Anleitung nicht richtig gelesen. Du hast weder den tdsskiller richtig eingestellt, noch hast du darauf geachtet, dass nichts voreilig gelöscht werden soll.

16:40:24.0082 0x03cc  TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
16:40:24.0082 0x03cc  UEFI system
16:40:28.0020 0x03cc  ============================================================
16:40:28.0020 0x03cc  Current date / time: 2018/05/22 16:40:28.0020
16:40:28.0020 0x03cc  SystemInfo:
16:40:28.0020 0x03cc  
16:40:28.0020 0x03cc  OS Version: 10.0.16299 ServicePack: 0.0
16:40:29.0395 0x03cc  Product type: Workstation
16:40:29.0411 0x03cc  ComputerName: SEMIH-PC
16:40:29.0411 0x03cc  UserName: Semih
16:40:29.0411 0x03cc  Windows directory: C:\Windows
16:40:29.0411 0x03cc  System windows directory: C:\Windows
16:40:29.0411 0x03cc  Running under WOW64
16:40:29.0411 0x03cc  Processor architecture: Intel x64
16:40:29.0411 0x03cc  Number of processors: 4
16:40:29.0411 0x03cc  Page size: 0x1000
16:40:29.0411 0x03cc  Boot type: Normal boot
16:40:29.0411 0x03cc  CodeIntegrityOptions = 0x0000C001
16:40:29.0411 0x03cc  ============================================================
16:40:29.0411 0x03cc  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 16299.431, osProperties = 0x19
16:40:29.0536 0x03cc  System UUID: {1F8F61DB-B7B8-00BE-11B6-E7796682FC76}
16:40:32.0599 0x03cc  Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 ( 698.64 Gb ), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:40:32.0630 0x03cc  ============================================================
16:40:32.0630 0x03cc  \Device\Harddisk0\DR0:
16:40:32.0630 0x03cc  GPT partitions:
16:40:32.0630 0x03cc  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {E44834B2-95A6-4D42-BEB3-50F362D79AD9}, Name: Basic data partition, StartLBA 0x11B800, BlocksNum 0xF9800
16:40:32.0630 0x03cc  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {9ED88BD4-43D9-4043-BC33-0258619786CD}, Name: EFI system partition, StartLBA 0x215000, BlocksNum 0x32000
16:40:32.0630 0x03cc  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {7A274B1D-11E7-4F53-8EAD-BA9C24052DA6}, Name: Microsoft reserved partition, StartLBA 0x247000, BlocksNum 0x8000
16:40:32.0630 0x03cc  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {9F86256D-BEFF-402B-958E-535B26304BB9}, Name: Basic data partition, StartLBA 0x24F000, BlocksNum 0x572F7000
16:40:32.0630 0x03cc  MBR partitions:
16:40:32.0630 0x03cc  ============================================================
16:40:32.0708 0x03cc  C: <-> \Device\Harddisk0\DR0\Partition4
16:40:32.0708 0x03cc  ============================================================
16:40:32.0708 0x03cc  Initialize success
16:40:32.0708 0x03cc  ============================================================
16:41:09.0337 0x1be4  ============================================================
16:41:09.0337 0x1be4  Scan started
16:41:09.0337 0x1be4  Mode: Manual; SigCheck; TDLFS; 
16:41:09.0337 0x1be4  ============================================================
16:41:09.0337 0x1be4  KSN ping started
16:41:09.0462 0x1be4  KSN ping finished: true
16:41:29.0603 0x1be4  ================ Scan system memory ========================
16:41:29.0603 0x1be4  System memory - ok
16:41:29.0603 0x1be4  ================ Scan services =============================
16:41:29.0869 0x1be4  [ 6F44B9A53C1EEB37A8ECF440D110BAC5, A9B7BF073D450FFF60DEDF7DA84EEB11E28CA76E035E00AEAEE913D10047D36C ] 10944986        C:\Windows\system32\drivers\59217902.sys
16:41:31.0291 0x1be4  [ 08312DEEF0D3F8647AA53AD90A69094E, E32620323E7EDD3CAB5B04B9E37DDE7CA87B45C2CB17520D69D03C17E1D5F65A ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
16:41:31.0447 0x1be4  1394ohci - ok
16:41:31.0494 0x1be4  [ 645009E711BBF117CCEE917A03FB0CDD, B531951443D961C08428CB0F77F57D9F33C37C0637F919A9DA9DB5DA18479F70 ] 3ware           C:\Windows\system32\drivers\3ware.sys
16:41:31.0510 0x1be4  3ware - ok
16:41:31.0592 0x1be4  [ 6F44B9A53C1EEB37A8ECF440D110BAC5, A9B7BF073D450FFF60DEDF7DA84EEB11E28CA76E035E00AEAEE913D10047D36C ] 85215140        C:\Windows\system32\drivers\76667933.sys
16:41:31.0677 0x1be4  [ 334BAC25FE297342B119730E699B826C, 7ADC9240BFC835C48609BFCED422C4653BC2CA23F4474CD57A25D15EE44736B0 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
16:41:31.0763 0x1be4  ACPI - ok
16:41:31.0797 0x1be4  [ 44EA35A4B397898A83BF1B9B4B8DAE35, 023E3BC5CE47518269A812F156EFF1BD4CB14F1F5DD3FCC317DE046A519E20CE ] AcpiDev         C:\Windows\System32\drivers\AcpiDev.sys
16:41:31.0864 0x1be4  AcpiDev - ok
16:41:31.0879 0x1be4  [ 91D113A1532B8AB1E25B7DE5AB3C2F83, 43134DB92D522FCF537FFA8E829021F43BDD90006D7F096BA483DA1DAD3D1CC3 ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
16:41:31.0911 0x1be4  acpiex - ok
16:41:31.0926 0x1be4  [ 620BB2682BA625DF037072D89F44F6EE, A1A72F663C75DC65B1BA278CD7F43FAE6D1BDAE2F3F1D8269F508DECB555FFF9 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
16:41:31.0957 0x1be4  acpipagr - ok
16:41:31.0989 0x1be4  [ B9805A3C479390CEAEA5AEF5E4A90A2E, D9256734BC46EA43133873BDDE56B9A3597F74CFE82500FFB374A8EE6293ADD3 ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
16:41:32.0020 0x1be4  AcpiPmi - ok
16:41:32.0051 0x1be4  [ ABD4EB55C661143B015BD0B9B47B235C, 5F109BA04010E634D547E86AF67659EA06BD05FCF78A493DB190790C4D7E13EA ] acpitime        C:\Windows\System32\drivers\acpitime.sys
16:41:32.0067 0x1be4  acpitime - ok
16:41:32.0161 0x1be4  [ 8C58BD711FAD5F11E8CFDBC5CED973A5, 340FCD2C492009D5D7732FBF94198C4767125A77E0C71BB20E5CB2BDA5AB57CF ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS
16:41:32.0239 0x1be4  ADP80XX - ok
16:41:32.0317 0x1be4  [ 9619C0D7DB55CC3A636A24A7D82B0C8E, 12FA6F3CCABDC707F1ED1D48F9C53B84773D8E68719256192C64DE40D5DB909E ] AFD             C:\Windows\system32\drivers\afd.sys
16:41:32.0426 0x1be4  AFD - ok
16:41:32.0458 0x1be4  [ DCE606F0E15E0FB75ECC02EBB3DEFA9C, CC851775136EC09CD41BF7EE1582BC6BE41086A807F5EBF3F97C60B57D5ADBC5 ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys
16:41:32.0520 0x1be4  ahcache - ok
16:41:32.0551 0x1be4  [ 84FFB4AC2BA923364DF13F73751E05D1, EBD054282D93F290408A2343C0CBF98CEF7619A8252DC04E15322E51505D45AF ] AJRouter        C:\Windows\System32\AJRouter.dll
16:41:32.0598 0x1be4  AJRouter - ok
16:41:32.0629 0x1be4  [ 084101AB03969D8ED00D5FFBE5F4C3DF, 6425FA16F0CBF5F3008780095364830EBF1F073BD5109764FE9E88245AFB9367 ] ALG             C:\Windows\System32\alg.exe
16:41:32.0707 0x1be4  ALG - ok
16:41:32.0739 0x1be4  [ FB1548ED9CD0E1D0881D572328A53AF8, 1D5D6CF31ECE2890EC18042139EAF5B30FF831923CFCF90B9D92A49C4AF41964 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
16:41:32.0786 0x1be4  AMD External Events Utility - ok
16:41:32.0817 0x1be4  [ 49BFBF7E862E25207B44C068C5DE6CEB, 5F85DC50C2A9FB650BE8FFBC28C7AB8C8DB8B8BB0E6EE22E6F056E79C687BFA0 ] AmdAS4          C:\Windows\System32\drivers\AmdAS4.sys
16:41:32.0864 0x1be4  AmdAS4 - ok
16:41:32.0926 0x1be4  [ 654824DF0CE32C9D274C1943DEB19AEA, 298D21026D503CBCE7A5385E8466905C62EDC89EE7AAD824127A213A9662ED73 ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
16:41:33.0004 0x1be4  AmdK8 - ok
16:41:33.0036 0x1be4  amdkmdag - ok
16:41:33.0114 0x1be4  [ 5F72D93E780AB93609070182ECB50338, D1609E2EF03A3807C2EEAE2C8D03D64106E887B0A8CB4796FB5AB506108A4FDB ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
16:41:33.0207 0x1be4  amdkmdap - ok
16:41:33.0254 0x1be4  [ 12C4246CE1B769B720BE0848F75AB4C1, EDB6C085FB1291FE5436360FFE227E9885C5698B2076C6C326316A4E672AE8AE ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
16:41:33.0301 0x1be4  AmdPPM - ok
16:41:33.0333 0x1be4  [ F1C16AABA27E9E153AEC7BD2AB853F30, 7CFDBD218E6C161747A21BBACC78BF1061F2427ED1247F1AE0879BE155C504E7 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
16:41:33.0379 0x1be4  amdsata - ok
16:41:33.0411 0x1be4  [ C834D0F1ECB8473E9E6D18EE1BCEECB2, C9B7B9279F96DE4DA1EE096B6463591B3A718F87CD75E544C5A07C3639D1F188 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
16:41:33.0457 0x1be4  amdsbs - ok
16:41:33.0473 0x1be4  [ 49203D2FFE30CBB36BE66A0E70F3D954, E5B5A3B3B4A8FF03B5C902642C776CECD554CA1DB25419111EDA83602986CCCE ] amdxata         C:\Windows\system32\drivers\amdxata.sys
16:41:33.0489 0x1be4  amdxata - ok
16:41:33.0536 0x1be4  [ 38DC4D8B1BD5DA43179EEA726BD05249, 4BCACD6A6EDCBC76F3132142E70E9BE828BAA2C2D91F634A322FADD330C7ACC0 ] AppID           C:\Windows\system32\drivers\appid.sys
16:41:33.0551 0x1be4  AppID - ok
16:41:33.0598 0x1be4  [ BBB70415033710D6D7D58DDF2B0A06FA, 4CBB449D6A7970CF6BBFFAA96C3101EECD063A37DEBCB8D3C694BA1F4CCB8901 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
16:41:33.0614 0x1be4  AppIDSvc - ok
16:41:33.0661 0x1be4  [ 9D01D0608E39FCDE57969B0AA0191A56, E9D7F44A87D87F56CD3AA9D22C5466C04F2B9515124872BFA7FDE3FD81659DD4 ] Appinfo         C:\Windows\System32\appinfo.dll
16:41:33.0739 0x1be4  Appinfo - ok
16:41:33.0786 0x1be4  [ 1E085E2302D568F0CE041732B3E887B0, 0D2A3675FDD04C800B302C84A43F233F0217EB4B1AD44B11AADDB0D5D8FA0DB2 ] applockerfltr   C:\Windows\system32\drivers\applockerfltr.sys
16:41:33.0817 0x1be4  applockerfltr - ok
16:41:33.0864 0x1be4  [ 043786FF3A1B6A066613E0B166F28F07, CB248FA46D3798487A543344095F8EC5ACD8A4A5B9FCC7C374CAFE9DB04C6281 ] AppMgmt         C:\Windows\System32\appmgmts.dll
16:41:33.0895 0x1be4  AppMgmt - ok
16:41:33.0957 0x1be4  [ 1D123729F547EEDFBE3F510346848C38, B170860348FBAC054203A7B858866A12944D7046C01BA3A14AC0860D8C288770 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
16:41:34.0036 0x1be4  AppReadiness - ok
16:41:34.0098 0x1be4  [ 32C4D82E38968DA2235A0EEF9E4DE948, 7226E13FD2D34314AB353DBAB9C32D65683B5B2CCB49057B01525052C54E7E74 ] AppVClient      C:\Windows\system32\AppVClient.exe
16:41:34.0176 0x1be4  AppVClient - ok
16:41:34.0223 0x1be4  [ 05B19AD776D80FF0FADB44608896C16F, B7DDDF06C0E525774DA3AE3EA718E0CCC2D6C27F7430103B578859FAAAF2941F ] AppvStrm        C:\Windows\system32\drivers\AppvStrm.sys
16:41:34.0286 0x1be4  AppvStrm - ok
16:41:34.0333 0x1be4  [ 3EA678F2C70083FB1588772FE7FAFFE1, 8B236563E285352DE9DC056DC87872412D3A756E82DA9D0191931A19714B4078 ] AppvVemgr       C:\Windows\system32\drivers\AppvVemgr.sys
16:41:34.0364 0x1be4  AppvVemgr - ok
16:41:34.0395 0x1be4  [ ADD72B1FFE20B37A13A5A861724ECA05, D48515E1CF9B6317031B1151AEB8C7042D5FD63ABAD755749FE4660979F4E20B ] AppvVfs         C:\Windows\system32\drivers\AppvVfs.sys
16:41:35.0801 0x1be4  AppvVfs - ok
16:41:36.0036 0x1be4  [ E4A09D9DF9E4376A3DCF39C15FC95DA9, C205B1397C2FBEEDCB979AED9169BA971D5BD07CE7C1CCBF87E83B489FCDC2A7 ] AppXSvc         C:\Windows\system32\appxdeploymentserver.dll
16:41:36.0254 0x1be4  AppXSvc - ok
16:41:37.0661 0x1be4  [ B42C83DE28776B80DBA1310C56DD4F74, 8E017B73D5AD644EC1D46BC1DC2CAF465A6793E2AD6DC35A2E3AB907E7719C40 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
16:41:37.0723 0x1be4  arcsas - ok
16:41:37.0801 0x1be4  [ 0D51FFDAE7C906C308369EAB87358304, 684E0405D82C67285FA1586426EA6792BBE796524C10DD24C2AF48FEF4E3D92E ] AssignedAccessManagerSvc C:\Windows\System32\assignedaccessmanagersvc.dll
16:41:37.0864 0x1be4  AssignedAccessManagerSvc - ok
16:41:37.0911 0x1be4  [ C2151380227CD1F7DDA2401C1F151367, 0E76DCD69CAB960DC65942269081436A9DDA255E908E71A29E72DFCFC5CDCC7C ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
16:41:37.0957 0x1be4  AsyncMac - ok
16:41:37.0989 0x1be4  [ 6191B9B2EE0E8CB957C683B9B341CC86, E60ACC6E9C6E90F2E1DA0DE220C890B50887FD97E7884F8F4301FF2C9A2F408A ] atapi           C:\Windows\system32\drivers\atapi.sys
16:41:38.0004 0x1be4  atapi - ok
16:41:38.0223 0x1be4  [ 835E2C1A3D32492E2B90BD4FE5527CB6, DE129E570C85EE8AAE8084B40F4E32766B4B789A2EED81E46311712B0826053D ] athr            C:\Windows\System32\drivers\athw8x.sys
16:41:38.0504 0x1be4  athr - ok
16:41:39.0458 0x1be4  [ FD9A5BCC3AFB02E87668B749546B6229, 4BE969A11CEE8033F40EDE7E06A5904B328D3FC1842855C0DB38D5EEF458219C ] AtiHDAudioService C:\Windows\system32\drivers\AtihdWT6.sys
16:41:39.0504 0x1be4  AtiHDAudioService - ok
16:41:39.0567 0x1be4  [ 0A414BE36FFA16E9F20F94008E366AD6, FE254DDDEB22FFFBBFCC87FE035AE5C6F44F08C6FF0EDFBC0C584C0C47E6FF55 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
16:41:39.0645 0x1be4  AudioEndpointBuilder - ok
16:41:39.0770 0x1be4  [ 57D7504862058467BA8FB8D988E6D372, B0993D1040C91FFB9B5EDBFCBF9885887C90A01E9A7DD4218FA0D09A05C42097 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
16:41:39.0879 0x1be4  Audiosrv - ok
16:41:40.0051 0x1be4  [ 947FF5992E26AFD4CAA34506678B70BC, 0B125EDBD6E740375E45AAA465DC83740F5CD43A55CDA404F7A81F37EE3BC57C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
16:41:40.0114 0x1be4  AxInstSV - ok
16:41:40.0176 0x1be4  [ A921805C1ED3253DF48FCA4D724173EB, 7DB6A13228812550F066C76273ECA6B3FC12E7CC98C245D16B5A13FBCF6A509D ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
16:41:40.0239 0x1be4  b06bdrv - ok
16:41:40.0286 0x1be4  [ 3CC12A09AE7293F4CD1688117B46B9BB, 377B7FB7704BEA894801956756EF0EF2E8C938ABAA047F4729CDE91B44357CFB ] bam             C:\Windows\system32\drivers\bam.sys
16:41:40.0317 0x1be4  bam - ok
16:41:40.0348 0x1be4  [ 2A7267AA15E508F6D05A5B562F1FD1CE, 7070123619A3F08864844FF89C9DEA1D4ED48D05D2B93E305774BE715583DD51 ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
16:41:40.0364 0x1be4  BasicDisplay - ok
16:41:40.0411 0x1be4  [ FAFAEDFC7CAFD8B8FADA6A81BAF92E3A, 11EA3C361DFE5CC177E7D8FD002DC6542E05D1C74977A4716BC1B3DA5CAE963F ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys
16:41:40.0426 0x1be4  BasicRender - ok
16:41:40.0458 0x1be4  [ 739D089777D2B66DBE7201E5EA4BA2D7, 9AD12E18A042C5B8EFB19297BC2E7BD1FEF75A138FEFB64C6BF0261FD3E53AB1 ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
16:41:40.0473 0x1be4  bcmfn2 - ok
16:41:40.0520 0x1be4  [ 72963E0676003016B431306A6F4951BF, 3442A7C1AC1EE8E68F15C78CEBAC237D7535F834AA13F8BB602645DD183A73D3 ] BDESVC          C:\Windows\System32\bdesvc.dll
16:41:40.0582 0x1be4  BDESVC - ok
16:41:40.0614 0x1be4  [ 355D162E52819C19396FB01A8E005A1F, F7911703B51832806F9A88ECD7912A66A02A7798931F27757046D62895FCA0BD ] Beep            C:\Windows\system32\drivers\Beep.sys
16:41:40.0629 0x1be4  Beep - ok
16:41:40.0973 0x1be4  [ 17782D7A312DF421C517649722B8C361, 34215C5714477D3E774225B8D2F8FF696110BBB1B2828D9D1FD48A452EAC1716 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
16:41:41.0348 0x1be4  BEService - detected UnsignedFile.Multi.Generic ( 1 )
16:41:41.0520 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:41:43.0473 0x1be4  BEService ( UDS:DangerousObject.Multi.Generic ) - infected
16:41:43.0473 0x1be4  Force sending object to P2P due to detect: BEService
16:41:46.0708 0x1be4  Object send P2P result: true
16:41:48.0489 0x1be4  [ F6262869E673CC957C5D820C67F34D2F, F4E94E60DA70CC0C2474D2BD8BA6D8F77A38FFCCDD841B8C1D29A12FC057194C ] BFE             C:\Windows\System32\bfe.dll
16:41:48.0582 0x1be4  BFE - ok
16:41:48.0661 0x1be4  [ A0D1BF71E828CEFD7F9DC726AEAD80CE, 742F245105412476A8713ADFBBA5E6498B3B1A03DCF3EE58C15F5AC06C686B44 ] BITS            C:\Windows\System32\qmgr.dll
16:41:48.0770 0x1be4  BITS - ok
16:41:50.0270 0x1be4  [ 8843185CC8F60801C06812799584F6EB, 35D893B9C53215548C95143377F8DDC98A45F2269839BA498F2FA22B409F13C0 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
16:41:50.0317 0x1be4  bowser - ok
16:41:50.0411 0x1be4  [ FA2702519B710C40E6E55F85F7F87BBC, 95EE006E89FDC78F17BD68DE9977030A0FD47343FDF8308A68742F9E3D13CDF2 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
16:41:50.0536 0x1be4  BrokerInfrastructure - ok
16:41:50.0567 0x1be4  [ 2BA1BED8E8168C301522AC7CFBFA2141, 07000BEF5ABCF7795B474B69B1113F7EE5C22CF0F8CAF4A3D5D872B0D452CDD0 ] Browser         C:\Windows\System32\browser.dll
16:41:50.0629 0x1be4  Browser - ok
16:41:50.0676 0x1be4  [ 7EED7A90E85310BBBA38F082B4E8E507, 0CFDA667FB30A2C0344354B7B18A348F73CDF1509364F833E7AF4DE71DD5F2CF ] BrSerIb         C:\Windows\system32\DRIVERS\BrSerIb.sys
16:41:50.0770 0x1be4  BrSerIb - ok
16:41:50.0801 0x1be4  [ D9F6B30AD93CBD165EC71FADF51DF25E, 9E38846451650F4F320CB1DEA9C010653A54D7419591719936BF53BEE269F1A8 ] BrUsbSIb        C:\Windows\system32\DRIVERS\BrUsbSIb.sys
16:41:50.0817 0x1be4  BrUsbSIb - ok
16:41:50.0911 0x1be4  [ 7037B585F7D4AB58F1CFB1E7841E6FEF, DF01C722924404D0EC559B962CEAF655D13315A073810FA82649E2810E4A951D ] BtFilter        C:\Windows\system32\DRIVERS\btfilter.sys
16:41:50.0973 0x1be4  BtFilter - ok
16:41:51.0005 0x1be4  [ A4863B7B1F0DB513D6E34547BACC211A, 41E74A60721CCBE0A4D487B3EE01BAC3108D9BA819BF58A64E963478C43828E9 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
16:41:51.0083 0x1be4  BthAvrcpTg - ok
16:41:51.0129 0x1be4  [ 82BD96D56574231AD0E9BBF293EA2E7F, EFC7121D6EC425F89BF10078F3716A63753303B6DAB6CC3EF90730E6CBED4630 ] BthEnum         C:\Windows\System32\drivers\BthEnum.sys
16:41:51.0176 0x1be4  BthEnum - ok
16:41:51.0207 0x1be4  [ 9C9EE272C11252C651C5DE6A1AC1EDAA, DED378E894FA07B75F2E93490075879A50879CACACCF09F3F9EF37EDFA159233 ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys
16:41:51.0239 0x1be4  BthHFEnum - ok
16:41:51.0254 0x1be4  [ 69734E386826ED857C889330F35B4D9C, F0804D41D4BA6C9022B70D5092C4F14128D33F66C5D85DE10115A37C36927B70 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
16:41:51.0301 0x1be4  bthhfhid - ok
16:41:51.0348 0x1be4  [ BC58294295CBAD6637A526470305B5EA, FAA1A1C85D418B063D8A6E93558BA74D766081268354D63E28D372BD55D523DD ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
16:41:51.0426 0x1be4  BthHFSrv - ok
16:41:51.0442 0x1be4  [ 338B8D45C7DFB03DB7957188E16C9661, C634A32E6C945760BD85E3862B88BDA3E63A33DAD69523FD14523C3D301E675C ] bthl2cap        C:\Windows\system32\DRIVERS\bthl2cap.sys
16:41:51.0473 0x1be4  bthl2cap - ok
16:41:51.0504 0x1be4  [ 47BF82E2A6D11279C8501E08518AB835, 2B8D770AC694F31844A39BAC3B49C36523C9586D4B22C390009B057D4DA9D0F0 ] BthLEEnum       C:\Windows\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
16:41:51.0567 0x1be4  BthLEEnum - ok
16:41:51.0598 0x1be4  [ A94AFAEA86F5F792BB4ECA095B231464, 588256D53CD50B8299FCABF624E8EF29761B16DE1999896DC647FBF8E2BAEA68 ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
16:41:51.0629 0x1be4  BTHMODEM - ok
16:41:51.0692 0x1be4  [ 8E1D70E7778202D82A82E0E6710B827A, F10588CB1C5106BEE9009ACE798D349C7F786EFF9C4A0A312DF9D30BC1AAF9B3 ] BthPan          C:\Windows\System32\drivers\bthpan.sys
16:41:51.0739 0x1be4  BthPan - ok
16:41:51.0848 0x1be4  [ CC98DC94BB904EEADD22242535DF83DB, 8F638CF720C9EEAE57DE10277C26D343D9EE08B61A3F4871822537ED089008EC ] BTHPORT         C:\Windows\System32\drivers\BTHport.sys
16:41:51.0942 0x1be4  BTHPORT - ok
16:41:51.0989 0x1be4  [ 572BCA61B7E026E057AF7DF456AC7E0B, CA35DCC02BFE2D34C40449E47F0C8BA4AD709F01A952B9354332560CE72A1E4F ] bthserv         C:\Windows\system32\bthserv.dll
16:41:52.0051 0x1be4  bthserv - ok
16:41:52.0098 0x1be4  [ 55C836530A9602255BFB4F5D9DA2B737, DB82CB1FB657955AE80A144CC30D5112CF90FBEFCE9E89CF7CEF2929EBE56B28 ] BTHUSB          C:\Windows\System32\drivers\BTHUSB.sys
16:41:52.0114 0x1be4  BTHUSB - ok
16:41:52.0145 0x1be4  [ 39E7437FC59CDD7A303ABD514E462E8B, 9DCACFC12090BA03E3DD8E0EFE02382E3D42B528BDF6DD77318CAFACBA9EBA09 ] bttflt          C:\Windows\system32\drivers\bttflt.sys
16:41:52.0161 0x1be4  bttflt - ok
16:41:52.0176 0x1be4  [ 522888590B0C19BC8128119060AE7901, 9C979FD442E7B189FD156BD5E5E4A3D10FDABB3C38094B9C67A702103D39B00F ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
16:41:52.0207 0x1be4  buttonconverter - ok
16:41:52.0239 0x1be4  [ 2AB01CE5E233A6FBA3E91BD57772AA4B, DC241810B774BCE651B525885480F05D15AE0E623D53E4CB02562A8424C067E2 ] CAD             C:\Windows\System32\drivers\CAD.sys
16:41:52.0258 0x1be4  CAD - ok
16:41:52.0290 0x1be4  [ E2C8EE32C053892E685A989071AAE333, 842228C315BBD5FA802A81833BB0158774969FED4C5A706F9B904F7C70DB80A3 ] camsvc          C:\Windows\system32\CapabilityAccessManager.dll
16:41:52.0340 0x1be4  camsvc - ok
16:41:52.0390 0x1be4  [ F6F97879F53AD57194C6BC8272FD73EA, C11CB040CC64ABC0A6EAD6D6985659896FBB5911D2E10B6584E0F90FE6813C57 ] CapImg          C:\Windows\System32\drivers\capimg.sys
16:41:52.0460 0x1be4  CapImg - ok
16:41:52.0491 0x1be4  [ 9E82A95D77AC78C84BA75FF896B060BF, 87905E55724ADE5149D3BBC2DB76A7275580DE204BB561B8E1FCD631DEF3D9F9 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
16:41:52.0561 0x1be4  cdfs - ok
16:41:52.0624 0x1be4  [ 147CEBE0C5F7A80135C54715521AD9E1, 99ACF25165C0C17822B0FC06F662848CA0DFAD51B3E3B440005C2E033BFE4840 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
16:41:54.0061 0x1be4  CDPSvc - ok
16:41:54.0202 0x1be4  [ 6F9F9FA8976D9A45D3C75E7A49AC9995, 7350C4A0A1FEF73203F4AFF2689D59A34728F4F71849110235B1CA5FE0F5AF3D ] CDPUserSvc      C:\Windows\System32\CDPUserSvc.dll
16:41:54.0280 0x1be4  CDPUserSvc - ok
16:41:57.0280 0x1be4  [ 6D83565C1652E80447EDEA6947FA89D7, A84A3EA45304A9E3F53DA9F4CB9F2D9FF8A2AD69A36AEA366D35A2F5C9FDF851 ] cdrom           C:\Windows\System32\drivers\cdrom.sys
16:41:57.0342 0x1be4  cdrom - ok
16:41:57.0405 0x1be4  [ 6286CBE87B64AB7D1F59E3375A2FF3F4, 92C276A18F99D2A423BC3A99EBDA1239F3B335C1EB6EBAF2F2800A23188B26F2 ] CertPropSvc     C:\Windows\System32\certprop.dll
16:41:57.0467 0x1be4  CertPropSvc - ok
16:41:57.0530 0x1be4  [ D81954CE5E016FD716EDDB2B2FD9BA58, C47FF6D6527605238EF46E9BDF4544E2B2F4F9C5BCE13881F569F996541D7FF7 ] cht4iscsi       C:\Windows\system32\drivers\cht4sx64.sys
16:41:57.0577 0x1be4  cht4iscsi - ok
16:41:57.0686 0x1be4  [ F9A8570805807FFD66488F0A858E1308, 5D8363C5EEB7B92CFA219C466D04D8C625CACAFBDEA5857C5C9FA0C391AC2FEB ] cht4vbd         C:\Windows\System32\drivers\cht4vx64.sys
16:41:57.0795 0x1be4  cht4vbd - ok
16:41:57.0999 0x1be4  [ 9798D58461706930190F1F2F6BF21D80, BD7552297A636E19F5D544BDBF3490DA544E76002F62B227FA5BDA7A11760040 ] circlass        C:\Windows\System32\drivers\circlass.sys
16:41:58.0045 0x1be4  circlass - ok
16:41:58.0092 0x1be4  [ 6AF3865AEF65623814209794409AA15F, F95A18B08329A5A794AE7B59AE9193B479E9AF6904E2656701AFFE32C6658840 ] CldFlt          C:\Windows\system32\drivers\cldflt.sys
16:41:58.0155 0x1be4  CldFlt - ok
16:41:58.0202 0x1be4  [ DCCB20720E8652F02C8B9C3D9A8A8193, 74243C3C948447F7E29FF2E0B3B49D183DED6D7FA4EE8D8FAACC72432CD647F2 ] CLFS            C:\Windows\system32\drivers\CLFS.sys
16:41:58.0249 0x1be4  CLFS - ok
16:41:58.0655 0x1be4  [ AEA85358F32473F27F8DF052FDA17C7B, 215845D3E34C6CEB360126F06B21440F60B27F929C0D08AC0D747857CD5D8D92 ] ClickToRunSvc   C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
16:41:58.0983 0x1be4  ClickToRunSvc - ok
16:42:00.0186 0x1be4  [ 0EFD85AB09099246CDF8DB63978CC00A, 1E402747B03E0B17D7AE76D52B9E1BE8DA7D29A92B8301DC9FC7A02C0E78757C ] ClipSVC         C:\Windows\System32\ClipSVC.dll
16:42:00.0264 0x1be4  ClipSVC - ok
16:42:00.0311 0x1be4  [ 2BA3BA38B5A6A667B0EAEC477276707B, 80AD05C5C7E0398EB7320A82878700C6588B7411F3DEA02E5784CA599CB548C2 ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
16:42:00.0358 0x1be4  CmBatt - ok
16:42:00.0452 0x1be4  [ 5FD7E04967054728203265A310ED8D4A, 676C1A8D9DF8BBDC8BBEA3DD921736AF80FA7D5EFF5C0E6F2DE1C0010162800B ] CNG             C:\Windows\system32\Drivers\cng.sys
16:42:00.0530 0x1be4  CNG - ok
16:42:00.0545 0x1be4  [ C65AF00EF12A1755E7CA370B0C71935D, C03315A5B999EB9AA5B5F1F000BD8A1C68DFC151B23AA2F29F69F7129407AA11 ] cnghwassist     C:\Windows\system32\DRIVERS\cnghwassist.sys
16:42:00.0577 0x1be4  cnghwassist - ok
16:42:00.0702 0x1be4  [ 1B5D0CDBE1D4F5E7291816969F7AE3A9, A190580AB58C066EA4169577C57D4F6B3ED74E308C5F67F428BD5B91E887D975 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys
16:42:00.0795 0x1be4  CnxtHdAudService - ok
16:42:02.0295 0x1be4  [ A50300498D56B2448F3593D25478D508, 841D66D4AB9749EE64802611157A9AAED1117B6B2C411B3DA272CE439E69AE45 ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_9c1fb8f4db31c348\CompositeBus.sys
16:42:02.0342 0x1be4  CompositeBus - ok
16:42:02.0358 0x1be4  COMSysApp - ok
16:42:02.0405 0x1be4  [ 65602B0DB49199647FECB2D1212147BE, DC25D2DED7C31B4691B61FC69BB12E50CA5EDA9705339CCC82BE145EFD6D47C5 ] condrv          C:\Windows\system32\drivers\condrv.sys
16:42:02.0452 0x1be4  condrv - ok
16:42:02.0545 0x1be4  [ AB638EA8ECDBDC692C64F4FF4F940D1D, FE873A86E951C8886CF546E193814807DD356C20308655D4128B3DFCE16BF0BC ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
16:42:02.0608 0x1be4  CoreMessagingRegistrar - ok
16:42:02.0671 0x1be4  [ D64EF74FC6DA47EC2E460076F299E77D, 1F77E9F777FA6996222DE45B3AB2C01CD94C80A4A7F5CA092DDF1F18D74F93AA ] CryptSvc        C:\Windows\system32\cryptsvc.dll
16:42:02.0717 0x1be4  CryptSvc - ok
16:42:02.0780 0x1be4  [ 0AAC6E3138AB83C466281642D1A48F15, 31AEBAE422BFDC9EBE0B8CBAEE5ABAA27E8EA47387D4A24C91A3CE92EF7E0C92 ] CSC             C:\Windows\system32\drivers\csc.sys
16:42:02.0874 0x1be4  CSC - ok
16:42:02.0936 0x1be4  [ 9D4FA712339A09110809A4CC270AF4F0, 6403633EB0061CE3E4665E7A757EB697FD47DEE540EEDEC035CC13184FC62947 ] CscService      C:\Windows\System32\cscsvc.dll
16:42:03.0014 0x1be4  CscService - ok
16:42:03.0061 0x1be4  [ 5FCABDE89AC62A8818C803646FCEE23E, 070B110A0D4C93086472A3E582AA0B4E0EFAB05651EE30BD06E75D113D446BAA ] CxAudMsg        C:\Windows\system32\CxAudMsg64.exe
16:42:03.0108 0x1be4  CxAudMsg - ok
16:42:03.0139 0x1be4  [ 72BE43ABD786E86AAE7EA2193201E100, A013CF10AA4158082B5D0D7F885969C5C92710A6084E57E9DDBDA84420D97367 ] dam             C:\Windows\system32\drivers\dam.sys
16:42:03.0170 0x1be4  dam - ok
16:42:03.0202 0x1be4  [ A4700D1F78539C0ED32FA50E64F9C692, 5CB03B5F36307BA152245BAD29CB2AC703BBE8197ABC0338A7092ADEA1C3221A ] dc3d            C:\Windows\System32\drivers\dc3d.sys
16:42:03.0233 0x1be4  dc3d - ok
16:42:03.0311 0x1be4  [ 79BDBB684629A526CCD958F06B9D6FAD, 489A85A5F63E5F012740B538878D6DAEBBB474D64F27A6847D3E387A704E5297 ] DcomLaunch      C:\Windows\system32\rpcss.dll
16:42:03.0452 0x1be4  DcomLaunch - ok
16:42:03.0670 0x1be4  [ F7FB921F438C3566CEC55657EA4E7D9C, 17FA956E3B89F9B6C154975E7E1AAFB204F5EDEACC14A8424827DE13440A9299 ] defragsvc       C:\Windows\System32\defragsvc.dll
16:42:03.0827 0x1be4  defragsvc - ok
16:42:03.0889 0x1be4  [ B5F9123D6537856EA698386ABA27A232, C60DD499254B4A3741ECE71AF1685763BD6A6F828F879D54E175A6198C89ABF0 ] DeviceAssociationService C:\Windows\system32\das.dll
16:42:03.0952 0x1be4  DeviceAssociationService - ok
16:42:03.0983 0x1be4  [ 64A80A746FC460126FA4124AA2D93848, 851ECA69489FF9A834B6A5ACF9D51283FD3796E21316D8A22E57DED2F415782C ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll
16:42:04.0030 0x1be4  DeviceInstall - ok
16:42:04.0077 0x1be4  [ A19F51A044B62C994144ED87A7A5A887, 91ECE0E067E138817CD46A876B2D28CB47A2CCBE9C924EA91A1966FDF69AF7DF ] DevicesFlowUserSvc C:\Windows\System32\DevicesFlowBroker.dll
16:42:04.0155 0x1be4  DevicesFlowUserSvc - ok
16:42:04.0217 0x1be4  [ 0D2A4CA81D1F7B5E5FBFE1E4F60246B8, EF425C2FB1191720F9B53EB26EC904F53851D296B222E20B0733615575D4B7E5 ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
16:42:04.0249 0x1be4  DevQueryBroker - ok
16:42:04.0295 0x1be4  [ FAEC08F583CAD06D4F057DBB733A03A1, 3FB5FDB9B7B4B55916F102E6AA2FE387F2D552229FB1E6852E5DAC9A49B214A3 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
16:42:04.0342 0x1be4  Dfsc - ok
16:42:04.0389 0x1be4  [ FDB38FF469568190277A694D1BF599F5, 5512DB70C942FBFD78DBAE3DF379A2DDB9249B45BF5CE2CB305605C14CD1F25F ] Dhcp            C:\Windows\system32\dhcpcore.dll
16:42:04.0436 0x1be4  Dhcp - ok
16:42:04.0499 0x1be4  [ 291147C456844E438FE2DB43D86B0D7E, 8E2AFDEA856811EB3800DC2C977A1059B73176ED644966BEC25A42095A8F745A ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
16:42:04.0561 0x1be4  diagnosticshub.standardcollector.service - ok
16:42:04.0608 0x1be4  [ E2BF09B816393AF73EDCB8ECF9BBDB2D, DBDFFC2450E4EC684DD59383799ACF1D207B0882C301B8D562FB76307AFCC553 ] diagsvc         C:\Windows\system32\DiagSvc.dll
16:42:04.0655 0x1be4  diagsvc - ok
16:42:04.0811 0x1be4  [ 053832140D35F4AD8981CF36C892123C, 75CC7CCF271A015FB1F774A8ECA769E765C145070D0192AAAA455134A8EF6F0A ] DiagTrack       C:\Windows\system32\diagtrack.dll
16:42:05.0233 0x1be4  DiagTrack - ok
16:42:05.0295 0x1be4  [ 8C7FF86607E367E6319F7F637115D665, D49EAA69A880A566558ED58F60B378AB9E2F950DC951741908DD0914121D6099 ] Disk            C:\Windows\system32\drivers\disk.sys
16:42:05.0327 0x1be4  Disk - ok
16:42:05.0405 0x1be4  [ 5BC34122A1974DD18880C3EBE955BC20, B3950F17E76312E7BEDE7678507B432B99E568BA3651C0E59960D4F1B2627B77 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
16:42:05.0499 0x1be4  DmEnrollmentSvc - ok
16:42:05.0545 0x1be4  [ 64009621AAF4BC6626BC1A623A26FAD1, C94E63FB12AC58022C0C7F7721C7A38E9411DE94BFB12416091DC1A1F8C90414 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys
16:42:05.0577 0x1be4  dmvsc - ok
16:42:05.0624 0x1be4  [ 10E72E3315305461D3F0C7560AE98CA5, 702B5C056DB6B4E337231BBEA48E106FA95F26B48CDE91857305E4C6E4EE6A12 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
16:42:05.0655 0x1be4  dmwappushservice - ok
16:42:05.0702 0x1be4  [ B307EE2CEF643264DF3DAAF5DD2D08E2, 4A362C947852C076B53AD4655DD4EDE7D6106AABAFAD6ED1D874DA4F33EC0F8B ] Dnscache        C:\Windows\System32\dnsrslvr.dll
16:42:05.0811 0x1be4  Dnscache - ok
16:42:05.0858 0x1be4  [ E1C233826ECA1E52672052C49BD42485, 20B573BD6C5C760C21863F7E8B5AA544661C38E240C41ABA1C69B61C68A8FDD0 ] dot3svc         C:\Windows\System32\dot3svc.dll
16:42:05.0920 0x1be4  dot3svc - ok
16:42:05.0952 0x1be4  [ 6D8971C942FEE43A0AB6B3192534AFB4, 44D437DD32E1FDD7922B352CA6C19C83C1ADD825FB704B8E07BEF01E866E2B99 ] DPS             C:\Windows\system32\dps.dll
16:42:05.0983 0x1be4  DPS - ok
16:42:06.0014 0x1be4  [ F4800922F4ABA619585CE320A72E6389, CA83BCAA8B37F303E89598F8C93B201A3F000A09F4A9963E370D7E59BD79D448 ] drmkaud         C:\Windows\System32\drivers\drmkaud.sys
16:42:06.0030 0x1be4  drmkaud - ok
16:42:06.0077 0x1be4  [ BB73FD1329739982C2915AB827A01362, 70E69942AE14D5012D9A8B1C799B5B4B4FCC2E456D8940CB4C104D6AB7C4997B ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
16:42:06.0186 0x1be4  DsmSvc - ok
16:42:06.0233 0x1be4  [ 280297274D162AD79ED767D8CB22DE9C, E344797EDD9EC2ED3D1D07FF1B94DFB8BA318DDE8CD6CECA937A27B4B2E22A0E ] DsSvc           C:\Windows\System32\DsSvc.dll
16:42:06.0327 0x1be4  DsSvc - ok
16:42:06.0389 0x1be4  [ A05724426389EBC1351E3D6F95CF3EAC, E638F97043274515F9A8A46B55C9478E886683580F33A0E90A3BDFBA6A4F6C26 ] DusmSvc         C:\Windows\System32\dusmsvc.dll
16:42:06.0483 0x1be4  DusmSvc - ok
16:42:06.0655 0x1be4  [ B6B0F214C2D04B73449433E99D080422, D328B679CB21AABE733F87CD51EF3EA3C76178D3E1E2996BEF73AF4FE39DF80C ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
16:42:06.0827 0x1be4  DXGKrnl - ok
16:42:08.0124 0x1be4  [ FA94398748930D840FE35A44F1D225A7, E2D48460413904AAFB50E18A24471157D2A235F5CCDF89EE49BB139D1CA3B9F6 ] Eaphost         C:\Windows\System32\eapsvc.dll
16:42:08.0186 0x1be4  Eaphost - ok
16:42:08.0295 0x1be4  [ C770155822E190FF8E231C4C8D28C92F, 0114CFF4501F2741AFC988C86308AE8AD34485316EADC073DDE53B1A91F32B5F ] EasyAntiCheat   C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
16:42:08.0358 0x1be4  EasyAntiCheat - detected UnsignedFile.Multi.Generic ( 1 )
16:42:08.0514 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:42:08.0514 0x1be4  EasyAntiCheat ( UDS:DangerousObject.Multi.Generic ) - infected
16:42:08.0514 0x1be4  Force sending object to P2P due to detect: EasyAntiCheat
16:42:10.0311 0x1be4  Object send P2P result: true
16:42:11.0467 0x1be4  [ 78AC59B45CFBFCC68DA7D397D6819D03, C423C3A49D8F9BF931C694309AA982A2A554E7F2CEEC44F9AA1C13F98F9D6FBF ] EasyAntiCheatSys C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.sys
16:42:11.0545 0x1be4  EasyAntiCheatSys - ok
16:42:13.0255 0x1be4  [ C99D40C97841E0A7F0F90B8629593A97, 2DE7FB6E3CD7B06079C2B05D8C10AD0EDF187684ED1DE5BEE98FAB9A4B331824 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
16:42:14.0831 0x1be4  ebdrv - ok
16:42:14.0925 0x1be4  [ 94E06D509D50807774F35BEE3163E806, ADADFA0D533944579BA0E5FE31A68D4D1395E7B9DB75E58D47E0ADC0DA5AD16C ] EFS             C:\Windows\System32\lsass.exe
16:42:14.0988 0x1be4  EFS - ok
16:42:15.0019 0x1be4  [ 260BBD6B1ED06298E509B452354EDB91, CF794D5AC62C6DBF356BC717910FD2B106A8BD90C3C03BA43859FD876F8820BC ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys
16:42:15.0066 0x1be4  EhStorClass - ok
16:42:15.0113 0x1be4  [ F3BEBDC1B9DBA32F183079EAE6244837, 5DE0DA8D2A13BFA852355619C6DE5AC2FDFAB314A619A4F209842581E4D82DE1 ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
16:42:15.0159 0x1be4  EhStorTcgDrv - ok
16:42:15.0206 0x1be4  [ A75880A9192B9DA69F46867B06276746, 53856262A5BD4BE93CB45D1F43B87F45CB01C02B7D94231CF05346B9BDF1F18D ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
16:42:15.0316 0x1be4  embeddedmode - ok
16:42:15.0378 0x1be4  [ 3BC17ABD52295C64A8BEE3CF4B244B12, 9153DF82C10B314983DB78AB88B468C39E213AE3C504AD865C54213F76F120D6 ] EntAppSvc       C:\Windows\system32\EnterpriseAppMgmtSvc.dll
16:42:15.0456 0x1be4  EntAppSvc - ok
16:42:15.0472 0x1be4  [ 1B63CA857FD03FD0A5A1379F2996784F, 9EE5205DCFADAFC62D36528087FA4E023F7E48FF0D2A8333D8A6111AE09D21B8 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
16:42:15.0519 0x1be4  ErrDev - ok
16:42:15.0597 0x1be4  [ 6A5FA501A2D96001391FF3CBA32935AB, 018DB01ADE957A1A1FF5B168A2EC0EFEF8BFBE036079791FDF0C6AA6C12295BA ] EventSystem     C:\Windows\system32\es.dll
16:42:15.0675 0x1be4  EventSystem - ok
16:42:15.0722 0x1be4  [ F1ACA42D448E3986565EA54275EEEA65, C85101D6E7A2204FD73AAACD972F610B6A4BCF7EB7512412FD34660DCB5E8C5C ] exfat           C:\Windows\system32\drivers\exfat.sys
16:42:15.0769 0x1be4  exfat - ok
16:42:15.0800 0x1be4  [ 0AF4B36754A6EAE794EE4398E219A9E1, A818763D7AE6E7F4BC57294BB4D80FE9E04387BB3EBE8A6088D2AF746FF548A6 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
16:42:15.0831 0x1be4  fastfat - ok
16:42:15.0894 0x1be4  [ B1A38C0D977D8738779CA3EFEBDFCA8C, EDD852EF89AFBDDBBBE002E6675EAFCC46742B6136EB22428C84D737C6229FEA ] Fax             C:\Windows\system32\fxssvc.exe
16:42:15.0972 0x1be4  Fax - ok
16:42:16.0003 0x1be4  [ 7CD8426A33F06EB72BFEC51F7C264AF8, 4FDD5F6A8BDF25D965CE52132DD0EA77D335C1C5F77A7758F3F6E22DFC12BDF5 ] fdc             C:\Windows\System32\drivers\fdc.sys
16:42:16.0019 0x1be4  fdc - ok
16:42:16.0050 0x1be4  [ 21EB16C5DDFBC19DEBE9EEC10EA423FB, 514327DA987793AFE1DFB4F2C0F033C349432E6F1F6AACBAE23E24E63EFA51B9 ] fdPHost         C:\Windows\system32\fdPHost.dll
16:42:16.0081 0x1be4  fdPHost - ok
16:42:16.0097 0x1be4  [ 57F98EFE6CB82AE5400BA99C705AF45C, 7AB83C7AF4CA49BFC2976FB707B251C181279B7E16EBDD43AD0E1A4AB8C4DFC9 ] FDResPub        C:\Windows\system32\fdrespub.dll
16:42:16.0128 0x1be4  FDResPub - ok
16:42:16.0144 0x1be4  [ 02F93E4B9EC2821B6670208044FF5332, 2D947C8AE51E749029B3180751E4486E27A19471A7A98087076103D307B5CE64 ] fhsvc           C:\Windows\system32\fhsvc.dll
16:42:16.0191 0x1be4  fhsvc - ok
16:42:16.0222 0x1be4  [ DE51BBBCF358188F9736F031546F9908, E2B80DF63C039663085FA9D63F3F30736EC20C49BC678CBD7D7C7231107C3635 ] FileCrypt       C:\Windows\system32\drivers\filecrypt.sys
16:42:16.0253 0x1be4  FileCrypt - ok
16:42:16.0284 0x1be4  [ 822F664952B0F8D11BB6BD2F11779602, B7E9908A305942194E64E834819186CBBF9DD4469B300DCC8D31E1E5674D6600 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
16:42:16.0300 0x1be4  FileInfo - ok
16:42:16.0316 0x1be4  [ 5A4935682A0D47A4EAC4BE3C2ACF74D6, 0DCF2E7928D11F49EBF906233894E81CFFE938ADFCA802CE0207CA58B4A02AAD ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
16:42:16.0347 0x1be4  Filetrace - ok
16:42:16.0378 0x1be4  [ 60641F22D1D38EAD197C25F0339C9712, 110ACEADAE92C384C80356C9DE88E3A94141881E8544DB65736875FFA2716F68 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
16:42:16.0394 0x1be4  flpydisk - ok
16:42:16.0456 0x1be4  [ ECD2030E78AF8D696A2E59796CA0B798, 370D7829E9077109525E375A3860D96372936C60A1FD7D02D1C7AD381F6E0275 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
16:42:16.0488 0x1be4  FltMgr - ok
16:42:16.0644 0x1be4  [ D9E18DDDC08B77E634F2AFEF0CC551FF, 701BFDFAD6E86C48E02612E54F3F8819632FC13526893AD2BBAA51348F5E24FF ] FontCache       C:\Windows\system32\FntCache.dll
16:42:16.0863 0x1be4  FontCache - ok
16:42:16.0956 0x1be4  [ A7C6894FFF261C0FEFDCB41BE83CF430, C3DB55140E4848873BC0004030933402CD396112C14F432258D875DB1608700E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:42:17.0003 0x1be4  FontCache3.0.0.0 - ok
16:42:17.0050 0x1be4  [ 95F8BF9B335A0BE8920BE160F95B2503, 596B02CFF111C2610E73FA2EBDBB7E6C5C190A9DD9E2FE4CAC6ED475691B7A43 ] FrameServer     C:\Windows\system32\FrameServer.dll
16:42:17.0144 0x1be4  FrameServer - ok
16:42:17.0175 0x1be4  [ 0425D9D2A679060CC9755449779FBA54, F0BFEE92081BDF82AAD58AD1B21659F465DCE6F9F9F16ABBE9A84C17978AA3A0 ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
16:42:17.0191 0x1be4  FsDepends - ok
16:42:17.0222 0x1be4  [ B962036CAADC05E466FEB165E0974587, EAA88EBBAAFF31A5E35B3B23B12E94EE3C659399CDDAADBF4B6146AE091CA5AA ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
16:42:17.0253 0x1be4  Fs_Rec - ok
16:42:17.0316 0x1be4  [ 2C8891C306C8F43A273BDB7C490E1C92, DD8D905956652D276796F5638980E3219EF2D8C2B65A8DE537D549BF5C306BE4 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
16:42:17.0378 0x1be4  fvevol - ok
16:42:17.0410 0x1be4  [ DFAB4D8FE39C64EAD3A4DCBA25AAFEE0, BABCAE227CD2E87E37C708539C2232251B37F35EFFE2B927914D72517F161E44 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
16:42:17.0441 0x1be4  gencounter - ok
16:42:17.0488 0x1be4  [ 8B34E3F794F652082D7E8AF112F71681, C6CFA239BDF46827BFC89DC9A9BF45B0EBCE3EF1BB7DCA33980A632E549B37F5 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
16:42:17.0519 0x1be4  genericusbfn - ok
16:42:17.0534 0x1be4  [ 127C23F4720C8902A3AB0FEE12205317, E3BF55D81B04572D11B41CDA2DB4509FD252561EB29ED22CC6F616E856E3D86E ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys
16:42:17.0566 0x1be4  GPIOClx0101 - ok
16:42:17.0644 0x1be4  [ 846347C05DBC7C49143D9723EC3714E9, DCC888F1262CA50DA3109D132A9C04F83A961720647E9882D3EFCBF8E3D703B5 ] gpsvc           C:\Windows\System32\gpsvc.dll
16:42:17.0769 0x1be4  gpsvc - ok
16:42:17.0816 0x1be4  [ 582578F031109BE65C15E1D8A45BA547, 4BB1E20A2BDF8F504FF787EF338B6180DD537F53A0DC843B96AEFD8BBE970653 ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
16:42:17.0863 0x1be4  GpuEnergyDrv - ok
16:42:17.0894 0x1be4  [ 141904F0581468B39B579EA33CA57549, 1D947A6079CED7840B0FF4720C36D873F5A69EA6C94E4C15ADF1A7C0CD0CD0EA ] GraphicsPerfSvc C:\Windows\System32\GraphicsPerfSvc.dll
16:42:17.0956 0x1be4  GraphicsPerfSvc - ok
16:42:18.0019 0x1be4  [ AB4781D43818DA6BC41C2C9F273EEA46, FA64715F6168A275E93909869D090D5DEB538B2B83B97D055FF9D10251F9367D ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:42:18.0066 0x1be4  gupdate - detected UnsignedFile.Multi.Generic ( 1 )
16:42:18.0238 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:42:18.0238 0x1be4  gupdate ( UDS:DangerousObject.Multi.Generic ) - infected
16:42:18.0238 0x1be4  Force sending object to P2P due to detect: gupdate
16:42:20.0034 0x1be4  Object send P2P result: true
16:42:21.0066 0x1be4  [ AB4781D43818DA6BC41C2C9F273EEA46, FA64715F6168A275E93909869D090D5DEB538B2B83B97D055FF9D10251F9367D ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:42:21.0097 0x1be4  gupdatem - detected UnsignedFile.Multi.Generic ( 1 )
16:42:21.0097 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:42:21.0113 0x1be4  gupdatem ( UDS:DangerousObject.Multi.Generic ) - infected
16:42:21.0113 0x1be4  Force sending object to P2P due to detect: gupdatem
16:42:22.0597 0x1be4  Object send P2P result: true
16:42:24.0206 0x1be4  [ 0D4E1DE424440F1FC83E27EB30870B2E, 0BF0C2F14FDE5013C8169CE1AC623A920A2BAAA8C7CB92DAFECEB537D28D1574 ] HdAudAddService C:\Windows\System32\drivers\HdAudio.sys
16:42:24.0316 0x1be4  HdAudAddService - ok
16:42:24.0347 0x1be4  [ 99A34FD1F6431A10D8C3BB50E170D0F2, 14BFF99BBF9ED53D3A157B096CDE0394824260021BA96E1F2C7B1CFB598DD850 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
16:42:24.0394 0x1be4  HDAudBus - ok
16:42:24.0409 0x1be4  [ 2443FC6EEB9CF092B62127D867901B02, ABD5E907FF066B95C5697C4E470B4EA19976DEC90C8159B963A82EDA218AB114 ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys
16:42:24.0425 0x1be4  HidBatt - ok
16:42:24.0472 0x1be4  [ 205043CDC16ADE85E252DD54AE925161, F377F046EFEE53C7786AF15C0BB5BADE36511427575A712B0098A883F3715DB3 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
16:42:24.0503 0x1be4  HidBth - ok
16:42:24.0519 0x1be4  [ B521DDDC9038C066B1B957BF063A531A, C5FE68FB22C28C4D06A0792FD5AC9A1F0EC01EF26E1D37B9DF05F22D8B7DFF8C ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
16:42:24.0550 0x1be4  hidi2c - ok
16:42:24.0581 0x1be4  [ 5AC0EBFA76E93273A806176D3178E986, 679BFEFF9F4172EBB14A6C2E8381F54FBDC9E8705E8B0F306723DDF48B6E5143 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
16:42:24.0597 0x1be4  hidinterrupt - ok
16:42:24.0613 0x1be4  [ 366AC0E05EBF5D5C375F65CD8BC7F0DF, A6B751864E33EBB5DE2E09403A8C26E72DD5510F3A380FA502393FC11A14A433 ] HidIr           C:\Windows\System32\drivers\hidir.sys
16:42:24.0644 0x1be4  HidIr - ok
16:42:24.0675 0x1be4  [ 75F4CCB7FF03603E91DD0C7FF83DAABF, 10508A6C36163C9D40C16A47AB4CA8C03C89BB7795690818E5C562E3FF828D5B ] hidserv         C:\Windows\system32\hidserv.dll
16:42:24.0722 0x1be4  hidserv - ok
16:42:24.0753 0x1be4  [ 7CB54D02746024648FCE184FC3F941FF, 6C7B8E6AD3C05D66868D0268C9C8183021AB241E576184FAD0BD50ED4E18E9ED ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
16:42:24.0784 0x1be4  HidUsb - ok
16:42:24.0831 0x1be4  [ 459EC4290CF0D8269DB28FBFD6284C58, F1C34F11E18F6D48C8378F77DE167AD208E9E7C3022DCA714FF0403AEFF80857 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
16:42:24.0878 0x1be4  HomeGroupListener - ok
16:42:24.0941 0x1be4  [ 24C900B7296AA9867FB761A5801AFBD1, 4A765E905D0F7C4B450A28FB85F413F4EAD2B53240E804FA531626ABB0518381 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
16:42:24.0988 0x1be4  HomeGroupProvider - ok
16:42:25.0035 0x1be4  [ 835FB95D85D362057A72D21A48C2C7F8, 06A57F9E459E52DAA7B27F232DBC1E0ED0E04759D34AF3E15A645D11DFDD6A58 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
16:42:25.0050 0x1be4  HpSAMD - ok
16:42:26.0597 0x1be4  [ CA46DB64D8FE96C8F935E6F798741398, 83622DF6F51FE3D1B0F90964110A9F8BD6DBC64552E65995364A6DB76E993E8A ] HTTP            C:\Windows\system32\drivers\HTTP.sys
16:42:26.0675 0x1be4  HTTP - ok
16:42:26.0722 0x1be4  [ 8B8395999252DE3BA4EBC1A5F28827F3, 95B9B330C43438C6203FD08A441C3CC269CFBA812FC804805786F0243BA1949C ] HvHost          C:\Windows\System32\hvhostsvc.dll
16:42:26.0738 0x1be4  HvHost - ok
16:42:26.0769 0x1be4  [ 9F2CFC90306532866C62BDCDFD2532AA, F27B1087B1E3E06FB49092BBF2DD8CF5B6ADD4CE061FE10C3ED44C58B92BE007 ] hvservice       C:\Windows\system32\drivers\hvservice.sys
16:42:26.0800 0x1be4  hvservice - ok
16:42:26.0831 0x1be4  [ 3737FE486929AFC48F1D10677B698E52, 9E8792F3A494AE3E7CDA65E93B561B6FFFB9C781606F5863D524DDD24CFEB9C3 ] HwNClx0101      C:\Windows\system32\Drivers\mshwnclx.sys
16:42:26.0894 0x1be4  HwNClx0101 - ok
16:42:26.0941 0x1be4  [ 3C65EBF7F1BFD98426C355D66876ECEE, CA1DC462C4D96176C81EF3448238B76B4CDA3C521533973B281359D7F436B8A5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
16:42:26.0956 0x1be4  hwpolicy - ok
16:42:27.0003 0x1be4  [ E3BDE6C567ED5CD7B15B2E522C120D02, 954EC837636D0F08A3596E4270F37E03C99F8D1A7E80D0D323E0CB793324D776 ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
16:42:27.0081 0x1be4  hyperkbd - ok
16:42:27.0113 0x1be4  [ 1D7BBC4C6F33A4A6189AEA1509615DF9, 66D6E64353CE80949082E594061BCA077849840B175F18F0743285B389F57250 ] HyperVideo      C:\Windows\System32\drivers\HyperVideo.sys
16:42:27.0159 0x1be4  HyperVideo - ok
16:42:27.0191 0x1be4  [ 56FF074E50F9042FD2856AB3418F4B18, 239C9BF23DE2E36FD7112C425CDF18F29B751D75EF3551AEFB048FAD2B0A55E2 ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
16:42:27.0238 0x1be4  i8042prt - ok
16:42:27.0269 0x1be4  [ B5EC43755E62591197DE5CBBDAA9FEB7, 1B4E0EAB677B09A050925879ECDA311404270DCF020AAD390692427198C73C9F ] iagpio          C:\Windows\System32\drivers\iagpio.sys
16:42:27.0300 0x1be4  iagpio - ok
16:42:27.0316 0x1be4  [ D8CA23F9C5FEF44296FDE1E005C06EC0, 0D7B03EF9E19B9B2A28C3318560488B3F9573CF364A533A9B4A2CD0A7FFA4F84 ] iai2c           C:\Windows\System32\drivers\iai2c.sys
16:42:27.0363 0x1be4  iai2c - ok
16:42:27.0378 0x1be4  [ 7B769C9D19C013F94874C4B15D59A005, 53A15F0480AEC43B5A01CFB17360188885B6ECBFFF6E566D27E5B6D4C7737243 ] iaLPSS2i_GPIO2  C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys
16:42:27.0409 0x1be4  iaLPSS2i_GPIO2 - ok
16:42:27.0425 0x1be4  [ E0F1B3A2A70FABE3BE1C9140BB55E607, 34E5B055619F3A26B7BB6054EA49D40B7D6DAFE234F57F358FE7C8EE83E10618 ] iaLPSS2i_GPIO2_BXT_P C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys
16:42:27.0456 0x1be4  iaLPSS2i_GPIO2_BXT_P - ok
16:42:27.0488 0x1be4  [ 89A869BCC0588A3009ECB875B09ECD39, 5ECC2C6E661B326511682D8EA1C82F942C63835890687285FEF455C5C9DC2476 ] iaLPSS2i_I2C    C:\Windows\System32\drivers\iaLPSS2i_I2C.sys
16:42:27.0519 0x1be4  iaLPSS2i_I2C - ok
16:42:27.0550 0x1be4  [ 2E693DF3C02A0859DB8DE25772751100, 3EFFDA44B247E04258429ADC85E88E23F926FD487A3A85BF879E6E5802197B3F ] iaLPSS2i_I2C_BXT_P C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys
16:42:27.0581 0x1be4  iaLPSS2i_I2C_BXT_P - ok
16:42:27.0597 0x1be4  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
16:42:27.0613 0x1be4  iaLPSSi_GPIO - ok
16:42:27.0628 0x1be4  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C     C:\Windows\System32\drivers\iaLPSSi_I2C.sys
16:42:27.0644 0x1be4  iaLPSSi_I2C - ok
16:42:27.0691 0x1be4  [ 435883A27A376B125BD4DF888417C85F, 091F9285FCF1D5605D03CB68C062A2DE6FF2D705FF43E983A8A7B5DFA0872A96 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
16:42:27.0753 0x1be4  iaStorAV - ok
16:42:27.0784 0x1be4  [ 7118E4390C4ACDE61E280CE52BCAF44E, 11123C1555344A191283187BF1F4A8D731E29EE27C7A7A7916873E8D2E95D978 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
16:42:27.0831 0x1be4  iaStorV - ok
16:42:27.0863 0x1be4  [ 9DBE8C359ABACE1BE1BBAB687D114506, D2E5CB2BFC42627C1BB38A68F925DD534AEFFF9354AFD184005EC338E8E6B232 ] ibbus           C:\Windows\System32\drivers\ibbus.sys
16:42:27.0909 0x1be4  ibbus - ok
16:42:27.0941 0x1be4  [ 0CF99D60588AF7F198C135BABCA287F2, C72235865426659957909E8465B7D208EB5CAA21B529F07BB055D33028326D9C ] icssvc          C:\Windows\System32\tetheringservice.dll
16:42:27.0988 0x1be4  icssvc - ok
16:42:28.0019 0x1be4  [ 6248F7270A37B8890C7A058AAD4D6620, 8C1A4BD7485DECA364D960DEE573D283E8ED4EA2AFEFDEEAD340F182D471B761 ] IDMWFP          C:\Windows\system32\DRIVERS\idmwfp.sys
16:42:28.0050 0x1be4  IDMWFP - ok
16:42:28.0113 0x1be4  [ 4D8123F7262C87B3CAE5A62AF74F7939, 8F003562F50218307ECC48A7BF43BE1DA88352D2749902A029081804B71C85DB ] IKEEXT          C:\Windows\System32\ikeext.dll
16:42:28.0253 0x1be4  IKEEXT - ok
16:42:28.0300 0x1be4  [ 42CAF6216A6E516DC56BA319ACC7EEC5, DF60FF41F06D1101E4A81F7416DB5A34D7BA885CBA874BC15AD43FB4080F2958 ] IndirectKmd     C:\Windows\System32\drivers\IndirectKmd.sys
16:42:28.0331 0x1be4  IndirectKmd - ok
16:42:28.0425 0x1be4  [ 02D6C68057FDED7E08FD3CAEE564B6C8, 8DF7C7D6C5970DE16ABE32FAFEDEB467A243283C227FAFF25D7258875A2F459C ] InstallService  C:\Windows\system32\InstallService.dll
16:42:28.0566 0x1be4  InstallService - ok
16:42:28.0613 0x1be4  [ 40943C1CD031ACE06A8374AD56B9E5EA, 05E5AD4330F272C421A8726E9E6555115D8717DC5AFDE3CC1DB53A3D7518BF62 ] intelide        C:\Windows\system32\drivers\intelide.sys
16:42:28.0628 0x1be4  intelide - ok
16:42:28.0659 0x1be4  [ 327D9CCF5492543AEF3979F9EEAD02BE, 1C6CD9ECB785D022A38DF683FACCA737469BF72E42365CD6DB8C2675F2ED1F1C ] intelpep        C:\Windows\system32\drivers\intelpep.sys
16:42:28.0691 0x1be4  intelpep - ok
16:42:28.0722 0x1be4  [ 7344528DFD4484CF86F36E24E7CB59B1, 821947C152E7A2B4782199E033EAEE8D3F43A5EC4CC369334A6C0793C62DA069 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
16:42:28.0753 0x1be4  intelppm - ok
16:42:28.0784 0x1be4  [ 8387E90B551B9B7F32EDC69909591E9E, 7086B6F2B728D7C46F0A1E7E4F81B3D33C25BD5F8A2A4ECEBA55F8C68F164500 ] invdimm         C:\Windows\System32\drivers\invdimm.sys
16:42:28.0816 0x1be4  invdimm - ok
16:42:28.0847 0x1be4  [ E207078E0E1BB3524277DB9077E4148E, 309320950095AF83DCBE08BFDD4BFE4EBADBF48CA255871A6B37BAAA7B4A5B38 ] iorate          C:\Windows\system32\drivers\iorate.sys
16:42:28.0863 0x1be4  iorate - ok
16:42:28.0909 0x1be4  [ FD8F64B7B345E539F2EA7F72846F83B4, 95F232BC2454D68F1A154C9BD8FCCF60D36F5424B798661D6F1DD8E052ED0D04 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:42:28.0941 0x1be4  IpFilterDriver - ok
16:42:28.0988 0x1be4  [ 1C5867DC4091C2E23329AB984BF95604, 56FA9888A7A969539833644AD50730BBA5E770AC6097AFB490E34196596C55E0 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
16:42:29.0097 0x1be4  iphlpsvc - ok
16:42:29.0128 0x1be4  [ 8AAB863E72A4F9C578FED2EE3541545B, B3278B790DF9F77F8FDDBECAD22E0D2E080D74B8E61EFF112055478B3B0B2329 ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys
16:42:29.0159 0x1be4  IPMIDRV - ok
16:42:29.0175 0x1be4  [ 7BEC2AF23F586EFF0DB4DBF4331B0C70, D02506CAB19AD1D3ABBB35FCC569ED613EB9D6828E9BC0389EC8A8DFC548334B ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
16:42:29.0222 0x1be4  IPNAT - ok
16:42:29.0238 0x1be4  [ 35A54F19E703D4FE5919F812F6CC5D0A, B0AC1C97D115F57390BD2B4F9114429CF1729EB8D658B3EAEC8ECF28A24369F7 ] IPT             C:\Windows\System32\drivers\ipt.sys
16:42:29.0284 0x1be4  IPT - ok
16:42:29.0331 0x1be4  [ F6C47021C41F721B628161B64D7DECB9, 625227F18518098C00AF2C6F4EE5D96711D26080459AD2C9F7CF2A5778DEF191 ] IpxlatCfgSvc    C:\Windows\System32\IpxlatCfg.dll
16:42:29.0363 0x1be4  IpxlatCfgSvc - ok
16:42:29.0394 0x1be4  [ BF933330256DEDAFA939BEBC46D060C7, F9B47A83945DF2A043384626A2EB47AE9F915048636334D9768A0B4901C84E08 ] irda            C:\Windows\system32\drivers\irda.sys
16:42:29.0425 0x1be4  irda - ok
16:42:29.0456 0x1be4  [ F88664A2A82DDA456180FFF95A771765, 004BBC715FE6EC0D4D2CAE978EA64C6CEA130EE10C356B7FACF0C98B51E8AECB ] IRENUM          C:\Windows\system32\drivers\irenum.sys
16:42:29.0503 0x1be4  IRENUM - ok
16:42:29.0519 0x1be4  [ 4F500A0171606B0E37964694140FCA16, 6E29A7348395EE3EB85E2BA97E581FBF605CE1BA4651F5848976AD293CC797E3 ] irmon           C:\Windows\System32\irmon.dll
16:42:29.0550 0x1be4  irmon - ok
16:42:29.0581 0x1be4  [ A3B7A93F32E110949CA01DDE7C6B991B, 5F38B882DBAB4BDFCAB289721D6D5A0D85675BA580AC96FB74ED826A4800C998 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
16:42:29.0613 0x1be4  isapnp - ok
16:42:29.0644 0x1be4  [ 13BAA9B1970343AE7B7028B611E52133, 3B8A5993CCF3CBF38AAE6F8813283DFA3DF2DC4B2DDA7C3421263D0D891946DC ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
16:42:29.0675 0x1be4  iScsiPrt - ok
16:42:29.0722 0x1be4  [ E320F986BBE0CD9324EA0A193EBF29B1, 9B4C7F1493377CE532361F88A0C88798F24E7EFB093DA2F0A6CB1575B9E3535C ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
16:42:29.0738 0x1be4  kbdclass - ok
16:42:29.0753 0x1be4  [ AFF5DDCC1A79217C9526FF5E01A69E89, 2BCD49DD8DD977B97521465B981332CA8FA8D16AB45B45993C87647FA3E9DAF0 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
16:42:29.0784 0x1be4  kbdhid - ok
16:42:29.0800 0x1be4  [ 916E62AF3386F7A74603E5C545F6FF2D, C5CA784F60B8CA3DE0672A816DCE14F1AD6B6783A5E6B556ED7C91337F65144F ] kdnic           C:\Windows\System32\drivers\kdnic.sys
16:42:29.0847 0x1be4  kdnic - ok
16:42:29.0863 0x1be4  [ 94E06D509D50807774F35BEE3163E806, ADADFA0D533944579BA0E5FE31A68D4D1395E7B9DB75E58D47E0ADC0DA5AD16C ] KeyIso          C:\Windows\system32\lsass.exe
16:42:29.0894 0x1be4  KeyIso - ok
16:42:29.0941 0x1be4  [ BE46CEF0F176D215B3FDF1C664B3D6A7, 4989CE6CC5803A1E26AC197CDA234B91BC3A33E5C456E2FCE6E7744000BF0987 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
16:42:29.0956 0x1be4  KSecDD - ok
16:42:30.0003 0x1be4  [ 5F0A90AC0AA8C772B20AD71B87422838, 176F7C6E322098DF5033CFF0BAA267BA9D7AF7E635F3D28BC0E5F11DFECD8015 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
16:42:30.0034 0x1be4  KSecPkg - ok
16:42:30.0066 0x1be4  [ DD8C4726127CFE313233372D70787C37, 2420616FEEFC08A3F47420193A3A592D4AC5D2C817D27E5B7E4FD64153751AFB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
16:42:30.0097 0x1be4  ksthunk - ok
16:42:30.0128 0x1be4  [ 6EAF246BC12DB548AC65A4CEFB14B547, F1487051FE459DB5A751DA2A6FF1E552F92226933AF8C037FA7D660B049896A3 ] KtmRm           C:\Windows\system32\msdtckrm.dll
16:42:30.0191 0x1be4  KtmRm - ok
16:42:30.0206 0x1be4  [ 4E444F41E69BBE2E0BAE34D5DFCB5732, ACAEFB839CF7A3113D026B9A715994C3DFF8797D73B991253959EF606C4FBC00 ] L1C             C:\Windows\System32\drivers\L1C63x64.sys
16:42:30.0238 0x1be4  L1C - ok
16:42:30.0284 0x1be4  [ 2EC02DFC530560D0C01C7428E4CC9D27, 74EABA6EEEE771F19D75D9B64972B94C5308EEA5D51C0C2DB360570F1CB36F69 ] LanmanServer    C:\Windows\system32\srvsvc.dll
16:42:30.0347 0x1be4  LanmanServer - ok
16:42:30.0378 0x1be4  [ F8097F90811E9BB10F5B96262399F3C7, 1BDFB850ACE73E8882BBC3B18A5A7BCEE68696917D8462A159CE2763133DC516 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
16:42:30.0441 0x1be4  LanmanWorkstation - ok
16:42:30.0488 0x1be4  [ D81931EF9914A135F9ECF409DC826266, 8BA15C12B374DE555CB7D3CDFDDC42FE583625A9C29BCCDDEB432223E4DEEB2D ] lfsvc           C:\Windows\System32\lfsvc.dll
16:42:30.0519 0x1be4  lfsvc - ok
16:42:30.0550 0x1be4  [ 6A361ED0DE59D58CC633F7BB40AB950D, AF5315AFAAE41AAB55BB7243FD9EA2949C7F114C0ED24073751733B5A11142BA ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
16:42:32.0019 0x1be4  LicenseManager - ok
16:42:32.0097 0x1be4  [ 56B6326B15A14043C82ED9EA3B817E2C, F3F99397B12529FAF4B77E11A3279B882F9BF986D0DDB3F1847B8EE96C6E40FF ] lltdio          C:\Windows\system32\drivers\lltdio.sys
16:42:33.0613 0x1be4  lltdio - ok
16:42:33.0722 0x1be4  [ 48199253D7F6119F88294F8845F0808D, 85C014250C14425BEFF2D8B2CCF6A29D9A5DA329ECD00F1E6D4F8DB809194FAC ] lltdsvc         C:\Windows\System32\lltdsvc.dll
16:42:33.0784 0x1be4  lltdsvc - ok
16:42:35.0206 0x1be4  [ DCF6F1AA7A51CC08FED089363F83316E, C80FB26A6172510F3AD5E4D636AA49AD5D931FB47BECD9E8507F781D88917710 ] lmhosts         C:\Windows\System32\lmhsvc.dll
16:42:35.0269 0x1be4  lmhosts - ok
16:42:35.0347 0x1be4  [ 20048BEE892138A745B1C23EBB0E069F, B526035CE839BADA6ABC0A0CBFFDFA5267F4EB668AE201871E61E0011518843E ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
16:42:35.0378 0x1be4  LSI_SAS - ok
16:42:35.0394 0x1be4  [ 9EAB16572B576979D585DDEDB12417CD, 97C37DFEA309E27E4AC50D1F4C7C3D1FB9661E0DEBB442D620D8E460F9FC9966 ] LSI_SAS2i       C:\Windows\system32\drivers\lsi_sas2i.sys
16:42:35.0425 0x1be4  LSI_SAS2i - ok
16:42:35.0441 0x1be4  [ 3B7B359C0870317106DF3438D4FF491D, 5EDF767D79EF49210DD3BCC00D7629600DD522B29A2B9A9D7805076ECDCBFD1D ] LSI_SAS3i       C:\Windows\system32\drivers\lsi_sas3i.sys
16:42:35.0456 0x1be4  LSI_SAS3i - ok
16:42:35.0472 0x1be4  [ 2DE03BA338A4B0ACDB416A30F1C7D56F, CF2218EA8C67CC13893B286B0904F28FBFE5AA818CC3AD1C77120B7B6E80031F ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys
16:42:35.0503 0x1be4  LSI_SSS - ok
16:42:35.0550 0x1be4  [ A4ADC59A58724CDA67A7AB93457EEE43, C5CEFD57A31A7C377ACF3F5A071646DA358079F9BEB602B96C14392FC2D57539 ] LSM             C:\Windows\System32\lsm.dll
16:42:35.0659 0x1be4  LSM - ok
16:42:35.0691 0x1be4  [ 9A497169E145FCE2D8AA7DBC67377F64, 3FA4CE7455ACBB32DECA8BC7EAD0EC1A0E123CBCBF8781FBB16453455AB9F0FE ] luafv           C:\Windows\system32\drivers\luafv.sys
16:42:35.0738 0x1be4  luafv - ok
16:42:35.0784 0x1be4  [ 3520DE00ABC5EFF0DBAFD41129AD970F, 821F9D9AAA6D8B08BEBFB76DAE5A8CCFB598789510A93D3DD4F149A39EE5D6B5 ] MapsBroker      C:\Windows\System32\moshost.dll
16:42:35.0863 0x1be4  MapsBroker - ok
16:42:37.0300 0x1be4  [ BF56CB9D02DEE8CA9CBA50220BE16F15, C6380ED59AD7B9CC9451A24808E193454CF15D90A2C1DAF22FBD3380B150F96F ] mausbhost       C:\Windows\System32\drivers\mausbhost.sys
16:42:37.0363 0x1be4  mausbhost - ok
16:42:37.0394 0x1be4  [ 01BDEE1FFF6D2216797DFEE4ABD937D9, ED247E6F87ECA39A7D479CA7E386D85CE8B2978164E4E9876196176F393E1235 ] mausbip         C:\Windows\System32\drivers\mausbip.sys
16:42:37.0409 0x1be4  mausbip - ok
16:42:37.0441 0x1be4  MBAMService - ok
16:42:37.0441 0x1be4  [ C7B8B5053D646CBD30BE1BA6B487D396, E3864D4CE619D67E284C64A4EAA8843FB49BC2B8CC8659F4C4B89DB6701468CB ] megasas         C:\Windows\system32\drivers\megasas.sys
16:42:37.0472 0x1be4  megasas - ok
16:42:37.0503 0x1be4  [ EB8ED3204499DDB2D3BA094A4563EE3E, A5D0095D575B241CA66CAD86280170803E7042F51D3654FCB03D7EA2347E261B ] megasas2i       C:\Windows\system32\drivers\MegaSas2i.sys
16:42:37.0519 0x1be4  megasas2i - ok
16:42:37.0581 0x1be4  [ F1C1D4E752DE1D58295040E5BE8813AF, 4DE17C5FCE63AFD545B16FA16A38F7395F29155FE165E7B21BC028CCD2A4B18E ] megasr          C:\Windows\system32\drivers\megasr.sys
16:42:37.0628 0x1be4  megasr - ok
16:42:38.0988 0x1be4  [ 4965456A1B4B3039E4B9AB233F5E9B1E, 3C303FE2BF9B38D73D005EA673C9500731125D793F4C77130F9BA8D745579591 ] MessagingService C:\Windows\System32\MessagingService.dll
16:42:39.0066 0x1be4  MessagingService - ok
16:42:39.0144 0x1be4  [ 16B078D1089FEA98710C9D07C152DCEE, A42C28E12F1BB21E907C1308447AD63DDF8FA5B2734A199A6EBE3824F3D1235C ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
16:42:39.0206 0x1be4  mlx4_bus - ok
16:42:39.0238 0x1be4  [ 20C57CE47B1A877C48A4B68E9A4E21FA, 35F98286F0665C5E06914F04F174476FBB41823564EDC55E351FCE211E2C765F ] MMCSS           C:\Windows\system32\drivers\mmcss.sys
16:42:39.0269 0x1be4  MMCSS - ok
16:42:39.0300 0x1be4  [ A4467A5C080318F0CCCF5ED463821F8B, C8ECD63245B19807BAA92C3F3F87643A2F6B178395ABB15BD54D9DE68CC1A09B ] Modem           C:\Windows\system32\drivers\modem.sys
16:42:39.0316 0x1be4  Modem - ok
16:42:39.0363 0x1be4  [ 78BE85C1F1C7F3AF6C87BCE127007D5A, 5D5229FBCDC855BFF9BA3247BF4EF8E22764CFC1EC974FD5AB2D9E6293EF15A1 ] monitor         C:\Windows\System32\drivers\monitor.sys
16:42:39.0394 0x1be4  monitor - ok
16:42:39.0409 0x1be4  [ 8E262B34A8BD184B4B3025AA8C396B00, B48AB637A92894318DC0A33CE55519D8FBD7B31177FA3C4CA33D8609D4FC0058 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
16:42:39.0425 0x1be4  mouclass - ok
16:42:39.0456 0x1be4  [ C094A555F148495EA130D3BBC5232D5E, 32E823C20FED94DB23F72F67DF1A2C043CA6179A543F3BD24FCB5500BA00A37C ] mouhid          C:\Windows\System32\drivers\mouhid.sys
16:42:39.0503 0x1be4  mouhid - ok
16:42:39.0534 0x1be4  [ 8209AC7D3F8AF41E3A14D022CD1F2040, D5B325AB8E7B354BCA3550ACD03FF5AC27B5C04A1D10C9FA4686EEA34D7293FE ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
16:42:39.0566 0x1be4  mountmgr - ok
16:42:39.0613 0x1be4  [ 4A333A7ADC8AEF95CDDCFD2B25B084B7, A65BD3DC2AD7401BED086C93EA80D0338A159EE87F8D9066D648DC41B5623B59 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:42:39.0628 0x1be4  MozillaMaintenance - detected UnsignedFile.Multi.Generic ( 1 )
16:42:39.0988 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:42:39.0988 0x1be4  MozillaMaintenance ( UDS:DangerousObject.Multi.Generic ) - infected
16:42:40.0003 0x1be4  Force sending object to P2P due to detect: MozillaMaintenance
16:42:41.0284 0x1be4  Object send P2P result: true
16:42:42.0706 0x1be4  [ F36E4074C66DD31855A8D79EF0AE8066, 01C01B3EAEFADBCDACA5BE7CB2AA199667786C1AD637CF6792BF715242BEFEAD ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
16:42:42.0769 0x1be4  mpsdrv - ok
16:42:42.0831 0x1be4  [ 4ABF7D7C44354807174EC36965B49C76, 3F57C8794F2CBFFE098B614418BBA8FC051E8DD798313228B4E03E101FCD9791 ] MpsSvc          C:\Windows\system32\mpssvc.dll
16:42:42.0925 0x1be4  MpsSvc - ok
16:42:42.0972 0x1be4  [ 215D672CB71987CD98EB2298EFB84DDC, 7E23C36DBB7C80556560E1DECE5E8F5D3D422F3D1FFE9CEA511A0BCD9D69D304 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
16:42:43.0003 0x1be4  MRxDAV - ok
16:42:43.0050 0x1be4  [ 71729B1EE949E1B092CB5CB75CC63715, BEA57BD3C2BEF261021DE706E67FF2836F52A7B21B2B3B2F0F5D76D20685614F ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
16:42:43.0097 0x1be4  mrxsmb - ok
16:42:43.0128 0x1be4  [ 6537678DEEA2A5B079052D75E21E46DA, A509481D509597A8A58C536C689A23086ECB2C15B4BE1AA80DBBF82B73673A2A ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:42:44.0597 0x1be4  mrxsmb10 - ok
16:42:44.0660 0x1be4  [ EC70CED325D4DF908F265A9526016254, 257F73C62460B7CED87E8090977B77986FF55FC6E6EFBACCD7D0A33E366767D6 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:42:44.0707 0x1be4  mrxsmb20 - ok
16:42:46.0082 0x1be4  [ 167408B38458ECAE545C57527BC99024, CB699B6C6F5B6DCDE85F8F0E40DD31B8066600A0833E5CD99ADE31DEC516B34F ] MsBridge        C:\Windows\system32\drivers\bridge.sys
16:42:46.0160 0x1be4  MsBridge - ok
16:42:46.0207 0x1be4  [ D5778559A0F34EE0BF0457293C6B5F4F, 73C0829F641F62CBFC0523ED54D94121E3A694ECCF148DBF4A5743631BADB714 ] MSDTC           C:\Windows\System32\msdtc.exe
16:42:46.0301 0x1be4  MSDTC - ok
16:42:46.0363 0x1be4  [ DC23D3D24C64BF3A314E34887AD86732, 5CF60E096CF13976759CBBBAEA1DBBE189A77843C6B32828C77F7BFB6506CCAD ] Msfs            C:\Windows\system32\drivers\Msfs.sys
16:42:46.0410 0x1be4  Msfs - ok
16:42:46.0457 0x1be4  [ 6DDDFCAB646BBBCFC583135C4430E10F, 5EFD3F4F84EBEEC58914D5CC89622D69F2DBDFB7EB9AD8D9A0868127187FD673 ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys
16:42:46.0488 0x1be4  msgpiowin32 - ok
16:42:46.0504 0x1be4  [ 01C6A86BEA8279E557A5056148F068BF, 42983A61654F51515AC6DD64A68D319883FD02B3EC575F7EA7A907576866F0AF ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
16:42:46.0535 0x1be4  mshidkmdf - ok
16:42:46.0551 0x1be4  [ F65ABC7DE945047147F17330F79732CB, 050C64D7284D767C951E94EFBA579D0E066C36CA1899A2C64CEA41A34B8E9EF2 ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys
16:42:46.0582 0x1be4  mshidumdf - ok
16:42:46.0613 0x1be4  [ 05B23012427801E710BDD12720B9020B, 48FB22CFDF61AAE4221B3B23E539C08083289FB0CB5ABF249700DDF968C7250A ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
16:42:46.0629 0x1be4  msisadrv - ok
16:42:46.0676 0x1be4  [ 21B88DF67507BD4DFF8A5487074BB31F, 5F2E1FB6227873DCA97D1BE6271E900AFA6BCE54D765C9BDBA07B74FC87B147B ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
16:42:46.0722 0x1be4  MSiSCSI - ok
16:42:46.0722 0x1be4  msiserver - ok
16:42:46.0754 0x1be4  [ 021C34C1968B78ACFBF30553EE78A1D3, 035C8D6F06A3697F0A902FB14F10091D026DB0A7492FAECD12D5A7F683C48A20 ] MSKSSRV         C:\Windows\System32\drivers\MSKSSRV.sys
16:42:46.0801 0x1be4  MSKSSRV - ok
16:42:46.0832 0x1be4  [ C3F5EA6B9041A30B4F11BE2E7863E487, 07324A9D81D30A173D3F369AA1A304AD7713C7CCF9909C6427718F0F90CE49C9 ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
16:42:46.0879 0x1be4  MsLldp - ok
16:42:46.0910 0x1be4  [ 601D666820F0408B896791D19BE6D258, DD6BA3962A6D387D9F06B6D7006DBB2BF46D84A8FA91C628DA9D96117F14F4F0 ] MSPCLOCK        C:\Windows\System32\drivers\MSPCLOCK.sys
16:42:46.0972 0x1be4  MSPCLOCK - ok
16:42:47.0004 0x1be4  [ 46E61FBA0097E48E5628C74A3F72233A, 21BD64041781085A7873ADA34C3648FBBBED386A071C69F21D98F2A0C3120DC6 ] MSPQM           C:\Windows\System32\drivers\MSPQM.sys
16:42:47.0051 0x1be4  MSPQM - ok
16:42:47.0097 0x1be4  [ 3B6127DB162A2B1B0DA2F35BA77F12F1, 76465FB9A18538FBF8A62D317ACEE93AA5DF2B4D84E74A2AB3FFEE5C94F7992B ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
16:42:47.0160 0x1be4  MsRPC - ok
16:42:47.0191 0x1be4  [ 29DC5DFDF305E73A40AB13D102736EEA, 3F17F1841E5BD266962D106342CE811497E46C3EBCD9A6CDF5B4FB4B8D64DE21 ] MsSecFlt        C:\Windows\system32\drivers\mssecflt.sys
16:42:47.0238 0x1be4  MsSecFlt - ok
16:42:47.0269 0x1be4  [ CBD56E0B55FB3672BA80382EC2F8835C, 1956E9B20A363B715C2111138D2085AA28FEDA7A82228CB4D8CE7ACC578E4DDB ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
16:42:47.0301 0x1be4  mssmbios - ok
16:42:47.0332 0x1be4  [ 5734B2A36D3BB13A638E5305EEEC582D, 613D559ED892EC4ABDF80F2435892895677F97902E699BE30283C150ABA49877 ] MSTEE           C:\Windows\System32\drivers\MSTEE.sys
16:42:47.0394 0x1be4  MSTEE - ok
16:42:47.0488 0x1be4  [ 85270E0DC6907C6B99F72A36F17AED34, 58C0BBF9CC9E42266C8AF9AB9FEC77442F96C7C6D0DFCFAAB763DAD30B1B7939 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
16:42:47.0551 0x1be4  MTConfig - ok
16:42:47.0582 0x1be4  [ DD673D9422457EFCCDEE45C73C0DF241, 7FDE57422416F4339344F765A1A4A9D1D59D66D74121F6082ECA562F91E71445 ] Mup             C:\Windows\system32\Drivers\mup.sys
16:42:47.0613 0x1be4  Mup - ok
16:42:47.0629 0x1be4  [ 3C57FF3BCF496D24C39C2198158864BB, 8671DF39AE5DD83033EC70BF8A502ED027B33B90FFC28AC2C79EC8F2F9128C14 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
16:42:47.0660 0x1be4  mvumis - ok
16:42:47.0707 0x1be4  [ FD916B66910494DFF70C944FC38A2623, 134E9309DA253E5512F8EFE525ECB701E82CB64003DD8DC20E8395A29BDC9324 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
16:42:47.0769 0x1be4  NativeWifiP - ok
16:42:47.0847 0x1be4  [ 870B3D0E1A8F6F01356BD75F2E47E0C1, 88EC0AA1144F1523B7DDD6BCAF8771CB246153B14E950AA6F4859FB8287D6634 ] NaturalAuthentication C:\Windows\System32\NaturalAuth.dll
16:42:47.0957 0x1be4  NaturalAuthentication - ok
16:42:47.0988 0x1be4  [ FBA9F5B9F59A665F248F70B905EDCE14, D2C1795192809F6413E080A9ADC949A4D99D0FC6BE668870127161474FF40596 ] NcaSvc          C:\Windows\System32\ncasvc.dll
16:42:48.0051 0x1be4  NcaSvc - ok
16:42:48.0082 0x1be4  [ 2A265F3FE5F77F22CEA9D2785E0399C1, 24FF1D06A2A05DC7A2D7552E0B45CF6F689A4FC9A135474B587FA7649BCFED3D ] NcbService      C:\Windows\System32\ncbservice.dll
16:42:48.0160 0x1be4  NcbService - ok
16:42:48.0176 0x1be4  [ 3C7E074AE41D8DFB41A9E65904D8BF43, 34890591FDCEC035D3BB021DB035A4728C415A70F55D88F21E39073040C912AB ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
16:42:48.0207 0x1be4  NcdAutoSetup - ok
16:42:48.0238 0x1be4  [ 77B047B109CE758A017F58FAE5038D0D, 8E9E4ED5128C506B696FD5F0E8AD0D11FF53B5DD2F88860FF8F60307A7E08DEA ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
16:42:48.0254 0x1be4  ndfltr - ok
16:42:48.0379 0x1be4  [ 25D126EFFEC0B117DA4C81F7AE6C99FC, 86B7472B4C4B7564FD921FD48125D3692249B269BEE0DEF55097123309EF2306 ] NDIS            C:\Windows\system32\drivers\ndis.sys
16:42:48.0457 0x1be4  NDIS - ok
16:42:48.0488 0x1be4  [ 067AE5BA349CC35AF8975D22DC483DDF, FEC185ECDA27041506DF74528AA65B32FEBB06E32A55C8F7BA161A755C6659CF ] NdisCap         C:\Windows\system32\drivers\ndiscap.sys
16:42:48.0519 0x1be4  NdisCap - ok
16:42:48.0535 0x1be4  [ 6FC4D7EB5D38CFB7966405036116F065, B3E9083ABE7AD797FA54FB1308AA57D49C9B7BA662B09607666B23777F6167C8 ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
16:42:48.0582 0x1be4  NdisImPlatform - ok
16:42:48.0629 0x1be4  [ ED7CC4E16B76B2603C9F827188EA63B4, A6E739D219F50866051A08867844BDA878D6FEA33E91DEAC1948A55CDC5BEB9F ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
16:42:48.0676 0x1be4  NdisTapi - ok
16:42:48.0738 0x1be4  [ E9676E94DEA144259344A15D68785B17, 8FFF34D44E4E7E2EBE9C9337BA8E713ACD6344551C709A5537900290C51B66B3 ] Ndisuio         C:\Windows\system32\drivers\ndisuio.sys
16:42:48.0894 0x1be4  Ndisuio - ok
16:42:48.0926 0x1be4  [ DC1D26D62F40B7552BCF49D92774F0C5, 3DD7CE2AD578101EFF8C1448800A1317F01893AF6E559C4DCCD9F6ACE4B027E4 ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
16:42:48.0972 0x1be4  NdisVirtualBus - ok
16:42:49.0004 0x1be4  [ 66F56AC744101DB870934D0EB31C2426, 932013EE8542E6770657A904B09E2BD2052E8C04216289EB5F011770A46CA6F9 ] NdisWan         C:\Windows\System32\drivers\ndiswan.sys
16:42:49.0035 0x1be4  NdisWan - ok
16:42:49.0051 0x1be4  [ 66F56AC744101DB870934D0EB31C2426, 932013EE8542E6770657A904B09E2BD2052E8C04216289EB5F011770A46CA6F9 ] ndiswanlegacy   C:\Windows\system32\DRIVERS\ndiswan.sys
16:42:49.0097 0x1be4  ndiswanlegacy - ok
16:42:49.0129 0x1be4  [ 8ABF5B8D5839F8DAE2E0D3165AE732F6, CD382FFF8A71FD85B92EEE76647481AC45BD2A5815C012520A89A18EEE6E01AC ] ndproxy         C:\Windows\system32\DRIVERS\NDProxy.sys
16:42:49.0176 0x1be4  ndproxy - ok
16:42:49.0207 0x1be4  [ A791792DC412CCD83DA0AF6871682552, FE1A30A6D1501463CF8AAC3AD8CE114ACFEDD38CF9BD6B2247B84E41D74A9E6B ] Ndu             C:\Windows\system32\drivers\Ndu.sys
16:42:49.0238 0x1be4  Ndu - ok
16:42:49.0269 0x1be4  [ BE79982A50AC88BC0765F3AFECFCB596, 1E7CACB1095C3F1D10766E15B31DEE195C1E6954D4E7ADA141CA4C15EE3DA445 ] NetAdapterCx    C:\Windows\system32\drivers\NetAdapterCx.sys
16:42:49.0316 0x1be4  NetAdapterCx - ok
16:42:49.0348 0x1be4  [ 80475A12D4AA90937CE69265BAFA993F, 8100BF2A621D43C5E79C58183F9F7E882076BEA2D524D3AED87C8D0790F0F154 ] NetBIOS         C:\Windows\system32\drivers\netbios.sys
16:42:49.0379 0x1be4  NetBIOS - ok
16:42:49.0426 0x1be4  [ 2A56FA2634A9650EF4ED5DFE976397BA, 428957C3F2ECF3C0C7E098E4E5CA6AACF07104D1E42CBBBBBC172FA1C24A7293 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
16:42:49.0472 0x1be4  NetBT - ok
16:42:49.0504 0x1be4  [ 94E06D509D50807774F35BEE3163E806, ADADFA0D533944579BA0E5FE31A68D4D1395E7B9DB75E58D47E0ADC0DA5AD16C ] Netlogon        C:\Windows\system32\lsass.exe
16:42:49.0519 0x1be4  Netlogon - ok
16:42:49.0551 0x1be4  [ 94BC40F88309B0B7DFE68B2C2BB15EB6, 7E485F6A3F0B1C34C59D1F36EDE05ED9724E23FF63EA273910A02D8177905D9B ] Netman          C:\Windows\System32\netman.dll
16:42:49.0597 0x1be4  Netman - ok
16:42:49.0644 0x1be4  [ 79ED54CA41486399361778D533E55A99, 17467C0C0D4D099DC7BF2BDE46086AF4AFC28895C62A35AA6A3906C19418AA32 ] netprofm        C:\Windows\System32\netprofmsvc.dll
16:42:49.0707 0x1be4  netprofm - ok
16:42:49.0754 0x1be4  [ B368E739AF3F577EA8D1B256F91036AD, 48BF739A0448F57B2BB0DA891D478D284A5C7F44C61D6E4F8131EED4DF7CFFDA ] NetSetupSvc     C:\Windows\System32\NetSetupSvc.dll
16:42:49.0816 0x1be4  NetSetupSvc - ok
16:42:49.0863 0x1be4  [ 97FF2186BBAA215727300404862D297B, 1D4F3475252C2315EF51B7B76206776BFF4462C0B31328E266BF5F4ACC2475D1 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:42:49.0926 0x1be4  NetTcpPortSharing - ok
16:42:49.0972 0x1be4  [ 8AED8AF4CBF661E82CF74CBF198B0C56, 7208216C9E6A938E2CCB2F510D4A6F00F35E1AAF3FE0E6D7272F5543B843EBFC ] netvsc          C:\Windows\System32\drivers\netvsc.sys
16:42:50.0019 0x1be4  netvsc - ok
16:42:50.0082 0x1be4  [ E27ACE78CA1BDF4FBBF3323D6E9AFCDB, 7930C172AD493E39712A0F4B1AF4ADFB4ABD499B00FEEA2E1D5C9E5A26105EFC ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
16:42:50.0160 0x1be4  NgcCtnrSvc - ok
16:42:51.0613 0x1be4  [ A557C92583E81CA97D2C0F2467E7C2F9, F78B07DB33253142C6CB2DE1BFA1C54EB7CB5D64C94C9B73182C7D49314061EF ] NgcSvc          C:\Windows\system32\ngcsvc.dll
16:42:51.0707 0x1be4  NgcSvc - ok
16:42:51.0785 0x1be4  [ 7F609310AC1EC8D66D912438AC792392, C61FAD8431F3E627E9D81DFF95A37C057ED4EB3F3F78A598D5BD236D194EB612 ] NlaSvc          C:\Windows\System32\nlasvc.dll
16:42:51.0863 0x1be4  NlaSvc - ok
16:42:51.0894 0x1be4  [ EFF488F6DA45224965B30CE1AB464C08, AC1D0C3175958CD3F9E311C545044B9A847D6F8C89907CAB2CD3C73EC6E1836B ] Npfs            C:\Windows\system32\drivers\Npfs.sys
16:42:51.0926 0x1be4  Npfs - ok
16:42:51.0941 0x1be4  [ 5CB8082E51DE7D19042F0FF8C517CB0D, C0C5389E097D520018C346ECBF8AF9928FB44D9AD7B0EFD2D44E910214580A1A ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys
16:42:51.0972 0x1be4  npsvctrig - ok
16:42:51.0988 0x1be4  [ 54407F4E774AE8AD37885BBCC0FFDB3E, 7A22A15A5EC874682FF04B35A69867A476FE88A97E27AA3A9C3F32E4B31D160F ] nsi             C:\Windows\system32\nsisvc.dll
16:42:52.0035 0x1be4  nsi - ok
16:42:52.0066 0x1be4  [ 201F3764A379001168DFB2B90F7C1E57, BC5662D43B073B41E3810938FAE511E82AD3F69DDE8B73C23D7EDBB3E6364B5B ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
16:42:52.0082 0x1be4  nsiproxy - ok
16:42:52.0254 0x1be4  [ BEE4FDB8DE2C90728D93393E4A3B88C2, 6E453C760965599FDC670FD8162B3A0FB127AC87D59CD6547E058F588904F307 ] NTFS            C:\Windows\system32\drivers\NTFS.sys
16:42:52.0394 0x1be4  NTFS - ok
16:42:52.0519 0x1be4  [ A0706FEA552415DB973DB27BDF2FF4F1, 52304E25745F96F3248E609E11F37CC112DC69A4DE47D70A3EE9E043428768F8 ] NuidFltr        C:\Windows\System32\drivers\NuidFltr.sys
16:42:52.0566 0x1be4  NuidFltr - ok
16:42:52.0598 0x1be4  [ 6D8A287B88F76EB47ACC6BF8E318E1FD, 73A8A8AD677D9BC432159B0099C2BF3928C14D2E5C88E5BCC8B96FCDFA3ED691 ] Null            C:\Windows\system32\drivers\Null.sys
16:42:52.0629 0x1be4  Null - ok
16:42:52.0676 0x1be4  [ 532F27A2B62D70C327E763F035AED6C1, 9FB6C8040D48384BC72A2021EAD7D48B5E876731849FBA68338EC3562E7CB659 ] nvdimmn         C:\Windows\System32\drivers\nvdimmn.sys
16:42:52.0691 0x1be4  nvdimmn - ok]
         

16:42:52.0722 0x1be4  [ 7E04652EB1A476BC0A72ECDC613AF0C5, F356C5F7B1C30253F4F8A3E45AAA8C82940DBE1F208D81043D7D89EE54355890 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
16:42:52.0754 0x1be4  nvraid - ok
16:42:52.0785 0x1be4  [ 880B3E874914DAEF97119876543AE117, E41A633F5C2519438FCA0A85F134061224C39AB82EE61F3B80043E21985A80D7 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
16:42:52.0801 0x1be4  nvstor - ok
16:42:52.0848 0x1be4  [ 54EFF5C0838ABFCBBF1F47B5B9B5031F, 0895649806196B2C75013585F9C93397AB3F64817CDC4CCD17ACDE6B01F3DC38 ] OneSyncSvc      C:\Windows\System32\APHostService.dll
16:42:52.0894 0x1be4  OneSyncSvc - ok
16:42:54.0379 0x1be4  [ C050648783AC420FF78E2ECDAEAA5C3B, 1AF91695D0DC2B6F0B3CDE9069E6237B3050A650229452C6A4E69A2CB792B954 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:42:54.0426 0x1be4  ose64 - ok
16:42:55.0926 0x1be4  [ 3C899D21CE920195CA987756769B1820, B2FACDF82CF8E2EA263CB6B2FDB3CF66B41D01D014F2BE1A683513971D050C3C ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
16:42:55.0972 0x1be4  p2pimsvc - ok
16:42:56.0019 0x1be4  [ 35E6495236E917BDFD9659F62EFE2E33, 4B4AE686C7D2A9B7D496E62162E984CCCE79D6E42223F5B3D2EBBC7E526EA85C ] p2psvc          C:\Windows\system32\p2psvc.dll
16:42:56.0082 0x1be4  p2psvc - ok
16:42:56.0129 0x1be4  [ 2E07EC2C1622F5E7B535D62DCD61F3AB, 5FECA3CD9AF531E59B1A0FE04AE8BA22F3C929EB6AA5B2171C88A788AFAA8115 ] Parport         C:\Windows\System32\drivers\parport.sys
16:42:56.0144 0x1be4  Parport - ok
16:42:56.0191 0x1be4  [ 681E8A68C13253D23B93953FDE569120, 77B06B881999600DA85C6EB28BAE707D06B1D2BA0CFF2957689FDEBFD4BEEE10 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
16:42:56.0207 0x1be4  partmgr - ok
16:42:56.0269 0x1be4  [ F2A91EABFAFA3EE63A14F123528A3438, B9C64290ECF3B17F671F2AF724B81036A45D9A68E91C01ECAAEE42CC186A925D ] PcaSvc          C:\Windows\System32\pcasvc.dll
16:42:56.0332 0x1be4  PcaSvc - ok
16:42:56.0379 0x1be4  [ DACBF8582A66CE0C4A8EE52F03F4256B, 2E4EF5E6CEE32874DD097AC6676D1BFB6F8E18B3845B976EB402181700383AFC ] pci             C:\Windows\system32\drivers\pci.sys
16:42:56.0410 0x1be4  pci - ok
16:42:56.0441 0x1be4  [ E5AF806815ED797086629741F29E4156, 1AD39A8DD564807EE11775C1C69129184A28B7AC4ED66E47CBE657C9215986C4 ] pciide          C:\Windows\system32\drivers\pciide.sys
16:42:56.0457 0x1be4  pciide - ok
16:42:56.0504 0x1be4  [ 2A631D447B988AFBE847CBAA8E5CC298, 65D52E0E7F16EFFF8926E4FF97B42ABB2C5F1125FB13F521143712E3F9028FE7 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
16:42:56.0519 0x1be4  pcmcia - ok
16:42:56.0551 0x1be4  [ 6F55F5AD830F8EA1D37ED23A0CBD7112, 40E7BE7CA194F5742BE24E1E391A5B833B0E7243DDDF05B332C5D26FB3086D13 ] pcw             C:\Windows\system32\drivers\pcw.sys
16:42:56.0566 0x1be4  pcw - ok
16:42:56.0598 0x1be4  [ 1796112EB89559910BC18865A29C8894, 3EDACF3FDFB4164C1F07BAE7ABCA4E8DC5DBADE11C73F18546E5FE2A10CCDEA8 ] pdc             C:\Windows\system32\drivers\pdc.sys
16:42:56.0613 0x1be4  pdc - ok
16:42:56.0676 0x1be4  [ 7D9F4EB1450CFB32D708BF943C170475, D94EA6B775414031273D0C55BBAAEC07D780B7226859F22A26772B104BA302BD ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
16:42:56.0738 0x1be4  PEAUTH - ok
16:42:56.0879 0x1be4  [ 57B89D5EAA6A2422C70CF158B9D5F21D, 6D2149CD16B01B323120DC5FA5B9A102B3069877D5A6E8F5370F718643F6383E ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
16:42:57.0176 0x1be4  PeerDistSvc - ok
16:42:57.0222 0x1be4  [ 35FD028E4323018202C0B7D115FD3AEF, CA0CA9EF7A6496EBD35C775D0BD9CC814B07391B69C83938C90926D316A336FD ] percsas2i       C:\Windows\system32\drivers\percsas2i.sys
16:42:57.0254 0x1be4  percsas2i - ok
16:42:57.0285 0x1be4  [ F9F3D8BE9BC9241CC726197261362AC4, 0AF0EBD551B3C079C7A5EA568A171B43F822C4AD0177A8135FBF315813108535 ] percsas3i       C:\Windows\system32\drivers\percsas3i.sys
16:42:57.0301 0x1be4  percsas3i - ok
16:42:57.0394 0x1be4  [ 8C0C30BDD3CE3FC34A59B4B101162ED3, 9A89007DBBD936F985D562B3C686ADE49ED947289500A2D776BFCF9B4DF478BF ] PerfHost        C:\Windows\SysWow64\perfhost.exe
16:42:57.0457 0x1be4  PerfHost - ok
16:42:57.0582 0x1be4  [ C811E13F01FB77570B727337BBCF64B8, B37FA2DF1607F1B4443BDB94C5AC95A66A498A0FF51C2C9C2F4E1D5C7400B949 ] PhoneSvc        C:\Windows\System32\PhoneService.dll
16:42:57.0676 0x1be4  PhoneSvc - ok
16:42:57.0738 0x1be4  [ D59CD92CE3784678C09B8DF518A8E1A6, 7D5B05D50EA66BAB6B8436A5989F5CA17DC35DB02E445CDEFDADEE0BEB3DE2C8 ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
16:42:57.0801 0x1be4  PimIndexMaintenanceSvc - ok
16:42:57.0910 0x1be4  [ 73B5A132EBF3A8075A7C68DFBB4DE719, 847FC2A2B4C1C65BFEFBBF90C2EB99378E2FDE469425F141BC75D1874F94658C ] pla             C:\Windows\system32\pla.dll
16:42:58.0035 0x1be4  pla - ok
16:42:58.0097 0x1be4  [ 64A80A746FC460126FA4124AA2D93848, 851ECA69489FF9A834B6A5ACF9D51283FD3796E21316D8A22E57DED2F415782C ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
16:42:58.0160 0x1be4  PlugPlay - ok
16:42:58.0176 0x1be4  [ 36D43EA5517F3F4AAAC8EE061C957EF1, 970CBE8F689C26C384B8F4E6D0C68BB07434C4776B497E310A603A896AED05E0 ] pmem            C:\Windows\System32\drivers\pmem.sys
16:42:58.0207 0x1be4  pmem - ok
16:42:58.0238 0x1be4  [ 59048555B59FD69287CFAB6022B5CC86, 733D3F1DBF75D6A5A015E6F849216E1954813F86E5D3B05B4AF0E9FD523FC646 ] PNPMEM          C:\Windows\System32\drivers\pnpmem.sys
16:42:58.0254 0x1be4  PNPMEM - ok
16:42:58.0285 0x1be4  [ 7815D5EEE3624640150B1365EB2E98C5, 2E45B211F40510554E5BDA876E53497FA4A8465A152F77CF38CAD38CC6F47C8A ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
16:42:58.0316 0x1be4  PNRPAutoReg - ok
16:42:59.0722 0x1be4  [ 3C899D21CE920195CA987756769B1820, B2FACDF82CF8E2EA263CB6B2FDB3CF66B41D01D014F2BE1A683513971D050C3C ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
16:42:59.0801 0x1be4  PNRPsvc - ok
16:42:59.0863 0x1be4  [ E1BCA08929D806A087D90BC11C6020E8, F9FE2E761F0F00C4A0C221D25069348185C75CA350DDD1407A6401220227A9F6 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
16:42:59.0926 0x1be4  PolicyAgent - ok
16:42:59.0972 0x1be4  [ A3CCFB8A5BD48F56EF2ACB4A427A1AC7, 03A6F53C44A90D2FAE1F0C212606C484AE0DFBFDF6675497FF0FBAB46D17B268 ] Power           C:\Windows\system32\umpo.dll
16:43:00.0004 0x1be4  Power - ok
16:43:00.0051 0x1be4  [ AACA74DEF7BE3DED322411787494878B, 86BAF7E855077A03F4B8C0778304CFDB9D0CF245F82B87CD60CAB666D1D17D9D ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
16:43:00.0082 0x1be4  PptpMiniport - ok
16:43:00.0301 0x1be4  [ FAA5FBD37C00DE72573F9BF6B6E64BAD, AEF599C9D47ED197FAC54326E99114AD7EAA107A0248C77997D353A7B5C06FBB ] PrintNotify     C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
16:43:00.0488 0x1be4  PrintNotify - ok
16:43:00.0551 0x1be4  [ 8803D4F36F1CB2E2203F5EB59571E89C, 0C83A8706CDB7400CCAB145211793B8C6153D30CA50843A5E3980536F2A38C11 ] PrintWorkflowUserSvc C:\Windows\System32\PrintWorkflowService.dll
16:43:00.0582 0x1be4  PrintWorkflowUserSvc - ok
16:43:00.0644 0x1be4  [ C009BE61D95CAD5F999D0F4785AEFB7B, E834AEB963E4FA8DBE9A9E69BD2212C001EF9F5461719EFB80C55C87450AFD73 ] Processor       C:\Windows\System32\drivers\processr.sys
16:43:00.0691 0x1be4  Processor - ok
16:43:00.0738 0x1be4  [ 5660B827F4D484E3329E3714CAED957D, 2A7A810429463BB204C92DBCDD5445FF11174FD45C30C617B9F939AD6DBDFFB5 ] ProfSvc         C:\Windows\system32\profsvc.dll
16:43:00.0816 0x1be4  ProfSvc - ok
16:43:00.0863 0x1be4  [ 5818FE76C3C6AE0CA723EBE483BF447F, 613E1FE02FA52A6EF4B1E5C56F0108D493B1E97F799CF409A6697A5D5112C8B3 ] Psched          C:\Windows\system32\drivers\pacer.sys
16:43:00.0894 0x1be4  Psched - ok
16:43:02.0363 0x1be4  [ FC1CEF0CC00E2C405ABFEF07B8CD1375, 259E366C87DC8BB4AA3562CF3E731EC5938D3936CA12D4120A9E85183BDF990C ] PushToInstall   C:\Windows\system32\PushToInstall.dll
16:43:02.0441 0x1be4  PushToInstall - ok
16:43:02.0472 0x1be4  [ 43252AB49C9A43D22AA583C15E96F7B7, 6ABD8D0D541BCF9E257C65122216B1D2AE92CBF8A3A3CB7CE340846E66C449CA ] QIOMem          C:\Windows\System32\drivers\QIOMem.sys
16:43:03.0957 0x1be4  QIOMem - ok
16:43:04.0004 0x1be4  [ 034BA34ADFA10F9D7E4989273DDABA33, 8763D28817A64F0D82B61EBA1FA54D7E0C97E66FA3F359C1A681740E1AF680C2 ] QWAVE           C:\Windows\system32\qwave.dll
16:43:04.0051 0x1be4  QWAVE - ok
16:43:04.0082 0x1be4  [ 16F9A6B593B52EB18F7ECB9D251BDF7A, 5DD26B91DF51A07097A893F3537F94FE2CD1F9D132B0994451E922CE1359516B ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
16:43:04.0113 0x1be4  QWAVEdrv - ok
16:43:04.0160 0x1be4  [ 13600C467512147E99052806F2C1307A, 705257F42FA3502113958A295E0E0FED9C6A35DB6214099360606E792F69B1C6 ] Ramdisk         C:\Windows\system32\DRIVERS\ramdisk.sys
16:43:04.0207 0x1be4  Ramdisk - ok
16:43:04.0238 0x1be4  [ BD6EF1748DC3DBACEC97B87B6252AAC7, D5D8FF60403BC0B1B315B3413D15E47FE64C63D8F1AC28225DDC21E41BD8A7E5 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
16:43:04.0269 0x1be4  RasAcd - ok
16:43:04.0316 0x1be4  [ ED0EE10911C16AD8B21B9003C90E968F, CFB280D14F629E87BBBDA83841E4B3DD8866FB8382FF17D3E807BBFBBC3BAC1A ] RasAgileVpn     C:\Windows\System32\drivers\AgileVpn.sys
16:43:04.0347 0x1be4  RasAgileVpn - ok
16:43:04.0379 0x1be4  [ 54D8A771A5C32C293288E64ABE07FE50, 073F65F1F910C4887C7F60992F5C50629EEA5F4AA8182206D73F2FECE56AB6BC ] RasAuto         C:\Windows\System32\rasauto.dll
16:43:04.0410 0x1be4  RasAuto - ok
16:43:04.0426 0x1be4  [ E0220BB6580D34001D4D1D133052DAA4, F350A34E7592673B7B77F907E7D7ACFC50C6099A4874C1D870BD0E089D8EF668 ] Rasl2tp         C:\Windows\System32\drivers\rasl2tp.sys
16:43:04.0472 0x1be4  Rasl2tp - ok
16:43:04.0535 0x1be4  [ DDC95170F61986C1226FC575D404298B, 326DB48EAB266BAF18D69AC49504985D495121FE5090D5A11EB55CFC3D85AFA6 ] RasMan          C:\Windows\System32\rasmans.dll
16:43:04.0629 0x1be4  RasMan - ok
16:43:04.0644 0x1be4  [ 12EE1D92F4E5FAE4B6F65195A2016CE5, C62E9EBD4FE642248C36BB2C9BD7B1C1C09E8A33D4B4AA39DD32F9FD1FE86081 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
16:43:04.0676 0x1be4  RasPppoe - ok
16:43:04.0691 0x1be4  [ 91CE469015979E5B3C3DBC2C41A476E8, 45D7EA66311126E370B4E082F7E8507399AC594AB6F7CD5A45C9F09658FD7E19 ] RasSstp         C:\Windows\System32\drivers\rassstp.sys
16:43:04.0722 0x1be4  RasSstp - ok
16:43:04.0816 0x1be4  [ 6C34563FBC1ECCA620D382B489584C07, 4A0731DBC3714BD82F0F31FF7BD7ED3504BEE69F3F2057BB4ABD41AA635B81E1 ] Razer Game Manager Service C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
16:43:04.0863 0x1be4  Razer Game Manager Service - detected UnsignedFile.Multi.Generic ( 1 )
16:43:05.0113 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:43:05.0113 0x1be4  Razer Game Manager Service ( UDS:DangerousObject.Multi.Generic ) - infected
16:43:05.0113 0x1be4  Force sending object to P2P due to detect: Razer Game Manager Service
16:43:15.0832 0x1be4  Object send P2P result: true
16:43:17.0010 0x1be4  [ BC808F726164F2EBF18E79B9AC7B70AF, B551D5DE08DC91675D2B92CBB3F2FBC16D1C5260B240B36532EAEA011F296B17 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
16:43:17.0076 0x1be4  rdbss - ok
16:43:17.0108 0x1be4  [ 9D7E65A15478944836C353B556F9CB87, F2D2D73EBF3A866B0511135D60C5C6CE397F41366A2D33D0B045A4A08066CF72 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
16:43:17.0155 0x1be4  rdpbus - ok
16:43:17.0170 0x1be4  [ 39886C19FB466BBF8AEC31E3E77C034C, 58817B7941377DD5C972131EAF8FD472992F912ED48E6CB770410D359675D3B9 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
16:43:17.0217 0x1be4  RDPDR - ok
16:43:17.0264 0x1be4  [ 4D1A63ACEC42A88E52AFC4E84A8CE9EE, 37789428D78273EB09F3613BC72DF5D5E9210D4650CC4D9F9DD413DB4A20B6F2 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
16:43:17.0280 0x1be4  RdpVideoMiniport - ok
16:43:17.0326 0x1be4  [ A4C3DC6530752AF3C78DAAC8B2B23EA7, 8CE953800256FD75FA608530B9570E42A838DCE7E82DE5F396432BC320590C00 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
16:43:17.0358 0x1be4  rdyboost - ok
16:43:17.0451 0x1be4  [ FB0577F6BC9E07549CEACF5224327499, 7AD01A641C3A8735C05C7EFDF3730D7A385A241306E3AD01B088D7329FF319E0 ] ReFS            C:\Windows\system32\drivers\ReFS.sys
16:43:17.0561 0x1be4  ReFS - ok
16:43:17.0826 0x1be4  [ 4136BCA61BCDCC79DCE145F9CB639CD6, 58D49C41532A31F6F2112317BB60D80D34A4D29CAABBF11BAD9C45FD8B812F93 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
16:43:17.0889 0x1be4  ReFSv1 - ok
16:43:17.0936 0x1be4  [ 16884710EB4898CB49B18609EEE34C6C, CEC4850825D81969BE269A4DC23DF54F6E2346AADE40D95E91B512412D4BD358 ] RemoteAccess    C:\Windows\System32\mprdim.dll
16:43:17.0998 0x1be4  RemoteAccess - ok
16:43:18.0030 0x1be4  [ 9D82CD53B622A85A10B4DA8F4724A8E4, 0D4DDDF7C8D90CB19A86EA531205BAF19BA2335DBD10CD9F006C969CE9735223 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
16:43:18.0076 0x1be4  RemoteRegistry - ok
16:43:18.0123 0x1be4  [ 24C716C6A5AA3BEC3180BB15050C75C5, 15BC70E932C4AB0609231098F8C3EC56840BB20099C74C008EF23DBFC556A43E ] RetailDemo      C:\Windows\system32\RDXService.dll
16:43:18.0201 0x1be4  RetailDemo - ok
16:43:18.0233 0x1be4  [ 5BF7698021DB13B55753FD921BEBE318, E8FA328F4070765EE0BFE0D55E8E9CF7AF2D4F3233A1578FF58A7B2782AD9174 ] RFCOMM          C:\Windows\System32\drivers\rfcomm.sys
16:43:18.0264 0x1be4  RFCOMM - ok
16:43:18.0295 0x1be4  [ BBC228CA2F96B784B01FE7F1C5E3CFBB, AF24D0B4093F9CCE88C5BCB94944BCD6D36B890AD8544AF0CD7814B8D4F73A7A ] rhproxy         C:\Windows\System32\drivers\rhproxy.sys
16:43:18.0326 0x1be4  rhproxy - ok
16:43:18.0358 0x1be4  [ 665A51DE515A2E8B0BDB3D6917D47DD9, F5BF28900F55CB17016E64775B9A5B64D16E2A5898F4D5A7ABE26639932B2C63 ] RmSvc           C:\Windows\System32\RMapi.dll
16:43:18.0389 0x1be4  RmSvc - ok
16:43:18.0436 0x1be4  [ D0F6698E56F0157EA72F2D754C6FD555, A93DEECB1D84E5AC2C1E2D3D54BA118774E6F77996BEC7BCB6C758B6D04D1920 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
16:43:18.0467 0x1be4  RpcEptMapper - ok
16:43:18.0499 0x1be4  [ EB65907BD63871669C54D5E5BAE4DD34, 9A429C4B416913D65728A40890FC3C69465C4C77C2D313007BDF24EA5F4E1400 ] RpcLocator      C:\Windows\system32\locator.exe
16:43:18.0530 0x1be4  RpcLocator - ok
16:43:18.0608 0x1be4  [ 79BDBB684629A526CCD958F06B9D6FAD, 489A85A5F63E5F012740B538878D6DAEBBB474D64F27A6847D3E387A704E5297 ] RpcSs           C:\Windows\system32\rpcss.dll
16:43:18.0733 0x1be4  RpcSs - ok
16:43:20.0326 0x1be4  [ 27B80E5766B114621980F82FB78E912A, D7986FB32AFA2F376FBAA5EFAC18F5E699BAF97AD0C92A0B787E1CAF77465CFD ] rspndr          C:\Windows\system32\drivers\rspndr.sys
16:43:20.0405 0x1be4  rspndr - ok
16:43:20.0498 0x1be4  [ 17F6A5FE120977AEC4BB7B02C33C8C03, 199CE86A69769182911A22E36BA14A2D9923434FC384FE90243F535C8DF4A2CE ] RzActionSvc     C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
16:43:20.0545 0x1be4  RzActionSvc - detected UnsignedFile.Multi.Generic ( 1 )
16:43:21.0702 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:43:21.0717 0x1be4  RzActionSvc ( UDS:DangerousObject.Multi.Generic ) - infected
16:43:21.0717 0x1be4  Force sending object to P2P due to detect: RzActionSvc
16:43:22.0998 0x1be4  Object send P2P result: true
16:43:25.0358 0x1be4  [ 0423671D6E1BDC88A8AEFC29D58A0039, 15FC4F5ADD5D11FB771E34A86E57ACE3EE86B3A1C17326EA51E32066FC4DF58F ] RzKLService     C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
16:43:25.0420 0x1be4  RzKLService - ok
16:43:25.0451 0x1be4  [ 6846C2035B4C56B488D2CE2C69A57261, 0B547368C03E0A584AE3C5E62AF3728426C68B316A15F3290316844D193AD182 ] rzpnk           C:\Windows\system32\drivers\rzpnk.sys
16:43:25.0467 0x1be4  rzpnk - ok
16:43:25.0498 0x1be4  [ 96C14A080CE15E4D8A9C7AE526F7B804, F8753CB05393EDDAC5FF99C5DAAFCF955C4CE8D14E065E9A7B4ED156BF9503D3 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys
16:43:25.0530 0x1be4  s3cap - ok
16:43:25.0577 0x1be4  [ 94E06D509D50807774F35BEE3163E806, ADADFA0D533944579BA0E5FE31A68D4D1395E7B9DB75E58D47E0ADC0DA5AD16C ] SamSs           C:\Windows\system32\lsass.exe
16:43:25.0592 0x1be4  SamSs - ok
16:43:25.0639 0x1be4  [ 324FA3C337EB54B43448F7B08444DC8D, 6AC6E84EBE169400D5CE140C7DC7F527D1A8F5B642593870AD7D1B193C21C7A3 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
16:43:25.0655 0x1be4  sbp2port - ok
16:43:25.0717 0x1be4  [ 93B12AC7CEAF6BA742DC13AEA349217A, BFDFF3779827B1FF39C5834D9248FFF162B9362F2F7FD8EF8750FD83F35E23D3 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
16:43:25.0780 0x1be4  SCardSvr - ok
16:43:25.0826 0x1be4  [ 3396A6A892987E8B81289583FC416360, E002C70A34C01B0F5EEA3D53A150DFB3693D1ABA63D61E7EEF3C5B6D5AC86215 ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
16:43:25.0889 0x1be4  ScDeviceEnum - ok
16:43:25.0920 0x1be4  [ 62A33CE69DB508BCEC63F4D3BFF400CE, 914FF18959025C71923558898F95B8113EE49930144A0B19FC06C5C043A171B4 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
16:43:25.0936 0x1be4  scfilter - ok
16:43:25.0998 0x1be4  [ B6F0D0C90C052BDB4E3EA7DAC982D72F, B34DFEC3565B8F33D919A6A6BBEC9315466E525E1B2F069968CBC9969EB9E05B ] Schedule        C:\Windows\system32\schedsvc.dll
16:43:26.0108 0x1be4  Schedule - ok
16:43:26.0139 0x1be4  [ 7B057373146CC4E5A1F1DA665EA55DC7, 48F1C276F99D4E135A261DDEFE2D813430DEFF6BA30FCBFFB102EA40EAD9434A ] scmbus          C:\Windows\system32\drivers\scmbus.sys
16:43:26.0170 0x1be4  scmbus - ok
16:43:26.0201 0x1be4  [ 6286CBE87B64AB7D1F59E3375A2FF3F4, 92C276A18F99D2A423BC3A99EBDA1239F3B335C1EB6EBAF2F2800A23188B26F2 ] SCPolicySvc     C:\Windows\System32\certprop.dll
16:43:26.0264 0x1be4  SCPolicySvc - ok
16:43:26.0311 0x1be4  [ 1F58E6D5C1F211DE8BF5131BF12077D1, 76816B302DB4D0B91FC8DEE6643C9839A48812DF1EE7D34100134550184AA2CB ] sdbus           C:\Windows\System32\drivers\sdbus.sys
16:43:26.0342 0x1be4  sdbus - ok
16:43:26.0373 0x1be4  [ 6D3853838864886B4F10B074282772E0, 50855299C5D7FBE0E45EE6288EA1B824215D3E3693F24F1AD2BB2F2E27F6150D ] SDFRd           C:\Windows\System32\drivers\SDFRd.sys
16:43:26.0389 0x1be4  SDFRd - ok
16:43:26.0436 0x1be4  [ 368180051766E4289E3D47AF21F2668C, AD1E675A990684F131F09E61988525102CDEDA0817A20F188FE9D2A428216BC2 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
16:43:26.0483 0x1be4  SDRSVC - ok
16:43:26.0514 0x1be4  [ 80E9563F0B75E98482ECB7D5CBA56BBA, D1121951117253CBA45DF3D4A9A50374F2FCF750CA6661299B8EBF78904245EA ] sdstor          C:\Windows\System32\drivers\sdstor.sys
16:43:26.0545 0x1be4  sdstor - ok
16:43:26.0561 0x1be4  [ 0356C85312D78F4C7F33C74B6000BB93, 378018A0ABDF65506B471F091DEF6A8E1D2E719BEBA843595C550E3151C9E6D6 ] seclogon        C:\Windows\system32\seclogon.dll
16:43:26.0592 0x1be4  seclogon - ok
16:43:26.0655 0x1be4  [ 2BBC2F0C8DF38DD72AF7EC97298101C0, 58A5226321CCB28FBC259C1D0DA1D3469DDA2C81BBE516F3ECC6C10BA2DD166B ] SecurityHealthService C:\Windows\system32\SecurityHealthService.exe
16:43:26.0701 0x1be4  SecurityHealthService - ok
16:43:26.0795 0x1be4  [ A8A23102301BCB047B269C59167D4B8F, 9851F4E693FE6BAC39ABF14A1469300D718019ABCAC39049A07E7809F7C253C0 ] SEMgrSvc        C:\Windows\system32\SEMgrSvc.dll
16:43:26.0905 0x1be4  SEMgrSvc - ok
16:43:26.0951 0x1be4  [ 62EDAD383010E037C4D3846C7C021A00, CF2C5D97B4B8C472242A1DCC1CB97A081BFDA41F5708CA78DC9B5041C9B747D9 ] SENS            C:\Windows\System32\sens.dll
16:43:26.0983 0x1be4  SENS - ok
16:43:26.0998 0x1be4  Sense - ok
16:43:27.0108 0x1be4  [ DDBBE9A08C79D3BB50D6053507F7777D, CA67D6FFCF63F38AAA320276F0AB96F87F6431907D2BC138E7EEE4530BE88AF1 ] SensorDataService C:\Windows\System32\SensorDataService.exe
16:43:27.0217 0x1be4  SensorDataService - ok
16:43:28.0858 0x1be4  [ 109A90EF5B1E771DA47C371BA9485960, 37BAECE685E79F37889CD0603F086341A5CA349E943D26CB991A7EFBD2998FAF ] SensorService   C:\Windows\system32\SensorService.dll
16:43:28.0936 0x1be4  SensorService - ok
16:43:28.0998 0x1be4  [ 3C7280B0BB401D6645128A9D5B076D35, 75EEAA870D027FAB9406AACE969D386DAA1C3A8933895424AB70350BD5F30227 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
16:43:29.0076 0x1be4  SensrSvc - ok
16:43:29.0108 0x1be4  [ 75A27472AFD009255DBDE52038E3BDB5, 95C31B86D77D73B340901D3BD9798A9E3171D4D3F3D4632FBE3F6AE2B49A17C7 ] SerCx           C:\Windows\system32\drivers\SerCx.sys
16:43:29.0139 0x1be4  SerCx - ok
16:43:29.0170 0x1be4  [ 84005F54308109A022413D628E966412, 6828A10DF28053C159E93BDD7A62A5517E7037DC302D0EEED55BF07B48E0A202 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
16:43:29.0201 0x1be4  SerCx2 - ok
16:43:29.0233 0x1be4  [ 40384793F74CFFA45BCC38DF65E978EC, FA68F18573CA92703A3442BB4BC5135C42520BA7D2C3E4B872115C02EE0A719E ] Serenum         C:\Windows\System32\drivers\serenum.sys
16:43:29.0264 0x1be4  Serenum - ok
16:43:29.0280 0x1be4  [ 699470AD24D67908991A777716A352FD, 6155D9785DF9A9346B715798A2C4A0F9B90D2AF725E710F127E06155272B406E ] Serial          C:\Windows\System32\drivers\serial.sys
16:43:29.0311 0x1be4  Serial - ok
16:43:29.0326 0x1be4  [ 92453F065F52A8EF0328A926B2C9502F, 11CF98993B00B4850C30528F0922BF392B8DE085AD84D17721964D543A41D64D ] sermouse        C:\Windows\System32\drivers\sermouse.sys
16:43:29.0373 0x1be4  sermouse - ok
16:43:29.0451 0x1be4  [ 846F99625DB02B06E0581715D0C4D0C9, EC72C2C860921A4234079D29C29D6F80F73B1D87610C6A4F0B1ABC948E532756 ] SessionEnv      C:\Windows\system32\sessenv.dll
16:43:29.0514 0x1be4  SessionEnv - ok
16:43:29.0530 0x1be4  [ 1D8920C40F19B5FBA5F4897779840AD1, 9B1DAFD92963118ACEA411224AA65C841D57D29F6F1EB69A58AB32BC5FEB1592 ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys
16:43:29.0545 0x1be4  sfloppy - ok
16:43:29.0608 0x1be4  [ F74C32575862D3F32B21A1A52E7763CA, A60DA54A99D489804575E271B57388F61A3C03A2B4F1798699E5385C12A85575 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
16:43:29.0655 0x1be4  SharedAccess - ok
16:43:29.0780 0x1be4  [ 63377493508564288721EF5421A216F5, 8D8F2CAD3608AE47AFEAA60C51E288EA622EC85B1CAA330CD226CA7A49F0F8E3 ] SharedRealitySvc C:\Windows\System32\SharedRealitySvc.dll
16:43:29.0842 0x1be4  SharedRealitySvc - ok
16:43:29.0889 0x1be4  [ 887458A234108B5B69038299BE7FAD88, B25780E36FCA373141EC129EC878AC0C2D560DFF62FEE3DFE332256C1FCDF579 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
16:43:29.0951 0x1be4  ShellHWDetection - ok
16:43:29.0998 0x1be4  [ 5ED18BE9FE76540A0596BB41C91719C6, 54B52E6EC059F48D2A4FEDC9D2B7B391A605F63CFC29C46A9FC5BA936EF3A72D ] shpamsvc        C:\Windows\system32\Windows.SharedPC.AccountManager.dll
16:43:30.0045 0x1be4  shpamsvc - ok
16:43:30.0076 0x1be4  [ A871F9CC9CF388DC7193D22EF8D8C8DF, D9E915F85E4FD993B04162B7D30BE6F230DD5464BBD75AE173255E59BA777067 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
16:43:30.0092 0x1be4  SiSRaid2 - ok
16:43:30.0123 0x1be4  [ D30FC341550CC364880950152AE8B1C5, BCCEB920C8DBCE061A62B0B7C91DA2981312DE9A8EC2D7398AE6009148603C77 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
16:43:30.0155 0x1be4  SiSRaid4 - ok
16:43:30.0186 0x1be4  [ ED2DA8C2F985BDAA3999FD70CE9B5285, 75EAC3C7A00947A61DFE8CD7E84C80A769C616912A88B0124F15C24156EF8111 ] smbdirect       C:\Windows\system32\DRIVERS\smbdirect.sys
16:43:30.0217 0x1be4  smbdirect - ok
16:43:30.0264 0x1be4  [ 9CA6E573757C76A515EFD6DD795A3A1E, E7F87EF70545ABA33171A5783439E6E7874A2CAEE0C7ECF384023FBDCD967743 ] smphost         C:\Windows\System32\smphost.dll
16:43:30.0326 0x1be4  smphost - ok
16:43:30.0389 0x1be4  [ F4B4E405BCDE95D748F8429FCC30E668, 72E675166B3E90D3FC23FD1AF1A3B201416294C962E0800707DCBA71DB9D7736 ] SmsRouter       C:\Windows\system32\SmsRouterSvc.dll
16:43:30.0451 0x1be4  SmsRouter - ok
16:43:30.0498 0x1be4  [ FDADDEC855034107E5FAD708B4E2424D, 1E3A07E0F67E23F32E046F516608D78299BA66BC647F6A6A240C77245FE3A7FF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
16:43:30.0576 0x1be4  SNMPTRAP - ok
16:43:30.0639 0x1be4  [ DA0AECA8222682F90C325E483E8115D4, 20CB647C132F20A3466C7C429057F01C4AC7A3D0E49B6C40206E61231EA05A54 ] spaceport       C:\Windows\system32\drivers\spaceport.sys
16:43:30.0686 0x1be4  spaceport - ok
16:43:30.0733 0x1be4  [ CCECE7E96B4F7B0E9F0FC82F6DADA917, 4C20D74971C7A822C51429BE960F85016B03166E05D43B29F5D290F413006C18 ] SpatialGraphFilter C:\Windows\system32\drivers\SpatialGraphFilter.sys
16:43:30.0780 0x1be4  SpatialGraphFilter - ok
16:43:30.0811 0x1be4  [ 545507AF670BC88B89200A118513ED9A, 1450D29E678F26B317D55BBF41E603296C5FBA54F956801D3E796808FFDCC0AD ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys
16:43:30.0842 0x1be4  SpbCx - ok
16:43:30.0905 0x1be4  [ FAEF35589C86C448F732926716956087, 6D370EA797617A3138FB15F285F08373299BE77B5C8CCD28BF559F17437E8A48 ] spectrum        C:\Windows\system32\spectrum.exe
16:43:30.0998 0x1be4  spectrum - ok
16:43:31.0076 0x1be4  [ 153F12DE99760ACC89F53848DED45679, 6C55023782082B4E5CB5E653C530A6CF0AF86D5D38566AA4C3A332534BE0EA7B ] Spooler         C:\Windows\System32\spoolsv.exe
16:43:31.0170 0x1be4  Spooler - ok
16:43:31.0405 0x1be4  [ CED434DA6E043B450141932D974FF8C1, 48704C2461D1019522F2F0F931B663EEE2E5E200949F63DA41ADA965B3612669 ] sppsvc          C:\Windows\system32\sppsvc.exe
16:43:31.0655 0x1be4  sppsvc - ok
16:43:32.0983 0x1be4  [ 09FADE98D187D1886950109E8AF083DA, 3CF285BEA351AC8E13708B2BE96F57B0D72CF92D667ED69138E2D5CC8FDC2B11 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
16:43:33.0076 0x1be4  srv2 - ok
16:43:33.0108 0x1be4  [ 43480B3EE4D23F5AA8EE7C6D83B09487, BDBF48060ECAE1CD5AB40DFF41C8E2499185BA690A19BCB87AE1D2A0613E33FD ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
16:43:33.0155 0x1be4  srvnet - ok
16:43:33.0201 0x1be4  [ 7B5E955BB63726AB625F79AA7AF7FA11, A5ED49F465BCB26C61F390018520BE97392BA9D85CC6A7C040BAA2D0EFF983FF ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
16:43:33.0248 0x1be4  SSDPSRV - ok
16:43:33.0280 0x1be4  [ 3BEF5FAC7F3DA3E25B80CC41B5060616, CAAB3CAF150F564964471F494F583014E5EF842BC4761A64B708842C4425753B ] SstpSvc         C:\Windows\system32\sstpsvc.dll
16:43:33.0326 0x1be4  SstpSvc - ok
16:43:33.0577 0x1be4  [ 0A86D5AF20A4EF70F7DE0FC9B6DE4D0E, 143CF06504FCD04D74D36642F9071D3EAE7B5B65CEB82C328F9EBBB898D90C49 ] StateRepository C:\Windows\system32\windows.staterepository.dll
16:43:33.0811 0x1be4  StateRepository - ok
16:43:36.0530 0x1be4  [ 162A805E13B3C0DD06AE8B6FC1900156, 43782D9136596365B87E7DF2046CC28C2AF9EC014308E1458E0315F7F6463B44 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
16:43:36.0561 0x1be4  stexstor - ok
16:43:36.0624 0x1be4  [ 3B3F5D6BB8A6A6F3630194A471989069, 0A5D586A1866113B94F5F11571506E133F64640DB38BEEDBE5489ED10314FA31 ] stisvc          C:\Windows\System32\wiaservc.dll
16:43:36.0702 0x1be4  stisvc - ok
16:43:36.0733 0x1be4  [ D218EA2F4126629BEAC03555216CB506, B2CDE7FAFD74E1EDFE213BCA84F84F081FF3718D70E3E614A8304A92FDEDEAEF ] storahci        C:\Windows\system32\drivers\storahci.sys
16:43:36.0764 0x1be4  storahci - ok
16:43:36.0811 0x1be4  [ 03B1F66AB47618A6123EB0631B57A31B, C06BD9D1648E56703067D5724B8AF898048A5D604B2560A69CF6B5CCF3651A66 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
16:43:36.0858 0x1be4  storflt - ok
16:43:36.0889 0x1be4  [ 15EA6F1F6BA9A0E2C8D32A6EB77129F8, 05E414CDCA79D97DA03F61BB268CC599DBD16F35FDA6D6628EB9FBD0170FF176 ] stornvme        C:\Windows\system32\drivers\stornvme.sys
16:43:36.0921 0x1be4  stornvme - ok
16:43:36.0952 0x1be4  [ 15599E47C28DC511F0CA3B664A257728, 2ED213F392D4C2B848187F0583C7AEE2A41A2AA1E4DE8AC85D45EFEB0A430593 ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
16:43:36.0999 0x1be4  storqosflt - ok
16:43:37.0077 0x1be4  [ BA9471C7B5B02F2EDF5055CC1A1476F3, D9BF3D2C5127E469BB037308114287686A9C3927396D64013007927C9A9716AB ] StorSvc         C:\Windows\system32\storsvc.dll
16:43:37.0171 0x1be4  StorSvc - ok
16:43:37.0202 0x1be4  [ 4D6FF8DDBF9CC61EC95A4BF4096D52FF, B78EDD3FB711412140C541EDF9468AB6DC1A82AEE207F22976E9C6B9722F7891 ] storufs         C:\Windows\system32\drivers\storufs.sys
16:43:37.0249 0x1be4  storufs - ok
16:43:37.0296 0x1be4  [ 6FD2D01E4AD9494874A3A8BA74A8FA64, AFEDB991465631F68F035B968345C4B700360F2F66543A48C75458D952E50B08 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
16:43:37.0311 0x1be4  storvsc - ok
16:43:37.0342 0x1be4  [ 587854AF01CABE83A62D81FFEEBCD6AA, 99103FCCFE18DA0EA0121A10BCB7DEB833DE2A5C4CB8BD70E4983C2274D469E6 ] svsvc           C:\Windows\system32\svsvc.dll
16:43:37.0405 0x1be4  svsvc - ok
16:43:37.0436 0x1be4  [ 027B27E4B9DB3931D64159B81BD915A0, B30BD828748205642529B6E528D12B16F86CA4F06F60C2C2E89AD7A97EB06B49 ] swenum          C:\Windows\System32\drivers\swenum.sys
16:43:37.0452 0x1be4  swenum - ok
16:43:37.0499 0x1be4  [ E0915F9B3C154FEF700C34A8E613B945, 172205D9DF0ABCC1F2B9484BA75A637BC0899CB42BFA5F0352B9C8E0CD6DDDA3 ] swprv           C:\Windows\System32\swprv.dll
16:43:37.0561 0x1be4  swprv - ok
16:43:37.0592 0x1be4  [ 3D63A58A9DD3F984A7E3C2F2CB357E06, F520333AFF9F8D37707A6B50A33B712B5AF114D12C8092D2DFB04F05F241B03E ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
16:43:37.0624 0x1be4  Synth3dVsc - ok
16:43:37.0686 0x1be4  [ D47B1A895DD6DAAE11DFD7A961E8E26C, EFB46E1BF68E050E8A135EBF5A3E395C168153E8A16CDDD266605985140E41CA ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
16:43:37.0749 0x1be4  SynTP - ok
16:43:39.0265 0x1be4  [ BC623F804B1C4EA9E825885FF240EA10, 8FBB9C16C3A83EB4E8DE085770AB516DEC7707423DC2581A5CE77C89704315BC ] SynTPEnhService C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
16:43:39.0296 0x1be4  SynTPEnhService - ok
16:43:39.0405 0x1be4  [ EE6CEBDB3C9AAD1C80AE32878FCD17C4, F172BE926BBDD8B11F641687FC5F9C062F322C43D08A5E1F189BCCB44CE3C4E4 ] SysMain         C:\Windows\system32\sysmain.dll
16:43:40.0843 0x1be4  SysMain - ok
16:43:40.0905 0x1be4  [ 74FFACDE32B58CCB74B9EF990C7757C0, 69AF6FF98C5793441CC46136AD99B05392974E2C0189C76066EA0DDEE8B5CF31 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
16:43:40.0968 0x1be4  SystemEventsBroker - ok
16:43:41.0030 0x1be4  [ 73F6476EE9F5448838B2883E0B710CD7, 0C2362C92A5CF8EBE428FC7C0399A8B6812CA42DD11D8669CB23FB10AC7B52AA ] TabletInputService C:\Windows\System32\TabSvc.dll
16:43:41.0093 0x1be4  TabletInputService - ok
16:43:41.0124 0x1be4  [ AC1AA61B04116E540C5AFD18F11F2697, D5ACC296853911E2C9A5E7B0B6F36AC4FA6B49417CB456D153427BCFD944C195 ] TapiSrv         C:\Windows\System32\tapisrv.dll
16:43:41.0171 0x1be4  TapiSrv - ok
16:43:41.0343 0x1be4  [ AE5CA8D3D81DCC76C5FFF1CD60E48606, 6FF9E019DF170CC44217BBB168E291C6F1EF4B73B154A125A89A0E2DD1721C3D ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
16:43:41.0499 0x1be4  Tcpip - ok
16:43:41.0718 0x1be4  [ AE5CA8D3D81DCC76C5FFF1CD60E48606, 6FF9E019DF170CC44217BBB168E291C6F1EF4B73B154A125A89A0E2DD1721C3D ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
16:43:41.0874 0x1be4  Tcpip6 - ok
16:43:41.0968 0x1be4  [ 74A1BF4093FA7B7D6C9366A39911A78E, E60694303A608EBFEAA5C581B312A212BC7081A4D67234F003917FA6E6A05F84 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
16:43:42.0015 0x1be4  tcpipreg - ok
16:43:42.0062 0x1be4  [ 09125A12CAB5F8D5EAE9C83C25792FDD, D3116D8F3CD5897F90126BF3847A2B301367D4698CA8AD30A313B39F804D3D4E ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
16:43:42.0108 0x1be4  tdx - ok
16:43:42.0124 0x1be4  [ B4B68E1DB59456419D9E49645729502A, A741EDEBCF5E8141BCC8867D5A62024425656432B6E6B0A0131B1B4AB878744E ] terminpt        C:\Windows\System32\drivers\terminpt.sys
16:43:42.0155 0x1be4  terminpt - ok
16:43:42.0265 0x1be4  [ 96037700AEE1B4D5A6FFC62861E4FF8C, E2E4D23525389C13126401215541F5625258DA18372CB5C98D0B95123A86ACFB ] TermService     C:\Windows\System32\termsrv.dll
16:43:42.0358 0x1be4  TermService - ok
16:43:42.0374 0x1be4  [ E0F78207F33D6C10CBFB23E873837C87, 55D4411A4070AFE81E576989D67DC411BAE39D9B90697E7646F07716EABE8EC1 ] Themes          C:\Windows\system32\themeservice.dll
16:43:42.0421 0x1be4  Themes - ok
16:43:42.0452 0x1be4  [ E7B4E9A568534F08BD6949D70E2C0118, D74DCC3C4E3159E09646EB147BF0B11BE5026F9594FCED7A234C71C31904EBE0 ] Thotkey         C:\Windows\System32\drivers\Thotkey.sys
16:43:42.0468 0x1be4  Thotkey - ok
16:43:42.0499 0x1be4  [ B52BA61AB8E4BAA83EA86BAB312EE6ED, D9A9D17FD222A67CA1906A422055718269929F0B33C7417F7D1F9447FD424683 ] TieringEngineService C:\Windows\system32\TieringEngineService.exe
16:43:42.0562 0x1be4  TieringEngineService - ok
16:43:42.0608 0x1be4  [ BC834B233125DBB321B809972F2E270E, 7085FAF5BC5E37E81E30345E984887E2D3F7657F87A23C0C1C0A4DFCD558BA55 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
16:43:42.0687 0x1be4  tiledatamodelsvc - ok
16:43:42.0733 0x1be4  [ EA80B2C811A7F6B1C9EED312F06F26FB, 7DC0A5C2F56C0FD0C4BE84EA09900DF20275A2FD63ADB9D8EE4CBF39E1E2A4F4 ] TimeBrokerSvc   C:\Windows\System32\TimeBrokerServer.dll
16:43:42.0796 0x1be4  TimeBrokerSvc - ok
16:43:42.0890 0x1be4  [ CB1F7C21C4A32594AFD217074B3E4650, 0EF0E5076F9C9B8111E1474CDE2A3BC1138546B842E68F89483E36DDA1C64354 ] TokenBroker     C:\Windows\System32\TokenBroker.dll
16:43:43.0015 0x1be4  TokenBroker - ok
16:43:43.0046 0x1be4  [ 6E240CDDCF456289A37BEEFCB44381EE, AC7C58183D2885BAE3285C62976F3618E1DCD73477EC7FFE72A86917D7932A8E ] tosrfec         C:\Windows\System32\drivers\tosrfec.sys
16:43:43.0077 0x1be4  tosrfec - ok
16:43:43.0124 0x1be4  [ F54728E32D67537C5A13454E23449C7A, F2FF6A36693EFE86B441134DF43327D2768D00A867059646F6CA93E10A682019 ] TPM             C:\Windows\System32\drivers\tpm.sys
16:43:43.0171 0x1be4  TPM - ok
16:43:43.0202 0x1be4  [ 39187852984778424A0EFD6B01FAB272, 2E7F7AEE8BAB1C6D8B880C28222EFFB721CFDA3B39215BB065088E396581ADA9 ] TrkWks          C:\Windows\System32\trkwks.dll
16:43:43.0233 0x1be4  TrkWks - ok
16:43:43.0312 0x1be4  [ 51480571DF1B3AAC2B7F6F2DFFBBF15E, 11D39AF99D37D23AD87151998A46A4F0A8C95834A0D51BBD8EF8B11EAA02CF85 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
16:43:43.0390 0x1be4  TrustedInstaller - ok
16:43:43.0421 0x1be4  [ 8D811209E34358EAD3FD8E40F657E59C, 1A40ED03C03C4FD87EBD166C0D87356F5036F04FBC1F9A600E92E2125B117DFE ] tsusbflt        C:\Windows\system32\drivers\TsUsbFlt.sys
16:43:43.0468 0x1be4  tsusbflt - ok
16:43:43.0483 0x1be4  [ 68DE1735FB020AE8948BD7B60F2EBD3B, 198EFA09C3FB57CD7C11F1AB91491E8FB8093F12DACE1B1AF1BDE50EBCD8EB43 ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys
16:43:43.0499 0x1be4  TsUsbGD - ok
16:43:43.0546 0x1be4  [ 32230D3F06B0874DFB727028CA4F6348, 8F50B556C38F736AAB8160912F0A3917BCA6396555D0DCB7A65B7FF0A8225416 ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
16:43:43.0593 0x1be4  tsusbhub - ok
16:43:43.0640 0x1be4  [ ACD39B0E5CFDA7B1AB7DF33FC5CC0E46, 89FE50DE5037770D568BA025A7EB06B5FAEA39A1EB97910319B942B02EFD14E5 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
16:43:43.0671 0x1be4  tunnel - ok
16:43:43.0687 0x1be4  [ 6A2A692F6A987D8C3BF758CA5A225BD1, 015A09D702277B6B79642227062D53ACA572E258E0C7FF6573A0E043C27531AD ] TVALZ           C:\Windows\system32\drivers\TVALZ_O.SYS
16:43:43.0702 0x1be4  TVALZ - ok
16:43:43.0749 0x1be4  [ D5E68FCEDE15214BDB5D986D5B50E0BF, D2FA040B4BF4424928ABFB0B8CCA768C8DC9BE3DA86A3C61B1CEE1A2C543FADC ] tzautoupdate    C:\Windows\system32\tzautoupdate.dll
16:43:43.0780 0x1be4  tzautoupdate - ok
16:43:43.0827 0x1be4  [ 04FC2C7F73AE58BF0DD674164E28A6DF, 513E98D6838008B6F97E895BCD639679276AD6A7F7E789A6F3D4E9F9781CA78A ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
16:43:43.0843 0x1be4  UASPStor - ok
16:43:43.0890 0x1be4  [ E437FC4B1833F6B745184F78C4921FB8, 171605C7BF95FE1F342B314A969ECBE0B0D04E67D1306F470B3424AB6DE1478D ] UcmCx0101       C:\Windows\system32\Drivers\UcmCx.sys
16:43:43.0937 0x1be4  UcmCx0101 - ok
16:43:43.0968 0x1be4  [ 950A3E42167904CAB9AA64863C31CEB5, FC31C3177EDA9FFD2CE51EB2B1E696E50FFB378973C3C001EE29265FED249353 ] UcmTcpciCx0101  C:\Windows\system32\Drivers\UcmTcpciCx.sys
16:43:44.0015 0x1be4  UcmTcpciCx0101 - ok
16:43:44.0046 0x1be4  [ F520EF2D24C1B43A2151DCA271865271, 5F9F4D82C5E6DBA8E0232DA05B30AE69BB43B66AA870584D2F9D740D61118A02 ] UcmUcsi         C:\Windows\System32\drivers\UcmUcsi.sys
16:43:44.0077 0x1be4  UcmUcsi - ok
16:43:44.0108 0x1be4  [ E6E91B3980A495D2A9D28A09580EA993, B4987D875A8AA176818C115844388EE64054411689B014ADEAC18164D02F6AE8 ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
16:43:44.0140 0x1be4  Ucx01000 - ok
16:43:44.0155 0x1be4  [ DACA289DFFA7658C04FEF6DCFA2AA9CE, 7BD32B5F395A8675D4B2BDCA75530F2FFA64ED87B2B67FDA08EF709A4EA15553 ] UdeCx           C:\Windows\system32\drivers\udecx.sys
16:43:44.0171 0x1be4  UdeCx - ok
16:43:44.0202 0x1be4  [ 12383D410AEF99AD6979A8EFD3D61888, 376929794A2A8B05DDB2EE93E58A3C3DA19855F5CBC8B29E208E28BF95970355 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
16:43:44.0249 0x1be4  udfs - ok
16:43:44.0265 0x1be4  [ AB7FE51D818B6059C2F56FA62268CCAC, D8412F13BFE0B96E0A9CCB5E25A567A66AE24983564D76954AA76DAF0A52726E ] UEFI            C:\Windows\System32\drivers\UEFI.sys
16:43:44.0280 0x1be4  UEFI - ok
16:43:44.0327 0x1be4  [ A6134CA92B545353EEB0420F36D39F1C, 2F100FC25ACF16948C9B95A7FAA5336B7C8E3CB571196B04D5DB8308D8C6C491 ] UevAgentDriver  C:\Windows\system32\drivers\UevAgentDriver.sys
16:43:44.0343 0x1be4  UevAgentDriver - ok
16:43:44.0437 0x1be4  [ 8899E490269C7634368B4FE6E77CFE8D, ADDA7FD2DE1C94F9F91DA9C248DEF1D253B807FB07549EF14774C5D0001C5B3D ] UevAgentService C:\Windows\system32\AgentService.exe
16:43:44.0546 0x1be4  UevAgentService - ok
16:43:44.0608 0x1be4  [ 58447F28E697A93521DD20530A8D50ED, BC166B829BA28DAEB8B113D5575D6A11BF81716B38797396496F4D2C2E537F23 ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
16:43:44.0640 0x1be4  Ufx01000 - ok
16:43:44.0671 0x1be4  [ 69ED2D00A7787D9D84E6C90CE0B02B2D, 55B137766D72BF5FFF645E8E76248FD15367DFDF7FFDABB9A9ECC27FD7555DD3 ] UfxChipidea     C:\Windows\System32\drivers\UfxChipidea.sys
16:43:44.0687 0x1be4  UfxChipidea - ok
16:43:46.0108 0x1be4  [ F061EC57330FBC597A4E7298BE667780, 0C32162782BAE9912373CA40A67567BAEF185173E033579C4833A91C11D83E2E ] ufxsynopsys     C:\Windows\System32\drivers\ufxsynopsys.sys
16:43:46.0155 0x1be4  ufxsynopsys - ok
16:43:46.0218 0x1be4  [ B26729B378282F72241859C13326E3E8, 859398D02E301B8C79078DB43E3BF9691EBA52DD0717868E27D2D6EF918098DD ] UI0Detect       C:\Windows\system32\UI0Detect.exe
16:43:46.0280 0x1be4  UI0Detect - ok
16:43:47.0687 0x1be4  [ D40BCED160D332005AF612E1228825E6, 72B7B89A3ED1D6846D004D9BDCAAF8F1D488C21A93A926FE158217B529B55157 ] umbus           C:\Windows\System32\drivers\umbus.sys
16:43:47.0749 0x1be4  umbus - ok
16:43:47.0796 0x1be4  [ 64CF24D7B1FA4975C52A31BF4C82EB73, 2F803884A417F2DD39A155D20EAA4D61D494E41B0F98760810EC5193B84DD425 ] UmPass          C:\Windows\System32\drivers\umpass.sys
16:43:47.0812 0x1be4  UmPass - ok
16:43:47.0858 0x1be4  [ E6B6BDA0412D3C56275E662A5A1937FD, CB971073A34CF3FA184B8E41308A14CFD5E22F48B01109E7531DF013EB5E05E7 ] UmRdpService    C:\Windows\System32\umrdp.dll
16:43:47.0921 0x1be4  UmRdpService - ok
16:43:48.0030 0x1be4  [ F0A388AA51F0DE22AA38A4BA9B04AD9E, 1B325D1BF2B041C33BF0336D9651A744AC0A9529085F898A3D90158784F26DC2 ] UnistoreSvc     C:\Windows\System32\unistore.dll
16:43:48.0140 0x1be4  UnistoreSvc - ok
16:43:48.0343 0x1be4  [ D2931E3F67A990328DE5CE7E43F4467C, 06BA872FB07CFDD14813963A06E01F225EFDF58A63D6B0A5AEF7872C7126DF54 ] upnphost        C:\Windows\System32\upnphost.dll
16:43:48.0421 0x1be4  upnphost - ok
16:43:48.0437 0x1be4  [ ACE4C3B4C7D17B154FFC5BBE5F7A9835, C330123EE9BF90518CCB7DA923ED32C0CFA9319C886D9ECA65E3B84E743CB145 ] UrsChipidea     C:\Windows\System32\drivers\urschipidea.sys
16:43:48.0468 0x1be4  UrsChipidea - ok
16:43:48.0499 0x1be4  [ ECE40EB976A5ACB366808AECF6B235BA, FA00D0A8EF1BCA0349DCA961F4093DF790E5031F91586050372029AA9A7726C5 ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
16:43:48.0530 0x1be4  UrsCx01000 - ok
16:43:48.0546 0x1be4  [ EB738F830D3E7EA62A218F101EF91FD4, 35B05845497448C0721377F0EDD7624A4043D0C6E91C5C1CB96853F2D3B16457 ] UrsSynopsys     C:\Windows\System32\drivers\urssynopsys.sys
16:43:48.0577 0x1be4  UrsSynopsys - ok
16:43:48.0624 0x1be4  [ B43E28E5CF868517EEC0923AB2BC366B, 01817474AFBC2199387F30F708DDD9458FB156EA4AECC8C3E2EBBCBF7A2BA857 ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys
16:43:48.0671 0x1be4  usbccgp - ok
16:43:48.0702 0x1be4  [ 1080D80B5F6D249F23BAE1C0C36233A4, 8EB810282DACCE101D4B5F70FEB450204359537098215DED1DBFF9E14B6F86D0 ] usbcir          C:\Windows\System32\drivers\usbcir.sys
16:43:48.0733 0x1be4  usbcir - ok
16:43:48.0749 0x1be4  [ EE162DA2C92026A5B96ED89737975AA8, A26E58C7BEE9B6F0F692A2649F258384E55523A64889E3B7D8EFD6D77753E243 ] usbehci         C:\Windows\System32\drivers\usbehci.sys
16:43:48.0765 0x1be4  usbehci - ok
16:43:48.0812 0x1be4  [ C27FEE9758E3BEDE4D48B5EDBE1122CF, 64F7215ADCA3DC1E2D8EF3E6C3579529605DF8F7A2161FB04B19182C828E54D6 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
16:43:48.0858 0x1be4  usbhub - ok
16:43:48.0905 0x1be4  [ DAB1695B400DE19A9DEA686022FD1544, 0D95745883C5D5828294D67297C4B7F5AA7DCF6D3DE412506EB6C0957F605F75 ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys
16:43:48.0952 0x1be4  USBHUB3 - ok
16:43:48.0968 0x1be4  [ 44B954306BB2B311E070EDA276FECAB1, 8F3C1FC07E2B8059E41AF3BD1CC03C67770B4FB403D79171CA075874721BBCAB ] usbohci         C:\Windows\System32\drivers\usbohci.sys
16:43:48.0999 0x1be4  usbohci - ok
16:43:49.0015 0x1be4  [ EEF26F9034F0608B93D4D239534BB0BA, 6B047603D4F86C12CF0B22F4260E8BC6A6FF0BEEC50C74E31CA3A4E86567F90D ] usbprint        C:\Windows\System32\drivers\usbprint.sys
16:43:49.0030 0x1be4  usbprint - ok
16:43:49.0077 0x1be4  [ E55C9AF5EE8905879048118824B06816, F431ABF555E09BE64AF7EA0B2573C7F5E5634408E03DC3FAC4A5CC7D48CAF0EC ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
16:43:49.0093 0x1be4  usbscan - ok
16:43:49.0124 0x1be4  [ 446F2908C891A583BEA930226E37036E, 830A0E9170B1BD58447EB12AAF7FA8B97B15F3D35DE53553CFC4A67620DA4619 ] usbser          C:\Windows\System32\drivers\usbser.sys
16:43:49.0187 0x1be4  usbser - ok
16:43:49.0234 0x1be4  [ 441CAE778B6A1FF6E618E37814A7A52A, 61DF48D662421F2149FA63187B2C8556A991BDA47EA75798BA86C572C432C1EB ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS
16:43:49.0265 0x1be4  USBSTOR - ok
16:43:49.0280 0x1be4  [ 2D6BB2157B37B2D9DABF8C218F2A805B, 5FCA03DCAE81F6B7A6EB63F13A361ED915D82635697DAA085A31D447C21C1B65 ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys
16:43:49.0327 0x1be4  usbuhci - ok
16:43:49.0374 0x1be4  [ 68788AE61B2E6A7D97CAD73B632F5BF5, 23F69D7398B1948492C88C610EAA76A72BA4CD93C795E575DDB1886321B30244 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
16:43:49.0421 0x1be4  usbvideo - ok
16:43:49.0452 0x1be4  [ F12FD012F562BF51B9720936918F926E, 5C0F781EAFFF2B2B3D5E693489C7E1B39AD293B49969E0AB0E5337FCABC4F96C ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS
16:43:49.0499 0x1be4  USBXHCI - ok
16:43:49.0624 0x1be4  [ DBB8DA23D912E799683A34BFBAE3EF70, FE7EAB44503C72EC3CD722617D04C0BF01EDFD2F5834C3D501538800E43C6B74 ] UserDataSvc     C:\Windows\System32\userdataservice.dll
16:43:49.0749 0x1be4  UserDataSvc - ok
16:43:50.0030 0x1be4  [ 29D52BDF7605DBD39C2D6D089E72C6F4, 500CBB6AD5B097525CD5DD70F127ED66BDE8E5608DAAC5067FA0F04DC1F00D06 ] UserManager     C:\Windows\System32\usermgr.dll
16:43:50.0124 0x1be4  UserManager - ok
16:43:50.0233 0x1be4  [ 6B4D6107EF3B2DDAB334896AE80C1CD6, 9DDA0DA34F29A63C5D040DE985769283D2B71031DF9A7FBFDFE9C14ED2AF0BF6 ] UsoSvc          C:\Windows\system32\usocore.dll
16:43:50.0358 0x1be4  UsoSvc - ok
16:43:50.0390 0x1be4  [ 94E06D509D50807774F35BEE3163E806, ADADFA0D533944579BA0E5FE31A68D4D1395E7B9DB75E58D47E0ADC0DA5AD16C ] VaultSvc        C:\Windows\system32\lsass.exe
16:43:50.0437 0x1be4  VaultSvc - ok
16:43:50.0468 0x1be4  [ BF13071600C1A0B090BEEC159A75B133, 78B239E5189B090D11A6C2CE19D8428CCCB03740CA22D00561E1BC9B5D609046 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
16:43:50.0499 0x1be4  vdrvroot - ok
16:43:50.0562 0x1be4  [ 07C192BEEA76B1BD9D0310ED20551D54, 0E8A90B2A228CEE94DBD193E7C6775A64C8BBEF70E318F2ECE935B6ED5B26638 ] vds             C:\Windows\System32\vds.exe
16:43:50.0640 0x1be4  vds - ok
16:43:50.0687 0x1be4  [ 9D4EEE333603F3675685F644053499D5, 545A21F86C8CD64B556DE688B31DDB157863766D53E52DE443B881D267223578 ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys
16:43:50.0718 0x1be4  VerifierExt - ok
16:43:50.0765 0x1be4  [ 274D49BBF0F3C7F193BFC13434F2F08C, B8F56DDBE61D1A6EC0967C5543A1772BEA6E7E9D4923F6DE5A09CD43AC7CDBE3 ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys
16:43:50.0827 0x1be4  vhdmp - ok
16:43:50.0858 0x1be4  [ E10FEBB566E1F0A3936AB304F338637E, 01B344061F2A8802EE88F584CF583DCECA478823A0D37C41D90340E4E2FBC43F ] vhf             C:\Windows\System32\drivers\vhf.sys
16:43:50.0874 0x1be4  vhf - ok
16:43:50.0921 0x1be4  [ 3093314480D83FB733A6069AB12D3DA1, 9056C57A56D151E3AF456FDD843F9BD7727E12B59EB09C423196F23609EA7F42 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
16:43:50.0937 0x1be4  vmbus - ok
16:43:50.0968 0x1be4  [ 12723C0F54432B4A98702110B344B030, DFAA6FC88F6EC7A540B5AAE930A591DD59E844630A6B03DEEA31126EAAEA256E ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
16:43:50.0999 0x1be4  VMBusHID - ok
16:43:51.0030 0x1be4  [ BCD144BFA4E13E0F74D852ADF283626E, 7423E69CECC2791DF814ECA6464C522BB914F7F6B0178C1A9881CBF56A1F8E1C ] vmgid           C:\Windows\System32\drivers\vmgid.sys
16:43:51.0093 0x1be4  vmgid - ok
16:43:52.0530 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmicguestinterface C:\Windows\System32\icsvc.dll
16:43:52.0593 0x1be4  vmicguestinterface - ok
16:43:52.0608 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmicheartbeat   C:\Windows\System32\icsvc.dll
16:43:52.0655 0x1be4  vmicheartbeat - ok
16:43:52.0671 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmickvpexchange C:\Windows\System32\icsvc.dll
16:43:52.0718 0x1be4  vmickvpexchange - ok
16:43:52.0765 0x1be4  [ F03A5454EAE669167639CA3F2EDF73B1, 03D9A033B694BF95AC04355EB54B72030372880E0EF63C4A6D6A2A10F571AFEA ] vmicrdv         C:\Windows\System32\icsvcext.dll
16:43:52.0843 0x1be4  vmicrdv - ok
16:43:52.0874 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmicshutdown    C:\Windows\System32\icsvc.dll
16:43:52.0905 0x1be4  vmicshutdown - ok
16:43:52.0937 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmictimesync    C:\Windows\System32\icsvc.dll
16:43:52.0968 0x1be4  vmictimesync - ok
16:43:52.0999 0x1be4  [ 16071A66A9313085B54037B5D7D1C353, 613FAB4F93FA1C33D6303C5712B516AAFB1DACDAB712F7F52A34D7CD558183BE ] vmicvmsession   C:\Windows\System32\icsvc.dll
16:43:53.0030 0x1be4  vmicvmsession - ok
16:43:53.0062 0x1be4  [ F03A5454EAE669167639CA3F2EDF73B1, 03D9A033B694BF95AC04355EB54B72030372880E0EF63C4A6D6A2A10F571AFEA ] vmicvss         C:\Windows\System32\icsvcext.dll
16:43:53.0108 0x1be4  vmicvss - ok
16:43:53.0124 0x1be4  [ D81F6B790519A60F3D1788B45D04B749, 7607DBA77412127C4968D3B6C4FD25F8C286A22DDDD9C78BDC54DF3A4C98AA8E ] vnvdimm         C:\Windows\System32\drivers\vnvdimm.sys
16:43:53.0171 0x1be4  vnvdimm - ok
16:43:53.0218 0x1be4  [ 4F91CD6C36DF2FDB91390082A116E602, 47AD91A097B1A6769A3EBB53EF1DE861420BC3E208F148CDAA04E3B4276F0C92 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
16:43:53.0249 0x1be4  volmgr - ok
16:43:53.0280 0x1be4  [ 6D6CACED512C1EF1FEAC215E37E3A9BC, 11B26DA5AB0C3736E2B8ADF3E06BFF3FD7853F9D6A948EA15ADC8B7D230062D4 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
16:43:53.0312 0x1be4  volmgrx - ok
16:43:53.0374 0x1be4  [ 5B27846CF4B1C21AFB3A35A8336BA02F, 0481F605776B638CCE855525DF605288AB4ECA87FCB4B6E668B60E3DFD120EF2 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
16:43:53.0405 0x1be4  volsnap - ok
16:43:53.0421 0x1be4  [ 72A95A844D6BAF2924A4C15BEDFD6BCA, AB9F8C77A077C9E95061D562F516793E547BC276926E1895A186A39317F21BA1 ] volume          C:\Windows\system32\drivers\volume.sys
16:43:53.0437 0x1be4  volume - ok
16:43:53.0468 0x1be4  [ 9198C53EE69D942217E2ACC29A01D605, 4F4742EC69DEF6485FECD60F0EB3C7DBBCB78E706C85319CAC8FFC40D3C27780 ] vpci            C:\Windows\System32\drivers\vpci.sys
16:43:53.0499 0x1be4  vpci - ok
16:43:53.0530 0x1be4  [ 075CE3C9E77D2666AFA888951E5F07A9, 264EDD6301851A41FB2233DC9BFC357EE5B60BEC1A04578FD7A576BA145E2A31 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
16:43:53.0562 0x1be4  vsmraid - ok
16:43:53.0671 0x1be4  [ 53B56525785DDBBF34956948A08F6491, 799759ACDF514F195A6C9DACBA966866E9012AA862B45D2E27D345D5901B7924 ] VSS             C:\Windows\system32\vssvc.exe
16:43:53.0796 0x1be4  VSS - ok
16:43:53.0874 0x1be4  [ 26D00E85BE4726B114335250FCDEDA89, BA1E3EC92786A17B99BF6544FD76F0458DAC2810D2A3B0785AC2B066079D5B09 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
16:43:53.0921 0x1be4  VSTXRAID - ok
16:43:53.0968 0x1be4  [ 3DFDB573E4D49EA8F416B573525B7A86, 9951D34FF0B98CA562EC0D81E23DA81BF5E5E6B4F5C274BC8E258BAE5E69DF8D ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
16:43:53.0983 0x1be4  vwifibus - ok
16:43:54.0015 0x1be4  [ A40FA64655AB5B8773A96A821616C5FC, 221063771A70CD6238D5DD816EC99BFFE31418EDA08E2270D864554234271087 ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
16:43:54.0030 0x1be4  vwififlt - ok
16:43:54.0062 0x1be4  [ 0D34F98DBDF09D239533AC345C360F03, 503F6826443560C65FC281E41E91C5EBBEFFC937C975FA4CBBF5F5FC34EC3E4B ] vwifimp         C:\Windows\System32\drivers\vwifimp.sys
16:43:54.0093 0x1be4  vwifimp - ok
16:43:54.0140 0x1be4  [ A17A4F2823C5424C9B8B990644817DC0, D8CE6FC8B6B5BB89968D83AC3DC054C35BD16880D0B321B64799DA1830C2B626 ] W32Time         C:\Windows\system32\w32time.dll
16:43:54.0202 0x1be4  W32Time - ok
16:43:54.0233 0x1be4  [ 5B5430522E0BDF2A753D758710BE7C5E, 1476C664EFCE7A2FEE738BB767D3E2EABBEF19F1037D383140BC01F92E154039 ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
16:43:54.0265 0x1be4  WacomPen - ok
16:43:54.0312 0x1be4  [ 451D40C28E7D1CF51A980B83FDEFF498, E6CEEB222A1C0D97E53DCFC2E22084FD4547A8CE3C16A54DD49622F524BF48CE ] WalletService   C:\Windows\system32\WalletService.dll
16:43:54.0483 0x1be4  WalletService - ok
16:43:54.0546 0x1be4  [ E77B19FF6C2FFA5B19CDF62DA4953BC9, 2D93403BCB2A44F9CF110C1EF99C1C79D2BBB8068CCCA7C30B6606C1190F6C98 ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
16:43:54.0640 0x1be4  wanarp - ok
16:43:54.0655 0x1be4  [ E77B19FF6C2FFA5B19CDF62DA4953BC9, 2D93403BCB2A44F9CF110C1EF99C1C79D2BBB8068CCCA7C30B6606C1190F6C98 ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
16:43:54.0702 0x1be4  wanarpv6 - ok
16:43:54.0733 0x1be4  [ E3B4C37F1F3D8078AA2AFBEE7F5468CF, E620DC9F5AAAE9652E3B742BBF4D671F04D623F657959C98F2230CEF26086CDE ] WarpJITSvc      C:\Windows\System32\Windows.WARP.JITService.dll
16:43:54.0765 0x1be4  WarpJITSvc - ok
16:43:54.0890 0x1be4  [ 1C1EB9C4DAF428B3BFDD58572768182C, 99F429EB8C2DEC185124B8811AF96D30E963E2F71CC7184AF8650805818B52E4 ] wbengine        C:\Windows\system32\wbengine.exe
16:43:55.0015 0x1be4  wbengine - ok
16:43:55.0108 0x1be4  [ A0B4836C489C2535795C4E71E378AD07, 39A511EE1FFFD956496768A1D1453E503C911DE512EBCAECFCDFC0B8E3A8544D ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
16:43:55.0218 0x1be4  WbioSrvc - ok
16:43:55.0249 0x1be4  [ 0610F02EC87DBF6BA319CB1D6B8771AE, CCD9E8A028F091907BC30619ACA126F9FBA448A69124E53EF905978E3B5734F8 ] wcifs           C:\Windows\system32\drivers\wcifs.sys
16:43:55.0280 0x1be4  wcifs - ok
16:43:55.0343 0x1be4  [ A616F82723F181A850C9E22E5D1AF2EB, 5A439FCADBB277EF497F6B590192C6AAB361D1D013D4C461D3A5620FCD263174 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
16:43:55.0437 0x1be4  Wcmsvc - ok
16:43:55.0483 0x1be4  [ 505E50A4819CF28DCE8176DB15952D49, 6003C93FB0997A9FFD5CBE9BD18C86B08594AD56D70AD93F72FB67C5F6D7666A ] wcncsvc         C:\Windows\System32\wcncsvc.dll
16:43:55.0562 0x1be4  wcncsvc - ok
16:43:55.0593 0x1be4  [ 87F462C7D37F380187BE12F079F73216, 4025B95FAF4751633E9DD9BA9312274E99778EEBADC8EA37D5E179A41C1EE344 ] wcnfs           C:\Windows\system32\drivers\wcnfs.sys
16:43:55.0624 0x1be4  wcnfs - ok
16:43:55.0671 0x1be4  [ DD2214F899E204ADE6820D387CCA7851, 7A9A20455080742060313BD19C8491C57F905D1CDB3A1853AEEE4F4AD498FD71 ] WdBoot          C:\Windows\system32\drivers\wd\WdBoot.sys
16:43:55.0687 0x1be4  WdBoot - ok
16:43:55.0765 0x1be4  [ FCC960498E3CD899F0A429F7CF9E77AD, 91FB3B6AF1522754E6ECF5D0CD146B1D06F657D06E6D9D917F55A3789A92D8EB ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
16:43:55.0843 0x1be4  Wdf01000 - ok
16:43:55.0874 0x1be4  [ 52A152D8C2AE3824BCFD5F87BE45AA40, A31BFD18C6087E8694CA5EF9C0C36D6BB27A01E14A07255EF1D7B6BA838AF0AA ] WdFilter        C:\Windows\system32\drivers\wd\WdFilter.sys
16:43:55.0910 0x1be4  WdFilter - ok
16:43:55.0941 0x1be4  [ AB406F30BE98CDB7AA7171336EF031BA, 912137DE2DF4BE3B9D777E6F19B99FC233D0CE2CCE97B98AF885CC728AC78721 ] WdiServiceHost  C:\Windows\system32\wdi.dll
16:43:55.0992 0x1be4  WdiServiceHost - ok
16:43:55.0992 0x1be4  [ AB406F30BE98CDB7AA7171336EF031BA, 912137DE2DF4BE3B9D777E6F19B99FC233D0CE2CCE97B98AF885CC728AC78721 ] WdiSystemHost   C:\Windows\system32\wdi.dll
16:43:56.0041 0x1be4  WdiSystemHost - ok
16:43:56.0127 0x1be4  [ 394CCCA2A8C04BA14327636F20AB9DAD, E14C82C255517CCA4DECEF1A1DA3B1115D5E7AA98838D2B9848E150ADCDCEC34 ] wdiwifi         C:\Windows\system32\DRIVERS\wdiwifi.sys
16:43:56.0193 0x1be4  wdiwifi - ok
16:43:56.0228 0x1be4  [ 06C4A87BD6F5FFB3B879435685508BBA, 783A81447309D24AF7BBE31CBF99F533DC8D6EB1F386539FC787929B12AA301B ] WdNisDrv        C:\Windows\system32\drivers\wd\WdNisDrv.sys
16:43:56.0244 0x1be4  WdNisDrv - ok
16:43:56.0337 0x1be4  [ AA1777BD954D6855C8AE5398C305CA64, 1589FB96D0A6D8674ED18FFA34CD21363DD544D2BDC4DDBD2BFF6DFE1339EC30 ] WdNisSvc        C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe
16:43:56.0384 0x1be4  WdNisSvc - detected UnsignedFile.Multi.Generic ( 1 )
16:43:56.0525 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:43:56.0525 0x1be4  WdNisSvc ( UDS:DangerousObject.Multi.Generic ) - infected
16:43:56.0525 0x1be4  Force sending object to P2P due to detect: WdNisSvc
16:43:59.0400 0x1be4  Object send P2P result: true
16:43:59.0760 0x1be4  [ DF58AA71FBA55E15F572C93447696DEC, F20C93140A44C1E61B5544FC8B3A1145E9ED57B2F09881719F4B2853B4900891 ] wdnsfltr        C:\Windows\system32\drivers\wdnsfltr.sys
16:43:59.0822 0x1be4  wdnsfltr - ok
16:43:59.0869 0x1be4  [ 36947722152A5C5CE9CAA33AD84ACCB5, 8B6E7D7BC091DDCA6AF90ED100AAEDACCE9110179BAD5E444D6788E52C68F461 ] WebClient       C:\Windows\System32\webclnt.dll
16:43:59.0916 0x1be4  WebClient - ok
16:43:59.0947 0x1be4  [ 7997BC2386A9976C0645A28FA8A6E7EA, ABE47A6132B7651EA2055F97E7BD9D596906086BCD726147449D4378C7E4F9B9 ] Wecsvc          C:\Windows\system32\wecsvc.dll
16:43:59.0994 0x1be4  Wecsvc - ok
16:44:00.0009 0x1be4  [ CEA146E0D096A491B265CD2340C2E31D, 285BA0D58E6E93FEB0D8F33738C6A223D7269378B3E77A7760D7131E43DEBE7C ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
16:44:00.0041 0x1be4  WEPHOSTSVC - ok
16:44:00.0072 0x1be4  [ 40610BA98D5830FB14C3695B3BCA647A, 6E047D04DDD9DCB142572CEAB5E73585062205BABE510C5B0D63800B2A9D251A ] wercplsupport   C:\Windows\System32\wercplsupport.dll
16:44:00.0103 0x1be4  wercplsupport - ok
16:44:00.0134 0x1be4  [ AA2B3154D12ABE34640C866AC3472E33, 32EBA0B999FDA77E6828274FE49A7619B97471BF828B18BF55BDAE19FB10DC6A ] WerSvc          C:\Windows\System32\WerSvc.dll
16:44:00.0197 0x1be4  WerSvc - ok
16:44:00.0244 0x1be4  [ 86B816E9D24625287BDE9784953A5E86, BCA73B320100D7C1052751D7FA42990579B6BA5908E31B2212BFE75681B32D3F ] WFDSConMgrSvc   C:\Windows\System32\wfdsconmgrsvc.dll
16:44:00.0306 0x1be4  WFDSConMgrSvc - ok
16:44:00.0369 0x1be4  [ C82198D3B33854D9578F9B09025E4293, E4CEEC078B2EE56186D75AE762D6511F3AF88C41C52039710D06CB2945C1B397 ] WFPLWFS         C:\Windows\system32\drivers\wfplwfs.sys
16:44:00.0416 0x1be4  WFPLWFS - ok
16:44:00.0447 0x1be4  [ F78A2731EC972312C4C998174A9BB325, 72CCA57EB6383F65683C276337F53AB38BC398CEA69E53D6E2867D5EE8B4B007 ] WiaRpc          C:\Windows\System32\wiarpc.dll
16:44:00.0494 0x1be4  WiaRpc - ok
16:44:00.0525 0x1be4  [ C8D3FC38426E990E2787771678B19C6D, FB6CA9A5BF3935793CD8B2F288FAC0C675B333D4F7393FA02244E3BCC2E25625 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
16:44:00.0541 0x1be4  WIMMount - ok
16:44:00.0572 0x1be4  [ 98870B00750D73105EAD96AE8A9C2ACE, B7D006E0C38FA9294936F2370EB45E032B6356A4C350E257451125F040539913 ] WinDefend       C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe
16:44:00.0619 0x1be4  WinDefend - detected UnsignedFile.Multi.Generic ( 1 )
16:44:00.0869 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:44:00.0869 0x1be4  WinDefend ( UDS:DangerousObject.Multi.Generic ) - infected
16:44:00.0869 0x1be4  Force sending object to P2P due to detect: WinDefend
16:44:01.0400 0x1be4  Object send P2P result: true
16:44:02.0306 0x1be4  [ 4499AB24236526E5CFCE817CD02EC034, 5D8666B2EEBAD0CDD70E43F83540C738333CFC5124C74432E7AB677504A48688 ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
16:44:02.0338 0x1be4  WindowsTrustedRT - ok
16:44:02.0369 0x1be4  [ 813EE0F4D4B8D599DB1968682D080732, A3EF1BBB866F5A7C1B5303BBF6E805B35739602CA7F244C076A8BF90F1CB2952 ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
16:44:02.0416 0x1be4  WindowsTrustedRTProxy - ok
16:44:02.0494 0x1be4  [ A6779AAAFCCF789782A78622B1076DD2, DF8EE65AA04DB4CC500945B7C26BA8C2F063B4E3B46F8F5FA207C72D0C0EB505 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
16:44:02.0572 0x1be4  WinHttpAutoProxySvc - ok
16:44:02.0603 0x1be4  [ E23475E9150E6A50B12DB176EA5CDD56, 25699796948D4679D0C1633C726C3CDF052F877AAA18CD7D069F95A88701CB73 ] WinMad          C:\Windows\System32\drivers\winmad.sys
16:44:02.0619 0x1be4  WinMad - ok
16:44:02.0697 0x1be4  [ 0FBD5D358094E254A1508832D4042FF7, 4EC4DB3B03BE1518BB38D4F3BF79A77D1BCA5A2DE9BA5F9C9312606E4E2A14E9 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
16:44:02.0759 0x1be4  Winmgmt - ok
16:44:02.0822 0x1be4  [ 90DBE4DB3A8266C6E078EF6682E26B91, 432AAEDE3628EAD3F844D3CBBA0AAA6AFDD04CAB04EA7871689D7FD394F25EC1 ] WinNat          C:\Windows\system32\drivers\winnat.sys
16:44:02.0900 0x1be4  WinNat - ok
16:44:03.0103 0x1be4  [ C2A88E382CD48E4772A5570D66BF1A90, F1BFB1873FB1E37DAADE923FC30265C72018CF2003B0A5E0E5896167D1680D01 ] WinRM           C:\Windows\system32\WsmSvc.dll
16:44:03.0322 0x1be4  WinRM - ok
16:44:04.0666 0x1be4  [ E92F3539C4758F6A9F4B80CBAC75B3E6, 9CF9069B9A738E86181FB02904720B2A88353574F35BDC298A2EB697D22B7723 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
16:44:04.0728 0x1be4  WINUSB - ok
16:44:06.0135 0x1be4  [ 59126AFCC64270747B5CC9B44A4A48F4, C0C1E6B248E725FE02B58151838AAC8841FB70B673A2B6EFB49EEA96E7F1C1DA ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
16:44:06.0166 0x1be4  WinVerbs - ok
16:44:06.0228 0x1be4  [ 0A3ADAA0EFAFA26CA8570E24A13CE484, 2B7FA1ADD904962F296111F555F4BB45A3BA77B6961DABC502B6DDC4E9324CEB ] wisvc           C:\Windows\system32\flightsettings.dll
16:44:06.0322 0x1be4  wisvc - ok
16:44:06.0494 0x1be4  [ AA11D9AEF05DE5BF7371005E6C03798C, 32003C63D3EB60D9B3F2F249873047C6C510E9195FAFE145B1CDB5C9F0358026 ] WlanSvc         C:\Windows\System32\wlansvc.dll
16:44:06.0681 0x1be4  WlanSvc - ok
16:44:06.0869 0x1be4  [ 717FE96AE0988B1F443EED06E6A703D4, 970B840576ACE0B34F5AF0B6E01F200A2DA51C250823676E1685B75610CB0508 ] wlidsvc         C:\Windows\system32\wlidsvc.dll
16:44:07.0166 0x1be4  wlidsvc - ok
16:44:07.0275 0x1be4  [ 56E1A46DD1C5D28B10F02E21D077EBF6, CC9AADBBBA03E162948EE39CCAAFD0A43253C86F5B875765748B73A084DC4B25 ] wlpasvc         C:\Windows\System32\lpasvc.dll
16:44:07.0400 0x1be4  wlpasvc - ok
16:44:07.0416 0x1be4  [ E8C793ED028E132771988760819E3754, 7BC02774EEDF4B884181854BEADF2DCAC615BA3ED7F1551C0863B79E009E3043 ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys
16:44:07.0447 0x1be4  WmiAcpi - ok
16:44:07.0478 0x1be4  [ 4D69FE18CD4BE7DCE3BDE57B86426EA3, C1580315758FEC14D209F7C232E6D70BCCD375D68CB5967DA055ACC5A52A20F0 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
16:44:07.0525 0x1be4  wmiApSrv - ok
16:44:07.0556 0x1be4  WMPNetworkSvc - ok
16:44:07.0587 0x1be4  [ 8D6E6F6C233AF450C50FA615530B44D2, 1BF6CD93B97920500F5FD0E9D8395ACCAAA2D126FD9C256148797B292D5F9A6C ] Wof             C:\Windows\system32\drivers\Wof.sys
16:44:07.0619 0x1be4  Wof - ok
16:44:07.0728 0x1be4  [ 1431D184691F7FA9AAC2064EB0EC6C96, 6185E5AB281327563DC4E87526B37792A9B4B86C65D5BADDBB1DBA6A50FC9134 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
16:44:07.0884 0x1be4  workfolderssvc - ok
16:44:07.0916 0x1be4  [ AE9793230B219113DE1163138645E5AE, 9CBC10269D847E4EFCF8B412D34B9551594396390BF5BFDEED03DBFB84D7174F ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
16:44:07.0947 0x1be4  WPDBusEnum - ok
16:44:07.0994 0x1be4  [ 9EAE1EF282864674355B4B81DF6AE935, 781CED5AE95D365BB59769517FA9462EFC6472ED4EB08C98EC66CE3E17C66D69 ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys
16:44:08.0025 0x1be4  WpdUpFltr - ok
16:44:08.0072 0x1be4  [ C75B59E441206A572CC64BBB60EE54B3, C43A3109EAB89B6A23E033C127F1B5586651A1A3A1C4D45ECFBF0ABE472FEBA1 ] WpnService      C:\Windows\system32\WpnService.dll
16:44:08.0134 0x1be4  WpnService - ok
16:44:08.0150 0x1be4  [ 07F4AF1730D55567EACE7ADDEA28FE48, 256671C52C350E42662DC590AE36BAFD06E9507551C39575BCD894D8FD040129 ] WpnUserService  C:\Windows\System32\WpnUserService.dll
16:44:08.0181 0x1be4  WpnUserService - ok
16:44:08.0212 0x1be4  [ 367B3ED0C688AFE28C376B0230814567, 1E7419254852A70AEAA30DF0F85C4E489591E5A0E90256C40676F712D45960CA ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
16:44:08.0244 0x1be4  ws2ifsl - ok
16:44:08.0275 0x1be4  [ 95E6DA58562C14947935B1C5D393A7F0, B9F0F8B2F50B48125B89BF61B3229317E918619B6A9D47FF0B368A87EE0CE734 ] wscsvc          C:\Windows\System32\wscsvc.dll
16:44:08.0322 0x1be4  wscsvc - ok
16:44:08.0337 0x1be4  WSearch - ok
16:44:08.0525 0x1be4  [ 7A9DB470C8810BF01344160EBA405632, 6BC37F537C28DC7F5B283741309C4EC0EE16B16B262D6A686EA6348ED7174C08 ] wuauserv        C:\Windows\system32\wuaueng.dll
16:44:08.0806 0x1be4  wuauserv - ok
16:44:08.0838 0x1be4  [ BD5E68B369DF3453A0A87663C6C5476D, 17B766ADB299D247EF9D4554F86015B38A89AE5C0310A36E1FCB0AC28462CE96 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
16:44:08.0900 0x1be4  WudfPf - ok
16:44:08.0916 0x1be4  [ A86A249314FD0A780214028B0C31A386, 71D0A346DA228EFD44F2D63765A01B59B305EC753C172730096F143F3A4D62F0 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
16:44:08.0963 0x1be4  WUDFRd - ok
16:44:08.0994 0x1be4  [ A86A249314FD0A780214028B0C31A386, 71D0A346DA228EFD44F2D63765A01B59B305EC753C172730096F143F3A4D62F0 ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys
16:44:09.0025 0x1be4  WUDFWpdFs - ok
16:44:09.0134 0x1be4  [ 02DCDAE63AB343418D7420D481FE839C, DBFD3C9EF34645EB3A11107760C8298590368A2E815695B857CCF653910265A7 ] WwanSvc         C:\Windows\System32\wwansvc.dll
16:44:09.0259 0x1be4  WwanSvc - ok
16:44:09.0431 0x1be4  [ 42C738ED1552FE168F6EE1BAE8ACFCAC, 01E9CD1FA7935DD442A2EBFC93E4BDDF204F995379FCAFFEADAF0BF6638AB925 ] xbgm            C:\Windows\system32\xbgmsvc.exe
16:44:09.0494 0x1be4  xbgm - ok
16:44:09.0588 0x1be4  [ A03C4D4D71304087820A0EF18FCF7582, F92737321A5082A72F20491810A09D249F0676F0F12478A2C81ADF9B2F79BAB0 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
16:44:09.0697 0x1be4  XblAuthManager - ok
16:44:09.0775 0x1be4  [ 77ADC2F5DBE303EF8B8D2D08AEE3F3DB, 65128FB8561EF1BE4E3CAA3B0D873FEA3A218E3CF90527068C43F6E549ECB188 ] XblGameSave     C:\Windows\System32\XblGameSave.dll
16:44:09.0884 0x1be4  XblGameSave - ok
16:44:09.0916 0x1be4  [ 2244A4CEFE8F9C74091369ACE2E9EBC6, 48F59F36EBA0434BED00B53321107C0BDFF20131683D5E6BC7A9F5DA0B8B6929 ] xboxgip         C:\Windows\System32\drivers\xboxgip.sys
16:44:09.0963 0x1be4  xboxgip - ok
16:44:09.0978 0x1be4  [ 1A9550D746B8604D37A90436EF686777, 3DBF305C228D28A3C4FC48F65CC38BDBFEE6B7995CEE8319E680E073978CA58B ] XboxGipSvc      C:\Windows\System32\XboxGipSvc.dll
16:44:10.0025 0x1be4  XboxGipSvc - ok
16:44:10.0103 0x1be4  [ 4951DD543AA2710760D90A58261ED665, 37D08FA58147A6606E69DB39405898D82BC40420F8FFB0BD097694A53E60AD1D ] XboxNetApiSvc   C:\Windows\system32\XboxNetApiSvc.dll
16:44:10.0197 0x1be4  XboxNetApiSvc - ok
16:44:10.0213 0x1be4  [ 4A91B49C6B1E41151D47CB919ADF013A, 4DA1E3F50B2D63AFD2F7A014E3C0420C1E7DEDE96A48EEC33C53023D88F9AAFF ] xinputhid       C:\Windows\System32\drivers\xinputhid.sys
16:44:10.0244 0x1be4  xinputhid - ok
16:44:10.0259 0x1be4  ================ Scan global ===============================
16:44:11.0744 0x1be4  [ EB45383BE9D7ECB36D55B262E0D8EB46, DC975066C426B5FBBFA3A4254D1D97DBF889B6BFD062D9FF1892F66C0CFF2DE3 ] C:\Windows\system32\basesrv.dll
16:44:11.0791 0x1be4  [ B7147831151D5519E5A80CC71CA1F73D, 2862ACE7D2672399B4E0CD0D0275301BD63BFE16E4680A09F5DFDFCFBB7187BF ] C:\Windows\system32\winsrv.dll
16:44:11.0853 0x1be4  [ 9451BA31B1DC19CED2608D82863C6486, 888F8676086DD8338445C35A64106E01122881FD08858D3996470EBF0DF30648 ] C:\Windows\system32\sxssrv.dll
16:44:11.0963 0x1be4  [ AB75687641C9ADBE22336EC3C496909C, 5ACB7665BFF5024E3B244EC733F612FA257B886BC84ADD6F61246B5F6BC37B9E ] C:\Windows\system32\services.exe
16:44:11.0994 0x1be4  [ Global ] - ok
16:44:11.0994 0x1be4  ================ Scan MBR ==================================
16:44:12.0009 0x1be4  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
16:44:12.0353 0x1be4  \Device\Harddisk0\DR0 - ok
16:44:12.0369 0x1be4  ================ Scan VBR ==================================
16:44:12.0400 0x1be4  [ D424C2FBF63C9EDFC505679CC1491D1D ] \Device\Harddisk0\DR0\Partition1
16:44:12.0400 0x1be4  \Device\Harddisk0\DR0\Partition1 - ok
16:44:12.0416 0x1be4  [ E68AD92AB4B732A3CD350676E3F6D88C ] \Device\Harddisk0\DR0\Partition2
16:44:12.0416 0x1be4  \Device\Harddisk0\DR0\Partition2 - ok
16:44:12.0447 0x1be4  [ 6D0910CA75EF4A2CD93B132162DFFA0E ] \Device\Harddisk0\DR0\Partition3
16:44:12.0447 0x1be4  \Device\Harddisk0\DR0\Partition3 - ok
16:44:12.0463 0x1be4  [ 0E8CECBEF7644490D0674A1DFF2CFC32 ] \Device\Harddisk0\DR0\Partition4
16:44:12.0478 0x1be4  \Device\Harddisk0\DR0\Partition4 - ok
16:44:12.0478 0x1be4  ================ Scan generic autorun ======================
16:44:12.0509 0x1be4  SecurityHealth - ok
16:44:12.0603 0x1be4  [ 831525493F0CB1DB6D76FA465542E6B3, E5F00004578A3CDF50539B813A8599E5F4BF6E4CE56C2F3F85DE2879558F6CE9 ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
16:44:12.0650 0x1be4  cAudioFilterAgent - ok
16:44:12.0775 0x1be4  [ 4F8B94EC4D4FFA0712CCADF8145F28D1, 6CED9332100CA71FB17930AAC4ED1798E6F3A83CEBEE0A3412EFA01F6F1A6F22 ] C:\Program Files\CONEXANT\SAII\SACpl.exe
16:44:12.0853 0x1be4  SmartAudio - ok
16:44:12.0869 0x1be4  {621BF0B5-AAD8-4F6F-9DB0-7FC1369EDAB5} - ok
16:44:12.0884 0x1be4  {DFCDD13F-C501-483C-A84F-3DCA1A5C398A} - ok
16:44:15.0431 0x1be4  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
16:44:18.0191 0x1be4  OneDriveSetup - ok
16:44:19.0129 0x1be4  [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
16:44:21.0910 0x1be4  OneDriveSetup - ok
16:44:22.0254 0x1be4  [ DF937974815B379A2CABB88B5551B773, E3F50FB9272912661A785FB36226FA39342FC23EEA51001BCEA061AA975B8E19 ] C:\Users\Semih\AppData\Local\Microsoft\OneDrive\OneDrive.exe
16:44:22.0379 0x1be4  OneDrive - detected UnsignedFile.Multi.Generic ( 1 )
16:44:22.0535 0x1be4  Detect turned to UDS exact due to KSN untrusted
16:44:22.0535 0x1be4  OneDrive ( UDS:DangerousObject.Multi.Generic ) - infected
16:44:22.0535 0x1be4  Force sending object to P2P due to detect: C:\Users\Semih\AppData\Local\Microsoft\OneDrive\OneDrive.exe
16:44:24.0473 0x1be4  Object send P2P result: true
16:44:25.0488 0x1be4  Discord - ok
16:44:25.0519 0x1be4  EnableLUA - ok
16:44:25.0582 0x1be4  AV detected via SS2: Windows Defender, windowsdefender:// (  ), 0x60100 ( disabled : updated )
16:44:25.0598 0x1be4  Win FW state via NFP2: enabled ( trusted )
16:44:26.0488 0x1be4  ============================================================
16:44:26.0488 0x1be4  Scan finished
16:44:26.0488 0x1be4  ============================================================
16:44:26.0519 0x2454  Detected object count: 10
16:44:26.0519 0x2454  Actual detected object count: 10
16:44:51.0119 0x2454  BEService ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0119 0x2454  BEService ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0119 0x2454  EasyAntiCheat ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0119 0x2454  EasyAntiCheat ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0119 0x2454  gupdate ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0119 0x2454  gupdate ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0134 0x2454  gupdatem ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0134 0x2454  gupdatem ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0134 0x2454  MozillaMaintenance ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0134 0x2454  MozillaMaintenance ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0134 0x2454  Razer Game Manager Service ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0134 0x2454  Razer Game Manager Service ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0134 0x2454  RzActionSvc ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0134 0x2454  RzActionSvc ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0150 0x2454  WdNisSvc ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0150 0x2454  WdNisSvc ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0150 0x2454  WinDefend ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0150 0x2454  WinDefend ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip 
16:44:51.0150 0x2454  OneDrive ( UDS:DangerousObject.Multi.Generic ) - skipped by user
16:44:51.0150 0x2454  OneDrive ( UDS:DangerousObject.Multi.Generic ) - User select action: Skip
         

Es wurde noch nichts gelöscht, ich hab rechtzeitig den Task beendet, ich bin etwas zu voreilig, aber das ist jetzt der log mit den richtigen Einstellungen.

Dein System ist völlig im Eimer.

Wenn man mal eine Prüfsumme von einer infizierten Datei von deinem Rechner bei Virustotal eingibt, landet man zB auf diese Auswertung --> https://www.virustotal.com/de/file/b...9913/analysis/

Der W32/Neshta ist ein Fileinfector. Das zu bereinigen kannste vergessen. Du wirst wohl jedes Mal nach einer Neuinstallation eine infizierte Datei erneut ausgeführt haben. Dann ist es auch nun wahrlich kein Wunder, dass du jedesmal den Mist neu hast.

Mach eine saubere Neuinstallation, Daten sichern, aber nur reine Datendateien, keine Programme, Spiele oder Setups, also nix Ausführbares (zB *.exe, *.msi) - sichern kannst du Musik, Videos, Bilder. Am besten über ein Live-Linux wie zB Ubuntu MATE im Ausprobiermodus.

😂😂😂 in Ordnung, wird gemacht

Zitat von Drkplz!

😂😂😂 in Ordnung, wird gemacht

Schön. Und das nächste mal Finger weg vom Crack!