|
Trojaner durch gefakte Amazon Mail "eingefangen" Betriebssystem Windows Vista. Nach öffnen von gefakter E-Mail (Amazon) Trojaner eingefangen. Banken haben deshalb online Zugänge gesperrt. Avira Antivirensoftware installiert. Alles was durch Avira gefunden und in Quarantäne geschoben wurde gelöscht. Hijack This brigt folgendes LogFile... HiJackthis Logfile: Code: Logfile of Trend Micro HijackThis v2.0.4Und jetzt könnt ich echt Hilfe gebrauchen... |
:hallo: Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Zur ersten Analyse bitte FRST und TDSS-Killer ausführen: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt 2 Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
# FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-06-2015# #Additional FRST Logfile: Code: scan result of Farbar Recovery Scan Tool (x64) Version:03-06-2015# |
TDSS mit richtigen Einstellungen #20:03:33.0062 0x76b4 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 20:03:37.0735 0x76b4 ============================================================ 20:03:37.0735 0x76b4 Current date / time: 2015/06/05 20:03:37.0735 20:03:37.0735 0x76b4 SystemInfo: 20:03:37.0735 0x76b4 20:03:37.0735 0x76b4 OS Version: 6.0.6002 ServicePack: 2.0 20:03:37.0735 0x76b4 Product type: Workstation 20:03:37.0735 0x76b4 ComputerName: TOSHIBA 20:03:37.0735 0x76b4 UserName: Standard 20:03:37.0735 0x76b4 Windows directory: C:\Windows 20:03:37.0735 0x76b4 System windows directory: C:\Windows 20:03:37.0735 0x76b4 Running under WOW64 20:03:37.0735 0x76b4 Processor architecture: Intel x64 20:03:37.0735 0x76b4 Number of processors: 2 20:03:37.0735 0x76b4 Page size: 0x1000 20:03:37.0735 0x76b4 Boot type: Normal boot 20:03:37.0735 0x76b4 ============================================================ 20:03:38.0043 0x76b4 System UUID: {41F344C0-4F8B-45CB-A7B3-25D5C27062F4} 20:03:38.0669 0x76b4 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 20:03:38.0683 0x76b4 ============================================================ 20:03:38.0683 0x76b4 \Device\Harddisk0\DR0: 20:03:38.0683 0x76b4 MBR partitions: 20:03:38.0683 0x76b4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0xE8E2800 20:03:38.0683 0x76b4 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xEBD1000, BlocksNum 0xE5F4800 20:03:38.0683 0x76b4 ============================================================ 20:03:38.0717 0x76b4 C: <-> \Device\Harddisk0\DR0\Partition1 20:03:38.0755 0x76b4 E: <-> \Device\Harddisk0\DR0\Partition2 20:03:38.0755 0x76b4 ============================================================ 20:03:38.0755 0x76b4 Initialize success 20:03:38.0755 0x76b4 ============================================================ 20:05:42.0043 0x6c50 ============================================================ 20:05:42.0043 0x6c50 Scan started 20:05:42.0043 0x6c50 Mode: Manual; SigCheck; TDLFS; 20:05:42.0043 0x6c50 ============================================================ 20:05:42.0043 0x6c50 KSN ping started 20:05:44.0401 0x6c50 KSN ping finished: true 20:05:45.0399 0x6c50 ================ Scan system memory ======================== 20:05:45.0399 0x6c50 System memory - ok 20:05:45.0400 0x6c50 ================ Scan services ============================= 20:05:45.0572 0x6c50 [ EB2290ED2AFEA6D9C9773B818F2C1EA3, 7CC151FD71E0F32C106A6699B54E9C18CC43859A98B5A891646DD7FAEF9FFC54 ] 45636398 C:\Windows\system32\drivers\78466241.sys 20:05:45.0642 0x6c50 [ 1965AAFFAB07E3FB03C77F81BEBA3547, 351A1EBB1B95C8E03ED125C8F997DEE810B4DF36AD290E7685FC01963B522BFC ] ACPI C:\Windows\system32\drivers\acpi.sys 20:05:45.0756 0x6c50 ACPI - ok 20:05:45.0877 0x6c50 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A, F419E159D3E428A3929A1A983142E7B0783D3F104EE9587585418E51011E4B8F ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 20:05:45.0891 0x6c50 AdobeARMservice - ok 20:05:46.0002 0x6c50 [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 20:05:46.0023 0x6c50 AdobeFlashPlayerUpdateSvc - ok 20:05:46.0087 0x6c50 [ F14215E37CF124104575073F782111D2, 7F624F7F0FE9909C07AB2E4C74727686FDA9DF33778A9CBBE35027D6579E4F71 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 20:05:46.0117 0x6c50 adp94xx - ok 20:05:46.0177 0x6c50 [ 7D05A75E3066861A6610F7EE04FF085C, 406F2CE539C306BA60C233FBCDB029153588F0499BBE91E66FC915E5C5D7D2A5 ] adpahci C:\Windows\system32\drivers\adpahci.sys 20:05:46.0207 0x6c50 adpahci - ok 20:05:46.0229 0x6c50 [ 820A201FE08A0C345B3BEDBC30E1A77C, 3170B308724CAA0AD50B74D045C837C48BD6A3A11ABA222670BEA82192A861BF ] adpu160m C:\Windows\system32\drivers\adpu160m.sys 20:05:46.0246 0x6c50 adpu160m - ok 20:05:46.0273 0x6c50 [ 9B4AB6854559DC168FBB4C24FC52E794, 83CD75DE0A16AE66586837565ECA8B98BA9309519139C4C2032474B8DDF5A1AD ] adpu320 C:\Windows\system32\drivers\adpu320.sys 20:05:46.0293 0x6c50 adpu320 - ok 20:05:46.0323 0x6c50 [ 0F421175574BFE0BF2F4D8E910A253BB, CEABE3A4F546EB6ACA079931AB532DC88FF757DEEF6F434991802220328A9CD6 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 20:05:46.0397 0x6c50 AeLookupSvc - ok 20:05:46.0480 0x6c50 [ E58A17E945593544C707423F9772EEA0, FC17AFF979354EB89DCA307BF07C52B84629AF540D4C6A32DD537695CA654205 ] AFD C:\Windows\system32\drivers\afd.sys 20:05:46.0523 0x6c50 AFD - ok 20:05:46.0576 0x6c50 [ F6F6793B7F17B550ECFDBD3B229173F7, 7EB12A9372B7966440E39F1B567A43C21231D67DDFAA9C1DECC7E68627F82346 ] agp440 C:\Windows\system32\drivers\agp440.sys 20:05:46.0597 0x6c50 agp440 - ok 20:05:46.0639 0x6c50 [ 222CB641B4B8A1D1126F8033F9FD6A00, 8C7FD4BF87DC00893B99E64344C0E6A3F321DAD9BE60A99763629260E7C6312C ] aic78xx C:\Windows\system32\drivers\djsvs.sys 20:05:46.0656 0x6c50 aic78xx - ok 20:05:46.0706 0x6c50 [ 5922F4F59B7868F3D74BBBBEB7B825A3, 71504BC8B596F540BF059059670BC0C138D8759C1DD9F99F1EC368FD5C53F573 ] ALG C:\Windows\System32\alg.exe 20:05:46.0788 0x6c50 ALG - ok 20:05:46.0836 0x6c50 [ 157D0898D4B73F075CE9FA26B482DF98, 84C3E163D7393FD306842F155C88A50B7D8AE88B59586F9014DB76B749CC33D5 ] aliide C:\Windows\system32\drivers\aliide.sys 20:05:46.0851 0x6c50 aliide - ok 20:05:46.0900 0x6c50 [ C5EF0A376CE36979409774A5B9DC7903, 1832427B7F95D83114344E5B1F665C2DE09867720CADA4C059F99C6CA2912492 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 20:05:46.0940 0x6c50 AMD External Events Utility - ok 20:05:46.0965 0x6c50 [ 970FA5059E61E30D25307B99903E991E, CFB241803A63EA3469B2596462A42DDCA813B3ACF96E56BB34F5979BB34DDC32 ] amdide C:\Windows\system32\drivers\amdide.sys 20:05:46.0980 0x6c50 amdide - ok 20:05:47.0016 0x6c50 [ CDC3632A3A5EA4DBB83E46076A3165A1, 40BE3451A3F29CD3352360FF72165C54237E44D01006390805D493B0D06F51DB ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 20:05:47.0055 0x6c50 AmdK8 - ok 20:05:47.0180 0x6c50 [ 4428DC966DD5D0659AA7CA913D1D7652, 267D0F64354A105A2A64AB41607E3EB22CF8B448D2EBEC62C31829F03736836D ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe 20:05:47.0223 0x6c50 AntiVirMailService - ok 20:05:47.0303 0x6c50 [ EC705D6ED3A7F3D9AE42F6239707D9FE, B50F6BB0FC308E7403B1807DF2AAF87BEDE0B044128C580970A26801CCABC43F ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 20:05:47.0352 0x6c50 AntiVirSchedulerService - ok 20:05:47.0389 0x6c50 [ EC705D6ED3A7F3D9AE42F6239707D9FE, B50F6BB0FC308E7403B1807DF2AAF87BEDE0B044128C580970A26801CCABC43F ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 20:05:47.0415 0x6c50 AntiVirService - ok 20:05:47.0497 0x6c50 [ 266C0506DF8BA3990E12885E64EE4420, 60995CFE54B8594179BEAB06C4498CBF997B0C85147E5DD747CE238C89F6979D ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE 20:05:47.0558 0x6c50 AntiVirWebService - ok 20:05:47.0650 0x6c50 [ 19B93A45C4428419E60FE840014407E7, 36E55DDF0091A8662D34BA151FB74DCCD6CFB8FFB9C6CE403042B5519F6512C0 ] ApfiltrService C:\Windows\system32\DRIVERS\Apfiltr.sys 20:05:47.0673 0x6c50 ApfiltrService - ok 20:05:47.0721 0x6c50 [ 7C8ECAAD76EA1D076A450C8303D9BD98, 90904B2BE380A51BDCEDADA530214CE5321C06456E10F5985B40E3282902BEF6 ] Appinfo C:\Windows\System32\appinfo.dll 20:05:47.0755 0x6c50 Appinfo - ok 20:05:47.0785 0x6c50 [ BA8417D4765F3988FF921F30F630E303, 876A8F34E578020DD9EDD64F7F77A0A3B4592EC568830B500D7EA844D3159C72 ] arc C:\Windows\system32\drivers\arc.sys 20:05:47.0801 0x6c50 arc - ok 20:05:47.0839 0x6c50 [ 9D41C435619733B34CC16A511E644B11, DEFFBBB5ECE33B7DF949DF979188AF3B6674E7580FC069397AB756EA84E24822 ] arcsas C:\Windows\system32\drivers\arcsas.sys 20:05:47.0856 0x6c50 arcsas - ok 20:05:47.0887 0x6c50 [ 22D13FF3DAFEC2A80634752B1EAA2DE6, 503F7E5F1B14D3F7AEAB0982E812B19DABE38FD4104D93922F50F0B2D19BECFB ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 20:05:47.0924 0x6c50 AsyncMac - ok 20:05:47.0953 0x6c50 [ B388797CAAB36D523840347CC6A39B96, E63FB05F2D98F7B419C17EDAA09EC45A18F6B620D3C88384BBE4F50FB08C6CBE ] atapi C:\Windows\system32\drivers\atapi.sys 20:05:47.0967 0x6c50 atapi - ok 20:05:48.0241 0x6c50 [ C28928BECD9D35248C2A6CB18032CACC, 83DBC9EBC87E139BED7B0AFB10C5FCA82B6A24B0F7E51B04B54F8570D9752C65 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys 20:05:48.0522 0x6c50 atikmdag - ok 20:05:48.0637 0x6c50 [ 4FCE8096191D260028FB6585A4159D6F, FCCB53A93CE69C8A21B61A4DE678AB3A59A55828BCA655D5E5AB6B08CE6FB412 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 20:05:48.0685 0x6c50 AudioEndpointBuilder - ok 20:05:48.0756 0x6c50 [ 4FCE8096191D260028FB6585A4159D6F, FCCB53A93CE69C8A21B61A4DE678AB3A59A55828BCA655D5E5AB6B08CE6FB412 ] AudioSrv C:\Windows\System32\Audiosrv.dll 20:05:48.0789 0x6c50 AudioSrv - ok 20:05:48.0838 0x6c50 [ 43B6D229C7DBA9F0FC0FC0C318DB5350, F5A525DBD71FC4A323E92839C6D27F323FB304B7E9FFA35E89E9B419570AA4C8 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 20:05:48.0855 0x6c50 avgntflt - ok 20:05:48.0893 0x6c50 [ 626D1BAD7A1975A8FEE8876A8AD0EEA7, 59772746A2DF3B7E8D021756B8A64569AC8468CA1C802EB594494224354F1E60 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 20:05:48.0910 0x6c50 avipbb - ok 20:05:48.0979 0x6c50 [ 0D32033DCB359FD98B4C3513EF849FE6, 5870D67526BC29D888DAF8DBAB04B1E97ED5C7C51484ED400A5E65D0EB61576A ] Avira.OE.ServiceHost C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe 20:05:48.0995 0x6c50 Avira.OE.ServiceHost - ok 20:05:49.0020 0x6c50 [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 20:05:49.0043 0x6c50 avkmgr - ok 20:05:49.0118 0x6c50 [ FFB96C2589FFA60473EAD78B39FBDE29, 6A2792753E2CB580672B3107C0DBB9D26B6DAA14B37D5EC314BD0E304197E03E ] BFE C:\Windows\System32\bfe.dll 20:05:49.0190 0x6c50 BFE - ok 20:05:49.0279 0x6c50 [ 6D316F4859634071CC25C4FD4589AD2C, 73F69AC9E505F3B11A3CCFF8571930229A9058E672CD008A4BF26C0189564EAE ] BITS C:\Windows\System32\qmgr.dll 20:05:49.0350 0x6c50 BITS - ok 20:05:49.0393 0x6c50 [ 79FEEB40056683F8F61398D81DDA65D2, 5EA3016194F71A2A2177C2B5129E82738EC621ACAD269809F4C131B72CFEB6C6 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 20:05:49.0431 0x6c50 blbdrive - ok 20:05:49.0470 0x6c50 [ 2348447A80920B2493A9B582A23E81E1, 50F9242B7104607E633ABAF4E0A213C1C1226BF81F7FB4E216A9E878247B868C ] bowser C:\Windows\system32\DRIVERS\bowser.sys 20:05:49.0501 0x6c50 bowser - ok 20:05:49.0535 0x6c50 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys 20:05:49.0569 0x6c50 BrFiltLo - ok 20:05:49.0593 0x6c50 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys 20:05:49.0621 0x6c50 BrFiltUp - ok 20:05:49.0659 0x6c50 [ A1B39DE453433B115B4EA69EE0343816, 61441E7E9D5259A5987DBD3FC8D4E3221A57F42C7CC0F94DB48E80EEF96CA5D4 ] Browser C:\Windows\System32\browser.dll 20:05:49.0707 0x6c50 Browser - ok 20:05:49.0728 0x6c50 [ F0F0BA4D815BE446AA6A4583CA3BCA9B, E0A5DB5A0C7D6AF93ED45F34D2597F77982DFF41E4FDAC827FE5D80323ADED60 ] Brserid C:\Windows\system32\drivers\brserid.sys 20:05:49.0787 0x6c50 Brserid - ok 20:05:49.0800 0x6c50 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys 20:05:49.0858 0x6c50 BrSerWdm - ok 20:05:49.0879 0x6c50 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys 20:05:49.0935 0x6c50 BrUsbMdm - ok 20:05:49.0956 0x6c50 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys 20:05:50.0013 0x6c50 BrUsbSer - ok 20:05:50.0050 0x6c50 [ E0777B34E05F8A82A21856EFC900C29F, A7ACE3C65D1773C50ACD98A13B3ADBDD2A6052D7F5D124CB6EE6E7C22151A424 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 20:05:50.0108 0x6c50 BTHMODEM - ok 20:05:50.0181 0x6c50 [ F1140ED3A1E1D6824A63F27AFD9EEF32, AF40AA352857A4161B500C404B88DEBD41E0A06640393B57CD5FD14E325BBE97 ] camsvc C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe 20:05:50.0194 0x6c50 camsvc - ok 20:05:50.0207 0x6c50 [ B4D787DB8D30793A4D4DF9FEED18F136, 2A956F7DCFE61E556F30BDA6D45592A05533541D6ED321C251C1C05F6CEA6DDC ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 20:05:50.0252 0x6c50 cdfs - ok 20:05:50.0297 0x6c50 [ C025AA69BE3D0D25C7A2E746EF6F94FC, F4754B23CC256ADF92FDD42A9BA80F1ACB74834A58FCBEA2C52650FAFC7F9483 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 20:05:50.0326 0x6c50 cdrom - ok 20:05:50.0374 0x6c50 [ 5A268127633C7EE2A7FB87F39D748D56, 45C530A0EE0108543A75B9427F77EBB5E8350AE16C235763B6F32E72CE15C449 ] CertPropSvc C:\Windows\System32\certprop.dll 20:05:50.0403 0x6c50 CertPropSvc - ok 20:05:50.0445 0x6c50 [ 02EA568D498BBDD4BA55BF3FCE34D456, 5A418B156CBB48D14E0F6B6AE6E03B8CD97AABE838F260757014479566C63F17 ] circlass C:\Windows\system32\drivers\circlass.sys 20:05:50.0485 0x6c50 circlass - ok 20:05:50.0534 0x6c50 [ D44BA2F707838E0FEF35BCEC5CBD9D60, A9E85E801B0B08F7E5AD6206C61F36E42B4A99878D8AA66EAD8B4E667E50D813 ] CLFS C:\Windows\system32\CLFS.sys 20:05:50.0561 0x6c50 CLFS - ok 20:05:50.0640 0x6c50 [ 6B6943A0CA56B47D6FB2EE476890854F, 6DA779879487F4A187DF54B0362642643D7871AA8F7E30992D781F558C50F052 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 20:05:50.0656 0x6c50 clr_optimization_v2.0.50727_32 - ok 20:05:50.0705 0x6c50 [ 753049933D5326D835F4FCACDF4AD5E3, 715BEE09C19BCBCAD2A93E4725DB3A1FDD8E2FEFFF6E0C3D2F98FC607FED5D3A ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 20:05:50.0722 0x6c50 clr_optimization_v2.0.50727_64 - ok 20:05:50.0790 0x6c50 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 20:05:50.0806 0x6c50 clr_optimization_v4.0.30319_32 - ok 20:05:50.0844 0x6c50 [ C6F9AF94DCD58122A4D7E89DB6BED29D, CB0E5AE60EC76323585FB86D89E8DB7ADB5EDF6EA3D0B27E9ECE75B8CAA8BFDE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 20:05:50.0859 0x6c50 clr_optimization_v4.0.30319_64 - ok 20:05:50.0896 0x6c50 [ B52D9A14CE4101577900A364BA86F3DF, A8AA928DDF5FE3861973D4EA03A5B700E99138236F1E8FF594293B9705BF470C ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 20:05:50.0935 0x6c50 CmBatt - ok 20:05:50.0955 0x6c50 [ E5D5499A1C50A54B5161296B6AFE6192, 20A8A0478918063A9EE81565F21F4ACCAA7B6A8B2E9E084099879D85574BAB3E ] cmdide C:\Windows\system32\drivers\cmdide.sys 20:05:50.0968 0x6c50 cmdide - ok 20:05:51.0022 0x6c50 [ 2B3B8CBEA1BA1BCE5700607FBDB31034, 39F12CE67E1789C96326297B9431830C83CBF5CA5B6B7D7BCC0666776980FBE2 ] cmnsusbser C:\Windows\system32\DRIVERS\cmnsusbser.sys 20:05:51.0057 0x6c50 cmnsusbser - ok 20:05:51.0067 0x6c50 [ 7FB8AD01DB0EABE60C8A861531A8F431, E19353C686B07A0DBBA92CFCC88AB9B6BEBAF389416B78F4470BA673E7CD73C3 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 20:05:51.0082 0x6c50 Compbatt - ok 20:05:51.0088 0x6c50 COMSysApp - ok 20:05:51.0162 0x6c50 [ BCF2C3177E4777E3793310BAC0244C1A, 574E47D17DC513DA23532FA02D155DE5FB4B177771B1CF25775E9B7A35B0DF01 ] ConfigFree Gadget Service C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe 20:05:51.0169 0x6c50 ConfigFree Gadget Service - detected UnsignedFile.Multi.Generic ( 1 ) 20:05:53.0525 0x6c50 Detect skipped due to KSN trusted 20:05:53.0525 0x6c50 ConfigFree Gadget Service - ok 20:05:53.0563 0x6c50 [ CAB0EEAF5295FC96DDD3E19DCE27E131, 87BCAC18D920153322D325AA5B93BB0B447577D67261FDCC01C5B60643CEA792 ] ConfigFree Service C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe 20:05:53.0585 0x6c50 ConfigFree Service - ok 20:05:53.0610 0x6c50 [ A8585B6412253803CE8EFCBD6D6DC15C, C3906B080D3BB06CB976FD98C62CBA97DAE74970A5559D51EF5111D773949322 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 20:05:53.0627 0x6c50 crcdisk - ok 20:05:53.0642 0x6c50 Crypkey License - ok 20:05:53.0699 0x6c50 [ 5AAC48EAF8EACF247DB44FB61B900D89, D20FCD5C71CA18F284D3DFD0CED37F6888A296E76B7B0563F2F4668CF90FE752 ] CryptSvc C:\Windows\system32\cryptsvc.dll 20:05:53.0750 0x6c50 CryptSvc - ok 20:05:53.0812 0x6c50 [ B1C55A95006D621D04FE4A23F86C0A54, 41AE30A454FC3051AFC316A3BD61D96A27E6E4C3B94955F2026549027C1EA9BE ] DCamUSBEMPIA C:\Windows\system32\DRIVERS\emDevice64.sys 20:05:53.0850 0x6c50 DCamUSBEMPIA - ok 20:05:53.0928 0x6c50 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF, 3BE4B8EE22FA55D3A17D3718781C8BCA631C78F7928092561F6B79BB60E7D7FE ] DcomLaunch C:\Windows\system32\rpcss.dll 20:05:53.0991 0x6c50 DcomLaunch - ok 20:05:54.0037 0x6c50 [ 8B722BA35205C71E7951CDC4CDBADE19, 39720A60DFD0532F7E1A1976240E9828559BF9E0C6D1CFBF4D911965BFD94158 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 20:05:54.0066 0x6c50 DfsC - ok 20:05:54.0230 0x6c50 [ C647F468F7DE343DF8C143655C5557D4, E2D35FE49C408B952D8FE0C7EF70D42798229D30B89CEF9858BAC9F4F9E98EF2 ] DFSR C:\Windows\system32\DFSR.exe 20:05:54.0444 0x6c50 DFSR - ok 20:05:54.0528 0x6c50 [ 3ED0321127CE70ACDAABBF77E157C2A7, 10973BD0AEF9597A4EA0A4947BDE922F9168F33D6ED97BFFEE6176AADAD78980 ] Dhcp C:\Windows\System32\dhcpcsvc.dll 20:05:54.0578 0x6c50 Dhcp - ok 20:05:54.0623 0x6c50 [ B0107E40ECDB5FA692EBF832F295D905, 76466BB9E4F12436ECCCB9D89EB20762B4785F82F02591B51A735A590E248264 ] disk C:\Windows\system32\drivers\disk.sys 20:05:54.0641 0x6c50 disk - ok 20:05:54.0695 0x6c50 [ 06230F1B721494A6DF8D47FD395BB1B0, F6CA8270740E01D9CE2FE8E34BC067C7EDC15BA610F461860E1D17D135C8A379 ] Dnscache C:\Windows\System32\dnsrslvr.dll 20:05:54.0715 0x6c50 Dnscache - ok 20:05:54.0755 0x6c50 [ 1A7156DD1E850E9914E5E991E3225B94, 99FF0C7125B01FCB0B92DC44756AE8FAA486F2E7F38DC6204F7EFE5918F8480A ] dot3svc C:\Windows\System32\dot3svc.dll 20:05:54.0790 0x6c50 dot3svc - ok 20:05:54.0828 0x6c50 [ 1583B39790DB3EAEC7EDB0CB0140C708, F94F9AE7054A38602CD25D4E10FE7C7B574BD9ED8440C3FDAA7275A1D1E663E7 ] DPS C:\Windows\system32\dps.dll 20:05:54.0875 0x6c50 DPS - ok 20:05:54.0909 0x6c50 [ F1A78A98CFC2EE02144C6BEC945447E6, D2E2AA13BE6319F967002476A5D3CF09B1B44350576DD8E1C1C531854F53B488 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 20:05:54.0939 0x6c50 drmkaud - ok 20:05:55.0005 0x6c50 [ 362CCEF305F45829316D62D3410F2062, 35033749E9B6B5AFC9C8C305F4AA1597E9776D465E7BBC24A20E836B7BEF0D73 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 20:05:55.0054 0x6c50 DXGKrnl - ok 20:05:55.0093 0x6c50 [ 264CEE7B031A9D6C827F3D0CB031F2FE, 50CAD28A73D29E7E04A45330146CF713BA17101215955009121E36D43CD5C536 ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys 20:05:55.0136 0x6c50 E1G60 - ok 20:05:55.0177 0x6c50 [ C2303883FD9BE49DC36A6400643002EA, F062D1D6D503CF5195BDE8C1DC75B541F559CB8175ADABCDB7690E9F1CA3EA4E ] EapHost C:\Windows\System32\eapsvc.dll 20:05:55.0220 0x6c50 EapHost - ok 20:05:55.0268 0x6c50 [ 5F94962BE5A62DB6E447FF6470C4F48A, D00F9B3315DE8610BBE93FFD3CA3E2CF5B10697C518FC25FA4274CC6894D022B ] Ecache C:\Windows\system32\drivers\ecache.sys 20:05:55.0290 0x6c50 Ecache - ok 20:05:55.0341 0x6c50 [ 33510BE001CCDB5A01FCC88F4DD8DFC7, 58766C86EE63B4D6FD7DA8E8119165E601D10C0787BBF08A8D6EF6CA91ABC6A7 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 20:05:55.0398 0x6c50 ehRecvr - ok 20:05:55.0463 0x6c50 [ 1ABC6436B0EDAA3D496D9C827F92820D, 700BEF8CC38D75C8003A4208D2AF7A45F752A1BC88F7ECD28BDC38F773BB861F ] ehSched C:\Windows\ehome\ehsched.exe 20:05:55.0482 0x6c50 ehSched - ok 20:05:55.0511 0x6c50 [ 08F48CB2CD4019AFB0456869B49CD76F, EC6814160A17F1774FD8FF346395EFD23C411CB6DF7D6CD64248E36DBEC41EBE ] ehstart C:\Windows\ehome\ehstart.dll 20:05:55.0528 0x6c50 ehstart - ok 20:05:55.0566 0x6c50 [ C4636D6E10469404AB5308D9FD45ED07, 367D958D19F672395462206F27C1E138386C2F37B0FA77546F4217CF16D05C84 ] elxstor C:\Windows\system32\drivers\elxstor.sys 20:05:55.0613 0x6c50 elxstor - ok 20:05:55.0659 0x6c50 [ 44B36639872491344A460F3FFCF90B71, EDA6D77B364F6B0AD7DA2CC2514F2976ACD4041029F3183641067F2F1FFCC8EF ] emAudio C:\Windows\system32\drivers\emAudio64.sys 20:05:55.0683 0x6c50 emAudio - ok 20:05:55.0735 0x6c50 [ A9B18B63A4FD6BAAB83326706D857FAB, 7721CC67C0F8CE3060D0EB35A10E4ADC1E3CB470C0797B17D606060C270F96D7 ] EMDMgmt C:\Windows\system32\emdmgmt.dll 20:05:55.0770 0x6c50 EMDMgmt - ok 20:05:55.0817 0x6c50 [ BC3A58E938BB277E46BF4B3003B01ABD, 2BB054E632A96951DAB25B3BE8541AEC1B97A7739FC8D0E34BE8B9295600C8FC ] ErrDev C:\Windows\system32\drivers\errdev.sys 20:05:55.0858 0x6c50 ErrDev - ok 20:05:55.0944 0x6c50 [ E12F22B73F153DECE721CD45EC05B4AF, 41887EEF4BB024329B4079AD50FC5FB705F0EB8BAF6C93A8242DC2A73D3AFD86 ] EventSystem C:\Windows\system32\es.dll 20:05:55.0992 0x6c50 EventSystem - ok 20:05:56.0030 0x6c50 [ 486844F47B6636044A42454614ED4523, 3E24E78584B199C0FAA59613EEB7DF67B3B878B277A0130C7A3FF608C130BA2F ] exfat C:\Windows\system32\drivers\exfat.sys 20:05:56.0060 0x6c50 exfat - ok 20:05:56.0088 0x6c50 [ 1E34B436811CCA4A2783C0BC7A0BEB2E, 7C9496100DEA53FBADDA8B1EFF9F943FD13E75601A039632887A35F190C1F799 ] fastfat C:\Windows\system32\drivers\fastfat.sys 20:05:56.0125 0x6c50 fastfat - ok 20:05:56.0157 0x6c50 [ 81B79B6DF71FA1D2C6D688D830616E39, 62F8BC0DB918A49B10A5BE1724A2E2F17FA7D8208D5D86822FACB2DCD97B3591 ] fdc C:\Windows\system32\DRIVERS\fdc.sys 20:05:56.0196 0x6c50 fdc - ok 20:05:56.0224 0x6c50 [ BB9267ACACD8B7533DD936C34A0CBA5E, 32DE6E10ABA540D62F0D8AE30DE8769D7BF29E547838BEBE67C04183CC0B32C7 ] fdPHost C:\Windows\system32\fdPHost.dll 20:05:56.0266 0x6c50 fdPHost - ok 20:05:56.0279 0x6c50 [ 300C80931EABBE1DB7591C516EFE8D0F, F031DA96B06B6FA8E0AD56D5E10E5A5882765C3FF258A4DE06A47EC34829FF04 ] FDResPub C:\Windows\system32\fdrespub.dll 20:05:56.0345 0x6c50 FDResPub - ok 20:05:56.0366 0x6c50 [ 457B7D1D533E4BD62A99AED9C7BB4C59, 3933907DE163F8D3A81ED25169B693D723296C437C7C990BFE9DEFD60F7635FD ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 20:05:56.0382 0x6c50 FileInfo - ok 20:05:56.0404 0x6c50 [ D421327FD6EFCCAF884A54C58E1B0D7F, C2F3B72EA36BA8B74A30E128C088307CA768FDBE232BFA216CD78B0F9B7AF18A ] Filetrace C:\Windows\system32\drivers\filetrace.sys 20:05:56.0444 0x6c50 Filetrace - ok 20:05:56.0480 0x6c50 [ 73FBB50C4D92ADC30A9D57A269489A0B, 10DBC65126EEA820B829521C882A4AFE3BCD86ED53C703703DF2149A0220E10F ] FiltUSBEMPIA C:\Windows\system32\DRIVERS\emFilter64.sys 20:05:56.0492 0x6c50 FiltUSBEMPIA - ok 20:05:56.0518 0x6c50 [ 230923EA2B80F79B0F88D90F87B87EBD, 1F3287970FEC73011F3B675C447BF0CA35416490D4740C6960595B091181059C ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 20:05:56.0555 0x6c50 flpydisk - ok 20:05:56.0600 0x6c50 [ E3041BC26D6930D61F42AEDB79C91720, 3556C033BB78445EC8B2F98A82455914764AFC70CBFF634DDBD3539885A1E457 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 20:05:56.0622 0x6c50 FltMgr - ok 20:05:56.0691 0x6c50 [ 141C91F7D7F26730921B2A4FC93C2114, EFD3BF5557684C22FB2104676E669DC5624433A6895E3F9FB28114C116E82CA2 ] FontCache C:\Windows\system32\FntCache.dll 20:05:56.0771 0x6c50 FontCache - ok 20:05:56.0882 0x6c50 [ BC5B0BE5AF3510B0FD8C140EE42C6D3E, B21CA5F14BDB6CFD97A24C28BB2AD0D704C46058F13B01FF4203514FE8B92591 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 20:05:56.0901 0x6c50 FontCache3.0.0.0 - ok 20:05:56.0936 0x6c50 [ 5779B86CD8B32519FBECB136394D946A, 68A395CD2287D22CB5C8CFE5A3006A61AC0C3FDAADF166C93240FF83C0315DCF ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 20:05:56.0953 0x6c50 Fs_Rec - ok 20:05:56.0985 0x6c50 [ C8E416668D3DC2BE3D4FE4C79224997F, 7DBC8E7687179A649638F606C9584F2E8EC2065762997CDF151F9BB99FA8D535 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 20:05:57.0001 0x6c50 gagp30kx - ok 20:05:57.0077 0x6c50 [ 54FD6B2F163782914F1205D51FEDD3EF, 8FA2257A7D5E73AAD19919906CFDDB8AC05D480311F6994A4188C5823C7CF625 ] GameConsoleService C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe 20:05:57.0094 0x6c50 GameConsoleService - ok 20:05:57.0154 0x6c50 [ A0E1B575BA8F504968CD40C0FAEB2384, F64A24A5A93F4E757882E97C65DA612F07A87F4DDD2E10C1AB0250AFA03BCEF1 ] gpsvc C:\Windows\System32\gpsvc.dll 20:05:57.0212 0x6c50 gpsvc - ok 20:05:57.0354 0x6c50 [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 20:05:57.0369 0x6c50 gupdate - ok 20:05:57.0409 0x6c50 [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 20:05:57.0427 0x6c50 gupdatem - ok 20:05:57.0486 0x6c50 [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 20:05:57.0503 0x6c50 gusvc - ok 20:05:57.0548 0x6c50 [ 091582DA724F54830012E3FAAF2F1D1A, B7EB5697C924C90BF70C64F71EBA004925C2948323E1B16E58FF2F71432AAFB1 ] Hardlock C:\Windows\system32\drivers\hardlock.sys 20:05:57.0569 0x6c50 Hardlock - detected UnsignedFile.Multi.Generic ( 1 ) 20:05:59.0932 0x6c50 Detect skipped due to KSN trusted 20:05:59.0932 0x6c50 Hardlock - ok 20:06:00.0044 0x6c50 [ 68E732382B32417FF61FD663259B4B09, 10C5365AEAC46DF4F5F6A8F96D15141B4709851D4752613233E57EB20CE16446 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 20:06:00.0083 0x6c50 HdAudAddService - ok 20:06:00.0148 0x6c50 [ F942C5820205F2FB453243EDFEC82A3D, 17A6A3DCF884FB524C93F2477D97E9F2B8E547709F8F2AEA93BEEA322B62E914 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 20:06:00.0222 0x6c50 HDAudBus - ok 20:06:00.0253 0x6c50 [ B4881C84A180E75B8C25DC1D726C375F, C0BEDBF43EFB0DD442A1D7985EA4A7493671648954B7D1840E30FB2FC46589A4 ] HidBth C:\Windows\system32\drivers\hidbth.sys 20:06:00.0310 0x6c50 HidBth - ok 20:06:00.0324 0x6c50 [ 4E77A77E2C986E8F88F996BB3E1AD829, 1748676EB038A145405080B829DF4156C2596691BE5C67FD8269BE8D9351B400 ] HidIr C:\Windows\system32\drivers\hidir.sys 20:06:00.0380 0x6c50 HidIr - ok 20:06:00.0417 0x6c50 [ 59361D38A297755D46A540E450202B2A, ED97800A3FF9B90EC58BC5122C42B53F46D9C157EFE488481E8677ED7058E33D ] hidserv C:\Windows\system32\hidserv.dll 20:06:00.0445 0x6c50 hidserv - ok 20:06:00.0492 0x6c50 [ 443BDD2D30BB4F00795C797E2CF99EDF, BCE1A241AE5CCE3E1C65CCF07ECB4305C7106F2EFFD51F2C519EB00026B474C4 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 20:06:00.0527 0x6c50 HidUsb - ok 20:06:00.0554 0x6c50 [ B12F367EA39C0795FD57E31242CE1A5A, 498439FE4D1217211EB6C1AC35CDA5D59F3AE8F06AF5E41EE9FDB0DC559FBE27 ] hkmsvc C:\Windows\system32\kmsvc.dll 20:06:00.0593 0x6c50 hkmsvc - ok 20:06:00.0644 0x6c50 [ D7109A1E6BD2DFDBCBA72A6BC626A13B, 6141B6645F4152A326ECA8AD0DD04CB38C9EDA395BDF6FF260AB17CB86FC4C87 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys 20:06:00.0661 0x6c50 HpCISSs - ok 20:06:00.0721 0x6c50 [ 098F1E4E5C9CB5B0063A959063631610, 36B02A738413E4745978E3E90D9CE8ABC08376BEE411008A4312A752CB4A2E13 ] HTTP C:\Windows\system32\drivers\HTTP.sys 20:06:00.0788 0x6c50 HTTP - ok 20:06:00.0809 0x6c50 [ DA94C854CEA5FAC549D4E1F6E88349E8, 10BEB47DB90F55BD1792C2041E49ED13E4E52BCC11BE6599F6DA8D91B79CC8D1 ] i2omp C:\Windows\system32\drivers\i2omp.sys 20:06:00.0824 0x6c50 i2omp - ok 20:06:00.0857 0x6c50 [ CBB597659A2713CE0C9CC20C88C7591F, A2BAC75F7247D871842A32EAA7594D338E728D1BFEAEA3C1FCDBF65F007BC06A ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 20:06:00.0889 0x6c50 i8042prt - ok 20:06:00.0949 0x6c50 [ 1ADAA4F16073FD0C7270F451FD024E97, A42F8DACBECC75FF841ED960DE8C52F4B9C6279727397BE4FBA314D07A547546 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 20:06:00.0976 0x6c50 iaStor - ok 20:06:01.0018 0x6c50 [ 3E3BF3627D886736D0B4E90054F929F6, 95A138B65DC9133E92F53A529C7AD897D8823EFAED343756549FDF6C8C749CD0 ] iaStorV C:\Windows\system32\drivers\iastorv.sys 20:06:01.0041 0x6c50 iaStorV - ok 20:06:01.0115 0x6c50 [ A9AA69F749AC1D318151E77372CC83DB, 2A50A4D6ED22F5F6CB5DC56A639D904AD71E511DC744A6F6C3D1D4D39756AF31 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 20:06:01.0185 0x6c50 idsvc - ok 20:06:01.0205 0x6c50 [ 8C3951AD2FE886EF76C7B5027C3125D3, 85CF7231756E02BD9E5F4378F3FC794394A072B8028F27827F83ACE9EE554499 ] iirsp C:\Windows\system32\drivers\iirsp.sys 20:06:01.0218 0x6c50 iirsp - ok 20:06:01.0267 0x6c50 [ 0401A380C88754B2399F8043AC9B2BF9, BFF3B53FAFAE6622AA9F74BAA4A3D522C06E2D732B88916766603B9FE8D0D77F ] IKEEXT C:\Windows\System32\ikeext.dll 20:06:01.0302 0x6c50 IKEEXT - ok 20:06:01.0451 0x6c50 [ 627C6B352718E59DF08F02C536E2E0ED, 7E921CF87B9BF265677A3712A534101F99118537C440432A48D1A042A30406C2 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 20:06:01.0555 0x6c50 IntcAzAudAddService - ok 20:06:01.0588 0x6c50 [ DF797A12176F11B2D301C5B234BB200E, 384343636B21CA7EDF28EFD1B6728EAB1508CA49CE48FF3DC0D91DB843C0C73E ] intelide C:\Windows\system32\drivers\intelide.sys 20:06:01.0604 0x6c50 intelide - ok 20:06:01.0628 0x6c50 [ BFD84AF32FA1BAD6231C4585CB469630, 33E0842F2D0879B02C115301174FCB19ED3AAF7B1B8E6284839CE16DE56476EA ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 20:06:01.0673 0x6c50 intelppm - ok 20:06:01.0713 0x6c50 [ 5624BC1BC5EEB49C0AB76A8114F05EA3, BD5AA534D8A923AF4D205EEC6DA55A3DC5F915E5F3223BF23F24C09824FA90B6 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 20:06:01.0756 0x6c50 IPBusEnum - ok 20:06:01.0791 0x6c50 [ D8AABC341311E4780D6FCE8C73C0AD81, 141E8032A934777567E6DAC35FB1C77C40D9B6EE477F17F872F35833A8F57F72 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 20:06:01.0823 0x6c50 IpFilterDriver - ok 20:06:01.0873 0x6c50 [ BF0DBFA9792C5C14FA00F61C75116C1B, 24C14DCAF57013F1C238E3C123279737420A714EB29CB69239C9838C9A269A59 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 20:06:01.0911 0x6c50 iphlpsvc - ok 20:06:01.0917 0x6c50 IpInIp - ok 20:06:01.0960 0x6c50 [ 9C2EE2E6E5A7203BFAE15C299475EC67, E51628ECAB9CCCBCE02801C5E71406487A280765FEE318D14B0C227141B87658 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys 20:06:02.0000 0x6c50 IPMIDRV - ok 20:06:02.0028 0x6c50 [ B7E6212F581EA5F6AB0C3A6CEEEB89BE, C29D7F392116BB09F7047A90702331F200DACFB3C94E7F912932971E0B7F0413 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys 20:06:02.0070 0x6c50 IPNAT - ok 20:06:02.0097 0x6c50 [ 8C42CA155343A2F11D29FECA67FAA88D, 699F06D25C5F270CE1194F4D350CB0BE22C6AB609EECF35D066C034AC380BEE3 ] IRENUM C:\Windows\system32\drivers\irenum.sys 20:06:02.0135 0x6c50 IRENUM - ok 20:06:02.0197 0x6c50 [ 0672BFCEDC6FC468A2B0500D81437F4F, A0322B569C309F258684AFECCD52924A33F363186261730469245B7FA357C645 ] isapnp C:\Windows\system32\drivers\isapnp.sys 20:06:02.0211 0x6c50 isapnp - ok 20:06:02.0260 0x6c50 [ E4FDF99599F27EC25D2CF6D754243520, 9139E708EE30F10652C9A458BD58B0343A3C05E84CD3E71FA0B0E4123503CF7B ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys 20:06:02.0280 0x6c50 iScsiPrt - ok 20:06:02.0304 0x6c50 [ 63C766CDC609FF8206CB447A65ABBA4A, D9CA006FA852C95E90E8A0837E296FCBFD76246DA8AFDE563863D5F95BDFEC52 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys 20:06:02.0319 0x6c50 iteatapi - ok 20:06:02.0354 0x6c50 [ 1281FE73B17664631D12F643CBEA3F59, B27571A0348CDF81DC102A61712CBA9A4AF7AC0015A7702B0DE73AD4E4646853 ] iteraid C:\Windows\system32\drivers\iteraid.sys 20:06:02.0370 0x6c50 iteraid - ok 20:06:02.0403 0x6c50 [ 423696F3BA6472DD17699209B933BC26, 00C2EAA1A8E9D422D178B7678598743234930C1858D76C632F079EF789BB56C3 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 20:06:02.0418 0x6c50 kbdclass - ok 20:06:02.0452 0x6c50 [ DBDF75D51464FBC47D0104EC3D572C05, E392EE961E734620245874C7700D56621A1A990C45DF5CE0B7D270BA708F255E ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 20:06:02.0481 0x6c50 kbdhid - ok 20:06:02.0519 0x6c50 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D, 6585A87CE55EE5C51B18DF86E8EDFC6A909D96C87522FF4183F8BA9355E8DD44 ] KeyIso C:\Windows\system32\lsass.exe 20:06:02.0547 0x6c50 KeyIso - ok 20:06:02.0605 0x6c50 [ 12A76FE3D133B0D5BEBD7CB19E8B4E07, 4147DB35D51427ABA1BBA9DEF44DF26697B3A17063990528C049980D4BF836CD ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 20:06:02.0650 0x6c50 KSecDD - ok 20:06:02.0686 0x6c50 [ 1D419CF43DB29396ECD7113D129D94EB, 21ECCE9D17F055C7B5066110864E10C99291CE50B389C545371333904CE2DBB5 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 20:06:02.0729 0x6c50 ksthunk - ok 20:06:02.0780 0x6c50 [ 1FAF6926F3416D3DA05C5B265491BDAE, 3989E18522691CC3820092033E00ED39D08861DFB369AA0DFFF4B379E48EA1F0 ] KtmRm C:\Windows\system32\msdtckrm.dll 20:06:02.0848 0x6c50 KtmRm - ok 20:06:02.0908 0x6c50 [ 50C7A3CB427E9BB5ED0708A669956AB5, 3DAD1C01AE58FE2C6134283B19118E2F3C884DDFFBAE4A46B7B5E4FB1A2567A1 ] LanmanServer C:\Windows\system32\srvsvc.dll 20:06:02.0935 0x6c50 LanmanServer - ok 20:06:02.0969 0x6c50 [ CAF86FC1388BE1E470F1A7B43E348ADB, 9E9AE0B617D1031E8462524802A2D997AE7C944A7D00D403FF903145A7FEB761 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 20:06:03.0007 0x6c50 LanmanWorkstation - ok 20:06:03.0031 0x6c50 [ 96ECE2659B6654C10A0C310AE3A6D02C, 3322E87B9F64C3ACBCB634F2390AAB212FA7695383BF01F0092A803871BF19B2 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 20:06:03.0069 0x6c50 lltdio - ok 20:06:03.0120 0x6c50 [ 961CCBD0B1CCB5675D64976FAE37D092, 258378BE76A13E4368C9587E6A22727721E4B267B0D26D3D3E333B3B2A5A0611 ] lltdsvc C:\Windows\System32\lltdsvc.dll 20:06:03.0167 0x6c50 lltdsvc - ok 20:06:03.0191 0x6c50 [ A47F8080CACC23C91FE823AD19AA5612, 161575406D158D6D5C9220F1E82C0CC19108C74ADC35C509BAF9B0C414EFD8EE ] lmhosts C:\Windows\System32\lmhsvc.dll 20:06:03.0229 0x6c50 lmhosts - ok 20:06:03.0264 0x6c50 [ 9C551A9121639A9779862CB8A6CABF03, 08E53FF4E8B2630BCA0F697B92F3BF02734E22A8B7E7A5A311002DCB614E70B9 ] LPCFilter C:\Windows\system32\DRIVERS\LPCFilter.sys 20:06:03.0276 0x6c50 LPCFilter - ok 20:06:03.0307 0x6c50 [ ACBE1AF32D3123E330A07BFBC5EC4A9B, 0E17E4DD30B5AF8F269EF8EA003836C9E16273262A050B9BE3ED802DD3AC9319 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 20:06:03.0325 0x6c50 LSI_FC - ok 20:06:03.0339 0x6c50 [ 799FFB2FC4729FA46D2157C0065B3525, AB462A34D061C113DA12641C45159A58D0AEA1C440233D061A20DF99586CFA93 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 20:06:03.0356 0x6c50 LSI_SAS - ok 20:06:03.0395 0x6c50 [ F445FF1DAAD8A226366BFAF42551226B, 92B63E15363F1EAE8A54D4E74ED21669D0A9FE99C654671556C58456228278B1 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 20:06:03.0411 0x6c50 LSI_SCSI - ok 20:06:03.0435 0x6c50 [ 52F87B9CC8932C2A7375C3B2A9BE5E3E, 2EB22DD418D4934BDD22C5DB49D5D06178EC0419AB5CC28DD544CA91823987B0 ] luafv C:\Windows\system32\drivers\luafv.sys 20:06:03.0479 0x6c50 luafv - ok 20:06:03.0502 0x6c50 [ 6DA30C0DE0CC8525E89D612C5063CAC1, E992FE10680B4B532ECF46CDC6B423F7B2E378A3FAA8681505219F4B45D9B91C ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 20:06:03.0520 0x6c50 Mcx2Svc - ok 20:06:03.0547 0x6c50 [ 5C5CD6AACED32FB26C3FB34B3DCF972F, 34A66C21FA79800D3CDE933CFA71343218F94D67AAE763EA0B53AC49060CB6D0 ] megasas C:\Windows\system32\drivers\megasas.sys 20:06:03.0562 0x6c50 megasas - ok 20:06:03.0609 0x6c50 [ 859BC2436B076C77C159ED694ACFE8F8, 4AEA57A8B9EACEC1B8DED3ECC95621C56E6D65CFE2DA9F07DAF7C7BAD132B624 ] MegaSR C:\Windows\system32\drivers\megasr.sys 20:06:03.0637 0x6c50 MegaSR - ok 20:06:03.0659 0x6c50 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A, 18B0E3E83E41C80809E8140F4C90AB051566C84DD891EA411746EA74E6EAF053 ] MMCSS C:\Windows\system32\mmcss.dll 20:06:03.0696 0x6c50 MMCSS - ok 20:06:03.0722 0x6c50 [ 59848D5CC74606F0EE7557983BB73C2E, EA6ACF0619DE1E4272AEDC69F2E66E29DA499E8E8094243C9EF735FD8369229D ] Modem C:\Windows\system32\drivers\modem.sys 20:06:03.0759 0x6c50 Modem - ok 20:06:03.0766 0x6c50 [ C247CC2A57E0A0C8C6DCCF7807B3E9E5, 357811D1B8F70828F6432879F59DAB916FBB55673B3473D879382DE33CFB3FAF ] monitor C:\Windows\system32\DRIVERS\monitor.sys 20:06:03.0804 0x6c50 monitor - ok 20:06:03.0843 0x6c50 [ 9367304E5E412B120CF5F4EA14E4E4F1, F87EBACEE27A50E6610FDCB4BD3001C35A99FEE6D63D643FF2CBF0D484CD082C ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 20:06:03.0865 0x6c50 mouclass - ok 20:06:03.0894 0x6c50 [ C2C2BD5C5CE5AAF786DDD74B75D2AC69, B77E4A7511923E7BD35A177A40B4E461AC9CB050D6F0575D4799DEF85DA6DA38 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 20:06:03.0939 0x6c50 mouhid - ok 20:06:03.0960 0x6c50 [ 11BC9B1E8801B01F7F6ADB9EAD30019B, 1BAF820C0AB1B70A114E767B2155A58BF86CD0D9CF582813C1635A86BE3A7A05 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys 20:06:03.0976 0x6c50 MountMgr - ok 20:06:04.0046 0x6c50 [ DD370A8148862150BA81A3F5C56A1E40, F56B84297BDC32266CB69D10FB2D66B8B332D60CAB7E64E4E3AC2BB749BBD31B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 20:06:04.0063 0x6c50 MozillaMaintenance - ok 20:06:04.0109 0x6c50 [ F8276EB8698142884498A528DFEA8478, C0FF504F721F1D00F42CFE783D4F32C6728518F64646F5C5C11BA3A4824815BB ] mpio C:\Windows\system32\drivers\mpio.sys 20:06:04.0125 0x6c50 mpio - ok 20:06:04.0150 0x6c50 [ C92B9ABDB65A5991E00C28F13491DBA2, D1233381A9E4262F0AB396BBDB7DE402D4370805E11EB8A118C846F6E9474098 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 20:06:04.0182 0x6c50 mpsdrv - ok 20:06:04.0240 0x6c50 [ 897E3BAF68BA406A61682AE39C83900C, 13F61D5C22BED061BE7C2669CCCAA2BAD4A0CE83800DF57A50306DE0A476FC27 ] MpsSvc C:\Windows\system32\mpssvc.dll 20:06:04.0293 0x6c50 MpsSvc - ok 20:06:04.0308 0x6c50 [ 3C200630A89EF2C0864D515B7A75802E, AA4A312E7A28FCE7A944747BADB809CAAD3D67899EBBE663D473621DB25B140A ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys 20:06:04.0321 0x6c50 Mraid35x - ok 20:06:04.0360 0x6c50 [ F0142D3C0505B1B6DB8591A49C005C16, 3C773A2F8D8CE359B81AE6F4112EACBB0582169E4A09CD610E3DCE6DCF9403AF ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 20:06:04.0387 0x6c50 MRxDAV - ok 20:06:04.0430 0x6c50 [ 1485811B320FF8C7EDAD1CAEBB1C6C2B, 9F157AAA1A793EF7E52817E4126B774C17FFA0036DADCF10A024FDC068F94F67 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 20:06:04.0460 0x6c50 mrxsmb - ok 20:06:04.0529 0x6c50 [ 3B929A60C833FC615FD97FBA82BC7632, 40EEBEB43F42A1A37FAA529E0C21984426F90C1EEFE1EF9BB2F696164595F91D ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 20:06:04.0553 0x6c50 mrxsmb10 - ok 20:06:04.0569 0x6c50 [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3, 197F70E24D2BBDEC35C2D5BC442267ACC4C5AE3FD5BB30A0928976BE9758C942 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 20:06:04.0587 0x6c50 mrxsmb20 - ok 20:06:04.0643 0x6c50 [ E7E3E515D1D33A2A372D7FCE2BBEF5D9, 65FDFA5920FF981BEE99350763CB2F589FFD5DAC723277592DB37A17FA95972D ] msahci C:\Windows\system32\drivers\msahci.sys 20:06:04.0658 0x6c50 msahci - ok 20:06:04.0694 0x6c50 [ 264BBB4AAF312A485F0E44B65A6B7202, 1DF36540C77D5D885B6C2EE91F0446864D8E6D6CFED87A9ED0765E76FE05E102 ] msdsm C:\Windows\system32\drivers\msdsm.sys 20:06:04.0711 0x6c50 msdsm - ok 20:06:04.0736 0x6c50 [ 7EC02CE772F068ED0BEAFA3DA341A9BC, 3B5B4EA0BF1D1E57F4DF74A569304A5EE41821F5E2F352760B8C9CA82C6D8292 ] MSDTC C:\Windows\System32\msdtc.exe 20:06:04.0776 0x6c50 MSDTC - ok 20:06:04.0799 0x6c50 [ 704F59BFC4512D2BB0146AEC31B10A7C, F7712944DDC192C47953D577BE31B79B4D11217305B1C3D0DCA31B1518CB8DCB ] Msfs C:\Windows\system32\drivers\Msfs.sys 20:06:04.0839 0x6c50 Msfs - ok 20:06:04.0892 0x6c50 [ 00EBC952961664780D43DCA157E79B27, 4F8F5718D8574A128E0F6CD54C9BE59A93A7638A5689A8FF68D0C81D3E67808F ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 20:06:04.0907 0x6c50 msisadrv - ok 20:06:04.0935 0x6c50 [ 366B0C1F4478B519C181E37D43DCDA32, A98E2BC397FAD7D90653F55AC283CACAE7465D7F10A198D715046B1D896AF246 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 20:06:04.0977 0x6c50 MSiSCSI - ok 20:06:04.0983 0x6c50 msiserver - ok 20:06:05.0024 0x6c50 [ 0EA73E498F53B96D83DBFCA074AD4CF8, E3DDE34FCFF272E06CD8DA836F8D79E2515885715D4A7CD7BF8D97D7A4E0E781 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 20:06:05.0062 0x6c50 MSKSSRV - ok 20:06:05.0084 0x6c50 [ 52E59B7E992A58E740AA63F57EDBAE8B, A89F607B330BA1F42CA9FF01EF289BBD088350CF376568E58CB9865F1DA6CD72 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 20:06:05.0135 0x6c50 MSPCLOCK - ok 20:06:05.0145 0x6c50 [ 49084A75BAE043AE02D5B44D02991BB2, 4CD2692D191035CE9D18F4D21F054FF8C3F9CF2734464EA33EAB480A28AD447F ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 20:06:05.0184 0x6c50 MSPQM - ok 20:06:05.0239 0x6c50 [ DC6CCF440CDEDE4293DB41C37A5060A5, 768D08A67508E1CE69B67642A5E5A639C0DD1E93C956C56ECC5A56B0E502C953 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 20:06:05.0262 0x6c50 MsRPC - ok 20:06:05.0310 0x6c50 [ 855796E59DF77EA93AF46F20155BF55B, 75DFCEE16A9D94EDF74295B9686D92552817E8A00958917CB0E17089EDCF6A97 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 20:06:05.0324 0x6c50 mssmbios - ok 20:06:05.0362 0x6c50 [ 86D632D75D05D5B7C7C043FA3564AE86, 96911FBC106B91E76598EE110B5147D4C55E42C9194E857F866B6B395E78D2CB ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 20:06:05.0415 0x6c50 MSTEE - ok 20:06:05.0456 0x6c50 [ 0CC49F78D8ACA0877D885F149084E543, 984DDCB52F0DFC1B26C6504FE500E8D9C2CA7F79ED34608AE9866A0915B8BA67 ] Mup C:\Windows\system32\Drivers\mup.sys 20:06:05.0472 0x6c50 Mup - ok 20:06:05.0517 0x6c50 [ A5B10C845E7538C60C0F5D87A57CB3F5, 2B4E16702591C59BC2CA2B99DBB504BAB4F4EF0835B0D9C7453D340CBF0BDF16 ] napagent C:\Windows\system32\qagentRT.dll 20:06:05.0560 0x6c50 napagent - ok 20:06:05.0604 0x6c50 [ 2007B826C4ACD94AE32232B41F0842B9, 6267D165C3C8C5F83194890A6DBF71226D4B891AECD1D06F7AEB5D738C3DC9CA ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 20:06:05.0625 0x6c50 NativeWifiP - ok 20:06:05.0689 0x6c50 [ 65950E07329FCEE8E6516B17C8D0ABB6, 4429D9FF9B6E376D28D8FA4906B7554DF566EC23E455E3166C496B579622F204 ] NDIS C:\Windows\system32\drivers\ndis.sys 20:06:05.0730 0x6c50 NDIS - ok 20:06:05.0752 0x6c50 [ 64DF698A425478E321981431AC171334, C43177CB60F5D58E1FF7A31E9BE5DA7D92C4B25235867DD65BADC069EDF023F3 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 20:06:05.0788 0x6c50 NdisTapi - ok 20:06:05.0805 0x6c50 [ 8BAA43196D7B5BB972C9A6B2BBF61A19, 8AFFB26F6E8CF67F562818BBFE12FB448E4FCDF9B68858B625681565DE30DDC1 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 20:06:05.0843 0x6c50 Ndisuio - ok 20:06:05.0891 0x6c50 [ F8158771905260982CE724076419EF19, B86FFA790A30ED614A11C87F4D738C913EFC0924DC14750D544001D4E9556071 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 20:06:05.0923 0x6c50 NdisWan - ok 20:06:05.0945 0x6c50 [ 9CB77ED7CB72850253E973A2D6AFDF49, C3C15B317A7F7AE68B7BC62343962C47F075240F252727811DB4BEE443F9103F ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 20:06:05.0991 0x6c50 NDProxy - ok 20:06:06.0014 0x6c50 [ A499294F5029A7862ADC115BDA7371CE, 6BE0AAFE4EB59E056A929D6C1A009D8DFD547025481108CEFB12E5D6F86DBE14 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 20:06:06.0053 0x6c50 NetBIOS - ok 20:06:06.0096 0x6c50 [ FC2C792EBDDC8E28DF939D6A92C83D61, 9EDF8B56E2B47C31457074DA371B604E5F7EB2B3B5CD4688CBEEDD5B266D119B ] netbt C:\Windows\system32\DRIVERS\netbt.sys 20:06:06.0132 0x6c50 netbt - ok 20:06:06.0151 0x6c50 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D, 6585A87CE55EE5C51B18DF86E8EDFC6A909D96C87522FF4183F8BA9355E8DD44 ] Netlogon C:\Windows\system32\lsass.exe 20:06:06.0168 0x6c50 Netlogon - ok 20:06:06.0211 0x6c50 [ 9B63B29DEFC0F3115A559D2597BF5D75, 297319D3F2E97CB34464EA59D8FD96AC2B8B1A4F2AEE666937F16A041128021F ] Netman C:\Windows\System32\netman.dll 20:06:06.0262 0x6c50 Netman - ok 20:06:06.0286 0x6c50 [ 7846D0136CC2B264926A73047BA7688A, 6F56CC1B17095C378D98B58A92F9EDA2D009529DDB6F60E815D85C7606C8EDC0 ] netprofm C:\Windows\System32\netprofm.dll 20:06:06.0334 0x6c50 netprofm - ok 20:06:06.0373 0x6c50 [ 212569FFEA5500E38CD2A7B5212F7831, 71CB5278A682FD4FADA92D0F13D5D58801AEDF82A60AFF7FFC9071BE0370FCC1 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 20:06:06.0406 0x6c50 NetTcpPortSharing - ok 20:06:06.0615 0x6c50 [ 2BDCB7B7917380794C9D87AC2153CE33, F190B59DDEAE676589D197CF31942EF891CAACA3033353416BC08FEA665F01AA ] NETw5v64 C:\Windows\system32\DRIVERS\NETw5v64.sys 20:06:06.0869 0x6c50 NETw5v64 - ok 20:06:06.0899 0x6c50 NetworkX - ok 20:06:06.0929 0x6c50 [ 4AC08BD6AF2DF42E0C3196D826C8AEA7, 8D7DE921E14BAF09D7E2704CFB2FB1C8A78A46DAF86CDF7A347C5D113A8C110B ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 20:06:06.0956 0x6c50 nfrd960 - ok 20:06:07.0004 0x6c50 [ 9DC33E66BB7E6470BFE8AA9EF5FBED43, 23E583B264BBD7933E3A000F00D646ABE526D1068C41BC24CF93739529FCA339 ] NlaSvc C:\Windows\System32\nlasvc.dll 20:06:07.0033 0x6c50 NlaSvc - ok 20:06:07.0072 0x6c50 [ B298874F8E0EA93F06EC40AA8D146478, 275D769E5EFD3153985DAF84C5B22B9D65428E09AB41099901ABDD03B3A2625D ] Npfs C:\Windows\system32\drivers\Npfs.sys 20:06:07.0101 0x6c50 Npfs - ok 20:06:07.0154 0x6c50 [ ACB62BAA1C319B17752553DF3026EEEB, 5A309DF390A097245250BB64AD5F8575BECA601E0A122DDCB494C67D3D9EA089 ] nsi C:\Windows\system32\nsisvc.dll 20:06:07.0193 0x6c50 nsi - ok 20:06:07.0225 0x6c50 [ 1523AF19EE8B030BA682F7A53537EAEB, B000630CE4B562D39B5EE4148409B2E01D8924D33D27607B24ADC901357E7AA5 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 20:06:07.0265 0x6c50 nsiproxy - ok 20:06:07.0354 0x6c50 [ 2ACCAA3C3C55370A32F17B3595E1A217, 8539A293A5E1EBA2CC0FA9E999099D3B6B035D41069398AE17D737BBE4D9FEA8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 20:06:07.0487 0x6c50 Ntfs - ok 20:06:07.0527 0x6c50 [ DD5D684975352B85B52E3FD5347C20CB, BB03C50D5178643550C024130E20FD9A023AE110B3C85A2D6E18FB8DBB3A12E4 ] Null C:\Windows\system32\drivers\Null.sys 20:06:07.0564 0x6c50 Null - ok 20:06:07.0597 0x6c50 [ 2C040B7ADA5B06F6FACADAC8514AA034, EF32F7C411090230ED1D95B2D01E8464DCC89D72EFD94BBC8DF6856D00B1A783 ] nvraid C:\Windows\system32\drivers\nvraid.sys 20:06:07.0614 0x6c50 nvraid - ok 20:06:07.0629 0x6c50 [ F7EA0FE82842D05EDA3EFDD376DBFDBA, 0ED0543A5331C0D8BBFD1BE3174482ED1B3EE70CA41CE8CE5C81977C37B3D129 ] nvstor C:\Windows\system32\drivers\nvstor.sys 20:06:07.0646 0x6c50 nvstor - ok 20:06:07.0670 0x6c50 [ 19067CA93075EF4823E3938A686F532F, 81339372E90CE9E2594461146A82B62452CF9DB3FF53381D30F6922059EDCF99 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 20:06:07.0687 0x6c50 nv_agp - ok 20:06:07.0695 0x6c50 NwlnkFlt - ok 20:06:07.0707 0x6c50 NwlnkFwd - ok 20:06:07.0800 0x6c50 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 20:06:07.0829 0x6c50 odserv - ok 20:06:07.0880 0x6c50 [ 7B58953E2F263421FDBB09A192712A85, 50F2E667BDD477514BC5B9513E3E8837F4964CFE96ADE849ED6DBE1D7BEA4928 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 20:06:07.0939 0x6c50 ohci1394 - ok 20:06:07.0978 0x6c50 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 20:06:07.0997 0x6c50 ose - ok 20:06:08.0063 0x6c50 [ 9AE31D2E1D15C10D91318E0EC149CEAC, CEA8A4AD1D6BB9C1ECBDE7A1946DD655104E20224436B96AD69A76F8E2B25680 ] p2pimsvc C:\Windows\system32\p2psvc.dll 20:06:08.0140 0x6c50 p2pimsvc - ok 20:06:08.0185 0x6c50 [ 9AE31D2E1D15C10D91318E0EC149CEAC, CEA8A4AD1D6BB9C1ECBDE7A1946DD655104E20224436B96AD69A76F8E2B25680 ] p2psvc C:\Windows\system32\p2psvc.dll 20:06:08.0276 0x6c50 p2psvc - ok 20:06:08.0314 0x6c50 [ AECD57F94C887F58919F307C35498EA0, CD8E8B54A445EF0DC485D5F221588875C98328596F64EE03B2D8BD0B860504FB ] Parport C:\Windows\system32\drivers\parport.sys 20:06:08.0390 0x6c50 Parport - ok 20:06:08.0426 0x6c50 [ B43751085E2ABE389DA466BC62A4B987, 167CB6B18B6B7B74A229A976833E1FBE6D51C9C0EB8A23C92FC2465B692DF383 ] partmgr C:\Windows\system32\drivers\partmgr.sys 20:06:08.0442 0x6c50 partmgr - ok 20:06:08.0475 0x6c50 [ 9AB157B374192FF276C1628FBDBA2B0E, E63E2EE1ABEEC5234F4F1318757EDB4A7567057B1DF1A2414C8698D47062B6AC ] PcaSvc C:\Windows\System32\pcasvc.dll 20:06:08.0494 0x6c50 PcaSvc - ok 20:06:08.0515 0x6c50 [ 47AB1E0FC9D0E12BB53BA246E3A0906D, 82B452D614B535FAD3AFEEA06DFBBF8F7C5031563A2558CFA04F9B94C76E45DF ] pci C:\Windows\system32\drivers\pci.sys 20:06:08.0537 0x6c50 pci - ok 20:06:08.0563 0x6c50 [ 8D618C829034479985A9ED56106CC732, 9F3773A5184064092920FA2C88CCF5BFE44C63573B443E67230C4F596B7884C2 ] pciide C:\Windows\system32\DRIVERS\pciide.sys 20:06:08.0576 0x6c50 pciide - ok 20:06:08.0607 0x6c50 [ 037661F3D7C507C9993B7010CEEE6288, A7B415675B14FD755D0167BBA458A902AA9ABFC4343A1B887289D31DE8A55285 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 20:06:08.0625 0x6c50 pcmcia - ok 20:06:08.0664 0x6c50 [ 58865916F53592A61549B04941BFD80D, 3511AF2EFD06636E144C36ECA8C7AA1A33C269EDB10A6D879AA25D9E11359AA9 ] PEAUTH C:\Windows\system32\drivers\peauth.sys 20:06:08.0747 0x6c50 PEAUTH - ok 20:06:08.0821 0x6c50 [ 0ED8727EA0172860F47258456C06CAEA, 3CDAA1044E412EC4303CEABD36A8C7BADA2D6C6692E09B8FE440709E3F4F0166 ] PerfHost C:\Windows\SysWow64\perfhost.exe 20:06:08.0858 0x6c50 PerfHost - ok 20:06:08.0903 0x6c50 [ 2C3BA65F8CA712730050C29104E093F9, 9F352B6380BBB5340FD5230196F129AF47E2E837E6C8B4CA3656EFB38424F25F ] PGEffect C:\Windows\system32\DRIVERS\pgeffect.sys 20:06:08.0916 0x6c50 PGEffect - ok 20:06:09.0004 0x6c50 [ E9E68C1A0F25CF4A7AC966EEA74EE89E, 6C6903A856C29AD690FDA1B74ADB2222C3453FBE2B364245FA61D53C77C586C0 ] pla C:\Windows\system32\pla.dll 20:06:09.0090 0x6c50 pla - ok 20:06:09.0138 0x6c50 [ FE6B0F59215C9FD9F9D26539C58C8B82, 52CF8BE31A28430226D117EB80974AEAE5EA07F39DE881164232D44BF67FF752 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 20:06:09.0176 0x6c50 PlugPlay - ok 20:06:09.0218 0x6c50 [ 9AE31D2E1D15C10D91318E0EC149CEAC, CEA8A4AD1D6BB9C1ECBDE7A1946DD655104E20224436B96AD69A76F8E2B25680 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll 20:06:09.0281 0x6c50 PNRPAutoReg - ok 20:06:09.0333 0x6c50 [ 9AE31D2E1D15C10D91318E0EC149CEAC, CEA8A4AD1D6BB9C1ECBDE7A1946DD655104E20224436B96AD69A76F8E2B25680 ] PNRPsvc C:\Windows\system32\p2psvc.dll 20:06:09.0400 0x6c50 PNRPsvc - ok 20:06:09.0475 0x6c50 [ 89A5560671C2D8B4A4B51F3E1AA069D8, 07DEE5D73DDE09F954E2E13BB5603F0033829B6199C81A7C1709D94AB92B351E ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 20:06:09.0522 0x6c50 PolicyAgent - ok 20:06:09.0569 0x6c50 [ 23386E9952025F5F21C368971E2E7301, F7241C1799A8AA0E9106B101B841670304DC695FD8D290C690CE0ED5C13BC514 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 20:06:09.0601 0x6c50 PptpMiniport - ok 20:06:09.0628 0x6c50 [ 5080E59ECEE0BC923F14018803AA7A01, 2E201511821AECCF056962399AFA3533ED765A3E7FD30E7B38A6D13837367E69 ] Processor C:\Windows\system32\drivers\processr.sys 20:06:09.0667 0x6c50 Processor - ok 20:06:09.0695 0x6c50 [ EF321BEED9CF3DF60EBA29A1D618AD8A, FE277119BCC9938054DFA670844B31E4F66C19EBC6E59E747F99C38F76A433BD ] ProfSvc C:\Windows\system32\profsvc.dll 20:06:09.0731 0x6c50 ProfSvc - ok 20:06:09.0749 0x6c50 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D, 6585A87CE55EE5C51B18DF86E8EDFC6A909D96C87522FF4183F8BA9355E8DD44 ] ProtectedStorage C:\Windows\system32\lsass.exe 20:06:09.0776 0x6c50 ProtectedStorage - ok 20:06:09.0818 0x6c50 [ C5AB7F0809392D0DA027F4A2A81BFA31, B5BC9712AD93661A77AF4D67DB5F05C58A93CF7CDD6F7BA20568C0A9F4630321 ] PSched C:\Windows\system32\DRIVERS\pacer.sys 20:06:09.0850 0x6c50 PSched - ok 20:06:09.0923 0x6c50 [ 0B83F4E681062F3839BE2EC1D98FD94A, 47E1B8014C59981693F5544872AF00383528AAEF0C6FE9AE8C45A6359EFB067D ] ql2300 C:\Windows\system32\drivers\ql2300.sys 20:06:09.0983 0x6c50 ql2300 - ok 20:06:10.0012 0x6c50 [ E1C80F8D4D1E39EF9595809C1369BF2A, 5C18F8366049C690FC8AA4A992AA0765A6607F72E0EF889A5F3757E59FB1C143 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 20:06:10.0028 0x6c50 ql40xx - ok 20:06:10.0069 0x6c50 [ 90574842C3DA781E279061A3EFF91F07, F87DE7355DAA4FACF2126A0427C08BAAD9E647E0B02EE5447746BE969B28DA8D ] QWAVE C:\Windows\system32\qwave.dll 20:06:10.0096 0x6c50 QWAVE - ok 20:06:10.0109 0x6c50 [ E8D76EDAB77EC9C634C27B8EAC33ADC5, 171A3C5D5C3C5845C3BF9A4BCD88E744B025C910AC2F528D0E7D66F173FF0BED ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 20:06:10.0130 0x6c50 QWAVEdrv - ok 20:06:10.0192 0x6c50 [ ED4E69C31EF566266BE13638EBE9DA56, BF47F5955BF271E509136677A0ABD37F490066111A76E621257A0F297D8DE8CC ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll 20:06:10.0226 0x6c50 RapiMgr - ok 20:06:10.0241 0x6c50 [ 1013B3B663A56D3DDD784F581C1BD005, 36B83F234C2D6A6112BC8B5EF0AB5075EE98AC0BED702C37E4C1C3D17EB49956 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 20:06:10.0281 0x6c50 RasAcd - ok 20:06:10.0324 0x6c50 [ B2AE18F847D07F0044404DDF7CB04497, 24B1D5E1D0621160640264656E3D447C611DEE1B0EE308971EF85F0AC3D9F7DD ] RasAuto C:\Windows\System32\rasauto.dll 20:06:10.0365 0x6c50 RasAuto - ok 20:06:10.0409 0x6c50 [ AC7BC4D42A7E558718DFDEC599BBFC2C, E059EB9472FDDB73AF09FFEBA58D8284AFCDAB1516E0C5759980E60C892F8126 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 20:06:10.0441 0x6c50 Rasl2tp - ok 20:06:10.0488 0x6c50 [ 3AD83E4046C43BE510DE681588ACB8AF, C5445A23F35395B3EA3974C0D5E314E23D900C694D31F7B7A83FE9027D95A91C ] RasMan C:\Windows\System32\rasmans.dll 20:06:10.0543 0x6c50 RasMan - ok 20:06:10.0572 0x6c50 [ 4517FBF8B42524AFE4EDE1DE102AAE3E, F01C8A773A637B66192BD16DDE467CAECC6E62853DBDB507FF3FC67B4B388988 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 20:06:10.0606 0x6c50 RasPppoe - ok 20:06:10.0647 0x6c50 [ C6A593B51F34C33E5474539544072527, 8182C1D15CDC164363D3DD355197160167A00BA9FA833AA444317D06344EF7CE ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 20:06:10.0666 0x6c50 RasSstp - ok 20:06:10.0706 0x6c50 [ 322DB5C6B55E8D8EE8D6F358B2AAABB1, 07B89F701594F680F50A885B923521763A6131104CEE63D422E1C359C23AE2F6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 20:06:10.0745 0x6c50 rdbss - ok 20:06:10.0773 0x6c50 [ 603900CC05F6BE65CCBF373800AF3716, 83B010D51D1087673CF15FD0A992FD91CC910A073FEA9A8F20F6124B6E5489F2 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 20:06:10.0812 0x6c50 RDPCDD - ok 20:06:10.0846 0x6c50 [ C045D1FB111C28DF0D1BE8D4BDA22C06, 572986C93B982387EE94797A1EDE1C6C444B0F1078AC8201099452BFA021458F ] rdpdr C:\Windows\system32\drivers\rdpdr.sys 20:06:10.0893 0x6c50 rdpdr - ok 20:06:10.0902 0x6c50 [ CAB9421DAF3D97B33D0D055858E2C3AB, 66C353CD310A91FAB0D0871ACCE71110595B63536560D0331DA70B1E33AC45BE ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 20:06:10.0940 0x6c50 RDPENCDD - ok 20:06:10.0969 0x6c50 [ AE4BD9E1C33D351D8E607FC81F15160C, AD785CA72B7C6EB9F94B2E797C758C0F804DB26EE056DDC6D4F85BB562A02EA4 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 20:06:11.0019 0x6c50 RDPWD - ok 20:06:11.0052 0x6c50 [ C612B9557DA73F70D41F8A6FBC8E5344, D7D11F202066F848FBD3F26D9FF915C7F3D68F30631393B2049F3AC5A40FD108 ] RemoteAccess C:\Windows\System32\mprdim.dll 20:06:11.0091 0x6c50 RemoteAccess - ok 20:06:11.0136 0x6c50 [ 44B9D8EC2F3EF3A0EFB00857AF70D861, A45D8024A242456A73337C91663A3E1633BF163234CDFD5DF86840F31FFFE84D ] RemoteRegistry C:\Windows\system32\regsvc.dll 20:06:11.0171 0x6c50 RemoteRegistry - ok 20:06:11.0194 0x6c50 [ F46C457840D4B7A4DAAFEE739CE04102, 94E946036240B3BAFF17C4A49745E29E492ABBC7BE5110741B212DF4D7F45B84 ] RpcLocator C:\Windows\system32\locator.exe 20:06:11.0211 0x6c50 RpcLocator - ok 20:06:11.0250 0x6c50 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF, 3BE4B8EE22FA55D3A17D3718781C8BCA631C78F7928092561F6B79BB60E7D7FE ] RpcSs C:\Windows\system32\rpcss.dll 20:06:11.0308 0x6c50 RpcSs - ok 20:06:11.0330 0x6c50 [ 22A9CB08B1A6707C1550C6BF099AAE73, 46A9D40A03DC0B6C93274C0C1CDB132B2339E76E77CAB0F12AEDAD4C31822B91 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 20:06:11.0371 0x6c50 rspndr - ok 20:06:11.0399 0x6c50 [ 3E800D0DD24C5CFE61A1D71A3F6FEAB9, 7827F101407D658BF68529D3648CFB19110599E5254DA0A3B960AE0B0679E797 ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh64.sys 20:06:11.0460 0x6c50 RTL8169 - ok 20:06:11.0518 0x6c50 [ 23DAE458EDE953F3F0FF193CAC7B2D84, 5964607A8F3049D46D9D6707243C09CE3AB40E8020BED5CB99ABCFE33E043C88 ] RTSTOR C:\Windows\system32\drivers\RTSTOR64.SYS 20:06:11.0547 0x6c50 RTSTOR - ok 20:06:11.0565 0x6c50 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D, 6585A87CE55EE5C51B18DF86E8EDFC6A909D96C87522FF4183F8BA9355E8DD44 ] SamSs C:\Windows\system32\lsass.exe 20:06:11.0580 0x6c50 SamSs - ok 20:06:11.0602 0x6c50 [ CD9C693589C60AD59BBBCFB0E524E01B, F9EBD4FF4C712A563B1120D123012E41105D31402BE45D6F8C8DA71155D64ECB ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 20:06:11.0617 0x6c50 sbp2port - ok 20:06:11.0636 0x6c50 [ EECBBF7D76300E5558D316983961FFC1, 33E8237C9A39CEB1F0F4FB7D0466959121CF707899F43B17D6DDD92EBA398815 ] ScanUSBEMPIA C:\Windows\system32\DRIVERS\emScan64.sys 20:06:11.0665 0x6c50 ScanUSBEMPIA - ok 20:06:11.0706 0x6c50 [ FD1CDCF108D5EF3366F00D18B70FB89B, 5BCE3A9D5DC0B6937A734264C5B8DE0E6B8F77A869A118F94D57E662AAB28FE2 ] SCardSvr C:\Windows\System32\SCardSvr.dll 20:06:11.0751 0x6c50 SCardSvr - ok 20:06:11.0823 0x6c50 [ 0F838C811AD295D2A4489B9993096C63, 3DF2F973359249735810CB5AD52E05126A93A1C7D9F6274ACB018A0A125846BD ] Schedule C:\Windows\system32\schedsvc.dll 20:06:11.0876 0x6c50 Schedule - ok 20:06:11.0911 0x6c50 [ 5A268127633C7EE2A7FB87F39D748D56, 45C530A0EE0108543A75B9427F77EBB5E8350AE16C235763B6F32E72CE15C449 ] SCPolicySvc C:\Windows\System32\certprop.dll 20:06:11.0949 0x6c50 SCPolicySvc - ok 20:06:12.0003 0x6c50 [ 4FF71B076A7760FE75EA5AE2D0EE0018, DDDBC9530120F8C1AB449076F6F06F74354149B4C458E6682F957628EE795DE8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 20:06:12.0036 0x6c50 SDRSVC - ok 20:06:12.0073 0x6c50 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 20:06:12.0138 0x6c50 secdrv - ok 20:06:12.0181 0x6c50 [ 5ACDCBC67FCF894A1815B9F96D704490, FE0247A8BEDB860EBD46A9D49C641D0B9AA24EE34132CDDADC9F5A605238FDA7 ] seclogon C:\Windows\system32\seclogon.dll 20:06:12.0231 0x6c50 seclogon - ok 20:06:12.0257 0x6c50 [ 90973A64B96CD647FF81C79443618EED, 1D3CB7F724B7EADA6443DF07B258EE7FB7FEC92C2A7A9D3C57F6A220EF0DDDC4 ] SENS C:\Windows\System32\sens.dll 20:06:12.0304 0x6c50 SENS - ok 20:06:12.0335 0x6c50 [ F71BFE7AC6C52273B7C82CBF1BB2A222, 8C7F0E426B266DBBFE4BBE3333A33C338209BD8BE0E434A98D0D2CFD78D3F758 ] Serenum C:\Windows\system32\drivers\serenum.sys 20:06:12.0403 0x6c50 Serenum - ok 20:06:12.0429 0x6c50 [ E62FAC91EE288DB29A9696A9D279929C, 9B6A420556532F7F8D55FB6580A592A43BEA579A068B970C741A23DB079ECAD1 ] Serial C:\Windows\system32\drivers\serial.sys 20:06:12.0503 0x6c50 Serial - ok 20:06:12.0517 0x6c50 [ A842F04833684BCEEA7336211BE478DF, 9D964AEA237C44898098AC9C2D043F00C66EDA7D73C381D616737C01A9D0FF45 ] sermouse C:\Windows\system32\drivers\sermouse.sys 20:06:12.0554 0x6c50 sermouse - ok 20:06:12.0603 0x6c50 [ A8E4A4407A09F35DCCC3771AF590B0C4, F56ECE42CE81098FCCBCDFBBF006C3FB9EDD29C62F03C4EAE012EE690669481B ] SessionEnv C:\Windows\system32\sessenv.dll 20:06:12.0651 0x6c50 SessionEnv - ok 20:06:12.0679 0x6c50 [ 14D4B4465193A87C127933978E8C4106, A5C3F2F09E9A0715529B05AC1020EF0F432121E129447795257087E0D6A812FC ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 20:06:12.0737 0x6c50 sffdisk - ok 20:06:12.0759 0x6c50 [ 7073AEE3F82F3D598E3825962AA98AB2, 82A959A0970CBA8CC16D44736ED12158E59E138484F3F53EBDD3A4C02DA3700D ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 20:06:12.0804 0x6c50 sffp_mmc - ok 20:06:12.0826 0x6c50 [ 35E59EBE4A01A0532ED67975161C7B82, 4F4296B8903FCD06439CC8BF93C703852E523834F09CF9121FDA729A988AF11B ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 20:06:12.0871 0x6c50 sffp_sd - ok 20:06:12.0904 0x6c50 [ 6B7838C94135768BD455CBDC23E39E5F, 868E054ED546479DEAD7C2834C7AB080820522C16F5B4BEF0F3B279A33ABA9C8 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 20:06:12.0973 0x6c50 sfloppy - ok 20:06:13.0012 0x6c50 [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34, 9659C7B5046DE2C0416A74FDE6F798C3E78D38327CB71BAE49D57A8347A9097D ] SharedAccess C:\Windows\System32\ipnathlp.dll 20:06:13.0068 0x6c50 SharedAccess - ok 20:06:13.0132 0x6c50 [ 56793271ECDEDD350C5ADD305603E963, 7A29407C1C550FF3A6A3544811ABD971E9C760B984A7E64D5A1440C69D6AF483 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 20:06:13.0178 0x6c50 ShellHWDetection - ok 20:06:13.0202 0x6c50 [ 7A5DE502AEB719D4594C6471060A78B3, E8E16DF8AFFC230FBB1A5938925D464A1BA776184B8C020B37669EE2105DB9F2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys 20:06:13.0218 0x6c50 SiSRaid2 - ok 20:06:13.0261 0x6c50 [ 3A2F769FAB9582BC720E11EA1DFB184D, 83EEBCE37E8709FCE15FB44F546C727C56064ED49B73A471EA33480573558419 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 20:06:13.0277 0x6c50 SiSRaid4 - ok 20:06:13.0491 0x6c50 [ 388AE59FE75F1B959DFA0900923C61BB, 0D47F8B4B4FBE5BF041DBE75B0A14D905E9310FFA6F0160746455B38A349EA54 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe 20:06:13.0658 0x6c50 Skype C2C Service - ok 20:06:13.0748 0x6c50 [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 20:06:13.0773 0x6c50 SkypeUpdate - ok 20:06:13.0915 0x6c50 [ A9A27A8E257B45A604FDAD4F26FE7241, C5A1056522EE2BA7B70D34E391477A0E9351569CEF28B875172F4B363F6D4177 ] slsvc C:\Windows\system32\SLsvc.exe 20:06:14.0072 0x6c50 slsvc - ok 20:06:14.0130 0x6c50 [ FD74B4B7C2088E390A30C85A896FC3AF, 897F1F89A4DDB356CF6E59EFBC32A2081C0CADE283793DB6879D263F7B2E313F ] SLUINotify C:\Windows\system32\SLUINotify.dll 20:06:14.0163 0x6c50 SLUINotify - ok 20:06:14.0192 0x6c50 [ 290B6F6A0EC4FCDFC90F5CB6D7020473, 971888FE760641FF86165B9876E6FC12DBC309C0FED2734C60B9E0EBC078AAE0 ] Smb C:\Windows\system32\DRIVERS\smb.sys 20:06:14.0224 0x6c50 Smb - ok 20:06:14.0251 0x6c50 [ F8F47F38909823B1AF28D60B96340CFF, EFD948EE09F22F9F373A98BA6D9BC519FD9244986E4BE7B2BACD92D3C145AD1D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 20:06:14.0271 0x6c50 SNMPTRAP - ok 20:06:14.0304 0x6c50 [ 386C3C63F00A7040C7EC5E384217E89D, DD8766BCBD77EC6F67979A8B37B943A3A0E5478CE3FB129BF8FCA29B66529721 ] spldr C:\Windows\system32\drivers\spldr.sys 20:06:14.0320 0x6c50 spldr - ok 20:06:14.0365 0x6c50 [ F66FF751E7EFC816D266977939EF5DC3, 689BDD0B442830E162F2F9A8EFBD0E137F518C7F0CD92EDF4A43EFBA188B69F4 ] Spooler C:\Windows\System32\spoolsv.exe 20:06:14.0404 0x6c50 Spooler - ok 20:06:14.0453 0x6c50 [ 880A57FCCB571EBD063D4DD50E93E46D, D46BA584D1C33F17C4156127742FA470AA044C4BCE9E6A209E5B1F3A44C73350 ] srv C:\Windows\system32\DRIVERS\srv.sys 20:06:14.0523 0x6c50 srv - ok 20:06:14.0561 0x6c50 [ A1AD14A6D7A37891FFFECA35EBBB0730, AE00950D330EE4C05F5AA9BC7E63E974766D8E93B607CB3E683C727E8A65049D ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 20:06:14.0600 0x6c50 srv2 - ok 20:06:14.0631 0x6c50 [ 4BED62F4FA4D8300973F1151F4C4D8A7, 1835895B3E837F8862F7F669DFBDF5EAB627E5656377624474C17E92CF440D2A ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 20:06:14.0652 0x6c50 srvnet - ok 20:06:14.0689 0x6c50 [ 192C74646EC5725AEF3F80D19FF75F6A, 8F24FF139A46B1F837356B9D682526107D7BADCFA510842FEACB6F06C02D93D9 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 20:06:14.0740 0x6c50 SSDPSRV - ok 20:06:14.0783 0x6c50 [ 2EE3FA0308E6185BA64A9A7F2E74332B, EC6A15281685E6CDEADABDFD08C4AF980AD3B404C945EB121D7F90AFCA3D6849 ] SstpSvc C:\Windows\system32\sstpsvc.dll 20:06:14.0825 0x6c50 SstpSvc - ok 20:06:14.0868 0x6c50 [ 14B4DB4381E4A55F570D8BB699B791D6, 14975F249C59F9D13359FF064433246C46A8A3328ED69A23712649ACAAE9121D ] StillCam C:\Windows\system32\DRIVERS\serscan.sys 20:06:14.0908 0x6c50 StillCam - ok 20:06:14.0986 0x6c50 [ 15825C1FBFB8779992CB65087F316AF5, E9431C016D209A7322C0586F11EEF0AB461AB5822960287BB1D0FBC30183614D ] stisvc C:\Windows\System32\wiaservc.dll 20:06:15.0027 0x6c50 stisvc - ok 20:06:15.0053 0x6c50 [ 8A851CA908B8B974F89C50D2E18D4F0C, 27EA13E50B5B72ABF6C5B7B7D34A7154A12BB27B1C1B2EEFCAA36A96010DB4DC ] swenum C:\Windows\system32\DRIVERS\swenum.sys 20:06:15.0066 0x6c50 swenum - ok 20:06:15.0121 0x6c50 [ 6DE37F4DE19D4EFD9C48C43ADDBC949A, 9C3714238571704CEE2AD4F1E15029243E00B494345C41F74EFDF3F0328CC9EA ] swprv C:\Windows\System32\swprv.dll 20:06:15.0192 0x6c50 swprv - ok 20:06:15.0226 0x6c50 [ 2F26A2C6FC96B29BEFF5D8ED74E6625B, 0227EAF144BC35AA4FF2535E8C9974C0609B7634EE45F4166B9F88F79B17BBF1 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys 20:06:15.0242 0x6c50 Symc8xx - ok 20:06:15.0260 0x6c50 [ A909667976D3BCCD1DF813FED517D837, 0874DD4C1CA7AE2E519EBB45433BC9F11A574408F5D2F9E23A340CA76512F5CE ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys 20:06:15.0274 0x6c50 Sym_hi - ok 20:06:15.0296 0x6c50 [ 36887B56EC2D98B9C362F6AE4DE5B7B0, 7349FABACB633A9EEE3D4E241A5F443C28D23CC87F21EAAB3F1711644AA21D7C ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys 20:06:15.0312 0x6c50 Sym_u3 - ok 20:06:15.0367 0x6c50 [ 92D7A8B0F87B036F17D25885937897A6, 6759BAB11E5FBB143BE13DF1611AE5D41D379DF423D881E92E910DF6A37CBA85 ] SysMain C:\Windows\system32\sysmain.dll 20:06:15.0466 0x6c50 SysMain - ok 20:06:15.0493 0x6c50 [ 005CE42567F9113A3BCCB3B20073B029, B1831D71410AD6E7DEB59D26BF6D2D07D2F6112936D6A6FDA57E9296ADA4076D ] TabletInputService C:\Windows\System32\TabSvc.dll 20:06:15.0515 0x6c50 TabletInputService - ok 20:06:15.0554 0x6c50 [ CC2562B4D55E0B6A4758C65407F63B79, C6AD05B345C699A715EC13830D8EA6EE9822F4B713D15B1F29AC044674A0F498 ] TapiSrv C:\Windows\System32\tapisrv.dll 20:06:15.0591 0x6c50 TapiSrv - ok 20:06:15.0652 0x6c50 [ CDBE8D7C1E201B911CDC346D06617FB5, 16D5965E32A109DA38D77F4B6281081569D78371B2F522DE51100967F8776C7A ] TBS C:\Windows\System32\tbssvc.dll 20:06:15.0692 0x6c50 TBS - ok 20:06:15.0773 0x6c50 [ 00F77C4555FFABC21ADDB3160B2F574A, 292D3D9FC923283A25717831C5F1EA3046CB09F4F1B342BB93A506E68B9D4090 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 20:06:15.0879 0x6c50 Tcpip - ok 20:06:15.0950 0x6c50 [ 00F77C4555FFABC21ADDB3160B2F574A, 292D3D9FC923283A25717831C5F1EA3046CB09F4F1B342BB93A506E68B9D4090 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys 20:06:16.0127 0x6c50 Tcpip6 - ok 20:06:16.0184 0x6c50 [ C7E72A4071EE0200E3C075DACFB2B334, 925A68FD021C7957792F31E9D69A31C180BEB878CD93D2C3E2BE463F58011A6C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 20:06:16.0211 0x6c50 tcpipreg - ok 20:06:16.0238 0x6c50 [ D45586A9FACB2C9708B10E491EF748A6, 04F6A9D8B89DC8C2FAA77D415ACB12C51AA7FF65A2C9F209088232E447878B9C ] tdcmdpst C:\Windows\system32\DRIVERS\tdcmdpst.sys 20:06:16.0258 0x6c50 tdcmdpst - ok 20:06:16.0284 0x6c50 [ 1D8BF4AAA5FB7A2761475781DC1195BC, A28E972E9331BAD685D4C786FDE221565E0AD3E222B24B9182B7FA916BFCD9C8 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 20:06:16.0322 0x6c50 TDPIPE - ok 20:06:16.0345 0x6c50 [ 7F7E00CDF609DF657F4CDA02DD1C9BB1, 42A408E82D4017D27D3B0BBBA02BF4B21DEC060C89849785ED65962D18029B65 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 20:06:16.0383 0x6c50 TDTCP - ok 20:06:16.0416 0x6c50 [ 458919C8C42E398DC4802178D5FFEE27, E38828411DCE0AE2E2BF0D270FD80E47B46EDE4B44DAFD1DF11F54D427EACEB5 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 20:06:16.0446 0x6c50 tdx - ok 20:06:16.0599 0x6c50 [ 5E53CF8AD0FD33B35000C113656AB37B, D274DABC4DB03AC5B915F5111FF1218F4F2F9EC93B4A64E426BB7AD27A16C7A1 ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe 20:06:16.0775 0x6c50 TeamViewer7 - ok 20:06:16.0841 0x6c50 [ 8C19678D22649EC002EF2282EAE92F98, 551E7EBA54C2345F2B7FD7AAA7ADA4C852C94F1B35E6E4BBEF883BAFA34F6262 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 20:06:16.0857 0x6c50 TermDD - ok 20:06:16.0921 0x6c50 [ 5A67A1108E347FCA6A64B74FFB108BDE, F9EC8932366FF4101C6F059567DDF099D895C90567C3E770DDDC71562434A821 ] TermService C:\Windows\System32\termsrv.dll 20:06:16.0965 0x6c50 TermService - ok 20:06:16.0995 0x6c50 [ 56793271ECDEDD350C5ADD305603E963, 7A29407C1C550FF3A6A3544811ABD971E9C760B984A7E64D5A1440C69D6AF483 ] Themes C:\Windows\system32\shsvcs.dll 20:06:17.0030 0x6c50 Themes - ok 20:06:17.0049 0x6c50 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A, 18B0E3E83E41C80809E8140F4C90AB051566C84DD891EA411746EA74E6EAF053 ] THREADORDER C:\Windows\system32\mmcss.dll 20:06:17.0098 0x6c50 THREADORDER - ok 20:06:17.0165 0x6c50 [ FB8448D1B0DA00D70C28ADF9282B31BB, 7342DE5FBCFE6D1B0E916030176A485E8BFD65CD52640807082294D146697DDC ] TMachInfo C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe 20:06:17.0177 0x6c50 TMachInfo - ok 20:06:17.0246 0x6c50 [ 22BC804EFE155F54252F389B0781D7F2, 10E88C4E4CF3170DDD9D778FFBB4FC04C4D0FBC8E7781D4CD79B600564E4022C ] TNaviSrv C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe 20:06:17.0260 0x6c50 TNaviSrv - ok 20:06:17.0292 0x6c50 [ 19AF3434564E973BC232BBD629EC2BF6, 1791B3221F83E7E77A773F9635F1D304E06DCAAD5366292A227A2A453A9B196B ] TODDSrv C:\Windows\system32\TODDSrv.exe 20:06:17.0303 0x6c50 TODDSrv - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:19.0679 0x6c50 Detect skipped due to KSN trusted 20:06:19.0679 0x6c50 TODDSrv - ok 20:06:19.0831 0x6c50 [ 7810E3A97E004CD2641FD3FC5D2A62CD, 38E5541C48FC2FD826F51268AED15FE1A4F5E075A4767CD7978DE5ED31109E76 ] TosCoSrv C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe 20:06:19.0877 0x6c50 TosCoSrv - ok 20:06:19.0923 0x6c50 [ 97735D78DA5737EA8428D551FA263EEA, 34BA983558BC0FC8F7DAB5B43710CE42EFC1B01493FDC3455D48B56442B17AF6 ] TOSHIBA eco Utility Service C:\Program Files\TOSHIBA\TECO\TecoService.exe 20:06:19.0937 0x6c50 TOSHIBA eco Utility Service - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:22.0289 0x6c50 Detect skipped due to KSN trusted 20:06:22.0289 0x6c50 TOSHIBA eco Utility Service - ok 20:06:22.0315 0x6c50 [ B67C69E2982769355D9FF76DD3B2A0FD, 2EA039FF19648D2F6163ECE88A751B2889DD293F59BA254C59D2F21D4EE81EED ] TOSHIBA HDD SSD Alert Service C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe 20:06:22.0323 0x6c50 TOSHIBA HDD SSD Alert Service - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:24.0680 0x6c50 Detect skipped due to KSN trusted 20:06:24.0680 0x6c50 TOSHIBA HDD SSD Alert Service - ok 20:06:24.0779 0x6c50 [ DD50A5DF5F7B29FDB6B5FEA728C43DC3, 93D91A0821D6255DCCBF0466DB7B040801D15FACDE7AD053173E6E4999C61826 ] tos_sps64 C:\Windows\system32\DRIVERS\tos_sps64.sys 20:06:24.0832 0x6c50 tos_sps64 - ok 20:06:24.0910 0x6c50 [ 47DB100934D168232F63AB7331CCF6B5, DBDABCF0D1D7058DC1804BA32E3FC9BBC787A98B0D3CF0C80F2497D80C4E80C7 ] TPCHSrv C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe 20:06:24.0946 0x6c50 TPCHSrv - ok 20:06:25.0042 0x6c50 [ 5798620110A1E15D57459F0DE7F8863B, EE56A3A5297C907975B0781A408378F922DB1459001354AEFC1DE041F808F6D8 ] transmission_gate C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\transresistance_amplifier\antenna_interface_standard.exe 20:06:25.0052 0x6c50 transmission_gate - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:27.0492 0x6c50 transmission_gate ( UnsignedFile.Multi.Generic ) - warning 20:06:29.0902 0x6c50 [ F4689F05AF472A651A7B1B7B02D200E7, 3D34B8879DBC69013D1A87A3F47B8A622A60B57F2E962E9F5925C5A01F44640F ] TrkWks C:\Windows\System32\trkwks.dll 20:06:29.0981 0x6c50 TrkWks - ok 20:06:30.0040 0x6c50 [ 66328B08EF5A9305D8EDE36B93930369, FD8136BF15AB8D2DB15D011C4F813737D68EED1178462DB8CE40606C16185A30 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 20:06:30.0079 0x6c50 TrustedInstaller - ok 20:06:30.0105 0x6c50 [ B2388462329ACD17AF50D8701E0C1B18, 959D7B7CCB526367645BAA11C56C88C9AD741EE338BAD6513C54FC7ED43F3AC0 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 20:06:30.0135 0x6c50 tssecsrv - ok 20:06:30.0171 0x6c50 [ 89EC74A9E602D16A75A4170511029B3C, AACD82A6F5FE31FF1315F5CA69E5EB6BD172DD86610F0641177CCC131B542034 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys 20:06:30.0204 0x6c50 tunmp - ok 20:06:30.0259 0x6c50 [ 30A9B3F45AD081BFFC3BCAA9C812B609, 57204F1F72FEFA086FF1D8A14487D56F4DEDD3C50FBB6903E0C4AC749EA720DE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 20:06:30.0275 0x6c50 tunnel - ok 20:06:30.0310 0x6c50 [ 9A744CC3D804EC38A6C2C65BC3C6FCD8, 28CDF1A8614444F4A7249FB7189B423579CA91D1373138CD3E6C048CE6D2799F ] TVALZ C:\Windows\system32\DRIVERS\TVALZ_O.SYS 20:06:30.0328 0x6c50 TVALZ - ok 20:06:30.0364 0x6c50 [ BE32A8658A0B56474AD4D0BB8AFA8E55, EAF696605FCB7322AEE6EDF6D769DA088D2EF1205C3A206D296AB33F2C8AEF8A ] TVALZFL C:\Windows\system32\DRIVERS\TVALZFL.sys 20:06:30.0376 0x6c50 TVALZFL - ok 20:06:30.0401 0x6c50 [ FEC266EF401966311744BD0F359F7F56, 6EE0223AEFA7A81BEB155FC0CD4421C2BEBCDCBC9663C23064B0445101114BF8 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 20:06:30.0418 0x6c50 uagp35 - ok 20:06:30.0455 0x6c50 [ FAF2640A2A76ED03D449E443194C4C34, CC2517DCFE6962EB2EDEB93E44CB53B113974C9C69A050E3F36385C8D78E810B ] udfs C:\Windows\system32\DRIVERS\udfs.sys 20:06:30.0501 0x6c50 udfs - ok 20:06:30.0528 0x6c50 [ 060507C4113391394478F6953A79EEDC, 5D0AE5F1184165289DC8E8CD493607FCB68512CF90F748E3BFD2250655D784D4 ] UI0Detect C:\Windows\system32\UI0Detect.exe 20:06:30.0574 0x6c50 UI0Detect - ok 20:06:30.0597 0x6c50 [ 4EC9447AC3AB462647F60E547208CA00, F304125321B1ECA915EDDBDB6A71EAEF3123DCB5604C9497D72F12E0C1BD5315 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 20:06:30.0613 0x6c50 uliagpkx - ok 20:06:30.0650 0x6c50 [ 697F0446134CDC8F99E69306184FBBB4, A741882B8FE403E3A5DECED5D4A2254B14AF40ACECD4DAA3D00D71C2205C2C5F ] uliahci C:\Windows\system32\drivers\uliahci.sys 20:06:30.0672 0x6c50 uliahci - ok 20:06:30.0699 0x6c50 [ 31707F09846056651EA2C37858F5DDB0, A619AC4B32EA77AC29458894614870086C4DDB81525ADBCFF1AB8970FC5C257A ] UlSata C:\Windows\system32\drivers\ulsata.sys 20:06:30.0716 0x6c50 UlSata - ok 20:06:30.0740 0x6c50 [ 85E5E43ED5B48C8376281BAB519271B7, DBDA4216553F7C5EA0C579346D0A638E62766D5B8FCB1BFF3149BB37BBF978D3 ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys 20:06:30.0765 0x6c50 ulsata2 - ok 20:06:30.0876 0x6c50 [ 11E00C740AF777084B99DBADF61DBB1F, 44CCCF04CE95E0134801FA0A66735E67D095001F62CBEAB0440195F400981DFD ] ultra_high_frequency C:\Windows\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\buck_switcher\human_body_model.exe 20:06:30.0894 0x6c50 ultra_high_frequency - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:33.0252 0x6c50 ultra_high_frequency ( UnsignedFile.Multi.Generic ) - warning 20:06:35.0685 0x6c50 [ 46E9A994C4FED537DD951F60B86AD3F4, 256F93ED3BD43B50F0D4489164D959F95AB070CC25A80A46355D2B387D336224 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 20:06:35.0723 0x6c50 umbus - ok 20:06:35.0765 0x6c50 [ 7093799FF80E9DECA0680D2E3535BE60, 1CBFCCA84CB9212176BF5A1D32334BD54E58A2668A4746252738800468AD4AD4 ] upnphost C:\Windows\System32\upnphost.dll 20:06:35.0818 0x6c50 upnphost - ok 20:06:35.0880 0x6c50 [ 858CC93477F9A9383E07861892600FF9, C72B25E7F6AF46AC22F8D2A1FA0345B290AAE642442C8A388EA75944334BB289 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 20:06:35.0913 0x6c50 usbccgp - ok 20:06:35.0936 0x6c50 [ 9247F7E0B65852C1F6631480984D6ED2, E3360A0EE891B8BADEF5FF53F796C79D6AD218961087F866E451F3B6F278672A ] usbcir C:\Windows\system32\drivers\usbcir.sys 20:06:35.0996 0x6c50 usbcir - ok 20:06:36.0024 0x6c50 [ 82C3790E4E6F35087EF00994C7A72988, 95FA022BDAC65DCD2DA52C8FCC1F2C186B321F4599F40CB90262E24FD10AE16C ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 20:06:36.0041 0x6c50 usbehci - ok 20:06:36.0063 0x6c50 [ BE2EB33AF6EE2E5DA07EB987E0A321F5, 0FCFABA080C553451AE4FAFB54DFE57639251D97DA204C07EC66F469826F3B46 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 20:06:36.0086 0x6c50 usbhub - ok 20:06:36.0110 0x6c50 [ EBA14EF0C07CEC233F1529C698D0D154, FBA35D53A90FD6C3F91DA5ECE10EF29858CB4CB512AA20548225F83E9FE0A23D ] usbohci C:\Windows\system32\drivers\usbohci.sys 20:06:36.0166 0x6c50 usbohci - ok 20:06:36.0180 0x6c50 [ ACFEE697AF477021BB3EC78C5431FED2, DE529549074E7CA1601D889D62CFF45F00741EB584F9F2091D61527944334C2A ] usbprint C:\Windows\system32\drivers\usbprint.sys 20:06:36.0244 0x6c50 usbprint - ok 20:06:36.0281 0x6c50 [ B854C1558FCA0C269A38663E8B59B581, 08CC36B33FA2281FC88671BE051863AA8CA911446D24596049DB77FB4CB09EA6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 20:06:36.0312 0x6c50 USBSTOR - ok 20:06:36.0350 0x6c50 [ 308F6DDC052C970D679DA37D8A305279, E0F4C3C8F27E21C186289B115ECAB771777BC7E848F29D683C53C9F936F30848 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 20:06:36.0367 0x6c50 usbuhci - ok 20:06:36.0430 0x6c50 [ BF7A051DCCBA57C95541135B29CE0FB4, F3570ED5B57CB64A8222164038D53D1C2009013C50CFDE2E6105E8D4F642FEA6 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 20:06:36.0467 0x6c50 usbvideo - ok 20:06:36.0508 0x6c50 [ C690C8B45DB67DBA284B72D1FD649D2C, 52432616E19ADB450247D8A0FA75265BD74F1FACE6A063830F0E604C8E415CC0 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys 20:06:36.0540 0x6c50 usb_rndisx - ok 20:06:36.0576 0x6c50 [ D76E231E4850BB3F88A3D9A78DF191E3, 98CAD31C41AD155EA853DF850D94FA29543C3A7D26262D1B6881281D033CEBAF ] UxSms C:\Windows\System32\uxsms.dll 20:06:36.0608 0x6c50 UxSms - ok 20:06:36.0665 0x6c50 [ 294945381DFA7CE58CECF0A9896AF327, 67414C6D79D2826BC86BB37349C9D74DB4B667310CBC1ABFD103E26332AE4A00 ] vds C:\Windows\System32\vds.exe 20:06:36.0734 0x6c50 vds - ok 20:06:36.0788 0x6c50 [ 916B94BCF1E09873FFF2D5FB11767BBC, 072007FED4EF30C4D7AF8628CBEB2AC99EEAD99D7AB533E90E3748E3D4F11C28 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 20:06:36.0825 0x6c50 vga - ok 20:06:36.0863 0x6c50 [ B83AB16B51FEDA65DD81B8C59D114D63, 97D39AA763037752D87216B83896AFD2AD6DFEBB3BCDCED7A9ABFE5706B804C5 ] VgaSave C:\Windows\System32\drivers\vga.sys 20:06:36.0902 0x6c50 VgaSave - ok 20:06:36.0921 0x6c50 [ 8294B6C3FDB6C33F24E150DE647ECDAA, FEBD9536EF61F700DFD5D9CB815808C8415D5B23590B3CE17B12D84F4670EA4D ] viaide C:\Windows\system32\drivers\viaide.sys 20:06:36.0934 0x6c50 viaide - ok 20:06:36.0984 0x6c50 [ 2B7E885ED951519A12C450D24535DFCA, 249009EBC1D306D51FDFA4A89588462AA2D8B6DF0A20BE250B60DD73200CB7F3 ] volmgr C:\Windows\system32\drivers\volmgr.sys 20:06:37.0000 0x6c50 volmgr - ok 20:06:37.0056 0x6c50 [ CEC5AC15277D75D9E5DEC2E1C6EAF877, EA989E257C4409F9AF3B35C4D7ED9134D930FE3733B077C4F3AA5497796F2CB0 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 20:06:37.0093 0x6c50 volmgrx - ok 20:06:37.0142 0x6c50 [ 582F710097B46140F5A89A19A6573D4B, 6F695B17BF476D027D3012352F3D4DFD0E0815823DA51A136767ECEF6D64A1CA ] volsnap C:\Windows\system32\drivers\volsnap.sys 20:06:37.0165 0x6c50 volsnap - ok 20:06:37.0195 0x6c50 [ A68F455ED2673835209318DD61BFBB0E, 8B2B255E8E2F8B415F7AC0F7F4C423F639DD47737F7CEE0F7C816D9A6893C5F7 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 20:06:37.0220 0x6c50 vsmraid - ok 20:06:37.0303 0x6c50 [ B75232DAD33BFD95BF6F0A3E6BFF51E1, A8120040F144AD42A39347A615F31BF752634994D4D134E2FAD23FEA9C1D71DF ] VSS C:\Windows\system32\vssvc.exe 20:06:37.0422 0x6c50 VSS - ok 20:06:37.0476 0x6c50 [ F14A7DE2EA41883E250892E1E5230A9A, EBCB74BE26437F6FE84A3B41AD034F451D4BD12CA77D4C7A433DB912E7D31593 ] W32Time C:\Windows\system32\w32time.dll 20:06:37.0551 0x6c50 W32Time - ok 20:06:37.0581 0x6c50 [ FEF8FE5923FEAD2CEE4DFABFCE3393A7, D682FBF78CF987609AF35A019E7C90CBE02800D7DFC272FFDD71D82AA362FA7A ] WacomPen C:\Windows\system32\drivers\wacompen.sys 20:06:37.0640 0x6c50 WacomPen - ok 20:06:37.0714 0x6c50 [ B8E7049622300D20BA6D8BE0C47C0CFD, 57CF218D1F7D505E354A15C552D94E3C5A68C2B07D7A76EBB0C87A0BFF5772D9 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys 20:06:37.0745 0x6c50 Wanarp - ok 20:06:37.0769 0x6c50 [ B8E7049622300D20BA6D8BE0C47C0CFD, 57CF218D1F7D505E354A15C552D94E3C5A68C2B07D7A76EBB0C87A0BFF5772D9 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 20:06:37.0800 0x6c50 Wanarpv6 - ok 20:06:37.0859 0x6c50 [ 382A7B0B632EC98DE5F0658DA9DE6159, 97C3B3B78FC7A6716C909CECAC006A37BF54EAAC57A5CCA0F38C85A9B56FA045 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll 20:06:37.0902 0x6c50 WcesComm - ok 20:06:37.0957 0x6c50 [ B4E4C37D0AA6100090A53213EE2BF1C1, 67107F542F3C937FA5D9B28BA2EBFE994FFE287F16C0BFCF79AD20B95C13F78B ] wcncsvc C:\Windows\System32\wcncsvc.dll 20:06:37.0998 0x6c50 wcncsvc - ok 20:06:38.0027 0x6c50 [ EA4B369560E986F19D93F45A881484AC, B61411D64901C9CB8C80402CD1E8808F5A0FACA38206C8D584C7C1019F5ADF5A ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 20:06:38.0062 0x6c50 WcsPlugInService - ok 20:06:38.0092 0x6c50 [ 0C17A0816F65B89E362E682AD5E7266E, 6233213D07B234056A1EC6FE1166A65371645269132B428FF3A29DDC0000301A ] Wd C:\Windows\system32\drivers\wd.sys 20:06:38.0110 0x6c50 Wd - ok 20:06:38.0165 0x6c50 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 20:06:38.0209 0x6c50 Wdf01000 - ok 20:06:38.0233 0x6c50 [ C5EFDA73EBFCA8B02A094898DE0A9276, DE54E06CBE20EB27D88B29C3AE19CDFA0AE4933D6DCD640912C74A1065C9391C ] WdiServiceHost C:\Windows\system32\wdi.dll 20:06:38.0280 0x6c50 WdiServiceHost - ok 20:06:38.0299 0x6c50 [ C5EFDA73EBFCA8B02A094898DE0A9276, DE54E06CBE20EB27D88B29C3AE19CDFA0AE4933D6DCD640912C74A1065C9391C ] WdiSystemHost C:\Windows\system32\wdi.dll 20:06:38.0338 0x6c50 WdiSystemHost - ok 20:06:38.0380 0x6c50 [ 3E6D05381CF35F75EBB055544A8ED9AC, BEC43932BD6C34406B8850E28178B937BFD9512E49FD9F8C54DA7EE272B478A9 ] WebClient C:\Windows\System32\webclnt.dll 20:06:38.0405 0x6c50 WebClient - ok 20:06:38.0440 0x6c50 [ 8D40BC587993F876658BF9FB0F7D3462, 23748E11F5CCE3D4978D748780283FA5A1154F53FF70D924CB2128FF8A4705F7 ] Wecsvc C:\Windows\system32\wecsvc.dll 20:06:38.0470 0x6c50 Wecsvc - ok 20:06:38.0492 0x6c50 [ 9C980351D7E96288EA0C23AE232BD065, BA627B04C4259716B451F421F5310A69D8DE9407DE496AA0489139125E9DC16A ] wercplsupport C:\Windows\System32\wercplsupport.dll 20:06:38.0526 0x6c50 wercplsupport - ok 20:06:38.0537 0x6c50 [ 66B9ECEBC46683F47EDC06333C075FEF, 35C33596D97DB65DE0A687644E9AD924AD5FCBAFD83FE4D23E7E58EF4BC4CC87 ] WerSvc C:\Windows\System32\WerSvc.dll 20:06:38.0570 0x6c50 WerSvc - ok 20:06:38.0580 0x6c50 WinDefend - ok 20:06:38.0590 0x6c50 WinHttpAutoProxySvc - ok 20:06:38.0653 0x6c50 [ D2E7296ED1BD26D8DB2799770C077A02, B494719C2DEB7B9D2505866868143C4E4F59B88461920AA49BD9F1251B6571B8 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 20:06:38.0690 0x6c50 Winmgmt - ok 20:06:38.0792 0x6c50 [ 6CBB0C68F13B9C2EC1B16F5FA5E7C869, 22D53818F4A4ACE441E121151CFD7CB1EDF5E8303DF9E113C9BB304B418A96EF ] WinRM C:\Windows\system32\WsmSvc.dll 20:06:38.0904 0x6c50 WinRM - ok 20:06:38.0961 0x6c50 [ 7F2F9E48566B2087F2AAAD258CB2A8D4, E6A34DF879F6D9F24C8CE5F131B4A104BCDF8720B0F4C6211FF4C9BD567EFB77 ] winusb C:\Windows\system32\DRIVERS\winusb.sys 20:06:38.0993 0x6c50 winusb - ok 20:06:39.0044 0x6c50 [ EC339C8115E91BAED835957E9A677F16, 3BBE6D4F1731198E8F0CFEE67C4CCA5C31E6968F8E02EF9E029C1847A26F513B ] Wlansvc C:\Windows\System32\wlansvc.dll 20:06:39.0101 0x6c50 Wlansvc - ok 20:06:39.0136 0x6c50 [ E18AEBAAA5A773FE11AA2C70F65320F5, 9E2F6FC0F46D0EEEBF4BC1E3D8800B3D268079ABF8EDDD70CD21B789883D7390 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 20:06:39.0163 0x6c50 WmiAcpi - ok 20:06:39.0219 0x6c50 [ 21FA389E65A852698B6A1341F36EE02D, 2D60911EAAE26C4CE3DEF4FAD1EDE093F912209AA90741AAA8B93F06B37DF605 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 20:06:39.0261 0x6c50 wmiApSrv - ok 20:06:39.0293 0x6c50 WMPNetworkSvc - ok 20:06:39.0319 0x6c50 [ CBC156C913F099E6680D1DF9307DB7A8, FD8B227F445679E31048CA41442A978A98F267FED96E22C235F63C72AEEE2AB0 ] WPCSvc C:\Windows\System32\wpcsvc.dll 20:06:39.0351 0x6c50 WPCSvc - ok 20:06:39.0399 0x6c50 [ 490A18B4E4D53DC10879DEAA8E8B70D9, D069D8C22CF78A0970E85C0B9879E08FF19458FAA75AE447BCF9236731F64252 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 20:06:39.0426 0x6c50 WPDBusEnum - ok 20:06:39.0467 0x6c50 [ 5E2401B3FC1089C90E081291357371A9, 224D378EEBFB721CBC24896CAE01B31DC54B6ED82C19C5B954E96D5E98B83C59 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys 20:06:39.0484 0x6c50 WpdUsb - ok 20:06:39.0670 0x6c50 [ B42B9D8ABC18DFBCD6044BC10B3A9B99, FD00756DADD3BFC382FC80D7D1D25592385E647C7EAC318C154E949A51D9DC27 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe 20:06:39.0751 0x6c50 WPFFontCache_v0400 - ok 20:06:39.0799 0x6c50 [ 8A900348370E359B6BFF6A550E4649E1, 3EAD0B951EAF8E940ED6A79FAAAB7D22ACCF3985795F80206A3A07161D319B39 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 20:06:39.0836 0x6c50 ws2ifsl - ok 20:06:39.0881 0x6c50 [ 9EA3E6D0EF7A5C2B9181961052A4B01A, F39BAF1FC7DD1600C0052C2A6AA3BCBC8CA3DA96D1AC7B42B0F2810D051EE1B0 ] wscsvc C:\Windows\System32\wscsvc.dll 20:06:39.0909 0x6c50 wscsvc - ok 20:06:39.0919 0x6c50 WSearch - ok 20:06:39.0995 0x6c50 [ 67C1BCCCB4B59552BD62827F812A3A8B, 720E1E5FFC99AF803F1257446AE2DA492B494FC8A8B8E73F96B9CA98C3BBCFE6 ] WTGService C:\Program Files (x86)\XSManager\WTGService.exe 20:06:40.0022 0x6c50 WTGService - ok 20:06:40.0137 0x6c50 [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv C:\Windows\system32\wuaueng.dll 20:06:40.0269 0x6c50 wuauserv - ok 20:06:40.0302 0x6c50 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 20:06:40.0330 0x6c50 WudfPf - ok 20:06:40.0358 0x6c50 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 20:06:40.0384 0x6c50 WUDFRd - ok 20:06:40.0412 0x6c50 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 20:06:40.0431 0x6c50 wudfsvc - ok 20:06:40.0469 0x6c50 [ 1EA18D9ADA8FE282D7B5822F1BD05E8F, 5401FC8E362497DB42813CDAF320F56466B6B955E45F9B7D9FFB1144CFFC78A7 ] XS Stick Service C:\Windows\service4g.exe 20:06:40.0485 0x6c50 XS Stick Service - ok 20:06:40.0528 0x6c50 ================ Scan global =============================== 20:06:40.0552 0x6c50 [ 060DC3A7A9A2626031EB23D90151428D, 4AADA06E83603E9D4894D6CFC8DADB018307B384F438C809D4BC8E22BD937C3B ] C:\Windows\system32\basesrv.dll 20:06:40.0610 0x6c50 [ D665D594B7E11133D29D726BDDC7A5B0, 8EE45E719ACB23F388F2BE7E4311588E90DE7CF50988927CF0FED36DE380FACB ] C:\Windows\system32\winsrv.dll 20:06:40.0676 0x6c50 [ D665D594B7E11133D29D726BDDC7A5B0, 8EE45E719ACB23F388F2BE7E4311588E90DE7CF50988927CF0FED36DE380FACB ] C:\Windows\system32\winsrv.dll 20:06:40.0734 0x6c50 [ E8E05C05FBFEBD47FB7DBF7233F15302, 3099E64022E0E5347F7C8EFAD6D6E577157FC6B49386F3203E5438B38AE1EE36 ] C:\Windows\system32\services.exe 20:06:40.0743 0x6c50 [ Global ] - ok 20:06:40.0744 0x6c50 ================ Scan MBR ================================== 20:06:40.0752 0x6c50 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0 20:06:41.0105 0x6c50 \Device\Harddisk0\DR0 - ok 20:06:41.0106 0x6c50 ================ Scan VBR ================================== 20:06:41.0114 0x6c50 [ A866F57A1EB46383B81E8D8BAE0739AD ] \Device\Harddisk0\DR0\Partition1 20:06:41.0162 0x6c50 \Device\Harddisk0\DR0\Partition1 - ok 20:06:41.0177 0x6c50 [ 738F77C32C7B8A1077E399FF6BAA035C ] \Device\Harddisk0\DR0\Partition2 20:06:41.0210 0x6c50 \Device\Harddisk0\DR0\Partition2 - ok 20:06:41.0215 0x6c50 ================ Scan generic autorun ====================== 20:06:41.0255 0x6c50 [ 1E7F5900D76DD48BB09AF10091C7365A, 33A1AFE5F2AA7191E8E248B200BD25AD72B477BF8F71251565A5317677EDDE1A ] C:\Windows\WindowsMobile\wmdSync.exe 20:06:41.0285 0x6c50 Windows Mobile-based device management - ok 20:06:41.0286 0x6c50 Windows Defender - ok 20:06:41.0289 0x6c50 TPwrMain - ok 20:06:41.0295 0x6c50 TPCHWMsg - ok 20:06:41.0359 0x6c50 [ F239F658C66FB06B6DE902D6F597E3CF, 3A8CDCBA95010CE594B37A8C7EAB18635D2175D94899003F2B3B62E821942437 ] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe 20:06:41.0443 0x6c50 TosSENotify - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:43.0799 0x6c50 Detect skipped due to KSN trusted 20:06:43.0799 0x6c50 TosSENotify - ok 20:06:43.0900 0x6c50 [ DFB75217B883F58344DA719C9C7D32F4, 9D7F7FD5187F29A1B48D22EF3EA9E5642B86A33400A0D320754694869D4847EB ] C:\Program Files\Toshiba\Registration\ToshibaReminder.exe 20:06:43.0916 0x6c50 Toshiba Registration - ok 20:06:43.0921 0x6c50 SmoothView - ok 20:06:43.0926 0x6c50 SmartFaceVWatcher - ok 20:06:44.0012 0x6c50 [ 6410B6368CEC7EF9D982D90B214DDA20, 296E09F89F4144FAFEFAE4FCFC150902530E135A2797F770C57B388EABD7FC03 ] C:\Program Files\Realtek\Audio\HDA\Skytel.exe 20:06:44.0124 0x6c50 Skytel - ok 20:06:44.0399 0x6c50 [ 5062A411D76AAEF4918A4BBB7FB12E70, A9AD939CFEED6B99F7B91D3BCE16E5F01A73BF00C93F5485753C9371DBAE9DC7 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 20:06:44.0814 0x6c50 RtHDVCpl - ok 20:06:44.0830 0x6c50 HSON - ok 20:06:44.0872 0x6c50 [ 949C387212AFCF45DF86191BDA5E336E, BA4417730F69F3CB44BB46307665728967A5E6DC2EF118F411B3EAC710A16859 ] C:\Program Files\Apoint2K\Apoint.exe 20:06:44.0914 0x6c50 Apoint - ok 20:06:44.0958 0x6c50 [ 81CC023D8EE53F137AEB735717CEA919, 7E2FC912BDEC160B37B459346A778CF62D03A4910D807C9810FDC7FBB9AA1CB2 ] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe 20:06:45.0008 0x6c50 SVPWUTIL - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:47.0372 0x6c50 Detect skipped due to KSN trusted 20:06:47.0372 0x6c50 SVPWUTIL - ok 20:06:47.0482 0x6c50 [ 13E7CFE8E269ED15E7FC9C3EBBCB7E2B, 3B64263BA305F094B09B1961621C50CA6F9771F80CAC9F916B18BB0C7753A662 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 20:06:47.0509 0x6c50 SunJavaUpdateSched - ok 20:06:47.0587 0x6c50 [ 9C00C20E9763CB54BFBBD82B7058E5E4, 00CCB43ECC50F4FCBB8B7A4DF86CB4EBC25FFDC9032475AB0A28B9962CB37CF0 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 20:06:47.0606 0x6c50 StartCCC - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:49.0966 0x6c50 Detect skipped due to KSN trusted 20:06:49.0966 0x6c50 StartCCC - ok 20:06:50.0068 0x6c50 [ 846965AE55A2662B1576C0F392DD1D6E, 0ADE383991FDC5A49DD15A27CB52CF75ABF518F0335E92003C0FF75DB417BBDC ] C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe 20:06:50.0088 0x6c50 SSBkgdUpdate - ok 20:06:50.0123 0x6c50 [ A4A66195EB0ECD574A32AAA92DC0A7BD, 4E30D565917158316A541BB29D73BF5F3A01DAB1240363276DE0C5D59B2BFFFE ] C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe 20:06:50.0166 0x6c50 PPort11reminder - ok 20:06:50.0188 0x6c50 [ 27249F2A900032F3C2DFAB8DE8F16399, 88F85055FC6A6C3872A9A3697F92E26EEB51655F5D53F49EE22768829839808A ] C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe 20:06:50.0201 0x6c50 PaperPort PTD - ok 20:06:50.0259 0x6c50 [ 1AA5F0A2E3E65A9F6B35C19A7C9D7762, AB08124D101C4FE8B6D4A6056783D2EAD5C049BE39A3DE772E008CD43E36F443 ] C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe 20:06:50.0310 0x6c50 Nikon Message Center 2 - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:52.0671 0x6c50 Detect skipped due to KSN trusted 20:06:52.0671 0x6c50 Nikon Message Center 2 - ok 20:06:52.0720 0x6c50 [ E09B922FB422AEFD1493E0657669BD8B, F0692307530C3F20E95D762A674366E6B7BB702EB445666995630EE7D1B18BEB ] C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe 20:06:52.0738 0x6c50 NDSTray.exe - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:55.0088 0x6c50 Detect skipped due to KSN trusted 20:06:55.0088 0x6c50 NDSTray.exe - ok 20:06:55.0159 0x6c50 [ C5B2679B0AE204FDD0415199B7AFEF20, A488839697F72F5E914DC87077F196F355E4AA85A5AC9C555D67BB47CC198750 ] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe 20:06:55.0172 0x6c50 KeNotify - ok 20:06:55.0208 0x6c50 [ BE72C212B14FC8F872A70C6C311D0529, 9C6A8060FD4505925894D8FD08EFCDE16BEEAAC70264519135B261C026333CAA ] C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe 20:06:55.0220 0x6c50 IndexSearch - ok 20:06:55.0277 0x6c50 [ 9A0E769CB3AC06B5EF443CFB6228B137, 4DD34F8E034E7E3A800F6CBA80B16AA81B2300FE8ECFD542FED3C242F954993A ] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe 20:06:55.0314 0x6c50 HWSetup - detected UnsignedFile.Multi.Generic ( 1 ) 20:06:57.0674 0x6c50 Detect skipped due to KSN trusted 20:06:57.0674 0x6c50 HWSetup - ok 20:06:57.0721 0x6c50 [ 3779C261A13DAC62B409858FB8E92EDC, CC8691626D45EA19A58FAD7B09B838BABB644E2F5ED6CB8E23A9233BC166B70A ] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe 20:06:57.0731 0x6c50 ControlCenter3 - detected UnsignedFile.Multi.Generic ( 1 ) 20:07:00.0084 0x6c50 Detect skipped due to KSN trusted 20:07:00.0084 0x6c50 ControlCenter3 - ok 20:07:00.0159 0x6c50 [ 68120B7C3FF8A3664341D0536C0C3198, F7118E542A3ECAE6B29ADFBA88F2ADE4BCD3270D61993EDF6C340676B66003FD ] C:\Program Files (x86)\TOSHIBA\ConfigFree\cfFncEnabler.exe 20:07:00.0167 0x6c50 cfFncEnabler.exe - detected UnsignedFile.Multi.Generic ( 1 ) 20:07:02.0541 0x6c50 Detect skipped due to KSN trusted 20:07:02.0541 0x6c50 cfFncEnabler.exe - ok 20:07:02.0644 0x6c50 [ ACEDE59715B81820EC39A2DB70828152, 110F14BE75307239C5CBD7E528E77E857D4AD8BBE85EADFF8367C29D8BFAB52C ] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe 20:07:02.0736 0x6c50 BrMfcWnd - detected UnsignedFile.Multi.Generic ( 1 ) 20:07:05.0086 0x6c50 Detect skipped due to KSN trusted 20:07:05.0086 0x6c50 BrMfcWnd - ok 20:07:05.0248 0x6c50 [ 66177D4C99FD8B578C7C56DE445E4D5D, 003D0254D7C693A72DE84CB76858F8D67D9FD62206F1B56DF7F5D0FA834C3BA7 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 20:07:05.0324 0x6c50 avgnt - ok 20:07:05.0413 0x6c50 [ CB08561AB36857CCF74BF11475C9AEB2, 5F15F6868A719A0A84D3E0FE2BC4E76975C50FA99D642279DDA972269ADFDB8B ] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe 20:07:05.0431 0x6c50 Avira Systray - ok 20:07:05.0522 0x6c50 [ B63E5C7807334A3A8F731062F15462CC, F4E501F749C10C44E8F501A34D8DD309892968BE70DA17734267BBCDDC351444 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 20:07:05.0613 0x6c50 Adobe ARM - ok 20:07:05.0624 0x6c50 {7373A75C-5294-4286-8223-BB43E7C0955A} - ok 20:07:05.0779 0x6c50 [ 9E35FF7F943AE0FB89192BFE058B7FD4, 54712A4FA296AE28CF834F90B77B2EEB69020E3D5B5CF24674BD8DACA25195B9 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 20:07:05.0885 0x6c50 Sidebar - ok 20:07:05.0894 0x6c50 WindowsWelcomeCenter - ok 20:07:05.0979 0x6c50 [ 9E35FF7F943AE0FB89192BFE058B7FD4, 54712A4FA296AE28CF834F90B77B2EEB69020E3D5B5CF24674BD8DACA25195B9 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 20:07:06.0064 0x6c50 Sidebar - ok 20:07:06.0074 0x6c50 WindowsWelcomeCenter - ok 20:07:06.0218 0x6c50 Skype - ok 20:07:06.0592 0x6c50 [ C81F59B7D524FB462F73B27757084618, 6C7DF7257ED0D9C69A53B98F15EAF1B42D302659791EE80F48D06BCA11EA09D8 ] C:\Program Files\CCleaner\CCleaner64.exe 20:07:07.0096 0x6c50 CCleaner Monitoring - ok 20:07:07.0114 0x6c50 WMPNSCFG - ok 20:07:07.0262 0x6c50 [ 4E8AA6E2418484B1E49BE77A9C3ED77A, E3B4FAD26ABFF97C63399241D6335F98744AA034BC750F4C70F15DE9EB9E7BA2 ] C:\ProgramData\Avira\Antivirus\LOGFILES\dual_band\peak_reverse_voltage.exe 20:07:07.0293 0x6c50 absolute_zero - detected UnsignedFile.Multi.Generic ( 1 ) 20:07:09.0647 0x6c50 Detect turned to UDS exact due to KSN untrusted 20:07:09.0647 0x6c50 absolute_zero ( UDS:DangerousObject.Multi.Generic ) - infected 20:07:09.0647 0x6c50 Force sending object to P2P due to detect: C:\ProgramData\Avira\Antivirus\LOGFILES\dual_band\peak_reverse_voltage.exe 20:07:12.0157 0x6c50 Object send P2P result: true 20:07:14.0634 0x6c50 [ B6F25883A7A16D95020DFCDC61F2136C, C2575EA153375B8B6D7FD0D646C39B4185C29A027C78E37F6CF5E0BABEC6B535 ] C:\ProgramData\NortonInstaller\Logs\01-18-2013-18h20m09s\signal_to_noise_ratio\open_collector.exe 20:07:14.0668 0x6c50 tdd_wlan - detected UnsignedFile.Multi.Generic ( 1 ) 20:07:17.0024 0x6c50 tdd_wlan ( UnsignedFile.Multi.Generic ) - warning 20:07:19.0544 0x6c50 [ 7E6B4AD487ED241D8224108E8E86A351, 8246F75DF64BBCC35CDC8DFF2F5157AD9523179344AC0517D42BAC99F2E87E8D ] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe 20:07:19.0643 0x6c50 FlashPlayerUpdate - ok 20:07:19.0645 0x6c50 Waiting for KSN requests completion. In queue: 1 20:07:20.0645 0x6c50 Waiting for KSN requests completion. In queue: 1 20:07:21.0645 0x6c50 Waiting for KSN requests completion. In queue: 1 20:07:22.0661 0x6c50 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.10.414 ), 0x41010 ( enabled : outofdate ) 20:07:22.0667 0x6c50 Win FW state via NFP2: enabled 20:07:25.0011 0x6c50 ============================================================ 20:07:25.0011 0x6c50 Scan finished 20:07:25.0011 0x6c50 ============================================================ 20:07:25.0022 0x70cc Detected object count: 4 20:07:25.0022 0x70cc Actual detected object count: 4 20:08:36.0387 0x70cc transmission_gate ( UnsignedFile.Multi.Generic ) - skipped by user 20:08:36.0387 0x70cc transmission_gate ( UnsignedFile.Multi.Generic ) - User select action: Skip 20:08:36.0393 0x70cc ultra_high_frequency ( UnsignedFile.Multi.Generic ) - skipped by user 20:08:36.0393 0x70cc ultra_high_frequency ( UnsignedFile.Multi.Generic ) - User select action: Skip 20:08:36.0481 0x70cc C:\ProgramData\Avira\Antivirus\LOGFILES\dual_band\peak_reverse_voltage.exe - copied to quarantine 20:08:36.0495 0x70cc HKU\S-1-5-21-4018626186-3194338725-3947389847-1000\Software\Microsoft\Windows\CurrentVersion\Run:absolute_zero - will be deleted on reboot 20:08:36.0495 0x70cc C:\ProgramData\Avira\Antivirus\LOGFILES\dual_band\peak_reverse_voltage.exe - will be deleted on reboot 20:08:36.0495 0x70cc absolute_zero ( UDS:DangerousObject.Multi.Generic ) - User select action: Delete 20:08:36.0501 0x70cc tdd_wlan ( UnsignedFile.Multi.Generic ) - skipped by user 20:08:36.0501 0x70cc tdd_wlan ( UnsignedFile.Multi.Generic ) - User select action: Skip 20:08:36.0645 0x70cc KLMD registered as C:\Windows\system32\drivers\12355586.sys # |
Servus, Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers |
#Malwarebytes Anti-Rootkit BETA 1.09.1.1004 www.malwarebytes.org Database version: main: v2015.06.05.06 rootkit: v2015.06.02.01 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 Standard :: TOSHIBA [administrator] 06.06.2015 00:07:00 mbar-log-2015-06-06 (00-07-00).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 356915 Time elapsed: 31 minute(s), 46 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end)# |
Servus, Scan mit Combofix
|
#Combofix Logfile: Code: ComboFix 15-05-31.01 - Standard 06.06.2015 21:57:42.2.2 - x645C616939100B85E558DA92B899A0FC36 # Gruss Bien |
Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4 Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
Schritt 5
Bitte poste mit deiner nächsten Antwort
|
#AdwCleaner Logfile: Code: # AdwCleaner v4.206 - Bericht erstellt 07/06/2015 um 13:41:30# |
Die Funde mit AdwCleaner auch entfernen lassen! Dann weiter mit den anderen Tools. |
Das dauert... leider seine Zeit :( Die Funde von Adwcleaner habe ich entfernen lassen ... #Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Suchlauf Datum: 07.06.2015 Suchlauf-Zeit: 14:32:17 Logdatei: MalewarebyteLog.txt Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.06.07.03 Rootkit Datenbank: v2015.06.02.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows Vista Service Pack 2 CPU: x64 Dateisystem: NTFS Benutzer: Standard Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 383783 Verstrichene Zeit: 27 Min, 28 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 0 (Keine schädliche Elemente gefunden) Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 0 (Keine schädliche Elemente gefunden) Dateien: 0 (Keine schädliche Elemente gefunden) Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end)# #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.8.9 (06.06.2015:1) OS: Windows (TM) Vista Home Premium x64 Ran by Standard on 07.06.2015 at 15:03:01,30 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] C:\Program Files (x86)\xsmanager Successfully deleted: [Folder] C:\Users\Standard\AppData\Roaming\xsmanager ~~~ FireFox Emptied folder: C:\Users\Standard\AppData\Roaming\mozilla\firefox\profiles\kuvl55p3.default\minidumps [164 files] ~~~ Chrome [C:\Users\Standard\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Standard\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Standard\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Standard\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 07.06.2015 at 15:08:28,29 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # #Shortcut Cleaner 1.3.8 by Lawrence Abrams (Grinler) Bleeping Computer - Technical Support and Computer Help Copyright 2008-2015 BleepingComputer.com More Information about Shortcut Cleaner can be found at this link: Shortcut Cleaner Download Windows Version: Windows (TM) Vista Home Premium Service Pack 2 Program started at: 06/07/2015 03:09:38 PM. Scanning for registry hijacks: * No issues found in the Registry. Searching for Hijacked Shortcuts: Searching C:\Users\Standard\AppData\Roaming\Microsoft\Windows\Start Menu\ Searching C:\ProgramData\Microsoft\Windows\Start Menu\ Searching C:\Users\Standard\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ Searching C:\Users\Public\Desktop\ Searching C:\Users\Standard\Desktop\ Searching C:\Users\Public\Desktop\ 0 bad shortcuts found. Program finished at: 06/07/2015 03:09:42 PM Execution time: 0 hours(s), 0 minute(s), and 3 seconds(s) # # FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-06-2015# Hallo Matthias, ich möchte Dir erst mal für Deine Bemühungen danken... War es das jetzt ? Gruß Reinhart |
Servus, nein, wir sind noch nicht ganz fertig. Bitte noch wie beschrieben die aktuelle Addition.txt von FRST posten, dann kann es weitergehen. |
ok dann wollen wir mal wieder #Additional FRST Logfile: Code: scan result of Farbar Recovery Scan Tool (x64) Version:03-06-2015# |
Servus, hast du eine Idee, was das hier für zwei Einträge sein könnten? Zitat:
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.
Das gleich bitte mit folgender Datei auch machen: Code: C:\ProgramData\NortonInstaller\Logs\01-18-2013-18h20m09s\signal_to_noise_ratio\chain_reaction.exe |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 03:16 Uhr. |
Copyright ©2000-2025, Trojaner-Board
