ts_spatzl | 21.06.2018 15:46 | No threats found Code:
16:41:27.0037 0x26d0 TDSS rootkit removing tool 3.1.0.17 Apr 20 2018 12:12:17
16:41:27.0037 0x26d0 UEFI system
16:41:33.0272 0x26d0 ============================================================
16:41:33.0272 0x26d0 Current date / time: 2018/06/21 16:41:33.0272
16:41:33.0272 0x26d0 SystemInfo:
16:41:33.0272 0x26d0
16:41:33.0272 0x26d0 OS Version: 10.0.17134 ServicePack: 0.0
16:41:33.0272 0x26d0 Product type: Workstation
16:41:33.0272 0x26d0 ComputerName: SPATZL02
16:41:33.0272 0x26d0 UserName: Spatzl
16:41:33.0272 0x26d0 Windows directory: C:\WINDOWS
16:41:33.0272 0x26d0 System windows directory: C:\WINDOWS
16:41:33.0272 0x26d0 Running under WOW64
16:41:33.0272 0x26d0 Processor architecture: Intel x64
16:41:33.0272 0x26d0 Number of processors: 8
16:41:33.0272 0x26d0 Page size: 0x1000
16:41:33.0272 0x26d0 Boot type: Normal boot
16:41:33.0272 0x26d0 CodeIntegrityOptions = 0x00000001
16:41:33.0272 0x26d0 ============================================================
16:41:33.0616 0x26d0 KLMD registered as C:\WINDOWS\system32\drivers\45455200.sys
16:41:33.0616 0x26d0 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 17134.1, osProperties = 0x19
16:41:33.0834 0x26d0 System UUID: {5C589E6E-B44C-FBBA-9287-5FE1FDC3F316}
16:41:34.0397 0x26d0 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:41:34.0412 0x26d0 ============================================================
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0:
16:41:34.0412 0x26d0 GPT partitions:
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {E7E45D7A-4657-41E8-A4A4-BA88B3D746AF}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1FF800
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {C94AD492-E155-4B66-A8A8-3E16E5248353}, Name: EFI system partition, StartLBA 0x200000, BlocksNum 0xB4000
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {B4B19DF2-6E3B-4946-A46C-0C5DA16C39E2}, Name: Microsoft reserved partition, StartLBA 0x2B4000, BlocksNum 0x40000
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {28FC3B90-6DDB-4AAA-B0E7-945D4CD05823}, Name: Basic data partition, StartLBA 0x2F4000, BlocksNum 0x72C58000
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {F0136B62-6D75-43F4-9B5D-1F561BC873F4}, Name: , StartLBA 0x72F4C000, BlocksNum 0xE1800
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {879A19A9-8B24-4D22-8DD2-691927585879}, Name: , StartLBA 0x7302D800, BlocksNum 0xE1000
16:41:34.0412 0x26d0 \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {A8B37E19-9A91-4C9B-8EF3-0A0FB6C6F92C}, Name: Basic data partition, StartLBA 0x7310E800, BlocksNum 0x15F8000
16:41:34.0412 0x26d0 MBR partitions:
16:41:34.0412 0x26d0 ============================================================
16:41:34.0412 0x26d0 C: <-> \Device\Harddisk0\DR0\Partition4
16:41:34.0459 0x26d0 D: <-> \Device\Harddisk0\DR0\Partition7
16:41:34.0459 0x26d0 ============================================================
16:41:34.0459 0x26d0 Initialize success
16:41:34.0459 0x26d0 ============================================================
16:43:52.0390 0x0c78 ============================================================
16:43:52.0390 0x0c78 Scan started
16:43:52.0390 0x0c78 Mode: Manual; SigCheck; TDLFS;
16:43:52.0390 0x0c78 ============================================================
16:43:52.0390 0x0c78 KSN ping started
16:43:52.0437 0x0c78 KSN ping finished: true
16:43:54.0235 0x0c78 ================ Scan system memory ========================
16:43:54.0235 0x0c78 System memory - ok
16:43:54.0235 0x0c78 ================ Scan services =============================
16:43:54.0469 0x0c78 1394ohci - ok
16:43:54.0469 0x0c78 3ware - ok
16:43:54.0469 0x0c78 ACPI - ok
16:43:54.0469 0x0c78 AcpiDev - ok
16:43:54.0485 0x0c78 acpiex - ok
16:43:54.0485 0x0c78 acpipagr - ok
16:43:54.0532 0x0c78 [ 6AFFD57803BBB6FBCB483F983900A5C4, A3A87984E70C8B47F919D2633E6378F3AACCBF3E74DB3B35BB2E15D036DB36E2 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
16:43:54.0610 0x0c78 AcpiPmi - ok
16:43:54.0625 0x0c78 acpitime - ok
16:43:54.0719 0x0c78 [ CA805DA983594B01F3554464B2E5158F, AC311C5D59AA1FA2B1B3CDB9CCEABEC85878BF6CA6106253186909AA9EB3C1BA ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:43:54.0750 0x0c78 AdobeARMservice - ok
16:43:54.0875 0x0c78 [ ACD04A8C728DF3EF24079FBC8376DB5C, FA0A26E42F0B2CBBE998CE6FC15F94D6EFE3C9DBABB97DD61294C3FB2C1C5F77 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:43:54.0891 0x0c78 AdobeFlashPlayerUpdateSvc - ok
16:43:54.0938 0x0c78 ADP80XX - ok
16:43:54.0938 0x0c78 AFD - ok
16:43:54.0969 0x0c78 [ F267095A11A461BEF39FB180750BE801, CF90798C46892FF5225155D2C7BCC469A4A631E22919CBEDA2F4FEEF4F05E301 ] afunix C:\WINDOWS\system32\drivers\afunix.sys
16:43:55.0016 0x0c78 afunix - ok
16:43:55.0063 0x0c78 [ 0CD0F0C62414217DE9EA7EC8D425277E, FD211157B85B841D0C94B36776572FADC7425F1B0B49EACC910D3E175208A7EC ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
16:43:55.0078 0x0c78 ahcache - ok
16:43:55.0141 0x0c78 [ 2BF4DA8EC5F1A0D88D2DDE1E6821076B, B9F4D499DB4CB91576ACE4847B96F2FC770B9BCC223B5E2261B2DEC22D7651E7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll
16:43:55.0172 0x0c78 AJRouter - ok
16:43:55.0203 0x0c78 [ 9E9D78D1C179EB2E3E2282A1DC409D93, EA7486B4425A87FDDD60542AAF0812A8DB868F569886B894883702B362A05D2C ] ALG C:\WINDOWS\System32\alg.exe
16:43:55.0219 0x0c78 ALG - ok
16:43:55.0266 0x0c78 [ FFA3C9C95FF0486529B644ADC8E720DB, 3C07DF55EE04AC595306BD7327C8F5CA4223E66F28E549EBC4DC7A92ACF200E7 ] AMD External Events Utility C:\WINDOWS\system32\atiesrxx.exe
16:43:55.0282 0x0c78 AMD External Events Utility - ok
16:43:55.0297 0x0c78 AmdK8 - ok
16:43:55.0313 0x0c78 amdkmdag - ok
16:43:55.0375 0x0c78 [ 59A5795A131800D30E8F682099EBEEF5, 85C8DE3B781C7B8E0EE305B8F89E84D9BD9960C482F5CD6019CCC6FA49E43CC6 ] amdkmdap C:\WINDOWS\system32\DRIVERS\atikmpag.sys
16:43:55.0407 0x0c78 amdkmdap - ok
16:43:55.0438 0x0c78 AmdPPM - ok
16:43:55.0453 0x0c78 amdsata - ok
16:43:55.0469 0x0c78 amdsbs - ok
16:43:55.0469 0x0c78 amdxata - ok
16:43:55.0547 0x0c78 [ 2CCB04097E143C7F82333863343C838C, E6A79EDDF03317BEF9B25C9FA658DF6A588DC06A9AF66338ADE31D5D29E4FB3C ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll
16:43:55.0579 0x0c78 AppHostSvc - ok
16:43:55.0641 0x0c78 [ E4A18157BF5D8D714C05169A8A8D604C, 45D8CB25A9967D634F8331070BDFB3DF4ACB6295CF1520F9AAE8753D3BF4018A ] AppID C:\WINDOWS\system32\drivers\appid.sys
16:43:55.0672 0x0c78 AppID - ok
16:43:55.0735 0x0c78 [ F1A04835C7FA75C8215961C1095D5EBF, 45D153404E601C0CE247058B78F328DD9F7F4F6A9480132F7CE6D9A7092F63CF ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
16:43:55.0766 0x0c78 AppIDSvc - ok
16:43:55.0813 0x0c78 [ 48EA4B4CCC920D130529A1EF85388B6A, 31F69543682E70DF0A6B2A70FC7553ECEE643C554E7F8FF18A2DD09359360F8E ] Appinfo C:\WINDOWS\System32\appinfo.dll
16:43:55.0844 0x0c78 Appinfo - ok
16:43:55.0891 0x0c78 [ 769316CA5884FBBD02D45C28FE105922, 117168BFB2D8DBF1258EBA53DCE09E74000B35B7B7460251B4C46BDB9CEA709A ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys
16:43:55.0938 0x0c78 applockerfltr - ok
16:43:55.0969 0x0c78 AppReadiness - ok
16:43:55.0969 0x0c78 AppXSvc - ok
16:43:55.0969 0x0c78 arcsas - ok
16:43:56.0126 0x0c78 [ 9EDC7F9BB19D3F12EB05437BD5687C8A, 182772D576C3C8A9CFDADE7F75A14DD0639C0DF5C3C345F158C2DE51708A2F76 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
16:43:56.0157 0x0c78 aspnet_state - ok
16:43:56.0188 0x0c78 AsyncMac - ok
16:43:56.0188 0x0c78 atapi - ok
16:43:56.0219 0x0c78 [ 0966FD5BAB1F9BE200875E9EED0A0A13, F4BE70C0581B51ED6DAE6412A5FF74AE310BF88DE89C5A5E5880BEED543B01D7 ] AtiHDAudioService C:\WINDOWS\system32\drivers\AtihdWT6.sys
16:43:56.0251 0x0c78 AtiHDAudioService - ok
16:43:56.0282 0x0c78 AudioEndpointBuilder - ok
16:43:56.0298 0x0c78 Audiosrv - ok
16:43:56.0313 0x0c78 [ D7BFD86F7A9ABE39351199869D093110, 90BB2C0A8185D3982FEFAC7C1E18783AF949EBECA3B9E44DCF89E2FD5FD6AA0C ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
16:43:56.0344 0x0c78 AxInstSV - ok
16:43:56.0360 0x0c78 b06bdrv - ok
16:43:56.0391 0x0c78 [ 982FAA5686F67BFEF3E6094705C2621F, 02456312B0FD0ABE7B7EEC0FB385268AF34DDB5F13AF934F96FCA7C32EA51447 ] bam C:\WINDOWS\system32\drivers\bam.sys
16:43:56.0407 0x0c78 bam - ok
16:43:56.0407 0x0c78 BasicDisplay - ok
16:43:56.0407 0x0c78 BasicRender - ok
16:43:56.0438 0x0c78 BcastDVRUserService - ok
16:43:56.0485 0x0c78 bcmfn2 - ok
16:43:56.0548 0x0c78 [ 255D1EA1F4EDA1B7B28A88581F12A1CE, 5B2D7F2EFA7BB539719890CF2E45568C544DD0EECEC44BBA56CCECB792E8BC44 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
16:43:56.0579 0x0c78 BDESVC - ok
16:43:56.0610 0x0c78 [ 9B068DF7B7B3DDF768D06DFD69B49FD0, DC2CD3A70506AEB1BCEB207A9B06657806E72C5432FA605FF9C6F11516F38132 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:43:56.0626 0x0c78 Beep - ok
16:43:56.0657 0x0c78 BFE - ok
16:43:56.0688 0x0c78 [ BC1E5F20251E0AFDB955E7D91093B619, 5642E6B6CA6DBC8585834790A70CFF54252A631A9EA06D28F28EF7430FA42BE5 ] bindflt C:\WINDOWS\system32\drivers\bindflt.sys
16:43:56.0720 0x0c78 bindflt - ok
16:43:56.0813 0x0c78 [ 97F4C0B9741E06BAC6AD2D93ABCEAED8, 25FD58F4BA2F8EC99241A580352D1EC49924829C61D89353B30CCEEE2CEBADE7 ] BITS C:\WINDOWS\System32\qmgr.dll
16:43:56.0860 0x0c78 BITS - ok
16:43:56.0938 0x0c78 [ 30D75769E23CCFBE13DB41FC54243BB1, 4ED018F1DB103D3F354D8EF7DFE797028DBDF22294D355F6D38DF9C6AF61B69E ] BluetoothUserService C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll
16:43:56.0985 0x0c78 BluetoothUserService - ok
16:43:57.0001 0x0c78 bowser - ok
16:43:57.0032 0x0c78 BrokerInfrastructure - ok
16:43:57.0063 0x0c78 [ 3E4BF0145201239E0BBD0A937431C14C, 1DDC27C89B16ADD9346EB30AA9E17330FE0181BE96DC6F06C455493FBDCB1113 ] Browser C:\WINDOWS\System32\browser.dll
16:43:57.0079 0x0c78 Browser - ok
16:43:57.0110 0x0c78 [ 85F5808D19879E1803E46405090F29C8, E22E73BCE3B76BFBAC712DF1E5D7D38E189B80D1CE6E9A9AB3C94733CF18F04B ] BTAGService C:\WINDOWS\System32\BTAGService.dll
16:43:57.0141 0x0c78 BTAGService - ok
16:43:57.0173 0x0c78 [ 063E91CD2CB1C372459FD6FBC02509E7, 29319290F73D8D87323584D938FBC86400AB37455E7E058A543A77F9BBF4579D ] BthAvctpSvc C:\WINDOWS\System32\BthAvctpSvc.dll
16:43:57.0204 0x0c78 BthAvctpSvc - ok
16:43:57.0251 0x0c78 [ 02FEC31842DD153D966AC227B6DDF8BB, 90EEEA049212E5FE8EFA2ACED45DFB6ABAFEA6D40FB4E1E2681F65A417237163 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
16:43:57.0266 0x0c78 BthHFEnum - ok
16:43:57.0329 0x0c78 [ A0EC1D5C937995A2C5F1179538A8A6B4, CBFBDF2D8305BD72FFF64AAAB31EB5D5B8ADE537C35AC63DC3F6ADCBF96B3659 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
16:43:57.0360 0x0c78 BTHMODEM - ok
16:43:57.0376 0x0c78 [ 1EB49C9E2716D4924460B2FAA295E313, B96D39479BFD2ABCD3A3BB8897EAD7C5A03DFFD7266E82A1FBA0E7FEAF73E4B8 ] bthserv C:\WINDOWS\system32\bthserv.dll
16:43:57.0407 0x0c78 bthserv - ok
16:43:57.0423 0x0c78 bttflt - ok
16:43:57.0423 0x0c78 buttonconverter - ok
16:43:57.0470 0x0c78 [ 9983FF8D9834F2E67787F4BDC42A8E36, 85260F4A657D657ACD394339DFDDE814AD6BCA65712EAD943833BE7AB0937C8D ] CAD C:\WINDOWS\System32\drivers\CAD.sys
16:43:57.0485 0x0c78 CAD - ok
16:43:57.0516 0x0c78 camsvc - ok
16:43:57.0532 0x0c78 CapImg - ok
16:43:57.0532 0x0c78 cdfs - ok
16:43:57.0641 0x0c78 [ 0942C87ED45B1E227032AD154105F79B, A0A40589B9C399061C1C46247609CA514DCD21DDF1E7FCEE19F0CE75D0FC7996 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
16:43:57.0688 0x0c78 CDPSvc - ok
16:43:57.0751 0x0c78 [ 9FBF5849A6F51E3B3F8AF2A4171648DA, 7422BC5C87075F5008E6364C8AFAA794AB17CA2DC238DC00F377B942B6FCDC11 ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll
16:43:57.0798 0x0c78 CDPUserSvc - ok
16:43:57.0798 0x0c78 cdrom - ok
16:43:57.0845 0x0c78 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
16:43:57.0891 0x0c78 CertPropSvc - ok
16:43:57.0891 0x0c78 cht4iscsi - ok
16:43:57.0891 0x0c78 cht4vbd - ok
16:43:57.0954 0x0c78 [ 3AA86DA04A561E8162C2DBBF92D12074, 9CB67299BEC25F2B357DDAA5A36B3464193B8BDAB4DCFAE0CD4315911027E409 ] circlass C:\WINDOWS\System32\drivers\circlass.sys
16:43:57.0985 0x0c78 circlass - ok
16:43:58.0032 0x0c78 [ 5619FC2A3AE4F43D4B20D95472ED948E, A5D530FB6AC493FC01489A1D32C311F7D28F0D7B49C950E71F4ADF4FBA302689 ] CldFlt C:\WINDOWS\system32\drivers\cldflt.sys
16:43:58.0063 0x0c78 CldFlt - ok
16:43:58.0095 0x0c78 CLFS - ok
16:43:58.0282 0x0c78 [ 1C0DD335FE0E3AE4A8244EF6D6BD6347, F02C96B811027107F954FC8259319860BD9CD16601A93899A4BD69E77AADC6FA ] ClickToRunSvc C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
16:43:58.0345 0x0c78 ClickToRunSvc - ok
16:43:58.0423 0x0c78 [ 5BD85187D6A6A37D2A4563F33D7A76E4, 6FF434BE93259229E0EA64EC1B6E09B1B814C2A467FC2859B94C79549E2F114C ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
16:43:58.0454 0x0c78 ClipSVC - ok
16:43:58.0485 0x0c78 [ 075CCE75090786F124573A788C8656E6, AA188CFF2F8EE2D9F50701AB2315D24E15D7715FD84F5054D3FC175D4BD35734 ] CLVirtualDrive C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys
16:43:58.0516 0x0c78 CLVirtualDrive - ok
16:43:58.0548 0x0c78 CmBatt - ok
16:43:58.0563 0x0c78 CNG - ok
16:43:58.0595 0x0c78 [ 037DCC7A71938729CB12E8174E03031C, 1BA2F74F639BF8D5BB38AA658A6D847BAE8D85CF72C4AD5F13BBA1D53145789F ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
16:43:58.0610 0x0c78 cnghwassist - ok
16:43:58.0735 0x0c78 [ E40C99A3E0FFF49687F2187BF3E3050D, 30723EC5767C3F6FAA3CF299440B71B5973F890FB54B9737B96FA0359E7D90FA ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys
16:43:58.0766 0x0c78 CompositeBus - ok
16:43:58.0766 0x0c78 COMSysApp - ok
16:43:58.0766 0x0c78 condrv - ok
16:43:58.0798 0x0c78 CoreMessagingRegistrar - ok
16:43:58.0813 0x0c78 CryptSvc - ok
16:43:58.0845 0x0c78 [ 8711386E9B04357F8F58166760759F3A, 8912CFD220645002C9D3F9E49717D8B0B98704380B45F53D45D5674537B496FF ] dam C:\WINDOWS\system32\drivers\dam.sys
16:43:58.0860 0x0c78 dam - ok
16:43:58.0954 0x0c78 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdate C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
16:43:58.0985 0x0c78 dbupdate - ok
16:43:58.0985 0x0c78 [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] dbupdatem C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
16:43:59.0001 0x0c78 dbupdatem - ok
16:43:59.0048 0x0c78 [ E3F625ECEDF4DFB92F1782679492CD40, DFC267899AABBF18C9B0585E160D8BC160A2BAD956BF78CD61491BA40F3F1339 ] DbxSvc C:\WINDOWS\system32\DbxSvc.exe
16:43:59.0063 0x0c78 DbxSvc - ok
16:43:59.0095 0x0c78 DcomLaunch - ok
16:43:59.0141 0x0c78 defragsvc - ok
16:43:59.0188 0x0c78 [ 8DF502E8116C625387DD789936D7A0C2, D42661E068F401199FAEA012C200EEF02C1409A09DACD30E6B08E3FBE4149BFA ] DeviceAssociationService C:\WINDOWS\system32\das.dll
16:43:59.0235 0x0c78 DeviceAssociationService - ok
16:43:59.0251 0x0c78 DeviceInstall - ok
16:43:59.0298 0x0c78 [ 38D6ED38A46F815C24C5656E8A5AB083, 730DD6D85771A60E5C089BF5D810E3AEA335BF7DD14FD72924A1A4FCF021A59D ] DevicePickerUserSvc C:\WINDOWS\System32\Windows.Devices.Picker.dll
16:43:59.0345 0x0c78 DevicePickerUserSvc - ok
16:43:59.0423 0x0c78 [ 372BD821867225F32DE87A6B3FEC8A2E, 20389A1861B5A451EE3383F68FC59B3C9A75D3123B2DF1669CBB5CC37A0128B0 ] DevicesFlowUserSvc C:\WINDOWS\System32\DevicesFlowBroker.dll
16:43:59.0469 0x0c78 DevicesFlowUserSvc - ok
16:43:59.0516 0x0c78 [ C48C4D6B8D9C53F0399DEDA402A6FAE5, 25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
16:43:59.0626 0x0c78 DevQueryBroker - ok
16:43:59.0641 0x0c78 Dfsc - ok
16:43:59.0657 0x0c78 Dhcp - ok
16:43:59.0735 0x0c78 diagnosticshub.standardcollector.service - ok
16:43:59.0751 0x0c78 [ 6EC6BB6EF31C85FD72D14BE4A1BD1B03, E027124AD492ED22F0D604030CB0E2C3778331879FC73A614644FA8C8606ADD3 ] diagsvc C:\WINDOWS\system32\DiagSvc.dll
16:43:59.0782 0x0c78 diagsvc - ok
16:43:59.0798 0x0c78 DiagTrack - ok
16:43:59.0798 0x0c78 Disk - ok
16:43:59.0860 0x0c78 [ 89FC056F9CEFB85FC7159AA063904AFF, 6B6F86F87C48EE92F616D4EEE624C9711D0606FD651F3B1D4DD5EF3767B76750 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
16:43:59.0923 0x0c78 DmEnrollmentSvc - ok
16:43:59.0923 0x0c78 dmvsc - ok
16:43:59.0969 0x0c78 [ 8B3601E34BD1D693598F968D70361C37, 897C5AEB5ED6AC9DAB2E8E638A42FF588AF3A94EE4C731E97DFAB89BD3B658BC ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
16:44:00.0001 0x0c78 dmwappushservice - ok
16:44:00.0032 0x0c78 Dnscache - ok
16:44:00.0063 0x0c78 [ C79E79CD4DE45EC0EC0ECB5C76D6CB11, C1AFCA79A104EDF5C59C3E6A113467C7F73E84AACEDE97A22BCBA5B25563E163 ] dot3svc C:\WINDOWS\System32\dot3svc.dll
16:44:00.0094 0x0c78 dot3svc - ok
16:44:00.0141 0x0c78 [ 5B1EF28DE7302A6BD5DF8459E2C598EF, F2292B8ED8FBFFA681942D5566BF1932D1E9B4F44C2D13329B60E5A8B9386CC9 ] DPS C:\WINDOWS\system32\dps.dll
16:44:00.0188 0x0c78 DPS - ok
16:44:00.0219 0x0c78 drmkaud - ok
16:44:00.0251 0x0c78 [ 5242DC5849014BCFBB3147B76A899783, 759542B42D9DCC224D9CBD19A0C6B8939417F2F08B547BE07FFA3356918C1ED7 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
16:44:00.0282 0x0c78 DsmSvc - ok
16:44:00.0313 0x0c78 DsSvc - ok
16:44:00.0360 0x0c78 [ 974BC06C0EC847EA4DC8D9002D394FEB, 4952FEADD7A3EF541FD537EBBCD56ED573D712755798C42428E78267E50BAB34 ] DusmSvc C:\WINDOWS\System32\dusmsvc.dll
16:44:00.0391 0x0c78 DusmSvc - ok
16:44:00.0423 0x0c78 DXGKrnl - ok
16:44:00.0438 0x0c78 Eaphost - ok
16:44:00.0438 0x0c78 ebdrv - ok
16:44:00.0454 0x0c78 EFS - ok
16:44:00.0454 0x0c78 EhStorClass - ok
16:44:00.0454 0x0c78 EhStorTcgDrv - ok
16:44:00.0485 0x0c78 [ 80D5BD4804C587B21A121566549A63FB, 9BDC1DEB8805E06851F2E2A8B8762265FDC6B12B873D391BFCB8300BDF425B36 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
16:44:00.0532 0x0c78 embeddedmode - ok
16:44:00.0563 0x0c78 [ 8BDB4EB138A93B9C4242D5ADC068899A, 528C0D16CE5D9A69EA75C43DC53D14F7BD2D8BB0B0B0F32BB1F36AC6659C6A27 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
16:44:00.0594 0x0c78 EntAppSvc - ok
16:44:00.0594 0x0c78 ErrDev - ok
16:44:00.0641 0x0c78 [ 1E01F509048BEF78831AC89401B172BD, 34558F56D9AEA8527B84B2BE2A752D181A5D825622EB4B90D454F6D4F971BFED ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae64.sys
16:44:00.0641 0x0c78 ESProtectionDriver - ok
16:44:00.0735 0x0c78 [ 9B538A1E44E1D61FA80E80EA75A085FA, 6431BBC533895BD466879C407B9BE7EB50345D666FEE69CAB0813283F07DBE82 ] EventSystem C:\WINDOWS\system32\es.dll
16:44:00.0766 0x0c78 EventSystem - ok
16:44:00.0798 0x0c78 exfat - ok
16:44:00.0798 0x0c78 fastfat - ok
16:44:00.0844 0x0c78 [ BBD6407DA3DA4FC718710587E253C7BF, 8C9995A86EF9FC1FB47ADA1367A67A9829E0E3CE191D11E0AFB0F85E325D48DC ] Fax C:\WINDOWS\system32\fxssvc.exe
16:44:00.0876 0x0c78 Fax - ok
16:44:00.0891 0x0c78 fdc - ok
16:44:00.0923 0x0c78 [ A2037943CCC079307A383C5543607CEF, 2FAC5F76526A8E4D7D7FAE80F9A0AF31D37DD12FF597769C87912B973C339BF4 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
16:44:00.0954 0x0c78 fdPHost - ok
16:44:01.0001 0x0c78 [ C11A1A9CF331B7AA2F04974EE262EC07, AA1C79FCCDEC3C7236B7BE73E6888D7DD5642EB16E13B4633C98EE34CB72A644 ] FDResPub C:\WINDOWS\system32\fdrespub.dll
16:44:01.0016 0x0c78 FDResPub - ok
16:44:01.0063 0x0c78 [ 71CECDA2DCF81E0AD8C30440C77966E2, E26313CD895579A9F3380A648E6FC271EFED0E82C0FCFB287049C5C2D0CC35A9 ] fhsvc C:\WINDOWS\system32\fhsvc.dll
16:44:01.0079 0x0c78 fhsvc - ok
16:44:01.0141 0x0c78 [ 9BC7FE262AF52B341048234809AA7D91, DF95BBEB59821357C69797AC659380C9F27C11B8A60A599C9A2C5623B7CBB6DB ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
16:44:01.0173 0x0c78 FileCrypt - ok
16:44:01.0173 0x0c78 FileInfo - ok
16:44:01.0173 0x0c78 Filetrace - ok
16:44:01.0188 0x0c78 flpydisk - ok
16:44:01.0188 0x0c78 FltMgr - ok
16:44:01.0204 0x0c78 FontCache - ok
16:44:01.0376 0x0c78 FontCache3.0.0.0 - ok
16:44:01.0391 0x0c78 FrameServer - ok
16:44:01.0407 0x0c78 FsDepends - ok
16:44:01.0423 0x0c78 Fs_Rec - ok
16:44:01.0423 0x0c78 fvevol - ok
16:44:01.0469 0x0c78 [ 71DBED7FB264DB60341BC796EC2E8135, DBD29794A45AEFB16A5765D03962B311CB061D1EB8A281C5F34DABF39C66A3B2 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
16:44:01.0501 0x0c78 gencounter - ok
16:44:01.0501 0x0c78 genericusbfn - ok
16:44:01.0516 0x0c78 GPIOClx0101 - ok
16:44:01.0516 0x0c78 gpsvc - ok
16:44:01.0563 0x0c78 [ 508614CAC7BF8AEE4FB9002A413919B1, F60DE0236B0453FC99473A09A7FAC1140831E581C08F3F5C440F5EFCD30943AB ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
16:44:01.0595 0x0c78 GpuEnergyDrv - ok
16:44:01.0657 0x0c78 [ 248739BB0F3A1156A2C0AF51F39A9EA2, A94C43658BCCC88C2D229F40F5C03CA5839A2EAFD57CA088E3E85EB9264CCA3E ] GraphicsPerfSvc C:\WINDOWS\System32\GraphicsPerfSvc.dll
16:44:01.0688 0x0c78 GraphicsPerfSvc - ok
16:44:01.0829 0x0c78 [ 0545A3EB959CFA4790D267BFB8C1ACA4, 69061E33ACB7587D773D05000390F9101F71DFD6EED7973B551594EAF3F04193 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:44:01.0860 0x0c78 gupdate - ok
16:44:01.0860 0x0c78 [ 0545A3EB959CFA4790D267BFB8C1ACA4, 69061E33ACB7587D773D05000390F9101F71DFD6EED7973B551594EAF3F04193 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:44:01.0876 0x0c78 gupdatem - ok
16:44:01.0923 0x0c78 [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
16:44:01.0954 0x0c78 gusvc - ok
16:44:01.0954 0x0c78 HDAudBus - ok
16:44:01.0969 0x0c78 HidBatt - ok
16:44:02.0032 0x0c78 [ 33346BD26BB0AE4361DF1ED00D2876CF, 1777169606573646F7E7D54E01E421F62479DF57FAE86005B1EEFDC06F4898B7 ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
16:44:02.0063 0x0c78 HidBth - ok
16:44:02.0063 0x0c78 hidi2c - ok
16:44:02.0063 0x0c78 hidinterrupt - ok
16:44:02.0110 0x0c78 [ 1553DF41F4EE4F60B4BEEEC62264BE71, 46AE8357E8038D35ADB82A51ED421293D7AB18C926C713F19149B97400D4C65E ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
16:44:02.0126 0x0c78 HidIr - ok
16:44:02.0157 0x0c78 hidserv - ok
16:44:02.0173 0x0c78 HidUsb - ok
16:44:02.0266 0x0c78 [ E1C037A7E05FD39E6C1AF93CEEFDC53A, D20B056BE5CEB5D471170D6627157D8848376FF319BFE12C7331B0F2C0EBB4A4 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
16:44:02.0282 0x0c78 HP Support Assistant Service - detected UnsignedFile.Multi.Generic ( 1 )
16:44:02.0313 0x0c78 Detect skipped due to KSN trusted
16:44:02.0313 0x0c78 HP Support Assistant Service - ok
16:44:02.0376 0x0c78 [ 9B7EDD3FE7C211C36E921D34D18A3A0A, 03A450F85A042F9668D1560FA2B8B89783568C87CDB1A8685CDA2AC9FE3761C3 ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
16:44:02.0407 0x0c78 hpqwmiex - ok
16:44:02.0423 0x0c78 HpSAMD - ok
16:44:02.0438 0x0c78 HTTP - ok
16:44:02.0485 0x0c78 [ 9E1F3BA540DB9F4942A3F50A92E5754F, 3FF53B60DC52886D6F2EC7F9D8C12009A4BECE5A046D827BC8C941E7401ED000 ] hvcrash C:\WINDOWS\System32\drivers\hvcrash.sys
16:44:02.0501 0x0c78 hvcrash - ok
16:44:02.0548 0x0c78 [ 64A94654E5703D2E8830AA2500D8F0A4, A1E3C910DFF1485E412F01076A11B9441161224C0F08A9067082A9FD8A5D8E5B ] HvHost C:\WINDOWS\System32\hvhostsvc.dll
16:44:02.0579 0x0c78 HvHost - ok
16:44:02.0626 0x0c78 [ 621042C19113527CF8FA89F3454576BF, AB072C44B9BA8CD3AFE0DA33E42A69210AE87F4314FA3A0DF984DDF12516F063 ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys
16:44:02.0657 0x0c78 hvservice - ok
16:44:02.0688 0x0c78 [ B149905CD7451160B6BFA2191A3F6182, A706E4F12963A20F9767D8730973282B5830D97A087ADA8CA9B7D219513C127F ] HwNClx0101 C:\WINDOWS\system32\Drivers\mshwnclx.sys
16:44:02.0704 0x0c78 HwNClx0101 - ok
16:44:02.0735 0x0c78 hwpolicy - ok
16:44:02.0735 0x0c78 hyperkbd - ok
16:44:02.0751 0x0c78 HyperVideo - ok
16:44:02.0751 0x0c78 i8042prt - ok
16:44:02.0751 0x0c78 iagpio - ok
16:44:02.0751 0x0c78 iai2c - ok
16:44:02.0751 0x0c78 iaLPSS2i_GPIO2 - ok
16:44:02.0782 0x0c78 iaLPSS2i_GPIO2_BXT_P - ok
16:44:02.0782 0x0c78 iaLPSS2i_I2C - ok
16:44:02.0782 0x0c78 iaLPSS2i_I2C_BXT_P - ok
16:44:02.0782 0x0c78 iaLPSSi_GPIO - ok
16:44:02.0798 0x0c78 iaLPSSi_I2C - ok
16:44:02.0798 0x0c78 iaStorAVC - ok
16:44:02.0798 0x0c78 iaStorV - ok
16:44:02.0798 0x0c78 ibbus - ok
16:44:02.0813 0x0c78 [ F8CFDD8FED56E1261367A81A731BC1C0, 408187B2E7B403B47AF0D4BF089439D9BA3B3090A430983F77A55DEF2AB381DB ] icssvc C:\WINDOWS\System32\tetheringservice.dll
16:44:02.0860 0x0c78 icssvc - ok
16:44:02.0892 0x0c78 IKEEXT - ok
16:44:02.0923 0x0c78 [ AA38C19A3D65E8228D822EB18037E19D, 54943929E398C67A5A9C72EA65F0FD7A06BB43F03A2291CAEA29443CD10C5169 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys
16:44:02.0970 0x0c78 IndirectKmd - ok
16:44:03.0001 0x0c78 InstallService - ok
16:44:03.0079 0x0c78 [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel(R) Capability Licensing Service Interface c:\Program Files\Intel\iCLS Client\HeciServer.exe
16:44:03.0110 0x0c78 Intel(R) Capability Licensing Service Interface - ok
16:44:03.0157 0x0c78 [ 30E9FAC23E2537D82F2836CB81AEE186, 03E5072D43ECED70EF004D2E6E654B4CCCE059825CC3C641C0534E4C0BC0C7E8 ] Intel(R) ME Service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
16:44:03.0157 0x0c78 Intel(R) ME Service - ok
16:44:03.0189 0x0c78 intelide - ok
16:44:03.0235 0x0c78 [ E6CC7C1E7CEDC81D6B15BF2CF4C99109, 1B181F55CD2E500468FE07C9BA6F20B207FA4B601C4971D1551B80A480D42EBD ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
16:44:03.0267 0x0c78 intelpep - ok
16:44:03.0267 0x0c78 intelppm - ok
16:44:03.0314 0x0c78 [ 917931A6116F03DB3CA56CFCE8634667, 27B661B6143F4AE94BF28DE1133001F95A451C18804F6DFED1D7D1F36B5E5350 ] iorate C:\WINDOWS\system32\drivers\iorate.sys
16:44:03.0345 0x0c78 iorate - ok
16:44:03.0407 0x0c78 [ FB72A49FAD5C343C8C38948F92D87BBF, 3947D9393D6F4F104D2D07D5FBA61041A8D6006BE2497F2A6337462F8B04A124 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
16:44:03.0439 0x0c78 IpFilterDriver - ok
16:44:03.0517 0x0c78 [ 9064A49C03F1CED42EAC2B4636C87192, CF388E05EA782BC0645FD0B42A41C9334C074BE6D7C193FA4F9819905CBCEA9C ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
16:44:03.0548 0x0c78 iphlpsvc - ok
16:44:03.0579 0x0c78 IPMIDRV - ok
16:44:03.0657 0x0c78 [ 7408B83959A4B8271EF67FD06A6B366B, C22DDB76AC3351A50B889AD7D2756EF8612450AC8EE72C88A1044691A0071BE5 ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
16:44:03.0689 0x0c78 IPNAT - ok
16:44:03.0751 0x0c78 [ 7BEA2228C81FB6E1EADDD54D615B4C7E, 8640865C98F951B1B8D99E841D9A3FDC6E0251AFAC6B02F815DC409627A50112 ] IPT C:\WINDOWS\System32\drivers\ipt.sys
16:44:03.0782 0x0c78 IPT - ok
16:44:03.0829 0x0c78 [ AD0574F12AA812340BD39071FD30AD1E, 765F1EDFEDEA1F2728108D7A1187A468F529A883886006F74DB9EAD0BFE7B1B6 ] IpxlatCfgSvc C:\WINDOWS\System32\IpxlatCfg.dll
16:44:03.0860 0x0c78 IpxlatCfgSvc - ok
16:44:03.0876 0x0c78 [ 030AE3773151CFA728C67E38416FAD8D, 167E698035F2F07E822B430B31F02FABF3997BAC93039786747053344CE6E6D3 ] irda C:\WINDOWS\system32\drivers\irda.sys
16:44:03.0892 0x0c78 irda - ok
16:44:03.0923 0x0c78 [ 79D02DC54AB4F85D2C13A728A0E36193, 3B6BA678ED269195D506D29EBD9E070603F02AC0FAA92364E7C553B8856C3EDB ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
16:44:03.0939 0x0c78 IRENUM - ok
16:44:03.0985 0x0c78 [ 6ADE9DCAF71DCD888320CA47DB8B05EF, 6FA1EBB3D025546AAD14D968DF7CABD3002598F2F561CCC1D4F07A9B0322DE02 ] irmon C:\WINDOWS\System32\irmon.dll
16:44:04.0017 0x0c78 irmon - ok
16:44:04.0017 0x0c78 isapnp - ok
16:44:04.0017 0x0c78 iScsiPrt - ok
16:44:04.0017 0x0c78 ItSas35i - ok
16:44:04.0048 0x0c78 [ 3C4002D339491AF73D663FFC7F6E5ECB, 0B53047989BDB781572253BC3AA757912FE54366870C1955E687972CE210C285 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
16:44:04.0064 0x0c78 jhi_service - ok
16:44:04.0064 0x0c78 kbdclass - ok
16:44:04.0064 0x0c78 kbdhid - ok
16:44:04.0064 0x0c78 kdnic - ok
16:44:04.0079 0x0c78 KeyIso - ok
16:44:04.0079 0x0c78 KSecDD - ok
16:44:04.0095 0x0c78 KSecPkg - ok
16:44:04.0110 0x0c78 ksthunk - ok
16:44:04.0126 0x0c78 [ C4151271434A490707B4FD4E6AAE9EED, DDB809D002039645CDED08322B9CDCA04C483A119380098FF9EBA998A1A3811D ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
16:44:04.0142 0x0c78 KtmRm - ok
16:44:04.0173 0x0c78 LanmanServer - ok
16:44:04.0220 0x0c78 LanmanWorkstation - ok
16:44:04.0251 0x0c78 [ C2A49E8EEE7C3D06ECA80847A42F65D5, E1559EF96E6F2146E4AC0BE46CBFF5FA29829812A64A6F09803C00E3E0AAB1F0 ] lfsvc C:\WINDOWS\System32\lfsvc.dll
16:44:04.0282 0x0c78 lfsvc - ok
16:44:04.0329 0x0c78 [ DB8F10ED986BFE0A5B663A1D067F2CCC, 88EE540F545C8838E9F855094A2A4AAC096BD24F77103E06464CCD77C3FCFFFD ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
16:44:04.0345 0x0c78 LicenseManager - ok
16:44:04.0360 0x0c78 [ 3CF979AFF0196DF3DF5E54DFC049EB1F, FEA82EF2AA4222171E80548EB00A4F0FBD27363B84AA9E6B8F82147C568BADEE ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
16:44:04.0376 0x0c78 lltdio - ok
16:44:04.0423 0x0c78 [ D6DD748EAC3BC540CFE65C73FE20C099, 8A79E1F1834D949D027B4D3471297ADFB539B9282DE5DF5FDBE60AE171F3CFFC ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
16:44:04.0454 0x0c78 lltdsvc - ok
16:44:04.0486 0x0c78 lmhosts - ok
16:44:04.0532 0x0c78 [ 4269D44BB47A6DA5D80B11F4C8536458, 7A8FFC8F851DD9E5C43986BE0888831CB71D188138DF3CF7F787DADDA70915B0 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
16:44:04.0548 0x0c78 LMS - ok
16:44:04.0595 0x0c78 LSI_SAS - ok
16:44:04.0595 0x0c78 LSI_SAS2i - ok
16:44:04.0610 0x0c78 LSI_SAS3i - ok
16:44:04.0626 0x0c78 LSI_SSS - ok
16:44:04.0626 0x0c78 LSM - ok
16:44:04.0673 0x0c78 [ E86400D7B6E095E89CF63667D94D3F50, 4E30374B82FB1D8904B9803109C4557C565023FA94C7AE61BB2ADAAACAE0E179 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
16:44:04.0704 0x0c78 luafv - ok
16:44:04.0720 0x0c78 [ 07514F5635999D7DDB5F3A62B5C5AEB3, D3717437D14C36873E2D0C1AA65F29EB9A5DB1DE60A7EE86A093FD126B7EBC05 ] LxpSvc C:\WINDOWS\System32\LanguageOverlayServer.dll
16:44:04.0751 0x0c78 LxpSvc - ok
16:44:04.0829 0x0c78 [ F82AA3376E0B6A256D43C7E342370EDB, C348B52FD76949EBFDD408DFDD87399C0CF1883E9C8B1D92911C82953AC6E2B1 ] MagentaCLOUDMaintenanceService C:\Program Files (x86)\Telekom\MagentaCloud\Updater\MaintenanceService.exe
16:44:04.0860 0x0c78 MagentaCLOUDMaintenanceService - ok
16:44:04.0907 0x0c78 [ 1C1FF36E51F73989FB4DD2DBAFAE11EC, B5C0B169BFEF5FD769745F924B3F30C960A555F8B0C0C7315B273435D9F246D5 ] MapsBroker C:\WINDOWS\System32\moshost.dll
16:44:04.0939 0x0c78 MapsBroker - ok
16:44:04.0939 0x0c78 mausbhost - ok
16:44:04.0954 0x0c78 mausbip - ok
16:44:04.0970 0x0c78 [ 0B4A62420642B842DF8656DBFF663B0C, ACB7961ECA32A50FCBD51B194488DDF40E610C2384EDFD06235AE427BCB80C96 ] MBAMChameleon C:\WINDOWS\System32\Drivers\MbamChameleon.sys
16:44:04.0970 0x0c78 MBAMChameleon - ok
16:44:05.0001 0x0c78 [ 58B7AEBBF191EEE2DBE7E939A56CFBDA, 9C76A1D92AD6C3464AA5FA0CD75F790F7A32801A01EA129C35C62110CFC19591 ] MBAMFarflt C:\WINDOWS\system32\DRIVERS\farflt.sys
16:44:05.0017 0x0c78 MBAMFarflt - ok
16:44:05.0017 0x0c78 [ 0987B4BB03FA1F3C0C7D37347B707D4E, EDEA667695A680B955F42024AD349A9B795A2365C59312EDCC3FE5BF362F59E6 ] MBAMProtection C:\WINDOWS\system32\DRIVERS\mbam.sys
16:44:05.0032 0x0c78 MBAMProtection - ok
16:44:05.0267 0x0c78 [ F7265B7490428499F2FE409FA9247866, 43A406C74689B72020E4669B45F19D377A5FF3EFE79B03AF58C2679D14405E9D ] MBAMService C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
16:44:05.0392 0x0c78 MBAMService - ok
16:44:05.0407 0x0c78 [ 351BF8F77B0A15A7B5A2AE098C52A387, A84330DF5C4F0E5D6251D311B5DC78722D7724E87DAF5DE5A11EB73BB3502E26 ] MBAMSwissArmy C:\WINDOWS\System32\Drivers\mbamswissarmy.sys
16:44:05.0423 0x0c78 MBAMSwissArmy - ok
16:44:05.0454 0x0c78 [ 91716A734D4D015D364ECB551BDAB0F2, C6836E2E7ACADDB7A19707FC87C5CC04B32663D20F841D674CDEDA2E35FC4B2B ] MBAMWebProtection C:\WINDOWS\system32\DRIVERS\mwac.sys
16:44:05.0470 0x0c78 MBAMWebProtection - ok
16:44:05.0501 0x0c78 megasas - ok
16:44:05.0501 0x0c78 megasas2i - ok
16:44:05.0517 0x0c78 megasas35i - ok
16:44:05.0517 0x0c78 megasr - ok
16:44:05.0564 0x0c78 [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] MEIx64 C:\WINDOWS\System32\drivers\HECIx64.sys
16:44:05.0579 0x0c78 MEIx64 - ok
16:44:05.0642 0x0c78 [ 69259AFDF347B5F4AF06E900C4A1F62E, 167FF155F3E1B362A5D5FDB010A5F539F5E13CAD7E64E6F105CC770DA3639EEB ] MessagingService C:\WINDOWS\System32\MessagingService.dll
16:44:05.0673 0x0c78 MessagingService - ok
16:44:05.0689 0x0c78 mlx4_bus - ok
16:44:05.0689 0x0c78 MMCSS - ok
16:44:05.0736 0x0c78 [ CA25F2D78FDD0D36E3F3071B4B317BD4, 21B5902EF802FAFA7DC6FD737CE9888C74526983FDCE31CDFAB11630E1476FD1 ] Modem C:\WINDOWS\system32\drivers\modem.sys
16:44:05.0767 0x0c78 Modem - ok
16:44:05.0829 0x0c78 [ 13142B3B30F633F407D5256B2FFCCEF0, 0A8DD229FD752E8B7E1D11E1A066BCF8B3E2023068AD731FF23ACBF4D182D23D ] monitor C:\WINDOWS\System32\drivers\monitor.sys
16:44:05.0845 0x0c78 monitor - ok
16:44:05.0845 0x0c78 mouclass - ok
16:44:05.0845 0x0c78 mouhid - ok
16:44:05.0845 0x0c78 mountmgr - ok
16:44:05.0876 0x0c78 [ 84F6B333A2AD8B81955F4F846BA89A39, 0457F2110D584BBEE926189126F7BDC54BD2663A7B0BA2EC89DEEC0CCDA9F2DC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:44:05.0892 0x0c78 MozillaMaintenance - ok
16:44:05.0923 0x0c78 mpsdrv - ok
16:44:05.0923 0x0c78 mpssvc - ok
16:44:05.0986 0x0c78 MRxDAV - ok
16:44:06.0001 0x0c78 mrxsmb - ok
16:44:06.0001 0x0c78 mrxsmb10 - ok
16:44:06.0017 0x0c78 mrxsmb20 - ok
16:44:06.0033 0x0c78 [ F14DE177087F9E990EDE95ACE1F94662, E0B8C7DAF8C13CAD08B974D681981038E33ED8871717C550477EDCFD05A3B96D ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
16:44:06.0064 0x0c78 MsBridge - ok
16:44:06.0095 0x0c78 [ 9A94F32C1DC90A7E5A35D0F820A8FB1D, 4CAFCE804D9135BE9CBF80307D570F24E4A102890DAB504E3DEFF3B335C9B80E ] MSDTC C:\WINDOWS\System32\msdtc.exe
16:44:06.0126 0x0c78 MSDTC - ok
16:44:06.0126 0x0c78 Msfs - ok
16:44:06.0189 0x0c78 [ 5A5ABA987943317300A4E55A5C5EB8C4, 9AC863F537BBB2D776C3F240B510DEE94BD84A7675C695D1270770609E77F65B ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
16:44:06.0220 0x0c78 msgpiowin32 - ok
16:44:06.0220 0x0c78 mshidkmdf - ok
16:44:06.0251 0x0c78 [ E12A703CE10B068727499276340D5296, 67F513A83D896DBF014D7446D66F1A1F9F0D03ADB23B57FD1A3CCC880ED50299 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
16:44:06.0283 0x0c78 mshidumdf - ok
16:44:06.0283 0x0c78 msisadrv - ok
16:44:06.0298 0x0c78 MSiSCSI - ok
16:44:06.0298 0x0c78 msiserver - ok
16:44:06.0298 0x0c78 MSKSSRV - ok
16:44:06.0330 0x0c78 [ AECFFBE104D428E8A74BCABF5B3B9912, EA94A7FA1F9BE357311E411293F4D3CC8F80ED1523BFE362DA56A3C2AC65DF58 ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
16:44:06.0361 0x0c78 MsLldp - ok
16:44:06.0361 0x0c78 MSPCLOCK - ok
16:44:06.0361 0x0c78 MSPQM - ok
16:44:06.0392 0x0c78 MsRPC - ok
16:44:06.0392 0x0c78 mssmbios - ok
16:44:06.0392 0x0c78 MSTEE - ok
16:44:06.0392 0x0c78 MTConfig - ok
16:44:06.0408 0x0c78 Mup - ok
16:44:06.0408 0x0c78 mvumis - ok
16:44:06.0423 0x0c78 NativeWifiP - ok
16:44:06.0455 0x0c78 [ B281FAC1C60FE21ED3F635ECF673A981, 6641CCBD38AEF3FA5D9EDD24F01AAB6509AD6D3927371CD7938C04B3BBC92FD1 ] NaturalAuthentication C:\WINDOWS\System32\NaturalAuth.dll
16:44:06.0517 0x0c78 NaturalAuthentication - ok
16:44:06.0533 0x0c78 [ 6FEC83EDC4A3D1E99039CA1D96AD720D, F6DB011FBED10EAF8CCDC9EDDCB47F728B6B17A6A3CA5D6DB5DE50EEFE7DDD4D ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
16:44:06.0548 0x0c78 NcaSvc - ok
16:44:06.0611 0x0c78 [ C3D3E2DFBD52C48EA787604F49060A5C, 0F5E3C9E63F6421398154EF942182FE67CCCCE6DE25B1EE2A30A8E6E3C17145A ] NcbService C:\WINDOWS\System32\ncbservice.dll
16:44:06.0658 0x0c78 NcbService - ok
16:44:06.0720 0x0c78 [ 9AB04C4C14B32D127DB6E7D3DF79FF26, DAC84CBDF605C43657CDA1B95A86DC0D55E236A75BFDA3041472C5D6222EB025 ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
16:44:06.0736 0x0c78 NcdAutoSetup - ok
16:44:06.0783 0x0c78 ndfltr - ok
16:44:06.0783 0x0c78 NDIS - ok
16:44:06.0829 0x0c78 [ AF73B18F3096B165A6F4417C5ED36B01, B0FA9E52D7208F756103E2E853F1D17F594C9FDD2E76304743C581613E612449 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
16:44:06.0861 0x0c78 NdisCap - ok
16:44:06.0892 0x0c78 [ 1A9B1F5B8B131CE461A01C9424E149D7, 66E3F49308DF111B5D5DBF57F11A05E0B9492530587E37C6729C46AED17647D3 ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
16:44:06.0908 0x0c78 NdisImPlatform - ok
16:44:06.0923 0x0c78 NdisTapi - ok
16:44:06.0923 0x0c78 Ndisuio - ok
16:44:06.0923 0x0c78 NdisVirtualBus - ok
16:44:06.0923 0x0c78 NdisWan - ok
16:44:06.0923 0x0c78 ndiswanlegacy - ok
16:44:06.0923 0x0c78 ndproxy - ok
16:44:06.0954 0x0c78 [ 0E3B0F3645D1BAE79397C66FE8AF6402, 6568FD9646FE7C7D61D280C26097583EFA2FB9F59D43340A7283BEAD3A5CC206 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
16:44:06.0970 0x0c78 Ndu - ok
16:44:06.0986 0x0c78 NetAdapterCx - ok
16:44:06.0986 0x0c78 NetBIOS - ok
16:44:06.0986 0x0c78 NetBT - ok
16:44:06.0986 0x0c78 Netlogon - ok
16:44:07.0017 0x0c78 Netman - ok
16:44:07.0064 0x0c78 [ E9931F57F05696CBF53A086449D97BF6, 986C99033AA10A258F0CC42727B14C5812BC76AB535CDF54FCA1B038C4BF9546 ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
16:44:07.0111 0x0c78 netprofm - ok
16:44:07.0142 0x0c78 NetSetupSvc - ok
16:44:07.0236 0x0c78 [ 7EC8B56348F9298BCCA7A745C7F70E2C, F677CBD94ABE25AECF08ECFBBDA063A9C032C678327A0D105CB6B3E587C44C19 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:44:07.0267 0x0c78 NetTcpPortSharing - ok
16:44:07.0314 0x0c78 netvsc - ok
16:44:07.0376 0x0c78 [ 162A571ABAF9546339EE0BB482FF6AE7, E6E590B628AA65D161D7A87C9CF360D905FCC858E73EE1C4723FE217E8A91EA2 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
16:44:07.0423 0x0c78 NgcCtnrSvc - ok
16:44:07.0501 0x0c78 [ DB3589FF79F06EC1967EBA56C7249E3C, C3F1B4687F2AAE869C8566B38DCFE507F8E7201A2241BD5342AAC22A2370D5E4 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
16:44:07.0533 0x0c78 NgcSvc - ok
16:44:07.0564 0x0c78 NlaSvc - ok
16:44:07.0564 0x0c78 Npfs - ok
16:44:07.0564 0x0c78 npsvctrig - ok
16:44:07.0580 0x0c78 nsi - ok
16:44:07.0580 0x0c78 nsiproxy - ok
16:44:07.0595 0x0c78 Ntfs - ok
16:44:07.0595 0x0c78 Null - ok
16:44:07.0595 0x0c78 nvdimm - ok
16:44:07.0611 0x0c78 nvraid - ok
16:44:07.0611 0x0c78 nvstor - ok
16:44:07.0658 0x0c78 [ 9DBC464AB85AA48C9760C6C2E591E2D3, C9D718F8BE838E13F7488F1E8DAA79809340235A5BA5BF206C1C3DBF0A5DDB48 ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
16:44:07.0673 0x0c78 OneSyncSvc - ok
16:44:07.0705 0x0c78 [ BF869F329392C7E76FC959B1206A432F, 909879B7432283C1F6D44843FC5CEB598798EE6560DCD4B4EF8B4935E94FB934 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:44:07.0720 0x0c78 ose - ok
16:44:07.0767 0x0c78 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
16:44:07.0798 0x0c78 p2pimsvc - ok
16:44:07.0830 0x0c78 [ CCD10679BA0D9EF549F80C458C2AD1C4, 7B433FEE4BEA69C28A98F4BFBE5FA603DB2CE1DFCF229EBB4D9B7A0FD159FF04 ] p2psvc C:\WINDOWS\system32\p2psvc.dll
16:44:07.0861 0x0c78 p2psvc - ok
16:44:07.0876 0x0c78 Parport - ok
16:44:07.0876 0x0c78 partmgr - ok
16:44:07.0923 0x0c78 [ 0CF87FC2DA60940031D553F8FDF5066B, 95F8A15210D6F431B84C6E18643F93C9D16F53D3FF4873F9A327A77924B4B9F8 ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
16:44:07.0986 0x0c78 PcaSvc - ok
16:44:07.0986 0x0c78 pci - ok
16:44:07.0986 0x0c78 pciide - ok
16:44:07.0986 0x0c78 pcmcia - ok
16:44:08.0001 0x0c78 pcw - ok
16:44:08.0001 0x0c78 pdc - ok
16:44:08.0079 0x0c78 [ 42B12A76D3C98AE69C97727E3BEC7D8A, C878A05A9817F62514432685FAA795737F628EF7258EC5C7846045E1CAB2DF6E ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
16:44:08.0111 0x0c78 PEAUTH - ok
16:44:08.0111 0x0c78 percsas2i - ok
16:44:08.0126 0x0c78 percsas3i - ok
16:44:08.0251 0x0c78 [ 185100798FBD23C849DC1C00ED43D99D, 10895ADE339744BBABDFB50BE6025217C02C76B1911C2C8740A57912385B38DE ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
16:44:08.0298 0x0c78 PerfHost - ok
16:44:08.0345 0x0c78 PhoneSvc - ok
16:44:08.0376 0x0c78 [ 807ED476A62E79935315342BD3FAA046, FF56FC79C6B6043A10C123CF85A8DDA0B8564E03D49AD5811DDCBB99823C4836 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
16:44:08.0408 0x0c78 PimIndexMaintenanceSvc - ok
16:44:08.0501 0x0c78 [ 4E614DBE28B5857F70DEBCC804629E67, B93C42FB96BBA0577CB892274905352AE4A6DE257F676D6A23CE0297F945D7E7 ] pla C:\WINDOWS\system32\pla.dll
16:44:08.0564 0x0c78 pla - ok
16:44:08.0595 0x0c78 PlugPlay - ok
16:44:08.0611 0x0c78 pmem - ok
16:44:08.0642 0x0c78 [ 99ECEDA6B2E1FDB6892FBD5AED1E5D99, C970DDDBDB4AF8C6A1AA92D780B82920B4922304649509075CF14A2AB86C3CCF ] PNPMEM C:\WINDOWS\System32\drivers\pnpmem.sys
16:44:08.0673 0x0c78 PNPMEM - ok
16:44:08.0736 0x0c78 [ 75690F495CEDBEF3D5989828AEEAE832, 3257E7261DF8F39CA4988BBED3060B9E8A5988978F66A4B1409E08F65B262FED ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
16:44:08.0751 0x0c78 PNRPAutoReg - ok
16:44:08.0798 0x0c78 [ CD5ECD6470B6B235B73569A091150299, FAAE20B0F2F15ADA5B3F5F2BBBFEA000A95EC8A64B37C9364145CE04EE204352 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
16:44:08.0814 0x0c78 PNRPsvc - ok
16:44:08.0830 0x0c78 PolicyAgent - ok
16:44:08.0830 0x0c78 Power - ok
16:44:08.0845 0x0c78 PptpMiniport - ok
16:44:08.0986 0x0c78 [ AD62FCEC1CB8ECD7C0E3DFD2FA79FDE4, 6372FC5E78A2DDB8AE6EB73BEB5C0D4056FB6BE9F231A36BAC37AE970F5EB247 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
16:44:09.0080 0x0c78 PrintNotify - ok
16:44:09.0126 0x0c78 [ A60202AE474E2173ED91118DD73ADAAD, 6AE315E1DD9E3B03E48B8848FCB0CDD506080F0012DE478BA99D102F91E968E6 ] PrintWorkflowUserSvc C:\WINDOWS\System32\PrintWorkflowService.dll
16:44:09.0142 0x0c78 PrintWorkflowUserSvc - ok
16:44:09.0189 0x0c78 Processor - ok
16:44:09.0189 0x0c78 ProfSvc - ok
16:44:09.0220 0x0c78 [ E4BF8BE7B3711BCBBC95EE983C0236F4, A71C09D83034C96F7ED4DB58F7388F8A13C7FD1A3F41FE8EEC553C42B65DFFC6 ] Psched C:\WINDOWS\system32\drivers\pacer.sys
16:44:09.0236 0x0c78 Psched - ok
16:44:09.0298 0x0c78 [ 16783D49B6931414BAD1B2368ADD9656, 596F28B0F1DBC8AC3A43FE00A890AF088CA837DA3BB227411FD76C4D27BF27E9 ] PSI_SVC_2 c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
16:44:09.0330 0x0c78 PSI_SVC_2 - ok
16:44:09.0439 0x0c78 [ 6C112DA6C86DB7FB2C50522EFDDA706A, 46BB9970F3C58E47143C133B34423ABE5D19F2A865280852CE672BF57EC2F98A ] PSI_SVC_2_x64 c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
16:44:09.0486 0x0c78 PSI_SVC_2_x64 - ok
16:44:09.0548 0x0c78 [ 29F12CD3F77B65C7E37F8517395B13D2, 690517756A21B3DE4CF4A027AA712FC62DB6F5F2E89B4D2DE220A29C4A36878B ] PushToInstall C:\WINDOWS\system32\PushToInstall.dll
16:44:09.0580 0x0c78 PushToInstall - ok
16:44:09.0658 0x0c78 [ 8AB5F41584C98047ABEF490FC1E31F7E, F8480F9D9C1A60901975C529CC0911ED592834AB1068FADD88B15E6497A59221 ] QWAVE C:\WINDOWS\system32\qwave.dll
16:44:09.0705 0x0c78 QWAVE - ok
16:44:09.0752 0x0c78 [ 00F72861538B6C4E925A21BAE397A49D, 6847E2332CC8573850428CC7E3A73B2DA0274977F53BDDF7DBA68D223A501CC4 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
16:44:09.0783 0x0c78 QWAVEdrv - ok
16:44:09.0830 0x0c78 Ramdisk - ok
16:44:09.0861 0x0c78 RasAcd - ok
16:44:09.0892 0x0c78 RasAgileVpn - ok
16:44:09.0908 0x0c78 RasAuto - ok
16:44:09.0923 0x0c78 Rasl2tp - ok
16:44:09.0970 0x0c78 RasMan - ok
16:44:09.0970 0x0c78 RasPppoe - ok
16:44:09.0986 0x0c78 RasSstp - ok
16:44:09.0986 0x0c78 rdbss - ok
16:44:10.0048 0x0c78 [ 206AB796793FDBD518B82E2F308A7176, ED0DBDE7106970F217F4FB1FB184B6795A16356C879C17E0910840F64F292809 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
16:44:10.0095 0x0c78 rdpbus - ok
16:44:10.0127 0x0c78 [ 52A6CC99F5934CFAE88353C47B6193E7, 37F6991FA526036866E8CFC938A16750644AD764FA52BB102B11B5D594DB7E96 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
16:44:10.0142 0x0c78 RDPDR - ok
16:44:10.0189 0x0c78 [ 0600DF60EF88FD10663EC84709E5E245, 48572DC0C644E13BD1713E29E522763EB4E00337ACA64D1392960D17EAF8923A ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
16:44:10.0205 0x0c78 RdpVideoMiniport - ok
16:44:10.0267 0x0c78 [ 65652EFAAF4A8A59E60A2D7BE15317E8, 83A9A8506EF4769625EF0EF43B93906A6FBD9133E52C12B17A68B89DAC68D026 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
16:44:10.0283 0x0c78 rdyboost - ok
16:44:10.0298 0x0c78 ReFS - ok
16:44:10.0298 0x0c78 ReFSv1 - ok
16:44:10.0361 0x0c78 [ 980F60634FAF9C58FC468AF9AA609D68, 7BA03FE851F78D5DC9062ACEADF194ACB4F8F56C9D496B17D846CE1E4373B404 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:44:10.0392 0x0c78 RemoteAccess - ok
16:44:10.0455 0x0c78 [ 106E630F1B2A8BF2BBD4508D9B166406, FAFBE21EC61B97B4B825285EBA0F661382A95119E1740EE4FB9A1F6FB3C0F5F7 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:44:10.0517 0x0c78 RemoteRegistry - ok
16:44:10.0548 0x0c78 [ 53BE6D9C36A9CB95A1568C24D44A8A34, DD8245F87B9D4203F56595D6ABF9F1E74EA071D4B7BB0469A293CA9E20BDA246 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
16:44:10.0595 0x0c78 RetailDemo - ok
16:44:10.0627 0x0c78 [ 3D4F4CCE0364CD3F1B539D2630686F24, 620EFC53D6F5279AEF4748FAE22F7239E7855D1F5C79B85F6CB54EF51C516408 ] rhproxy C:\WINDOWS\System32\drivers\rhproxy.sys
16:44:10.0642 0x0c78 rhproxy - ok
16:44:10.0673 0x0c78 [ ADA13EBD9C23C51876A5B2EADF7F2E29, D08E6A907DE5DC6F51CA71CBF7886FE7D8C6FB09154B633D86CDBE9C311361A0 ] RmSvc C:\WINDOWS\System32\RMapi.dll
16:44:10.0705 0x0c78 RmSvc - ok
16:44:10.0720 0x0c78 RpcEptMapper - ok
16:44:10.0736 0x0c78 [ 19EC4D05E01FE350B3494CEA122D64EB, 09FF60A8F22D66796257E33F4CFD6059D4A11A3173A7691718E9FE841E15ABA2 ] RpcLocator C:\WINDOWS\system32\locator.exe
16:44:10.0752 0x0c78 RpcLocator - ok
16:44:10.0767 0x0c78 RpcSs - ok
16:44:10.0798 0x0c78 [ FFFB16EF6E0B8B5F7F19B425923E7D12, 27C2882AC7B27BAC5A4051C2C9326A6D289F297158DE7A3A93E8B09378DC91AA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
16:44:10.0814 0x0c78 rspndr - ok
16:44:10.0892 0x0c78 [ 9A4CB33560A25CF7ACDE1C1E3C7B1A28, A62B6E555CB1D20328608829BEB90E8B882F4380BB65598C255258159A78801F ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys
16:44:10.0923 0x0c78 rt640x64 - ok
16:44:10.0970 0x0c78 [ A2939E69027B97105014434BFBFF7195, 9DC09BE94415564D0E80431223BDA1C59E3555AB5267DD3F64E71D4A18C8553A ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
16:44:10.0986 0x0c78 s3cap - ok
16:44:11.0002 0x0c78 SamSs - ok
16:44:11.0017 0x0c78 sbp2port - ok
16:44:11.0064 0x0c78 [ D48F36EA4B4E8237B24E33B18D76EB2A, 128E754F15FDB00D218FB23431BF0FBDC65D64EEF294D72535B0C07EB5472136 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
16:44:11.0080 0x0c78 SCardSvr - ok
16:44:11.0158 0x0c78 [ 1B1FB3D8403E621F2B9201EF414E21D9, 5EFBEA5DC09CD5F151EF224BE2FF2C985D19301B17E5C16F5D00CB2852DAF8BF ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
16:44:11.0173 0x0c78 ScDeviceEnum - ok
16:44:11.0220 0x0c78 [ 0070C2DC6563C48EDA63A282748F3FCD, 12C8505DDD05994641B2B19666D7A54E12A21F6894913342A9BA5D148F193BE0 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
16:44:11.0252 0x0c78 scfilter - ok
16:44:11.0314 0x0c78 [ 9D13410D7B4D76AA2EA73EC8CA0E0190, 7C46D202683F34F1C07D9D297E9A239376800DC8C84FE1585FE7FC723B6EBBA0 ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:44:11.0345 0x0c78 Schedule - ok
16:44:11.0361 0x0c78 scmbus - ok
16:44:11.0408 0x0c78 [ 620E4F2FDD04FFB70702676423F1C2AC, 25A19FFA966605C229F5BFBCBBBEE36695FC673C7814CF13E79EE4A9B3D8CBE2 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
16:44:11.0455 0x0c78 SCPolicySvc - ok
16:44:11.0486 0x0c78 sdbus - ok
16:44:11.0517 0x0c78 [ 9EF09DE84CE20B787C02395394AC2A7E, 17019B74506D26707EBC342365008A9BB5AACA381FB60ABA85F34D153FB0682C ] SDFRd C:\WINDOWS\System32\drivers\SDFRd.sys
16:44:11.0548 0x0c78 SDFRd - ok
16:44:11.0595 0x0c78 [ 01607A2FAB0068450A06C90AF755D57E, 9615261063475045CBC99F17BD3A4919198D0F77CA9E4EC7B13826E514BC8543 ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
16:44:11.0627 0x0c78 SDRSVC - ok
16:44:11.0658 0x0c78 sdstor - ok
16:44:11.0705 0x0c78 [ 44B1F4F200B4D3AE8B53290101148AFC, 34F18FEDE525BB398371329CA9F93BD3D88C30E23FCA576978D94EC67513228C ] seclogon C:\WINDOWS\system32\seclogon.dll
16:44:11.0752 0x0c78 seclogon - ok
16:44:11.0830 0x0c78 [ 1E8CC4964FEECEE44D720A5130075F79, 75656541633FE90045183C68F4A81F1AA305E4A03CFBF7C50F226F18000924D5 ] SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe
16:44:11.0861 0x0c78 SecurityHealthService - ok
16:44:11.0877 0x0c78 [ 7D7ED932B6417D8687D1D972989B310B, A5DF3B6CEE97DD110FD1BC542CC5A5313B2F447E5FCC40DF6EFB9D7D49CD792C ] SEMgrSvc C:\WINDOWS\system32\SEMgrSvc.dll
16:44:11.0923 0x0c78 SEMgrSvc - ok
16:44:11.0986 0x0c78 [ CA614C9FBC8307AB1DC937F3393899E2, 4833CC631FA30E4D4B45BBC2CE41DE72B332B6A1FFD23B7DBFD6EDD6BC1A2ED8 ] SENS C:\WINDOWS\System32\sens.dll
16:44:12.0017 0x0c78 SENS - ok
16:44:12.0095 0x0c78 [ 46AEFFC68BEAF89805B95CC6F9529C2E, 7A6A38A329E82F684191561479604142BBB35121822A5CDD828819C606F2A60A ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
16:44:12.0142 0x0c78 SensorDataService - ok
16:44:12.0220 0x0c78 [ 2B81117E9C3E20BBAA2CB5467D000F77, AC0DF8E635908026EE43EE0444DEF61481E211737A85A473D64EC8BB214D1135 ] SensorService C:\WINDOWS\system32\SensorService.dll
16:44:12.0267 0x0c78 SensorService - ok
16:44:12.0299 0x0c78 [ DF94FAAEC4CDAA3886A0169E660C984B, 54BB09459D59B5DDA24D72821840FA7A71A194EA464E09DFDE021B24CB27FCAD ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
16:44:12.0330 0x0c78 SensrSvc - ok
16:44:12.0330 0x0c78 SerCx - ok
16:44:12.0330 0x0c78 SerCx2 - ok
16:44:12.0345 0x0c78 Serenum - ok
16:44:12.0345 0x0c78 Serial - ok
16:44:12.0361 0x0c78 sermouse - ok
16:44:12.0392 0x0c78 [ 87340BC77470B34F11A9E558B591DB08, FD91561FE5951B4F59FEE23707E1ACE31293E508EF734A5CDB0F34D332EFDDF7 ] SessionEnv C:\WINDOWS\system32\sessenv.dll
16:44:12.0439 0x0c78 SessionEnv - ok
16:44:12.0439 0x0c78 sfloppy - ok
16:44:12.0502 0x0c78 [ 1941F5CA54C469E16957587FD56ED842, D356547A9702A50AEB5F7765AC44668EEA913563A422ABBD0427EC22833A5B78 ] SgrmAgent C:\WINDOWS\system32\drivers\SgrmAgent.sys
16:44:12.0533 0x0c78 SgrmAgent - ok
16:44:12.0580 0x0c78 [ D3170A3F3A9626597EEE1888686E3EA6, 9321991C441B095DF15D24C8AE58F87EE5A3242532E8C023D0F78B2F96FEE6B7 ] SgrmBroker C:\WINDOWS\system32\SgrmBroker.exe
16:44:12.0611 0x0c78 SgrmBroker - ok
16:44:12.0674 0x0c78 [ AC1D97F89F2EC7E334A406603A686973, D230059C1CB400CCA62438603356F058B40E17DE4C7BD4DADDBB981E4F5E4C9C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:44:12.0736 0x0c78 SharedAccess - ok
16:44:12.0799 0x0c78 [ 0BE15FDA358837ABD88DC72AA75C75CD, 3990FA051E7C280B446C8A749FCEE04E384230CC5E286B4E7080B1737E5730DD ] SharedRealitySvc C:\WINDOWS\System32\SharedRealitySvc.dll
16:44:12.0830 0x0c78 SharedRealitySvc - ok
16:44:12.0892 0x0c78 [ 63B104867F70F0D81125C37989146960, 468431098DD9B91F1C58551CEB4DBE6E1C456FFE845E302571B970EF05AE03A8 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:44:12.0924 0x0c78 ShellHWDetection - ok
16:44:12.0971 0x0c78 [ F6D90D09D2BCFA2B5E492BFECA40EDE4, 7B427335943C1EFDE482D59F3A23149FCD45BB014643BEF620A708720383C4A8 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
16:44:13.0017 0x0c78 shpamsvc - ok
16:44:13.0064 0x0c78 SiSRaid2 - ok
16:44:13.0064 0x0c78 SiSRaid4 - ok
16:44:13.0127 0x0c78 [ B72B80E6FF423C5011E745CB76DA9A08, 18A6B9D46E91AD4D463EB5CB832702392D2E162577F90C328B515FCE69FABD15 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
16:44:13.0158 0x0c78 SkypeUpdate - ok
16:44:13.0189 0x0c78 smphost - ok
16:44:13.0236 0x0c78 [ A3BEF2736E902B9DCA68554F4E10E08C, 5C7590D8F2D637B6D4A5F68945D8350B1C3D48EBE1B2C36658361900C9425611 ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
16:44:13.0267 0x0c78 SmsRouter - ok
16:44:13.0314 0x0c78 [ 577EC13EB5215325E9B9FC51FB56A974, 1D7A0245A3C474BCD4EC69704040FB50C0E086DB1711C5B7FC4D9C4A7909DAB9 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
16:44:13.0346 0x0c78 SNMPTRAP - ok
16:44:13.0346 0x0c78 spaceport - ok
16:44:13.0392 0x0c78 [ FE1776E587227120DC04EAEC45473245, 9DEBD997D275065481EEEDD2310479F2021D53B64AA6D5CEEA70E9BB8C9856C7 ] SpatialGraphFilter C:\WINDOWS\system32\drivers\SpatialGraphFilter.sys
16:44:13.0424 0x0c78 SpatialGraphFilter - ok
16:44:13.0424 0x0c78 SpbCx - ok
16:44:13.0471 0x0c78 spectrum - ok
16:44:13.0517 0x0c78 [ C05A19A38D7D203B738771FD1854656F, 3A832F3CBA33682EAA18ABB721BF2D5A6FE9AC853038C684C264700DEB52AA65 ] Spooler C:\WINDOWS\System32\spoolsv.exe
16:44:13.0549 0x0c78 Spooler - ok
16:44:13.0596 0x0c78 sppsvc - ok
16:44:13.0596 0x0c78 srv - ok
16:44:13.0611 0x0c78 srv2 - ok
16:44:13.0627 0x0c78 srvnet - ok
16:44:13.0705 0x0c78 [ 1AEA66706573E8CCD6038369FE37F237, A62CAFE205D5B4C9F8528EDDA4E20BA4E2D1E231F2B183FE70EFE6458B2D5460 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:44:13.0736 0x0c78 SSDPSRV - ok
16:44:13.0877 0x0c78 [ 5EE518DFADC18573E681BB78833E93FA, E98CCD3E2ADA265D6E3CF48CDBFE5C3067E0546F179F23B77C267F65CEB978EE ] ssh-agent C:\WINDOWS\System32\OpenSSH\ssh-agent.exe
16:44:13.0924 0x0c78 ssh-agent - ok
16:44:13.0955 0x0c78 SstpSvc - ok
16:44:13.0955 0x0c78 StateRepository - ok
16:44:13.0986 0x0c78 stexstor - ok
16:44:14.0049 0x0c78 [ 71CB3BB20F08BB724769DAAAFD5AB26E, FC4B2BD03037EC07F4443BBE13A28859035F7229CA06D4E42AFB42ABF1A89F09 ] STHDA C:\WINDOWS\system32\DRIVERS\stwrt64.sys
16:44:14.0096 0x0c78 STHDA - ok
16:44:14.0174 0x0c78 [ EB2C25A3700309F3F67D9334CF33A36C, 9262778566EEEA810AD32CD660DEA841797BD9F874252CC5445D917FF159280B ] stisvc C:\WINDOWS\System32\wiaservc.dll
16:44:14.0205 0x0c78 stisvc - ok
16:44:14.0205 0x0c78 storahci - ok
16:44:14.0221 0x0c78 storflt - ok
16:44:14.0236 0x0c78 stornvme - ok
16:44:14.0252 0x0c78 storqosflt - ok
16:44:14.0252 0x0c78 StorSvc - ok
16:44:14.0252 0x0c78 storufs - ok
16:44:14.0252 0x0c78 storvsc - ok
16:44:14.0314 0x0c78 svsvc - ok
16:44:14.0392 0x0c78 swenum - ok
16:44:14.0408 0x0c78 swprv - ok
16:44:14.0439 0x0c78 [ A2A42A570524C975259E3B81C4D80DCA, 4B2A6295E46DD2042B3C741D9519A0376687B30711F2DA8B9B81A039E46229F9 ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
16:44:14.0471 0x0c78 Synth3dVsc - ok
16:44:14.0549 0x0c78 [ 62492FAAC26223E8A21E79A2331A3F10, 164C2650EAD344B6DFF95B8275436231E7994B7F06ACB3DA19054849BED61FD2 ] SysMain C:\WINDOWS\system32\sysmain.dll
16:44:14.0580 0x0c78 SysMain - ok
16:44:14.0611 0x0c78 SystemEventsBroker - ok
16:44:14.0658 0x0c78 [ CE9975A9E0DFBEFECECE218D2674C1CD, 20ABA9B78FF40C89A757ED2B4AE2F8BE5F4C6C257AA00A324849D68ACA59A264 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
16:44:14.0689 0x0c78 TabletInputService - ok
16:44:14.0752 0x0c78 [ E38C7C4D57B1438F70A1B913870E8665, EEBE640E31F3D9126FD2F58EB93051FE4EEA591223DFAB9E918DEBE879718B95 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:44:14.0783 0x0c78 TapiSrv - ok
16:44:14.0799 0x0c78 Tcpip - ok
16:44:14.0799 0x0c78 Tcpip6 - ok
16:44:14.0846 0x0c78 [ 085F8A5F09E64CC27309AF160EF4F9BA, DB3DFD3059836A9FB26FE924E9F2B960E454F4B20D8862266DFDA3168D610FD8 ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
16:44:14.0861 0x0c78 tcpipreg - ok
16:44:14.0861 0x0c78 tdx - ok
16:44:14.0908 0x0c78 [ B2C4D7CB291293CAC636748E695D111E, 5E0AA8147EFDA5D21CEE8AE254F74A974B0ADAF298F569CAA73AC4E3B758438A ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
16:44:14.0939 0x0c78 terminpt - ok
16:44:15.0002 0x0c78 [ 10ADC3589E50B1ED8452C86E0CBE8248, BE82341A12EA83D9EFADC9AC35CF16D327F8499C99107DCDE88DD0F5DF84523C ] TermService C:\WINDOWS\System32\termsrv.dll
16:44:15.0049 0x0c78 TermService - ok
16:44:15.0096 0x0c78 [ 1A0A0F6A139148AFDC4622046D4B3CBD, 8FC2FB99B70A3A5B2F1D757A2F0E3085B1D242B792A35070E1DB3871A275329E ] Themes C:\WINDOWS\system32\themeservice.dll
16:44:15.0111 0x0c78 Themes - ok
16:44:15.0158 0x0c78 [ 811910E891A6DB4A864AE119EB71218C, 2CBB6159E2ACAE4BA73892A4F7F8A3981C159083C29F1A1D548C59FB713B9D74 ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
16:44:15.0189 0x0c78 TieringEngineService - ok
16:44:15.0221 0x0c78 [ 42CABD273C7B5BA0DE7904986184856C, C026C4091237833C8B2543BA13C84705C25C7D47B26563E7CDBF6A0A3F7913BE ] tilfilter C:\WINDOWS\System32\drivers\TIxHCIlfilter.sys
16:44:15.0236 0x0c78 tilfilter - ok
16:44:15.0267 0x0c78 TimeBrokerSvc - ok
16:44:15.0299 0x0c78 [ 5B81928B2FA9AEA107EBAD1B4637D919, 659A94C4DB37F6A00C3EE3256A3F636E6E61FF1E5F438FEC1B471262BF38C6A3 ] tiufilter C:\WINDOWS\System32\drivers\TIxHCIufilter.sys
16:44:15.0314 0x0c78 tiufilter - ok
16:44:15.0346 0x0c78 TokenBroker - ok
16:44:15.0361 0x0c78 TPM - ok
16:44:15.0408 0x0c78 [ A5C0F857C38278A90E953A24E1701196, 1A646E47013946CCE41C798A494C6D266AEFC8A8D6EB65CD8848E72106687E38 ] TrkWks C:\WINDOWS\System32\trkwks.dll
16:44:15.0439 0x0c78 TrkWks - ok
16:44:15.0517 0x0c78 TrustedInstaller - ok
16:44:15.0549 0x0c78 [ 0D721F40C179EC5737C15E551F22C69B, BBA04E11C3D9150C60F74D8B1A3F444BDE0C19857BB7C45D58448F641082DE1A ] TsUsbFlt C:\WINDOWS\system32\drivers\tsusbflt.sys
16:44:15.0580 0x0c78 TsUsbFlt - ok
16:44:15.0627 0x0c78 [ DE1296871208D1F13B7AC57C4B1FA46C, D18709F65E372A47AE114ECFD6A45E6736089B4A8E719E2FB5D831D9415E995D ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
16:44:15.0658 0x0c78 TsUsbGD - ok
16:44:15.0689 0x0c78 [ BC938ABBF586272BD4063CA51F09149F, 06EB662948D212ACDF930C3CD01C6381A6FB152AC0F1628C86764F0973ABA1CB ] tunnel C:\WINDOWS\system32\drivers\tunnel.sys
16:44:15.0705 0x0c78 tunnel - ok
16:44:15.0752 0x0c78 [ E94996BB8F323AF02860196C1400AD30, DE605439FC5B59C1064DF05F63C94D7C275482C1C66BEC74FA4A83F61C2051FC ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
16:44:15.0767 0x0c78 tzautoupdate - ok
16:44:15.0783 0x0c78 UASPStor - ok
16:44:15.0799 0x0c78 [ 00C4396DE1CD3502884BB2E2B6D6861C, 39F6BF25096ACE29CAF964DCA15078F47986F645DF49FB502A2CDF2C05C89AAB ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
16:44:15.0814 0x0c78 UcmCx0101 - ok
16:44:15.0861 0x0c78 [ ED9CBD1541C8AFDAA9B8255A384E2B53, D970F5E976CEBE0BCDF07B9E155EDB5B3C225812991779748CD04A9C4852DF3D ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
16:44:15.0892 0x0c78 UcmTcpciCx0101 - ok
16:44:15.0955 0x0c78 [ F58F1BC6A6972437CE18516F8ACCEB9F, 2C619D1E2E80662FA463EE48E3D41C8437A81B0F68EE67A0839A93DEDCD2E0B2 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
16:44:15.0986 0x0c78 UcmUcsi - ok
16:44:16.0017 0x0c78 Ucx01000 - ok
16:44:16.0033 0x0c78 UdeCx - ok
16:44:16.0033 0x0c78 udfs - ok
16:44:16.0033 0x0c78 UEFI - ok
16:44:16.0080 0x0c78 [ 588B9212DEE84F5192C09A147AA5C316, 80C70FD489D72015FCF8AFBE649F6C77F40B613882A1F031A2DAE088B9B4F67B ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
16:44:16.0096 0x0c78 Ufx01000 - ok
16:44:16.0127 0x0c78 UfxChipidea - ok
16:44:16.0142 0x0c78 ufxsynopsys - ok
16:44:16.0142 0x0c78 umbus - ok
16:44:16.0142 0x0c78 UmPass - ok
16:44:16.0189 0x0c78 [ 0D806415E1F86E7C1C192261C247EF0D, 640CB73D9ACC3B6E0F2A2A5A4587375F05A7519081BEC510B926A8A4A496C3B9 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
16:44:16.0205 0x0c78 UmRdpService - ok
16:44:16.0299 0x0c78 [ EAEC69961D9D8B39FEA44D56F7FB259D, 43FEB15A32B353B6F3C8E5F1072FF9507F2FA7799A414F30FEA0B8C47999D969 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
16:44:16.0346 0x0c78 UnistoreSvc - ok
16:44:16.0392 0x0c78 [ DBE2E6388379D5CC78099650541E9566, 1914BC929F109A49FB18ED31F239A9813A010B0A3914BC8CD0D6A94A67A072D7 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
16:44:16.0424 0x0c78 UNS - ok
16:44:16.0486 0x0c78 [ 2362D5C18120FAB9CE5BD1F73EE33758, D9AB5D5BEAF95F62A204CE8A3B8B3B6C9C1E85FB5425CA2AADCBB4770EDCDF30 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:44:16.0517 0x0c78 upnphost - ok
16:44:16.0549 0x0c78 [ 49A5E1B43C59DC0E363AD9C2D7D10BE4, B903C1C24DAF316AF9D8C1770687DE0A24ACDA4EFE47845E13BE99985609B7CE ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
16:44:16.0564 0x0c78 UrsChipidea - ok
16:44:16.0627 0x0c78 [ 53F1DA2D92D1D8CE4BB9D33E58D7DF01, CD3F4B92EDA042FE696C59D67BEB711C7AF0EB5979AD5F4110297C47454EBBFA ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
16:44:16.0643 0x0c78 UrsCx01000 - ok
16:44:16.0689 0x0c78 [ 09518A324B95BBC0B472BD5A472CB916, B3C6BF8C84268C02CC43E5C6B37648F9691B6038D275F4BEBA7B5E9ECA046181 ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
16:44:16.0705 0x0c78 UrsSynopsys - ok
16:44:16.0736 0x0c78 usbccgp - ok
16:44:16.0768 0x0c78 [ 250D21958EE5F45CD13FE6BE3788EE70, C0EF097EE2ED91950BD3A6881AB08698E85C4ABABC4F7520F7E92E70CA454D4E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
16:44:16.0783 0x0c78 usbcir - ok
16:44:16.0814 0x0c78 usbehci - ok
16:44:16.0814 0x0c78 usbhub - ok
16:44:16.0830 0x0c78 USBHUB3 - ok
16:44:16.0830 0x0c78 usbohci - ok
16:44:16.0861 0x0c78 [ 692C0BA4109C8F78392A299369F51129, A675E11CD4794693D0B65A06E85F264199506A4C6EDBB68503163EED389B8D1F ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
16:44:16.0908 0x0c78 usbprint - ok
16:44:16.0955 0x0c78 [ 555DE99E30E6A6EF37137F8325B30068, B78B44883A3E524DFEC13B72AFFDF06FD446EFB12061593D8247C0B92D558B8A ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
16:44:16.0971 0x0c78 usbscan - ok
16:44:16.0986 0x0c78 usbser - ok
16:44:16.0986 0x0c78 USBSTOR - ok
16:44:16.0986 0x0c78 usbuhci - ok
16:44:16.0986 0x0c78 USBXHCI - ok
16:44:17.0096 0x0c78 [ CE0E3BA8FC974BEE5BE20E4F43A1C583, E19DE81559FD92D1F7B0ADB4297926E6971F7FCB642E11758D361FC2A22C33BB ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
16:44:17.0143 0x0c78 UserDataSvc - ok
16:44:17.0190 0x0c78 UserManager - ok
16:44:17.0190 0x0c78 UsoSvc - ok
16:44:17.0221 0x0c78 [ 3E283D06357616CD4117CC15BDB7C4C3, ACE50702EE61C9F93855720037898F19E509D45982F9173643EDA455F54FB9E7 ] VacSvc C:\WINDOWS\System32\vac.dll
16:44:17.0268 0x0c78 VacSvc - ok
16:44:17.0268 0x0c78 VaultSvc - ok
16:44:17.0268 0x0c78 vdrvroot - ok
16:44:17.0268 0x0c78 vds - ok
16:44:17.0283 0x0c78 VerifierExt - ok
16:44:17.0283 0x0c78 vhdmp - ok
16:44:17.0283 0x0c78 vhf - ok
16:44:17.0299 0x0c78 vmbus - ok
16:44:17.0299 0x0c78 VMBusHID - ok
16:44:17.0315 0x0c78 [ C9F69EBA06A703CE726CC6FC0AEFB5E9, 53E441D9D6017CC4BB75F41C6CB9DA79DE500CACBDDE58104D1857A2B749C373 ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys
16:44:17.0330 0x0c78 vmgid - ok
16:44:17.0377 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
16:44:17.0393 0x0c78 vmicguestinterface - ok
16:44:17.0408 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll
16:44:17.0424 0x0c78 vmicheartbeat - ok
16:44:17.0440 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
16:44:17.0471 0x0c78 vmickvpexchange - ok
16:44:17.0518 0x0c78 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll
16:44:17.0549 0x0c78 vmicrdv - ok
16:44:17.0549 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll
16:44:17.0580 0x0c78 vmicshutdown - ok
16:44:17.0580 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmictimesync C:\WINDOWS\System32\icsvc.dll
16:44:17.0612 0x0c78 vmictimesync - ok
16:44:17.0627 0x0c78 [ E4F5E83951810583FE8C2423772171DF, B2C7D44AA3F578C8E5B0A6FD8002BA554BAA4492FDFCFAED9D581C3ACD05D620 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll
16:44:17.0643 0x0c78 vmicvmsession - ok
16:44:17.0658 0x0c78 [ DB7FB1DA7E1564EACBADD436191309C5, B567DFB5828D64A2A199C16538F3557696C3381B858420F23EABC757FDC341C2 ] vmicvss C:\WINDOWS\System32\icsvcext.dll
16:44:17.0674 0x0c78 vmicvss - ok
16:44:17.0674 0x0c78 volmgr - ok
16:44:17.0674 0x0c78 volmgrx - ok
16:44:17.0705 0x0c78 volsnap - ok
16:44:17.0705 0x0c78 volume - ok
16:44:17.0768 0x0c78 [ CB90DACF9194DD9D60A2C1DBFBC1E0D1, BE454495C79857FD8DF4ABAF5BDB7D076467BBC27B31E87FA9D920F2001B670D ] vpci C:\WINDOWS\System32\drivers\vpci.sys
16:44:17.0783 0x0c78 vpci - ok
16:44:17.0799 0x0c78 vsmraid - ok
16:44:17.0799 0x0c78 VSS - ok
16:44:17.0815 0x0c78 VSTXRAID - ok
16:44:17.0815 0x0c78 vwifibus - ok
16:44:17.0815 0x0c78 vwififlt - ok
16:44:17.0830 0x0c78 W32Time - ok
16:44:17.0909 0x0c78 [ 244BA3FE721EAF5377634A4A39EB323D, A009894399149AC3442462DDB44C31E5E7012B43489E8458D48E30485763D0B9 ] w3logsvc C:\WINDOWS\system32\inetsrv\w3logsvc.dll
16:44:17.0940 0x0c78 w3logsvc - ok
16:44:18.0002 0x0c78 [ 1C8447EFBC2B36B1CFE889E519F46A6E, 2601185B01909682FB921400C26BE6391AC93F72E84E70E2F49B4059987E191E ] WaaSMedicSvc C:\WINDOWS\System32\WaaSMedicSvc.dll
16:44:18.0034 0x0c78 WaaSMedicSvc - ok
16:44:18.0065 0x0c78 WacomPen - ok
16:44:18.0096 0x0c78 [ 25FAB8A2CFFA21FDB472AB3AE6C17A57, C97E651111643F32FD5B94BEDA31D62E6FF83CA0644FFE8BA98463EC9EA6EF9B ] WalletService C:\WINDOWS\system32\WalletService.dll
16:44:18.0127 0x0c78 WalletService - ok
16:44:18.0127 0x0c78 wanarp - ok
16:44:18.0127 0x0c78 wanarpv6 - ok
16:44:18.0174 0x0c78 [ 395447583F42FD840520EE87AE439D74, 984AE1EE8BA3B8926C6FC94BC22DE9061C90C15135EA56D0F16C1D3C4EF8DAF8 ] WarpJITSvc C:\WINDOWS\System32\Windows.WARP.JITService.dll
16:44:18.0205 0x0c78 WarpJITSvc - ok
16:44:18.0268 0x0c78 [ 1C62EBBF82DE40E65B1B34D384C96403, 4BF2C51CBDD2E15669ECD6402E9DC243378D989FB0322AA41CC938766BED63FD ] WAS C:\WINDOWS\system32\inetsrv\iisw3adm.dll
16:44:18.0299 0x0c78 WAS - ok
16:44:18.0299 0x0c78 wbengine - ok
16:44:18.0346 0x0c78 WbioSrvc - ok
16:44:18.0377 0x0c78 [ 8A304D6CDC067922448CBA1EBB9FFCA8, DE40DD3A32DFF22C477F38B5E2224D55B8CCF2499EFFE0A8E9923728295BAEC1 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys
16:44:18.0409 0x0c78 wcifs - ok
16:44:18.0440 0x0c78 [ 2BCA9BABB5CEC329E604AE9C1DBA9D5B, 315C72B80A5E6278A725E7BD2DE0C8A2751C2A3F9B4D82F7A034B1ADDE687507 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
16:44:18.0487 0x0c78 Wcmsvc - ok
16:44:18.0518 0x0c78 wcncsvc - ok
16:44:18.0549 0x0c78 [ FCA1B5465213EF4DE373A1F7E76D260E, 2548A9D11027871AD0290FDADF1E42E828E6120ECE925B12BAB3F09E25172489 ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys
16:44:18.0580 0x0c78 wcnfs - ok
16:44:18.0643 0x0c78 [ 9BD1C97BAED4B916C95D4E107B3D9812, 722456319EBA63AC6EB21B6A99F4FC928F58AA972DF227EDF0982BC51F4DE86D ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
16:44:18.0659 0x0c78 WdBoot - ok
16:44:18.0690 0x0c78 Wdf01000 - ok
16:44:18.0721 0x0c78 [ D25D9930BFD78A09B8FD4A7504C6F57A, 9D94BC1368A73B06312ED9016482534EA64F7005C85AAB240ED619FDD19E7F4C ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
16:44:18.0737 0x0c78 WdFilter - ok
16:44:18.0768 0x0c78 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
16:44:18.0799 0x0c78 WdiServiceHost - ok
16:44:18.0799 0x0c78 [ 067D1A81B4708CA97523709FDF57B728, CA331223250B37E7D2D8B04640EDF279F7FD7336017181ECF2D3E4F82E370F97 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
16:44:18.0830 0x0c78 WdiSystemHost - ok
16:44:18.0846 0x0c78 wdiwifi - ok
16:44:18.0955 0x0c78 [ EAF4FB729E94561EE31BDE5BEF869C65, 73290250B565E0A3F453BC45E69FF16A1D964E372A15401A2D3E2CDEB4670B38 ] WdmCompanionFilter C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys
16:44:18.0987 0x0c78 WdmCompanionFilter - ok
16:44:19.0034 0x0c78 [ 54E97FEADEEFF973797EB878DC0D2850, A7ABD9E8B94DA19328BB9BF498D64603C6147BE998C40A6F0F8C2E0716CBFC95 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
16:44:19.0049 0x0c78 WdNisDrv - ok
16:44:19.0096 0x0c78 WdNisSvc - ok
16:44:19.0174 0x0c78 [ BDCC510E85F7AF152E2DFF030A526EA2, 67830B42DE20EBB30DD33093F30FBA166B27D3C1F25B52DABE1BC436671A1882 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:44:19.0205 0x0c78 WebClient - ok
16:44:19.0221 0x0c78 [ 506F0A1CCABF4428733CF854BCBB6832, 859A7E21ABB93A0AD538AAF93D32E31B961EA6012C24567B4C76A9ED8FD4AD46 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
16:44:19.0252 0x0c78 Wecsvc - ok
16:44:19.0299 0x0c78 [ D8D727E8311C86B2A993A9006A453BAC, AD6C93F5ED51C621841DF68A25D5932578FADB83689FB668D056F316A8AA749D ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
16:44:19.0315 0x0c78 WEPHOSTSVC - ok
16:44:19.0377 0x0c78 [ 30B4568D058E17500E7BF88AECEDF3F1, 612597DFAF63E55ACB80789483CBCF0E5AC5FF7607C478C61E5A86D77B169E9E ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
16:44:19.0409 0x0c78 wercplsupport - ok
16:44:19.0440 0x0c78 WerSvc - ok
16:44:19.0502 0x0c78 [ 0427A785512BB39BEA530DC5367A9A03, 8ED29AE0FDB65D4E1D8CD3FA1783D74EF7B01AB30DD1090C917A74AC88FD4C3E ] WFDSConMgrSvc C:\WINDOWS\System32\wfdsconmgrsvc.dll
16:44:19.0549 0x0c78 WFDSConMgrSvc - ok
16:44:19.0565 0x0c78 WFPLWFS - ok
16:44:19.0596 0x0c78 [ 752F5931696914DF2EC0B27275C38458, 83415E7BE50D9548785FBF6550FA679E425B5990F303E2D74513275A5E1DC828 ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
16:44:19.0612 0x0c78 WiaRpc - ok
16:44:19.0643 0x0c78 WIMMount - ok
16:44:19.0643 0x0c78 WinDefend - ok
16:44:19.0690 0x0c78 [ EC7C1A7397988EFAF37BF685CA25525D, 50DA7D63CDE618D6426649AED250CEBE229CBBAC718C4E3CD882D816839B4CE9 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
16:44:19.0721 0x0c78 WindowsTrustedRT - ok
16:44:19.0799 0x0c78 [ 5F0EDDA201630E132C2251BC9DA85023, 842B5CBA8C33616345EDC2F91B560416AAEAAB15A8CE1F36978B251CE4CBDA16 ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
16:44:19.0815 0x0c78 WindowsTrustedRTProxy - ok
16:44:19.0831 0x0c78 WinHttpAutoProxySvc - ok
16:44:19.0862 0x0c78 WinMad - ok
16:44:19.0909 0x0c78 Winmgmt - ok
16:44:19.0971 0x0c78 [ 48194110C410B335AC985D9194275A1C, 1CE64B9DD2DB4CCB3916AA4F4C5F8C71C647ABF7845D284019725761138B8A8B ] WinNat C:\WINDOWS\system32\drivers\winnat.sys
16:44:20.0002 0x0c78 WinNat - ok
16:44:20.0112 0x0c78 [ C57185CC62AA13E4F5A989D904CC9A16, 993F27F710148335C4244AB74D4B1D232DEDB0E3D82E39093A1E422C72283D31 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
16:44:20.0206 0x0c78 WinRM - ok
16:44:20.0237 0x0c78 [ 6FA3D810FE082001B16ADE19829F1E8E, 64B420FC14AB3194D4D2907EA5BE741456928E7E3CB9CBA50FEB8677A43B1971 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
16:44:20.0252 0x0c78 WINUSB - ok
16:44:20.0268 0x0c78 WinVerbs - ok
16:44:20.0284 0x0c78 wisvc - ok
16:44:20.0299 0x0c78 WlanSvc - ok
16:44:20.0346 0x0c78 wlidsvc - ok
16:44:20.0424 0x0c78 [ 59F6A50CD336D0ADD22E3F1FC0D73957, A62469B30325965735FE76AE7D83E5D829AE09D7F0996CC0B42604E68426B088 ] wlpasvc C:\WINDOWS\System32\lpasvc.dll
16:44:20.0487 0x0c78 wlpasvc - ok
16:44:20.0518 0x0c78 WmiAcpi - ok
16:44:20.0518 0x0c78 wmiApSrv - ok
16:44:20.0565 0x0c78 WMPNetworkSvc - ok
16:44:20.0581 0x0c78 [ E122AD60BF4D7E4B28CCBABF33B28C1F, 1ABABE62FCC1B1A837540EE66F3EB0CE062962F05247002D61CFDE6ABB8E7E87 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
16:44:20.0612 0x0c78 Wof - ok
16:44:20.0721 0x0c78 [ 0D3303BDBC591ECF113601D7853A1AA7, 437CF89541696E0B1A8056F4A5189642FC76D762113ED4F71458AF4D72FC3E9A ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
16:44:20.0768 0x0c78 workfolderssvc - ok
16:44:20.0815 0x0c78 WpcMonSvc - ok
16:44:20.0862 0x0c78 [ 25180559693250D7B7FF16A6BE7AC9BE, 1872BC298C3ED6A204B3BA2AB13D08EB9DAE5B30B7F83CA7A67BFDECA8D043AD ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
16:44:20.0909 0x0c78 WPDBusEnum - ok
16:44:20.0909 0x0c78 [ 15C1131EA0216F799C86B03EDAE0BE45, 39F50C084407BC3B498714B74DDA5D63E0539681F324A18ABBED3CD0DE5D52AA ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
16:44:20.0924 0x0c78 WpdUpFltr - ok
16:44:20.0987 0x0c78 [ 096969606BB5C4822AB020081EA07FC5, 522F372834B0497215F45ACBC417DA10DCE45C6D3C7099E47BBA18700C294B22 ] WpnService C:\WINDOWS\system32\WpnService.dll
16:44:21.0034 0x0c78 WpnService - ok
16:44:21.0081 0x0c78 [ 8B694BC50D2D2B98311283CFE5B40EE6, 734F8985CAD99E8635ACF09309D958D2B7FB05C6FF54DBE3623DC071BECE3413 ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll
16:44:21.0128 0x0c78 WpnUserService - ok
16:44:21.0143 0x0c78 ws2ifsl - ok
16:44:21.0190 0x0c78 [ DCB549367EB94CD8AFAA28E3F77F6493, 9FD2C6E03F398E76403502CFC94EB8EBD2F90ED5E95ABA5E86C1B7F63601C43C ] wscsvc C:\WINDOWS\System32\wscsvc.dll
16:44:21.0237 0x0c78 wscsvc - ok
16:44:21.0237 0x0c78 WSearch - ok
16:44:21.0299 0x0c78 wuauserv - ok
16:44:21.0346 0x0c78 [ 813DC18CC654CFB1875074139B0FEFD3, 87901841AFD9224BFEC06A712BE3C2371E16D3571210D4792F91034A2B926A06 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
16:44:21.0378 0x0c78 WudfPf - ok
16:44:21.0440 0x0c78 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
16:44:21.0487 0x0c78 WUDFRd - ok
16:44:21.0487 0x0c78 [ FB64BAD6DEDB27EA39B03685AC0A8EB4, CEDCB71F5FC8BAFF69948960F69A46E3A41CDF81304495AFF41088E5B4E9EB1D ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
16:44:21.0518 0x0c78 WUDFWpdFs - ok
16:44:21.0612 0x0c78 [ FAFE3B08208AA28C82BC42731B4EEBE8, 333D9CBE6B3492BC30A7B64C1F83494B38AD2CE7C832C1D68FEBD2EB8029230D ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
16:44:21.0674 0x0c78 WwanSvc - ok
16:44:21.0721 0x0c78 [ 51D3A1E2285E2E931A553281BBA10E81, 8B371AF5E7717C53780A5C2F68400412C4DB0F01AC6551476FF062B83A7D0AC8 ] xbgm C:\WINDOWS\system32\xbgmsvc.exe
16:44:21.0753 0x0c78 xbgm - ok
16:44:21.0846 0x0c78 [ DB952AD196A9548CF5235A71E5197F3F, 6C51EB14B2808665FCB999F376A97018F6B0A91EE6E63A25C044EA59A5713EE1 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
16:44:21.0893 0x0c78 XblAuthManager - ok
16:44:21.0987 0x0c78 [ 8C0DD7BFFF5A81AEC26AD720057F5451, 4503D4DD540DB9977BBFF3BF7E92BE9778578B769972CF8A54AF0F1FF5C79BF5 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
16:44:22.0034 0x0c78 XblGameSave - ok
16:44:22.0081 0x0c78 [ 0AA38B54EB292CB3EB13FFF948473DBA, C5256ABC0A4A2117EC6F1C88B5BFDBECAE673AD47639A274BFFF92A46452E9B0 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
16:44:22.0112 0x0c78 xboxgip - ok
16:44:22.0143 0x0c78 [ C7FEC5C0377E5598BA919B29731CA45F, C153C62742B6F981905AEF7C464761E5894260F26EE164968B21D93979376378 ] XboxGipSvc C:\WINDOWS\System32\XboxGipSvc.dll
16:44:22.0159 0x0c78 XboxGipSvc - ok
16:44:22.0253 0x0c78 [ 3A94BD93CD2D9C34725D924230B502A5, 87AF2061D348FFFA190D0E50E6860903BED46968CF64B7765D8D80127C702E6A ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
16:44:22.0299 0x0c78 XboxNetApiSvc - ok
16:44:22.0362 0x0c78 [ CE1F78B5C1F14F74242008B2B3153FA2, 682D1F32DD1BBEB031D5129CE40D9C77D3C6CF4FB5979F1918B2482AF617B5BE ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
16:44:22.0409 0x0c78 xinputhid - ok
16:44:22.0409 0x0c78 ================ Scan global ===============================
16:44:22.0471 0x0c78 [ Global ] - ok
16:44:22.0471 0x0c78 ================ Scan MBR ==================================
16:44:22.0487 0x0c78 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
16:44:22.0596 0x0c78 \Device\Harddisk0\DR0 - ok
16:44:22.0596 0x0c78 ================ Scan VBR ==================================
16:44:22.0612 0x0c78 [ CF075EDCEAED24F6F81368C04C5448A6 ] \Device\Harddisk0\DR0\Partition1
16:44:22.0612 0x0c78 \Device\Harddisk0\DR0\Partition1 - ok
16:44:22.0643 0x0c78 [ EBDA3278A032BE3DE6C1C5D4DBB203FD ] \Device\Harddisk0\DR0\Partition2
16:44:22.0643 0x0c78 \Device\Harddisk0\DR0\Partition2 - ok
16:44:22.0643 0x0c78 [ BB3A7A4EB53058BFEF33BF54A612EB8A ] \Device\Harddisk0\DR0\Partition3
16:44:22.0643 0x0c78 \Device\Harddisk0\DR0\Partition3 - ok
16:44:22.0659 0x0c78 [ 96146A680371F2328CF69197771CB4CB ] \Device\Harddisk0\DR0\Partition4
16:44:22.0659 0x0c78 \Device\Harddisk0\DR0\Partition4 - ok
16:44:22.0690 0x0c78 [ 7CE2706EA62AE37A4880D263DBD50219 ] \Device\Harddisk0\DR0\Partition5
16:44:22.0690 0x0c78 \Device\Harddisk0\DR0\Partition5 - ok
16:44:22.0706 0x0c78 [ E582A939B1332883B4BA4AAB5587C5CC ] \Device\Harddisk0\DR0\Partition6
16:44:22.0706 0x0c78 \Device\Harddisk0\DR0\Partition6 - ok
16:44:22.0721 0x0c78 [ 62A6DD28201F01396B038DEE39188148 ] \Device\Harddisk0\DR0\Partition7
16:44:22.0721 0x0c78 \Device\Harddisk0\DR0\Partition7 - ok
16:44:22.0721 0x0c78 ================ Scan generic autorun ======================
16:44:22.0768 0x0c78 SecurityHealth - ok
16:44:22.0846 0x0c78 [ 49BD5663071AA799AC0B1E6B48EB9257, 39364B7E08C87545B4E48264509D73800FE5B0A76E34E0B169DA489895820B22 ] C:\Program Files\IDT\WDM\beats64.exe
16:44:22.0862 0x0c78 BeatsOSDApp - detected UnsignedFile.Multi.Generic ( 1 )
16:44:22.0909 0x0c78 Detect skipped due to KSN trusted
16:44:22.0909 0x0c78 BeatsOSDApp - ok
16:44:22.0956 0x0c78 [ 724CB7A116F7E1A67009D751BCF86586, F0C4BE7451C5573AD584F5EF125C0702841E30D928909B5B3EA702831EF2FD9B ] c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
16:44:22.0987 0x0c78 CLMLServer_For_P2G8 - ok
16:44:23.0018 0x0c78 [ B35B97FC934A9A7D02232094128CD636, 08F9E36F7DB86325986712210DF1B235DAC4F76FB599D2756E863A9FAFEBD57B ] c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe
16:44:23.0034 0x0c78 CLVirtualDrive - ok
16:44:23.0175 0x0c78 [ FF75DE91DBC310D18B02C22A834A7A2C, 3FDB6303A4353A5FD2A2A5FE702B421EE4D2FD881FEEE8D685FEA82E94EB4F4C ] C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
16:44:23.0221 0x0c78 KeePass 2 PreLoad - ok
16:44:23.0300 0x0c78 [ 61E4289E91E88C90478D7F4BEB10DCF7, 1D0F4034E0111CF5758F470C15A22A0A28EB8269CB5BF07222C9C0FB07A15C55 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
16:44:23.0315 0x0c78 APSDaemon - ok
16:44:23.0706 0x0c78 [ 2914E4B7F57CED67427D62CF63F692A4, 67623B2B1184BA10B187BB406B952D68F4FC47742D79ACA58037C20A80AD98F6 ] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
16:44:23.0784 0x0c78 Dropbox - ok
16:44:23.0862 0x0c78 [ 91CF5835978F03999829B99A0CC63EA0, 0327A851C81F0F74E65ECBB1EBB3B8AFF5D59D5B9476F3ADD87E6B1AF4E21636 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
16:44:23.0909 0x0c78 SunJavaUpdateSched - ok
16:44:24.0487 0x0c78 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
16:44:25.0019 0x0c78 OneDriveSetup - ok
16:44:25.0066 0x0c78 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
16:44:25.0097 0x0c78 WAB Migrate - ok
16:44:25.0644 0x0c78 [ 450FDD861FD582026BDCE55FCB2162C4, 91166DBAEE6A0D97ABA5EED352D06078870A265E736ED491C666CB6A8559BEB2 ] C:\Windows\SysWOW64\OneDriveSetup.exe
16:44:26.0191 0x0c78 OneDriveSetup - ok
16:44:26.0254 0x0c78 [ FC7536F076D2F1660AC072E54A86B2F1, B36F3E9976F59EC137F8618C7EDF4ED0B35AC65497CA27D69835048E6E277040 ] C:\Program Files (x86)\Windows Mail\wab.exe
16:44:26.0316 0x0c78 WAB Migrate - ok
16:44:26.0410 0x0c78 Lync - ok
16:44:26.0644 0x0c78 [ 7A5340AA44E31154053BDC33D5CB29B4, 6168F137700CC02689B17A3B955EC815E1CE36445A8F4689CA20FAADCBEF706A ] C:\Users\hphp\AppData\Local\Microsoft\OneDrive\OneDrive.exe
16:44:26.0691 0x0c78 OneDrive - ok
16:44:26.0769 0x0c78 Skype - ok
16:44:26.0926 0x0c78 [ 01B777EC93E3375BBA2AE27BC6A61BEA, B4FB04E81C6306C7D871CB654E90141C4049F274DFE7E86300AC34AAB096F04D ] C:\Users\Spatzl\AppData\Roaming\Spotify\SpotifyWebHelper.exe
16:44:26.0957 0x0c78 Spotify Web Helper - ok
16:44:27.0316 0x0c78 [ 009DCC9D6C5D3A7AE9233D312CC10D2F, 9078B2C0D6860F7A526B2D0DB05D59AD5DF329293CB4C7D0FB78C0431245D653 ] C:\Program Files\CCleaner\CCleaner64.exe
16:44:27.0598 0x0c78 CCleaner Monitoring - ok
16:44:27.0613 0x0c78 Waiting for KSN requests completion. In queue: 264
16:44:28.0691 0x0c78 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.13.17134.1 ), 0x62100 ( disabled : updated )
16:44:28.0691 0x0c78 AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.167 ), 0x61000 ( enabled : updated )
16:44:28.0816 0x0c78 Win FW state via NFP2: enabled ( trusted )
16:44:28.0879 0x0c78 ============================================================
16:44:28.0879 0x0c78 Scan finished
16:44:28.0879 0x0c78 ============================================================
16:44:28.0894 0x1a38 Detected object count: 0
16:44:28.0894 0x1a38 Actual detected object count: 0 |