Meldung: Einige Features von Windows-Hostprocess ...
 

Hi,

im Anhang ein Snapshot von einer Fehlermeldung. Da ich den Text der Meldung im Internet nicht finde, frage ich mich, ob mir da was untergejubelt wird. Wäre schön, wenn sich ein Kundiger die OTL.txt im Anhang anschauen könnte.

Gruß
drambeldier

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.




Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hi Schrauber,

hier die 3 gewünschten Files - niemand liest Gebrauchsanweisungen im Vorhinein, deshalb wäre es vielleicht angebracht, die Büroklammer zu entfernen ;-(

Die Fehlermeldung aus Windows habe ich auf meinen Server gepackt, da solltest Du drankommen: hxxp://www.drambeldier.de/wer-weiss-was/Bilder/Einige_Features.PNG

FRST Scan?

FRST-logs
 

Oh je, da fehlt mir wohl der Überblick.

(FRST ist jünger als die Addition, weil ich den ersten Lauf nicht als Admin gemacht habe)

Gruß
drambeldier
FRST Logfile:
--- --- ---


>>>>>>>>>> Addition:FRST Additions Logfile:
--- --- ---

hi,


Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Hi,

im ersten Durchlauf hat Malware was gefunden, im zweiten nicht mehr. TSSDKiller meldet nichts.

Gruß & Dank für Deine Geduld
drambeldier

>>>> Malware1

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
main: v2015.11.26.05
rootkit: v2015.11.23.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17843
Braindrops :: W7-64 [administrator]

26.11.2015 22:40:38
mbar-log-2015-11-26 (22-40-38).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 404792
Time elapsed: 22 minute(s), 46 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\Users\Internet\AppData\Local\Temp\msupdate71 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]

Files Detected: 15
C:\Users\Internet\AppData\Local\Temp\mdi064.dll (Trojan.Injector) -> Delete on reboot. [c5d8d3af5635ba7ce498e2a22dd433cd]
C:\Users\Internet\AppData\Local\Temp\RarSFX1\key.exe (Trojan.Dalmat) -> Delete on reboot. [1984ceb4444749ed1c5a67ee37ca19e7]
C:\Users\Internet\AppData\Local\Temp\RarSFX2\key.exe (Trojan.Dalmat) -> Delete on reboot. [0f8e92f08209de5875010b4a758c4cb4]
C:\Users\Internet\AppData\Local\Temp\RarSFX4\key.exe (Trojan.Dalmat) -> Delete on reboot. [a0fd9ce6a2e96dc990e62134877aee12]
C:\Users\Internet\AppData\Local\Temp\RarSFX5\key.exe (Trojan.Dalmat) -> Delete on reboot. [3568bec4dbb040f6b2c4a8adaf52a15f]
C:\Users\Internet\AppData\Local\Temp\msupdate71\dwm.exe (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\libcurl-4.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\libiconv-2.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\libidn-11.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\libintl-8.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\libwinpthread-1.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\msupdate.7z (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\msvcrt.dll (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\proxy.conf (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]
C:\Users\Internet\AppData\Local\Temp\msupdate71\zlib1.dl1 (Trojan.FakeAlert) -> Delete on reboot. [a1fc117169220f27d245793f93700ff1]

Physical Sectors Detected: 0
(No malicious items detected)

(end)


>>>> Malware2

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
main: v2015.11.26.06
rootkit: v2015.11.23.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17843
Braindrops :: W7-64 [administrator]

26.11.2015 23:14:38
mbar-log-2015-11-26 (23-14-38).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 404767
Time elapsed: 21 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)


>>>> TSSDKiller

23:36:59.0875 0x0d50 TDSS rootkit removing tool 3.1.0.6 Nov 16 2015 12:17:23
23:37:08.0455 0x0d50 ============================================================
23:37:08.0455 0x0d50 Current date / time: 2015/11/26 23:37:08.0455
23:37:08.0455 0x0d50 SystemInfo:
23:37:08.0455 0x0d50
23:37:08.0455 0x0d50 OS Version: 6.1.7601 ServicePack: 1.0
23:37:08.0455 0x0d50 Product type: Workstation
23:37:08.0455 0x0d50 ComputerName: W7-64
23:37:08.0455 0x0d50 UserName: Braindrops
23:37:08.0455 0x0d50 Windows directory: C:\Windows
23:37:08.0455 0x0d50 System windows directory: C:\Windows
23:37:08.0455 0x0d50 Running under WOW64
23:37:08.0455 0x0d50 Processor architecture: Intel x64
23:37:08.0455 0x0d50 Number of processors: 4
23:37:08.0455 0x0d50 Page size: 0x1000
23:37:08.0455 0x0d50 Boot type: Normal boot
23:37:08.0455 0x0d50 ============================================================
23:37:09.0937 0x0d50 KLMD registered as C:\Windows\system32\drivers\57378839.sys
23:37:10.0140 0x0d50 System UUID: {0D54FF5F-7598-A207-B3D7-4D3AB56FABF9}
23:37:10.0749 0x0d50 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:37:10.0764 0x0d50 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:37:10.0780 0x0d50 Drive \Device\Harddisk2\DR2 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:37:12.0605 0x0d50 ============================================================
23:37:12.0605 0x0d50 \Device\Harddisk0\DR0:
23:37:12.0605 0x0d50 MBR partitions:
23:37:12.0605 0x0d50 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7A207C1
23:37:12.0605 0x0d50 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x7A20800, BlocksNum 0x7502800
23:37:12.0605 0x0d50 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xFBCB800, BlocksNum 0x2A7BA800
23:37:12.0605 0x0d50 \Device\Harddisk1\DR1:
23:37:12.0605 0x0d50 MBR partitions:
23:37:12.0605 0x0d50 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC34F28D
23:37:12.0605 0x0d50 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xC34F2CC, BlocksNum 0x3D08FCBD
23:37:12.0605 0x0d50 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x493DEF89, BlocksNum 0x5649FC1
23:37:12.0605 0x0d50 \Device\Harddisk1\DR1\Partition4: MBR, Type 0x7, StartLBA 0x4EA29800, BlocksNum 0x7BAA800
23:37:12.0605 0x0d50 \Device\Harddisk2\DR2:
23:37:12.0605 0x0d50 MBR partitions:
23:37:12.0605 0x0d50 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542CEC1
23:37:12.0605 0x0d50 ============================================================
23:37:12.0621 0x0d50 C: <-> \Device\Harddisk0\DR0\Partition1
23:37:12.0667 0x0d50 M: <-> \Device\Harddisk2\DR2\Partition1
23:37:12.0683 0x0d50 G: <-> \Device\Harddisk1\DR1\Partition2
23:37:12.0699 0x0d50 D: <-> \Device\Harddisk0\DR0\Partition2
23:37:12.0730 0x0d50 E: <-> \Device\Harddisk0\DR0\Partition3
23:37:12.0745 0x0d50 F: <-> \Device\Harddisk1\DR1\Partition1
23:37:12.0792 0x0d50 I: <-> \Device\Harddisk1\DR1\Partition4
23:37:12.0823 0x0d50 H: <-> \Device\Harddisk1\DR1\Partition3
23:37:12.0823 0x0d50 ============================================================
23:37:12.0823 0x0d50 Initialize success
23:37:12.0823 0x0d50 ============================================================
23:38:26.0908 0x06a0 ============================================================
23:38:26.0908 0x06a0 Scan started
23:38:26.0908 0x06a0 Mode: Manual; SigCheck; TDLFS;
23:38:26.0908 0x06a0 ============================================================
23:38:26.0908 0x06a0 KSN ping started
23:38:28.0171 0x06a0 KSN ping finished: true
23:38:29.0061 0x06a0 ================ Scan system memory ========================
23:38:29.0061 0x06a0 System memory - ok
23:38:29.0061 0x06a0 ================ Scan services =============================
23:38:29.0217 0x06a0 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
23:38:29.0326 0x06a0 1394ohci - ok
23:38:29.0357 0x06a0 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
23:38:29.0404 0x06a0 ACPI - ok
23:38:29.0435 0x06a0 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
23:38:29.0466 0x06a0 AcpiPmi - ok
23:38:29.0497 0x06a0 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
23:38:29.0544 0x06a0 adp94xx - ok
23:38:29.0591 0x06a0 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys
23:38:29.0638 0x06a0 adpahci - ok
23:38:29.0653 0x06a0 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
23:38:29.0685 0x06a0 adpu320 - ok
23:38:29.0716 0x06a0 [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:38:29.0763 0x06a0 AeLookupSvc - ok
23:38:29.0856 0x06a0 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
23:38:29.0934 0x06a0 AFD - ok
23:38:29.0981 0x06a0 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
23:38:29.0997 0x06a0 agp440 - ok
23:38:30.0028 0x06a0 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
23:38:30.0059 0x06a0 ALG - ok
23:38:30.0090 0x06a0 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
23:38:30.0121 0x06a0 aliide - ok
23:38:30.0153 0x06a0 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
23:38:30.0168 0x06a0 amdide - ok
23:38:30.0215 0x06a0 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
23:38:30.0246 0x06a0 AmdK8 - ok
23:38:30.0262 0x06a0 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
23:38:30.0309 0x06a0 AmdPPM - ok
23:38:30.0324 0x06a0 [ 6EC6D772EAE38DC17C14AED9B178D24B, B4FB936B31B1265B8CC6B426C64965C34D0CCF1638E645ACD65E88F4AFFC57A6 ] amdsata C:\Windows\system32\drivers\amdsata.sys
23:38:30.0355 0x06a0 amdsata - ok
23:38:30.0371 0x06a0 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
23:38:30.0402 0x06a0 amdsbs - ok
23:38:30.0418 0x06a0 [ 1142A21DB581A84EA5597B03A26EBAA0, F94EB140D0CD068760D7EB081FF75154C75DAC75E5E24B6DE4E4F9CE65A70343 ] amdxata C:\Windows\system32\drivers\amdxata.sys
23:38:30.0433 0x06a0 amdxata - ok
23:38:30.0480 0x06a0 [ A0711D119BA4B48A1470C768D301013E, 536366F809125D2C2171597C8C2CB3271BE5C6B373152112E0D970749776E00A ] AppID C:\Windows\system32\drivers\appid.sys
23:38:30.0511 0x06a0 AppID - ok
23:38:30.0527 0x06a0 [ 173C90AF5B243B4DD86F95CA154CB58A, 349F566DADC96B31FDC34C4F26545FB880844DBF84E5821AA0D0CAA91FB837E1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
23:38:30.0574 0x06a0 AppIDSvc - ok
23:38:30.0589 0x06a0 [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo C:\Windows\System32\appinfo.dll
23:38:30.0636 0x06a0 Appinfo - ok
23:38:30.0683 0x06a0 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt C:\Windows\System32\appmgmts.dll
23:38:30.0730 0x06a0 AppMgmt - ok
23:38:30.0761 0x06a0 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys
23:38:30.0792 0x06a0 arc - ok
23:38:30.0792 0x06a0 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys
23:38:30.0823 0x06a0 arcsas - ok
23:38:30.0933 0x06a0 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:38:30.0964 0x06a0 aspnet_state - ok
23:38:30.0995 0x06a0 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:38:31.0089 0x06a0 AsyncMac - ok
23:38:31.0120 0x06a0 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
23:38:31.0135 0x06a0 atapi - ok
23:38:31.0198 0x06a0 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:38:31.0291 0x06a0 AudioEndpointBuilder - ok
23:38:31.0338 0x06a0 [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll
23:38:31.0385 0x06a0 AudioSrv - ok
23:38:31.0432 0x06a0 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
23:38:31.0479 0x06a0 AxInstSV - ok
23:38:31.0557 0x06a0 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
23:38:31.0619 0x06a0 b06bdrv - ok
23:38:31.0650 0x06a0 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
23:38:31.0713 0x06a0 b57nd60a - ok
23:38:31.0759 0x06a0 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
23:38:31.0775 0x06a0 BDESVC - ok
23:38:31.0791 0x06a0 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
23:38:31.0884 0x06a0 Beep - ok
23:38:31.0947 0x06a0 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
23:38:32.0025 0x06a0 BFE - ok
23:38:32.0087 0x06a0 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll
23:38:32.0243 0x06a0 BITS - ok
23:38:32.0259 0x06a0 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
23:38:32.0290 0x06a0 blbdrive - ok
23:38:32.0337 0x06a0 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:38:32.0368 0x06a0 bowser - ok
23:38:32.0399 0x06a0 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
23:38:32.0430 0x06a0 BrFiltLo - ok
23:38:32.0446 0x06a0 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
23:38:32.0493 0x06a0 BrFiltUp - ok
23:38:32.0539 0x06a0 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
23:38:32.0571 0x06a0 Browser - ok
23:38:32.0586 0x06a0 BrPar - ok
23:38:32.0602 0x06a0 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
23:38:32.0664 0x06a0 Brserid - ok
23:38:32.0680 0x06a0 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
23:38:32.0711 0x06a0 BrSerWdm - ok
23:38:32.0742 0x06a0 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
23:38:32.0789 0x06a0 BrUsbMdm - ok
23:38:32.0820 0x06a0 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
23:38:32.0836 0x06a0 BrUsbSer - ok
23:38:32.0851 0x06a0 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
23:38:32.0898 0x06a0 BTHMODEM - ok
23:38:32.0945 0x06a0 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
23:38:33.0039 0x06a0 bthserv - ok
23:38:33.0070 0x06a0 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:38:33.0163 0x06a0 cdfs - ok
23:38:33.0195 0x06a0 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:38:33.0241 0x06a0 cdrom - ok
23:38:33.0273 0x06a0 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
23:38:33.0351 0x06a0 CertPropSvc - ok
23:38:33.0366 0x06a0 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys
23:38:33.0398 0x06a0 circlass - ok
23:38:33.0444 0x06a0 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS C:\Windows\system32\CLFS.sys
23:38:33.0491 0x06a0 CLFS - ok
23:38:33.0538 0x06a0 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:38:33.0554 0x06a0 clr_optimization_v2.0.50727_32 - ok
23:38:33.0600 0x06a0 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:38:33.0632 0x06a0 clr_optimization_v2.0.50727_64 - ok
23:38:33.0694 0x06a0 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:38:33.0725 0x06a0 clr_optimization_v4.0.30319_32 - ok
23:38:33.0741 0x06a0 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:38:33.0772 0x06a0 clr_optimization_v4.0.30319_64 - ok
23:38:33.0788 0x06a0 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
23:38:33.0819 0x06a0 CmBatt - ok
23:38:33.0850 0x06a0 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:38:33.0866 0x06a0 cmdide - ok
23:38:33.0928 0x06a0 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG C:\Windows\system32\Drivers\cng.sys
23:38:33.0990 0x06a0 CNG - ok
23:38:34.0022 0x06a0 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
23:38:34.0037 0x06a0 Compbatt - ok
23:38:34.0053 0x06a0 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
23:38:34.0084 0x06a0 CompositeBus - ok
23:38:34.0100 0x06a0 COMSysApp - ok
23:38:34.0115 0x06a0 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
23:38:34.0131 0x06a0 crcdisk - ok
23:38:34.0178 0x06a0 [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:38:34.0224 0x06a0 CryptSvc - ok
23:38:34.0287 0x06a0 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC C:\Windows\system32\drivers\csc.sys
23:38:34.0349 0x06a0 CSC - ok
23:38:34.0396 0x06a0 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService C:\Windows\System32\cscsvc.dll
23:38:34.0458 0x06a0 CscService - ok
23:38:34.0521 0x06a0 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
23:38:34.0614 0x06a0 DcomLaunch - ok
23:38:34.0661 0x06a0 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
23:38:34.0770 0x06a0 defragsvc - ok
23:38:34.0786 0x06a0 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:38:34.0864 0x06a0 DfsC - ok
23:38:34.0895 0x06a0 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
23:38:34.0958 0x06a0 Dhcp - ok
23:38:35.0067 0x06a0 [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack C:\Windows\system32\diagtrack.dll
23:38:35.0176 0x06a0 DiagTrack - ok
23:38:35.0192 0x06a0 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
23:38:35.0285 0x06a0 discache - ok
23:38:35.0332 0x06a0 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys
23:38:35.0348 0x06a0 Disk - ok
23:38:35.0379 0x06a0 [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
23:38:35.0426 0x06a0 dmvsc - ok
23:38:35.0472 0x06a0 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:38:35.0504 0x06a0 Dnscache - ok
23:38:35.0535 0x06a0 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
23:38:35.0628 0x06a0 dot3svc - ok
23:38:35.0644 0x06a0 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
23:38:35.0722 0x06a0 DPS - ok
23:38:35.0769 0x06a0 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:38:35.0800 0x06a0 drmkaud - ok
23:38:35.0878 0x06a0 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:38:35.0956 0x06a0 DXGKrnl - ok
23:38:36.0018 0x06a0 [ 477E33019A855D9B8E7B3263CB9A1AE5, F28840936D992C99238AFECBBF03B75047DEDF0EC682C1444036931E4036AFBB ] e1kexpress C:\Windows\system32\DRIVERS\e1k62x64.sys
23:38:36.0065 0x06a0 e1kexpress - ok
23:38:36.0112 0x06a0 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
23:38:36.0206 0x06a0 EapHost - ok
23:38:36.0362 0x06a0 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys
23:38:36.0596 0x06a0 ebdrv - ok
23:38:36.0642 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] EFS C:\Windows\System32\lsass.exe
23:38:36.0674 0x06a0 EFS - ok
23:38:36.0752 0x06a0 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:38:36.0830 0x06a0 ehRecvr - ok
23:38:36.0845 0x06a0 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
23:38:36.0876 0x06a0 ehSched - ok
23:38:36.0939 0x06a0 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
23:38:36.0986 0x06a0 elxstor - ok
23:38:37.0001 0x06a0 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:38:37.0032 0x06a0 ErrDev - ok
23:38:37.0095 0x06a0 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
23:38:37.0220 0x06a0 EventSystem - ok
23:38:37.0251 0x06a0 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
23:38:37.0344 0x06a0 exfat - ok
23:38:37.0360 0x06a0 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:38:37.0454 0x06a0 fastfat - ok
23:38:37.0500 0x06a0 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
23:38:37.0563 0x06a0 Fax - ok
23:38:37.0610 0x06a0 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys
23:38:37.0641 0x06a0 fdc - ok
23:38:37.0656 0x06a0 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
23:38:37.0750 0x06a0 fdPHost - ok
23:38:37.0750 0x06a0 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
23:38:37.0828 0x06a0 FDResPub - ok
23:38:37.0859 0x06a0 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:38:37.0875 0x06a0 FileInfo - ok
23:38:37.0906 0x06a0 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:38:37.0984 0x06a0 Filetrace - ok
23:38:38.0000 0x06a0 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
23:38:38.0031 0x06a0 flpydisk - ok
23:38:38.0046 0x06a0 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:38:38.0078 0x06a0 FltMgr - ok
23:38:38.0156 0x06a0 [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
23:38:38.0249 0x06a0 FontCache - ok
23:38:38.0312 0x06a0 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:38:38.0343 0x06a0 FontCache3.0.0.0 - ok
23:38:38.0343 0x06a0 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
23:38:38.0374 0x06a0 FsDepends - ok
23:38:38.0405 0x06a0 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:38:38.0421 0x06a0 Fs_Rec - ok
23:38:38.0452 0x06a0 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
23:38:38.0499 0x06a0 fvevol - ok
23:38:38.0530 0x06a0 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
23:38:38.0546 0x06a0 gagp30kx - ok
23:38:38.0624 0x06a0 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
23:38:38.0702 0x06a0 gpsvc - ok
23:38:38.0733 0x06a0 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
23:38:38.0764 0x06a0 hcw85cir - ok
23:38:38.0811 0x06a0 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:38:38.0858 0x06a0 HdAudAddService - ok
23:38:38.0889 0x06a0 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
23:38:38.0936 0x06a0 HDAudBus - ok
23:38:38.0951 0x06a0 [ B6AC71AAA2B10848F57FC49D55A651AF, 4FAD833654E86F9FAF972AC8AF87FD4A9A765B26B96F096BBD63506B5D521A91 ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
23:38:38.0967 0x06a0 HECIx64 - ok
23:38:38.0982 0x06a0 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
23:38:39.0014 0x06a0 HidBatt - ok
23:38:39.0045 0x06a0 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys
23:38:39.0092 0x06a0 HidBth - ok
23:38:39.0123 0x06a0 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys
23:38:39.0154 0x06a0 HidIr - ok
23:38:39.0185 0x06a0 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll
23:38:39.0248 0x06a0 hidserv - ok
23:38:39.0294 0x06a0 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\drivers\hidusb.sys
23:38:39.0326 0x06a0 HidUsb - ok
23:38:39.0357 0x06a0 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:38:39.0450 0x06a0 hkmsvc - ok
23:38:39.0450 0x06a0 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:38:39.0497 0x06a0 HomeGroupListener - ok
23:38:39.0528 0x06a0 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:38:39.0575 0x06a0 HomeGroupProvider - ok
23:38:39.0622 0x06a0 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
23:38:39.0653 0x06a0 HpSAMD - ok
23:38:39.0716 0x06a0 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:38:39.0794 0x06a0 HTTP - ok
23:38:39.0840 0x06a0 [ EF558A02D734A1403583E95CCEEC2487, F0D052DAF48A62E4A90D067BFCB5EE9563804DE68D0EA82E0E11C8D16AD19D29 ] HWiNFO32 C:\Windows\system32\drivers\HWiNFO64A.SYS
23:38:39.0856 0x06a0 HWiNFO32 - ok
23:38:39.0872 0x06a0 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
23:38:39.0903 0x06a0 hwpolicy - ok
23:38:39.0918 0x06a0 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
23:38:39.0950 0x06a0 i8042prt - ok
23:38:39.0996 0x06a0 [ 3DF4395A7CF8B7A72A5F4606366B8C2D, 483588B8FC6E05488ED631C4E1CFC398553FEBFA2CD2BB527B4DF12D19774F80 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
23:38:40.0043 0x06a0 iaStorV - ok
23:38:40.0168 0x06a0 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:38:40.0262 0x06a0 idsvc - ok
23:38:40.0277 0x06a0 IEEtwCollectorService - ok
23:38:40.0808 0x06a0 [ 677AA5991026A65ADA128C4B59CF2BAD, 013F9D7362960EEE1DB70EE8B90A896EACA0B752924717FD019A6DD3BFF50C00 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
23:38:41.0463 0x06a0 igfx - ok
23:38:41.0510 0x06a0 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
23:38:41.0525 0x06a0 iirsp - ok
23:38:41.0588 0x06a0 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
23:38:41.0681 0x06a0 IKEEXT - ok
23:38:41.0931 0x06a0 [ 3A2D6740F51BE48C0FD01AD907329DEE, 4FD899CD6E3B3D5C9803E52CB72F002B6CFC144D524FAF6845CF6D115EC6E059 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
23:38:42.0212 0x06a0 IntcAzAudAddService - ok
23:38:42.0258 0x06a0 [ C6C1F19205DA83C801BE7C25F4E2EE07, AE28686272D0F3789751C8F73BE998026BA80D93539C81DDE148E34A34A9AD0C ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
23:38:42.0305 0x06a0 IntcDAud - ok
23:38:42.0336 0x06a0 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
23:38:42.0368 0x06a0 intelide - ok
23:38:42.0399 0x06a0 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:38:42.0430 0x06a0 intelppm - ok
23:38:42.0477 0x06a0 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:38:42.0555 0x06a0 IPBusEnum - ok
23:38:42.0570 0x06a0 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:38:42.0664 0x06a0 IpFilterDriver - ok
23:38:42.0726 0x06a0 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:38:42.0789 0x06a0 iphlpsvc - ok
23:38:42.0804 0x06a0 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
23:38:42.0836 0x06a0 IPMIDRV - ok
23:38:42.0851 0x06a0 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
23:38:42.0929 0x06a0 IPNAT - ok
23:38:42.0960 0x06a0 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:38:43.0007 0x06a0 IRENUM - ok
23:38:43.0023 0x06a0 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:38:43.0038 0x06a0 isapnp - ok
23:38:43.0070 0x06a0 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
23:38:43.0116 0x06a0 iScsiPrt - ok
23:38:43.0148 0x06a0 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
23:38:43.0163 0x06a0 kbdclass - ok
23:38:43.0179 0x06a0 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
23:38:43.0226 0x06a0 kbdhid - ok
23:38:43.0241 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] KeyIso C:\Windows\system32\lsass.exe
23:38:43.0272 0x06a0 KeyIso - ok
23:38:43.0304 0x06a0 [ A405647429DE231CD954D93F792CFBA2, EDE6095A20FE10EB26B3018457A44807A120508E6C514F2EAC12F5BA1F74841E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:38:43.0319 0x06a0 KSecDD - ok
23:38:43.0335 0x06a0 [ E4DC0909B5EACB5BF50F6252095BCFF2, 18779648B7FD9D3DFFD8F314E2197962DF98884CC9F025BC5D884984C1C0759D ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
23:38:43.0366 0x06a0 KSecPkg - ok
23:38:43.0397 0x06a0 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
23:38:43.0460 0x06a0 ksthunk - ok
23:38:43.0506 0x06a0 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
23:38:43.0616 0x06a0 KtmRm - ok
23:38:43.0678 0x06a0 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll
23:38:43.0772 0x06a0 LanmanServer - ok
23:38:43.0787 0x06a0 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:38:43.0865 0x06a0 LanmanWorkstation - ok
23:38:43.0912 0x06a0 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
23:38:43.0990 0x06a0 lltdio - ok
23:38:44.0021 0x06a0 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:38:44.0115 0x06a0 lltdsvc - ok
23:38:44.0162 0x06a0 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
23:38:44.0224 0x06a0 lmhosts - ok
23:38:44.0255 0x06a0 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
23:38:44.0271 0x06a0 LSI_FC - ok
23:38:44.0302 0x06a0 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
23:38:44.0318 0x06a0 LSI_SAS - ok
23:38:44.0333 0x06a0 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
23:38:44.0349 0x06a0 LSI_SAS2 - ok
23:38:44.0364 0x06a0 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
23:38:44.0396 0x06a0 LSI_SCSI - ok
23:38:44.0396 0x06a0 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
23:38:44.0489 0x06a0 luafv - ok
23:38:44.0505 0x06a0 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:38:44.0536 0x06a0 Mcx2Svc - ok
23:38:44.0552 0x06a0 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys
23:38:44.0567 0x06a0 megasas - ok
23:38:44.0598 0x06a0 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
23:38:44.0630 0x06a0 MegaSR - ok
23:38:44.0661 0x06a0 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
23:38:44.0739 0x06a0 MMCSS - ok
23:38:44.0754 0x06a0 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
23:38:44.0832 0x06a0 Modem - ok
23:38:44.0864 0x06a0 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:38:44.0895 0x06a0 monitor - ok
23:38:44.0910 0x06a0 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:38:44.0926 0x06a0 mouclass - ok
23:38:44.0957 0x06a0 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:38:44.0988 0x06a0 mouhid - ok
23:38:45.0035 0x06a0 [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
23:38:45.0051 0x06a0 mountmgr - ok
23:38:45.0113 0x06a0 [ 0DE2474F316C515482ABAD3B697F8714, 62862AE7432F5350068E96AD466093359C6CF444EB517AE6D09134FAF78C49F5 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:38:45.0144 0x06a0 MozillaMaintenance - ok
23:38:45.0176 0x06a0 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
23:38:45.0222 0x06a0 mpio - ok
23:38:45.0254 0x06a0 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:38:45.0363 0x06a0 mpsdrv - ok
23:38:45.0488 0x06a0 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
23:38:45.0612 0x06a0 MpsSvc - ok
23:38:45.0659 0x06a0 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:38:45.0690 0x06a0 MRxDAV - ok
23:38:45.0737 0x06a0 [ 43E1F4B0EFDC244D2A83995CCD7846F7, B8FB3CB6C736E20399AF3164197B14E977DDEC8FD164564501A328A8A3A30267 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:38:45.0768 0x06a0 mrxsmb - ok
23:38:45.0800 0x06a0 [ 62CEA59FF56B66154E08BD51D87392C2, 5DC63583E417659139FACD2365C2F8F3C9867E331F7374BD4F6C6E2386B5F746 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:38:45.0846 0x06a0 mrxsmb10 - ok
23:38:45.0862 0x06a0 [ 7D65B5E9573A26C204AA547457DBF544, CE88A733D031DEDBA6ADADB7D9911B3D151A2DDB566A65E0C9E1F07B1A4364AF ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:38:45.0893 0x06a0 mrxsmb20 - ok
23:38:45.0924 0x06a0 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
23:38:45.0940 0x06a0 msahci - ok
23:38:45.0971 0x06a0 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:38:46.0002 0x06a0 msdsm - ok
23:38:46.0034 0x06a0 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
23:38:46.0080 0x06a0 MSDTC - ok
23:38:46.0112 0x06a0 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:38:46.0190 0x06a0 Msfs - ok
23:38:46.0221 0x06a0 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
23:38:46.0299 0x06a0 mshidkmdf - ok
23:38:46.0314 0x06a0 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:38:46.0330 0x06a0 msisadrv - ok
23:38:46.0361 0x06a0 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:38:46.0455 0x06a0 MSiSCSI - ok
23:38:46.0470 0x06a0 msiserver - ok
23:38:46.0502 0x06a0 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:38:46.0564 0x06a0 MSKSSRV - ok
23:38:46.0580 0x06a0 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:38:46.0658 0x06a0 MSPCLOCK - ok
23:38:46.0673 0x06a0 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:38:46.0751 0x06a0 MSPQM - ok
23:38:46.0782 0x06a0 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:38:46.0829 0x06a0 MsRPC - ok
23:38:46.0845 0x06a0 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
23:38:46.0860 0x06a0 mssmbios - ok
23:38:46.0876 0x06a0 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:38:46.0954 0x06a0 MSTEE - ok
23:38:46.0970 0x06a0 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
23:38:47.0001 0x06a0 MTConfig - ok
23:38:47.0001 0x06a0 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
23:38:47.0032 0x06a0 Mup - ok
23:38:47.0079 0x06a0 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
23:38:47.0172 0x06a0 napagent - ok
23:38:47.0219 0x06a0 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:38:47.0282 0x06a0 NativeWifiP - ok
23:38:47.0344 0x06a0 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
23:38:47.0422 0x06a0 NDIS - ok
23:38:47.0438 0x06a0 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
23:38:47.0516 0x06a0 NdisCap - ok
23:38:47.0531 0x06a0 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:38:47.0609 0x06a0 NdisTapi - ok
23:38:47.0640 0x06a0 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:38:47.0703 0x06a0 Ndisuio - ok
23:38:47.0718 0x06a0 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:38:47.0812 0x06a0 NdisWan - ok
23:38:47.0828 0x06a0 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:38:47.0906 0x06a0 NDProxy - ok
23:38:47.0921 0x06a0 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:38:48.0030 0x06a0 NetBIOS - ok
23:38:48.0046 0x06a0 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
23:38:48.0124 0x06a0 NetBT - ok
23:38:48.0155 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] Netlogon C:\Windows\system32\lsass.exe
23:38:48.0171 0x06a0 Netlogon - ok
23:38:48.0218 0x06a0 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
23:38:48.0327 0x06a0 Netman - ok
23:38:48.0374 0x06a0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:38:48.0405 0x06a0 NetMsmqActivator - ok
23:38:48.0420 0x06a0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:38:48.0452 0x06a0 NetPipeActivator - ok
23:38:48.0483 0x06a0 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
23:38:48.0576 0x06a0 netprofm - ok
23:38:48.0592 0x06a0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:38:48.0623 0x06a0 NetTcpActivator - ok
23:38:48.0623 0x06a0 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:38:48.0654 0x06a0 NetTcpPortSharing - ok
23:38:48.0701 0x06a0 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
23:38:48.0717 0x06a0 nfrd960 - ok
23:38:48.0764 0x06a0 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll
23:38:48.0826 0x06a0 NlaSvc - ok
23:38:48.0842 0x06a0 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:38:48.0920 0x06a0 Npfs - ok
23:38:48.0935 0x06a0 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
23:38:49.0013 0x06a0 nsi - ok
23:38:49.0029 0x06a0 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:38:49.0107 0x06a0 nsiproxy - ok
23:38:49.0216 0x06a0 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:38:49.0310 0x06a0 Ntfs - ok
23:38:49.0325 0x06a0 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
23:38:49.0403 0x06a0 Null - ok
23:38:49.0419 0x06a0 [ 5D9FD91F3D38DC9DA01E3CB5FA89CD48, 7738785DE8B50D69993F4408498B812D0283FEE5C04FF5B89C20F149B44E9737 ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:38:49.0450 0x06a0 nvraid - ok
23:38:49.0466 0x06a0 [ F7CD50FE7139F07E77DA8AC8033D1832, DA96F4B15C8165E6AE1D00E03A062C66CA3A3089E4FF0E9E11CE00B154DD12EC ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:38:49.0497 0x06a0 nvstor - ok
23:38:49.0512 0x06a0 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:38:49.0544 0x06a0 nv_agp - ok
23:38:49.0637 0x06a0 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
23:38:49.0684 0x06a0 odserv - ok
23:38:49.0684 0x06a0 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
23:38:49.0715 0x06a0 ohci1394 - ok
23:38:49.0746 0x06a0 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:38:49.0778 0x06a0 ose - ok
23:38:49.0824 0x06a0 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
23:38:49.0887 0x06a0 p2pimsvc - ok
23:38:49.0918 0x06a0 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
23:38:49.0980 0x06a0 p2psvc - ok
23:38:50.0012 0x06a0 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys
23:38:50.0058 0x06a0 Parport - ok
23:38:50.0105 0x06a0 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:38:50.0121 0x06a0 partmgr - ok
23:38:50.0136 0x06a0 [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
23:38:50.0168 0x06a0 PcaSvc - ok
23:38:50.0199 0x06a0 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
23:38:50.0230 0x06a0 pci - ok
23:38:50.0261 0x06a0 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
23:38:50.0277 0x06a0 pciide - ok
23:38:50.0308 0x06a0 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
23:38:50.0355 0x06a0 pcmcia - ok
23:38:50.0370 0x06a0 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
23:38:50.0386 0x06a0 pcw - ok
23:38:50.0417 0x06a0 [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:38:50.0573 0x06a0 PEAUTH - ok
23:38:50.0667 0x06a0 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
23:38:50.0776 0x06a0 PeerDistSvc - ok
23:38:50.0854 0x06a0 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
23:38:50.0885 0x06a0 PerfHost - ok
23:38:50.0994 0x06a0 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
23:38:51.0135 0x06a0 pla - ok
23:38:51.0197 0x06a0 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:38:51.0244 0x06a0 PlugPlay - ok
23:38:51.0260 0x06a0 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
23:38:51.0275 0x06a0 PNRPAutoReg - ok
23:38:51.0306 0x06a0 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
23:38:51.0338 0x06a0 PNRPsvc - ok
23:38:51.0384 0x06a0 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:38:51.0509 0x06a0 PolicyAgent - ok
23:38:51.0540 0x06a0 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
23:38:51.0634 0x06a0 Power - ok
23:38:51.0665 0x06a0 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
23:38:51.0743 0x06a0 PptpMiniport - ok
23:38:51.0774 0x06a0 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys
23:38:51.0806 0x06a0 Processor - ok
23:38:51.0837 0x06a0 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll
23:38:51.0884 0x06a0 ProfSvc - ok
23:38:51.0899 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] ProtectedStorage C:\Windows\system32\lsass.exe
23:38:51.0930 0x06a0 ProtectedStorage - ok
23:38:51.0946 0x06a0 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
23:38:52.0024 0x06a0 Psched - ok
23:38:52.0133 0x06a0 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
23:38:52.0242 0x06a0 ql2300 - ok
23:38:52.0258 0x06a0 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
23:38:52.0289 0x06a0 ql40xx - ok
23:38:52.0320 0x06a0 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
23:38:52.0367 0x06a0 QWAVE - ok
23:38:52.0383 0x06a0 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:38:52.0430 0x06a0 QWAVEdrv - ok
23:38:52.0430 0x06a0 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:38:52.0523 0x06a0 RasAcd - ok
23:38:52.0570 0x06a0 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
23:38:52.0632 0x06a0 RasAgileVpn - ok
23:38:52.0648 0x06a0 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
23:38:52.0742 0x06a0 RasAuto - ok
23:38:52.0757 0x06a0 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:38:52.0835 0x06a0 Rasl2tp - ok
23:38:52.0866 0x06a0 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
23:38:52.0960 0x06a0 RasMan - ok
23:38:52.0976 0x06a0 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:38:53.0054 0x06a0 RasPppoe - ok
23:38:53.0085 0x06a0 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:38:53.0163 0x06a0 RasSstp - ok
23:38:53.0210 0x06a0 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:38:53.0303 0x06a0 rdbss - ok
23:38:53.0319 0x06a0 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
23:38:53.0350 0x06a0 rdpbus - ok
23:38:53.0366 0x06a0 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:38:53.0444 0x06a0 RDPCDD - ok
23:38:53.0475 0x06a0 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
23:38:53.0522 0x06a0 RDPDR - ok
23:38:53.0537 0x06a0 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:38:53.0615 0x06a0 RDPENCDD - ok
23:38:53.0631 0x06a0 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
23:38:53.0709 0x06a0 RDPREFMP - ok
23:38:53.0740 0x06a0 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:38:53.0771 0x06a0 RDPWD - ok
23:38:53.0818 0x06a0 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
23:38:53.0865 0x06a0 rdyboost - ok
23:38:53.0896 0x06a0 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
23:38:53.0974 0x06a0 RemoteAccess - ok
23:38:54.0021 0x06a0 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:38:54.0130 0x06a0 RemoteRegistry - ok
23:38:54.0146 0x06a0 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
23:38:54.0224 0x06a0 RpcEptMapper - ok
23:38:54.0255 0x06a0 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
23:38:54.0270 0x06a0 RpcLocator - ok
23:38:54.0317 0x06a0 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
23:38:54.0411 0x06a0 RpcSs - ok
23:38:54.0442 0x06a0 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
23:38:54.0536 0x06a0 rspndr - ok
23:38:54.0551 0x06a0 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap C:\Windows\system32\drivers\vms3cap.sys
23:38:54.0567 0x06a0 s3cap - ok
23:38:54.0582 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] SamSs C:\Windows\system32\lsass.exe
23:38:54.0614 0x06a0 SamSs - ok
23:38:54.0614 0x06a0 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:38:54.0645 0x06a0 sbp2port - ok
23:38:54.0660 0x06a0 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:38:54.0754 0x06a0 SCardSvr - ok
23:38:54.0770 0x06a0 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
23:38:54.0832 0x06a0 scfilter - ok
23:38:54.0910 0x06a0 [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule C:\Windows\system32\schedsvc.dll
23:38:55.0019 0x06a0 Schedule - ok
23:38:55.0035 0x06a0 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
23:38:55.0113 0x06a0 SCPolicySvc - ok
23:38:55.0128 0x06a0 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:38:55.0175 0x06a0 SDRSVC - ok
23:38:55.0222 0x06a0 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:38:55.0253 0x06a0 secdrv - ok
23:38:55.0269 0x06a0 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
23:38:55.0347 0x06a0 seclogon - ok
23:38:55.0378 0x06a0 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll
23:38:55.0456 0x06a0 SENS - ok
23:38:55.0487 0x06a0 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
23:38:55.0503 0x06a0 SensrSvc - ok
23:38:55.0534 0x06a0 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
23:38:55.0565 0x06a0 Serenum - ok
23:38:55.0581 0x06a0 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
23:38:55.0612 0x06a0 Serial - ok
23:38:55.0643 0x06a0 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys
23:38:55.0674 0x06a0 sermouse - ok
23:38:55.0690 0x06a0 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
23:38:55.0768 0x06a0 SessionEnv - ok
23:38:55.0784 0x06a0 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
23:38:55.0815 0x06a0 sffdisk - ok
23:38:55.0830 0x06a0 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:38:55.0862 0x06a0 sffp_mmc - ok
23:38:55.0877 0x06a0 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
23:38:55.0908 0x06a0 sffp_sd - ok
23:38:55.0924 0x06a0 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
23:38:55.0955 0x06a0 sfloppy - ok
23:38:56.0002 0x06a0 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:38:56.0096 0x06a0 SharedAccess - ok
23:38:56.0142 0x06a0 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:38:56.0236 0x06a0 ShellHWDetection - ok
23:38:56.0252 0x06a0 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
23:38:56.0283 0x06a0 SiSRaid2 - ok
23:38:56.0283 0x06a0 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
23:38:56.0314 0x06a0 SiSRaid4 - ok
23:38:56.0330 0x06a0 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:38:56.0423 0x06a0 Smb - ok
23:38:56.0439 0x06a0 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:38:56.0470 0x06a0 SNMPTRAP - ok
23:38:56.0486 0x06a0 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
23:38:56.0501 0x06a0 spldr - ok
23:38:56.0532 0x06a0 [ B96C17B5DC1424D56EEA3A99E97428CD, AF0A85066A7983878DC1C663811CE61C6CA1912DC956184F878B7B82DB93C651 ] Spooler C:\Windows\System32\spoolsv.exe
23:38:56.0642 0x06a0 Spooler - ok
23:38:56.0813 0x06a0 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
23:38:57.0110 0x06a0 sppsvc - ok
23:38:57.0125 0x06a0 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
23:38:57.0203 0x06a0 sppuinotify - ok
23:38:57.0250 0x06a0 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
23:38:57.0312 0x06a0 srv - ok
23:38:57.0328 0x06a0 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:38:57.0375 0x06a0 srv2 - ok
23:38:57.0406 0x06a0 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:38:57.0453 0x06a0 srvnet - ok
23:38:57.0500 0x06a0 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:38:57.0593 0x06a0 SSDPSRV - ok
23:38:57.0593 0x06a0 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:38:57.0671 0x06a0 SstpSvc - ok
23:38:57.0687 0x06a0 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys
23:38:57.0702 0x06a0 stexstor - ok
23:38:57.0765 0x06a0 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
23:38:57.0843 0x06a0 stisvc - ok
23:38:57.0874 0x06a0 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt C:\Windows\system32\drivers\vmstorfl.sys
23:38:57.0890 0x06a0 storflt - ok
23:38:57.0921 0x06a0 [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc C:\Windows\system32\storsvc.dll
23:38:57.0952 0x06a0 StorSvc - ok
23:38:57.0983 0x06a0 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc C:\Windows\system32\drivers\storvsc.sys
23:38:57.0999 0x06a0 storvsc - ok
23:38:57.0999 0x06a0 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
23:38:58.0030 0x06a0 swenum - ok
23:38:58.0077 0x06a0 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
23:38:58.0186 0x06a0 swprv - ok
23:38:58.0280 0x06a0 [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain C:\Windows\system32\sysmain.dll
23:38:58.0436 0x06a0 SysMain - ok
23:38:58.0451 0x06a0 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:38:58.0482 0x06a0 TabletInputService - ok
23:38:58.0514 0x06a0 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
23:38:58.0607 0x06a0 TapiSrv - ok
23:38:58.0623 0x06a0 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
23:38:58.0701 0x06a0 TBS - ok
23:38:58.0810 0x06a0 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:38:58.0950 0x06a0 Tcpip - ok
23:38:59.0044 0x06a0 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
23:38:59.0153 0x06a0 TCPIP6 - ok
23:38:59.0184 0x06a0 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:38:59.0200 0x06a0 tcpipreg - ok
23:38:59.0247 0x06a0 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:38:59.0262 0x06a0 TDPIPE - ok
23:38:59.0278 0x06a0 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:38:59.0309 0x06a0 TDTCP - ok
23:38:59.0340 0x06a0 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:38:59.0372 0x06a0 tdx - ok
23:38:59.0387 0x06a0 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
23:38:59.0403 0x06a0 TermDD - ok
23:38:59.0465 0x06a0 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll
23:38:59.0543 0x06a0 TermService - ok
23:38:59.0559 0x06a0 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
23:38:59.0621 0x06a0 Themes - ok
23:38:59.0637 0x06a0 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
23:38:59.0715 0x06a0 THREADORDER - ok
23:38:59.0762 0x06a0 [ DBCC20C02E8A3E43B03C304A4E40A84F, BF5F3ACCB0342304A6870E94D2576644B08DBF307C853C7DBA4B82B0C7309DA4 ] TPM C:\Windows\system32\drivers\tpm.sys
23:38:59.0793 0x06a0 TPM - ok
23:38:59.0824 0x06a0 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
23:38:59.0918 0x06a0 TrkWks - ok
23:38:59.0996 0x06a0 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:39:00.0105 0x06a0 TrustedInstaller - ok
23:39:00.0136 0x06a0 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:39:00.0167 0x06a0 tssecsrv - ok
23:39:00.0167 0x06a0 [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
23:39:00.0198 0x06a0 TsUsbFlt - ok
23:39:00.0230 0x06a0 [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
23:39:00.0245 0x06a0 TsUsbGD - ok
23:39:00.0292 0x06a0 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:39:00.0370 0x06a0 tunnel - ok
23:39:00.0370 0x06a0 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
23:39:00.0401 0x06a0 uagp35 - ok
23:39:00.0432 0x06a0 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:39:00.0510 0x06a0 udfs - ok
23:39:00.0557 0x06a0 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:39:00.0588 0x06a0 UI0Detect - ok
23:39:00.0620 0x06a0 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:39:00.0635 0x06a0 uliagpkx - ok
23:39:00.0651 0x06a0 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys
23:39:00.0698 0x06a0 umbus - ok
23:39:00.0713 0x06a0 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys
23:39:00.0744 0x06a0 UmPass - ok
23:39:00.0791 0x06a0 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService C:\Windows\System32\umrdp.dll
23:39:00.0838 0x06a0 UmRdpService - ok
23:39:00.0869 0x06a0 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
23:39:00.0963 0x06a0 upnphost - ok
23:39:01.0010 0x06a0 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
23:39:01.0041 0x06a0 usbccgp - ok
23:39:01.0072 0x06a0 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:39:01.0119 0x06a0 usbcir - ok
23:39:01.0150 0x06a0 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
23:39:01.0181 0x06a0 usbehci - ok
23:39:01.0244 0x06a0 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:39:01.0337 0x06a0 usbhub - ok
23:39:01.0384 0x06a0 [ 58E546BBAF87664FC57E0F6081E4F609, 1DD99D57369A0069654432AB5325AFD8F7D422D531E053EA05FF664BA6BDAEF9 ] usbohci C:\Windows\system32\drivers\usbohci.sys
23:39:01.0462 0x06a0 usbohci - ok
23:39:01.0478 0x06a0 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:39:01.0509 0x06a0 usbprint - ok
23:39:01.0540 0x06a0 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
23:39:01.0571 0x06a0 usbscan - ok
23:39:01.0587 0x06a0 [ D76510CFA0FC09023077F22C2F979D86, 5662281C6D515423255D3C262EA368DBAFC250235E535FBFA3E59D3487695439 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:39:01.0618 0x06a0 USBSTOR - ok
23:39:01.0634 0x06a0 [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
23:39:01.0680 0x06a0 usbuhci - ok
23:39:01.0696 0x06a0 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
23:39:01.0790 0x06a0 UxSms - ok
23:39:01.0805 0x06a0 [ FDD980360C9D72DA77F4C59376AE95C9, A5C1BCFBCCD031A24BD87D6A193F595B45EA5AC9FEBC198F552EED60AB75238E ] VaultSvc C:\Windows\system32\lsass.exe
23:39:01.0836 0x06a0 VaultSvc - ok
23:39:01.0852 0x06a0 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:39:01.0883 0x06a0 vdrvroot - ok
23:39:01.0914 0x06a0 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
23:39:02.0024 0x06a0 vds - ok
23:39:02.0039 0x06a0 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:39:02.0070 0x06a0 vga - ok
23:39:02.0086 0x06a0 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
23:39:02.0164 0x06a0 VgaSave - ok
23:39:02.0195 0x06a0 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
23:39:02.0226 0x06a0 vhdmp - ok
23:39:02.0258 0x06a0 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
23:39:02.0289 0x06a0 viaide - ok
23:39:02.0320 0x06a0 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus C:\Windows\system32\drivers\vmbus.sys
23:39:02.0351 0x06a0 vmbus - ok
23:39:02.0367 0x06a0 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
23:39:02.0398 0x06a0 VMBusHID - ok
23:39:02.0414 0x06a0 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:39:02.0429 0x06a0 volmgr - ok
23:39:02.0445 0x06a0 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:39:02.0492 0x06a0 volmgrx - ok
23:39:02.0507 0x06a0 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:39:02.0554 0x06a0 volsnap - ok
23:39:02.0570 0x06a0 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
23:39:02.0601 0x06a0 vsmraid - ok
23:39:02.0710 0x06a0 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
23:39:02.0882 0x06a0 VSS - ok
23:39:02.0897 0x06a0 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
23:39:02.0944 0x06a0 vwifibus - ok
23:39:02.0975 0x06a0 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
23:39:03.0069 0x06a0 W32Time - ok
23:39:03.0100 0x06a0 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
23:39:03.0131 0x06a0 WacomPen - ok
23:39:03.0147 0x06a0 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
23:39:03.0225 0x06a0 WANARP - ok
23:39:03.0225 0x06a0 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:39:03.0303 0x06a0 Wanarpv6 - ok
23:39:03.0381 0x06a0 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
23:39:03.0521 0x06a0 wbengine - ok
23:39:03.0537 0x06a0 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
23:39:03.0584 0x06a0 WbioSrvc - ok
23:39:03.0630 0x06a0 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:39:03.0708 0x06a0 wcncsvc - ok
23:39:03.0724 0x06a0 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:39:03.0755 0x06a0 WcsPlugInService - ok
23:39:03.0786 0x06a0 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys
23:39:03.0802 0x06a0 Wd - ok
23:39:03.0864 0x06a0 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:39:03.0942 0x06a0 Wdf01000 - ok
23:39:03.0958 0x06a0 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:39:03.0989 0x06a0 WdiServiceHost - ok
23:39:04.0005 0x06a0 [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:39:04.0036 0x06a0 WdiSystemHost - ok
23:39:04.0083 0x06a0 [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient C:\Windows\System32\webclnt.dll
23:39:04.0130 0x06a0 WebClient - ok
23:39:04.0161 0x06a0 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:39:04.0270 0x06a0 Wecsvc - ok
23:39:04.0286 0x06a0 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:39:04.0364 0x06a0 wercplsupport - ok
23:39:04.0379 0x06a0 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
23:39:04.0457 0x06a0 WerSvc - ok
23:39:04.0473 0x06a0 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
23:39:04.0551 0x06a0 WfpLwf - ok
23:39:04.0582 0x06a0 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
23:39:04.0598 0x06a0 WIMMount - ok
23:39:04.0629 0x06a0 WinDefend - ok
23:39:04.0629 0x06a0 WinHttpAutoProxySvc - ok
23:39:04.0707 0x06a0 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:39:04.0816 0x06a0 Winmgmt - ok
23:39:04.0941 0x06a0 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll
23:39:05.0081 0x06a0 WinRM - ok
23:39:05.0144 0x06a0 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
23:39:05.0175 0x06a0 WinUsb - ok
23:39:05.0253 0x06a0 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
23:39:05.0362 0x06a0 Wlansvc - ok
23:39:05.0378 0x06a0 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
23:39:05.0409 0x06a0 WmiAcpi - ok
23:39:05.0440 0x06a0 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:39:05.0487 0x06a0 wmiApSrv - ok
23:39:05.0518 0x06a0 WMPNetworkSvc - ok
23:39:05.0534 0x06a0 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:39:05.0565 0x06a0 WPCSvc - ok
23:39:05.0596 0x06a0 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:39:05.0627 0x06a0 WPDBusEnum - ok
23:39:05.0658 0x06a0 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:39:05.0721 0x06a0 ws2ifsl - ok
23:39:05.0736 0x06a0 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll
23:39:05.0783 0x06a0 wscsvc - ok
23:39:05.0783 0x06a0 WSearch - ok
23:39:05.0939 0x06a0 [ 39D604E190DFE2E483B637D6796ABAFF, 52DCCEA0DB59F00C615D94CC2B70FC1C335E553E8FC79AAC8C8C7D9EE1F6111D ] wuauserv C:\Windows\system32\wuaueng.dll
23:39:06.0126 0x06a0 wuauserv - ok
23:39:06.0158 0x06a0 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
23:39:06.0189 0x06a0 WudfPf - ok
23:39:06.0236 0x06a0 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:39:06.0282 0x06a0 WUDFRd - ok
23:39:06.0298 0x06a0 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:39:06.0345 0x06a0 wudfsvc - ok
23:39:06.0392 0x06a0 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
23:39:06.0438 0x06a0 WwanSvc - ok
23:39:06.0454 0x06a0 ================ Scan global ===============================
23:39:06.0485 0x06a0 [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
23:39:06.0516 0x06a0 [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
23:39:06.0563 0x06a0 [ 8927015C999D55D9B4AC66000EE5343D, 2AC4896880BAD44192822063A31785F4A716D992201B3E6A590A2D75D9729A4A ] C:\Windows\system32\winsrv.dll
23:39:06.0610 0x06a0 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
23:39:06.0657 0x06a0 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
23:39:06.0672 0x06a0 [ Global ] - ok
23:39:06.0672 0x06a0 ================ Scan MBR ==================================
23:39:06.0672 0x06a0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:39:06.0906 0x06a0 \Device\Harddisk0\DR0 - ok
23:39:06.0938 0x06a0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
23:39:07.0406 0x06a0 \Device\Harddisk1\DR1 - ok
23:39:07.0406 0x06a0 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2
23:39:07.0827 0x06a0 \Device\Harddisk2\DR2 - ok
23:39:07.0827 0x06a0 ================ Scan VBR ==================================
23:39:07.0827 0x06a0 [ 47283DA5F5B820DF14221EB593699FC4 ] \Device\Harddisk0\DR0\Partition1
23:39:07.0827 0x06a0 \Device\Harddisk0\DR0\Partition1 - ok
23:39:07.0842 0x06a0 [ 5893A5F0468B282BA59F1E16450CC109 ] \Device\Harddisk0\DR0\Partition2
23:39:07.0874 0x06a0 \Device\Harddisk0\DR0\Partition2 - ok
23:39:07.0889 0x06a0 [ CE305EFD4AAD2DB952BD5C9138DDCC2F ] \Device\Harddisk0\DR0\Partition3
23:39:07.0905 0x06a0 \Device\Harddisk0\DR0\Partition3 - ok
23:39:07.0905 0x06a0 [ DA919C58594C06B2230186E395C402D6 ] \Device\Harddisk1\DR1\Partition1
23:39:07.0936 0x06a0 \Device\Harddisk1\DR1\Partition1 - ok
23:39:07.0936 0x06a0 [ FA30957F382EF1D778D8EE3605FD858B ] \Device\Harddisk1\DR1\Partition2
23:39:07.0952 0x06a0 \Device\Harddisk1\DR1\Partition2 - ok
23:39:07.0952 0x06a0 [ 3A62C537B52870483C8576ED09DF51D3 ] \Device\Harddisk1\DR1\Partition3
23:39:07.0952 0x06a0 \Device\Harddisk1\DR1\Partition3 - ok
23:39:07.0967 0x06a0 [ EECF8659405BECEC84A0B855121A7596 ] \Device\Harddisk1\DR1\Partition4
23:39:07.0967 0x06a0 \Device\Harddisk1\DR1\Partition4 - ok
23:39:07.0967 0x06a0 [ EA8EC23ABFB520295C01DB93F9B38647 ] \Device\Harddisk2\DR2\Partition1
23:39:07.0967 0x06a0 \Device\Harddisk2\DR2\Partition1 - ok
23:39:07.0967 0x06a0 ================ Scan generic autorun ======================
23:39:08.0014 0x06a0 [ 71B4CE3E69FCF0B4603C5A7D98C797E6, 96AECE9AFB06672437C6BC2676E8FFCED16B499B6D88BCEA81D0C78C14D875D4 ] C:\Windows\system32\igfxtray.exe
23:39:08.0030 0x06a0 IgfxTray - ok
23:39:08.0045 0x06a0 [ 96305625A2552BF9AC62C4736971E1B6, 422C38D7C38F839A89975F660DE9747BDFB210AADD04EC2F1E8ABD6833649F27 ] C:\Windows\system32\hkcmd.exe
23:39:08.0076 0x06a0 HotKeysCmds - ok
23:39:08.0108 0x06a0 [ E6EA1C8C14003F5454672D315EB41892, B7694F2AE6353D709149FB5A2C40E8984DDEFDBA8BCB7CC21F17FC2466CD40B7 ] C:\Windows\system32\igfxpers.exe
23:39:08.0139 0x06a0 Persistence - ok
23:39:08.0217 0x06a0 [ CE8F4D2B9C72FB38AC96B805512ADA58, AE6B8F2580473AA108FA0130F630DE32CC21279CD0ECC75788C9015C04C196FD ] C:\PROGRA~3\EPSONS~1\EVENTM~1\EEventManager.exe
23:39:08.0264 0x06a0 EEventManager - ok
23:39:08.0357 0x06a0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
23:39:08.0466 0x06a0 Sidebar - ok
23:39:08.0482 0x06a0 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
23:39:08.0529 0x06a0 mctadmin - ok
23:39:08.0591 0x06a0 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
23:39:08.0669 0x06a0 Sidebar - ok
23:39:08.0685 0x06a0 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
23:39:08.0732 0x06a0 mctadmin - ok
23:39:08.0732 0x06a0 Nowwlxomcj - ok
23:39:09.0153 0x06a0 [ B05E1CE24CC555E189FCEB1AD07DFCED, 074E7F84C64B6BB54EE3F1BA4EF1804FA33A21ADB1E80904BF56706AA5EB457D ] C:\Program Files\CCleaner\CCleaner64.exe
23:39:09.0668 0x06a0 CCleaner Monitoring - ok
23:39:09.0668 0x06a0 Waiting for KSN requests completion. In queue: 63
23:39:10.0682 0x06a0 Waiting for KSN requests completion. In queue: 63
23:39:11.0727 0x06a0 Win FW state via NFP2: disabled ( trusted )
23:39:13.0022 0x06a0 ============================================================
23:39:13.0022 0x06a0 Scan finished
23:39:13.0022 0x06a0 ============================================================
23:39:13.0022 0x0984 Detected object count: 0
23:39:13.0022 0x0984 Actual detected object count: 0
23:44:27.0565 0x0ae8 Deinitialize success

Entschuldigung, ich habe die CODE-Brackets vergessen. Gestern war kein guter Tag - mit kam das gleich komisch vor, hab's aber nicht kapiert. Und heute kann ich nicht mehr editieren :-(

Entschuldigung, ich habe die CODE-Brackets vergessen. Gestern war kein guter Tag - mir kam das gleich komisch vor, hab's aber nicht kapiert. Und heute kann ich nicht mehr editieren :-(

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hi,

irgendwann krieg ich raus, ob am anderen Ende eine Maschine sitzt oder ein Mensch ;-)

Falls es nicht zu vermessen sein sollte: Was haben wir jetzt eigentlich getrieben? Sind immer alle diese Schritte notwendig?

Danke erstmal & schönen Sonntag!

Gruß
drambeldier

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hi Schrauber,

> Noch Probleme?

jein. Den ursprünglichen Fehler (Einige_Features) kann ich eh nicht reproduzieren, weil der Auslöser unbekannt ist. Und den Überblick, wer hier wann was bereinigt hat, habe ich schon lang verloren. Vor allem weiß ich nicht, was diese Bereinigungsprogramm so alles treiben.

Momentan versuche ich den JRE zu installieren, da komme ich nicht mal bis zum Begrüßungsbild. Anwendung fehlt im Taskmanager, Prozess läuft aber, ProcessExplorer findet ihn nicht. Vermutlich andere Baustelle ':-(

[off topic] Kann man die hopsenden Smileys nicht abschalten? Die bringen mich um den Verstand.

Gruß
drambeldier

Was für Smileys?

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Frisches FRST log bitte.

Hi Schrauber,

wie kriege ich jemals raus, was hier abgelaufen ist? Softonic versucht - wie Chip und viele andere auch - irgendwelche Toolbars unterzubringen, aber wer unterscheedet da eigentlich zwischen Gut und Böse? Oder wird da nur nach technischen Tricks gesucht, mit denen man genauso gut Malware verbreiten könnte?

Gruß
drambeldier