HijackThis Log Paylaşımı ve Çözümleri

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 00:18:32, on 2.9.2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)

FIREFOX: 31.0 (x86 tr)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\ihsan\Downloads\Programs\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [EmbaWall] C:\Users\ihsan\Documents\Emba Wallpaper Changer\EmbaWall.exe
O4 - HKCU\..\Run: [Advanced SystemCare Ultimate] "C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" /Auto
O8 - Extra context menu item: IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Tüm bağlantıları IDM ile indir - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{875BCEF8-0E4E-413C-8C14-EA5BE3427C87}: NameServer = 156.154.70.22,156.154.71.22
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avira Zamanlayıcı (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Gerçek Zamanlı Koruma (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AdvancedSystemCareAntivirus (ASCAntivirusSrv) - IOBit - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service - Flexera Software LLC - C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
O23 - Service: Google Güncelleme Hizmeti (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Güncelleme Hizmeti (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: JumpStart Push-Button Service (jswpbapi) - Atheros Communications, Inc. - C:\Program Files (x86)\Jumpstart\jswpbapi.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files (x86)\Jumpstart\jswpsapi.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\SCM\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vmms.exe,-10 (vmms) - Unknown owner - C:\WINDOWS\system32\vmms.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11667 bytes

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\syswow64\wwahost.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderB arBHO100.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [EmbaWall] C:\Users\ihsan\Documents\Emba Wallpaper Changer\EmbaWall.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: FlexNet Licensing Service - Flexera Software LLC - C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\SCM\MSIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

[LIST=1]
00:42:16.0478 0x115c  TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58
00:42:16.0479 0x115c  UEFI system
00:42:21.0910 0x115c  ============================================================
00:42:21.0910 0x115c  Current date / time: 2014/09/02 00:42:21.0910
00:42:21.0910 0x115c  SystemInfo:
00:42:21.0911 0x115c  
00:42:21.0911 0x115c  OS Version: 6.3.9600 ServicePack: 0.0
00:42:21.0911 0x115c  Product type: Workstation
00:42:21.0911 0x115c  ComputerName: IHOCAN
00:42:21.0911 0x115c  UserName: ihsan
00:42:21.0911 0x115c  Windows directory: C:\WINDOWS
00:42:21.0911 0x115c  System windows directory: C:\WINDOWS
00:42:21.0912 0x115c  Running under WOW64
00:42:21.0912 0x115c  Processor architecture: Intel x64
00:42:21.0912 0x115c  Number of processors: 8
00:42:21.0912 0x115c  Page size: 0x1000
00:42:21.0912 0x115c  Boot type: Normal boot
00:42:21.0912 0x115c  ============================================================
00:42:22.0521 0x115c  KLMD registered as C:\WINDOWS\system32\drivers\05154765.sys
00:42:23.0269 0x115c  System UUID: {64C0FEBF-DEF5-9388-8907-E3D4CE2E8D5F}
00:42:23.0937 0x115c  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:42:25.0021 0x115c  Drive \Device\Harddisk1\DR1 - Size: 0xEBE00000 ( 3.69 Gb ), SectorSize: 0x200, Cylinders: 0x1E1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
00:42:25.0028 0x115c  ============================================================
00:42:25.0028 0x115c  \Device\Harddisk0\DR0:
00:42:25.0033 0x115c  GPT partitions:
00:42:25.0034 0x115c  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {959999CA-1118-4823-8BA9-908F7065C790}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x96000
00:42:25.0034 0x115c  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {AA851F83-ADEE-4214-8EAA-160688F50A24}, Name: EFI system partition, StartLBA 0x96800, BlocksNum 0x32000
00:42:25.0034 0x115c  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {258840A1-00FF-4A89-A458-F8269941E166}, Name: Microsoft reserved partition, StartLBA 0xC8800, BlocksNum 0x40000
00:42:25.0034 0x115c  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {BE089854-2323-48D0-BF31-207FCE6C8BCD}, Name: Basic data partition, StartLBA 0x108800, BlocksNum 0x3D13A000
00:42:25.0035 0x115c  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {A54544CB-EA44-43DF-854F-E19B9269A93C}, Name: Basic data partition, StartLBA 0x3D242800, BlocksNum 0x374C4000
00:42:25.0035 0x115c  MBR partitions:
00:42:25.0035 0x115c  \Device\Harddisk1\DR1:
00:42:25.0037 0x115c  MBR partitions:
00:42:25.0037 0x115c  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x2000, BlocksNum 0x75D000
00:42:25.0037 0x115c  ============================================================
00:42:25.0052 0x115c  C: <-> \Device\Harddisk0\DR0\Partition4
00:42:25.0094 0x115c  D: <-> \Device\Harddisk0\DR0\Partition5
00:42:25.0095 0x115c  ============================================================
00:42:25.0095 0x115c  Initialize success
00:42:25.0095 0x115c  ============================================================
00:42:28.0231 0x0ac4  ============================================================
00:42:28.0231 0x0ac4  Scan started
00:42:28.0231 0x0ac4  Mode: Manual;
00:42:28.0231 0x0ac4  ============================================================
00:42:28.0231 0x0ac4  KSN ping started
00:42:30.0974 0x0ac4  KSN ping finished: true
00:42:32.0616 0x0ac4  ================ Scan system memory ========================
00:42:32.0616 0x0ac4  System memory - ok
00:42:32.0618 0x0ac4  ================ Scan services =============================
00:42:33.0114 0x0ac4  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
00:42:33.0162 0x0ac4  1394ohci - ok
00:42:33.0234 0x0ac4  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
00:42:33.0250 0x0ac4  3ware - ok
00:42:33.0298 0x0ac4  [ 9539F7917B4B6D92C90F0FAA6B86C605, B4C284E8EECC2E7025053A3320EFDC9F47BCA9828853AD2A805DB826CA4AC27E ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
00:42:33.0307 0x0ac4  ACPI - ok
00:42:33.0327 0x0ac4  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
00:42:33.0328 0x0ac4  acpiex - ok
00:42:33.0372 0x0ac4  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
00:42:33.0389 0x0ac4  acpipagr - ok
00:42:33.0418 0x0ac4  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
00:42:33.0445 0x0ac4  AcpiPmi - ok
00:42:33.0479 0x0ac4  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
00:42:33.0484 0x0ac4  acpitime - ok
00:42:33.0639 0x0ac4  [ F4BF3ADDDDC1AD372604F13C2B0C1F65, FA37ED5014336A72F778C485226B61BEFECEB861AB754862738795C167F0BAB7 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
00:42:33.0645 0x0ac4  AdobeFlashPlayerUpdateSvc - ok
00:42:33.0696 0x0ac4  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX         C:\WINDOWS\system32\drivers\ADP80XX.SYS
00:42:33.0739 0x0ac4  ADP80XX - ok
00:42:33.0787 0x0ac4  [ 0F17D49BE041B7EFF1D33BF1414E7AC6, F8B536B60903814DF88DAF535753288537EF0993E42AA4E734EDA8D68B24C7AB ] AeLookupSvc     C:\WINDOWS\System32\aelupsvc.dll
00:42:33.0796 0x0ac4  AeLookupSvc - ok
00:42:33.0831 0x0ac4  [ 374E27295F0A9DCAA8FC96370F9BEEA5, 51C394E0C2322D7D093941A1B8766171B5D1F47DF2FE0834209492891EA7D999 ] AFD             C:\WINDOWS\system32\drivers\afd.sys
00:42:33.0839 0x0ac4  AFD - ok
00:42:33.0891 0x0ac4  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
00:42:33.0899 0x0ac4  agp440 - ok
00:42:33.0916 0x0ac4  [ 8E8E34B7BA059050EED827410D0697A2, 85B6684709F24729A6497563812A90A54068AC2DD9EEA03037CB1EEF5C85AAA9 ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys
00:42:33.0921 0x0ac4  ahcache - ok
00:42:33.0982 0x0ac4  [ A91D8E1E433EFB32551BCE69037E1CE7, 41DFDD5B56918D19D09DFB3E4B07460AA85647A8647ABBBB906158D8D6653290 ] ALG             C:\WINDOWS\System32\alg.exe
00:42:33.0988 0x0ac4  ALG - ok
00:42:34.0063 0x0ac4  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
00:42:34.0073 0x0ac4  AmdK8 - ok
00:42:34.0118 0x0ac4  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
00:42:34.0126 0x0ac4  AmdPPM - ok
00:42:34.0181 0x0ac4  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
00:42:34.0189 0x0ac4  amdsata - ok
00:42:34.0291 0x0ac4  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
00:42:34.0302 0x0ac4  amdsbs - ok
00:42:34.0380 0x0ac4  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
00:42:34.0386 0x0ac4  amdxata - ok
00:42:34.0389 0x0ac4  AntiLog32 - ok
00:42:35.0571 0x0ac4  [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
00:42:35.0741 0x0ac4  AntiVirSchedulerService - ok
00:42:35.0778 0x0ac4  [ 0327A6CE0934C324E3E82920E9EC0EE4, B4A1E6A77032F7DF97FED3C01E76E2BD3270A3FFC500C7C9A118C0E2EB675D75 ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
00:42:35.0785 0x0ac4  AntiVirService - ok
00:42:35.0811 0x0ac4  [ 04951A9A937CBE28A2D3FEEA360B6D1F, D8AAF000BE4FE4B203DC2EB2A64F780A542E5238CE3F9952FD03277379B11529 ] AppID           C:\WINDOWS\system32\drivers\appid.sys
00:42:35.0818 0x0ac4  AppID - ok
00:42:35.0837 0x0ac4  [ C0DC3F58214A227980AEB091CFD2F973, 0C3E8453C9F65ADA3E74C38C0E3AC3E0CBFD807B827097046265B38839E151E3 ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
00:42:35.0844 0x0ac4  AppIDSvc - ok
00:42:35.0878 0x0ac4  [ 8D6F535461F6CFF75A8ADDF83024C904, F2A97EC4A6284F28B685A3CE2D450F61E75EE8692D718A6AA352D5734BBBAD7B ] Appinfo         C:\WINDOWS\System32\appinfo.dll
00:42:35.0888 0x0ac4  Appinfo - ok
00:42:35.0904 0x0ac4  [ 8176FBA685178FB0F52D46693474FA50, 69FE3692C7FE24289A479ADD74F2C782B59A099B7B07FE5ACFC4DA899E40BFDE ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
00:42:35.0914 0x0ac4  AppMgmt - ok
00:42:35.0960 0x0ac4  [ CB12C47647D8BDAFAA94C0856B14128B, 5590C98095357C92563EF94800107D3611AA6ECA1A70BE463C03B279E618A6C4 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
00:42:35.0987 0x0ac4  AppReadiness - ok
00:42:36.0059 0x0ac4  [ F7529BD3FFAC9C33D15F6DE3B7353B03, 8EF0A84C9687A246B60939A326E498121039E9CC617A7ABBA933EDD327F3467E ] AppXSvc         C:\WINDOWS\system32\appxdeploymentserver.dll
00:42:36.0081 0x0ac4  AppXSvc - ok
00:42:36.0108 0x0ac4  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
00:42:36.0116 0x0ac4  arcsas - ok
00:42:36.0225 0x0ac4  [ AA2E8C6B8D7EA7BAF04C988801927F48, 4B82043F1B9C67CDCDC71102F7AEE05EEA8F9775A5CB33AE80F4DCDB42521C40 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
00:42:36.0237 0x0ac4  aspnet_state - ok
00:42:36.0258 0x0ac4  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
00:42:36.0264 0x0ac4  atapi - ok
00:42:36.0297 0x0ac4  [ 886767FD022213F7885416134E9082E5, E248D82210FBEBF62C23EBEC74A976B2D1A4E62D3B7638D95B2574B77BA05DD0 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
00:42:36.0307 0x0ac4  AudioEndpointBuilder - ok
00:42:36.0367 0x0ac4  [ 79B134ECE836B406B212E28C24011538, 1B875DD23CCAD8A2759DCDBCDCF3DE14231B9DB5EEC8E84FE081E41A52A047A1 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
00:42:36.0395 0x0ac4  Audiosrv - ok
00:42:36.0447 0x0ac4  [ 4663C5AD76FE8E19592DE808156FA07D, 605827B4A9D6930BC752D124BF75D55D4927B0ABEF881CDE66F3C5CC1DB215FE ] avgntflt        C:\WINDOWS\system32\DRIVERS\avgntflt.sys
00:42:36.0472 0x0ac4  avgntflt - ok
00:42:36.0495 0x0ac4  [ 8902AEC2382A37E9E99A4E0D52DBD42B, 138F2D7E7430132B2C527D413BC845CC467F084F39C232EC3A17DD2A74EE401E ] avipbb          C:\WINDOWS\system32\DRIVERS\avipbb.sys
00:42:36.0516 0x0ac4  avipbb - ok
00:42:36.0540 0x0ac4  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\WINDOWS\system32\DRIVERS\avkmgr.sys
00:42:36.0573 0x0ac4  avkmgr - ok
00:42:36.0598 0x0ac4  [ 96E8CAF20FC4B6C31CAD7816A801EB78, E4870DB8FFBDCFEE98449338D0BDBF2DD0B5FEC75514E41C11A882BE6EB16833 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
00:42:36.0784 0x0ac4  AxInstSV - ok
00:42:36.0897 0x0ac4  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
00:42:37.0020 0x0ac4  b06bdrv - ok
00:42:37.0050 0x0ac4  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
00:42:37.0057 0x0ac4  BasicDisplay - ok
00:42:37.0105 0x0ac4  [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
00:42:37.0116 0x0ac4  BasicRender - ok
00:42:37.0135 0x0ac4  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
00:42:37.0140 0x0ac4  bcmfn2 - ok
00:42:37.0184 0x0ac4  [ E07C80468D0C599BFF01D9D4EC7AEDC3, F675F455924DEC3FF69AD816DFEB6E74C804AEC3D3BFF7515953DB9D79C9B2D0 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
00:42:37.0206 0x0ac4  BDESVC - ok
00:42:37.0237 0x0ac4  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
00:42:37.0240 0x0ac4  Beep - ok
00:42:37.0293 0x0ac4  [ 20FB137ADDE1255F15F265A7BD9579BE, 87B4D5C91EFEAD987AAC3491A4360F82824C46AFF958B6F4CAED7C12224EF159 ] BFE             C:\WINDOWS\System32\bfe.dll
00:42:37.0321 0x0ac4  BFE - ok
00:42:37.0403 0x0ac4  [ 15225081966C785A9192782401643FD4, E2BA0C8D044556FDD9DD7A25F7F71553DE7A2924E78F9284413C2AC46F0BF4EB ] BITS            C:\WINDOWS\System32\qmgr.dll
00:42:37.0436 0x0ac4  BITS - ok
00:42:37.0465 0x0ac4  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
00:42:37.0474 0x0ac4  bowser - ok
00:42:37.0520 0x0ac4  [ F2559A492AF8D653D1F47ADABA4C3E97, 77347915FB433023769699DFC9511F54E69C7FC7AB75F57FDC1A58E64A7126DE ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
00:42:37.0534 0x0ac4  BrokerInfrastructure - ok
00:42:37.0570 0x0ac4  [ D528D6A92D187777691993DD757AF19A, 2C79978310193431E5FC462368424A172858D5351C92D4815C2A7E35B5DDE50C ] Browser         C:\WINDOWS\System32\browser.dll
00:42:37.0577 0x0ac4  Browser - ok
00:42:37.0597 0x0ac4  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
00:42:37.0603 0x0ac4  BthAvrcpTg - ok
00:42:37.0624 0x0ac4  [ 131F1C8573E7BFB41C54FBF5309CCD94, DAFE51E3BADBD82A33B580F212B2D6520A120877C23F6D675521FEA2F4BA5A1F ] BthEnum         C:\WINDOWS\System32\drivers\BthEnum.sys
00:42:37.0632 0x0ac4  BthEnum - ok
00:42:37.0658 0x0ac4  [ 746B9F94214915AECDE4B7FEA5FF9664, EA2877D49DB4B7B9CE61653D63E8776DFF1CBCCAB12C14DB1D20DA44B8F06357 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
00:42:37.0666 0x0ac4  BthHFEnum - ok
00:42:37.0676 0x0ac4  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
00:42:37.0683 0x0ac4  bthhfhid - ok
00:42:37.0716 0x0ac4  [ D30C67473A2E229662D21F27EAA9AAA5, D009C4836B0DFE963D8E3DEEDE611068838F2BBCAB146E6D70692FAB838E11F1 ] BthLEEnum       C:\WINDOWS\System32\drivers\BthLEEnum.sys
00:42:37.0735 0x0ac4  BthLEEnum - ok
00:42:37.0765 0x0ac4  [ 07E33226AD218A2A162662A05CAFB52F, 0AC3D8B79EDA6DA232FA4E1CAF6592420A9EDE96350D1F0504C2434261684F0B ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
00:42:37.0773 0x0ac4  BTHMODEM - ok
00:42:37.0802 0x0ac4  [ 3AFE71D80EDF5D4DE0C5731352905669, 3E370169B8C5D301954D1F1DA302F7A0DB2A034990E10B3D64458C48E5693205 ] BthPan          C:\WINDOWS\system32\DRIVERS\bthpan.sys
00:42:37.0811 0x0ac4  BthPan - ok
00:42:37.0917 0x0ac4  [ 92370F46AF28D54B67C135FA8C2AFCFC, B1C0DBF27D392DEA8786AB9479C6CCD5A5DBDF3BE25ABA5FC7C6DB6D3EEE739B ] BTHPORT         C:\WINDOWS\System32\Drivers\BTHport.sys
00:42:37.0985 0x0ac4  BTHPORT - ok
00:42:38.0024 0x0ac4  [ E5E48FEED73D463175EAB1542495191C, 0A8182F5BA7B694AB1DD3680F1194E4A568FE40DBA4BFDFF2EA09BAD045FFB29 ] bthserv         C:\WINDOWS\system32\bthserv.dll
00:42:38.0275 0x0ac4  bthserv - ok
00:42:38.0409 0x0ac4  [ 23E75BED9076F856B36F5F934BBD5795, CCEB72B788522B7D52A6C07646005EBC68F9599D3714ECACF3A194CA47A1BE85 ] BTHUSB          C:\WINDOWS\System32\Drivers\BTHUSB.sys
00:42:38.0445 0x0ac4  BTHUSB - ok
00:42:38.0450 0x0ac4  c2wts - ok
00:42:38.0480 0x0ac4  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
00:42:38.0492 0x0ac4  cdfs - ok
00:42:38.0537 0x0ac4  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
00:42:38.0557 0x0ac4  cdrom - ok
00:42:38.0587 0x0ac4  [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
00:42:38.0603 0x0ac4  CertPropSvc - ok
00:42:38.0623 0x0ac4  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
00:42:38.0635 0x0ac4  circlass - ok
00:42:38.0731 0x0ac4  [ 179A41249055D5F039F1B6703F3B6D2B, 886CF715D9E85DB5C9B991EBCB9B12E27AA0EEE52528E222C80CA5B5B0A7AF52 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
00:42:38.0756 0x0ac4  CLFS - ok
00:42:38.0922 0x0ac4  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
00:42:38.0949 0x0ac4  CmBatt - ok
00:42:39.0077 0x0ac4  [ 1CD3A907D64D08F49208DA00B69BF35E, ABBD70FFCA0DE2274D855AFC08BF7BC0AA6D44EFC9FDBF7DF44B73CD5C210E28 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
00:42:39.0143 0x0ac4  CNG - ok
00:42:39.0167 0x0ac4  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
00:42:39.0180 0x0ac4  CompositeBus - ok
00:42:39.0189 0x0ac4  COMSysApp - ok
00:42:39.0210 0x0ac4  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
00:42:39.0226 0x0ac4  condrv - ok
00:42:39.0503 0x0ac4  [ 40904ADF8AB1CE4C0967B78EFDD7D375, 740948DF44619FD5CA283791BD53E9B12F571B5315CD1626950F656CB4A8CA1C ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
00:42:39.0517 0x0ac4  cphs - ok
00:42:39.0550 0x0ac4  [ 0EFE4B5884A8032617826A4D76F80969, 083D296CC623C83D36A97AEE343ADF819B17E490F931DBE4D161BD1E8C289E02 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
00:42:39.0571 0x0ac4  CryptSvc - ok
00:42:39.0688 0x0ac4  [ EE2F3C0D6ADBC975D6B621EC15ACF4E2, D158C0FACA6344BCD77616EC3D23212F9FD76D7D0C834ACA51998B80162106D5 ] CSC             C:\WINDOWS\system32\drivers\csc.sys
00:42:39.0716 0x0ac4  CSC - ok
00:42:39.0765 0x0ac4  [ 936D9E2871CEEFF6A33695D98374367B, C30D42E870F196C4FA20AF95C7B9D9C9C5414D6DDE71268F88C3FC5BF372E61B ] CscService      C:\WINDOWS\System32\cscsvc.dll
00:42:39.0799 0x0ac4  CscService - ok
00:42:39.0818 0x0ac4  [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam             C:\WINDOWS\system32\drivers\dam.sys
00:42:39.0827 0x0ac4  dam - ok
00:42:39.0889 0x0ac4  [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
00:42:39.0923 0x0ac4  DcomLaunch - ok
00:42:39.0973 0x0ac4  [ AF3FF97AC2A73E70F8A8D11FB694175B, 3AA25BF9DED08056F52ACF246118C13C8816B5E8AA4D8606DB7DAB4E4E6A9169 ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
00:42:39.0996 0x0ac4  defragsvc - ok
00:42:40.0040 0x0ac4  [ 8F387C2C99EE09C6E2AC316205F86A17, EC9E8AE72A21992AA118964E17090BA4503EB051273AD18185C95172F57328CE ] DeviceAssociationService C:\WINDOWS\system32\das.dll
00:42:40.0089 0x0ac4  DeviceAssociationService - ok
00:42:40.0131 0x0ac4  [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
00:42:40.0150 0x0ac4  DeviceInstall - ok
00:42:40.0203 0x0ac4  [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
00:42:40.0226 0x0ac4  Dfsc - ok
00:42:40.0270 0x0ac4  [ 30710AEFCE721CEEE0F35EB6A01C263C, FB062EC86474D38BBC38E11E2618A9505001C287430B495C482977BBE58017C8 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
00:42:40.0309 0x0ac4  dg_ssudbus - ok
00:42:40.0365 0x0ac4  [ 05DE04005CE0D84D0E6AD21CAEB369C6, E6704A2A685BCFD560796D7C328F8E53DF0793DBDA590598A492D9070D109298 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
00:42:40.0378 0x0ac4  Dhcp - ok
00:42:40.0435 0x0ac4  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\WINDOWS\system32\drivers\disk.sys
00:42:40.0439 0x0ac4  disk - ok
00:42:40.0456 0x0ac4  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
00:42:40.0458 0x0ac4  dmvsc - ok
00:42:40.0522 0x0ac4  [ FE7656474448BE6A6C68E5C9BEB7CA94, 8B9F04CAA29A6EEFCA3D1E7BAFE340D5CCA8AF665474E69B1DF7E2A518B83A89 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
00:42:40.0541 0x0ac4  Dnscache - ok
00:42:40.0587 0x0ac4  [ 50288EA079BB520C2B8C8A154202D518, 8916A9180CA009D124FFDFB4CCF5FDFEF7FA2FD37CBCD49FAD4C68E051B4734D ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
00:42:40.0616 0x0ac4  dot3svc - ok
00:42:40.0628 0x0ac4  [ 281BEE07BA97E3E98D12A822D923D0D8, 6EB482B2D4D6048D145C3738B2B6FA27A90B5EA53E9167447820F9981B004E63 ] DPS             C:\WINDOWS\system32\dps.dll
00:42:40.0635 0x0ac4  DPS - ok
00:42:40.0692 0x0ac4  [ DDC11A202207C0400CBE07315B8FDE5E, 3ED0CA3A714582D92001BA3BFF78BE082F4DC8021298D5A2632F3B2B0A1C09DC ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
00:42:40.0700 0x0ac4  drmkaud - ok
00:42:40.0736 0x0ac4  [ 5B074F14F5DD6418F46EE4CA2DEB7EA8, B8223D73C3DE123759101F7D5D45C60BD12B221F09D349575A1044CE3F43CBC5 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
00:42:40.0758 0x0ac4  DsmSvc - ok
00:42:40.0858 0x0ac4  [ 6A0E850DDCB136AA3D2FB7234382DF12, C01863E95F45E1B74AC65C9CD12C8DC769299218255B3C94E3EBF58C4D79FEF3 ] dtsoftbus01     C:\WINDOWS\System32\drivers\dtsoftbus01.sys
00:42:40.0865 0x0ac4  dtsoftbus01 - ok
00:42:41.0052 0x0ac4  [ 313DCE665B57000B18CB26C6B6A10DFE, 6C332D4AD13A316C192321AB7E7597E66AF8E1688101FFD851E06C52128DBA52 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
00:42:41.0158 0x0ac4  DXGKrnl - ok
00:42:41.0185 0x0ac4  [ 6073537F250B45E1CB2A02E97F0FE1B2, 653F3F2F2019168EDF225944A88AFDBF8393B62AA076BD19980691778F3DB67D ] Eaphost         C:\WINDOWS\System32\eapsvc.dll
00:42:41.0204 0x0ac4  Eaphost - ok
00:42:41.0386 0x0ac4  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
00:42:41.0636 0x0ac4  ebdrv - ok
00:42:41.0662 0x0ac4  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] EFS             C:\WINDOWS\System32\lsass.exe
00:42:41.0673 0x0ac4  EFS - ok
00:42:41.0728 0x0ac4  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
00:42:41.0730 0x0ac4  EhStorClass - ok
00:42:41.0745 0x0ac4  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
00:42:41.0755 0x0ac4  EhStorTcgDrv - ok
00:42:41.0783 0x0ac4  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
00:42:41.0787 0x0ac4  ErrDev - ok
00:42:41.0821 0x0ac4  [ 4A9C48B8C7544193BC7A2B68B50FECE1, 9FC21C02DF59F83F8F4E5BA050208F1C62C03934FBF35E145FCB033FC3D54D09 ] ETD             C:\WINDOWS\system32\DRIVERS\ETD.sys
00:42:41.0876 0x0ac4  ETD - ok
00:42:41.0964 0x0ac4  [ 342FA09C5BC16D492F6B5F48A5D7B7B7, 44FDCEE2666F1811C68B093781E844B31C5E476944B445DB1E51BB30D6A1EAA9 ] ETDService      C:\Program Files\Elantech\ETDService.exe
00:42:41.0966 0x0ac4  ETDService - ok
00:42:42.0014 0x0ac4  [ 030CE75B7D8F75FAA7BA1EC6FD0EB5A3, 5264734F0572FAEDCCB008221C9982CCB7922C4FFC358605424EA413CDCDAE99 ] EventSystem     C:\WINDOWS\system32\es.dll
00:42:42.0090 0x0ac4  EventSystem - ok
00:42:42.0139 0x0ac4  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
00:42:42.0177 0x0ac4  exfat - ok
00:42:42.0217 0x0ac4  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
00:42:42.0239 0x0ac4  fastfat - ok
00:42:42.0277 0x0ac4  [ 2BC8532ABF2B3756B78FA1DA54147DDE, DF65EE2AB0255A2CF3221085A6BE7C37E3DB6BFEED3BCADCDD69BB1049F6DCB1 ] Fax             C:\WINDOWS\system32\fxssvc.exe
00:42:42.0311 0x0ac4  Fax - ok
00:42:42.0326 0x0ac4  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
00:42:42.0349 0x0ac4  fdc - ok
00:42:42.0366 0x0ac4  [ DC1A78BCCCB7EE53D6FD3BD615A8E222, EE16B6853185AAE779D7135035983938009901658F76A8856AAC12EBA15BB34E ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
00:42:42.0376 0x0ac4  fdPHost - ok
00:42:42.0388 0x0ac4  [ E5AD448F2DC84B1CF387FA7F2A3D1936, BBB29C79A085C503F5EFFB5144596D5DEC48A4EB34A049A4E7B38B27F6D92E0A ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
00:42:42.0397 0x0ac4  FDResPub - ok
00:42:42.0416 0x0ac4  [ 0046E0BD031213D37123876B0D0FA61C, A4FE17D56F0BAFB70D0D421ED9D1B6E50AF8ADAA4B59328A41AEC5B4C068A3CB ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
00:42:42.0431 0x0ac4  fhsvc - ok
00:42:42.0467 0x0ac4  [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
00:42:42.0471 0x0ac4  FileInfo - ok
00:42:42.0500 0x0ac4  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
00:42:42.0508 0x0ac4  Filetrace - ok
00:42:42.0685 0x0ac4  [ 00EDB531DFB127197D625204B138269B, 0CE6536344CE30F06C6CD04BEB202C935B10439200B9CE792B4440D2EE3CB9D9 ] FlexNet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
00:42:42.0753 0x0ac4  FlexNet Licensing Service - ok
00:42:42.0776 0x0ac4  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
00:42:42.0786 0x0ac4  flpydisk - ok
00:42:42.0835 0x0ac4  [ 6592D192E2823C043EDBC010E7774053, C025A0EC5517DC3BD5D6656DC0F0F19021FB3D2EE90EC6194E1BD74E638EBBDC ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
00:42:42.0848 0x0ac4  FltMgr - ok
00:42:42.0976 0x0ac4  [ 3FA6DC6B29717E32E211C1FD821F2C75, E467F3775427C93CC2B87327B0A45669631A5FC460C558F6796BA26002A8BBFC ] FontCache       C:\WINDOWS\system32\FntCache.dll
00:42:43.0048 0x0ac4  FontCache - ok
00:42:43.0150 0x0ac4  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
00:42:43.0164 0x0ac4  FontCache3.0.0.0 - ok
00:42:43.0189 0x0ac4  [ 35005534E600E993A90B036E4E599F2B, DA56FA3776FBD3D50276CB7410E0CB6F137DD8FCA84C0F3FEF8B1FEA5F6CA592 ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
00:42:43.0204 0x0ac4  FsDepends - ok
00:42:43.0260 0x0ac4  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
00:42:43.0262 0x0ac4  Fs_Rec - ok
00:42:43.0469 0x0ac4  [ 38F3CF15321DC2B47C7907EB222B637A, C2CE4F62BD7C93566C36B7290DA3E804FB79A18A18E2544E2B6404B473483D4E ] fussvc          C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe
00:42:43.0478 0x0ac4  fussvc - ok
00:42:43.0544 0x0ac4  [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
00:42:43.0566 0x0ac4  fvevol - ok
00:42:43.0603 0x0ac4  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM           C:\WINDOWS\System32\drivers\fxppm.sys
00:42:43.0609 0x0ac4  FxPPM - ok
00:42:43.0626 0x0ac4  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
00:42:43.0635 0x0ac4  gagp30kx - ok
00:42:43.0663 0x0ac4  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
00:42:43.0668 0x0ac4  gencounter - ok
00:42:43.0705 0x0ac4  [ EF3AE7773394DF49CE74AF78A1C8D23D, CB12FF004C460A89F12AFF2467512B479A07CA10D4280CD4E624A5A9CDAB9C1B ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
00:42:43.0718 0x0ac4  GPIOClx0101 - ok
00:42:43.0903 0x0ac4  [ 383DA813409316D69603C1D849834D24, E1AAD3AB567457B00B8A378D5BA37ED653EE451FF79D071A8815FB8B1EB90DAF ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
00:42:44.0047 0x0ac4  gpsvc - ok
00:42:44.0119 0x0ac4  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
00:42:44.0125 0x0ac4  gupdate - ok
00:42:44.0155 0x0ac4  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
00:42:44.0160 0x0ac4  gupdatem - ok
00:42:44.0278 0x0ac4  [ 56F69F7C25FB67C970997D7066DBC593, 83E03A82237DCC5BCB3E722ACECACEF3510CAA619F33E0D7C4D902A482E90418 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys
00:42:44.0305 0x0ac4  HdAudAddService - ok
00:42:44.0368 0x0ac4  [ 498288DD5CA42C2D36D125893E968C53, 03B62FA51F9195D77170DCEFF3A93A6898AA96FB610044DDAE83767DA12745C5 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
00:42:44.0384 0x0ac4  HDAudBus - ok
00:42:44.0439 0x0ac4  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
00:42:44.0448 0x0ac4  HidBatt - ok
00:42:44.0476 0x0ac4  [ 1EA1B4FABB8CC348E73CA90DBA22E104, 5C18C6BD499272F216DD4626B5E8D38181AEAC9AD917FBEB614A75B70467B258 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
00:42:44.0488 0x0ac4  HidBth - ok
00:42:44.0528 0x0ac4  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
00:42:44.0539 0x0ac4  hidi2c - ok
00:42:44.0565 0x0ac4  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
00:42:44.0575 0x0ac4  HidIr - ok
00:42:44.0605 0x0ac4  [ 449A20A674AA3FAA7F0DD4E33EE2DC20, 28B9BDA306456E8640C355718DE3477537B0FAF8C37F633C709129AAB64D9873 ] hidserv         C:\WINDOWS\system32\hidserv.dll
00:42:44.0614 0x0ac4  hidserv - ok
00:42:44.0666 0x0ac4  [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
00:42:44.0683 0x0ac4  HidUsb - ok
00:42:44.0709 0x0ac4  [ 7BF3ADCBD021D4F4A84CF40EB49C71B5, 5758A51FD2EBE67E6DBE3A298D714D351910F9E01C428D0C1359457C9242B298 ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
00:42:44.0722 0x0ac4  hkmsvc - ok
00:42:44.0756 0x0ac4  [ 6CD9C3819BE8C0A3DACC82AE5D3C4F18, 46BF4A968E506DE17CA401401D716B444CDC10A5C60EB081890DD4B886AEDF5F ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
00:42:44.0786 0x0ac4  HomeGroupListener - ok
00:42:44.0943 0x0ac4  [ 1A4DA1D6287B99033D144B436C23B656, D4D1EEB372E61512EA36A33F095E68C225B8E6C72CC57ED8BD00533F88012F40 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
00:42:44.0994 0x0ac4  HomeGroupProvider - ok
00:42:45.0031 0x0ac4  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
00:42:45.0052 0x0ac4  HpSAMD - ok
00:42:45.0157 0x0ac4  [ 9DDCA7F18983C5410DEFF79F819DF93C, CE97B4440377BFC5CA81BB600C3BD1DD9FB3951CA1EB70735F5E2050EBB74223 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
00:42:45.0250 0x0ac4  HTTP - ok
00:42:45.0304 0x0ac4  [ 61C660874632D2D298B4AF3051A97C82, BE4389E82170A2FE4B82A067B0DB2210BE88CED10C30F8D0089F2BE107DCB4C7 ] hvservice       C:\WINDOWS\system32\drivers\hvservice.sys
00:42:45.0359 0x0ac4  hvservice - ok
00:42:45.0380 0x0ac4  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
00:42:45.0383 0x0ac4  hwpolicy - ok
00:42:45.0401 0x0ac4  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
00:42:45.0409 0x0ac4  hyperkbd - ok
00:42:45.0438 0x0ac4  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
00:42:45.0450 0x0ac4  HyperVideo - ok
00:42:45.0473 0x0ac4  [ 84CFC5EFA97D0C965EDE1D56F116A541, 0155EA62BF07D99D98D1C9B6559C8E3301B016A20D03DF1EF64B2FAB8C37403B ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
00:42:45.0493 0x0ac4  i8042prt - ok
00:42:45.0527 0x0ac4  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
00:42:45.0536 0x0ac4  iaLPSSi_GPIO - ok
00:42:45.0553 0x0ac4  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C     C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
00:42:45.0568 0x0ac4  iaLPSSi_I2C - ok
00:42:45.0622 0x0ac4  [ 57CD95DEB3529181BCC931DD2DFB2341, 03ACF906E4C3CF954F503900F42C7A60FCD5624772B90A956F032484146E42B7 ] iaStorA         C:\WINDOWS\system32\drivers\iaStorA.sys
00:42:45.0663 0x0ac4  iaStorA - ok
00:42:45.0735 0x0ac4  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
00:42:45.0765 0x0ac4  iaStorAV - ok
00:42:45.0880 0x0ac4  [ 20E83F4632E15A5E9E716FF2E8AC7FAE, 7CA1A4924F432AD30ED7FA6247C6513DA173EE31132AE115E85C0ED7E5971029 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
00:42:45.0882 0x0ac4  IAStorDataMgrSvc - ok
00:42:45.0920 0x0ac4  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
00:42:45.0953 0x0ac4  iaStorV - ok
00:42:46.0012 0x0ac4  [ B9F719B572D8D440DD8B5401C35B3B6F, 5AFC7F272ACEE118AF26FAD3E3800C56FF423050BD3FD3DA8D6BA8BFE5CB8E74 ] IDMWFP          C:\WINDOWS\system32\DRIVERS\idmwfp.sys
00:42:46.0096 0x0ac4  IDMWFP - ok
00:42:46.0111 0x0ac4  IEEtwCollectorService - ok
00:42:46.0412 0x0ac4  [ 16D939A13CFB82DEE0B9DB12E45C7B4E, D09C57DE3EF7F6BEDD354FEEDB46260FDCF9F9A0F2D096FFD518509AD041AAC5 ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
00:42:46.0591 0x0ac4  igfx - ok
00:42:46.0646 0x0ac4  [ DEA76F90F9777E3427D70E380222B23B, B917BA423896A12E45623E3D494CA03317A6FC612CA433C62C897524DC3E756B ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
00:42:46.0694 0x0ac4  IKEEXT - ok
00:42:46.0711 0x0ac4  [ 4011430BC9DA46ADFAE9915EFEC312FB, 925DDDA187AE7C46C94FBBFA18FC602260957B6BA891D65DFC09385B6DDEAB58 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
00:42:46.0718 0x0ac4  intaud_WaveExtensible - ok
00:42:47.0369 0x0ac4  [ 39246F2CFBF1D32C3A12E242661EC039, EADF06D9B142844C16C2B0E412D708DB02BA07E2CD96BBFB2F0984DD6BB63E28 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
00:42:47.0508 0x0ac4  IntcAzAudAddService - ok
00:42:47.0709 0x0ac4  [ EC80E6B9E27DC3E22ED5B2E0E75A39C0, 8EEC89F88AE79DA256BB651983397773F6B25139006C8A7C8F77960F47774CF5 ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
00:42:47.0759 0x0ac4  IntcDAud - ok
00:42:47.0901 0x0ac4  [ 0DB1E3F6189C628675F855C0EB510419, 989F539E82105019D2D81255369B96DC65826CD2A421DA09809155B26F69C555 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
00:42:47.0926 0x0ac4  Intel(R) Capability Licensing Service Interface - ok
00:42:48.0131 0x0ac4  [ 492AAF2FF66F437F0E796574B116EFC3, 6BF21C61ED05705DD58203952A750D1AB4D4B62F3A2B640BBBD9B85D1ECC3E5C ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
00:42:48.0164 0x0ac4  Intel(R) Capability Licensing Service TCP IP Interface - ok
00:42:48.0193 0x0ac4  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
00:42:48.0198 0x0ac4  intelide - ok
00:42:48.0222 0x0ac4  [ 139CFCDCD36B1B1782FD8C0014AC9B0E, E0D7E0E9B46A8CECE138D689820023BFA650FB689E4FD62855BED37E04F2D9FF ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
00:42:48.0225 0x0ac4  intelpep - ok
00:42:48.0274 0x0ac4  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
00:42:48.0277 0x0ac4  intelppm - ok
00:42:48.0296 0x0ac4  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
00:42:48.0304 0x0ac4  IpFilterDriver - ok
00:42:48.0349 0x0ac4  [ DFC4050D58565ADBEE793A8D4AEBDAE6, 89B900408F030CD45753A11D6AE6CBAB87E8B0E3F8401402D2D8713C045BF488 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
00:42:48.0381 0x0ac4  iphlpsvc - ok
00:42:48.0425 0x0ac4  [ FD9C9E9E3F0ED51502C7E8C066BE26B9, 290E74380F1543DD22C9F3821513B3E2FB42E995724238D8779CBBCB4FC386C8 ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
00:42:48.0482 0x0ac4  IPMIDRV - ok
00:42:48.0509 0x0ac4  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
00:42:48.0524 0x0ac4  IPNAT - ok
00:42:48.0663 0x0ac4  [ 3E5757BE828CC404425DC5A5EBB5CEFB, 5BBD807951FFDF5B31031A9D68685010740DC0037963224C2547DB5FEE3D43AE ] IpOverUsbSvc    C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe
00:42:48.0665 0x0ac4  IpOverUsbSvc - ok
00:42:48.0724 0x0ac4  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
00:42:48.0731 0x0ac4  IRENUM - ok
00:42:48.0763 0x0ac4  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
00:42:48.0850 0x0ac4  isapnp - ok
00:42:49.0078 0x0ac4  [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
00:42:49.0123 0x0ac4  iScsiPrt - ok
00:42:49.0163 0x0ac4  [ 2C04ACF9070282AC9AA837C52CA3C128, 2C68FE2E876E5089F27021038E868E21288F694F3ED0390AED5B4712CC7567EC ] iwdbus          C:\WINDOWS\System32\drivers\iwdbus.sys
00:42:49.0179 0x0ac4  iwdbus - ok
00:42:49.0245 0x0ac4  [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
00:42:49.0262 0x0ac4  jhi_service - ok
00:42:49.0308 0x0ac4  [ 258A11B27A9CC70D85B01BBD94389B2F, 0C3C2D93E1BF67D459912EE18FCA0CE2C4981C4DE8634A1ECEE63C3C98F9E967 ] jswpbapi        C:\Program Files (x86)\Jumpstart\jswpbapi.exe
00:42:49.0317 0x0ac4  jswpbapi - ok
00:42:49.0367 0x0ac4  [ CD9F4E53DA79ED4CD7562604FE9523A6, 94C6C89CD73F6D052EB498EB00BFC826D8E521C2138D8840BB7667234A658401 ] jswpsapi        C:\Program Files (x86)\Jumpstart\jswpsapi.exe
00:42:49.0422 0x0ac4  jswpsapi - ok
00:42:49.0500 0x0ac4  [ 5BE640E88814B77A9E84B4549B5DCC2C, 2ECF73254D701EFCC135B81EC951A76BCE5E74435521A061B05E9445C8D3C843 ] JSWPSLWF        C:\WINDOWS\system32\DRIVERS\jswpslwfx.sys
00:42:49.0514 0x0ac4  JSWPSLWF - ok
00:42:49.0534 0x0ac4  [ 8BE92376799B6B44D543E8D07CDCF885, 425B8BB1BAF62F735B3CB5A002E6055879F02E7207E55942BFD37F1784F5F368 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
00:42:49.0542 0x0ac4  kbdclass - ok
00:42:49.0550 0x0ac4  [ FB6E47E569D4872ABEB506BE03A45FBA, 5C4056CADA8F67587A119D9AE2A0EFAB30387CF6298F4019FF68AC92E2F6F54B ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
00:42:49.0556 0x0ac4  kbdhid - ok
00:42:49.0566 0x0ac4  [ DB7A09BC90DF20F44F16F8B0F9ED3491, 2DF5E042284D61368A5801B2557351B2C4B1044AA6F966DF4DDCE7B453D1B9AE ] kbldfltr        C:\WINDOWS\system32\drivers\kbldfltr.sys
00:42:49.0572 0x0ac4  kbldfltr - ok
00:42:49.0577 0x0ac4  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic           C:\WINDOWS\system32\DRIVERS\kdnic.sys
00:42:49.0581 0x0ac4  kdnic - ok
00:42:49.0585 0x0ac4  keycrypt - ok
00:42:49.0599 0x0ac4  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] KeyIso          C:\WINDOWS\system32\lsass.exe
00:42:49.0601 0x0ac4  KeyIso - ok
00:42:49.0630 0x0ac4  [ ADDECBCC777665BD113BED437E602AB0, B6283475A1219CE44E9F683DD3BEB8C42DA0943297E5C4699B22176AD8A6A7ED ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
00:42:49.0632 0x0ac4  KSecDD - ok
00:42:49.0700 0x0ac4  [ F88CC88F4A6D8476F1664E805CA18CC2, 2C61EE5EEA4FD45AA3FA927CC16E34EF90BD44324EAB14198AF65C3A27617991 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
00:42:49.0727 0x0ac4  KSecPkg - ok
00:42:49.0755 0x0ac4  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
00:42:49.0764 0x0ac4  ksthunk - ok
00:42:49.0810 0x0ac4  [ 32B1A8351160F307A8C66BCB0F94A9C2, 52F1DEC2BBD4D5DDBB85ED20B99D96BBA7EB83304D76F183A11FDAFDA364E873 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
00:42:49.0855 0x0ac4  KtmRm - ok
00:42:49.0887 0x0ac4  [ 4E5EA006CFFB96E0BAFC767D659AAB9A, A24A334955FB98D0903971454FADAC639D535BD32BB48964BD95019C7F6C454E ] L1C             C:\WINDOWS\system32\DRIVERS\L1C63x64.sys
00:42:49.0927 0x0ac4  L1C - ok
00:42:49.0984 0x0ac4  [ 46378ECCB4A29AA81BF296641C2501EF, 5AB79BD824C00EF1338FDB8450692318AB14E0AE4145C30B37136767DFC1E4F9 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
00:42:50.0019 0x0ac4  LanmanServer - ok
00:42:50.0070 0x0ac4  [ D0D9C2ECA4D03A8F06DCD91236B90C98, E2D1144DC8040EA5FEB0602A20BA4CB920B4BC86AD5AD05FC0DF7D74DC95DC66 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
00:42:50.0159 0x0ac4  LanmanWorkstation - ok
00:42:50.0209 0x0ac4  [ 626D19F1771E1AE72208AE9A8F3082F7, 78FDB64545ED2EAE9F51C08120E21D2C3285208F6846BD8BBA08CAA839E7A0C4 ] lfsvc           C:\WINDOWS\System32\GeofenceMonitorService.dll
00:42:50.0259 0x0ac4  lfsvc - ok
00:42:50.0590 0x0ac4  [ E12302F216E0161F575F90360E3D2466, C2387124462DE903E837297D841EEF80A556A8710568CCE38300A363ED1AB08D ] LiveUpdateSvc   C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
00:42:50.0645 0x0ac4  LiveUpdateSvc - ok
00:42:50.0659 0x0ac4  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
00:42:50.0667 0x0ac4  lltdio - ok
00:42:50.0692 0x0ac4  [ 00E070FC0C673311AFD4B068D1242780, 50B0E0E625361145332C849709498FF444E46578DCAD2536E6D0289E0125580F ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
00:42:50.0714 0x0ac4  lltdsvc - ok
00:42:50.0729 0x0ac4  [ D113FAD71A5E67AA94B32A0F8828D265, 08DDB4BBDB570C59926DBF5E27FCF46DCDF8B8212BB9251E97837E0504516FB3 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
00:42:50.0736 0x0ac4  lmhosts - ok
00:42:50.0773 0x0ac4  [ 7D9E57CCA9829230A8D8C37012D9B260, 6646DC52B3CFC71E2F31BF3B196AF49E354D38C9E89928959EE4E9F7E4AA3E27 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
00:42:50.0795 0x0ac4  LMS - ok
00:42:50.0844 0x0ac4  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
00:42:50.0854 0x0ac4  LSI_SAS - ok
00:42:50.0872 0x0ac4  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
00:42:50.0883 0x0ac4  LSI_SAS2 - ok
00:42:50.0892 0x0ac4  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\WINDOWS\system32\drivers\lsi_sas3.sys
00:42:50.0901 0x0ac4  LSI_SAS3 - ok
00:42:50.0922 0x0ac4  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
00:42:50.0931 0x0ac4  LSI_SSS - ok
00:42:50.0996 0x0ac4  [ 8EBB271E4588D835784A3FF7E80076A8, A508BE95F6F5063A76F4C8726D9425BB1F00DE803EFE73A0BE145DD9AB82FF0A ] LSM             C:\WINDOWS\System32\lsm.dll
00:42:51.0030 0x0ac4  LSM - ok
00:42:51.0071 0x0ac4  [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
00:42:51.0090 0x0ac4  luafv - ok
00:42:51.0127 0x0ac4  [ 11B7E5BD6EFBB7DB35F7933C3795F050, 28C62C8CE9B13119EDE031E881A4218F89DBFEF9B59975BE6108FBEF7A21E79F ] lunparser       C:\WINDOWS\system32\drivers\lunparser.sys
00:42:51.0167 0x0ac4  lunparser - ok
00:42:51.0207 0x0ac4  [ F92B0E478C0FAA6D6661E6E977247E60, 8B26B57C2C60C98CD6273ACA126B2CD0356ADB13A59FEC12882357A6B973123C ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
00:42:51.0247 0x0ac4  MBAMProtector - ok
00:42:51.0666 0x0ac4  [ D84AEA3F3329D622DFC1297DDDF6163B, 316FE56CC30ED1473A917253F46B79EAA12F4ABD5B4B1ADB03929DFEE940F577 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
00:42:51.0727 0x0ac4  MBAMScheduler - ok
00:42:51.0797 0x0ac4  [ 4F45ED469906494F9BF754E476390DBD, D8FF6AFD73D8C191F5732DF9737E6F83B2B52B06A3A6CD4CC6EAC9464CBB2772 ] MBAMService     C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
00:42:51.0820 0x0ac4  MBAMService - ok
00:42:51.0906 0x0ac4  [ 8A50D5304E6AE48664CF5838EC32F647, C76943FABEE1B5E1B641AA610668CCD4227E2C4B191DD30B79D3AB31A9E8B5BE ] MBAMSwissArmy   C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
00:42:51.0948 0x0ac4  MBAMSwissArmy - ok
00:42:51.0984 0x0ac4  [ 0664F6335F108F38FE08C3CA747311EE, 04C5F31C57573DC4ABFC609D3F7C589835CE5C528AF5EE07FB25E35F72DF98A4 ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
00:42:52.0006 0x0ac4  MBAMWebAccessControl - ok
00:42:52.0045 0x0ac4  [ 8FF2D95CBA49B405C5DE27039FF0BF35, 03BF7FC7F1C2C76EDB583BA342EA1C325DB8058517744EF2A78529D3938F4DC1 ] MBfilt          C:\WINDOWS\system32\drivers\MBfilt64.sys
00:42:52.0065 0x0ac4  MBfilt - ok
00:42:52.0095 0x0ac4  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
00:42:52.0105 0x0ac4  megasas - ok
00:42:52.0141 0x0ac4  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
00:42:52.0175 0x0ac4  megasr - ok
00:42:52.0204 0x0ac4  [ EB1D78140D6634C32A46AB1006105EDC, 586F988A7272A7E3F6AA2CC9A001A08A3D178A011AE8C095BB7EAD9FFB45AAB1 ] MEIx64          C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
00:42:52.0227 0x0ac4  MEIx64 - ok
00:42:52.0279 0x0ac4  [ 71C6748EE8DE938532057EF10B4B7E44, 455175332156939B3CDA4511A2A6C213ABBFDB85EEECA98B6AB014C994F532C4 ] Micro Star SCM  C:\Program Files (x86)\SCM\MSIService.exe
00:42:52.0284 0x0ac4  Micro Star SCM - ok
00:42:52.0344 0x0ac4  [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] MMCSS           C:\WINDOWS\system32\mmcss.dll
00:42:52.0356 0x0ac4  MMCSS - ok
00:42:52.0382 0x0ac4  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem           C:\WINDOWS\system32\drivers\modem.sys
00:42:52.0390 0x0ac4  Modem - ok
00:42:52.0413 0x0ac4  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
00:42:52.0415 0x0ac4  monitor - ok
00:42:52.0425 0x0ac4  [ CEAC6D40FE887CE8406C2393CF97DE06, 34E76908B802764FF0D7AB3AF89BE77BD35B44787983343FAD89891891C0A045 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
00:42:52.0436 0x0ac4  mouclass - ok
00:42:52.0446 0x0ac4  [ 02D98BF804084E9A0D69D1C69B02CCA9, EC5BC5D87043DFFD035FD4DD27B3D94E03119063519E4151BCC3522B613E2D7F ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
00:42:52.0453 0x0ac4  mouhid - ok
00:42:52.0464 0x0ac4  [ 515549560D481138E6E21AF7C6998E56, C7E4B38D8CCAF15B9BDA63C8C8209F6193AD220DA02E1264F1B687AACD8F409F ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
00:42:52.0468 0x0ac4  mountmgr - ok
00:42:52.0558 0x0ac4  [ 4E9D8041D352A33332FD6F59A3A78B03, D4E6229B07EF9866993EEE4F6223DC7F1FF1108273FE14A3DC74E65C181DE56A ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
00:42:52.0565 0x0ac4  MozillaMaintenance - ok
00:42:52.0582 0x0ac4  [ F170510BE94CF45E3C6274578F6204B2, 344C3DDE1D622607CA2ABECB2C47CB0166D2D258BD94A7960C45A5ADBB640566 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
00:42:52.0592 0x0ac4  mpsdrv - ok
00:42:52.0653 0x0ac4  [ D186C5844393252147BE934F3871DB7A, 30160F8268B9F46E82C5CB536867E0CF280DC98074A481595072E3320200E343 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
00:42:52.0696 0x0ac4  MpsSvc - ok
00:42:52.0742 0x0ac4  [ 1D55DADC22D21883A2F80297F5A5AE48, B79DF4AFC2A9CBC54E74233596544D6E41C8CAA0516BD57CA695D051EC780265 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
00:42:52.0756 0x0ac4  MRxDAV - ok
00:42:52.0843 0x0ac4  [ 7A1A3F213CDB3363D179D5014272025D, 6756F5B7D9FBF6839DB1FF4E94EA45B5499D7DF925E75581C96FBBA4BE131542 ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
00:42:52.0866 0x0ac4  mrxsmb - ok
00:42:52.0925 0x0ac4  [ 3E28B99198B514DFEB152EACF913025E, 6C1D8353DCD5F811F39C0C3CB5DF3D2457F0D17EE80FB06196AA169E3D19E9B2 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
00:42:52.0943 0x0ac4  mrxsmb10 - ok
00:42:53.0035 0x0ac4  [ 5C42CEE3E2018E1DFC6E3E17240A432A, 7DFF61686167535125BA376A9BE3DD1C2AC7A2C13455E0FD8E83AAE88E52F987 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
00:42:53.0052 0x0ac4  mrxsmb20 - ok
00:42:53.0092 0x0ac4  [ 4E888019078AC363076A5433E89AA4F8, 3DEBDA290230B3E83F956C902C960E39463B7EFE86439199521356762769FD91 ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
00:42:53.0100 0x0ac4  MsBridge - ok
00:42:53.0125 0x0ac4  [ A082C17D14D0790E27D064EA4B138AE1, 9A565ED885782D9D5135C8399C11C356DBF9EBF3B8EB4B4504BD2604AD0B45E6 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
00:42:53.0136 0x0ac4  MSDTC - ok
00:42:53.0166 0x0ac4  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
00:42:53.0171 0x0ac4  Msfs - ok
00:42:53.0185 0x0ac4  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
00:42:53.0192 0x0ac4  msgpiowin32 - ok
00:42:53.0207 0x0ac4  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
00:42:53.0210 0x0ac4  mshidkmdf - ok
00:42:53.0228 0x0ac4  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
00:42:53.0231 0x0ac4  mshidumdf - ok
00:42:53.0247 0x0ac4  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
00:42:53.0249 0x0ac4  msisadrv - ok
00:42:53.0327 0x0ac4  [ 810F8A0A0680662BB0CE44D0E2CEF90C, 5631B07911B7EF378CB1583A480A3C5715E59A5488B33A528F4D7A2F849B9113 ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
00:42:53.0335 0x0ac4  MSiSCSI - ok
00:42:53.0341 0x0ac4  msiserver - ok
00:42:53.0364 0x0ac4  [ D22AE5313F6B7EFDDD8C117B5501F4A3, 1937EEE33BF9C4485F172B10FB17AEF3F3B8978371307F49C3338D74D96A8389 ] MsKeyboardFilter C:\WINDOWS\System32\KeyboardFilterSvc.dll
00:42:53.0374 0x0ac4  MsKeyboardFilter - ok
00:42:53.0401 0x0ac4  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
00:42:53.0407 0x0ac4  MSKSSRV - ok
00:42:53.0419 0x0ac4  [ 375E44168F2DFB91A68B8A3F619C5A7C, AC243E02E9A39D0B4DE9571F196941700EE6EB5E94F5B0BA8994FB551E73A7A8 ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
00:42:53.0427 0x0ac4  MsLldp - ok
00:42:53.0438 0x0ac4  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
00:42:53.0441 0x0ac4  MSPCLOCK - ok
00:42:53.0458 0x0ac4  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
00:42:53.0462 0x0ac4  MSPQM - ok
00:42:53.0482 0x0ac4  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
00:42:53.0489 0x0ac4  MsRPC - ok
00:42:53.0502 0x0ac4  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
00:42:53.0507 0x0ac4  mssmbios - ok
00:42:53.0521 0x0ac4  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
00:42:53.0525 0x0ac4  MSTEE - ok
00:42:53.0545 0x0ac4  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
00:42:53.0549 0x0ac4  MTConfig - ok
00:42:53.0556 0x0ac4  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
00:42:53.0558 0x0ac4  Mup - ok
00:42:53.0575 0x0ac4  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
00:42:53.0582 0x0ac4  mvumis - ok
00:42:53.0612 0x0ac4  [ 41A45D2A75494EABF2806EA051E00376, EB2497561C8E33A4297C044604C717FF854C7F046882A9E4A400AE7679BF5467 ] napagent        C:\WINDOWS\system32\qagentRT.dll
00:42:53.0621 0x0ac4  napagent - ok
00:42:53.0662 0x0ac4  [ 78514B073CC5775800A65BFB82A0D66B, DCD18E277569F23921E899F508860F89ABD417C74A7776152A4463284A989488 ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
00:42:53.0694 0x0ac4  NativeWifiP - ok
00:42:53.0718 0x0ac4  [ 71E3C0100AA19D11373CCEB2F51A6008, 58FBF35F5FE19BEABE483C11E9996BE93D76721C8C34465350FA98B465CA3672 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
00:42:53.0728 0x0ac4  NcaSvc - ok
00:42:53.0744 0x0ac4  [ 51DF09CAB2CAC64FEE3E371D9028ED01, 9B81604D0D0359AF8F54FED6DA7116FFD2F40407895028EAD99FF1D7CFDC2D14 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
00:42:53.0754 0x0ac4  NcbService - ok
00:42:53.0771 0x0ac4  [ 2586C4C167499210DCBF3ECFD8CCE210, D8129FEDE9918BF4FB0057CC58700D4E08457060E810B9CC25CA0F598506ADB8 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
00:42:53.0779 0x0ac4  NcdAutoSetup - ok
00:42:53.0836 0x0ac4  [ F21B77B4D74092A543807D3CEB711A88, 5C3C17A10E990070FAB317C0C5333DE768E408CAF43EC4FA9D18116C6EE3B3DC ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
00:42:53.0854 0x0ac4  NDIS - ok
00:42:53.0872 0x0ac4  [ C6BB12BC35D1637CA17AE16D3A4725EB, 01C1D9FA738886A195166F88207EEB6715A1DE0608978ED6C5DC738AF5C02513 ] NdisCap         C:\WINDOWS\system32\DRIVERS\ndiscap.sys
00:42:53.0880 0x0ac4  NdisCap - ok
00:42:53.0887 0x0ac4  [ 9F1DA20E943BE7AA4ED5F3E1EBA78B37, CCD99962917BBE256F64AE14CCC9FD12433C72B5DB98E0E57CA8F212A11B3C8F ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
00:42:53.0898 0x0ac4  NdisImPlatform - ok
00:42:53.0915 0x0ac4  [ 9F1DA20E943BE7AA4ED5F3E1EBA78B37, CCD99962917BBE256F64AE14CCC9FD12433C72B5DB98E0E57CA8F212A11B3C8F ] NdisImPlatformMp C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
00:42:53.0918 0x0ac4  NdisImPlatformMp - ok
00:42:53.0949 0x0ac4  [ 9423421E735BD5394351E0C47C76BB92, 763E5D06F896C0EF8AD52515464F28BA85DB7A1560E451857AC9AA68FAFCBC66 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
00:42:53.0954 0x0ac4  NdisTapi - ok
00:42:53.0970 0x0ac4  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
00:42:53.0978 0x0ac4  Ndisuio - ok
00:42:53.0993 0x0ac4  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
00:42:53.0997 0x0ac4  NdisVirtualBus - ok
00:42:54.0023 0x0ac4  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:42:54.0035 0x0ac4  NdisWan - ok
00:42:54.0046 0x0ac4  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:42:54.0050 0x0ac4  NdisWanLegacy - ok
00:42:54.0105 0x0ac4  [ A5BD69A8812FA79D1A487691DD3FB244, 67B5EDE101943E0E8B8041DB2353D20C8B9F2D253E77964761CFE8F136C0BBC7 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
00:42:54.0112 0x0ac4  NDProxy - ok
00:42:54.0133 0x0ac4  [ 5A072F0B90C29C5233D78BE33EF5ED78, B32ED76A674B1FC743361FB7BBD4C915A78B14132AB056AADD445D5995AD4F32 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
00:42:54.0140 0x0ac4  Ndu - ok
00:42:54.0151 0x0ac4  [ A83D67D347A684F10B7D3019C8A6380C, 2B86832967981C8C786BF24C1CF8E13E01745ACE3333CF5C821DD93D623B96E4 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
00:42:54.0157 0x0ac4  NetBIOS - ok
00:42:54.0184 0x0ac4  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
00:42:54.0204 0x0ac4  NetBT - ok
00:42:54.0226 0x0ac4  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] Netlogon        C:\WINDOWS\system32\lsass.exe
00:42:54.0229 0x0ac4  Netlogon - ok
00:42:54.0295 0x0ac4  [ B7AD851A21FEBA3BA214972627614207, 29605320CCC3DAAD062CAECF0009DACBC2F6D28ED4E8AF7CE76132129F5572A0 ] Netman          C:\WINDOWS\System32\netman.dll
00:42:54.0393 0x0ac4  Netman - ok
00:42:54.0419 0x0ac4  [ F0F0A372C2EF6358399C4936F91B6131, CE596C71EB4D1A5E104D3148F2D0D8789882C59FD198DCF33CCAC7A08B50E4EE ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
00:42:54.0429 0x0ac4  netprofm - ok
00:42:54.0465 0x0ac4  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:42:54.0484 0x0ac4  NetTcpPortSharing - ok
00:42:54.0508 0x0ac4  [ 70414DB660BFBB7BD58FCE8EA4364E1B, 6DFB3897CD55E22BA1EDF0AE672F4D7A6A1F512F8A0A26AF106765E6B1CF65AC ] netvsc          C:\WINDOWS\system32\DRIVERS\netvsc63.sys
00:42:54.0516 0x0ac4  netvsc - ok
00:42:54.0557 0x0ac4  [ 3A280F3B3C7A46E29C404ACD46ECBF5E, 81C3367A2A212DBCC65B8A0166FD092E3205AB31A146B4B737061335CEC51F9D ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
00:42:54.0566 0x0ac4  NlaSvc - ok
00:42:54.0587 0x0ac4  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
00:42:54.0594 0x0ac4  Npfs - ok
00:42:54.0608 0x0ac4  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
00:42:54.0614 0x0ac4  npsvctrig - ok
00:42:54.0628 0x0ac4  [ 6E2271ED0C3E95B8E29F3752B91B9E84, 44026AD9757EA82967D7F7578455802FAD7FE0057EAC088E0AE207C15F594B86 ] nsi             C:\WINDOWS\system32\nsisvc.dll
00:42:54.0636 0x0ac4  nsi - ok
00:42:54.0645 0x0ac4  [ E490B459978CB87779E84C761D22B827, 1E5CA38626E41618E4CA16DD0C70EB2FA86E986F0CF21A749BDE2A17015DEEC6 ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
00:42:54.0650 0x0ac4  nsiproxy - ok
00:42:54.0952 0x0ac4  [ 1C80517BE6836A812F6A9B99B8321351, 7DBED4633820E201C9C242D961EF6F25BA2B1D5593BA60F707CC71A4014C2D4B ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
00:42:55.0036 0x0ac4  Ntfs - ok
00:42:55.0067 0x0ac4  NTIOLib_1_0_3 - ok
00:42:55.0075 0x0ac4  NTIOLib_1_0_4 - ok
00:42:55.0099 0x0ac4  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\WINDOWS\system32\drivers\Null.sys
00:42:55.0103 0x0ac4  Null - ok
00:42:56.0233 0x0ac4  [ 2232AE1BB51A96A7381A2CA17DF12E24, 4813E27BC14EB3CBD55AF89B098EA5C8DA4C7FF0B6CCB7AACFC43BC0E578C988 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
00:42:56.0767 0x0ac4  nvlddmkm - ok
00:42:57.0100 0x0ac4  [ 45D6780D0525D7BC29E2E3605CA73C18, C8BBE8BE9824CD1D3C4314FE370FA03BD6000187B4FC4FC935F8342E1A02FA7E ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
00:42:57.0142 0x0ac4  NvNetworkService - ok
00:42:57.0169 0x0ac4  [ 30458B18AEA941B1FD3A6A076BE95A71, F3B36E52D63939A89658073E1DEFFCD050EF9B39F643771E846737915012D5FB ] nvpciflt        C:\WINDOWS\system32\DRIVERS\nvpciflt.sys
00:42:57.0190 0x0ac4  nvpciflt - ok
00:42:57.0214 0x0ac4  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
00:42:57.0222 0x0ac4  nvraid - ok
00:42:57.0236 0x0ac4  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
00:42:57.0246 0x0ac4  nvstor - ok
00:42:57.0320 0x0ac4  [ A0D870DCE152EE5B92A41AD927201D19, 67FB025CB380D933BF0FDD4AFE9BE4E3C1D69A59865E02A96533BBE9EC260D71 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
00:42:57.0321 0x0ac4  NvStreamKms - ok
00:42:58.0278 0x0ac4  [ E5597D09E5239C0F908948DB7057AC26, A6045D4D9D2F8007B0F75DAAABB2AD9FEB4A898E33A51ECE9A9D788D8E8F84A4 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
00:42:58.0849 0x0ac4  NvStreamSvc - ok
00:42:58.0934 0x0ac4  [ 2C8DD5A34A81715865D66D7AF39362A6, 62F9D873127921EE2EAA80B73E8994C4BF6DA7EEDACAEA030B8D58E086FD3850 ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
00:42:58.0962 0x0ac4  nvsvc - ok
00:42:58.0985 0x0ac4  [ 75034A4D7C02327D150B617571D4196A, 8E7DAFEC4307E883D52BD0B5F0732E26E019C953770B52ACBBAD3074A66393CB ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
00:42:58.0997 0x0ac4  nvvad_WaveExtensible - ok
00:42:59.0011 0x0ac4  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
00:42:59.0018 0x0ac4  nv_agp - ok
00:42:59.0078 0x0ac4  [ 11E0B35479C895888BA3D7F619DCFFF3, 6ED82C19898101EC00BD64A9F90595C3D20AD2D2902AA8765B740FB3B9312DDF ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:42:59.0081 0x0ac4  ose64 - ok
00:42:59.0127 0x0ac4  [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
00:42:59.0134 0x0ac4  p2pimsvc - ok
00:42:59.0177 0x0ac4  [ 2A57A937BC5B1B2D6AFE6A8C5925F50B, 00D84EFED5A7129AAD86945940030474795905C32D65CBD5B1A3EBADCED8F873 ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
00:42:59.0199 0x0ac4  p2psvc - ok
00:42:59.0245 0x0ac4  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport         C:\WINDOWS\System32\drivers\parport.sys
00:42:59.0254 0x0ac4  Parport - ok
00:42:59.0274 0x0ac4  [ EF0C1749C9A8CEE9A457473D433CC00F, A5FDAB5AD47471640D697C6CFBA6C67730878ABBA47D394EAA47C9733EDCE1F3 ] partmgr         C:\WINDOWS\system32\drivers\partmgr.sys
00:42:59.0277 0x0ac4  partmgr - ok
00:42:59.0319 0x0ac4  [ 0D7DA812D815F395BAA113817EC9C094, 5C342BC15B4811B304FC9003553FE52CEA24C31C735B04FD6231AD0950C1DFAC ] passthruparser  C:\WINDOWS\system32\drivers\passthruparser.sys
00:42:59.0329 0x0ac4  passthruparser - ok
00:42:59.0363 0x0ac4  [ 9A5309EF92F39346CFD5A4C2C3D1BFAD, 5908E0C9562F9CB24784491BD9AE7983A33A6BDF81AFA0A08045518A0C9BB2B1 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
00:42:59.0385 0x0ac4  PcaSvc - ok
00:42:59.0421 0x0ac4  [ 275AFE3FA35E8D78BE97695DF49817C6, 447CEBB16285AE073B4251D2DA71399306EF2DCB7F56286ABE2F0BD6C83EB489 ] pci             C:\WINDOWS\system32\drivers\pci.sys
00:42:59.0426 0x0ac4  pci - ok
00:42:59.0439 0x0ac4  [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
00:42:59.0444 0x0ac4  pciide - ok
00:42:59.0472 0x0ac4  [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
00:42:59.0482 0x0ac4  pcmcia - ok
00:42:59.0500 0x0ac4  [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw             C:\WINDOWS\system32\drivers\pcw.sys
00:42:59.0501 0x0ac4  pcw - ok
00:42:59.0533 0x0ac4  [ B9D968D8E2B0F9C6301CEB39CFC9B9E4, 83F32831B0727F18B56DC3CAF37E45A3523D2BBCD54D1421F0DE5A0179D8A404 ] pdc             C:\WINDOWS\system32\drivers\pdc.sys
00:42:59.0535 0x0ac4  pdc - ok
00:42:59.0587 0x0ac4  [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
00:42:59.0615 0x0ac4  PEAUTH - ok
00:42:59.0904 0x0ac4  [ 084DE525DFE82AE7453DD527390FA110, 8216AE63AE740D97204CDED6543B66FC1FB55DB86D42FBA0EC629361C40F9EC0 ] PeerDistSvc     C:\WINDOWS\system32\peerdistsvc.dll
00:42:59.0964 0x0ac4  PeerDistSvc - ok
00:43:00.0056 0x0ac4  [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
00:43:00.0059 0x0ac4  PerfHost - ok
00:43:00.0114 0x0ac4  [ 928061178CD9856CA6B67FFFCE6BA766, 71DE3C7CA7F83EAAA550CD8A68FB67DE042B0AE51BFACB1ECB8852D502E11F50 ] pla             C:\WINDOWS\system32\pla.dll
00:43:00.0291 0x0ac4  pla - ok
00:43:00.0333 0x0ac4  [ BC6849C62DB407573C6AD8CB1A4D2628, 5BDE0D60F85E4C27CEAD1B301155B54D841FB773BD5BB8AC5DDAEE31F8E94627 ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
00:43:00.0338 0x0ac4  PlugPlay - ok
00:43:00.0367 0x0ac4  [ 045EB4F260606A03BE340D09DEAF3BA4, 6F34B8D414F7F69F4388F2F8A86E0F3AD179E423126990AF3E1EC4DCCB8E7693 ] PNRPAutoReg     C:\WINDOWS\system32\pnrpauto.dll
00:43:00.0392 0x0ac4  PNRPAutoReg - ok
00:43:00.0422 0x0ac4  [ E287F157F7A0011D93179C64EF8ADCF2, C16FB92C7B18D634BB1344238D35B3111494C243FBD5853F05376F5051480D83 ] PNRPsvc         C:\WINDOWS\system32\pnrpsvc.dll
00:43:00.0429 0x0ac4  PNRPsvc - ok
00:43:00.0462 0x0ac4  [ C16097D77A232A288D65F299E2E01105, 5CE4B44B06FD26569C0F92FF1D3991D0128D8444AE7BC9EBEF5A33811D721BE8 ] PolicyAgent     C:\WINDOWS\System32\ipsecsvc.dll
00:43:00.0478 0x0ac4  PolicyAgent - ok
00:43:00.0511 0x0ac4  [ 00E08B30E7F7C13ECE2CDF4F46A77311, 1807C0A64C1794E572C86730816C01DCF4D8F773ADE9CAEA3AC0658F7BD71A4E ] Power           C:\WINDOWS\system32\umpo.dll
00:43:00.0520 0x0ac4  Power - ok
00:43:00.0698 0x0ac4  [ B7DB57A000D46D4DE75BC0C563E58072, 8183EB09DC4D44DFF027CA0AAA8C09921A14F088C1BC427B6ACA42340AAF69E6 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
00:43:00.0820 0x0ac4  PrintNotify - ok
00:43:00.0862 0x0ac4  [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor       C:\WINDOWS\System32\drivers\processr.sys
00:43:00.0870 0x0ac4  Processor - ok
00:43:00.0906 0x0ac4  [ B2A890D96C05E33FDD2BF3F3D4D0DF92, 3A29E17424429A5654D906E420D938148F09F57457356EFA72DA003B73F2D81E ] ProfSvc         C:\WINDOWS\system32\profsvc.dll
00:43:00.0919 0x0ac4  ProfSvc - ok
00:43:00.0937 0x0ac4  [ 8528BB05E4D4E25945F78B00B2555FB7, FF8E0D4580F93CD348080967F52FE6C2C68B56DAEACAE2EAEF04E19412A953AE ] Psched          C:\WINDOWS\system32\DRIVERS\pacer.sys
00:43:00.0943 0x0ac4  Psched - ok
00:43:00.0967 0x0ac4  [ 523915C4E06522B7AF8B8B3FE3C3F6D0, F68BBD1542D5DE84AE5DED9296258248BDBBA6B97F61716D10B637D3A736A322 ] pvhdparser      C:\WINDOWS\system32\drivers\pvhdparser.sys
00:43:00.0985 0x0ac4  pvhdparser - ok
00:43:01.0020 0x0ac4  [ AF90BB44C99D6820BE52C9BBAA523283, 9772D9CC1666959EC8EE4ED740A5179473CE4F38762109F1123DD68010D20EA1 ] QWAVE           C:\WINDOWS\system32\qwave.dll
00:43:01.0062 0x0ac4  QWAVE - ok
00:43:01.0081 0x0ac4  [ 3FB466684609A4329858CF2EBD62E0FD, CFC8FBAB1436948F9D34CE6A2D6DE2F86F3E93E50B86851CED979C8CCE609798 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
00:43:01.0088 0x0ac4  QWAVEdrv - ok
00:43:01.0109 0x0ac4  [ 2C56F0EE27E4EF70CA4B4983D3638905, AFFDD686886CE982424B644D9168D61C6F86A5244FF97BC644DF75B321E415E5 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
00:43:01.0114 0x0ac4  RasAcd - ok
00:43:01.0128 0x0ac4  [ 5F061AC45266841A2860C1858ED863B8, 9E0D52BAC8A50225C32D0397C35350601B996443E2481C808CC59D3B0763FEF0 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
00:43:01.0137 0x0ac4  RasAuto - ok
00:43:01.0181 0x0ac4  [ 5C7B86EE33505E36026AFAAB62DA6364, 903BB1A355AC746BF09C2A7C87B068168648DB79DEF39AB1DC710B6A7A5F6556 ] RasMan          C:\WINDOWS\System32\rasmans.dll
00:43:01.0217 0x0ac4  RasMan - ok
00:43:01.0243 0x0ac4  [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
00:43:01.0251 0x0ac4  RasPppoe - ok
00:43:01.0280 0x0ac4  [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
00:43:01.0301 0x0ac4  rdbss - ok
00:43:01.0318 0x0ac4  [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
00:43:01.0323 0x0ac4  rdpbus - ok
00:43:01.0340 0x0ac4  [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR           C:\WINDOWS\system32\drivers\rdpdr.sys
00:43:01.0350 0x0ac4  RDPDR - ok
00:43:01.0369 0x0ac4  [ 858776908AF838E3790F3261B799CDA6, 5BE4658540382D1B2F46E503CE175D74E3870FE492B8B8F37C3CFB34FF8E2DA8 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
00:43:01.0375 0x0ac4  RdpVideoMiniport - ok
00:43:01.0423 0x0ac4  [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
00:43:01.0427 0x0ac4  rdyboost - ok
00:43:01.0577 0x0ac4  [ E515A287C8FAE901EB8FB42F168E14F2, 9AE8D608587713FD18BB728BADD402C86FFF06A67359B22ED9431705522BC310 ] ReFS            C:\WINDOWS\system32\drivers\ReFS.sys
00:43:01.0645 0x0ac4  ReFS - ok
00:43:01.0698 0x0ac4  [ BFFB40FBE6D2C3469F8D06EE5E4934AB, 5B6763F973A740DCD53CEA75156926457BED8B075965033C484877DDA8B97F39 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
00:43:01.0717 0x0ac4  RemoteAccess - ok
00:43:01.0743 0x0ac4  [ 4DCCABE03D06955ED61BABBD8EF9F30F, 531CD60315AAF283B73E0F6CF77D4DE093B809E73C44D2AC43B7247500B3485E ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
00:43:01.0755 0x0ac4  RemoteRegistry - ok
00:43:01.0794 0x0ac4  [ 0527EF6E23B9FAB37DDCBC479C6CFA28, C004CE600074AC434F8B24A3383F8C0ACFA5476D9E3B1493B40911C78B028D64 ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
00:43:01.0809 0x0ac4  RFCOMM - ok
00:43:01.0833 0x0ac4  [ D894CBD7DA753C881EE8D5E33B583225, DA4472A85F10A3DF8CE969F731E67FE7C75EE6095908AB8AC2C44851DC5A3F8B ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
00:43:01.0843 0x0ac4  RpcEptMapper - ok
00:43:01.0876 0x0ac4  [ 5CAE8F47B31D5CFC322B5B898C19E0FE, FDB5F0B6EA36403E031D9147AB0519011FAAD3AC8190DE5B1F17FB5472D79D47 ] RpcLocator      C:\WINDOWS\system32\locator.exe
00:43:01.0881 0x0ac4  RpcLocator - ok
00:43:01.0933 0x0ac4  [ 81979817943D830BF24571B7C1B28A1A, 9584D8F1FB3E6CF17BD465670B208C723A8E8B06775A3DA44F75D7710404EEA6 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
00:43:01.0946 0x0ac4  RpcSs - ok
00:43:01.0975 0x0ac4  [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
00:43:01.0983 0x0ac4  rspndr - ok
00:43:02.0014 0x0ac4  [ 14182642967B8751F3717E94FC90DF48, 0EEF109D51E7D8AE89DFF4C94AD42764682953DEBA2C4C62B6062F3753164A4F ] RSUSBSTOR       C:\WINDOWS\System32\Drivers\RtsUStor.sys
00:43:02.0018 0x0ac4  RSUSBSTOR - ok
00:43:02.0154 0x0ac4  [ 7F34BC88B13E31BBD1014ACDC0C490FF, 7F329BC5C9867E1E411D9A8D44378D2D9169119A5E7D7A1747F7428521EC00C3 ] RtkBtFilter     C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys
00:43:02.0220 0x0ac4  RtkBtFilter - ok
00:43:02.0307 0x0ac4  [ 0004430BB4664C095ACEF32733035F04, 559BEF335397F9B21ABCB720BF8C4D5E257168B8859109B886E7B277FA572BD7 ] RTWlanE         C:\WINDOWS\system32\DRIVERS\rtwlane.sys
00:43:02.0462 0x0ac4  RTWlanE - ok
00:43:02.0489 0x0ac4  [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap           C:\WINDOWS\System32\drivers\vms3cap.sys
00:43:02.0493 0x0ac4  s3cap - ok
00:43:02.0518 0x0ac4  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] SamSs           C:\WINDOWS\system32\lsass.exe
00:43:02.0519 0x0ac4  SamSs - ok
00:43:02.0561 0x0ac4  [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
00:43:02.0570 0x0ac4  sbp2port - ok
00:43:02.0600 0x0ac4  [ 47C497FA4DDEA908633CAA60CEBE6805, 4DF5742D4C99D3F7B6A5671AEDB1E5E47D3399D36B28BA19C105FA604D8D5A1C ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
00:43:02.0610 0x0ac4  SCardSvr - ok
00:43:02.0630 0x0ac4  [ E76C4E98302AE39CC6FA5D20FC8B5438, B6B6B59CF427515087689285797F4A5763103440EBE5D87A61FA74F80F895BD0 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
00:43:02.0639 0x0ac4  ScDeviceEnum - ok
00:43:02.0654 0x0ac4  [ ABD0237B15DBD2B4695F4B7D734A58F7, D6831921F0CD3E03CBF1CA3ED5824EE0C75127842D12D4E897E74EC72B0792EB ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
00:43:02.0660 0x0ac4  scfilter - ok
00:43:02.0722 0x0ac4  [ A95838FFFAEAA7500263D491575F7E0C, FEB79ECAE6D9AB0C29D9AFE12F60502A8357B3A382C0FACF4C6DA4852B6ECFA4 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
00:43:02.0757 0x0ac4  Schedule - ok
00:43:02.0784 0x0ac4  [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] SCPolicySvc     C:\WINDOWS\System32\certprop.dll
00:43:02.0787 0x0ac4  SCPolicySvc - ok
00:43:02.0913 0x0ac4  [ FDEC5799BA499D18AFA3A540538866E7, 551EE0945FE4EC213FFF623E524500B57531EFEA2D76FA7ED1D2D605E7E2168F ] sdbus           C:\WINDOWS\System32\drivers\sdbus.sys
00:43:02.0977 0x0ac4  sdbus - ok
00:43:03.0060 0x0ac4  [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
00:43:03.0101 0x0ac4  sdstor - ok
00:43:03.0126 0x0ac4  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\WINDOWS\system32\drivers\secdrv.sys
00:43:03.0133 0x0ac4  secdrv - ok
00:43:03.0161 0x0ac4  [ C49009F897BA4F2F4F31043663AA1485, 48C8BE1E3A4F150662AD012AF4E0357ABA792AD1147AB90EFF6CB2630E2501B6 ] seclogon        C:\WINDOWS\system32\seclogon.dll
00:43:03.0173 0x0ac4  seclogon - ok
00:43:03.0213 0x0ac4  [ A88882E64BDC1D8E8D6E727B71CCCC53, 12D2235F54D0CEEED8AA268C17CDE44020269F4FEFC70CE957DBBF99AF7F553D ] SENS            C:\WINDOWS\System32\sens.dll
00:43:03.0224 0x0ac4  SENS - ok
00:43:03.0293 0x0ac4  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] SensorsSimulatorDriver C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
00:43:03.0381 0x0ac4  SensorsSimulatorDriver - ok
00:43:03.0432 0x0ac4  [ E66A7C8CE7ED22DED6DF1CA479FB4790, ADEB076F131E7A8C3AD96022B09BB33EB9AB26C9C831503B8C6960AA763B8975 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
00:43:03.0465 0x0ac4  SensrSvc - ok
00:43:03.0502 0x0ac4  [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx           C:\WINDOWS\system32\drivers\SerCx.sys
00:43:03.0516 0x0ac4  SerCx - ok
00:43:03.0562 0x0ac4  [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
00:43:03.0586 0x0ac4  SerCx2 - ok
00:43:03.0606 0x0ac4  [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum         C:\WINDOWS\System32\drivers\serenum.sys
00:43:03.0614 0x0ac4  Serenum - ok
00:43:03.0637 0x0ac4  [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
00:43:03.0653 0x0ac4  Serial - ok
00:43:03.0676 0x0ac4  [ 0BD2B65DCE756FDE95A2E5CCCBF7705D, F13FAFEC8FCF3E796196562717C433CE359A74A3E5876AB070647C717AF74028 ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
00:43:03.0687 0x0ac4  sermouse - ok
00:43:03.0756 0x0ac4  [ D5C3776CBD8BC307DCCA3FD4CE667A37, 98E4253B770C25914C91A6148E2EA15ED0EF37ADCB042A47252DBA135972BF74 ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
00:43:03.0779 0x0ac4  SessionEnv - ok
00:43:03.0801 0x0ac4  [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy         C:\WINDOWS\System32\drivers\sfloppy.sys
00:43:03.0807 0x0ac4  sfloppy - ok
00:43:03.0843 0x0ac4  [ F4414F57DF2CECB8FC969AA43A6B0D50, AD09A6E1294721507DD6BE82B91F2EEB0FF0151B9BC14A75840CD657DBFDECEC ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
00:43:03.0885 0x0ac4  SharedAccess - ok
00:43:03.0932 0x0ac4  [ 0D190D8B4B20446BE6299AC734DFADF1, 6551095971F99820BBFC5FED8FAB9591A3F8ABFA0F027887F3B71B79325FF6D9 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
00:43:03.0943 0x0ac4  ShellHWDetection - ok
00:43:03.0995 0x0ac4  [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
00:43:04.0047 0x0ac4  SiSRaid2 - ok
00:43:04.0073 0x0ac4  [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
00:43:04.0080 0x0ac4  SiSRaid4 - ok
00:43:04.0109 0x0ac4  [ 587ACA15210D1B01FBF272E07A08F91A, 1F3C13C218C5EA329C6E33E4AE7CFE88DAD59DA40F59FDE09D733AFD2E489000 ] smphost         C:\WINDOWS\System32\smphost.dll
00:43:04.0114 0x0ac4  smphost - ok
00:43:04.0138 0x0ac4  [ 49EEB92DE930B8566EF615D600781DB4, 0B7C929D24FAFC34F95BB4AA77DCBA29DDD8F1977EB42713B64228677D1FBFD3 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
00:43:04.0144 0x0ac4  SNMPTRAP - ok
00:43:04.0191 0x0ac4  [ 33977549C2CED09936E05BEE7659EAFF, EB95C72ED0EAC59A50E6882B2501049191A796542C42414FAF0028907C669B21 ] spaceport       C:\WINDOWS\system32\drivers\spaceport.sys
00:43:04.0197 0x0ac4  spaceport - ok
00:43:04.0218 0x0ac4  [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx           C:\WINDOWS\system32\drivers\SpbCx.sys
00:43:04.0226 0x0ac4  SpbCx - ok
00:43:04.0264 0x0ac4  [ FE0CB40F36D3FCDD3A1B312EF72C38D5, 42EA50869752164764DFE8CE7E1C247BE8342A0C15F39158DC808E8A692C460F ] Spooler         C:\WINDOWS\System32\spoolsv.exe
00:43:04.0284 0x0ac4  Spooler - ok
00:43:04.0451 0x0ac4  [ C993A0B97BECD3AAF5158E3869878465, 8B86F37DEFCBE55DE507D830EC4980EBB39B3CCA30C2B3E76B588AAB282A50FC ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
00:43:04.0601 0x0ac4  sppsvc - ok
00:43:04.0699 0x0ac4  [ 055B0DE7BCDB14FB18279F09DCA07954, 94944F996F2F73233A96F8E766606EA5CCC7142EA2AF4BCEFD2603578F2B4A4A ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
00:43:04.0702 0x0ac4  SQLWriter - ok
00:43:04.0729 0x0ac4  [ 2B78788A1485F9B99A578A299DF42C02, A87183A9B13585C9E850437A45237105D39D7F3212ADB079D6AB430B67A59643 ] srv             C:\WINDOWS\system32\DRIVERS\srv.sys
00:43:04.0743 0x0ac4  srv - ok
00:43:04.0794 0x0ac4  [ FD163F487CBA9C98AFFEB546C80F49A2, 18DAAD173C0517F7BBF5D0C914302D98931E3BA6DAA36DC91D8DB0743EC40563 ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
00:43:04.0812 0x0ac4  srv2 - ok
00:43:04.0852 0x0ac4  [ 716059F37BCCB1ABEDE99EBE82E8E362, 05F27B0FABBBC0E324F06D20ABEF51EDA3316C9F7F85C1AD24639CD6DE1BC8AC ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
00:43:04.0868 0x0ac4  srvnet - ok
00:43:04.0895 0x0ac4  [ BB9ED3EDD8E85008215A7250D325A72E, D3404E31B7706B25CDEA7CB4260C343B5F090E8CCB9A5FA203B0F94A9112F1B3 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
00:43:04.0906 0x0ac4  SSDPSRV - ok
00:43:04.0915 0x0ac4  [ 3911418AFDE10EA6823B7799E4815524, A73517C4C1271E666B2B3A747756070098E923742B41572AA16573170440AA07 ] SstpSvc         C:\WINDOWS\system32\sstpsvc.dll
00:43:04.0925 0x0ac4  SstpSvc - ok
00:43:04.0959 0x0ac4  [ 91310683D7B6B292B746D60734B59322, 2C56C3E4AA7356FB544B52F80ABDA39A80473390CB2059C69BDCCAD40FE56325 ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
00:43:04.0979 0x0ac4  ssudmdm - ok
00:43:05.0159 0x0ac4  [ 7E815DDD79CC73A02A33DF11FABE4E1E, A05A85CDB0CB0AA1AAC93AA801C39242BFE59082E2BC580F04EBFA71B5B61F07 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
00:43:05.0202 0x0ac4  Steam Client Service - ok
00:43:05.0234 0x0ac4  [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
00:43:05.0241 0x0ac4  stexstor - ok
00:43:05.0337 0x0ac4  [ D638904FE86A5FE542A1BA13A9D68E5C, 89A956F932316BC50DD99B54BAF4E2809DCAA084DBB04CB84D11E5470BEAF251 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
00:43:05.0364 0x0ac4  stisvc - ok
00:43:05.0385 0x0ac4  [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
00:43:05.0394 0x0ac4  storahci - ok
00:43:05.0420 0x0ac4  [ 7A08CEE1535F5A448215634C5EA74E50, 41529CDC08A3956F8FE9D5759B147E2E56E3305149EA415EB200249F7CD32094 ] storflt         C:\WINDOWS\system32\DRIVERS\vmstorfl.sys
00:43:05.0427 0x0ac4  storflt - ok
00:43:05.0453 0x0ac4  [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
00:43:05.0462 0x0ac4  stornvme - ok
00:43:05.0492 0x0ac4  [ 3118058E3D07021A55324A943C6D722B, 0B255DF1977DADD2B9766EEEA814B464F0ABFA34D6439F3C453083850C121F16 ] StorSvc         C:\WINDOWS\system32\storsvc.dll
00:43:05.0498 0x0ac4  StorSvc - ok
00:43:05.0512 0x0ac4  [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc         C:\WINDOWS\system32\drivers\storvsc.sys
00:43:05.0519 0x0ac4  storvsc - ok
00:43:05.0540 0x0ac4  [ 03618F935379614837F915D04C45FC0E, 9CC0CBA7AFC58E7F921C13FA3F5269714F1F827535A311E11EA48689C4D539DE ] storvsp         C:\WINDOWS\System32\drivers\storvsp.sys
00:43:05.0542 0x0ac4  storvsp - ok
00:43:05.0562 0x0ac4  [ D8E1AE075AB3E8AD56F69C44AA978596, CAFF5116DE7F0EEFFEBE38724BCEE7D11B44153AD35EE43E314C56D5E210758A ] svsvc           C:\WINDOWS\system32\svsvc.dll
00:43:05.0568 0x0ac4  svsvc - ok
00:43:05.0590 0x0ac4  [ 84E0F5D41C138C5CC975137A2A98F6D3, 1E36CED05E4F4365C2AB020CAF920E3959995D7F89F3FABD7B2FB05985F85F38 ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
00:43:05.0604 0x0ac4  swenum - ok
00:43:05.0661 0x0ac4  [ 850EBB87584484DC16F917E7B6F4A304, C253D1DFFCDFB018432063602FB01DBCBDDD6E03458E5C366AABD4670F114B0C ] swprv           C:\WINDOWS\System32\swprv.dll
00:43:05.0693 0x0ac4  swprv - ok
00:43:05.0912 0x0ac4  [ 3DA26652B12E9AB43FD04976AC6DFD33, DEFE220D86197949E97342FE3487CD6A07DD2FFAF6D17A7C65419C2C1B9D1AB5 ] SysMain         C:\WINDOWS\system32\sysmain.dll
00:43:05.0979 0x0ac4  SysMain - ok
00:43:06.0042 0x0ac4  [ D65B1C952AEB864C2BAC7A770B17ECCE, 3EFAAFFF73390D9CB660E0F42B305512396CF66ED06E4A20ED67E8722FB4355B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
00:43:06.0064 0x0ac4  SystemEventsBroker - ok
00:43:06.0110 0x0ac4  [ BA6DD39266A5E15515C8C14DA2DA3E5C, 5BC917BA4E7281A67CC6CEF2F4D1972DF04DECBEFB6DED0B08FFBD06E15D4B4F ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
00:43:06.0119 0x0ac4  TabletInputService - ok
00:43:06.0158 0x0ac4  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\WINDOWS\system32\DRIVERS\tap0901.sys
00:43:06.0190 0x0ac4  tap0901 - ok
00:43:06.0222 0x0ac4  [ B517410F157693043DACA21B19B258A6, 2224EECEB575CEA811036C43BB5B0A408DE5F59BC97235AB948968E4C3E438F2 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
00:43:06.0245 0x0ac4  TapiSrv - ok
00:43:06.0604 0x0ac4  [ 25AC0B50A71938890970E1508F107196, 6FAFBA2DFFFF9916CC304AE7E6AD0F6CE1D6F4AAE6B2C113202D78310EFEBC58 ] Tcpip           C:\WINDOWS\system32\drivers\tcpip.sys
00:43:06.0667 0x0ac4  Tcpip - ok
00:43:06.0735 0x0ac4  [ 25AC0B50A71938890970E1508F107196, 6FAFBA2DFFFF9916CC304AE7E6AD0F6CE1D6F4AAE6B2C113202D78310EFEBC58 ] TCPIP6          C:\WINDOWS\system32\DRIVERS\tcpip.sys
00:43:06.0771 0x0ac4  TCPIP6 - ok
00:43:06.0859 0x0ac4  [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
00:43:06.0870 0x0ac4  tcpipreg - ok
00:43:06.0917 0x0ac4  [ FFF28F9F6823EB1756C60F1649560BBF, 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C ] tdx             C:\WINDOWS\system32\DRIVERS\tdx.sys
00:43:06.0944 0x0ac4  tdx - ok
00:43:07.0033 0x0ac4  [ 950AD1AE7498A492126FB9F9B2E27DB5, C4C9A972015F567FC87A4094C86835B2DD3476426AB8B40CD4872A725CA89CFC ] Te.Service      C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe
00:43:07.0039 0x0ac4  Te.Service - ok
00:43:07.0321 0x0ac4  [ 97F6FFB8A305A77D25C6C0E07B71D252, 97C5FC73A250FC2016E29148A6A37E54BD74AE983D99AAF4890C059719C93EC2 ] TeamViewer9     C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
00:43:07.0391 0x0ac4  TeamViewer9 - ok
00:43:07.0413 0x0ac4  [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
00:43:07.0419 0x0ac4  terminpt - ok
00:43:07.0464 0x0ac4  [ 3D748E5558FD9A9F03182CB2330698DC, 70B2069AB7912EB49AB3ABD18D4B42CB94AC99CA6DE3F63F4888B8EAAC78AAA2 ] TermService     C:\WINDOWS\System32\termsrv.dll
00:43:07.0521 0x0ac4  TermService - ok
00:43:07.0554 0x0ac4  [ 05FBE1F7C13E87AF7A414CDF288B1F62, 24079E1A6B2E33A1A8E76A77F73473B93DD6B379E44C982CE50D6CEED9747838 ] Themes          C:\WINDOWS\system32\themeservice.dll
00:43:07.0562 0x0ac4  Themes - ok
00:43:07.0587 0x0ac4  [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] THREADORDER     C:\WINDOWS\system32\mmcss.dll
00:43:07.0590 0x0ac4  THREADORDER - ok
00:43:07.0609 0x0ac4  [ 347A3E49CE18402305B8119A6EC7CFEB, 6768B20EE577880B0353FE84B980D4A18D323929A63FAE41F7A55123BBFC8DBA ] TimeBroker      C:\WINDOWS\System32\TimeBrokerServer.dll
00:43:07.0615 0x0ac4  TimeBroker - ok
00:43:07.0637 0x0ac4  [ 82F909359600D3603FE852DB7F135626, 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D ] TPM             C:\WINDOWS\system32\drivers\tpm.sys
00:43:07.0648 0x0ac4  TPM - ok
00:43:07.0657 0x0ac4  [ C97E14BB6A196B0554D6EB67D8818175, C00588C94988F10507F84584DFA4C0A43B8648AD1AD35E9BAE14CDD21FCF7B90 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
00:43:07.0665 0x0ac4  TrkWks - ok
00:43:07.0729 0x0ac4  [ 887CC44830D3F367CAD17A0CA7CCA5C8, D4022A76433A11FD66D0F41A1EB4D6893BC5B22317E7E9E021739109EB493B44 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
00:43:07.0731 0x0ac4  TrustedInstaller - ok
00:43:07.0753 0x0ac4  [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
00:43:07.0760 0x0ac4  TsUsbFlt - ok
00:43:07.0781 0x0ac4  [ E0088068DCE2EE82897027DDB8E05254, FA9C201D3C885DAD2ABE6A23343EDCC83CFB342EFF9E3005FA50B1D88B21D203 ] TsUsbGD         C:\WINDOWS\System32\drivers\TsUsbGD.sys
00:43:07.0788 0x0ac4  TsUsbGD - ok
00:43:07.0824 0x0ac4  [ C8E0E78B5D284C2FF59BDFFDAF997242, BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 ] tunnel          C:\WINDOWS\system32\DRIVERS\tunnel.sys
00:43:07.0833 0x0ac4  tunnel - ok
00:43:07.0861 0x0ac4  [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35          C:\WINDOWS\system32\drivers\uagp35.sys
00:43:07.0876 0x0ac4  uagp35 - ok
00:43:07.0900 0x0ac4  [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
00:43:07.0908 0x0ac4  UASPStor - ok
00:43:07.0963 0x0ac4  [ B034A41891A36457B994307DFA772293, CA5E6500764A9777AE0E15B2AFB6F05982C90F01374E3F6DDC6DF3852282C66B ] UCX01000        C:\WINDOWS\System32\drivers\ucx01000.sys
00:43:08.0042 0x0ac4  UCX01000 - ok
00:43:08.0083 0x0ac4  [ 1EC649F112896FAE33250F0B97AC5D0B, 0C0A1C2C7615DEB298AD3073340FD1BF91FEBE611F133E3B48D994A6EAA8369F ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
00:43:08.0107 0x0ac4  udfs - ok
00:43:08.0145 0x0ac4  [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
00:43:08.0157 0x0ac4  UEFI - ok
00:43:08.0217 0x0ac4  [ 320878AFECDBBD61BBE98624A6CAAC08, 15C090EA32A24D976B5FCB1373B1281DCC2295C075299C814345D694AEB47CB9 ] UI0Detect       C:\WINDOWS\system32\UI0Detect.exe
00:43:08.0238 0x0ac4  UI0Detect - ok
00:43:08.0292 0x0ac4  [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx        C:\WINDOWS\system32\drivers\uliagpkx.sys
00:43:08.0306 0x0ac4  uliagpkx - ok
00:43:08.0314 0x0ac4  [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus           C:\WINDOWS\System32\drivers\umbus.sys
00:43:08.0321 0x0ac4  umbus - ok
00:43:08.0341 0x0ac4  [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
00:43:08.0347 0x0ac4  UmPass - ok
00:43:08.0371 0x0ac4  [ E3DDF7D43E05784FAA5E042605EEE528, 8E20E880FAB09AF4FF5C438BF9EAE9970D46C05167870110869B744E498FD761 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
00:43:08.0386 0x0ac4  UmRdpService - ok
00:43:08.0408 0x0ac4  [ 4A2FFDAC45F317E17DF642C7160EB633, F1AB762912FAA5F469F322407DA37C91556086C42D1643AD27516C12A84F74D0 ] upnphost        C:\WINDOWS\System32\upnphost.dll
00:43:08.0430 0x0ac4  upnphost - ok
00:43:08.0454 0x0ac4  [ 433ECDE01A52691FA7ACA51C10C09B70, B896296A3F8EF2AF3AC5F0091B9848156608586F1E10A95D70700BAB51E8062A ] usbccgp         C:\WINDOWS\System32\drivers\usbccgp.sys
00:43:08.0465 0x0ac4  usbccgp - ok
00:43:08.0492 0x0ac4  [ B3D6457D841A0CAEF4C52D88621715F2, CBDD76A8A28379B107B1FB530757B477B8AB74CD01F9F3CEDC7B1BA0C6E5A990 ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
00:43:08.0503 0x0ac4  usbcir - ok
00:43:08.0568 0x0ac4  [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci         C:\WINDOWS\System32\drivers\usbehci.sys
00:43:08.0581 0x0ac4  usbehci - ok
00:43:08.0614 0x0ac4  [ 93435654DCA210298BA0F986EB51C679, 926313A0499100EA5C49C5EC44BB8FE5F8F2A7F57F3EA56D59DA694F8396A409 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
00:43:08.0656 0x0ac4  usbhub - ok
00:43:08.0683 0x0ac4  [ 83C9C45D59C72FEFDAE9A5686BE31FEA, 12FC2C3C3C5CD5F2EFBAA11A1AD06FDD7DDB6EECF6F2684BBAAF88198D976316 ] USBHUB3         C:\WINDOWS\System32\drivers\UsbHub3.sys
00:43:08.0719 0x0ac4  USBHUB3 - ok
00:43:08.0755 0x0ac4  [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci         C:\WINDOWS\System32\drivers\usbohci.sys
00:43:08.0761 0x0ac4  usbohci - ok
00:43:08.0774 0x0ac4  [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
00:43:08.0780 0x0ac4  usbprint - ok
00:43:08.0823 0x0ac4  [ EA23453240137F6773174E0D93F61A69, 579AD09FB428C2BB8B4055128620A7AADD1B606C1EA44B87A01D69A84232A5D9 ] USBSTOR         C:\WINDOWS\System32\drivers\USBSTOR.SYS
00:43:08.0834 0x0ac4  USBSTOR - ok
00:43:08.0868 0x0ac4  [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci         C:\WINDOWS\System32\drivers\usbuhci.sys
00:43:08.0880 0x0ac4  usbuhci - ok
00:43:08.0917 0x0ac4  [ 18F744E8CCEB2670040EBAF7AD77B8C6, C5E2DF4EA0D946B4DA67DE29FA9D0F079DED35EC59B98E532C4C2D5F8E86DA0A ] usbvideo        C:\WINDOWS\System32\Drivers\usbvideo.sys
00:43:08.0937 0x0ac4  usbvideo - ok
00:43:08.0989 0x0ac4  [ 48430B0313FC1CFE3D2400553F1A93CD, 92994DE6B131E904AFF2C9C4FBB4E6B0D58525A1539763327373DA18C9F08193 ] USBXHCI         C:\WINDOWS\System32\drivers\USBXHCI.SYS
00:43:08.0995 0x0ac4  USBXHCI - ok
00:43:09.0017 0x0ac4  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
00:43:09.0019 0x0ac4  VaultSvc - ok
00:43:09.0041 0x0ac4  [ AD6D273E646B94BB6668C8CB439CFBD3, 0B9218E121280FA39932BF30B0B92D887EADFF6C42B56786A2BF133248B92A09 ] VBoxDrv         C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys
00:43:09.0053 0x0ac4  VBoxDrv - ok
00:43:09.0095 0x0ac4  [ B0A8C5BC95689A130F9E05492341833D, 8DDC6D77B0541813919B685D2DFCDFA4F752F8DD99400DA87523F8D2E9D72D27 ] VBoxNetAdp      C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
00:43:09.0105 0x0ac4  VBoxNetAdp - ok
00:43:09.0132 0x0ac4  [ 2966838EDAFBEB2819D127BF7D23F27B, F7ED1A0FDFA1B655315A3BC5630F59DDD7DD5BED8ABB7679ED5390F9A8B3B303 ] VBoxNetFlt      C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
00:43:09.0141 0x0ac4  VBoxNetFlt - ok
00:43:09.0161 0x0ac4  [ E5C140160617B2B0545B4051AA9507FF, 3BC0A0CA1BD510FCFDD8222B05A370903B15DC06C4277A5F0BA95A6382970978 ] VBoxUSBMon      C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys
00:43:09.0170 0x0ac4  VBoxUSBMon - ok
00:43:09.0186 0x0ac4  [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
00:43:09.0188 0x0ac4  vdrvroot - ok
00:43:09.0371 0x0ac4  [ E3EF58D4123B5AA29C8E19825AF84A5E, FB1046722BC643E955DBC3B1459DBF2A6D575EBA2BCF7B20A0FA51E3993835E2 ] vds             C:\WINDOWS\System32\vds.exe
00:43:09.0431 0x0ac4  vds - ok
00:43:09.0464 0x0ac4  [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt     C:\WINDOWS\system32\drivers\VerifierExt.sys
00:43:09.0470 0x0ac4  VerifierExt - ok
00:43:09.0587 0x0ac4  [ 52E483A3701A5A61A75A06993720347D, 689E812755E485DF6960D1E049740FBAFB812467D23B673DCAA40C03FEBB544F ] vhdmp           C:\WINDOWS\System32\drivers\vhdmp.sys
00:43:09.0622 0x0ac4  vhdmp - ok
00:43:09.0653 0x0ac4  [ 49EF44CB3331381547FD94C36B84FCB5, D93920C63D769F1DC117B11221AE8CAF2782B17CAC6B520E34E2803869FA689B ] vhdparser       C:\WINDOWS\system32\drivers\vhdparser.sys
00:43:09.0680 0x0ac4  vhdparser - ok
00:43:09.0702 0x0ac4  [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide          C:\WINDOWS\system32\drivers\viaide.sys
00:43:09.0707 0x0ac4  viaide - ok
00:43:09.0735 0x0ac4  [ 3CE922E34DB12D9F3C0EA856BC09687C, E50A1885FBC775E49614989ECFEA4ACBBDDA16AF459CC5361EED9E23CC7CD42C ] Vid             C:\WINDOWS\System32\drivers\Vid.sys
00:43:09.0752 0x0ac4  Vid - ok
00:43:09.0779 0x0ac4  [ C6305BDFC4F7CE51F72BB072C03D4ACE, 73E62869CA3104F48CC3B0C45E69CE9BF4F8D7D06E29C2F049B9347ABB50554D ] vmbus           C:\WINDOWS\system32\drivers\vmbus.sys
00:43:09.0791 0x0ac4  vmbus - ok
00:43:09.0816 0x0ac4  [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
00:43:09.0821 0x0ac4  VMBusHID - ok
00:43:09.0831 0x0ac4  [ 68F8C26DEA2D42E8DEC0778943433C80, 81E8F9D62815F94952CEEABD0689473CC330F7890F66872DCD35A43C06ED33CD ] vmbusr          C:\WINDOWS\System32\drivers\vmbusr.sys
00:43:09.0833 0x0ac4  vmbusr - ok
00:43:09.0868 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
00:43:09.0902 0x0ac4  vmicguestinterface - ok
00:43:09.0924 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicheartbeat   C:\WINDOWS\System32\ICSvc.dll
00:43:09.0933 0x0ac4  vmicheartbeat - ok
00:43:09.0950 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
00:43:09.0959 0x0ac4  vmickvpexchange - ok
00:43:09.0977 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicrdv         C:\WINDOWS\System32\ICSvc.dll
00:43:09.0986 0x0ac4  vmicrdv - ok
00:43:10.0002 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicshutdown    C:\WINDOWS\System32\ICSvc.dll
00:43:10.0011 0x0ac4  vmicshutdown - ok
00:43:10.0028 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmictimesync    C:\WINDOWS\System32\ICSvc.dll
00:43:10.0037 0x0ac4  vmictimesync - ok
00:43:10.0052 0x0ac4  [ 9067880BBB1C18703DBFF27D731D7ECA, 0044246249F4B945D72BBC0FEF9BF3C31E62F57CBF77615A95213B36A29F0C71 ] vmicvss         C:\WINDOWS\System32\ICSvc.dll
00:43:10.0061 0x0ac4  vmicvss - ok
00:43:10.0392 0x0ac4  [ 48FAE3F7C16F2A61A5686609E4A1A36E, 29485D245E30293266CB9B7EA20B25C4A935EA722F0932797F0D614BFF0537D8 ] vmms            C:\WINDOWS\system32\vmms.exe
00:43:10.0696 0x0ac4  vmms - ok
00:43:10.0741 0x0ac4  [ 891A00F639288019FA3AAEEFEA837EE8, 65178FE4F19FDF11AA2E537A46EE98229A264831A4C0648A94C98F8A2EBD4FEE ] VMSMP           C:\WINDOWS\system32\DRIVERS\vmswitch.sys
00:43:10.0773 0x0ac4  VMSMP - ok
00:43:10.0807 0x0ac4  [ 891A00F639288019FA3AAEEFEA837EE8, 65178FE4F19FDF11AA2E537A46EE98229A264831A4C0648A94C98F8A2EBD4FEE ] VMSP            C:\WINDOWS\system32\DRIVERS\vmswitch.sys
00:43:10.0817 0x0ac4  VMSP - ok
00:43:10.0836 0x0ac4  [ 891A00F639288019FA3AAEEFEA837EE8, 65178FE4F19FDF11AA2E537A46EE98229A264831A4C0648A94C98F8A2EBD4FEE ] VMSVSF          C:\WINDOWS\system32\DRIVERS\vmswitch.sys
00:43:10.0848 0x0ac4  VMSVSF - ok
00:43:10.0880 0x0ac4  [ 891A00F639288019FA3AAEEFEA837EE8, 65178FE4F19FDF11AA2E537A46EE98229A264831A4C0648A94C98F8A2EBD4FEE ] VMSVSP          C:\WINDOWS\system32\DRIVERS\vmswitch.sys
00:43:10.0890 0x0ac4  VMSVSP - ok
00:43:10.0907 0x0ac4  [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
00:43:10.0909 0x0ac4  volmgr - ok
00:43:10.0936 0x0ac4  [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx         C:\WINDOWS\system32\drivers\volmgrx.sys
00:43:10.0943 0x0ac4  volmgrx - ok
00:43:10.0967 0x0ac4  [ 4BB9BC49DEE1A319EC58274A7BBED663, 624491089623A5B68C01A6A000E60D450E8E467619ACEBB90C6FDED0CF670F95 ] volsnap         C:\WINDOWS\system32\drivers\volsnap.sys
00:43:10.0972 0x0ac4  volsnap - ok
00:43:10.0990 0x0ac4  [ 01355C98B5C3ED1EC446743CDA848FCE, B9FCF558C20E05DD0F53FFB70BBEF873EA57801E13A16701E636128D625C4B67 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
00:43:10.0999 0x0ac4  vpci - ok
00:43:11.0022 0x0ac4  [ ADBE96C33D1A5BB1BBAF90B4BC84F523, 6E9C9ED3D51E4B6E494D42ECA6F824AD86D676C12C39BBE6B8BD96366BCB02DA ] vpcivsp         C:\WINDOWS\System32\drivers\vpcivsp.sys
00:43:11.0029 0x0ac4  vpcivsp - ok
00:43:11.0074 0x0ac4  [ 6814DDD37C300F845C4FFE4D4CC9A8C7, 206D5D0A803B8EC26A190C5BF72FF12137C1B8D76A674B6C7C16C8C9BBE44C29 ] VsEtwService120 C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe
00:43:11.0076 0x0ac4  VsEtwService120 - ok
00:43:11.0108 0x0ac4  [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid         C:\WINDOWS\system32\drivers\vsmraid.sys
00:43:11.0118 0x0ac4  vsmraid - ok
00:43:11.0205 0x0ac4  [ E369C59F2C0852DDD090C07E0DDE0051, 4FAC94458EAAEED4F84A86FBAB8FBB332D0AF85BD528E63C0C058A2DA8E3011D ] VSS             C:\WINDOWS\system32\vssvc.exe
00:43:11.0253 0x0ac4  VSS - ok
00:43:11.0266 0x0ac4  [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
00:43:11.0278 0x0ac4  VSTXRAID - ok
00:43:11.0329 0x0ac4  [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
00:43:11.0349 0x0ac4  vwifibus - ok
00:43:11.0382 0x0ac4  [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt        C:\WINDOWS\system32\DRIVERS\vwififlt.sys
00:43:11.0393 0x0ac4  vwififlt - ok
00:43:11.0428 0x0ac4  [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp         C:\WINDOWS\system32\DRIVERS\vwifimp.sys
00:43:11.0445 0x0ac4  vwifimp - ok
00:43:11.0499 0x0ac4  [ 7599E582CA3A6AAA95A18FFE1172D339, A0410778FBBC4302EA91CF24B944427410B4706535F1192504D4F34C3ED4503E ] W32Time         C:\WINDOWS\system32\w32time.dll
00:43:11.0531 0x0ac4  W32Time - ok
00:43:11.0553 0x0ac4  [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
00:43:11.0560 0x0ac4  WacomPen - ok
00:43:11.0625 0x0ac4  [ 61692DB39AD3DF2F29392D68EAA7BB93, 854D4B9C7DD1676968598ED973500650ECEC02C420E44C0B3957C24F073AA5FB ] wbengine        C:\WINDOWS\system32\wbengine.exe
00:43:11.0706 0x0ac4  wbengine - ok
00:43:11.0799 0x0ac4  [ 3BC1D1D56637A32CD91C8AE08E2484AA, 9EE1BD3FB0D289E25F3DDD0D8F67DC1C701A6B1D5418FADF348D0E642B1DEBEB ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
00:43:11.0904 0x0ac4  WbioSrvc - ok
00:43:11.0966 0x0ac4  [ A07CFC4B593D15B6BF06813C3B5B33BF, B57BD918E2AFF9943B51A24B95E0C4D3482B4DF73C0E2421E8CC67C2BC7A4C70 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
00:43:12.0018 0x0ac4  Wcmsvc - ok
00:43:12.0078 0x0ac4  [ D2726823DF7E19F213F4805A9D6D145F, A7F582C99918D204264D3B374F70D75984BDA5805203041E3DECB8153D16E102 ] wcncsvc         C:\WINDOWS\System32\wcncsvc.dll
00:43:12.0139 0x0ac4  wcncsvc - ok
00:43:12.0177 0x0ac4  [ 846C02A8B48CBD921A3D6AB521AA0DC4, B07573A774A6C65D24E5718DC25DF378270EB5B40221CA5A53B21D47838381D3 ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
00:43:12.0196 0x0ac4  WcsPlugInService - ok
00:43:12.0241 0x0ac4  [ F5D4FA3E1F4879C361FFF3855259D2C2, 48C60FE4AAB011E2250157506FF0624031BFA346F8F2F8C6DFDF6F3CAA4F3F42 ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
00:43:12.0244 0x0ac4  WdBoot - ok
00:43:12.0301 0x0ac4  [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
00:43:12.0325 0x0ac4  Wdf01000 - ok
00:43:12.0362 0x0ac4  [ 019CC610AD95FF47EAD7C08B7A683B96, BB9D42F8ED90ECA2E7B8C906E06A1EA859FAD9BD1B3492BB1E28C0D00004812A ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
00:43:12.0369 0x0ac4  WdFilter - ok
00:43:12.0421 0x0ac4  [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
00:43:12.0433 0x0ac4  WdiServiceHost - ok
00:43:12.0448 0x0ac4  [ 40C67D1A4891120874767F6E6604D6C5, 4D9DD658566DE711ADF4D6C33FCB31DA351EE050E3ED188664D04526CCAAEEF5 ] WdiSystemHost   C:\WINDOWS\system32\wdi.dll
00:43:12.0456 0x0ac4  WdiSystemHost - ok
00:43:12.0487 0x0ac4  [ 6CC1BB8F6851A262E2E824F0E92D5EEF, 45A88A984179BBA38C1F4434C4D6C2823C1FE6AFBE8CB0F656DAE0092D1D5611 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
00:43:12.0502 0x0ac4  WdNisDrv - ok
00:43:12.0542 0x0ac4  WdNisSvc - ok
00:43:12.0602 0x0ac4  [ D261A12A43D33122CB90E70D3BC1CC68, 1B5237909CDD5DC4982599E94C2AAC37FEA6B1C282249DEB13E84A826C6E4B01 ] WebClient       C:\WINDOWS\System32\webclnt.dll
00:43:12.0631 0x0ac4  WebClient - ok
00:43:12.0653 0x0ac4  [ 3274312F263882B51B964329FAF49734, 99A020377ACF0762BE5ECD2D68EB5E1497B9D59963247E725F7F96FB5DF41FAD ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
00:43:12.0683 0x0ac4  Wecsvc - ok
00:43:12.0709 0x0ac4  [ 7CDD84E0023A0C5C230B06A7965EC65E, 6EC7DC18C76D66CF9A893C3DD20F9BE3ADD76546F9A9BA42CE4F24854709F9D9 ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
00:43:12.0718 0x0ac4  WEPHOSTSVC - ok
00:43:12.0767 0x0ac4  [ 959534ACF085C137D2D094384EF89C45, D029F440789FE170A1C46217C6DE6D78DC0188A5CF33FCCC17FA65D3BC80C2B7 ] wercplsupport   C:\WINDOWS\System32\wercplsupport.dll
00:43:12.0778 0x0ac4  wercplsupport - ok
00:43:12.0835 0x0ac4  [ 82BCCF5FBE47AC9E8CBA2020994DFB3F, EA96C6BD98A701B465D0780EC10BDA92E45FE636D60C1385813AA3B456D8B931 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
00:43:12.0841 0x0ac4  WerSvc - ok
00:43:12.0906 0x0ac4  [ BFBE1C5F57FE7A885673A1962D5532B7, F0BD05B257108699FE6AB32EF11F927C31932F27062A705B3FEFA4F5B4C0D8C3 ] WFPLWFS         C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
00:43:12.0922 0x0ac4  WFPLWFS - ok
00:43:12.0990 0x0ac4  [ E06AFE2F94BA7CFA2FE4FD2A449E60E2, 99A81E16366E9E77905D873B0246E4C11B383FE1E99E0E1D9A07FAD4E52EA9E4 ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
00:43:13.0017 0x0ac4  WiaRpc - ok
00:43:13.0058 0x0ac4  [ 867BCC69ED9C31C501465EB0E8BA9DFA, 678B7FF4D4E8624514301956CDA7FB451159BBFC83FF2E4E5E7DADAE3C7AB2EC ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
00:43:13.0079 0x0ac4  WIMMount - ok
00:43:13.0089 0x0ac4  WinDefend - ok
00:43:13.0161 0x0ac4  [ DD079EC8F44DCA3A176B345C6ADEFB66, 6CD9371B83EA23D2181891FAE1DB285BC111A78C35F374E57666ED09860C91A9 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
00:43:13.0192 0x0ac4  WinHttpAutoProxySvc - ok
00:43:13.0247 0x0ac4  [ 9DB490F3E823C5C3C070644B96CB9D59, 81937D0B331E43C7C61514E60B3AD51370C5201F7B4D12F8534840D91EDC32DD ] Winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
00:43:13.0257 0x0ac4  Winmgmt - ok
00:43:13.0355 0x0ac4  [ C8D6344BDE2691A196E61C0D3372EAB7, FF8EB79D8A7E298343C22B83276FF68293D08A9DA438BB22600BEFC4CA93A91D ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
00:43:13.0488 0x0ac4  WinRM - ok
00:43:13.0542 0x0ac4  [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb          C:\WINDOWS\system32\DRIVERS\WinUsb.sys
00:43:13.0551 0x0ac4  WinUsb - ok
00:43:13.0635 0x0ac4  [ EF252510DB6C3511E30418BD2AC95A2D, 75B496F5C611129D9D19B382503830FDB0E2E61D4880D2821AE381DF578C5E56 ] WlanSvc         C:\WINDOWS\System32\wlansvc.dll
00:43:13.0670 0x0ac4  WlanSvc - ok
00:43:13.0735 0x0ac4  [ 5F56C0DE776C7AE43AF749845BFAA1EF, 837993C5853B7E682C7FB8401B7F5D951FFD15E5659EBB1B01DC3F5719ACEE19 ] wlidsvc         C:\WINDOWS\system32\wlidsvc.dll
00:43:13.0816 0x0ac4  wlidsvc - ok
00:43:13.0842 0x0ac4  [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi         C:\WINDOWS\System32\drivers\wmiacpi.sys
00:43:13.0856 0x0ac4  WmiAcpi - ok
00:43:13.0888 0x0ac4  [ 7AFAC828F52D62F304A911EC32F42EEE, 4EDCF4149069413A166169F2E23F7505F47B39B7EC319E1EF6D2C46CD140AA24 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
00:43:13.0898 0x0ac4  wmiApSrv - ok
00:43:13.0920 0x0ac4  WMPNetworkSvc - ok
00:43:13.0966 0x0ac4  [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
00:43:13.0970 0x0ac4  Wof - ok
00:43:14.0051 0x0ac4  [ 5071E71CC05346D88C5A08EB8B5A05E3, EA2B14130EDD1846B2E25D310B0D49253CFB43C22D3DC7B3179DF7349CC4AEFB ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
00:43:14.0138 0x0ac4  workfolderssvc - ok
00:43:14.0193 0x0ac4  [ 182561A14F2E93E81E66FE3700D17A5A, FB9A06058A8BCCEDCDC5BF8899D9B2FBA5752C262C5FC6D2B8338884F3303D12 ] wpcfltr         C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
00:43:14.0214 0x0ac4  wpcfltr - ok
00:43:14.0245 0x0ac4  [ 4E6A0F60DA7EF050D3D26417CD4D24E9, E6B3BFB007B641D41F8532ED086F92CB3D86E210023DBFAA9AD8152A9FD33CCA ] WPCSvc          C:\WINDOWS\System32\wpcsvc.dll
00:43:14.0251 0x0ac4  WPCSvc - ok
00:43:14.0317 0x0ac4  [ D27491CFCE452C154CECFA155AD0EBC8, 1F3F74C253E3B07DE7EFE27C34DD9AF08617C7B03BB44C2902F69BA9DA3F21F2 ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
00:43:14.0325 0x0ac4  WPDBusEnum - ok
00:43:14.0346 0x0ac4  [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr       C:\WINDOWS\system32\drivers\WpdUpFltr.sys
00:43:14.0351 0x0ac4  WpdUpFltr - ok
00:43:14.0371 0x0ac4  [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl         C:\WINDOWS\system32\drivers\ws2ifsl.sys
00:43:14.0397 0x0ac4  ws2ifsl - ok
00:43:14.0444 0x0ac4  [ 9654DE19551093CD73874281E1573C94, 5E3513EC0CB180D90904BE8970AB64A4434279E8C467AE2CF693254E47B1D11E ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
00:43:14.0453 0x0ac4  wscsvc - ok
00:43:14.0460 0x0ac4  WSearch - ok
00:43:14.0576 0x0ac4  [ 95B6670E6933E1DEE19686C55BE709A0, 4B9EB8F1712B7959A71F6DA445D29BD09B25EEFC6B30D736EFE30163D79B233E ] WSService       C:\WINDOWS\System32\WSService.dll
00:43:14.0686 0x0ac4  WSService - ok
00:43:15.0267 0x0ac4  [ E66AC3CA92FC471BFE69F61549193A64, E2DD7EA4ED164EE8FB07546896BE743734B04DE4C9480E84231901CB2C63F31C ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
00:43:15.0370 0x0ac4  wuauserv - ok
00:43:15.0398 0x0ac4  [ D537815E450A149752C15868392AD1F3, 8788CE493349299DB36E409C8CC3C6EA08301FA492C95D9D556E00BC13A05F13 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
00:43:15.0412 0x0ac4  WudfPf - ok
00:43:15.0467 0x0ac4  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
00:43:15.0471 0x0ac4  WUDFRd - ok
00:43:15.0483 0x0ac4  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFSensorLP    C:\WINDOWS\System32\drivers\WUDFRd.sys
00:43:15.0486 0x0ac4  WUDFSensorLP - ok
00:43:15.0512 0x0ac4  [ 9CDC2059A23E3C9B57696178508777E7, B680A2E2EDA5C8C6A547E7D9B2F2F8E6407C3EA0A01B82A4B88D48A27913A597 ] wudfsvc         C:\WINDOWS\System32\WUDFSvc.dll
00:43:15.0521 0x0ac4  wudfsvc - ok
00:43:15.0543 0x0ac4  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdFs       C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
00:43:15.0547 0x0ac4  WUDFWpdFs - ok
00:43:15.0557 0x0ac4  [ 7CCBBCEE408A5DBE3FE47297DB5A6CFC, FB44B65B37B1C1A12C618E16BEF195EF861A87179B9216E43024C671C3AE052C ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
00:43:15.0560 0x0ac4  WUDFWpdMtp - ok
00:43:15.0607 0x0ac4  [ 2FA9794CA36147756F3FDFD6CA29B46F, 4B86DC38C2411C281686E9A4E64DA6FB2992E39391371F78E012D6D8BB85123F ] WwanSvc         C:\WINDOWS\System32\wwansvc.dll
00:43:15.0629 0x0ac4  WwanSvc - ok
00:43:15.0698 0x0ac4  ================ Scan global ===============================
00:43:15.0736 0x0ac4  [ C89780A6F58D113C28A96D85D1261DC5, 185114F33A60916C7904E4A0F278CA43258454343E614F01F0DAFA98BAC981B1 ] C:\WINDOWS\system32\basesrv.dll
00:43:15.0781 0x0ac4  [ 00DD4D2ACC2E72155A8AAA82018BEC0D, 9D7CA68B4A81240477FCC85A3CC11EF986093F9D6228A6C5AC608EDAD664068C ] C:\WINDOWS\system32\winsrv.dll
00:43:15.0848 0x0ac4  [ 9C1833ABD62876856836C5AE55C7CE86, 0A21E2C8B2FF3B0438C86DA7151A548F9C6F5C62CD402CBBEDB435994C8508F1 ] C:\WINDOWS\system32\sxssrv.dll
00:43:15.0879 0x0ac4  [ 067CB90C277DB4A737D5DEABA3055972, C681BF013170F2D92A3FC4D783FC3F200CDC0C8173373B7ECC27FCF32A03CCBD ] C:\WINDOWS\system32\services.exe
00:43:15.0887 0x0ac4  [ Global ] - ok
00:43:15.0887 0x0ac4  ================ Scan MBR ==================================
00:43:15.0904 0x0ac4  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
00:43:15.0913 0x0ac4  \Device\Harddisk0\DR0 - ok
00:43:16.0986 0x0ac4  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
00:43:17.0002 0x0ac4  \Device\Harddisk1\DR1 - ok
00:43:17.0003 0x0ac4  ================ Scan VBR ==================================
00:43:17.0006 0x0ac4  [ 1054E81768AC8DD3916E8B660B0870A5 ] \Device\Harddisk0\DR0\Partition1
00:43:17.0143 0x0ac4  \Device\Harddisk0\DR0\Partition1 - ok
00:43:17.0161 0x0ac4  [ 68AE95D30269D710BCD815D353815F37 ] \Device\Harddisk0\DR0\Partition2
00:43:17.0218 0x0ac4  \Device\Harddisk0\DR0\Partition2 - ok
00:43:17.0233 0x0ac4  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
00:43:17.0234 0x0ac4  \Device\Harddisk0\DR0\Partition3 - ok
00:43:17.0243 0x0ac4  [ 5D84C7784545E3F9E8DDC2934F740E85 ] \Device\Harddisk0\DR0\Partition4
00:43:17.0320 0x0ac4  \Device\Harddisk0\DR0\Partition4 - ok
00:43:17.0337 0x0ac4  [ B401353F4F859784C9DBA0BF07668498 ] \Device\Harddisk0\DR0\Partition5
00:43:17.0360 0x0ac4  \Device\Harddisk0\DR0\Partition5 - ok
00:43:17.0366 0x0ac4  [ B183AF72B818C53D5296B7E5A141F070 ] \Device\Harddisk1\DR1\Partition1
00:43:17.0372 0x0ac4  \Device\Harddisk1\DR1\Partition1 - ok
00:43:17.0377 0x0ac4  ================ Scan generic autorun ======================
00:43:17.0986 0x0ac4  [ 47D99FEC44A9E082B2D761AB5A938CA8, FF8CAD5CD331A7DAFAA616C530F500E74663EC86BB832032D2EFD3F77EBF75FF ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
00:43:18.0254 0x0ac4  RTHDVCPL - ok
00:43:18.0312 0x0ac4  [ 4A0477ADCD07EC9D21257A2E456B16C5, CEF9C81730C12283A7600C3D921D89A62B14D1C46544B493F3AF7520DD2D1F79 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
00:43:18.0327 0x0ac4  IAStorIcon - ok
00:43:18.0359 0x0ac4  [ 57A67971568B1ABE170885270B8564B2, 7EE891760BED926BB5EBC9DC6A861B9F222E03A42929C78C9D55C30373594BD9 ] C:\WINDOWS\system32\igfxtray.exe
00:43:18.0366 0x0ac4  IgfxTray - ok
00:43:18.0391 0x0ac4  [ 07400D5E0B8E58CEFC5ED9A0FAD88955, E84D81FF7D629C75C39D76209EE948A04A3A95ACF1441FA7A98F344C9C595732 ] C:\WINDOWS\system32\hkcmd.exe
00:43:18.0404 0x0ac4  HotKeysCmds - ok
00:43:18.0428 0x0ac4  [ D46A64688109F81E2CC0DF9286124E3A, 31C3A236FAFF54D4FA9BE3A0BEDA165BA750CD0D8251D777ED5E2315DB4A9771 ] C:\WINDOWS\system32\igfxpers.exe
00:43:18.0441 0x0ac4  Persistence - ok
00:43:18.0444 0x0ac4  ETDCtrl - ok
00:43:18.0488 0x0ac4  [ 815F6E3727453C978FFD721B2BDF48A5, E33A85E8EF80C662C84F705080585B35A899F8E588E8481D48538BA1224B5E57 ] C:\Program Files (x86)\SCM\Radio Manager.exe
00:43:18.0511 0x0ac4  Radio Manager - ok
00:43:18.0530 0x0ac4  [ D3C05D3ADC26FDB213217F6EE5EDE06F, 7312B34496D004F277EA0C04D60B978738C564AAA97871C3DDD96680DFD88ABA ] C:\Program Files (x86)\SCM\SCM.exe
00:43:18.0535 0x0ac4  SCM - ok
00:43:18.0629 0x0ac4  [ 05470C684B62C2F86325D8685E4513CB, EDE70A162AFA104D774AE1D8D3A077F2C12940851EC5BA785242F4032EEA902E ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
00:43:18.0680 0x0ac4  NvBackend - ok
00:43:18.0708 0x0ac4  [ 6E0BDFBEEED65B017F2E4C2C910B0520, 54D798C2E2804DCDB84E9650EA4A032C669B10C586B396D5505F16235D83882C ] C:\WINDOWS\system32\rundll32.exe
00:43:18.0711 0x0ac4  ShadowPlay - ok
00:43:18.0808 0x0ac4  [ 2AA5DD75EA1281432C40D22B5FD87D3A, 9868D4176C8F08EB72B0B992D3E2A480C587930CA025B4FDF3212F99B79C3017 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
00:43:18.0818 0x0ac4  avgnt - ok
00:43:18.0936 0x0ac4  [ 683C9DF0582D8EEFAA90CE1514019BC1, 62C875888029BF32C19656B13C5504016209E4553B0B93FAE21F3930149EE9CA ] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
00:43:19.0126 0x0ac4  DAEMON Tools Lite - ok
00:43:19.0272 0x0ac4  [ DF9FABC634BEB6DA6F42DABBFBD40F64, 6615CF23EA8586FEB90F0CD557E2793F138C5E762A74D1B774E3859370E95D5B ] C:\Program Files (x86)\Internet Download Manager\IDMan.exe
00:43:19.0362 0x0ac4  IDMan - ok
00:43:19.0366 0x0ac4  Waiting for KSN requests completion. In queue: 147
00:43:20.0368 0x0ac4  Waiting for KSN requests completion. In queue: 147
00:43:21.0369 0x0ac4  Waiting for KSN requests completion. In queue: 147
00:43:22.0484 0x0ac4  AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 14.0.6.548 ), 0x40000 ( disabled : updated )
00:43:22.0523 0x0ac4  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.5.218.0 ), 0x61100 ( enabled : updated )
00:43:22.0559 0x0ac4  Win FW state via NFP2: enabled
00:43:25.0285 0x0ac4  ============================================================
00:43:25.0285 0x0ac4  Scan finished
00:43:25.0285 0x0ac4  ============================================================
00:43:25.0311 0x0ae4  Detected object count: 0
00:43:25.0311 0x0ae4  Actual detected object count: 0
00:43:42.0317 0x1588  Deinitialize success
[/LIST]

[LIST=1]
Emsisoft Commandline Scanner - Version 9.0
Last update: 2.9.2014 00:56:28

Scan settings:

Scan type:                              Deep Scan
Objects:                                Rootkits, Memory, Traces, C:\, D:\

Detect Potentially Unwanted Programs:   Off
Scan archives:                          On
ADS Scan:                               On
File extensions:                        Off
Advanced caching:                       Off
Direct disk access:                     Off

Scan start:                             2.9.2014 00:57:19

Key: HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\EVENTLOG\APPLICATION\IEPLUGINSERVICE      detected: Application.AdShort (A)
Key: HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\EVENTLOG\APPLICATION\WPM  detected: Application.AdShort (A)
C:\ProgramData\apn      detected: Application.AppInstall (A)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\51698aaf.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1bb2ff11.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\49daa5eb.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\506199b0.qua -> (Quarantine-8)    detected: Backdoor.DarkKomet.F (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\38379df5.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5174d54e.qua -> (Quarantine-8)    detected: Trojan.Autoit.BXX (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\519e11db.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5280330d.qua -> (Quarantine-8)    detected: Trojan.Generic.10116317 (B)
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\7d93b038.qua -> (Quarantine-8)    detected: Backdoor.Fynloski.C (B)
C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\File System\008\t\00\00000000 -> (NSIS o) -> lzma_solid_nsis0000   detected: Application.Bundler.Somoto.J (B)
C:\Users\ihsan\Desktop\Ders\Gunduz2A NTP Projeleri\Gunduz2A-12541027-Semra Ormanoglu.rar -> G??nd??z2A-12541027-Semra ORMANO??LU\BANKAMAT??K SON1\bankamatik\bin\Debug\bankamatik.exe   detected: Trojan.Generic.11462740 (B)
C:\Users\ihsan\Desktop\Ders\Gunduz2A NTP Projeleri\Gunduz2A-12541027-Semra Ormanoglu.rar -> G??nd??z2A-12541027-Semra ORMANO??LU\BANKAMAT??K SON1\bankamatik\obj\x86\Debug\bankamatik.exe       detected: Trojan.Generic.11462740 (B)
C:\Users\ihsan\Desktop\downloads\Advanced SystemCare Ultimate v7.1.0.625\Patch.rar -> Patch\Patch.exe   detected: Gen:Variant.Kazy.437101 (B)
C:\Users\ihsan\Desktop\downloads\Advanced SystemCare Ultimate v7.1.0.625\Patch\Patch\Patch.exe  detected: Gen:Variant.Kazy.437101 (B)
C:\Users\ihsan\Downloads\Berserk31_downloader-I0YUpYdD0.exe -> (NSIS o) -> lzma_solid_nsis0000  detected: Application.Bundler.Somoto.J (B)
C:\Users\ihsan\Downloads\Compressed\RLC__Viewer.zip -> RLC__Viewer/RLC__Viewer.exe      detected: Trojan.Autoit.BXX (B)
D:\eski\ihoo\Internet Download Manager 6.14 Build 5 Final\IDM.v6.xx.release.3-patch.exe         detected: Gen:Variant.Zusy.29795 (B)

Scanned            610315
Found              20
Removed            20


Scan end:          2.9.2014 12:37:55
Scan time:         11:40:35
[/LIST]

# AdwCleaner v3.308 - Rapor olusturuldu 02/09/2014 tarihinde 13:18:22
# Guncellendi 20/08/2014 tarafindan Xplode
# Isletim sistemi : Windows 8.1 Pro  (64 bits)
# Kullanici adi : ihsan - IHOCAN
# Adwcleaner konumu : C:\Users\ihsan\Downloads\Programs\AdwCleaner.exe
# Tarama turu : Tara

***** [ Servisler ] *****


***** [ Dosyalar / Klasorler ] *****

Dosya Bulundu : C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kckxxqfq.default\user.js
Klasor Bulundu : C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\obciceimmggglbmelaidpjlmodcebijb

***** [ Görevler ] *****


***** [ Kisayollar ] *****


***** [ Registry ] *****

Registry Key Bulundu : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

***** [ Tarayicilar ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 tr)

[ Dosya : C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kckxxqfq.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ Dosya : C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Bulundu [Homepage] : hxxp://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=US&install_date=20120929&user_guid=3220074E5BF444FFABB0303EA47C4FB8&machine_id=67326ca3ae2301667ef9afd37f603db0&browser=CR&os=win&os_version=6.1-x86-SP0
Bulundu [Extension] : obciceimmggglbmelaidpjlmodcebijb

*************************

AdwCleaner[R0].txt - [5567 octets] - [26/06/2014 09:24:45]
AdwCleaner[R1].txt - [1657 octets] - [02/09/2014 13:18:22]
AdwCleaner[S0].txt - [4233 octets] - [26/06/2014 09:26:14]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1777 octets] ##########
# AdwCleaner v3.309 - Rapor olusturuldu 03/09/2014 tarihinde 02:21:00
# Guncellendi 02/09/2014 tarafindan Xplode
# Isletim sistemi : Windows 8.1 Pro  (64 bits)
# Kullanici adi : ihsan - IHOCAN
# Adwcleaner konumu : C:\Users\ihsan\Downloads\Programs\AdwCleaner.exe
# Tarama turu : Tara

***** [ Servisler ] *****


***** [ Dosyalar / Klasorler ] *****

Dosya Bulundu : C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kckxxqfq.default\user.js
Klasor Bulundu : C:\ProgramData\~0
Klasor Bulundu : C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\Extensions\obciceimmggglbmelaidpjlmodcebijb

***** [ Görevler ] *****


***** [ Kisayollar ] *****


***** [ Registry ] *****


***** [ Tarayicilar ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 tr)

[ Dosya : C:\Users\ihsan\AppData\Roaming\Mozilla\Firefox\Profiles\kckxxqfq.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ Dosya : C:\Users\ihsan\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Bulundu [Homepage] : hxxp://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=US&install_date=20120929&user_guid=3220074E5BF444FFABB0303EA47C4FB8&machine_id=67326ca3ae2301667ef9afd37f603db0&browser=CR&os=win&os_version=6.1-x86-SP0
Bulundu [Extension] : obciceimmggglbmelaidpjlmodcebijb

*************************

AdwCleaner[R0].txt - [5567 octets] - [26/06/2014 09:24:45]
AdwCleaner[R1].txt - [3421 octets] - [02/09/2014 13:21:11]
AdwCleaner[S0].txt - [4233 octets] - [26/06/2014 09:26:14]
AdwCleaner[S1].txt - [1920 octets] - [02/09/2014 13:22:15]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [3601 octets] ##########

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 12:44:03, on 06.09.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Users\Umut\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files (x86)\ThreatFire\TFTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe -update activex (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe -update activex (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~3\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://uk-wdc2.dbrasweb.db.com/dana-cached/sc/JuniperSetupClient.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5EA09DD8-CF85-4FF0-A3F0-FB1A1A9BF67B}: NameServer = 4.2.2.1,4.2.2.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{5EA09DD8-CF85-4FF0-A3F0-FB1A1A9BF67B}: NameServer = 4.2.2.1,4.2.2.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{5EA09DD8-CF85-4FF0-A3F0-FB1A1A9BF67B}: NameServer = 4.2.2.1,4.2.2.2
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Microsoft Antimalware Service (MsMpSvc) - Unknown owner - c:\Program Files\Microsoft Security Client\MsMpEng.exe (file missing)
O23 - Service: Microsoft Network Inspection (NisSrv) - Unknown owner - c:\Program Files\Microsoft Security Client\NisSrv.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8250 bytes

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe -update activex (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe -update activex (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~3\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://uk-wdc2.dbrasweb.db.com/dana-cached/sc/JuniperSetupClient.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL