMount - ok 12:06:28.0845 0x1d20 WinDefend - ok 12:06:28.0851 0x1d20 [ C8EBCFED8FD2CDF725E44AF93016621E, A0B76E55CC535A0F1D79C3C0EC59753086EAB669EC7ADA4F97656DCAD2A69448 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys 12:06:28.0852 0x1d20 WindowsTrustedRT - ok 12:06:28.0855 0x1d20 [ D318557F9D7CA3836104F0B8ECB1F32E, 6850BBFB4F65167B052F3CA22FD72E9188A14FD2A9CC085861B4BC40CBA34249 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys 12:06:28.0856 0x1d20 WindowsTrustedRTProxy - ok 12:06:28.0872 0x1d20 [ 61F0D6574577499FB43D9F4870B08A7F, 757ACD4F292C43B04B6428D84A7147DE8E565716D94B6B02F288F3B5E2D1C135 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll 12:06:28.0883 0x1d20 WinHttpAutoProxySvc - ok 12:06:28.0887 0x1d20 [ 31DDF1D001336B2DCE7DF24E99EF1D04, A1FCABF4A263BFAE042FE7A9F6C15FD9B3D8E985278C32AE8975ECE79B341277 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys 12:06:28.0887 0x1d20 WinMad - ok 12:06:28.0896 0x1d20 [ 9A26F7834706A6D8C8824EB08FD7C362, 750F6A0759D70BE481C70FE4BB21D18E756A8F0C23A014C2CE1E7729A1E625FE ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 12:06:28.0900 0x1d20 Winmgmt - ok 12:06:28.0906 0x1d20 [ 2E1A614EFB0523E20860AE7978DDA0A4, E13564690F9977747CA676D3843B467506447F060A5FF6676835A9C7A30BA409 ] WinNat C:\WINDOWS\system32\drivers\winnat.sys 12:06:28.0909 0x1d20 WinNat - ok 12:06:28.0954 0x1d20 [ 27DAA9AA3E03C1068678D5659461BB32, AFDED6D671C430F296C9EAA73590111D6A8A9FA93DFE0595B90467FFE28EFB35 ] WinRM C:\WINDOWS\system32\WsmSvc.dll 12:06:28.0989 0x1d20 WinRM - ok 12:06:28.0998 0x1d20 [ 03858B18BB6DF6A400D9FC5153FD28A8, C7AD69B022AEFDDDAFB74CCCDF20AF9CCDBA0097634BBBD07A2EFBA5922560C1 ] WINUSB C:\WINDOWS\System32\drivers\WinUsb.sys 12:06:28.0999 0x1d20 WINUSB - ok 12:06:29.0003 0x1d20 [ 0BF4A43CF1F3A4D50AFA4561C3B4628D, 2D0B4E7004C8AC8A9EE07E6D5241BF32395CA142BF3B03FA9CF00BC6720A6AC7 ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys 12:06:29.0004 0x1d20 WinVerbs - ok 12:06:29.0019 0x1d20 [ 2E15586B76465941D1DEE75625B9484E, 609E6BEAFF340A403F50A20D1609D3A8A2C990234064DD154A08C737DE3E0907 ] wisvc C:\WINDOWS\system32\flightsettings.dll 12:06:29.0028 0x1d20 wisvc - ok 12:06:29.0067 0x1d20 [ E624376E7E7D9AC203113140D9E618A2, 3553D343665194492E38B8C437DE429CEAC135D69EC0CB951BA3E3A7549F673E ] WlanSvc C:\WINDOWS\System32\wlansvc.dll 12:06:29.0096 0x1d20 WlanSvc - ok 12:06:29.0133 0x1d20 [ 2393C4DB3DF3D19B0B920AD607098E79, D632671247DE3808D9C5B36A3FF173C86BB3AD274D03C851BCD417CE62B3820D ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll 12:06:29.0158 0x1d20 wlidsvc - ok 12:06:29.0181 0x1d20 [ 24A624FC6DED20C3B7980BD71D6540D7, A1564B903E2B54106E6665B212E4F8E1A90B2B6CB966F5E965BA5602A801B7D3 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll 12:06:29.0198 0x1d20 wlpasvc - ok 12:06:29.0202 0x1d20 [ 0D6E1347A891607759340B1E55BA2A77, 033DF14920A581FE7E21C6930280AE159B5634F2FEAF79423E8D0B7D46500048 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys 12:06:29.0203 0x1d20 WmiAcpi - ok 12:06:29.0210 0x1d20 [ F7B122E8A238354DE344B77216E8D9AC, 3C4F864655CFF786B33333E643AA929B2D2B01ECD56EEEEADE7CEAB38249DA3B ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe 12:06:29.0212 0x1d20 wmiApSrv - ok 12:06:29.0214 0x1d20 WMPNetworkSvc - ok 12:06:29.0220 0x1d20 [ 1AE1076034392218EE89D2744EC2A071, 695C28E2697B12BBD919687176CE082E94887A5D8B6229F163A26F6EDF401C4C ] Wof C:\WINDOWS\system32\drivers\Wof.sys 12:06:29.0224 0x1d20 Wof - ok 12:06:29.0254 0x1d20 [ 5D9A8A2BB555B743334A096C5B1774E2, 660136C1E8D6CA1F7BD1AE0EC4E28B65527BFE69339589A8E3017EFE2BBDC41C ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll 12:06:29.0276 0x1d20 workfolderssvc - ok 12:06:29.0282 0x1d20 [ 2AD9CC8445F0E1A8900A9DE123643CD2, A5928B26722DFBB201A32DEF48B25D4BF291815EA68CF50CBE79EEA9260A71E3 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll 12:06:29.0285 0x1d20 WPDBusEnum - ok 12:06:29.0288 0x1d20 [ 1FD80CBB192A20375F3664639DEB57B5, 7A4789D4B2F8E289726E1C723DC00D5AC1F8C5E00FB2879C9D0E6DDC97D2B1A6 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys 12:06:29.0288 0x1d20 WpdUpFltr - ok 12:06:29.0296 0x1d20 [ 3369EF007E43B88EAC8F1789B43D4393, 347F9F7DF980BB739895EDFE72E2E595EF56634330DC63DAA36403AB232B5B5A ] WpnService C:\WINDOWS\system32\WpnService.dll 12:06:29.0300 0x1d20 WpnService - ok 12:06:29.0304 0x1d20 [ 41403B9466EDA80FACD7713478A56DF8, A71BF9C7A2483FE1F660AC9688FCB38BA2310F16A69EB117C948458364953F34 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll 12:06:29.0307 0x1d20 WpnUserService - ok 12:06:29.0311 0x1d20 [ DAF4451760B46CB383D287C4FAFFE97D, 658AFE31EF50E934FEDD2E7048257DBFE9E6DE5F1ACDC658B21737391CF1CC5A ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys 12:06:29.0312 0x1d20 ws2ifsl - ok 12:06:29.0319 0x1d20 [ D4A0661AB0FE542460CA76BFB4FAA2D6, 149F0A0720C47BFFCA68165A46382E5CBB273F48483DBB598CEA320801664718 ] wscsvc C:\WINDOWS\System32\wscsvc.dll 12:06:29.0323 0x1d20 wscsvc - ok 12:06:29.0325 0x1d20 WSearch - ok 12:06:29.0363 0x1d20 [ E1E58C86AE73A95329696C675D8C03E6, EF1497AFA6C472EB6C0C0806F1A82B814FB4E9CDF441C155AEC95735384DF878 ] wuauserv C:\WINDOWS\system32\wuaueng.dll 12:06:29.0392 0x1d20 wuauserv - ok 12:06:29.0399 0x1d20 [ 455609BF60DA3B57EEAB863DEFCCF14D, F55271C42B7AFD17D01275703719C1F52C21996DB82AC78A70A8A8B62370623B ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys 12:06:29.0400 0x1d20 WudfPf - ok 12:06:29.0406 0x1d20 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFRd C:\WINDOWS\System32\drivers\WUDFRd.sys 12:06:29.0409 0x1d20 WUDFRd - ok 12:06:29.0413 0x1d20 [ 9EFE23CA208BF4B613FF4A6028DFAB10, 483D8D8DA578BF3EA5617EAB42457543EC6F97C1977BDD8ABFDF854AE3AAFD35 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll 12:06:29.0415 0x1d20 wudfsvc - ok 12:06:29.0421 0x1d20 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFWpdFs C:\WINDOWS\System32\drivers\WUDFRd.sys 12:06:29.0424 0x1d20 WUDFWpdFs - ok 12:06:29.0429 0x1d20 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFWpdMtp C:\WINDOWS\System32\drivers\WUDFRd.sys 12:06:29.0432 0x1d20 WUDFWpdMtp - ok 12:06:29.0455 0x1d20 [ 46D90B7476CDB119C548D970EF271D34, 0C47D8AB80CF55CC10747DFFB65CED1713160BE3AB1DAED234E9BBADACCBD6D5 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll 12:06:29.0472 0x1d20 WwanSvc - ok 12:06:29.0485 0x1d20 [ FC0147AB34C7CDB2D8A1B29C207F2CD1, 737D40A4BE35AD13C091D8E320FAD3FD7C0C7E41C8B50E48D3C2151712A55718 ] xbgm C:\WINDOWS\System32\xbgmsvc.dll 12:06:29.0493 0x1d20 xbgm - ok 12:06:29.0513 0x1d20 [ 7FE60B52DD841ED374285B7ED9210222, 0F7743A5A9289E47EE07477313083CE07B46F1C9C5CF83130303A7BAB2F3842B ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll 12:06:29.0527 0x1d20 XblAuthManager - ok 12:06:29.0551 0x1d20 [ A8BD191F46CC58E45637CB3E262CF0F2, CA65524427ECDB5E1138A5F8E885566064E507BA60FC31E0D9D17B9556CC9ADC ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll 12:06:29.0565 0x1d20 XblGameSave - ok 12:06:29.0574 0x1d20 [ B10655A4C2EFDC25483D670EF52A4854, 2D9DC81AE73FDFE7F4E395BEC8E806E6BAD8DE0470027EEEC256AC4A4B7C7AA4 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys 12:06:29.0578 0x1d20 xboxgip - ok 12:06:29.0582 0x1d20 [ E099DED5C602AE4A7ECCF7CD4B1D2E33, 7FDAFFE13B87A8E6AA8721F8905FFF6EF04CAB93009F68EDA862B57EBB04514F ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll 12:06:29.0584 0x1d20 XboxGipSvc - ok 12:06:29.0603 0x1d20 [ EF83C2EF7F152DFDC6D9F1AEC6FBE66F, 21D4FCD12F9D40D066F05936131A4F7BAB301DD800C85921476EC182B9D27D0B ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll 12:06:29.0616 0x1d20 XboxNetApiSvc - ok 12:06:29.0620 0x1d20 [ 2E50A379A8E4F6C5D85E87C26C08D329, ADA0C344FE58A3772FFF7417268160E488741C5B2F08CA12ED587AB7F75756F6 ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys 12:06:29.0621 0x1d20 xinputhid - ok |
06.09.2017, 11:13 | #6 |
| ESET Fund - LogfileCode:
ATTFilter 12:06:29.0622 0x1d20 ================ Scan global =============================== 12:06:29.0628 0x1d20 [ EEA8447A2E39A39F66C74BA66C421F92, 7FFC5294E0D0438E7450ED36947AB04D0C84DF4E1C9F2D49340D3BA586FFFAB2 ] C:\WINDOWS\system32\basesrv.dll 12:06:29.0633 0x1d20 [ 961599D817655AB85646C7D56684D2B0, 1614D9EE8F02B8253EF54F26B5EE631FF17ED6504713625DBD3554257C7C50F4 ] C:\WINDOWS\system32\winsrv.dll 12:06:29.0638 0x1d20 [ 7DD72CBE412C9567661F4B1CE9631FC1, 8D914805CBDAF448C8C132C4C3FEB1D90804F4F485180F7364A75EC5655A4DDB ] C:\WINDOWS\system32\sxssrv.dll 12:06:29.0650 0x1d20 [ C81F9707DEA008EED4071B5A39B7C76E, 47FFEF27A479ED6B325B22296B6853D7E57B53E8E712824F3881E510D5C93667 ] C:\WINDOWS\system32\services.exe 12:06:29.0658 0x1d20 [ Global ] - ok 12:06:29.0659 0x1d20 ================ Scan MBR ================================== 12:06:29.0661 0x1d20 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 12:06:29.0709 0x1d20 \Device\Harddisk0\DR0 - ok 12:06:30.0277 0x1d20 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1 12:06:30.0286 0x1d20 \Device\Harddisk1\DR1 - ok 12:06:30.0286 0x1d20 Scan was interrupted by user! 12:06:30.0286 0x1d20 Waiting for KSN requests completion. In queue: 232 12:06:31.0296 0x1d20 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.11.15063.332 ), 0x61100 ( enabled : updated ) 12:06:31.0299 0x1d20 Win FW state via NFP2: enabled ( trusted ) 12:06:31.0380 0x1d20 ============================================================ 12:06:31.0380 0x1d20 Scan finished 12:06:31.0380 0x1d20 ============================================================ 12:06:31.0384 0x26c4 Detected object count: 0 12:06:31.0384 0x26c4 Actual detected object count: 0 12:06:47.0381 0x0940 ============================================================ 12:06:47.0381 0x0940 Scan started 12:06:47.0381 0x0940 Mode: Manual; SigCheck; TDLFS; 12:06:47.0381 0x0940 ============================================================ 12:06:47.0381 0x0940 KSN ping started 12:06:47.0419 0x0940 KSN ping finished: true 12:06:47.0592 0x0940 ================ Scan system memory ======================== 12:06:47.0592 0x0940 System memory - ok 12:06:47.0593 0x0940 ================ Scan services ============================= 12:06:47.0624 0x0940 [ AAB860A5E606B9621E130D8C29D3F305, 93466620433B27F3BCFECDA26DD420AD1E5219034BA3B4E930EDED6D6728AE5C ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys 12:06:47.0651 0x0940 1394ohci - ok 12:06:47.0656 0x0940 [ 4140B14929C555E9513D59A2EEB5C471, 39A8400B3AA7FB1D8EBE87E65F89881AB23B6AE911BECAEC1FD86C7DADD4F1AA ] 3ware C:\WINDOWS\system32\drivers\3ware.sys 12:06:47.0665 0x0940 3ware - ok 12:06:47.0679 0x0940 [ AC251B31370C1E00F577928260B8939F, D60946F1C43A8C2B9C989A1E259FDA44055F94766615F344CF8E28A7F104BC70 ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys 12:06:47.0698 0x0940 ACPI - ok 12:06:47.0702 0x0940 [ 3E5E5DAE5CAEC0209C93D3AD8128D8A0, 5CFA4D715AE8D928EA11F213C5A7B0B1C1705D2A8FF041E0A1988E645E669C54 ] AcpiDev C:\WINDOWS\System32\drivers\AcpiDev.sys 12:06:47.0709 0x0940 AcpiDev - ok 12:06:47.0714 0x0940 [ F72D7CC7E7A97A09757313F3B4C7E17A, 36E3363380C51A2DB58D3177655A0A75DAA977C00C5A9C60A189068C0AFDC643 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys 12:06:47.0722 0x0940 acpiex - ok 12:06:47.0725 0x0940 [ F04B6F53FBDB2B6B0451AE53DE19F0C9, 41A8C314A46867BAA45CD9666AAF734AD45B74E2033A8E66D93E17CDDAD66578 ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys 12:06:47.0733 0x0940 acpipagr - ok 12:06:47.0736 0x0940 [ C347A6095F3BE417D24F1E1349F4AF0F, 72C9D759BB132985AF55860658DC01F08590A2BD7E976FCF25E1314C5AA1D37B ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys 12:06:47.0742 0x0940 AcpiPmi - ok 12:06:47.0744 0x0940 [ 686BFFC47454DD2F58795C2EE891CA9F, 6CC4B6679914742D700A8373DED2DD9A821CA5284D4D73493BA0855DB8E6520A ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys 12:06:47.0751 0x0940 acpitime - ok 12:06:47.0769 0x0940 [ C52B8980692CACB057742C450D734149, BB2D7034592B6EBBECE5A73FB625E1352FD59972620523022CABA68EE00B7B98 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe 12:06:47.0780 0x0940 AdobeFlashPlayerUpdateSvc - ok 12:06:47.0802 0x0940 [ FBDA59118E59B3722248C66BAD89CAA9, 11AB83499757E3143834348DE39E85D56EC853071C96337C3ADD8A1E374C6CBC ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS 12:06:47.0826 0x0940 ADP80XX - ok 12:06:47.0842 0x0940 [ AC1928C2F7505BD556C552F153B062AB, B48EA30F76DEA57868CA74CC775DD60257021A3DE10CE101B8BEFA1CE9D22CF4 ] AFD C:\WINDOWS\system32\drivers\afd.sys 12:06:47.0860 0x0940 AFD - ok 12:06:47.0867 0x0940 [ 1D914C996F2C3134E2344BB74F79BCF6, D27AF01BA29784555AF7D2E89A3A65E81D6AFE1D3C7E8F9367F06D9DF5F88069 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys 12:06:47.0880 0x0940 ahcache - ok 12:06:47.0884 0x0940 [ 41856B40EE15F96DEC8755AB01FA3CF7, 33C3C899AF9CA15BE5A4CF097FF43DF3F0DBA0E48B6F1E28AE3E76AD76A1C361 ] AJRouter C:\WINDOWS\System32\AJRouter.dll 12:06:47.0890 0x0940 AJRouter - ok 12:06:47.0901 0x0940 [ F485CA5559DB37A4882467A4F7D58BEA, A1C648EFE12A5A3356BC0949372ADD0FF0CA2F5A8F992EB71C87E9C0D5C92BB2 ] ALG C:\WINDOWS\System32\alg.exe 12:06:47.0910 0x0940 ALG - ok 12:06:47.0928 0x0940 [ 9C39FBA94FFEF04561D13ED0D1B50DD0, 53FA118DEF37F0BA6030B9CB4C17019E6B5934941514756D66143B7BB66D7CA1 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys 12:06:47.0938 0x0940 AmdK8 - ok 12:06:47.0946 0x0940 [ 395D56FA2E22A10AE4774440D086F559, 24D7CBE9B82DC8900D9A5E345347FEC330D47FDBD1517A2AC10218BA2A9DFAA9 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys 12:06:47.0956 0x0940 AmdPPM - ok 12:06:47.0961 0x0940 [ EB729A9ADCB9F9C406B533F95E2F67D4, EDCB8E39C503FF30ECB82F368242179E2788C12B4FD9B557F38380A934E7D8E7 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys 12:06:47.0968 0x0940 amdsata - ok 12:06:47.0977 0x0940 [ 3B5C5C696F33FE61F1922533B03B9316, C9BAAA9B02547C66A276A31958DFD2A289C5963A4EE3FF306535565240D816CC ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys 12:06:47.0988 0x0940 amdsbs - ok 12:06:47.0991 0x0940 [ A7D45A303FF8A9493C96C4B804051E6E, 6074C264876A398039D3F89905A486ABA5BDACA038B79920A34323B38CFCB358 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys 12:06:47.0997 0x0940 amdxata - ok 12:06:48.0003 0x0940 [ 5180537517C27375B1F2CB37ED599FAF, 121BF0E3BDE068CC1E1E9B24DC334BA29348725E9BFB790699E4CC66664A4C3D ] AppID C:\WINDOWS\system32\drivers\appid.sys 12:06:48.0011 0x0940 AppID - ok 12:06:48.0020 0x0940 [ F7FEBF66A705F18DC063DFD259F15102, 394DA8A7355573C4D81C375450DF5C5B2FA6360E246B06FDE8E7F9ADF21360FA ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll 12:06:48.0031 0x0940 AppIDSvc - ok 12:06:48.0035 0x0940 [ 13D7FEA71091D1EAD8ADDD10BFFEA06D, A707CAC76CBF0334E2FCE3220147B382F5E44DEF9E23DD459CF7C40F27771695 ] Appinfo C:\WINDOWS\System32\appinfo.dll 12:06:48.0046 0x0940 Appinfo - ok 12:06:48.0049 0x0940 [ EAF36A714E16A69B8B4ED7591CBA77B6, 11FE2A5D991FB8AF78F4E78FB6DF02005EC5404DC298FE2D4E7774BB0011AB52 ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys 12:06:48.0064 0x0940 applockerfltr - ok 12:06:48.0076 0x0940 [ 91DB5775249920FD245851E0BC97D8C4, FCB53766AB377EF2E385CD2F6D0D2CEF485C07A5EAAB68FB1C798E6264832386 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll 12:06:48.0096 0x0940 AppReadiness - ok 12:06:48.0141 0x0940 [ A61222D41CE44B0C3592CEB57AB20B71, F7A136EF4850D76AF1868A8C93C201B3B00FCA1D9EDE77F65BAD04530CC84221 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll 12:06:48.0211 0x0940 AppXSvc - ok 12:06:48.0218 0x0940 [ 6E456A94B9BD7F6B4758729BCEDE40C3, 2F3146AC960992FA947A8E8C4D5497624A5BC69B7A3EECA117AD599C70DDE8E3 ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys 12:06:48.0226 0x0940 arcsas - ok 12:06:48.0229 0x0940 [ 766F3A7E42AFCF74265FAC78987D1665, 8FE82913DF5CF79B49B28B3CD782AF09FF30585A37473AE3E518A26C5D6453D0 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys 12:06:48.0237 0x0940 AsyncMac - ok 12:06:48.0240 0x0940 [ 01733BEEE02E51F712330D5909BD701C, A583B482DBE701A752EDFDEAE2EF16D7160DFEA6077E0C8EF013828E285D960A ] atapi C:\WINDOWS\system32\drivers\atapi.sys 12:06:48.0246 0x0940 atapi - ok 12:06:48.0259 0x0940 [ 329F315D04B64BC185A59FE17A2AD6CE, B9721AD1641E3E96D1C07294884506EBED5D05921A9F9FC263711C28AD040693 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll 12:06:48.0281 0x0940 AudioEndpointBuilder - ok 12:06:48.0305 0x0940 [ 67ADB26CC1B504E9566B9106277DE92B, AF137C9FE9B3A231C7662F2E59EF12482396CFD8AC020DF6BDBFDD9A1209A98D ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll 12:06:48.0341 0x0940 Audiosrv - ok 12:06:48.0348 0x0940 [ 6086B5EE0DA4600B2EC2725D82DEB74E, C67CA7021D710CFDCF62B17A2B2890E61E4F1E3D956312688454FD85738C303F ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll 12:06:48.0358 0x0940 AxInstSV - ok 12:06:48.0370 0x0940 [ 0914A5E66C0775CE11960452A6434FEC, 978C1E20023841FBFEF0CEAFE09EDB679612C8E5986C6E40C1F6D0835112D13E ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys 12:06:48.0385 0x0940 b06bdrv - ok 12:06:48.0390 0x0940 [ F8129321B1874D4386F7FEB754BC3380, 7264E7E2A339E456C0A1A40FDFAE0D202905467400B93FA0700498B86172337F ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys 12:06:48.0397 0x0940 BasicDisplay - ok 12:06:48.0400 0x0940 [ E2BFD01BD0ECF2BDE9420022147952A4, 7798211996143067787881A1362D07B95CF688E96192E3627D30347C719D40CB ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys 12:06:48.0407 0x0940 BasicRender - ok 12:06:48.0411 0x0940 [ 739D089777D2B66DBE7201E5EA4BA2D7, 9AD12E18A042C5B8EFB19297BC2E7BD1FEF75A138FEFB64C6BF0261FD3E53AB1 ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys 12:06:48.0418 0x0940 bcmfn2 - ok 12:06:48.0427 0x0940 [ C3B27514035315E3C1FCE64E69E253ED, 03AF100927077AD608C5EA47A17081CEA849F44C471AF978F410B83E2ABA5AE7 ] BDESVC C:\WINDOWS\System32\bdesvc.dll 12:06:48.0442 0x0940 BDESVC - ok 12:06:48.0446 0x0940 [ ED03D2ACE378C9EB8BB957ABBD85B951, E9AE3025DC4956B736651B20AEA665909C2B468F9AE3E317F545DD4EEEA7D9E8 ] Beep C:\WINDOWS\system32\drivers\Beep.sys 12:06:48.0453 0x0940 Beep - ok 12:06:48.0476 0x0940 [ 1FDC6CB56572203E6F4BF4E3FB30B886, 81D5C77C823DC078EEEB2DABEE5203D542C824E04FEDD96AA58F96037C065155 ] BFE C:\WINDOWS\System32\bfe.dll 12:06:48.0501 0x0940 BFE - ok 12:06:48.0523 0x0940 [ 5C0D4DBACB90D9ECE77907F4F6CF9EF6, FC29F03FB7E58A9ED17A34BC2D8E39533070B8B23D1A110622C3A213BF48CD2D ] BITS C:\WINDOWS\System32\qmgr.dll 12:06:48.0557 0x0940 BITS - ok 12:06:48.0562 0x0940 [ 2342B8619193B0D9FAC0D02C69DCE74A, 06A1512C9750ACD154DE8873DE6628355B7195759CE54FA96097EA6D56BE320E ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys 12:06:48.0571 0x0940 bowser - ok 12:06:48.0587 0x0940 [ 06373FF017097FD40D60219980871FA0, 9366823AA3C248DD06FBFA237DCFDB2A9B7F93BA7115D235792DD81DDDA79C1F ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll 12:06:48.0613 0x0940 BrokerInfrastructure - ok 12:06:48.0619 0x0940 [ 9C7F445B018AB4744B6E0C657B5D1833, 83D04F5E3D4BA46BBD8A67764A60F5731F86B0BE3A85C2858E002ABCC362F592 ] Browser C:\WINDOWS\System32\browser.dll 12:06:48.0629 0x0940 Browser - ok 12:06:48.0633 0x0940 [ AF57F0B0E284BE06860A7B701341324D, F94E44C777FDC049158B7BF73DAFCDB103D08493AC898D1C928771650F664412 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 12:06:48.0640 0x0940 BthAvrcpTg - ok 12:06:48.0645 0x0940 [ E1E55BA45510B2B0309E2C77ABEB1BFE, EA7BDEC354190F1033B14847606220D414C1A52C938C9327A4765032D28B6960 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys 12:06:48.0654 0x0940 BthHFEnum - ok 12:06:48.0658 0x0940 [ 336A9C0254A0178ED50281B6EDF5B836, C9C454C6EC4FF5897B1873A7E90D1CE8122E43783E978A570CEA75E15F65DE97 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys 12:06:48.0666 0x0940 bthhfhid - ok 12:06:48.0677 0x0940 [ D8428BEF4033C7BFCD981074E2318F89, 9C0692F8387BAD94CCA4E36B59701A7A7B8FDCB5377B4C2CA75424583835E112 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll 12:06:48.0694 0x0940 BthHFSrv - ok 12:06:48.0701 0x0940 [ 5428242193611BF91DDBF4F58900A55A, 91D59B0D0C7CA3DBBA8CA7CAD1E24845A224F451FC1880BE8CB7C1585AC79080 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys 12:06:48.0708 0x0940 BTHMODEM - ok 12:06:48.0714 0x0940 [ 6927D295017E9F1A5D655A8F3A122672, 4B686C93056924580390440B49C721BD9039D5C972994D8EA96CA848B786B693 ] bthserv C:\WINDOWS\system32\bthserv.dll 12:06:48.0724 0x0940 bthserv - ok 12:06:48.0727 0x0940 [ 102CAA11BA89290D48FBFD2E04274BA0, 9C6786AD6C8BE5AF7538BAD553C401B0D7443E533CDE59E975CF3E07EF262F0C ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys 12:06:48.0735 0x0940 buttonconverter - ok 12:06:48.0738 0x0940 [ 029434AC0A3935F9125ABBD08BF7C30B, 742338B882488CA83F502ACEBFEDC2783B8D9D6C391FE1088988276315A065F6 ] CAD C:\WINDOWS\System32\drivers\CAD.sys 12:06:48.0746 0x0940 CAD - ok 12:06:48.0751 0x0940 [ 307AE8BC9B45772DA02FB952A1D86C35, 4983AC71C8E164D9E6669D345925B4FBEDD0A0A4566887E7ECC56C996B66DBD4 ] CapImg C:\WINDOWS\System32\drivers\capimg.sys 12:06:48.0760 0x0940 CapImg - ok 12:06:48.0764 0x0940 [ B6E5AD7C83A5254DEE9D86023C0E5A81, 40F297406A025378A6273535475C1FF8C99BC6502B17C0E161131DA754D7974B ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys 12:06:48.0773 0x0940 cdfs - ok 12:06:48.0792 0x0940 [ A0E5905465CBCCB63FE915F5B08752A8, 435B39A8B1684FFE9F2720A2CD11AF5A5F55E701709939756322C2CD6A22E0FA ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll 12:06:48.0822 0x0940 CDPSvc - ok 12:06:48.0834 0x0940 [ 618DA70D0D90DF3602259C1B121794DD, D2AF7967DE38F3B7C10824A1C900A145F45C57C0F179753A85989406600C4279 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll 12:06:48.0856 0x0940 CDPUserSvc - ok 12:06:48.0864 0x0940 [ ABE77AD954BC3D72F559CF0C381E50BC, D0F24B023D7CADD4893AAF223A9BAC00B2C58D552E0C314B506C01767FB74133 ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys 12:06:48.0874 0x0940 cdrom - ok 12:06:48.0880 0x0940 [ 62E13528B9F900A5662E243D4315F10B, B3F4868E80A3A2EDEC19E5AA32C96FF90B08D6B9BD35B80EA01E6A098D46040B ] CertPropSvc C:\WINDOWS\System32\certprop.dll 12:06:48.0890 0x0940 CertPropSvc - ok 12:06:48.0900 0x0940 [ 05EA22CFC40EDE05BF6E3BC782E5204C, F0C9C692FC31387E9D19426D3253317B6BA86D7118E3884C11E3287695006443 ] cht4iscsi C:\WINDOWS\system32\drivers\cht4sx64.sys 12:06:48.0911 0x0940 cht4iscsi - ok 12:06:48.0952 0x0940 [ 863E1C9F6750446DFB9EDCAEC3531367, 88C5EE76FD85640EB1440DEFC7B6CB918E18DC09507BA91FAE285370B8C7D56A ] cht4vbd C:\WINDOWS\System32\drivers\cht4vx64.sys 12:06:48.0994 0x0940 cht4vbd - ok 12:06:49.0000 0x0940 [ 3E416539352B007AD0610BF34AC15D31, E2041129770B24AE95C5EC4B507477C72DFE8CB08D412E2621BF67207F9DEB8C ] circlass C:\WINDOWS\System32\drivers\circlass.sys 12:06:49.0007 0x0940 circlass - ok 12:06:49.0010 0x0940 [ 616E1ED94FA7F96D429D985FDB203D2E, EA681C442AA0F7D424C8DABD8D1C14653E61BDE740C0BC4C6C308B5FB4FE67AA ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys 12:06:49.0023 0x0940 CldFlt - ok 12:06:49.0034 0x0940 [ AF0BF03C8574DD026FAF9A82A64C2D04, 363BF0C42181FA4CFBC3DB504F48496D62023F0E4A858DC8F739C08CC5AFA228 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys 12:06:49.0045 0x0940 CLFS - ok 12:06:49.0062 0x0940 [ F34283DE289AF82A97BCE6563D1E2BB4, 9725D041322AF70030E11EEF0FDB7D01FF2CF105FD90A4AF08F71E54725234C9 ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll 12:06:49.0084 0x0940 ClipSVC - ok 12:06:49.0088 0x0940 [ 5118CFC33BBB51C7E3ED441B7085AD26, 8D33864FF750926C4B95827FFAD24C558DE8A90FC5B2663084DEAB5ADBBFAFD2 ] clreg C:\WINDOWS\System32\drivers\registry.sys 12:06:49.0094 0x0940 clreg - ok 12:06:49.0102 0x0940 [ 232F3A3AC3A2FB32C5C46503A6517073, 9E0232E095471E6C8825E870F5842838F1AE515E56410F6A5CC3D58A9A4AF33A ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys 12:06:49.0109 0x0940 CmBatt - ok 12:06:49.0122 0x0940 [ 3413CE81E02C091F33C4C3DD3071630F, 4758A2BB2FD453E9867C04CC420D12B279BB97E3C4E664A7058EA5F1EC63D04C ] CNG C:\WINDOWS\system32\Drivers\cng.sys 12:06:49.0139 0x0940 CNG - ok 12:06:49.0143 0x0940 [ E1BFF774FF67CA951A5DFF0E104FB132, 68809C4B72C54CEDE3AD33F5634E15A0225A67B391F9012EC7CEBA8AFC6EC3D5 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys 12:06:49.0150 0x0940 cnghwassist - ok 12:06:49.0159 0x0940 [ DFDAEDB857BC18764F0D8ECDCC3C1499, AE12E908BAF53C605A17A9FB1AFD6BFBEC75EBE45D893541281473C197C71FED ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys 12:06:49.0168 0x0940 CompositeBus - ok 12:06:49.0170 0x0940 COMSysApp - ok 12:06:49.0173 0x0940 [ 04532711732BE9DBC364E88E4A9EC18A, FCEB1F486E146A3FE7307397C1EB6760BFD8A327545F81C546F7134B08615B9E ] condrv C:\WINDOWS\system32\drivers\condrv.sys 12:06:49.0180 0x0940 condrv - ok 12:06:49.0198 0x0940 [ 9B7A6AD43CAA322C4E04B4E52FD7CDAD, D59F55602C273372F8787B35AC62192ED99CAD72BFF8BF03DF7BDD9E9BC37EE4 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll 12:06:49.0221 0x0940 CoreMessagingRegistrar - ok 12:06:49.0227 0x0940 [ 1F7F1A15B807BC7B241BB2FEEA79BC92, D756E2247757C274F3470B46FCDBB63317C05E8E66FDA9DB7ABF3A6820933D4C ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll 12:06:49.0237 0x0940 CryptSvc - ok 12:06:49.0242 0x0940 [ F51953EC4B9AACD92A3B3CE66E05CEF4, D39C9696213F53F89209000F245AC178B342A84E46EE766B634BB8DB86A26BB8 ] dam C:\WINDOWS\system32\drivers\dam.sys 12:06:49.0250 0x0940 dam - ok 12:06:49.0257 0x0940 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 12:06:49.0263 0x0940 dbupdate - ok 12:06:49.0267 0x0940 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe 12:06:49.0273 0x0940 dbupdatem - ok 12:06:49.0278 0x0940 [ 8602EFC7DE488A8010A4027653D70BC2, 5A99E7608200AB065ECD070089C371CB3406A08A13B3080C83CB3910EE0E3E85 ] DbxSvc C:\WINDOWS\system32\DbxSvc.exe 12:06:49.0283 0x0940 DbxSvc - ok 12:06:49.0302 0x0940 [ 0E79A4C76CAAA0CFE9CA42C13E5AA086, C4D90EDA54216CC7897128D39517E4E18195BF28254796C6D0684E2C7DB90642 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 12:06:49.0334 0x0940 DcomLaunch - ok 12:06:49.0347 0x0940 [ 1175E107082287A58A756239F48E1A73, 0DB2017061D94FAC95CEBD7C4729E42018A92698D72CEE3EA412A9D14DB8D552 ] defragsvc C:\WINDOWS\System32\defragsvc.dll 12:06:49.0370 0x0940 defragsvc - ok 12:06:49.0383 0x0940 [ BBCAC50027D030E07EC7E5C36469FAFF, FEF39659F21D2AE676E4882FBAF5A881C534BB7EA26E5EFF9F7B5F8B952D6532 ] DeviceAssociationService C:\WINDOWS\system32\das.dll 12:06:49.0400 0x0940 DeviceAssociationService - ok 12:06:49.0405 0x0940 [ A2BACEBAC01BE7A6656B454E75C23262, C2C168718A341D48679AC4CA8005BD06E9F1F0D1F7C72D3C30A7A8CE1F665A43 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll 12:06:49.0420 0x0940 DeviceInstall - ok 12:06:49.0434 0x0940 [ 5B84093D490A6B060C8BE60BA52C876F, D34A854418A66529B18313A50E6D7EAB982611AD9AB0335245AE764FE0602C22 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll 12:06:49.0457 0x0940 DevicesFlowUserSvc - ok 12:06:49.0462 0x0940 [ F08F70BBD833BAA3BF0D5E500CBEE6CC, 8BB99E6D96CB8B25036549030986EC267C26BF1FC66E4EB00A3E41FE3BB5DE70 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll 12:06:49.0470 0x0940 DevQueryBroker - ok 12:06:49.0475 0x0940 [ 185A4519B7764F4DEF714D890A7A9FD2, 9805D9DB42D11582583EA3F0FFEE9EF2B0C536DA99A9A3D3863B2669B1CC34A7 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys 12:06:49.0492 0x0940 Dfsc - ok 12:06:49.0497 0x0940 [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys 12:06:49.0506 0x0940 dg_ssudbus - ok 12:06:49.0515 0x0940 [ BC5188B3F35BB8070888441A2A740465, 05C18A3DC1BD96C6751E76DBF57C47E526A1F9DF5E013B20B69EA0159CD6CE56 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll 12:06:49.0530 0x0940 Dhcp - ok 12:06:49.0535 0x0940 [ 5DF493C7954890EEC65CC2A21D479F76, 67087AAAC2AF93F265077AA392444E32DC299918A843A8AECFBE73636A5F2314 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 12:06:49.0544 0x0940 diagnosticshub.standardcollector.service - ok 12:06:49.0583 0x0940 [ 7AA8614A390EE2FB79BDD11154CF1A61, 32B27D6C010AAB3FF9E1FBCE2E750042A1EBB0736821B1EF3BB8D979892F85B5 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll 12:06:49.0646 0x0940 DiagTrack - ok 12:06:49.0652 0x0940 [ 1203EA16F36C5BEB2509FB7CC03DC178, 195209CB711E5BDE24A50C88AA62F32E8AE26F6A83B423374FCA41444F55D1CE ] Disk C:\WINDOWS\system32\drivers\disk.sys 12:06:49.0660 0x0940 Disk - ok 12:06:49.0672 0x0940 [ 8BCFD0A4900E197DFA8679A13128EC79, DF09F3996F25F025E171DF3EF068BB9AC2DEC79BFCBCA5D58E9158CD7AD785B6 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll 12:06:49.0696 0x0940 DmEnrollmentSvc - ok 12:06:49.0701 0x0940 [ 038B8B76284BC291EC75B005BB3EB13F, FE7BD7CF833C4A96ABF4FD6EBAB829CC4D8096780A22A313035D7E49BBA12D36 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys 12:06:49.0708 0x0940 dmvsc - ok 12:06:49.0712 0x0940 [ 32C76DFE2586EBECFFA4112E9196591C, 190C294F50B96B13D0B776F7C19DCB47EAACBEE999CBA50236CF8C856CF38B17 ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll 12:06:49.0729 0x0940 dmwappushservice - ok 12:06:49.0738 0x0940 [ FC3AA34608A69BDAC67E31FB70C8A720, 38815F527DF963B4A7D93895776DDD618BD29782B1FA74EB1A7319AE58739A06 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 12:06:49.0751 0x0940 Dnscache - ok 12:06:49.0759 0x0940 [ F08CB37830A1F9950E8B2F7B1F78CC7E, E4E75645893597F6A02B98DC4F126A664F5DEF7B1CD4C2DEE5CA8ED18DB64C9C ] dot3svc C:\WINDOWS\System32\dot3svc.dll 12:06:49.0773 0x0940 dot3svc - ok 12:06:49.0780 0x0940 [ 3425E26D0A7792F2EE7745C0336C2062, 54A3AFFC31C2641BCE1877F2CBA61D2CD7191BA39FD5B3659491E4E307570C1E ] DPS C:\WINDOWS\system32\dps.dll 12:06:49.0793 0x0940 DPS - ok 12:06:49.0796 0x0940 [ 3D934A1C02EB6979CF45C70A71F580EC, 279B325E18ABF82FF523095D8D5958A3A48C7B7A4F64BD562DDED1D0662B608A ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys 12:06:49.0802 0x0940 drmkaud - ok 12:06:49.0808 0x0940 [ 5E92CB292D676634058E6C62653C9227, CE35C51B444664641306B4C2E21978B3418B58B2A973B19B908D86FE723FB4C4 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll 12:06:49.0823 0x0940 DsmSvc - ok 12:06:49.0831 0x0940 [ 682D7DF9704217DD8716307F9E2EEC05, A8D36414A7316C59995CF9689DD84B2FD3FECE47E39F515C81BC3C439890E993 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll 12:06:49.0852 0x0940 DusmSvc - ok 12:06:49.0890 0x0940 [ F1D8A5A6C39586717822C2AAB70663F4, 527CC5D18DF9B114352B49AC0645831C6C4F3FFA76692BDC2D9A90E9D14E5000 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys 12:06:49.0938 0x0940 DXGKrnl - ok 12:06:49.0945 0x0940 [ ECA1628436628362856ACF239E6AFD29, 19051DC348918B863E0A272CF56891B8CB49E7E705B8BAC7663D36C797A7B962 ] EapHost C:\WINDOWS\System32\eapsvc.dll 12:06:49.0963 0x0940 EapHost - ok 12:06:49.0965 0x0940 EasyAntiCheat - ok 12:06:50.0017 0x0940 [ D64CD3AE93125EDA383190C2AF607E70, 3D180B96C6A2318842FA03AE5F703320A93CF1F440FF7D0E6F6F9BAD98F2FA02 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys 12:06:50.0081 0x0940 ebdrv - ok 12:06:50.0088 0x0940 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] EFS C:\WINDOWS\System32\lsass.exe 12:06:50.0095 0x0940 EFS - ok 12:06:50.0100 0x0940 [ FFBB37982E6D24AEC7A2E5459098EAC9, E89DD74540088ECAC9E802D7A059C0A6E3E5412BD42E5E9F26258724458EF8DB ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys 12:06:50.0107 0x0940 EhStorClass - ok 12:06:50.0112 0x0940 [ ABF38D02E01D6ED87AE1DF65FC5DF62D, 57D48609DA30F60016D2ADEB9A772942FB39A117247EB63FAE3FCF50D726B698 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys 12:06:50.0120 0x0940 EhStorTcgDrv - ok 12:06:50.0125 0x0940 [ 5E4AB60D50F368A09275F4055D621EDC, C840F5DF3C0813EC6CB9BA0C3C91F2C6410227A6255DEF5FA94C8AC1E43E36A0 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll 12:06:50.0137 0x0940 embeddedmode - ok 12:06:50.0146 0x0940 [ CA966CED8970A60FB00A3592564EF093, 4BD904032445235EE69DAA0024E0FB3D8B2325D897A683E334754EB3CA90AB39 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 12:06:50.0161 0x0940 EntAppSvc - ok 12:06:50.0165 0x0940 [ B9A59B4AD516E38C39FA416398B96CCB, 4630A9AD414476B47F634F2EB5659597797222A8938B68847B97FECCE1A1B5F8 ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys 12:06:50.0172 0x0940 ErrDev - ok 12:06:50.0185 0x0940 [ 1541374239F33512D7F4D24ED1E9238C, 8B1548D4052A72175EB6ADA9FD4286ACD5041E1CE071DCAC3760BB227FCD3621 ] EventSystem C:\WINDOWS\system32\es.dll 12:06:50.0202 0x0940 EventSystem - ok 12:06:50.0211 0x0940 [ 9C4D88E8614487AD85A6F18A71A7298F, EE6F48C89D6379C7361484EAE7C7FAAA477D48032BFDD0D363E48642E62EADF4 ] exfat C:\WINDOWS\system32\drivers\exfat.sys 12:06:50.0227 0x0940 exfat - ok 12:06:50.0237 0x0940 [ C61014A176ECAAF97589E6FC979CE786, FB913AC647B68DB9854367BB1E53A504A85833966211279C8D7171698F743B27 ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys 12:06:50.0249 0x0940 fastfat - ok 12:06:50.0262 0x0940 [ ECC5AEFEA31F1A078E954305B8CA6373, 15948D017E3B52D3B4BBEC047F963BD77247E24A59F0532B6A023B0C4159FC84 ] Fax C:\WINDOWS\system32\fxssvc.exe 12:06:50.0284 0x0940 Fax - ok 12:06:50.0287 0x0940 [ 853081957BA148F38FD8DE4390CFCF4A, 37C92C7ABA55A5FF7094F77F8EBEEE1F4BEE161CEC6B01A50FC0D0C39E36C142 ] fdc C:\WINDOWS\System32\drivers\fdc.sys 12:06:50.0294 0x0940 fdc - ok 12:06:50.0297 0x0940 [ 885C06C35CC8FAEDDE3CDA36B72CA2A9, FF6584E7AF2FB540B2183665C3E216BE98DE953CEA6A7E4C5F13514BE4AAC9D3 ] fdPHost C:\WINDOWS\system32\fdPHost.dll 12:06:50.0304 0x0940 fdPHost - ok 12:06:50.0308 0x0940 [ 367E878C79D9F391E3D53B6BBC1B6386, 739D89F6954E17B73F53702CFF8EE985FB241255D962A83BAF1A20E783CAF466 ] FDResPub C:\WINDOWS\system32\fdrespub.dll 12:06:50.0319 0x0940 FDResPub - ok 12:06:50.0323 0x0940 [ 514F6A0B83527DD6ACCC8B21A57B10E3, EA3D401E42D05BA39E5874513DFB895A086BECE4D69FC1AC12F85F326A435A4B ] fhsvc C:\WINDOWS\system32\fhsvc.dll 12:06:50.0335 0x0940 fhsvc - ok 12:06:50.0339 0x0940 [ 27E764D6460504B7271AFECE7A59FB76, A32B08142068BF042B3E47C0CA7F4FCFD07A37807B1B8DAAE614F3A132475D52 ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys 12:06:50.0346 0x0940 FileCrypt - ok 12:06:50.0351 0x0940 [ 3D6087F51110F3CC0DA89385354F8C5E, 49FF976C3391A257BCD4B048BF6D1273F8537005E32D65E5F272AF3294639F05 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys 12:06:50.0358 0x0940 FileInfo - ok 12:06:50.0362 0x0940 [ 057E95E53C38260C4EF49B3A077770CD, 7008E71663046FF1D91D9DC3570094561C812067E1CA07715A1D2E4F787207AE ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys 12:06:50.0372 0x0940 Filetrace - ok 12:06:50.0375 0x0940 [ 90B2983D8495C26345A1DC5F0C3BB07B, 50D834D40C27EEF5023556A77B13D3335789333E302A73DF221CD86D156FDEE9 ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys 12:06:50.0383 0x0940 flpydisk - ok 12:06:50.0398 0x0940 [ A84261F75F490E45CFEDBA77EFE4F67E, 292BA04D8996140255E4B6105015C2A640890BEFB6C022E30E0D9CBF45D5F4DB ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 12:06:50.0414 0x0940 FltMgr - ok 12:06:50.0444 0x0940 [ 3020F526B7E94A178D3EBF958397F7BC, DD0105BBEFFA7E1F54BC2199C7DB60F9C650D76DA36598E934F45D44BCE1DE3A ] FontCache C:\WINDOWS\system32\FntCache.dll 12:06:50.0494 0x0940 FontCache - ok 12:06:50.0501 0x0940 [ B282011D13BBEEA0273DF33C5E776D55, B4AF068BBB09D0F546F5590FCDD745250CFD58DD3A8ABF5DC26670FA32D181FB ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 12:06:50.0507 0x0940 FontCache3.0.0.0 - ok 12:06:50.0519 0x0940 [ 58811D00A582A89B7839B4B2CE7302BE, D2B6C197BD257B462FC3E8E7A8E7C3F910282FDAA61DB00ADB64DA0698C203C7 ] FrameServer C:\WINDOWS\system32\FrameServer.dll 12:06:50.0539 0x0940 FrameServer - ok 12:06:50.0543 0x0940 [ D2814848206DFC18EB8D3D069FAE703E, A62263CDF9261B692423473F4FF23B01AC864C05850BA5591EB9019906B4A08B ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys 12:06:50.0550 0x0940 FsDepends - ok 12:06:50.0553 0x0940 [ AE7EDF845F41ACA3B74567C3CE20E987, 6159C227C85912B03D8C35A1EF91705AE6C1C23C7228D6FCC0A9529844798E1B ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 12:06:50.0559 0x0940 Fs_Rec - ok 12:06:50.0573 0x0940 [ 560AE7760EC108F92D2EA8638CC805CF, 6DA48D05641367477315B26A4466EF41BBB3896EF3DB0C050B86033C39C38C4E ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys 12:06:50.0591 0x0940 fvevol - ok 12:06:50.0594 0x0940 [ 4616F61E24B3AEA6E0E4EA7D69531EF4, 34CB16F68E4A4D19346C7FEC29BB5FE09BAAEC19EA730C9B93450F940D124D49 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys 12:06:50.0601 0x0940 gencounter - ok 12:06:50.0604 0x0940 [ 23174BB6937459B924BB8EF667FB28EF, 6675B87F4DE9CCA96B6BAB9F77C4E0B377828613D9FFB03F7D443AF11321F157 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys 12:06:50.0611 0x0940 genericusbfn - ok 12:06:50.0617 0x0940 [ 4B11CFBE1D9B73A9D865F6AB26F800BA, BD76CB5AF0EE6DD404875A4C36622C6BC8CCF2975C47E28DD305EB041C6C0B91 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys 12:06:50.0626 0x0940 GPIOClx0101 - ok 12:06:50.0648 0x0940 [ CF22C0941409C772AA1568DC4F89A111, ED5895F024E64B672EB3FAE6C456FA0D30A068CF2B475A7EE988DEA4DCD6D8DE ] gpsvc C:\WINDOWS\System32\gpsvc.dll 12:06:50.0684 0x0940 gpsvc - ok 12:06:50.0687 0x0940 [ 3FC3FCF557D0BE3D724EA10642E1F6FF, 744D0DDE748A1B681087668CB893F9A60A2BBE80A71098944E75B6A9AA934C82 ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys 12:06:50.0703 0x0940 GpuEnergyDrv - ok 12:06:50.0708 0x0940 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:06:50.0716 0x0940 gupdate - ok 12:06:50.0720 0x0940 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 12:06:50.0725 0x0940 gupdatem - ok 12:06:50.0730 0x0940 [ 02B9639D9997E95CDF2F4C4F3BDCC73D, 612F472A72E44199E0B1ECEE6FF2836359039402212CBD26D1A1CDDAC61052A9 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys 12:06:50.0737 0x0940 HDAudBus - ok 12:06:50.0741 0x0940 [ 9F90819E301C70A3A042FC05D3E41B5F, D2175786775D08686264001ABAA4B61DC08A847666F6B9A2A64D10BFC022F646 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys 12:06:50.0748 0x0940 HidBatt - ok 12:06:50.0752 0x0940 [ 3CA3244C45B25F3B3ED9445C195E40EB, 9C43B31DAB473D29069D0D6BC130660424FE2414BA519107641FA1561C10C76D ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys 12:06:50.0760 0x0940 HidBth - ok 12:06:50.0764 0x0940 [ 55DAF856F9633DD2519BA4E942870F02, 5283548CB93EB46C5FD3B08E45C97BBFB33D47F11F89560508775889FBF2F754 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys 12:06:50.0771 0x0940 hidi2c - ok 12:06:50.0775 0x0940 [ E34216A190D9BF8EAA666F6903BCD0EF, DA8529DAF903B447CC5FF2D112F670696549A4B66F54DF9A8C8C615D969CD477 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys 12:06:50.0782 0x0940 hidinterrupt - ok 12:06:50.0785 0x0940 [ 852DBB5185996AD8C73872A43A453729, 8C20331AE99E280799407CC5FCF88F8F645C331604230876A2CD7C253B9BD633 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys 12:06:50.0792 0x0940 HidIr - ok 12:06:50.0795 0x0940 [ 6339CC87F0F610D1575C9A419940602A, B2A054ED0B669FA54E250EC2926955B1D944FA1FB2AF5B590C181CB2E9D297BA ] hidserv C:\WINDOWS\system32\hidserv.dll 12:06:50.0803 0x0940 hidserv - ok 12:06:50.0806 0x0940 [ C1A608120DE0DF52E51B8BAF86AF19F9, F3529822E78CFCA2E323A75926A833529889E40BB9602B287CC343C496CB2062 ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys 12:06:50.0813 0x0940 HidUsb - ok 12:06:50.0820 0x0940 [ BD1CF47172B97707DFC66ADA741AE2BE, 9607AB7074FC54D88FDF6E2A31506BCF8ECBF8FD651BB5CEA2421471C24BCED1 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll 12:06:50.0834 0x0940 HomeGroupListener - ok 12:06:50.0845 0x0940 [ A004895B838003BAE2281DAF193B6A09, 587FCDCEF769B2AED12551B6426477B764CB8A025E692D4EC8B24E1CBA1C06E3 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll 12:06:50.0863 0x0940 HomeGroupProvider - ok 12:06:50.0868 0x0940 [ 8ADD9CA3E0F18CEA11EA6FAED794A228, B46BA885ED8253A253B1C87C331CA145F7F397AF49853038B3F1EDAF81B2C4BA ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys 12:06:50.0874 0x0940 HpSAMD - ok 12:06:50.0894 0x0940 [ BB1AE72906564A6E81B79D73A05AE21F, 9BAC18FE0F99479E7B2AB804A0B4C286E55155A8C051CC7D20CE94798EEA0721 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys 12:06:50.0918 0x0940 HTTP - ok 12:06:50.0923 0x0940 [ D3C45F1B5BB3EE772CDA416A4A3EEB9B, 97CD988CF307EBCC34F37F130F4F2C989DD17E70B2498DB1929B566A3387887B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll 12:06:50.0929 0x0940 HvHost - ok 12:06:50.0933 0x0940 [ F60F8390B635156593F7493AE898AFB0, AC5E58CDA12072C5FDBFEA0FA009CE2E251D143FC0878B2658ECCCF797B8B0EC ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys 12:06:50.0940 0x0940 hvservice - ok 12:06:50.0944 0x0940 [ 563F5FC3B46A70A91AB6C8822AC8BF25, 43E647A7752D7444BF306E38571130AB778AA2A6892782C6C1112E47FBEFBC87 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys 12:06:50.0950 0x0940 hwpolicy - ok 12:06:50.0953 0x0940 [ C082249BC3E972C8A132D9EC6AD9EAD5, D69EEFD97CF5E0BD64D11DE1C331D02A9BE522BB93A40FF32ED434D960B85D39 ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys 12:06:50.0959 0x0940 hyperkbd - ok 12:06:50.0964 0x0940 [ C6C8315E3262FAE460529C6DA2951682, 4ADBFA6601209BF6F5A9797721CBE2011905775CF4E266D7B42F89915D477E95 ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys 12:06:50.0973 0x0940 i8042prt - ok 12:06:50.0976 0x0940 [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio C:\WINDOWS\System32\drivers\iagpio.sys 12:06:50.0984 0x0940 iagpio - ok 12:06:50.0989 0x0940 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys 12:06:50.0997 0x0940 iai2c - ok 12:06:51.0001 0x0940 [ 42962355A7911407026E920E7252E3E5, 4A4016A53ED61354C81C594968339E6F3CCCFF4A64F8F28AD008ED8137E05AD2 ] iaLPSS2i_GPIO2 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 12:06:51.0010 0x0940 iaLPSS2i_GPIO2 - ok 12:06:51.0014 0x0940 [ BD47B2FEABFA48C6224D43EE9EA9BC06, 304628CA458AA7B1B8B1CFF12074AD75C1CE7BD41820B99607D7FA99A817D007 ] iaLPSS2i_GPIO2_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys 12:06:51.0022 0x0940 iaLPSS2i_GPIO2_BXT_P - ok 12:06:51.0028 0x0940 [ 2184CB3A65888F446FCD6DBA9F073F4C, 0B3D63EC7F61BFAD490C123084965A9F38DBFE587AC9DAE6F4E6B68AD8093DB2 ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 12:06:51.0038 0x0940 iaLPSS2i_I2C - ok 12:06:51.0043 0x0940 [ 4126F8DA08CE7924A3AE6F7235F85D5F, 668DC1D09496A95F44C07C5C1F6ED7D3EFC6F89523B2744A86B460E5BECAEFB5 ] iaLPSS2i_I2C_BXT_P C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys 12:06:51.0054 0x0940 iaLPSS2i_I2C_BXT_P - ok 12:06:51.0060 0x0940 [ 9B8332A96AAB15F061B0AA0DDCEEC7CC, 3EB36ABECEFD4354726F96E43D6FF46D20C3ED4863AA2D67A28CFC9FE76BE269 ] iaLPSS2_I2C C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys 12:06:51.0069 0x0940 iaLPSS2_I2C - ok 12:06:51.0077 0x0940 [ C6194F1036294CF77D782A19C303B902, 9D22BBE8A9080024DA1444956D70FA12D5A983641A579FB3310D2C6DB0E3F9B5 ] iaLPSS2_UART2 C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys 12:06:51.0087 0x0940 iaLPSS2_UART2 - ok 12:06:51.0091 0x0940 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 12:06:51.0095 0x0940 iaLPSSi_GPIO - ok 12:06:51.0100 0x0940 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys 12:06:51.0109 0x0940 iaLPSSi_I2C - ok 12:06:51.0134 0x0940 [ 12859E1215AA083A42E7ADCDE5C061D1, 262F9C65C3FA7EB69C4FA7C6547E1C79DB49697A083309909BC78726A116557F ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys 12:06:51.0160 0x0940 iaStorA - ok 12:06:51.0174 0x0940 [ D820075D3395BED28FC57AEF8FBA666F, 7589CCCD355D2685C0E6D317AB39F0DB061153E6859A0F53834B001643CFDF57 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys 12:06:51.0191 0x0940 iaStorAV - ok 12:06:51.0196 0x0940 [ 14E3DB5ADA7E2187A404129F4E5CE336, 5925C8E9DC00A6C682D6A3B37C6EBF2C325D37C8E4BF584F0B5AAC5A7B666E47 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe 12:06:51.0200 0x0940 IAStorDataMgrSvc - ok 12:06:51.0210 0x0940 [ A243E0CE8644378C9A9D015ABC3EDA27, 0C72F6D39DD64A16F54BCE185F4D8E670D386823F6364E9ED284F7F8DE11CBF5 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys 12:06:51.0222 0x0940 iaStorV - ok 12:06:51.0234 0x0940 [ E16E4FC9F250E48CB2CAD93E59D010E2, EFF558EDD63DB0FD8BA240E94BD5999106233B95BF86BFB99EE9B897F41C542B ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys 12:06:51.0248 0x0940 ibbus - ok 12:06:51.0254 0x0940 [ E3061D5ABA80394D29E26EA58AF7F69A, 9BCF1AD2CC9C7E48FD350F9D59797E17F355C840EDE428143764F93716159C20 ] icssvc C:\WINDOWS\System32\tetheringservice.dll 12:06:51.0267 0x0940 icssvc - ok 12:06:51.0284 0x0940 [ E9E4BB312F6B544392F44D513FAA2243, 3E6917BCE9F1AF554D57FED9E76B33F36D92145B0090A5F8F64E2A53EB4C54A4 ] IKEEXT C:\WINDOWS\System32\ikeext.dll 12:06:51.0310 0x0940 IKEEXT - ok 12:06:51.0314 0x0940 [ 0E33BC018502E7FDE77C343055D9C626, CD1C60E8EDAA044E03E5776962E091C1288204033A57A799D446F9B058D6AD59 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys 12:06:51.0321 0x0940 IndirectKmd - ok 12:06:51.0386 0x0940 [ 3A2D6740F51BE48C0FD01AD907329DEE, 4FD899CD6E3B3D5C9803E52CB72F002B6CFC144D524FAF6845CF6D115EC6E059 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys 12:06:51.0452 0x0940 IntcAzAudAddService - ok 12:06:51.0473 0x0940 [ B63CF22D1AD2ABDC39D85851B2BEAA6D, 37E9043BABB5895BFD2B59AFB60C438B992C6EAA1B5FDE5B3445314343F4C406 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe 12:06:51.0489 0x0940 Intel(R) Capability Licensing Service TCP IP Interface - ok 12:06:51.0497 0x0940 [ 8213094EA736A9C575AB0E22AD09B0BA, 12670A466B5AA37283BD4CB481D000DE3AE2A8D1BD159F67A41703A6FE5675EC ] Intel(R) Security Assist C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe 12:06:51.0507 0x0940 Intel(R) Security Assist - detected UnsignedFile.Multi.Generic ( 1 ) 12:06:51.0507 0x0940 Detect skipped due to KSN trusted 12:06:51.0507 0x0940 Intel(R) Security Assist - ok 12:06:51.0510 0x0940 [ 4B7F8A1AAC7172DB6918A0E10E1D78A3, 1E9922AF9B5458F23A379EDCD61B615B6E53BAF8927237C1C7DCC04122CCF417 ] intelide C:\WINDOWS\system32\drivers\intelide.sys 12:06:51.0515 0x0940 intelide - ok 12:06:51.0519 0x0940 [ 0A3DBE89C965FFB7C0D0E38834E77B90, 0166BE79228ED6B3D7AA1BACB4F1BB68357DBF70DF778B2F8A3776E374EE690C ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys 12:06:51.0525 0x0940 intelpep - ok 12:06:51.0531 0x0940 [ 64EC687A811DC4F69DF3816F073352AA, F70942B67448DF9848F32F88D37E1E0C548CE9FEFC4376628D7CBEF62494D8E1 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys 12:06:51.0541 0x0940 intelppm - ok 12:06:51.0544 0x0940 [ 549C278119FF539C3B219C55B98B0E87, B4C15AB0C77EAB6C5ADEBD014F610BBFC537EAEB0E3960636624001C8A5DE56E ] iorate C:\WINDOWS\system32\drivers\iorate.sys 12:06:51.0550 0x0940 iorate - ok 12:06:51.0553 0x0940 [ A0F9F2E87F0C751FE164D90EB44A9B63, BE816F17E43E5F80AC65E913AB7F9E77B8D6B70B90A784CB00C907D3DAFFD4DB ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 12:06:51.0564 0x0940 IpFilterDriver - ok 12:06:51.0582 0x0940 [ 57A93FCF94FAB8C2161335E56C81CD16, 4A642E4FF70DA209074B78EC50B76A024DB5D01B8C9FCC405A64AF0F1A7EA389 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll 12:06:51.0619 0x0940 iphlpsvc - ok 12:06:51.0624 0x0940 [ 656DDB34996A96539BA6E2843B5F2A77, EDC3F1A2BA38A9655361A20B6C8001984AEB1A530C5385CF6EC0AF595305DBC7 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys 12:06:51.0631 0x0940 IPMIDRV - ok 12:06:51.0637 0x0940 [ DCC05E5EAA580C97F13B434FAFACED85, 5C6CFD3D9FAEB7274E05F3D19D3AA064624500C616650DE227B849B505662BB4 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys 12:06:51.0648 0x0940 IPNAT - ok 12:06:51.0653 0x0940 [ 9A6B993A95CCA15502DE3C980508DC44, 370A1A4531A72CFBF331ED274913925A269115A13E3A6B5E1821FB48DD7242AE ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll 12:06:51.0667 0x0940 IpxlatCfgSvc - ok 12:06:51.0672 0x0940 [ 9035C10C7EB8CF7C87CEA82A62EBB43A, A0DA94E80E503DB3C2877CE1BCDC70B3FCC6861ADFBCCE66C6D2592BD63F27DC ] irda C:\WINDOWS\system32\drivers\irda.sys 12:06:51.0682 0x0940 irda - ok 12:06:51.0685 0x0940 [ E7FD479E3298F3C8852A0D2F092BDB35, 07F2E779268EBBF4F32ED1C8423493B36BA823905E71B524C6AEBA0093193307 ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys 12:06:51.0693 0x0940 IRENUM - ok 12:06:51.0696 0x0940 [ 65B145143F6E5E1B5A213F0D9F4C4C44, 0E390BD8D7B4B9562E8FEE0D109DCE0D9EA823FD2D20B39FFACE3331F30FE5BC ] irmon C:\WINDOWS\System32\irmon.dll 12:06:51.0704 0x0940 irmon - ok 12:06:51.0706 0x0940 [ 1DFC3CCA51785254C5604238BB1A5467, 31451A90A91AEE14C6B24F84CB9816E5C77179D411B8B3E8547F538235BEEFB0 ] isaHelperSvc C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe 12:06:51.0708 0x0940 isaHelperSvc - detected UnsignedFile.Multi.Generic ( 1 ) 12:06:51.0708 0x0940 Detect skipped due to KSN trusted 12:06:51.0708 0x0940 isaHelperSvc - ok 12:06:51.0711 0x0940 [ 7FE3B3A30FA20F27AF7022A01C2266BA, 8AB924F08ABF1DCB154B6A3BDB7E3E5A863008B5AFF8E3DB9759848774E00E8A ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys 12:06:51.0717 0x0940 isapnp - ok 12:06:51.0724 0x0940 [ 618707F3F742BF67AB578808171F60EB, AC9322483A450856B60F61D0CC58380148C52451863364C6FF3A2FAB4173A7A5 ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys 12:06:51.0734 0x0940 iScsiPrt - ok 12:06:51.0740 0x0940 [ DE70C5C10803C700DC1CFDE2D5CF207A, 4D11DE8B986C6966B66E1D6E931A72A1E9FA8D0B5B9EF57EF3EEDD09D0BE0B4E ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe 12:06:51.0748 0x0940 jhi_service - ok 12:06:51.0752 0x0940 [ D36B404BF979297C6572AEF98B2594F2, CB2F4E6589936D35D59CA70B39A29D091540EA125BE4B937AF92CEA0C6D0AAEB ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys 12:06:51.0758 0x0940 kbdclass - ok 12:06:51.0761 0x0940 [ 7E2036A846789D6D6A2EE21915017EE1, 82AF85CA30B440E453F7694C7EDABB5D2DB213AD2FE8620B92667DFB492229A1 ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys 12:06:51.0768 0x0940 kbdhid - ok 12:06:51.0770 0x0940 [ 4C054B8E901F41F5743DADE8A29FF256, 1009CC2503E08AFEA849BA83135C2D75C573FC4D6EFB5DBCDCC7ACB17AF83152 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys 12:06:51.0779 0x0940 kdnic - ok 12:06:51.0782 0x0940 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] KeyIso C:\WINDOWS\system32\lsass.exe 12:06:51.0789 0x0940 KeyIso - ok 12:06:51.0794 0x0940 [ BA7A5838866618A4E82FBC05B8923605, 96E898C7768BED66487A00E02B2E50516602BCF54E6648F5528E3334AE8527EB ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys 12:06:51.0801 0x0940 KSecDD - ok 12:06:51.0807 0x0940 [ 6629CAA1F157088B9EDD1EAD24C6D753, 3E5F3BCB34F4B52BE46B96F9F720FE5FB37A01D4E408875F6BB89F5B5C5A3900 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys 12:06:51.0815 0x0940 KSecPkg - ok 12:06:51.0819 0x0940 [ 9778205F28DC4F2EFFCC146647FE5CF0, 6B7EFFB08C7757A2830745920A624F89DBD5B323E0A884932FECF06471894F9D ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys 12:06:51.0827 0x0940 ksthunk - ok 12:06:51.0836 0x0940 [ 08F9C3F7FE3019BF53B1405B1820528F, E90940533F88A33C396E1DF9D186E945F030315FB2201E479F144E27387333CA ] KtmRm C:\WINDOWS\system32\msdtckrm.dll 12:06:51.0851 0x0940 KtmRm - ok 12:06:51.0859 0x0940 [ ECFFCC67C47A86CA32D0953428699210, F5A06E82FDC092549623FD41C82B082092529808BA12339DE5B1D72B9B12072D ] LanmanServer C:\WINDOWS\system32\srvsvc.dll 12:06:51.0873 0x0940 LanmanServer - ok 12:06:51.0880 0x0940 [ B82D6C634638534E41748FCEC909E55D, C286EB7B3E780549F77E75B4B9F053861D82EFDCD43B1308848A08D23EFADDCA ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll 12:06:51.0894 0x0940 LanmanWorkstation - ok 12:06:51.0899 0x0940 [ AF1077E89AD4458EC9B1CABB35595346, 762AE3218B7B05032C4199F0AE9ABCC822C3DF88BBB09536202B6B26A7944024 ] lfsvc C:\WINDOWS\System32\lfsvc.dll 12:06:51.0906 0x0940 lfsvc - ok 12:06:51.0909 0x0940 [ C0CB3B9F1F92C36B91309FDACCDF918B, 5D40C11388A48323D9D9AC18A950B09E2654092BC2F9DE45779A9354668BA18E ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll 12:06:51.0917 0x0940 LicenseManager - ok 12:06:51.0920 0x0940 [ FC37745959DFA4871759E4DCC836227A, 8B63F798440FD0A34E2F2940B2598238BC852EF3EFD22147A77AB4BA6FB9E704 ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys 12:06:51.0933 0x0940 lltdio - ok 12:06:51.0940 0x0940 [ 1797F544956D46966C67A2F7879403A9, D7820D2F8E936FF13D709BA1BD0541AABA8402F38698FE96DAE70B4E7A730835 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll 12:06:51.0960 0x0940 lltdsvc - ok 12:06:51.0963 0x0940 [ AE561CB0813D4DFA7D3E4471B2B70F5F, 344EA5E02D04098F032353962C1B70B0F578BCCD2843C70D6330B3F967D2FDB5 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll 12:06:51.0972 0x0940 lmhosts - ok 12:06:51.0981 0x0940 [ 1CE3A27B6B0658F4242AB2DECE69704E, FB705D43554478FA438CE600DAD65C5885858ABF9FCB5D9CC6E5F7C87FD6A853 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 12:06:51.0992 0x0940 LMS - ok 12:06:51.0998 0x0940 [ 16C9D4D822CCA795A72DC88B25A577CC, AEF93AA4E815F90C1A42D574C6DE7EF31FE69AD7B78B8E1AC7C27304F3CD7959 ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys 12:06:52.0005 0x0940 LSI_SAS - ok 12:06:52.0010 0x0940 [ 920F0CFCED5F28A31B79F1C470649D11, 5A5F390F2FD7C26807E7896E9F8F94EE7E69FE3C4B247BEA515588EB076148EF ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys 12:06:52.0018 0x0940 LSI_SAS2i - ok 12:06:52.0022 0x0940 [ 0FE63316F1C70A0F759A449FAC64C24B, CF99D62FDA862095BA1EB57DD58CEC070E0552E15B6F454B87D593707132636B ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys 12:06:52.0030 0x0940 LSI_SAS3i - ok 12:06:52.0033 0x0940 [ 80E82C46B27A923A3744531069B63857, C73A200FC2A009D19F2C26FAC07489EA0F4329CD7A1D80EB3200B19DFC883F8D ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys 12:06:52.0040 0x0940 LSI_SSS - ok 12:06:52.0056 0x0940 [ A69A59CD52D26443FF728FD52283598C, E416481B23CDADBB9E608E49C9DC9A520D14935E92CA9B63E7763692DB382D7D ] LSM C:\WINDOWS\System32\lsm.dll 12:06:52.0077 0x0940 LSM - ok 12:06:52.0083 0x0940 [ 88F5570C04766EE561FF129B2F93030C, A36F7FF563F813EC0F69E5BFB76C58A1C9824F54BA1729C4096E8B7B7C8D90EC ] luafv C:\WINDOWS\system32\drivers\luafv.sys 12:06:52.0094 0x0940 luafv - ok 12:06:52.0103 0x0940 [ A0A527569856B9814E8920F52EBB67F5, 4347277C84B47E4CC048850BDEFB258CFB3B476AA99FD503FD71FBB70FFF5ACF ] lvrs64 C:\WINDOWS\system32\DRIVERS\lvrs64.sys 12:06:52.0112 0x0940 lvrs64 - ok 12:06:52.0181 0x0940 [ 415E344294D1C0D04627B29146F68481, B4A1A05BDF07E8F226A98E51F62BE18BE2C046A084C495BD8A95CABC79FD0614 ] LVUVC64 C:\WINDOWS\system32\DRIVERS\lvuvc64.sys 12:06:52.0251 0x0940 LVUVC64 - ok 12:06:52.0258 0x0940 [ D33E2B74CF8B3A652BF0A9FBD068E87A, 46465387D04C2E5648D1CBD415E5D8757944A3C987A2497450F82D153BF7E868 ] ManyCam C:\WINDOWS\system32\DRIVERS\ManyCam_x64.sys 12:06:52.0264 0x0940 ManyCam - ok 12:06:52.0268 0x0940 [ D365217A6D4528ABB41B40C8FBD227E8, 340129785A5788A8FFE0E1B339A616D290F7504F3658F63E1A3B169B38460FBF ] MapsBroker C:\WINDOWS\System32\moshost.dll 12:06:52.0277 0x0940 MapsBroker - ok 12:06:52.0287 0x0940 [ C3EED732789052C98A2613A7E1C37CDA, D71735C8FB772EEB7F3F304CD79D8D774A9A285A94365DE0E635F61357EC9F0F ] mausbhost C:\WINDOWS\System32\drivers\mausbhost.sys 12:06:52.0300 0x0940 mausbhost - ok 12:06:52.0303 0x0940 [ 4DCE65116A28488593FF5A6A18B03DB0, AAFA7E7C1C9A38B8CF5CE530F96028191F52B1FDD2790246E413B63CF7C5F02A ] mausbip C:\WINDOWS\System32\drivers\mausbip.sys 12:06:52.0309 0x0940 mausbip - ok 12:06:52.0313 0x0940 [ 0609BF877A2F4DEECC62EEE220AB6242, 393268836EB055669997BD05866487497AFC396C9516DA4C4F143679B1DDCA6E ] megasas C:\WINDOWS\system32\drivers\megasas.sys 12:06:52.0319 0x0940 megasas - ok 12:06:52.0323 0x0940 [ EEC64C8D498D121607C7615FDFBEE4D0, B605B9886C1A05C999B005AEA6D0677DF632E2F34F4FF03F09C2E6C05F554D50 ] megasas2i C:\WINDOWS\system32\drivers\MegaSas2i.sys 12:06:52.0329 0x0940 megasas2i - ok 12:06:52.0342 0x0940 [ 2B7D3B206833D769218A1F4BE2D73B97, 25901A5E931DC3659993448E59ABC3601B7B0ED9AFEF0F5ECC139D0D0442F73B ] megasr C:\WINDOWS\system32\drivers\megasr.sys 12:06:52.0358 0x0940 megasr - ok 12:06:52.0364 0x0940 [ 48F64A35BA9F2E4AC0587DDA555FF951, 77FE2BE86ADCE103F4220A641139C42B1407CF8EFFEB66F841ABF9CFC3621558 ] MEIx64 C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys 12:06:52.0371 0x0940 MEIx64 - ok 12:06:52.0374 0x0940 [ 4F708DA590EDBCC124FB79066D44759B, B8DA803299AF5FDE1594CF958EA6B99D4B99E8163438A70A692CA33A96DBF8DE ] MessagingService C:\WINDOWS\System32\MessagingService.dll 12:06:52.0383 0x0940 MessagingService - ok 12:06:52.0400 0x0940 [ 89257B8D3826B5629CF7F73F97DA44F9, F056D67EC82072BA209FF7942862862FDF562F8C038F3128861C387F8F63B494 ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys 12:06:52.0420 0x0940 mlx4_bus - ok 12:06:52.0424 0x0940 [ 9AE3C0CC0865B1618A3C97744A6A9E9B, BF72AEF0360AC278B36ED31E5BFC2E8F72136B0952490A105CB6929654C97F6C ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys 12:06:52.0431 0x0940 MMCSS - ok 12:06:52.0434 0x0940 [ 0CD29540C32C2E2E0E3D7E9832752AF3, E64C3F5323C59D53409E33E88989FDD2A38B5B602336FC1D8C3702CA9B5EBFC7 ] Modem C:\WINDOWS\system32\drivers\modem.sys 12:06:52.0442 0x0940 Modem - ok 12:06:52.0445 0x0940 [ 534477FCAFDFCA6B841BFA06BD26BCC5, 96404FDF0BA2127A3BD24319637EC0C8BE8C42618D9FEDF66F41C5F72840D427 ] monitor C:\WINDOWS\System32\drivers\monitor.sys 12:06:52.0452 0x0940 monitor - ok 12:06:52.0455 0x0940 [ F5D4E18A70BA069D479154442CDEB60D, 96345E88BC6A50415E112A4B4CFDF3F4306EA049741C5B0A2BFFC142F15EB5CB ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys 12:06:52.0461 0x0940 mouclass - ok 12:06:52.0464 0x0940 [ 5C09868963B0C076AC3BC7759A46B7B1, 64CD200A8D90CDC31317009636A3BB6574ABF04BCAC903F93C47823C40CC03F6 ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys 12:06:52.0471 0x0940 mouhid - ok 12:06:52.0475 0x0940 [ 8BF7039787036529B98E50AE86A0E46B, 69C04D012D026A14E2D2A138EDA79227F9BE4BE1892D517DCDB797F2A5AEDB14 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys 12:06:52.0482 0x0940 mountmgr - ok 12:06:52.0487 0x0940 [ 0EACD4459D14FBB121A0F8202F170225, 6C63A3D69D6A44E6E03863D2256A5C6EF2DCA56B18DC90B8F3AE8C8DF5D303EF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 12:06:52.0494 0x0940 MozillaMaintenance - ok 12:06:52.0499 0x0940 [ AA12FAF01013F63348B722D3588550FF, AADE8C93BFE0830AE43AD649F62D7D7E25FC14107B172815EF9F4069C19ADFCC ] MpKsl53e08b5f C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{21384C1D-6071-4663-9403-A97A741E1BE7}\MpKsl53e08b5f.sys 12:06:52.0504 0x0940 MpKsl53e08b5f - ok 12:06:52.0508 0x0940 [ AD118EC95E9EF4D5223D681D8F183567, 395B76626956F5B7992676B9CA57B2CA075F0CDA881E14B3ED07ABE2DC0EEDBC ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys 12:06:52.0515 0x0940 mpsdrv - ok 12:06:52.0531 0x0940 [ 97106D80FD861D5762D5B93D1058D053, 4236FD178ECFC8978FFB3FC0890F357BB4AE10F88AF696617CCD24D93360BA3C ] MpsSvc C:\WINDOWS\system32\mpssvc.dll 12:06:52.0559 0x0940 MpsSvc - ok 12:06:52.0564 0x0940 [ D14C297933C82B8CB0B5CBBA4DDC830B, 2EF356F5373F16A7AE2421187FC5C150C09452C835229275B7403181D65C210F ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys 12:06:52.0576 0x0940 MRxDAV - ok 12:06:52.0587 0x0940 [ F2AD1B72C5A6475FB5FF332E1980DF88, 41E24496FBD61C0A333F567DA7C4E38C5A792724FB56448189099F60114749D5 ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 12:06:52.0601 0x0940 mrxsmb - ok 12:06:52.0610 0x0940 [ 84700F40C0E41AEA91F8F3D6218A8A68, 72BB529367095EE19F299232648B7E347590C9F4F89DE3FDA41724BFCAC1F49C ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys 12:06:52.0623 0x0940 mrxsmb10 - ok 12:06:52.0630 0x0940 [ B855479BA6A74349CEF8061808C90201, BA70A9EBC2E2895419C5D46806153DCA061E3C836F3D97A622E7672140107F81 ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys 12:06:52.0639 0x0940 mrxsmb20 - ok 12:06:52.0644 0x0940 [ 44A8A52763381E5DCAE122330191493C, 578630611F151C6D20D52145312F4A824C6FF80E27F282A2109BA6E54FDDC9BB ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys 12:06:52.0652 0x0940 MsBridge - ok 12:06:52.0657 0x0940 [ 41C5D9B52F4A1B30C3F7219D601CF12C, E1C1B1CED19D32FA1B765C7C380B9E749893B2018CF358F448E40DA60CB63166 ] MSDTC C:\WINDOWS\System32\msdtc.exe 12:06:52.0668 0x0940 MSDTC - ok 12:06:52.0673 0x0940 [ 92C00BD9616F353CA59A755C33269757, E67F05A4A1C44137CCAC0C7292A7010B5920172ACAE32638600E231F28F33035 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 12:06:52.0680 0x0940 Msfs - ok 12:06:52.0683 0x0940 [ F27EC8F7A0A779276E5DA2E70C2B01EE, A450DB309F84CAFFCE2A720612BDB260D88E9C390D2BC60874D73A55D8567E04 ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys 12:06:52.0690 0x0940 msgpiowin32 - ok 12:06:52.0692 0x0940 [ CBA955A54C9446CAAD28C76789D3B071, F6CA1BECA35B13B7CCC9FFB325FACF22713F6B81E8A6540C9967A462E425BBEC ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys 12:06:52.0699 0x0940 mshidkmdf - ok 12:06:52.0701 0x0940 [ E8E568EF60677E4534F387C53EE1B35F, 2E250EE1A9AE8AFDCA5216BED87328B05713386BD7E61C66A74EF021F2AFE7D7 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys 12:06:52.0707 0x0940 mshidumdf - ok 12:06:52.0710 0x0940 [ 16376B7B0730C04DD1A2C0CC8E09E420, 2F39D3254FD272E277B5496A8C93A7CBFBF80F6004AE0343BE9F09C538975910 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys 12:06:52.0716 0x0940 msisadrv - ok 12:06:52.0721 0x0940 [ 75FE54E84C1EB0C9C5E09F9FD5928ECC, 971CFEE8FB8364D17CD392E32A32AE57BE6461EAB6C580B52E6D752D4CFDD6B3 ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll 12:06:52.0732 0x0940 MSiSCSI - ok 12:06:52.0734 0x0940 msiserver - ok 12:06:52.0738 0x0940 [ C2939119A17E52D74191EFC1E4CDEE09, B5738A32B02CDD816F086BA84C733D9597A0193F42C068D7B90E386D1CA92EE1 ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys 12:06:52.0746 0x0940 MSKSSRV - ok 12:06:52.0750 0x0940 [ E40B960078A15D4901265D32E071C42D, AC11B8221C8F529FE3CA6FEB99AF699664C86008A732C3A8E6B1CE31C2272454 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys 12:06:52.0758 0x0940 MsLldp - ok 12:06:52.0761 0x0940 [ B4860AB91DC4E73936F0FF504D6B4B07, 7371093D9EB62218D20F6B8B3C88CBF01932AEA2923ED119962A78BE46E5A939 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys 12:06:52.0775 0x0940 MSPCLOCK - ok 12:06:52.0778 0x0940 [ 8EDC45C3F7F64A51C98B59E24648F74B, 445731F32A37A99FAB3CD5D178A84FB4F835727826211FF18623409D29FF3A1A ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys 12:06:52.0792 0x0940 MSPQM - ok 12:06:52.0801 0x0940 [ 7DA5FAC2A49D30CA5B7B96B8B26281AC, 168C3AA5C7318184D8F67EA832920FCE64E11D4CC418517D7BDACB9632F0BEA8 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys 12:06:52.0813 0x0940 MsRPC - ok 12:06:52.0818 0x0940 [ 7E3365C8BC83DCE88D6226BB5C7170C4, 69D741039CAAFCA93A4CC09CEC14F117527D732A6CF3077AA83E935B03EC3F9C ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys 12:06:52.0824 0x0940 mssmbios - ok 12:06:52.0827 0x0940 [ 09D51564E49181E9928910D6B91C920E, FB3C918820ACF4506AC49478709B4D4C6489BA0B5113E666C34B916CA5CD6DE7 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys 12:06:52.0840 0x0940 MSTEE - ok 12:06:52.0843 0x0940 [ 793AE56A3946EAD5F906C28D294FEFE6, BB563D088084026606C2FBD30A0850BA18363CC173CC6C77272D727CA6C1F9BD ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys 12:06:52.0850 0x0940 MTConfig - ok 12:06:52.0855 0x0940 [ E35F51C7474A26680627477462715206, 435490915CDD416D666B64C6B4526285EC946E6918CFA85585692B9ED43518B6 ] Mup C:\WINDOWS\system32\Drivers\mup.sys 12:06:52.0862 0x0940 Mup - ok 12:06:52.0868 0x0940 [ 74BD1149BF50F1E24934042A3BD17C90, DC4626DC4D629CA7DF336EC7E6435F27D2E252D81945E57F4BF2C981DBCD9B45 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys 12:06:52.0875 0x0940 mvumis - ok 12:06:52.0889 0x0940 [ 39C772E20B8C61858F969E4D60699D89, 32146D265CD315597C48FB233D77DDACB0FEDDB7E800A0F411A67844BB3ACC67 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys 12:06:52.0910 0x0940 NativeWifiP - ok 12:06:52.0925 0x0940 [ BC80F85C129F12A5F64D6741A120B539, AD410F13BCBDE54F98E353BD4DAF30CC5A0A9990FC4F1AB3623EF3175EEBCAF7 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll 12:06:52.0958 0x0940 NaturalAuthentication - ok 12:06:52.0967 0x0940 [ F2EA6F3165E154C24C084AC35DD6C3F8, 4F8CB75770945F5A28CC308917A124109F7462CE933695B9CAA3FE2CAE76C445 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll 12:06:52.0977 0x0940 NcaSvc - ok 12:06:52.0988 0x0940 [ 9B3C6582CFB91BA2A04B1D06D8E2FB98, 431E6B075FD24002724E8A2ED9FB3221AD66D1F1D021B56466187D97E5B43A1F ] NcbService C:\WINDOWS\System32\ncbservice.dll 12:06:53.0004 0x0940 NcbService - ok 12:06:53.0008 0x0940 [ 932E2E43078A3D786A46A5428F21B314, 17F1CC3388D80F1E1850063114C1EB72EEA149D9C8FA3501C0F9EB55C9E0C58D ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll 12:06:53.0023 0x0940 NcdAutoSetup - ok 12:06:53.0028 0x0940 [ 0FFE8AF1B94C5FD54E6ACC6DAE990D31, B67D3CA3460D4700D8B83EFE4B6A7AA940650E84D985484FBAA1EE80F3632133 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys 12:06:53.0034 0x0940 ndfltr - ok 12:06:53.0054 0x0940 [ 59F3D5FEF4A24871C07C279762DA8624, 00DD19E3FBC7FCFE2768409E2B4AE931205D53A22072D958950E8FBA1D14F071 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys 12:06:53.0080 0x0940 NDIS - ok 12:06:53.0084 0x0940 [ 4EA73CFDEE4A628D387D95464A131F29, 38A6E2389FA9B20A7AFDF3CFCD13B66489B92D853EE486BF81019F0A36A142E1 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys 12:06:53.0096 0x0940 NdisCap - ok 12:06:53.0100 0x0940 [ EB127689AF6F24091AB73538A556257F, BC25067D355084D6893E9262750433044C28893BB27A67BF7AF5008742C6D359 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys 12:06:53.0115 0x0940 NdisImPlatform - ok 12:06:53.0118 0x0940 [ 73B4C72FB6170A08C64BDA92DE93ECF7, 766BBE659232F0F5EAEE577EE88091FB76175BC52D65B9637126069C97E795D4 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12:06:53.0133 0x0940 NdisTapi - ok 12:06:53.0136 0x0940 [ 6704F27EB15A5B30AA7FA5A4F4D1FD47, 841F99B3C751F4D4E23C0E7B5C275B4871C1D5EF937A93129DF64DF49F6B6736 ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys 12:06:53.0143 0x0940 Ndisuio - ok 12:06:53.0146 0x0940 [ FE87CCAA89433FC306A80F15E848F4B2, 3269FDF53DA59057E066D582FCBB96B71C8063B8F488856A9DEA414B4797E43A ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 12:06:53.0154 0x0940 NdisVirtualBus - ok 12:06:53.0159 0x0940 [ 94517BC9F29A1B73D377F1BF1C3DCA34, 45A34D7AAA851C643E80C0F61CBF8544B8A2E8E7DAB2D5AB6F3A34FDEE4AB0B3 ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys 12:06:53.0177 0x0940 NdisWan - ok 12:06:53.0183 0x0940 [ 94517BC9F29A1B73D377F1BF1C3DCA34, 45A34D7AAA851C643E80C0F61CBF8544B8A2E8E7DAB2D5AB6F3A34FDEE4AB0B3 ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys 12:06:53.0201 0x0940 ndiswanlegacy - ok 12:06:53.0205 0x0940 [ AC6AC99075732F5C29DB0004DD5B1AC6, 684EC821EF5C60DA540CA36EC192B09E62440AAD5B13F0F4C23DDC4A9B96F28C ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys 12:06:53.0219 0x0940 ndproxy - ok 12:06:53.0224 0x0940 [ 9AC090451D92E6081EB89CDA83D74189, D4D442412F112853AA8D88DFB5F695AE4E8E2C361905992537EE53BE675FECE8 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys 12:06:53.0240 0x0940 Ndu - ok 12:06:53.0244 0x0940 [ A115DDB2C7805C41EEC9A5276FF5764E, FC81D0BE2DAAC6E7161C0FC5C90050022A39AD50E28040D5357C0E1FD6C0B6B5 ] NetAdapterCx C:\WINDOWS\system32\drivers\NetAdapterCx.sys 12:06:53.0253 0x0940 NetAdapterCx - ok 12:06:53.0257 0x0940 [ F420B6CAB5151A38E4DBBFFB500C11DA, 271F495B261461B8EA847BFDD87C155E6DC1B6236C161B8253A1F023706B1B1D ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys 12:06:53.0263 0x0940 NetBIOS - ok 12:06:53.0271 0x0940 [ 30C2F67EC84EB11B22011620107E0325, 98088685F457566FD8D13B83A0BF6B06CDC70AC156B67BF87A8A8446C150C1F3 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 12:06:53.0284 0x0940 NetBT - ok 12:06:53.0287 0x0940 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] Netlogon C:\WINDOWS\system32\lsass.exe 12:06:53.0293 0x0940 Netlogon - ok 12:06:53.0300 0x0940 [ D9FF8CA42C3541F4840693F17143C595, B05FB0B6439B34BD93EE59DC48BBE3D712A7428EFBFE37A887CE8546E57EE68F ] Netman C:\WINDOWS\System32\netman.dll 12:06:53.0313 0x0940 Netman - ok 12:06:53.0324 0x0940 [ 96173660A4DD4A56E4B8938A67DAD9B7, F1D8F94625C6461DB89F8D3BDC73748F8A7F3446694BD1F148AF9BE6F17E9543 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll 12:06:53.0348 0x0940 netprofm - ok 12:06:53.0355 0x0940 [ 79C810D49E6D2825F51B0D7CAA6E2FAD, 19B7FB87FC8CE8FEA456F06D32099ED5B69FE38D2954580D4CEC32998D206E9F ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll 12:06:53.0367 0x0940 NetSetupSvc - ok 12:06:53.0373 0x0940 [ 4D37150AB4D61598919AB70ACFD1369A, 9ABF73213988ED9AA72B2658F8B91967A24C7CC2049859D86CE9C51A4AB57A84 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 12:06:53.0380 0x0940 NetTcpPortSharing - ok 12:06:53.0385 0x0940 [ 8C03F2F5A9E93AEB08B3AEE51552394A, F95185FB8D5FDEAB39E593488BA6ABCFA9C081BFED05008E0CD95F29B894AFC8 ] netvsc C:\WINDOWS\System32\drivers\netvsc.sys 12:06:53.0394 0x0940 netvsc - ok 12:06:53.0406 0x0940 [ 0C124EAC0EF7B3767280C94A8C03615B, D10216726A221C8FBC67C47F4B266C271A7C7A4438F77AC44BB561E0A6EB6D34 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll 12:06:53.0424 0x0940 NgcCtnrSvc - ok 12:06:53.0442 0x0940 [ 9ECFD7DD594DBEAED3A2889045B2DCBD, 984B10A88E304B805153C49B3D618315926635A270AB34D2976E7AA5AE00E2F4 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll 12:06:53.0471 0x0940 NgcSvc - ok 12:06:53.0480 0x0940 [ 50F98CD010326B58F09082BACF3123AE, 124446A2905E23BB3F5763E347842F3F511EC44C37C2F85E409F73EC8F53924E ] NlaSvc C:\WINDOWS\System32\nlasvc.dll 12:06:53.0502 0x0940 NlaSvc - ok 12:06:53.0506 0x0940 [ 6D8F6A9C53CFB0C49E8251A442B7283F, C3E913E4997C35A9B4C2E613A499F01D15264EAB699B93269B690B2A74A70E9A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 12:06:53.0515 0x0940 Npfs - ok 12:06:53.0518 0x0940 [ BABF7E1757D6908941C9F9CBD66A5EF0, 323E743CB26583763A9C5DE64E7E08138CB8D3E2DE0A8BCE9F774E1C7426E7F8 ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys 12:06:53.0524 0x0940 npsvctrig - ok 12:06:53.0528 0x0940 [ A85EB5721C7203AAAAAA04F551960CD9, E61ED728E154799346C749159BFE36FAEB2CE64FC5735F533B910017D66A7EE5 ] nsi C:\WINDOWS\system32\nsisvc.dll 12:06:53.0536 0x0940 nsi - ok 12:06:53.0539 0x0940 [ 7A6BA778B48DF9FB7AC231D4FF6E3248, 5959CA59C75D2C4DD8A539CAA8D99EF6A0CB5AA3F0D485B14C8B35911748F1F7 ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys 12:06:53.0546 0x0940 nsiproxy - ok 12:06:53.0582 0x0940 [ 075F8C81457804BB79DD33FE69A96C57, EFAA1C6CEEC995E87EB15DA40178EA3534A73C8F6ADCF5F3FEC1C7BB99B78687 ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys 12:06:53.0626 0x0940 NTFS - ok 12:06:53.0630 0x0940 [ 4FFB2D5655D10700D5B8E205C4DB86BD, 69078960669A373F9C2D47AF2ED841619831106B681EBAAEAAE5BD569A54CE6D ] Null C:\WINDOWS\system32\drivers\Null.sys 12:06:53.0637 0x0940 Null - ok 12:06:53.0648 0x0940 [ 1154A31459B0E6D973DA40876240E832, 6740A717633566873388570D00CF64676F8249F65006BDDA0C8E90A426655458 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe 12:06:53.0659 0x0940 NvContainerLocalSystem - ok 12:06:53.0670 0x0940 [ 1154A31459B0E6D973DA40876240E832, 6740A717633566873388570D00CF64676F8249F65006BDDA0C8E90A426655458 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe 12:06:53.0680 0x0940 NvContainerNetworkService - ok 12:06:53.0684 0x0940 [ 99EB6376EC2C03CE5F668577651E3454, A783FFBF89A9074E2074ACAF3F55862DF2F05CAFEAF6A2D509DDA665EB0D59CB ] nvdimmn C:\WINDOWS\System32\drivers\nvdimmn.sys 12:06:53.0692 0x0940 nvdimmn - ok 12:06:53.0699 0x0940 [ 4938CCA6E12A7FDA5324FFF0DF5DB8EC, 053D4D21014020C0D39F7BFC480EAE1458E1ABA1C40E11190204C4A2CB0D46EF ] NVHDA C:\WINDOWS\system32\drivers\nvhda64v.sys 12:06:53.0706 0x0940 NVHDA - ok 12:06:53.0922 0x0940 [ 862280E4CB288B0C471794A443D2451D, 149A65EAC50C720AB9D0047ADACC22E5002D90CC7D1B095DFC48064C5A2716A4 ] nvlddmkm C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ce1961376673184c\nvlddmkm.sys 12:06:54.0149 0x0940 nvlddmkm - ok 12:06:54.0169 0x0940 [ 3DB2E9E207358BFBD09B77B5119ECA5B, 55FED85EFC06B7AB5031D9986E4E4D2FA8841C549081ABBA9F9D9BBAB7852B37 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys 12:06:54.0177 0x0940 nvraid - ok 12:06:54.0182 0x0940 [ 4C04BFBD4DB2EECCC47F5FA39D65BB6E, 9312DC4F7000991946D92D87DD9D37D70E336629EDBA553BFC79804049E34B73 ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys 12:06:54.0190 0x0940 nvstor - ok 12:06:54.0193 0x0940 [ DF8E3DD83BA7558DC155092A2B6E53DA, 5E7D4F52937A1619DE495D1EA90AD28CBEED8C6C3FA7797E9EA9E36CBBF0BE2C ] NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 12:06:54.0197 0x0940 NvStreamKms - ok 12:06:54.0209 0x0940 [ 11E9791C1F356DC51156A9DCF241F641, B6012B5EEDA5794CA685E2428FD7C64FC8F988431798C61FC13B1DEA8851846C ] NvTelemetryContainer C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe 12:06:54.0220 0x0940 NvTelemetryContainer - ok 12:06:54.0224 0x0940 [ 3569074FE33A57E74A49E9B71A316714, 12EA5B1BAD6B535B4C8D822557712D13DF5EAD26CB4BC85B9309664BFB20200D ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys 12:06:54.0228 0x0940 nvvad_WaveExtensible - ok 12:06:54.0232 0x0940 [ 7D26C9E05D610ACA4548EF0E480ED20D, ED42F78603090E6E9CC67943429A72920BD9D1293E7772903E086B6CC240B673 ] nvvhci C:\WINDOWS\System32\drivers\nvvhci.sys 12:06:54.0236 0x0940 nvvhci - ok 12:06:54.0250 0x0940 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 12:06:54.0260 0x0940 odserv - ok 12:06:54.0269 0x0940 [ 0D611DC17E48B6F8DD466A089170D118, E55A78E2CC6A0A5F7B8F0B75DFB2297FBC3B959C4FDEFBEA1C6C4E7706724AEB ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll 12:06:54.0291 0x0940 OneSyncSvc - ok 12:06:54.0296 0x0940 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 12:06:54.0302 0x0940 ose - ok 12:06:54.0310 0x0940 [ F5F10CE848CAF07A12A7B92290DBA38A, AC6AC13B692D07A6853B24A6396F1C3388586FD5D528F79FA3E373428D54D29A ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll 12:06:54.0325 0x0940 p2pimsvc - ok 12:06:54.0335 0x0940 [ D1A9C22A98A10EB11A190B8FC7C07C6A, 1DE5F07E707DA9D833F105A8D948BBAEF0172DB2147D9A665EC7320F88D57B9E ] p2psvc C:\WINDOWS\system32\p2psvc.dll 12:06:54.0352 0x0940 p2psvc - ok 12:06:54.0356 0x0940 [ 2CC6C325B271C7CA60F374F8F868CB45, 569391CA5DF003ED33CAA89FD38834641023C24F7FAE2261F6DA8ABC5CC9C3C9 ] Parport C:\WINDOWS\System32\drivers\parport.sys 12:06:54.0365 0x0940 Parport - ok 12:06:54.0369 0x0940 [ 664B7DDEE982ADF5EAB480C75B9F6218, 1D1403CBD75916B83EEFA9B235E237583C40025C87C13676247F1EAD3F1D33EE ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys 12:06:54.0377 0x0940 partmgr - ok 12:06:54.0388 0x0940 [ 72ABB842C15A6C3AC3D954308C6BF206, 8F2A69E3BE43BCD2C8A39153062216B5CCEC9FA62205EC8A23FAB209DFAE7062 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll 12:06:54.0404 0x0940 PcaSvc - ok 12:06:54.0413 0x0940 [ C5B74C6D87E77BC64DEBD1BF57DEB375, AEBC86E404D4E3985D9FBAD9913AC52127DDE7C79062830717CDFEEA4CD7CC0B ] pci C:\WINDOWS\system32\drivers\pci.sys 12:06:54.0426 0x0940 pci - ok 12:06:54.0430 0x0940 [ CFB85CB7A6F6926EA0EB96EDFB3C8A91, 7B3A58C165DF231BB202D8A2036272932439864F8EBDC62811E2BEFA8B36FC01 ] pciide C:\WINDOWS\system32\drivers\pciide.sys 12:06:54.0435 0x0940 pciide - ok 12:06:54.0440 0x0940 [ 13B7D84B397A90E82682C47A15C3A98D, 7F897DA83209381A8C26B34416899E276256AB587DC4E2B60B185CAC8D1877F0 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys 12:06:54.0447 0x0940 pcmcia - ok 12:06:54.0451 0x0940 [ 76EA512FD9D4673CF7A57775EE8922E2, 6D2B90616A46BC4F9BB6BACBD78EB33C23834987365C87617AFC2E147871C984 ] pcw C:\WINDOWS\system32\drivers\pcw.sys 12:06:54.0457 0x0940 pcw - ok 12:06:54.0462 0x0940 [ 10E48E45A03A7F4C2B7C11738BE87816, 44870E26C3B75D51F5035DE78E62F3EFF222D314DAACBD60AE40BF34BC706F2E ] pdc C:\WINDOWS\system32\drivers\pdc.sys 12:06:54.0470 0x0940 pdc - ok 12:06:54.0484 0x0940 [ 4F190BA3C9BD2F0277BCBF480F396091, F09613C76350706992B39D7EA9B859D28F00790E5AC17CA7D49C3E270B9D8994 ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys 12:06:54.0513 0x0940 PEAUTH - ok 12:06:54.0518 0x0940 [ FE52FF97A094609429FEF098EDC6FB08, 6762ED340048AF61B756CB7B576BE2057768FDB677623D01F2A592727C0E5A00 ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys 12:06:54.0524 0x0940 percsas2i - ok 12:06:54.0528 0x0940 [ FCA143274792F12383C35902E801E83A, 87D93226E32153794993035553C9935D07242631E182460D8ED13650175C0F01 ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys 12:06:54.0535 0x0940 percsas3i - ok 12:06:54.0547 0x0940 [ 4DAD2C73778D41F951B33854936E7BDC, 1421FDA2D083D5923422A038C54603BF798C48DDB7244DBEDA46D537B8CE1534 ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe 12:06:54.0555 0x0940 PerfHost - ok 12:06:54.0573 0x0940 [ B730E963A31B73938A76D7B80666D60D, FADF452637E2EB50CC8C0E75956FE01F029C587F6EF2F8B347213263DE9D3A80 ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll 12:06:54.0604 0x0940 PhoneSvc - ok 12:06:54.0611 0x0940 [ 97D85602B8131C487EB08A36F7343F5E, BEDC106AF06358D40BB034390645A5BFF9C138CFD51B5997D32614741D3D2372 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll 12:06:54.0623 0x0940 PimIndexMaintenanceSvc - ok 12:06:54.0653 0x0940 [ F9FB601621FF33376F3908C2C27C6EF4, 8689565D4FD1C68826EA0A9C2B44377A2AEC3CD812595F0D32904D8FA5809672 ] pla C:\WINDOWS\system32\pla.dll 12:06:54.0697 0x0940 pla - ok 12:06:54.0703 0x0940 [ A2BACEBAC01BE7A6656B454E75C23262, C2C168718A341D48679AC4CA8005BD06E9F1F0D1F7C72D3C30A7A8CE1F665A43 ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll 12:06:54.0719 0x0940 PlugPlay - ok 12:06:54.0723 0x0940 [ 414CA4DCC31D795882B25ADC1DACE779, AFD8D9AA24C64DD9569FDCBE65171810FE27AF24B8DD2941FECE6245EABB6AAC ] pmem C:\WINDOWS\System32\drivers\pmem.sys 12:06:54.0733 0x0940 pmem - ok 12:06:54.0738 0x0940 [ D54385DD5A39A5636D1587FC9ECFC337, DEEA5D433CB2DA55AE58C7C5431A1249C94B61606F0A75E4A44D516619060263 ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll 12:06:54.0747 0x0940 PNRPAutoReg - ok 12:06:54.0756 0x0940 [ F5F10CE848CAF07A12A7B92290DBA38A, AC6AC13B692D07A6853B24A6396F1C3388586FD5D528F79FA3E373428D54D29A ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll 12:06:54.0771 0x0940 PNRPsvc - ok 12:06:54.0785 0x0940 [ 118E91AEE8F6DDAD088F955498CF2487, F4447C64CF1F36432E0FF09B6712DCE61BF28E3499F20C6C69E80D98B42D671E ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll 12:06:54.0804 0x0940 PolicyAgent - ok 12:06:54.0813 0x0940 [ F6A0B848F75CF55E3980EA0FADCBA317, 11D8B12B4DE867B180965B0F2FD0F362265C518F76FE3351A2B7C9C2FFC5E137 ] Power C:\WINDOWS\system32\umpo.dll 12:06:54.0823 0x0940 Power - ok 12:06:54.0827 0x0940 [ D292D7FADCEE481CC64A9DE8FE9C3347, BD870A375E33CD8434CA97FFE9C2F84E58C6CD0EAEEEE8922172CB01F9674B55 ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys 12:06:54.0843 0x0940 PptpMiniport - ok 12:06:54.0885 0x0940 [ 5404E7A968A26DF03793B6F68536594D, BE5A85581E87EFE4DB43AD17B8D42D3F7F32364AEEC1416DBB94279C4A203FF2 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll 12:06:54.0953 0x0940 PrintNotify - ok 12:06:54.0960 0x0940 [ D57CF871B3977731A91FE9611A54C7C1, B6C7F685716A88D0978377B83C5320C88EED0CAA44A001849AAFF71E4E0682E7 ] Processor C:\WINDOWS\System32\drivers\processr.sys 12:06:54.0970 0x0940 Processor - ok 12:06:54.0979 0x0940 [ 56A7713DE64B16FB309D132E88FDB098, A658C8DCA87442F33B726A9B2060B20393D83B8658D0894C046CAFEAB00E2D8A ] ProfSvc C:\WINDOWS\system32\profsvc.dll 12:06:54.0997 0x0940 ProfSvc - ok 12:06:55.0003 0x0940 [ B60431D2A046AD97F8427F6E568370F5, CD488E343585A5AC19D9AAF88BF0BB7EEA1BC48F6DA4A4FBF9BE5A04ECF5040B ] Psched C:\WINDOWS\system32\drivers\pacer.sys 12:06:55.0011 0x0940 Psched - ok 12:06:55.0019 0x0940 [ E0DCCA2A78516D155A6485CCA99F0EA5, EAFD24F815ECD6373BEC8E75B24FB54694CB8E4FF430FB6886F9B5B1C1762BFC ] QWAVE C:\WINDOWS\system32\qwave.dll 12:06:55.0039 0x0940 QWAVE - ok 12:06:55.0043 0x0940 [ A2B0F46FBA2521E7E732BDBDB1238515, 7F0FEFB09770BF5889D6C2219F68399C962A3F1071E70C4951B6FDAE196CF041 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys 12:06:55.0057 0x0940 QWAVEdrv - ok 12:06:55.0060 0x0940 [ EA9EB06EFC325CD2ACF5DF2F26A4894E, 32AC7EDB42CDA736E2AD9AB67795735F16234D9BD80D56FDAE5B8B3C3C1CC26F ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 12:06:55.0068 0x0940 RasAcd - ok 12:06:55.0073 0x0940 [ 4E9379389D0A851DD19D130C8FAEFBD0, 279A25EF8949A5BAF311CA75493A5F89F74A02711EF875F67D0A95849B409C00 ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys 12:06:55.0090 0x0940 RasAgileVpn - ok 12:06:55.0094 0x0940 [ 3E8CB44832FE3F96047187291523CDA1, 999A10D4D50CD2C39309FDC04A9F4CB0959BA061AE9305D4DF7F00F37F3813F9 ] RasAuto C:\WINDOWS\System32\rasauto.dll 12:06:55.0105 0x0940 RasAuto - ok 12:06:55.0109 0x0940 [ 5279EC98F6218D29EADDFECCC0D80E9A, 6F376FC3BEFA9F521635192177962AF1F41173502EC067896B7C2A5FB71E7A3B ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys 12:06:55.0126 0x0940 Rasl2tp - ok 12:06:55.0142 0x0940 [ D5E9823BC7CD1149917CC49AD4052D94, 4A40400FC1B43EF3EADA420F9898AF2A24585199B6F11AA8C2E7E15E2CDA3BAA ] RasMan C:\WINDOWS\System32\rasmans.dll 12:06:55.0171 0x0940 RasMan - ok 12:06:55.0175 0x0940 [ D7FF75ED7A48FD60A573C9E959CF4DB5, C67673E2D678527F8C07C9BCC487D385B92282D9D73396CFB01F14F5211CA991 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 12:06:55.0184 0x0940 RasPppoe - ok 12:06:55.0189 0x0940 [ 6A4E45A7F17FA0B4B1B48C550E311944, 1E84A559B7AA5F07E8156D223EFFB1B2B43D1E4E90E561D8DF2C257FFBCFDC0D ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys 12:06:55.0206 0x0940 RasSstp - ok 12:06:55.0217 0x0940 [ F2C575A9657F7B2E027C6CE7BC8F1A2D, 5D002488CCEDCEBF0542F508FCE47DC9105C67D5685489970048437BD243AC0E ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 12:06:55.0229 0x0940 rdbss - ok 12:06:55.0234 0x0940 [ 9414B22E093243636D362BF8C8C12A67, 575CE91AFADD771CBF86377962EDFAF70150BBA575F8DF144FEE6CC1C0FF88E0 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys 12:06:55.0241 0x0940 rdpbus - ok 12:06:55.0248 0x0940 [ 53A01D3FDB701AC5D9DDE4140227E3D9, 833AF0BAAB49B58C71C684D2AA20B900C27E19DDCE5E15355C7ABAAB33BC7673 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys 12:06:55.0259 0x0940 RDPDR - ok 12:06:55.0264 0x0940 [ DF32ED51DC0C3F6F3B1C4CEF71B8B426, DBEAD271B5DE6439E3106BDDB8B1E47D7BA47AE203CF3E1F8924CE02FDCA6E0B ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys 12:06:55.0270 0x0940 RdpVideoMiniport - ok 12:06:55.0277 0x0940 [ 2369A5B651308E0C3458143976E9B03B, 0EDE99F7E2A7668E90C2FCA11D4BCE0676FBEA2CCFB57A004827CE5FE96D1584 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys 12:06:55.0287 0x0940 rdyboost - ok 12:06:55.0315 0x0940 [ 3581FB9529035F8EC6DB681664CA70B1, 0C7BCD6A3B4248683C52B69F0B373D5929C2375F9BBF6CA80C480A8E7446A30C ] ReFS C:\WINDOWS\system32\drivers\ReFS.sys 12:06:55.0349 0x0940 ReFS - ok 12:06:55.0376 0x0940 [ 79E1ADE19D8B7C56EF29D098EAF57AD0, 295D0F04359A00849759976710F6CB83DB96E5007946930EA19865620EA3EFE7 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys 12:06:55.0399 0x0940 ReFSv1 - ok 12:06:55.0411 0x0940 [ D91C597DE82E1500525945E1FFF24B0F, 3F5837A743715FB2CCBFC9458FBE010AED170B46515925D4C7C59BBAC792F695 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 12:06:55.0430 0x0940 RemoteAccess - ok 12:06:55.0436 0x0940 [ 19D1072193DAF71C97E5A05FC7673BB3, 313C3762CCC490C20B5561A78E6002E7A52F0142B370F17849DD4AB2F0AF6513 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 12:06:55.0454 0x0940 RemoteRegistry - ok 12:06:55.0467 0x0940 [ A12D167F73C3E285AC623BCA62B3A8BC, 6E8213808C22C0688BD40721FBBBAA88BFEFA1BD304BC19AA015FC541CA5BF84 ] RetailDemo C:\WINDOWS\system32\RDXService.dll 12:06:55.0489 0x0940 RetailDemo - ok 12:06:55.0495 0x0940 [ D31B2CD9458D2E212A5F24D56D2FB8D5, D8EC0BDB9D143C050A48217C57AA1BA6D60EEFEF67A98441064BD8FD339987DD ] RmSvc C:\WINDOWS\System32\RMapi.dll 12:06:55.0515 0x0940 RmSvc - ok 12:06:55.0519 0x0940 [ C79F1F7C8A5FCBE90E3C833299AA1F59, 7969E79B2095BDA144AA369DE21F49C9FAD272B5864B2F0FD28CB28D148F2AD6 ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll 12:06:55.0529 0x0940 RpcEptMapper - ok 12:06:55.0532 0x0940 [ 1CE6928C1587F9760F7C3A036786CAE8, 3E4F5371E0DDDBA612BF61891D17D691DCAFB2E1010BBD84737FBD98DA8C03DE ] RpcLocator C:\WINDOWS\system32\locator.exe 12:06:55.0539 0x0940 RpcLocator - ok 12:06:55.0559 0x0940 [ 0E79A4C76CAAA0CFE9CA42C13E5AA086, C4D90EDA54216CC7897128D39517E4E18195BF28254796C6D0684E2C7DB90642 ] RpcSs C:\WINDOWS\system32\rpcss.dll 12:06:55.0590 0x0940 RpcSs - ok 12:06:55.0595 0x0940 [ E87EECED9287C275B6CF30EB598B1D77, D0C5D4E37A3FAD422C0ECFFAB53904D9FD5385129DE2BC5AF75D91CD016EA6AC ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys 12:06:55.0610 0x0940 rspndr - ok 12:06:55.0627 0x0940 [ 2B6FC4ABC7C8259D094590189F14C0F0, 906C9E11386FAD7173B2C245E624FBD51BA987202C49B87BA889614E3B20C05A ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys 12:06:55.0645 0x0940 rt640x64 - ok 12:06:55.0704 0x0940 [ 9748533EAF7F9E3D8F3F7A0AF066B31D, BB8D21BF26568ECE0599D8469121C73A6AE847203C110B6F0B94B5E7F76D6DF6 ] rtwlane_13 C:\WINDOWS\System32\drivers\rtwlane_13.sys 12:06:55.0794 0x0940 rtwlane_13 - ok 12:06:55.0800 0x0940 [ 6308366D3CDEA5F427CFF4BCF0081B4E, ABB91A41C09A1607C66BD380FD0A3EECAAF9AD534856CCC78DE1A4E450ADB07F ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys 12:06:55.0806 0x0940 s3cap - ok 12:06:55.0810 0x0940 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] SamSs C:\WINDOWS\system32\lsass.exe 12:06:55.0817 0x0940 SamSs - ok 12:06:55.0822 0x0940 [ 33B2DC5C2F19DA89F862484E23D9833D, 1C3BD1804767D087BE1510EEDCE94FFAC096922C821A123DB1BACDA5777246A7 ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys 12:06:55.0829 0x0940 sbp2port - ok 12:06:55.0837 0x0940 [ 53F03A8A228D6C8016139A4B2583A2D8, 8EA046C7537B2D926D3AE1F058A9880F823EBEA6DC77F312082EDE1722F08236 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll 12:06:55.0850 0x0940 SCardSvr - ok 12:06:55.0856 0x0940 [ CBCC25CDF5D30ACB253CC92ADC7D569C, 0DF0DE3B0F0007E4F3D663EB7CC503C38B5A99F5859A6BD8564F8153F1D925D5 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll 12:06:55.0869 0x0940 ScDeviceEnum - ok 12:06:55.0873 0x0940 [ 5CFEEFCC6FAD1FD09ACCFBD652DDD85B, F90104CC42073ACD48A2FCCEDF58B57D8663223406ECB0A270140A053E9260B3 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys 12:06:55.0881 0x0940 scfilter - ok 12:06:55.0898 0x0940 [ 5BBFA6CA63E8A5BB8FA2FA84A5562CE2, C74CD0A76473343A8620D26C96F7300026C295EDF61B8A336AB326DFE861678D ] Schedule C:\WINDOWS\system32\schedsvc.dll 12:06:55.0932 0x0940 Schedule - ok 12:06:55.0937 0x0940 [ 5C8620FAC0E3C1658C8EF7AD7BB7EA5F, FEBE7FC79FCDF692167D82DE54031FD68BD2941544007EEB3D82C21E7F1C5C83 ] scmbus C:\WINDOWS\system32\drivers\scmbus.sys 12:06:55.0944 0x0940 scmbus - ok 12:06:55.0950 0x0940 [ 62E13528B9F900A5662E243D4315F10B, B3F4868E80A3A2EDEC19E5AA32C96FF90B08D6B9BD35B80EA01E6A098D46040B ] SCPolicySvc C:\WINDOWS\System32\certprop.dll 12:06:55.0965 0x0940 SCPolicySvc - ok 12:06:55.0969 0x0940 [ 7B4B2DC611AA997D2AE45181FE378A5A, 0AD2D09BAC6C2D58BC6882A98AAF629A827B7AF763CC4E01B210B6D1BD15A9AB ] ScreamBAudioSvc C:\WINDOWS\system32\drivers\ScreamingBAudio64.sys 12:06:55.0974 0x0940 ScreamBAudioSvc - ok 12:06:55.0982 0x0940 [ 71A494A502F24465317E88E80F6C0C2C, D85F139982804B8419D7CCF01F35CCDDA580BA5276A6261D0662028080F7765B ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys 12:06:55.0993 0x0940 sdbus - ok 12:06:55.0997 0x0940 [ 464B615872981015AC4FEEBDEA83A063, 5CF491352B267241CA11F08E72E6EA668A595662561892E0D02CCA5B71172E14 ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys 12:06:56.0003 0x0940 SDFRd - ok 12:06:56.0008 0x0940 [ 847F01FB8504425BB255856A14278A86, 41997D25D12779CA79551988C56FA0A302367076B09A82F620858EDDDBFCE3FF ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll 12:06:56.0019 0x0940 SDRSVC - ok 12:06:56.0024 0x0940 [ 6BC219F1D9CDE08CEB9084ADB41FBA01, DA8AC3B42A72515A1976961976203A52D4C8636586EB5EF6B466AAF967A6567E ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys 12:06:56.0032 0x0940 sdstor - ok 12:06:56.0035 0x0940 [ 2AE8505519C7E8A903DD7BE793A79846, 7044B1BC183E028BCFB544489B033F0968F033696F9816F354329ABD26C6EE7E ] seclogon C:\WINDOWS\system32\seclogon.dll 12:06:56.0049 0x0940 seclogon - ok 12:06:56.0057 0x0940 [ 1D4F5F50BEA1329FAEFA5D15F683F87F, C5E0BFFB4E4589AAD87D8BA0F779DC94ED6F85A8003B71D0A858CC32912A3F0F ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe 12:06:56.0070 0x0940 SecurityHealthService - ok 12:06:56.0094 0x0940 [ 77FB9BE8EDDCC999D09F2B1A7878A2A9, 589774C006A339FCA9772C37C9103C73C8592E018553804B97F34E2A0069A3F7 ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll 12:06:56.0128 0x0940 SEMgrSvc - ok 12:06:56.0133 0x0940 [ 25456AF499A0C9C4A93CFAC70BDE9CC2, 885C1A9C8BFA73D9C9C454759DF871237F7C0F28D879E98B4BE0D0113C549B09 ] SENS C:\WINDOWS\System32\sens.dll 12:06:56.0145 0x0940 SENS - ok 12:06:56.0171 0x0940 [ 892C955E1081412942F64679E0DD7A5D, 6A28012270FA1FB3BB279102C67FA5296564630181C887E1EA6EA1F952A30C37 ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe 12:06:56.0215 0x0940 SensorDataService - ok 12:06:56.0228 0x0940 [ AA4BA5CCB3B01E23605ACE13F4A94ECE, 7D8374FA03C33CFC7EA7CF680F81B0090AB22076E389EB6B6233F696FC63E1B0 ] SensorService C:\WINDOWS\system32\SensorService.dll 12:06:56.0248 0x0940 SensorService - ok 12:06:56.0254 0x0940 [ 00897F867A525D2118DF98E2DCADA050, ADAEB414EE5F3EFE90AE8A56136FB0165CF68962661FE0B937150235DE1F4DE6 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll 12:06:56.0266 0x0940 SensrSvc - ok 12:06:56.0270 0x0940 [ 585329F62195A4B7AAD0A95F6EC89751, E7ADED97ACA8E8E06C368E24702C22D4C2B0B9495DEA24A2DC2A30782099BDCE ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys 12:06:56.0277 0x0940 SerCx - ok 12:06:56.0283 0x0940 [ C8F4FDA8B3D039D7947344614FF5BFB2, 1A3B88EC59F2A820AFE4F3AC65F7149EAC68672D1F0D729CBB575694005A8911 ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys 12:06:56.0291 0x0940 SerCx2 - ok 12:06:56.0294 0x0940 [ E5B450E4E0DC1591254BF9CCF6C57B40, 958E7378D9BDE1F2EBE736D8D9912D56835A606AABDD042443A35CA37EC70F11 ] Serenum C:\WINDOWS\System32\drivers\serenum.sys 12:06:56.0302 0x0940 Serenum - ok 12:06:56.0305 0x0940 [ 628D8DD136F92316BFEB58FA005338B7, 0CDA673D31F40EBD07E9F67667DB6077F23DCADE2DD8376AB550575224625D44 ] Serial C:\WINDOWS\System32\drivers\serial.sys 12:06:56.0314 0x0940 Serial - ok 12:06:56.0316 0x0940 [ E5BA0B7353ADC5C95AB466D2E4DC89B1, 98F2A22ED892B2610C85EAAAB51DF25939599955A27611FCE9E68C3701CFD4EA ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys 12:06:56.0323 0x0940 sermouse - ok 12:06:56.0335 0x0940 [ 043D7B39E693C610036BD56DF30EF440, 329D29CE1CB5F502B7DFCBE24878CA61EC56787A1B02195E19499701B194DE08 ] SessionEnv C:\WINDOWS\system32\sessenv.dll 12:06:56.0352 0x0940 SessionEnv - ok 12:06:56.0355 0x0940 [ 15CFCC4692DA8887B977CE5FC5181084, 31D86E122E35AB9E7275F2B0573EE98770BBE517ED3B9CCED97F4969C9A619F9 ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys 12:06:56.0364 0x0940 sfloppy - ok 12:06:56.0375 0x0940 [ 87B083252816171A17F833CBCB7AA85E, 200AB93CEF384791DC9B04D2AF17877CA10595B2CEDF4B9505E367A2382C4AB7 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 12:06:56.0402 0x0940 SharedAccess - ok 12:06:56.0415 0x0940 [ 490F6144273A85A3CFF3D416850E0611, F703D32580405B9CEF0E601222C2CE584B076B2E58710D66A15AFEA2A6907514 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 12:06:56.0440 0x0940 ShellHWDetection - ok 12:06:56.0447 0x0940 [ 7CA2E9B6EDC87FCCA9C49D3D9BE62B65, 3FE1A2DD8581BF8D29EA2000424EB992BCA8E00986F107C22489D006F729D2E3 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll 12:06:56.0459 0x0940 shpamsvc - ok 12:06:56.0463 0x0940 [ 2339F6B45E1D863B1D327F3AFD75A675, 03304ADC42EF6E8F671C8AA78A0D3E40408D870FBF2DA2B31A1727F86EF8F213 ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys 12:06:56.0469 0x0940 SiSRaid2 - ok 12:06:56.0473 0x0940 [ F520D50AD7266ED31D25DF4C8EA6BC2D, F68CF9EFB8319E59A8D9C24A36A198185DD79CBACD14510F5450F0024F0CD4D3 ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys 12:06:56.0480 0x0940 SiSRaid4 - ok 12:06:56.0486 0x0940 [ 9C5AA4F37CE79CB0C04516C51A02D753, 3904188973F74113701C0C3AB8C153FB1E2F874CFA5A463E799CE3BDCEE60745 ] SIVDriver C:\Windows\system32\Drivers\SIVX64.sys 12:06:56.0495 0x0940 SIVDriver - ok 12:06:56.0505 0x0940 [ FBEB3BE7765B6C27891E9D1D8CE7F626, BC116E67268C8AA37C1EFA04C796A184C9292DBA771004FFA12F26D6C9619AF1 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 12:06:56.0518 0x0940 SkypeUpdate - ok 12:06:56.0521 0x0940 [ 70A2FD5F5B7B1A5E1146BE45E4DFB75D, 598824F06BBC2E37B9A6474411637C73233C8D2E13AE963C3229279A8519A9D3 ] smphost C:\WINDOWS\System32\smphost.dll 12:06:56.0537 0x0940 smphost - ok 12:06:56.0549 0x0940 [ 15684D78C67B63475EABAB5A6ECF32A8, 46BA6830BC42839E22F600ED591E23611E092C2342702F403553BB0B9177E835 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll 12:06:56.0570 0x0940 SmsRouter - ok 12:06:56.0575 0x0940 [ 9977AFF389C0C32DE419226564886E09, 453ABAB020E3ACD04A45BD05B224C182A47534C23023C4E1AD1903E5377B3CCF ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe 12:06:56.0583 0x0940 SNMPTRAP - ok 12:06:56.0596 0x0940 [ 2334ED0B61CAE7E7B1B454674206CDAC, 4EAA11805C2282E0306A381CF56E4B28D83C68BA1B401BFD512AE70C05C8A4CD ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys 12:06:56.0612 0x0940 spaceport - ok 12:06:56.0617 0x0940 [ F3F0B8CAC1F3E6C3382EAFCE762475AD, 9F2EB373FB9216CDA71965979EE5E18F3AFDD26FF7E0C09DD7C3D880205C2554 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys 12:06:56.0622 0x0940 SpatialGraphFilter - ok 12:06:56.0626 0x0940 [ 83E82B0E292DCDE4C75B9241BF0FB300, 494D2FD4CD082CC416CA5FF1ABE06BDC65A769F371CF0E18AD25C380B45AEE32 ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys 12:06:56.0633 0x0940 SpbCx - ok 12:06:56.0649 0x0940 [ 10CD42898C9E4849193E78A87337B2E9, 7C4FCB36EE1AF92C6962F14AE6DEF2CB154468EC3963DCDB9BDF8398C98B475B ] spectrum C:\WINDOWS\system32\spectrum.exe 12:06:56.0676 0x0940 spectrum - ok 12:06:56.0693 0x0940 [ 29D813B5D84BC2C26BBC607CAA57A675, 2C4D5F4E2F7B6580E22ABF67690B0D32CAF5063DEA79E6F57E565782973F3990 ] Spooler C:\WINDOWS\System32\spoolsv.exe 12:06:56.0718 0x0940 Spooler - ok 12:06:56.0813 0x0940 [ E910861720DE6EDFB5CC6158CE3C7E17, 526BA8EEB9EE5312FEC39753D728E05F49AD81132346A354C95D4D4938001E2B ] sppsvc C:\WINDOWS\system32\sppsvc.exe 12:06:56.0897 0x0940 sppsvc - ok 12:06:56.0911 0x0940 [ 36EAC4FE629FC036632F13EC14788FD1, 6AEE37816306FE46FA99EADB23E98CE6A6674C11ED847F1F5575926E26B09F9A ] srv C:\WINDOWS\system32\DRIVERS\srv.sys 12:06:56.0927 0x0940 srv - ok 12:06:56.0942 0x0940 [ A84B05C7C2A233497BE1D518A662C326, 85B291B6783AD48F2111B46050311A553BE6D6A7C3D90861DC010FA65730D2B5 ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys 12:06:56.0964 0x0940 srv2 - ok 12:06:56.0972 0x0940 [ 0351B28EEDFBD6C8CC69A7224A098CFA, D1D08D63F773CAEEA66585D090C073C0748AE96A2AAE8487E4B8BA54F7E59558 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys 12:06:56.0992 0x0940 srvnet - ok 12:06:56.0999 0x0940 [ E95A6C339AE68515897B2E4C6B0842CA, 29DD7E83CD68432EAE4A7ED92CDA40AA52028F5FBB52152F0A1C752B572C2684 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 12:06:57.0020 0x0940 SSDPSRV - ok 12:06:57.0026 0x0940 [ FBD45746B2EDEECA10CCA6A861F8049B, 34383B0A07A93E0FA89CA32CD45AC5061F73723B2A9E0BF4AF93A53F70F1678E ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll 12:06:57.0040 0x0940 SstpSvc - ok 12:06:57.0046 0x0940 [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys 12:06:57.0053 0x0940 ssudmdm - ok 12:06:57.0130 0x0940 [ AE1918EED1E4925778B92061CC2B8D18, 21B3D1685906BC4BA3C8A54C40ABC631F2F312926111BCE48AFEA8B96942DF22 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll 12:06:57.0229 0x0940 StateRepository - ok 12:06:57.0259 0x0940 [ 90E22D7CDE08E07446D238A569BCAB7C, 3D4F413D0B0C9CF28D06E0476F24AC6441C8678DF786D9971B39C91C9F9B8020 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe 12:06:57.0286 0x0940 Steam Client Service - ok 12:06:57.0290 0x0940 [ D40C589F80EB1C511263D0547C0259AE, A0236F6BB515AE006CC4C9F40FCCE250407888757A3646BB4BCB59EF8EEF1311 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys 12:06:57.0296 0x0940 stexstor - ok 12:06:57.0309 0x0940 [ F83F43CD328E6CEEAAC27612F3EB1FF5, E3D35E5154CD228301806706E6EADCA36E9113EAF44BC06E3C43B2E902187326 ] stisvc C:\WINDOWS\System32\wiaservc.dll 12:06:57.0332 0x0940 stisvc - ok 12:06:57.0338 0x0940 [ 576A818562069B1E091CC719C143AED2, 48880CF4D33033E9A6024C2A0AD673AFBCE400C74574913F8E24717BA6BADE7C ] storahci C:\WINDOWS\system32\drivers\storahci.sys 12:06:57.0345 0x0940 storahci - ok 12:06:57.0350 0x0940 [ E5F703788DFA05411F1469E96838F438, A7E8D2DC23E23EA52B068C71D9387E69FF49798A27CE0243A994A2B1B09FA042 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys 12:06:57.0356 0x0940 storflt - ok 12:06:57.0360 0x0940 [ 0D0128244FF55EAD3F878D3FE542DBA5, 4FCFA1B2113E07264A71A22298CA6E9FDC2AB722E0AE184A8F5656C18113A858 ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys 12:06:57.0368 0x0940 stornvme - ok 12:06:57.0372 0x0940 [ 3A62FF78619258E6126C5C4B4CC82C8E, C72CC295680B35E0EEE5A5310E0241E2FFE0E540BFAA49C35C06AA882229C1CD ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys 12:06:57.0381 0x0940 storqosflt - ok 12:06:57.0395 0x0940 [ 212CB512B785E218667CCA56C4BFD71D, 5FD4CFEE5AB2187D928632076E6AD5C2C53D66884479C4D34930DCFCA3CCEE34 ] StorSvc C:\WINDOWS\system32\storsvc.dll 12:06:57.0419 0x0940 StorSvc - ok 12:06:57.0422 0x0940 [ C6097966F8EA3B288070CDF7C3C8C3E8, D12C4AF3E54DCE1E5DC9C8AA0E83420F481DC0165A7F7845083A85BABC102D37 ] storufs C:\WINDOWS\system32\drivers\storufs.sys 12:06:57.0428 0x0940 storufs - ok 12:06:57.0432 0x0940 [ 3DC3B17E92DA02E36B4138733DF6C1AC, 398F20B6D6DAF6DA950C149F63F3B23864E1478119BFE53218C220CEADEC800D ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys 12:06:57.0438 0x0940 storvsc - ok 12:06:57.0441 0x0940 [ D284AB2CA6C30317D142D38CE1F848BE, 4C9EAE174F5C673CA550C9382E85CE7DAF5DC9965495BAB09078B634A4CDD4FB ] svsvc C:\WINDOWS\system32\svsvc.dll 12:06:57.0453 0x0940 svsvc - ok 12:06:57.0456 0x0940 [ 2BC4D0EBC2467FE90302AE0AFAF23768, CF8BCC9CA1FBA8407FD044613A2497BEEC641DE463B076F0ED1FA7674C202ADE ] swenum C:\WINDOWS\System32\drivers\swenum.sys 12:06:57.0462 0x0940 swenum - ok 12:06:57.0472 0x0940 [ 13985DA558FBCBFD9108A2CACB5FE494, DD457A73E82147AA90C36D695A47E862FF90D96FB1E22760FAB5780F7C332A46 ] swprv C:\WINDOWS\System32\swprv.dll 12:06:57.0493 0x0940 swprv - ok 12:06:57.0497 0x0940 [ 572F81CF08972D53BAFFC2A110A2A586, D9AF8EBB31CE097849F93FC8C0F06178B2E1CA8C48D08BBDD85174CCD64A16D6 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys 12:06:57.0505 0x0940 Synth3dVsc - ok 12:06:57.0524 0x0940 [ 7C29BBF63178BB6788AD1C2B231150A5, 5114AC1260C5447D3B21C7C56D825C1E77FCE388C5630D0200C8256F69EFA6B4 ] SysMain C:\WINDOWS\system32\sysmain.dll 12:06:57.0553 0x0940 SysMain - ok 12:06:57.0562 0x0940 [ 97E0FD613D031EAA73E8AD259169AC22, E86E9B9C18AF2E79D7CF80B177A12D89418CDBD3CBB74307809DD0377408DB82 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll 12:06:57.0576 0x0940 SystemEventsBroker - ok 12:06:57.0582 0x0940 [ 7750219DFABC38261575B6CEFBF84EC6, 50DF85E34AF7C1343281AD0EF34FD94AB0E279DA5C61976ABA0135B8F013C543 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll 12:06:57.0592 0x0940 TabletInputService - ok 12:06:57.0600 0x0940 [ C1C6A802C2A9A57029D4347E251F4D18, 9F75B7F003C829FFDB2CDC98231D32FE988754D23873048FA4F6EB82ED1DCED4 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 12:06:57.0616 0x0940 TapiSrv - ok 12:06:57.0659 0x0940 [ 02481DA7952E87F0EF007B54E0216DA8, E32BD56991560F608C843AF1CC6E4885435D8B13E9EE0003450C4B87D6CEF29D ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys 12:06:57.0711 0x0940 Tcpip - ok 12:06:57.0754 0x0940 [ 02481DA7952E87F0EF007B54E0216DA8, E32BD56991560F608C843AF1CC6E4885435D8B13E9EE0003450C4B87D6CEF29D ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys 12:06:57.0804 0x0940 Tcpip6 - ok 12:06:57.0811 0x0940 [ 1C35A5C62D110346379C55E39A3D547C, 5BDBD593AB51ECA5A6B703E86F300E3B2B153E128BEB9A006ABD827AE726BD62 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys 12:06:57.0819 0x0940 tcpipreg - ok 12:06:57.0825 0x0940 [ D74756DD1518D28A09CDA99696273FA4, F01DDF8CDBBC70BB086970C324E60CF7A1828CA6DE5A4F5B1BA4686BC31C4058 ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys 12:06:57.0833 0x0940 tdx - ok 12:06:57.0837 0x0940 [ 96A35CDBA661D41C5A3914257CA1D200, 691ABBAA99C673E7D0B81D811BCC60976C3EC050F2B39B35B87A3BCC211F119A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys 12:06:57.0843 0x0940 terminpt - ok 12:06:57.0863 0x0940 [ 0B5C6D1683CDE89B3488326C60EA6EF2, 3B822CF005FA3002F27FF9BF39E7E133987230DA3481CFCF99F3B2B6B373A718 ] TermService C:\WINDOWS\System32\termsrv.dll 12:06:57.0893 0x0940 TermService - ok 12:06:57.0897 0x0940 [ 6568EF1B30101979107055B7E515EE58, A318082E5FDD79C9F85E8C00A78EBFA0EC44B1046976E85633DC7BD123DA38B9 ] Themes C:\WINDOWS\system32\themeservice.dll 12:06:57.0909 0x0940 Themes - ok 12:06:57.0918 0x0940 [ 2ABC11CFC2F03A919AF78A6E3E29C570, 54D91F89993A0FF090E2213EED92DE3659DCB693FBDA5932E31C6D6D7CFC8E80 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe 12:06:57.0934 0x0940 TieringEngineService - ok 12:06:57.0947 0x0940 [ 4F9A5CE9F3C75AF1EE4B00D5E69F7CF7, 5FEE41C10629E89BD372E5D6C05A78FC0F2C394F4DE7C70AACC8720C6C6590DA ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll 12:06:57.0969 0x0940 tiledatamodelsvc - ok 12:06:57.0975 0x0940 [ E59D4F92FE11B47AB727C6D192CC977F, 1DA06663889A20A1B22DDF90E5C99A5668023C0B89E252F3E820C0D1964B1948 ] TimeBrokerSvc C:\WINDOWS\System32\TimeBrokerServer.dll 12:06:57.0986 0x0940 TimeBrokerSvc - ok 12:06:58.0005 0x0940 [ 5379471B971D29EFCECBA87200C9FBFC, 7621258DA5EF0F4B2FFC344BCE0B6442E0AEE6BA795B65EBB5786D7A7C208A1F ] TokenBroker C:\WINDOWS\System32\TokenBroker.dll 12:06:58.0036 0x0940 TokenBroker - ok 12:06:58.0043 0x0940 [ F76A92975340DAA99939DA297D677EA8, 51DA87E921BBA21BF39D7D9B691CEF8B1D2BCE2BBB0BA5B3C12B7E98CB5C702E ] TPM C:\WINDOWS\System32\drivers\tpm.sys 12:06:58.0052 0x0940 TPM - ok 12:06:58.0057 0x0940 [ 85E0D4431D61675A94EA99C9E1F56436, 9FA750703E04D20A62DBB0185CBDD70AFC4573FB65F86E61AAF7CF7A7D8E1E3E ] TrkWks C:\WINDOWS\System32\trkwks.dll 12:06:58.0068 0x0940 TrkWks - ok 12:06:58.0073 0x0940 [ F21A69013A67B372675F523262AC1E33, C3F910E375C0F4B7FFA6F6D755622FF6B0CAE36DF691C938DE177C94815FE3C8 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe 12:06:58.0083 0x0940 TrustedInstaller - ok 12:06:58.0087 0x0940 [ 9856BCCD1CD5DE4D17E8DBBA7CEFC688, F4B532DCE6F4728092848FE7B2FC05AB921EC7B3FDD7E62AB40EE0029C008398 ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys 12:06:58.0094 0x0940 TsUsbFlt - ok 12:06:58.0098 0x0940 [ 837AD2B941E721BCCEB7EF137E2DEE18, 84BE22616A50467B1957434C8BD19C8B0FC3B21CD77FFB8E16A09347CEAE0F4E ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys 12:06:58.0105 0x0940 TsUsbGD - ok 12:06:58.0110 0x0940 [ B3142C6118703E98EB0510CF7B43D0F2, 40FDCBAA2AD93026AD479BF8C1B4EE7A4E2E65590608B6B1C5DEB3C4716E5C03 ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys 12:06:58.0128 0x0940 tunnel - ok 12:06:58.0133 0x0940 [ B097B77121A057AB6D70C647636978D4, 10F78A18AC898CDD0FA91D6FA29B8B45C6D8F6CE65B064C39256EB20FC6CD085 ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll 12:06:58.0143 0x0940 tzautoupdate - ok 12:06:58.0147 0x0940 [ B4C846ABD462558D45CA578C855759C3, E0F0DD39A6C101C2209CA46EF2B5A5F4559843C9EE37CC08ED78D9E124A566D2 ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys 12:06:58.0154 0x0940 UASPStor - ok 12:06:58.0159 0x0940 [ 5C2C0296D9EE7DC92A3F14642FBE656D, 94A7D549EC53C71095AD8DE4DB8F846D1DB3438FE2679E41DCAE62C34C0654DD ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys 12:06:58.0168 0x0940 UcmCx0101 - ok 12:06:58.0173 0x0940 [ 8BB64E04CD97AD8C68543181D93E2AFC, FBA2FB9A9906721BAD42CDFFCCE0234AF3F72B83E2571E526801F19173B7C9CE ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys 12:06:58.0184 0x0940 UcmTcpciCx0101 - ok 12:06:58.0187 0x0940 [ F083A400FB9CB8ADD1783848CB1C76F0, 7E543E5F81C04AF486ACC08B94F785B9702B743C96079241925C385BF8411EB9 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys 12:06:58.0196 0x0940 UcmUcsi - ok 12:06:58.0202 0x0940 [ 5D4EAF3D0911338CB8FDB088386D6DCA, 1AC5B494C39570E66C4D4F867C6B8E37C174FB5D67C2865B07247122F60F8895 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys 12:06:58.0211 0x0940 Ucx01000 - ok 12:06:58.0215 0x0940 [ 384E1F0D84B465820416338E52FE7C2B, 8F82778332EA1199987BA569536CBED8FEAF5E9D920321B0C9DFCBDDD91EEA35 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys 12:06:58.0223 0x0940 UdeCx - ok 12:06:58.0231 0x0940 [ C82BE75239D412057C9E3DB1785680C6, AE712E40440F5725DA41C95C3E558B5E9ABB17C55B70297DD40D7D1BDA7CE45D ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys 12:06:58.0250 0x0940 udfs - ok 12:06:58.0253 0x0940 [ CCDF6EFF952BF3BF34DC17600F479397, 2A2009B3C4BD1A44F1C6E334CB0A7DD02443BCE1EB48837C1C70A2A04CC7C54A ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys 12:06:58.0259 0x0940 UEFI - ok 12:06:58.0266 0x0940 [ 00BEF71C45FD6B06E7525E7B31EFA88C, C0BDE8CB41BF9A34E395EA86756637E4CD6B88EF1C842364ECA639948D6CD59A ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys 12:06:58.0277 0x0940 Ufx01000 - ok 12:06:58.0282 0x0940 [ 9450AB15C30CF7D1F23C8A42E778C3A2, E62455008ED5B7220AEE62E0F459A67E26FB2878349ABA5AAF0164C2E7A8C0E9 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys 12:06:58.0289 0x0940 UfxChipidea - ok 12:06:58.0294 0x0940 [ CEE12C7A689BDF448715024A7E0EB9C3, EC48E1469800E34A71C8A97A6F2F0B7C67385BCB8438844E6967DE0A82E39B94 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys 12:06:58.0302 0x0940 ufxsynopsys - ok 12:06:58.0307 0x0940 [ 5A2F610B31CC3FD23D3E20C1D5F1EF52, D470B7C1CAE066C2DCDBA47001913FB1A7C9CC5B200FB8324DB896B641C1A132 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe 12:06:58.0317 0x0940 UI0Detect - ok 12:06:58.0320 0x0940 [ F39ED750EDF5948FA8CD99D1F4EC9372, AE42AE50DE09F26D3CA4ACDCD5ECABD59D26926707030F0532A885266FE83EF9 ] umbus C:\WINDOWS\System32\drivers\umbus.sys 12:06:58.0328 0x0940 umbus - ok 12:06:58.0331 0x0940 [ 55984D4E64C2F8E4223542CBCC15EDEB, ECBC832FBBA6AFCAEDEBB2728FA4A6DDCF52A6421929E72CA29B61CDBED840DF ] UmPass C:\WINDOWS\System32\drivers\umpass.sys 12:06:58.0337 0x0940 UmPass - ok 12:06:58.0345 0x0940 [ FBEF4641E3E08A03CA84AF5C393CA86B, 9A14A0FB645AB6DD0B49F3A14FBF38FECC65796F2503324E93994113CC7AD52F ] UmRdpService C:\WINDOWS\System32\umrdp.dll 12:06:58.0360 0x0940 UmRdpService - ok 12:06:58.0382 0x0940 [ 5B17D5E9FBF65ED93078DEB687357BAF, 00BC68F16E36681254E72D8D39006F695D38246EAB6ABC6F40E5305D5ACE26A1 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll 12:06:58.0416 0x0940 UnistoreSvc - ok 12:06:58.0428 0x0940 [ BBB6BDBE5ADCE6F87F70623D5A1EC5BC, E8BD5804FF82417890A9D1A44096B174E81A8C7AD3059B1F0C62740E0B39D137 ] upnphost C:\WINDOWS\System32\upnphost.dll 12:06:58.0454 0x0940 upnphost - ok 12:06:58.0458 0x0940 [ 4D23214CB8B1C36B82061280EB8FDAB3, 387C01A7F9D8F89ED894EDF894AAAF8830DD7C90DF2F12A2CB4C4E9C7CB773BE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys 12:06:58.0464 0x0940 UrsChipidea - ok 12:06:58.0468 0x0940 [ 4329D880DB96B504F0DDC991A7374CCD, 1486BEF2C03ED281B24A17D3C18FEA2360E37A6B46D1A67D4690CD871B0A13DA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys 12:06:58.0474 0x0940 UrsCx01000 - ok 12:06:58.0477 0x0940 [ 93FAD0AC5879F274FA248A49E3F3EA33, D936F408E23040B33F30AB3B43D8B8BB9F3CCF2549E821F4C47357987AFF386F ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys 12:06:58.0485 0x0940 UrsSynopsys - ok 12:06:58.0491 0x0940 [ FC318082D0793B76C766A8DFD4C247C5, F547C643A16D580BD96BC20DC901A8210875812EDABD57DD65F20A915A877CB3 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys 12:06:58.0501 0x0940 usbaudio - ok 12:06:58.0506 0x0940 [ 6B09AA6A04C8261E787B6523229E7159, F97BED424E988AC6272D51025FD0D3180E89BAF0FFC83DAB609774D6269B353A ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys 12:06:58.0515 0x0940 usbccgp - ok 12:06:58.0519 0x0940 [ ECE3AD18B4C22ED0C4AB1A2AD9AC32C8, 2062D400305075E886CF2C9D710A1C48B3F4AD48E7A75A77C66547357E96CB6E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys 12:06:58.0529 0x0940 usbcir - ok 12:06:58.0534 0x0940 [ F8BCB536866474C6D8008F4C69B778A1, F86F4330DE2F50D48559C1ED46168ADB8F6AA7C8FE3834FFE00085C1783C5750 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys 12:06:58.0541 0x0940 usbehci - ok 12:06:58.0552 0x0940 [ 1F723DA014062DBF3288B408A7611845, 0CCC9360259E6FBC510BBF69AE991A53A92516023AAC32C60A44BD3B43371C66 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys 12:06:58.0566 0x0940 usbhub - ok 12:06:58.0579 0x0940 [ 0939AD44244AA9D348187015083E17DF, D48C8032333D30019BC5FD4BAF97A2AB1A80488D4881F3437C3D5341DE5294CA ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys 12:06:58.0594 0x0940 USBHUB3 - ok 12:06:58.0598 0x0940 [ BE6ED98FD0D3FE5FB11762AD7CCD6C96, 54C6C929CA55EA6770474F7E230190FC7574C1FA52437B564B3B5FA4D6106D8A ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys 12:06:58.0605 0x0940 usbohci - ok 12:06:58.0608 0x0940 [ CEE43CD5357DB8786CE6E2C430841AE4, 50F4629AE488A12D18EFFAD486D2F95545049AB1F6A3248BA44D2132EEC9A653 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys 12:06:58.0617 0x0940 usbprint - ok 12:06:58.0621 0x0940 [ 99F0738B320B7A8D11351A32F68AA5F1, DAA887C31E3F56245C15F04044C12B6E832FA7E837F4107376A6F8D8E3A99FEC ] usbser C:\WINDOWS\System32\drivers\usbser.sys 12:06:58.0628 0x0940 usbser - ok 12:06:58.0633 0x0940 [ 67E26F56CF7EACCBD9C9F75343A3D7C2, 210FA280897CCCB2458E9E683A8B4CA8A5DF9606B54F8B9CE05CA4AA6FD810AB ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS 12:06:58.0641 0x0940 USBSTOR - ok 12:06:58.0644 0x0940 [ 7BA802C9F73A84B75BB22538ADA495BE, 7D97E6305168C4CA86AB9BD5B63300156DFE97032251CB83DB1D4C4DB9C28DC8 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys 12:06:58.0652 0x0940 usbuhci - ok 12:06:58.0659 0x0940 [ 7DB399A665C703B053930A4B5FFBA0E7, 82E4A0CD17A251D1FCD75EA2548F16BE29B47A8B83F5C27D776748FE75024FD4 ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys 12:06:58.0672 0x0940 usbvideo - ok 12:06:58.0681 0x0940 [ 50E70B3A95138AA4A30B095270EE0DE6, 9B7072C36230102A089C4A6DFE1980CD9DB28E566EF02830600DEBAF3AAD31C7 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS 12:06:58.0693 0x0940 USBXHCI - ok 12:06:58.0722 0x0940 [ 3156FFFB2B3BF5375814F777D343AD9F, C4E63043EB9D9227CDD487608AF9BA25C755D85E5FF8E63C2079D68CCC79E4BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll 12:06:58.0768 0x0940 UserDataSvc - ok 12:06:58.0787 0x0940 [ C0E60CC6D48013728C7E4168D61A0B39, CA283312E9669BCC74A3B5E6332502D1CAA7148C049B94AF3996F3C7CD2676EF ] UserManager C:\WINDOWS\System32\usermgr.dll 12:06:58.0821 0x0940 UserManager - ok 12:06:58.0835 0x0940 [ 65D70A530105E0576641493D6292C9EA, 1059285060E700449C6BB99DB0E5E4FF4A32215323F45C11DA7617785F073276 ] UsoSvc C:\WINDOWS\system32\usocore.dll 12:06:58.0858 0x0940 UsoSvc - ok 12:06:58.0863 0x0940 [ 9936F9E94C6E3F47A158D7BFF020575A, D28F6BBCBA07AD8FC17C99D701A0C9367270C4A504BAAB7B840931BBF333D65D ] VaultSvc C:\WINDOWS\system32\lsass.exe 12:06:58.0870 0x0940 VaultSvc - ok 12:06:58.0873 0x0940 [ 370DDBA4C7ACB60910EE4E504E527181, 656D90FB7C24487C6EBBF64A5019B858D9FEBC7B82C62FE1E5EE050ABFFA9CDE ] VCSVADHWSer C:\WINDOWS\system32\DRIVERS\vcsvad.sys 12:06:58.0878 0x0940 VCSVADHWSer - ok 12:06:58.0882 0x0940 [ C1EC9211C7759D2487FD30934AA3EE96, 6914BB8B44550DFE75E5A3772E93ADF8459EB621CA400BDD9B7E3185A09B6F9A ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys 12:06:58.0888 0x0940 vdrvroot - ok 12:06:58.0908 0x0940 [ 374CD93271184F04988FDC1C25B3E855, 09727093C5F7B258867C16D41F7F9835BF549CC339288BFE01A8F34AC7E93E23 ] vds C:\WINDOWS\System32\vds.exe 12:06:58.0935 0x0940 vds - ok 12:06:58.0942 0x0940 [ C83F3BC00651448DB127D497CF955089, 31B8838CEED08E7D5DD8635A805A8010798BD9B10A3775FAFDB576FBD7303D39 ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys 12:06:58.0952 0x0940 VerifierExt - ok 12:06:58.0966 0x0940 [ 0E12F5F6B1C813D17AFDA197C4394423, B0AFDFE0E12633C6D984DA366197BE09ED2649BAFF525FA0DE84701E5B335DB9 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys 12:06:58.0984 0x0940 vhdmp - ok 12:06:58.0988 0x0940 [ 1AD096A5C00E522398D0092D875A8CB6, 6959FCD6DD2115CD293DBD4BCD6D1BA0AE4F7495A9BBB48F7388384EEABB38E9 ] vhf C:\WINDOWS\System32\drivers\vhf.sys 12:06:58.0996 0x0940 vhf - ok 12:06:59.0001 0x0940 [ EE9A22CFD9AEDD7B52F98B0272494609, F668131BABD048857F011A471936B52EDF0F2A42CB6000ACB4E0E43F88782AAD ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys 12:06:59.0008 0x0940 vmbus - ok 12:06:59.0011 0x0940 [ BFBD0895926FD98A03AD6BB845B569B7, 5B7913ACD6CC132B2F36B079BC5F897C21884A7F21046B8996CC3D74C4B6DA4C ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys 12:06:59.0018 0x0940 VMBusHID - ok 12:06:59.0021 0x0940 [ C123C97D351C56C75FE5335AB18255EE, 67315E332E863E5C233BA113826A5DEEE08C1A0A3358E6AC21F25DC5EAC86D07 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys 12:06:59.0027 0x0940 vmgid - ok 12:06:59.0035 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll 12:06:59.0048 0x0940 vmicguestinterface - ok 12:06:59.0055 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll 12:06:59.0068 0x0940 vmicheartbeat - ok 12:06:59.0074 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll 12:06:59.0088 0x0940 vmickvpexchange - ok 12:06:59.0096 0x0940 [ F8F380ABEAFBC589FF6D2D96267C1210, 0CFA3D9E88D984BAFED8E08102BF4DC4077856C6C8C1EBD8D4C4D0D49B673F44 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll 12:06:59.0112 0x0940 vmicrdv - ok 12:06:59.0120 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll 12:06:59.0133 0x0940 vmicshutdown - ok 12:06:59.0139 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmictimesync C:\WINDOWS\System32\icsvc.dll 12:06:59.0152 0x0940 vmictimesync - ok 12:06:59.0158 0x0940 [ A9C889CFDDE704A15CDC639C3D6662B6, 9EE41886D9E8DFDB512B821EAFE1857E83A3C3318EB852A2C110DB8184346AA9 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll 12:06:59.0171 0x0940 vmicvmsession - ok 12:06:59.0179 0x0940 [ F8F380ABEAFBC589FF6D2D96267C1210, 0CFA3D9E88D984BAFED8E08102BF4DC4077856C6C8C1EBD8D4C4D0D49B673F44 ] vmicvss C:\WINDOWS\System32\icsvcext.dll 12:06:59.0193 0x0940 vmicvss - ok 12:06:59.0197 0x0940 [ 0AB9C264F13E2A070A8CF10EDD099ED2, 2E7EB4EE8DCBBCA497CC0E7F4BE057627E9702B6FAF56A7DBCA1325236C880EC ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys 12:06:59.0204 0x0940 volmgr - ok 12:06:59.0213 0x0940 [ 6EE608257C1137A25B402EF8FC77E83A, 3AE684EBA32563468AD917155C93220F938460A699FBFC3DB8436F83C0C54209 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys 12:06:59.0225 0x0940 volmgrx - ok 12:06:59.0234 0x0940 [ E3429DBBEA3965BB96E24B16EF4A2551, 0CEE2DEF75C6761DA67AFD3BBF8DEEB1331796719EB84D658B3E517DEC824B49 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys 12:06:59.0247 0x0940 volsnap - ok 12:06:59.0250 0x0940 [ 86E790B503C771E674C7DF8FFCBFEFDB, 634B27C4FA363A2165D3D6929D3B22F41EE06198C579A70D446A48830924467B ] volume C:\WINDOWS\system32\drivers\volume.sys 12:06:59.0255 0x0940 volume - ok 12:06:59.0259 0x0940 [ D640A9761286113E7B53E6AFC23D9467, 33610F561636836B16EBEC354C595E4D5E2140ECF5316582870F1F7E3F2ECB02 ] voxaldriver C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys 12:06:59.0264 0x0940 voxaldriver - ok 12:06:59.0268 0x0940 [ B25589A0892E6DF8CC07E5CB48BFC954, DA29974426EFD4472A3828FA0EF31AD3860AA8068AB66B5F4BE6A412BC3E73E9 ] vpci C:\WINDOWS\System32\drivers\vpci.sys 12:06:59.0274 0x0940 vpci - ok 12:06:59.0280 0x0940 [ AA4466A47D2CA7ECE3DCF5256017DCC3, 83414BFBD3DF1CB7417F0F55709E8180D97FA20A74581C34EAAFF667FBEBFD93 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys 12:06:59.0288 0x0940 vsmraid - ok 12:06:59.0314 0x0940 [ 0BB73BF6FDDD19DE3DE9377EA95E4C64, 74B6E612F9E009A5E43B603BCAD854F3711F6C8A7ED0328B1E3A9B2D4C9EA342 ] VSS C:\WINDOWS\system32\vssvc.exe 12:06:59.0358 0x0940 VSS - ok 12:06:59.0367 0x0940 [ 98BB6C9AD39D8F2E883093F28282FAEC, 63F4036A1DB23C20AAEEC1CA8ABDE9B46FA09A55EA4E5DB0C0B5D6D58ABAD62F ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys 12:06:59.0379 0x0940 VSTXRAID - ok 12:06:59.0382 0x0940 [ B47026E109828102266CBE2F5F9AD113, 28C76B34C48BACEA267A208CC758BB55539323B16300E869AE71B6A99A849AB5 ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys 12:06:59.0397 0x0940 vwifibus - ok 12:06:59.0401 0x0940 [ 799ECD541A9B2764B36A22A095885365, E255E74682927D662294AA3F88FDA211EEE603466EB264E8941C3BACC6A0E530 ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys 12:06:59.0418 0x0940 vwififlt - ok 12:06:59.0421 0x0940 [ 82CA088A33517D1C8571D6850CC13D7E, 0401A08EAF36DB393B74FE8693C60F62EDE10BBC9300C76812C7D01B6AE9A051 ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys 12:06:59.0436 0x0940 vwifimp - ok 12:06:59.0448 0x0940 [ E75460AC4E936BFC0703021DB0BB17B8, D9985C3206B503659FD2F4EE7FD0B9AF8CB2DE821BFD68B13C9E3BD9CE5AEF6B ] W32Time C:\WINDOWS\system32\w32time.dll 12:06:59.0473 0x0940 W32Time - ok 12:06:59.0476 0x0940 [ F0F477541F7AF67CC05DA1CF4921A500, F7DD2F49B61C484596DE3893683B1172A138386BD71F54BFCF37A31005C7368F ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys 12:06:59.0484 0x0940 WacomPen - ok 12:06:59.0494 0x0940 [ A0957CBC1C054A87EE7A65A994102A96, CB6339F3F67D0E33C26E6756F88869574B84426B20C907E094F83B9DC5E36A3E ] WalletService C:\WINDOWS\system32\WalletService.dll 12:06:59.0512 0x0940 WalletService - ok 12:06:59.0517 0x0940 [ FDD16EF9177A8A2EF08A7FA3D3EFAA13, 148F34CBEEF0CE87103C76294AE5BE318F990A5FE7A5EDE6F47D85361248582B ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 12:06:59.0534 0x0940 wanarp - ok 12:06:59.0537 0x0940 [ FDD16EF9177A8A2EF08A7FA3D3EFAA13, 148F34CBEEF0CE87103C76294AE5BE318F990A5FE7A5EDE6F47D85361248582B ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys 12:06:59.0552 0x0940 wanarpv6 - ok 12:06:59.0578 0x0940 [ EA0524A2A01792796EC80AE2FE08307A, 68CC0F3451C6797222411C276376C7741C96C45E628DD77FB1FB17C10DC0EA8A ] wbengine C:\WINDOWS\system32\wbengine.exe 12:06:59.0619 0x0940 wbengine - ok 12:06:59.0638 0x0940 [ 39A0B8DD517E3CBF0A6EED5A12BB182F, A25E7D3DC4DF9D0439627CFA0C4AD2292FDF29F4EFC832AEA5A2F774766F76D7 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll 12:06:59.0667 0x0940 WbioSrvc - ok 12:06:59.0672 0x0940 [ 923200B78F5284D674A3712204D0FEFA, 4B00785D2E9D12052C2C8E80C568606E0148AA230285D4018A0A603E16224CEE ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys 12:06:59.0681 0x0940 wcifs - ok 12:06:59.0696 0x0940 [ 9DDD15FCE0BE61F25C20CC7E2A96B77C, 072E6B3D86CD4F4A55305986E3848A47B7E8000FF5AEFE8A206FD4F7BE958872 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll 12:06:59.0722 0x0940 Wcmsvc - ok 12:06:59.0734 0x0940 [ 2C396871F724DDF871A2EF4CADE5151D, 8CAD8A393F0CC447432E1BED21A691E25356F7DBC06E3887138A6F86CB1D656D ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll 12:06:59.0751 0x0940 wcncsvc - ok 12:06:59.0756 0x0940 [ 1737BEF60CA384423CE4B32AF1C2BFFC, D61353D3B2EAEDFDCBB5DB3AD27E76396CC7755AFF01233307EAA1967493DE63 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys 12:06:59.0764 0x0940 wcnfs - ok 12:06:59.0768 0x0940 [ 38130C1C5FE0E08820EE57E1B087B659, 3705AA4699D4C402C0BBC5BC4E1EE67CB4A4B9C27702E88952A76891C3A3F496 ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys 12:06:59.0774 0x0940 WdBoot - ok 12:06:59.0791 0x0940 [ 0C6CBF3490EE5F0D62B5820568CA30B8, 97EDEC84DA72A900D7740B8763DDDAB600628F3F1E1DDE1212383C2E60FDC77C ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys 12:06:59.0810 0x0940 Wdf01000 - ok 12:06:59.0819 0x0940 [ F7B6CB0F9ECD28848E2BDACEAB0D9204, B64D91A36600AEBE656F0514AF8653C294DE88054FE6DBB7B1A6D0A23D2A5131 ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys 12:06:59.0830 0x0940 WdFilter - ok 12:06:59.0834 0x0940 [ 501CB5E6999B7336BE5D0D401013D251, D4581E4FD8BE65D611E763AE88D2982A785036B2A93F2A00D3A3A395AB2AD5B3 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll 12:06:59.0845 0x0940 WdiServiceHost - ok 12:06:59.0849 0x0940 [ 501CB5E6999B7336BE5D0D401013D251, D4581E4FD8BE65D611E763AE88D2982A785036B2A93F2A00D3A3A395AB2AD5B3 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll 12:06:59.0863 0x0940 WdiSystemHost - ok 12:06:59.0878 0x0940 [ BF45B43BA47D0FA769CE5AFBF7104F01, CBEEC0E915162BEBFCD2CA9EF72C02E82AFAB2A016F1750A7982975A94599CF6 ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys 12:06:59.0903 0x0940 wdiwifi - ok 12:06:59.0908 0x0940 [ 82A4F22C884B4BAE8B531640859F9871, 1C662557F671FA680E7CC2FC565B198470E421778BD03749CD05B2928568C430 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys 12:06:59.0915 0x0940 WdNisDrv - ok 12:06:59.0917 0x0940 WdNisSvc - ok 12:06:59.0923 0x0940 [ 9066FE8EAB91E15437CB3C43757F2A65, 1F8B3D8C90C7862CCAB91D170F49E7F1D58FABAFA1C8DDDE1796404D1DD98707 ] WebClient C:\WINDOWS\System32\webclnt.dll 12:06:59.0938 0x0940 WebClient - ok 12:06:59.0944 0x0940 [ F322B8E6C5614E7975C8BF34B7A6710E, 299816001856E8C91BFBB9C48D87B7ACBD5A39F6A65147F5AE6EDB3065A893E9 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll 12:06:59.0957 0x0940 Wecsvc - ok 12:06:59.0960 0x0940 [ 04CA184EB5743DE5A2CCEEF2DB2DA8B3, E16921496F57B78A152A103F8D58601C9687360048A6CB51E76A96E3B64CC0FA ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll 12:06:59.0969 0x0940 WEPHOSTSVC - ok |
06.09.2017, 11:14 | #7 |
| ESET Fund - LogfileCode:
ATTFilter 12:06:59.0973 0x0940 [ 0941A50663B7F3BAB62687AC0E03A31B, 8AA98C22332217B3996028461747B88274D49B246FA432DB7B7C169527C75D14 ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll 12:06:59.0985 0x0940 wercplsupport - ok 12:06:59.0990 0x0940 [ 8DF4E4631338E8EE7CCDF7D6DC55D3A8, 043D0AF7FD1073603D8586E0BE9646FE3E8679A317AC18845811856A6E5027E1 ] WerSvc C:\WINDOWS\System32\WerSvc.dll 12:07:00.0003 0x0940 WerSvc - ok 12:07:00.0015 0x0940 [ 4D64719B4819CA22A046EC32809BBD98, 0ABD6C7D039E57F5637E843388FA8D52072237061EB75C7CDEBC9E13A6C8F06E ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll 12:07:00.0038 0x0940 WFDSConMgrSvc - ok 12:07:00.0043 0x0940 [ 3C8F0ABD00E197101DCF43FEF8FB0D76, AF5C68B85EE1503ACD4AEA1D997F816C34293A77791D59A605DC18450B4906DE ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys 12:07:00.0051 0x0940 WFPLWFS - ok 12:07:00.0055 0x0940 [ 2DEB40D6837956CE08A8F9EB3ECA5A01, B40D23E54CDF6BE05D6C5DA536BF6D998E79EDE9C391A42452F9F69EE206EA1E ] WiaRpc C:\WINDOWS\System32\wiarpc.dll 12:07:00.0065 0x0940 WiaRpc - ok 12:07:00.0069 0x0940 [ 75014BF6510D4C6C69EEE5B7743A52AF, 11AEEF4D52C35E5A7006713836ECF1198A53CD02736E792B1C698144CA1363F0 ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys 12:07:00.0075 0x0940 WIMMount - ok 12:07:00.0076 0x0940 WinDefend - ok 12:07:00.0083 0x0940 [ C8EBCFED8FD2CDF725E44AF93016621E, A0B76E55CC535A0F1D79C3C0EC59753086EAB669EC7ADA4F97656DCAD2A69448 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys 12:07:00.0089 0x0940 WindowsTrustedRT - ok 12:07:00.0092 0x0940 [ D318557F9D7CA3836104F0B8ECB1F32E, 6850BBFB4F65167B052F3CA22FD72E9188A14FD2A9CC085861B4BC40CBA34249 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys 12:07:00.0098 0x0940 WindowsTrustedRTProxy - ok 12:07:00.0115 0x0940 [ 61F0D6574577499FB43D9F4870B08A7F, 757ACD4F292C43B04B6428D84A7147DE8E565716D94B6B02F288F3B5E2D1C135 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll 12:07:00.0137 0x0940 WinHttpAutoProxySvc - ok 12:07:00.0141 0x0940 [ 31DDF1D001336B2DCE7DF24E99EF1D04, A1FCABF4A263BFAE042FE7A9F6C15FD9B3D8E985278C32AE8975ECE79B341277 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys 12:07:00.0147 0x0940 WinMad - ok 12:07:00.0156 0x0940 [ 9A26F7834706A6D8C8824EB08FD7C362, 750F6A0759D70BE481C70FE4BB21D18E756A8F0C23A014C2CE1E7729A1E625FE ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 12:07:00.0173 0x0940 Winmgmt - ok 12:07:00.0179 0x0940 [ 2E1A614EFB0523E20860AE7978DDA0A4, E13564690F9977747CA676D3843B467506447F060A5FF6676835A9C7A30BA409 ] WinNat C:\WINDOWS\system32\drivers\winnat.sys 12:07:00.0190 0x0940 WinNat - ok 12:07:00.0234 0x0940 [ 27DAA9AA3E03C1068678D5659461BB32, AFDED6D671C430F296C9EAA73590111D6A8A9FA93DFE0595B90467FFE28EFB35 ] WinRM C:\WINDOWS\system32\WsmSvc.dll 12:07:00.0313 0x0940 WinRM - ok 12:07:00.0320 0x0940 [ 03858B18BB6DF6A400D9FC5153FD28A8, C7AD69B022AEFDDDAFB74CCCDF20AF9CCDBA0097634BBBD07A2EFBA5922560C1 ] WINUSB C:\WINDOWS\System32\drivers\WinUsb.sys 12:07:00.0330 0x0940 WINUSB - ok 12:07:00.0334 0x0940 [ 0BF4A43CF1F3A4D50AFA4561C3B4628D, 2D0B4E7004C8AC8A9EE07E6D5241BF32395CA142BF3B03FA9CF00BC6720A6AC7 ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys 12:07:00.0340 0x0940 WinVerbs - ok 12:07:00.0354 0x0940 [ 2E15586B76465941D1DEE75625B9484E, 609E6BEAFF340A403F50A20D1609D3A8A2C990234064DD154A08C737DE3E0907 ] wisvc C:\WINDOWS\system32\flightsettings.dll 12:07:00.0376 0x0940 wisvc - ok 12:07:00.0414 0x0940 [ E624376E7E7D9AC203113140D9E618A2, 3553D343665194492E38B8C437DE429CEAC135D69EC0CB951BA3E3A7549F673E ] WlanSvc C:\WINDOWS\System32\wlansvc.dll 12:07:00.0485 0x0940 WlanSvc - ok 12:07:00.0530 0x0940 [ 2393C4DB3DF3D19B0B920AD607098E79, D632671247DE3808D9C5B36A3FF173C86BB3AD274D03C851BCD417CE62B3820D ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll 12:07:00.0588 0x0940 wlidsvc - ok 12:07:00.0613 0x0940 [ 24A624FC6DED20C3B7980BD71D6540D7, A1564B903E2B54106E6665B212E4F8E1A90B2B6CB966F5E965BA5602A801B7D3 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll 12:07:00.0650 0x0940 wlpasvc - ok 12:07:00.0654 0x0940 [ 0D6E1347A891607759340B1E55BA2A77, 033DF14920A581FE7E21C6930280AE159B5634F2FEAF79423E8D0B7D46500048 ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys 12:07:00.0661 0x0940 WmiAcpi - ok 12:07:00.0669 0x0940 [ F7B122E8A238354DE344B77216E8D9AC, 3C4F864655CFF786B33333E643AA929B2D2B01ECD56EEEEADE7CEAB38249DA3B ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe 12:07:00.0686 0x0940 wmiApSrv - ok 12:07:00.0688 0x0940 WMPNetworkSvc - ok 12:07:00.0695 0x0940 [ 1AE1076034392218EE89D2744EC2A071, 695C28E2697B12BBD919687176CE082E94887A5D8B6229F163A26F6EDF401C4C ] Wof C:\WINDOWS\system32\drivers\Wof.sys 12:07:00.0705 0x0940 Wof - ok 12:07:00.0735 0x0940 [ 5D9A8A2BB555B743334A096C5B1774E2, 660136C1E8D6CA1F7BD1AE0EC4E28B65527BFE69339589A8E3017EFE2BBDC41C ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll 12:07:00.0783 0x0940 workfolderssvc - ok 12:07:00.0789 0x0940 [ 2AD9CC8445F0E1A8900A9DE123643CD2, A5928B26722DFBB201A32DEF48B25D4BF291815EA68CF50CBE79EEA9260A71E3 ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll 12:07:00.0799 0x0940 WPDBusEnum - ok 12:07:00.0803 0x0940 [ 1FD80CBB192A20375F3664639DEB57B5, 7A4789D4B2F8E289726E1C723DC00D5AC1F8C5E00FB2879C9D0E6DDC97D2B1A6 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys 12:07:00.0809 0x0940 WpdUpFltr - ok 12:07:00.0816 0x0940 [ 3369EF007E43B88EAC8F1789B43D4393, 347F9F7DF980BB739895EDFE72E2E595EF56634330DC63DAA36403AB232B5B5A ] WpnService C:\WINDOWS\system32\WpnService.dll 12:07:00.0829 0x0940 WpnService - ok 12:07:00.0834 0x0940 [ 41403B9466EDA80FACD7713478A56DF8, A71BF9C7A2483FE1F660AC9688FCB38BA2310F16A69EB117C948458364953F34 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll 12:07:00.0843 0x0940 WpnUserService - ok 12:07:00.0846 0x0940 [ DAF4451760B46CB383D287C4FAFFE97D, 658AFE31EF50E934FEDD2E7048257DBFE9E6DE5F1ACDC658B21737391CF1CC5A ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys 12:07:00.0860 0x0940 ws2ifsl - ok 12:07:00.0866 0x0940 [ D4A0661AB0FE542460CA76BFB4FAA2D6, 149F0A0720C47BFFCA68165A46382E5CBB273F48483DBB598CEA320801664718 ] wscsvc C:\WINDOWS\System32\wscsvc.dll 12:07:00.0879 0x0940 wscsvc - ok 12:07:00.0882 0x0940 WSearch - ok 12:07:00.0921 0x0940 [ E1E58C86AE73A95329696C675D8C03E6, EF1497AFA6C472EB6C0C0806F1A82B814FB4E9CDF441C155AEC95735384DF878 ] wuauserv C:\WINDOWS\system32\wuaueng.dll 12:07:00.0985 0x0940 wuauserv - ok 12:07:00.0991 0x0940 [ 455609BF60DA3B57EEAB863DEFCCF14D, F55271C42B7AFD17D01275703719C1F52C21996DB82AC78A70A8A8B62370623B ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys 12:07:01.0001 0x0940 WudfPf - ok 12:07:01.0007 0x0940 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFRd C:\WINDOWS\System32\drivers\WUDFRd.sys 12:07:01.0020 0x0940 WUDFRd - ok 12:07:01.0024 0x0940 [ 9EFE23CA208BF4B613FF4A6028DFAB10, 483D8D8DA578BF3EA5617EAB42457543EC6F97C1977BDD8ABFDF854AE3AAFD35 ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll 12:07:01.0036 0x0940 wudfsvc - ok 12:07:01.0042 0x0940 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFWpdFs C:\WINDOWS\System32\drivers\WUDFRd.sys 12:07:01.0054 0x0940 WUDFWpdFs - ok 12:07:01.0059 0x0940 [ 5068DAA8F67A62E964C9C9F88B159EA9, 09FCB7A817280957D1AD365EF8B46F666C70957238BF9FBC87D51115E1B0FCB0 ] WUDFWpdMtp C:\WINDOWS\System32\drivers\WUDFRd.sys 12:07:01.0072 0x0940 WUDFWpdMtp - ok 12:07:01.0095 0x0940 [ 46D90B7476CDB119C548D970EF271D34, 0C47D8AB80CF55CC10747DFFB65CED1713160BE3AB1DAED234E9BBADACCBD6D5 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll 12:07:01.0135 0x0940 WwanSvc - ok 12:07:01.0145 0x0940 [ FC0147AB34C7CDB2D8A1B29C207F2CD1, 737D40A4BE35AD13C091D8E320FAD3FD7C0C7E41C8B50E48D3C2151712A55718 ] xbgm C:\WINDOWS\System32\xbgmsvc.dll 12:07:01.0158 0x0940 xbgm - ok 12:07:01.0176 0x0940 [ 7FE60B52DD841ED374285B7ED9210222, 0F7743A5A9289E47EE07477313083CE07B46F1C9C5CF83130303A7BAB2F3842B ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll 12:07:01.0207 0x0940 XblAuthManager - ok 12:07:01.0230 0x0940 [ A8BD191F46CC58E45637CB3E262CF0F2, CA65524427ECDB5E1138A5F8E885566064E507BA60FC31E0D9D17B9556CC9ADC ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll 12:07:01.0263 0x0940 XblGameSave - ok 12:07:01.0276 0x0940 [ B10655A4C2EFDC25483D670EF52A4854, 2D9DC81AE73FDFE7F4E395BEC8E806E6BAD8DE0470027EEEC256AC4A4B7C7AA4 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys 12:07:01.0294 0x0940 xboxgip - ok 12:07:01.0298 0x0940 [ E099DED5C602AE4A7ECCF7CD4B1D2E33, 7FDAFFE13B87A8E6AA8721F8905FFF6EF04CAB93009F68EDA862B57EBB04514F ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll 12:07:01.0306 0x0940 XboxGipSvc - ok 12:07:01.0325 0x0940 [ EF83C2EF7F152DFDC6D9F1AEC6FBE66F, 21D4FCD12F9D40D066F05936131A4F7BAB301DD800C85921476EC182B9D27D0B ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll 12:07:01.0358 0x0940 XboxNetApiSvc - ok 12:07:01.0363 0x0940 [ 2E50A379A8E4F6C5D85E87C26C08D329, ADA0C344FE58A3772FFF7417268160E488741C5B2F08CA12ED587AB7F75756F6 ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys 12:07:01.0371 0x0940 xinputhid - ok 12:07:01.0372 0x0940 ================ Scan global =============================== 12:07:01.0376 0x0940 [ EEA8447A2E39A39F66C74BA66C421F92, 7FFC5294E0D0438E7450ED36947AB04D0C84DF4E1C9F2D49340D3BA586FFFAB2 ] C:\WINDOWS\system32\basesrv.dll 12:07:01.0380 0x0940 [ 961599D817655AB85646C7D56684D2B0, 1614D9EE8F02B8253EF54F26B5EE631FF17ED6504713625DBD3554257C7C50F4 ] C:\WINDOWS\system32\winsrv.dll 12:07:01.0385 0x0940 [ 7DD72CBE412C9567661F4B1CE9631FC1, 8D914805CBDAF448C8C132C4C3FEB1D90804F4F485180F7364A75EC5655A4DDB ] C:\WINDOWS\system32\sxssrv.dll 12:07:01.0397 0x0940 [ C81F9707DEA008EED4071B5A39B7C76E, 47FFEF27A479ED6B325B22296B6853D7E57B53E8E712824F3881E510D5C93667 ] C:\WINDOWS\system32\services.exe 12:07:01.0404 0x0940 [ Global ] - ok 12:07:01.0404 0x0940 ================ Scan MBR ================================== 12:07:01.0406 0x0940 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 12:07:01.0457 0x0940 \Device\Harddisk0\DR0 - ok 12:07:01.0458 0x0940 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1 12:07:02.0079 0x0940 \Device\Harddisk1\DR1 - ok 12:07:02.0083 0x0940 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2 12:07:02.0599 0x0940 \Device\Harddisk2\DR2 - ok 12:07:02.0600 0x0940 ================ Scan VBR ================================== 12:07:02.0602 0x0940 [ 964D304E733FC2E55BD0CDE8619B30E4 ] \Device\Harddisk0\DR0\Partition1 12:07:02.0603 0x0940 \Device\Harddisk0\DR0\Partition1 - ok 12:07:02.0604 0x0940 [ F563552DF9CE9A5B3FFC0BD20949CF72 ] \Device\Harddisk0\DR0\Partition2 12:07:02.0605 0x0940 \Device\Harddisk0\DR0\Partition2 - ok 12:07:02.0607 0x0940 [ 76B1930B8FB2078046D67E196BB151FB ] \Device\Harddisk1\DR1\Partition1 12:07:02.0608 0x0940 \Device\Harddisk1\DR1\Partition1 - ok 12:07:02.0612 0x0940 [ 3106DD3D4CDEF8B15D5F2F2F472159B7 ] \Device\Harddisk2\DR2\Partition1 12:07:02.0614 0x0940 \Device\Harddisk2\DR2\Partition1 - ok 12:07:02.0614 0x0940 ================ Scan generic autorun ====================== 12:07:02.0615 0x0940 SecurityHealth - ok 12:07:02.0737 0x0940 [ A15FF7FFA54109281D5742D396271DFC, 2551B6203E594087858FA514FD73DC652AEC45AAAADDFC50240F4AC2BF5C1879 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe 12:07:02.0875 0x0940 RTHDVCPL - ok 12:07:02.0883 0x0940 [ BAEDADCD6509201F82CE5B404AB14814, 8C39C18CE00DB254F370D9C4AA80E88BF67C457240F3D30A58E39DBF9B96F44B ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe 12:07:02.0886 0x0940 IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 ) 12:07:02.0928 0x0940 Detect skipped due to KSN trusted 12:07:02.0928 0x0940 IAStorIcon - ok 12:07:02.0931 0x0940 [ ECB702B8C5650381C0784F1EEABB97BC, 9CC4DDAD2E9AE05A8C5762BA88A13C2B1EE4E25AE98EF01DD041FE35D611DA87 ] C:\WINDOWS\system32\rundll32.exe 12:07:02.0944 0x0940 ShadowPlay - ok 12:07:03.0006 0x0940 [ F2590C253BCFE81E23A4604309B845DE, D3FE8C00A7AF8A230FE6E3EFE47D9BDD38DCC65D68702581F407729C9ACE0F9D ] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe 12:07:03.0059 0x0940 Dropbox - ok 12:07:03.0398 0x0940 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 12:07:03.0809 0x0940 OneDriveSetup - ok 12:07:04.0167 0x0940 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe 12:07:04.0470 0x0940 OneDriveSetup - ok 12:07:04.0509 0x0940 [ 90029F7160037122DA12101C0C8850F7, DE4BFD8E60AC0222EACCA8BAC94562ED2B38CBEF569F8B927CCD197735655AC0 ] C:\Users\Chris\AppData\Local\Microsoft\OneDrive\OneDrive.exe 12:07:04.0540 0x0940 OneDrive - ok 12:07:04.0644 0x0940 [ 7F3D0BC2FE61C249302E0515989C59E2, 18613B1D861D7289EF050EE1C0384FCF70F40FDF7E3CB586D36B5D19A7591F8F ] C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe 12:07:04.0766 0x0940 Akamai NetSession Interface - ok 12:07:04.0824 0x0940 [ 8419F773455D7A7EC572AB1CC69BEA9E, AE859B41D282FF024D3539A775C1B143B22CAB912BDBB3ED86E95F5265628F04 ] D:\WinPatrol\winpatrol.exe 12:07:04.0865 0x0940 WinPatrol - ok 12:07:04.0867 0x0940 Xvid - ok 12:07:04.0894 0x0940 [ CEBA2493B84DF032F55E0135DBFD5B15, 3A9E275A770197D2E5175C867BC0D561EF90C7E9A4CAA064C7799F96A0101B3D ] C:\Users\Chris\AppData\Roaming\Spotify\SpotifyWebHelper.exe 12:07:04.0925 0x0940 Spotify Web Helper - ok 12:07:04.0926 0x0940 Waiting for KSN requests completion. In queue: 9 12:07:05.0928 0x0940 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.11.15063.332 ), 0x61100 ( enabled : updated ) 12:07:05.0930 0x0940 Win FW state via NFP2: enabled ( trusted ) 12:07:06.0002 0x0940 ============================================================ 12:07:06.0002 0x0940 Scan finished 12:07:06.0002 0x0940 ============================================================ 12:07:06.0010 0x0c80 Detected object count: 0 12:07:06.0010 0x0c80 Actual detected object count: 0 |
06.09.2017, 12:58 | #8 |
/// TB-Ausbilder | ESET Fund - Logfile Servus, die Logdateien sehen gut aus. Der Fund zeigt lediglich auf den FF Zwischenspeicher. Evtl. hast du mal eine Seite besucht, bei der man sich unerwünschte Software oder einen Keylogger hätte herunterladen können. Reste entfernen
Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird! Dann wären wir durch! Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst... Vielleicht möchtest du das Forum mit einer kleinen Spende unterstützen. Hinweise: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Cleanup Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst du diese bedenkenlos löschen. Virenscanner + Firewall Vorab sei erwähnt, dass man niemals die Schutzwirkung eines Virenscanners überbewerten darf! Kein Antivirusprogramm erkennt 100% der Schadsoftware. Sofern du noch unentschieden bist, verwende MAXIMAL EIN EINZIGES der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Verwende immer nur reine Virenscanner (keine Produkte mit "Suite", "Internet Security", "Endpoint" oder "Total Security" in Namen, denn diese bringen kontraproduktive Firewalls mit - die Windows-Firewall ist alles was benötigt wird) Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware , AdwCleaner und mit dem ESET Online Scanner scannen. Diese Programme sind alle kostenlos und stören nicht den Betrieb deines Antivirenprogramms. Absicherungen Beim Betriebsystem Windows ist es wichtig, die automatischen Updates zu aktivieren. Auch sicherheitsrelevante Software sollte immer in aktueller Version vorliegen. Das zeitnahe Einspielen von Updates ist erforderlich, damit Sicherheitslücken geschlossen werden. Sicherheitslücken werden beispielsweise dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Besonders aufpassen bzgl. der Aktualität musst du insbesondere bei folgender Software - sofern diese überhaupt benötigt wird:
Optionale Browsererweiterungen
Grundsätzliches
Lesestoff: Backup-/Image-Tools IMHO sind Wiederherstellungspunkte nix weiter als eine Notlösung, wer sich auf was Funktionierendes verlassen will und muss, kommt um echte Backup/Imaging Software nicht herum. Ich nehme unter Windows immer Drive Snapshot - Disk Image Backup for Windows NT/2000/XP/2003/X64 Damit man sinnvolle Backups hat, muss man regelmäßig (z. B. wöchentlich) ein Image auf eine separate externe Festplatte erstellen. Diese externe Festplatte wird nur dann angeschlossen, wenn man das Backup erstellen will (oder etwas wiederherstellen muss), sonsten bleibt sie aus Sicherheitsgründen sicher im Schrank verwahrt - allein schon aus dem Grund, die Backups vor Krypto-Trojaner zu schützen. Option 1: Drivesnapshot Offizielle TB-Anleitung --> http://www.trojaner-board.de/186299-...esnapshot.html Drive Snapshot - Disk Image Backup for Windows NT/2000/XP/2003/X64 Download (32-Bit) => http://www.drivesnapshot.de/download/snapshot.exe Download (64-Bit) => http://www.drivesnapshot.de/download/snapshot64.exe Es gibt da auch leicht abgespeckte Versionen von Acronis TrueImage gratis wenn man Platten von Seagate und/oder Western Digital hat. Vllt sagen diese Programme dir mehr zu. Mein Favorit aber ist das kleine o.g. Drivesnapshot. Option 2: Seagate DiscWizard Download => Seagate DiscWizard - Download - Filepony Screenshots: http://filepony.de/screenshot/seagate_discwizard5.jpg http://filepony.de/screenshot/seagate_discwizard4.png http://filepony.de/screenshot/seagate_discwizard3.jpg Option 3: Acronis TrueImage WD Edition Download => Acronis True Image WD Edition - Download - Filepony Screenshots: http://filepony.de/screenshot/acroni...d_edition1.jpg http://filepony.de/screenshot/acroni...d_edition2.jpg |
06.09.2017, 13:04 | #9 |
| ESET Fund - LogfileCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-08-2017 durchgeführt von Chris (06-09-2017 14:00:27) Run:1 Gestartet von C:\Users\Chris\Desktop Geladene Profile: Chris (Verfügbare Profile: Chris) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** CloseProcesses: EmptyTemp: ***************** Prozesse erfolgreich geschlossen. =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 450893692 B Java, Flash, Steam htmlcache => 10244003 B Windows/system/drivers => 135722 B Edge => 149066 B Chrome => 344102771 B Firefox => 324674490 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 128 B LocalService => 0 B NetworkService => 159796 B Chris => 208764441 B RecycleBin => 0 B EmptyTemp: => 1.3 GB temporäre Dateien entfernt. ================================ Das System musste neu gestartet werden. ==== Ende von Fixlog 14:00:34 ==== |
06.09.2017, 13:07 | #10 |
/// TB-Ausbilder | ESET Fund - Logfile Ich bin froh, dass wir helfen konnten In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM inklusive Link zum Thema. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
Themen zu ESET Fund - Logfile |
adware, adware cleaner, cleaner, eset, fund, log, logfile, malwarebytes |