mbar- + TDSS-Logs
Hallo,
sorry hat ein bisschen länger gedauert mit den Logfiles, weil ich wenig Zeit zum Durchführen der Scans hatte... Naja hier sind sie nun:
mbar: Code:
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org
Database version:
main: v2015.05.12.05
rootkit: v2015.04.21.01
Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.17728
Evi :: EVIPC [administrator]
12.05.2015 20:01:05
mbar-log-2015-05-12 (20-01-05).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 373740
Time elapsed: 2 hour(s), 44 minute(s), 3 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
TDSS: Code:
20:53:48.0180 0x0c50 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
20:53:53.0046 0x0c50 ============================================================
20:53:53.0046 0x0c50 Current date / time: 2015/05/14 20:53:53.0046
20:53:53.0046 0x0c50 SystemInfo:
20:53:53.0046 0x0c50
20:53:53.0046 0x0c50 OS Version: 6.3.9600 ServicePack: 0.0
20:53:53.0046 0x0c50 Product type: Workstation
20:53:53.0046 0x0c50 ComputerName: EVIPC
20:53:53.0046 0x0c50 UserName: Evi
20:53:53.0046 0x0c50 Windows directory: C:\Windows
20:53:53.0046 0x0c50 System windows directory: C:\Windows
20:53:53.0046 0x0c50 Running under WOW64
20:53:53.0046 0x0c50 Processor architecture: Intel x64
20:53:53.0046 0x0c50 Number of processors: 4
20:53:53.0046 0x0c50 Page size: 0x1000
20:53:53.0046 0x0c50 Boot type: Normal boot
20:53:53.0046 0x0c50 ============================================================
20:53:54.0499 0x0c50 System UUID: {50664193-451C-B137-E845-BB9B12684DE9}
20:53:56.0655 0x0c50 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:54:01.0117 0x0c50 ============================================================
20:54:01.0117 0x0c50 \Device\Harddisk0\DR0:
20:54:01.0133 0x0c50 MBR partitions:
20:54:01.0133 0x0c50 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAF000
20:54:01.0133 0x0c50 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xAF800, BlocksNum 0x7C51000
20:54:01.0133 0x0c50 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x7D00800, BlocksNum 0xEA60000
20:54:01.0133 0x0c50 \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x16760800, BlocksNum 0x4E20000
20:54:01.0133 0x0c50 ============================================================
20:54:01.0164 0x0c50 C: <-> \Device\Harddisk0\DR0\Partition2
20:54:01.0195 0x0c50 D: <-> \Device\Harddisk0\DR0\Partition3
20:54:01.0242 0x0c50 E: <-> \Device\Harddisk0\DR0\Partition4
20:54:01.0242 0x0c50 ============================================================
20:54:01.0242 0x0c50 Initialize success
20:54:01.0242 0x0c50 ============================================================
20:54:19.0513 0x0cb4 ============================================================
20:54:19.0513 0x0cb4 Scan started
20:54:19.0513 0x0cb4 Mode: Manual; SigCheck; TDLFS;
20:54:19.0513 0x0cb4 ============================================================
20:54:19.0513 0x0cb4 KSN ping started
20:54:22.0075 0x0cb4 KSN ping finished: true
20:54:26.0617 0x0cb4 ================ Scan system memory ========================
20:54:26.0633 0x0cb4 System memory - ok
20:54:26.0633 0x0cb4 ================ Scan services =============================
20:54:27.0008 0x0cb4 [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
20:54:27.0476 0x0cb4 1394ohci - ok
20:54:27.0601 0x0cb4 [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware C:\Windows\system32\drivers\3ware.sys
20:54:27.0664 0x0cb4 3ware - ok
20:54:27.0836 0x0cb4 [ E796AE43DDD1844281DB4D57294D17C0, 21AE69615044A96041E46476BE814B52C22624B6C7EA6BFC77BB64F69C3C21F5 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:54:27.0976 0x0cb4 ACPI - ok
20:54:28.0023 0x0cb4 [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex C:\Windows\system32\Drivers\acpiex.sys
20:54:28.0070 0x0cb4 acpiex - ok
20:54:28.0148 0x0cb4 [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
20:54:28.0226 0x0cb4 acpipagr - ok
20:54:28.0242 0x0cb4 [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
20:54:28.0492 0x0cb4 AcpiPmi - ok
20:54:28.0508 0x0cb4 [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime C:\Windows\System32\drivers\acpitime.sys
20:54:28.0617 0x0cb4 acpitime - ok
20:54:28.0820 0x0cb4 [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:54:28.0851 0x0cb4 AdobeARMservice - ok
20:54:29.0398 0x0cb4 [ AAF87A1B230B1E5585EA742C633A5414, 181E3E8EB91BF411C527C07F67AE47938740CBC2DADFC22053A25FEB842D5EFA ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:54:29.0476 0x0cb4 AdobeFlashPlayerUpdateSvc - ok
20:54:29.0648 0x0cb4 [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX C:\Windows\system32\drivers\ADP80XX.SYS
20:54:29.0789 0x0cb4 ADP80XX - ok
20:54:29.0898 0x0cb4 [ BCD58DACAA1EAAADC115EDD940478F6D, F31613F583C302F62A00E6766B031531C9E193CAED563689B178BA257715B992 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:54:30.0101 0x0cb4 AeLookupSvc - ok
20:54:30.0273 0x0cb4 [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD C:\Windows\system32\drivers\afd.sys
20:54:30.0633 0x0cb4 AFD - ok
20:54:30.0695 0x0cb4 [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:54:30.0758 0x0cb4 agp440 - ok
20:54:30.0836 0x0cb4 [ F0CB6DB513CAC393D04A0FCE0A59E1BF, E6EE159D0E6B1F666946B1FE421874044E89BB2EB60A521BAA111A1229FA7B2D ] ahcache C:\Windows\system32\DRIVERS\ahcache.sys
20:54:30.0945 0x0cb4 ahcache - ok
20:54:31.0008 0x0cb4 [ 14A45BE6F5678339F0EC5752D9849410, DD0F60E96FAC68FBD5B86382E541408C613BD0F871D0E0A1EF9AB6E7B26E545C ] ALG C:\Windows\System32\alg.exe
20:54:31.0164 0x0cb4 ALG - ok
20:54:31.0258 0x0cb4 [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
20:54:31.0414 0x0cb4 AmdK8 - ok
20:54:31.0492 0x0cb4 [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
20:54:31.0586 0x0cb4 AmdPPM - ok
20:54:31.0633 0x0cb4 [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:54:31.0711 0x0cb4 amdsata - ok
20:54:31.0773 0x0cb4 [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
20:54:31.0898 0x0cb4 amdsbs - ok
20:54:31.0930 0x0cb4 [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:54:31.0992 0x0cb4 amdxata - ok
20:54:32.0070 0x0cb4 [ 415DD71628795197F7AFC176CBADC74E, 5F0359053A6CD6EE239139E0E6F46E1FA9A73F017C0CE9B7BC052216B2C846EC ] AppID C:\Windows\system32\drivers\appid.sys
20:54:32.0351 0x0cb4 AppID - ok
20:54:32.0430 0x0cb4 [ 34B2E222F82D05398DAE7203B36B6A2B, AC04BC6B5A36A6807FFE302E9ACF073342B4D76B0BB386249251CB3CA1852CE8 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:54:32.0492 0x0cb4 AppIDSvc - ok
20:54:32.0555 0x0cb4 [ 680BFB820C5A943AB709BAA2B1EF27F2, A51D2A7976A762FE470C13C6D1BA0319A0FB19C9E66BF02AA44F83EAEC7130F8 ] Appinfo C:\Windows\System32\appinfo.dll
20:54:32.0664 0x0cb4 Appinfo - ok
20:54:32.0742 0x0cb4 [ 1A8EA3500576DD4B43E9318F10709E0E, 85F8581C319DE241B223366F08A5F9301858DA9DA1A0CAA10ED387A2B99EC216 ] AppMgmt C:\Windows\System32\appmgmts.dll
20:54:32.0883 0x0cb4 AppMgmt - ok
20:54:33.0008 0x0cb4 [ 35E28923A23ADABAA5A1B43256D0AB58, A5F3AF8BBEE58B2165BAFACC5FF8B167B55B020998D3D1565C2229ED8753B269 ] AppReadiness C:\Windows\system32\AppReadiness.dll
20:54:33.0227 0x0cb4 AppReadiness - ok
20:54:33.0492 0x0cb4 [ 573542B5E97772021B73E854DA861DAA, C3FD00FA28060F8D7CDFD455BBB5FF8239CB76DDFFF2BDAE6AA944674DD993D3 ] AppXSvc C:\Windows\system32\appxdeploymentserver.dll
20:54:33.0805 0x0cb4 AppXSvc - ok
20:54:33.0852 0x0cb4 [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:54:33.0930 0x0cb4 arcsas - ok
20:54:34.0055 0x0cb4 [ AA2E8C6B8D7EA7BAF04C988801927F48, 4B82043F1B9C67CDCDC71102F7AEE05EEA8F9775A5CB33AE80F4DCDB42521C40 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
20:54:34.0148 0x0cb4 aspnet_state - ok
20:54:34.0195 0x0cb4 [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi C:\Windows\system32\drivers\atapi.sys
20:54:34.0258 0x0cb4 atapi - ok
20:54:34.0337 0x0cb4 [ 8779FDAE68BC948B0FE152E758CC8DA7, 13070C2073F8E7546B48AE9CF54067B9BB75DFCD98F2987B90FFAD20D40D54CF ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
20:54:34.0525 0x0cb4 AudioEndpointBuilder - ok
20:54:34.0678 0x0cb4 [ 61EA45A645854FE81D8A924E2D93DFFE, 34F79532297F609CA93C380B68BB8B7B0F027F9C8F4FB8E02A9A43EA3D155F1B ] Audiosrv C:\Windows\System32\Audiosrv.dll
20:54:34.0928 0x0cb4 Audiosrv - ok
20:54:35.0006 0x0cb4 [ 3C6ED74AF41DD1A5585CE5EF3D00915F, A742F576407776634E5A8E49C60023FFDF395DE0B2DE36662A23F85B79405ED2 ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:54:35.0102 0x0cb4 AxInstSV - ok
20:54:35.0274 0x0cb4 [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
20:54:35.0415 0x0cb4 b06bdrv - ok
20:54:35.0477 0x0cb4 [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
20:54:35.0587 0x0cb4 BasicDisplay - ok
20:54:35.0663 0x0cb4 [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
20:54:35.0820 0x0cb4 BasicRender - ok
20:54:36.0757 0x0cb4 [ 9A4EF701A4FC835F7DDD8956D930010F, 28A555B98098ECE47912C40A74CA92AFA76F51A711F2DEFF1A498FF212505F23 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl63a.sys
20:54:37.0851 0x0cb4 BCM43XX - ok
20:54:37.0945 0x0cb4 [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2 C:\Windows\System32\drivers\bcmfn2.sys
20:54:37.0976 0x0cb4 bcmfn2 - ok
20:54:38.0070 0x0cb4 [ 77D760E9B477C21487C171F561497F98, 2393D466CEC863C771C5BB4CD81B251635DC084386134B8E13F74F3E1C6D68DF ] BDESVC C:\Windows\System32\bdesvc.dll
20:54:38.0226 0x0cb4 BDESVC - ok
20:54:38.0304 0x0cb4 [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep C:\Windows\system32\drivers\Beep.sys
20:54:38.0445 0x0cb4 Beep - ok
20:54:38.0601 0x0cb4 [ 7BCB00EA702F78EC74CD9699D85CE80B, 17241ADAA13051B560DB9FA9079CAE6321D5B49788B596C125DC912443B00421 ] BFE C:\Windows\System32\bfe.dll
20:54:38.0835 0x0cb4 BFE - ok
20:54:38.0946 0x0cb4 [ 48554994279BFE17A3D2B00076D0CB1A, 6521B1EC0BC6B01F63976370D89FE7DC2E7404899F68B6FAC37A9173B9C5D489 ] BITS C:\Windows\System32\qmgr.dll
20:54:39.0258 0x0cb4 BITS - ok
20:54:39.0321 0x0cb4 [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:54:39.0446 0x0cb4 bowser - ok
20:54:39.0555 0x0cb4 [ FA601515FF2B59F25FDD8EDB1D2A1104, 21DFB53241F8E880F7546B9ADF38F47D6AD0782EC7F8F0284ED69DE7CEF7DCB9 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
20:54:39.0742 0x0cb4 BrokerInfrastructure - ok
20:54:39.0798 0x0cb4 [ BC111AADACD0BF59D56547461D13AB6E, 91E3619930C29EE4B2683683888BA7EE3CF6B1DDB0C19A14E0880470CBE40EF4 ] Browser C:\Windows\System32\browser.dll
20:54:39.0923 0x0cb4 Browser - ok
20:54:39.0986 0x0cb4 [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
20:54:40.0095 0x0cb4 BthAvrcpTg - ok
20:54:40.0173 0x0cb4 [ 1104A31260CCF4318C884E0AE6C513BF, A8F83B558944DEF0F84414A11DC3CB90C3A92377B46760EC0A9B8BC22FB0D5C7 ] BthEnum C:\Windows\System32\drivers\BthEnum.sys
20:54:40.0314 0x0cb4 BthEnum - ok
20:54:40.0392 0x0cb4 [ 67343511D80BF3D6D9EEDB5BA8D0B06B, 28436B2E62762686C4FF4FA3F9E7ABB56DA9D6884B6C924ACC544161400593DD ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
20:54:40.0533 0x0cb4 BthHFEnum - ok
20:54:40.0580 0x0cb4 [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
20:54:40.0658 0x0cb4 bthhfhid - ok
20:54:40.0720 0x0cb4 [ 9307A4B743D277C499CDA8E19E5687AC, 7A01989EC3D54581F292BDEDC9B9445F2ABD50165102617E3089BDD061C63A19 ] BthHFSrv C:\Windows\System32\BthHFSrv.dll
20:54:40.0986 0x0cb4 BthHFSrv - ok
20:54:41.0033 0x0cb4 [ 66B791F6B11DC4303DD18A224A501542, 502AE4D6FFC6B0FCED081B0E0F61F699F96F20DFEE737B53828F5DEE3BD0FCB1 ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
20:54:41.0142 0x0cb4 BTHMODEM - ok
20:54:41.0236 0x0cb4 [ 25BB93167DEF270188072603F92A1EF5, CE4637CE4B63420E218F53CAF89A8C85D036B879B80456FEF3C7C395590E26BB ] BthPan C:\Windows\System32\drivers\bthpan.sys
20:54:41.0408 0x0cb4 BthPan - ok
20:54:41.0642 0x0cb4 [ C37F4930795B771400C63C3C87E7A6C2, 0D0F54184B2DAA45F646E4F69B85C4411E8DFA88EB4763BB0F386055A420F217 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
20:54:41.0861 0x0cb4 BTHPORT - ok
20:54:41.0908 0x0cb4 [ 043A0F37631BF453F16D478B71320F46, C368296B802984F438852927B8A40EA3F4205724A05828F3173F08EC17228356 ] bthserv C:\Windows\system32\bthserv.dll
20:54:42.0064 0x0cb4 bthserv - ok
20:54:42.0111 0x0cb4 [ 08EA90955AED2D959EE67DF6EDF0E2B6, 0A70AA67E5DD24C473C66A570C0FEBA9D398A0F0AD8386FE05D01C4D16346968 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
20:54:42.0173 0x0cb4 BTHUSB - ok
20:54:42.0236 0x0cb4 [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:54:42.0392 0x0cb4 cdfs - ok
20:54:42.0455 0x0cb4 [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom C:\Windows\System32\drivers\cdrom.sys
20:54:42.0533 0x0cb4 cdrom - ok
20:54:42.0595 0x0cb4 [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] CertPropSvc C:\Windows\System32\certprop.dll
20:54:42.0736 0x0cb4 CertPropSvc - ok
20:54:42.0767 0x0cb4 [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass C:\Windows\System32\drivers\circlass.sys
20:54:42.0861 0x0cb4 circlass - ok
20:54:42.0939 0x0cb4 [ 8EB7E70C2D348FE2476A2E3F2D585E3D, 2B5D407FACF1D049261026CC552A7C93B028A661B0F4E959815EAE7670054127 ] CLFS C:\Windows\system32\drivers\CLFS.sys
20:54:43.0064 0x0cb4 CLFS - ok
20:54:43.0142 0x0cb4 [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
20:54:43.0283 0x0cb4 CmBatt - ok
20:54:43.0416 0x0cb4 [ 3930E508DDA46C1FF68FD963F350AA0A, BF63F9C7AB30E2A8199D65EDD6DCBB797C93A4A0B972373643FBE1C38BCFA697 ] CNG C:\Windows\system32\Drivers\cng.sys
20:54:43.0587 0x0cb4 CNG - ok
20:54:43.0673 0x0cb4 [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
20:54:43.0767 0x0cb4 CompositeBus - ok
20:54:43.0798 0x0cb4 COMSysApp - ok
20:54:43.0829 0x0cb4 [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv C:\Windows\system32\drivers\condrv.sys
20:54:43.0939 0x0cb4 condrv - ok
20:54:44.0006 0x0cb4 [ 6324F0D18FB52833BA64BC828E29054C, 04118FA1BDFC512F76E4A81FEF34C78B6BD98429DB1D65123B6802B4A1E30584 ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:54:44.0194 0x0cb4 CryptSvc - ok
20:54:44.0295 0x0cb4 [ 9DBC32A45CFA67074432D2AF6C2832B6, B3B26302961A95EDFD4F994D56B1E5A8452266E0C2161D15C1213BBE376227A2 ] CSC C:\Windows\system32\drivers\csc.sys
20:54:44.0592 0x0cb4 CSC - ok
20:54:44.0722 0x0cb4 [ 86079FF8A3B625ABAEB68841D2BF6FE6, 49FF4D458DF8FAB4ECA8CAD9BBF88C929C8B9AB7F063938A6A332B31F2C0F8EB ] CscService C:\Windows\System32\cscsvc.dll
20:54:44.0910 0x0cb4 CscService - ok
20:54:44.0957 0x0cb4 [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam C:\Windows\system32\drivers\dam.sys
20:54:45.0004 0x0cb4 dam - ok
20:54:45.0144 0x0cb4 [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:54:45.0347 0x0cb4 DcomLaunch - ok
20:54:45.0457 0x0cb4 [ 95E1ABFB27F8A62ED764805775F0D2F3, 692865DA60C93481E01592883678B2C51FD9AC9A835DFB00A8E3F2DFEE7AB0ED ] defragsvc C:\Windows\System32\defragsvc.dll
20:54:45.0644 0x0cb4 defragsvc - ok
20:54:45.0738 0x0cb4 [ FF086DEF5995558CCB1B5AAC2110195D, CED52FF01F9247BFDAFC5C7EFC538F8638146ED715574A422496EE0F846CB079 ] DeviceAssociationService C:\Windows\system32\das.dll
20:54:45.0879 0x0cb4 DeviceAssociationService - ok
20:54:45.0941 0x0cb4 [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
20:54:46.0097 0x0cb4 DeviceInstall - ok
20:54:46.0160 0x0cb4 [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
20:54:46.0332 0x0cb4 Dfsc - ok
20:54:46.0426 0x0cb4 [ 3EEAADA3125431980E5804ED7143458A, 381E12C83E3211C255B321D35536F4049D67E31061F8D82155E4D4509E97F43D ] Dhcp C:\Windows\system32\dhcpcore.dll
20:54:46.0629 0x0cb4 Dhcp - ok
20:54:46.0691 0x0cb4 [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk C:\Windows\system32\drivers\disk.sys
20:54:46.0769 0x0cb4 disk - ok
20:54:46.0801 0x0cb4 [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
20:54:46.0957 0x0cb4 dmvsc - ok
20:54:47.0053 0x0cb4 [ 33ADFB7453BF3271463712C4BCE61AD1, A1DB30F874BA7B2C4C653494D70B46B94BF7D39D0DD8559F6CA7A14B676FD617 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:54:47.0177 0x0cb4 Dnscache - ok
20:54:47.0251 0x0cb4 [ 811EACBCC7C51A03AE11F13CC27B2AB6, FAB94F84950FFB7D3649BAFB8D96D43B880D7FDE8D5B879472AE26C4BC4203B0 ] dot3svc C:\Windows\System32\dot3svc.dll
20:54:47.0407 0x0cb4 dot3svc - ok
20:54:47.0470 0x0cb4 [ B99CB575986789A93A683DCF292A43A1, 6ACEA31C723B74003E106FC8303542FCC6DBC4952B6B523F6590D006BE57238D ] DPS C:\Windows\system32\dps.dll
20:54:47.0579 0x0cb4 DPS - ok
20:54:47.0642 0x0cb4 [ 00C594D5A1DBD22AD8B2902B9F6EFF94, 2920D62B5F7C49A8AFA80FCAD1E834BBAA670AEBDD7E6F21F0496D1D3CCB4E90 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:54:47.0689 0x0cb4 drmkaud - ok
20:54:47.0767 0x0cb4 [ 263625A4F616538EB867B6306A6590DB, 2A064720C247EAA3446EFDCC9E01D84CBA875905D78DFED0FBD62D1EE422D416 ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
20:54:47.0892 0x0cb4 DsmSvc - ok
20:54:48.0101 0x0cb4 [ E1BB0B6F00F470B451AB45EA13EBA0B3, 3A2FC2175B69A5EB98D6C2D563DBFDCB320647AB87A14E47FAE800423DCACDAB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:54:48.0414 0x0cb4 DXGKrnl - ok
20:54:48.0476 0x0cb4 [ E253530BD5EDE28F1FF6AF93C4D8034D, 787A70C3E946348F066FB8EB81FCE60157217D93FD78ADC631B5835E8D76A253 ] Eaphost C:\Windows\System32\eapsvc.dll
20:54:48.0617 0x0cb4 Eaphost - ok
20:54:49.0029 0x0cb4 [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv C:\Windows\system32\drivers\evbda.sys
20:54:49.0638 0x0cb4 ebdrv - ok
20:54:49.0701 0x0cb4 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] EFS C:\Windows\System32\lsass.exe
20:54:49.0779 0x0cb4 EFS - ok
20:54:49.0841 0x0cb4 [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
20:54:49.0904 0x0cb4 EhStorClass - ok
20:54:49.0962 0x0cb4 [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
20:54:50.0005 0x0cb4 EhStorTcgDrv - ok
20:54:50.0068 0x0cb4 [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev C:\Windows\System32\drivers\errdev.sys
20:54:50.0130 0x0cb4 ErrDev - ok
20:54:50.0255 0x0cb4 [ F00C593994D57C75273F820653440536, 2DC986D9890EC907405FB2045E6F55ACC384169B45F0B56CCB1A953CF71D9A5D ] EventSystem C:\Windows\system32\es.dll
20:54:50.0443 0x0cb4 EventSystem - ok
20:54:50.0521 0x0cb4 [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat C:\Windows\system32\drivers\exfat.sys
20:54:50.0708 0x0cb4 exfat - ok
20:54:50.0755 0x0cb4 [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:54:50.0880 0x0cb4 fastfat - ok
20:54:50.0974 0x0cb4 [ 304B6AEC4639A7CCCCF544C6BA6177B2, B75CDD52FD3890B3008E06C503945D1E36478F0EC5E067C8DBC2822D7935D24B ] Fax C:\Windows\system32\fxssvc.exe
20:54:51.0193 0x0cb4 Fax - ok
20:54:51.0224 0x0cb4 [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc C:\Windows\System32\drivers\fdc.sys
20:54:51.0302 0x0cb4 fdc - ok
20:54:51.0380 0x0cb4 [ 020D2F29009F893ADEFF4405B4B44565, 9F8501064C72933D1442DA00E70392B30D0207EB7D60F50E6648FF363799E6F1 ] fdPHost C:\Windows\system32\fdPHost.dll
20:54:51.0489 0x0cb4 fdPHost - ok
20:54:51.0552 0x0cb4 [ E80D2EDD2F88B6E20076A0A4F5A5A245, E3CD6E0BE152B22E8A7340EFFD10CCDB1B632CD3EDF487E83F697D2E22A7D594 ] FDResPub C:\Windows\system32\fdrespub.dll
20:54:51.0646 0x0cb4 FDResPub - ok
20:54:51.0724 0x0cb4 [ 47AB7D16EDE434B934AA4D661456C2D5, D375A92FB3E4BB0A8DA5270DACC888E53FB9F514516039FE6DAE4D4EF6B9A970 ] fhsvc C:\Windows\system32\fhsvc.dll
20:54:51.0864 0x0cb4 fhsvc - ok
20:54:51.0911 0x0cb4 [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:54:51.0989 0x0cb4 FileInfo - ok
20:54:52.0021 0x0cb4 [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:54:52.0114 0x0cb4 Filetrace - ok
20:54:52.0161 0x0cb4 [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
20:54:52.0224 0x0cb4 flpydisk - ok
20:54:52.0333 0x0cb4 [ C1FB505A73FA2E9019D32444AB33B75A, 765F0635C18295855CA4C0394192E8B94BA2EA1C4D74F86B720358ABA019FFAA ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:54:52.0411 0x0cb4 FltMgr - ok
20:54:52.0583 0x0cb4 [ 7269C9013FCFA3C6E70F03E2630DBFC3, AAB282B4444CC17D197974D05063C7C97E5202E604681DD2DC3BCF0AE77D6057 ] FontCache C:\Windows\system32\FntCache.dll
20:54:52.0927 0x0cb4 FontCache - ok
20:54:52.0974 0x0cb4 [ A7C31B168F371E8E6796219F23E354DB, C51C9BF568F1E96CBBE57D2432B38F93F40520086DDB6AAAAC48CBCD1691B441 ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:54:53.0036 0x0cb4 FsDepends - ok
20:54:53.0083 0x0cb4 [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:54:53.0130 0x0cb4 Fs_Rec - ok
20:54:53.0333 0x0cb4 [ 38F3CF15321DC2B47C7907EB222B637A, C2CE4F62BD7C93566C36B7290DA3E804FB79A18A18E2544E2B6404B473483D4E ] fussvc C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe
20:54:53.0693 0x0cb4 fussvc - detected UnsignedFile.Multi.Generic ( 1 )
20:54:56.0161 0x0cb4 Detect skipped due to KSN trusted
20:54:56.0161 0x0cb4 fussvc - ok
20:54:56.0318 0x0cb4 [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:54:56.0505 0x0cb4 fvevol - ok
20:54:56.0568 0x0cb4 [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
20:54:56.0974 0x0cb4 FxPPM - ok
20:54:57.0239 0x0cb4 [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:54:57.0333 0x0cb4 gagp30kx - ok
20:54:57.0396 0x0cb4 [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
20:54:57.0489 0x0cb4 gencounter - ok
20:54:57.0568 0x0cb4 [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
20:54:57.0677 0x0cb4 GPIOClx0101 - ok
20:54:57.0943 0x0cb4 [ 0D03F87D4FF4ADBAF8336DD80548155A, BC10CFA88EA2F41A8D96CB810B7953A4C168B79273A3E804A9F020F49AB58CD3 ] gpsvc C:\Windows\System32\gpsvc.dll
20:54:58.0193 0x0cb4 gpsvc - ok
20:54:58.0302 0x0cb4 [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:54:58.0536 0x0cb4 HdAudAddService - ok
20:54:58.0614 0x0cb4 [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
20:54:59.0114 0x0cb4 HDAudBus - ok
20:54:59.0239 0x0cb4 [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
20:54:59.0380 0x0cb4 HidBatt - ok
20:54:59.0443 0x0cb4 [ 42F88B57CAE42FC10059C887B3FCFCEA, 9363AA2B8E839A6935A7C6A36C491938DF78024886DCCE6D29CB18E1D6A6D806 ] HidBth C:\Windows\System32\drivers\hidbth.sys
20:54:59.0536 0x0cb4 HidBth - ok
20:54:59.0693 0x0cb4 [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
20:54:59.0786 0x0cb4 hidi2c - ok
20:54:59.0849 0x0cb4 [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr C:\Windows\System32\drivers\hidir.sys
20:54:59.0989 0x0cb4 HidIr - ok
20:55:00.0083 0x0cb4 [ EA85B5093DF7B5C3E80362B053740AE2, 1D4251385402A2ADEE8FA1642F54180304F88337DA74989BDE44025ABB145FE5 ] hidserv C:\Windows\system32\hidserv.dll
20:55:00.0286 0x0cb4 hidserv - ok
20:55:00.0333 0x0cb4 [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb C:\Windows\System32\drivers\hidusb.sys
20:55:00.0614 0x0cb4 HidUsb - ok
20:55:00.0724 0x0cb4 [ 93C4315F47F8D635C6DB0DF49FCE10EE, 70C52B8927D54ACD23F27948780B522974250FD5CD81AA9801C3F158C402889F ] hkmsvc C:\Windows\system32\kmsvc.dll
20:55:00.0927 0x0cb4 hkmsvc - ok
20:55:01.0146 0x0cb4 [ AC49522ED106BD4B545D6614D71C2445, 40BD738A301170378ECFC031635EB04E2F812B676376CADDD6607ECABEC9255F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:55:01.0521 0x0cb4 HomeGroupListener - ok
20:55:01.0927 0x0cb4 [ 99932E30CE0283B73BB6E5019E150394, 1F88C2F56A7B8E1F75E6359281F418F9661DA4FB7B7D7B14FA7F718B15D4DCE0 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:55:02.0130 0x0cb4 HomeGroupProvider - ok
20:55:02.0364 0x0cb4 [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:55:02.0443 0x0cb4 HpSAMD - ok
20:55:02.0724 0x0cb4 [ E87A6D3B8FECD5B93BC0CFBB48C27970, 55C49B6F3822450447C082B40A263F3370694DB53AD0018ADEB911E4A9F65A88 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:55:02.0989 0x0cb4 HTTP - ok
20:55:03.0068 0x0cb4 [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:55:03.0146 0x0cb4 hwpolicy - ok
20:55:03.0208 0x0cb4 [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
20:55:03.0318 0x0cb4 hyperkbd - ok
20:55:03.0349 0x0cb4 [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
20:55:03.0489 0x0cb4 HyperVideo - ok
20:55:03.0568 0x0cb4 [ D887446F3F6051C60C26F4FD1FC8D43F, A3235C64E9D5378E3409FA7CDD9DB0DD1B3CE6A6EB018F2C40558EB9C427A498 ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
20:55:03.0896 0x0cb4 i8042prt - ok
20:55:03.0958 0x0cb4 [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
20:55:04.0036 0x0cb4 iaLPSSi_GPIO - ok
20:55:04.0083 0x0cb4 [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C C:\Windows\System32\drivers\iaLPSSi_I2C.sys
20:55:04.0146 0x0cb4 iaLPSSi_I2C - ok
20:55:04.0349 0x0cb4 [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV C:\Windows\system32\drivers\iaStorAV.sys
20:55:04.0474 0x0cb4 iaStorAV - ok
20:55:04.0583 0x0cb4 [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:55:04.0739 0x0cb4 iaStorV - ok
20:55:04.0771 0x0cb4 IEEtwCollectorService - ok
20:55:05.0739 0x0cb4 [ 76D3AB8191A700A8E0A9B14E0C637D24, 83A0ECC47EBE8B113AD9A649ED4C7CDB047F1E950A37BA7E19BE9612C3B149C8 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
20:55:06.0677 0x0cb4 igfx - ok
20:55:07.0286 0x0cb4 [ 3DBDBD9581C015F02651D6A89801FAD5, 81B6D302C9CD29AD8319515056CFBCD0BD25619B2B166937ACD5F1416B568837 ] IKEEXT C:\Windows\System32\ikeext.dll
20:55:07.0568 0x0cb4 IKEEXT - ok
20:55:07.0614 0x0cb4 [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide C:\Windows\system32\drivers\intelide.sys
20:55:07.0693 0x0cb4 intelide - ok
20:55:07.0755 0x0cb4 [ A770340FC02B999EF0DE6C2A6BC8437C, 214567BE706B21BEA7EC13AF6B10FBFF658000511DBBA79BAA28D1D4EFD029A7 ] intelpep C:\Windows\system32\drivers\intelpep.sys
20:55:07.0833 0x0cb4 intelpep - ok
20:55:07.0896 0x0cb4 [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm C:\Windows\System32\drivers\intelppm.sys
20:55:08.0021 0x0cb4 intelppm - ok
20:55:08.0068 0x0cb4 [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:55:08.0614 0x0cb4 IpFilterDriver - ok
20:55:09.0099 0x0cb4 [ A5800036E4EA06697A34742A24ACFBE1, BA67060526E9213000B4206F86A74F904999AD7018EFCBE4FE9708650DA9D973 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:55:09.0364 0x0cb4 iphlpsvc - ok
20:55:09.0489 0x0cb4 [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
20:55:09.0880 0x0cb4 IPMIDRV - ok
20:55:10.0036 0x0cb4 [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:55:10.0271 0x0cb4 IPNAT - ok
20:55:10.0458 0x0cb4 [ 944A6D2E1D971806EFFE4BBABF0DBDC7, 394FC1137D2F5CAE0076229EBFEA940584A15AE4D382006507292A94441AF442 ] IpOverUsbSvc C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
20:55:10.0521 0x0cb4 IpOverUsbSvc - ok
20:55:10.0568 0x0cb4 [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:55:10.0739 0x0cb4 IRENUM - ok
20:55:10.0833 0x0cb4 [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:55:10.0974 0x0cb4 isapnp - ok
20:55:11.0224 0x0cb4 [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
20:55:11.0443 0x0cb4 iScsiPrt - ok
20:55:11.0568 0x0cb4 [ A1D4D34A56DF1D5122CDB265038A2E72, AE061BA1A65C98AF875FA18878B014B57E33594D4AC4C39B050AA532E2220F83 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
20:55:11.0708 0x0cb4 kbdclass - ok
20:55:11.0786 0x0cb4 [ 4A34D7084B862A92F3ABC4969166B3D3, 87B2635873DA4DD06D9E3B8E4313CBDBDC1488E4E340EC2101393EC65823771F ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
20:55:11.0989 0x0cb4 kbdhid - ok
20:55:12.0083 0x0cb4 [ DB7A09BC90DF20F44F16F8B0F9ED3491, 2DF5E042284D61368A5801B2557351B2C4B1044AA6F966DF4DDCE7B453D1B9AE ] kbldfltr C:\Windows\system32\drivers\kbldfltr.sys
20:55:12.0161 0x0cb4 kbldfltr - ok
20:55:12.0193 0x0cb4 [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
20:55:12.0318 0x0cb4 kdnic - ok
20:55:12.0349 0x0cb4 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] KeyIso C:\Windows\system32\lsass.exe
20:55:12.0427 0x0cb4 KeyIso - ok
20:55:12.0521 0x0cb4 [ 4E829B18D5BAEC29893792A3C671A847, 64C3B99F53A9D1ACA802B46B09E820AD210B667D5A1CD0ADAF1F12944B15B52E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:55:12.0583 0x0cb4 KSecDD - ok
20:55:12.0661 0x0cb4 [ 15C8C65CEA018C02EA0F648448C491C5, DF909704D22D891BE439B2E3D8386EA659444F91DC92AABFF9766446AEE5EBC0 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:55:12.0724 0x0cb4 KSecPkg - ok
20:55:12.0771 0x0cb4 [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:55:12.0880 0x0cb4 ksthunk - ok
20:55:12.0943 0x0cb4 [ C1591A66028C71147A3E2EAB0B1CCB7E, 82F3D5DCC1614398A144D9791E4BAA814DBA9112677341FD57D5E9834CEDEB41 ] KtmRm C:\Windows\system32\msdtckrm.dll
20:55:13.0083 0x0cb4 KtmRm - ok
20:55:13.0255 0x0cb4 [ 50AECF8C21AB2A6428A6E1E10549D8E5, 6BC7C60CF5E8AFB9972619EE1C78357756E9C0A3EC783C3056CEB600DCBB1555 ] L1C C:\Windows\system32\DRIVERS\L1C63x64.sys
20:55:13.0411 0x0cb4 L1C - ok
20:55:13.0708 0x0cb4 [ CA2828DDE4B09FEFFDB7CE68B3D8D00A, B514792FF1EF36C678BB51644A1C420105D5E2CD6DD5A89A3FB252D08277A40C ] LanmanServer C:\Windows\system32\srvsvc.dll
20:55:13.0958 0x0cb4 LanmanServer - ok
20:55:14.0146 0x0cb4 [ 3DBD9100745F9B8506B8FEC6FE6CCDE3, C3EF2856A1680AFDE133887E48946CF9CAB6755C3BDC07F0326965DCD4096F62 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:55:14.0302 0x0cb4 LanmanWorkstation - ok
20:55:14.0427 0x0cb4 [ 2B7479EB47731A8ACBA28AF4C4BDA32D, 67AEB98E7B41337FEFD92CC81BFAD25FBB679998B318C110A4873B1AD8927A97 ] lfsvc C:\Windows\System32\GeofenceMonitorService.dll
20:55:14.0802 0x0cb4 lfsvc - ok
20:55:14.0864 0x0cb4 [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:55:15.0021 0x0cb4 lltdio - ok
20:55:15.0271 0x0cb4 [ DAE98CC96C5EE308BF4EA7B18F226CB8, 7A6CC56BF075010707715AB6608764291E358EDF27C806A025532869004C686B ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:55:15.0411 0x0cb4 lltdsvc - ok
20:55:15.0536 0x0cb4 [ 1E2662D847B7D9995C65D90D254A7E0F, AFD4063D2071FFCB6B0EAC0715276D986F42326919C86E525DCE12E1109A93E2 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:55:15.0849 0x0cb4 lmhosts - ok
20:55:15.0974 0x0cb4 [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:55:16.0052 0x0cb4 LSI_SAS - ok
20:55:16.0114 0x0cb4 [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
20:55:16.0177 0x0cb4 LSI_SAS2 - ok
20:55:16.0318 0x0cb4 [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3 C:\Windows\system32\drivers\lsi_sas3.sys
20:55:16.0458 0x0cb4 LSI_SAS3 - ok
20:55:16.0521 0x0cb4 [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
20:55:16.0614 0x0cb4 LSI_SSS - ok
20:55:17.0130 0x0cb4 [ 9A7A7E45DAED2E8C2816716D8D28236A, C94787988826E546A8DC752BD6BE4EA7423DC3762B2D371DB297A63F865A95FF ] LSM C:\Windows\System32\lsm.dll
20:55:17.0396 0x0cb4 LSM - ok
20:55:17.0489 0x0cb4 [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv C:\Windows\system32\drivers\luafv.sys
20:55:17.0802 0x0cb4 luafv - ok
20:55:17.0896 0x0cb4 [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas C:\Windows\system32\drivers\megasas.sys
20:55:18.0021 0x0cb4 megasas - ok
20:55:18.0364 0x0cb4 [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr C:\Windows\system32\drivers\megasr.sys
20:55:18.0521 0x0cb4 megasr - ok
20:55:18.0614 0x0cb4 [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] MMCSS C:\Windows\system32\mmcss.dll
20:55:18.0849 0x0cb4 MMCSS - ok
20:55:18.0911 0x0cb4 [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem C:\Windows\system32\drivers\modem.sys
20:55:19.0099 0x0cb4 Modem - ok
20:55:19.0239 0x0cb4 [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor C:\Windows\System32\drivers\monitor.sys
20:55:19.0474 0x0cb4 monitor - ok
20:55:19.0536 0x0cb4 [ 2A2F8D5284E59815169A88F1FC9CEE28, 58EFBCF3C849FD088CFB7FE287FC7D9DD7E03D4E6AA98F0497C09E4596E42538 ] mouclass C:\Windows\System32\drivers\mouclass.sys
20:55:19.0599 0x0cb4 mouclass - ok
20:55:19.0708 0x0cb4 [ 91223A2AE2955B3E0DA3DB79C3A897A6, 32B59CF1586C2300D60AF8A1D819515033ACC7F7A1F3523FC4AC7725E29B5A90 ] mouhid C:\Windows\System32\drivers\mouhid.sys
20:55:20.0255 0x0cb4 mouhid - ok
20:55:20.0349 0x0cb4 [ D1D82F007A079A4D623DBD1F36EF30A1, 7901F81B62C5A4196D75A10C05386B16831CB290EFB9A1611CECF281068C520F ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:55:20.0427 0x0cb4 mountmgr - ok
20:55:20.0489 0x0cb4 [ 6FC047578785B0435F4E2660946D1ADC, 8AEA5659F01FC2F75160922C69622502DABA39F33CB90D5178DD679A1CDE617D ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:55:20.0705 0x0cb4 mpsdrv - ok
20:55:21.0048 0x0cb4 [ C18AA14126ADC66478E8E962B2DFAA98, A6F8CE9D88D590DC083253004392572C3BD02C33433CD6C0D9117D2AA7171EEC ] MpsSvc C:\Windows\system32\mpssvc.dll
20:55:21.0251 0x0cb4 MpsSvc - ok
20:55:21.0314 0x0cb4 [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:55:21.0455 0x0cb4 MRxDAV - ok
20:55:21.0564 0x0cb4 [ 31233271EDE50D1BBB220F78AFA60486, 2122FAB5BD353DF63CF0FE9CEDBD5DFD1F26F2DE04303E1B3FFB03AA02AECED9 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:55:21.0861 0x0cb4 mrxsmb - ok
20:55:22.0001 0x0cb4 [ 3E28B99198B514DFEB152EACF913025E, 6C1D8353DCD5F811F39C0C3CB5DF3D2457F0D17EE80FB06196AA169E3D19E9B2 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:55:22.0408 0x0cb4 mrxsmb10 - ok
20:55:22.0470 0x0cb4 [ 6276AC2AA203CF47811F6EFBBD214FBF, AE55D87D863A626347B0074F4E962080F1989A94153DAF8475593249F616DA2F ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:55:22.0689 0x0cb4 mrxsmb20 - ok
20:55:22.0751 0x0cb4 [ F3C060444777A59FC63D920719E43CCD, 8766A2746E3DFB0749E902F458141269335CA6F0CEDCA3D5F8C204637C19E783 ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
20:55:22.0939 0x0cb4 MsBridge - ok
20:55:23.0048 0x0cb4 [ 915747E010A9414B069173284A9B93F4, 8A335C28FE1EF96DD71485877F2E86155D24B5614ACE05468F4B07E2ACD56331 ] MSDTC C:\Windows\System32\msdtc.exe
20:55:23.0142 0x0cb4 MSDTC - ok
20:55:23.0205 0x0cb4 [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:55:23.0298 0x0cb4 Msfs - ok
20:55:23.0345 0x0cb4 [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
20:55:23.0423 0x0cb4 msgpiowin32 - ok
20:55:23.0455 0x0cb4 [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:55:23.0548 0x0cb4 mshidkmdf - ok
20:55:23.0595 0x0cb4 [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
20:55:23.0689 0x0cb4 mshidumdf - ok
20:55:23.0736 0x0cb4 [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:55:23.0814 0x0cb4 msisadrv - ok
20:55:23.0892 0x0cb4 [ 4EAEEBAC8CFF4E0D717DFA920BC58A90, A65CB1BB3392B6A04B978348CAC18A414560A6B04A727F22DFC0ADB20DD3AF6B ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:55:24.0017 0x0cb4 MSiSCSI - ok
20:55:24.0033 0x0cb4 msiserver - ok
20:55:24.0126 0x0cb4 [ 4C1A0E9B4C6CC09E8C68FD33998013AA, 190ADFCCAE844DB9F807BD9668EB90BE0C9887719DF2820E66D121655AF27614 ] MsKeyboardFilter C:\Windows\System32\KeyboardFilterSvc.dll
20:55:24.0236 0x0cb4 MsKeyboardFilter - ok
20:55:24.0298 0x0cb4 [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:55:24.0392 0x0cb4 MSKSSRV - ok
20:55:24.0517 0x0cb4 [ 51B3AC0560848CD6D65AC2033E293113, 73A27E88774C6929328E6C9FC9C389F4DF76D4D4D5CBFC4F51651CC308829628 ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
20:55:24.0830 0x0cb4 MsLldp - ok
20:55:24.0876 0x0cb4 [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:55:24.0955 0x0cb4 MSPCLOCK - ok
20:55:25.0001 0x0cb4 [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:55:25.0095 0x0cb4 MSPQM - ok
20:55:25.0236 0x0cb4 [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:55:25.0330 0x0cb4 MsRPC - ok
20:55:25.0423 0x0cb4 [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
20:55:25.0517 0x0cb4 mssmbios - ok
20:55:25.0564 0x0cb4 [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:55:25.0642 0x0cb4 MSTEE - ok
20:55:25.0673 0x0cb4 [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
20:55:25.0783 0x0cb4 MTConfig - ok
20:55:25.0830 0x0cb4 [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup C:\Windows\system32\Drivers\mup.sys
20:55:25.0892 0x0cb4 Mup - ok
20:55:25.0955 0x0cb4 [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis C:\Windows\system32\drivers\mvumis.sys
20:55:26.0033 0x0cb4 mvumis - ok
20:55:26.0142 0x0cb4 [ 8DF30698BDD9492A9D45A4B94FB4A82A, 26B1B2D7E785E29B8BCB74C467C66AE4EBDD481ACFF36334F3BDF4506B778244 ] napagent C:\Windows\system32\qagentRT.dll
20:55:26.0283 0x0cb4 napagent - ok
20:55:26.0439 0x0cb4 [ 008F7CED69FD5B30CBDE1E03C6F36A27, D4ADA7834C470B17A3CD976012DC5A511B32545B9F91D23D09A85722E0B75320 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:55:26.0689 0x0cb4 NativeWifiP - ok
20:55:26.0767 0x0cb4 [ BFCE1225D10619029E68946929CEB64C, 499F560331FFBA82E3D673B47F027FDAB7BEE4F2CB5B811D69E0218839F6E6A5 ] NcaSvc C:\Windows\System32\ncasvc.dll
20:55:26.0939 0x0cb4 NcaSvc - ok
20:55:27.0033 0x0cb4 [ 267C97373110B7AFD3B46DF60B6CBB85, CEBB99F71D47634BB9C04DF2836DF6B47F15B3073FEFC237F85526DF01E4E38B ] NcbService C:\Windows\System32\ncbservice.dll
20:55:27.0189 0x0cb4 NcbService - ok
20:55:27.0330 0x0cb4 [ 9ACED0F5B458C9011F39143326494E93, 9DFFC7EE7DE6FD92545EC6A203213C498A01EEFB0BC55460D339BCE498E56A7F ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
20:55:27.0533 0x0cb4 NcdAutoSetup - ok
20:55:27.0814 0x0cb4 [ 6D3A2565E01B3E4B0F1BEDB0D4B00B3F, 95F2608E17CA3E25BD7958D1A49F7030EC8088BC1DF12422F1DAC5BA99113E34 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:55:28.0064 0x0cb4 NDIS - ok
20:55:28.0111 0x0cb4 [ 8CECC8DA55F3274181FD1EA28AD76664, 188112424CEF97FB926A0FB915260B803555A775DD2E1846725A9C8616300F42 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:55:28.0283 0x0cb4 NdisCap - ok
20:55:28.0345 0x0cb4 [ 269882812E9A68FFF1AFE1283D428322, 50B99EBC42DA9B46A8C2C28C9BADCF58AE3079535CDD1227D0F5C86291C715FF ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
20:55:28.0611 0x0cb4 NdisImPlatform - ok
20:55:28.0658 0x0cb4 [ 82821F4EEC776B4CF11695A38F3ABA46, 23184F9D31E662855DC4D23EFE7C2FE00E5487D3762B6024704A5D8C87762E1C ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:55:28.0845 0x0cb4 NdisTapi - ok
20:55:28.0908 0x0cb4 [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:55:29.0017 0x0cb4 Ndisuio - ok
20:55:29.0064 0x0cb4 [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus C:\Windows\System32\drivers\NdisVirtualBus.sys
20:55:29.0158 0x0cb4 NdisVirtualBus - ok
20:55:29.0236 0x0cb4 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:55:29.0408 0x0cb4 NdisWan - ok
20:55:29.0455 0x0cb4 [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy C:\Windows\system32\DRIVERS\ndiswan.sys
20:55:29.0580 0x0cb4 NdisWanLegacy - ok
20:55:29.0658 0x0cb4 [ DDD7F92A83F74D1476B71FBA9530A8DC, D3F94FC9F48854E09B0B77CE5E1C1DB948D54EAC63C5583437051BB893B5A386 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:55:29.0845 0x0cb4 NDProxy - ok
20:55:29.0908 0x0cb4 [ 3083926D1CC5B56EA0786527B557DD1B, 3C3F0CA0D43398576DBE8F677B353ADDA7E8F56829874958CE668E31261C1590 ] Ndu C:\Windows\system32\drivers\Ndu.sys
20:55:30.0205 0x0cb4 Ndu - ok
20:55:30.0267 0x0cb4 [ 42FF4975D032CAE558AE4BB8448F6E5A, 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:55:30.0501 0x0cb4 NetBIOS - ok
20:55:30.0611 0x0cb4 [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:55:30.0798 0x0cb4 NetBT - ok
20:55:30.0845 0x0cb4 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] Netlogon C:\Windows\system32\lsass.exe
20:55:30.0939 0x0cb4 Netlogon - ok
20:55:31.0048 0x0cb4 [ 8F074B62E66B6117D9598C62A12069C5, 5FDB19045D3E2F6D0F0C5158AC2ECB0D5404CD2AF7A319755D7E3753CA3B7CF3 ] Netman C:\Windows\System32\netman.dll
20:55:31.0173 0x0cb4 Netman - ok
20:55:31.0376 0x0cb4 [ 4A04B1CD5BFB4A978C5F60E86D6C3E45, A946922C1C38ADD3CF9D3B09DDCC301AE4DAC960A081B2F42B32BE1E7095B3FD ] netprofm C:\Windows\System32\netprofmsvc.dll
20:55:31.0580 0x0cb4 netprofm - ok
20:55:31.0642 0x0cb4 [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:55:31.0736 0x0cb4 NetTcpPortSharing - ok
20:55:31.0783 0x0cb4 [ D4DCE03870314D3354F3501F9DDD4123, 5BFE8299B3F72B8C39A4965365CBF5BA151024451F02DD872FAD1CC35CF94CEA ] netvsc C:\Windows\System32\drivers\netvsc63.sys
20:55:32.0080 0x0cb4 netvsc - ok
20:55:32.0220 0x0cb4 [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc C:\Windows\System32\nlasvc.dll
20:55:32.0439 0x0cb4 NlaSvc - ok
20:55:32.0517 0x0cb4 [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs C:\Windows\system32\drivers\Npfs.sys
20:55:32.0611 0x0cb4 Npfs - ok
20:55:32.0658 0x0cb4 [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
20:55:32.0798 0x0cb4 npsvctrig - ok
20:55:32.0876 0x0cb4 [ 0F12A72A753CFD7FB0631EE8D08FE983, 860A96471F6CD90DDA9AB3A48E95CEAD826C87D2FA98A00EF91B61C44A4C8B82 ] nsi C:\Windows\system32\nsisvc.dll
20:55:32.0970 0x0cb4 nsi - ok
20:55:33.0048 0x0cb4 [ 0E046FF5823B95326D10CF1B4AF23541, 39D22715003746527AB4BFEDED8C34B695DAF589091AE7F3A2A2C4B8A35675A9 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:55:33.0205 0x0cb4 nsiproxy - ok
20:55:33.0548 0x0cb4 [ 7F68063A5A0461E02BC860CE0E6BFDDC, 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:55:33.0939 0x0cb4 Ntfs - ok
20:55:34.0001 0x0cb4 [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null C:\Windows\system32\drivers\Null.sys
20:55:34.0111 0x0cb4 Null - ok
20:55:34.0158 0x0cb4 [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:55:34.0251 0x0cb4 nvraid - ok
20:55:34.0298 0x0cb4 [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:55:34.0376 0x0cb4 nvstor - ok
20:55:34.0408 0x0cb4 [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:55:34.0470 0x0cb4 nv_agp - ok
20:55:34.0626 0x0cb4 [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:55:34.0830 0x0cb4 p2pimsvc - ok
20:55:34.0986 0x0cb4 [ FD8F61F0D1F64BBB3D835F39A3F979C9, E5C5F86576488EA7F605E26C06EE5AFB36506A446F60C894D55E0A148BF7F02D ] p2psvc C:\Windows\system32\p2psvc.dll
20:55:35.0158 0x0cb4 p2psvc - ok
20:55:35.0236 0x0cb4 [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport C:\Windows\System32\drivers\parport.sys
20:55:35.0330 0x0cb4 Parport - ok
20:55:35.0392 0x0cb4 [ BAFF6122CFC9F95CA175AD8C348179A4, 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:55:35.0501 0x0cb4 partmgr - ok
20:55:35.0642 0x0cb4 [ ABE95ABE27A8BD9701782BBCD82C9925, AE3BA1E9ECDE692374D8DAC95A8DAA289DD2470E3D8D58EFAD9F83A37F3AC8E5 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:55:35.0767 0x0cb4 PcaSvc - ok
20:55:35.0861 0x0cb4 [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci C:\Windows\system32\drivers\pci.sys
20:55:35.0955 0x0cb4 pci - ok
20:55:36.0001 0x0cb4 [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide C:\Windows\system32\drivers\pciide.sys
20:55:36.0126 0x0cb4 pciide - ok
20:55:36.0205 0x0cb4 [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
20:55:36.0298 0x0cb4 pcmcia - ok
20:55:36.0345 0x0cb4 [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw C:\Windows\system32\drivers\pcw.sys
20:55:36.0439 0x0cb4 pcw - ok
20:55:36.0486 0x0cb4 [ 24A8DFC07E4BAF29AEA26E383D4CC886, 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 ] pdc C:\Windows\system32\drivers\pdc.sys
20:55:36.0564 0x0cb4 pdc - ok
20:55:36.0705 0x0cb4 [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:55:36.0955 0x0cb4 PEAUTH - ok
20:55:37.0892 0x0cb4 [ A35EC8F902475350DA31BDF0E1402A91, 5AB43B4BD70B44A62FFD21A9D3CB8D1BC035B6E001DBB1BAC30D6D7A07475D83 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
20:55:38.0298 0x0cb4 PeerDistSvc - ok
20:55:38.0658 0x0cb4 [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:55:38.0845 0x0cb4 PerfHost - ok
20:55:39.0314 0x0cb4 [ 70B39E7241F750A248798CE82C44596D, 54A72199EB277EE586611DCBC21654786FD2196F91D5884C4F531297893CC3EC ] pla C:\Windows\system32\pla.dll
20:55:39.0673 0x0cb4 pla - ok
20:55:39.0767 0x0cb4 [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:55:39.0876 0x0cb4 PlugPlay - ok
20:55:39.0955 0x0cb4 [ 4570F8A37D221660F3A09D6F4DD4BA94, 0EA190CFFA53DF9CCA2D53A4EF1BCB837BA3F2489A3AC5BD11F6D6ED811D118E ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:55:40.0126 0x0cb4 PNRPAutoReg - ok
20:55:40.0267 0x0cb4 [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:55:40.0455 0x0cb4 PNRPsvc - ok
20:55:40.0751 0x0cb4 [ BDD52AB4AEBB8B1904568DBD0CCB70CB, C3D1DBA349C79B43DCDD9EF5255C5EE973EFB844235B808B5EF9B63A51FF00AA ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:55:40.0986 0x0cb4 PolicyAgent - ok
20:55:41.0080 0x0cb4 [ C8DD82C3035E60D671B8CC5DF128D3A9, 6AABF632CBEDA9A7B553BC9134FF100CB6FDC88000D499D2883408FCEDD97576 ] Power C:\Windows\system32\umpo.dll
20:55:41.0251 0x0cb4 Power - ok
20:55:41.0751 0x0cb4 [ E3514CE7CB4AF80ECCA383F065BC77C0, 1EA06D358A07EB9DFB703CEFC4EB834B947B899E0ACFE1C494E2DAED63F1D4B5 ] PrintNotify C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
20:55:43.0127 0x0cb4 PrintNotify - ok
20:55:43.0220 0x0cb4 [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor C:\Windows\System32\drivers\processr.sys
20:55:43.0283 0x0cb4 Processor - ok
20:55:43.0392 0x0cb4 [ 19424364D8C03B990C4281BE53963FD0, 958FC8436E6B754858E20BC48B0D4B269991E8CA94C15C2761BF04ED52591907 ] ProfSvc C:\Windows\system32\profsvc.dll
20:55:43.0611 0x0cb4 ProfSvc - ok
20:55:43.0705 0x0cb4 [ FC0141B4A5AD6D637D883C1A89FC45C5, DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:55:43.0767 0x0cb4 Psched - ok
20:55:43.0892 0x0cb4 [ DAA9DEE0A5D5F238C4EE54C2C7FB67C5, 7EC8C603BD92699AC35BDCD294F13BEE90D5C2C195FD93A3F16928BFCF53CA93 ] QWAVE C:\Windows\system32\qwave.dll
20:55:44.0080 0x0cb4 QWAVE - ok
20:55:44.0158 0x0cb4 [ 83868EB2924E6BC21A54337C65D614D1, 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:55:44.0314 0x0cb4 QWAVEdrv - ok
20:55:44.0377 0x0cb4 [ B337B1F1E82A83E20A1743E008E25C0F, A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:55:44.0533 0x0cb4 RasAcd - ok
20:55:44.0580 0x0cb4 [ 044638489B4A5FE5334F46C5314A0826, E06CC2A9EF369794DAD69FBB5AFD1676D4283DDAB2AD5E3EFE454C473F62F955 ] RasAuto C:\Windows\System32\rasauto.dll
20:55:44.0658 0x0cb4 RasAuto - ok
20:55:44.0798 0x0cb4 [ F83B38FCD4F69157B3D158433FA149CC, AB103BD3E2B3B134CB355C556DF70BCF0CF4DB11EFF7DB4A9876D5AA43D81293 ] RasMan C:\Windows\System32\rasmans.dll
20:55:44.0955 0x0cb4 RasMan - ok
20:55:45.0111 0x0cb4 [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:55:45.0220 0x0cb4 RasPppoe - ok
20:55:45.0314 0x0cb4 [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:55:45.0517 0x0cb4 rdbss - ok
20:55:45.0564 0x0cb4 [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
20:55:45.0689 0x0cb4 rdpbus - ok
20:55:45.0798 0x0cb4 [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
20:55:45.0908 0x0cb4 RDPDR - ok
20:55:46.0002 0x0cb4 [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
20:55:46.0095 0x0cb4 RdpVideoMiniport - ok
20:55:46.0173 0x0cb4 [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:55:46.0283 0x0cb4 rdyboost - ok
20:55:46.0502 0x0cb4 [ 615DFD97DEA56CE1C3A52185A3038FF8, 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 ] ReFS C:\Windows\system32\drivers\ReFS.sys
20:55:46.0689 0x0cb4 ReFS - ok
20:55:46.0798 0x0cb4 [ 0CF7CB56BF2D5E9DBCEE0185CB626FAD, 2BD2E2FB1D2EADD1F70EF55E8523C353F95D4FEB1BAD5017FA4D94F790F27825 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:55:46.0939 0x0cb4 RemoteAccess - ok
20:55:47.0002 0x0cb4 [ AC8785B53F8436058C90450DA1840AE7, CC1FFC2713910211F8A6AD532DBB9253ACD188CBD784F1BE6613DF382825A3C1 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:55:47.0220 0x0cb4 RemoteRegistry - ok
20:55:47.0298 0x0cb4 [ DC66AE45816614D2999DCD3834DCCC4E, 1C26225135E851DDD1307F52401DD7055B26B3F3B8FDD693B21042C2896E235A ] RFCOMM C:\Windows\System32\drivers\rfcomm.sys
20:55:47.0377 0x0cb4 RFCOMM - ok
20:55:47.0455 0x0cb4 [ 65B9FDE300A6DECC03BA44C4616DCAD6, CAD992982733DD20282A3453DC4E554AE1FC077C35479C0CA4E8BC3A9DCD3BB0 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:55:47.0533 0x0cb4 RpcEptMapper - ok
20:55:47.0595 0x0cb4 [ A737B433ABAF3F2DCB2BD7B4CC582B26, 3B5706B0CF0969A9F82060FD4DCC745F2D83C066B663FE8A4F0F493B64032C9C ] RpcLocator C:\Windows\system32\locator.exe
20:55:47.0673 0x0cb4 RpcLocator - ok
20:55:47.0908 0x0cb4 [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] RpcSs C:\Windows\system32\rpcss.dll
20:55:48.0080 0x0cb4 RpcSs - ok
20:55:48.0127 0x0cb4 [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:55:48.0252 0x0cb4 rspndr - ok
20:55:48.0283 0x0cb4 RSUSBSTOR - ok
20:55:48.0314 0x0cb4 RtsUIR - ok
20:55:48.0345 0x0cb4 [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap C:\Windows\System32\drivers\vms3cap.sys
20:55:48.0392 0x0cb4 s3cap - ok
20:55:48.0455 0x0cb4 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] SamSs C:\Windows\system32\lsass.exe
20:55:48.0502 0x0cb4 SamSs - ok
20:55:48.0548 0x0cb4 [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:55:48.0627 0x0cb4 sbp2port - ok
20:55:48.0689 0x0cb4 [ 74A3B67F03877D06B09B1B40C5ED582E, A8FF9BF416F0BF365BFB4E1796859825C811A74B5E54DDDCE8345193BEEBE206 ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:55:48.0798 0x0cb4 SCardSvr - ok
20:55:48.0861 0x0cb4 [ 8B9C4D55B4A536FB01C360DDB9533574, 9B939FE68F6F9C171ED0D91E2CE1E67515295D34EC23606BCDFD097DCC8CFD4A ] ScDeviceEnum C:\Windows\System32\ScDeviceEnum.dll
20:55:48.0923 0x0cb4 ScDeviceEnum - ok
20:55:48.0986 0x0cb4 [ 13BEA6C882D4D877A5A85CA149C86BC1, 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:55:49.0080 0x0cb4 scfilter - ok
20:55:49.0236 0x0cb4 [ A626F5E446860F22835E783142D7AE33, 3A786639E1FABCA512F4F91A10811DD3C4D9C9C9BB893362E4D019219D0BD8E2 ] Schedule C:\Windows\system32\schedsvc.dll
20:55:49.0517 0x0cb4 Schedule - ok
20:55:49.0595 0x0cb4 [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] SCPolicySvc C:\Windows\System32\certprop.dll
20:55:49.0658 0x0cb4 SCPolicySvc - ok
20:55:49.0736 0x0cb4 [ 7B7C482CF48E6EE33664340D1A78E6FE, CE5077C4B0372F4F9F02B0B37AE58C0DAEFCA9D242065731A23F072506430575 ] sdbus C:\Windows\System32\drivers\sdbus.sys
20:55:49.0845 0x0cb4 sdbus - ok
20:55:49.0923 0x0cb4 [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor C:\Windows\System32\drivers\sdstor.sys
20:55:50.0002 0x0cb4 sdstor - ok
20:55:50.0048 0x0cb4 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:55:50.0142 0x0cb4 secdrv - ok
20:55:50.0205 0x0cb4 [ BA24CEA7152239F42ECD04AFB7C89D24, A2A11EABB0C283772B74667C7544B61BEB1B9745FBF065E831542129EB585AFA ] seclogon C:\Windows\system32\seclogon.dll
20:55:50.0283 0x0cb4 seclogon - ok
20:55:50.0345 0x0cb4 [ 81FE9A81EDF8016816C9E91FBFBF7D35, 87FB92A3D15F312F0B9C423EF851061A944B013E5668D8C9A441B4DC0EB690AF ] SENS C:\Windows\System32\sens.dll
20:55:50.0455 0x0cb4 SENS - ok
20:55:50.0548 0x0cb4 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] SensorsSimulatorDriver C:\Windows\system32\DRIVERS\WUDFRd.sys
20:55:50.0736 0x0cb4 SensorsSimulatorDriver - ok
20:55:50.0830 0x0cb4 [ 6E4012AE67F09F867EF620C8D5524C0B, 63933E51F8E413E63481369CE2F9FD224560550FBD3BD2B4573E9F4AD88708A2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:55:51.0017 0x0cb4 SensrSvc - ok
20:55:51.0064 0x0cb4 [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx C:\Windows\system32\drivers\SerCx.sys
20:55:51.0142 0x0cb4 SerCx - ok
20:55:51.0220 0x0cb4 [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2 C:\Windows\system32\drivers\SerCx2.sys
20:55:51.0298 0x0cb4 SerCx2 - ok
20:55:51.0330 0x0cb4 [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum C:\Windows\System32\drivers\serenum.sys
20:55:51.0392 0x0cb4 Serenum - ok
20:55:51.0455 0x0cb4 [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial C:\Windows\System32\drivers\serial.sys
20:55:51.0564 0x0cb4 Serial - ok
20:55:51.0720 0x0cb4 [ 96B01F117057FB4DAE0FF919ACB55770, D0F58F1CAE4F81D60FCE60BB0065A34B4F897E8105DF17B6DAA334938CD25A56 ] sermouse C:\Windows\System32\drivers\sermouse.sys
20:55:51.0814 0x0cb4 sermouse - ok
20:55:51.0908 0x0cb4 [ 3A2F1A7472C3B7CC9B89C8516C726488, 9BCBBAC10C900EA7B30822B463A77EE5067F217C4B490857A09E5277983CB89B ] SessionEnv C:\Windows\system32\sessenv.dll
20:55:52.0048 0x0cb4 SessionEnv - ok
20:55:52.0095 0x0cb4 [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
20:55:52.0189 0x0cb4 sfloppy - ok
20:55:52.0283 0x0cb4 [ 8081FF3DAE8159FE8956B09BC29CE983, AC0F305AEE8B1AB2E1275F1D33EC1D2F3E23F234F831BD9D41F415A94A19D3AB ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:55:52.0455 0x0cb4 SharedAccess - ok
20:55:52.0564 0x0cb4 [ 7FD9A61A3523A61FC135D61D6E160314, 409E1CF7A62FD90CBC31AEAFBB7230B02DBEC6CFCA2D266D221A7643FAEBA13B ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:55:52.0814 0x0cb4 ShellHWDetection - ok
20:55:52.0877 0x0cb4 [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
20:55:52.0939 0x0cb4 SiSRaid2 - ok
20:55:53.0017 0x0cb4 [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:55:53.0095 0x0cb4 SiSRaid4 - ok
20:55:53.0205 0x0cb4 [ A9C057A9463C25490CF99EA8DF8A4B35, 8F4D1C40D0F17EDBF84ED455B8946F782C7552383F0A07E410A9B6CFF7F51D63 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
20:55:53.0314 0x0cb4 SkypeUpdate - ok
20:55:53.0377 0x0cb4 [ 3C84DCCE5B322F745A75CA8BA3A0F6B3, 1FB94A8A1C63D6FDB82E28ED5B696B3CB1F64183A89A3B5153B266C292CB7815 ] smphost C:\Windows\System32\smphost.dll
20:55:53.0439 0x0cb4 smphost - ok
20:55:53.0533 0x0cb4 [ D0EB0DF8C603BBA084351A92732B1CBE, E24ED8F78EF41C1BC17386AE4BBCE0DC892C5B89B12C03FC9FB61D359B13F1B4 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:55:53.0595 0x0cb4 SNMPTRAP - ok
20:55:53.0673 0x0cb4 [ D24B1945ED1F9C96DA786DBBF1E983CE, B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 ] spaceport C:\Windows\system32\drivers\spaceport.sys
20:55:53.0767 0x0cb4 spaceport - ok
20:55:53.0814 0x0cb4 [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
20:55:53.0877 0x0cb4 SpbCx - ok
20:55:54.0033 0x0cb4 [ FCB156A6745631A67DEA61827061D483, 9275ABFA1E1E595969A71C0DA228D18D1B868BF46E097E1276142BD80F8A32C9 ] Spooler C:\Windows\System32\spoolsv.exe
20:55:54.0361 0x0cb4 Spooler - ok
20:55:55.0158 0x0cb4 [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc C:\Windows\system32\sppsvc.exe
20:55:56.0298 0x0cb4 sppsvc - ok
20:55:56.0470 0x0cb4 [ 055B0DE7BCDB14FB18279F09DCA07954, 94944F996F2F73233A96F8E766606EA5CCC7142EA2AF4BCEFD2603578F2B4A4A ] SQLWriter C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
20:55:56.0564 0x0cb4 SQLWriter - ok
20:55:56.0658 0x0cb4 [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv C:\Windows\system32\DRIVERS\srv.sys
20:55:56.0939 0x0cb4 srv - ok
20:55:57.0064 0x0cb4 [ 00D8AC8E3053290BDE6EA2FB6810D2FC, 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:55:57.0220 0x0cb4 srv2 - ok
20:55:57.0330 0x0cb4 [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:55:57.0627 0x0cb4 srvnet - ok
20:55:57.0783 0x0cb4 [ CF6C3037839CF78421A94F9060C2886F, CA98C180AE03F5BE8FEFFBA75BD98DEE2AD4FA975E1EF83215C9CD2476946811 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:55:57.0939 0x0cb4 SSDPSRV - ok
20:55:58.0017 0x0cb4 [ 198A737DBA666F4808D62E9A8277A6B7, 90B6E5E2ACE95D850C913A3A1DA1F966C44955C530004C228FA93B2A536F5C27 ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:55:58.0173 0x0cb4 SstpSvc - ok
20:55:58.0205 0x0cb4 [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor C:\Windows\system32\drivers\stexstor.sys
20:55:58.0267 0x0cb4 stexstor - ok
20:55:58.0392 0x0cb4 [ 63E9CE568CF1192771A5F0460DE7D2B9, C27B21FD2C14AD41A59EF62EB8AC95C08EB13CCB1CEECD8378B8CDD4DC352E69 ] stisvc C:\Windows\System32\wiaservc.dll
20:55:58.0689 0x0cb4 stisvc - ok
20:55:58.0752 0x0cb4 [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci C:\Windows\system32\drivers\storahci.sys
20:55:58.0798 0x0cb4 storahci - ok
20:55:58.0861 0x0cb4 [ 8B9486B64E5FC17FB9CC04CA10B77A34, C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
20:55:58.0955 0x0cb4 storflt - ok
20:55:58.0986 0x0cb4 [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme C:\Windows\system32\drivers\stornvme.sys
20:55:59.0048 0x0cb4 stornvme - ok
20:55:59.0127 0x0cb4 [ A45F5AC9D8069D0EC66E3CA73103073B, 996788F1C58E016E8E5CF3FD1D220A3C40AFFD6C21361A34636415DB12E0D381 ] StorSvc C:\Windows\system32\storsvc.dll
20:55:59.0252 0x0cb4 StorSvc - ok
20:55:59.0298 0x0cb4 [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc C:\Windows\system32\drivers\storvsc.sys
20:55:59.0392 0x0cb4 storvsc - ok
20:55:59.0423 0x0cb4 [ 03618F935379614837F915D04C45FC0E, 9CC0CBA7AFC58E7F921C13FA3F5269714F1F827535A311E11EA48689C4D539DE ] storvsp C:\Windows\System32\drivers\storvsp.sys
20:55:59.0548 0x0cb4 storvsp - ok
20:55:59.0627 0x0cb4 [ E395BE02F80A79A6CF973BA38DBB8135, 4C6F85B0EB8E7725BA720F9742561D229726C0D7C17505D1E79F19A5626F6325 ] svsvc C:\Windows\system32\svsvc.dll
20:55:59.0783 0x0cb4 svsvc - ok
20:55:59.0830 0x0cb4 [ 65454187E0F8B6C0DCECB0287D06EC43, 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE ] swenum C:\Windows\System32\drivers\swenum.sys
20:55:59.0892 0x0cb4 swenum - ok
20:56:00.0017 0x0cb4 [ 1C71D72D4997A284128FBEE770726330, 21682BDE74A1108FED1124FB1EA35A03CBFA94ABE1B89CC0FADB4DD82596C43E ] swprv C:\Windows\System32\swprv.dll
20:56:00.0220 0x0cb4 swprv - ok
20:56:00.0439 0x0cb4 [ 3114CB46C2853CA71525428CB0C7CB58, A9CC51506AABBC23BAB2B90E30AB13197A72268A3DE6D2F281C1C367ED7118AE ] SysMain C:\Windows\system32\sysmain.dll
20:56:00.0814 0x0cb4 SysMain - ok
20:56:00.0892 0x0cb4 [ 23BECB70654B192A7E378DEE3DBD8D42, 7596174AE7508B62C40A429645198F6A420D0CD5B62A10AB78516113584E7EDB ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
20:56:01.0111 0x0cb4 SystemEventsBroker - ok
20:56:01.0205 0x0cb4 [ D6A71B95ACF71ACA63B67232059F1BCD, C5CEC032E7AB507500D1CC7A4E65DA6322412C798201A9D770CBDE892E50DFC8 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:56:01.0392 0x0cb4 TabletInputService - ok
20:56:01.0486 0x0cb4 [ 5A5BAB1CA9621E73E25EE4744B67CDA6, 479EBD7BAE1E2AD431153FDC016742F7A8D824716EAB1A4CA87EBBD21D61DECD ] TapiSrv C:\Windows\System32\tapisrv.dll
20:56:01.0689 0x0cb4 TapiSrv - ok
20:56:02.0111 0x0cb4 [ 468273F7089A3A33D149955F0F203FA4, 18FD0B73FBD63550E904EE76D4323EFE163BFF8C3DC6DE67F4BE6003C7DC6879 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:56:02.0548 0x0cb4 Tcpip - ok
20:56:02.0845 0x0cb4 [ 468273F7089A3A33D149955F0F203FA4, 18FD0B73FBD63550E904EE76D4323EFE163BFF8C3DC6DE67F4BE6003C7DC6879 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:56:03.0267 0x0cb4 TCPIP6 - ok
20:56:03.0361 0x0cb4 [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:56:03.0517 0x0cb4 tcpipreg - ok
20:56:03.0611 0x0cb4 [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:56:03.0673 0x0cb4 tdx - ok
20:56:03.0767 0x0cb4 [ 950AD1AE7498A492126FB9F9B2E27DB5, C4C9A972015F567FC87A4094C86835B2DD3476426AB8B40CD4872A725CA89CFC ] Te.Service C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe
20:56:03.0939 0x0cb4 Te.Service - detected UnsignedFile.Multi.Generic ( 1 )
20:56:06.0470 0x0cb4 Detect skipped due to KSN trusted
20:56:06.0470 0x0cb4 Te.Service - ok
20:56:06.0533 0x0cb4 [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt C:\Windows\System32\drivers\terminpt.sys
20:56:06.0611 0x0cb4 terminpt - ok
20:56:07.0048 0x0cb4 [ C50997E282576DA492EBA66B059D4196, EBD793CB396F9503376207FA60353F5672DEDB620C8E01C8D6AE0030B3B03339 ] TermService C:\Windows\System32\termsrv.dll
20:56:08.0111 0x0cb4 TermService - ok
20:56:10.0612 0x0cb4 [ 2180DBCE75B914E5E5BBFFFAAE97AA21, 8000AECC8855903DB50ABA7E304396D1FCEAE8DC9ADD4FC50275CF24B4D914DE ] Themes C:\Windows\system32\themeservice.dll
20:56:10.0761 0x0cb4 Themes - ok
20:56:10.0906 0x0cb4 [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] THREADORDER C:\Windows\system32\mmcss.dll
20:56:10.0984 0x0cb4 THREADORDER - ok
20:56:11.0297 0x0cb4 [ B5ED9CC61798C7D44BD535D40B89EFB5, 1BDCEAA9AF2096381870D92129C748F4EE06A1167ABA9367B9DD43BAF27E3F5B ] TimeBroker C:\Windows\System32\TimeBrokerServer.dll
20:56:11.0609 0x0cb4 TimeBroker - ok
20:56:12.0484 0x0cb4 [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM C:\Windows\system32\drivers\tpm.sys
20:56:12.0672 0x0cb4 TPM - ok
20:56:12.0766 0x0cb4 [ 884113C2BB703FE806C8608B75F34831, 24DE5750CA4363455412BABB0B1FAB08497153E8F158ED44958F100410F93506 ] TrkWks C:\Windows\System32\trkwks.dll
20:56:12.0891 0x0cb4 TrkWks - ok
20:56:13.0141 0x0cb4 [ 370A6907DDF79532A39319492B1FA38A, 46AECC5160F04FC3FFE4D37B404CCBBD1C5DC1501C2CEEE8284FF544DBDF10F8 ] truecrypt C:\Windows\system32\drivers\truecrypt.sys
20:56:13.0328 0x0cb4 truecrypt - ok
20:56:13.0703 0x0cb4 [ 44A94FB4C76528D2382FFE04B05827C3, B0BCDF7CD1D65E61A9061D539D83527A89B69583958F8A26C6BF9766C1B61E0C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:56:14.0172 0x0cb4 TrustedInstaller - ok
20:56:14.0297 0x0cb4 [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:56:14.0828 0x0cb4 TsUsbFlt - ok
20:56:14.0922 0x0cb4 [ 20185BEB7512EDE4EFECDFA148AC9F99, 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F ] TsUsbGD C:\Windows\System32\drivers\TsUsbGD.sys
20:56:16.0609 0x0cb4 TsUsbGD - ok
20:56:16.0766 0x0cb4 [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:56:16.0922 0x0cb4 tunnel - ok
20:56:16.0969 0x0cb4 [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:56:17.0031 0x0cb4 uagp35 - ok
20:56:17.0094 0x0cb4 [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor C:\Windows\System32\drivers\uaspstor.sys
20:56:17.0172 0x0cb4 UASPStor - ok
20:56:17.0297 0x0cb4 [ 807F8CF3E973305FC435C61CBBEE2A49, 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 ] UCX01000 C:\Windows\System32\drivers\ucx01000.sys
20:56:17.0469 0x0cb4 UCX01000 - ok
20:56:19.0562 0x0cb4 [ 1EC649F112896FAE33250F0B97AC5D0B, 0C0A1C2C7615DEB298AD3073340FD1BF91FEBE611F133E3B48D994A6EAA8369F ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:56:19.0844 0x0cb4 udfs - ok
20:56:19.0953 0x0cb4 [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI C:\Windows\System32\drivers\UEFI.sys
20:56:20.0078 0x0cb4 UEFI - ok
20:56:20.0281 0x0cb4 [ A867F0F978EE64C87FADC3B100869EE4, 2686BE85F963D0D0BB275E92E5B543280D8742CF10772303E3189D0719B6A277 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:56:20.0468 0x0cb4 UI0Detect - ok
20:56:20.0531 0x0cb4 [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:56:20.0796 0x0cb4 uliagpkx - ok
20:56:20.0957 0x0cb4 [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus C:\Windows\System32\drivers\umbus.sys
20:56:21.0151 0x0cb4 umbus - ok
20:56:21.0228 0x0cb4 [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass C:\Windows\System32\drivers\umpass.sys
20:56:21.0384 0x0cb4 UmPass - ok
20:56:21.0727 0x0cb4 [ A023F267A262D5DA6CE1436D9C5E8FD9, 92AD7AF91184C244A7E392F49663143193A80D5D81114546A00F18227DE31D23 ] UmRdpService C:\Windows\System32\umrdp.dll
23:56:24.0929 0x0cb4 UmRdpService - ok
23:56:27.0194 0x0cb4 [ C98493DD8E6A50154FAC75C15E1C36BB, CECD1C826C8F7AF05468871BF6A0ACDBB6B0202F4F87F48C6D367E5BD699E800 ] upnphost C:\Windows\System32\upnphost.dll
23:56:27.0765 0x0cb4 upnphost - ok
23:56:28.0312 0x0cb4 [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp C:\Windows\System32\drivers\usbccgp.sys
23:56:28.0578 0x0cb4 usbccgp - ok
23:56:28.0890 0x0cb4 USBCCID - ok
23:56:29.0328 0x0cb4 [ 0139248F6B95CF0D837B5B46A2722D40, 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 ] usbcir C:\Windows\System32\drivers\usbcir.sys
23:56:30.0468 0x0cb4 usbcir - ok
23:56:30.0765 0x0cb4 [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci C:\Windows\System32\drivers\usbehci.sys
23:56:31.0218 0x0cb4 usbehci - ok
23:56:32.0500 0x0cb4 [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub C:\Windows\System32\drivers\usbhub.sys
23:56:33.0015 0x0cb4 usbhub - ok
23:56:33.0812 0x0cb4 [ FAA564A13576F9284546BF016D27B551, 1D2CD13DC0B02DD40657EE4F93F4A13C78D2F2EF91685E563D78E217C96DF544 ] USBHUB3 C:\Windows\System32\drivers\UsbHub3.sys
23:56:34.0062 0x0cb4 USBHUB3 - ok
23:56:34.0672 0x0cb4 [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci C:\Windows\System32\drivers\usbohci.sys
23:56:37.0547 0x0cb4 usbohci - ok
23:56:37.0687 0x0cb4 [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint C:\Windows\System32\drivers\usbprint.sys
23:56:38.0156 0x0cb4 usbprint - ok
23:56:38.0343 0x0cb4 [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR C:\Windows\System32\drivers\USBSTOR.SYS
23:56:38.0547 0x0cb4 USBSTOR - ok
23:56:39.0484 0x0cb4 [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci C:\Windows\System32\drivers\usbuhci.sys
23:56:39.0765 0x0cb4 usbuhci - ok
23:56:40.0078 0x0cb4 [ 5C8F604F6DC74177CDD8372D7B1ADFF0, C1DE9A37A7A01CCCBFCE13C1E5B26683F620AB21EDA5A14C82022E2F49C84484 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
23:56:41.0797 0x0cb4 usbvideo - ok
23:56:42.0378 0x0cb4 [ 1A20F03700D2B2ED775E38D751EF2F63, 76F8BE9F412D4397437E60A7E6231C80EA9B4F5436C9A8FAB967C78604994AE9 ] USBXHCI C:\Windows\System32\drivers\USBXHCI.SYS
23:56:42.0503 0x0cb4 USBXHCI - ok
23:56:42.0722 0x0cb4 [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] VaultSvc C:\Windows\system32\lsass.exe
23:56:42.0769 0x0cb4 VaultSvc - ok
23:56:42.0832 0x0cb4 [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:56:42.0925 0x0cb4 vdrvroot - ok
23:56:43.0816 0x0cb4 [ 8A4D808D1EC7C1C47B2C8BF488A9A07A, 63C07312ADB6F8A8BDE93361C30AC63DAB4DE1141AF54630EEF11E54B0BF983D ] vds C:\Windows\System32\vds.exe
23:56:44.0300 0x0cb4 vds - ok
23:56:44.0488 0x0cb4 [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt C:\Windows\system32\drivers\VerifierExt.sys
23:56:44.0613 0x0cb4 VerifierExt - ok
23:56:45.0144 0x0cb4 [ C06E8481E068F170A258441639AC5792, 2F550530BACB511A195D5047F003B01CB6E04FA9A0DCCF638CB3D51FF5467DC7 ] vhdmp C:\Windows\System32\drivers\vhdmp.sys
23:56:45.0410 0x0cb4 vhdmp - ok
23:56:45.0597 0x0cb4 [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide C:\Windows\system32\drivers\viaide.sys
23:56:45.0753 0x0cb4 viaide - ok
23:56:45.0941 0x0cb4 [ 3CE922E34DB12D9F3C0EA856BC09687C, E50A1885FBC775E49614989ECFEA4ACBBDDA16AF459CC5361EED9E23CC7CD42C ] Vid C:\Windows\System32\drivers\Vid.sys
23:56:46.0222 0x0cb4 Vid - ok
23:56:46.0660 0x0cb4 [ 511AD3FF957A0127E6BD336FF6F89C38, 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 ] vmbus C:\Windows\system32\drivers\vmbus.sys
23:56:46.0769 0x0cb4 vmbus - ok
23:56:47.0269 0x0cb4 [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID C:\Windows\System32\drivers\VMBusHID.sys
23:56:47.0425 0x0cb4 VMBusHID - ok
23:56:47.0660 0x0cb4 [ 68F8C26DEA2D42E8DEC0778943433C80, 81E8F9D62815F94952CEEABD0689473CC330F7890F66872DCD35A43C06ED33CD ] vmbusr C:\Windows\System32\drivers\vmbusr.sys
23:56:47.0769 0x0cb4 vmbusr - ok
23:56:48.0983 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
23:56:49.0858 0x0cb4 vmicguestinterface - ok
23:56:50.0545 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicheartbeat C:\Windows\System32\ICSvc.dll
23:56:50.0623 0x0cb4 vmicheartbeat - ok
23:56:51.0123 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
23:56:51.0217 0x0cb4 vmickvpexchange - ok
23:56:51.0983 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicrdv C:\Windows\System32\ICSvc.dll
23:56:52.0061 0x0cb4 vmicrdv - ok
23:56:53.0451 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicshutdown C:\Windows\System32\ICSvc.dll
23:56:53.0545 0x0cb4 vmicshutdown - ok
23:56:54.0141 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmictimesync C:\Windows\System32\ICSvc.dll
23:56:54.0253 0x0cb4 vmictimesync - ok
15:57:28.0997 0x0cb4 [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicvss C:\Windows\System32\ICSvc.dll
15:57:29.0644 0x0cb4 vmicvss - ok
15:57:29.0818 0x0cb4 [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr C:\Windows\system32\drivers\volmgr.sys
15:57:31.0206 0x0cb4 volmgr - ok
15:57:33.0654 0x0cb4 [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
15:57:34.0857 0x0cb4 volmgrx - ok
15:57:36.0201 0x0cb4 [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap C:\Windows\system32\drivers\volsnap.sys
15:57:37.0201 0x0cb4 volsnap - ok
15:57:37.0498 0x0cb4 [ EF31713EE4C7CCFE4049F7E7F15645A2, 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 ] vpci C:\Windows\System32\drivers\vpci.sys
15:57:38.0107 0x0cb4 vpci - ok
15:57:38.0920 0x0cb4 [ ADBE96C33D1A5BB1BBAF90B4BC84F523, 6E9C9ED3D51E4B6E494D42ECA6F824AD86D676C12C39BBE6B8BD96366BCB02DA ] vpcivsp C:\Windows\System32\drivers\vpcivsp.sys
15:57:40.0592 0x0cb4 vpcivsp - ok
15:57:41.0373 0x0cb4 [ ED1F4BDF68C649C6F79A02502BB6C9BC, 3D2830822D4A2C7B3676100B27DEC7B1C2EF640DA36C6543365A9CF2A61BF68E ] VsEtwService120 C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe
15:57:42.0623 0x0cb4 VsEtwService120 - ok
15:57:43.0045 0x0cb4 [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
15:57:43.0389 0x0cb4 vsmraid - ok
15:57:45.0170 0x0cb4 [ 94FAFD473CDD80CE19A21FB9503D7ED1, 953E5E8C753C0017E1258695A76F60CC05D283F7476B9D9C5C8AC78B8E3FCE18 ] VSS C:\Windows\system32\vssvc.exe
15:57:46.0045 0x0cb4 VSS - ok
15:57:46.0389 0x0cb4 [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID C:\Windows\system32\drivers\vstxraid.sys
15:57:46.0654 0x0cb4 VSTXRAID - ok
15:57:46.0998 0x0cb4 [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
15:57:48.0264 0x0cb4 vwifibus - ok
15:57:48.0576 0x0cb4 [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
15:57:49.0201 0x0cb4 vwififlt - ok
15:57:49.0310 0x0cb4 [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
15:57:49.0482 0x0cb4 vwifimp - ok
15:57:49.0732 0x0cb4 [ DC821E811EFBB65CDD77FBB8B6ECA385, B7C8AACDF81DBA298F2F384983D36B269876C31F0398D89BF9070217A069B96F ] W32Time C:\Windows\system32\w32time.dll
15:57:50.0139 0x0cb4 W32Time - ok
15:57:50.0357 0x0cb4 [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen C:\Windows\System32\drivers\wacompen.sys
15:57:50.0685 0x0cb4 WacomPen - ok
15:57:51.0514 0x0cb4 [ A81988DCC4FA440AA88B84CA452F5E22, 3573AAA09971E8ADB6FEFA778E02B2D8EE5E4249267CF37A524D9F019CC836FB ] wbengine C:\Windows\system32\wbengine.exe
15:57:52.0185 0x0cb4 wbengine - ok
15:57:52.0404 0x0cb4 [ 0F1DFA2FED73FA78B8C3CDE332A870F6, 1089F6F585F5350D349A640EBD3117832DF6B3657EB6667CB00AE217E04ACA17 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
15:57:53.0170 0x0cb4 WbioSrvc - ok
15:57:53.0310 0x0cb4 [ 0EAEC313B24837613621B4A2536ED382, 61C194ED7FA7D65BBE61A546D5FCA52F52AB08324E084D3EC23C9706E9BF0175 ] Wcmsvc C:\Windows\System32\wcmsvc.dll
15:57:53.0545 0x0cb4 Wcmsvc - ok
15:57:53.0795 0x0cb4 [ F6B4C2280FF7C7156AC8A4687B9DA35E, 1899D584D7469BB49355D84080051E2575B033E6312009D9C6C1DD3F7F9AA4C5 ] wcncsvc C:\Windows\System32\wcncsvc.dll
15:57:53.0998 0x0cb4 wcncsvc - ok
15:57:54.0076 0x0cb4 [ B7BF1D783F5B2484E8CE1C0C78257F16, 468601199FCCF63DBAE86EE6B8825EA85B2A1EE177413353FFA2CC9CA5249FCD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:57:54.0248 0x0cb4 WcsPlugInService - ok
15:57:54.0310 0x0cb4 [ 1751F6B031ADAC34724511057D2E455D, BCBC77DE02718868302F7469E8FBB8F2E7E0F8A5D3E46A5B4D48713E829FBAF6 ] WdBoot C:\Windows\system32\drivers\WdBoot.sys
15:57:54.0373 0x0cb4 WdBoot - ok
15:57:54.0639 0x0cb4 [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
15:57:54.0873 0x0cb4 Wdf01000 - ok
15:57:54.0998 0x0cb4 [ D296D0F0DB2CD1504F90405603664493, 9531034AE2E027B5C7366713AA9003085501800B35F971D1CE7FFB8E5DAE3825 ] WdFilter C:\Windows\system32\drivers\WdFilter.sys
15:57:55.0107 0x0cb4 WdFilter - ok
15:57:55.0170 0x0cb4 [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiServiceHost C:\Windows\system32\wdi.dll
15:57:55.0279 0x0cb4 WdiServiceHost - ok
15:57:55.0310 0x0cb4 [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiSystemHost C:\Windows\system32\wdi.dll
15:57:55.0389 0x0cb4 WdiSystemHost - ok
15:57:55.0435 0x0cb4 [ 9F4DF0043965808973023A9B51A11136, 3A799125CBC5C214D9FBB91C348B39563B1FDB7403B520270752E9A177464723 ] WdNisDrv C:\Windows\system32\Drivers\WdNisDrv.sys
15:57:55.0529 0x0cb4 WdNisDrv - ok
15:57:55.0576 0x0cb4 WdNisSvc - ok
15:57:55.0685 0x0cb4 [ 185E4111627F7AA6799E1366B5E91D65, 7A02C816DFBCCF47EDB49E5E2005A3D0B80719FAC94F9298D2DBAC63950EDA05 ] WebClient C:\Windows\System32\webclnt.dll
15:57:55.0857 0x0cb4 WebClient - ok
15:57:55.0982 0x0cb4 [ 384E1D04FE20845B2559D292F17A9FA1, AD3B0B2B2219691AC30FEEC8AFDB3BBB74B51BB7D02038AE2B4DEA514E245315 ] Wecsvc C:\Windows\system32\wecsvc.dll
15:57:56.0232 0x0cb4 Wecsvc - ok
15:57:56.0295 0x0cb4 [ 455014F4E48B67EBE0F032E2B0E06BF2, A36435784A034B27056A0E606683A20C69F1B0AB2B6BAEDEAEAA190F6287CAEF ] WEPHOSTSVC C:\Windows\system32\wephostsvc.dll
15:57:56.0389 0x0cb4 WEPHOSTSVC - ok
15:57:56.0467 0x0cb4 [ F13DBA57CEA9B7074B95EDCA6AD2635E, 1D9BA4841EF1343A5D9096B5FE27FC65DC1901D6683DD13516171638549666B5 ] wercplsupport C:\Windows\System32\wercplsupport.dll
15:57:56.0623 0x0cb4 wercplsupport - ok
15:57:56.0717 0x0cb4 [ FD7E58B6AA3EABF2D12B9762A20E11E4, 4C5E2E246C5C70074866BB3DBC2AAF483ECE4345004CCB8D1FE285047268685D ] WerSvc C:\Windows\System32\WerSvc.dll
15:57:56.0810 0x0cb4 WerSvc - ok
15:57:56.0857 0x0cb4 [ BAB713B409258DB7B5D9F9693F802B0E, C0D0391EC4FDC07E0A07F4EEB2DC9CC5B2BE5D2E292E7D01929E8D39D6F73EA5 ] WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs.sys
15:57:56.0935 0x0cb4 WFPLWFS - ok
15:57:57.0014 0x0cb4 [ 8C840E1FD7584E74BD0CC1EA581EC187, 148E534A94B4882E7396B13FABE17407802292E7890713540080D03D5629C81D ] WiaRpc C:\Windows\System32\wiarpc.dll
15:57:57.0123 0x0cb4 WiaRpc - ok
15:57:57.0170 0x0cb4 [ 5F66B7BB330AA80067FC66149A692620, 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
15:57:57.0232 0x0cb4 WIMMount - ok
15:57:57.0248 0x0cb4 WinDefend - ok
15:57:57.0373 0x0cb4 [ 10DAD6A7FC617A221313BD584E3C3A00, F139B878668ECF38FE59831E8595A207D5CEEE76C6FFDA8C9F735435E601A763 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
15:57:57.0576 0x0cb4 WinHttpAutoProxySvc - ok
15:57:57.0810 0x0cb4 [ FC8BD690321216C32BB58B035B6D5674, D61698DB19D9DB2593B60B6BA13F7B7735667206F41D751D507135469D6D3CDD ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
15:57:58.0014 0x0cb4 Winmgmt - ok
15:57:58.0639 0x0cb4 [ 75436315AA383CF527695C6D49D0CA59, E3D55F2ACBD45D4D031FA6CA799394459C89BE50FF6ADE4FE36F2CAB2D2E63D0 ] WinRM C:\Windows\system32\WsmSvc.dll
15:57:58.0982 0x0cb4 WinRM - ok
15:57:59.0295 0x0cb4 [ DC079BA8390089E4EBCA63D27EEA3ECB, 4D549217A68292E2B16C09FD9F84317011EE54A2DAF4E2AB85554267DF0D3249 ] WlanSvc C:\Windows\System32\wlansvc.dll
15:57:59.0589 0x0cb4 WlanSvc - ok
15:58:00.0171 0x0cb4 [ 06BF5897949A8F24893F792E876B71F5, 9D3719492A86BF52A56E2EA798FD6FDB5862A03F6D360FCC4B0CEA9BE9792AE4 ] wlidsvc C:\Windows\system32\wlidsvc.dll
15:58:00.0639 0x0cb4 wlidsvc - ok
15:58:00.0718 0x0cb4 [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi C:\Windows\System32\drivers\wmiacpi.sys
15:58:00.0843 0x0cb4 WmiAcpi - ok
15:58:00.0968 0x0cb4 [ B96F7A1236C3F21212DE2C40A3DDB005, 5A29EBB6DA036E303611EB1304192655021405BB05452FD37886DDE604FF0D9D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
15:58:01.0061 0x0cb4 wmiApSrv - ok
15:58:01.0139 0x0cb4 [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof C:\Windows\system32\drivers\Wof.sys
15:58:01.0233 0x0cb4 Wof - ok
15:58:01.0702 0x0cb4 [ 588040D595BBF0856CA1ADD941A8ED17, CBC92BB5453FE1BEA6F33239B7CE884F312559591383408EA5F95A006156C5D3 ] workfolderssvc C:\Windows\system32\workfolderssvc.dll
15:58:02.0155 0x0cb4 workfolderssvc - ok
15:58:02.0264 0x0cb4 [ A2468CC3509394A33C4C32F99563D845, 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 ] wpcfltr C:\Windows\system32\DRIVERS\wpcfltr.sys
15:58:02.0358 0x0cb4 wpcfltr - ok
15:58:02.0421 0x0cb4 [ 19F4DF69876DA7E9C4965351560FE6B7, 127247A7964F55EE3AF842D25120F5ACD387632BEE2BF3D28FAC05840CEA19BA ] WPCSvc C:\Windows\System32\wpcsvc.dll
15:58:02.0577 0x0cb4 WPCSvc - ok
15:58:02.0655 0x0cb4 [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
15:58:02.0780 0x0cb4 ws2ifsl - ok
15:58:02.0874 0x0cb4 [ 5596C0960ED6ED7494BF2A55DE428684, C95CF09A657F37F421CC80E16F2F95B8EC59A8D5D48F104551155EAC8E53DCB2 ] wscsvc C:\Windows\System32\wscsvc.dll
15:58:03.0030 0x0cb4 wscsvc - ok
15:58:03.0061 0x0cb4 WSearch - ok
15:58:03.0780 0x0cb4 [ 6B2D71124C1EA86B74412F414C42431D, 078CC6C9667EF6BDA3E6900BC26A5A5B030CAA66928A6BBB7B7DC43C5C199EDC ] WSService C:\Windows\System32\WSService.dll
15:58:04.0311 0x0cb4 WSService - ok
15:58:05.0124 0x0cb4 [ 5F3D70B19BCAC985DA90F22CA2FF45E4, BBD82BAEF0DCA2C6361F8D1ADF5BED36D0F1AB1A2AEADB0E4526B917F40C2E52 ] wuauserv C:\Windows\system32\wuaueng.dll
15:58:05.0671 0x0cb4 wuauserv - ok
15:58:05.0764 0x0cb4 [ 481286719402E4BAEFEA0604AB1B5113, F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
15:58:06.0046 0x0cb4 WudfPf - ok
15:58:06.0108 0x0cb4 [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFRd C:\Windows\System32\drivers\WUDFRd.sys
15:58:06.0186 0x0cb4 WUDFRd - ok
15:58:06.0249 0x0cb4 [ 51D28F7F1F888DDCF2C67DCF3B79A5D3, 74FF2936AFCEB9A36175D5B00EB91A5AD614B52BE3FB3FA9B994A025A484D2B7 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
15:58:06.0343 0x0cb4 wudfsvc - ok
15:58:06.0436 0x0cb4 [ A0900F8F628B5AF6841414EB3CF11E50, 8A531F2472FF4B4D895D469D28C215C834ECADBEF539894B8F3F606079A86184 ] WwanSvc C:\Windows\System32\wwansvc.dll
15:58:06.0671 0x0cb4 WwanSvc - ok
15:58:06.0749 0x0cb4 ================ Scan global ===============================
15:58:06.0843 0x0cb4 [ 243F54DBA6EB48A369CA465E263ABA4A, 9D9F9DE783D000F3EA130EB68FD71319F21E4F1CD4232FB8B2F8A9A67E08F5F4 ] C:\Windows\system32\basesrv.dll
15:58:06.0905 0x0cb4 [ EAB311B0A7A8EA0346F14F08D4BC8F46, 11168E4074679F8A69DA714C0ABD0C68BA49D171B379343F14783C9C563202CA ] C:\Windows\system32\winsrv.dll
15:58:06.0968 0x0cb4 [ 3600ED7EA8AED849E20700551C0BD63B, 4A8C346C1646E80B58EF93F87F915A41E05CA2E993BB1C96955AE62A0669AF66 ] C:\Windows\system32\sxssrv.dll
15:58:07.0061 0x0cb4 [ 5BF02EBEFEDC706318C96E2E60EDCB91, DC866C5BC3A887CAAA7169AB9BB2992F6F877B3EA04B62B4F95B6BD54943155F ] C:\Windows\system32\services.exe
15:58:07.0093 0x0cb4 [ Global ] - ok
15:58:07.0108 0x0cb4 ================ Scan MBR ==================================
15:58:07.0124 0x0cb4 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:58:08.0228 0x0cb4 \Device\Harddisk0\DR0 - ok
15:58:08.0228 0x0cb4 ================ Scan VBR ==================================
15:58:08.0259 0x0cb4 [ EF4EDC5B7DBDA9444D5527C3AA0C45D0 ] \Device\Harddisk0\DR0\Partition1
15:58:08.0290 0x0cb4 \Device\Harddisk0\DR0\Partition1 - ok
15:58:08.0321 0x0cb4 [ 40AB1DA9FFEA98F9E8C86D9C64287EE2 ] \Device\Harddisk0\DR0\Partition2
15:58:08.0337 0x0cb4 \Device\Harddisk0\DR0\Partition2 - ok
15:58:08.0415 0x0cb4 [ D604A7C1568DC2C545F277BFE1D35099 ] \Device\Harddisk0\DR0\Partition3
15:58:08.0493 0x0cb4 \Device\Harddisk0\DR0\Partition3 - ok
15:58:08.0540 0x0cb4 [ 0DBA12D9D379E1E5B8BDF850337567C2 ] \Device\Harddisk0\DR0\Partition4
15:58:08.0853 0x0cb4 \Device\Harddisk0\DR0\Partition4 - ok
15:58:08.0868 0x0cb4 ================ Scan generic autorun ======================
15:58:09.0056 0x0cb4 [ 6C308D32AFA41D26CE2A0EA8F7B79565, 5CC2C563D89257964C4B446F54AFE1E57BBEE49315A9FC001FF5A6BCB6650393 ] C:\Windows\system32\rundll32.exe
15:58:09.0384 0x0cb4 Logitech Download Assistant - ok
15:58:09.0509 0x0cb4 [ 690EB331346D7ADFDA18E50042DEA4B4, 0C219D7A5FCD4E0252C815373E67F843DBD7356FAE7AB836C451068B51438FE7 ] C:\Program Files\Classic Shell\ClassicStartMenu.exe
15:58:09.0837 0x0cb4 Classic Start Menu - detected UnsignedFile.Multi.Generic ( 1 )
15:58:10.0165 0x0cb4 Classic Start Menu ( UnsignedFile.Multi.Generic ) - warning
15:58:10.0790 0x0cb4 [ 28097821DE2D52E8B259E8D977DE229F, EAA3345F502ED0EB7DC02189F19F2648C6D1E79750AED0F968E5D33614861642 ] C:\Program Files\Ditto\Ditto.exe
15:58:11.0134 0x0cb4 Ditto - detected UnsignedFile.Multi.Generic ( 1 )
15:58:11.0134 0x0cb4 Ditto ( UnsignedFile.Multi.Generic ) - warning
15:58:11.0446 0x0cb4 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.7.205.0 ), 0x61100 ( enabled : updated )
15:58:11.0587 0x0cb4 Win FW state via NFP2: enabled
15:58:11.0587 0x0cb4 ============================================================
15:58:11.0587 0x0cb4 Scan finished
15:58:11.0587 0x0cb4 ============================================================
15:58:11.0649 0x07ec Detected object count: 2
15:58:11.0649 0x07ec Actual detected object count: 2
16:27:00.0656 0x07ec Classic Start Menu ( UnsignedFile.Multi.Generic ) - skipped by user
16:27:00.0657 0x07ec Classic Start Menu ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:27:00.0661 0x07ec Ditto ( UnsignedFile.Multi.Generic ) - skipped by user
16:27:00.0661 0x07ec Ditto ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:27:08.0698 0x04f8 Deinitialize success
Sollte ich vielleicht schonmal meine Passwörter ändern? Ich hab meinen Laptop bisher normal (aber wenig) weiter benutzt (Mails abgerufen, gesurft, im Forum eingeloggt...), ich hoffe mal, dass ich nicht von einem Trojaner ausspioniert wurde... |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
TDSSKiller.exe und speichere diese Datei auf dem Desktop