Trojaner-Board - Mahnungsmail mit ZIP Datei ( MS-DOS)

Code:

Zoek results: 
 
 

Zoek.exe Version 4.0.0.2 Updated 12-May-2013

Tool run by Helliot on 14.05.2013 at  0:08:41,79.

Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected
 

==== Creating Sample__0010.zip ======================

 

Copied file C:\Users\Helliot\AppData\Roaming\winqj.exe to sample

sample\winqj.exe renamed to E22798971428A641159D872AB6398487
 

C:\Users\Public\Desktop\sample__0010.zip created successfully
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CC5789DA-CFD7-4FB0-A85C-3CB1CB0670A7} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Internet Explorer\SearchScopes\{CC5789DA-CFD7-4FB0-A85C-3CB1CB0670A7} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Internet Explorer\Approved Extensions\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} deleted successfully
 

==== Deleting Files \ Folders ======================
 

"C:\Users\Helliot\AppData\Roaming\Mozilla\Firefox\Profiles\64xea5dh.default\searchplugins\ChatZumSearch.xml" deleted

"C:\Users\Helliot\AppData\Roaming\winqj.exe" deleted

"C:\Users\Helliot\AppData\Roaming\yabss" deleted

"C:\Windows\SysWow64\searchplugins" deleted

"C:\Windows\SysWow64\Extensions" deleted
 

==== Files Recently Created / Modified ======================
 

====== C:\Windows ====

2013-04-28 15:53:35        6350D9552582DE10D9CC5644585862ED        61        ----a-w-        C:\Windows\sbwin.ini

2013-04-28 11:20:36        C419DF63E0121D72411285780C2FC6CC        90112        ------w-        C:\Windows\Updreg.EXE

2013-04-28 11:20:17        FF467E3359DDC0FAAD21ED5B52C9B333        4850        ----a-w-        C:\Windows\cthdaENG.reg

2013-04-28 11:20:17        A1D767F8316709BF73771767439A0403        4888        ----a-w-        C:\Windows\cthdaGER.reg

====== C:\Users\Helliot\AppData\Local\Temp ====

2013-05-13 21:29:55        B28C334C03CEE7C5E829C43AE75DAE5A        248008        ----a-w-        C:\Users\Helliot\AppData\Local\Temp\AskSLib.dll

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2013-05-12 13:08:23        8265CD5C67D0A35DFC40F3D1A8AC994C        94656        ----a-w-        C:\Windows\Sysnative\WPRO_41_2001woem.tmp

====== C:\Windows\Sysnative\drivers =====

2013-05-07 10:11:18        4BDDB42CB6BF46452FA7155EA5381576        83160        ----a-w-        C:\Windows\Sysnative\drivers\avnetflt.sys

2013-04-28 10:40:27        B4F53BCA4C688FF47F04FA90098F896E        194488        ----a-w-        C:\Windows\Sysnative\drivers\nvhda64v.sys

2013-04-28 10:40:27        4EE399576F76D38C04745DB739BBC8C7        11048736        ----a-w-        C:\Windows\Sysnative\drivers\nvlddmkm.sys

2013-04-27 21:50:43        84C83C7577407C4FF6AB1379EE944610        15672        ----a-w-        C:\Windows\Sysnative\drivers\regi.sys

2013-04-26 15:20:56        7D89B0C443F6068E5B27AA3B972069FF        1579520        ----a-w-        C:\Windows\Sysnative\drivers\athrx.sys

2013-04-23 22:07:51        B98F8C6E31CD07B2E6F71F7F648E38C0        1656680        ----a-w-        C:\Windows\Sysnative\drivers\ntfs.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-04-28 11:20:30        --------        d-----w-        C:\Program Files\Creative

2013-04-28 10:40:01        --------        d-----w-        C:\Program Files\NVIDIA Corporation

======= C:\Program Files (x86) =====

2013-05-12 12:34:57        --------        d-----w-        C:\Program Files (x86)\IrfanView

2013-04-28 11:20:26        --------        d-----w-        C:\Program Files (x86)\Common Files\Creative Labs Shared

2013-04-28 11:20:16        --------        d-----w-        C:\Program Files (x86)\Creative

2013-04-28 10:40:36        --------        d-----w-        C:\Program Files (x86)\NVIDIA Corporation

2013-04-26 15:30:34        --------        d-----w-        C:\Program Files (x86)\SoftwareUpdater

2013-04-26 15:21:06        --------        d-----w-        C:\Program Files (x86)\TP-LINK

2013-04-24 15:29:44        --------        d-----w-        C:\Program Files (x86)\FRITZ!Box

======= C: =====

2013-05-13 20:43:27        13937724FC242D744423B4F3D9D65663        27504        ----a-w-        C:\AdwCleaner[S1].txt

2013-05-13 20:43:00        11D86E73E00D06E0905427CDCE07EC87        27466        ----a-w-        C:\AdwCleaner[R1].txt

====== C:\Users\Helliot\AppData\Roaming ======

2013-05-13 20:19:35        --------        d-----w-        C:\users\Helliot\AppData\Roaming\Xjoaxcnkzfb

2013-05-12 12:34:57        --------        d-----w-        C:\users\Helliot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView

2013-05-12 12:34:57        --------        d-----w-        C:\users\Helliot\AppData\Roaming\IrfanView

2013-04-28 10:40:52        --------        d-sh--we        C:\users\UpdatusUser\AppData\Local\Verlauf

2013-04-28 10:40:52        --------        d-sh--we        C:\users\UpdatusUser\AppData\Local\Temporary Internet Files

2013-04-28 10:40:52        --------        d-sh--we        C:\users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-04-28 10:40:52        --------        d-s---w-        C:\users\UpdatusUser\AppData\Roaming\Microsoft

2013-04-28 10:40:52        --------        d-----w-        C:\users\UpdatusUser\AppData\Roaming\Media Center Programs

2013-04-28 10:40:52        --------        d-----w-        C:\users\UpdatusUser\AppData\Local\Temp

2013-04-28 10:40:52        --------        d-----w-        C:\users\UpdatusUser\AppData\Local\Microsoft

2013-04-28 10:40:52        --------        d-----r-        C:\users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-04-28 10:40:52        --------        d-----r-        C:\users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-04-27 22:02:13        --------        d-----w-        C:\users\Helliot\AppData\Roaming\tiger-k

2013-04-27 22:01:50        --------        d-----w-        C:\users\Helliot\AppData\Roaming\Leawo

2013-04-27 21:58:41        --------        d-----w-        C:\users\Helliot\AppData\Local\iDeerApp

2013-04-27 21:25:31        --------        d-----w-        C:\users\Helliot\AppData\Roaming\dvdcss

2013-04-26 15:21:30        --------        d-----w-        C:\users\Helliot\AppData\Roaming\TP-LINK

====== C:\Users\Helliot ======

2013-05-13 21:30:18        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2013-04-28 11:20:26        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative

2013-04-28 10:40:52        6FC234AD3752E1267B34FB12BCD6718B        20        --sh--w-        C:\Users\UpdatusUser\ntuser.ini

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Vorlagen

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Startmenü

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\SendTo

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Recent

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Netzwerkumgebung

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Lokale Einstellungen

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Eigene Dateien

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Druckumgebung

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Cookies

2013-04-28 10:40:52        --------        d-sh--we        C:\Users\UpdatusUser\Anwendungsdaten

2013-04-28 10:40:52        --------        d--h--w-        C:\Users\UpdatusUser\AppData

2013-04-28 10:40:52        --------        d-----w-        C:\Users\UpdatusUser\Searches

2013-04-28 10:40:52        --------        d-----w-        C:\Users\UpdatusUser\Saved Games

2013-04-28 10:40:52        --------        d-----w-        C:\Users\UpdatusUser\Contacts

2013-04-28 10:40:52        --------        d-----w-        C:\ProgramData\NVIDIA

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Videos

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Pictures

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Music

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Links

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Favorites

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Downloads

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Documents

2013-04-28 10:40:52        --------        d-----r-        C:\Users\UpdatusUser\Desktop

2013-04-28 10:40:38        --------        d-----w-        C:\ProgramData\NVIDIA Corporation

2013-04-27 21:51:06        --------        d-----w-        C:\ProgramData\Protexis

2013-04-26 15:21:06        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK

2013-04-26 15:20:31        --------        d-----w-        C:\ProgramData\TP-LINK

2013-04-24 15:29:44        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!Box

2013-04-15 20:30:41        --------        d-----w-        C:\ProgramData\Bohemia Interactive
 

====== C: exe-files ==

2013-05-13 21:29:07        4754539F6D178B84DE28DBCBE7CDA23A        2092792        ----a-w-        C:\Users\Helliot\Downloads\avira_free_antivirus.exe

2013-05-13 20:56:18        AEDB6AA9598337DA300942DEF6B5EFC5        4745728        ----a-w-        C:\Users\Helliot\Downloads\aswMBR.exe

2013-05-13 20:46:27        4ADCFEE16EE9978F06157634669D36FB        602112        ----a-w-        C:\Users\Helliot\Downloads\OTL.exe

2013-05-13 20:42:50        A95866BA166A09E360BB88DA72D4531D        628743        ----a-w-        C:\Users\Helliot\Downloads\adwcleaner_2.3.0.0.exe

2013-05-12 12:34:57        8CB12333BCDEB350254A1231CE7778A9        37608        ----a-w-        C:\Program Files (x86)\IrfanView\iv_uninstall.exe

2013-05-12 12:34:57        37C340F0FCC41DCCD2B70532C36E38AB        585912        ----a-w-        C:\Program Files (x86)\IrfanView\i_view32.exe

2013-05-12 12:34:57        1F48184B12CE39462EB62B09C72DE160        97280        ----a-w-        C:\Program Files (x86)\IrfanView\Plugins\Slideshow.exe

2013-05-07 10:11:18        ADA0D1407E2C328FB95686E9D5AB88B5        111328        ----a-w-        C:\Program Files (x86)\Avira\AntiVir Desktop\ccuac.exe

2013-05-07 10:11:18        5FF8FFD589DA25F43C4FE944A4B2AE0A        775224        ----a-w-        C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

2013-05-07 10:11:00        8C2C2E5119E844B43085CBC73106754B        597560        ----a-w-        C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\update.exe

2013-05-07 10:11:00        22DC787A09D2EC7E3F1138A26C41083C        46960        ----a-w-        C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\updrgui.exe

=== C: other files ==

2013-05-13 22:10:04        51970339E1B64E8EE364D8D162F76D3D        190810        ----a-w-        C:\Users\Public\Desktop\sample__0010.zip

2013-05-13 21:40:00        62A9D50283697D8AE63FAD926F37CDC3        131072        ----a-w-        C:\Users\Helliot\Downloads\Vertragliche Mahnung vom 13.05.2013 Inkasso.com

2013-05-13 21:39:56        0615ED21FF49745850D841E942B51236        79760        ----a-w-        C:\Users\Helliot\Downloads\Vertragliche Mahnung vom 13.05.2013 Inkasso.zip

2013-05-13 21:39:37        EA7AB410AE36506FEBBBE36C5E0CE29B        79767        ----a-w-        C:\Users\Helliot\Downloads\Zahlungserinnerung 13.05.2013 52043177 www.conrad.de.zip

2013-05-07 10:11:18        4BDDB42CB6BF46452FA7155EA5381576        83160        ----a-w-        C:\Windows\System32\drivers\avnetflt.sys

2013-05-07 10:11:18        4BDDB42CB6BF46452FA7155EA5381576        83160        ----a-w-        C:\Program Files (x86)\Avira\AntiVir Desktop\avnetflt.sys
 

==== Startup Registry Enabled ======================
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"rwzbbtrb"="C:\Users\Helliot\AppData\Roaming\Xjoaxcnkzfb\wmpszbtrb.exe"

"winqj"="C:\Users\Helliot\AppData\Roaming\winqj.exe -autorun"
 

[HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-21-1876908282-3715187805-3812892742-1010\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"

"USB3MON"="C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

"avgnt"="C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"UpdReg"="C:\Windows\UpdReg.EXE"

"Sound Blaster Recon3D PCIe Control Panel"="C:\Program Files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe /r"
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"rwzbbtrb"="C:\Users\Helliot\AppData\Roaming\Xjoaxcnkzfb\wmpszbtrb.exe"

"winqj"="C:\Users\Helliot\AppData\Roaming\winqj.exe -autorun"
 

==== Startup Registry Enabled x64 ======================
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Launch LCore"="C:\Program Files\Logitech Gaming Software\LCore.exe /minimized"

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"
 

==== Startup Folders ======================
 

2013-04-26 15:21:06        2303        ----a-w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
 

==== Task Scheduler Jobs ======================
 

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [28.04.2013 00:01]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [Undertermined Task]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [14.12.2012 19:06]

C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job --a------ [Undertermined Task]

C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job --a------ C:\Program Files (x86)\Intel\IntelR ME FW Recovery Agent\bin\Bootstrap.exe []
 

==== Firefox Extensions ======================
 

ProfilePath: C:\Users\Helliot\AppData\Roaming\Mozilla\Firefox\Profiles\64xea5dh.default

- ProxTube - Gesperrte YouTube Videos entsperren - %ProfilePath%\extensions\ich@maltegoetz.de

- Updated Ad Blocker for Firefox 11 - %ProfilePath%\extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
 

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 

==== Firefox Plugins ======================
 

Profilepath: C:\Users\Helliot\AppData\Roaming\Mozilla\Firefox\Profiles\64xea5dh.default

F7E72D3A281F922BACEC1A71A826D4C2        - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll -        Shockwave Flash
 
 

==== Set IE to Default ======================
 

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.de/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

No DefaultScope Set For HKCU
 

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.de/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
 

==== All HKCU SearchScopes ======================
 

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{1} Google  Url="hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
 

==== Empty IE Cache ======================
 

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Helliot\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
 

==== Empty FireFox Cache ======================
 

C:\users\Helliot\AppData\Local\Mozilla\Firefox\Profiles\64xea5dh.default\Cache emptied successfully
 

==== Empty Chrome Cache ======================
 

No Chrome User Data found
 

==== Empty All Flash Cache ======================
 

Flash Cache Emptied Successfully
 

==== Empty All Java Cache ======================
 

No Java Cache Found
 

After Reboot
 

==== Empty Temp Folders ======================
 

C:\Windows\Temp successfully emptied

C:\Users\Helliot\AppData\Local\Temp successfully emptied
 

==== Empty Recycle Bin ======================
 

C:\$RECYCLE.BIN successfully emptied

Code:

TDSSKiller results:
 

00:16:59.0513 3960  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

00:16:59.0608 3960  ============================================================

00:16:59.0608 3960  Current date / time: 2013/05/14 00:16:59.0608

00:16:59.0609 3960  SystemInfo:

00:16:59.0609 3960  

00:16:59.0609 3960  OS Version: 6.1.7601 ServicePack: 1.0

00:16:59.0609 3960  Product type: Workstation

00:16:59.0609 3960  ComputerName: MORPHEUS

00:16:59.0609 3960  UserName: Helliot

00:16:59.0609 3960  Windows directory: C:\Windows

00:16:59.0609 3960  System windows directory: C:\Windows

00:16:59.0609 3960  Running under WOW64

00:16:59.0609 3960  Processor architecture: Intel x64

00:16:59.0609 3960  Number of processors: 4

00:16:59.0609 3960  Page size: 0x1000

00:16:59.0609 3960  Boot type: Normal boot

00:16:59.0609 3960  ============================================================

00:16:59.0903 3960  Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 (238.47 Gb), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

00:16:59.0903 3960  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

00:16:59.0906 3960  ============================================================

00:16:59.0906 3960  \Device\Harddisk0\DR0:

00:16:59.0906 3960  MBR partitions:

00:16:59.0906 3960  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

00:16:59.0906 3960  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xC31D800

00:16:59.0906 3960  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC350000, BlocksNum 0x119A2800

00:16:59.0906 3960  \Device\Harddisk1\DR1:

00:16:59.0906 3960  MBR partitions:

00:16:59.0906 3960  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07800

00:16:59.0906 3960  ============================================================

00:16:59.0908 3960  C: <-> \Device\Harddisk0\DR0\Partition2

00:16:59.0909 3960  D: <-> \Device\Harddisk0\DR0\Partition3

00:16:59.0909 3960  F: <-> \Device\Harddisk1\DR1\Partition1

00:16:59.0909 3960  ============================================================

00:16:59.0909 3960  Initialize success

00:16:59.0909 3960  ============================================================

00:17:44.0499 2540  ============================================================

00:17:44.0499 2540  Scan started

00:17:44.0499 2540  Mode: Manual; SigCheck; TDLFS; 

00:17:44.0499 2540  ============================================================

00:17:44.0563 2540  ================ Scan system memory ========================

00:17:44.0563 2540  System memory - ok

00:17:44.0563 2540  ================ Scan services =============================

00:17:44.0588 2540  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

00:17:44.0636 2540  1394ohci - ok

00:17:44.0645 2540  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

00:17:44.0654 2540  ACPI - ok

00:17:44.0656 2540  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

00:17:44.0675 2540  AcpiPmi - ok

00:17:44.0680 2540  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

00:17:44.0690 2540  AdobeARMservice - ok

00:17:44.0709 2540  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

00:17:44.0722 2540  AdobeFlashPlayerUpdateSvc - ok

00:17:44.0728 2540  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

00:17:44.0744 2540  adp94xx - ok

00:17:44.0749 2540  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\drivers\adpahci.sys

00:17:44.0762 2540  adpahci - ok

00:17:44.0765 2540  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

00:17:44.0776 2540  adpu320 - ok

00:17:44.0779 2540  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

00:17:44.0820 2540  AeLookupSvc - ok

00:17:44.0826 2540  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

00:17:44.0843 2540  AFD - ok

00:17:44.0846 2540  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

00:17:44.0855 2540  agp440 - ok

00:17:44.0858 2540  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

00:17:44.0871 2540  ALG - ok

00:17:44.0873 2540  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

00:17:44.0881 2540  aliide - ok

00:17:44.0883 2540  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

00:17:44.0891 2540  amdide - ok

00:17:44.0894 2540  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

00:17:44.0905 2540  AmdK8 - ok

00:17:44.0907 2540  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

00:17:44.0918 2540  AmdPPM - ok

00:17:44.0921 2540  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

00:17:44.0931 2540  amdsata - ok

00:17:44.0935 2540  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

00:17:44.0945 2540  amdsbs - ok

00:17:44.0948 2540  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

00:17:44.0955 2540  amdxata - ok

00:17:44.0963 2540  [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

00:17:44.0972 2540  AntiVirSchedulerService - ok

00:17:44.0975 2540  [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

00:17:44.0984 2540  AntiVirService - ok

00:17:44.0987 2540  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

00:17:45.0029 2540  AppID - ok

00:17:45.0032 2540  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

00:17:45.0054 2540  AppIDSvc - ok

00:17:45.0057 2540  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll

00:17:45.0081 2540  Appinfo - ok

00:17:45.0084 2540  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\drivers\arc.sys

00:17:45.0094 2540  arc - ok

00:17:45.0096 2540  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys

00:17:45.0106 2540  arcsas - ok

00:17:45.0109 2540  [ 4DFF4312661F54EE87DC9A13CAEE60E0 ] asahci64        C:\Windows\system32\DRIVERS\asahci64.sys

00:17:45.0121 2540  asahci64 - ok

00:17:45.0124 2540  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

00:17:45.0146 2540  AsyncMac - ok

00:17:45.0148 2540  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

00:17:45.0156 2540  atapi - ok

00:17:45.0171 2540  [ 7D89B0C443F6068E5B27AA3B972069FF ] athr            C:\Windows\system32\DRIVERS\athrx.sys

00:17:45.0196 2540  athr - ok

00:17:45.0205 2540  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

00:17:45.0237 2540  AudioEndpointBuilder - ok

00:17:45.0245 2540  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

00:17:45.0267 2540  AudioSrv - ok

00:17:45.0270 2540  [ 09E6069EF94B345061B4BD3CEBD974C8 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

00:17:45.0279 2540  avgntflt - ok

00:17:45.0282 2540  [ 488486DAD09A5B6C6DBB8B990A8B2307 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

00:17:45.0292 2540  avipbb - ok

00:17:45.0295 2540  [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

00:17:45.0302 2540  avkmgr - ok

00:17:45.0306 2540  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

00:17:45.0325 2540  AxInstSV - ok

00:17:45.0332 2540  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

00:17:45.0347 2540  b06bdrv - ok

00:17:45.0351 2540  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

00:17:45.0364 2540  b57nd60a - ok

00:17:45.0368 2540  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

00:17:45.0379 2540  BDESVC - ok

00:17:45.0382 2540  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

00:17:45.0402 2540  Beep - ok

00:17:45.0411 2540  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

00:17:45.0441 2540  BFE - ok

00:17:45.0451 2540  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

00:17:45.0476 2540  BITS - ok

00:17:45.0479 2540  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

00:17:45.0488 2540  blbdrive - ok

00:17:45.0491 2540  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

00:17:45.0502 2540  bowser - ok

00:17:45.0504 2540  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

00:17:45.0515 2540  BrFiltLo - ok

00:17:45.0517 2540  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

00:17:45.0527 2540  BrFiltUp - ok

00:17:45.0531 2540  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

00:17:45.0543 2540  Browser - ok

00:17:45.0548 2540  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

00:17:45.0563 2540  Brserid - ok

00:17:45.0566 2540  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

00:17:45.0577 2540  BrSerWdm - ok

00:17:45.0579 2540  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

00:17:45.0590 2540  BrUsbMdm - ok

00:17:45.0592 2540  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

00:17:45.0601 2540  BrUsbSer - ok

00:17:45.0603 2540  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

00:17:45.0615 2540  BTHMODEM - ok

00:17:45.0618 2540  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

00:17:45.0641 2540  bthserv - ok

00:17:45.0644 2540  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

00:17:45.0667 2540  cdfs - ok

00:17:45.0670 2540  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

00:17:45.0681 2540  cdrom - ok

00:17:45.0684 2540  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

00:17:45.0706 2540  CertPropSvc - ok

00:17:45.0709 2540  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys

00:17:45.0721 2540  circlass - ok

00:17:45.0726 2540  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

00:17:45.0739 2540  CLFS - ok

00:17:45.0745 2540  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

00:17:45.0755 2540  clr_optimization_v2.0.50727_32 - ok

00:17:45.0762 2540  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

00:17:45.0771 2540  clr_optimization_v2.0.50727_64 - ok

00:17:45.0780 2540  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

00:17:45.0790 2540  clr_optimization_v4.0.30319_32 - ok

00:17:45.0797 2540  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

00:17:45.0803 2540  clr_optimization_v4.0.30319_64 - ok

00:17:45.0806 2540  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

00:17:45.0815 2540  CmBatt - ok

00:17:45.0817 2540  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

00:17:45.0825 2540  cmdide - ok

00:17:45.0831 2540  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG             C:\Windows\system32\Drivers\cng.sys

00:17:45.0850 2540  CNG - ok

00:17:45.0853 2540  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

00:17:45.0861 2540  Compbatt - ok

00:17:45.0864 2540  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

00:17:45.0875 2540  CompositeBus - ok

00:17:45.0878 2540  COMSysApp - ok

00:17:45.0883 2540  [ 815F3180B5117E42E422188E9CCC89C6 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe

00:17:45.0898 2540  cphs - ok

00:17:45.0900 2540  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

00:17:45.0908 2540  crcdisk - ok

00:17:45.0912 2540  [ C8BD651E13895B93ED9EC5B4F1DF42BC ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe

00:17:45.0921 2540  Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - warning

00:17:45.0921 2540  Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic (1)

00:17:45.0924 2540  [ C0EAD9F8AB83D41FF07303C75589C2B8 ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe

00:17:45.0933 2540  Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - warning

00:17:45.0933 2540  Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic (1)

00:17:45.0938 2540  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll

00:17:45.0951 2540  CryptSvc - ok

00:17:45.0958 2540  [ 51D43B57EA8EFFE5CB1E27E01C100A2F ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

00:17:45.0969 2540  CTAudSvcService ( UnsignedFile.Multi.Generic ) - warning

00:17:45.0969 2540  CTAudSvcService - detected UnsignedFile.Multi.Generic (1)

00:17:45.0979 2540  [ CBACE8DFA420B78DD2225CAEA798612D ] cthda           C:\Windows\system32\drivers\cthda.sys

00:17:45.0997 2540  cthda - ok

00:17:46.0000 2540  [ 3E43F0C5456ECA8A3F083804FAD1C405 ] CtHdaSvc        C:\Windows\sysWow64\CtHdaSvc.exe

00:17:46.0012 2540  CtHdaSvc - ok

00:17:46.0015 2540  [ C461EED35EF738AC38417EC4021FF4C7 ] cthdb           C:\Windows\system32\DRIVERS\cthdb.sys

00:17:46.0022 2540  cthdb - ok

00:17:46.0029 2540  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

00:17:46.0052 2540  DcomLaunch - ok

00:17:46.0057 2540  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

00:17:46.0083 2540  defragsvc - ok

00:17:46.0086 2540  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

00:17:46.0108 2540  DfsC - ok

00:17:46.0112 2540  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

00:17:46.0128 2540  Dhcp - ok

00:17:46.0130 2540  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

00:17:46.0152 2540  discache - ok

00:17:46.0155 2540  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys

00:17:46.0165 2540  Disk - ok

00:17:46.0168 2540  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

00:17:46.0182 2540  Dnscache - ok

00:17:46.0187 2540  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

00:17:46.0211 2540  dot3svc - ok

00:17:46.0215 2540  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

00:17:46.0235 2540  DPS - ok

00:17:46.0237 2540  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

00:17:46.0247 2540  drmkaud - ok

00:17:46.0257 2540  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

00:17:46.0274 2540  DXGKrnl - ok

00:17:46.0278 2540  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

00:17:46.0301 2540  EapHost - ok

00:17:46.0325 2540  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\drivers\evbda.sys

00:17:46.0364 2540  ebdrv - ok

00:17:46.0367 2540  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

00:17:46.0378 2540  EFS - ok

00:17:46.0387 2540  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

00:17:46.0408 2540  ehRecvr - ok

00:17:46.0411 2540  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

00:17:46.0423 2540  ehSched - ok

00:17:46.0430 2540  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

00:17:46.0444 2540  elxstor - ok

00:17:46.0447 2540  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

00:17:46.0456 2540  ErrDev - ok

00:17:46.0463 2540  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

00:17:46.0489 2540  EventSystem - ok

00:17:46.0493 2540  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

00:17:46.0517 2540  exfat - ok

00:17:46.0521 2540  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

00:17:46.0545 2540  fastfat - ok

00:17:46.0553 2540  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

00:17:46.0566 2540  Fax - ok

00:17:46.0568 2540  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\drivers\fdc.sys

00:17:46.0578 2540  fdc - ok

00:17:46.0580 2540  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

00:17:46.0602 2540  fdPHost - ok

00:17:46.0604 2540  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

00:17:46.0627 2540  FDResPub - ok

00:17:46.0630 2540  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

00:17:46.0639 2540  FileInfo - ok

00:17:46.0641 2540  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

00:17:46.0663 2540  Filetrace - ok

00:17:46.0665 2540  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

00:17:46.0675 2540  flpydisk - ok

00:17:46.0680 2540  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

00:17:46.0693 2540  FltMgr - ok

00:17:46.0704 2540  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

00:17:46.0727 2540  FontCache - ok

00:17:46.0731 2540  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

00:17:46.0740 2540  FontCache3.0.0.0 - ok

00:17:46.0742 2540  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

00:17:46.0752 2540  FsDepends - ok

00:17:46.0754 2540  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

00:17:46.0762 2540  Fs_Rec - ok

00:17:46.0766 2540  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

00:17:46.0781 2540  fvevol - ok

00:17:46.0784 2540  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

00:17:46.0794 2540  gagp30kx - ok

00:17:46.0803 2540  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

00:17:46.0835 2540  gpsvc - ok

00:17:46.0840 2540  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

00:17:46.0846 2540  gupdate - ok

00:17:46.0848 2540  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

00:17:46.0853 2540  gupdatem - ok

00:17:46.0856 2540  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

00:17:46.0868 2540  hcw85cir - ok

00:17:46.0874 2540  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

00:17:46.0890 2540  HdAudAddService - ok

00:17:46.0893 2540  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

00:17:46.0903 2540  HDAudBus - ok

00:17:46.0905 2540  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

00:17:46.0915 2540  HidBatt - ok

00:17:46.0918 2540  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

00:17:46.0930 2540  HidBth - ok

00:17:46.0933 2540  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\drivers\hidir.sys

00:17:46.0944 2540  HidIr - ok

00:17:46.0946 2540  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

00:17:46.0969 2540  hidserv - ok

00:17:46.0971 2540  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

00:17:46.0981 2540  HidUsb - ok

00:17:46.0984 2540  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

00:17:47.0007 2540  hkmsvc - ok

00:17:47.0012 2540  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

00:17:47.0027 2540  HomeGroupListener - ok

00:17:47.0031 2540  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

00:17:47.0043 2540  HomeGroupProvider - ok

00:17:47.0046 2540  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

00:17:47.0056 2540  HpSAMD - ok

00:17:47.0064 2540  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

00:17:47.0096 2540  HTTP - ok

00:17:47.0099 2540  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

00:17:47.0106 2540  hwpolicy - ok

00:17:47.0109 2540  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

00:17:47.0120 2540  i8042prt - ok

00:17:47.0128 2540  [ C224331A54571C8C9162F7714400BBBD ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys

00:17:47.0137 2540  iaStor - ok

00:17:47.0141 2540  [ 7D4B9A48430ED57ACA6373B71D5904CA ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

00:17:47.0146 2540  IAStorDataMgrSvc - ok

00:17:47.0152 2540  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

00:17:47.0165 2540  iaStorV - ok

00:17:47.0175 2540  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

00:17:47.0203 2540  idsvc - ok

00:17:47.0240 2540  [ 348214F96642FD4FEF630DE021BA3540 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

00:17:47.0304 2540  igfx - ok

00:17:47.0307 2540  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

00:17:47.0316 2540  iirsp - ok

00:17:47.0318 2540  [ 67999A9D34A0B2479381E7A61AFC37AB ] ikbevent        C:\Windows\system32\DRIVERS\ikbevent.sys

00:17:47.0326 2540  ikbevent - ok

00:17:47.0335 2540  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

00:17:47.0367 2540  IKEEXT - ok

00:17:47.0370 2540  [ DDAE90DD5BDAC53C8C5CD5B82FC1F1B4 ] imsevent        C:\Windows\system32\DRIVERS\imsevent.sys

00:17:47.0377 2540  imsevent - ok

00:17:47.0387 2540  [ 832CE330DD987227B7DEA8C03F22AEFA ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe

00:17:47.0400 2540  Intel(R) Capability Licensing Service Interface - ok

00:17:47.0404 2540  [ 709C8623721A1F1EF388EA75A07EC33B ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

00:17:47.0411 2540  Intel(R) ME Service ( UnsignedFile.Multi.Generic ) - warning

00:17:47.0411 2540  Intel(R) ME Service - detected UnsignedFile.Multi.Generic (1)

00:17:47.0413 2540  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

00:17:47.0421 2540  intelide - ok

00:17:47.0424 2540  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

00:17:47.0431 2540  intelppm - ok

00:17:47.0434 2540  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

00:17:47.0457 2540  IPBusEnum - ok

00:17:47.0459 2540  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

00:17:47.0480 2540  IpFilterDriver - ok

00:17:47.0487 2540  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

00:17:47.0499 2540  iphlpsvc - ok

00:17:47.0502 2540  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

00:17:47.0513 2540  IPMIDRV - ok

00:17:47.0516 2540  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

00:17:47.0538 2540  IPNAT - ok

00:17:47.0541 2540  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

00:17:47.0552 2540  IRENUM - ok

00:17:47.0554 2540  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

00:17:47.0562 2540  isapnp - ok

00:17:47.0567 2540  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

00:17:47.0580 2540  iScsiPrt - ok

00:17:47.0583 2540  [ 970995B7C36F4408ED31C3BF204FE1F5 ] ISCT            C:\Windows\system32\DRIVERS\ISCTD64.sys

00:17:47.0590 2540  ISCT - ok

00:17:47.0594 2540  [ 6F60B7AD044924B8C1E32D692C593612 ] ISCTAgent       C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

00:17:47.0604 2540  ISCTAgent - ok

00:17:47.0606 2540  [ 6BCEF45131C8B8E1C558BE540B190B3C ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys

00:17:47.0613 2540  iusb3hcs - ok

00:17:47.0619 2540  [ F080EADA8715F811B58BD35BB774F2F9 ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys

00:17:47.0630 2540  iusb3hub - ok

00:17:47.0639 2540  [ 0F1756D9396740F053221FA6260FCE66 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys

00:17:47.0654 2540  iusb3xhc - ok

00:17:47.0658 2540  [ C44B44E24B929631D9D7368F5B2B40CF ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

00:17:47.0668 2540  jhi_service - ok

00:17:47.0670 2540  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

00:17:47.0679 2540  kbdclass - ok

00:17:47.0681 2540  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

00:17:47.0690 2540  kbdhid - ok

00:17:47.0693 2540  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

00:17:47.0700 2540  KeyIso - ok

00:17:47.0703 2540  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

00:17:47.0713 2540  KSecDD - ok

00:17:47.0717 2540  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

00:17:47.0727 2540  KSecPkg - ok

00:17:47.0730 2540  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

00:17:47.0752 2540  ksthunk - ok

00:17:47.0757 2540  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

00:17:47.0785 2540  KtmRm - ok

00:17:47.0789 2540  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

00:17:47.0815 2540  LanmanServer - ok

00:17:47.0818 2540  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

00:17:47.0841 2540  LanmanWorkstation - ok

00:17:47.0845 2540  [ FA529FB35694C24BF98A9EF67C1CD9D0 ] LGBusEnum       C:\Windows\system32\drivers\LGBusEnum.sys

00:17:47.0852 2540  LGBusEnum - ok

00:17:47.0855 2540  [ 14179E7B64F8A17AEA464D4E2D271FAA ] LGSHidFilt      C:\Windows\system32\DRIVERS\LGSHidFilt.Sys

00:17:47.0863 2540  LGSHidFilt - ok

00:17:47.0865 2540  [ 94B29CE153765E768F004FB3440BE2B0 ] LGVirHid        C:\Windows\system32\drivers\LGVirHid.sys

00:17:47.0871 2540  LGVirHid - ok

00:17:47.0874 2540  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

00:17:47.0896 2540  lltdio - ok

00:17:47.0900 2540  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

00:17:47.0925 2540  lltdsvc - ok

00:17:47.0927 2540  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

00:17:47.0949 2540  lmhosts - ok

00:17:47.0953 2540  [ 75F29D77B0540FCF47EE3BE000BBABDA ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

00:17:47.0965 2540  LMS - ok

00:17:47.0969 2540  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

00:17:47.0978 2540  LSI_FC - ok

00:17:47.0981 2540  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

00:17:47.0990 2540  LSI_SAS - ok

00:17:47.0993 2540  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

00:17:48.0003 2540  LSI_SAS2 - ok

00:17:48.0006 2540  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

00:17:48.0015 2540  LSI_SCSI - ok

00:17:48.0018 2540  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

00:17:48.0041 2540  luafv - ok

00:17:48.0044 2540  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

00:17:48.0055 2540  Mcx2Svc - ok

00:17:48.0058 2540  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\drivers\megasas.sys

00:17:48.0066 2540  megasas - ok

00:17:48.0071 2540  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

00:17:48.0083 2540  MegaSR - ok

00:17:48.0086 2540  [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys

00:17:48.0094 2540  MEIx64 - ok

00:17:48.0097 2540  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

00:17:48.0119 2540  MMCSS - ok

00:17:48.0121 2540  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

00:17:48.0143 2540  Modem - ok

00:17:48.0146 2540  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

00:17:48.0154 2540  monitor - ok

00:17:48.0157 2540  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

00:17:48.0165 2540  mouclass - ok

00:17:48.0168 2540  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

00:17:48.0178 2540  mouhid - ok

00:17:48.0181 2540  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

00:17:48.0190 2540  mountmgr - ok

00:17:48.0193 2540  [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

00:17:48.0204 2540  MozillaMaintenance - ok

00:17:48.0207 2540  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

00:17:48.0218 2540  mpio - ok

00:17:48.0221 2540  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

00:17:48.0243 2540  mpsdrv - ok

00:17:48.0252 2540  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

00:17:48.0285 2540  MpsSvc - ok

00:17:48.0288 2540  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

00:17:48.0302 2540  MRxDAV - ok

00:17:48.0305 2540  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

00:17:48.0317 2540  mrxsmb - ok

00:17:48.0322 2540  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

00:17:48.0334 2540  mrxsmb10 - ok

00:17:48.0337 2540  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

00:17:48.0347 2540  mrxsmb20 - ok

00:17:48.0350 2540  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

00:17:48.0357 2540  msahci - ok

00:17:48.0361 2540  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

00:17:48.0371 2540  msdsm - ok

00:17:48.0375 2540  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

00:17:48.0388 2540  MSDTC - ok

00:17:48.0393 2540  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

00:17:48.0414 2540  Msfs - ok

00:17:48.0416 2540  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

00:17:48.0437 2540  mshidkmdf - ok

00:17:48.0439 2540  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

00:17:48.0446 2540  msisadrv - ok

00:17:48.0450 2540  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

00:17:48.0474 2540  MSiSCSI - ok

00:17:48.0476 2540  msiserver - ok

00:17:48.0478 2540  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

00:17:48.0499 2540  MSKSSRV - ok

00:17:48.0501 2540  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

00:17:48.0522 2540  MSPCLOCK - ok

00:17:48.0524 2540  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

00:17:48.0545 2540  MSPQM - ok

00:17:48.0550 2540  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

00:17:48.0563 2540  MsRPC - ok

00:17:48.0566 2540  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

00:17:48.0572 2540  mssmbios - ok

00:17:48.0574 2540  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

00:17:48.0595 2540  MSTEE - ok

00:17:48.0597 2540  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

00:17:48.0606 2540  MTConfig - ok

00:17:48.0608 2540  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

00:17:48.0617 2540  Mup - ok

00:17:48.0623 2540  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

00:17:48.0645 2540  napagent - ok

00:17:48.0651 2540  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

00:17:48.0667 2540  NativeWifiP - ok

00:17:48.0676 2540  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

00:17:48.0691 2540  NDIS - ok

00:17:48.0694 2540  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

00:17:48.0715 2540  NdisCap - ok

00:17:48.0718 2540  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

00:17:48.0738 2540  NdisTapi - ok

00:17:48.0740 2540  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

00:17:48.0762 2540  Ndisuio - ok

00:17:48.0766 2540  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

00:17:48.0789 2540  NdisWan - ok

00:17:48.0791 2540  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

00:17:48.0813 2540  NDProxy - ok

00:17:48.0815 2540  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

00:17:48.0837 2540  NetBIOS - ok

00:17:48.0841 2540  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

00:17:48.0865 2540  NetBT - ok

00:17:48.0868 2540  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

00:17:48.0874 2540  Netlogon - ok

00:17:48.0879 2540  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

00:17:48.0901 2540  Netman - ok

00:17:48.0907 2540  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

00:17:48.0934 2540  netprofm - ok

00:17:48.0937 2540  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

00:17:48.0947 2540  NetTcpPortSharing - ok

00:17:48.0949 2540  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

00:17:48.0958 2540  nfrd960 - ok

00:17:48.0962 2540  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

00:17:48.0976 2540  NlaSvc - ok

00:17:48.0979 2540  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

00:17:49.0000 2540  Npfs - ok

00:17:49.0002 2540  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

00:17:49.0023 2540  nsi - ok

00:17:49.0026 2540  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

00:17:49.0047 2540  nsiproxy - ok

00:17:49.0063 2540  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

00:17:49.0093 2540  Ntfs - ok

00:17:49.0096 2540  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

00:17:49.0116 2540  Null - ok

00:17:49.0120 2540  [ B4F53BCA4C688FF47F04FA90098F896E ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

00:17:49.0130 2540  NVHDA - ok

00:17:49.0216 2540  [ 4EE399576F76D38C04745DB739BBC8C7 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

00:17:49.0318 2540  nvlddmkm - ok

00:17:49.0323 2540  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

00:17:49.0333 2540  nvraid - ok

00:17:49.0336 2540  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

00:17:49.0347 2540  nvstor - ok

00:17:49.0357 2540  [ 7335C3D78A7746D76D37F6722CC4A466 ] nvsvc           C:\Windows\system32\nvvsvc.exe

00:17:49.0369 2540  nvsvc - ok

00:17:49.0382 2540  [ B7C53DA1C73FF39F4A6248643EFD979A ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

00:17:49.0398 2540  nvUpdatusService - ok

00:17:49.0401 2540  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

00:17:49.0411 2540  nv_agp - ok

00:17:49.0414 2540  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

00:17:49.0424 2540  ohci1394 - ok

00:17:49.0430 2540  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

00:17:49.0439 2540  p2pimsvc - ok

00:17:49.0445 2540  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

00:17:49.0459 2540  p2psvc - ok

00:17:49.0462 2540  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\drivers\parport.sys

00:17:49.0472 2540  Parport - ok

00:17:49.0475 2540  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

00:17:49.0484 2540  partmgr - ok

00:17:49.0488 2540  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

00:17:49.0504 2540  PcaSvc - ok

00:17:49.0508 2540  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

00:17:49.0519 2540  pci - ok

00:17:49.0522 2540  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

00:17:49.0529 2540  pciide - ok

00:17:49.0534 2540  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

00:17:49.0545 2540  pcmcia - ok

00:17:49.0548 2540  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

00:17:49.0556 2540  pcw - ok

00:17:49.0564 2540  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

00:17:49.0595 2540  PEAUTH - ok

00:17:49.0614 2540  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

00:17:49.0624 2540  PerfHost - ok

00:17:49.0639 2540  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

00:17:49.0675 2540  pla - ok

00:17:49.0681 2540  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

00:17:49.0698 2540  PlugPlay - ok

00:17:49.0700 2540  PnkBstrA - ok

00:17:49.0702 2540  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

00:17:49.0712 2540  PNRPAutoReg - ok

00:17:49.0717 2540  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

00:17:49.0725 2540  PNRPsvc - ok

00:17:49.0732 2540  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

00:17:49.0759 2540  PolicyAgent - ok

00:17:49.0764 2540  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

00:17:49.0784 2540  Power - ok

00:17:49.0788 2540  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

00:17:49.0810 2540  PptpMiniport - ok

00:17:49.0812 2540  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\drivers\processr.sys

00:17:49.0823 2540  Processor - ok

00:17:49.0827 2540  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

00:17:49.0841 2540  ProfSvc - ok

00:17:49.0843 2540  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

00:17:49.0850 2540  ProtectedStorage - ok

00:17:49.0853 2540  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

00:17:49.0872 2540  Psched - ok

00:17:49.0886 2540  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

00:17:49.0912 2540  ql2300 - ok

00:17:49.0916 2540  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

00:17:49.0926 2540  ql40xx - ok

00:17:49.0930 2540  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

00:17:49.0946 2540  QWAVE - ok

00:17:49.0949 2540  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

00:17:49.0961 2540  QWAVEdrv - ok

00:17:49.0963 2540  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

00:17:49.0984 2540  RasAcd - ok

00:17:49.0987 2540  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

00:17:50.0009 2540  RasAgileVpn - ok

00:17:50.0012 2540  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

00:17:50.0035 2540  RasAuto - ok

00:17:50.0038 2540  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

00:17:50.0061 2540  Rasl2tp - ok

00:17:50.0066 2540  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

00:17:50.0092 2540  RasMan - ok

00:17:50.0095 2540  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

00:17:50.0118 2540  RasPppoe - ok

00:17:50.0121 2540  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

00:17:50.0143 2540  RasSstp - ok

00:17:50.0148 2540  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

00:17:50.0172 2540  rdbss - ok

00:17:50.0175 2540  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

00:17:50.0185 2540  rdpbus - ok

00:17:50.0187 2540  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

00:17:50.0207 2540  RDPCDD - ok

00:17:50.0211 2540  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

00:17:50.0231 2540  RDPENCDD - ok

00:17:50.0234 2540  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

00:17:50.0255 2540  RDPREFMP - ok

00:17:50.0258 2540  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

00:17:50.0268 2540  RdpVideoMiniport - ok

00:17:50.0272 2540  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

00:17:50.0284 2540  RDPWD - ok

00:17:50.0288 2540  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

00:17:50.0300 2540  rdyboost - ok

00:17:50.0303 2540  [ 84C83C7577407C4FF6AB1379EE944610 ] regi            C:\Windows\system32\drivers\regi.sys

00:17:50.0310 2540  regi - ok

00:17:50.0313 2540  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

00:17:50.0336 2540  RemoteAccess - ok

00:17:50.0340 2540  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

00:17:50.0365 2540  RemoteRegistry - ok

00:17:50.0368 2540  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

00:17:50.0391 2540  RpcEptMapper - ok

00:17:50.0393 2540  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

00:17:50.0403 2540  RpcLocator - ok

00:17:50.0409 2540  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

00:17:50.0430 2540  RpcSs - ok

00:17:50.0433 2540  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

00:17:50.0455 2540  rspndr - ok

00:17:50.0463 2540  [ 9140DB0911DE035FED0A9A77A2D156EA ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

00:17:50.0475 2540  RTL8167 - ok

00:17:50.0477 2540  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

00:17:50.0484 2540  SamSs - ok

00:17:50.0487 2540  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

00:17:50.0497 2540  sbp2port - ok

00:17:50.0501 2540  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

00:17:50.0525 2540  SCardSvr - ok

00:17:50.0527 2540  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

00:17:50.0549 2540  scfilter - ok

00:17:50.0559 2540  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

00:17:50.0597 2540  Schedule - ok

00:17:50.0600 2540  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

00:17:50.0619 2540  SCPolicySvc - ok

00:17:50.0622 2540  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

00:17:50.0636 2540  SDRSVC - ok

00:17:50.0639 2540  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

00:17:50.0660 2540  secdrv - ok

00:17:50.0662 2540  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

00:17:50.0684 2540  seclogon - ok

00:17:50.0687 2540  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

00:17:50.0707 2540  SENS - ok

00:17:50.0709 2540  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

00:17:50.0719 2540  SensrSvc - ok

00:17:50.0722 2540  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

00:17:50.0731 2540  Serenum - ok

00:17:50.0734 2540  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

00:17:50.0745 2540  Serial - ok

00:17:50.0747 2540  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

00:17:50.0757 2540  sermouse - ok

00:17:50.0763 2540  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

00:17:50.0787 2540  SessionEnv - ok

00:17:50.0789 2540  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

00:17:50.0800 2540  sffdisk - ok

00:17:50.0802 2540  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

00:17:50.0813 2540  sffp_mmc - ok

00:17:50.0815 2540  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

00:17:50.0825 2540  sffp_sd - ok

00:17:50.0828 2540  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

00:17:50.0837 2540  sfloppy - ok

00:17:50.0842 2540  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

00:17:50.0868 2540  SharedAccess - ok

00:17:50.0874 2540  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

00:17:50.0900 2540  ShellHWDetection - ok

00:17:50.0902 2540  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

00:17:50.0911 2540  SiSRaid2 - ok

00:17:50.0914 2540  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

00:17:50.0923 2540  SiSRaid4 - ok

00:17:50.0928 2540  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

00:17:50.0957 2540  SkypeUpdate - ok

00:17:50.0959 2540  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

00:17:50.0982 2540  Smb - ok

00:17:50.0986 2540  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

00:17:50.0996 2540  SNMPTRAP - ok

00:17:50.0999 2540  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

00:17:51.0007 2540  spldr - ok

00:17:51.0014 2540  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

00:17:51.0029 2540  Spooler - ok

00:17:51.0056 2540  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

00:17:51.0101 2540  sppsvc - ok

00:17:51.0104 2540  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

00:17:51.0126 2540  sppuinotify - ok

00:17:51.0132 2540  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

00:17:51.0147 2540  srv - ok

00:17:51.0152 2540  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

00:17:51.0167 2540  srv2 - ok

00:17:51.0171 2540  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

00:17:51.0182 2540  srvnet - ok

00:17:51.0185 2540  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

00:17:51.0209 2540  SSDPSRV - ok

00:17:51.0212 2540  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

00:17:51.0234 2540  SstpSvc - ok

00:17:51.0237 2540  Steam Client Service - ok

00:17:51.0239 2540  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys

00:17:51.0248 2540  stexstor - ok

00:17:51.0255 2540  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

00:17:51.0274 2540  stisvc - ok

00:17:51.0277 2540  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

00:17:51.0285 2540  swenum - ok

00:17:51.0291 2540  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

00:17:51.0319 2540  swprv - ok

00:17:51.0333 2540  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

00:17:51.0366 2540  SysMain - ok

00:17:51.0369 2540  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

00:17:51.0383 2540  TabletInputService - ok

00:17:51.0388 2540  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

00:17:51.0414 2540  TapiSrv - ok

00:17:51.0417 2540  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

00:17:51.0436 2540  TBS - ok

00:17:51.0452 2540  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

00:17:51.0489 2540  Tcpip - ok

00:17:51.0504 2540  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

00:17:51.0525 2540  TCPIP6 - ok

00:17:51.0531 2540  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

00:17:51.0540 2540  tcpipreg - ok

00:17:51.0543 2540  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

00:17:51.0552 2540  TDPIPE - ok

00:17:51.0555 2540  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

00:17:51.0564 2540  TDTCP - ok

00:17:51.0567 2540  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

00:17:51.0588 2540  tdx - ok

00:17:51.0591 2540  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

00:17:51.0599 2540  TermDD - ok

00:17:51.0607 2540  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

00:17:51.0638 2540  TermService - ok

00:17:51.0641 2540  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

00:17:51.0653 2540  Themes - ok

00:17:51.0656 2540  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

00:17:51.0676 2540  THREADORDER - ok

00:17:51.0679 2540  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

00:17:51.0703 2540  TrkWks - ok

00:17:51.0706 2540  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

00:17:51.0725 2540  TrustedInstaller - ok

00:17:51.0728 2540  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

00:17:51.0749 2540  tssecsrv - ok

00:17:51.0752 2540  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

00:17:51.0763 2540  TsUsbFlt - ok

00:17:51.0765 2540  [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

00:17:51.0775 2540  TsUsbGD - ok

00:17:51.0778 2540  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

00:17:51.0797 2540  tunnel - ok

00:17:51.0800 2540  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

00:17:51.0809 2540  uagp35 - ok

00:17:51.0814 2540  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

00:17:51.0839 2540  udfs - ok

00:17:51.0843 2540  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

00:17:51.0855 2540  UI0Detect - ok

00:17:51.0857 2540  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

00:17:51.0866 2540  uliagpkx - ok

00:17:51.0869 2540  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

00:17:51.0879 2540  umbus - ok

00:17:51.0881 2540  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys

00:17:51.0890 2540  UmPass - ok

00:17:51.0896 2540  [ 193AD338F2A64D17300AD640ADFA5D0A ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

00:17:51.0903 2540  UNS - ok

00:17:51.0909 2540  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

00:17:51.0934 2540  upnphost - ok

00:17:51.0938 2540  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

00:17:51.0948 2540  usbccgp - ok

00:17:51.0952 2540  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

00:17:51.0964 2540  usbcir - ok

00:17:51.0967 2540  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\drivers\usbehci.sys

00:17:51.0977 2540  usbehci - ok

00:17:51.0982 2540  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

00:17:51.0996 2540  usbhub - ok

00:17:51.0999 2540  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

00:17:52.0008 2540  usbohci - ok

00:17:52.0011 2540  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\drivers\usbprint.sys

00:17:52.0022 2540  usbprint - ok

00:17:52.0026 2540  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

00:17:52.0037 2540  USBSTOR - ok

00:17:52.0039 2540  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

00:17:52.0049 2540  usbuhci - ok

00:17:52.0051 2540  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

00:17:52.0075 2540  UxSms - ok

00:17:52.0077 2540  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

00:17:52.0084 2540  VaultSvc - ok

00:17:52.0086 2540  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

00:17:52.0094 2540  vdrvroot - ok

00:17:52.0101 2540  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

00:17:52.0129 2540  vds - ok

00:17:52.0132 2540  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

00:17:52.0142 2540  vga - ok

00:17:52.0145 2540  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

00:17:52.0166 2540  VgaSave - ok

00:17:52.0170 2540  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

00:17:52.0182 2540  vhdmp - ok

00:17:52.0184 2540  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

00:17:52.0192 2540  viaide - ok

00:17:52.0195 2540  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

00:17:52.0204 2540  volmgr - ok

00:17:52.0209 2540  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

00:17:52.0223 2540  volmgrx - ok

00:17:52.0228 2540  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

00:17:52.0241 2540  volsnap - ok

00:17:52.0245 2540  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

00:17:52.0256 2540  vsmraid - ok

00:17:52.0270 2540  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

00:17:52.0307 2540  VSS - ok

00:17:52.0310 2540  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

00:17:52.0321 2540  vwifibus - ok

00:17:52.0324 2540  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

00:17:52.0337 2540  vwififlt - ok

00:17:52.0339 2540  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

00:17:52.0350 2540  vwifimp - ok

00:17:52.0356 2540  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

00:17:52.0384 2540  W32Time - ok

00:17:52.0387 2540  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

00:17:52.0397 2540  WacomPen - ok

00:17:52.0400 2540  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

00:17:52.0422 2540  WANARP - ok

00:17:52.0424 2540  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

00:17:52.0443 2540  Wanarpv6 - ok

00:17:52.0456 2540  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

00:17:52.0481 2540  wbengine - ok

00:17:52.0485 2540  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

00:17:52.0499 2540  WbioSrvc - ok

00:17:52.0504 2540  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

00:17:52.0520 2540  wcncsvc - ok

00:17:52.0523 2540  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

00:17:52.0534 2540  WcsPlugInService - ok

00:17:52.0537 2540  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys

00:17:52.0545 2540  Wd - ok

00:17:52.0554 2540  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

00:17:52.0574 2540  Wdf01000 - ok

00:17:52.0577 2540  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

00:17:52.0602 2540  WdiServiceHost - ok

00:17:52.0604 2540  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

00:17:52.0614 2540  WdiSystemHost - ok

00:17:52.0619 2540  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

00:17:52.0636 2540  WebClient - ok

00:17:52.0640 2540  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

00:17:52.0665 2540  Wecsvc - ok

00:17:52.0668 2540  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

00:17:52.0690 2540  wercplsupport - ok

00:17:52.0693 2540  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

00:17:52.0716 2540  WerSvc - ok

00:17:52.0719 2540  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

00:17:52.0739 2540  WfpLwf - ok

00:17:52.0741 2540  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

00:17:52.0749 2540  WIMMount - ok

00:17:52.0751 2540  WinDefend - ok

00:17:52.0753 2540  WinHttpAutoProxySvc - ok

00:17:52.0762 2540  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

00:17:52.0788 2540  Winmgmt - ok

00:17:52.0804 2540  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

00:17:52.0845 2540  WinRM - ok

00:17:52.0856 2540  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

00:17:52.0879 2540  Wlansvc - ok

00:17:52.0881 2540  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

00:17:52.0891 2540  WmiAcpi - ok

00:17:52.0895 2540  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

00:17:52.0908 2540  wmiApSrv - ok

00:17:52.0910 2540  WMPNetworkSvc - ok

00:17:52.0912 2540  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

00:17:52.0922 2540  WPCSvc - ok

00:17:52.0925 2540  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

00:17:52.0937 2540  WPDBusEnum - ok

00:17:52.0940 2540  [ 7CA09731EB7FC99B910C7F239E57720F ] WPRO_41_2001    C:\Windows\system32\drivers\WPRO_41_2001.sys

00:17:52.0947 2540  WPRO_41_2001 - ok

00:17:52.0950 2540  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

00:17:52.0971 2540  ws2ifsl - ok

00:17:52.0974 2540  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

00:17:52.0988 2540  wscsvc - ok

00:17:52.0990 2540  WSearch - ok

00:17:53.0009 2540  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

00:17:53.0040 2540  wuauserv - ok

00:17:53.0044 2540  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

00:17:53.0054 2540  WudfPf - ok

00:17:53.0058 2540  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

00:17:53.0069 2540  WUDFRd - ok

00:17:53.0072 2540  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

00:17:53.0083 2540  wudfsvc - ok

00:17:53.0087 2540  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll

00:17:53.0103 2540  WwanSvc - ok

00:17:53.0106 2540  ================ Scan global ===============================

00:17:53.0108 2540  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

00:17:53.0115 2540  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

00:17:53.0123 2540  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

00:17:53.0127 2540  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

00:17:53.0134 2540  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

00:17:53.0140 2540  [Global] - ok

00:17:53.0140 2540  ================ Scan MBR ==================================

00:17:53.0142 2540  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

00:17:53.0214 2540  \Device\Harddisk0\DR0 - ok

00:17:53.0215 2540  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

00:17:53.0261 2540  \Device\Harddisk1\DR1 - ok

00:17:53.0262 2540  ================ Scan VBR ==================================

00:17:53.0264 2540  [ 07A1E184DDC680B84320C481136E3628 ] \Device\Harddisk0\DR0\Partition1

00:17:53.0265 2540  \Device\Harddisk0\DR0\Partition1 - ok

00:17:53.0268 2540  [ CFB7BF0605ECBD9C85339585599B639D ] \Device\Harddisk0\DR0\Partition2

00:17:53.0270 2540  \Device\Harddisk0\DR0\Partition2 - ok

00:17:53.0272 2540  [ 94A49332897DFD79DF6CF43A6D869119 ] \Device\Harddisk0\DR0\Partition3

00:17:53.0274 2540  \Device\Harddisk0\DR0\Partition3 - ok

00:17:53.0276 2540  [ 614277AB4FEDE6F5545AD0E267B38825 ] \Device\Harddisk1\DR1\Partition1

00:17:53.0278 2540  \Device\Harddisk1\DR1\Partition1 - ok

00:17:53.0278 2540  ============================================================

00:17:53.0278 2540  Scan finished

00:17:53.0278 2540  ============================================================

00:17:53.0286 3576  Detected object count: 4

00:17:53.0286 3576  Actual detected object count: 4

00:18:43.0409 3576  Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user

00:18:43.0409 3576  Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

00:18:43.0410 3576  Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user

00:18:43.0410 3576  Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

00:18:43.0411 3576  CTAudSvcService ( UnsignedFile.Multi.Generic ) - skipped by user

00:18:43.0411 3576  CTAudSvcService ( UnsignedFile.Multi.Generic ) - User select action: Skip 

00:18:43.0412 3576  Intel(R) ME Service ( UnsignedFile.Multi.Generic ) - skipped by user

00:18:43.0412 3576  Intel(R) ME Service ( UnsignedFile.Multi.Generic ) - User select action: Skip