Code:
Alles auswählen Aufklappen ATTFilter
09:23:32.0620 0x20c4 TDSS rootkit removing tool 3.1.0.25 Dec 24 2018 06:31:07
09:23:32.0620 0x20c4 UEFI system
09:23:37.0463 0x20c4 ============================================================
09:23:37.0463 0x20c4 Current date / time: 2018/12/30 09:23:37.0463
09:23:37.0479 0x20c4 SystemInfo:
09:23:37.0479 0x20c4
09:23:37.0479 0x20c4 OS Version: 10.0.17134 ServicePack: 0.0
09:23:37.0479 0x20c4 Product type: Workstation
09:23:37.0479 0x20c4 ComputerName: TOM
09:23:37.0479 0x20c4 UserName: tom
09:23:37.0479 0x20c4 Windows directory: C:\WINDOWS
09:23:37.0479 0x20c4 System windows directory: C:\WINDOWS
09:23:37.0479 0x20c4 Running under WOW64
09:23:37.0479 0x20c4 Processor architecture: Intel x64
09:23:37.0479 0x20c4 Number of processors: 4
09:23:37.0479 0x20c4 Page size: 0x1000
09:23:37.0479 0x20c4 Boot type: Normal boot
09:23:37.0479 0x20c4 CodeIntegrityOptions = 0x0000C001
09:23:37.0479 0x20c4 ============================================================
09:23:37.0479 0x20c4 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19
09:23:37.0604 0x20c4 System UUID: {170F64A3-0DB5-7348-15B7-12D3D4926BF1}
09:23:37.0901 0x20c4 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
09:23:37.0916 0x20c4 ============================================================
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0:
09:23:37.0916 0x20c4 GPT partitions:
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {8E78C41A-B8D6-4992-9466-95D3B4DCF1FB}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1F4000
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {0F3B8CF1-F6C3-45D9-BD27-ABC07E7A7CAB}, Name: EFI system partition, StartLBA 0x1F4800, BlocksNum 0x82000
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {BFBFAFE7-A34F-448A-9A5B-6213EB736C22}, UniqueGUID: {F2B6EFA2-F3A2-4214-AC96-2429C08FEE20}, Name: Basic data partition, StartLBA 0x276800, BlocksNum 0x1F4000
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {56E85A45-478D-4640-B8F1-CCD10316A392}, Name: Microsoft reserved partition, StartLBA 0x46A800, BlocksNum 0x40000
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {23AA78FD-8BCC-4664-BCE9-865AFF76523B}, Name: Basic data partition, StartLBA 0x4AA800, BlocksNum 0x351A0800
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {39A5C9D1-43B4-4D35-A855-331200EFE985}, Name: Basic data partition, StartLBA 0x3564B000, BlocksNum 0x3200000
09:23:37.0916 0x20c4 \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {6AB7146D-4473-4458-AB04-2653E77BED7B}, Name: Basic data partition, StartLBA 0x3884B000, BlocksNum 0x1B3B000
09:23:37.0916 0x20c4 MBR partitions:
09:23:37.0916 0x20c4 ============================================================
09:23:38.0026 0x20c4 C: <-> \Device\Harddisk0\DR0\Partition5
09:23:38.0072 0x20c4 D: <-> \Device\Harddisk0\DR0\Partition6
09:23:38.0072 0x20c4 ============================================================
09:23:38.0072 0x20c4 Initialize success
09:23:38.0072 0x20c4 ============================================================
09:23:49.0686 0x0c58 ============================================================
09:23:49.0686 0x0c58 Scan started
09:23:49.0686 0x0c58 Mode: Manual; SigCheck; TDLFS;
09:23:49.0686 0x0c58 ============================================================
09:23:49.0686 0x0c58 KSN ping started
09:23:49.0774 0x0c58 KSN ping finished: true
09:23:52.0159 0x0c58 ================ Scan BIOS =================================
09:23:52.0159 0x0c58 BIOS info: vendor = LENOVO, version = B0CN80WW, releaseDate = 05/18/2015
09:23:52.0159 0x0c58 Base board info: manufacturer = LENOVO, product = Lenovo G50-80, version = 31900058 WIN
09:23:57.0815 0x0c58 [ EC57C2327B24C7205F224C41533F355F, 9DC97998E1C869BD4D4A1A0E8F51CE63E5FF88151585D31850E505F4496D6B29 ] BIOS
09:23:58.0768 0x0c58 BIOS - ok
09:23:58.0799 0x0c58 ================ Scan system memory ========================
09:23:58.0799 0x0c58 System memory - ok
09:23:58.0799 0x0c58 ================ Scan services =============================
09:23:59.0471 0x0c58 1394ohci - ok
09:23:59.0503 0x0c58 3ware - ok
09:23:59.0534 0x0c58 ACPI - ok
09:23:59.0565 0x0c58 AcpiDev - ok
09:23:59.0581 0x0c58 acpiex - ok
09:23:59.0596 0x0c58 acpipagr - ok
09:23:59.0612 0x0c58 AcpiPmi - ok
09:23:59.0628 0x0c58 acpitime - ok
09:23:59.0690 0x0c58 [ 28271590EF5F38E396BFB494075CBE6E, 0A731CA3287BE73F3543DB81CAF59B61BDBD89D71C27FD770E9926997879662C ] ACPIVPC C:\WINDOWS\System32\drivers\AcpiVpc.sys
09:23:59.0846 0x0c58 ACPIVPC - ok
09:24:00.0018 0x0c58 [ 696A8431DD22EDE385D7AB84E0EAF4C9, E5892B346904C7A392A0B1C8F4C9066BC535A2C70307123C8E1F2157353333F0 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
09:24:00.0049 0x0c58 AdobeARMservice - ok
09:24:00.0315 0x0c58 [ 6601FB715EB1F6A873B48EAF3844E7D4, 55F29D6CC836C15F133E1950D7672D1539735AA564132B1A0220459C4FC8C3EF ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
09:24:00.0346 0x0c58 AdobeFlashPlayerUpdateSvc - ok
09:24:00.0424 0x0c58 ADP80XX - ok
09:24:00.0471 0x0c58 AFD - ok
09:24:00.0471 0x0c58 afunix - ok
09:24:00.0503 0x0c58 ahcache - ok
09:24:00.0534 0x0c58 AJRouter - ok
09:24:00.0565 0x0c58 ALG - ok
09:24:00.0581 0x0c58 AmdK8 - ok
09:24:00.0612 0x0c58 AmdPPM - ok
09:24:00.0628 0x0c58 amdsata - ok
09:24:00.0643 0x0c58 amdsbs - ok
09:24:00.0643 0x0c58 amdxata - ok
09:24:00.0690 0x0c58 AppID - ok
09:24:00.0737 0x0c58 AppIDSvc - ok
09:24:00.0768 0x0c58 Appinfo - ok
09:24:00.0784 0x0c58 applockerfltr - ok
09:24:00.0846 0x0c58 AppReadiness - ok
09:24:00.0893 0x0c58 AppXSvc - ok
09:24:00.0940 0x0c58 arcsas - ok
09:24:00.0956 0x0c58 AsyncMac - ok
09:24:00.0956 0x0c58 atapi - ok
09:24:00.0987 0x0c58 AudioEndpointBuilder - ok
09:24:01.0002 0x0c58 Audiosrv - ok
09:24:01.0034 0x0c58 AxInstSV - ok
09:24:01.0065 0x0c58 b06bdrv - ok
09:24:01.0081 0x0c58 bam - ok
09:24:01.0112 0x0c58 BasicDisplay - ok
09:24:01.0159 0x0c58 BasicRender - ok
09:24:01.0206 0x0c58 BcastDVRUserService - ok
09:24:01.0268 0x0c58 bcmfn2 - ok
09:24:01.0315 0x0c58 BDESVC - ok
09:24:01.0362 0x0c58 Beep - ok
09:24:01.0378 0x0c58 BFE - ok
09:24:01.0409 0x0c58 bindflt - ok
09:24:01.0456 0x0c58 BITS - ok
09:24:01.0487 0x0c58 BluetoothUserService - ok
09:24:01.0612 0x0c58 bowser - ok
09:24:01.0643 0x0c58 BrokerInfrastructure - ok
09:24:01.0690 0x0c58 BTAGService - ok
09:24:01.0721 0x0c58 BthAvctpSvc - ok
09:24:01.0737 0x0c58 BthEnum - ok
09:24:01.0768 0x0c58 BthHFEnum - ok
09:24:01.0846 0x0c58 BthLEEnum - ok
09:24:01.0893 0x0c58 BTHMODEM - ok
09:24:01.0940 0x0c58 BthPan - ok
09:24:01.0956 0x0c58 BTHPORT - ok
09:24:01.0987 0x0c58 bthserv - ok
09:24:02.0065 0x0c58 BTHUSB - ok
09:24:02.0081 0x0c58 bttflt - ok
09:24:02.0127 0x0c58 buttonconverter - ok
09:24:02.0127 0x0c58 CAD - ok
09:24:02.0174 0x0c58 camsvc - ok
09:24:02.0190 0x0c58 CapImg - ok
09:24:02.0190 0x0c58 cdfs - ok
09:24:02.0221 0x0c58 CDPSvc - ok
09:24:02.0252 0x0c58 CDPUserSvc - ok
09:24:02.0315 0x0c58 cdrom - ok
09:24:02.0377 0x0c58 CertPropSvc - ok
09:24:02.0424 0x0c58 cht4iscsi - ok
09:24:02.0440 0x0c58 cht4vbd - ok
09:24:02.0471 0x0c58 circlass - ok
09:24:02.0502 0x0c58 CldFlt - ok
09:24:02.0534 0x0c58 CLFS - ok
09:24:04.0065 0x0c58 [ 679F8982514E2FCF52E3A0E2DEC24A69, 2D607E39EBBAA870A222CECB770FE0B3382F4206D778E12F9E4DAA572A37173A ] ClickToRunSvc C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
09:24:04.0346 0x0c58 ClickToRunSvc - ok
09:24:04.0393 0x0c58 ClipSVC - ok
09:24:04.0408 0x0c58 CmBatt - ok
09:24:04.0424 0x0c58 CNG - ok
09:24:04.0440 0x0c58 cnghwassist - ok
09:24:04.0612 0x0c58 [ DCFB422B756D7BA67FF0915957F94D3A, EA18E2E3ABC8857428688B71D7D909C01B363C122C282DC3491DF59E8259B029 ] CnxtHdAudService C:\WINDOWS\system32\drivers\CHDRT64.sys
09:24:04.0721 0x0c58 CnxtHdAudService - ok
09:24:04.0893 0x0c58 CompositeBus - ok
09:24:04.0908 0x0c58 COMSysApp - ok
09:24:04.0908 0x0c58 condrv - ok
09:24:04.0955 0x0c58 CoreMessagingRegistrar - ok
09:24:05.0237 0x0c58 [ 800D39A148B543A4C9D8A0873CAB7D46, 955746E986F005F25CA5D9DA6D5046AD5A51CBB4492313A0972305F2E1B0AF5A ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
09:24:05.0487 0x0c58 cphs - ok
09:24:05.0533 0x0c58 CryptSvc - ok
09:24:05.0599 0x0c58 [ 07F3534C07C5110E9A424C04634C4A8D, 39F97C8A8610A4EFB83A41E490BBDC19261A52DC9827645C1331EFC958F2EDF1 ] CxAudMsg C:\WINDOWS\system32\CxAudMsg64.exe
09:24:05.0730 0x0c58 CxAudMsg - ok
09:24:05.0762 0x0c58 dam - ok
09:24:05.0793 0x0c58 DcomLaunch - ok
09:24:05.0840 0x0c58 defragsvc - ok
09:24:05.0871 0x0c58 DeviceAssociationService - ok
09:24:05.0902 0x0c58 DeviceInstall - ok
09:24:05.0949 0x0c58 DevicePickerUserSvc - ok
09:24:05.0996 0x0c58 DevicesFlowUserSvc - ok
09:24:06.0027 0x0c58 DevQueryBroker - ok
09:24:06.0074 0x0c58 Dfsc - ok
09:24:06.0137 0x0c58 Dhcp - ok
09:24:06.0262 0x0c58 diagnosticshub.standardcollector.service - ok
09:24:06.0355 0x0c58 diagsvc - ok
09:24:06.0402 0x0c58 DiagTrack - ok
09:24:06.0449 0x0c58 Disk - ok
09:24:06.0496 0x0c58 DmEnrollmentSvc - ok
09:24:06.0527 0x0c58 dmvsc - ok
09:24:06.0574 0x0c58 dmwappushservice - ok
09:24:06.0605 0x0c58 Dnscache - ok
09:24:06.0637 0x0c58 dot3svc - ok
09:24:06.0668 0x0c58 DPS - ok
09:24:06.0668 0x0c58 drmkaud - ok
09:24:06.0715 0x0c58 DsmSvc - ok
09:24:06.0746 0x0c58 DsSvc - ok
09:24:06.0777 0x0c58 DusmSvc - ok
09:24:06.0808 0x0c58 DXGKrnl - ok
09:24:06.0855 0x0c58 Eaphost - ok
09:24:06.0902 0x0c58 ebdrv - ok
09:24:06.0949 0x0c58 EFS - ok
09:24:06.0980 0x0c58 EhStorClass - ok
09:24:07.0012 0x0c58 EhStorTcgDrv - ok
09:24:07.0074 0x0c58 embeddedmode - ok
09:24:07.0136 0x0c58 EntAppSvc - ok
09:24:07.0136 0x0c58 ErrDev - ok
09:24:07.0293 0x0c58 [ 0AC122FAC3D51A9610C607E6B51A1FA5, E26983738B6C642033A8B46890700754635D0B32386DB3B5DDC2C5EEFBA9E31E ] ETD C:\WINDOWS\system32\DRIVERS\ETD.sys
09:24:07.0386 0x0c58 ETD - ok
09:24:07.0480 0x0c58 [ 32B13B0B505EF1512632519DE3E721E4, BB7E7B119872827F9BA000082FB1E2089231F5F9FDC705852E291045FD84F05B ] ETDService C:\Program Files\Elantech\ETDService.exe
09:24:07.0511 0x0c58 ETDService - ok
09:24:07.0543 0x0c58 [ F77EBC9A1DD3CA58C211B8AB99CFDC6E, 5C53BB73E06760A7A50F6DBA4B1BDE85CCC959B048DAA879443D0C9D5BD38826 ] ETDSMBus C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys
09:24:07.0558 0x0c58 ETDSMBus - ok
09:24:07.0605 0x0c58 EventSystem - ok
09:24:07.0637 0x0c58 exfat - ok
09:24:07.0668 0x0c58 fastfat - ok
09:24:07.0715 0x0c58 Fax - ok
09:24:07.0762 0x0c58 fdc - ok
09:24:07.0777 0x0c58 fdPHost - ok
09:24:07.0793 0x0c58 FDResPub - ok
09:24:07.0824 0x0c58 fhsvc - ok
09:24:07.0840 0x0c58 FileCrypt - ok
09:24:07.0918 0x0c58 FileInfo - ok
09:24:07.0933 0x0c58 Filetrace - ok
09:24:07.0949 0x0c58 flpydisk - ok
09:24:07.0965 0x0c58 FltMgr - ok
09:24:08.0012 0x0c58 FontCache - ok
09:24:08.0090 0x0c58 FrameServer - ok
09:24:08.0136 0x0c58 FsDepends - ok
09:24:08.0168 0x0c58 Fs_Rec - ok
09:24:08.0199 0x0c58 fvevol - ok
09:24:08.0215 0x0c58 gencounter - ok
09:24:08.0230 0x0c58 genericusbfn - ok
09:24:08.0465 0x0c58 [ DDD204D449710B6A54E42F9630A10A29, 8C18C0E2C32111D2166B36B710FFDB09DA176E6339445F92BA3195AD4987A247 ] GoogleChromeElevationService C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe
09:24:08.0590 0x0c58 GoogleChromeElevationService - ok
09:24:08.0636 0x0c58 GPIOClx0101 - ok
09:24:08.0668 0x0c58 gpsvc - ok
09:24:08.0730 0x0c58 GpuEnergyDrv - ok
09:24:08.0777 0x0c58 GraphicsPerfSvc - ok
09:24:08.0918 0x0c58 [ 92EE791A630830452485E8E375F8DB35, 542294724926B0E156224B9EBD33E6354D79DA4C828FB52F7F4233DF45E3F624 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:24:08.0949 0x0c58 gupdate - ok
09:24:08.0964 0x0c58 [ 92EE791A630830452485E8E375F8DB35, 542294724926B0E156224B9EBD33E6354D79DA4C828FB52F7F4233DF45E3F624 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:24:08.0996 0x0c58 gupdatem - ok
09:24:09.0090 0x0c58 HdAudAddService - ok
09:24:09.0136 0x0c58 HDAudBus - ok
09:24:09.0152 0x0c58 HidBatt - ok
09:24:09.0183 0x0c58 HidBth - ok
09:24:09.0230 0x0c58 hidi2c - ok
09:24:09.0246 0x0c58 hidinterrupt - ok
09:24:09.0261 0x0c58 HidIr - ok
09:24:09.0308 0x0c58 hidserv - ok
09:24:09.0324 0x0c58 HidUsb - ok
09:24:09.0355 0x0c58 HpSAMD - ok
09:24:09.0386 0x0c58 HTTP - ok
09:24:09.0402 0x0c58 hvcrash - ok
09:24:09.0465 0x0c58 HvHost - ok
09:24:09.0511 0x0c58 hvservice - ok
09:24:09.0543 0x0c58 HwNClx0101 - ok
09:24:09.0558 0x0c58 hwpolicy - ok
09:24:09.0605 0x0c58 hyperkbd - ok
09:24:09.0621 0x0c58 HyperVideo - ok
09:24:09.0636 0x0c58 i8042prt - ok
09:24:09.0652 0x0c58 iagpio - ok
09:24:09.0668 0x0c58 iai2c - ok
09:24:09.0683 0x0c58 iaLPSS2i_GPIO2 - ok
09:24:09.0699 0x0c58 iaLPSS2i_GPIO2_BXT_P - ok
09:24:09.0714 0x0c58 iaLPSS2i_I2C - ok
09:24:09.0746 0x0c58 iaLPSS2i_I2C_BXT_P - ok
09:24:09.0761 0x0c58 iaLPSSi_GPIO - ok
09:24:09.0777 0x0c58 iaLPSSi_I2C - ok
09:24:09.0949 0x0c58 [ 9E47BCE5F240C13331A493E156270589, 21BCBB18CAD5BC5CED3A8D9C3868D4AB4B781A2F8E40A49AABFD4AC8DC2FBC9F ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys
09:24:10.0027 0x0c58 iaStorA - ok
09:24:10.0058 0x0c58 iaStorAVC - ok
09:24:10.0136 0x0c58 iaStorV - ok
09:24:10.0168 0x0c58 ibbus - ok
09:24:10.0168 0x0c58 ibtsiva - ok
09:24:10.0246 0x0c58 [ 3501750E1D543A5C6A32D1ED5BBAA125, 95D351DEB154BC4B5A4F4D477D945845218736E35C776264BA549471E37D3CF4 ] ibtusb C:\WINDOWS\system32\DRIVERS\ibtusb.sys
09:24:10.0308 0x0c58 ibtusb - ok
09:24:10.0324 0x0c58 icssvc - ok
09:24:10.0996 0x0c58 [ 154DEDDED0BB11F000DAE3F61EF2F70F, FF2AF7B1C35F5C09D1E96F50F6CF96F2951370CB7CE3F21C830A47B8EFCCC8BC ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
09:24:11.0386 0x0c58 igfx - ok
09:24:11.0464 0x0c58 [ 8068888314A8B67C08195855D16B7586, C402E0CEEA0642CADD1FB5CA49DDB9E9802729F1718535FFD3F6A0DD2A6A5512 ] igfxCUIService2.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
09:24:11.0714 0x0c58 igfxCUIService2.0.0.0 - ok
09:24:11.0761 0x0c58 IKEEXT - ok
09:24:11.0792 0x0c58 IndirectKmd - ok
09:24:11.0839 0x0c58 InstallService - ok
09:24:11.0917 0x0c58 [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
09:24:11.0980 0x0c58 IntcDAud - ok
09:24:11.0980 0x0c58 intelide - ok
09:24:12.0011 0x0c58 intelpep - ok
09:24:12.0058 0x0c58 intelppm - ok
09:24:12.0105 0x0c58 iorate - ok
09:24:12.0121 0x0c58 IpFilterDriver - ok
09:24:12.0152 0x0c58 iphlpsvc - ok
09:24:12.0167 0x0c58 IPMIDRV - ok
09:24:12.0183 0x0c58 IPNAT - ok
09:24:12.0199 0x0c58 IPT - ok
09:24:12.0230 0x0c58 IpxlatCfgSvc - ok
09:24:12.0246 0x0c58 irda - ok
09:24:12.0261 0x0c58 IRENUM - ok
09:24:12.0277 0x0c58 irmon - ok
09:24:12.0292 0x0c58 isapnp - ok
09:24:12.0324 0x0c58 iScsiPrt - ok
09:24:12.0371 0x0c58 ItSas35i - ok
09:24:12.0386 0x0c58 kbdclass - ok
09:24:12.0386 0x0c58 kbdhid - ok
09:24:12.0402 0x0c58 kdnic - ok
09:24:12.0417 0x0c58 KeyIso - ok
09:24:12.0433 0x0c58 KSecDD - ok
09:24:12.0464 0x0c58 KSecPkg - ok
09:24:12.0464 0x0c58 ksthunk - ok
09:24:12.0511 0x0c58 KtmRm - ok
09:24:12.0558 0x0c58 LanmanServer - ok
09:24:12.0574 0x0c58 LanmanWorkstation - ok
09:24:12.0621 0x0c58 lfsvc - ok
09:24:12.0652 0x0c58 LicenseManager - ok
09:24:12.0667 0x0c58 lltdio - ok
09:24:12.0683 0x0c58 lltdsvc - ok
09:24:12.0683 0x0c58 lmhosts - ok
09:24:12.0730 0x0c58 LSI_SAS - ok
09:24:12.0761 0x0c58 LSI_SAS2i - ok
09:24:12.0792 0x0c58 LSI_SAS3i - ok
09:24:12.0808 0x0c58 LSI_SSS - ok
09:24:12.0824 0x0c58 LSM - ok
09:24:12.0839 0x0c58 luafv - ok
09:24:12.0917 0x0c58 LxpSvc - ok
09:24:13.0011 0x0c58 MapsBroker - ok
09:24:13.0058 0x0c58 mausbhost - ok
09:24:13.0089 0x0c58 mausbip - ok
09:24:13.0105 0x0c58 megasas - ok
09:24:13.0152 0x0c58 megasas2i - ok
09:24:13.0167 0x0c58 megasas35i - ok
09:24:13.0183 0x0c58 megasr - ok
09:24:13.0277 0x0c58 [ 034338E2F6F123727F7C351152B084AF, B1E120E838CC8A882FC0C4C5F6D6016E11DD3D067E31B27E532BAD11A5976230 ] MEIx64 C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys
09:24:13.0324 0x0c58 MEIx64 - ok
09:24:13.0355 0x0c58 MessagingService - ok
09:24:13.0402 0x0c58 mlx4_bus - ok
09:24:13.0449 0x0c58 MMCSS - ok
09:24:13.0464 0x0c58 Modem - ok
09:24:13.0496 0x0c58 monitor - ok
09:24:13.0527 0x0c58 mouclass - ok
09:24:13.0542 0x0c58 mouhid - ok
09:24:13.0558 0x0c58 mountmgr - ok
09:24:13.0667 0x0c58 [ 96959E7C586523B04F54C867B242E35C, 91B021EC1A776FE273496CDA385B42438F597BEF62010BB41D25BBEB809EC0F7 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
09:24:13.0699 0x0c58 MozillaMaintenance - ok
09:24:13.0730 0x0c58 mpsdrv - ok
09:24:13.0777 0x0c58 mpssvc - ok
09:24:13.0808 0x0c58 MRxDAV - ok
09:24:13.0824 0x0c58 mrxsmb - ok
09:24:13.0855 0x0c58 mrxsmb20 - ok
09:24:13.0902 0x0c58 MsBridge - ok
09:24:13.0917 0x0c58 MSDTC - ok
09:24:13.0933 0x0c58 Msfs - ok
09:24:13.0949 0x0c58 msgpiowin32 - ok
09:24:13.0964 0x0c58 mshidkmdf - ok
09:24:13.0980 0x0c58 mshidumdf - ok
09:24:14.0011 0x0c58 msisadrv - ok
09:24:14.0027 0x0c58 MSiSCSI - ok
09:24:14.0042 0x0c58 msiserver - ok
09:24:14.0105 0x0c58 MSKSSRV - ok
09:24:14.0152 0x0c58 MsLldp - ok
09:24:14.0167 0x0c58 MSPCLOCK - ok
09:24:14.0183 0x0c58 MSPQM - ok
09:24:14.0199 0x0c58 MsRPC - ok
09:24:14.0230 0x0c58 mssmbios - ok
09:24:14.0245 0x0c58 MSTEE - ok
09:24:14.0261 0x0c58 MTConfig - ok
09:24:14.0277 0x0c58 Mup - ok
09:24:14.0292 0x0c58 mvumis - ok
09:24:14.0323 0x0c58 NativeWifiP - ok
09:24:14.0370 0x0c58 NaturalAuthentication - ok
09:24:14.0417 0x0c58 NcaSvc - ok
09:24:14.0464 0x0c58 NcbService - ok
09:24:14.0495 0x0c58 NcdAutoSetup - ok
09:24:14.0527 0x0c58 ndfltr - ok
09:24:14.0558 0x0c58 NDIS - ok
09:24:14.0558 0x0c58 NdisCap - ok
09:24:14.0573 0x0c58 NdisImPlatform - ok
09:24:14.0589 0x0c58 NdisTapi - ok
09:24:14.0620 0x0c58 Ndisuio - ok
09:24:14.0620 0x0c58 NdisVirtualBus - ok
09:24:14.0652 0x0c58 NdisWan - ok
09:24:14.0667 0x0c58 ndiswanlegacy - ok
09:24:14.0667 0x0c58 ndproxy - ok
09:24:14.0683 0x0c58 Ndu - ok
09:24:14.0714 0x0c58 NetAdapterCx - ok
09:24:14.0714 0x0c58 NetBIOS - ok
09:24:14.0745 0x0c58 NetBT - ok
09:24:14.0761 0x0c58 Netlogon - ok
09:24:14.0792 0x0c58 Netman - ok
09:24:14.0855 0x0c58 netprofm - ok
09:24:14.0902 0x0c58 NetSetupSvc - ok
09:24:15.0120 0x0c58 NetTcpPortSharing - ok
09:24:15.0136 0x0c58 netvsc - ok
09:24:15.0417 0x0c58 [ 89017196324ABC97B4A02A06919C12AC, 10F4271CCAC06984BBE38C7636D6841E71E1EBA2BC6BE3E8B0C7542CEA5204C1 ] NETwNb64 C:\WINDOWS\System32\drivers\Netwbw02.sys
09:24:15.0620 0x0c58 NETwNb64 - ok
09:24:15.0698 0x0c58 NgcCtnrSvc - ok
09:24:15.0745 0x0c58 NgcSvc - ok
09:24:15.0933 0x0c58 [ 91D3BCA53A7E6CC61AE81F8EB556D885, E6013E0D27A4DDDA45195B55C218F77F6CA43AE44CB3D39A478AA61AF3750AD8 ] NitroDriverReadSpool10 C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe
09:24:15.0980 0x0c58 NitroDriverReadSpool10 - ok
09:24:16.0089 0x0c58 [ A6DF138E66DA14BBDFDB60C81E687A4E, CCE575FBE865138B5B7F2D30D3E4262A9E12FF56A7808FBD3AB25EAE74F57D58 ] NitroUpdateService C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe
09:24:16.0136 0x0c58 NitroUpdateService - ok
09:24:16.0183 0x0c58 NlaSvc - ok
09:24:16.0230 0x0c58 Npfs - ok
09:24:16.0277 0x0c58 npsvctrig - ok
09:24:16.0339 0x0c58 nsi - ok
09:24:16.0355 0x0c58 nsiproxy - ok
09:24:16.0402 0x0c58 Ntfs - ok
09:24:16.0417 0x0c58 Null - ok
09:24:16.0448 0x0c58 nvdimm - ok
09:24:16.0464 0x0c58 nvraid - ok
09:24:16.0495 0x0c58 nvstor - ok
09:24:16.0526 0x0c58 OneSyncSvc - ok
09:24:16.0651 0x0c58 [ 0248107A87BB059ED176FDCC8ED49C82, D74CD025D6911FEDE0B00F8A1705560FC1DF2013CB9C96A3EE0403FD606DB629 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:24:16.0823 0x0c58 ose - ok
09:24:16.0855 0x0c58 p2pimsvc - ok
09:24:16.0870 0x0c58 p2psvc - ok
09:24:16.0870 0x0c58 Parport - ok
09:24:16.0902 0x0c58 partmgr - ok
09:24:16.0933 0x0c58 PcaSvc - ok
09:24:16.0964 0x0c58 pci - ok
09:24:16.0964 0x0c58 pciide - ok
09:24:16.0995 0x0c58 pcmcia - ok
09:24:17.0011 0x0c58 pcw - ok
09:24:17.0011 0x0c58 pdc - ok
09:24:17.0026 0x0c58 PEAUTH - ok
09:24:17.0042 0x0c58 percsas2i - ok
09:24:17.0042 0x0c58 percsas3i - ok
09:24:17.0339 0x0c58 PerfHost - ok
09:24:17.0433 0x0c58 PhoneSvc - ok
09:24:17.0511 0x0c58 PimIndexMaintenanceSvc - ok
09:24:17.0558 0x0c58 pla - ok
09:24:17.0589 0x0c58 PlugPlay - ok
09:24:17.0620 0x0c58 pmem - ok
09:24:17.0636 0x0c58 PNPMEM - ok
09:24:17.0651 0x0c58 PNRPAutoReg - ok
09:24:17.0667 0x0c58 PNRPsvc - ok
09:24:17.0683 0x0c58 PolicyAgent - ok
09:24:17.0714 0x0c58 Power - ok
09:24:17.0714 0x0c58 PptpMiniport - ok
09:24:17.0901 0x0c58 [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
09:24:18.0261 0x0c58 PrintNotify - ok
09:24:18.0308 0x0c58 PrintWorkflowUserSvc - ok
09:24:18.0339 0x0c58 Processor - ok
09:24:18.0386 0x0c58 ProfSvc - ok
09:24:18.0401 0x0c58 Psched - ok
09:24:18.0417 0x0c58 PushToInstall - ok
09:24:18.0433 0x0c58 QWAVE - ok
09:24:18.0448 0x0c58 QWAVEdrv - ok
09:24:18.0448 0x0c58 Ramdisk - ok
09:24:18.0464 0x0c58 RasAcd - ok
09:24:18.0526 0x0c58 RasAgileVpn - ok
09:24:18.0558 0x0c58 RasAuto - ok
09:24:18.0573 0x0c58 Rasl2tp - ok
09:24:18.0604 0x0c58 RasMan - ok
09:24:18.0620 0x0c58 RasPppoe - ok
09:24:18.0636 0x0c58 RasSstp - ok
09:24:18.0636 0x0c58 rdbss - ok
09:24:18.0698 0x0c58 rdpbus - ok
09:24:18.0745 0x0c58 RDPDR - ok
09:24:18.0776 0x0c58 RdpVideoMiniport - ok
09:24:18.0792 0x0c58 rdyboost - ok
09:24:18.0808 0x0c58 ReFS - ok
09:24:18.0823 0x0c58 ReFSv1 - ok
09:24:18.0854 0x0c58 RemoteAccess - ok
09:24:18.0870 0x0c58 RemoteRegistry - ok
09:24:18.0886 0x0c58 RetailDemo - ok
09:24:18.0917 0x0c58 RFCOMM - ok
09:24:18.0948 0x0c58 rhproxy - ok
09:24:18.0979 0x0c58 RmSvc - ok
09:24:19.0011 0x0c58 RpcEptMapper - ok
09:24:19.0073 0x0c58 RpcLocator - ok
09:24:19.0104 0x0c58 RpcSs - ok
09:24:19.0120 0x0c58 rspndr - ok
09:24:19.0245 0x0c58 [ CF0F908B50CD8FB12B7B69DA56A44681, F35FFF3F6BFBC3B2452C5E0A63D94575236EEB49665BE0FBBB26ADAF189F777E ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys
09:24:19.0292 0x0c58 rt640x64 - ok
09:24:19.0433 0x0c58 [ D5C3918E3EF787A41172B8E5348247F0, 033E5E6037CDFE65D26AD834ACD2B652EEED66BA48753F7B319C9FD41CE4F180 ] RTL8168 C:\WINDOWS\System32\drivers\Rt630x64.sys
09:24:19.0479 0x0c58 RTL8168 - ok
09:24:19.0558 0x0c58 [ 87CCF37EC2858FCF7689F8FC0B72F39A, 60B71BDC7388887AC7EB2C869DEAF86DD06B7EB9DEE3CF4F4DFE2D1BCE3BDAA8 ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
09:24:19.0604 0x0c58 RTSUER - ok
09:24:19.0792 0x0c58 [ E7303619F9A06AF5A3AC6A1DCD2AAB3C, B4AF2AEA77FDADD6CF914920E1906B35D936002BC6F70F5292AE1D850C4D6F97 ] rtsuvc C:\WINDOWS\system32\DRIVERS\rtsuvc.sys
09:24:19.0979 0x0c58 rtsuvc - ok
09:24:20.0026 0x0c58 s3cap - ok
09:24:20.0057 0x0c58 SamSs - ok
09:24:20.0073 0x0c58 SAService - ok
09:24:20.0089 0x0c58 sbp2port - ok
09:24:20.0136 0x0c58 SCardSvr - ok
09:24:20.0214 0x0c58 ScDeviceEnum - ok
09:24:20.0261 0x0c58 scfilter - ok
09:24:20.0307 0x0c58 Schedule - ok
09:24:20.0339 0x0c58 scmbus - ok
09:24:20.0370 0x0c58 SCPolicySvc - ok
09:24:20.0417 0x0c58 sdbus - ok
09:24:20.0432 0x0c58 SDFRd - ok
09:24:20.0479 0x0c58 SDRSVC - ok
09:24:20.0511 0x0c58 sdstor - ok
09:24:20.0542 0x0c58 seclogon - ok
09:24:20.0573 0x0c58 SecurityHealthService - ok
09:24:20.0667 0x0c58 [ 271E64A1E7FFFEC74DEB31BA99842A25, B4300129F80FA484BB83181F1B970143D167DA528849BBC0FD02EF0F0E103CD7 ] sedsvc C:\Program Files\rempl\sedsvc.exe
09:24:20.0714 0x0c58 sedsvc - ok
09:24:20.0745 0x0c58 SEMgrSvc - ok
09:24:20.0761 0x0c58 SENS - ok
09:24:20.0776 0x0c58 SensorDataService - ok
09:24:20.0776 0x0c58 SensorService - ok
09:24:20.0823 0x0c58 SensrSvc - ok
09:24:20.0823 0x0c58 SerCx - ok
09:24:20.0854 0x0c58 SerCx2 - ok
09:24:20.0854 0x0c58 Serenum - ok
09:24:20.0901 0x0c58 Serial - ok
09:24:20.0917 0x0c58 sermouse - ok
09:24:20.0964 0x0c58 SessionEnv - ok
09:24:20.0979 0x0c58 sfloppy - ok
09:24:20.0995 0x0c58 SgrmAgent - ok
09:24:21.0026 0x0c58 SgrmBroker - ok
09:24:21.0089 0x0c58 SharedAccess - ok
09:24:21.0136 0x0c58 SharedRealitySvc - ok
09:24:21.0167 0x0c58 ShellHWDetection - ok
09:24:21.0214 0x0c58 shpamsvc - ok
09:24:21.0229 0x0c58 SiSRaid2 - ok
09:24:21.0245 0x0c58 SiSRaid4 - ok
09:24:21.0245 0x0c58 smphost - ok
09:24:21.0292 0x0c58 SmsRouter - ok
09:24:21.0307 0x0c58 SNMPTRAP - ok
09:24:21.0354 0x0c58 spaceport - ok
09:24:21.0354 0x0c58 SpatialGraphFilter - ok
09:24:21.0448 0x0c58 SpbCx - ok
09:24:21.0557 0x0c58 spectrum - ok
09:24:21.0604 0x0c58 Spooler - ok
09:24:21.0651 0x0c58 sppsvc - ok
09:24:21.0698 0x0c58 srv2 - ok
09:24:21.0745 0x0c58 srvnet - ok
09:24:21.0760 0x0c58 SSDPSRV - ok
09:24:21.0839 0x0c58 ssh-agent - ok
09:24:21.0854 0x0c58 SstpSvc - ok
09:24:21.0870 0x0c58 StateRepository - ok
09:24:21.0885 0x0c58 stexstor - ok
09:24:21.0901 0x0c58 stisvc - ok
09:24:21.0901 0x0c58 storahci - ok
09:24:21.0917 0x0c58 storflt - ok
09:24:21.0932 0x0c58 stornvme - ok
09:24:21.0964 0x0c58 storqosflt - ok
09:24:21.0979 0x0c58 StorSvc - ok
09:24:22.0010 0x0c58 storufs - ok
09:24:22.0026 0x0c58 storvsc - ok
09:24:22.0057 0x0c58 svsvc - ok
09:24:22.0135 0x0c58 swenum - ok
09:24:22.0151 0x0c58 swprv - ok
09:24:22.0167 0x0c58 Synth3dVsc - ok
09:24:22.0182 0x0c58 SysMain - ok
09:24:22.0229 0x0c58 SystemEventsBroker - ok
09:24:22.0245 0x0c58 TabletInputService - ok
09:24:22.0245 0x0c58 TapiSrv - ok
09:24:22.0260 0x0c58 Tcpip - ok
09:24:22.0276 0x0c58 Tcpip6 - ok
09:24:22.0276 0x0c58 tcpipreg - ok
09:24:22.0292 0x0c58 tdx - ok
09:24:22.0307 0x0c58 terminpt - ok
09:24:22.0307 0x0c58 TermService - ok
09:24:22.0339 0x0c58 Themes - ok
09:24:22.0401 0x0c58 TieringEngineService - ok
09:24:22.0464 0x0c58 TimeBrokerSvc - ok
09:24:22.0495 0x0c58 TokenBroker - ok
09:24:22.0526 0x0c58 TPM - ok
09:24:22.0526 0x0c58 TrkWks - ok
09:24:22.0589 0x0c58 TrustedInstaller - ok
09:24:22.0651 0x0c58 TsUsbFlt - ok
09:24:22.0698 0x0c58 TsUsbGD - ok
09:24:22.0698 0x0c58 tunnel - ok
09:24:22.0729 0x0c58 tzautoupdate - ok
09:24:22.0745 0x0c58 UASPStor - ok
09:24:22.0745 0x0c58 UcmCx0101 - ok
09:24:22.0776 0x0c58 UcmTcpciCx0101 - ok
09:24:22.0792 0x0c58 UcmUcsi - ok
09:24:22.0823 0x0c58 Ucx01000 - ok
09:24:22.0823 0x0c58 UdeCx - ok
09:24:22.0839 0x0c58 udfs - ok
09:24:22.0854 0x0c58 UEFI - ok
09:24:22.0854 0x0c58 Ufx01000 - ok
09:24:22.0870 0x0c58 UfxChipidea - ok
09:24:22.0870 0x0c58 ufxsynopsys - ok
09:24:22.0885 0x0c58 umbus - ok
09:24:22.0901 0x0c58 UmPass - ok
09:24:22.0917 0x0c58 UmRdpService - ok
09:24:22.0932 0x0c58 UnistoreSvc - ok
09:24:22.0932 0x0c58 upnphost - ok
09:24:22.0948 0x0c58 UrsChipidea - ok
09:24:22.0948 0x0c58 UrsCx01000 - ok
09:24:22.0964 0x0c58 UrsSynopsys - ok
09:24:22.0964 0x0c58 usbccgp - ok
09:24:22.0979 0x0c58 usbcir - ok
09:24:22.0979 0x0c58 usbehci - ok
09:24:22.0995 0x0c58 usbhub - ok
09:24:23.0010 0x0c58 USBHUB3 - ok
09:24:23.0026 0x0c58 usbohci - ok
09:24:23.0042 0x0c58 usbprint - ok
09:24:23.0057 0x0c58 usbser - ok
09:24:23.0073 0x0c58 USBSTOR - ok
09:24:23.0073 0x0c58 usbuhci - ok
09:24:23.0120 0x0c58 usbvideo - ok
09:24:23.0135 0x0c58 USBXHCI - ok
09:24:23.0167 0x0c58 UserDataSvc - ok
09:24:23.0182 0x0c58 UserManager - ok
09:24:23.0276 0x0c58 UsoSvc - ok
09:24:23.0276 0x0c58 VacSvc - ok
09:24:23.0370 0x0c58 VaultSvc - ok
09:24:23.0385 0x0c58 vdrvroot - ok
09:24:23.0401 0x0c58 vds - ok
09:24:23.0432 0x0c58 VerifierExt - ok
09:24:23.0464 0x0c58 vhdmp - ok
09:24:23.0510 0x0c58 vhf - ok
09:24:23.0542 0x0c58 vmbus - ok
09:24:23.0557 0x0c58 VMBusHID - ok
09:24:23.0573 0x0c58 vmgid - ok
09:24:23.0604 0x0c58 vmicguestinterface - ok
09:24:23.0604 0x0c58 vmicheartbeat - ok
09:24:23.0620 0x0c58 vmickvpexchange - ok
09:24:23.0651 0x0c58 vmicrdv - ok
09:24:23.0651 0x0c58 vmicshutdown - ok
09:24:23.0667 0x0c58 vmictimesync - ok
09:24:23.0682 0x0c58 vmicvmsession - ok
09:24:23.0682 0x0c58 vmicvss - ok
09:24:23.0698 0x0c58 volmgr - ok
09:24:23.0729 0x0c58 volmgrx - ok
09:24:23.0760 0x0c58 volsnap - ok
09:24:23.0776 0x0c58 volume - ok
09:24:23.0807 0x0c58 vpci - ok
09:24:23.0823 0x0c58 vpnva - ok
09:24:23.0870 0x0c58 vsmraid - ok
09:24:23.0885 0x0c58 VSS - ok
09:24:23.0917 0x0c58 VSTXRAID - ok
09:24:23.0932 0x0c58 vwifibus - ok
09:24:23.0948 0x0c58 vwififlt - ok
09:24:23.0963 0x0c58 vwifimp - ok
09:24:23.0995 0x0c58 W32Time - ok
09:24:24.0026 0x0c58 WaaSMedicSvc - ok
09:24:24.0042 0x0c58 WacomPen - ok
09:24:24.0073 0x0c58 WalletService - ok
09:24:24.0088 0x0c58 wanarp - ok
09:24:24.0104 0x0c58 wanarpv6 - ok
09:24:24.0135 0x0c58 WarpJITSvc - ok
09:24:24.0198 0x0c58 wbengine - ok
09:24:24.0229 0x0c58 WbioSrvc - ok
09:24:24.0245 0x0c58 wcifs - ok
09:24:24.0292 0x0c58 Wcmsvc - ok
09:24:24.0323 0x0c58 wcncsvc - ok
09:24:24.0354 0x0c58 wcnfs - ok
09:24:24.0417 0x0c58 WdBoot - ok
09:24:24.0448 0x0c58 Wdf01000 - ok
09:24:24.0463 0x0c58 WdFilter - ok
09:24:24.0479 0x0c58 WdiServiceHost - ok
09:24:24.0495 0x0c58 WdiSystemHost - ok
09:24:24.0557 0x0c58 wdiwifi - ok
09:24:24.0588 0x0c58 WdmCompanionFilter - ok
09:24:24.0604 0x0c58 WdNisDrv - ok
09:24:24.0745 0x0c58 WdNisSvc - ok
09:24:24.0792 0x0c58 WebClient - ok
09:24:24.0838 0x0c58 Wecsvc - ok
09:24:24.0870 0x0c58 WEPHOSTSVC - ok
09:24:24.0901 0x0c58 wercplsupport - ok
09:24:24.0917 0x0c58 WerSvc - ok
09:24:24.0979 0x0c58 WFDSConMgrSvc - ok
09:24:24.0995 0x0c58 WFPLWFS - ok
09:24:25.0010 0x0c58 WiaRpc - ok
09:24:25.0041 0x0c58 WIMMount - ok
09:24:25.0088 0x0c58 WinDefend - ok
09:24:25.0151 0x0c58 WindowsTrustedRT - ok
09:24:25.0198 0x0c58 WindowsTrustedRTProxy - ok
09:24:25.0260 0x0c58 WinHttpAutoProxySvc - ok
09:24:25.0276 0x0c58 WinMad - ok
09:24:25.0370 0x0c58 Winmgmt - ok
09:24:25.0401 0x0c58 WinNat - ok
09:24:25.0416 0x0c58 WinRM - ok
09:24:25.0479 0x0c58 WINUSB - ok
09:24:25.0495 0x0c58 WinVerbs - ok
09:24:25.0541 0x0c58 wisvc - ok
09:24:25.0604 0x0c58 WlanSvc - ok
09:24:25.0620 0x0c58 wlidsvc - ok
09:24:25.0651 0x0c58 wlpasvc - ok
09:24:25.0729 0x0c58 WmiAcpi - ok
09:24:25.0791 0x0c58 wmiApSrv - ok
09:24:25.0854 0x0c58 WMPNetworkSvc - ok
09:24:25.0901 0x0c58 [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
09:24:25.0963 0x0c58 Wof - ok
09:24:26.0013 0x0c58 workfolderssvc - ok
09:24:26.0069 0x0c58 WpcMonSvc - ok
09:24:26.0105 0x0c58 WPDBusEnum - ok
09:24:26.0141 0x0c58 WpdUpFltr - ok
09:24:26.0220 0x0c58 WpnService - ok
09:24:26.0251 0x0c58 WpnUserService - ok
09:24:26.0282 0x0c58 ws2ifsl - ok
09:24:26.0298 0x0c58 wscsvc - ok
09:24:26.0344 0x0c58 WSDPrintDevice - ok
09:24:26.0423 0x0c58 WSDScan - ok
09:24:26.0438 0x0c58 WSearch - ok
09:24:26.0501 0x0c58 wuauserv - ok
09:24:26.0532 0x0c58 WudfPf - ok
09:24:26.0548 0x0c58 WUDFRd - ok
09:24:26.0563 0x0c58 WUDFWpdFs - ok
09:24:26.0579 0x0c58 WUDFWpdMtp - ok
09:24:26.0594 0x0c58 WwanSvc - ok
09:24:26.0626 0x0c58 xbgm - ok
09:24:26.0657 0x0c58 XblAuthManager - ok
09:24:26.0673 0x0c58 XblGameSave - ok
09:24:26.0704 0x0c58 xboxgip - ok
09:24:26.0735 0x0c58 XboxGipSvc - ok
09:24:26.0766 0x0c58 XboxNetApiSvc - ok
09:24:26.0798 0x0c58 xinputhid - ok
09:24:27.0126 0x0c58 [ 5476780170B1CB9CE62F50BAD8343B9F, 4746C03872D3979306141926AB1D20338AFC1EE2AAD028B9CC0DDEF6F5451F01 ] XperiaCompanionService C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
09:24:27.0376 0x0c58 XperiaCompanionService - detected UnsignedFile.Multi.Generic ( 1 )
09:24:28.0110 0x0c58 Detect skipped due to KSN trusted
09:24:28.0110 0x0c58 XperiaCompanionService - ok
09:24:28.0110 0x0c58 ================ Scan global ===============================
09:24:28.0329 0x0c58 [ Global ] - ok
09:24:28.0329 0x0c58 ================ Scan MBR ==================================
09:24:28.0360 0x0c58 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
09:24:28.0704 0x0c58 \Device\Harddisk0\DR0 - ok
09:24:28.0704 0x0c58 ================ Scan VBR ==================================
09:24:28.0735 0x0c58 [ 92149FFEAA2E2EDC99CF7B4EC9E033BC ] \Device\Harddisk0\DR0\Partition1
09:24:28.0735 0x0c58 \Device\Harddisk0\DR0\Partition1 - ok
09:24:28.0766 0x0c58 [ DBBE13FA9D10A1A8E6AE4C541A2BEB38 ] \Device\Harddisk0\DR0\Partition2
09:24:28.0766 0x0c58 \Device\Harddisk0\DR0\Partition2 - ok
09:24:28.0782 0x0c58 [ A6184951AC84534008CD0CBC36FC75C8 ] \Device\Harddisk0\DR0\Partition3
09:24:28.0813 0x0c58 \Device\Harddisk0\DR0\Partition3 - ok
09:24:28.0829 0x0c58 [ 66B5FA6F03728DFEEF88DA4EE7C73E58 ] \Device\Harddisk0\DR0\Partition4
09:24:28.0829 0x0c58 \Device\Harddisk0\DR0\Partition4 - ok
09:24:28.0860 0x0c58 [ F7AC4F4002A51064BC2B0449943D9B23 ] \Device\Harddisk0\DR0\Partition5
09:24:28.0938 0x0c58 \Device\Harddisk0\DR0\Partition5 - ok
09:24:28.0969 0x0c58 [ 9EBFD94AB376A820F0A1874FBFC2DA54 ] \Device\Harddisk0\DR0\Partition6
09:24:28.0985 0x0c58 \Device\Harddisk0\DR0\Partition6 - ok
09:24:29.0001 0x0c58 [ 85406619B9079277FB03F52432CEE4D8 ] \Device\Harddisk0\DR0\Partition7
09:24:29.0032 0x0c58 \Device\Harddisk0\DR0\Partition7 - ok
09:24:29.0032 0x0c58 ================ Scan generic autorun ======================
09:24:29.0063 0x0c58 SecurityHealth - ok
09:24:29.0172 0x0c58 [ 42361B4BD80768E82B80285851037665, A555A6BF8016645B838FEA993AD273D1F472586F3600619DC243B1C33438FA07 ] C:\Program Files\Conexant\ForteConfig\fmapp.exe
09:24:29.0204 0x0c58 ForteConfig - ok
09:24:29.0266 0x0c58 [ B58355B1B1C91433B4B119083C7F28B3, CE8272FB392C519D3F1921CE11AF12E0CEE3F96141DCCBF5C40110DA3F9B92BD ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
09:24:29.0313 0x0c58 cAudioFilterAgent - ok
09:24:29.0469 0x0c58 [ 4F8B94EC4D4FFA0712CCADF8145F28D1, 6CED9332100CA71FB17930AAC4ED1798E6F3A83CEBEE0A3412EFA01F6F1A6F22 ] C:\Program Files\CONEXANT\SAII\SACpl.exe
09:24:29.0641 0x0c58 SmartAudio - ok
09:24:29.0954 0x0c58 [ CBBB9715AFD99222EEB5C1DEBDDD495C, DA5BD77C7685D5D8721A240503EA59724907920AE486156D2F98FC861BC9EB96 ] C:\WINDOWS\RTFTrack.exe
09:24:30.0219 0x0c58 RtsFT - ok
09:24:30.0375 0x0c58 [ A33833D1CB24AA28372CE0D43D4F5112, D1FDE1418094B29D680CAC4E1D9C67DF6880378552EDC9E52948F67D5CCFF805 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
09:24:30.0422 0x0c58 AdobeAAMUpdater-1.0 - ok
09:24:30.0516 0x0c58 [ E61AF850E805B723EAB756E821C7696D, 9F604B803E843F691A279D8EF0B34C0F461F5C7054D3CBA49F76C091D4574D5C ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
09:24:30.0563 0x0c58 SunJavaUpdateSched - ok
09:24:30.0704 0x0c58 OneDriveSetup - ok
09:24:30.0704 0x0c58 OneDriveSetup - ok
09:24:30.0985 0x0c58 [ 8FA40C01CCD239C0CA7F747015E336B1, 2DDF8B08DC46FA84C04AAD18E7AA73B7E13AF07C20A69EFF6CC9160E11969ACC ] C:\Users\tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe
09:24:31.0047 0x0c58 OneDrive - ok
09:24:31.0391 0x0c58 [ FB2402FA37525B7FCDC37A8C691AFF05, 4BFE07B75FEA87FD20F9B65D21A0CC7A36498E84C5DADBEF4B63750A4BEEAF73 ] C:\Users\tom\AppData\Roaming\uTorrent Web\utweb.exe
09:24:31.0641 0x0c58 utweb - ok
09:24:31.0875 0x0c58 [ 69866EF709148083948D8C8F3C4DD675, 835E1042230FE590890798E87879591E66D6BE487EED097D2206243239B2A350 ] C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
09:24:31.0938 0x0c58 XperiaCompanionAgent - ok
09:24:31.0953 0x0c58 OneDriveSetup - ok
09:24:31.0953 0x0c58 OneDriveSetup - ok
09:24:31.0953 0x0c58 Waiting for KSN requests completion. In queue: 9
09:24:33.0000 0x0c58 AV detected via SS2: Windows Defender, windowsdefender:// ( ), 0x61100 ( enabled : updated )
09:24:33.0032 0x0c58 Win FW state via NFP2: enabled ( trusted )
09:24:33.0157 0x0c58 ============================================================
09:24:33.0157 0x0c58 Scan finished
09:24:33.0157 0x0c58 ============================================================
09:24:33.0172 0x0068 Detected object count: 0
09:24:33.0172 0x0068 Actual detected object count: 0