23:33:23.0670 0x16c8 TDSS rootkit removing tool 3.0.0.

25 Feb 27 2014 15:23:02

23:33:30.0314 0x16c8 ==========================================================
==
23:33:30.0314 0x16c8 Current date / time: 2014/03/03 23:33:30.0314
23:33:30.0314 0x16c8 SystemInfo:
23:33:30.0314 0x16c8
23:33:30.0315 0x16c8 OS Version: 6.1.7601 ServicePack: 1.0
23:33:30.0315 0x16c8 Product type: Workstation
23:33:30.0315 0x16c8 ComputerName: MATS106000
23:33:30.0315 0x16c8 UserName: aswath
23:33:30.0315 0x16c8 Windows directory: C:\windows
23:33:30.0315 0x16c8 System windows directory: C:\windows
23:33:30.0315 0x16c8 Processor architecture: Intel x86
23:33:30.0316 0x16c8 Number of processors: 4
23:33:30.0316 0x16c8 Page size: 0x1000
23:33:30.0316 0x16c8 Boot type: Normal boot
23:33:30.0316 0x16c8 ==========================================================
==
23:33:33.0784 0x16c8 KLMD registered as C:\windows\system32\drivers\55603447.sy
s
23:33:34.0129 0x16c8 System UUID: {05CE135A-E494-B583-4A1F-4723D7A7C6E2}
23:33:34.0736 0x16c8 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 G
b), SectorSize: 0x200, Cylinders: 0x12A175, SectorsPerTrack: 0x20, TracksPerCyli
nder: 0x10, Type 'K0', Flags 0x00000050
23:33:34.0745 0x16c8 ==========================================================
==
23:33:34.0745 0x16c8 \Device\Harddisk0\DR0:
23:33:34.0745 0x16c8 MBR partitions:
23:33:34.0746 0x16c8 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA
0x14000, BlocksNum 0x96000
23:33:34.0746 0x16c8 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA
0xAA000, BlocksNum 0x25384000
23:33:34.0746 0x16c8 ==========================================================
==
23:33:34.0767 0x16c8 C: <-> \Device\Harddisk0\DR0\Partition2
23:33:34.0767 0x16c8 ==========================================================
==
23:33:34.0767 0x16c8 Initialize success
23:33:34.0767 0x16c8 ==========================================================
==
23:33:37.0980 0x16ec ==========================================================
==
23:33:37.0981 0x16ec Scan started
23:33:37.0981 0x16ec Mode: Manual;
23:33:37.0981 0x16ec ==========================================================
==
23:33:37.0981 0x16ec KSN ping started
23:33:40.0521 0x16ec KSN ping finished: true
23:33:40.0720 0x16ec ================ Scan system memory ======================
==
23:33:40.0721 0x16ec System memory - ok
23:33:40.0721 0x16ec ================ Scan services ===========================
==
23:33:40.0896 0x16ec [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23
A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci
C:\windows\system32
\drivers\1394ohci.sys
23:33:40.0917 0x16ec 1394ohci - ok
23:33:40.0970 0x16ec [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C
23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI
C:\windows\system32
\drivers\ACPI.sys

23:33:40.0992 0x16ec ACPI - ok

23:33:41.0001 0x16ec [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF
4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi
C:\windows\system32
\drivers\acpipmi.sys
23:33:41.0003 0x16ec AcpiPmi - ok
23:33:41.0147 0x16ec [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2
234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files\Co
mmon Files\Adobe\ARM\1.0\armsvc.exe
23:33:41.0155 0x16ec AdobeARMservice - ok
23:33:41.0265 0x16ec [ F7AB315A4D400CA876381D1E188A2E20, B6019C2E9B6801BB23C530
C66D080F47330F48ADB0DD2813D50BE1408865BD91 ] AdobeFlashPlayerUpdateSvc C:\window
s\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:33:41.0300 0x16ec AdobeFlashPlayerUpdateSvc - ok
23:33:41.0365 0x16ec [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF4
8485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx
C:\windows\system32
\drivers\adp94xx.sys
23:33:41.0382 0x16ec adp94xx - ok
23:33:41.0406 0x16ec [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB4
4C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci
C:\windows\system32
\drivers\adpahci.sys
23:33:41.0421 0x16ec adpahci - ok
23:33:41.0440 0x16ec [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376D
A9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320
C:\windows\system32
\drivers\adpu320.sys
23:33:41.0446 0x16ec adpu320 - ok
23:33:41.0468 0x16ec [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF
79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc
C:\windows\System32
\aelupsvc.dll
23:33:41.0471 0x16ec AeLookupSvc - ok
23:33:41.0522 0x16ec [ 9EBBBA55060F786F0FCAA3893BFA2806, 2E5A0FA2995989E9391771
024839F5AD040A041CEE56787286D8FC421E26FE90 ] AFD
C:\windows\system32
\drivers\afd.sys
23:33:41.0539 0x16ec AFD - ok
23:33:41.0553 0x16ec [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D1
0C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440
C:\windows\system32
\drivers\agp440.sys
23:33:41.0557 0x16ec agp440 - ok
23:33:41.0577 0x16ec [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D
81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx
C:\windows\system32
\drivers\djsvs.sys
23:33:41.0581 0x16ec aic78xx - ok
23:33:41.0597 0x16ec [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C
4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG
C:\windows\System32
\alg.exe
23:33:41.0601 0x16ec ALG - ok
23:33:41.0610 0x16ec [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7
A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide
C:\windows\system32
\drivers\aliide.sys
23:33:41.0612 0x16ec aliide - ok
23:33:41.0628 0x16ec [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A31
8BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp
C:\windows\system32
\drivers\amdagp.sys
23:33:41.0632 0x16ec amdagp - ok
23:33:41.0647 0x16ec [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10D
A36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide
C:\windows\system32
\drivers\amdide.sys
23:33:41.0650 0x16ec amdide - ok
23:33:41.0662 0x16ec [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B
3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8
C:\windows\system32
\drivers\amdk8.sys

23:33:41.0665 0x16ec AmdK8 - ok

23:33:41.0678 0x16ec [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6
FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM
C:\windows\system32
\drivers\amdppm.sys
23:33:41.0681 0x16ec AmdPPM - ok
23:33:41.0712 0x16ec [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D8
29F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata
C:\windows\system32
\drivers\amdsata.sys
23:33:41.0717 0x16ec amdsata - ok
23:33:41.0747 0x16ec [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7
AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs
C:\windows\system32
\drivers\amdsbs.sys
23:33:41.0762 0x16ec amdsbs - ok
23:33:41.0778 0x16ec [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6
DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata
C:\windows\system32
\drivers\amdxata.sys
23:33:41.0779 0x16ec amdxata - ok
23:33:41.0821 0x16ec [ AF3FBBE5EBA1F28F0BEA06EFC6496B9D, 48A84C194B56E9F4E55C71
0A3950D95DCD31E59141A8F1A2B3578E7C9FF7712B ] ApfiltrService C:\windows\system32
\drivers\Apfiltr.sys
23:33:41.0829 0x16ec ApfiltrService - ok
23:33:41.0870 0x16ec [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33
A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID
C:\windows\system32
\drivers\appid.sys
23:33:41.0893 0x16ec AppID - ok
23:33:41.0932 0x16ec [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437
002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc
C:\windows\System32
\appidsvc.dll
23:33:41.0936 0x16ec AppIDSvc - ok
23:33:41.0961 0x16ec [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579E
CBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo
C:\windows\System32
\appinfo.dll
23:33:41.0966 0x16ec Appinfo - ok
23:33:41.0988 0x16ec [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951D
C3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt
C:\windows\System32
\appmgmts.dll
23:33:41.0996 0x16ec AppMgmt - ok
23:33:42.0018 0x16ec [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4
499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc
C:\windows\system32
\drivers\arc.sys
23:33:42.0023 0x16ec arc - ok
23:33:42.0041 0x16ec [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2
921672858C291054220BADE291044343778216F6BA ] arcsas
C:\windows\system32
\drivers\arcsas.sys
23:33:42.0046 0x16ec arcsas - ok
23:33:42.0074 0x16ec [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A93
4E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac
C:\windows\system32
\DRIVERS\asyncmac.sys
23:33:42.0077 0x16ec AsyncMac - ok
23:33:42.0111 0x16ec [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F
5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi
C:\windows\system32
\drivers\atapi.sys
23:33:42.0115 0x16ec atapi - ok
23:33:42.0155 0x16ec [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E781
0D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\windows\Sys
tem32\Audiosrv.dll
23:33:42.0214 0x16ec AudioEndpointBuilder - ok
23:33:42.0255 0x16ec [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E781
0D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv
C:\windows\System32
\Audiosrv.dll

23:33:42.0267 0x16ec Audiosrv - ok

23:33:42.0303 0x16ec [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C8
55A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV
C:\windows\System32
\AxInstSV.dll
23:33:42.0312 0x16ec AxInstSV - ok
23:33:42.0353 0x16ec [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286E
A5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv
C:\windows\system32
\drivers\bxvbdx.sys
23:33:42.0383 0x16ec b06bdrv - ok
23:33:42.0410 0x16ec [ 8EC7190368711C009DB21F037A108382, D583A3FF28C35501119F09
6A17F5E3B1CC207ECE60977DB2C81AC94A79EA32A5 ] b57nd60x
C:\windows\system32
\DRIVERS\b57nd60x.sys
23:33:42.0420 0x16ec b57nd60x - ok
23:33:42.0686 0x16ec [ F44E26FB791012A4354FA9FE701B93B6, D721D408AB649A23A6AE84
D4EC8A1DE616D9EBB33A024EA05090167451606036 ] BCM43XX
C:\windows\system32
\DRIVERS\bcmwl6.sys
23:33:42.0785 0x16ec BCM43XX - ok
23:33:42.0844 0x16ec [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BE
D6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC
C:\windows\System32
\bdesvc.dll
23:33:42.0848 0x16ec BDESVC - ok
23:33:42.0876 0x16ec [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF4226
1497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep
C:\windows\system32
\drivers\Beep.sys
23:33:42.0878 0x16ec Beep - ok
23:33:42.0918 0x16ec [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2
918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE
C:\windows\System32
\bfe.dll
23:33:42.0943 0x16ec BFE - ok
23:33:42.0977 0x16ec [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0
B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS
C:\windows\System32
\qmgr.dll
23:33:43.0011 0x16ec BITS - ok
23:33:43.0038 0x16ec [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE
4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive
C:\windows\system32
\drivers\blbdrive.sys
23:33:43.0041 0x16ec blbdrive - ok
23:33:43.0106 0x16ec [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF28
0F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bo
njour\mDNSResponder.exe
23:33:43.0129 0x16ec Bonjour Service - ok
23:33:43.0140 0x16ec [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78
E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser
C:\windows\system32
\DRIVERS\bowser.sys
23:33:43.0144 0x16ec bowser - ok
23:33:43.0157 0x16ec [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D
54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo
C:\windows\system32
\drivers\BrFiltLo.sys
23:33:43.0159 0x16ec BrFiltLo - ok
23:33:43.0172 0x16ec [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171
C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp
C:\windows\system32
\drivers\BrFiltUp.sys
23:33:43.0175 0x16ec BrFiltUp - ok
23:33:43.0202 0x16ec [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E2551
20F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser
C:\windows\System32
\browser.dll
23:33:43.0207 0x16ec Browser - ok
23:33:43.0226 0x16ec [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A
5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid
C:\windows\System32
\Drivers\Brserid.sys

23:33:43.0242 0x16ec Brserid - ok

23:33:43.0254 0x16ec [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9
BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm
C:\windows\System32
\Drivers\BrSerWdm.sys
23:33:43.0258 0x16ec BrSerWdm - ok
23:33:43.0275 0x16ec [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF20
4BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm
C:\windows\System32
\Drivers\BrUsbMdm.sys
23:33:43.0284 0x16ec BrUsbMdm - ok
23:33:43.0299 0x16ec [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242
A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer
C:\windows\System32
\Drivers\BrUsbSer.sys
23:33:43.0302 0x16ec BrUsbSer - ok
23:33:43.0318 0x16ec [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C6
35CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM
C:\windows\system32
\drivers\bthmodem.sys
23:33:43.0322 0x16ec BTHMODEM - ok
23:33:43.0348 0x16ec [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB
52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv
C:\windows\system32
\bthserv.dll
23:33:43.0351 0x16ec bthserv - ok
23:33:43.0505 0x16ec [ 9E530C6F0EEE34CCEAC8104838AB68C7, 836210CE25778694F9F348
BB6790DF61F7ED896D2B16F5760B20023CD3AC79C9 ] c2cautoupdatesvc C:\Program Files\S
kype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
23:33:43.0555 0x16ec c2cautoupdatesvc - ok
23:33:43.0642 0x16ec [ 96B14B79C71CE4A7783184CC8B5DBCE8, D3386930BF9A364DB35DB6
29FB09E244CB0E4ACF95721DE586832352262E373B ] c2cpnrsvc
C:\Program Files\Sk
ype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
23:33:43.0705 0x16ec c2cpnrsvc - ok
23:33:43.0807 0x16ec [ F042A2C0757BEDC721D097547B5741D5, DE98533C727B7EC02DC49D
9AAECA15F8A207D02003A094F5F5FA4B8DE72AC8C8 ] CcmExec
C:\windows\CCM\CcmE
xec.exe
23:33:43.0873 0x16ec CcmExec - ok
23:33:43.0894 0x16ec [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A0258
4E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs
C:\windows\system32
\DRIVERS\cdfs.sys
23:33:43.0898 0x16ec cdfs - ok
23:33:43.0941 0x16ec [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5
B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom
C:\windows\system32
\DRIVERS\cdrom.sys
23:33:43.0946 0x16ec cdrom - ok
23:33:43.0980 0x16ec [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30
A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc
C:\windows\System32
\certprop.dll
23:33:43.0983 0x16ec CertPropSvc - ok
23:33:44.0040 0x16ec [ 36564C122E504F7980EA688559BBD35B, 4FAC8318B2B39F32FFE441
6770BD3BE47AC3B42791262EC2153F5CFC113BD135 ] Change Modem Device Service C:\Prog
ramData\ChgService.exe
23:33:44.0046 0x16ec Change Modem Device Service - ok
23:33:44.0061 0x16ec [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0
B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass
C:\windows\system32
\drivers\circlass.sys
23:33:44.0064 0x16ec circlass - ok
23:33:44.0094 0x16ec [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF
3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS
C:\windows\system32
\CLFS.sys
23:33:44.0111 0x16ec CLFS - ok
23:33:44.0177 0x16ec [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6
D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\w
indows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

23:33:44.0194 0x16ec clr_optimization_v2.0.50727_32 - ok

23:33:44.0257 0x16ec [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B
10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\w
indows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:33:44.0280 0x16ec clr_optimization_v4.0.30319_32 - ok
23:33:44.0320 0x16ec [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC
59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt
C:\windows\system32
\drivers\CmBatt.sys
23:33:44.0322 0x16ec CmBatt - ok
23:33:44.0338 0x16ec [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956
E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide
C:\windows\system32
\drivers\cmdide.sys
23:33:44.0343 0x16ec cmdide - ok
23:33:44.0387 0x16ec [ CE0D4EAC1CD08ECF5FB9EAB4B1E403C7, C399F6C79FE9DAF3D57FF1
7DB2480257935D2A1E49A7741B3C432EB65481772D ] cmnsusbser
C:\windows\system32
\DRIVERS\cmnsusbser.sys
23:33:44.0404 0x16ec cmnsusbser - ok
23:33:44.0477 0x16ec [ DB8BD916AF555C6D820FF2A3BDAEF753, AC6EAD6ED4E373C1E7353F
9DE2382D80056D51A207B2BA76D348EC6F6DF30E8C ] CmRcService
C:\windows\CCM\RemC
trl\CmRcService.exe
23:33:44.0535 0x16ec CmRcService - ok
23:33:44.0583 0x16ec [ 247B4CE2DAB1160CD422D532D5241E1F, CFE04DBE48B23B084C3F4C
3D0F483B26F322E4693176D8739A412BE5D8BE597E ] CNG
C:\windows\system32
\Drivers\cng.sys
23:33:44.0606 0x16ec CNG - ok
23:33:44.0628 0x16ec [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA3
4B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt
C:\windows\system32
\drivers\compbatt.sys
23:33:44.0630 0x16ec Compbatt - ok
23:33:44.0664 0x16ec [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC
1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus
C:\windows\system32
\drivers\CompositeBus.sys
23:33:44.0667 0x16ec CompositeBus - ok
23:33:44.0682 0x16ec COMSysApp - ok
23:33:44.0735 0x16ec [ D64255398F83BFED482364D2847F0BDD, D2E97321FC19EDFD2D4567
B2FF3F9C639E7C668A8849FB8C3CAD02E61F293B9B ] cphs
C:\windows\system32
\IntelCpHeciSvc.exe
23:33:44.0760 0x16ec cphs - ok
23:33:44.0775 0x16ec [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3
F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk
C:\windows\system32
\drivers\crcdisk.sys
23:33:44.0778 0x16ec crcdisk - ok
23:33:44.0819 0x16ec [ 3897DFF247D9ED0006190349DE264E14, AFD45853FE1025714BFF6E
3287DE181F77C72A88570F92E996962FA0378FE88A ] CryptSvc
C:\windows\system32
\cryptsvc.dll
23:33:44.0826 0x16ec CryptSvc - ok
23:33:44.0861 0x16ec [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D0
2E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC
C:\windows\system32
\drivers\csc.sys
23:33:44.0887 0x16ec CSC - ok
23:33:44.0934 0x16ec [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A
6596F6A64ADD9C36B09F062295699131232712B558 ] CscService
C:\windows\System32
\cscsvc.dll
23:33:44.0967 0x16ec CscService - ok
23:33:45.0058 0x16ec [ FDF68A1E69D4C91CB55DAD5D530CCC83, 0EE380C93A0974DC62D74C
66D1702B992D00FCA7C84454AB3A62115684259CC5 ] CSI Socket Listener C:\Windows\CMAg
ent\INSTAL~1\CFC\3.6\bin\CsiWin32SocketListener.exe
23:33:45.0100 0x16ec CSI Socket Listener - ok
23:33:45.0152 0x16ec [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331
F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch
C:\windows\system32

\rpcss.dll
23:33:45.0177 0x16ec DcomLaunch - ok
23:33:45.0212 0x16ec [ 8D6E10A2D9A5EED59562D9B82CF804E1,
27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc
\defragsvc.dll
23:33:45.0229 0x16ec defragsvc - ok
23:33:45.0250 0x16ec [ F024449C97EC1E464AAFFDA18593DB88,
14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC
\Drivers\dfsc.sys
23:33:45.0254 0x16ec DfsC - ok
23:33:45.0298 0x16ec [ E9E01EB683C132F7FA27CD607B8A2B63,
3A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp
\dhcpcore.dll
23:33:45.0314 0x16ec Dhcp - ok
23:33:45.0326 0x16ec [ 1A050B0274BFB3890703D490F330C0DA,
D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache
\drivers\discache.sys
23:33:45.0329 0x16ec discache - ok
23:33:45.0351 0x16ec [ 565003F326F99802E68CA78F2A68E9FF,
09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk
\drivers\disk.sys
23:33:45.0353 0x16ec Disk - ok
23:33:45.0367 0x16ec [ 2A958EF85DB1B61FFCA65044FA4BCE9E,
B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc
\drivers\dmvsc.sys
23:33:45.0371 0x16ec dmvsc - ok
23:33:45.0394 0x16ec [ 33EF4861F19A0736B11314AAD9AE28D0,
8F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache
\dnsrslvr.dll
23:33:45.0402 0x16ec Dnscache - ok
23:33:45.0422 0x16ec [ 366BA8FB4B7BB7435E3B9EACB3843F67,
AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc
\dot3svc.dll
23:33:45.0438 0x16ec dot3svc - ok
23:33:45.0474 0x16ec [ 8EC04CA86F1D68DA9E11952EB85973D6,
EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS
\dps.dll
23:33:45.0489 0x16ec DPS - ok
23:33:45.0512 0x16ec [ B918E7C5F9BF77202F89E1A9539F2EB4,
9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud
\drivers\drmkaud.sys
23:33:45.0515 0x16ec drmkaud - ok
23:33:45.0557 0x16ec [ 16498EBC04AE9DD07049A8884B205C05,
6C25B28DBADF02215AA2ED298FA124556FC4992084 ] DXGKrnl
\drivers\dxgkrnl.sys
23:33:45.0578 0x16ec DXGKrnl - ok
23:33:45.0613 0x16ec [ 3EA531906572FFD549B72A10F828E58C,
F80D56C8DE5CDE0C309BC65E0508D98C3E6A00BBEB ] e1kexpress
\DRIVERS\e1k6032.sys
23:33:45.0621 0x16ec e1kexpress - ok
23:33:45.0647 0x16ec [ 8600142FA91C1B96367D3300AD0F3F3A,
C79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost
\eapsvc.dll
23:33:45.0652 0x16ec EapHost - ok
23:33:45.0796 0x16ec [ 024E1B5CAC09731E4D868E64DBFB4AB0,
861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv
\drivers\evbdx.sys
23:33:45.0930 0x16ec ebdrv - ok
23:33:45.0973 0x16ec [ 81951F51E318AECC2D68559E47485CC4,
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] EFS

888F9650F4E872BA8F4E0C
C:\windows\System32
7EF1E241892E098A472BCA
C:\windows\system32
4D9037B458C52287461914
C:\windows\system32
79D74F4679A2EE040FAAF4
C:\windows\system32
ABC42B24DBA4FFC411120E
C:\windows\system32
C83511685EE1CE85A5ADF9
C:\windows\system32
4C4B84365D85758E3263B8
C:\windows\System32
65B7C61ACF34F1F0149045
C:\windows\System32
2E3FBC2D683D1274E8BC45
C:\windows\system32
C589A37DE50BBEF22E2DAA
C:\windows\system32
134EA1C7A2DB984B8EBADF
C:\windows\System32
179D40413E5CB1E46F9486
C:\windows\system32
5713625E27DF11FAAFDA7A
C:\windows\System32
AB0826A74BBEE5B7A1B035
C:\windows\system32
ACF76395EF4A2ED03AB919
C:\windows\System32

\lsass.exe
23:33:45.0977 0x16ec EFS - ok
23:33:46.0027 0x16ec [ A8C362018EFC87BEB013EE28F29C0863,
2618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr
Recvr.exe
23:33:46.0056 0x16ec ehRecvr - ok
23:33:46.0073 0x16ec [ D389BFF34F80CAEDE417BF9D1507996A,
820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched
sched.exe
23:33:46.0078 0x16ec ehSched - ok
23:33:46.0107 0x16ec [ 0ED67910C8C326796FAA00B2BF6D9D3C,
5E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor
\drivers\elxstor.sys
23:33:46.0130 0x16ec elxstor - ok
23:33:46.0144 0x16ec [ 8FC3208352DD3912C94367A206AB3F11,
74B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev
\drivers\errdev.sys
23:33:46.0147 0x16ec ErrDev - ok
23:33:46.0193 0x16ec [ F6916EFC29D9953D5D0DF06882AE8E16,
9B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem
\es.dll
23:33:46.0207 0x16ec EventSystem - ok
23:33:46.0237 0x16ec ew_hwusbdev - ok
23:33:46.0242 0x16ec ew_usbenumfilter - ok
23:33:46.0272 0x16ec [ 2DC9108D74081149CC8B651D3A26207F,
1CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat
\drivers\exfat.sys
23:33:46.0287 0x16ec exfat - ok
23:33:46.0306 0x16ec [ 7E0AB74553476622FB6AE36F73D97D35,
EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat
\drivers\fastfat.sys
23:33:46.0312 0x16ec fastfat - ok
23:33:46.0345 0x16ec [ 967EA5B213E9984CBE270205DF37755B,
D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax
\fxssvc.exe
23:33:46.0370 0x16ec Fax - ok
23:33:46.0386 0x16ec [ E817A017F82DF2A1F8CFDBDA29388B29,
D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc
\drivers\fdc.sys
23:33:46.0389 0x16ec fdc - ok
23:33:46.0404 0x16ec [ F3222C893BD2F5821A0179E5C71E88FB,
4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost
\fdPHost.dll
23:33:46.0407 0x16ec fdPHost - ok
23:33:46.0422 0x16ec [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B,
63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub
\fdrespub.dll
23:33:46.0425 0x16ec FDResPub - ok
23:33:46.0472 0x16ec [ 2BA5E7CFD3308C3BD981C7B1D3B09EA9,
67D35DD4B8A5F17E5462E7CFA2A9FC5FADF309E9AE ] FfeCore
\DRIVERS\FfeCore.sys
23:33:46.0639 0x16ec FfeCore - ok
23:33:46.0696 0x16ec [ 813FD1106CD96F4BD9ACFD5CEEF49E54,
9D999DC22DE61D8B2203E96C49921CBD6561139129 ] FfeDisk
\DRIVERS\FfeDisk.sys
23:33:46.0737 0x16ec FfeDisk - ok
23:33:46.0764 0x16ec [ B67EAF8F94FC3AC519664AE434DFF0A4,
E8BE9C7153F9472752F218848505566FE567A0AB21 ] FfeDsManager
\DRIVERS\FfeDsManager.sys
23:33:46.0841 0x16ec FfeDsManager - ok

07971C681FBD391C0BA017
C:\windows\ehome\eh
12859B9925D7A4631DE61A
C:\windows\ehome\eh
97FAA7627A162B0AEC1554
C:\windows\system32
69B65C12BDADD4B7305086
C:\windows\system32
ED41893960018D5EC2F782
C:\windows\system32

75CB47923A867DDAC51270
C:\windows\system32
41463A255FDA1D550B3385
C:\windows\system32
43153E23210B03FAE16897
C:\windows\system32
4CC9320A21E6FEA2D16C48
C:\windows\system32
A85B947249DBB986358CCD
C:\windows\system32
0E76C29D2A974A3F2FBFCB
C:\windows\system32
1DDF3338776D0BFB8AB347
C:\windows\system32
3FB620D679FAFFAD59E6FE
C:\windows\system32
40CC83E8C5A1FE0FCE43D2
C:\windows\system32

23:33:46.0854 0x16ec [ DA326B39A779CC8E5BEAF377566537D1, 6E48FF8E7223ABD4EF351F

467896455CF96E32C9ADF4B84492F4E2A9A37AC1C8 ] FfeDt
C:\windows\system32
\DRIVERS\FfeDt.sys
23:33:46.0895 0x16ec FfeDt - ok
23:33:46.0934 0x16ec [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1
C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo
C:\windows\system32
\drivers\fileinfo.sys
23:33:46.0938 0x16ec FileInfo - ok
23:33:46.0953 0x16ec [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FE
AAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace
C:\windows\system32
\drivers\filetrace.sys
23:33:46.0957 0x16ec Filetrace - ok
23:33:46.0975 0x16ec [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA
431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk
C:\windows\system32
\drivers\flpydisk.sys
23:33:46.0979 0x16ec flpydisk - ok
23:33:47.0007 0x16ec [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F8
9E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr
C:\windows\system32
\drivers\fltmgr.sys
23:33:47.0014 0x16ec FltMgr - ok
23:33:47.0061 0x16ec [ B3A5EC6B6B6673DB7E87C2BCDBDDC074, BD0DB5D6B6DB46AD330283
04D8A75C4C400637C7827D8BBA5A1534CAA8A45690 ] FontCache
C:\windows\system32
\FntCache.dll
23:33:47.0093 0x16ec FontCache - ok
23:33:47.0151 0x16ec [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9
CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\windows\Microso
ft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
23:33:47.0159 0x16ec FontCache3.0.0.0 - ok
23:33:47.0179 0x16ec [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141F
D70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends
C:\windows\system32
\drivers\FsDepends.sys
23:33:47.0185 0x16ec FsDepends - ok
23:33:47.0211 0x16ec [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A4458
3520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec
C:\windows\system32
\drivers\Fs_Rec.sys
23:33:47.0213 0x16ec Fs_Rec - ok
23:33:47.0247 0x16ec [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8
CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol
C:\windows\system32
\DRIVERS\fvevol.sys
23:33:47.0257 0x16ec fvevol - ok
23:33:47.0284 0x16ec [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC33
44D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx
C:\windows\system32
\drivers\gagp30kx.sys
23:33:47.0289 0x16ec gagp30kx - ok
23:33:47.0331 0x16ec [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B
62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc
C:\windows\System32
\gpsvc.dll
23:33:47.0356 0x16ec gpsvc - ok
23:33:47.0417 0x16ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5
F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate
C:\Program Files\Go
ogle\Update\GoogleUpdate.exe
23:33:47.0433 0x16ec gupdate - ok
23:33:47.0457 0x16ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5
F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem
C:\Program Files\Go
ogle\Update\GoogleUpdate.exe
23:33:47.0464 0x16ec gupdatem - ok
23:33:47.0493 0x16ec [ FCF70F44BBA64A2EB1B87D8A54101DCA, B9958FD7E5A444EA99BABB
2CB306958798BED64639AD044254E82A213FDBA72D ] HBtnKey
C:\windows\system32
\drivers\HBtnKey.sys
23:33:47.0496 0x16ec HBtnKey - ok

23:33:47.0519 0x16ec [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421

B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir
C:\windows\system32
\drivers\hcw85cir.sys
23:33:47.0525 0x16ec hcw85cir - ok
23:33:47.0559 0x16ec [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A1
9438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\windows\system32
\drivers\HdAudio.sys
23:33:47.0581 0x16ec HdAudAddService - ok
23:33:47.0602 0x16ec [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755
B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus
C:\windows\system32
\drivers\HDAudBus.sys
23:33:47.0606 0x16ec HDAudBus - ok
23:33:47.0623 0x16ec [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A609
2D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt
C:\windows\system32
\drivers\HidBatt.sys
23:33:47.0625 0x16ec HidBatt - ok
23:33:47.0641 0x16ec [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420D
B0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth
C:\windows\system32
\drivers\hidbth.sys
23:33:47.0645 0x16ec HidBth - ok
23:33:47.0676 0x16ec [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C
438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr
C:\windows\system32
\drivers\hidir.sys
23:33:47.0679 0x16ec HidIr - ok
23:33:47.0707 0x16ec [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29A
A5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv
C:\windows\system32
\hidserv.dll
23:33:47.0711 0x16ec hidserv - ok
23:33:47.0732 0x16ec [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F521
6CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb
C:\windows\system32
\DRIVERS\hidusb.sys
23:33:47.0735 0x16ec HidUsb - ok
23:33:47.0760 0x16ec [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987
EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc
C:\windows\system32
\kmsvc.dll
23:33:47.0765 0x16ec hkmsvc - ok
23:33:47.0785 0x16ec [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09
B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\windows\system
32\ListSvc.dll
23:33:47.0793 0x16ec HomeGroupListener - ok
23:33:47.0813 0x16ec [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C10247
5876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\windows\system
32\provsvc.dll
23:33:47.0821 0x16ec HomeGroupProvider - ok
23:33:47.0862 0x16ec [ 299683D4C8AAA3F6F5D5D226A1782A6E, A2ECF52DBDC442F3C9514E
C80CE614A9D3F45698E5B0992CF009C66B770E9027 ] HPFXBULK
C:\windows\system32
\drivers\hpfxbulk.sys
23:33:47.0867 0x16ec HPFXBULK - ok
23:33:47.0885 0x16ec [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F
56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD
C:\windows\system32
\drivers\HpSAMD.sys
23:33:47.0893 0x16ec HpSAMD - ok
23:33:47.0938 0x16ec [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F748
64967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP
C:\windows\system32
\drivers\HTTP.sys
23:33:47.0966 0x16ec HTTP - ok
23:33:47.0971 0x16ec huawei_cdcacm - ok
23:33:47.0981 0x16ec huawei_enumerator - ok
23:33:47.0990 0x16ec huawei_ext_ctrl - ok
23:33:47.0998 0x16ec huawei_wwanecm - ok

23:33:48.0018 0x16ec [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E5

08CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy
C:\windows\system32
\drivers\hwpolicy.sys
23:33:48.0019 0x16ec hwpolicy - ok
23:33:48.0065 0x16ec [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C3777
3F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt
C:\windows\system32
\drivers\i8042prt.sys
23:33:48.0070 0x16ec i8042prt - ok
23:33:48.0095 0x16ec [ E64665E2A6CAEB52C8AE6E5EB6F3FD7C, 3D123E673F334B47A7F90B
6F462C0A3DF5684D51F6F87163F3F9D34CF5CAD62F ] iaStor
C:\windows\system32
\drivers\iaStor.sys
23:33:48.0105 0x16ec iaStor - ok
23:33:48.0132 0x16ec [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE010502
5B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV
C:\windows\system32
\drivers\iaStorV.sys
23:33:48.0148 0x16ec iaStorV - ok
23:33:48.0246 0x16ec [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5
AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc
C:\windows\Microsof
t.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:33:48.0288 0x16ec idsvc - ok
23:33:48.0749 0x16ec [ 8560EFED2F1DD8B7AA5933893007E1D1, A84DCE441FFE7ED9FB94D0
822C5C13DAF82877A290AB3EE6C451460F56CB6AAE ] igfx
C:\windows\system32
\DRIVERS\igdkmd32.sys
23:33:49.0176 0x16ec igfx - ok
23:33:49.0207 0x16ec [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE34
2FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp
C:\windows\system32
\drivers\iirsp.sys
23:33:49.0211 0x16ec iirsp - ok
23:33:49.0265 0x16ec [ F95622F161474511B8D80D6B093AA610, F2320E25EB9B4AA9A8366B
D3AA23EABEBE111A5610D3A62EBA47D90427D5BC26 ] IKEEXT
C:\windows\System32
\ikeext.dll
23:33:49.0299 0x16ec IKEEXT - ok
23:33:49.0337 0x16ec [ 7081EFE4EBF9CBBFF4EB5A3AC478DDC5, 014B53477E77FDE4A9B125
4EED710658F8BAC2FADE423D13F5141F98EBA3A048 ] IntcDAud
C:\windows\system32
\DRIVERS\IntcDAud.sys
23:33:49.0354 0x16ec IntcDAud - ok
23:33:49.0376 0x16ec [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655
CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide
C:\windows\system32
\drivers\intelide.sys
23:33:49.0379 0x16ec intelide - ok
23:33:49.0403 0x16ec [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28
AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm
C:\windows\system32
\drivers\intelppm.sys
23:33:49.0405 0x16ec intelppm - ok
23:33:49.0418 0x16ec [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B
8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum
C:\windows\system32
\ipbusenum.dll
23:33:49.0423 0x16ec IPBusEnum - ok
23:33:49.0439 0x16ec [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555
B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\windows\system32
\DRIVERS\ipfltdrv.sys
23:33:49.0443 0x16ec IpFilterDriver - ok
23:33:49.0477 0x16ec [ 4D65A07B795D6674312F879D09AA7663, 8D72FE0B51A6FF71F85D26
02DB3AE91C8749F70869B6789552F047BA81411EDA ] iphlpsvc
C:\windows\System32
\iphlpsvc.dll
23:33:49.0502 0x16ec iphlpsvc - ok
23:33:49.0514 0x16ec [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F
4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV
C:\windows\system32
\drivers\IPMIDrv.sys
23:33:49.0517 0x16ec IPMIDRV - ok

23:33:49.0537 0x16ec [ A5FA468D67ABCDAA36264E463A7BB0CD,

1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT
\drivers\ipnat.sys
23:33:49.0541 0x16ec IPNAT - ok
23:33:49.0553 0x16ec [ 42996CFF20A3084A56017B7902307E9F,
22E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM
\drivers\irenum.sys
23:33:49.0555 0x16ec IRENUM - ok
23:33:49.0563 0x16ec [ 2D7D01FE241613B92663CF6DF0BA2AC8,
CF179F19982B962F033DAF33474038D9A7D735BA8D ] irstrtdv
\drivers\irstrtdv.sys
23:33:49.0565 0x16ec irstrtdv - ok
23:33:49.0579 0x16ec [ 1F32BB6B38F62F7DF1A7AB7292638A35,
4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp
\drivers\isapnp.sys
23:33:49.0582 0x16ec isapnp - ok
23:33:49.0601 0x16ec [ CB7A9ABB12B8415BCE5D74994C7BA3AE,
3E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt
\drivers\msiscsi.sys
23:33:49.0625 0x16ec iScsiPrt - ok
23:33:49.0637 0x16ec [ 8D9E0DD04519253C17DFA0580295EEB8,
1B06AE2BB8A831264442DA72D0292E3ACDA4832D56 ] ISCT
\drivers\ISCTD.sys
23:33:49.0640 0x16ec ISCT - ok
23:33:49.0663 0x16ec [ DF93E36D3DABDD53A6394806AD1B9807,
7211ECCBCF50E6312BA862A8737B14F9261C0E4631 ] iusb3hcs
\drivers\iusb3hcs.sys
23:33:49.0666 0x16ec iusb3hcs - ok
23:33:49.0694 0x16ec [ 725D1248F64D56E61453F4FCDFA6A0B6,
2738189FFF680CAEA8704DF956935C7D8619E5782F ] iusb3hub
\drivers\iusb3hub.sys
23:33:49.0716 0x16ec iusb3hub - ok
23:33:49.0762 0x16ec [ 5C0C8D16027229BD7FC9465124BFEC9D,
ACB40F5AC4F453621FF368CC010956DB8260A97241 ] iusb3xhc
\drivers\iusb3xhc.sys
23:33:49.0795 0x16ec iusb3xhc - ok
23:33:49.0824 0x16ec [ ADEF52CA1AEAE82B50DF86B56413107E,
3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass
\DRIVERS\kbdclass.sys
23:33:49.0828 0x16ec kbdclass - ok
23:33:49.0840 0x16ec [ 9E3CED91863E6EE98C24794D05E27A71,
6805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid
\DRIVERS\kbdhid.sys
23:33:49.0843 0x16ec kbdhid - ok
23:33:49.0856 0x16ec [ 81951F51E318AECC2D68559E47485CC4,
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] KeyIso
\lsass.exe
23:33:49.0858 0x16ec KeyIso - ok
23:33:49.0878 0x16ec [ B7895B4182C0D16F6EFADEB8081E8D36,
7721C96F2C7A238960FD9398A3D4573E14648E9DB9 ] KSecDD
\Drivers\ksecdd.sys
23:33:49.0882 0x16ec KSecDD - ok
23:33:49.0899 0x16ec [ D30159AC9237519FBC62C6EC247D2D46,
497002043FEC3A5F732D7AE311FBA457E0FE16CE4B ] KSecPkg
\Drivers\ksecpkg.sys
23:33:49.0905 0x16ec KSecPkg - ok
23:33:50.0003 0x16ec [ 89A7B9CC98D0D80C6F31B91C0A310FCD,
E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm
\msdtckrm.dll
23:33:50.0029 0x16ec KtmRm - ok

EDB828D596E43372F97DAE
C:\windows\system32
688176DAB91BE569280E48
C:\windows\system32
C008AC42E6478075C690BF
C:\windows\system32
86522358680FBB1CEBC56B
C:\windows\system32
464BFF3F5EEE985BE075E2
C:\windows\system32
60DD2F9915CCA412A8AB2F
C:\windows\system32
4929E5496FD51C73FE7A28
C:\windows\system32
E1DC2C6A5556FCF488D288
C:\windows\system32
2C0D25426F87A34E792AA1
C:\windows\system32
A3AE1E96B04AC81665ABBD
C:\windows\system32
90CF59F20E14E4A5A79326
C:\windows\system32
ACF76395EF4A2ED03AB919
C:\windows\system32
BAC3BAD22207C8826125FD
C:\windows\system32
10BDE041C95D0CCD3591ED
C:\windows\system32
4583CAEEE0D50C0C7CE955
C:\windows\system32

23:33:50.0093 0x16ec [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB

5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer
C:\windows\system32
\srvsvc.dll
23:33:50.0100 0x16ec LanmanServer - ok
23:33:50.0131 0x16ec [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D43
91E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\windows\System
32\wkssvc.dll
23:33:50.0137 0x16ec LanmanWorkstation - ok
23:33:50.0173 0x16ec [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA0
39C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio
C:\windows\system32
\DRIVERS\lltdio.sys
23:33:50.0177 0x16ec lltdio - ok
23:33:50.0206 0x16ec [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64B
E47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc
C:\windows\System32
\lltdsvc.dll
23:33:50.0214 0x16ec lltdsvc - ok
23:33:50.0237 0x16ec [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F
8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts
C:\windows\System32
\lmhsvc.dll
23:33:50.0240 0x16ec lmhosts - ok
23:33:50.0285 0x16ec [ 2763A02188FFB04287F5034EC5B6B451, 679C9316FC101A9135D788
BC3D910F3EF4146AF56D97143149D1767F581535F7 ] LMS
C:\Program Files\In
tel\AMT\LMS.exe
23:33:50.0300 0x16ec LMS - ok
23:33:50.0362 0x16ec [ B6074D63E1CD83968EDBCF51E6366046, D4D8669284D13C36FED24F
F45B63162547E3A87B6DD9B5539680AA287117418A ] lpasvc
C:\Program Files\Mi
crosoft Policy Platform\policyHost.exe
23:33:50.0369 0x16ec lpasvc - ok
23:33:50.0378 0x16ec [ B6074D63E1CD83968EDBCF51E6366046, D4D8669284D13C36FED24F
F45B63162547E3A87B6DD9B5539680AA287117418A ] lppsvc
C:\Program Files\Mi
crosoft Policy Platform\policyHost.exe
23:33:50.0383 0x16ec lppsvc - ok
23:33:50.0407 0x16ec [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223
F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC
C:\windows\system32
\drivers\lsi_fc.sys
23:33:50.0412 0x16ec LSI_FC - ok
23:33:50.0446 0x16ec [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549
A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS
C:\windows\system32
\drivers\lsi_sas.sys
23:33:50.0452 0x16ec LSI_SAS - ok
23:33:50.0468 0x16ec [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E
17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2
C:\windows\system32
\drivers\lsi_sas2.sys
23:33:50.0473 0x16ec LSI_SAS2 - ok
23:33:50.0490 0x16ec [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156
DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI
C:\windows\system32
\drivers\lsi_scsi.sys
23:33:50.0495 0x16ec LSI_SCSI - ok
23:33:50.0529 0x16ec [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC512
06A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv
C:\windows\system32
\drivers\luafv.sys
23:33:50.0535 0x16ec luafv - ok
23:33:50.0556 0x16ec [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432F
D2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc
C:\windows\system32
\Mcx2Svc.dll
23:33:50.0563 0x16ec Mcx2Svc - ok
23:33:50.0579 0x16ec [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00
D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas
C:\windows\system32
\drivers\megasas.sys
23:33:50.0584 0x16ec megasas - ok

23:33:50.0618 0x16ec [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C61791

61B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR
C:\windows\system32
\drivers\MegaSR.sys
23:33:50.0634 0x16ec MegaSR - ok
23:33:50.0664 0x16ec [ 240D715CFE4FB8F4CDA76F6863E62334, B410C88F0D4749AB843E03
BB8BA215A8E3F291404C1B68824A5963A2381188FB ] MEI
C:\windows\system32
\drivers\HECI.sys
23:33:50.0668 0x16ec MEI - ok
23:33:50.0720 0x16ec Microsoft SharePoint Workspace Audit Service - ok
23:33:50.0736 0x16ec [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F39
9413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS
C:\windows\system32
\mmcss.dll
23:33:50.0741 0x16ec MMCSS - ok
23:33:50.0755 0x16ec [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF36
0862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem
C:\windows\system32
\drivers\modem.sys
23:33:50.0759 0x16ec Modem - ok
23:33:50.0783 0x16ec [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A
4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor
C:\windows\system32
\DRIVERS\monitor.sys
23:33:50.0785 0x16ec monitor - ok
23:33:50.0819 0x16ec [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B9
6B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass
C:\windows\system32
\DRIVERS\mouclass.sys
23:33:50.0824 0x16ec mouclass - ok
23:33:50.0845 0x16ec [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B
57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid
C:\windows\system32
\DRIVERS\mouhid.sys
23:33:50.0848 0x16ec mouhid - ok
23:33:50.0868 0x16ec [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE
74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr
C:\windows\system32
\drivers\mountmgr.sys
23:33:50.0874 0x16ec mountmgr - ok
23:33:50.0954 0x16ec [ A7A117CB1104D0829466F48E17BE0A71, 040F18FC1AF72BE2B71231
70C2F5F131A9518B8AA57C20F23203625D213C792B ] MozillaMaintenance C:\Program Files
\Mozilla Maintenance Service\maintenanceservice.exe
23:33:50.0968 0x16ec MozillaMaintenance - ok
23:33:51.0046 0x16ec [ CF105EE42E3F71E648CEBB3F666E1CF0, 1839F989ED4D954A586CB8
C327F8728C020537E617FB743F457ECEFCCFA4B6C4 ] MpFilter
C:\windows\system32
\DRIVERS\MpFilter.sys
23:33:51.0070 0x16ec MpFilter - ok
23:33:51.0097 0x16ec [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9
B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio
C:\windows\system32
\drivers\mpio.sys
23:33:51.0114 0x16ec mpio - ok
23:33:51.0214 0x16ec [ 65C34426C83EFA32D48380A97717997B, CD7EB6BFBB0BE382BA2105
5460D9A72323F09AF3194A22D8EDB28D5DB3BAE8E7 ] MpKsl3104666d c:\ProgramData\Micr
osoft\Microsoft Antimalware\Definition Updates\{B4A212D9-C230-4A71-900E-99C5C1F8
B8D5}\MpKsl3104666d.sys
23:33:51.0218 0x16ec MpKsl3104666d - ok
23:33:51.0255 0x16ec [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED8
19176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv
C:\windows\system32
\drivers\mpsdrv.sys
23:33:51.0262 0x16ec mpsdrv - ok
23:33:51.0314 0x16ec [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B8
45319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc
C:\windows\system32
\mpssvc.dll
23:33:51.0349 0x16ec MpsSvc - ok
23:33:51.0370 0x16ec [ CEB46AB7C01C9F825F8CC6BABC18166A, AA98898204FC58878502C1
70FE6ED8BA681396DDD8BF3689D0C3642DEA87BEF8 ] MRxDAV
C:\windows\system32

\drivers\mrxdav.sys
23:33:51.0375 0x16ec MRxDAV - ok
23:33:51.0389 0x16ec [ 5D16C921E3671636C0EBA3BBAAC5FD25,
F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb
\DRIVERS\mrxsmb.sys
23:33:51.0394 0x16ec mrxsmb - ok
23:33:51.0414 0x16ec [ 6D17A4791ACA19328C685D256349FEFC,
D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10
\DRIVERS\mrxsmb10.sys
23:33:51.0422 0x16ec mrxsmb10 - ok
23:33:51.0437 0x16ec [ B81F204D146000BE76651A50670A5E9E,
B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20
\DRIVERS\mrxsmb20.sys
23:33:51.0442 0x16ec mrxsmb20 - ok
23:33:51.0455 0x16ec [ 012C5F4E9349E711E11E0F19A8589F0A,
BBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci
\drivers\msahci.sys
23:33:51.0457 0x16ec msahci - ok
23:33:51.0483 0x16ec [ 55055F8AD8BE27A64C831322A780A228,
D0835E8234405BB80084065ED05363B77868397304 ] msdsm
\drivers\msdsm.sys
23:33:51.0488 0x16ec msdsm - ok
23:33:51.0502 0x16ec [ E1BCE74A3BD9902B72599C0192A07E27,
A2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC
\msdtc.exe
23:33:51.0518 0x16ec MSDTC - ok
23:33:51.0538 0x16ec [ DAEFB28E3AF5A76ABCC2C3078C07327F,
7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs
\drivers\Msfs.sys
23:33:51.0540 0x16ec Msfs - ok
23:33:51.0548 0x16ec [ 3E1E5767043C5AF9367F0056295E9F84,
9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf
\drivers\mshidkmdf.sys
23:33:51.0550 0x16ec mshidkmdf - ok
23:33:51.0564 0x16ec [ 0A4E5757AE09FA9622E3158CC1AEF114,
526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv
\drivers\msisadrv.sys
23:33:51.0565 0x16ec msisadrv - ok
23:33:51.0587 0x16ec [ 90F7D9E6B6F27E1A707D4A297F077828,
8842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI
\iscsiexe.dll
23:33:51.0593 0x16ec MSiSCSI - ok
23:33:51.0596 0x16ec msiserver - ok
23:33:51.0616 0x16ec [ 8C0860D6366AAFFB6C5BB9DF9448E631,
17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV
\drivers\MSKSSRV.sys
23:33:51.0619 0x16ec MSKSSRV - ok
23:33:51.0690 0x16ec [ C1F19D2BACBEE9AB64D9AE69E9859AC0,
4C8BF8A521089F62D7207D40F7F3C6E8B6E04090A1 ] MsMpSvc
crosoft Security Client\MsMpEng.exe
23:33:51.0692 0x16ec MsMpSvc - ok
23:33:51.0708 0x16ec [ 3EA8B949F963562CEDBB549EAC0C11CE,
548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK
\drivers\MSPCLOCK.sys
23:33:51.0711 0x16ec MSPCLOCK - ok
23:33:51.0728 0x16ec [ F456E973590D663B1073E9C463B40932,
4772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM
\drivers\MSPQM.sys
23:33:51.0731 0x16ec MSPQM - ok
23:33:51.0757 0x16ec [ 0E008FC4819D238C51D7C93E7B41E560,

5BC107B95CAFC88F51FBB9
C:\windows\system32
012AA3D84EEAAF53780D06
C:\windows\system32
78193D0F967BE9829E53F9
C:\windows\system32
208B92DFCF7AD43202660F
C:\windows\system32
C2C9FD1F61302997117B1C
C:\windows\system32
5162EB623FE64E9DFEAC6C
C:\windows\System32
6EB558532400B489763BAE
C:\windows\system32
B2EDFECD3C14E4FE1BA87D
C:\windows\System32
ED574E420E57374E328C7C
C:\windows\system32
BEFC220EAA730784960074
C:\windows\system32

949C5A14E57F2D7385543C
C:\windows\system32
11F55350EF5219B132A1E0
c:\Program Files\Mi
1B0B2F16A1790282504F3C
C:\windows\system32
48BA6D5580EE7B6A4C06E0
C:\windows\system32
141FCEBDD05874407EAEC3

5A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC
C:\windows\system32
\drivers\MsRPC.sys
23:33:51.0775 0x16ec MsRPC - ok
23:33:51.0791 0x16ec [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B
51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios
C:\windows\system32
\drivers\mssmbios.sys
23:33:51.0793 0x16ec mssmbios - ok
23:33:51.0799 0x16ec [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D
1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE
C:\windows\system32
\drivers\MSTEE.sys
23:33:51.0801 0x16ec MSTEE - ok
23:33:51.0813 0x16ec [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D
4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig
C:\windows\system32
\drivers\MTConfig.sys
23:33:51.0817 0x16ec MTConfig - ok
23:33:51.0835 0x16ec [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A
9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup
C:\windows\system32
\Drivers\mup.sys
23:33:51.0839 0x16ec Mup - ok
23:33:51.0872 0x16ec [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA
693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent
C:\windows\system32
\qagentRT.dll
23:33:51.0895 0x16ec napagent - ok
23:33:51.0947 0x16ec [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC85455
8B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP
C:\windows\system32
\DRIVERS\nwifi.sys
23:33:51.0978 0x16ec NativeWifiP - ok
23:33:52.0038 0x16ec [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F
2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS
C:\windows\system32
\drivers\ndis.sys
23:33:52.0089 0x16ec NDIS - ok
23:33:52.0124 0x16ec [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424B
DA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap
C:\windows\system32
\DRIVERS\ndiscap.sys
23:33:52.0128 0x16ec NdisCap - ok
23:33:52.0147 0x16ec [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD
1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi
C:\windows\system32
\DRIVERS\ndistapi.sys
23:33:52.0150 0x16ec NdisTapi - ok
23:33:52.0173 0x16ec [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813
DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio
C:\windows\system32
\DRIVERS\ndisuio.sys
23:33:52.0178 0x16ec Ndisuio - ok
23:33:52.0191 0x16ec [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB
30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan
C:\windows\system32
\DRIVERS\ndiswan.sys
23:33:52.0198 0x16ec NdisWan - ok
23:33:52.0210 0x16ec [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B69587
15BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy
C:\windows\system32
\drivers\NDProxy.sys
23:33:52.0213 0x16ec NDProxy - ok
23:33:52.0245 0x16ec [ 80B7A96F908DA13617E7E6832C5C6A64, 08B81AFE120B8064B6E001
BDF424168305D55F38AE2071300F57C8EA32BEAE56 ] Net Driver HPZ12 C:\windows\system3
2\HPZinw12.dll
23:33:52.0262 0x16ec Net Driver HPZ12 - ok
23:33:52.0275 0x16ec [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A
298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS
C:\windows\system32
\DRIVERS\netbios.sys
23:33:52.0278 0x16ec NetBIOS - ok
23:33:52.0294 0x16ec [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1

D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT
C:\windows\system32
\DRIVERS\netbt.sys
23:33:52.0310 0x16ec NetBT - ok
23:33:52.0324 0x16ec [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] Netlogon
C:\windows\system32
\lsass.exe
23:33:52.0326 0x16ec Netlogon - ok
23:33:52.0355 0x16ec [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D
303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman
C:\windows\System32
\netman.dll
23:33:52.0372 0x16ec Netman - ok
23:33:52.0411 0x16ec [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7
409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm
C:\windows\System32
\netprofm.dll
23:33:52.0433 0x16ec netprofm - ok
23:33:52.0457 0x16ec [ F476EC40033CDB91EFBE73EB99B8362D, B17535037BC070F9AE1F6B
381C2DBEE27658A8FDE15FB0E061F485EA7C7CBE59 ] NetTcpPortSharing C:\windows\Micros
oft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:33:52.0462 0x16ec NetTcpPortSharing - ok
23:33:52.0484 0x16ec [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC
543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960
C:\windows\system32
\drivers\nfrd960.sys
23:33:52.0487 0x16ec nfrd960 - ok
23:33:52.0531 0x16ec [ 832E098BCA8235436FE2D8AE50AC3718, 516147B97266A2985B396C
9637E017CBF7F0E36081BA8812CF535D836F944006 ] NisDrv
C:\windows\system32
\DRIVERS\NisDrvWFP.sys
23:33:52.0539 0x16ec NisDrv - ok
23:33:52.0570 0x16ec [ E570ECA850F30EB740C2E9699DF3D2BD, 56C204800D41A3A950F404
57FA18F6CF8DB80B0A1FAAE0209EBCE83B74549071 ] NisSrv
c:\Program Files\Mi
crosoft Security Client\NisSrv.exe
23:33:52.0594 0x16ec NisSrv - ok
23:33:52.0614 0x16ec [ 912084381D30D8B89EC4E293053F4710, 99B8CD043DF531D4B9725E
D167F63CED220608B2FED3EE8250C217D15762DFD7 ] NlaSvc
C:\windows\System32
\nlasvc.dll
23:33:52.0637 0x16ec NlaSvc - ok
23:33:52.0663 0x16ec [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9
C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs
C:\windows\system32
\drivers\Npfs.sys
23:33:52.0666 0x16ec Npfs - ok
23:33:52.0689 0x16ec [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C
154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi
C:\windows\system32
\nsisvc.dll
23:33:52.0693 0x16ec nsi - ok
23:33:52.0707 0x16ec [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E
1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy
C:\windows\system32
\drivers\nsiproxy.sys
23:33:52.0709 0x16ec nsiproxy - ok
23:33:52.0769 0x16ec [ 5E43D2B0EE64123D4880DFA6626DEFDE, 164413A22DE58B19EA2B41
20034B46D6BE1F424B80C3421E10BE5C81153D049F ] Ntfs
C:\windows\system32
\drivers\Ntfs.sys
23:33:52.0824 0x16ec Ntfs - ok
23:33:52.0845 0x16ec [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013
AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null
C:\windows\system32
\drivers\Null.sys
23:33:52.0847 0x16ec Null - ok
23:33:52.0864 0x16ec [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396
DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid
C:\windows\system32
\drivers\nvraid.sys
23:33:52.0869 0x16ec nvraid - ok
23:33:52.0890 0x16ec [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970D

D29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor
C:\windows\system32
\drivers\nvstor.sys
23:33:52.0897 0x16ec nvstor - ok
23:33:52.0912 0x16ec [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FE
FCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp
C:\windows\system32
\drivers\nv_agp.sys
23:33:52.0917 0x16ec nv_agp - ok
23:33:52.0951 0x16ec [ 4F15919E01025797007393982E777C52, 4820F07C74FA0997DCDE56
A3ABD8D0DB90364C10C55BE571CFB1F59D15BB6CCC ] O2FLASH
C:\windows\system32
\o2flash.exe
23:33:52.0968 0x16ec O2FLASH - ok
23:33:52.0996 0x16ec [ 5F63917FCC257ED11E828230BE594194, 25CE216077DF06F00FB3EE
996A4833868670EC4ACC66DFF1BDAF5830D83F7218 ] O2MDFRDR
C:\windows\system32
\drivers\O2MDFw7.sys
23:33:53.0000 0x16ec O2MDFRDR - ok
23:33:53.0013 0x16ec [ FDC901900D9B1B671B3388C3023BD2EA, 890AA5F358615E198DFE09
3E9C867E35999F9F4428B1A18DA8C5E753CFCC6C30 ] O2MDRRDR
C:\windows\system32
\drivers\O2MDRw7.sys
23:33:53.0017 0x16ec O2MDRRDR - ok
23:33:53.0044 0x16ec [ 4635935FC972C582632BF45C26BFCB0E, ABD4AFD71B3C2BD3F741BB
E3CEC52C4FA63AC78D353101D2E7DC4DE2725D1CA1 ] O2SDIOAssist
C:\windows\system32
\srvany.exe
23:33:53.0047 0x16ec O2SDIOAssist - ok
23:33:53.0058 0x16ec [ 9ED78D24AAB2B1723D4EEBA7030195C5, 178C73B2D497D10AAA2379
4F9E312F77F2CE6586C8C3051AC3C59013C03427CC ] O2SDJRDR
C:\windows\system32
\drivers\o2sdjw7.sys
23:33:53.0058 0x16ec O2SDJRDR - ok
23:33:53.0073 0x16ec [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E
95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394
C:\windows\system32
\drivers\ohci1394.sys
23:33:53.0073 0x16ec ohci1394 - ok
23:33:53.0136 0x16ec [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E1
5FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose
C:\Program Files\Co
mmon Files\Microsoft Shared\Source Engine\OSE.EXE
23:33:53.0151 0x16ec ose - ok
23:33:53.0359 0x16ec [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93
F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc
C:\Program Files\Co
mmon Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:33:53.0551 0x16ec osppsvc - ok
23:33:53.0587 0x16ec [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D73
6B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc
C:\windows\system32
\pnrpsvc.dll
23:33:53.0604 0x16ec p2pimsvc - ok
23:33:53.0635 0x16ec [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644
AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc
C:\windows\system32
\p2psvc.dll
23:33:53.0652 0x16ec p2psvc - ok
23:33:53.0667 0x16ec [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97
DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport
C:\windows\system32
\drivers\parport.sys
23:33:53.0671 0x16ec Parport - ok
23:33:53.0682 0x16ec [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0E
EBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr
C:\windows\system32
\drivers\partmgr.sys
23:33:53.0685 0x16ec partmgr - ok
23:33:53.0690 0x16ec [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D0138
3BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm
C:\windows\system32
\drivers\parvdm.sys
23:33:53.0691 0x16ec Parvdm - ok
23:33:53.0702 0x16ec [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC

018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc
C:\windows\System32
\pcasvc.dll
23:33:53.0709 0x16ec PcaSvc - ok
23:33:53.0725 0x16ec [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD56941
6C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci
C:\windows\system32
\drivers\pci.sys
23:33:53.0731 0x16ec pci - ok
23:33:53.0747 0x16ec [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A6
5FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide
C:\windows\system32
\drivers\pciide.sys
23:33:53.0749 0x16ec pciide - ok
23:33:53.0781 0x16ec [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CC
E3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia
C:\windows\system32
\drivers\pcmcia.sys
23:33:53.0788 0x16ec pcmcia - ok
23:33:53.0812 0x16ec [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF75
0E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw
C:\windows\system32
\drivers\pcw.sys
23:33:53.0816 0x16ec pcw - ok
23:33:53.0859 0x16ec [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884
DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH
C:\windows\system32
\drivers\peauth.sys
23:33:53.0884 0x16ec PEAUTH - ok
23:33:53.0933 0x16ec [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5D
F75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc
C:\windows\system32
\peerdistsvc.dll
23:33:53.0984 0x16ec PeerDistSvc - ok
23:33:54.0033 0x16ec [ 9AC2E22FA79520BA75D0316B5FAF37D1, 2C4950A74580C088747CD9
C69C64EB4D49D79DFB3B6A5431F9EB679022ABC803 ] PinFile
C:\windows\system32
\DRIVERS\PinFile.sys
23:33:54.0056 0x16ec PinFile - ok
23:33:54.0112 0x16ec [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA40204482
4DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla
C:\windows\system32
\pla.dll
23:33:54.0167 0x16ec pla - ok
23:33:54.0208 0x16ec [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D
558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay
C:\windows\system32
\umpnpmgr.dll
23:33:54.0225 0x16ec PlugPlay - ok
23:33:54.0255 0x16ec [ 0C155C5D8942B3CBCF9506A9D376B9AD, 37F4878548DD7063CA31FB
21D6955A45C25F648C332A736DA84DEA5AAE7486AF ] Pml Driver HPZ12 C:\windows\system3
2\HPZipm12.dll
23:33:54.0272 0x16ec Pml Driver HPZ12 - ok
23:33:54.0287 0x16ec [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC8881
2B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg
C:\windows\system32
\pnrpauto.dll
23:33:54.0290 0x16ec PNRPAutoReg - ok
23:33:54.0308 0x16ec [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D73
6B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc
C:\windows\system32
\pnrpsvc.dll
23:33:54.0315 0x16ec PNRPsvc - ok
23:33:54.0352 0x16ec [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342
C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent
C:\windows\System32
\ipsecsvc.dll
23:33:54.0374 0x16ec PolicyAgent - ok
23:33:54.0396 0x16ec [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908F
A5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power
C:\windows\system32
\umpo.dll
23:33:54.0402 0x16ec Power - ok
23:33:54.0431 0x16ec [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246

920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport
C:\windows\system32
\DRIVERS\raspptp.sys
23:33:54.0435 0x16ec PptpMiniport - ok
23:33:54.0467 0x16ec [ 71A9BE69C08F5C87A758FD233CEC5C60, 709CA16879080A00686822
B76A55919197645CC9FBCF8CB8DAB3FB9E18ADDBF7 ] prepdrvr
C:\windows\system32
\DRIVERS\prepdrv.sys
23:33:54.0471 0x16ec prepdrvr - ok
23:33:54.0492 0x16ec [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB0
4007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor
C:\windows\system32
\drivers\processr.sys
23:33:54.0496 0x16ec Processor - ok
23:33:54.0522 0x16ec [ CADEFAC453040E370A1BDFF3973BE00D, 2E3DD8DA702468D8AB0F3C
E27188B1991D4CB015FB36BAE4C6E7996B61CF49B8 ] ProfSvc
C:\windows\system32
\profsvc.dll
23:33:54.0530 0x16ec ProfSvc - ok
23:33:54.0542 0x16ec [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] ProtectedStorage C:\windows\system3
2\lsass.exe
23:33:54.0544 0x16ec ProtectedStorage - ok
23:33:54.0595 0x16ec [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC
6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched
C:\windows\system32
\DRIVERS\pacer.sys
23:33:54.0599 0x16ec Psched - ok
23:33:54.0659 0x16ec [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B
930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300
C:\windows\system32
\drivers\ql2300.sys
23:33:54.0745 0x16ec ql2300 - ok
23:33:54.0776 0x16ec [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F996
8222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx
C:\windows\system32
\drivers\ql40xx.sys
23:33:54.0781 0x16ec ql40xx - ok
23:33:54.0803 0x16ec [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7
676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE
C:\windows\system32
\qwave.dll
23:33:54.0819 0x16ec QWAVE - ok
23:33:54.0831 0x16ec [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9
DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv
C:\windows\system32
\drivers\qwavedrv.sys
23:33:54.0834 0x16ec QWAVEdrv - ok
23:33:54.0849 0x16ec [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB168
9B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd
C:\windows\system32
\DRIVERS\rasacd.sys
23:33:54.0852 0x16ec RasAcd - ok
23:33:54.0887 0x16ec [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE
631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn
C:\windows\system32
\DRIVERS\AgileVpn.sys
23:33:54.0890 0x16ec RasAgileVpn - ok
23:33:54.0909 0x16ec [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635
F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto
C:\windows\System32
\rasauto.dll
23:33:54.0915 0x16ec RasAuto - ok
23:33:54.0928 0x16ec [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7
DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp
C:\windows\system32
\DRIVERS\rasl2tp.sys
23:33:54.0932 0x16ec Rasl2tp - ok
23:33:54.0956 0x16ec [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2B
AF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan
C:\windows\System32
\rasmans.dll
23:33:54.0973 0x16ec RasMan - ok
23:33:54.0985 0x16ec [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E

78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe
C:\windows\system32
\DRIVERS\raspppoe.sys
23:33:54.0989 0x16ec RasPppoe - ok
23:33:55.0016 0x16ec [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB
795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp
C:\windows\system32
\DRIVERS\rassstp.sys
23:33:55.0019 0x16ec RasSstp - ok
23:33:55.0035 0x16ec [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F
97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss
C:\windows\system32
\DRIVERS\rdbss.sys
23:33:55.0050 0x16ec rdbss - ok
23:33:55.0059 0x16ec [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F9
1F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus
C:\windows\system32
\drivers\rdpbus.sys
23:33:55.0062 0x16ec rdpbus - ok
23:33:55.0072 0x16ec [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3
508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD
C:\windows\system32
\DRIVERS\RDPCDD.sys
23:33:55.0075 0x16ec RDPCDD - ok
23:33:55.0090 0x16ec [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA11
34CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR
C:\windows\system32
\drivers\rdpdr.sys
23:33:55.0096 0x16ec RDPDR - ok
23:33:55.0117 0x16ec [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BD
E4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD
C:\windows\system32
\drivers\rdpencdd.sys
23:33:55.0119 0x16ec RDPENCDD - ok
23:33:55.0129 0x16ec [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C
920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP
C:\windows\system32
\drivers\rdprefmp.sys
23:33:55.0131 0x16ec RDPREFMP - ok
23:33:55.0149 0x16ec [ 68A0387F58E226DEEE23D9715955572A, F95BB1D2BB3E79AF47B1C7
15BB5E3003EEF888AAA963F46F4A2FE8AFBD4F37A4 ] RdpVideoMiniport C:\windows\system3
2\drivers\rdpvideominiport.sys
23:33:55.0151 0x16ec RdpVideoMiniport - ok
23:33:55.0183 0x16ec [ F031683E6D1FEA157ABB2FF260B51E61, 83B552819A5964152882C5
27E1421DBCEAACC74DEB897E3C4B53F52F1467FED3 ] RDPWD
C:\windows\system32
\drivers\RDPWD.sys
23:33:55.0199 0x16ec RDPWD - ok
23:33:55.0216 0x16ec [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259E
A362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost
C:\windows\system32
\drivers\rdyboost.sys
23:33:55.0231 0x16ec rdyboost - ok
23:33:55.0257 0x16ec [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DA
E53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess
C:\windows\System32
\mprdim.dll
23:33:55.0262 0x16ec RemoteAccess - ok
23:33:55.0287 0x16ec [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40B
FA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\windows\system32
\regsvc.dll
23:33:55.0293 0x16ec RemoteRegistry - ok
23:33:55.0327 0x16ec [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83
DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper
C:\windows\System32
\RpcEpMap.dll
23:33:55.0332 0x16ec RpcEptMapper - ok
23:33:55.0360 0x16ec [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0
154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator
C:\windows\system32
\locator.exe
23:33:55.0366 0x16ec RpcLocator - ok
23:33:55.0391 0x16ec [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331

F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs
\rpcss.dll
23:33:55.0403 0x16ec RpcSs - ok
23:33:55.0432 0x16ec [ 032B0D36AD92B582D869879F5AF5B928,
9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr
\DRIVERS\rspndr.sys
23:33:55.0435 0x16ec rspndr - ok
23:33:55.0448 0x16ec [ 7FA7F2E249A5DCBB7970630E15E1F482,
DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap
\drivers\vms3cap.sys
23:33:55.0450 0x16ec s3cap - ok
23:33:55.0461 0x16ec [ 81951F51E318AECC2D68559E47485CC4,
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] SamSs
\lsass.exe
23:33:55.0463 0x16ec SamSs - ok
23:33:55.0484 0x16ec [ 05D860DA1040F111503AC416CCEF2BCA,
E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port
\drivers\sbp2port.sys
23:33:55.0488 0x16ec sbp2port - ok
23:33:55.0503 0x16ec [ 8FC518FFE9519C2631D37515A68009C4,
7F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr
\SCardSvr.dll
23:33:55.0511 0x16ec SCardSvr - ok
23:33:55.0526 0x16ec [ 0693B5EC673E34DC147E195779A4DCF6,
A67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter
\DRIVERS\scfilter.sys
23:33:55.0529 0x16ec scfilter - ok
23:33:55.0582 0x16ec [ A04BB13F8A72F8B6E8B4071723E4E336,
7C455324C8437F9CF398153E269543588B65389502 ] Schedule
\schedsvc.dll
23:33:55.0633 0x16ec Schedule - ok
23:33:55.0649 0x16ec [ 319C6B309773D063541D01DF8AC6F55F,
A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc
\certprop.dll
23:33:55.0664 0x16ec SCPolicySvc - ok
23:33:55.0680 0x16ec [ F844A4F3568E4E4486E9F4195670D706,
5B0F91A441DC9B2580BC89A2CBFFCD3EE3A40C176E ] SDDisk2K
\DRIVERS\SDDisk2K.sys
23:33:55.0695 0x16ec SDDisk2K - ok
23:33:55.0711 0x16ec [ D3BB46AA6A1A8686DF85557751D9BFA6,
4A6FAA0941F9A8CDBFA3824460BA34AA7840B18363 ] SDDToki
\DRIVERS\SDDToki.sys
23:33:55.0727 0x16ec SDDToki - ok
23:33:55.0727 0x16ec [ 73462C8830AEE3DDE7A91E00D7902E29,
83CC0C4E33A77EA8845907FC3997471E3583844FE0 ] SDDVD
\DRIVERS\SDDVD.sys
23:33:55.0727 0x16ec SDDVD - ok
23:33:55.0758 0x16ec [ 08236C4BCE5EDD0A0318A438AF28E0F7,
AD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC
\SDRSVC.dll
23:33:55.0758 0x16ec SDRSVC - ok
23:33:55.0773 0x16ec [ 1A7DA2DEC8F6DED4328F5205343345D8,
412E96731BA19AA49D5421F01309578AC979AE1D2F ] SDUPC
\DRIVERS\SDUPC.sys
23:33:55.0773 0x16ec SDUPC - ok
23:33:55.0789 0x16ec [ 4AA7B229F6EFCF3ABB299636D4CA662A,
DF165978DB29FC7675971215DBE7282DA1E26942B1 ] SDVCE
\DRIVERS\SDVCE.sys
23:33:55.0836 0x16ec SDVCE - ok
23:33:55.0929 0x16ec [ 90A3935D05B494A5A39D37E71F09A677,

C:\windows\system32
0F8F18A6A0A689957B886D
C:\windows\system32
9633B193F3FDA67BC551C6
C:\windows\system32
ACF76395EF4A2ED03AB919
C:\windows\system32
DAE2F37D09A5A42F945BC8
C:\windows\system32
21E10585470CF9FC3BD197
C:\windows\System32
AF1B56FBF3ADABF94CD9DB
C:\windows\system32
E63287FF71C39CBF64C334
C:\windows\system32
182F392FE839499D159A30
C:\windows\System32
12EF0ADB19E8B1ACDBBDA2
C:\windows\system32
6E5435030B488CFAA30A11
C:\windows\system32
2F434F3DAD9276359C8B47
C:\windows\system32
77727F963F63C4CEC11E7A
C:\windows\System32
B0C60C491EDD4E24F93F00
C:\windows\system32
5E67516B983EAE168939F1
C:\windows\system32
F72733A69BC6E1A2BB91D7

632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv
C:\windows\system32
\drivers\secdrv.sys
23:33:55.0929 0x16ec secdrv - ok
23:33:55.0945 0x16ec [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AA
F39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon
C:\windows\system32
\seclogon.dll
23:33:55.0945 0x16ec seclogon - ok
23:33:55.0961 0x16ec [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEF
E613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS
C:\windows\System32
\sens.dll
23:33:55.0961 0x16ec SENS - ok
23:33:55.0976 0x16ec [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28
198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc
C:\windows\system32
\sensrsvc.dll
23:33:55.0992 0x16ec SensrSvc - ok
23:33:56.0007 0x16ec [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D4
6065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum
C:\windows\system32
\drivers\serenum.sys
23:33:56.0007 0x16ec Serenum - ok
23:33:56.0023 0x16ec [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA9
49DB97595CC32332D9321DF68283BFC102E66D766F ] Serial
C:\windows\system32
\drivers\serial.sys
23:33:56.0039 0x16ec Serial - ok
23:33:56.0039 0x16ec [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A
9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse
C:\windows\system32
\drivers\sermouse.sys
23:33:56.0039 0x16ec sermouse - ok
23:33:56.0076 0x16ec [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF30
57867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv
C:\windows\system32
\sessenv.dll
23:33:56.0084 0x16ec SessionEnv - ok
23:33:56.0098 0x16ec [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206E
E7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk
C:\windows\system32
\drivers\sffdisk.sys
23:33:56.0101 0x16ec sffdisk - ok
23:33:56.0110 0x16ec [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF
7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc
C:\windows\system32
\drivers\sffp_mmc.sys
23:33:56.0113 0x16ec sffp_mmc - ok
23:33:56.0124 0x16ec [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC083
8457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd
C:\windows\system32
\drivers\sffp_sd.sys
23:33:56.0127 0x16ec sffp_sd - ok
23:33:56.0140 0x16ec [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC
6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy
C:\windows\system32
\drivers\sfloppy.sys
23:33:56.0142 0x16ec sfloppy - ok
23:33:56.0182 0x16ec [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C
6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess
C:\windows\System32
\ipnathlp.dll
23:33:56.0204 0x16ec SharedAccess - ok
23:33:56.0231 0x16ec [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506
A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\windows\System3
2\shsvcs.dll
23:33:56.0256 0x16ec ShellHWDetection - ok
23:33:56.0274 0x16ec [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F
12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp
C:\windows\system32
\drivers\sisagp.sys
23:33:56.0277 0x16ec sisagp - ok
23:33:56.0294 0x16ec [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCB

FFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2
\drivers\SiSRaid2.sys
23:33:56.0297 0x16ec SiSRaid2 - ok
23:33:56.0309 0x16ec [ 3727097B55738E2F554972C3BE5BC1AA,
B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4
\drivers\sisraid4.sys
23:33:56.0314 0x16ec SiSRaid4 - ok
23:33:56.0368 0x16ec [ 3E587DBBDFF938DDE5D4CE4047BE9041,
AEC4B25120CF09F8C35702F645922D618FE57B5E05 ] SkypeUpdate
ype\Updater\Updater.exe
23:33:56.0389 0x16ec SkypeUpdate - ok
23:33:56.0418 0x16ec [ 3E21C083B8A01CB70BA1F09303010FCE,
49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb
\DRIVERS\smb.sys
23:33:56.0423 0x16ec Smb - ok
23:33:56.0453 0x16ec smstsmgr - ok
23:33:56.0491 0x16ec [ 6A984831644ECA1A33FFEAE4126F4F37,
92B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP
\snmptrap.exe
23:33:56.0496 0x16ec SNMPTRAP - ok
23:33:56.0520 0x16ec [ 95CF1AE7527FB70F7816563CBC09D942,
9C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr
\drivers\spldr.sys
23:33:56.0524 0x16ec spldr - ok
23:33:56.0561 0x16ec [ 9AEA093B8F9C37CF45538382CABA2475,
DB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler
\spoolsv.exe
23:33:56.0585 0x16ec Spooler - ok
23:33:56.0692 0x16ec [ CF87A1DE791347E75B98885214CED2B8,
28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc
\sppsvc.exe
23:33:56.0835 0x16ec sppsvc - ok
23:33:56.0859 0x16ec [ B0180B20B065D89232A78A40FE56EAA6,
0119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify
\sppuinotify.dll
23:33:56.0863 0x16ec sppuinotify - ok
23:33:56.0884 0x16ec [ E4C2764065D66EA1D2D3EBC28FE99C46,
55C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv
\DRIVERS\srv.sys
23:33:56.0901 0x16ec srv - ok
23:33:56.0919 0x16ec [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB,
C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2
\DRIVERS\srv2.sys
23:33:56.0935 0x16ec srv2 - ok
23:33:56.0954 0x16ec [ BE6BD660CAA6F291AE06A718A4FA8ABC,
9194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet
\DRIVERS\srvnet.sys
23:33:56.0959 0x16ec srvnet - ok
23:33:56.0980 0x16ec [ D887C9FD02AC9FA880F6E5027A43E118,
090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV
\ssdpsrv.dll
23:33:56.0997 0x16ec SSDPSRV - ok
23:33:57.0024 0x16ec [ D318F23BE45D5E3A107469EB64815B50,
9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc
\sstpsvc.dll
23:33:57.0030 0x16ec SstpSvc - ok
23:33:57.0085 0x16ec [ 7CEA197BC33AD398B27CFDAE4455F2DF,
40E3B148E7D5F532C430EE0D55804E6A1C8E14BAEA ] STacSV
T\WDM\STacSV.exe
23:33:57.0101 0x16ec STacSV - ok

C:\windows\system32
75D52A596A298C33EC79A3
C:\windows\system32
CA13B2C50FB09365362077
C:\Program Files\Sk
803F8F91299C387110F34A
C:\windows\system32

753E23D2B33D47C52C05D8
C:\windows\System32
CE8BACB91A5A86CBCE8261
C:\windows\system32
CC63239C412067AA72318A
C:\windows\System32
7AF4E03D751C951A4E5FBA
C:\windows\system32
4D045B23AD58A8822BE9F2
C:\windows\system32
043AEF06A23069DD176759
C:\windows\system32
4DF31206DF8F33C2975E23
C:\windows\system32
CD38939CFBA80B882D3809
C:\windows\system32
F38BAD90EC791368C37C21
C:\windows\System32
D74355E6FF215AA8CE53BC
C:\windows\system32
2238956165E45D7EB1C1A3
C:\Program Files\ID

23:33:57.0127 0x16ec [ D8FC8D47FBFCB3852E40F5D5058ABC6A, C460EAC21443F73E5102E3

891A06715E3E7DF82268E03786D53580F2C12CFF8E ] stdcfltn
C:\windows\system32
\DRIVERS\stdcfltn.sys
23:33:57.0129 0x16ec stdcfltn - ok
23:33:57.0154 0x16ec [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A
6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor
C:\windows\system32
\drivers\stexstor.sys
23:33:57.0157 0x16ec stexstor - ok
23:33:57.0181 0x16ec [ 606DE749A9971BF885A3429BD58C72BD, 972DFD27B30F9BCC70A1E0
C0997B2D60744B96F6A307D77C6A07A80FC8CBF8F6 ] STHDA
C:\windows\system32
\DRIVERS\stwrt.sys
23:33:57.0206 0x16ec STHDA - ok
23:33:57.0241 0x16ec [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A
3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc
C:\windows\System32
\wiaservc.dll
23:33:57.0266 0x16ec StiSvc - ok
23:33:57.0275 0x16ec [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C
1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt
C:\windows\system32
\drivers\vmstorfl.sys
23:33:57.0278 0x16ec storflt - ok
23:33:57.0293 0x16ec [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69C
AA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc
C:\windows\system32
\storsvc.dll
23:33:57.0297 0x16ec StorSvc - ok
23:33:57.0308 0x16ec [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D3
22B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc
C:\windows\system32
\drivers\storvsc.sys
23:33:57.0311 0x16ec storvsc - ok
23:33:57.0339 0x16ec [ EBB88FEF21408E37B20109286ED72B1F, 45281129AB1C86A90B46BF
4B76EAD318F613A6EF88B87A406FEE3812E562B3EE ] ST_ACCEL
C:\windows\system32
\drivers\ST_ACCEL.sys
23:33:57.0343 0x16ec ST_ACCEL - ok
23:33:57.0349 0x16ec [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459B
DA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum
C:\windows\system32
\drivers\swenum.sys
23:33:57.0352 0x16ec swenum - ok
23:33:57.0388 0x16ec [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128
473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv
C:\windows\System32
\swprv.dll
23:33:57.0411 0x16ec swprv - ok
23:33:57.0429 0x16ec [ F2AD8960812FD111E20E84659EF19D43, FAC91E940D373573890844
7E58792C32E6F86427612114A624041B7213831105 ] Synth3dVsc
C:\windows\system32
\drivers\Synth3dVsc.sys
23:33:57.0433 0x16ec Synth3dVsc - ok
23:33:57.0487 0x16ec [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B35
04E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain
C:\windows\system32
\sysmain.dll
23:33:57.0588 0x16ec SysMain - ok
23:33:57.0600 0x16ec [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F41
21C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\windows\Syste
m32\TabSvc.dll
23:33:57.0605 0x16ec TabletInputService - ok
23:33:57.0621 0x16ec [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452
627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv
C:\windows\System32
\tapisrv.dll
23:33:57.0637 0x16ec TapiSrv - ok
23:33:57.0646 0x16ec [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E49
2A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS
C:\windows\System32
\tbssvc.dll
23:33:57.0650 0x16ec TBS - ok

23:33:57.0715 0x16ec [ D32FDAC73FCD76B85389C39BC1087F2A, E216F446B5F963298CBD2F

F7AEF1035F6C53181517E9FABDCDAA07E1841786BF ] Tcpip
C:\windows\system32
\drivers\tcpip.sys
23:33:57.0765 0x16ec Tcpip - ok
23:33:57.0822 0x16ec [ D32FDAC73FCD76B85389C39BC1087F2A, E216F446B5F963298CBD2F
F7AEF1035F6C53181517E9FABDCDAA07E1841786BF ] TCPIP6
C:\windows\system32
\DRIVERS\tcpip.sys
23:33:57.0851 0x16ec TCPIP6 - ok
23:33:57.0877 0x16ec [ CCA24162E055C3714CE5A88B100C64ED, 9B7712E793B9478BA7A1EF
71EA9CC03CCB9C4004C54EAA911F158958519EDCD9 ] tcpipreg
C:\windows\system32
\drivers\tcpipreg.sys
23:33:57.0879 0x16ec tcpipreg - ok
23:33:57.0897 0x16ec [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A
7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE
C:\windows\system32
\drivers\tdpipe.sys
23:33:57.0901 0x16ec TDPIPE - ok
23:33:57.0914 0x16ec [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C
3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP
C:\windows\system32
\drivers\tdtcp.sys
23:33:57.0917 0x16ec TDTCP - ok
23:33:57.0926 0x16ec [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258
E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx
C:\windows\system32
\DRIVERS\tdx.sys
23:33:57.0930 0x16ec tdx - ok
23:33:57.0959 0x16ec [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5
024D738191F858FC734ED040697872D906351EF663 ] TermDD
C:\windows\system32
\drivers\termdd.sys
23:33:57.0963 0x16ec TermDD - ok
23:33:57.0977 0x16ec [ 052306FD76793D5D5AB5D9891FD1ADBB, A590F01A42EC979664044B
811E7C98F58D6A23AA025B5A1DD0E5F63BF70B2649 ] terminpt
C:\windows\system32
\drivers\terminpt.sys
23:33:57.0980 0x16ec terminpt - ok
23:33:58.0007 0x16ec [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0
069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService
C:\windows\System32
\termsrv.dll
23:33:58.0033 0x16ec TermService - ok
23:33:58.0046 0x16ec [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED4
90B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes
C:\windows\system32
\themeservice.dll
23:33:58.0051 0x16ec Themes - ok
23:33:58.0062 0x16ec [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F39
9413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER
C:\windows\system32
\mmcss.dll
23:33:58.0065 0x16ec THREADORDER - ok
23:33:58.0094 0x16ec [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001
DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks
C:\windows\System32
\trkwks.dll
23:33:58.0100 0x16ec TrkWks - ok
23:33:58.0147 0x16ec [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1
D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\windows\servici
ng\TrustedInstaller.exe
23:33:58.0173 0x16ec TrustedInstaller - ok
23:33:58.0194 0x16ec [ 254BB140EEE3C59D6114C1A86B636877, EE09D62E90407A40278F21
36F640DAB16A4E2BF57D4FB6E05F92CA9CC9CF57C0 ] tssecsrv
C:\windows\system32
\DRIVERS\tssecsrv.sys
23:33:58.0199 0x16ec tssecsrv - ok
23:33:58.0217 0x16ec [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348
D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt
C:\windows\system32
\drivers\tsusbflt.sys
23:33:58.0221 0x16ec TsUsbFlt - ok

23:33:58.0236 0x16ec [ 01246F0BAAD7B68EC0F472AA41E33282,

A3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD
\drivers\TsUsbGD.sys
23:33:58.0239 0x16ec TsUsbGD - ok
23:33:58.0253 0x16ec [ 045ACB987C650D8186C6B4A692223860,
7C70F35DD65751B399D269711865AD65F9E4E43B0B ] tsusbhub
\drivers\tsusbhub.sys
23:33:58.0260 0x16ec tsusbhub - ok
23:33:58.0285 0x16ec [ B2FA25D9B17A68BB93D58B0556E8C90D,
C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel
\DRIVERS\tunnel.sys
23:33:58.0289 0x16ec tunnel - ok
23:33:58.0300 0x16ec [ 750FBCB269F4D7DD2E420C56B795DB6D,
336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35
\drivers\uagp35.sys
23:33:58.0303 0x16ec uagp35 - ok
23:33:58.0326 0x16ec [ EE43346C7E4B5E63E54F927BABBB32FF,
A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs
\DRIVERS\udfs.sys
23:33:58.0342 0x16ec udfs - ok
23:33:58.0364 0x16ec [ 8344FD4FCE927880AA1AA7681D4927E5,
BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect
\UI0Detect.exe
23:33:58.0368 0x16ec UI0Detect - ok
23:33:58.0379 0x16ec [ 44E8048ACE47BEFBFDC2E9BE4CBC8880,
A9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx
\drivers\uliagpkx.sys
23:33:58.0383 0x16ec uliagpkx - ok
23:33:58.0407 0x16ec [ D295BED4B898F0FD999FCFA9B32B071B,
A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus
\DRIVERS\umbus.sys
23:33:58.0410 0x16ec umbus - ok
23:33:58.0428 0x16ec [ 7550AD0C6998BA1CB4843E920EE0FEAC,
6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass
\drivers\umpass.sys
23:33:58.0431 0x16ec UmPass - ok
23:33:58.0447 0x16ec [ 409994A8EACEEE4E328749C0353527A0,
4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService
\umrdp.dll
23:33:58.0455 0x16ec UmRdpService - ok
23:33:58.0597 0x16ec [ D47E82866A6FF02DAE9CEDF127C4BEE0,
AE03062C966FFE72F38FADB586B9C0DBC0C635A797 ] UNS
mmon Files\Intel\Privacy Icon\UNS\UNS.exe
23:33:58.0704 0x16ec UNS - ok
23:33:58.0727 0x16ec [ 833FBB672460EFCE8011D262175FAD33,
29771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost
\upnphost.dll
23:33:58.0743 0x16ec upnphost - ok
23:33:58.0760 0x16ec [ BD9C55D7023C5DE374507ACC7A14E2AC,
15BD94512A22D9C0F4DF91F997801340828333AF3C ] usbccgp
\DRIVERS\usbccgp.sys
23:33:58.0764 0x16ec usbccgp - ok
23:33:58.0778 0x16ec [ 04EC7CEC62EC3B6D9354EEE93327FC82,
A91FB65BB94AA83EA48992133B5262DC539B334B2E ] usbcir
\drivers\usbcir.sys
23:33:58.0783 0x16ec usbcir - ok
23:33:58.0797 0x16ec [ F92DE757E4B7CE9C07C5E65423F3AE3B,
9ACABC3E633FA4ED08D2A2AA871526ED7927A35A91 ] usbehci
\drivers\usbehci.sys
23:33:58.0800 0x16ec usbehci - ok

51F975AF029AD015576FFF
C:\windows\system32
C1CDDF7DABAE531C53290C
C:\windows\system32
0146931B733CAB1CD87F94
C:\windows\system32
E1A95C59148FE463539C34
C:\windows\system32
BAD6FC3BEE45E644D5A6A0
C:\windows\system32
1B54EFA60A221E2B9FFE59
C:\windows\system32
5D96D90FDF68AE470CC92C
C:\windows\system32
D4130DB4AE76EE6DC0B8E7
C:\windows\system32
24C001E422C3B3B920CDCF
C:\windows\system32
FFC57B647147DE2957A7DE
C:\windows\System32
15F2F637470859672FE93E
C:\Program Files\Co
C0C3067A305993CBF056C2
C:\windows\System32
1DBAFF733DE5C1A6A2374B
C:\windows\system32
6CB41D8644618A5F701F6C
C:\windows\system32
B3FDEE4A8F1C7EC12405D9
C:\windows\system32

23:33:58.0833 0x16ec [ 8DC94AEC6A7E644A06135AE7506DC2E9,

F27563AA6390370362F21AFA6E7BA35BC429E14590 ] usbhub
\DRIVERS\usbhub.sys
23:33:58.0849 0x16ec usbhub - ok
23:33:58.0860 0x16ec [ E185D44FAC515A18D9DEDDC23C2CDF44,
5E74F18737ECF5D238874B6E1505E2EAEE66D9D987 ] usbohci
\drivers\usbohci.sys
23:33:58.0862 0x16ec usbohci - ok
23:33:58.0883 0x16ec [ 797D862FE0875E75C7CC4C1AD7B30252,
032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint
\DRIVERS\usbprint.sys
23:33:58.0885 0x16ec usbprint - ok
23:33:58.0902 0x16ec [ F991AB9CC6B908DB552166768176896A,
22D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR
\DRIVERS\USBSTOR.SYS
23:33:58.0906 0x16ec USBSTOR - ok
23:33:58.0919 0x16ec [ 68DF884CF41CDADA664BEB01DAF67E3D,
1D4C3F60967552A867E94533D94EF1C2D777A67872 ] usbuhci
\drivers\usbuhci.sys
23:33:58.0922 0x16ec usbuhci - ok
23:33:58.0938 0x16ec [ 081E6E1C91AEC36758902A9F727CD23C,
76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms
\uxsms.dll
23:33:58.0942 0x16ec UxSms - ok
23:33:58.0955 0x16ec [ 81951F51E318AECC2D68559E47485CC4,
A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] VaultSvc
\lsass.exe
23:33:58.0957 0x16ec VaultSvc - ok
23:33:58.0976 0x16ec [ A059C4C3EDB09E07D21A8E5C0AABD3CB,
F9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot
\drivers\vdrvroot.sys
23:33:58.0980 0x16ec vdrvroot - ok
23:33:59.0007 0x16ec [ C3CD30495687C2A2F66A65CA6FD89BE9,
B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds
\vds.exe
23:33:59.0032 0x16ec vds - ok
23:33:59.0054 0x16ec [ 17C408214EA61696CEC9C66E388B14F3,
641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga
\DRIVERS\vgapnp.sys
23:33:59.0057 0x16ec vga - ok
23:33:59.0081 0x16ec [ 8E38096AD5C8570A6F1570A61E251561,
006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave
\drivers\vga.sys
23:33:59.0083 0x16ec VgaSave - ok
23:33:59.0088 0x16ec VGPU - ok
23:33:59.0107 0x16ec [ 5461686CCA2FDA57B024547733AB42E3,
EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp
\drivers\vhdmp.sys
23:33:59.0114 0x16ec vhdmp - ok
23:33:59.0141 0x16ec [ C829317A37B4BEA8F39735D4B076E923,
7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp
\drivers\viaagp.sys
23:33:59.0145 0x16ec viaagp - ok
23:33:59.0165 0x16ec [ E02F079A6AA107F06B16549C6E5C7B74,
F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7
\drivers\viac7.sys
23:33:59.0169 0x16ec ViaC7 - ok
23:33:59.0186 0x16ec [ E43574F6A56A0EE11809B48C09E4FD3C,
D70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide
\drivers\viaide.sys

3ACB621D57BC8691DBBCDE
C:\windows\system32
EF69D0253CC8F1D29929FD
C:\windows\system32
1BBE745E4C85F8911076F6
C:\windows\system32
AD8E7A16B23B244B7F8346
C:\windows\system32
142781FE2FF93B269D8FA1
C:\windows\system32
9FDAA17A3B99067E035E5D
C:\windows\System32
ACF76395EF4A2ED03AB919
C:\windows\system32
BDD3729B49DF2E2FC72FFE
C:\windows\system32
582E4706C1D6A151020D14
C:\windows\System32
829C0416672E2B2DFABCFE
C:\windows\system32
4DBA3C1397A2203548F45F
C:\windows\System32

2721D0659AA890172FCAD4
C:\windows\system32
55D1796AE750071E1E05BD
C:\windows\system32
B530DCE3EE4F285B3D5F69
C:\windows\system32
3687BF638E21C00E62ABFE
C:\windows\system32

23:33:59.0189 0x16ec viaide - ok

23:33:59.0222 0x16ec [ C2F2911156FDC7817C52829C86DA494E,
A3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus
\drivers\vmbus.sys
23:33:59.0230 0x16ec vmbus - ok
23:33:59.0242 0x16ec [ D4D77455211E204F370D08F4963063CE,
94C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID
\drivers\VMBusHID.sys
23:33:59.0245 0x16ec VMBusHID - ok
23:33:59.0255 0x16ec [ 4C63E00F2F4B5F86AB48A58CD990F212,
32A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr
\drivers\volmgr.sys
23:33:59.0258 0x16ec volmgr - ok
23:33:59.0276 0x16ec [ B5BB72067DDDDBBFB04B2F89FF8C3C87,
6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx
\drivers\volmgrx.sys
23:33:59.0297 0x16ec volmgrx - ok
23:33:59.0319 0x16ec [ F497F67932C6FA693D7DE2780631CFE7,
43BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap
\drivers\volsnap.sys
23:33:59.0336 0x16ec volsnap - ok
23:33:59.0360 0x16ec [ 9DFA0CC2F8855A04816729651175B631,
5FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid
\drivers\vsmraid.sys
23:33:59.0367 0x16ec vsmraid - ok
23:33:59.0445 0x16ec [ 209A3B1901B83AEB8527ED211CCE9E4C,
8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS
\vssvc.exe
23:33:59.0501 0x16ec VSS - ok
23:33:59.0527 0x16ec [ 90567B1E658001E79D7C8BBD3DDE5AA6,
23DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus
\DRIVERS\vwifibus.sys
23:33:59.0529 0x16ec vwifibus - ok
23:33:59.0551 0x16ec [ 7090D3436EEB4E7DA3373090A23448F7,
C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt
\DRIVERS\vwififlt.sys
23:33:59.0555 0x16ec vwififlt - ok
23:33:59.0572 0x16ec [ A3F04CBEA6C2A10E6CB01F8B47611882,
1A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp
\DRIVERS\vwifimp.sys
23:33:59.0574 0x16ec vwifimp - ok
23:33:59.0605 0x16ec [ 55187FD710E27D5095D10A472C8BAF1C,
C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time
\w32time.dll
23:33:59.0627 0x16ec W32Time - ok
23:33:59.0639 0x16ec [ DE3721E89C653AA281428C8A69745D90,
412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen
\drivers\wacompen.sys
23:33:59.0642 0x16ec WacomPen - ok
23:33:59.0667 0x16ec [ 3C3C78515F5AB448B022BDF5B8FFDD2E,
3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP
\DRIVERS\wanarp.sys
23:33:59.0670 0x16ec WANARP - ok
23:33:59.0675 0x16ec [ 3C3C78515F5AB448B022BDF5B8FFDD2E,
3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6
\DRIVERS\wanarp.sys
23:33:59.0677 0x16ec Wanarpv6 - ok
23:33:59.0783 0x16ec [ 353A04C273EC58475D8633E75CCD5604,
F27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc
\Wat\WatAdminSvc.exe

FE499F189B5016FCE0018A
C:\windows\system32
2018B2A84C73E0834200A5
C:\windows\system32
9796BD4B9CFEEEAF57C5E3
C:\windows\system32
65B9AD55F43940A5FDD88B
C:\windows\system32
DAE544ED99D2CF570DA313
C:\windows\system32
37FD9E43A2A3F125E94A31
C:\windows\system32
1A431F6409F8E0531F600F
C:\windows\system32
EFC23BEEA7F54A2DC56CB5
C:\windows\system32
3A130B28F2BFA7DCEC8596
C:\windows\system32
32AFE18B07FECA30BC9583
C:\windows\system32
AE298E2D3BA366BCBDC092
C:\windows\system32
501C78056ED4295625D8A5
C:\windows\system32
35284174A42039C3C1FF8A
C:\windows\system32
35284174A42039C3C1FF8A
C:\windows\system32
FFAE53B6B53AEFC9E8A10B
C:\windows\system32

23:33:59.0842 0x16ec WatAdminSvc - ok

23:33:59.0904 0x16ec [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA2
21F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine
C:\windows\system32
\wbengine.exe
23:33:59.0951 0x16ec wbengine - ok
23:33:59.0966 0x16ec [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E86
2DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc
C:\windows\System32
\wbiosrvc.dll
23:33:59.0983 0x16ec WbioSrvc - ok
23:34:00.0006 0x16ec [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F8
6C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc
C:\windows\System32
\wcncsvc.dll
23:34:00.0028 0x16ec wcncsvc - ok
23:34:00.0036 0x16ec [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710D
A81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\windows\System3
2\WcsPlugInService.dll
23:34:00.0041 0x16ec WcsPlugInService - ok
23:34:00.0049 0x16ec [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E69
45FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd
C:\windows\system32
\drivers\wd.sys
23:34:00.0051 0x16ec Wd - ok
23:34:00.0081 0x16ec [ 9950E3D0F08141C7E89E64456AE7DC73, DE4B96812B305A63F5874B
BF2DC40354FB45B3D96C1D33436E677099760BA448 ] Wdf01000
C:\windows\system32
\drivers\Wdf01000.sys
23:34:00.0106 0x16ec Wdf01000 - ok
23:34:00.0144 0x16ec [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF
6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\windows\system32
\wdi.dll
23:34:00.0161 0x16ec WdiServiceHost - ok
23:34:00.0177 0x16ec [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF
6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\windows\system32
\wdi.dll
23:34:00.0180 0x16ec WdiSystemHost - ok
23:34:00.0251 0x16ec [ A9D880F97530D5B8FEE278923349929D, 6A293E2DB9B7C434EA8B4C
D4861E11905D46BD60E014AE27B74DC8C4B2DDF834 ] WebClient
C:\windows\System32
\webclnt.dll
23:34:00.0268 0x16ec WebClient - ok
23:34:00.0292 0x16ec [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F1
6B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc
C:\windows\system32
\wecsvc.dll
23:34:00.0300 0x16ec Wecsvc - ok
23:34:00.0316 0x16ec [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0
DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\windows\System32
\wercplsupport.dll
23:34:00.0320 0x16ec wercplsupport - ok
23:34:00.0348 0x16ec [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76D
A6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc
C:\windows\System32
\WerSvc.dll
23:34:00.0353 0x16ec WerSvc - ok
23:34:00.0380 0x16ec [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377
A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf
C:\windows\system32
\DRIVERS\wfplwf.sys
23:34:00.0382 0x16ec WfpLwf - ok
23:34:00.0399 0x16ec [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810
D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount
C:\windows\system32
\drivers\wimmount.sys
23:34:00.0402 0x16ec WIMMount - ok
23:34:00.0463 0x16ec [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66
C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend
C:\Program Files\Wi
ndows Defender\mpsvc.dll

23:34:00.0496 0x16ec WinDefend - ok

23:34:00.0501 0x16ec WinHttpAutoProxySvc - ok
23:34:00.0586 0x16ec [ 322D816B95F4EE9011E237B686DCE96D, 33D2CFF5FB268CC866B753
5BE407B2807334644D35CCA8261E4B128EC4F9AF37 ] WinMagic SecureDoc Service C:\Progr
am Files\WinMagic\SecureDoc-NT\SDService.exe
23:34:00.0709 0x16ec WinMagic SecureDoc Service - ok
23:34:00.0748 0x16ec [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320C
FBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt
C:\windows\system32
\wbem\WMIsvc.dll
23:34:00.0755 0x16ec Winmgmt - ok
23:34:00.0807 0x16ec [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945A
D35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM
C:\windows\system32
\WsmSvc.dll
23:34:00.0853 0x16ec WinRM - ok
23:34:00.0906 0x16ec [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C4
3ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb
C:\windows\system32
\DRIVERS\WinUsb.sys
23:34:00.0946 0x16ec WinUsb - ok
23:34:00.0987 0x16ec [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0
E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc
C:\windows\System32
\wlansvc.dll
23:34:01.0024 0x16ec Wlansvc - ok
23:34:01.0050 0x16ec [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD
0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi
C:\windows\system32
\drivers\wmiacpi.sys
23:34:01.0051 0x16ec WmiAcpi - ok
23:34:01.0073 0x16ec [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062AD
BB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv
C:\windows\system32
\wbem\WmiApSrv.exe
23:34:01.0080 0x16ec wmiApSrv - ok
23:34:01.0179 0x16ec [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF
5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Wi
ndows Media Player\wmpnetwk.exe
23:34:01.0221 0x16ec WMPNetworkSvc - ok
23:34:01.0228 0x16ec [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC44
9D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc
C:\windows\System32
\wpcsvc.dll
23:34:01.0231 0x16ec WPCSvc - ok
23:34:01.0242 0x16ec [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C189
1750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum
C:\windows\system32
\wpdbusenum.dll
23:34:01.0247 0x16ec WPDBusEnum - ok
23:34:01.0263 0x16ec [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BC
EF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl
C:\windows\system32
\drivers\ws2ifsl.sys
23:34:01.0265 0x16ec ws2ifsl - ok
23:34:01.0285 0x16ec [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8
863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc
C:\windows\System32
\wscsvc.dll
23:34:01.0290 0x16ec wscsvc - ok
23:34:01.0293 0x16ec WSearch - ok
23:34:01.0373 0x16ec [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D14
8979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv
C:\windows\system32
\wuaueng.dll
23:34:01.0441 0x16ec wuauserv - ok
23:34:01.0464 0x16ec [ E714A1C0354636837E20CCBF00888EE7, 0E31F0DB0AA318E3B0DACD
26C0D3B11519B42F2A996AE580BE67FA8B3C42C436 ] WudfPf
C:\windows\system32
\drivers\WudfPf.sys
23:34:01.0469 0x16ec WudfPf - ok
23:34:01.0497 0x16ec [ 1023EE888C9B47178C5293ED5336AB69, 62221C80C3F719A5852662

47482A64F7CB2F5EF69AFA8FA07D563CA2B0A37561 ] WUDFRd
C:\windows\system32
\DRIVERS\WUDFRd.sys
23:34:01.0503 0x16ec WUDFRd - ok
23:34:01.0510 0x16ec [ 8D1E1E529A2C9E9B6A85B55A345F7629, 64B637CFE2AF58A4F7CE6D
8C3D603F8EFD527500F7137E0A37840313C712CA93 ] wudfsvc
C:\windows\System32
\WUDFSvc.dll
23:34:01.0514 0x16ec wudfsvc - ok
23:34:01.0539 0x16ec [ 3C5E51C05BE9B56EAFF4E388C3AB25E4, 10D9FDEDAB1FB2E76D5466
1AFA5C1A6B1B0980525F38F5D061537077841C6AEE ] WwanSvc
C:\windows\System32
\wwansvc.dll
23:34:01.0555 0x16ec WwanSvc - ok
23:34:01.0584 0x16ec ================ Scan global =============================
==
23:34:01.0618 0x16ec [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D
0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\windows\system32\basesrv.dll
23:34:01.0646 0x16ec [ 1F5F07091D50244F17DD8D5147A628CC, 2F2B84BD1C052F44662960
953C0EC91F9233D4D8DD06512E3E3BE43CE216BCB6 ] C:\windows\system32\winsrv.dll
23:34:01.0680 0x16ec [ 1F5F07091D50244F17DD8D5147A628CC, 2F2B84BD1C052F44662960
953C0EC91F9233D4D8DD06512E3E3BE43CE216BCB6 ] C:\windows\system32\winsrv.dll
23:34:01.0693 0x16ec [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF2
7E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\windows\system32\sxssrv.dll
23:34:01.0718 0x16ec [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328
FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\windows\system32\services.exe
23:34:01.0726 0x16ec [ Global ] - ok
23:34:01.0726 0x16ec ================ Scan MBR ================================
==
23:34:01.0734 0x16ec [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
23:34:01.0981 0x16ec \Device\Harddisk0\DR0 - ok
23:34:01.0982 0x16ec ================ Scan VBR ================================
==
23:34:01.0987 0x16ec [ 5C22EE28CF175251EF58CA2E691196DB ] \Device\Harddisk0\DR0
\Partition1
23:34:01.0991 0x16ec \Device\Harddisk0\DR0\Partition1 - ok
23:34:01.0997 0x16ec [ AA1E88587DF57CE47DD24CE79A4E4B08 ] \Device\Harddisk0\DR0
\Partition2
23:34:02.0001 0x16ec \Device\Harddisk0\DR0\Partition2 - ok
23:34:02.0002 0x16ec Waiting for KSN requests completion. In queue: 169
23:34:03.0008 0x16ec Waiting for KSN requests completion. In queue: 169
23:34:04.0010 0x16ec Waiting for KSN requests completion. In queue: 169
23:34:05.0040 0x16ec AV detected via SS2: System Center 2012 Endpoint Protectio
n, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.2.223.0 ), 0x61000
( enabled : updated )
23:34:05.0055 0x16ec Win FW state via NFP2: enabled
23:34:07.0573 0x16ec ==========================================================
==
23:34:07.0573 0x16ec Scan finished
23:34:07.0573 0x16ec ==========================================================
==
23:34:07.0589 0x16f0 Detected object count: 0
23:34:07.0589 0x16f0 Actual detected object count: 0
23:34:21.0752 0x1654 Deinitialize success