| Mex271284 | 22.05.2015 23:48 |
Code:
00:18:20.0715 0x158c TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
00:18:24.0724 0x158c ============================================================
00:18:24.0724 0x158c Current date / time: 2015/05/23 00:18:24.0724
00:18:24.0724 0x158c SystemInfo:
00:18:24.0724 0x158c
00:18:24.0724 0x158c OS Version: 6.1.7601 ServicePack: 1.0
00:18:24.0724 0x158c Product type: Workstation
00:18:24.0724 0x158c ComputerName: IVONNE-PC
00:18:24.0724 0x158c UserName: Ivonne
00:18:24.0724 0x158c Windows directory: C:\Windows
00:18:24.0724 0x158c System windows directory: C:\Windows
00:18:24.0724 0x158c Processor architecture: Intel x86
00:18:24.0724 0x158c Number of processors: 4
00:18:24.0724 0x158c Page size: 0x1000
00:18:24.0724 0x158c Boot type: Normal boot
00:18:24.0724 0x158c ============================================================
00:18:24.0958 0x158c KLMD registered as C:\Windows\system32\drivers\85365473.sys
00:18:25.0442 0x158c System UUID: {67DEF174-5431-8EF5-8CE5-9D5367B6705B}
00:18:26.0456 0x158c Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
00:18:26.0456 0x158c ============================================================
00:18:26.0456 0x158c \Device\Harddisk0\DR0:
00:18:26.0456 0x158c MBR partitions:
00:18:26.0456 0x158c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
00:18:26.0456 0x158c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x253FB800
00:18:26.0456 0x158c ============================================================
00:18:26.0487 0x158c C: <-> \Device\Harddisk0\DR0\Partition2
00:18:26.0487 0x158c ============================================================
00:18:26.0487 0x158c Initialize success
00:18:26.0487 0x158c ============================================================
00:19:21.0185 0x0b3c ============================================================
00:19:21.0185 0x0b3c Scan started
00:19:21.0185 0x0b3c Mode: Manual; SigCheck; TDLFS;
00:19:21.0185 0x0b3c ============================================================
00:19:21.0185 0x0b3c KSN ping started
00:19:34.0741 0x0b3c KSN ping finished: true
00:19:35.0599 0x0b3c ================ Scan system memory ========================
00:19:35.0599 0x0b3c System memory - ok
00:19:35.0599 0x0b3c ================ Scan services =============================
00:19:35.0865 0x0b3c [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
00:19:36.0099 0x0b3c 1394ohci - ok
00:19:36.0177 0x0b3c [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys
00:19:36.0223 0x0b3c ACPI - ok
00:19:36.0301 0x0b3c [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
00:19:36.0411 0x0b3c AcpiPmi - ok
00:19:36.0582 0x0b3c [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
00:19:36.0613 0x0b3c AdobeARMservice - ok
00:19:36.0707 0x0b3c [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
00:19:36.0754 0x0b3c AdobeFlashPlayerUpdateSvc - ok
00:19:36.0847 0x0b3c [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
00:19:36.0941 0x0b3c adp94xx - ok
00:19:36.0988 0x0b3c [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
00:19:37.0081 0x0b3c adpahci - ok
00:19:37.0128 0x0b3c [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
00:19:37.0159 0x0b3c adpu320 - ok
00:19:37.0237 0x0b3c [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
00:19:37.0378 0x0b3c AeLookupSvc - ok
00:19:37.0456 0x0b3c [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD C:\Windows\system32\drivers\afd.sys
00:19:37.0612 0x0b3c AFD - ok
00:19:37.0674 0x0b3c [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys
00:19:37.0705 0x0b3c agp440 - ok
00:19:37.0768 0x0b3c [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
00:19:37.0799 0x0b3c aic78xx - ok
00:19:37.0846 0x0b3c [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe
00:19:37.0939 0x0b3c ALG - ok
00:19:38.0002 0x0b3c [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys
00:19:38.0017 0x0b3c aliide - ok
00:19:38.0049 0x0b3c [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
00:19:38.0080 0x0b3c amdagp - ok
00:19:38.0127 0x0b3c [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide C:\Windows\system32\drivers\amdide.sys
00:19:38.0158 0x0b3c amdide - ok
00:19:38.0189 0x0b3c [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
00:19:38.0283 0x0b3c AmdK8 - ok
00:19:38.0298 0x0b3c [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
00:19:38.0345 0x0b3c AmdPPM - ok
00:19:38.0392 0x0b3c [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys
00:19:38.0423 0x0b3c amdsata - ok
00:19:38.0485 0x0b3c [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
00:19:38.0532 0x0b3c amdsbs - ok
00:19:38.0563 0x0b3c [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
00:19:38.0579 0x0b3c amdxata - ok
00:19:38.0641 0x0b3c [ 81F97D8F8B3FB94A451CC6F7CF8B2965, 8DEBA4E47E1016D69740C0BB7CDD23852D86E0D42C1C1EA5A847ECB115C38CB1 ] AppID C:\Windows\system32\drivers\appid.sys
00:19:38.0719 0x0b3c AppID - ok
00:19:38.0751 0x0b3c [ F5090F8FA6757C58E17BAEAA86093636, 5E14CF3032DF5801240F45C59AA93962EA41AA5648A0C6458D16D9B9D95A131F ] AppIDSvc C:\Windows\System32\appidsvc.dll
00:19:38.0829 0x0b3c AppIDSvc - ok
00:19:38.0875 0x0b3c [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo C:\Windows\System32\appinfo.dll
00:19:38.0985 0x0b3c Appinfo - ok
00:19:39.0047 0x0b3c [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt C:\Windows\System32\appmgmts.dll
00:19:39.0141 0x0b3c AppMgmt - ok
00:19:39.0187 0x0b3c [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\DRIVERS\arc.sys
00:19:39.0203 0x0b3c arc - ok
00:19:39.0234 0x0b3c [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
00:19:39.0265 0x0b3c arcsas - ok
00:19:39.0437 0x0b3c [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
00:19:39.0468 0x0b3c aspnet_state - ok
00:19:39.0546 0x0b3c [ AA69ED00EE72BFEE003C864DCFBC5038, 95B949C4AC7F1962FE84EE8FBA4C7CBE959B963ABEEAE0EF092EBB028D1435E2 ] aswHwid C:\Windows\system32\drivers\aswHwid.sys
00:19:39.0577 0x0b3c aswHwid - ok
00:19:39.0640 0x0b3c [ 6FDAE6458E0FAC369005EEFE55E1190A, 518FEFEBE50CAC7F54AF839F8A2423307789989FC5D92535866C38A1FBDBDDE3 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
00:19:39.0671 0x0b3c aswMonFlt - ok
00:19:39.0733 0x0b3c [ 0BD1C9E546CA7D801E25FED0E9CA58B8, 487C36B0A008EDD3E907B7537E69F085976B97BDD2D2E05D2BEC22DDD07923CA ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys
00:19:39.0765 0x0b3c aswRdr - ok
00:19:39.0811 0x0b3c [ 6FB92505DAA300DA62A1C374B949B574, CBF54038F1267A8B3420C5B58F4AAB77A71590B1C82B9144AD4FAB07E9B9B685 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
00:19:39.0843 0x0b3c aswRvrt - ok
00:19:39.0983 0x0b3c [ C3A047ABB97AEB805E07A30EFDACD0B9, D62BD6FF27C42134FE3A22B87ED5D16EDEA1994E90C1EEC5E2680047B76DC4DC ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
00:19:40.0108 0x0b3c aswSnx - ok
00:19:40.0186 0x0b3c [ E5F230B70F1A9764EB7AC4A76445F79F, 22D938B96D6E1BCAF2E5DD109A880BDB640AC048970876EB75DA5BB7DD858DDA ] aswSP C:\Windows\system32\drivers\aswSP.sys
00:19:40.0279 0x0b3c aswSP - ok
00:19:40.0326 0x0b3c [ F761D13D43D0F4FB2986308CFFD7F589, 035EEABBAB6D3DC71C659DE91C860B7D2F6BC581E6B5D5F506169FC7FD7A4F88 ] aswStm C:\Windows\system32\drivers\aswStm.sys
00:19:40.0357 0x0b3c aswStm - ok
00:19:40.0404 0x0b3c [ 2EBD0ACCAFC67088D4B9EBDF7428F6AD, F2872CB350CE46BED8FCD3790921612B808292D32A58BC6F646BBD2EEEA4ADE0 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
00:19:40.0467 0x0b3c aswVmm - ok
00:19:40.0513 0x0b3c [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
00:19:40.0669 0x0b3c AsyncMac - ok
00:19:40.0732 0x0b3c [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys
00:19:40.0763 0x0b3c atapi - ok
00:19:40.0888 0x0b3c [ 7D0A662D7B116169854B4EC941A7822D, 6B36A52F0E727A02205F9287BC0A48A56A53507C563DE27CFC07C6D175611AF5 ] athr C:\Windows\system32\DRIVERS\athr.sys
00:19:41.0075 0x0b3c athr - ok
00:19:41.0153 0x0b3c [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
00:19:41.0293 0x0b3c AudioEndpointBuilder - ok
00:19:41.0340 0x0b3c [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv C:\Windows\System32\Audiosrv.dll
00:19:41.0403 0x0b3c Audiosrv - ok
00:19:41.0512 0x0b3c [ 35714DC1ADD995681D890D4382C75721, C1D10F2D47D348DCEA363B676E35A363FE8FA0E24295C4AD90F7EA37826A822D ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
00:19:41.0559 0x0b3c avast! Antivirus - ok
00:19:41.0917 0x0b3c [ 5019A83BE87FD8B60F7333901BFD35E5, 674DF51CAA1B6C0BC9CA9755B3BC5A9A71C583BD7C7A2826BD280E107B855092 ] AvastVBoxSvc C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
00:19:42.0183 0x0b3c AvastVBoxSvc - ok
00:19:42.0276 0x0b3c [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll
00:19:42.0385 0x0b3c AxInstSV - ok
00:19:42.0463 0x0b3c [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
00:19:42.0619 0x0b3c b06bdrv - ok
00:19:42.0666 0x0b3c [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
00:19:42.0760 0x0b3c b57nd60x - ok
00:19:42.0838 0x0b3c [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll
00:19:42.0916 0x0b3c BDESVC - ok
00:19:42.0931 0x0b3c [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys
00:19:43.0009 0x0b3c Beep - ok
00:19:43.0087 0x0b3c [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll
00:19:43.0212 0x0b3c BFE - ok
00:19:43.0321 0x0b3c [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\system32\qmgr.dll
00:19:43.0524 0x0b3c BITS - ok
00:19:43.0555 0x0b3c [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
00:19:43.0633 0x0b3c blbdrive - ok
00:19:43.0680 0x0b3c [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
00:19:43.0789 0x0b3c bowser - ok
00:19:43.0821 0x0b3c [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
00:19:43.0899 0x0b3c BrFiltLo - ok
00:19:43.0914 0x0b3c [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
00:19:43.0977 0x0b3c BrFiltUp - ok
00:19:44.0039 0x0b3c [ 77361D72A04F18809D0EFB6CCEB74D4B, 55E7DB65BB29FF421F138CDFF05E5ECFFC7C8862FAA68F6179A3BA9D6B69AE64 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
00:19:44.0148 0x0b3c BridgeMP - ok
00:19:44.0226 0x0b3c [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser C:\Windows\System32\browser.dll
00:19:44.0335 0x0b3c Browser - ok
00:19:44.0382 0x0b3c [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys
00:19:44.0476 0x0b3c Brserid - ok
00:19:44.0507 0x0b3c [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
00:19:44.0569 0x0b3c BrSerWdm - ok
00:19:44.0601 0x0b3c [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
00:19:44.0647 0x0b3c BrUsbMdm - ok
00:19:44.0679 0x0b3c [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
00:19:44.0757 0x0b3c BrUsbSer - ok
00:19:44.0772 0x0b3c [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
00:19:44.0835 0x0b3c BTHMODEM - ok
00:19:44.0897 0x0b3c [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll
00:19:44.0975 0x0b3c bthserv - ok
00:19:45.0037 0x0b3c catchme - ok
00:19:45.0069 0x0b3c [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
00:19:45.0162 0x0b3c cdfs - ok
00:19:45.0225 0x0b3c [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\drivers\cdrom.sys
00:19:45.0287 0x0b3c cdrom - ok
00:19:45.0349 0x0b3c [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll
00:19:45.0427 0x0b3c CertPropSvc - ok
00:19:45.0459 0x0b3c [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
00:19:45.0537 0x0b3c circlass - ok
00:19:45.0599 0x0b3c [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS C:\Windows\system32\CLFS.sys
00:19:45.0646 0x0b3c CLFS - ok
00:19:45.0724 0x0b3c [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:19:45.0755 0x0b3c clr_optimization_v2.0.50727_32 - ok
00:19:45.0817 0x0b3c [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
00:19:45.0864 0x0b3c clr_optimization_v4.0.30319_32 - ok
00:19:45.0880 0x0b3c [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
00:19:45.0958 0x0b3c CmBatt - ok
00:19:46.0005 0x0b3c [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys
00:19:46.0036 0x0b3c cmdide - ok
00:19:46.0114 0x0b3c [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG C:\Windows\system32\Drivers\cng.sys
00:19:46.0239 0x0b3c CNG - ok
00:19:46.0270 0x0b3c [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
00:19:46.0301 0x0b3c Compbatt - ok
00:19:46.0363 0x0b3c [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
00:19:46.0426 0x0b3c CompositeBus - ok
00:19:46.0457 0x0b3c COMSysApp - ok
00:19:46.0488 0x0b3c [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
00:19:46.0519 0x0b3c crcdisk - ok
00:19:46.0566 0x0b3c [ 49474B3E37969AF4B5C076F42B623AFF, BDA6B57E9B60EF1B67C74099263D33A367AAA035667239F76AB8B268FD3E8F23 ] CryptSvc C:\Windows\system32\cryptsvc.dll
00:19:46.0660 0x0b3c CryptSvc - ok
00:19:46.0722 0x0b3c [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC C:\Windows\system32\drivers\csc.sys
00:19:46.0847 0x0b3c CSC - ok
00:19:46.0956 0x0b3c [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService C:\Windows\System32\cscsvc.dll
00:19:47.0050 0x0b3c CscService - ok
00:19:47.0097 0x0b3c [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll
00:19:47.0221 0x0b3c DcomLaunch - ok
00:19:47.0253 0x0b3c [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll
00:19:47.0362 0x0b3c defragsvc - ok
00:19:47.0409 0x0b3c [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
00:19:47.0502 0x0b3c DfsC - ok
00:19:47.0565 0x0b3c [ 560B0DCE52DFED6623B27C9BAFA6F236, BB4156BB1CCA64CCDE065870DAE56CD58BF05CEBF7C3B17C7A821FDF02A8B157 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
00:19:47.0596 0x0b3c dg_ssudbus - ok
00:19:47.0689 0x0b3c [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll
00:19:47.0783 0x0b3c Dhcp - ok
00:19:47.0923 0x0b3c [ E95DE5B790B2D16706DAC8472E51F31A, 9D7A72742D369B9F0E4ACEC9C1850D0D60E975AEBEFF5BA06B954EA3AB3E9FF6 ] DiagTrack C:\Windows\system32\diagtrack.dll
00:19:48.0111 0x0b3c DiagTrack - ok
00:19:48.0173 0x0b3c [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys
00:19:48.0267 0x0b3c discache - ok
00:19:48.0298 0x0b3c [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\DRIVERS\disk.sys
00:19:48.0329 0x0b3c Disk - ok
00:19:48.0376 0x0b3c [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll
00:19:48.0469 0x0b3c Dnscache - ok
00:19:48.0516 0x0b3c [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll
00:19:48.0625 0x0b3c dot3svc - ok
00:19:48.0688 0x0b3c [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll
00:19:48.0797 0x0b3c DPS - ok
00:19:48.0859 0x0b3c [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
00:19:48.0953 0x0b3c drmkaud - ok
00:19:49.0031 0x0b3c [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
00:19:49.0140 0x0b3c DXGKrnl - ok
00:19:49.0187 0x0b3c [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll
00:19:49.0312 0x0b3c EapHost - ok
00:19:49.0546 0x0b3c [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
00:19:49.0951 0x0b3c ebdrv - ok
00:19:50.0014 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] EFS C:\Windows\System32\lsass.exe
00:19:50.0123 0x0b3c EFS - ok
00:19:50.0217 0x0b3c [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
00:19:50.0373 0x0b3c ehRecvr - ok
00:19:50.0419 0x0b3c [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe
00:19:50.0513 0x0b3c ehSched - ok
00:19:50.0591 0x0b3c [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
00:19:50.0685 0x0b3c elxstor - ok
00:19:50.0794 0x0b3c [ EC6A73CD8413F68655E5E0B99C415A21, 5F56B211E854B316A0512091D9EE5A10199EEF619712B8645A2034165253F2A0 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
00:19:50.0887 0x0b3c EPSON_EB_RPCV4_01 - ok
00:19:50.0950 0x0b3c [ 8FE6AB59CAB8F2C038FEA9522A5EEBA7, 539C4257DE460F881DAFAD4FD83C216363B558FDD06AE6779FBBCC2B84BCCF56 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
00:19:50.0997 0x0b3c EPSON_PM_RPCV4_01 - ok
00:19:51.0043 0x0b3c [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys
00:19:51.0090 0x0b3c ErrDev - ok
00:19:51.0153 0x0b3c [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll
00:19:51.0309 0x0b3c EventSystem - ok
00:19:51.0371 0x0b3c [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys
00:19:51.0480 0x0b3c exfat - ok
00:19:51.0511 0x0b3c [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys
00:19:51.0636 0x0b3c fastfat - ok
00:19:51.0714 0x0b3c [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe
00:19:51.0839 0x0b3c Fax - ok
00:19:51.0870 0x0b3c [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
00:19:51.0948 0x0b3c fdc - ok
00:19:51.0979 0x0b3c [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll
00:19:52.0089 0x0b3c fdPHost - ok
00:19:52.0104 0x0b3c [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll
00:19:52.0213 0x0b3c FDResPub - ok
00:19:52.0229 0x0b3c [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
00:19:52.0260 0x0b3c FileInfo - ok
00:19:52.0276 0x0b3c [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
00:19:52.0354 0x0b3c Filetrace - ok
00:19:52.0479 0x0b3c [ 73081CF28F0AE20A52CA4F67CEE6E6B0, 806C769F3638D25FF1892C7223E7250AA3B9F627DF3AD83BC5AE1FEF7016F86A ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
00:19:52.0588 0x0b3c FLEXnet Licensing Service - ok
00:19:52.0635 0x0b3c [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
00:19:52.0666 0x0b3c flpydisk - ok
00:19:52.0697 0x0b3c [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
00:19:52.0759 0x0b3c FltMgr - ok
00:19:52.0884 0x0b3c [ 6EC244F102C7F129678E5F7309D1366D, C30DA201AC623DA440B0A0716534557C578218C2A591FA8893CCCBD96B4518F9 ] FontCache C:\Windows\system32\FntCache.dll
00:19:53.0071 0x0b3c FontCache - ok
00:19:53.0134 0x0b3c [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
00:19:53.0165 0x0b3c FontCache3.0.0.0 - ok
00:19:53.0212 0x0b3c [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
00:19:53.0243 0x0b3c FsDepends - ok
00:19:53.0305 0x0b3c [ 2262614848962DDB38FFB7C883E6FB55, 13A0FD679B96A1475FDAD5F64B0A9B07A3B132734888004276481E1060048A59 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
00:19:53.0337 0x0b3c fssfltr - ok
00:19:53.0555 0x0b3c [ 7B4C82899A967A7EB22DAB502770AE8E, 209FB59669070FCAAACB24B0CE81C375362BF1C519B15FDB5AA3EC2C87E2069B ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
00:19:53.0742 0x0b3c fsssvc - ok
00:19:53.0836 0x0b3c [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
00:19:53.0867 0x0b3c Fs_Rec - ok
00:19:53.0929 0x0b3c [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
00:19:53.0992 0x0b3c fvevol - ok
00:19:54.0023 0x0b3c [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
00:19:54.0054 0x0b3c gagp30kx - ok
00:19:54.0148 0x0b3c [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll
00:19:54.0288 0x0b3c gpsvc - ok
00:19:54.0335 0x0b3c [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
00:19:54.0397 0x0b3c hcw85cir - ok
00:19:54.0475 0x0b3c [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
00:19:54.0553 0x0b3c HdAudAddService - ok
00:19:54.0600 0x0b3c [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
00:19:54.0647 0x0b3c HDAudBus - ok
00:19:54.0694 0x0b3c [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
00:19:54.0741 0x0b3c HidBatt - ok
00:19:54.0772 0x0b3c [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
00:19:54.0819 0x0b3c HidBth - ok
00:19:54.0850 0x0b3c [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
00:19:54.0881 0x0b3c HidIr - ok
00:19:54.0928 0x0b3c [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\System32\hidserv.dll
00:19:55.0037 0x0b3c hidserv - ok
00:19:55.0099 0x0b3c [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\drivers\hidusb.sys
00:19:55.0193 0x0b3c HidUsb - ok
00:19:55.0240 0x0b3c [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll
00:19:55.0333 0x0b3c hkmsvc - ok
00:19:55.0396 0x0b3c [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
00:19:55.0521 0x0b3c HomeGroupListener - ok
00:19:55.0567 0x0b3c [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
00:19:55.0661 0x0b3c HomeGroupProvider - ok
00:19:55.0739 0x0b3c [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
00:19:55.0770 0x0b3c HpSAMD - ok
00:19:55.0864 0x0b3c [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP C:\Windows\system32\drivers\HTTP.sys
00:19:56.0020 0x0b3c HTTP - ok
00:19:56.0067 0x0b3c [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
00:19:56.0082 0x0b3c hwpolicy - ok
00:19:56.0145 0x0b3c [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
00:19:56.0191 0x0b3c i8042prt - ok
00:19:56.0254 0x0b3c [ EB3A2C773E202CED30595BBFAD24FEBF, C7C45C5EC2D4A35740D81CCC0229EBC093863B851B18BF473E0FED4A97495C71 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
00:19:56.0316 0x0b3c iaStor - ok
00:19:56.0363 0x0b3c [ 1E7999FE262B0A5FB84485C3A9AD06F1, EF42B436B35AD0A1FCCE4DD23DF1D6934A79E49FCD8AF90787A643B2290932F8 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
00:19:56.0394 0x0b3c IAStorDataMgrSvc - ok
00:19:56.0488 0x0b3c [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
00:19:56.0581 0x0b3c iaStorV - ok
00:19:56.0706 0x0b3c [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:19:56.0831 0x0b3c idsvc - ok
00:19:56.0862 0x0b3c IEEtwCollectorService - ok
00:19:56.0909 0x0b3c [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
00:19:56.0940 0x0b3c iirsp - ok
00:19:57.0018 0x0b3c [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT C:\Windows\System32\ikeext.dll
00:19:57.0143 0x0b3c IKEEXT - ok
00:19:57.0393 0x0b3c [ 96282FBCE4534C9BF147CFFE9E1FA8DB, 91801002545FFF336A46A6D8B365491D2A21DD561DC8C7FA1EF6A1D9CFE1893C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
00:19:57.0751 0x0b3c IntcAzAudAddService - ok
00:19:57.0783 0x0b3c [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys
00:19:57.0814 0x0b3c intelide - ok
00:19:57.0876 0x0b3c [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
00:19:57.0907 0x0b3c intelppm - ok
00:19:57.0939 0x0b3c [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
00:19:58.0032 0x0b3c IPBusEnum - ok
00:19:58.0048 0x0b3c [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
00:19:58.0126 0x0b3c IpFilterDriver - ok
00:19:58.0235 0x0b3c [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
00:19:58.0375 0x0b3c iphlpsvc - ok
00:19:58.0438 0x0b3c [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
00:19:58.0531 0x0b3c IPMIDRV - ok
00:19:58.0563 0x0b3c [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
00:19:58.0656 0x0b3c IPNAT - ok
00:19:58.0687 0x0b3c [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys
00:19:58.0750 0x0b3c IRENUM - ok
00:19:58.0812 0x0b3c [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys
00:19:58.0843 0x0b3c isapnp - ok
00:19:58.0890 0x0b3c [ CB7A9ABB12B8415BCE5D74994C7BA3AE, 464BFF3F5EEE985BE075E23E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
00:19:58.0937 0x0b3c iScsiPrt - ok
00:19:58.0968 0x0b3c [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
00:19:58.0999 0x0b3c kbdclass - ok
00:19:59.0062 0x0b3c [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
00:19:59.0109 0x0b3c kbdhid - ok
00:19:59.0124 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] KeyIso C:\Windows\system32\lsass.exe
00:19:59.0171 0x0b3c KeyIso - ok
00:19:59.0202 0x0b3c [ 6DD2A1064DD8AFBED22E71176E2AF59B, 915F36860DAA72DA89E906A7F6F255A854A2A91EEA536A7C2EDB4A63250F66CC ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
00:19:59.0233 0x0b3c KSecDD - ok
00:19:59.0296 0x0b3c [ 76C0D35167B1369C68388FEDB56A3048, 2788962AB21DBB0A4D130AE5F822E9FDB96D7FF6320E2798714BF18BCB9CAE4F ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
00:19:59.0327 0x0b3c KSecPkg - ok
00:19:59.0389 0x0b3c [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll
00:19:59.0514 0x0b3c KtmRm - ok
00:19:59.0561 0x0b3c [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\System32\srvsvc.dll
00:19:59.0670 0x0b3c LanmanServer - ok
00:19:59.0733 0x0b3c [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
00:19:59.0811 0x0b3c LanmanWorkstation - ok
00:19:59.0842 0x0b3c [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
00:19:59.0920 0x0b3c lltdio - ok
00:19:59.0967 0x0b3c [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll
00:20:00.0060 0x0b3c lltdsvc - ok
00:20:00.0076 0x0b3c [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll
00:20:00.0185 0x0b3c lmhosts - ok
00:20:00.0232 0x0b3c [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
00:20:00.0263 0x0b3c LSI_FC - ok
00:20:00.0294 0x0b3c [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
00:20:00.0325 0x0b3c LSI_SAS - ok
00:20:00.0357 0x0b3c [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
00:20:00.0388 0x0b3c LSI_SAS2 - ok
00:20:00.0403 0x0b3c [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
00:20:00.0435 0x0b3c LSI_SCSI - ok
00:20:00.0497 0x0b3c [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys
00:20:00.0575 0x0b3c luafv - ok
00:20:00.0637 0x0b3c [ 3C21F7E95FFCA33EF1A83AA33D9663CF, C843116969E1CDBA45AEF98B33BEDBA9200C62CDB52CD7056CE6768A1EF3A637 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
00:20:00.0669 0x0b3c MBAMProtector - ok
00:20:00.0825 0x0b3c [ 2B983F067AEE3F9EB4DF5E97F45D21D1, 0B9ED0E91FF01A5445927650113E320C3C0EA16F1401AA55A509DDBF704DF22F ] MBAMService C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
00:20:00.0965 0x0b3c MBAMService - ok
00:20:01.0012 0x0b3c [ 167BCE00050B19DA25065335645A3C7A, 5CD3EA3E09B4ED318AB6151F56A17B0E4C8CE32DBB77342A39DEF53908F7D2F0 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
00:20:01.0043 0x0b3c MBAMWebAccessControl - ok
00:20:01.0090 0x0b3c [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
00:20:01.0168 0x0b3c Mcx2Svc - ok
00:20:01.0199 0x0b3c [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
00:20:01.0230 0x0b3c megasas - ok
00:20:01.0293 0x0b3c [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
00:20:01.0339 0x0b3c MegaSR - ok
00:20:01.0371 0x0b3c [ C1BF5FE1BD4D726685891BF9EAA9FDD5, 3C664F106A0E8F67B14908E0C0C2AA4E9AF7E4204991EC7B429278A7E76E54D9 ] MHIKEY10 C:\Windows\system32\Drivers\MHIKEY10.sys
00:20:01.0417 0x0b3c MHIKEY10 - ok
00:20:01.0449 0x0b3c [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll
00:20:01.0527 0x0b3c MMCSS - ok
00:20:01.0558 0x0b3c [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys
00:20:01.0636 0x0b3c Modem - ok
00:20:01.0667 0x0b3c [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
00:20:01.0714 0x0b3c monitor - ok
00:20:01.0776 0x0b3c [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
00:20:01.0792 0x0b3c mouclass - ok
00:20:01.0854 0x0b3c [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
00:20:01.0885 0x0b3c mouhid - ok
00:20:01.0932 0x0b3c [ 644905A19D0F37F2233DFCE53BC4BC19, F52CB40AA0FD1EBF8CBF0F3BFB20C47142C637719840877FB93F10D085EB8C2B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
00:20:01.0963 0x0b3c mountmgr - ok
00:20:02.0041 0x0b3c [ DD370A8148862150BA81A3F5C56A1E40, F56B84297BDC32266CB69D10FB2D66B8B332D60CAB7E64E4E3AC2BB749BBD31B ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
00:20:02.0088 0x0b3c MozillaMaintenance - ok
00:20:02.0119 0x0b3c [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys
00:20:02.0151 0x0b3c mpio - ok
00:20:02.0182 0x0b3c [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
00:20:02.0291 0x0b3c mpsdrv - ok
00:20:02.0385 0x0b3c [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll
00:20:02.0525 0x0b3c MpsSvc - ok
00:20:02.0572 0x0b3c [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
00:20:02.0650 0x0b3c MRxDAV - ok
00:20:02.0728 0x0b3c [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
00:20:02.0806 0x0b3c mrxsmb - ok
00:20:02.0868 0x0b3c [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
00:20:02.0931 0x0b3c mrxsmb10 - ok
00:20:02.0977 0x0b3c [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
00:20:03.0024 0x0b3c mrxsmb20 - ok
00:20:03.0071 0x0b3c [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys
00:20:03.0102 0x0b3c msahci - ok
00:20:03.0165 0x0b3c [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys
00:20:03.0196 0x0b3c msdsm - ok
00:20:03.0243 0x0b3c [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe
00:20:03.0336 0x0b3c MSDTC - ok
00:20:03.0383 0x0b3c [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys
00:20:03.0477 0x0b3c Msfs - ok
00:20:03.0508 0x0b3c [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
00:20:03.0586 0x0b3c mshidkmdf - ok
00:20:03.0633 0x0b3c [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
00:20:03.0664 0x0b3c msisadrv - ok
00:20:03.0711 0x0b3c [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
00:20:03.0804 0x0b3c MSiSCSI - ok
00:20:03.0804 0x0b3c msiserver - ok
00:20:03.0851 0x0b3c [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
00:20:03.0960 0x0b3c MSKSSRV - ok
00:20:03.0991 0x0b3c [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
00:20:04.0069 0x0b3c MSPCLOCK - ok
00:20:04.0085 0x0b3c [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
00:20:04.0179 0x0b3c MSPQM - ok
00:20:04.0210 0x0b3c [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
00:20:04.0257 0x0b3c MsRPC - ok
00:20:04.0319 0x0b3c [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
00:20:04.0350 0x0b3c mssmbios - ok
00:20:04.0381 0x0b3c [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
00:20:04.0459 0x0b3c MSTEE - ok
00:20:04.0506 0x0b3c [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
00:20:04.0569 0x0b3c MTConfig - ok
00:20:04.0615 0x0b3c [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys
00:20:04.0647 0x0b3c Mup - ok
00:20:04.0709 0x0b3c [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll
00:20:04.0834 0x0b3c napagent - ok
00:20:04.0896 0x0b3c [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
00:20:04.0959 0x0b3c NativeWifiP - ok
00:20:05.0130 0x0b3c [ E0E4A1F81A7D69C595A8A9DDAD084C19, 8F55F3637AE8BFFB0ACE37AFC5122026525137E0B2923899B779C1BD08DF0E22 ] NAUpdate C:\Program Files\Nero\Update\NASvc.exe
00:20:05.0224 0x0b3c NAUpdate - ok
00:20:05.0380 0x0b3c [ 5E8EDD6A52E897C19EC6E149FE6C7A8E, 0ACF2237F5AFA72505FFE2C9639FFDBBB991EDF804376610B0719F0131F63E43 ] NBService C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
00:20:05.0489 0x0b3c NBService - ok
00:20:05.0567 0x0b3c [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS C:\Windows\system32\drivers\ndis.sys
00:20:05.0661 0x0b3c NDIS - ok
00:20:05.0723 0x0b3c [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
00:20:05.0832 0x0b3c NdisCap - ok
00:20:05.0863 0x0b3c [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
00:20:05.0926 0x0b3c NdisTapi - ok
00:20:05.0988 0x0b3c [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
00:20:06.0097 0x0b3c Ndisuio - ok
00:20:06.0160 0x0b3c [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
00:20:06.0238 0x0b3c NdisWan - ok
00:20:06.0285 0x0b3c [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
00:20:06.0378 0x0b3c NDProxy - ok
00:20:06.0425 0x0b3c [ 1352E1648213551923A0A822E441553C, F9BCA299249D8E1ADF88F54554F72428E267E39911143F4C99DFF562F0EE4E70 ] Netaapl C:\Windows\system32\DRIVERS\netaapl.sys
00:20:06.0441 0x0b3c Netaapl - detected UnsignedFile.Multi.Generic ( 1 )
00:20:08.0874 0x0b3c Detect skipped due to KSN trusted
00:20:08.0874 0x0b3c Netaapl - ok
00:20:08.0937 0x0b3c [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
00:20:09.0046 0x0b3c NetBIOS - ok
00:20:09.0108 0x0b3c [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
00:20:09.0202 0x0b3c NetBT - ok
00:20:09.0233 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] Netlogon C:\Windows\system32\lsass.exe
00:20:09.0264 0x0b3c Netlogon - ok
00:20:09.0311 0x0b3c [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll
00:20:09.0436 0x0b3c Netman - ok
00:20:09.0498 0x0b3c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0545 0x0b3c NetMsmqActivator - ok
00:20:09.0592 0x0b3c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0623 0x0b3c NetPipeActivator - ok
00:20:09.0685 0x0b3c [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll
00:20:09.0795 0x0b3c netprofm - ok
00:20:09.0826 0x0b3c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0873 0x0b3c NetTcpActivator - ok
00:20:09.0888 0x0b3c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0919 0x0b3c NetTcpPortSharing - ok
00:20:09.0966 0x0b3c [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
00:20:09.0997 0x0b3c nfrd960 - ok
00:20:10.0075 0x0b3c [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc C:\Windows\System32\nlasvc.dll
00:20:10.0185 0x0b3c NlaSvc - ok
00:20:10.0294 0x0b3c [ 193FA51DDDD0BFFDED1C340F0434999A, C05CA0A8568E9CBDA15633ED420C29F52082114B2B9F24EB61369E42C480C080 ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
00:20:10.0372 0x0b3c NMIndexingService - ok
00:20:10.0387 0x0b3c [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys
00:20:10.0497 0x0b3c Npfs - ok
00:20:10.0543 0x0b3c [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll
00:20:10.0637 0x0b3c nsi - ok
00:20:10.0668 0x0b3c [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
00:20:10.0746 0x0b3c nsiproxy - ok
00:20:10.0871 0x0b3c [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
00:20:11.0011 0x0b3c Ntfs - ok
00:20:11.0027 0x0b3c [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys
00:20:11.0105 0x0b3c Null - ok
00:20:11.0152 0x0b3c [ D2F4C4B22969236382CA853B8DAA2D4E, 83950153451140AC54CF95F0ED03C165DD5E8B7E8F3869B1746CDDDF9DFE1F11 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
00:20:11.0167 0x0b3c NVHDA - ok
00:20:11.0869 0x0b3c [ F0280A7B9C6483BA7AAA42C0866F1C4A, B7C9592BA2BA2895BFF27B2DDCEB514DA7EE13F8698A888CAD5B81A3846DE639 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
00:20:12.0727 0x0b3c nvlddmkm - ok
00:20:12.0790 0x0b3c [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys
00:20:12.0821 0x0b3c nvraid - ok
00:20:12.0899 0x0b3c [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
00:20:12.0930 0x0b3c nvstor - ok
00:20:12.0993 0x0b3c [ 805D826A6F2521A020F65F87103D8A32, 6E1B665F8EE227799DD44FB464BF3096170F16BD59D7ABB93331E359547FA4AD ] nvsvc C:\Windows\system32\nvvsvc.exe
00:20:13.0024 0x0b3c nvsvc - ok
00:20:13.0086 0x0b3c [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
00:20:13.0117 0x0b3c nv_agp - ok
00:20:13.0164 0x0b3c [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
00:20:13.0227 0x0b3c ohci1394 - ok
00:20:13.0273 0x0b3c [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:20:13.0305 0x0b3c ose - ok
00:20:13.0367 0x0b3c [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
00:20:13.0476 0x0b3c p2pimsvc - ok
00:20:13.0539 0x0b3c [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll
00:20:13.0648 0x0b3c p2psvc - ok
00:20:13.0679 0x0b3c [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\DRIVERS\parport.sys
00:20:13.0726 0x0b3c Parport - ok
00:20:13.0788 0x0b3c [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr C:\Windows\system32\drivers\partmgr.sys
00:20:13.0819 0x0b3c partmgr - ok
00:20:13.0851 0x0b3c [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
00:20:13.0882 0x0b3c Parvdm - ok
00:20:13.0929 0x0b3c [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc C:\Windows\System32\pcasvc.dll
00:20:14.0053 0x0b3c PcaSvc - ok
00:20:14.0131 0x0b3c [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys
00:20:14.0209 0x0b3c pci - ok
00:20:14.0241 0x0b3c [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys
00:20:14.0272 0x0b3c pciide - ok
00:20:14.0319 0x0b3c [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
00:20:14.0381 0x0b3c pcmcia - ok
00:20:14.0412 0x0b3c [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys
00:20:14.0443 0x0b3c pcw - ok
00:20:14.0537 0x0b3c [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
00:20:14.0677 0x0b3c PEAUTH - ok
00:20:14.0802 0x0b3c [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
00:20:14.0974 0x0b3c PeerDistSvc - ok
00:20:15.0145 0x0b3c [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll
00:20:15.0364 0x0b3c pla - ok
00:20:15.0442 0x0b3c [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
00:20:15.0551 0x0b3c PlugPlay - ok
00:20:15.0567 0x0b3c [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
00:20:15.0613 0x0b3c PNRPAutoReg - ok
00:20:15.0645 0x0b3c [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
00:20:15.0707 0x0b3c PNRPsvc - ok
00:20:15.0754 0x0b3c [ 60A044879C4FA76314494F5FDDC43B93, BA0823D17F6A1A60AC24A6BDB9A4357FDB5880E886B6ABC3E66C6760C409830E ] Point32 C:\Windows\system32\DRIVERS\point32.sys
00:20:15.0785 0x0b3c Point32 - ok
00:20:15.0879 0x0b3c [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
00:20:16.0035 0x0b3c PolicyAgent - ok
00:20:16.0097 0x0b3c [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll
00:20:16.0222 0x0b3c Power - ok
00:20:16.0269 0x0b3c [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
00:20:16.0393 0x0b3c PptpMiniport - ok
00:20:16.0425 0x0b3c [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\DRIVERS\processr.sys
00:20:16.0456 0x0b3c Processor - ok
00:20:16.0534 0x0b3c [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc C:\Windows\system32\profsvc.dll
00:20:16.0659 0x0b3c ProfSvc - ok
00:20:16.0690 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] ProtectedStorage C:\Windows\system32\lsass.exe
00:20:16.0721 0x0b3c ProtectedStorage - ok
00:20:16.0768 0x0b3c [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
00:20:16.0861 0x0b3c Psched - ok
00:20:16.0986 0x0b3c [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
00:20:17.0142 0x0b3c ql2300 - ok
00:20:17.0189 0x0b3c [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
00:20:17.0220 0x0b3c ql40xx - ok
00:20:17.0267 0x0b3c [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll
00:20:17.0376 0x0b3c QWAVE - ok
00:20:17.0407 0x0b3c [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
00:20:17.0454 0x0b3c QWAVEdrv - ok
00:20:17.0485 0x0b3c [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
00:20:17.0548 0x0b3c RasAcd - ok
00:20:17.0610 0x0b3c [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
00:20:17.0719 0x0b3c RasAgileVpn - ok
00:20:17.0766 0x0b3c [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll
00:20:17.0844 0x0b3c RasAuto - ok
00:20:17.0875 0x0b3c [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
00:20:17.0969 0x0b3c Rasl2tp - ok
00:20:18.0031 0x0b3c [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll
00:20:18.0141 0x0b3c RasMan - ok
00:20:18.0156 0x0b3c [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
00:20:18.0219 0x0b3c RasPppoe - ok
00:20:18.0265 0x0b3c [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
00:20:18.0343 0x0b3c RasSstp - ok
00:20:18.0406 0x0b3c [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
00:20:18.0531 0x0b3c rdbss - ok
00:20:18.0562 0x0b3c [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
00:20:18.0655 0x0b3c rdpbus - ok
00:20:18.0702 0x0b3c [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
00:20:18.0765 0x0b3c RDPCDD - ok
00:20:18.0827 0x0b3c [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
00:20:18.0889 0x0b3c RDPDR - ok
00:20:18.0936 0x0b3c [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
00:20:19.0014 0x0b3c RDPENCDD - ok
00:20:19.0045 0x0b3c [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
00:20:19.0108 0x0b3c RDPREFMP - ok
00:20:19.0155 0x0b3c [ 83EE20D7160484C9172FDF0ACBDC8929, 520C0C685C43B2D39D5B6FA3DE61C2A91A3E0B40E912BABD38AF20972C91A895 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
00:20:19.0201 0x0b3c RdpVideoMiniport - ok
00:20:19.0264 0x0b3c [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
00:20:19.0357 0x0b3c RDPWD - ok
00:20:19.0404 0x0b3c [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
00:20:19.0451 0x0b3c rdyboost - ok
00:20:19.0498 0x0b3c [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll
00:20:19.0576 0x0b3c RemoteAccess - ok
00:20:19.0623 0x0b3c [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll
00:20:19.0747 0x0b3c RemoteRegistry - ok
00:20:19.0763 0x0b3c [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
00:20:19.0857 0x0b3c RpcEptMapper - ok
00:20:19.0903 0x0b3c [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe
00:20:19.0966 0x0b3c RpcLocator - ok
00:20:20.0013 0x0b3c [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll
00:20:20.0106 0x0b3c RpcSs - ok
00:20:20.0153 0x0b3c [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
00:20:20.0231 0x0b3c rspndr - ok
00:20:20.0262 0x0b3c [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap C:\Windows\system32\drivers\vms3cap.sys
00:20:20.0309 0x0b3c s3cap - ok
00:20:20.0356 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] SamSs C:\Windows\system32\lsass.exe
00:20:20.0387 0x0b3c SamSs - ok
00:20:20.0465 0x0b3c [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
00:20:20.0496 0x0b3c sbp2port - ok
00:20:20.0559 0x0b3c [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll
00:20:20.0668 0x0b3c SCardSvr - ok
00:20:20.0683 0x0b3c [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
00:20:20.0777 0x0b3c scfilter - ok
00:20:20.0886 0x0b3c [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll
00:20:21.0042 0x0b3c Schedule - ok
00:20:21.0105 0x0b3c [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll
00:20:21.0167 0x0b3c SCPolicySvc - ok
00:20:21.0230 0x0b3c [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll
00:20:21.0308 0x0b3c SDRSVC - ok
00:20:21.0370 0x0b3c [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
00:20:21.0464 0x0b3c secdrv - ok
00:20:21.0495 0x0b3c [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll
00:20:21.0604 0x0b3c seclogon - ok
00:20:21.0635 0x0b3c [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\system32\sens.dll
00:20:21.0713 0x0b3c SENS - ok
00:20:21.0760 0x0b3c [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll
00:20:21.0838 0x0b3c SensrSvc - ok
00:20:21.0885 0x0b3c [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
00:20:21.0947 0x0b3c Serenum - ok
00:20:22.0010 0x0b3c [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\DRIVERS\serial.sys
00:20:22.0056 0x0b3c Serial - ok
00:20:22.0072 0x0b3c [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
00:20:22.0134 0x0b3c sermouse - ok
00:20:22.0197 0x0b3c [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll
00:20:22.0290 0x0b3c SessionEnv - ok
00:20:22.0353 0x0b3c [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
00:20:22.0384 0x0b3c sffdisk - ok
00:20:22.0415 0x0b3c [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
00:20:22.0446 0x0b3c sffp_mmc - ok
00:20:22.0462 0x0b3c [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
00:20:22.0540 0x0b3c sffp_sd - ok
00:20:22.0602 0x0b3c [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
00:20:22.0649 0x0b3c sfloppy - ok
00:20:22.0727 0x0b3c [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll
00:20:22.0868 0x0b3c SharedAccess - ok
00:20:22.0930 0x0b3c [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
00:20:23.0070 0x0b3c ShellHWDetection - ok
00:20:23.0102 0x0b3c [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys
00:20:23.0133 0x0b3c sisagp - ok
00:20:23.0180 0x0b3c [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
00:20:23.0211 0x0b3c SiSRaid2 - ok
00:20:23.0258 0x0b3c [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
00:20:23.0289 0x0b3c SiSRaid4 - ok
00:20:23.0382 0x0b3c [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
00:20:23.0460 0x0b3c SkypeUpdate - ok
00:20:23.0492 0x0b3c [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys
00:20:23.0585 0x0b3c Smb - ok
00:20:23.0663 0x0b3c [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
00:20:23.0726 0x0b3c SNMPTRAP - ok
00:20:23.0772 0x0b3c [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys
00:20:23.0804 0x0b3c spldr - ok
00:20:23.0882 0x0b3c [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler C:\Windows\System32\spoolsv.exe
00:20:24.0022 0x0b3c Spooler - ok
00:20:24.0287 0x0b3c [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe
00:20:24.0646 0x0b3c sppsvc - ok
00:20:24.0708 0x0b3c [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll
00:20:24.0802 0x0b3c sppuinotify - ok
00:20:24.0880 0x0b3c [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys
00:20:24.0974 0x0b3c srv - ok
00:20:25.0005 0x0b3c [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
00:20:25.0114 0x0b3c srv2 - ok
00:20:25.0130 0x0b3c [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
00:20:25.0176 0x0b3c srvnet - ok
00:20:25.0223 0x0b3c [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
00:20:25.0364 0x0b3c SSDPSRV - ok
00:20:25.0395 0x0b3c [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll
00:20:25.0488 0x0b3c SstpSvc - ok
00:20:25.0535 0x0b3c [ 585FDB94DB04AC1C56298D1FD1F1389E, 5CEBAAF3B649E580B3EF2B9B38426D6EE13B244BE1274BA0C0A468EC4CFB680C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
00:20:25.0582 0x0b3c ssudmdm - ok
00:20:25.0613 0x0b3c [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
00:20:25.0644 0x0b3c stexstor - ok
00:20:25.0722 0x0b3c [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll
00:20:25.0863 0x0b3c StiSvc - ok
00:20:25.0894 0x0b3c [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt C:\Windows\system32\drivers\vmstorfl.sys
00:20:25.0925 0x0b3c storflt - ok
00:20:25.0972 0x0b3c [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc C:\Windows\system32\drivers\storvsc.sys
00:20:26.0003 0x0b3c storvsc - ok
00:20:26.0066 0x0b3c [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\drivers\swenum.sys
00:20:26.0097 0x0b3c swenum - ok
00:20:26.0144 0x0b3c [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll
00:20:26.0284 0x0b3c swprv - ok
00:20:26.0284 0x0b3c Synth3dVsc - ok
00:20:26.0424 0x0b3c [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll
00:20:26.0596 0x0b3c SysMain - ok
00:20:26.0658 0x0b3c [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
00:20:26.0736 0x0b3c TabletInputService - ok
00:20:26.0799 0x0b3c [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll
00:20:26.0955 0x0b3c TapiSrv - ok
00:20:26.0986 0x0b3c [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll
00:20:27.0064 0x0b3c TBS - ok
00:20:27.0189 0x0b3c [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
00:20:27.0314 0x0b3c Tcpip - ok
00:20:27.0423 0x0b3c [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
00:20:27.0532 0x0b3c TCPIP6 - ok
00:20:27.0579 0x0b3c [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
00:20:27.0610 0x0b3c tcpipreg - ok
00:20:27.0657 0x0b3c [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
00:20:27.0719 0x0b3c TDPIPE - ok
00:20:27.0766 0x0b3c [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
00:20:27.0828 0x0b3c TDTCP - ok
00:20:27.0891 0x0b3c [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx C:\Windows\system32\DRIVERS\tdx.sys
00:20:27.0953 0x0b3c tdx - ok
00:20:28.0577 0x0b3c [ 6CA83C69643E7BF144A428B7BDC7D630, DB015BA4428509E1D5BE74FEFB446A29D316564617EB15A379424B3FCE3B74A9 ] TeamViewer C:\Program Files\TeamViewer\TeamViewer_Service.exe
00:20:28.0936 0x0b3c TeamViewer - ok
00:20:28.0998 0x0b3c [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\drivers\termdd.sys
00:20:29.0030 0x0b3c TermDD - ok
00:20:29.0108 0x0b3c [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService C:\Windows\System32\termsrv.dll
00:20:29.0186 0x0b3c TermService - ok
00:20:29.0232 0x0b3c [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll
00:20:29.0295 0x0b3c Themes - ok
00:20:29.0342 0x0b3c [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll
00:20:29.0435 0x0b3c THREADORDER - ok
00:20:29.0544 0x0b3c [ E4FAD21646088D79F8889B6531396ACF, D0C8F0E3293D423245FD2233F283A1FE2463E15F8B9F4ED6AC96C2164EC51F75 ] TomTomHOMEService C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
00:20:29.0560 0x0b3c TomTomHOMEService - ok
00:20:29.0607 0x0b3c [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll
00:20:29.0716 0x0b3c TrkWks - ok
00:20:29.0778 0x0b3c [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
00:20:29.0888 0x0b3c TrustedInstaller - ok
00:20:29.0919 0x0b3c [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
00:20:29.0966 0x0b3c tssecsrv - ok
00:20:30.0028 0x0b3c [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
00:20:30.0106 0x0b3c TsUsbFlt - ok
00:20:30.0106 0x0b3c tsusbhub - ok
00:20:30.0215 0x0b3c [ 117BA5A965DC6A21855DF44B8B867BD6, 5CB392A9ADAF195E6D0D6B31BD4136F346A9B26EBA0BF32F09F0D29C0F63B041 ] TuneUp.Defrag C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
00:20:30.0293 0x0b3c TuneUp.Defrag - ok
00:20:30.0402 0x0b3c [ E8F747EBE440D1D6CD5F506A9CE85692, 791E47AFA3E27BFAF080480CF980D56B00FCE15F27F26270FB255751A4A63BF6 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
00:20:30.0496 0x0b3c TuneUp.UtilitiesSvc - ok
00:20:30.0574 0x0b3c [ F2107C9D85EC0DF116939CCCE06AE697, 4608E3D0CA0B252130B4DF2505DB4D89635C327A343B470FCB81B8B02CD9FA44 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
00:20:30.0590 0x0b3c TuneUpUtilitiesDrv - ok
00:20:30.0668 0x0b3c [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
00:20:30.0761 0x0b3c tunnel - ok
00:20:30.0792 0x0b3c [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
00:20:30.0824 0x0b3c uagp35 - ok
00:20:30.0902 0x0b3c [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
00:20:31.0026 0x0b3c udfs - ok
00:20:31.0073 0x0b3c [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe
00:20:31.0151 0x0b3c UI0Detect - ok
00:20:31.0214 0x0b3c [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
00:20:31.0245 0x0b3c uliagpkx - ok
00:20:31.0292 0x0b3c [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\drivers\umbus.sys
00:20:31.0354 0x0b3c umbus - ok
00:20:31.0385 0x0b3c [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
00:20:31.0448 0x0b3c UmPass - ok
00:20:31.0526 0x0b3c [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService C:\Windows\System32\umrdp.dll
00:20:31.0635 0x0b3c UmRdpService - ok
00:20:31.0682 0x0b3c [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll
00:20:31.0822 0x0b3c upnphost - ok
00:20:31.0869 0x0b3c [ 6E421CCC57059B0186C6259CA3B6DFC9, E348BF23CCD6C14FD10C1689BBDC77E125245331F97BFE60D4C8FD9A8711CB59 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
00:20:31.0916 0x0b3c USBAAPL - detected UnsignedFile.Multi.Generic ( 1 )
00:20:34.0583 0x0b3c Detect skipped due to KSN trusted
00:20:34.0583 0x0b3c USBAAPL - ok
00:20:34.0630 0x0b3c [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
00:20:34.0692 0x0b3c usbccgp - ok
00:20:34.0755 0x0b3c [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir C:\Windows\system32\drivers\usbcir.sys
00:20:34.0817 0x0b3c usbcir - ok
00:20:34.0880 0x0b3c [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci C:\Windows\system32\drivers\usbehci.sys
00:20:34.0926 0x0b3c usbehci - ok
00:20:35.0004 0x0b3c [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
00:20:35.0082 0x0b3c usbhub - ok
00:20:35.0129 0x0b3c [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci C:\Windows\system32\drivers\usbohci.sys
00:20:35.0160 0x0b3c usbohci - ok
00:20:35.0223 0x0b3c [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
00:20:35.0301 0x0b3c usbprint - ok
00:20:35.0363 0x0b3c [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan C:\Windows\system32\drivers\usbscan.sys
00:20:35.0441 0x0b3c usbscan - ok
00:20:35.0472 0x0b3c [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
00:20:35.0566 0x0b3c USBSTOR - ok
00:20:35.0597 0x0b3c [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
00:20:35.0675 0x0b3c usbuhci - ok
00:20:35.0769 0x0b3c [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
00:20:35.0816 0x0b3c usbvideo - ok
00:20:35.0862 0x0b3c [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll
00:20:35.0956 0x0b3c UxSms - ok
00:20:35.0987 0x0b3c [ 44E2A00A61177748061B961F12697664, 962124208C16E336DBA5395301E3C948FF170269C0804C295109E793FBEB25F9 ] UxTuneUp C:\Windows\System32\uxtuneup.dll
00:20:36.0018 0x0b3c UxTuneUp - ok
00:20:36.0034 0x0b3c [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] VaultSvc C:\Windows\system32\lsass.exe
00:20:36.0065 0x0b3c VaultSvc - ok
00:20:36.0252 0x0b3c [ EA9ADB96A31020D4D3E5167FE31427DE, 5635513F58CF89AF87B7A5CE570B348A932C5C74D3FBAF575D708198B174D641 ] VBoxAswDrv C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys
00:20:36.0315 0x0b3c VBoxAswDrv - ok
00:20:36.0346 0x0b3c [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
00:20:36.0377 0x0b3c vdrvroot - ok
00:20:36.0455 0x0b3c [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe
00:20:36.0611 0x0b3c vds - ok
00:20:36.0642 0x0b3c [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
00:20:36.0689 0x0b3c vga - ok
00:20:36.0720 0x0b3c [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys
00:20:36.0814 0x0b3c VgaSave - ok
00:20:36.0830 0x0b3c VGPU - ok
00:20:36.0892 0x0b3c [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
00:20:36.0939 0x0b3c vhdmp - ok
00:20:36.0970 0x0b3c [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys
00:20:37.0001 0x0b3c viaagp - ok
00:20:37.0017 0x0b3c [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
00:20:37.0095 0x0b3c ViaC7 - ok
00:20:37.0173 0x0b3c [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys
00:20:37.0188 0x0b3c viaide - ok
00:20:37.0235 0x0b3c [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus C:\Windows\system32\drivers\vmbus.sys
00:20:37.0282 0x0b3c vmbus - ok
00:20:37.0313 0x0b3c [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
00:20:37.0344 0x0b3c VMBusHID - ok
00:20:37.0391 0x0b3c [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys
00:20:37.0422 0x0b3c volmgr - ok
00:20:37.0454 0x0b3c [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
00:20:37.0532 0x0b3c volmgrx - ok
00:20:37.0563 0x0b3c [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys
00:20:37.0625 0x0b3c volsnap - ok
00:20:37.0656 0x0b3c [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
00:20:37.0703 0x0b3c vsmraid - ok
00:20:37.0812 0x0b3c [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe
00:20:37.0984 0x0b3c VSS - ok
00:20:38.0015 0x0b3c [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
00:20:38.0046 0x0b3c vwifibus - ok
00:20:38.0093 0x0b3c [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
00:20:38.0140 0x0b3c vwififlt - ok
00:20:38.0171 0x0b3c [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
00:20:38.0218 0x0b3c vwifimp - ok
00:20:38.0280 0x0b3c [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll
00:20:38.0390 0x0b3c W32Time - ok
00:20:38.0421 0x0b3c [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
00:20:38.0452 0x0b3c WacomPen - ok
00:20:38.0530 0x0b3c [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
00:20:38.0624 0x0b3c WANARP - ok
00:20:38.0639 0x0b3c [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
00:20:38.0717 0x0b3c Wanarpv6 - ok
00:20:38.0826 0x0b3c [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe
00:20:38.0982 0x0b3c wbengine - ok
00:20:39.0045 0x0b3c [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
00:20:39.0107 0x0b3c WbioSrvc - ok
00:20:39.0185 0x0b3c [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll
00:20:39.0279 0x0b3c wcncsvc - ok
00:20:39.0294 0x0b3c [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
00:20:39.0388 0x0b3c WcsPlugInService - ok
00:20:39.0419 0x0b3c [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\DRIVERS\wd.sys
00:20:39.0450 0x0b3c Wd - ok
00:20:39.0544 0x0b3c [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
00:20:39.0653 0x0b3c Wdf01000 - ok
00:20:39.0716 0x0b3c [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost C:\Windows\system32\wdi.dll
00:20:39.0794 0x0b3c WdiServiceHost - ok
00:20:39.0809 0x0b3c [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost C:\Windows\system32\wdi.dll
00:20:39.0856 0x0b3c WdiSystemHost - ok
00:20:39.0918 0x0b3c [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient C:\Windows\System32\webclnt.dll
00:20:40.0074 0x0b3c WebClient - ok
00:20:40.0106 0x0b3c [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll
00:20:40.0230 0x0b3c Wecsvc - ok
00:20:40.0262 0x0b3c [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll
00:20:40.0355 0x0b3c wercplsupport - ok
00:20:40.0386 0x0b3c [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll
00:20:40.0480 0x0b3c WerSvc - ok
00:20:40.0511 0x0b3c [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
00:20:40.0589 0x0b3c WfpLwf - ok
00:20:40.0620 0x0b3c [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys
00:20:40.0652 0x0b3c WIMMount - ok
00:20:40.0776 0x0b3c [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
00:20:40.0886 0x0b3c WinDefend - ok
00:20:40.0917 0x0b3c WinHttpAutoProxySvc - ok
00:20:40.0995 0x0b3c [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
00:20:41.0120 0x0b3c Winmgmt - ok
00:20:41.0244 0x0b3c [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM C:\Windows\system32\WsmSvc.dll
00:20:41.0400 0x0b3c WinRM - ok
00:20:41.0494 0x0b3c [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb C:\Windows\system32\drivers\WinUsb.sys
00:20:41.0556 0x0b3c WinUsb - ok
00:20:41.0634 0x0b3c [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll
00:20:41.0759 0x0b3c Wlansvc - ok
00:20:41.0931 0x0b3c [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
00:20:42.0071 0x0b3c wlidsvc - ok
00:20:42.0118 0x0b3c [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
00:20:42.0165 0x0b3c WmiAcpi - ok
00:20:42.0212 0x0b3c [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
00:20:42.0274 0x0b3c wmiApSrv - ok
00:20:42.0446 0x0b3c [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
00:20:42.0617 0x0b3c WMPNetworkSvc - ok
00:20:42.0648 0x0b3c [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll
00:20:42.0742 0x0b3c WPCSvc - ok
00:20:42.0789 0x0b3c [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
00:20:42.0867 0x0b3c WPDBusEnum - ok
00:20:42.0898 0x0b3c [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
00:20:42.0960 0x0b3c ws2ifsl - ok
00:20:42.0992 0x0b3c [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\system32\wscsvc.dll
00:20:43.0070 0x0b3c wscsvc - ok
00:20:43.0070 0x0b3c WSearch - ok
00:20:43.0241 0x0b3c [ 7E5C454A3F986FEBAD075DB8D915917E, 9E9147DDACD075958689523130DB92FC4ED0E38433461D8AB8792BCFBD9376DA ] wuauserv C:\Windows\system32\wuaueng.dll
00:20:43.0506 0x0b3c wuauserv - ok
00:20:43.0553 0x0b3c [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
00:20:43.0647 0x0b3c WudfPf - ok
00:20:43.0709 0x0b3c [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\drivers\WUDFRd.sys
00:20:43.0756 0x0b3c WUDFRd - ok
00:20:43.0803 0x0b3c [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
00:20:43.0850 0x0b3c wudfsvc - ok
00:20:43.0912 0x0b3c [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc C:\Windows\System32\wwansvc.dll
00:20:44.0021 0x0b3c WwanSvc - ok
00:20:44.0084 0x0b3c [ 30B73EB97218A16CBC6DE535782A1B35, 5B034F39FA5B902BD6899717F7696871CDAFB8698B48BB0E95DAE51234715A28 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x86.sys
00:20:44.0162 0x0b3c yukonw7 - detected UnsignedFile.Multi.Generic ( 1 )
00:20:52.0149 0x0b3c Detect skipped due to KSN trusted
00:20:52.0149 0x0b3c yukonw7 - ok
00:20:52.0164 0x0b3c ================ Scan global ===============================
00:20:52.0227 0x0b3c [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
00:20:52.0274 0x0b3c [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
00:20:52.0336 0x0b3c [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
00:20:52.0383 0x0b3c [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
00:20:52.0461 0x0b3c [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
00:20:52.0539 0x0b3c [ Global ] - ok
00:20:52.0539 0x0b3c ================ Scan MBR ==================================
00:20:52.0554 0x0b3c [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
00:20:53.0007 0x0b3c \Device\Harddisk0\DR0 - ok
00:20:53.0007 0x0b3c ================ Scan VBR ==================================
00:20:53.0007 0x0b3c [ 130EA96D8FD3CAE9A90E4EC267859856 ] \Device\Harddisk0\DR0\Partition1
00:20:53.0007 0x0b3c \Device\Harddisk0\DR0\Partition1 - ok
00:20:53.0007 0x0b3c [ 267C3D3BD53BD7C42BC3ABBC6EA3B906 ] \Device\Harddisk0\DR0\Partition2
00:20:53.0022 0x0b3c \Device\Harddisk0\DR0\Partition2 - ok
00:20:53.0022 0x0b3c ================ Scan generic autorun ======================
00:20:53.0022 0x0b3c NvCplDaemon - ok
00:20:53.0085 0x0b3c [ BB390EAFEF93758463D7CA1E1B488A41, 9533A7AAFE427E896A9378AE8FF0DF1E9EC95673150E4BB458392BF829912FFB ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
00:20:53.0132 0x0b3c IAStorIcon - ok
00:20:53.0693 0x0b3c [ 97101B7CCCFA2BDFEFC2E0B84205D144, 10C6EC4903DB85A1517F788049E726B22FF87C012A936CBF26EF0F2222C9251B ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
00:20:54.0177 0x0b3c RtHDVCpl - ok
00:20:54.0333 0x0b3c [ 697E07302EC965393ABC85AD5C2C8D53, 6C1184209BB913C4671BBF696784B3F16ED1EFF0062C9B6E966085A7D3EC0BD1 ] c:\Program Files\Microsoft IntelliPoint\ipoint.exe
00:20:54.0442 0x0b3c IntelliPoint - ok
00:20:54.0520 0x0b3c [ 8DDA2B606279753601F9415DA503CA63, 2C9AD8218E150B6D50817991377ED3230A1672EFBD7AE29D0CD9E55E2418C800 ] C:\Program Files\QuickTime\QTTask.exe
00:20:54.0598 0x0b3c QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
00:20:57.0032 0x0b3c Detect skipped due to KSN trusted
00:20:57.0032 0x0b3c QuickTime Task - ok
00:20:57.0422 0x0b3c [ 938FA6F63B210FB8EF5A7B2FC1229431, 545DDA9C32DF14B50688F8192A345FE66D2DB3F8763ECBF85B38AC829E49E1D9 ] C:\Program Files\Alwil Software\Avast5\AvastUI.exe
00:20:57.0780 0x0b3c AvastUI.exe - ok
00:20:57.0843 0x0b3c [ 61E4289E91E88C90478D7F4BEB10DCF7, 1D0F4034E0111CF5758F470C15A22A0A28EB8269CB5BF07222C9C0FB07A15C55 ] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
00:20:57.0858 0x0b3c APSDaemon - ok
00:20:58.0046 0x0b3c [ E265333FED70984757A2506DE17CF381, B31FE2E6505C182B65FD73127165F4FF84D63C8BF53D644117FE15191E690369 ] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
00:20:58.0155 0x0b3c AdobeAAMUpdater-1.0 - ok
00:20:58.0358 0x0b3c [ DD9EAE1C80561C509A8B8801E16BAA38, C688B626ADB0A7B72041DE08D0AA5930E9178C36F1FF9905124D397371B825D1 ] C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
00:20:58.0467 0x0b3c Spotify Web Helper - ok
00:20:58.0467 0x0b3c Waiting for KSN requests completion. In queue: 7
00:20:59.0481 0x0b3c Waiting for KSN requests completion. In queue: 7
00:21:00.0495 0x0b3c Waiting for KSN requests completion. In queue: 4
00:21:01.0587 0x0b3c AV detected via SS2: avast! Antivirus, C:\Program Files\Alwil Software\Avast5\VisthAux.exe ( 10.2.2214.845 ), 0x41000 ( enabled : updated )
00:21:01.0634 0x0b3c Win FW state via NFP2: enabled
00:21:04.0145 0x0b3c ============================================================
00:21:04.0145 0x0b3c Scan finished
00:21:04.0145 0x0b3c ============================================================
00:21:04.0161 0x0584 Detected object count: 0
00:21:04.0161 0x0584 Actual detected object count: 0
Code:
ComboFix 15-05-19.01 - Ivonne 23.05.2015 0:31.2.4 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.3566.2422 [GMT 2:00]
ausgeführt von:: c:\users\Ivonne\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\roboot.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-04-22 bis 2015-05-22 ))))))))))))))))))))))))))))))
.
.
2015-05-22 22:44 . 2015-05-22 22:44 -------- d-----w- c:\users\Ivonne\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44 -------- d-----w- c:\users\Gast\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2015-05-22 18:42 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FE5EA085-9273-44AB-9481-6DD5785AF6C6}\mpengine.dll
2015-05-18 16:45 . 2015-05-01 13:16 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-17 20:16 . 2015-05-17 20:16 -------- d-----w- c:\program files\TeamViewer
2015-05-17 19:41 . 2015-05-17 19:41 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-05-17 19:41 . 2015-04-14 07:37 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-05-17 19:41 . 2015-04-14 07:37 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-05-14 06:57 . 2015-04-20 02:56 909312 ----a-w- c:\windows\system32\FntCache.dll
2015-05-14 06:56 . 2015-03-04 04:11 5120 ----a-w- c:\windows\system32\shimeng.dll
2015-05-13 21:50 . 2015-05-13 21:50 -------- d-----w- c:\programdata\NVIDIA
2015-05-08 16:06 . 2015-05-17 19:41 -------- d-----w- c:\programdata\Malwarebytes
2015-05-08 16:06 . 2015-05-22 22:16 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-05-08 16:06 . 2015-05-22 21:13 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-08 16:05 . 2015-05-22 21:43 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-05-07 16:58 . 2015-05-22 21:06 -------- d-----w- C:\FRST
2015-05-03 13:06 . 2015-05-03 13:06 -------- d-----w- c:\windows\system32\appraiser
2015-05-03 08:13 . 2015-05-03 08:13 -------- d-----w- c:\program files\Common Files\Skype
2015-05-03 08:13 . 2015-05-03 08:13 -------- d-----r- c:\program files\Skype
2015-05-01 18:10 . 2015-05-01 18:10 229608 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-04-15 20:20 . 2013-05-16 15:53 778416 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-04-15 20:20 . 2012-02-13 14:21 142512 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-03-25 03:00 . 2015-04-15 20:03 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:00 . 2015-04-15 20:03 35328 ----a-w- c:\windows\system32\wups2.dll
2015-03-25 03:00 . 2015-04-15 20:03 3088384 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:00 . 2015-04-15 20:03 29696 ----a-w- c:\windows\system32\wups.dll
2015-03-25 03:00 . 2015-04-15 20:03 173056 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 20:03 566784 ----a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:00 . 2015-04-15 20:03 2020864 ----a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:00 . 2015-04-15 20:03 50176 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00 . 2015-04-15 20:03 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00 . 2015-04-15 20:03 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:00 . 2015-04-15 20:03 131584 ----a-w- c:\windows\system32\wuauclt.exe
2015-03-23 03:06 . 2015-04-15 20:06 576000 ----a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:06 . 2015-04-15 20:06 630784 ----a-w- c:\windows\system32\invagent.dll
2015-03-23 03:06 . 2015-04-15 20:06 331264 ----a-w- c:\windows\system32\devinv.dll
2015-03-23 03:06 . 2015-04-15 20:06 860160 ----a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:06 . 2015-04-15 20:06 26112 ----a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:06 . 2015-04-15 20:06 159744 ----a-w- c:\windows\system32\aepic.dll
2015-03-23 03:06 . 2015-04-15 20:06 202752 ----a-w- c:\windows\system32\aepdu.dll
2015-03-23 02:59 . 2015-04-15 20:06 896000 ----a-w- c:\windows\system32\aeinv.dll
2015-03-10 03:08 . 2015-04-15 20:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
2015-03-10 03:05 . 2015-04-15 20:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-05 04:06 . 2015-04-15 20:05 305152 ----a-w- c:\windows\system32\gdi32.dll
2015-03-04 04:16 . 2015-04-15 20:05 249784 ----a-w- c:\windows\system32\clfs.sys
2015-03-04 04:10 . 2015-04-15 20:05 58880 ----a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:10 . 2015-05-14 06:56 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-14 06:56 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-14 06:56 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2015-03-03 16:50 . 2014-04-18 17:21 24144 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-03-03 16:50 . 2013-12-17 17:53 106912 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-03-03 16:50 . 2013-03-01 16:17 49904 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-03-03 16:50 . 2013-03-01 16:17 206976 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-03-03 16:50 . 2012-02-23 20:28 81728 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-03-03 16:50 . 2010-11-01 17:36 73440 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-03-03 16:50 . 2010-11-01 17:36 427480 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-03-03 16:50 . 2015-03-03 16:50 291312 ----a-w- c:\windows\system32\aswBoot.exe
2015-03-03 16:50 . 2015-03-03 16:50 43112 ----a-w- c:\windows\avastSS.scr
2015-03-03 16:49 . 2011-04-26 20:26 788272 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-02-25 03:03 . 2015-04-15 20:02 514560 ----a-w- c:\windows\system32\drivers\http.sys
2015-02-24 02:23 . 2010-11-01 00:59 246920 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-11-19 10:23 223432 ----a-w- c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-11-19 10:23 223432 ----a-w- c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-11-19 10:23 223432 ----a-w- c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-03-03 16:50 644608 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-07 1104384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-02-10 13834856]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-27 284696]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-14 8120864]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 1797008]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2015-03-18 5511352]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-10-14 557768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2013-07-07 22:09 1104384 ----a-w- c:\users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2013-08-27 14:57 248208 ----a-w- c:\program files\TomTom HOME 2\TomTomHOMERunner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2015-03-03 106912]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-01-22 88576]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-04-21 102912]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]
R3 MHIKEY10;MHIKEY10;c:\windows\system32\Drivers\MHIKEY10.sys [2010-10-01 52096]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2012-03-26 18432]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2015-01-31 15872]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 184192]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2015-03-03 788272]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2015-03-03 427480]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2015-03-03 24144]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2015-03-03 73440]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-27 13336]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-06-14 1051976]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [2015-03-03 220240]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [2015-03-03 3205216]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-24 10064]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 96749046
*Deregistered* - 96749046
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
utcsvc REG_MULTI_SZ DiagTrack
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2015-05-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-27 20:20]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
mStart Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
mSearch Bar = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
uSearchAssistant = www.google.com
IE: Free YouTube to Mp3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\
FF - prefs.js: browser.search.defaulturl - hxxps://de.search.yahoo.com/yhs/search
FF - prefs.js: browser.startup.homepage - google.de
FF - prefs.js: keyword.URL - hxxps://de.search.yahoo.com/yhs/search
FF - prefs.js: network.proxy.gopher -
FF - prefs.js: network.proxy.gopher_port - 0
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-05-23 00:47:35
ComboFix-quarantined-files.txt 2015-05-22 22:47
ComboFix2.txt 2015-05-13 21:46
.
Vor Suchlauf: 18 Verzeichnis(se), 70.565.994.496 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 70.529.486.848 Bytes frei
.
- - End Of File - - 4449132F83ECF3F6683C1901D5AAC145
A36C5E4F47E84449FF07ED3517B43A31
|
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
