la.schnute | 08.08.2018 13:48 | Code:
14:03:37.0222 0x0f7c TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
14:03:40.0737 0x0f7c ============================================================
14:03:40.0737 0x0f7c Current date / time: 2018/08/08 14:03:40.0737
14:03:40.0737 0x0f7c SystemInfo:
14:03:40.0737 0x0f7c
14:03:40.0737 0x0f7c OS Version: 10.0.17134 ServicePack: 0.0
14:03:40.0737 0x0f7c Product type: Workstation
14:03:40.0737 0x0f7c ComputerName: MARENS-PC
14:03:40.0737 0x0f7c UserName: Maren
14:03:40.0737 0x0f7c Windows directory: C:\WINDOWS
14:03:40.0737 0x0f7c System windows directory: C:\WINDOWS
14:03:40.0737 0x0f7c Running under WOW64
14:03:40.0737 0x0f7c Processor architecture: Intel x64
14:03:40.0737 0x0f7c Number of processors: 4
14:03:40.0737 0x0f7c Page size: 0x1000
14:03:40.0737 0x0f7c Boot type: Normal boot
14:03:40.0737 0x0f7c CodeIntegrityOptions = 0x00000201
14:03:40.0737 0x0f7c ============================================================
14:03:40.0768 0x0f7c KLMD registered as C:\WINDOWS\system32\drivers\84166870.sys
14:03:40.0768 0x0f7c KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19
14:03:40.0847 0x0f7c System UUID: {20F6B752-4751-F3C6-A3DF-F1F07952BDD4}
14:03:41.0034 0x0f7c Drive \Device\Harddisk0\DR0 - Size: 0x29EB906000 ( 167.68 Gb ), SectorSize: 0x200, Cylinders: 0x5581, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:03:41.0034 0x0f7c ============================================================
14:03:41.0034 0x0f7c \Device\Harddisk0\DR0:
14:03:41.0034 0x0f7c MBR partitions:
14:03:41.0034 0x0f7c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2EE000
14:03:41.0034 0x0f7c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x11E05000
14:03:41.0034 0x0f7c \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x120F3800, BlocksNum 0x2068800
14:03:41.0034 0x0f7c ============================================================
14:03:41.0050 0x0f7c C: <-> \Device\Harddisk0\DR0\Partition2
14:03:41.0050 0x0f7c Q: <-> \Device\Harddisk0\DR0\Partition3
14:03:41.0050 0x0f7c ============================================================
14:03:41.0050 0x0f7c Initialize success
14:03:41.0050 0x0f7c ============================================================
14:03:42.0737 0x1c6c ============================================================
14:03:42.0737 0x1c6c Scan started
14:03:42.0737 0x1c6c Mode: Manual;
14:03:42.0737 0x1c6c ============================================================
14:03:42.0737 0x1c6c KSN ping started
14:03:42.0800 0x1c6c KSN ping finished: true
14:03:43.0284 0x1c6c ================ Scan system memory ========================
14:03:43.0284 0x1c6c System memory - ok
14:03:43.0284 0x1c6c ================ Scan services =============================
14:03:43.0331 0x1c6c 1394ohci - ok
14:03:43.0331 0x1c6c 3ware - ok
14:03:43.0331 0x1c6c ACPI - ok
14:03:43.0346 0x1c6c AcpiDev - ok
14:03:43.0346 0x1c6c acpiex - ok
14:03:43.0346 0x1c6c acpipagr - ok
14:03:43.0346 0x1c6c [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
14:03:43.0346 0x1c6c AcpiPmi - ok
14:03:43.0362 0x1c6c acpitime - ok
14:03:43.0378 0x1c6c [ 429052DAECD6BF6CCD462B22858B3D2A, 40F3EDE23332CCBEE8A637D099B71C0F41D328B864C8D3A7EA672E58B8069E06 ] acsock C:\WINDOWS\system32\DRIVERS\acsock64.sys
14:03:43.0378 0x1c6c acsock - ok
14:03:43.0378 0x1c6c ADP80XX - ok
14:03:43.0393 0x1c6c AFD - ok
14:03:43.0393 0x1c6c [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix C:\WINDOWS\system32\drivers\afunix.sys
14:03:43.0393 0x1c6c afunix - ok
14:03:43.0409 0x1c6c [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
14:03:43.0409 0x1c6c ahcache - ok
14:03:43.0409 0x1c6c [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll
14:03:43.0409 0x1c6c AJRouter - ok
14:03:43.0424 0x1c6c [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG C:\WINDOWS\System32\alg.exe
14:03:43.0424 0x1c6c ALG - ok
14:03:43.0424 0x1c6c AmdK8 - ok
14:03:43.0424 0x1c6c AmdPPM - ok
14:03:43.0424 0x1c6c amdsata - ok
14:03:43.0440 0x1c6c amdsbs - ok
14:03:43.0440 0x1c6c amdxata - ok
14:03:43.0440 0x1c6c [ 2CCB04097E143C7F82333863343C838C, E6A79EDDF03317BEF9B25C9FA658DF6A588DC06A9AF66338ADE31D5D29E4FB3C ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll
14:03:43.0456 0x1c6c AppHostSvc - ok
14:03:43.0456 0x1c6c [ E4A18157BF5D8D714C05169A8A8D604C, 45D8CB25A9967D634F8331070BDFB3DF4ACB6295CF1520F9AAE8753D3BF4018A ] AppID C:\WINDOWS\system32\drivers\appid.sys
14:03:43.0456 0x1c6c AppID - ok
14:03:43.0471 0x1c6c [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
14:03:43.0471 0x1c6c AppIDSvc - ok
14:03:43.0471 0x1c6c [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo C:\WINDOWS\System32\appinfo.dll
14:03:43.0471 0x1c6c Appinfo - ok
14:03:43.0487 0x1c6c [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys
14:03:43.0487 0x1c6c applockerfltr - ok
14:03:43.0487 0x1c6c [ 78548DB096DA7BA26BAA318FE9B0CEC1, 7B8D29C457B8677E3D4FAF0C070C373CD937E852BE28C1A8313E3E9448621E8D ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
14:03:43.0503 0x1c6c AppMgmt - ok
14:03:43.0503 0x1c6c AppReadiness - ok
14:03:43.0503 0x1c6c AppVClient - ok
14:03:43.0503 0x1c6c [ 5CD58F779237F533D5F30C294DA04C0E, 3CFEF499310AC6444369A06E604B6335D3329E1AB6E4EFBCD09BB7CA8440BB3E ] AppvStrm C:\WINDOWS\system32\drivers\AppvStrm.sys
14:03:43.0518 0x1c6c AppvStrm - ok
14:03:43.0518 0x1c6c [ A4354E3EF779E4CDC6C9D705FFBD3652, BBF11800EE6014E77C1BAA8FBFE8F551338420384E72C69579A0E8690B585D46 ] AppvVemgr C:\WINDOWS\system32\drivers\AppvVemgr.sys
14:03:43.0518 0x1c6c AppvVemgr - ok
14:03:43.0534 0x1c6c [ 467021D15ED33D9B8CD313C7631A89B6, 18703DBB3EF3192EDFEC4A64B2BA49CBD7197B1B181C991397A2626171E22331 ] AppvVfs C:\WINDOWS\system32\drivers\AppvVfs.sys
14:03:43.0534 0x1c6c AppvVfs - ok
14:03:43.0534 0x1c6c AppXSvc - ok
14:03:43.0549 0x1c6c arcsas - ok
14:03:43.0549 0x1c6c [ 9EDC7F9BB19D3F12EB05437BD5687C8A, 182772D576C3C8A9CFDADE7F75A14DD0639C0DF5C3C345F158C2DE51708A2F76 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:03:43.0565 0x1c6c aspnet_state - ok
14:03:43.0581 0x1c6c [ 44EDBC9E6F5823D2F529113C26368A9E, DD8739523C24078B90E9B00C994C1A7793539E4C945A1F728828F48ACE608005 ] AssignedAccessManagerSvc C:\WINDOWS\System32\assignedaccessmanagersvc.dll
14:03:43.0581 0x1c6c AssignedAccessManagerSvc - ok
14:03:43.0581 0x1c6c AsyncMac - ok
14:03:43.0596 0x1c6c atapi - ok
14:03:43.0596 0x1c6c AudioEndpointBuilder - ok
14:03:43.0596 0x1c6c Audiosrv - ok
14:03:43.0612 0x1c6c [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
14:03:43.0612 0x1c6c AxInstSV - ok
14:03:43.0612 0x1c6c b06bdrv - ok
14:03:43.0612 0x1c6c [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam C:\WINDOWS\system32\drivers\bam.sys
14:03:43.0612 0x1c6c bam - ok
14:03:43.0628 0x1c6c BasicDisplay - ok
14:03:43.0628 0x1c6c BasicRender - ok
14:03:43.0628 0x1c6c BcastDVRUserService - ok
14:03:43.0643 0x1c6c bcmfn2 - ok
14:03:43.0659 0x1c6c [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
14:03:43.0659 0x1c6c BDESVC - ok
14:03:43.0659 0x1c6c [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
14:03:43.0659 0x1c6c Beep - ok
14:03:43.0674 0x1c6c BFE - ok
14:03:43.0674 0x1c6c [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt C:\WINDOWS\system32\drivers\bindflt.sys
14:03:43.0674 0x1c6c bindflt - ok
14:03:43.0706 0x1c6c [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS C:\WINDOWS\System32\qmgr.dll
14:03:43.0737 0x1c6c BITS - ok
14:03:43.0753 0x1c6c [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll
14:03:43.0753 0x1c6c BluetoothUserService - ok
14:03:43.0768 0x1c6c bowser - ok
14:03:43.0768 0x1c6c BrokerInfrastructure - ok
14:03:43.0768 0x1c6c [ 3E4BF0145201239E0BBD0A937431C14C, 1DDC27C89B16ADD9346EB30AA9E17330FE0181BE96DC6F06C455493FBDCB1113 ] Browser C:\WINDOWS\System32\browser.dll
14:03:43.0784 0x1c6c Browser - ok
14:03:43.0784 0x1c6c [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService C:\WINDOWS\System32\BTAGService.dll
14:03:43.0799 0x1c6c BTAGService - ok
14:03:43.0815 0x1c6c [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc C:\WINDOWS\System32\BthAvctpSvc.dll
14:03:43.0815 0x1c6c BthAvctpSvc - ok
14:03:43.0831 0x1c6c [ E0121734C2492406034FA23E3D394EBD, E855EB12DD35CC47F68C5C6B1622560599C7074E274E510528196D47BDA56960 ] BthEnum C:\WINDOWS\system32\DRIVERS\BthEnum.sys
14:03:43.0831 0x1c6c BthEnum - ok
14:03:43.0831 0x1c6c [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
14:03:43.0846 0x1c6c BthHFEnum - ok
14:03:43.0846 0x1c6c [ 8EE632BFE4BABD4E7A299AF54476F9A5, 836675F295A033C0239DCF86D90985443A60D5A1F38B668CA82A30BDFD983352 ] BthLEEnum C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
14:03:43.0846 0x1c6c BthLEEnum - ok
14:03:43.0862 0x1c6c [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
14:03:43.0862 0x1c6c BTHMODEM - ok
14:03:43.0862 0x1c6c [ B10E0CC936462BBA7BC659C0927617A0, B4F2A318384D176D0ACF26372756CE097F34EED59FBB023E7DB8F95D8F73F69A ] BthPan C:\WINDOWS\System32\drivers\bthpan.sys
14:03:43.0862 0x1c6c BthPan - ok
14:03:43.0862 0x1c6c BTHPORT - ok
14:03:43.0878 0x1c6c [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv C:\WINDOWS\system32\bthserv.dll
14:03:43.0878 0x1c6c bthserv - ok
14:03:43.0893 0x1c6c [ 0D5ECDF2601312025811F6AC413F851A, B7E99CF02C6B511BD643E7F8BB59E983D8B65073D9B55ED44457EDC2BBBBC419 ] BTHUSB C:\WINDOWS\system32\DRIVERS\BTHUSB.sys
14:03:43.0893 0x1c6c BTHUSB - ok
14:03:43.0893 0x1c6c bttflt - ok
14:03:43.0893 0x1c6c buttonconverter - ok
14:03:43.0893 0x1c6c [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD C:\WINDOWS\System32\drivers\CAD.sys
14:03:43.0909 0x1c6c CAD - ok
14:03:43.0909 0x1c6c camsvc - ok
14:03:43.0909 0x1c6c CapImg - ok
14:03:43.0924 0x1c6c [ 1200CA82E0D59510F69B6839540A76AA, A24E0098D279B04734558032A95EEBED0F20422AF8C62783E46FDEE0DA39F94E ] CaptureService C:\WINDOWS\System32\CaptureService.dll
14:03:43.0924 0x1c6c CaptureService - ok
14:03:43.0924 0x1c6c cdfs - ok
14:03:43.0940 0x1c6c [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
14:03:43.0956 0x1c6c CDPSvc - ok
14:03:43.0971 0x1c6c [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll
14:03:43.0971 0x1c6c CDPUserSvc - ok
14:03:43.0987 0x1c6c cdrom - ok
14:03:43.0987 0x1c6c [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
14:03:43.0987 0x1c6c CertPropSvc - ok
14:03:44.0003 0x1c6c cht4iscsi - ok
14:03:44.0003 0x1c6c cht4vbd - ok
14:03:44.0003 0x1c6c [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass C:\WINDOWS\System32\drivers\circlass.sys
14:03:44.0003 0x1c6c circlass - ok
14:03:44.0018 0x1c6c [ 5619FC2A3AE4F43D4B20D95472ED948E, A5D530FB6AC493FC01489A1D32C311F7D28F0D7B49C950E71F4ADF4FBA302689 ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys
14:03:44.0034 0x1c6c CldFlt - ok
14:03:44.0034 0x1c6c CLFS - ok
14:03:44.0190 0x1c6c [ 64536C6809869A967A7390CF2B588E05, AF1C8116014C108A8393A767FBA66CBF5E9AA836DC599D00B8F794460548254F ] ClickToRunSvc C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
14:03:44.0331 0x1c6c ClickToRunSvc - ok
14:03:44.0362 0x1c6c [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
14:03:44.0378 0x1c6c ClipSVC - ok
14:03:44.0393 0x1c6c CmBatt - ok
14:03:44.0393 0x1c6c CNG - ok
14:03:44.0393 0x1c6c [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
14:03:44.0393 0x1c6c cnghwassist - ok
14:03:44.0409 0x1c6c [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys
14:03:44.0409 0x1c6c CompositeBus - ok
14:03:44.0424 0x1c6c COMSysApp - ok
14:03:44.0424 0x1c6c condrv - ok
14:03:44.0424 0x1c6c CoreMessagingRegistrar - ok
14:03:44.0456 0x1c6c [ 6C9B2C4E3AA10A9209724A583373690B, E9F3E1B81B6C70848B334A3AE3D985F5A11C91898496D572F784DCF5EDA04A09 ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
14:03:44.0456 0x1c6c cphs - ok
14:03:44.0471 0x1c6c CryptSvc - ok
14:03:44.0487 0x1c6c [ 87463F1AE447874675F1CBB55CBF7136, 83DB34BD3D9C335541B4A5552E51BB5388654C3B8EB06B28953859225BBF7B1D ] CSC C:\WINDOWS\system32\drivers\csc.sys
14:03:44.0487 0x1c6c CSC - ok
14:03:44.0503 0x1c6c [ E20EC7EA6EEF16B5780B459FBA86C521, 52CAAB13F1B1E99097E4996432943260417F519E6F4D232A0CFE0259C8BCAECF ] CscService C:\WINDOWS\System32\cscsvc.dll
14:03:44.0518 0x1c6c CscService - ok
14:03:44.0534 0x1c6c [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam C:\WINDOWS\system32\drivers\dam.sys
14:03:44.0534 0x1c6c dam - ok
14:03:44.0534 0x1c6c DcomLaunch - ok
14:03:44.0534 0x1c6c defragsvc - ok
14:03:44.0549 0x1c6c [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll
14:03:44.0565 0x1c6c DeviceAssociationService - ok
14:03:44.0565 0x1c6c DeviceInstall - ok
14:03:44.0581 0x1c6c [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll
14:03:44.0596 0x1c6c DevicePickerUserSvc - ok
14:03:44.0612 0x1c6c [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll
14:03:44.0628 0x1c6c DevicesFlowUserSvc - ok
14:03:44.0628 0x1c6c [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
14:03:44.0628 0x1c6c DevQueryBroker - ok
14:03:44.0628 0x1c6c Dfsc - ok
14:03:44.0643 0x1c6c Dhcp - ok
14:03:44.0643 0x1c6c diagnosticshub.standardcollector.service - ok
14:03:44.0659 0x1c6c [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc C:\WINDOWS\system32\DiagSvc.dll
14:03:44.0659 0x1c6c diagsvc - ok
14:03:44.0659 0x1c6c DiagTrack - ok
14:03:44.0659 0x1c6c Disk - ok
14:03:44.0674 0x1c6c DmEnrollmentSvc - ok
14:03:44.0674 0x1c6c dmvsc - ok
14:03:44.0674 0x1c6c [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
14:03:44.0674 0x1c6c dmwappushservice - ok
14:03:44.0690 0x1c6c Dnscache - ok
14:03:44.0690 0x1c6c [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc C:\WINDOWS\System32\dot3svc.dll
14:03:44.0706 0x1c6c dot3svc - ok
14:03:44.0706 0x1c6c [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS C:\WINDOWS\system32\dps.dll
14:03:44.0721 0x1c6c DPS - ok
14:03:44.0721 0x1c6c drmkaud - ok
14:03:44.0721 0x1c6c DsmSvc - ok
14:03:44.0721 0x1c6c DsSvc - ok
14:03:44.0737 0x1c6c [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll
14:03:44.0737 0x1c6c DusmSvc - ok
14:03:44.0753 0x1c6c DXGKrnl - ok
14:03:44.0768 0x1c6c [ 4787BD0EED0E035EEA85625FB5F1F77E, B79E998CCC9D0D6D431645C87C7802AE90FE1A2522BD77EB16CDBF65F6F88507 ] e1dexpress C:\WINDOWS\system32\DRIVERS\e1d64x64.sys
14:03:44.0768 0x1c6c e1dexpress - ok
14:03:44.0768 0x1c6c Eaphost - ok
14:03:44.0768 0x1c6c ebdrv - ok
14:03:44.0784 0x1c6c EFS - ok
14:03:44.0784 0x1c6c EhStorClass - ok
14:03:44.0784 0x1c6c EhStorTcgDrv - ok
14:03:44.0799 0x1c6c [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
14:03:44.0799 0x1c6c embeddedmode - ok
14:03:44.0815 0x1c6c [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
14:03:44.0815 0x1c6c EntAppSvc - ok
14:03:44.0815 0x1c6c ErrDev - ok
14:03:44.0831 0x1c6c [ 082F9D1ADB6DF9E5DB30EB52A34FCF0A, DC62F2E7D81B4D3C266855A64A575563A31D894B19F23E841B6C8A552FAF81CC ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae64.sys
14:03:44.0831 0x1c6c ESProtectionDriver - ok
14:03:44.0846 0x1c6c [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem C:\WINDOWS\system32\es.dll
14:03:44.0862 0x1c6c EventSystem - ok
14:03:44.0862 0x1c6c exfat - ok
14:03:44.0862 0x1c6c fastfat - ok
14:03:44.0878 0x1c6c [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax C:\WINDOWS\system32\fxssvc.exe
14:03:44.0893 0x1c6c Fax - ok
14:03:44.0893 0x1c6c fdc - ok
14:03:44.0909 0x1c6c [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
14:03:44.0909 0x1c6c fdPHost - ok
14:03:44.0909 0x1c6c [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub C:\WINDOWS\system32\fdrespub.dll
14:03:44.0909 0x1c6c FDResPub - ok
14:03:44.0924 0x1c6c [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc C:\WINDOWS\system32\fhsvc.dll
14:03:44.0924 0x1c6c fhsvc - ok
14:03:44.0924 0x1c6c [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
14:03:44.0924 0x1c6c FileCrypt - ok
14:03:44.0940 0x1c6c FileInfo - ok
14:03:44.0940 0x1c6c Filetrace - ok
14:03:44.0940 0x1c6c flpydisk - ok
14:03:44.0940 0x1c6c FltMgr - ok
14:03:44.0956 0x1c6c FontCache - ok
14:03:44.0956 0x1c6c FontCache3.0.0.0 - ok
14:03:44.0956 0x1c6c FrameServer - ok
14:03:44.0956 0x1c6c FsDepends - ok
14:03:44.0971 0x1c6c Fs_Rec - ok
14:03:44.0971 0x1c6c fvevol - ok
14:03:44.0971 0x1c6c [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
14:03:44.0971 0x1c6c gencounter - ok
14:03:44.0987 0x1c6c genericusbfn - ok
14:03:44.0987 0x1c6c GPIOClx0101 - ok
14:03:44.0987 0x1c6c gpsvc - ok
14:03:44.0987 0x1c6c [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
14:03:44.0987 0x1c6c GpuEnergyDrv - ok
14:03:45.0002 0x1c6c [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll
14:03:45.0002 0x1c6c GraphicsPerfSvc - ok
14:03:45.0002 0x1c6c HDAudBus - ok
14:03:45.0002 0x1c6c HidBatt - ok
14:03:45.0018 0x1c6c [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
14:03:45.0018 0x1c6c HidBth - ok
14:03:45.0018 0x1c6c hidi2c - ok
14:03:45.0034 0x1c6c hidinterrupt - ok
14:03:45.0034 0x1c6c [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
14:03:45.0034 0x1c6c HidIr - ok
14:03:45.0034 0x1c6c hidserv - ok
14:03:45.0034 0x1c6c HidUsb - ok
14:03:45.0049 0x1c6c HpSAMD - ok
14:03:45.0049 0x1c6c HTTP - ok
14:03:45.0065 0x1c6c [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash C:\WINDOWS\System32\drivers\hvcrash.sys
14:03:45.0065 0x1c6c hvcrash - ok
14:03:45.0065 0x1c6c [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll
14:03:45.0065 0x1c6c HvHost - ok
14:03:45.0081 0x1c6c [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys
14:03:45.0081 0x1c6c hvservice - ok
14:03:45.0081 0x1c6c [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101 C:\WINDOWS\system32\Drivers\mshwnclx.sys
14:03:45.0081 0x1c6c HwNClx0101 - ok
14:03:45.0081 0x1c6c hwpolicy - ok
14:03:45.0096 0x1c6c hyperkbd - ok
14:03:45.0096 0x1c6c HyperVideo - ok
14:03:45.0096 0x1c6c i8042prt - ok
14:03:45.0096 0x1c6c iagpio - ok
14:03:45.0112 0x1c6c iai2c - ok
14:03:45.0112 0x1c6c iaLPSS2i_GPIO2 - ok
14:03:45.0112 0x1c6c iaLPSS2i_GPIO2_BXT_P - ok
14:03:45.0112 0x1c6c iaLPSS2i_I2C - ok
14:03:45.0127 0x1c6c iaLPSS2i_I2C_BXT_P - ok
14:03:45.0127 0x1c6c iaLPSSi_GPIO - ok
14:03:45.0127 0x1c6c iaLPSSi_I2C - ok
14:03:45.0143 0x1c6c [ 8BE099617DA18FE085A40D47FC156B1B, A5F7AB41D32DF8A12F1945C263EE954CE15069C3CFD7131C74A8A3F4EC3AC122 ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys
14:03:45.0159 0x1c6c iaStorA - ok
14:03:45.0159 0x1c6c iaStorAVC - ok
14:03:45.0159 0x1c6c iaStorV - ok
14:03:45.0174 0x1c6c ibbus - ok
14:03:45.0174 0x1c6c [ DB706D75DADEA0ED1D939C3FC7508AF9, B3F6535422B6AFD83B9DAF661988293511BA33D8472D756232047F310E56B571 ] IBMPMDRV C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys
14:03:45.0174 0x1c6c IBMPMDRV - ok
14:03:45.0190 0x1c6c [ 9E60D9F0E66480EF6D3355BD1FD20127, 3D24F4CB628E362EA2A975D8DED9CD930974E885BA70E19E7EAC069EEB7CBC53 ] IBMPMSVC C:\WINDOWS\system32\ibmpmsvc.exe
14:03:45.0190 0x1c6c IBMPMSVC - ok
14:03:45.0190 0x1c6c ibtsiva - ok
14:03:45.0206 0x1c6c [ EAD6C953C40FC06E8E56182D9C27C480, E1DF45FF871B0A777A37702A5EF2379164DDD646D294F4520379979B7BD23B3F ] ibtusb C:\WINDOWS\system32\DRIVERS\ibtusb.sys
14:03:45.0206 0x1c6c ibtusb - ok
14:03:45.0206 0x1c6c [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc C:\WINDOWS\System32\tetheringservice.dll
14:03:45.0221 0x1c6c icssvc - ok
14:03:45.0377 0x1c6c [ F474A11DD1F5DFA3A37945DB495B2D01, 2F6DCEF674A9507C8FC37F0876C5F7AA70A55F3DE3A7D985BFC9E488D3A0EC8E ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
14:03:45.0487 0x1c6c igfx - ok
14:03:45.0518 0x1c6c [ 880C59EFB0042BE63F026FF3A468D968, 24244627C8F7374E7BA4F3868F19933D6AA7DD31AF1316520ACA0553FEEF5428 ] igfxCUIService2.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
14:03:45.0518 0x1c6c igfxCUIService2.0.0.0 - ok
14:03:45.0534 0x1c6c IKEEXT - ok
14:03:45.0534 0x1c6c [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys
14:03:45.0534 0x1c6c IndirectKmd - ok
14:03:45.0549 0x1c6c InstallService - ok
14:03:45.0627 0x1c6c [ 51B3BD768A5EE43A94E8B6B157F4F9E1, 90D87B91F144892FEF79CB140F95BDCD8DC8895FD87A3C9E00B14E0B0C4A3E91 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
14:03:45.0706 0x1c6c IntcAzAudAddService - ok
14:03:45.0721 0x1c6c [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
14:03:45.0737 0x1c6c IntcDAud - ok
14:03:45.0752 0x1c6c [ DAE6C3099D291EED8922A65C29ABCF52, AD0A932345382824122F84AF97A8609BAE1B916A3B9FD608779A1411E37D3643 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
14:03:45.0768 0x1c6c Intel(R) Capability Licensing Service Interface - ok
14:03:45.0784 0x1c6c [ D45226E3E7A25F1E7CE8DF8FD0A2A098, 7BD74E9E3CB0A83D26BA3FD8177C6B9BA46A8695B6569CF7887FDC87947DA2D6 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
14:03:45.0799 0x1c6c Intel(R) Capability Licensing Service TCP IP Interface - ok
14:03:45.0799 0x1c6c intelide - ok
14:03:45.0799 0x1c6c [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
14:03:45.0815 0x1c6c intelpep - ok
14:03:45.0815 0x1c6c intelppm - ok
14:03:45.0815 0x1c6c [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate C:\WINDOWS\system32\drivers\iorate.sys
14:03:45.0815 0x1c6c iorate - ok
14:03:45.0831 0x1c6c [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:03:45.0831 0x1c6c IpFilterDriver - ok
14:03:45.0846 0x1c6c [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
14:03:45.0862 0x1c6c iphlpsvc - ok
14:03:45.0862 0x1c6c IPMIDRV - ok
14:03:45.0877 0x1c6c [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
14:03:45.0877 0x1c6c IPNAT - ok
14:03:45.0877 0x1c6c [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT C:\WINDOWS\System32\drivers\ipt.sys
14:03:45.0877 0x1c6c IPT - ok
14:03:45.0893 0x1c6c [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll
14:03:45.0893 0x1c6c IpxlatCfgSvc - ok
14:03:45.0893 0x1c6c [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda C:\WINDOWS\system32\drivers\irda.sys
14:03:45.0909 0x1c6c irda - ok
14:03:45.0909 0x1c6c [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
14:03:45.0909 0x1c6c IRENUM - ok
14:03:45.0909 0x1c6c [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon C:\WINDOWS\System32\irmon.dll
14:03:45.0909 0x1c6c irmon - ok
14:03:45.0924 0x1c6c isapnp - ok
14:03:45.0924 0x1c6c iScsiPrt - ok
14:03:45.0924 0x1c6c ItSas35i - ok
14:03:45.0940 0x1c6c [ 4487AD9C070D3973FE28AB4406555FC6, 77D8DE3036613618D44D7E5E47C9C754B8F0FF294D9DD778C92A7AFDA8F778FC ] iwdbus C:\WINDOWS\System32\drivers\iwdbus.sys
14:03:45.0940 0x1c6c iwdbus - ok
14:03:45.0940 0x1c6c [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
14:03:45.0940 0x1c6c jhi_service - ok
14:03:45.0956 0x1c6c kbdclass - ok
14:03:45.0956 0x1c6c kbdhid - ok
14:03:45.0956 0x1c6c kdnic - ok
14:03:45.0956 0x1c6c KeyIso - ok
14:03:45.0971 0x1c6c KSecDD - ok
14:03:45.0971 0x1c6c KSecPkg - ok
14:03:45.0971 0x1c6c ksthunk - ok
14:03:45.0987 0x1c6c [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
14:03:46.0002 0x1c6c KtmRm - ok
14:03:46.0002 0x1c6c LanmanServer - ok
14:03:46.0002 0x1c6c LanmanWorkstation - ok
14:03:46.0018 0x1c6c [ DA297A7BAB4E3889CFF60C02AE7BFB5D, 9E533D6FE2C9777A298F1E09C6E74F4135CC32D406382655EA9C0B7B2C533F3E ] Lenovo EasyPlus Hotspot C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe
14:03:46.0034 0x1c6c Lenovo EasyPlus Hotspot - ok
14:03:46.0034 0x1c6c [ BB7F4D4160460511EAC00B97669D7052, F268B034708C26857D2C472871D65BFD74066B95ADCAC841E69E7BE91B9DE17F ] LENOVO.CAMMUTE C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
14:03:46.0034 0x1c6c LENOVO.CAMMUTE - ok
14:03:46.0049 0x1c6c [ D5D33958026F3BC85ED4CDAA7090C083, 0D556266D1C0FEAC5F06A7B4B65B098F6A95D159CB3817CC314E331A3D5A9A80 ] LENOVO.MICMUTE C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
14:03:46.0049 0x1c6c LENOVO.MICMUTE - ok
14:03:46.0049 0x1c6c [ E7ADA2310BD3E95E7B0647E650DA9E50, B3A5A406DF9A828A115653D32368B4C8D77532E5258844DD9EB107115FCBFB6F ] LENOVO.TPKNRSVC C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
14:03:46.0049 0x1c6c LENOVO.TPKNRSVC - ok
14:03:46.0049 0x1c6c [ 6A7AF51544418052522D3D5862022399, F752B558BDC2F5A615BDAD2BAE7DACAF9A725CB135E2BB10BFD6BA30DB79212E ] LENOVO.TVTVCAM C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
14:03:46.0065 0x1c6c LENOVO.TVTVCAM - ok
14:03:46.0065 0x1c6c [ D253E6009F05776F505F96866CCF460F, 8A39E77B4FC780BB9C6C8A892603248D87ED70255BF9BED0218BE2420B5E8C53 ] Lenovo.VIRTSCRLSVC C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
14:03:46.0065 0x1c6c Lenovo.VIRTSCRLSVC - ok
14:03:46.0065 0x1c6c [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc C:\WINDOWS\System32\lfsvc.dll
14:03:46.0081 0x1c6c lfsvc - ok
14:03:46.0081 0x1c6c [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
14:03:46.0081 0x1c6c LicenseManager - ok
14:03:46.0096 0x1c6c [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
14:03:46.0096 0x1c6c lltdio - ok
14:03:46.0096 0x1c6c [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
14:03:46.0112 0x1c6c lltdsvc - ok
14:03:46.0112 0x1c6c lmhosts - ok
14:03:46.0127 0x1c6c [ 888A1DD2EB317FAF3906E64ACEE7A1BC, 1FDEA6073F64E829A4208BECBE1DAE7FBEC19D6100B001D1A78D48A3CBF687C3 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:03:46.0127 0x1c6c LMS - ok
14:03:46.0143 0x1c6c [ 49ED6CF0E353D09942AEDF219DE335B3, EEF462B2213589170722FF8B9B085209E7765A5934789F993F00D1E072F02282 ] lnvDiscoveryWinSvc C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe
14:03:46.0143 0x1c6c lnvDiscoveryWinSvc - ok
14:03:46.0143 0x1c6c [ 25F003B378E831514587DC6155781227, 7E68BED3721B9B917DDF215E572EEC4D1B30805CB8C274222450F65AA6B9D945 ] LSCWinService C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
14:03:46.0159 0x1c6c LSCWinService - ok
14:03:46.0159 0x1c6c LSI_SAS - ok
14:03:46.0159 0x1c6c LSI_SAS2i - ok
14:03:46.0159 0x1c6c LSI_SAS3i - ok
14:03:46.0174 0x1c6c LSI_SSS - ok
14:03:46.0174 0x1c6c LSM - ok
14:03:46.0174 0x1c6c [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
14:03:46.0190 0x1c6c luafv - ok
14:03:46.0190 0x1c6c [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc C:\WINDOWS\System32\LanguageOverlayServer.dll
14:03:46.0206 0x1c6c LxpSvc - ok
14:03:46.0206 0x1c6c MapsBroker - ok
14:03:46.0206 0x1c6c mausbhost - ok
14:03:46.0206 0x1c6c mausbip - ok
14:03:46.0221 0x1c6c [ F6A196A0A107406D6BA54A1A7293C67A, 862B5F7EBF8FC02B7DCE3C5F7C18FCE02FD84F1E0CE47919E3945335146B8EC1 ] MBAMChameleon C:\WINDOWS\System32\Drivers\MbamChameleon.sys
14:03:46.0221 0x1c6c MBAMChameleon - ok
14:03:46.0237 0x1c6c [ 99E885018EE51F1BDDDC5228AADD873B, 657BCEA1BD0D1E06FD5496176244A814794D74D4260C50D1A57B2C7E88AD9673 ] MBAMFarflt C:\WINDOWS\system32\DRIVERS\farflt.sys
14:03:46.0237 0x1c6c MBAMFarflt - ok
14:03:46.0237 0x1c6c [ E8F4540E13A62E1649824D4C5576EE29, A307DA9D42DCB1EE4EF83ACA7400507E56CD36269234A0EBB5C1E61EF5663581 ] MBAMProtection C:\WINDOWS\system32\DRIVERS\mbam.sys
14:03:46.0237 0x1c6c MBAMProtection - ok
14:03:46.0362 0x1c6c [ F7265B7490428499F2FE409FA9247866, 43A406C74689B72020E4669B45F19D377A5FF3EFE79B03AF58C2679D14405E9D ] MBAMService C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
14:03:46.0471 0x1c6c MBAMService - ok
14:03:46.0487 0x1c6c [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
14:03:46.0487 0x1c6c MBAMSwissArmy - ok
14:03:46.0502 0x1c6c [ 912DB8F40C7D5CCB1918FFED8C1B99DB, 74D6CB2F1CBE41C74A00AE0DA8D9F7C5ACF3680445502C45C7A487CFAECB3A91 ] MBAMWebProtection C:\WINDOWS\system32\DRIVERS\mwac.sys
14:03:46.0502 0x1c6c MBAMWebProtection - ok
14:03:46.0502 0x1c6c megasas - ok
14:03:46.0502 0x1c6c megasas2i - ok
14:03:46.0502 0x1c6c megasas35i - ok
14:03:46.0518 0x1c6c megasr - ok
14:03:46.0518 0x1c6c [ 8FE46E9374DAD76ED081936DEDD3F6B0, 2CEA37D4C9BD68BCF554120FF2A6A6B6E2A5CBB48C62071D1210557CB6A1D32D ] MEIx64 C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
14:03:46.0518 0x1c6c MEIx64 - ok
14:03:46.0534 0x1c6c [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll
14:03:46.0534 0x1c6c MessagingService - ok
14:03:46.0534 0x1c6c mlx4_bus - ok
14:03:46.0549 0x1c6c MMCSS - ok
14:03:46.0549 0x1c6c [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem C:\WINDOWS\system32\drivers\modem.sys
14:03:46.0549 0x1c6c Modem - ok
14:03:46.0549 0x1c6c [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor C:\WINDOWS\System32\drivers\monitor.sys
14:03:46.0549 0x1c6c monitor - ok
14:03:46.0565 0x1c6c mouclass - ok
14:03:46.0565 0x1c6c mouhid - ok
14:03:46.0565 0x1c6c mountmgr - ok
14:03:46.0565 0x1c6c mpsdrv - ok
14:03:46.0581 0x1c6c mpssvc - ok
14:03:46.0581 0x1c6c [ FE4CB8E6B4852BFEC3754A454290353C, 215208FC8196C42C9FC37E81F84FD3AA883F44DCA098A7AFCBE98116F64B8A48 ] MQAC C:\WINDOWS\system32\drivers\mqac.sys
14:03:46.0581 0x1c6c MQAC - ok
14:03:46.0596 0x1c6c MRxDAV - ok
14:03:46.0596 0x1c6c mrxsmb - ok
14:03:46.0596 0x1c6c mrxsmb10 - ok
14:03:46.0612 0x1c6c mrxsmb20 - ok
14:03:46.0612 0x1c6c [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
14:03:46.0612 0x1c6c MsBridge - ok
14:03:46.0627 0x1c6c [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC C:\WINDOWS\System32\msdtc.exe
14:03:46.0627 0x1c6c MSDTC - ok
14:03:46.0643 0x1c6c Msfs - ok
14:03:46.0643 0x1c6c [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
14:03:46.0643 0x1c6c msgpiowin32 - ok
14:03:46.0643 0x1c6c mshidkmdf - ok
14:03:46.0659 0x1c6c [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
14:03:46.0659 0x1c6c mshidumdf - ok
14:03:46.0659 0x1c6c msisadrv - ok
14:03:46.0659 0x1c6c MSiSCSI - ok
14:03:46.0659 0x1c6c msiserver - ok
14:03:46.0674 0x1c6c MSKSSRV - ok
14:03:46.0674 0x1c6c [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
14:03:46.0674 0x1c6c MsLldp - ok
14:03:46.0690 0x1c6c [ 5048B167703E801A1C631B07532A3942, F195D27C540F8A26130E6FA948B622E2ADE3973CCDE8EB37089A32D3816F07F7 ] MSMQ C:\WINDOWS\system32\mqsvc.exe
14:03:46.0690 0x1c6c MSMQ - ok
14:03:46.0690 0x1c6c MSPCLOCK - ok
14:03:46.0690 0x1c6c MSPQM - ok
14:03:46.0705 0x1c6c MsRPC - ok
14:03:46.0705 0x1c6c [ 234715501CF129ECD718D70FDA074C57, C2FB3ACE1CA3EB6BAB907B2452422C9C79C0BDDD6F4AF093E9F5144AE639AB83 ] MsSecFlt C:\WINDOWS\system32\drivers\mssecflt.sys
14:03:46.0721 0x1c6c MsSecFlt - ok
14:03:46.0721 0x1c6c mssmbios - ok
14:03:46.0721 0x1c6c MSTEE - ok
14:03:46.0737 0x1c6c MTConfig - ok
14:03:46.0737 0x1c6c Mup - ok
14:03:46.0737 0x1c6c mvumis - ok
14:03:46.0752 0x1c6c NativeWifiP - ok
14:03:46.0768 0x1c6c [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll
14:03:46.0784 0x1c6c NaturalAuthentication - ok
14:03:46.0799 0x1c6c [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
14:03:46.0799 0x1c6c NcaSvc - ok
14:03:46.0815 0x1c6c [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService C:\WINDOWS\System32\ncbservice.dll
14:03:46.0815 0x1c6c NcbService - ok
14:03:46.0830 0x1c6c [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
14:03:46.0830 0x1c6c NcdAutoSetup - ok
14:03:46.0846 0x1c6c ndfltr - ok
14:03:46.0846 0x1c6c NDIS - ok
14:03:46.0846 0x1c6c [ AF73B18F3096B165A6F4417C5ED36B01, B0FA9E52D7208F756103E2E853F1D17F594C9FDD2E76304743C581613E612449 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
14:03:46.0846 0x1c6c NdisCap - ok
14:03:46.0862 0x1c6c [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
14:03:46.0862 0x1c6c NdisImPlatform - ok
14:03:46.0862 0x1c6c NdisTapi - ok
14:03:46.0877 0x1c6c Ndisuio - ok
14:03:46.0877 0x1c6c NdisVirtualBus - ok
14:03:46.0877 0x1c6c NdisWan - ok
14:03:46.0877 0x1c6c ndiswanlegacy - ok
14:03:46.0893 0x1c6c ndproxy - ok
14:03:46.0893 0x1c6c [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
14:03:46.0893 0x1c6c Ndu - ok
14:03:46.0909 0x1c6c NetAdapterCx - ok
14:03:46.0909 0x1c6c NetBIOS - ok
14:03:46.0909 0x1c6c NetBT - ok
14:03:46.0909 0x1c6c Netlogon - ok
14:03:46.0924 0x1c6c Netman - ok
14:03:46.0924 0x1c6c [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:03:46.0940 0x1c6c NetMsmqActivator - ok
14:03:46.0940 0x1c6c [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:03:46.0940 0x1c6c NetPipeActivator - ok
14:03:46.0955 0x1c6c [ E9931F57F05696CBF53A086449D97BF6, 986C99033AA10A258F0CC42727B14C5812BC76AB535CDF54FCA1B038C4BF9546 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
14:03:46.0971 0x1c6c netprofm - ok
14:03:46.0971 0x1c6c NetSetupSvc - ok
14:03:46.0987 0x1c6c [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:03:46.0987 0x1c6c NetTcpActivator - ok
14:03:46.0987 0x1c6c [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:03:46.0987 0x1c6c NetTcpPortSharing - ok
14:03:47.0002 0x1c6c netvsc - ok
14:03:47.0065 0x1c6c [ 4BE126A9829B91EDC1A4233ABC855C17, 365BB62F9C29770E69D2E5DA561A42D3BFD9B989C94BD220DDD8212D03AACF05 ] NETwNb64 C:\WINDOWS\system32\DRIVERS\Netwbw02.sys
14:03:47.0127 0x1c6c NETwNb64 - ok
14:03:47.0143 0x1c6c [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
14:03:47.0159 0x1c6c NgcCtnrSvc - ok
14:03:47.0159 0x1c6c NgcSvc - ok
14:03:47.0174 0x1c6c NlaSvc - ok
14:03:47.0174 0x1c6c Npfs - ok
14:03:47.0174 0x1c6c npsvctrig - ok
14:03:47.0174 0x1c6c nsi - ok
14:03:47.0190 0x1c6c nsiproxy - ok
14:03:47.0190 0x1c6c Ntfs - ok
14:03:47.0190 0x1c6c Null - ok
14:03:47.0205 0x1c6c nvdimm - ok
14:03:47.0205 0x1c6c nvraid - ok
14:03:47.0205 0x1c6c nvstor - ok
14:03:47.0221 0x1c6c [ 84DE1DD996B48B05ACE31AD015FA108A, 4B9D1E4EF83ECED6C77F23D9879C124534F7053D7423E3A2D0F67A4A720CEA94 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:03:47.0221 0x1c6c odserv - ok
14:03:47.0237 0x1c6c [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
14:03:47.0252 0x1c6c OneSyncSvc - ok
14:03:47.0252 0x1c6c [ 44EC1C7AC8999C35DA603DE8E9E1393C, D0EF55DB094D8711C6F28934D207489FC8B85276CAF1E17C516BD5777132F49A ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:03:47.0268 0x1c6c ose - ok
14:03:47.0268 0x1c6c [ 65E0500B39BA5D9F99DF63AFC261A90D, 2A7611C0C30D7092C3777BA49700C41A944677DF9E4F65F69E3E9CEC17EA4106 ] osrss C:\WINDOWS\system32\osrss.dll
14:03:47.0268 0x1c6c osrss - ok
14:03:47.0299 0x1c6c [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
14:03:47.0299 0x1c6c p2pimsvc - ok
14:03:47.0315 0x1c6c [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc C:\WINDOWS\system32\p2psvc.dll
14:03:47.0330 0x1c6c p2psvc - ok
14:03:47.0330 0x1c6c Parport - ok
14:03:47.0330 0x1c6c partmgr - ok
14:03:47.0346 0x1c6c PcaSvc - ok
14:03:47.0346 0x1c6c pci - ok
14:03:47.0346 0x1c6c pciide - ok
14:03:47.0346 0x1c6c pcmcia - ok
14:03:47.0362 0x1c6c pcw - ok
14:03:47.0362 0x1c6c pdc - ok
14:03:47.0377 0x1c6c [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
14:03:47.0393 0x1c6c PEAUTH - ok
14:03:47.0440 0x1c6c [ 05A0A1AC00A8653B49F94381872D47E7, 75B7E616D08D6D8BD964953B5CC342E72E35D8C660E2F97BD36ADA59130169F6 ] PeerDistSvc C:\WINDOWS\system32\peerdistsvc.dll
14:03:47.0471 0x1c6c PeerDistSvc - ok
14:03:47.0471 0x1c6c percsas2i - ok
14:03:47.0487 0x1c6c percsas3i - ok
14:03:47.0502 0x1c6c [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
14:03:47.0502 0x1c6c PerfHost - ok
14:03:47.0518 0x1c6c [ E12EE66C81F7F8840BB4769BDA36FFF8, 85DFB175591A79A6F9EC4F16187D70D768CB5C1BBEFD437B544A6D9CBC275DDC ] phidmice C:\WINDOWS\system32\DRIVERS\phidmice.sys
14:03:47.0518 0x1c6c phidmice - ok
14:03:47.0518 0x1c6c PhoneSvc - ok
14:03:47.0534 0x1c6c [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
14:03:47.0534 0x1c6c PimIndexMaintenanceSvc - ok
14:03:47.0580 0x1c6c [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla C:\WINDOWS\system32\pla.dll
14:03:47.0596 0x1c6c pla - ok
14:03:47.0612 0x1c6c PlugPlay - ok
14:03:47.0612 0x1c6c pmem - ok
14:03:47.0612 0x1c6c [ FC4F75AF9082758E536569E5E4C2AF27, 31162DE85432999D0301448ECC58863BF6909295949060A2E17D232CDEE85130 ] pmouself C:\WINDOWS\system32\DRIVERS\pmouself.sys
14:03:47.0627 0x1c6c pmouself - ok
14:03:47.0627 0x1c6c [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM C:\WINDOWS\System32\drivers\pnpmem.sys
14:03:47.0627 0x1c6c PNPMEM - ok
14:03:47.0627 0x1c6c [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
14:03:47.0643 0x1c6c PNRPAutoReg - ok
14:03:47.0643 0x1c6c [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
14:03:47.0659 0x1c6c PNRPsvc - ok
14:03:47.0659 0x1c6c PolicyAgent - ok
14:03:47.0674 0x1c6c Power - ok
14:03:47.0674 0x1c6c PptpMiniport - ok
14:03:47.0752 0x1c6c [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
14:03:47.0799 0x1c6c PrintNotify - ok
14:03:47.0815 0x1c6c [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll
14:03:47.0815 0x1c6c PrintWorkflowUserSvc - ok
14:03:47.0830 0x1c6c Processor - ok
14:03:47.0830 0x1c6c ProfSvc - ok
14:03:47.0830 0x1c6c [ 05A4779E4994B21473EDBE85AABE8030, AFD597461B036FDE42013648A4D542B02AE1D7E128BF0B193BA4B478432F0C72 ] psadd C:\WINDOWS\System32\drivers\psadd.sys
14:03:47.0846 0x1c6c psadd - ok
14:03:47.0846 0x1c6c [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched C:\WINDOWS\system32\drivers\pacer.sys
14:03:47.0846 0x1c6c Psched - ok
14:03:47.0862 0x1c6c [ 29F12CD3F77B65C7E37F8517395B13D2, 690517756A21B3DE4CF4A027AA712FC62DB6F5F2E89B4D2DE220A29C4A36878B ] PushToInstall C:\WINDOWS\system32\PushToInstall.dll
14:03:47.0862 0x1c6c PushToInstall - ok
14:03:47.0877 0x1c6c [ FA14FA4FCF33B9783F8317CFCCD08F49, 4AB631CD8BA56E2F5A110831AE4939B20D776AF4F1545D78F7B44FC93A081F0B ] pvendrlf C:\WINDOWS\system32\DRIVERS\pvendrlf.sys
14:03:47.0877 0x1c6c pvendrlf - ok
14:03:47.0877 0x1c6c [ 93430FFD315E5A378675EF07CBD22D68, 2C663F54BCBA208FDFC588B4D63FA5181269F820A7F099E6F388D5C92A563621 ] QuickControlMasterSvc C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe
14:03:47.0877 0x1c6c QuickControlMasterSvc - ok
14:03:47.0893 0x1c6c [ 9A3B6FC0B44A200719BBF50E4DF8A557, 260D35AD9D6CDE5298F0FF574863717DC41D81D8A5A92784BB30B9998C0D706E ] QuickControlService C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
14:03:47.0893 0x1c6c QuickControlService - ok
14:03:47.0909 0x1c6c [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE C:\WINDOWS\system32\qwave.dll
14:03:47.0924 0x1c6c QWAVE - ok
14:03:47.0924 0x1c6c [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
14:03:47.0924 0x1c6c QWAVEdrv - ok
14:03:47.0924 0x1c6c Ramdisk - ok
14:03:47.0940 0x1c6c RasAcd - ok
14:03:47.0940 0x1c6c RasAgileVpn - ok
14:03:47.0940 0x1c6c RasAuto - ok
14:03:47.0940 0x1c6c Rasl2tp - ok
14:03:47.0955 0x1c6c RasMan - ok
14:03:47.0955 0x1c6c RasPppoe - ok
14:03:47.0955 0x1c6c RasSstp - ok
14:03:47.0971 0x1c6c rdbss - ok
14:03:47.0971 0x1c6c [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
14:03:47.0971 0x1c6c rdpbus - ok
14:03:47.0987 0x1c6c RDPDR - ok
14:03:47.0987 0x1c6c [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
14:03:47.0987 0x1c6c RdpVideoMiniport - ok
14:03:48.0002 0x1c6c [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
14:03:48.0018 0x1c6c rdyboost - ok
14:03:48.0018 0x1c6c ReFS - ok
14:03:48.0018 0x1c6c ReFSv1 - ok
14:03:48.0034 0x1c6c [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
14:03:48.0049 0x1c6c RemoteAccess - ok
14:03:48.0049 0x1c6c [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
14:03:48.0065 0x1c6c RemoteRegistry - ok
14:03:48.0080 0x1c6c [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
14:03:48.0096 0x1c6c RetailDemo - ok
14:03:48.0112 0x1c6c [ 59F600BDA5B6EE591802945F1D8388D5, A30593A0EC696DE21264969664261E7ADA12C9E1161445BD41E71B7E3232604F ] RFCOMM C:\WINDOWS\System32\drivers\rfcomm.sys
14:03:48.0112 0x1c6c RFCOMM - ok
14:03:48.0112 0x1c6c [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy C:\WINDOWS\System32\drivers\rhproxy.sys
14:03:48.0112 0x1c6c rhproxy - ok
14:03:48.0127 0x1c6c [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc C:\WINDOWS\System32\RMapi.dll
14:03:48.0143 0x1c6c RmSvc - ok
14:03:48.0143 0x1c6c RpcEptMapper - ok
14:03:48.0143 0x1c6c [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator C:\WINDOWS\system32\locator.exe
14:03:48.0143 0x1c6c RpcLocator - ok
14:03:48.0159 0x1c6c RpcSs - ok
14:03:48.0159 0x1c6c [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
14:03:48.0159 0x1c6c rspndr - ok
14:03:48.0174 0x1c6c [ BE7E1D29CD6DAF79EF08A24A03E10D38, 6DD736E4AFFA8C2237990C3BB2B0313A2A18A77745198F847891128A1BA4D9FD ] RTSPER C:\WINDOWS\system32\DRIVERS\RtsPer.sys
14:03:48.0190 0x1c6c RTSPER - ok
14:03:48.0205 0x1c6c [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
14:03:48.0205 0x1c6c s3cap - ok
14:03:48.0205 0x1c6c SamSs - ok
14:03:48.0205 0x1c6c sbp2port - ok
14:03:48.0221 0x1c6c [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
14:03:48.0237 0x1c6c SCardSvr - ok
14:03:48.0237 0x1c6c [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
14:03:48.0252 0x1c6c ScDeviceEnum - ok
14:03:48.0252 0x1c6c [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
14:03:48.0252 0x1c6c scfilter - ok
14:03:48.0284 0x1c6c [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule C:\WINDOWS\system32\schedsvc.dll
14:03:48.0299 0x1c6c Schedule - ok
14:03:48.0299 0x1c6c scmbus - ok
14:03:48.0315 0x1c6c [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
14:03:48.0315 0x1c6c SCPolicySvc - ok
14:03:48.0315 0x1c6c sdbus - ok
14:03:48.0330 0x1c6c [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys
14:03:48.0330 0x1c6c SDFRd - ok
14:03:48.0330 0x1c6c [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
14:03:48.0346 0x1c6c SDRSVC - ok
14:03:48.0346 0x1c6c sdstor - ok
14:03:48.0362 0x1c6c [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon C:\WINDOWS\system32\seclogon.dll
14:03:48.0362 0x1c6c seclogon - ok
14:03:48.0362 0x1c6c SecurityHealthService - ok
14:03:48.0393 0x1c6c [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll
14:03:48.0424 0x1c6c SEMgrSvc - ok
14:03:48.0424 0x1c6c [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS C:\WINDOWS\System32\sens.dll
14:03:48.0440 0x1c6c SENS - ok
14:03:48.0440 0x1c6c Sense - ok
14:03:48.0471 0x1c6c [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
14:03:48.0502 0x1c6c SensorDataService - ok
14:03:48.0518 0x1c6c [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService C:\WINDOWS\system32\SensorService.dll
14:03:48.0533 0x1c6c SensorService - ok
14:03:48.0549 0x1c6c [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
14:03:48.0549 0x1c6c SensrSvc - ok
14:03:48.0565 0x1c6c SerCx - ok
14:03:48.0565 0x1c6c SerCx2 - ok
14:03:48.0565 0x1c6c Serenum - ok
14:03:48.0565 0x1c6c Serial - ok
14:03:48.0580 0x1c6c sermouse - ok
14:03:48.0596 0x1c6c [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv C:\WINDOWS\system32\sessenv.dll
14:03:48.0612 0x1c6c SessionEnv - ok
14:03:48.0612 0x1c6c sfloppy - ok
14:03:48.0627 0x1c6c [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent C:\WINDOWS\system32\drivers\SgrmAgent.sys
14:03:48.0627 0x1c6c SgrmAgent - ok
14:03:48.0627 0x1c6c [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker C:\WINDOWS\system32\SgrmBroker.exe
14:03:48.0643 0x1c6c SgrmBroker - ok
14:03:48.0658 0x1c6c [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
14:03:48.0674 0x1c6c SharedAccess - ok
14:03:48.0690 0x1c6c [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll
14:03:48.0705 0x1c6c SharedRealitySvc - ok
14:03:48.0721 0x1c6c [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:03:48.0737 0x1c6c ShellHWDetection - ok
14:03:48.0752 0x1c6c [ EF92588890C3ADEE806D6EE7E3892D99, 1B2F9A18D44B42621AE2408997657F7C6D5507980F5EC5F0DDF1876EAA42A471 ] Shockprf C:\WINDOWS\system32\DRIVERS\Apsx64.sys
14:03:48.0752 0x1c6c Shockprf - ok
14:03:48.0768 0x1c6c [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
14:03:48.0768 0x1c6c shpamsvc - ok
14:03:48.0783 0x1c6c SiSRaid2 - ok
14:03:48.0783 0x1c6c SiSRaid4 - ok
14:03:48.0783 0x1c6c [ 9A66A87BBC0EC4463042959B7C0D4AC1, 2E61DC50AD4A4D4782F3271BAD010137DA9A6AFC46C7568C709F68C7621DCD40 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
14:03:48.0799 0x1c6c SkypeUpdate - ok
14:03:48.0799 0x1c6c [ C4C7316E98CFBC3F0CDAEE6968D7B9DC, 176AF4E9866E4FBB01DAB80A72BA0FE1A9AF6C55B3BF30032F5EB2F8D25EF5F3 ] SmbDrvI C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys
14:03:48.0799 0x1c6c SmbDrvI - ok
14:03:48.0815 0x1c6c [ A02AFDFB748D0A638A09DC4B5E47B240, E14BFA930A2F04012144B475DA9A565431F804DF0BA2B7595C43BB48EFBA4883 ] SMIDriver C:\WINDOWS\system32\DRIVERS\smi.sys
14:03:48.0815 0x1c6c SMIDriver - ok
14:03:48.0815 0x1c6c smphost - ok
14:03:48.0830 0x1c6c [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
14:03:48.0846 0x1c6c SmsRouter - ok
14:03:48.0862 0x1c6c [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
14:03:48.0862 0x1c6c SNMPTRAP - ok
14:03:48.0877 0x1c6c spaceport - ok
14:03:48.0877 0x1c6c [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys
14:03:48.0877 0x1c6c SpatialGraphFilter - ok
14:03:48.0877 0x1c6c SpbCx - ok
14:03:48.0893 0x1c6c spectrum - ok
14:03:48.0908 0x1c6c [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler C:\WINDOWS\System32\spoolsv.exe
14:03:48.0924 0x1c6c Spooler - ok
14:03:48.0940 0x1c6c sppsvc - ok
14:03:48.0955 0x1c6c [ 97E4F8B6D113CB77CAFB9257A6C4C15B, 0F732AFB074A8E54B71673A36830657EA11828B7CFF7EC32AC2E47DE333A14F4 ] SPUVCbv C:\WINDOWS\System32\Drivers\SPUVCbv64.sys
14:03:48.0971 0x1c6c SPUVCbv - ok
14:03:48.0971 0x1c6c srv - ok
14:03:48.0971 0x1c6c srv2 - ok
14:03:48.0987 0x1c6c srvnet - ok
14:03:49.0002 0x1c6c [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
14:03:49.0002 0x1c6c SSDPSRV - ok
14:03:49.0018 0x1c6c [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
14:03:49.0033 0x1c6c ssh-agent - ok
14:03:49.0033 0x1c6c SstpSvc - ok
14:03:49.0033 0x1c6c StateRepository - ok
14:03:49.0049 0x1c6c stexstor - ok
14:03:49.0065 0x1c6c [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc C:\WINDOWS\System32\wiaservc.dll
14:03:49.0080 0x1c6c stisvc - ok
14:03:49.0080 0x1c6c storahci - ok
14:03:49.0080 0x1c6c storflt - ok
14:03:49.0096 0x1c6c stornvme - ok
14:03:49.0096 0x1c6c storqosflt - ok
14:03:49.0096 0x1c6c StorSvc - ok
14:03:49.0112 0x1c6c storufs - ok
14:03:49.0112 0x1c6c storvsc - ok
14:03:49.0112 0x1c6c [ BC2CF20E9C24423FF8826C601104A4CC, E71D5070B7BA59CDC61D555FB9D8ADD178521FB186174CB522852522929D62D4 ] SUService C:\Program Files (x86)\Lenovo\System Update\SUService.exe
14:03:49.0112 0x1c6c SUService - ok
14:03:49.0127 0x1c6c svsvc - ok
14:03:49.0127 0x1c6c swenum - ok
14:03:49.0143 0x1c6c swprv - ok
14:03:49.0143 0x1c6c [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
14:03:49.0143 0x1c6c Synth3dVsc - ok
14:03:49.0174 0x1c6c [ 6F02CE00CF9B10E134FA659F9D1353E8, 26616F8CCA9E67066EC02B477BE838023AB1307D7D7DA26ED14C065E0F4AA5B2 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
14:03:49.0174 0x1c6c SynTP - ok
14:03:49.0190 0x1c6c [ 6CDAAEB36655B8963081C0E11BBBEE02, 3766074C780B95CA54A40FF075C08DEC3A46CECF42C1E047F3FA78C27783ED73 ] SynTPEnhService C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
14:03:49.0190 0x1c6c SynTPEnhService - ok
14:03:49.0221 0x1c6c [ 62492FAAC26223E8A21E79A2331A3F10, 164C2650EAD344B6DFF95B8275436231E7994B7F06ACB3DA19054849BED61FD2 ] SysMain C:\WINDOWS\system32\sysmain.dll
14:03:49.0237 0x1c6c SysMain - ok
14:03:49.0252 0x1c6c SystemEventsBroker - ok
14:03:49.0252 0x1c6c [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
14:03:49.0268 0x1c6c TabletInputService - ok
14:03:49.0268 0x1c6c [ 9F04EBEFACA1CB11428CD3B91782D732, F43AF03810211912A97E357DFAFDF240144197549C67256DB64674564DC9E4C1 ] tap0901 C:\WINDOWS\System32\drivers\tap0901.sys
14:03:49.0268 0x1c6c tap0901 - ok
14:03:49.0283 0x1c6c [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
14:03:49.0299 0x1c6c TapiSrv - ok
14:03:49.0299 0x1c6c Tcpip - ok
14:03:49.0299 0x1c6c Tcpip6 - ok
14:03:49.0315 0x1c6c [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
14:03:49.0315 0x1c6c tcpipreg - ok
14:03:49.0315 0x1c6c tdx - ok
14:03:49.0330 0x1c6c [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
14:03:49.0330 0x1c6c terminpt - ok
14:03:49.0362 0x1c6c [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService C:\WINDOWS\System32\termsrv.dll
14:03:49.0377 0x1c6c TermService - ok
14:03:49.0393 0x1c6c [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes C:\WINDOWS\system32\themeservice.dll
14:03:49.0393 0x1c6c Themes - ok
14:03:49.0408 0x1c6c [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
14:03:49.0424 0x1c6c TieringEngineService - ok
14:03:49.0424 0x1c6c TimeBrokerSvc - ok
14:03:49.0424 0x1c6c TokenBroker - ok
14:03:49.0440 0x1c6c [ A61D61672153DFF710CA33186D2C8B18, 8A126E249D1BEB66153A958ACD2C56F8DD8D0D762F0BB035E69FCC259C0A8757 ] TPDIGIMN C:\WINDOWS\system32\DRIVERS\ApsHM64.sys
14:03:49.0440 0x1c6c TPDIGIMN - ok
14:03:49.0440 0x1c6c [ 40492513735AED7A4357AAEC84873027, ACBD7F5A2C90866996C7DD0B69AAF6C79AFB0546A31682D8BD9E378DE2A2375C ] TPHDEXLGSVC C:\WINDOWS\system32\TPHDEXLG64.exe
14:03:49.0455 0x1c6c TPHDEXLGSVC - ok
14:03:49.0455 0x1c6c [ 3B4250CB21F95FFA64162389106F39BA, 2461E6D335D699F837908254FDA43C789D589FE90C9592B5B43D964CFDB43F11 ] TPHKLOAD C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
14:03:49.0455 0x1c6c TPHKLOAD - ok
14:03:49.0471 0x1c6c [ 667EF334C512416712F14118E3382919, D59D3ED81E823A84885AA0787B020DAFBCA20303F1F5A37F37E5392C5C272F9D ] TPHKSVC C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
14:03:49.0471 0x1c6c TPHKSVC - ok
14:03:49.0471 0x1c6c TPM - ok
14:03:49.0471 0x1c6c [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks C:\WINDOWS\System32\trkwks.dll
14:03:49.0487 0x1c6c TrkWks - ok
14:03:49.0487 0x1c6c TrustedInstaller - ok
14:03:49.0502 0x1c6c [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys
14:03:49.0502 0x1c6c TsUsbFlt - ok
14:03:49.0502 0x1c6c [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
14:03:49.0518 0x1c6c TsUsbGD - ok
14:03:49.0518 0x1c6c [ 3A84A09CBC42148A0C7D00B3E82517F1, 75E609AC991C96E31F55E723925EAF9A363DC5B3324FFD4CFCB701189369D701 ] tsusbhub C:\WINDOWS\system32\drivers\tsusbhub.sys
14:03:49.0518 0x1c6c tsusbhub - ok
14:03:49.0533 0x1c6c [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel C:\WINDOWS\system32\drivers\tunnel.sys
14:03:49.0533 0x1c6c tunnel - ok
14:03:49.0549 0x1c6c [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
14:03:49.0549 0x1c6c tzautoupdate - ok
14:03:49.0549 0x1c6c UASPStor - ok
14:03:49.0565 0x1c6c [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
14:03:49.0565 0x1c6c UcmCx0101 - ok
14:03:49.0580 0x1c6c [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
14:03:49.0580 0x1c6c UcmTcpciCx0101 - ok
14:03:49.0580 0x1c6c [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
14:03:49.0580 0x1c6c UcmUcsi - ok
14:03:49.0596 0x1c6c Ucx01000 - ok
14:03:49.0596 0x1c6c UdeCx - ok
14:03:49.0596 0x1c6c udfs - ok
14:03:49.0612 0x1c6c UEFI - ok
14:03:49.0612 0x1c6c [ AD58EA78772B8163CFDE9BF671B6F8F1, E8304179B6B52B143846AEF80C7B2D577125742EA2DFF09F8AC5F37F4E28793E ] UevAgentDriver C:\WINDOWS\system32\drivers\UevAgentDriver.sys
14:03:49.0612 0x1c6c UevAgentDriver - ok
14:03:49.0643 0x1c6c [ F7E36C20DB953DFF4FDDB817904C0E48, 2C5EDE0807D8A5EC4B6E0FE0C308B37DBBDE12714FD9ADC4CE3EF4E0A5692207 ] UevAgentService C:\WINDOWS\system32\AgentService.exe
14:03:49.0674 0x1c6c UevAgentService - ok
14:03:49.0674 0x1c6c [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
14:03:49.0690 0x1c6c Ufx01000 - ok
14:03:49.0690 0x1c6c UfxChipidea - ok
14:03:49.0690 0x1c6c ufxsynopsys - ok
14:03:49.0705 0x1c6c umbus - ok
14:03:49.0721 0x1c6c UmPass - ok
14:03:49.0721 0x1c6c [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
14:03:49.0737 0x1c6c UmRdpService - ok
14:03:49.0768 0x1c6c [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
14:03:49.0799 0x1c6c UnistoreSvc - ok
14:03:49.0815 0x1c6c [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost C:\WINDOWS\System32\upnphost.dll
14:03:49.0830 0x1c6c upnphost - ok
14:03:49.0830 0x1c6c [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
14:03:49.0830 0x1c6c UrsChipidea - ok
14:03:49.0846 0x1c6c [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
14:03:49.0846 0x1c6c UrsCx01000 - ok
14:03:49.0846 0x1c6c [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
14:03:49.0846 0x1c6c UrsSynopsys - ok
14:03:49.0862 0x1c6c [ 524BFB402B1AB1007ED91E94D6AB6F72, 5A970292D2E7A580FAD86615BC6E66C2A5C74044EFF6C1543E928773E5B9C0F8 ] usb3Hub C:\WINDOWS\System32\drivers\usb3Hub.sys
14:03:49.0862 0x1c6c usb3Hub - ok
14:03:49.0862 0x1c6c usbccgp - ok
14:03:49.0877 0x1c6c [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
14:03:49.0877 0x1c6c usbcir - ok
14:03:49.0877 0x1c6c usbehci - ok
14:03:49.0893 0x1c6c usbhub - ok
14:03:49.0893 0x1c6c USBHUB3 - ok
14:03:49.0893 0x1c6c usbohci - ok
14:03:49.0908 0x1c6c [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
14:03:49.0908 0x1c6c usbprint - ok
14:03:49.0908 0x1c6c usbser - ok
14:03:49.0924 0x1c6c USBSTOR - ok
14:03:49.0924 0x1c6c usbuhci - ok
14:03:49.0924 0x1c6c USBXHCI - ok
14:03:49.0955 0x1c6c [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
14:03:49.0987 0x1c6c UserDataSvc - ok
14:03:50.0002 0x1c6c UserManager - ok
14:03:50.0002 0x1c6c UsoSvc - ok
14:03:50.0018 0x1c6c [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc C:\WINDOWS\System32\vac.dll
14:03:50.0033 0x1c6c VacSvc - ok
14:03:50.0033 0x1c6c [ D46604714C0BE35D0298514B2E4A7B34, 3EEFF41D198C92CC4CD8974C6575839D89A2139B64C8B08D10FB516660A2F7BD ] valWBFPolicyService C:\WINDOWS\system32\valWBFPolicyService.exe
14:03:50.0049 0x1c6c valWBFPolicyService - ok
14:03:50.0049 0x1c6c [ 151F02D8A7E5CB7765E7C2BA5B0AD1D4, B7A3D233046510FEC6866020490B14B3A544BFC82A14D457FBD6D821E20635D5 ] valWbioSyncSvc C:\WINDOWS\system32\valWbioSyncSvc.exe
14:03:50.0065 0x1c6c valWbioSyncSvc - ok
14:03:50.0065 0x1c6c VaultSvc - ok
14:03:50.0065 0x1c6c [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone C:\WINDOWS\System32\drivers\VClone.sys
14:03:50.0065 0x1c6c VClone - ok
14:03:50.0080 0x1c6c vdrvroot - ok
14:03:50.0080 0x1c6c vds - ok
14:03:50.0080 0x1c6c VerifierExt - ok
14:03:50.0096 0x1c6c vhdmp - ok
14:03:50.0096 0x1c6c vhf - ok
14:03:50.0096 0x1c6c vmbus - ok
14:03:50.0112 0x1c6c VMBusHID - ok
14:03:50.0112 0x1c6c [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys
14:03:50.0112 0x1c6c vmgid - ok
14:03:50.0127 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
14:03:50.0127 0x1c6c vmicguestinterface - ok
14:03:50.0143 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll
14:03:50.0143 0x1c6c vmicheartbeat - ok
14:03:50.0158 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
14:03:50.0158 0x1c6c vmickvpexchange - ok
14:03:50.0174 0x1c6c [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll
14:03:50.0190 0x1c6c vmicrdv - ok
14:03:50.0190 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll
14:03:50.0205 0x1c6c vmicshutdown - ok
14:03:50.0205 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync C:\WINDOWS\System32\icsvc.dll
14:03:50.0221 0x1c6c vmictimesync - ok
14:03:50.0221 0x1c6c [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll
14:03:50.0236 0x1c6c vmicvmsession - ok
14:03:50.0252 0x1c6c [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss C:\WINDOWS\System32\icsvcext.dll
14:03:50.0252 0x1c6c vmicvss - ok
14:03:50.0268 0x1c6c volmgr - ok
14:03:50.0268 0x1c6c volmgrx - ok
14:03:50.0268 0x1c6c volsnap - ok
14:03:50.0283 0x1c6c volume - ok
14:03:50.0283 0x1c6c [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci C:\WINDOWS\System32\drivers\vpci.sys
14:03:50.0283 0x1c6c vpci - ok
14:03:50.0315 0x1c6c [ 5B709509F409E43D24B4A1E59FB80F72, A138D4666425652BF750EC7AB29F348F8C5D0C3576CC13F0FBE6EFFF0F7C7931 ] vpnagent C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
14:03:50.0330 0x1c6c vpnagent - ok
14:03:50.0330 0x1c6c [ 1BD8D125A46369CE6C5BDC678074D18A, 8F2472508C3A658FA6BD870D9B4076283C8C02CE9B9C293194ED9592BE4CF6D9 ] vpnva C:\WINDOWS\System32\drivers\vpnva64-6.sys
14:03:50.0330 0x1c6c vpnva - ok
14:03:50.0346 0x1c6c vsmraid - ok
14:03:50.0346 0x1c6c VSS - ok
14:03:50.0346 0x1c6c VSTXRAID - ok
14:03:50.0361 0x1c6c vwifibus - ok
14:03:50.0361 0x1c6c vwififlt - ok
14:03:50.0361 0x1c6c vwifimp - ok
14:03:50.0377 0x1c6c W32Time - ok
14:03:50.0377 0x1c6c [ 244BA3FE721EAF5377634A4A39EB323D, A009894399149AC3442462DDB44C31E5E7012B43489E8458D48E30485763D0B9 ] w3logsvc C:\WINDOWS\system32\inetsrv\w3logsvc.dll
14:03:50.0377 0x1c6c w3logsvc - ok
14:03:50.0393 0x1c6c [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] W3SVC C:\WINDOWS\system32\inetsrv\iisw3adm.dll
14:03:50.0408 0x1c6c W3SVC - ok
14:03:50.0424 0x1c6c [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc C:\WINDOWS\System32\WaaSMedicSvc.dll
14:03:50.0440 0x1c6c WaaSMedicSvc - ok
14:03:50.0440 0x1c6c WacomPen - ok
14:03:50.0455 0x1c6c [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService C:\WINDOWS\system32\WalletService.dll
14:03:50.0471 0x1c6c WalletService - ok
14:03:50.0471 0x1c6c wanarp - ok
14:03:50.0471 0x1c6c wanarpv6 - ok
14:03:50.0486 0x1c6c [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc C:\WINDOWS\System32\Windows.WARP.JITService.dll
14:03:50.0486 0x1c6c WarpJITSvc - ok
14:03:50.0502 0x1c6c [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] WAS C:\WINDOWS\system32\inetsrv\iisw3adm.dll
14:03:50.0518 0x1c6c WAS - ok
14:03:50.0518 0x1c6c wbengine - ok
14:03:50.0533 0x1c6c WbioSrvc - ok
14:03:50.0533 0x1c6c [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys
14:03:50.0533 0x1c6c wcifs - ok
14:03:50.0549 0x1c6c Wcmsvc - ok
14:03:50.0549 0x1c6c wcncsvc - ok
14:03:50.0565 0x1c6c [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys
14:03:50.0565 0x1c6c wcnfs - ok
14:03:50.0565 0x1c6c [ 9BD1C97BAED4B916C95D4E107B3D9812, 722456319EBA63AC6EB21B6A99F4FC928F58AA972DF227EDF0982BC51F4DE86D ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
14:03:50.0565 0x1c6c WdBoot - ok
14:03:50.0580 0x1c6c Wdf01000 - ok
14:03:50.0580 0x1c6c [ D25D9930BFD78A09B8FD4A7504C6F57A, 9D94BC1368A73B06312ED9016482534EA64F7005C85AAB240ED619FDD19E7F4C ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
14:03:50.0596 0x1c6c WdFilter - ok
14:03:50.0596 0x1c6c [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
14:03:50.0611 0x1c6c WdiServiceHost - ok
14:03:50.0611 0x1c6c [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
14:03:50.0627 0x1c6c WdiSystemHost - ok
14:03:50.0627 0x1c6c wdiwifi - ok
14:03:50.0627 0x1c6c [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys
14:03:50.0643 0x1c6c WdmCompanionFilter - ok
14:03:50.0643 0x1c6c [ 54E97FEADEEFF973797EB878DC0D2850, A7ABD9E8B94DA19328BB9BF498D64603C6147BE998C40A6F0F8C2E0716CBFC95 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
14:03:50.0643 0x1c6c WdNisDrv - ok
14:03:50.0643 0x1c6c WdNisSvc - ok
14:03:50.0658 0x1c6c [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient C:\WINDOWS\System32\webclnt.dll
14:03:50.0674 0x1c6c WebClient - ok
14:03:50.0674 0x1c6c [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
14:03:50.0690 0x1c6c Wecsvc - ok
14:03:50.0690 0x1c6c [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
14:03:50.0705 0x1c6c WEPHOSTSVC - ok
14:03:50.0705 0x1c6c [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
14:03:50.0721 0x1c6c wercplsupport - ok
14:03:50.0721 0x1c6c WerSvc - ok
14:03:50.0736 0x1c6c [ 0427A785512BB39BEA530DC5367A9A03, 8ED29AE0FDB65D4E1D8CD3FA1783D74EF7B01AB30DD1090C917A74AC88FD4C3E ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll
14:03:50.0768 0x1c6c WFDSConMgrSvc - ok
14:03:50.0768 0x1c6c WFPLWFS - ok
14:03:50.0768 0x1c6c [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
14:03:50.0783 0x1c6c WiaRpc - ok
14:03:50.0783 0x1c6c WIMMount - ok
14:03:50.0783 0x1c6c WinDefend - ok
14:03:50.0799 0x1c6c WindowsTrustedRT - ok
14:03:50.0815 0x1c6c [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
14:03:50.0815 0x1c6c WindowsTrustedRTProxy - ok
14:03:50.0815 0x1c6c WinHttpAutoProxySvc - ok
14:03:50.0830 0x1c6c WinMad - ok
14:03:50.0830 0x1c6c Winmgmt - ok
14:03:50.0846 0x1c6c [ 48194110C410B335AC985D9194275A1C, 1CE64B9DD2DB4CCB3916AA4F4C5F8C71C647ABF7845D284019725761138B8A8B ] WinNat C:\WINDOWS\system32\drivers\winnat.sys
14:03:50.0846 0x1c6c WinNat - ok
14:03:50.0908 0x1c6c [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
14:03:50.0955 0x1c6c WinRM - ok
14:03:50.0971 0x1c6c [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
14:03:50.0971 0x1c6c WINUSB - ok
14:03:50.0986 0x1c6c WinVerbs - ok
14:03:50.0986 0x1c6c wisvc - ok
14:03:50.0986 0x1c6c WlanSvc - ok
14:03:51.0002 0x1c6c wlidsvc - ok
14:03:51.0018 0x1c6c [ 59F6A50CD336D0ADD22E3F1FC0D73957, A62469B30325965735FE76AE7D83E5D829AE09D7F0996CC0B42604E68426B088 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll
14:03:51.0049 0x1c6c wlpasvc - ok
14:03:51.0065 0x1c6c WmiAcpi - ok
14:03:51.0065 0x1c6c wmiApSrv - ok
14:03:51.0065 0x1c6c WMPNetworkSvc - ok
14:03:51.0080 0x1c6c [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
14:03:51.0080 0x1c6c Wof - ok
14:03:51.0143 0x1c6c [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
14:03:51.0174 0x1c6c workfolderssvc - ok
14:03:51.0190 0x1c6c WpcMonSvc - ok
14:03:51.0190 0x1c6c WPDBusEnum - ok
14:03:51.0205 0x1c6c [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
14:03:51.0205 0x1c6c WpdUpFltr - ok
14:03:51.0205 0x1c6c [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService C:\WINDOWS\system32\WpnService.dll
14:03:51.0221 0x1c6c WpnService - ok
14:03:51.0236 0x1c6c [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll
14:03:51.0236 0x1c6c WpnUserService - ok
14:03:51.0252 0x1c6c ws2ifsl - ok
14:03:51.0252 0x1c6c [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc C:\WINDOWS\System32\wscsvc.dll
14:03:51.0268 0x1c6c wscsvc - ok
14:03:51.0283 0x1c6c WSearch - ok
14:03:51.0283 0x1c6c wuauserv - ok
14:03:51.0299 0x1c6c [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
14:03:51.0299 0x1c6c WudfPf - ok
14:03:51.0299 0x1c6c [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
14:03:51.0315 0x1c6c WUDFRd - ok
14:03:51.0346 0x1c6c [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
14:03:51.0377 0x1c6c WwanSvc - ok
14:03:51.0393 0x1c6c [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm C:\WINDOWS\system32\xbgmsvc.exe
14:03:51.0408 0x1c6c xbgm - ok
14:03:51.0424 0x1c6c [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
14:03:51.0455 0x1c6c XblAuthManager - ok
14:03:51.0486 0x1c6c [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
14:03:51.0502 0x1c6c XblGameSave - ok
14:03:51.0518 0x1c6c xboxgip - ok
14:03:51.0518 0x1c6c [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll
14:03:51.0533 0x1c6c XboxGipSvc - ok
14:03:51.0565 0x1c6c [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
14:03:51.0580 0x1c6c XboxNetApiSvc - ok
14:03:51.0596 0x1c6c [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
14:03:51.0596 0x1c6c xinputhid - ok
14:03:51.0596 0x1c6c ================ Scan global ===============================
14:03:51.0611 0x1c6c [ Global ] - ok
14:03:51.0611 0x1c6c ================ Scan MBR ==================================
14:03:51.0611 0x1c6c [ A2CC2DB843A17BDD7414F0ED5E4FDD21 ] \Device\Harddisk0\DR0
14:03:51.0705 0x1c6c \Device\Harddisk0\DR0 - ok
14:03:51.0705 0x1c6c ================ Scan VBR ==================================
14:03:51.0705 0x1c6c [ B2606AB0598BCE8D94328D24F2A16446 ] \Device\Harddisk0\DR0\Partition1
14:03:51.0705 0x1c6c \Device\Harddisk0\DR0\Partition1 - ok
14:03:51.0705 0x1c6c [ 5289D4D71FB58748BBC6C016001A5A69 ] \Device\Harddisk0\DR0\Partition2
14:03:51.0705 0x1c6c \Device\Harddisk0\DR0\Partition2 - ok
14:03:51.0705 0x1c6c [ 3B3A08A958A13C8C63D47B47692B6774 ] \Device\Harddisk0\DR0\Partition3
14:03:51.0721 0x1c6c \Device\Harddisk0\DR0\Partition3 - ok
14:03:51.0721 0x1c6c ================ Scan generic autorun ======================
14:03:51.0721 0x1c6c SecurityHealth - ok
14:03:51.0721 0x1c6c [ 3870A4FB83F82357713AB8DB9ED1FEBD, D1669E3E066E23D69BD4E4D4ECF7D8F0247BBD2C9E69B572273715EC18FDC0C4 ] C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
14:03:51.0721 0x1c6c BLEServicesCtrl - ok
14:03:51.0736 0x1c6c [ 29DFA4FC734C5328FFC9FEF4F71D23A0, B15F3395472A4109346196851331254BDDB6B022B7112E3D3496B5B800F6F38A ] C:\Windows\system32\igfxtray.exe
14:03:51.0736 0x1c6c IgfxTray - ok
14:03:51.0752 0x1c6c [ 08593F82008D1524079C7CEA3D7F28F4, D6FF1875593D2BFFC137F9AD91C7A77916B83631B1D0BB97FF826F77D139B892 ] C:\WINDOWS\system32\TpShocks.exe
14:03:51.0768 0x1c6c TpShocks - ok
14:03:51.0768 0x1c6c [ 4E2FED41009B0D4E10F0121290C2EE7A, A8D1267F185439D41DA3D2486B2AEF9EE4A90362C01CB863615F44FC80EE3EC9 ] C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe
14:03:51.0783 0x1c6c LENOVO.TPKNRRES - ok
14:03:51.0861 0x1c6c [ 5CA53785B469303CC02CDB44E7410F12, 2302D64E1ECB3592DD83C3E74425F273A2628589C1FD1B0269DC319256D75E76 ] C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe
14:03:51.0908 0x1c6c Enhanced Performance Keyboard - ok
14:03:52.0002 0x1c6c [ C8BD6D2BD6D52259C2A672A86AA26A51, B790812B7B2A6BBEAD46E78D97358F7135386BDA8C95C8E936BE55286C8492D7 ] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe
14:03:52.0064 0x1c6c Lenovo Registration - ok
14:03:52.0111 0x1c6c [ E504BAAC3857F20F1D9F20EAED5E0637, 2C527925FF7EBD9F2D41E21420958A07524310F81DD1921A414D74430E13531D ] C:\Program Files (x86)\Integrated Camera\monitor.exe
14:03:52.0127 0x1c6c Integrated Camera_Monitor - ok
14:03:52.0143 0x1c6c [ 505844B5C97F8CF519DB0CF2A2E6AE1B, 57F112DA9374050D5EA3E67C6654CD29F9CC3A1B43371DA4FF423FF5682A25BB ] C:\Program Files (x86)\Mindjet\MindManager 15\MMReminderService.exe
14:03:52.0143 0x1c6c MMReminderService - ok
14:03:52.0174 0x1c6c [ CFE242C34F6DBAF1135D666A44E478C8, 46CE13A60ED54BD9C10A92042584863B623E62AE610CAE3F6AB6BFF945401317 ] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
14:03:52.0189 0x1c6c Cisco AnyConnect Secure Mobility Agent for Windows - ok
14:03:52.0580 0x1c6c [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:03:52.0939 0x1c6c OneDriveSetup - ok
14:03:52.0971 0x1c6c [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
14:03:52.0971 0x1c6c WAB Migrate - ok
14:03:53.0393 0x1c6c [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:03:53.0689 0x1c6c OneDriveSetup - ok
14:03:53.0721 0x1c6c [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
14:03:53.0736 0x1c6c WAB Migrate - ok
14:03:53.0768 0x1c6c [ 0E5FABACD6FC0C7D1766FF6A86F90F9A, 0E524FE27A4307ED8499A1C0D4DF1F7354BE6862085D368433F8DF7028D13803 ] C:\Users\Maren\AppData\Local\Microsoft\OneDrive\OneDrive.exe
14:03:53.0799 0x1c6c OneDrive - ok
14:03:53.0799 0x1c6c Skype - ok
14:03:53.0893 0x1c6c [ 0F07A461077941DDA25C45622C80ACD8, BF7D2F3AD62E0C653CE74D8245F1182831FE64B7FD37C81DA99581413E35E30F ] C:\Program Files (x86)\tubcloud\tubcloud.exe
14:03:53.0955 0x1c6c tubcloud - ok
14:03:54.0002 0x1c6c [ 62305D013F4E1538FA071846BD62FF52, E3DE76A994F2CCF17F443EFC928532FA6114469BC2C4B21D43B1DCE677D5D112 ] C:\Users\Maren\AppData\Local\FluxSoftware\Flux\flux.exe
14:03:54.0033 0x1c6c f.lux - ok
14:03:54.0439 0x1c6c [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
14:03:54.0736 0x1c6c OneDriveSetup - ok
14:03:54.0767 0x1c6c [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
14:03:54.0767 0x1c6c WAB Migrate - ok
14:03:54.0767 0x1c6c Waiting for KSN requests completion. In queue: 306
14:03:55.0830 0x1c6c AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.13.17134.1 ), 0x62100 ( disabled : updated )
14:03:55.0830 0x1c6c AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.167 ), 0x61000 ( enabled : updated )
14:03:55.0845 0x1c6c Win FW state via NFP2: enabled ( trusted )
14:03:55.0971 0x1c6c ============================================================
14:03:55.0971 0x1c6c Scan finished
14:03:55.0971 0x1c6c ============================================================
14:03:55.0971 0x1a38 Detected object count: 0
14:03:55.0971 0x1a38 Actual detected object count: 0
14:32:12.0517 0x19a8 ============================================================ |