hartmannova1 | 11.06.2018 15:36 | Code:
17:34:41.0544 0x2148 TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
17:34:41.0544 0x2148 UEFI system
17:34:46.0195 0x2148 ============================================================
17:34:46.0195 0x2148 Current date / time: 2018/06/11 17:34:46.0195
17:34:46.0199 0x2148 SystemInfo:
17:34:46.0199 0x2148
17:34:46.0199 0x2148 OS Version: 10.0.17134 ServicePack: 0.0
17:34:46.0199 0x2148 Product type: Workstation
17:34:46.0199 0x2148 ComputerName: LAPTOP-480KKFPA
17:34:46.0199 0x2148 UserName: evata
17:34:46.0199 0x2148 Windows directory: C:\WINDOWS
17:34:46.0199 0x2148 System windows directory: C:\WINDOWS
17:34:46.0199 0x2148 Running under WOW64
17:34:46.0199 0x2148 Processor architecture: Intel x64
17:34:46.0199 0x2148 Number of processors: 4
17:34:46.0199 0x2148 Page size: 0x1000
17:34:46.0199 0x2148 Boot type: Normal boot
17:34:46.0199 0x2148 CodeIntegrityOptions = 0x00000001
17:34:46.0199 0x2148 ============================================================
17:34:46.0287 0x2148 KLMD registered as C:\WINDOWS\system32\drivers\87264813.sys
17:34:46.0287 0x2148 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19
17:34:46.0310 0x2148 System UUID: {4359A1A4-6671-599E-BB4C-AA9B868C9CC3}
17:34:46.0394 0x2148 Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:34:46.0398 0x2148 ============================================================
17:34:46.0398 0x2148 \Device\Harddisk0\DR0:
17:34:46.0398 0x2148 GPT partitions:
17:34:46.0398 0x2148 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {38A2AE18-82AD-4D7D-B69B-7F248DDF1898}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
17:34:46.0398 0x2148 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {B645808A-CA80-46E3-9908-1B8E995D8452}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x8000
17:34:46.0398 0x2148 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {D574469C-C116-4FAA-802F-BF2766D69E74}, Name: Basic data partition, StartLBA 0x3A800, BlocksNum 0x1DBBE800
17:34:46.0398 0x2148 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {38F5F433-9BBC-49D2-93F1-0E0A3F5CF90F}, Name: Basic data partition, StartLBA 0x1DBF9000, BlocksNum 0xFA000
17:34:46.0402 0x2148 MBR partitions:
17:34:46.0402 0x2148 ============================================================
17:34:46.0402 0x2148 C: <-> \Device\Harddisk0\DR0\Partition3
17:34:46.0402 0x2148 ============================================================
17:34:46.0402 0x2148 Initialize success
17:34:46.0402 0x2148 ============================================================
17:35:20.0802 0x19a0 ============================================================
17:35:20.0802 0x19a0 Scan started
17:35:20.0802 0x19a0 Mode: Manual; SigCheck; TDLFS;
17:35:20.0802 0x19a0 ============================================================
17:35:20.0802 0x19a0 KSN ping started
17:35:21.0545 0x19a0 KSN ping finished: true
17:35:21.0989 0x19a0 ================ Scan system memory ========================
17:35:21.0989 0x19a0 System memory - ok
17:35:21.0989 0x19a0 ================ Scan services =============================
17:35:22.0031 0x19a0 1394ohci - ok
17:35:22.0035 0x19a0 3ware - ok
17:35:22.0039 0x19a0 ACPI - ok
17:35:22.0043 0x19a0 AcpiDev - ok
17:35:22.0051 0x19a0 acpiex - ok
17:35:22.0052 0x19a0 acpipagr - ok
17:35:22.0060 0x19a0 [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
17:35:22.0097 0x19a0 AcpiPmi - ok
17:35:22.0105 0x19a0 acpitime - ok
17:35:22.0113 0x19a0 [ CA805DA983594B01F3554464B2E5158F, AC311C5D59AA1FA2B1B3CDB9CCEABEC85878BF6CA6106253186909AA9EB3C1BA ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:35:22.0125 0x19a0 AdobeARMservice - ok
17:35:22.0129 0x19a0 ADP80XX - ok
17:35:22.0137 0x19a0 AFD - ok
17:35:22.0141 0x19a0 [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix C:\WINDOWS\system32\drivers\afunix.sys
17:35:22.0158 0x19a0 afunix - ok
17:35:22.0169 0x19a0 [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
17:35:22.0195 0x19a0 ahcache - ok
17:35:22.0199 0x19a0 [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll
17:35:22.0227 0x19a0 AJRouter - ok
17:35:22.0231 0x19a0 [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG C:\WINDOWS\System32\alg.exe
17:35:22.0263 0x19a0 ALG - ok
17:35:22.0269 0x19a0 AmdK8 - ok
17:35:22.0269 0x19a0 AmdPPM - ok
17:35:22.0285 0x19a0 amdsata - ok
17:35:22.0285 0x19a0 amdsbs - ok
17:35:22.0301 0x19a0 amdxata - ok
17:35:22.0301 0x19a0 [ E4A18157BF5D8D714C05169A8A8D604C, 45D8CB25A9967D634F8331070BDFB3DF4ACB6295CF1520F9AAE8753D3BF4018A ] AppID C:\WINDOWS\system32\drivers\appid.sys
17:35:22.0332 0x19a0 AppID - ok
17:35:22.0332 0x19a0 [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
17:35:22.0363 0x19a0 AppIDSvc - ok
17:35:22.0379 0x19a0 [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo C:\WINDOWS\System32\appinfo.dll
17:35:22.0394 0x19a0 Appinfo - ok
17:35:22.0414 0x19a0 [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys
17:35:22.0422 0x19a0 applockerfltr - ok
17:35:22.0438 0x19a0 [ 922BBB78C86D1E3B34599E6513BAD2F3, 30904E54F0CE28273EC6EFE91B6237F656A158D7B976FB3322E3A25692528747 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
17:35:22.0469 0x19a0 AppReadiness - ok
17:35:22.0485 0x19a0 AppXSvc - ok
17:35:22.0485 0x19a0 arcsas - ok
17:35:22.0485 0x19a0 AsyncMac - ok
17:35:22.0485 0x19a0 atapi - ok
17:35:22.0500 0x19a0 [ C345E697B68BE9A45BB6CBD03F1E66F2, F50E0CC874A67A9EED3C792599ADA92C888348E7256663F7C784FBBF51D19EAC ] AtherosSvc C:\WINDOWS\system32\AdminService.exe
17:35:22.0516 0x19a0 AtherosSvc - ok
17:35:22.0532 0x19a0 AudioEndpointBuilder - ok
17:35:22.0532 0x19a0 Audiosrv - ok
17:35:22.0532 0x19a0 [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
17:35:22.0547 0x19a0 AxInstSV - ok
17:35:22.0563 0x19a0 b06bdrv - ok
17:35:22.0563 0x19a0 [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam C:\WINDOWS\system32\drivers\bam.sys
17:35:22.0579 0x19a0 bam - ok
17:35:22.0579 0x19a0 BasicDisplay - ok
17:35:22.0579 0x19a0 BasicRender - ok
17:35:22.0610 0x19a0 [ 15971E9AE43AA92C6A527622F36C41A0, DD3F0B5F6231A0C32AE7135ECB5ACABD495801C0D5673D76821EA06112ED83F5 ] BcastDVRUserService C:\WINDOWS\System32\BcastDVRUserService.dll
17:35:22.0672 0x19a0 BcastDVRUserService - ok
17:35:22.0688 0x19a0 bcmfn2 - ok
17:35:22.0688 0x19a0 [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
17:35:22.0719 0x19a0 BDESVC - ok
17:35:22.0735 0x19a0 [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
17:35:22.0751 0x19a0 Beep - ok
17:35:22.0751 0x19a0 BFE - ok
17:35:22.0751 0x19a0 [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt C:\WINDOWS\system32\drivers\bindflt.sys
17:35:22.0766 0x19a0 bindflt - ok
17:35:22.0798 0x19a0 [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS C:\WINDOWS\System32\qmgr.dll
17:35:22.0913 0x19a0 BITS - ok
17:35:22.0928 0x19a0 [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll
17:35:22.0960 0x19a0 BluetoothUserService - ok
17:35:22.0975 0x19a0 [ 5AB58C337AC65837FE404462AD6265AB, F7E145F5D8DB1017D5B7B9D5380100F170FE5CC2050B5F7346A521B7B72D2166 ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe
17:35:22.0975 0x19a0 Bonjour Service - ok
17:35:22.0991 0x19a0 bowser - ok
17:35:22.0991 0x19a0 BrokerInfrastructure - ok
17:35:22.0991 0x19a0 [ 3E4BF0145201239E0BBD0A937431C14C, 1DDC27C89B16ADD9346EB30AA9E17330FE0181BE96DC6F06C455493FBDCB1113 ] Browser C:\WINDOWS\System32\browser.dll
17:35:23.0022 0x19a0 Browser - ok
17:35:23.0038 0x19a0 [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService C:\WINDOWS\System32\BTAGService.dll
17:35:23.0069 0x19a0 BTAGService - ok
17:35:23.0085 0x19a0 [ 7170961E98A4F47175972D7F096AA7C5, 8D060277A7C1371DBA1CAFBFB23632664FFFFD3FA2B512F811A25C1871E5CE7D ] BtFilter C:\WINDOWS\system32\DRIVERS\btfilter.sys
17:35:23.0125 0x19a0 BtFilter - ok
17:35:23.0141 0x19a0 [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc C:\WINDOWS\System32\BthAvctpSvc.dll
17:35:23.0173 0x19a0 BthAvctpSvc - ok
17:35:23.0185 0x19a0 [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
17:35:23.0205 0x19a0 BthHFEnum - ok
17:35:23.0209 0x19a0 [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
17:35:23.0229 0x19a0 BTHMODEM - ok
17:35:23.0255 0x19a0 [ EF105DBEB81F14EBDBA5F7977AD8FA91, A4D20038B72361CD95446854F2E538314C4C8B5EA4618AC7B18A43D8AF777A34 ] BTHPORT C:\WINDOWS\system32\DRIVERS\BTHport.sys
17:35:23.0311 0x19a0 BTHPORT - ok
17:35:23.0327 0x19a0 [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv C:\WINDOWS\system32\bthserv.dll
17:35:23.0351 0x19a0 bthserv - ok
17:35:23.0355 0x19a0 [ 0D5ECDF2601312025811F6AC413F851A, B7E99CF02C6B511BD643E7F8BB59E983D8B65073D9B55ED44457EDC2BBBBC419 ] BTHUSB C:\WINDOWS\system32\DRIVERS\BTHUSB.sys
17:35:23.0375 0x19a0 BTHUSB - ok
17:35:23.0379 0x19a0 bttflt - ok
17:35:23.0386 0x19a0 buttonconverter - ok
17:35:23.0390 0x19a0 [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD C:\WINDOWS\System32\drivers\CAD.sys
17:35:23.0395 0x19a0 CAD - ok
17:35:23.0411 0x19a0 [ 91EACB2FCD384C2D71EAF2BAB3FAA5C5, A3BB724570A9E882E8E6AF8CF29BC03DB77B3D31B87DDF6187C101E1B9C2617F ] camsvc C:\WINDOWS\system32\CapabilityAccessManager.dll
17:35:23.0427 0x19a0 camsvc - ok
17:35:23.0427 0x19a0 CapImg - ok
17:35:23.0489 0x19a0 [ 1229678A60A9AC5A4B0A15EEBE8FCC24, 9CB7D027353C661AB04AE3AD594BDC92E86B59206186CADB49AA6C0EA63831B0 ] CCDMonitorService C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
17:35:23.0554 0x19a0 CCDMonitorService - ok
17:35:23.0570 0x19a0 cdfs - ok
17:35:23.0585 0x19a0 [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
17:35:23.0617 0x19a0 CDPSvc - ok
17:35:23.0632 0x19a0 [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll
17:35:23.0664 0x19a0 CDPUserSvc - ok
17:35:23.0664 0x19a0 cdrom - ok
17:35:23.0679 0x19a0 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
17:35:23.0695 0x19a0 CertPropSvc - ok
17:35:23.0710 0x19a0 cht4iscsi - ok
17:35:23.0710 0x19a0 cht4vbd - ok
17:35:23.0710 0x19a0 [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass C:\WINDOWS\System32\drivers\circlass.sys
17:35:23.0726 0x19a0 circlass - ok
17:35:23.0742 0x19a0 [ 5619FC2A3AE4F43D4B20D95472ED948E, A5D530FB6AC493FC01489A1D32C311F7D28F0D7B49C950E71F4ADF4FBA302689 ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys
17:35:23.0773 0x19a0 CldFlt - ok
17:35:23.0773 0x19a0 CLFS - ok
17:35:23.0960 0x19a0 [ 7E14012F1D86C8E298AF7234993CCED3, 778BD09EEEE7761FCA690956F33C27471730367873F39D6D32B7B034D3957834 ] ClickToRunSvc C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
17:35:24.0165 0x19a0 ClickToRunSvc - ok
17:35:24.0196 0x19a0 [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
17:35:24.0243 0x19a0 ClipSVC - ok
17:35:24.0247 0x19a0 CmBatt - ok
17:35:24.0247 0x19a0 CNG - ok
17:35:24.0263 0x19a0 [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
17:35:24.0263 0x19a0 cnghwassist - ok
17:35:24.0279 0x19a0 [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys
17:35:24.0295 0x19a0 CompositeBus - ok
17:35:24.0295 0x19a0 COMSysApp - ok
17:35:24.0295 0x19a0 condrv - ok
17:35:24.0295 0x19a0 CoreMessagingRegistrar - ok
17:35:24.0326 0x19a0 [ 3AE6711E68D694DEBCDDC29567AA2AA6, 1DE19C943AE4B171C6F14D12E4890BA7E62571F79526B95CFA50238D68BBC517 ] cphs C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
17:35:24.0342 0x19a0 cphs - ok
17:35:24.0357 0x19a0 CryptSvc - ok
17:35:24.0373 0x19a0 [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam C:\WINDOWS\system32\drivers\dam.sys
17:35:24.0373 0x19a0 dam - ok
17:35:24.0389 0x19a0 DcomLaunch - ok
17:35:24.0389 0x19a0 defragsvc - ok
17:35:24.0404 0x19a0 [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll
17:35:24.0451 0x19a0 DeviceAssociationService - ok
17:35:24.0451 0x19a0 DeviceInstall - ok
17:35:24.0467 0x19a0 [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll
17:35:24.0514 0x19a0 DevicePickerUserSvc - ok
17:35:24.0529 0x19a0 [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll
17:35:24.0573 0x19a0 DevicesFlowUserSvc - ok
17:35:24.0573 0x19a0 [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
17:35:24.0604 0x19a0 DevQueryBroker - ok
17:35:24.0604 0x19a0 Dfsc - ok
17:35:24.0604 0x19a0 [ 0F4A5D01156B948B54550375498B08A2, 1CAE3D744429A06E9C9EC46AC6B216AB68154EF8FACDD0721C47902B83820F56 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys
17:35:24.0635 0x19a0 dg_ssudbus - ok
17:35:24.0635 0x19a0 Dhcp - ok
17:35:24.0635 0x19a0 diagnosticshub.standardcollector.service - ok
17:35:24.0652 0x19a0 [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc C:\WINDOWS\system32\DiagSvc.dll
17:35:24.0673 0x19a0 diagsvc - ok
17:35:24.0673 0x19a0 DiagTrack - ok
17:35:24.0673 0x19a0 Disk - ok
17:35:24.0704 0x19a0 [ 89FC056F9CEFB85FC7159AA063904AFF, 6B6F86F87C48EE92F616D4EEE624C9711D0606FD651F3B1D4DD5EF3767B76750 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
17:35:24.0751 0x19a0 DmEnrollmentSvc - ok
17:35:24.0751 0x19a0 dmvsc - ok
17:35:24.0751 0x19a0 [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
17:35:24.0766 0x19a0 dmwappushservice - ok
17:35:24.0782 0x19a0 Dnscache - ok
17:35:24.0782 0x19a0 [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc C:\WINDOWS\System32\dot3svc.dll
17:35:24.0813 0x19a0 dot3svc - ok
17:35:24.0813 0x19a0 [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS C:\WINDOWS\system32\dps.dll
17:35:24.0845 0x19a0 DPS - ok
17:35:24.0845 0x19a0 drmkaud - ok
17:35:24.0845 0x19a0 [ 5242DC5849014BCFBB3147B76A899783, 759542B42D9DCC224D9CBD19A0C6B8939417F2F08B547BE07FFA3356918C1ED7 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
17:35:24.0883 0x19a0 DsmSvc - ok
17:35:24.0887 0x19a0 [ A8923D6A577D176A90A36A9EC0BD4BCB, 5EC87DA3DF7F1869D9542416651606C7731F4D1BDEC42C8A0D5285292EC7EF7C ] DsSvc C:\WINDOWS\System32\DsSvc.dll
17:35:24.0915 0x19a0 DsSvc - ok
17:35:24.0927 0x19a0 [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll
17:35:24.0959 0x19a0 DusmSvc - ok
17:35:24.0967 0x19a0 DXGKrnl - ok
17:35:24.0971 0x19a0 Eaphost - ok
17:35:24.0975 0x19a0 ebdrv - ok
17:35:24.0979 0x19a0 EFS - ok
17:35:24.0987 0x19a0 EhStorClass - ok
17:35:24.0991 0x19a0 EhStorTcgDrv - ok
17:35:24.0999 0x19a0 [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
17:35:25.0027 0x19a0 embeddedmode - ok
17:35:25.0039 0x19a0 [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
17:35:25.0071 0x19a0 EntAppSvc - ok
17:35:25.0075 0x19a0 [ D315FF43E23DF424ECEC2F6C930203E4, 68940EDA34DC4945CDD0D8018D96A0DA8F99F16A930946D14E4FECEE033FCB80 ] EpsonScanSvc C:\Windows\system32\EscSvc64.exe
17:35:25.0091 0x19a0 EpsonScanSvc - ok
17:35:25.0095 0x19a0 ErrDev - ok
17:35:25.0115 0x19a0 [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem C:\WINDOWS\system32\es.dll
17:35:25.0151 0x19a0 EventSystem - ok
17:35:25.0155 0x19a0 exfat - ok
17:35:25.0159 0x19a0 fastfat - ok
17:35:25.0175 0x19a0 [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax C:\WINDOWS\system32\fxssvc.exe
17:35:25.0210 0x19a0 Fax - ok
17:35:25.0210 0x19a0 fdc - ok
17:35:25.0210 0x19a0 [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
17:35:25.0226 0x19a0 fdPHost - ok
17:35:25.0242 0x19a0 [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub C:\WINDOWS\system32\fdrespub.dll
17:35:25.0257 0x19a0 FDResPub - ok
17:35:25.0257 0x19a0 [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc C:\WINDOWS\system32\fhsvc.dll
17:35:25.0288 0x19a0 fhsvc - ok
17:35:25.0288 0x19a0 [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
17:35:25.0304 0x19a0 FileCrypt - ok
17:35:25.0304 0x19a0 FileInfo - ok
17:35:25.0304 0x19a0 Filetrace - ok
17:35:25.0320 0x19a0 flpydisk - ok
17:35:25.0320 0x19a0 FltMgr - ok
17:35:25.0320 0x19a0 FontCache - ok
17:35:25.0320 0x19a0 FontCache3.0.0.0 - ok
17:35:25.0335 0x19a0 [ 4B5B18BF7E060A7FC7B80D79D542529C, 483E4D96D2E44A135FAD3B9D1AFA05B571418B3BA9864BE751DDA1DAE9D02D77 ] FrameServer C:\WINDOWS\system32\FrameServer.dll
17:35:25.0385 0x19a0 FrameServer - ok
17:35:25.0393 0x19a0 FsDepends - ok
17:35:25.0393 0x19a0 Fs_Rec - ok
17:35:25.0393 0x19a0 fvevol - ok
17:35:25.0393 0x19a0 [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
17:35:25.0409 0x19a0 gencounter - ok
17:35:25.0424 0x19a0 genericusbfn - ok
17:35:25.0424 0x19a0 GPIOClx0101 - ok
17:35:25.0424 0x19a0 gpsvc - ok
17:35:25.0424 0x19a0 [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
17:35:25.0440 0x19a0 GpuEnergyDrv - ok
17:35:25.0456 0x19a0 [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll
17:35:25.0471 0x19a0 GraphicsPerfSvc - ok
17:35:25.0487 0x19a0 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:35:25.0502 0x19a0 gupdate - ok
17:35:25.0509 0x19a0 [ 750446ED76A5D13E902174DDDDA1A62B, F67355A6659E21D8D97E6982B28F22453F8C298E822E27FADDB440DA4A6DE7C0 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:35:25.0517 0x19a0 gupdatem - ok
17:35:25.0521 0x19a0 HDAudBus - ok
17:35:25.0525 0x19a0 HidBatt - ok
17:35:25.0533 0x19a0 [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
17:35:25.0553 0x19a0 HidBth - ok
17:35:25.0557 0x19a0 hidi2c - ok
17:35:25.0563 0x19a0 hidinterrupt - ok
17:35:25.0571 0x19a0 [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
17:35:25.0583 0x19a0 HidIr - ok
17:35:25.0587 0x19a0 hidserv - ok
17:35:25.0591 0x19a0 HidUsb - ok
17:35:25.0599 0x19a0 HpSAMD - ok
17:35:25.0603 0x19a0 HTTP - ok
17:35:25.0611 0x19a0 [ 1642C62F1FD5E1FF44608283994A7BB8, 4646AA0EF74A2AEE6C17D12206FCFE1E84D6FA712AD95A171F16D11BC9D3F11A ] huawei_enumerator C:\WINDOWS\System32\drivers\ew_jubusenum.sys
17:35:25.0623 0x19a0 huawei_enumerator - detected UnsignedFile.Multi.Generic ( 1 )
17:35:26.0358 0x19a0 Detect skipped due to KSN trusted
17:35:26.0358 0x19a0 huawei_enumerator - ok
17:35:26.0374 0x19a0 [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash C:\WINDOWS\System32\drivers\hvcrash.sys
17:35:26.0405 0x19a0 hvcrash - ok
17:35:26.0405 0x19a0 [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll
17:35:26.0436 0x19a0 HvHost - ok
17:35:26.0436 0x19a0 [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys
17:35:26.0452 0x19a0 hvservice - ok
17:35:26.0467 0x19a0 [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101 C:\WINDOWS\system32\Drivers\mshwnclx.sys
17:35:26.0483 0x19a0 HwNClx0101 - ok
17:35:26.0499 0x19a0 hwpolicy - ok
17:35:26.0499 0x19a0 hyperkbd - ok
17:35:26.0514 0x19a0 HyperVideo - ok
17:35:26.0514 0x19a0 i8042prt - ok
17:35:26.0514 0x19a0 iagpio - ok
17:35:26.0530 0x19a0 iai2c - ok
17:35:26.0530 0x19a0 iaLPSS2i_GPIO2 - ok
17:35:26.0530 0x19a0 iaLPSS2i_GPIO2_BXT_P - ok
17:35:26.0545 0x19a0 iaLPSS2i_I2C - ok
17:35:26.0545 0x19a0 iaLPSS2i_I2C_BXT_P - ok
17:35:26.0561 0x19a0 iaLPSSi_GPIO - ok
17:35:26.0561 0x19a0 iaLPSSi_I2C - ok
17:35:26.0608 0x19a0 [ 12859E1215AA083A42E7ADCDE5C061D1, 262F9C65C3FA7EB69C4FA7C6547E1C79DB49697A083309909BC78726A116557F ] iaStorA C:\WINDOWS\system32\drivers\iaStorA.sys
17:35:26.0655 0x19a0 iaStorA - ok
17:35:26.0655 0x19a0 iaStorAVC - ok
17:35:26.0655 0x19a0 iaStorV - ok
17:35:26.0670 0x19a0 ibbus - ok
17:35:26.0670 0x19a0 [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc C:\WINDOWS\System32\tetheringservice.dll
17:35:26.0702 0x19a0 icssvc - ok
17:35:26.0919 0x19a0 [ E37A72E55D16176707D63BF2F96C1235, 8FDBE5C385422D067BD341C346FDC24F76E02E16A46ECF6EC892BB1DF402E80A ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
17:35:27.0103 0x19a0 igfx - ok
17:35:27.0131 0x19a0 [ A127699F2AE5E4C9ED54B7C1CEA32E0D, 7932728AD48253C7283D1960F7D53AE4F8DB4CE43E876620FBA29C6C9EBBDB80 ] igfxCUIService2.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
17:35:27.0147 0x19a0 igfxCUIService2.0.0.0 - ok
17:35:27.0159 0x19a0 [ 25332A6335EDA184A14878FA88645FFA, E34F08ABE8FE7E3166B75453878B695956201002574AD07A1DCA5C78BC094D8B ] IJPLMSVC C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
17:35:27.0175 0x19a0 IJPLMSVC - ok
17:35:27.0183 0x19a0 IKEEXT - ok
17:35:27.0187 0x19a0 [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys
17:35:27.0203 0x19a0 IndirectKmd - ok
17:35:27.0211 0x19a0 InstallService - ok
17:35:27.0301 0x19a0 [ D172E06EFE08DF148155A59DB716C1B6, F059B0B37C5E944D70626E9F029BC6311029E0A9D778C9C75DDDDC59A5AF1605 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
17:35:27.0403 0x19a0 IntcAzAudAddService - ok
17:35:27.0427 0x19a0 [ E300D1E37B737ED14F7A08CD5604E5D9, 5C1135081E29D7F4A97D5CAA2C8FBE1DD04EC7A3D8E648E69F2AA9EBDD88EBBB ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
17:35:27.0458 0x19a0 IntcDAud - ok
17:35:27.0474 0x19a0 Intel(R) Capability Licensing Service TCP IP Interface - ok
17:35:27.0474 0x19a0 Intel(R) Security Assist - ok
17:35:27.0489 0x19a0 intelide - ok
17:35:27.0489 0x19a0 [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
17:35:27.0521 0x19a0 intelpep - ok
17:35:27.0536 0x19a0 intelppm - ok
17:35:27.0536 0x19a0 [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate C:\WINDOWS\system32\drivers\iorate.sys
17:35:27.0571 0x19a0 iorate - ok
17:35:27.0579 0x19a0 [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:35:27.0609 0x19a0 IpFilterDriver - ok
17:35:27.0640 0x19a0 [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
17:35:27.0687 0x19a0 iphlpsvc - ok
17:35:27.0707 0x19a0 IPMIDRV - ok
17:35:27.0717 0x19a0 [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
17:35:27.0741 0x19a0 IPNAT - ok
17:35:27.0749 0x19a0 [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT C:\WINDOWS\System32\drivers\ipt.sys
17:35:27.0765 0x19a0 IPT - ok
17:35:27.0773 0x19a0 [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll
17:35:27.0793 0x19a0 IpxlatCfgSvc - ok
17:35:27.0801 0x19a0 [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda C:\WINDOWS\system32\drivers\irda.sys
17:35:27.0821 0x19a0 irda - ok
17:35:27.0829 0x19a0 [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
17:35:27.0841 0x19a0 IRENUM - ok
17:35:27.0845 0x19a0 [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon C:\WINDOWS\System32\irmon.dll
17:35:27.0861 0x19a0 irmon - ok
17:35:27.0865 0x19a0 isaHelperSvc - ok
17:35:27.0869 0x19a0 isapnp - ok
17:35:27.0877 0x19a0 iScsiPrt - ok
17:35:27.0881 0x19a0 ItSas35i - ok
17:35:27.0881 0x19a0 jhi_service - ok
17:35:27.0885 0x19a0 kbdclass - ok
17:35:27.0893 0x19a0 kbdhid - ok
17:35:27.0897 0x19a0 kdnic - ok
17:35:27.0901 0x19a0 KeyIso - ok
17:35:27.0905 0x19a0 KSecDD - ok
17:35:27.0909 0x19a0 KSecPkg - ok
17:35:27.0913 0x19a0 ksthunk - ok
17:35:27.0925 0x19a0 [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
17:35:27.0954 0x19a0 KtmRm - ok
17:35:27.0958 0x19a0 LanmanServer - ok
17:35:27.0962 0x19a0 LanmanWorkstation - ok
17:35:27.0970 0x19a0 [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc C:\WINDOWS\System32\lfsvc.dll
17:35:27.0986 0x19a0 lfsvc - ok
17:35:27.0994 0x19a0 [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
17:35:28.0014 0x19a0 LicenseManager - ok
17:35:28.0018 0x19a0 [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
17:35:28.0034 0x19a0 lltdio - ok
17:35:28.0043 0x19a0 [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
17:35:28.0071 0x19a0 lltdsvc - ok
17:35:28.0077 0x19a0 [ 262ACFCAC89FEC27C361969613EB29DA, 541BAA51E6F64E14968B74ABDC15567699BE17B4891CE7BC2A04414E86591692 ] LMDriver C:\WINDOWS\System32\drivers\LMDriver.sys
17:35:28.0085 0x19a0 LMDriver - ok
17:35:28.0089 0x19a0 lmhosts - ok
17:35:28.0093 0x19a0 LMS - ok
17:35:28.0101 0x19a0 LSI_SAS - ok
17:35:28.0105 0x19a0 LSI_SAS2i - ok
17:35:28.0113 0x19a0 LSI_SAS3i - ok
17:35:28.0113 0x19a0 LSI_SSS - ok
17:35:28.0121 0x19a0 LSM - ok
17:35:28.0125 0x19a0 [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
17:35:28.0145 0x19a0 luafv - ok
17:35:28.0153 0x19a0 [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc C:\WINDOWS\System32\LanguageOverlayServer.dll
17:35:28.0177 0x19a0 LxpSvc - ok
17:35:28.0185 0x19a0 [ 1C1FF36E51F73989FB4DD2DBAFAE11EC, B5C0B169BFEF5FD769745F924B3F30C960A555F8B0C0C7315B273435D9F246D5 ] MapsBroker C:\WINDOWS\System32\moshost.dll
17:35:28.0205 0x19a0 MapsBroker - ok
17:35:28.0209 0x19a0 mausbhost - ok
17:35:28.0209 0x19a0 mausbip - ok
17:35:28.0225 0x19a0 [ 7CF1B716372B89568AE4C0FE769F5869, 0D70A7A594BCFBB26D7249C0F4B0AF9EF874F2318B3FDCE44648CC61279594ED ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
17:35:28.0241 0x19a0 MDM - detected UnsignedFile.Multi.Generic ( 1 )
17:35:28.0819 0x19a0 Detect skipped due to KSN trusted
17:35:28.0819 0x19a0 MDM - ok
17:35:28.0835 0x19a0 megasas - ok
17:35:28.0847 0x19a0 megasas2i - ok
17:35:28.0855 0x19a0 megasas35i - ok
17:35:28.0867 0x19a0 megasr - ok
17:35:28.0887 0x19a0 [ 5AC258A5845A72B91C675F44050058B2, 69D298B5774F299DE2EECF7B9238BFD36CDC0BAFB167FD0927398E4A89A5D63B ] MEIx64 C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys
17:35:28.0903 0x19a0 MEIx64 - ok
17:35:28.0911 0x19a0 [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll
17:35:28.0931 0x19a0 MessagingService - ok
17:35:28.0935 0x19a0 mlx4_bus - ok
17:35:28.0943 0x19a0 MMCSS - ok
17:35:28.0947 0x19a0 [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem C:\WINDOWS\system32\drivers\modem.sys
17:35:28.0963 0x19a0 Modem - ok
17:35:28.0971 0x19a0 [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor C:\WINDOWS\System32\drivers\monitor.sys
17:35:28.0987 0x19a0 monitor - ok
17:35:28.0991 0x19a0 mouclass - ok
17:35:28.0995 0x19a0 mouhid - ok
17:35:28.0999 0x19a0 mountmgr - ok
17:35:29.0003 0x19a0 mpsdrv - ok
17:35:29.0007 0x19a0 mpssvc - ok
17:35:29.0015 0x19a0 [ 1E49E45D68E4E7779B9E36F39407C5D9, 08E422BE41A69EE3D9AC482DED2A35D0EF1F366CCC7E6675720479D28E23B6A8 ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
17:35:29.0035 0x19a0 MRxDAV - ok
17:35:29.0039 0x19a0 mrxsmb - ok
17:35:29.0043 0x19a0 mrxsmb20 - ok
17:35:29.0052 0x19a0 [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
17:35:29.0068 0x19a0 MsBridge - ok
17:35:29.0076 0x19a0 [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC C:\WINDOWS\System32\msdtc.exe
17:35:29.0092 0x19a0 MSDTC - ok
17:35:29.0092 0x19a0 Msfs - ok
17:35:29.0115 0x19a0 [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
17:35:29.0127 0x19a0 msgpiowin32 - ok
17:35:29.0131 0x19a0 mshidkmdf - ok
17:35:29.0135 0x19a0 [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
17:35:29.0152 0x19a0 mshidumdf - ok
17:35:29.0156 0x19a0 msisadrv - ok
17:35:29.0156 0x19a0 MSiSCSI - ok
17:35:29.0156 0x19a0 msiserver - ok
17:35:29.0156 0x19a0 MSKSSRV - ok
17:35:29.0172 0x19a0 [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
17:35:29.0187 0x19a0 MsLldp - ok
17:35:29.0187 0x19a0 MSPCLOCK - ok
17:35:29.0187 0x19a0 MSPQM - ok
17:35:29.0203 0x19a0 MsRPC - ok
17:35:29.0211 0x19a0 mssmbios - ok
17:35:29.0219 0x19a0 MSTEE - ok
17:35:29.0223 0x19a0 MTConfig - ok
17:35:29.0227 0x19a0 Mup - ok
17:35:29.0235 0x19a0 mvumis - ok
17:35:29.0243 0x19a0 NativeWifiP - ok
17:35:29.0263 0x19a0 [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll
17:35:29.0307 0x19a0 NaturalAuthentication - ok
17:35:29.0315 0x19a0 [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
17:35:29.0341 0x19a0 NcaSvc - ok
17:35:29.0353 0x19a0 [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService C:\WINDOWS\System32\ncbservice.dll
17:35:29.0373 0x19a0 NcbService - ok
17:35:29.0389 0x19a0 [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
17:35:29.0410 0x19a0 NcdAutoSetup - ok
17:35:29.0414 0x19a0 ndfltr - ok
17:35:29.0414 0x19a0 NDIS - ok
17:35:29.0423 0x19a0 [ AF73B18F3096B165A6F4417C5ED36B01, B0FA9E52D7208F756103E2E853F1D17F594C9FDD2E76304743C581613E612449 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
17:35:29.0439 0x19a0 NdisCap - ok
17:35:29.0444 0x19a0 [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
17:35:29.0464 0x19a0 NdisImPlatform - ok
17:35:29.0468 0x19a0 NdisTapi - ok
17:35:29.0472 0x19a0 Ndisuio - ok
17:35:29.0480 0x19a0 NdisVirtualBus - ok
17:35:29.0484 0x19a0 NdisWan - ok
17:35:29.0488 0x19a0 ndiswanlegacy - ok
17:35:29.0496 0x19a0 ndproxy - ok
17:35:29.0500 0x19a0 [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
17:35:29.0524 0x19a0 Ndu - ok
17:35:29.0528 0x19a0 NetAdapterCx - ok
17:35:29.0532 0x19a0 NetBIOS - ok
17:35:29.0540 0x19a0 NetBT - ok
17:35:29.0548 0x19a0 Netlogon - ok
17:35:29.0552 0x19a0 Netman - ok
17:35:29.0568 0x19a0 [ E9931F57F05696CBF53A086449D97BF6, 986C99033AA10A258F0CC42727B14C5812BC76AB535CDF54FCA1B038C4BF9546 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
17:35:29.0604 0x19a0 netprofm - ok
17:35:29.0609 0x19a0 NetSetupSvc - ok
17:35:29.0617 0x19a0 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:35:29.0637 0x19a0 NetTcpPortSharing - ok
17:35:29.0641 0x19a0 netvsc - ok
17:35:29.0657 0x19a0 [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
17:35:29.0693 0x19a0 NgcCtnrSvc - ok
17:35:29.0713 0x19a0 [ DB3589FF79F06EC1967EBA56C7249E3C, C3F1B4687F2AAE869C8566B38DCFE507F8E7201A2241BD5342AAC22A2370D5E4 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
17:35:29.0756 0x19a0 NgcSvc - ok
17:35:29.0760 0x19a0 NlaSvc - ok
17:35:29.0764 0x19a0 Npfs - ok
17:35:29.0768 0x19a0 npsvctrig - ok
17:35:29.0772 0x19a0 nsi - ok
17:35:29.0776 0x19a0 nsiproxy - ok
17:35:29.0784 0x19a0 Ntfs - ok
17:35:29.0788 0x19a0 Null - ok
17:35:29.0792 0x19a0 nvdimm - ok
17:35:29.0800 0x19a0 nvraid - ok
17:35:29.0804 0x19a0 nvstor - ok
17:35:29.0816 0x19a0 [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
17:35:29.0848 0x19a0 OneSyncSvc - ok
17:35:29.0856 0x19a0 [ 7D7024102592080A99630B5DDD77CF40, AFE385CE4CD1D8D3648C1FEBD986ADCB9E0FF7099F6405B091F5DEAAB4C1A8D7 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:35:29.0872 0x19a0 ose - ok
17:35:29.0885 0x19a0 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
17:35:29.0913 0x19a0 p2pimsvc - ok
17:35:29.0925 0x19a0 [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc C:\WINDOWS\system32\p2psvc.dll
17:35:29.0957 0x19a0 p2psvc - ok
17:35:29.0961 0x19a0 Parport - ok
17:35:29.0965 0x19a0 partmgr - ok
17:35:29.0981 0x19a0 [ 0CF87FC2DA60940031D553F8FDF5066B, 95F8A15210D6F431B84C6E18643F93C9D16F53D3FF4873F9A327A77924B4B9F8 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
17:35:30.0009 0x19a0 PcaSvc - ok
17:35:30.0013 0x19a0 pci - ok
17:35:30.0017 0x19a0 pciide - ok
17:35:30.0021 0x19a0 pcmcia - ok
17:35:30.0025 0x19a0 pcw - ok
17:35:30.0029 0x19a0 pdc - ok
17:35:30.0049 0x19a0 [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
17:35:30.0086 0x19a0 PEAUTH - ok
17:35:30.0090 0x19a0 percsas2i - ok
17:35:30.0094 0x19a0 percsas3i - ok
17:35:30.0110 0x19a0 [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
17:35:30.0147 0x19a0 PerfHost - ok
17:35:30.0159 0x19a0 PhoneSvc - ok
17:35:30.0171 0x19a0 [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
17:35:30.0200 0x19a0 PimIndexMaintenanceSvc - ok
17:35:30.0231 0x19a0 [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla C:\WINDOWS\system32\pla.dll
17:35:30.0300 0x19a0 pla - ok
17:35:30.0308 0x19a0 PlugPlay - ok
17:35:30.0312 0x19a0 pmem - ok
17:35:30.0316 0x19a0 [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM C:\WINDOWS\System32\drivers\pnpmem.sys
17:35:30.0332 0x19a0 PNPMEM - ok
17:35:30.0336 0x19a0 [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
17:35:30.0356 0x19a0 PNRPAutoReg - ok
17:35:30.0368 0x19a0 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
17:35:30.0396 0x19a0 PNRPsvc - ok
17:35:30.0400 0x19a0 PolicyAgent - ok
17:35:30.0408 0x19a0 Power - ok
17:35:30.0412 0x19a0 PptpMiniport - ok
17:35:30.0502 0x19a0 [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
17:35:30.0644 0x19a0 PrintNotify - ok
17:35:30.0660 0x19a0 [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll
17:35:30.0680 0x19a0 PrintWorkflowUserSvc - ok
17:35:30.0688 0x19a0 Processor - ok
17:35:30.0692 0x19a0 ProfSvc - ok
17:35:30.0700 0x19a0 [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched C:\WINDOWS\system32\drivers\pacer.sys
17:35:30.0712 0x19a0 Psched - ok
17:35:30.0720 0x19a0 [ 29F12CD3F77B65C7E37F8517395B13D2, 690517756A21B3DE4CF4A027AA712FC62DB6F5F2E89B4D2DE220A29C4A36878B ] PushToInstall C:\WINDOWS\system32\PushToInstall.dll
17:35:30.0748 0x19a0 PushToInstall - ok
17:35:30.0752 0x19a0 Qcamain - ok
17:35:30.0800 0x19a0 [ E8A44A8D55FCAFCDB56355B649650DAF, 291A10EF789E192C71B5E74DB1BF1BF7B9EC23B17A923B54D1F7D290B553399A ] Qcamain10x64 C:\WINDOWS\system32\DRIVERS\Qcamain10x64.sys
17:35:30.0871 0x19a0 Qcamain10x64 - ok
17:35:30.0883 0x19a0 [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE C:\WINDOWS\system32\qwave.dll
17:35:30.0911 0x19a0 QWAVE - ok
17:35:30.0919 0x19a0 [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
17:35:30.0935 0x19a0 QWAVEdrv - ok
17:35:30.0943 0x19a0 [ 911BD6CE96BB62D7779A74498089BCE2, F0314614C889A539E931AD2E3212B285D097D7E1EA55658655D8AFDB7C13929F ] RadioShim C:\WINDOWS\System32\drivers\RadioShim.sys
17:35:30.0951 0x19a0 RadioShim - ok
17:35:30.0955 0x19a0 Ramdisk - ok
17:35:30.0959 0x19a0 RasAcd - ok
17:35:30.0967 0x19a0 RasAgileVpn - ok
17:35:30.0971 0x19a0 RasAuto - ok
17:35:30.0975 0x19a0 Rasl2tp - ok
17:35:30.0979 0x19a0 RasMan - ok
17:35:30.0983 0x19a0 RasPppoe - ok
17:35:30.0987 0x19a0 RasSstp - ok
17:35:30.0991 0x19a0 rdbss - ok
17:35:30.0999 0x19a0 [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
17:35:31.0011 0x19a0 rdpbus - ok
17:35:31.0019 0x19a0 [ 52A6CC99F5934CFAE88353C47B6193E7, 37F6991FA526036866E8CFC938A16750644AD764FA52BB102B11B5D594DB7E96 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
17:35:31.0035 0x19a0 RDPDR - ok
17:35:31.0044 0x19a0 [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
17:35:31.0056 0x19a0 RdpVideoMiniport - ok
17:35:31.0068 0x19a0 [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
17:35:31.0084 0x19a0 rdyboost - ok
17:35:31.0088 0x19a0 ReFS - ok
17:35:31.0092 0x19a0 ReFSv1 - ok
17:35:31.0108 0x19a0 [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
17:35:31.0140 0x19a0 RemoteAccess - ok
17:35:31.0146 0x19a0 [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
17:35:31.0170 0x19a0 RemoteRegistry - ok
17:35:31.0187 0x19a0 [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
17:35:31.0231 0x19a0 RetailDemo - ok
17:35:31.0239 0x19a0 [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy C:\WINDOWS\System32\drivers\rhproxy.sys
17:35:31.0256 0x19a0 rhproxy - ok
17:35:31.0260 0x19a0 [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc C:\WINDOWS\System32\RMapi.dll
17:35:31.0284 0x19a0 RmSvc - ok
17:35:31.0292 0x19a0 RpcEptMapper - ok
17:35:31.0296 0x19a0 [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator C:\WINDOWS\system32\locator.exe
17:35:31.0312 0x19a0 RpcLocator - ok
17:35:31.0316 0x19a0 RpcSs - ok
17:35:31.0324 0x19a0 [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
17:35:31.0340 0x19a0 rspndr - ok
17:35:31.0364 0x19a0 [ 12A3D1530E3F67B8664EBA923A3981E4, 8670C39EB0A7C37C17D014A8917493B776DE0829B55EFED13D91B6FA7B81CA11 ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys
17:35:31.0387 0x19a0 rt640x64 - ok
17:35:31.0403 0x19a0 [ 87CCF37EC2858FCF7689F8FC0B72F39A, 60B71BDC7388887AC7EB2C869DEAF86DD06B7EB9DEE3CF4F4DFE2D1BCE3BDAA8 ] RTSUER C:\WINDOWS\system32\Drivers\RtsUer.sys
17:35:31.0419 0x19a0 RTSUER - ok
17:35:31.0419 0x19a0 [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
17:35:31.0434 0x19a0 s3cap - ok
17:35:31.0434 0x19a0 SamSs - ok
17:35:31.0434 0x19a0 sbp2port - ok
17:35:31.0450 0x19a0 [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
17:35:31.0481 0x19a0 SCardSvr - ok
17:35:31.0481 0x19a0 [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
17:35:31.0512 0x19a0 ScDeviceEnum - ok
17:35:31.0528 0x19a0 [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
17:35:31.0544 0x19a0 scfilter - ok
17:35:31.0559 0x19a0 [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule C:\WINDOWS\system32\schedsvc.dll
17:35:31.0614 0x19a0 Schedule - ok
17:35:31.0623 0x19a0 scmbus - ok
17:35:31.0623 0x19a0 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
17:35:31.0638 0x19a0 SCPolicySvc - ok
17:35:31.0654 0x19a0 sdbus - ok
17:35:31.0654 0x19a0 [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys
17:35:31.0669 0x19a0 SDFRd - ok
17:35:31.0675 0x19a0 [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
17:35:31.0698 0x19a0 SDRSVC - ok
17:35:31.0702 0x19a0 sdstor - ok
17:35:31.0706 0x19a0 [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon C:\WINDOWS\system32\seclogon.dll
17:35:31.0726 0x19a0 seclogon - ok
17:35:31.0746 0x19a0 [ 1E8CC4964FEECEE44D720A5130075F79, 75656541633FE90045183C68F4A81F1AA305E4A03CFBF7C50F226F18000924D5 ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe
17:35:31.0783 0x19a0 SecurityHealthService - ok
17:35:31.0810 0x19a0 [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll
17:35:31.0870 0x19a0 SEMgrSvc - ok
17:35:31.0878 0x19a0 [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS C:\WINDOWS\System32\sens.dll
17:35:31.0898 0x19a0 SENS - ok
17:35:31.0930 0x19a0 [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
17:35:31.0992 0x19a0 SensorDataService - ok
17:35:32.0016 0x19a0 [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService C:\WINDOWS\system32\SensorService.dll
17:35:32.0062 0x19a0 SensorService - ok
17:35:32.0074 0x19a0 [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
17:35:32.0098 0x19a0 SensrSvc - ok
17:35:32.0106 0x19a0 SerCx - ok
17:35:32.0110 0x19a0 SerCx2 - ok
17:35:32.0114 0x19a0 Serenum - ok
17:35:32.0118 0x19a0 Serial - ok
17:35:32.0126 0x19a0 sermouse - ok
17:35:32.0146 0x19a0 [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv C:\WINDOWS\system32\sessenv.dll
17:35:32.0178 0x19a0 SessionEnv - ok
17:35:32.0182 0x19a0 sfloppy - ok
17:35:32.0186 0x19a0 [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent C:\WINDOWS\system32\drivers\SgrmAgent.sys
17:35:32.0198 0x19a0 SgrmAgent - ok
17:35:32.0206 0x19a0 [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker C:\WINDOWS\system32\SgrmBroker.exe
17:35:32.0226 0x19a0 SgrmBroker - ok
17:35:32.0242 0x19a0 [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
17:35:32.0279 0x19a0 SharedAccess - ok
17:35:32.0299 0x19a0 [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll
17:35:32.0339 0x19a0 SharedRealitySvc - ok
17:35:32.0359 0x19a0 [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:35:32.0398 0x19a0 ShellHWDetection - ok
17:35:32.0408 0x19a0 [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
17:35:32.0440 0x19a0 shpamsvc - ok
17:35:32.0444 0x19a0 SiSRaid2 - ok
17:35:32.0448 0x19a0 SiSRaid4 - ok
17:35:32.0452 0x19a0 smphost - ok
17:35:32.0472 0x19a0 [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
17:35:32.0508 0x19a0 SmsRouter - ok
17:35:32.0520 0x19a0 [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
17:35:32.0540 0x19a0 SNMPTRAP - ok
17:35:32.0544 0x19a0 spaceport - ok
17:35:32.0552 0x19a0 [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys
17:35:32.0564 0x19a0 SpatialGraphFilter - ok
17:35:32.0569 0x19a0 SpbCx - ok
17:35:32.0569 0x19a0 spectrum - ok
17:35:32.0591 0x19a0 [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler C:\WINDOWS\System32\spoolsv.exe
17:35:32.0635 0x19a0 Spooler - ok
17:35:32.0724 0x19a0 [ FEEC8055C5986182C717DD888000AEF6, E09B7B1DE43A226842A4B8C591D712E51585BC7E8A39CFB8852CBF16D234C3A6 ] sppsvc C:\WINDOWS\system32\sppsvc.exe
17:35:32.0993 0x19a0 sppsvc - ok
17:35:33.0009 0x19a0 srv - ok
17:35:33.0013 0x19a0 srv2 - ok
17:35:33.0017 0x19a0 srvnet - ok
17:35:33.0021 0x19a0 [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
17:35:33.0052 0x19a0 SSDPSRV - ok
17:35:33.0068 0x19a0 [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
17:35:33.0099 0x19a0 ssh-agent - ok
17:35:33.0099 0x19a0 SstpSvc - ok
17:35:33.0099 0x19a0 [ D08FFE34AF5B7AC5F69EEA1E0E8C6ECE, CC43752CE5C879E24229C84443DBEE667CE629ECF992AD0D42F0F77FE04F6751 ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
17:35:33.0115 0x19a0 ssudmdm - ok
17:35:33.0300 0x19a0 [ BDFDF0A5B3622E4320C72D5B9619C9B2, EC0B8A80302B118D6148B9B4488D3E0D220B23FFC9F28F9956F3D46265CBEF14 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
17:35:33.0463 0x19a0 StateRepository - ok
17:35:33.0475 0x19a0 stexstor - ok
17:35:33.0491 0x19a0 [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc C:\WINDOWS\System32\wiaservc.dll
17:35:33.0531 0x19a0 stisvc - ok
17:35:33.0535 0x19a0 storahci - ok
17:35:33.0539 0x19a0 storflt - ok
17:35:33.0543 0x19a0 stornvme - ok
17:35:33.0547 0x19a0 storqosflt - ok
17:35:33.0555 0x19a0 StorSvc - ok
17:35:33.0555 0x19a0 storufs - ok
17:35:33.0563 0x19a0 storvsc - ok
17:35:33.0567 0x19a0 svsvc - ok
17:35:33.0575 0x19a0 swenum - ok
17:35:33.0579 0x19a0 swprv - ok
17:35:33.0587 0x19a0 [ C2775A7287B7B276241D7B2DCC91D7BC, E23500D5DF89985342072DFF3DAD579A1A9FE40D72F122A95290A61E4C5CEFC9 ] SynRMIHID C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys
17:35:33.0595 0x19a0 SynRMIHID - ok
17:35:33.0599 0x19a0 [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
17:35:33.0615 0x19a0 Synth3dVsc - ok
17:35:33.0637 0x19a0 [ 62492FAAC26223E8A21E79A2331A3F10, 164C2650EAD344B6DFF95B8275436231E7994B7F06ACB3DA19054849BED61FD2 ] SysMain C:\WINDOWS\system32\sysmain.dll
17:35:33.0689 0x19a0 SysMain - ok
17:35:33.0697 0x19a0 SystemEventsBroker - ok
17:35:33.0705 0x19a0 [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
17:35:33.0741 0x19a0 TabletInputService - ok
17:35:33.0745 0x19a0 [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901 C:\WINDOWS\System32\drivers\tap0901.sys
17:35:33.0761 0x19a0 tap0901 - ok
17:35:33.0769 0x19a0 [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
17:35:33.0805 0x19a0 TapiSrv - ok
17:35:33.0813 0x19a0 Tcpip - ok
17:35:33.0817 0x19a0 Tcpip6 - ok
17:35:33.0829 0x19a0 [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
17:35:33.0845 0x19a0 tcpipreg - ok
17:35:33.0853 0x19a0 tdx - ok
17:35:33.0861 0x19a0 [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
17:35:33.0873 0x19a0 terminpt - ok
17:35:33.0901 0x19a0 [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService C:\WINDOWS\System32\termsrv.dll
17:35:33.0948 0x19a0 TermService - ok
17:35:33.0948 0x19a0 [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes C:\WINDOWS\system32\themeservice.dll
17:35:33.0979 0x19a0 Themes - ok
17:35:33.0979 0x19a0 [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
17:35:34.0011 0x19a0 TieringEngineService - ok
17:35:34.0026 0x19a0 TimeBrokerSvc - ok
17:35:34.0057 0x19a0 [ 673FB0E68AADCCF840AC7A56A9B38150, A9A1CF08D544A488ECABBFBD994C3A8CEB8CFE86A098DAB8533430BABDEA27EB ] TokenBroker C:\WINDOWS\System32\TokenBroker.dll
17:35:34.0137 0x19a0 TokenBroker - ok
17:35:34.0137 0x19a0 TPM - ok
17:35:34.0137 0x19a0 [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks C:\WINDOWS\System32\trkwks.dll
17:35:34.0169 0x19a0 TrkWks - ok
17:35:34.0169 0x19a0 TrustedInstaller - ok
17:35:34.0169 0x19a0 [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys
17:35:34.0184 0x19a0 TsUsbFlt - ok
17:35:34.0202 0x19a0 [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
17:35:34.0202 0x19a0 TsUsbGD - ok
17:35:34.0217 0x19a0 [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel C:\WINDOWS\system32\drivers\tunnel.sys
17:35:34.0233 0x19a0 tunnel - ok
17:35:34.0233 0x19a0 [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
17:35:34.0264 0x19a0 tzautoupdate - ok
17:35:34.0264 0x19a0 UASPStor - ok
17:35:34.0280 0x19a0 [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
17:35:34.0296 0x19a0 UcmCx0101 - ok
17:35:34.0311 0x19a0 [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
17:35:34.0327 0x19a0 UcmTcpciCx0101 - ok
17:35:34.0327 0x19a0 [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
17:35:34.0342 0x19a0 UcmUcsi - ok
17:35:34.0358 0x19a0 Ucx01000 - ok
17:35:34.0358 0x19a0 UdeCx - ok
17:35:34.0358 0x19a0 udfs - ok
17:35:34.0358 0x19a0 UEFI - ok
17:35:34.0374 0x19a0 [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
17:35:34.0389 0x19a0 Ufx01000 - ok
17:35:34.0405 0x19a0 UfxChipidea - ok
17:35:34.0405 0x19a0 ufxsynopsys - ok
17:35:34.0420 0x19a0 umbus - ok
17:35:34.0420 0x19a0 UmPass - ok
17:35:34.0436 0x19a0 [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
17:35:34.0460 0x19a0 UmRdpService - ok
17:35:34.0491 0x19a0 [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
17:35:34.0553 0x19a0 UnistoreSvc - ok
17:35:34.0569 0x19a0 [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost C:\WINDOWS\System32\upnphost.dll
17:35:34.0600 0x19a0 upnphost - ok
17:35:34.0600 0x19a0 [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
17:35:34.0620 0x19a0 UrsChipidea - ok
17:35:34.0624 0x19a0 [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
17:35:34.0636 0x19a0 UrsCx01000 - ok
17:35:34.0644 0x19a0 [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
17:35:34.0652 0x19a0 UrsSynopsys - ok
17:35:34.0660 0x19a0 usbaudio - ok
17:35:34.0664 0x19a0 usbccgp - ok
17:35:34.0669 0x19a0 [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
17:35:34.0688 0x19a0 usbcir - ok
17:35:34.0692 0x19a0 usbehci - ok
17:35:34.0696 0x19a0 usbhub - ok
17:35:34.0701 0x19a0 USBHUB3 - ok
17:35:34.0701 0x19a0 usbohci - ok
17:35:34.0701 0x19a0 [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
17:35:34.0717 0x19a0 usbprint - ok
17:35:34.0717 0x19a0 usbser - ok
17:35:34.0732 0x19a0 USBSTOR - ok
17:35:34.0732 0x19a0 usbuhci - ok
17:35:34.0732 0x19a0 [ 9431F7E997A8750139517709B04D8629, 250DE2A461DD3E6D40BD7A21041BF451D954D5BC14A9BC4D819955A135FC34F4 ] usbvideo C:\WINDOWS\System32\Drivers\usbvideo.sys
17:35:34.0763 0x19a0 usbvideo - ok
17:35:34.0763 0x19a0 USBXHCI - ok
17:35:34.0795 0x19a0 [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
17:35:34.0857 0x19a0 UserDataSvc - ok
17:35:34.0873 0x19a0 UserManager - ok
17:35:34.0912 0x19a0 [ 6103984EBC387D6D27BA003EED63217D, 7F9BD12F75F98E593C753A3397EE8F9E59D944BC4EFBC52279A14BA93A7FA9AE ] UsoSvc C:\WINDOWS\system32\usocore.dll
17:35:34.0987 0x19a0 UsoSvc - ok
17:35:35.0003 0x19a0 [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc C:\WINDOWS\System32\vac.dll
17:35:35.0035 0x19a0 VacSvc - ok
17:35:35.0039 0x19a0 VaultSvc - ok
17:35:35.0043 0x19a0 vdrvroot - ok
17:35:35.0051 0x19a0 vds - ok
17:35:35.0059 0x19a0 VerifierExt - ok
17:35:35.0063 0x19a0 vhdmp - ok
17:35:35.0071 0x19a0 vhf - ok
17:35:35.0075 0x19a0 vmbus - ok
17:35:35.0079 0x19a0 VMBusHID - ok
17:35:35.0091 0x19a0 [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys
17:35:35.0107 0x19a0 vmgid - ok
17:35:35.0115 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
17:35:35.0143 0x19a0 vmicguestinterface - ok
17:35:35.0151 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll
17:35:35.0175 0x19a0 vmicheartbeat - ok
17:35:35.0183 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
17:35:35.0203 0x19a0 vmickvpexchange - ok
17:35:35.0215 0x19a0 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll
17:35:35.0234 0x19a0 vmicrdv - ok
17:35:35.0250 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll
17:35:35.0266 0x19a0 vmicshutdown - ok
17:35:35.0281 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync C:\WINDOWS\System32\icsvc.dll
17:35:35.0297 0x19a0 vmictimesync - ok
17:35:35.0297 0x19a0 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll
17:35:35.0328 0x19a0 vmicvmsession - ok
17:35:35.0328 0x19a0 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss C:\WINDOWS\System32\icsvcext.dll
17:35:35.0359 0x19a0 vmicvss - ok
17:35:35.0359 0x19a0 volmgr - ok
17:35:35.0359 0x19a0 volmgrx - ok
17:35:35.0375 0x19a0 volsnap - ok
17:35:35.0375 0x19a0 volume - ok
17:35:35.0391 0x19a0 [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci C:\WINDOWS\System32\drivers\vpci.sys
17:35:35.0406 0x19a0 vpci - ok
17:35:35.0406 0x19a0 [ 6270CA817E65B80AE3E3289D7FDC3A22, 3A838368C06004FC22D817219E80A04DDB72B83022E7FD2E201A65704EF63AFD ] VPNUnlimitedService C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe
17:35:35.0422 0x19a0 VPNUnlimitedService - ok
17:35:35.0422 0x19a0 vsmraid - ok
17:35:35.0422 0x19a0 VSS - ok
17:35:35.0438 0x19a0 VSTXRAID - ok
17:35:35.0440 0x19a0 vwifibus - ok
17:35:35.0440 0x19a0 vwififlt - ok
17:35:35.0455 0x19a0 vwifimp - ok
17:35:35.0455 0x19a0 W32Time - ok
17:35:35.0471 0x19a0 [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc C:\WINDOWS\System32\WaaSMedicSvc.dll
17:35:35.0508 0x19a0 WaaSMedicSvc - ok
17:35:35.0512 0x19a0 WacomPen - ok
17:35:35.0532 0x19a0 [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService C:\WINDOWS\system32\WalletService.dll
17:35:35.0572 0x19a0 WalletService - ok
17:35:35.0579 0x19a0 wanarp - ok
17:35:35.0585 0x19a0 wanarpv6 - ok
17:35:35.0593 0x19a0 [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc C:\WINDOWS\System32\Windows.WARP.JITService.dll
17:35:35.0621 0x19a0 WarpJITSvc - ok
17:35:35.0625 0x19a0 wbengine - ok
17:35:35.0649 0x19a0 [ A7C39DF528040967C2C281AB5A9DB5D0, B300F663DD45393BB86A1BFBE2EF47CD2315552B2410E3AE3F60E8294DC3E4A9 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
17:35:35.0702 0x19a0 WbioSrvc - ok
17:35:35.0702 0x19a0 [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys
17:35:35.0717 0x19a0 wcifs - ok
17:35:35.0733 0x19a0 [ 2BCA9BABB5CEC329E604AE9C1DBA9D5B, 315C72B80A5E6278A725E7BD2DE0C8A2751C2A3F9B4D82F7A034B1ADDE687507 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
17:35:35.0784 0x19a0 Wcmsvc - ok
17:35:35.0800 0x19a0 wcncsvc - ok
17:35:35.0800 0x19a0 [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys
17:35:35.0816 0x19a0 wcnfs - ok
17:35:35.0831 0x19a0 [ 9BD1C97BAED4B916C95D4E107B3D9812, 722456319EBA63AC6EB21B6A99F4FC928F58AA972DF227EDF0982BC51F4DE86D ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
17:35:35.0831 0x19a0 WdBoot - ok
17:35:35.0847 0x19a0 Wdf01000 - ok
17:35:35.0847 0x19a0 [ D25D9930BFD78A09B8FD4A7504C6F57A, 9D94BC1368A73B06312ED9016482534EA64F7005C85AAB240ED619FDD19E7F4C ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
17:35:35.0878 0x19a0 WdFilter - ok
17:35:35.0878 0x19a0 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
17:35:35.0909 0x19a0 WdiServiceHost - ok
17:35:35.0909 0x19a0 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
17:35:35.0925 0x19a0 WdiSystemHost - ok
17:35:35.0941 0x19a0 wdiwifi - ok
17:35:35.0941 0x19a0 [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys
17:35:35.0956 0x19a0 WdmCompanionFilter - ok
17:35:35.0956 0x19a0 [ 54E97FEADEEFF973797EB878DC0D2850, A7ABD9E8B94DA19328BB9BF498D64603C6147BE998C40A6F0F8C2E0716CBFC95 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
17:35:35.0972 0x19a0 WdNisDrv - ok
17:35:35.0972 0x19a0 WdNisSvc - ok
17:35:35.0988 0x19a0 [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient C:\WINDOWS\System32\webclnt.dll
17:35:36.0019 0x19a0 WebClient - ok
17:35:36.0019 0x19a0 [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
17:35:36.0050 0x19a0 Wecsvc - ok
17:35:36.0050 0x19a0 [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
17:35:36.0081 0x19a0 WEPHOSTSVC - ok
17:35:36.0081 0x19a0 [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
17:35:36.0113 0x19a0 wercplsupport - ok
17:35:36.0113 0x19a0 WerSvc - ok
17:35:36.0128 0x19a0 [ 0427A785512BB39BEA530DC5367A9A03, 8ED29AE0FDB65D4E1D8CD3FA1783D74EF7B01AB30DD1090C917A74AC88FD4C3E ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll
17:35:36.0175 0x19a0 WFDSConMgrSvc - ok
17:35:36.0175 0x19a0 [ C16F011763DF92A6B62705DE8FEAB5B9, EAB25EBC9910F5A6C9F082B11D68F9A616B7349590BDB8F1C1040802E4ADF97C ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys
17:35:36.0191 0x19a0 WFPLWFS - ok
17:35:36.0191 0x19a0 [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
17:35:36.0222 0x19a0 WiaRpc - ok
17:35:36.0222 0x19a0 WIMMount - ok
17:35:36.0222 0x19a0 WinDefend - ok
17:35:36.0238 0x19a0 [ EC7C1A7397988EFAF37BF685CA25525D, 50DA7D63CDE618D6426649AED250CEBE229CBBAC718C4E3CD882D816839B4CE9 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
17:35:36.0253 0x19a0 WindowsTrustedRT - ok
17:35:36.0259 0x19a0 [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
17:35:36.0259 0x19a0 WindowsTrustedRTProxy - ok
17:35:36.0275 0x19a0 WinHttpAutoProxySvc - ok
17:35:36.0275 0x19a0 WinMad - ok
17:35:36.0290 0x19a0 Winmgmt - ok
17:35:36.0290 0x19a0 [ 48194110C410B335AC985D9194275A1C, 1CE64B9DD2DB4CCB3916AA4F4C5F8C71C647ABF7845D284019725761138B8A8B ] WinNat C:\WINDOWS\system32\drivers\winnat.sys
17:35:36.0321 0x19a0 WinNat - ok
17:35:36.0375 0x19a0 [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
17:35:36.0511 0x19a0 WinRM - ok
17:35:36.0527 0x19a0 [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
17:35:36.0547 0x19a0 WINUSB - ok
17:35:36.0555 0x19a0 WinVerbs - ok
17:35:36.0559 0x19a0 wisvc - ok
17:35:36.0567 0x19a0 WlanSvc - ok
17:35:36.0619 0x19a0 [ DB98D3F6AA7655AC8AE76745E553BD46, F5DA82BC6DFC3ADCAEB6634A976C15451382B5535F78EE267B5F8E37A9135FDC ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
17:35:36.0699 0x19a0 wlidsvc - ok
17:35:36.0746 0x19a0 [ 59F6A50CD336D0ADD22E3F1FC0D73957, A62469B30325965735FE76AE7D83E5D829AE09D7F0996CC0B42604E68426B088 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll
17:35:36.0797 0x19a0 wlpasvc - ok
17:35:36.0797 0x19a0 WmiAcpi - ok
17:35:36.0812 0x19a0 wmiApSrv - ok
17:35:36.0812 0x19a0 WMPNetworkSvc - ok
17:35:36.0828 0x19a0 [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
17:35:36.0844 0x19a0 Wof - ok
17:35:36.0891 0x19a0 [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
17:35:36.0953 0x19a0 workfolderssvc - ok
17:35:36.0969 0x19a0 WpcMonSvc - ok
17:35:36.0969 0x19a0 [ 25180559693250D7B7FF16A6BE7AC9BE, 1872BC298C3ED6A204B3BA2AB13D08EB9DAE5B30B7F83CA7A67BFDECA8D043AD ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
17:35:37.0000 0x19a0 WPDBusEnum - ok
17:35:37.0000 0x19a0 [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
17:35:37.0016 0x19a0 WpdUpFltr - ok
17:35:37.0016 0x19a0 [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService C:\WINDOWS\system32\WpnService.dll
17:35:37.0047 0x19a0 WpnService - ok
17:35:37.0062 0x19a0 [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll
17:35:37.0078 0x19a0 WpnUserService - ok
17:35:37.0094 0x19a0 ws2ifsl - ok
17:35:37.0094 0x19a0 [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc C:\WINDOWS\System32\wscsvc.dll
17:35:37.0127 0x19a0 wscsvc - ok
17:35:37.0142 0x19a0 [ A3317B8C6765C18F3BD9FE9DD352B05D, 8312D05F32909933FA692B893D5F6E1DC2E5908C8E590D4B6A51EA724DF4744C ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys
17:35:37.0155 0x19a0 WSDPrintDevice - ok
17:35:37.0163 0x19a0 [ 3C15A5AC47B1CA4D9A9F8680E224996F, F95EC4E4E5FDFF1D68179205430AAD01A0124DBD682FAFF6270B99B4AACC793F ] WSDScan C:\WINDOWS\system32\DRIVERS\WSDScan.sys
17:35:37.0183 0x19a0 WSDScan - ok
17:35:37.0187 0x19a0 WSearch - ok
17:35:37.0195 0x19a0 wuauserv - ok
17:35:37.0203 0x19a0 [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
17:35:37.0227 0x19a0 WudfPf - ok
17:35:37.0239 0x19a0 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
17:35:37.0263 0x19a0 WUDFRd - ok
17:35:37.0275 0x19a0 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
17:35:37.0299 0x19a0 WUDFWpdFs - ok
17:35:37.0307 0x19a0 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdMtp C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
17:35:37.0335 0x19a0 WUDFWpdMtp - ok
17:35:37.0375 0x19a0 [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
17:35:37.0447 0x19a0 WwanSvc - ok
17:35:37.0447 0x19a0 [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm C:\WINDOWS\system32\xbgmsvc.exe
17:35:37.0463 0x19a0 xbgm - ok
17:35:37.0494 0x19a0 [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
17:35:37.0572 0x19a0 XblAuthManager - ok
17:35:37.0616 0x19a0 [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
17:35:37.0688 0x19a0 XblGameSave - ok
17:35:37.0700 0x19a0 [ 0AA38B54EB292CB3EB13FFF948473DBA, C5256ABC0A4A2117EC6F1C88B5BFDBECAE673AD47639A274BFFF92A46452E9B0 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
17:35:37.0724 0x19a0 xboxgip - ok
17:35:37.0728 0x19a0 [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll
17:35:37.0752 0x19a0 XboxGipSvc - ok
17:35:37.0780 0x19a0 [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
17:35:37.0869 0x19a0 XboxNetApiSvc - ok
17:35:37.0877 0x19a0 [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
17:35:37.0897 0x19a0 xinputhid - ok
17:35:37.0901 0x19a0 ================ Scan global ===============================
17:35:37.0921 0x19a0 [ Global ] - ok
17:35:37.0925 0x19a0 ================ Scan MBR ==================================
17:35:37.0925 0x19a0 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
17:35:37.0949 0x19a0 \Device\Harddisk0\DR0 - ok
17:35:37.0953 0x19a0 ================ Scan VBR ==================================
17:35:37.0953 0x19a0 [ 0F21B2807D2AB79F68A85B1169149D47 ] \Device\Harddisk0\DR0\Partition1
17:35:37.0953 0x19a0 \Device\Harddisk0\DR0\Partition1 - ok
17:35:37.0957 0x19a0 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition2
17:35:37.0957 0x19a0 \Device\Harddisk0\DR0\Partition2 - ok
17:35:37.0965 0x19a0 [ 5CFF07A7795CB27CD9B9A4241B6EA0CD ] \Device\Harddisk0\DR0\Partition3
17:35:37.0969 0x19a0 \Device\Harddisk0\DR0\Partition3 - ok
17:35:37.0973 0x19a0 [ A7D8F3E26E4D2E157252C0BB3767225A ] \Device\Harddisk0\DR0\Partition4
17:35:37.0973 0x19a0 \Device\Harddisk0\DR0\Partition4 - ok
17:35:37.0977 0x19a0 ================ Scan generic autorun ======================
17:35:37.0993 0x19a0 [ 4B2F964B945D3D00B9A09D2154D676EF, E522C2EB473D193D3525A393D52347B411A5540F5E8F5586FB419D0D0230BE39 ] C:\Program Files\Windows Defender\MSASCuiL.exe
17:35:38.0037 0x19a0 SecurityHealth - ok
17:35:38.0338 0x19a0 [ BF225BCD0EC2D85719C382019B5B4250, 7FE5A85209BD930FC1622600AB74E59854488986AA052A0D03D5FC7B361F247D ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
17:35:38.0772 0x19a0 RTHDVCPL - ok
17:35:38.0797 0x19a0 [ 27B736DF17A786B222F4E8B149AE9B64, D00800CD7DEB98AD61A58D43093551552F1CD0C46EA9E38E638211EC60C662FB ] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
17:35:38.0812 0x19a0 IJNetworkScannerSelectorEX - ok
17:35:39.0206 0x19a0 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
17:35:39.0675 0x19a0 OneDriveSetup - ok
17:35:39.0697 0x19a0 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
17:35:39.0737 0x19a0 WAB Migrate - ok
17:35:40.0237 0x19a0 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
17:35:40.0789 0x19a0 OneDriveSetup - ok
17:35:40.0820 0x19a0 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
17:35:40.0881 0x19a0 WAB Migrate - ok
17:35:40.0949 0x19a0 [ A9620DF3B8AE68B0DD2881BF1805B86B, 1895C0A5B049CC2C9C9AC92AF103E1703379AD84766352E83F98A088B5A6612E ] C:\Users\evata\AppData\Local\Microsoft\OneDrive\OneDrive.exe
17:35:41.0037 0x19a0 OneDrive - ok
17:35:41.0057 0x19a0 [ 7B105818F69873A6F978E83B01586C21, 5613EB3F9BB98769B2077E56D0481318EFED91CCD6D67E9C6DB864BBA74B89A7 ] C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-launcher.exe
17:35:41.0085 0x19a0 VPN Unlimited - ok
17:35:41.0085 0x19a0 Waiting for KSN requests completion. In queue: 265
17:35:42.0152 0x19a0 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.13.17134.1 ), 0x60100 ( disabled : updated )
17:35:42.0168 0x19a0 Win FW state via NFP2: enabled ( trusted )
17:35:42.0955 0x19a0 ============================================================
17:35:42.0955 0x19a0 Scan finished
17:35:42.0955 0x19a0 ============================================================
17:35:42.0967 0x1f00 Detected object count: 0
17:35:42.0967 0x1f00 Actual detected object count: 0 |