13:25:48.0148 0x0fd4 TDSS rootkit removing tool 3.0.0.

40 Jul 10 2014 12:37:58

13:26:17.0102 0x0fd4 ==========================================================
==
13:26:17.0102 0x0fd4 Current date / time: 2014/08/30 13:26:17.0102
13:26:17.0102 0x0fd4 SystemInfo:
13:26:17.0102 0x0fd4
13:26:17.0102 0x0fd4 OS Version: 6.1.7601 ServicePack: 1.0
13:26:17.0102 0x0fd4 Product type: Workstation
13:26:17.0102 0x0fd4 ComputerName: NET3
13:26:17.0102 0x0fd4 UserName: LUZBELNET
13:26:17.0102 0x0fd4 Windows directory: C:\Windows
13:26:17.0102 0x0fd4 System windows directory: C:\Windows
13:26:17.0102 0x0fd4 Processor architecture: Intel x86
13:26:17.0102 0x0fd4 Number of processors: 2
13:26:17.0102 0x0fd4 Page size: 0x1000
13:26:17.0102 0x0fd4 Boot type: Normal boot
13:26:17.0102 0x0fd4 ==========================================================
==
13:26:19.0364 0x0fd4 KLMD registered as C:\Windows\system32\drivers\20450133.sy
s
13:26:19.0473 0x0fd4 System UUID: {62905D04-F597-178D-0C1A-CCBF08DEBE33}
13:26:19.0848 0x0fd4 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 ( 232.89
Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCyli
nder: 0xFF, Type 'K0', Flags 0x00000050
13:26:19.0848 0x0fd4 Drive \Device\Harddisk1\DR1 - Size: 0x3A2768000 ( 14.54 Gb
), SectorSize: 0x200, Cylinders: 0x769, SectorsPerTrack: 0x3F, TracksPerCylinde
r: 0xFF, Type 'W'
13:26:19.0848 0x0fd4 ==========================================================
==
13:26:19.0848 0x0fd4 \Device\Harddisk0\DR0:
13:26:19.0848 0x0fd4 MBR partitions:
13:26:19.0848 0x0fd4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA
0x3F, BlocksNum 0x2B20C
13:26:19.0848 0x0fd4 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA
0xE8E0360, BlocksNum 0xE8E4221
13:26:19.0848 0x0fd4 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA
0x2B28A, BlocksNum 0xE8B50D6
13:26:19.0848 0x0fd4 \Device\Harddisk1\DR1:
13:26:19.0848 0x0fd4 MBR partitions:
13:26:19.0848 0x0fd4 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA
0x1F80, BlocksNum 0x1D11BC0
13:26:19.0848 0x0fd4 ==========================================================
==
13:26:19.0879 0x0fd4 C: <-> \Device\Harddisk0\DR0\Partition3
13:26:19.0910 0x0fd4 D: <-> \Device\Harddisk0\DR0\Partition2
13:26:19.0910 0x0fd4 ==========================================================
==
13:26:19.0910 0x0fd4 Initialize success
13:26:19.0910 0x0fd4 ==========================================================
==
13:26:21.0501 0x0694 ==========================================================
==
13:26:21.0501 0x0694 Scan started
13:26:21.0501 0x0694 Mode: Manual;
13:26:21.0501 0x0694 ==========================================================
==
13:26:21.0501 0x0694 KSN ping started
13:26:28.0396 0x0694 KSN ping finished: true
13:26:29.0098 0x0694 ================ Scan system memory ======================
==

13:26:29.0098 0x0694 System memory - ok

13:26:29.0098 0x0694 ================ Scan services ===========================
==
13:26:29.0208 0x0694 [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23
A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci
C:\Windows\system32
\drivers\1394ohci.sys
13:26:29.0223 0x0694 1394ohci - ok
13:26:29.0270 0x0694 [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C
23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI
C:\Windows\system32
\drivers\ACPI.sys
13:26:29.0270 0x0694 ACPI - ok
13:26:29.0301 0x0694 [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF
4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi
C:\Windows\system32
\drivers\acpipmi.sys
13:26:29.0301 0x0694 AcpiPmi - ok
13:26:29.0379 0x0694 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2
234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files\Co
mmon Files\Adobe\ARM\1.0\armsvc.exe
13:26:29.0379 0x0694 AdobeARMservice - ok
13:26:29.0457 0x0694 [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF4
8485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx
C:\Windows\system32
\drivers\adp94xx.sys
13:26:29.0473 0x0694 adp94xx - ok
13:26:29.0488 0x0694 [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB4
4C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci
C:\Windows\system32
\drivers\adpahci.sys
13:26:29.0504 0x0694 adpahci - ok
13:26:29.0520 0x0694 [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376D
A9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320
C:\Windows\system32
\drivers\adpu320.sys
13:26:29.0520 0x0694 adpu320 - ok
13:26:29.0535 0x0694 Suspicious service (NoAccess): AEEngine
13:26:29.0644 0x0694 [ DBE209A3BC14D7CFBE9D6DC572B1B28A, A7623074278540E8EF99B4
E3359D310138560FE28A24063FD970A957331007DF ] AEEngine
C:\Program Files\Fa
ronics\AE\aeengine.exe
13:26:29.0676 0x0694 AEEngine - detected LockedService.Multi.Generic ( 1 )
13:26:39.0769 0x0694 AEEngine ( LockedService.Multi.Generic ) - warning
13:26:39.0769 0x0694 Force sending object to P2P due to detect: AEEngine
13:26:47.0756 0x0694 Object send P2P result: false
13:26:47.0756 0x0694 Suspicious service (NoAccess): AeFilter
13:26:47.0787 0x0694 [ BC592FDC96CDAC56EB480938557A90BD, 2B2C9DCB3E80872F5B4579
3C68757874403DE499D698D6E93F1D08A707100FBE ] AeFilter
C:\Windows\system32
\DRIVERS\AeFilter.sys
13:26:47.0787 0x0694 Suspicious file ( NoAccess ): C:\Windows\system32\DRIVERS\
AeFilter.sys. md5: BC592FDC96CDAC56EB480938557A90BD, sha256: 2B2C9DCB3E80872F5B4
5793C68757874403DE499D698D6E93F1D08A707100FBE
13:26:52.0778 0x0694 AeFilter - detected LockedService.Multi.Generic ( 1 )
13:26:52.0778 0x0694 AeFilter ( LockedService.Multi.Generic ) - warning
13:26:52.0778 0x0694 Suspicious service (NoAccess): AeKbd15
13:26:52.0809 0x0694 [ 35033E421138DFDE57BAA5CA10A1EC86, 3367EF0D44EDA328A4D36B
3ABC1AC6BC18597C38BAF6487F3EAE708FBD591944 ] AeKbd15
C:\Windows\system32
\DRIVERS\AeKbd.sys
13:26:52.0809 0x0694 Suspicious file ( NoAccess ): C:\Windows\system32\DRIVERS\
AeKbd.sys. md5: 35033E421138DFDE57BAA5CA10A1EC86, sha256: 3367EF0D44EDA328A4D36B
3ABC1AC6BC18597C38BAF6487F3EAE708FBD591944
13:26:52.0809 0x0694 AeKbd15 - detected LockedService.Multi.Generic ( 1 )
13:26:52.0809 0x0694 AeKbd15 ( LockedService.Multi.Generic ) - warning
13:26:52.0840 0x0694 [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF
79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc
C:\Windows\System32
\aelupsvc.dll

13:26:52.0840 0x0694 AeLookupSvc - ok

13:26:52.0840 0x0694 Suspicious service (NoAccess): AeMouse15
13:26:52.0840 0x0694 [ F6EB2B3A77ED0CB874D4A6A83B1489F6, 7EB0F3AA7D103AA53570D7
92E3383797F3235C88B610E80EA1C533E35368CE63 ] AeMouse15
C:\Windows\system32
\DRIVERS\AeMouse.sys
13:26:52.0840 0x0694 Suspicious file ( NoAccess ): C:\Windows\system32\DRIVERS\
AeMouse.sys. md5: F6EB2B3A77ED0CB874D4A6A83B1489F6, sha256: 7EB0F3AA7D103AA53570
D792E3383797F3235C88B610E80EA1C533E35368CE63
13:26:52.0856 0x0694 AeMouse15 - detected LockedService.Multi.Generic ( 1 )
13:26:52.0856 0x0694 AeMouse15 ( LockedService.Multi.Generic ) - warning
13:26:52.0856 0x0694 Force sending object to P2P due to detect: AeMouse15
13:26:52.0856 0x0694 Object send P2P result: false
13:26:52.0887 0x0694 [ 1151FD4FB0216CFED887BFDE29EBD516, 673C2B498744C7EB846F6B
D4FDC852B0A9722377D75FD694F7F78E727ADF4563 ] AFD
C:\Windows\system32
\drivers\afd.sys
13:26:52.0887 0x0694 AFD - ok
13:26:52.0918 0x0694 [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D1
0C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440
C:\Windows\system32
\drivers\agp440.sys
13:26:52.0934 0x0694 agp440 - ok
13:26:52.0949 0x0694 [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D
81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx
C:\Windows\system32
\drivers\djsvs.sys
13:26:52.0949 0x0694 aic78xx - ok
13:26:52.0996 0x0694 [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C
4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG
C:\Windows\System32
\alg.exe
13:26:52.0996 0x0694 ALG - ok
13:26:53.0012 0x0694 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7
A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide
C:\Windows\system32
\drivers\aliide.sys
13:26:53.0027 0x0694 aliide - ok
13:26:53.0074 0x0694 [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A31
8BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp
C:\Windows\system32
\drivers\amdagp.sys
13:26:53.0074 0x0694 amdagp - ok
13:26:53.0092 0x0694 [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10D
A36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide
C:\Windows\system32
\drivers\amdide.sys
13:26:53.0092 0x0694 amdide - ok
13:26:53.0102 0x0694 [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B
3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8
C:\Windows\system32
\drivers\amdk8.sys
13:26:53.0102 0x0694 AmdK8 - ok
13:26:53.0132 0x0694 [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6
FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM
C:\Windows\system32
\DRIVERS\amdppm.sys
13:26:53.0132 0x0694 AmdPPM - ok
13:26:53.0152 0x0694 [ E7F4D42D8076EC60E21715CD11743A0D, 91AC020A70964F8783C999
BDE8AB8391A3FA3AFC1CD4BC52A43625A2010A53E7 ] amdsata
C:\Windows\system32
\drivers\amdsata.sys
13:26:53.0152 0x0694 amdsata - ok
13:26:53.0172 0x0694 [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7
AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs
C:\Windows\system32
\drivers\amdsbs.sys
13:26:53.0172 0x0694 amdsbs - ok
13:26:53.0187 0x0694 [ 146459D2B08BFDCBFA856D9947043C81, AC7F2069717601F949B096
8EA651899D497170A93B84281B66D3CE5C382DDECB ] amdxata
C:\Windows\system32
\drivers\amdxata.sys
13:26:53.0187 0x0694 amdxata - ok

13:26:53.0218 0x0694 [ 7B4BEB577C5D0171F9B66F390EC29284, 7CB91F1A00C8EBEEA13FD1

8ABEF1EA1710435E43AABD93ABBF5E8E5967B418FA ] apf001
C:\Game\SoftnyxGame
\GunboundLS\apf001.sys
13:26:53.0218 0x0694 apf001 - ok
13:26:53.0265 0x0694 [ 459C0FFF8FF5EB4E8DF7E2EFDCB28DE1, F8FF1D5C345B04F3C74C63
93198D44790FDC53044CAD1323F72CC34CF26297CD ] apf003
C:\Windows\system32
\apf003.sys
13:26:53.0265 0x0694 apf003 - ok
13:26:53.0281 0x0694 [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33
A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID
C:\Windows\system32
\drivers\appid.sys
13:26:53.0281 0x0694 AppID - ok
13:26:53.0312 0x0694 [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437
002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc
C:\Windows\System32
\appidsvc.dll
13:26:53.0312 0x0694 AppIDSvc - ok
13:26:53.0328 0x0694 [ FB1959012294D6AD43E5304DF65E3C26, CFE906B07FF71A178CF9C2
54B056C6F5A303DDC511F0E4E1E75808F1D5326495 ] Appinfo
C:\Windows\System32
\appinfo.dll
13:26:53.0328 0x0694 Appinfo - ok
13:26:53.0359 0x0694 [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951D
C3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt
C:\Windows\System32
\appmgmts.dll
13:26:53.0359 0x0694 AppMgmt - ok
13:26:53.0374 0x0694 [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4
499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc
C:\Windows\system32
\drivers\arc.sys
13:26:53.0390 0x0694 arc - ok
13:26:53.0406 0x0694 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2
921672858C291054220BADE291044343778216F6BA ] arcsas
C:\Windows\system32
\drivers\arcsas.sys
13:26:53.0406 0x0694 arcsas - ok
13:26:53.0421 0x0694 [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A93
4E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac
C:\Windows\system32
\DRIVERS\asyncmac.sys
13:26:53.0421 0x0694 AsyncMac - ok
13:26:53.0437 0x0694 [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F
5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi
C:\Windows\system32
\drivers\atapi.sys
13:26:53.0437 0x0694 atapi - ok
13:26:53.0484 0x0694 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E781
0D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\Windows\Sys
tem32\Audiosrv.dll
13:26:53.0499 0x0694 AudioEndpointBuilder - ok
13:26:53.0515 0x0694 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E781
0D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv
C:\Windows\System32
\Audiosrv.dll
13:26:53.0515 0x0694 Audiosrv - ok
13:26:53.0546 0x0694 [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C8
55A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV
C:\Windows\System32
\AxInstSV.dll
13:26:53.0546 0x0694 AxInstSV - ok
13:26:53.0608 0x0694 [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286E
A5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv
C:\Windows\system32
\drivers\bxvbdx.sys
13:26:53.0608 0x0694 b06bdrv - ok
13:26:53.0671 0x0694 [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD5
9B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x
C:\Windows\system32
\DRIVERS\b57nd60x.sys
13:26:53.0686 0x0694 b57nd60x - ok

13:26:53.0733 0x0694 [ EE1E9C3BB8228AE423DD38DB69128E71,

D6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC
\bdesvc.dll
13:26:53.0733 0x0694 BDESVC - ok
13:26:53.0749 0x0694 [ 505506526A9D467307B3C393DEDAF858,
1497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep
\drivers\Beep.sys
13:26:53.0749 0x0694 Beep - ok
13:26:53.0780 0x0694 [ 1E2BAC209D184BB851E1A187D8A29136,
918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE
\bfe.dll
13:26:53.0811 0x0694 BFE - ok
13:26:53.0842 0x0694 [ E585445D5021971FAE10393F0F1C3961,
B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS
\qmgr.dll
13:26:53.0858 0x0694 BITS - ok
13:26:53.0858 0x0694 [ 2287078ED48FCFC477B05B20CF38F36F,
4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive
\DRIVERS\blbdrive.sys
13:26:53.0874 0x0694 blbdrive - ok
13:26:53.0889 0x0694 [ FCAFAEF6798D7B51FF029F99A9898961,
B6AC342C20514939F8B7A5CEC5D63865B3DC2B4D4F ] bowser
\DRIVERS\bowser.sys
13:26:53.0889 0x0694 bowser - ok
13:26:53.0905 0x0694 [ 9F9ACC7F7CCDE8A15C282D3F88B43309,
54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo
\drivers\BrFiltLo.sys
13:26:53.0905 0x0694 BrFiltLo - ok
13:26:53.0905 0x0694 [ 56801AD62213A41F6497F96DEE83755A,
C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp
\drivers\BrFiltUp.sys
13:26:53.0920 0x0694 BrFiltUp - ok
13:26:53.0936 0x0694 [ 6E11F33D14D020F58D5E02E4D67DFA19,
6F6DE618389A1595785023BF1F295AD8301B27F0AF ] Browser
\browser.dll
13:26:53.0952 0x0694 Browser - ok
13:26:53.0967 0x0694 [ 845B8CE732E67F3B4133164868C666EA,
5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid
\Drivers\Brserid.sys
13:26:53.0967 0x0694 Brserid - ok
13:26:53.0983 0x0694 [ 203F0B1E73ADADBBB7B7B1FABD901F6B,
BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm
\Drivers\BrSerWdm.sys
13:26:53.0983 0x0694 BrSerWdm - ok
13:26:54.0014 0x0694 [ BD456606156BA17E60A04E18016AE54B,
4BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm
\Drivers\BrUsbMdm.sys
13:26:54.0014 0x0694 BrUsbMdm - ok
13:26:54.0014 0x0694 [ AF72ED54503F717A43268B3CC5FAEC2E,
A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer
\Drivers\BrUsbSer.sys
13:26:54.0014 0x0694 BrUsbSer - ok
13:26:54.0030 0x0694 [ ED3DF7C56CE0084EB2034432FC56565A,
35CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM
\drivers\bthmodem.sys
13:26:54.0030 0x0694 BTHMODEM - ok
13:26:54.0061 0x0694 [ 1DF19C96EEF6C29D1C3E1A8678E07190,
52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv
\bthserv.dll
13:26:54.0061 0x0694 bthserv - ok

ED54FD9795F3A4D32F02BE
C:\Windows\System32
8AD6F1492E357F57CF4226
C:\Windows\system32
53933C938DA5126986FFF2
C:\Windows\System32
178C008A9A0A6BFDA65EB0
C:\Windows\System32
55BCA6174E6034A8D61CBE
C:\Windows\system32
BFB37686B1386EB883B99D
C:\Windows\system32
A9131334BD9CF8FD60BA9D
C:\Windows\system32
0DEB8318FB47DF6473C171
C:\Windows\system32
9563E4E8CE769B7619745F
C:\Windows\System32
9309B094CD9B5EBC46295A
C:\Windows\System32
782FA7B26940FE479C49C9
C:\Windows\System32
DFBDC9DA6A3EA40BACFF20
C:\Windows\System32
4A638669B0C30B1BDED242
C:\Windows\System32
B5B75E002E7BC0209582C6
C:\Windows\system32
1F4BB161FF3A1C5B1465BB
C:\Windows\system32

13:26:54.0076 0x0694 [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A0258

4E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs
C:\Windows\system32
\DRIVERS\cdfs.sys
13:26:54.0076 0x0694 cdfs - ok
13:26:54.0108 0x0694 [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5
B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom
C:\Windows\system32
\DRIVERS\cdrom.sys
13:26:54.0108 0x0694 cdrom - ok
13:26:54.0139 0x0694 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30
A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc
C:\Windows\System32
\certprop.dll
13:26:54.0139 0x0694 CertPropSvc - ok
13:26:54.0154 0x0694 [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0
B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass
C:\Windows\system32
\drivers\circlass.sys
13:26:54.0170 0x0694 circlass - ok
13:26:54.0186 0x0694 [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF
3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS
C:\Windows\system32
\CLFS.sys
13:26:54.0186 0x0694 CLFS - ok
13:26:54.0248 0x0694 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6
D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\W
indows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:26:54.0248 0x0694 clr_optimization_v2.0.50727_32 - ok
13:26:54.0281 0x0694 [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC
59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt
C:\Windows\system32
\drivers\CmBatt.sys
13:26:54.0281 0x0694 CmBatt - ok
13:26:54.0291 0x0694 [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956
E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide
C:\Windows\system32
\drivers\cmdide.sys
13:26:54.0291 0x0694 cmdide - ok
13:26:54.0321 0x0694 [ 1B675691ED940766149C93E8F4488D68, A55C41B2B343B1CF53D737
ED1752D0510052094FFC60FDB833279A8A52398132 ] CNG
C:\Windows\system32
\Drivers\cng.sys
13:26:54.0331 0x0694 CNG - ok
13:26:54.0341 0x0694 [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA3
4B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt
C:\Windows\system32
\drivers\compbatt.sys
13:26:54.0341 0x0694 Compbatt - ok
13:26:54.0371 0x0694 [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC
1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus
C:\Windows\system32
\DRIVERS\CompositeBus.sys
13:26:54.0387 0x0694 CompositeBus - ok
13:26:54.0387 0x0694 COMSysApp - ok
13:26:54.0402 0x0694 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3
F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk
C:\Windows\system32
\drivers\crcdisk.sys
13:26:54.0402 0x0694 crcdisk - ok
13:26:54.0449 0x0694 [ A585BEBF7D054BD9618EDA0922D5484A, 340DF730E88F8B6A4EF542
F620EBA2A720546AFAB4DFFA00F066B7610A1026C5 ] CryptSvc
C:\Windows\system32
\cryptsvc.dll
13:26:54.0449 0x0694 CryptSvc - ok
13:26:54.0480 0x0694 [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D0
2E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC
C:\Windows\system32
\drivers\csc.sys
13:26:54.0480 0x0694 CSC - ok
13:26:54.0512 0x0694 [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A
6596F6A64ADD9C36B09F062295699131232712B558 ] CscService
C:\Windows\System32
\cscsvc.dll

13:26:54.0527 0x0694 CscService - ok

13:26:54.0558 0x0694 [ 7660F01D3B38ACA1747E397D21D790AF,
F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch
\rpcss.dll
13:26:54.0574 0x0694 DcomLaunch - ok
13:26:54.0605 0x0694 [ 19C1B05CEF10D86E4FAB33E2B253F727,
BB02DFBD5A459EE985EB2E724BF7250A58C8881955 ] ddcdrv
\ddcdrv.sys
13:26:54.0621 0x0694 ddcdrv - ok
13:26:54.0636 0x0694 [ C5BE2551C0A4BF500A6749F56F475779,
C9C9003426D6FFA8590CD4486A8D825A1227EA649D ] DeepFrz
\drivers\DeepFrz.sys
13:26:54.0652 0x0694 DeepFrz - ok
13:26:54.0668 0x0694 [ 8D6E10A2D9A5EED59562D9B82CF804E1,
27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc
\defragsvc.dll
13:26:54.0683 0x0694 defragsvc - ok
13:26:54.0699 0x0694 [ F024449C97EC1E464AAFFDA18593DB88,
14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC
\Drivers\dfsc.sys
13:26:54.0714 0x0694 DfsC - ok
13:26:54.0777 0x0694 [ 0C6ECB727ADD46CBBEF3B4A2432E7268,
A5A55F256AD536EA32C0A20C9D0131BAE892211A92 ] DFServ
ronics\Deep Freeze\Install C-0\DFServ.exe
13:26:54.0792 0x0694 DFServ - ok
13:26:54.0841 0x0694 [ E9E01EB683C132F7FA27CD607B8A2B63,
3A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp
\dhcpcore.dll
13:26:54.0851 0x0694 Dhcp - ok
13:26:54.0861 0x0694 [ 1A050B0274BFB3890703D490F330C0DA,
D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache
\drivers\discache.sys
13:26:54.0871 0x0694 discache - ok
13:26:54.0891 0x0694 [ 565003F326F99802E68CA78F2A68E9FF,
09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk
\drivers\disk.sys
13:26:54.0891 0x0694 Disk - ok
13:26:54.0911 0x0694 [ 2A958EF85DB1B61FFCA65044FA4BCE9E,
B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc
\drivers\dmvsc.sys
13:26:54.0911 0x0694 dmvsc - ok
13:26:54.0931 0x0694 [ 2FE30D71919C51131405797620E0A714,
1D50A96AB53CB0DEBB3DFDCB31975D16361092ABA5 ] Dnscache
\dnsrslvr.dll
13:26:54.0947 0x0694 Dnscache - ok
13:26:54.0947 0x0694 [ 366BA8FB4B7BB7435E3B9EACB3843F67,
AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc
\dot3svc.dll
13:26:54.0962 0x0694 dot3svc - ok
13:26:54.0978 0x0694 [ 8EC04CA86F1D68DA9E11952EB85973D6,
EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS
\dps.dll
13:26:54.0978 0x0694 DPS - ok
13:26:55.0009 0x0694 [ B918E7C5F9BF77202F89E1A9539F2EB4,
9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud
\drivers\drmkaud.sys
13:26:55.0009 0x0694 drmkaud - ok
13:26:55.0056 0x0694 [ 23F5D28378A160352BA8F817BD8C71CB,
AF89B493CBB89B394D2A091708EDA15DA5C342FF19 ] DXGKrnl
\drivers\dxgkrnl.sys

04611B43705C064C2A8331
C:\Windows\system32
616E64FE508F852A53DCCD
C:\Windows\system32
0B0A54E77089DCFC095D4E
C:\Windows\system32
888F9650F4E872BA8F4E0C
C:\Windows\System32
7EF1E241892E098A472BCA
C:\Windows\system32
FDD3D3903AA47D96A4FE42
C:\Program Files\Fa
4D9037B458C52287461914
C:\Windows\system32
79D74F4679A2EE040FAAF4
C:\Windows\system32
ABC42B24DBA4FFC411120E
C:\Windows\system32
C83511685EE1CE85A5ADF9
C:\Windows\system32
16060DDC32EF95EB6E37B9
C:\Windows\System32
65B7C61ACF34F1F0149045
C:\Windows\System32
2E3FBC2D683D1274E8BC45
C:\Windows\system32
C589A37DE50BBEF22E2DAA
C:\Windows\system32
11BF7B7E6276C28EFF74B8
C:\Windows\System32

13:26:55.0072 0x0694 DXGKrnl - ok

13:26:55.0103 0x0694 [ 8600142FA91C1B96367D3300AD0F3F3A,
C79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost
\eapsvc.dll
13:26:55.0103 0x0694 EapHost - ok
13:26:55.0196 0x0694 [ 024E1B5CAC09731E4D868E64DBFB4AB0,
861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv
\drivers\evbdx.sys
13:26:55.0274 0x0694 ebdrv - ok
13:26:55.0306 0x0694 [ F42309C4191C506B71DB5D1126D26318,
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] EFS
\lsass.exe
13:26:55.0306 0x0694 EFS - ok
13:26:55.0352 0x0694 [ A8C362018EFC87BEB013EE28F29C0863,
2618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr
Recvr.exe
13:26:55.0368 0x0694 ehRecvr - ok
13:26:55.0384 0x0694 [ D389BFF34F80CAEDE417BF9D1507996A,
820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched
sched.exe
13:26:55.0399 0x0694 ehSched - ok
13:26:55.0430 0x0694 [ 0ED67910C8C326796FAA00B2BF6D9D3C,
5E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor
\drivers\elxstor.sys
13:26:55.0448 0x0694 elxstor - ok
13:26:55.0468 0x0694 [ 8FC3208352DD3912C94367A206AB3F11,
74B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev
\drivers\errdev.sys
13:26:55.0468 0x0694 ErrDev - ok
13:26:55.0518 0x0694 [ F6916EFC29D9953D5D0DF06882AE8E16,
9B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem
\es.dll
13:26:55.0518 0x0694 EventSystem - ok
13:26:55.0538 0x0694 [ 2DC9108D74081149CC8B651D3A26207F,
1CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat
\drivers\exfat.sys
13:26:55.0538 0x0694 exfat - ok
13:26:55.0554 0x0694 [ 7E0AB74553476622FB6AE36F73D97D35,
EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat
\drivers\fastfat.sys
13:26:55.0554 0x0694 fastfat - ok
13:26:55.0647 0x0694 [ 967EA5B213E9984CBE270205DF37755B,
D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax
\fxssvc.exe
13:26:55.0663 0x0694 Fax - ok
13:26:55.0710 0x0694 [ E817A017F82DF2A1F8CFDBDA29388B29,
D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc
\drivers\fdc.sys
13:26:55.0710 0x0694 fdc - ok
13:26:55.0741 0x0694 [ F3222C893BD2F5821A0179E5C71E88FB,
4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost
\fdPHost.dll
13:26:55.0756 0x0694 fdPHost - ok
13:26:55.0772 0x0694 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B,
63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub
\fdrespub.dll
13:26:55.0772 0x0694 FDResPub - ok
13:26:55.0788 0x0694 [ 6CF00369C97F3CF563BE99BE983D13D8,
C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo
\drivers\fileinfo.sys

5713625E27DF11FAAFDA7A
C:\Windows\System32
AB0826A74BBEE5B7A1B035
C:\Windows\system32
29B0A8889857CEBFA6CBD7
C:\Windows\System32
07971C681FBD391C0BA017
C:\Windows\ehome\eh
12859B9925D7A4631DE61A
C:\Windows\ehome\eh
97FAA7627A162B0AEC1554
C:\Windows\system32
69B65C12BDADD4B7305086
C:\Windows\system32
ED41893960018D5EC2F782
C:\Windows\system32
75CB47923A867DDAC51270
C:\Windows\system32
41463A255FDA1D550B3385
C:\Windows\system32
43153E23210B03FAE16897
C:\Windows\system32
4CC9320A21E6FEA2D16C48
C:\Windows\system32
A85B947249DBB986358CCD
C:\Windows\system32
0E76C29D2A974A3F2FBFCB
C:\Windows\system32
F65F35324A2FB9DFB533B1
C:\Windows\system32

13:26:55.0803 0x0694 FileInfo - ok

13:26:55.0819 0x0694 [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FE
AAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace
C:\Windows\system32
\drivers\filetrace.sys
13:26:55.0819 0x0694 Filetrace - ok
13:26:55.0834 0x0694 [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA
431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk
C:\Windows\system32
\drivers\flpydisk.sys
13:26:55.0834 0x0694 flpydisk - ok
13:26:55.0866 0x0694 [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F8
9E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr
C:\Windows\system32
\drivers\fltmgr.sys
13:26:55.0866 0x0694 FltMgr - ok
13:26:55.0912 0x0694 [ FA6C66E4364D7DA57AADE5DCC03BB999, 9C0D0A04D2558CF60B7F71
85CC9B369CDDD3B1C625960910CECF07611F288378 ] FontCache
C:\Windows\system32
\FntCache.dll
13:26:55.0944 0x0694 FontCache - ok
13:26:55.0959 0x0694 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9
CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microso
ft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
13:26:55.0975 0x0694 FontCache3.0.0.0 - ok
13:26:55.0975 0x0694 [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141F
D70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends
C:\Windows\system32
\drivers\FsDepends.sys
13:26:55.0975 0x0694 FsDepends - ok
13:26:55.0990 0x0694 [ A574B4360E438977038AAE4BF60D79A2, 7255CCDDDAC4853FA72E64
87408C4B7390CBA37549CE952929B2A9CF3327C616 ] Fs_Rec
C:\Windows\system32
\drivers\Fs_Rec.sys
13:26:55.0990 0x0694 Fs_Rec - ok
13:26:56.0006 0x0694 [ 8A73E79089B282100B9393B644CB853B, 844DC5AADFABBD050B9679
04B796BA06BFD64C9112616EA26229D084F8B3AD41 ] fvevol
C:\Windows\system32
\DRIVERS\fvevol.sys
13:26:56.0022 0x0694 fvevol - ok
13:26:56.0037 0x0694 [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC33
44D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx
C:\Windows\system32
\drivers\gagp30kx.sys
13:26:56.0037 0x0694 gagp30kx - ok
13:26:56.0084 0x0694 GGSAFERDriver - ok
13:26:56.0115 0x0694 [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B
62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc
C:\Windows\System32
\gpsvc.dll
13:26:56.0131 0x0694 gpsvc - ok
13:26:56.0162 0x0694 [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421
B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir
C:\Windows\system32
\drivers\hcw85cir.sys
13:26:56.0162 0x0694 hcw85cir - ok
13:26:56.0205 0x0694 [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A1
9438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32
\drivers\HdAudio.sys
13:26:56.0215 0x0694 HdAudAddService - ok
13:26:56.0235 0x0694 [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755
B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus
C:\Windows\system32
\DRIVERS\HDAudBus.sys
13:26:56.0235 0x0694 HDAudBus - ok
13:26:56.0265 0x0694 [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A609
2D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt
C:\Windows\system32
\drivers\HidBatt.sys
13:26:56.0275 0x0694 HidBatt - ok
13:26:56.0285 0x0694 [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420D
B0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth
C:\Windows\system32

\drivers\hidbth.sys
13:26:56.0285 0x0694 HidBth - ok
13:26:56.0301 0x0694 [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C
438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr
C:\Windows\system32
\drivers\hidir.sys
13:26:56.0301 0x0694 HidIr - ok
13:26:56.0316 0x0694 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29A
A5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv
C:\Windows\system32
\hidserv.dll
13:26:56.0316 0x0694 hidserv - ok
13:26:56.0332 0x0694 [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F521
6CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb
C:\Windows\system32
\drivers\hidusb.sys
13:26:56.0332 0x0694 HidUsb - ok
13:26:56.0363 0x0694 [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987
EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc
C:\Windows\system32
\kmsvc.dll
13:26:56.0363 0x0694 hkmsvc - ok
13:26:56.0379 0x0694 [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09
B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system
32\ListSvc.dll
13:26:56.0379 0x0694 HomeGroupListener - ok
13:26:56.0410 0x0694 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C10247
5876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system
32\provsvc.dll
13:26:56.0410 0x0694 HomeGroupProvider - ok
13:26:56.0441 0x0694 [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F
56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD
C:\Windows\system32
\drivers\HpSAMD.sys
13:26:56.0441 0x0694 HpSAMD - ok
13:26:56.0472 0x0694 [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F748
64967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP
C:\Windows\system32
\drivers\HTTP.sys
13:26:56.0488 0x0694 HTTP - ok
13:26:56.0504 0x0694 [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E5
08CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy
C:\Windows\system32
\drivers\hwpolicy.sys
13:26:56.0504 0x0694 hwpolicy - ok
13:26:56.0504 0x0694 [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C3777
3F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt
C:\Windows\system32
\DRIVERS\i8042prt.sys
13:26:56.0504 0x0694 i8042prt - ok
13:26:56.0535 0x0694 [ A3CAE5D281DB4CFF7CFF8233507EE5AD, 2666107220B9F301193F2C
F85A3D6B09E6E42CC150152D10A8886E47A3FD9B0D ] iaStorV
C:\Windows\system32
\drivers\iaStorV.sys
13:26:56.0535 0x0694 iaStorV - ok
13:26:56.0597 0x0694 [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5
AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc
C:\Windows\Microsof
t.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:26:56.0644 0x0694 idsvc - ok
13:26:56.0691 0x0694 [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE34
2FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp
C:\Windows\system32
\drivers\iirsp.sys
13:26:56.0691 0x0694 iirsp - ok
13:26:56.0769 0x0694 [ F95622F161474511B8D80D6B093AA610, F2320E25EB9B4AA9A8366B
D3AA23EABEBE111A5610D3A62EBA47D90427D5BC26 ] IKEEXT
C:\Windows\System32
\ikeext.dll
13:26:56.0800 0x0694 IKEEXT - ok
13:26:56.0816 0x0694 [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655
CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide
C:\Windows\system32

\drivers\intelide.sys
13:26:56.0831 0x0694 intelide - ok
13:26:56.0862 0x0694 [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28
AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm
C:\Windows\system32
\drivers\intelppm.sys
13:26:56.0862 0x0694 intelppm - ok
13:26:56.0894 0x0694 [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B
8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum
C:\Windows\system32
\ipbusenum.dll
13:26:56.0894 0x0694 IPBusEnum - ok
13:26:56.0894 0x0694 [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555
B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32
\DRIVERS\ipfltdrv.sys
13:26:56.0909 0x0694 IpFilterDriver - ok
13:26:56.0925 0x0694 [ 4D65A07B795D6674312F879D09AA7663, 8D72FE0B51A6FF71F85D26
02DB3AE91C8749F70869B6789552F047BA81411EDA ] iphlpsvc
C:\Windows\System32
\iphlpsvc.dll
13:26:56.0940 0x0694 iphlpsvc - ok
13:26:56.0956 0x0694 [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F
4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV
C:\Windows\system32
\drivers\IPMIDrv.sys
13:26:56.0956 0x0694 IPMIDRV - ok
13:26:56.0956 0x0694 [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE
1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT
C:\Windows\system32
\drivers\ipnat.sys
13:26:56.0972 0x0694 IPNAT - ok
13:26:56.0987 0x0694 [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E48
22E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM
C:\Windows\system32
\drivers\irenum.sys
13:26:56.0987 0x0694 IRENUM - ok
13:26:57.0018 0x0694 [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B
4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp
C:\Windows\system32
\drivers\isapnp.sys
13:26:57.0018 0x0694 isapnp - ok
13:26:57.0034 0x0694 [ CB7A9ABB12B8415BCE5D74994C7BA3AE, 464BFF3F5EEE985BE075E2
3E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt
C:\Windows\system32
\drivers\msiscsi.sys
13:26:57.0050 0x0694 iScsiPrt - ok
13:26:57.0050 0x0694 [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD
3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass
C:\Windows\system32
\DRIVERS\kbdclass.sys
13:26:57.0050 0x0694 kbdclass - ok
13:26:57.0081 0x0694 [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A79326
6805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid
C:\Windows\system32
\drivers\kbdhid.sys
13:26:57.0081 0x0694 kbdhid - ok
13:26:57.0096 0x0694 [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD7
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] KeyIso
C:\Windows\system32
\lsass.exe
13:26:57.0096 0x0694 KeyIso - ok
13:26:57.0112 0x0694 [ 412CEA1AA78CC02A447F5C9E62B32FF1, E06859E2CE2AFA3CE52185
1F8810778ED1748B812E601A58786605096AACEA81 ] KSecDD
C:\Windows\system32
\Drivers\ksecdd.sys
13:26:57.0112 0x0694 KSecDD - ok
13:26:57.0128 0x0694 [ 26C046977E85B95036453D7B88BA1820, 375B284AFB407CAE417D20
90B112A0ED1CCD516ABFDDBFCD5D6AADE859F14ACD ] KSecPkg
C:\Windows\system32
\Drivers\ksecpkg.sys
13:26:57.0128 0x0694 KSecPkg - ok
13:26:57.0159 0x0694 [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955
E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm
C:\Windows\system32

\msdtckrm.dll
13:26:57.0174 0x0694 KtmRm - ok
13:26:57.0190 0x0694 [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB
5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer
C:\Windows\system32
\srvsvc.dll
13:26:57.0190 0x0694 LanmanServer - ok
13:26:57.0221 0x0694 [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D43
91E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System
32\wkssvc.dll
13:26:57.0221 0x0694 LanmanWorkstation - ok
13:26:57.0252 0x0694 [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA0
39C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio
C:\Windows\system32
\DRIVERS\lltdio.sys
13:26:57.0252 0x0694 lltdio - ok
13:26:57.0284 0x0694 [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64B
E47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc
C:\Windows\System32
\lltdsvc.dll
13:26:57.0284 0x0694 lltdsvc - ok
13:26:57.0299 0x0694 [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F
8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts
C:\Windows\System32
\lmhsvc.dll
13:26:57.0299 0x0694 lmhosts - ok
13:26:57.0330 0x0694 [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223
F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC
C:\Windows\system32
\drivers\lsi_fc.sys
13:26:57.0330 0x0694 LSI_FC - ok
13:26:57.0362 0x0694 [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549
A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS
C:\Windows\system32
\drivers\lsi_sas.sys
13:26:57.0362 0x0694 LSI_SAS - ok
13:26:57.0377 0x0694 [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E
17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2
C:\Windows\system32
\drivers\lsi_sas2.sys
13:26:57.0377 0x0694 LSI_SAS2 - ok
13:26:57.0393 0x0694 [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156
DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI
C:\Windows\system32
\drivers\lsi_scsi.sys
13:26:57.0393 0x0694 LSI_SCSI - ok
13:26:57.0424 0x0694 [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC512
06A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv
C:\Windows\system32
\drivers\luafv.sys
13:26:57.0424 0x0694 luafv - ok
13:26:57.0455 0x0694 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432F
D2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc
C:\Windows\system32
\Mcx2Svc.dll
13:26:57.0455 0x0694 Mcx2Svc - ok
13:26:57.0471 0x0694 [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00
D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas
C:\Windows\system32
\drivers\megasas.sys
13:26:57.0471 0x0694 megasas - ok
13:26:57.0502 0x0694 [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C61791
61B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR
C:\Windows\system32
\drivers\MegaSR.sys
13:26:57.0502 0x0694 MegaSR - ok
13:26:57.0549 0x0694 Microsoft SharePoint Workspace Audit Service - ok
13:26:57.0580 0x0694 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F39
9413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS
C:\Windows\system32
\mmcss.dll
13:26:57.0580 0x0694 MMCSS - ok
13:26:57.0596 0x0694 [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF36

0862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem
\drivers\modem.sys
13:26:57.0596 0x0694 Modem - ok
13:26:57.0642 0x0694 [ 79D10964DE86B292320E9DFE02282A23,
4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor
\DRIVERS\monitor.sys
13:26:57.0642 0x0694 monitor - ok
13:26:57.0689 0x0694 [ FB18CC1D4C2E716B6B903B0AC0CC0609,
6B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass
\DRIVERS\mouclass.sys
13:26:57.0689 0x0694 mouclass - ok
13:26:57.0705 0x0694 [ 2C388D2CD01C9042596CF3C8F3C7B24D,
57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid
\drivers\mouhid.sys
13:26:57.0705 0x0694 mouhid - ok
13:26:57.0720 0x0694 [ FC8771F45ECCCFD89684E38842539B9B,
74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr
\drivers\mountmgr.sys
13:26:57.0736 0x0694 mountmgr - ok
13:26:57.0752 0x0694 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0,
B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio
\drivers\mpio.sys
13:26:57.0752 0x0694 mpio - ok
13:26:57.0767 0x0694 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0,
19176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv
\drivers\mpsdrv.sys
13:26:57.0767 0x0694 mpsdrv - ok
13:26:57.0798 0x0694 [ 9835584E999D25004E1EE8E5F3E3B881,
45319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc
\mpssvc.dll
13:26:57.0814 0x0694 MpsSvc - ok
13:26:57.0845 0x0694 [ CEB46AB7C01C9F825F8CC6BABC18166A,
70FE6ED8BA681396DDD8BF3689D0C3642DEA87BEF8 ] MRxDAV
\drivers\mrxdav.sys
13:26:57.0845 0x0694 MRxDAV - ok
13:26:57.0876 0x0694 [ B272B4C3E085EA860C12F2E4FAF2FFA2,
B73D1E1AA47B76B45A649400F7898E8D65D8672E52 ] mrxsmb
\DRIVERS\mrxsmb.sys
13:26:57.0876 0x0694 mrxsmb - ok
13:26:57.0876 0x0694 [ 9AC33EF26C8A3AD0F117D00EB7301D03,
1AC87D4231187A2472A4E107786A5845B213355F0A ] mrxsmb10
\DRIVERS\mrxsmb10.sys
13:26:57.0892 0x0694 mrxsmb10 - ok
13:26:57.0892 0x0694 [ E0ABDB5ED7E199E242A7D028E76C1D3A,
F4F1F970595BC29929F92F461CDD68E4513F49563E ] mrxsmb20
\DRIVERS\mrxsmb20.sys
13:26:57.0892 0x0694 mrxsmb20 - ok
13:26:57.0908 0x0694 [ 012C5F4E9349E711E11E0F19A8589F0A,
BBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci
\drivers\msahci.sys
13:26:57.0908 0x0694 msahci - ok
13:26:57.0923 0x0694 [ 55055F8AD8BE27A64C831322A780A228,
D0835E8234405BB80084065ED05363B77868397304 ] msdsm
\drivers\msdsm.sys
13:26:57.0923 0x0694 msdsm - ok
13:26:57.0954 0x0694 [ E1BCE74A3BD9902B72599C0192A07E27,
A2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC
\msdtc.exe
13:26:57.0954 0x0694 MSDTC - ok
13:26:57.0970 0x0694 [ DAEFB28E3AF5A76ABCC2C3078C07327F,

C:\Windows\system32
52714827B7EEDACA55326A
C:\Windows\system32
F10CCA63493782B16DE6B9
C:\Windows\system32
B2FB72272BB01AEDA4047B
C:\Windows\system32
806DDF2B4830CA866582FE
C:\Windows\system32
D3D903EEA465D77345AAC9
C:\Windows\system32
1D6DCFA0E56C3E55B6AED8
C:\Windows\system32
71798B0CBE9AE69F1F29B8
C:\Windows\system32
AA98898204FC58878502C1
C:\Windows\system32
DA99D8223D9FB7BFA52E66
C:\Windows\system32
403445B07DC55F9DF98CA1
C:\Windows\system32
4014A1F0720F6D15A2FB0C
C:\Windows\system32
208B92DFCF7AD43202660F
C:\Windows\system32
C2C9FD1F61302997117B1C
C:\Windows\system32
5162EB623FE64E9DFEAC6C
C:\Windows\System32
6EB558532400B489763BAE

7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs
\drivers\Msfs.sys
13:26:57.0970 0x0694 Msfs - ok
13:26:57.0986 0x0694 [ 3E1E5767043C5AF9367F0056295E9F84,
9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf
\drivers\mshidkmdf.sys
13:26:57.0986 0x0694 mshidkmdf - ok
13:26:58.0001 0x0694 [ 0A4E5757AE09FA9622E3158CC1AEF114,
526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv
\drivers\msisadrv.sys
13:26:58.0001 0x0694 msisadrv - ok
13:26:58.0048 0x0694 [ 90F7D9E6B6F27E1A707D4A297F077828,
8842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI
\iscsiexe.dll
13:26:58.0064 0x0694 MSiSCSI - ok
13:26:58.0079 0x0694 msiserver - ok
13:26:58.0126 0x0694 [ 8C0860D6366AAFFB6C5BB9DF9448E631,
17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV
\drivers\MSKSSRV.sys
13:26:58.0126 0x0694 MSKSSRV - ok
13:26:58.0142 0x0694 [ 3EA8B949F963562CEDBB549EAC0C11CE,
548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK
\drivers\MSPCLOCK.sys
13:26:58.0142 0x0694 MSPCLOCK - ok
13:26:58.0142 0x0694 [ F456E973590D663B1073E9C463B40932,
4772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM
\drivers\MSPQM.sys
13:26:58.0142 0x0694 MSPQM - ok
13:26:58.0220 0x0694 [ 0E008FC4819D238C51D7C93E7B41E560,
5A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC
\drivers\MsRPC.sys
13:26:58.0220 0x0694 MsRPC - ok
13:26:58.0251 0x0694 [ FC6B9FF600CC585EA38B12589BD4E246,
51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios
\DRIVERS\mssmbios.sys
13:26:58.0251 0x0694 mssmbios - ok
13:26:58.0251 0x0694 [ B42C6B921F61A6E55159B8BE6CD54A36,
1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE
\drivers\MSTEE.sys
13:26:58.0251 0x0694 MSTEE - ok
13:26:58.0251 0x0694 [ 33599130F44E1F34631CEA241DE8AC84,
4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig
\drivers\MTConfig.sys
13:26:58.0251 0x0694 MTConfig - ok
13:26:58.0298 0x0694 [ D48659BB24C48345D926ECB45C1EBDF5,
85F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor
\DRIVERS\ASACPI.sys
13:26:58.0298 0x0694 MTsensor - ok
13:26:58.0329 0x0694 [ 159FAD02F64E6381758C990F753BCC80,
9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup
\Drivers\mup.sys
13:26:58.0329 0x0694 Mup - ok
13:26:58.0360 0x0694 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E,
693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent
\qagentRT.dll
13:26:58.0376 0x0694 napagent - ok
13:26:58.0422 0x0694 [ 26384429FCD85D83746F63E798AB1480,
8B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP
\DRIVERS\nwifi.sys
13:26:58.0422 0x0694 NativeWifiP - ok

C:\Windows\system32
B2EDFECD3C14E4FE1BA87D
C:\Windows\System32
ED574E420E57374E328C7C
C:\Windows\system32
BEFC220EAA730784960074
C:\Windows\system32

949C5A14E57F2D7385543C
C:\Windows\system32
1B0B2F16A1790282504F3C
C:\Windows\system32
48BA6D5580EE7B6A4C06E0
C:\Windows\system32
141FCEBDD05874407EAEC3
C:\Windows\system32
F05DB01AE1955D2468CE6B
C:\Windows\system32
6BB0A7BE005B8F281E551D
C:\Windows\system32
E15B31D1AFDC8DC6D2B21D
C:\Windows\system32
EDEDE58316827530C25F80
C:\Windows\system32
E55AB01DCFA95ECAB24A2A
C:\Windows\system32
D252248532142E9E2332DA
C:\Windows\system32
957C115C263A4B4DC85455
C:\Windows\system32

13:26:58.0500 0x0694 [ E7C54812A2AAF43316EB6930C1FFA108, C8A6FC1957FA29A3B37213

2FEA9145538BC767044A11D77316D3D1A3EAA60630 ] NDIS
C:\Windows\system32
\drivers\ndis.sys
13:26:58.0516 0x0694 NDIS - ok
13:26:58.0532 0x0694 [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424B
DA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap
C:\Windows\system32
\DRIVERS\ndiscap.sys
13:26:58.0563 0x0694 NdisCap - ok
13:26:58.0563 0x0694 [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD
1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi
C:\Windows\system32
\DRIVERS\ndistapi.sys
13:26:58.0578 0x0694 NdisTapi - ok
13:26:58.0594 0x0694 [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813
DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio
C:\Windows\system32
\DRIVERS\ndisuio.sys
13:26:58.0594 0x0694 Ndisuio - ok
13:26:58.0641 0x0694 [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB
30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan
C:\Windows\system32
\DRIVERS\ndiswan.sys
13:26:58.0656 0x0694 NdisWan - ok
13:26:58.0656 0x0694 [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B69587
15BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy
C:\Windows\system32
\drivers\NDProxy.sys
13:26:58.0656 0x0694 NDProxy - ok
13:26:58.0672 0x0694 [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A
298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS
C:\Windows\system32
\DRIVERS\netbios.sys
13:26:58.0672 0x0694 NetBIOS - ok
13:26:58.0688 0x0694 [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1
D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT
C:\Windows\system32
\DRIVERS\netbt.sys
13:26:58.0688 0x0694 NetBT - ok
13:26:58.0719 0x0694 [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD7
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] Netlogon
C:\Windows\system32
\lsass.exe
13:26:58.0719 0x0694 Netlogon - ok
13:26:58.0750 0x0694 [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D
303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman
C:\Windows\System32
\netman.dll
13:26:58.0750 0x0694 Netman - ok
13:26:58.0766 0x0694 [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7
409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm
C:\Windows\System32
\netprofm.dll
13:26:58.0781 0x0694 netprofm - ok
13:26:58.0797 0x0694 [ F476EC40033CDB91EFBE73EB99B8362D, B17535037BC070F9AE1F6B
381C2DBEE27658A8FDE15FB0E061F485EA7C7CBE59 ] NetTcpPortSharing C:\Windows\Micros
oft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:26:58.0812 0x0694 NetTcpPortSharing - ok
13:26:58.0828 0x0694 [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC
543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960
C:\Windows\system32
\drivers\nfrd960.sys
13:26:58.0844 0x0694 nfrd960 - ok
13:26:58.0875 0x0694 [ 912084381D30D8B89EC4E293053F4710, 99B8CD043DF531D4B9725E
D167F63CED220608B2FED3EE8250C217D15762DFD7 ] NlaSvc
C:\Windows\System32
\nlasvc.dll
13:26:58.0875 0x0694 NlaSvc - ok
13:26:58.0890 0x0694 [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9
C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs
C:\Windows\system32
\drivers\Npfs.sys
13:26:58.0890 0x0694 Npfs - ok

13:26:58.0890 0x0694 [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C

154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi
C:\Windows\system32
\nsisvc.dll
13:26:58.0906 0x0694 nsi - ok
13:26:58.0922 0x0694 [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E
1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy
C:\Windows\system32
\drivers\nsiproxy.sys
13:26:58.0922 0x0694 nsiproxy - ok
13:26:58.0968 0x0694 [ 33C3093D09017CFE2E219F2472BFF6EB, DE46C7A53C3606F036DED1
EE8A81B79CAF3171A7E97DA2F71712E2DA046A262E ] Ntfs
C:\Windows\system32
\drivers\Ntfs.sys
13:26:58.0984 0x0694 Ntfs - ok
13:26:59.0000 0x0694 [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013
AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null
C:\Windows\system32
\drivers\Null.sys
13:26:59.0000 0x0694 Null - ok
13:26:59.0031 0x0694 [ B5E37E31C053BC9950455A257526514B, 16E2880621F3AA12BDADE7
1CD7682CA79E2A199D3C9E3E5927C49DCEF0F6183B ] NVENETFD
C:\Windows\system32
\DRIVERS\nvm62x32.sys
13:26:59.0031 0x0694 NVENETFD - ok
13:26:59.0296 0x0694 [ B0881DDA5A8160422561FFAB7F0008B1, 0D89792394CF44119CCBE9
B1E8C0F5563ED41141C17C6B2D32B1D1C458BAC359 ] nvlddmkm
C:\Windows\system32
\DRIVERS\nvlddmkm.sys
13:26:59.0561 0x0694 nvlddmkm - ok
13:26:59.0608 0x0694 [ AF2EEC9580C1D32FB7EAF105D9784061, 6DAAE3BCA048ACD7FFD26A
65C793C461933179070F03855FE3DC3C01F968163A ] nvraid
C:\Windows\system32
\drivers\nvraid.sys
13:26:59.0624 0x0694 nvraid - ok
13:26:59.0702 0x0694 [ 9283C58EBAA2618F93482EB5DABCEC82, 0BC119D4EAFDEA879E4C1C
FBA5402499DBD1970EDF963C6D2034D4867C34D15E ] nvstor
C:\Windows\system32
\drivers\nvstor.sys
13:26:59.0717 0x0694 nvstor - ok
13:26:59.0748 0x0694 [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FE
FCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp
C:\Windows\system32
\drivers\nv_agp.sys
13:26:59.0748 0x0694 nv_agp - ok
13:26:59.0780 0x0694 [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E
95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394
C:\Windows\system32
\drivers\ohci1394.sys
13:26:59.0780 0x0694 ohci1394 - ok
13:26:59.0842 0x0694 [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E1
5FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose
C:\Program Files\Co
mmon Files\Microsoft Shared\Source Engine\OSE.EXE
13:26:59.0858 0x0694 ose - ok
13:26:59.0998 0x0694 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93
F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc
C:\Program Files\Co
mmon Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
13:27:00.0154 0x0694 osppsvc - ok
13:27:00.0201 0x0694 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D73
6B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc
C:\Windows\system32
\pnrpsvc.dll
13:27:00.0201 0x0694 p2pimsvc - ok
13:27:00.0248 0x0694 [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644
AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc
C:\Windows\system32
\p2psvc.dll
13:27:00.0279 0x0694 p2psvc - ok
13:27:00.0310 0x0694 [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97
DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport
C:\Windows\system32
\DRIVERS\parport.sys
13:27:00.0310 0x0694 Parport - ok

13:27:00.0310 0x0694 [ BF8F6AF06DA75B336F07E23AEF97D93B,

FF2F803484D4A3D697F0D69D352350CE208FD8A1A4 ] partmgr
\drivers\partmgr.sys
13:27:00.0310 0x0694 partmgr - ok
13:27:00.0326 0x0694 [ EB0A59F29C19B86479D36B35983DAADC,
3BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm
\DRIVERS\parvdm.sys
13:27:00.0341 0x0694 Parvdm - ok
13:27:00.0357 0x0694 [ 358AB7956D3160000726574083DFC8A6,
018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc
\pcasvc.dll
13:27:00.0357 0x0694 PcaSvc - ok
13:27:00.0372 0x0694 [ 673E55C3498EB970088E812EA820AA8F,
6C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci
\drivers\pci.sys
13:27:00.0372 0x0694 pci - ok
13:27:00.0388 0x0694 [ AFE86F419014DB4E5593F69FFE26CE0A,
5FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide
\drivers\pciide.sys
13:27:00.0388 0x0694 pciide - ok
13:27:00.0419 0x0694 [ F396431B31693E71E8A80687EF523506,
E3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia
\drivers\pcmcia.sys
13:27:00.0419 0x0694 pcmcia - ok
13:27:00.0435 0x0694 [ 250F6B43D2B613172035C6747AEEB19F,
0E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw
\drivers\pcw.sys
13:27:00.0435 0x0694 pcw - ok
13:27:00.0466 0x0694 [ 9E0104BA49F4E6973749A02BF41344ED,
DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH
\drivers\peauth.sys
13:27:00.0497 0x0694 PEAUTH - ok
13:27:00.0544 0x0694 [ AF4D64D2A57B9772CF3801950B8058A6,
F75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc
\peerdistsvc.dll
13:27:00.0575 0x0694 PeerDistSvc - ok
13:27:00.0653 0x0694 [ 414BBA67A3DED1D28437EB66AEB8A720,
4DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla
\pla.dll
13:27:00.0700 0x0694 pla - ok
13:27:00.0794 0x0694 [ 92DC6E68D2C856C5C2F21AE9E22112B8,
FC3671D9D64144795EDF55438A676F5B43E59BE3FC ] PlugPlay
\umpnpmgr.dll
13:27:00.0825 0x0694 PlugPlay - ok
13:27:00.0856 0x0694 [ 63FF8572611249931EB16BB8EED6AFC8,
2B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg
\pnrpauto.dll
13:27:00.0856 0x0694 PNRPAutoReg - ok
13:27:00.0872 0x0694 [ 82A8521DDC60710C3D3D3E7325209BEC,
6B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc
\pnrpsvc.dll
13:27:00.0872 0x0694 PNRPsvc - ok
13:27:00.0934 0x0694 [ 53946B69BA0836BD95B03759530C81EC,
C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent
\ipsecsvc.dll
13:27:00.0934 0x0694 PolicyAgent - ok
13:27:00.0965 0x0694 [ F87D30E72E03D579A5199CCB3831D6EA,
A5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power
\umpo.dll
13:27:00.0965 0x0694 Power - ok

2F2C4314872732550A112B
C:\Windows\system32
AC09AFE7F13BE4079D0138
C:\Windows\system32
6CAFD4D1B8AB8C1D167ADC
C:\Windows\System32
1F81315664B8CBFDD56941
C:\Windows\system32
CAF36E61BE7B511D3A03A6
C:\Windows\system32
BC614FC21E029E2497F1CC
C:\Windows\system32
A91F15B133F2619912CF75
C:\Windows\system32
B32F39F38DB48D77FBA884
C:\Windows\system32
C9C493A3775E6E1660CE5D
C:\Windows\system32
D6DF254E2615FA40204482
C:\Windows\system32
EFAA27886A05E57E629A9E
C:\Windows\system32
9732CCBCB93A7A4BEC8881
C:\Windows\system32
C4E34571EDD57C7FBB3D73
C:\Windows\system32
7F14A34635354CCA0F5342
C:\Windows\System32
B09328E89954584F97908F
C:\Windows\system32

13:27:00.0996 0x0694 [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246

920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport
C:\Windows\system32
\DRIVERS\raspptp.sys
13:27:00.0996 0x0694 PptpMiniport - ok
13:27:01.0012 0x0694 [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB0
4007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor
C:\Windows\system32
\drivers\processr.sys
13:27:01.0012 0x0694 Processor - ok
13:27:01.0043 0x0694 [ 43CA4CCC22D52FB58E8988F0198851D0, DF67BD70D9D82677AE6124
4B4E54677A5008A7F5EB531DF2A7E7D33F1658EA78 ] ProfSvc
C:\Windows\system32
\profsvc.dll
13:27:01.0043 0x0694 ProfSvc - ok
13:27:01.0059 0x0694 [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD7
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] ProtectedStorage C:\Windows\system3
2\lsass.exe
13:27:01.0059 0x0694 ProtectedStorage - ok
13:27:01.0074 0x0694 [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC
6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched
C:\Windows\system32
\DRIVERS\pacer.sys
13:27:01.0074 0x0694 Psched - ok
13:27:01.0137 0x0694 [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B
930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300
C:\Windows\system32
\drivers\ql2300.sys
13:27:01.0184 0x0694 ql2300 - ok
13:27:01.0199 0x0694 [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F996
8222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx
C:\Windows\system32
\drivers\ql40xx.sys
13:27:01.0199 0x0694 ql40xx - ok
13:27:01.0230 0x0694 [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7
676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE
C:\Windows\system32
\qwave.dll
13:27:01.0230 0x0694 QWAVE - ok
13:27:01.0246 0x0694 [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9
DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv
C:\Windows\system32
\drivers\qwavedrv.sys
13:27:01.0262 0x0694 QWAVEdrv - ok
13:27:01.0277 0x0694 [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB168
9B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd
C:\Windows\system32
\DRIVERS\rasacd.sys
13:27:01.0277 0x0694 RasAcd - ok
13:27:01.0293 0x0694 [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE
631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn
C:\Windows\system32
\DRIVERS\AgileVpn.sys
13:27:01.0293 0x0694 RasAgileVpn - ok
13:27:01.0308 0x0694 [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635
F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto
C:\Windows\System32
\rasauto.dll
13:27:01.0308 0x0694 RasAuto - ok
13:27:01.0324 0x0694 [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7
DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp
C:\Windows\system32
\DRIVERS\rasl2tp.sys
13:27:01.0324 0x0694 Rasl2tp - ok
13:27:01.0340 0x0694 [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2B
AF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan
C:\Windows\System32
\rasmans.dll
13:27:01.0355 0x0694 RasMan - ok
13:27:01.0355 0x0694 [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E
78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe
C:\Windows\system32
\DRIVERS\raspppoe.sys
13:27:01.0355 0x0694 RasPppoe - ok

13:27:01.0371 0x0694 [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB

795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp
C:\Windows\system32
\DRIVERS\rassstp.sys
13:27:01.0386 0x0694 RasSstp - ok
13:27:01.0386 0x0694 [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F
97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss
C:\Windows\system32
\DRIVERS\rdbss.sys
13:27:01.0386 0x0694 rdbss - ok
13:27:01.0402 0x0694 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F9
1F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus
C:\Windows\system32
\DRIVERS\rdpbus.sys
13:27:01.0402 0x0694 rdpbus - ok
13:27:01.0418 0x0694 [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3
508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD
C:\Windows\system32
\DRIVERS\RDPCDD.sys
13:27:01.0418 0x0694 RDPCDD - ok
13:27:01.0449 0x0694 [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA11
34CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR
C:\Windows\system32
\drivers\rdpdr.sys
13:27:01.0449 0x0694 RDPDR - ok
13:27:01.0464 0x0694 [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BD
E4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD
C:\Windows\system32
\drivers\rdpencdd.sys
13:27:01.0464 0x0694 RDPENCDD - ok
13:27:01.0480 0x0694 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C
920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP
C:\Windows\system32
\drivers\rdprefmp.sys
13:27:01.0480 0x0694 RDPREFMP - ok
13:27:01.0496 0x0694 [ 68A0387F58E226DEEE23D9715955572A, F95BB1D2BB3E79AF47B1C7
15BB5E3003EEF888AAA963F46F4A2FE8AFBD4F37A4 ] RdpVideoMiniport C:\Windows\system3
2\drivers\rdpvideominiport.sys
13:27:01.0496 0x0694 RdpVideoMiniport - ok
13:27:01.0527 0x0694 [ 288B06960D78428FF89E811632684E20, 82FB13C2749637E172381C
9C205080921A45453191B6246C5D3FE946A06D17F5 ] RDPWD
C:\Windows\system32
\drivers\RDPWD.sys
13:27:01.0527 0x0694 RDPWD - ok
13:27:01.0542 0x0694 [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259E
A362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost
C:\Windows\system32
\drivers\rdyboost.sys
13:27:01.0558 0x0694 rdyboost - ok
13:27:01.0574 0x0694 [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DA
E53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess
C:\Windows\System32
\mprdim.dll
13:27:01.0589 0x0694 RemoteAccess - ok
13:27:01.0605 0x0694 [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40B
FA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32
\regsvc.dll
13:27:01.0605 0x0694 RemoteRegistry - ok
13:27:01.0636 0x0694 [ 906DCFC5EBF4EC0433F8D4FFFB0BA334, B6FD3FD29CE337CD3D5049
5E4988C49A3BDA4AAF20384C969EA7209611DB20A4 ] RMCAST
C:\Windows\system32
\DRIVERS\RMCAST.sys
13:27:01.0652 0x0694 RMCAST - ok
13:27:01.0652 0x0694 [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83
DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper
C:\Windows\System32
\RpcEpMap.dll
13:27:01.0667 0x0694 RpcEptMapper - ok
13:27:01.0683 0x0694 [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0
154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator
C:\Windows\system32
\locator.exe
13:27:01.0683 0x0694 RpcLocator - ok

13:27:01.0698 0x0694 [ 7660F01D3B38ACA1747E397D21D790AF,

F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs
\rpcss.dll
13:27:01.0714 0x0694 RpcSs - ok
13:27:01.0745 0x0694 [ 032B0D36AD92B582D869879F5AF5B928,
9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr
\DRIVERS\rspndr.sys
13:27:01.0745 0x0694 rspndr - ok
13:27:01.0776 0x0694 [ 7FA7F2E249A5DCBB7970630E15E1F482,
DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap
\drivers\vms3cap.sys
13:27:01.0776 0x0694 s3cap - ok
13:27:01.0792 0x0694 [ F42309C4191C506B71DB5D1126D26318,
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] SamSs
\lsass.exe
13:27:01.0792 0x0694 SamSs - ok
13:27:01.0808 0x0694 [ 05D860DA1040F111503AC416CCEF2BCA,
E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port
\drivers\sbp2port.sys
13:27:01.0808 0x0694 sbp2port - ok
13:27:01.0839 0x0694 [ 8FC518FFE9519C2631D37515A68009C4,
7F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr
\SCardSvr.dll
13:27:01.0839 0x0694 SCardSvr - ok
13:27:01.0854 0x0694 [ 0693B5EC673E34DC147E195779A4DCF6,
A67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter
\DRIVERS\scfilter.sys
13:27:01.0854 0x0694 scfilter - ok
13:27:01.0886 0x0694 [ A04BB13F8A72F8B6E8B4071723E4E336,
7C455324C8437F9CF398153E269543588B65389502 ] Schedule
\schedsvc.dll
13:27:01.0901 0x0694 Schedule - ok
13:27:01.0917 0x0694 [ 319C6B309773D063541D01DF8AC6F55F,
A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc
\certprop.dll
13:27:01.0917 0x0694 SCPolicySvc - ok
13:27:01.0917 0x0694 [ 08236C4BCE5EDD0A0318A438AF28E0F7,
AD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC
\SDRSVC.dll
13:27:01.0932 0x0694 SDRSVC - ok
13:27:01.0948 0x0694 [ 90A3935D05B494A5A39D37E71F09A677,
632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv
\drivers\secdrv.sys
13:27:01.0948 0x0694 secdrv - ok
13:27:01.0964 0x0694 [ A59B3A4442C52060CC7A85293AA3546F,
F39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon
\seclogon.dll
13:27:01.0964 0x0694 seclogon - ok
13:27:01.0979 0x0694 [ DCB7FCDCC97F87360F75D77425B81737,
E613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS
\sens.dll
13:27:01.0979 0x0694 SENS - ok
13:27:02.0010 0x0694 [ 50087FE1EE447009C9CC2997B90DE53F,
198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc
\sensrsvc.dll
13:27:02.0010 0x0694 SensrSvc - ok
13:27:02.0042 0x0694 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1,
6065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum
\DRIVERS\serenum.sys
13:27:02.0042 0x0694 Serenum - ok

04611B43705C064C2A8331
C:\Windows\system32
0F8F18A6A0A689957B886D
C:\Windows\system32
9633B193F3FDA67BC551C6
C:\Windows\system32
29B0A8889857CEBFA6CBD7
C:\Windows\system32
DAE2F37D09A5A42F945BC8
C:\Windows\system32
21E10585470CF9FC3BD197
C:\Windows\System32
AF1B56FBF3ADABF94CD9DB
C:\Windows\system32
E63287FF71C39CBF64C334
C:\Windows\system32
182F392FE839499D159A30
C:\Windows\System32
77727F963F63C4CEC11E7A
C:\Windows\System32
F72733A69BC6E1A2BB91D7
C:\Windows\system32
1776D6DEE51991149265AA
C:\Windows\system32
F8289AF2C458C167038EEF
C:\Windows\System32
B5E6CF1D991F87C29C5E28
C:\Windows\system32
E2F019BCD1446236D078D4
C:\Windows\system32

13:27:02.0057 0x0694 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA9

49DB97595CC32332D9321DF68283BFC102E66D766F ] Serial
C:\Windows\system32
\DRIVERS\serial.sys
13:27:02.0057 0x0694 Serial - ok
13:27:02.0088 0x0694 [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A
9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse
C:\Windows\system32
\drivers\sermouse.sys
13:27:02.0088 0x0694 sermouse - ok
13:27:02.0104 0x0694 [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF30
57867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv
C:\Windows\system32
\sessenv.dll
13:27:02.0120 0x0694 SessionEnv - ok
13:27:02.0135 0x0694 [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206E
E7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk
C:\Windows\system32
\drivers\sffdisk.sys
13:27:02.0135 0x0694 sffdisk - ok
13:27:02.0135 0x0694 [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF
7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc
C:\Windows\system32
\drivers\sffp_mmc.sys
13:27:02.0135 0x0694 sffp_mmc - ok
13:27:02.0151 0x0694 [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC083
8457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd
C:\Windows\system32
\drivers\sffp_sd.sys
13:27:02.0151 0x0694 sffp_sd - ok
13:27:02.0166 0x0694 [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC
6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy
C:\Windows\system32
\drivers\sfloppy.sys
13:27:02.0166 0x0694 sfloppy - ok
13:27:02.0182 0x0694 [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C
6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess
C:\Windows\System32
\ipnathlp.dll
13:27:02.0198 0x0694 SharedAccess - ok
13:27:02.0229 0x0694 [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506
A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System3
2\shsvcs.dll
13:27:02.0244 0x0694 ShellHWDetection - ok
13:27:02.0260 0x0694 [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F
12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp
C:\Windows\system32
\drivers\sisagp.sys
13:27:02.0260 0x0694 sisagp - ok
13:27:02.0291 0x0694 [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCB
FFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2
C:\Windows\system32
\drivers\SiSRaid2.sys
13:27:02.0291 0x0694 SiSRaid2 - ok
13:27:02.0307 0x0694 [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3
B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4
C:\Windows\system32
\drivers\sisraid4.sys
13:27:02.0307 0x0694 SiSRaid4 - ok
13:27:02.0338 0x0694 [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A
49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb
C:\Windows\system32
\DRIVERS\smb.sys
13:27:02.0338 0x0694 Smb - ok
13:27:02.0369 0x0694 [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D8
92B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP
C:\Windows\System32
\snmptrap.exe
13:27:02.0369 0x0694 SNMPTRAP - ok
13:27:02.0432 0x0694 [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE8261
9C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr
C:\Windows\system32
\drivers\spldr.sys
13:27:02.0432 0x0694 spldr - ok

13:27:02.0478 0x0694 [ 866A43013535DC8587C258E43579C764,

69A81385FCC6EAE6033394D08458A5583D311C4D82 ] Spooler
\spoolsv.exe
13:27:02.0494 0x0694 Spooler - ok
13:27:02.0603 0x0694 [ CF87A1DE791347E75B98885214CED2B8,
28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc
\sppsvc.exe
13:27:02.0681 0x0694 sppsvc - ok
13:27:02.0712 0x0694 [ B0180B20B065D89232A78A40FE56EAA6,
0119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify
\sppuinotify.dll
13:27:02.0712 0x0694 sppuinotify - ok
13:27:02.0759 0x0694 [ 112127C3B2E64D7680CC39CD0A39DD7E,
17047DBFD5A9C964983FAA499AC086CCD45BA46366 ] srv
\DRIVERS\srv.sys
13:27:02.0759 0x0694 srv - ok
13:27:02.0775 0x0694 [ E5DD784A4EE5EBC72A86C677C988FCDB,
1671F279A5D7EE8BCB5E55640F5F976E16211F59DD ] srv2
\DRIVERS\srv2.sys
13:27:02.0775 0x0694 srv2 - ok
13:27:02.0790 0x0694 [ CDBE627E16CC9E98F343D73F8E81D258,
ABC5B2EAEEB65C268F1CB2DD445ABF7E2758DF2802 ] srvnet
\DRIVERS\srvnet.sys
13:27:02.0790 0x0694 srvnet - ok
13:27:02.0822 0x0694 [ D887C9FD02AC9FA880F6E5027A43E118,
090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV
\ssdpsrv.dll
13:27:02.0822 0x0694 SSDPSRV - ok
13:27:02.0837 0x0694 [ D318F23BE45D5E3A107469EB64815B50,
9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc
\sstpsvc.dll
13:27:02.0837 0x0694 SstpSvc - ok
13:27:02.0853 0x0694 [ DB32D325C192B801DF274BFD12A7E72B,
6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor
\drivers\stexstor.sys
13:27:02.0853 0x0694 stexstor - ok
13:27:02.0900 0x0694 [ E1FB3706030FB4578A0D72C2FC3689E4,
3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc
\wiaservc.dll
13:27:02.0900 0x0694 StiSvc - ok
13:27:02.0931 0x0694 [ 472AF0311073DCECEAA8FA18BA2BDF89,
1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt
\drivers\vmstorfl.sys
13:27:02.0931 0x0694 storflt - ok
13:27:02.0946 0x0694 [ DCAFFD62259E0BDB433DD67B5BB37619,
22B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc
\drivers\storvsc.sys
13:27:02.0946 0x0694 storvsc - ok
13:27:02.0962 0x0694 [ E58C78A848ADD9610A4DB6D214AF5224,
DA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum
\DRIVERS\swenum.sys
13:27:02.0962 0x0694 swenum - ok
13:27:02.0993 0x0694 [ A28BD92DF340E57B024BA433165D34D7,
473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv
\swprv.dll
13:27:03.0009 0x0694 swprv - ok
13:27:03.0024 0x0694 [ F2AD8960812FD111E20E84659EF19D43,
7E58792C32E6F86427612114A624041B7213831105 ] Synth3dVsc
\drivers\synth3dvsc.sys
13:27:03.0040 0x0694 Synth3dVsc - ok

B2BE846B5167A2ECD1E30C
C:\Windows\System32
7AF4E03D751C951A4E5FBA
C:\Windows\system32
4D045B23AD58A8822BE9F2
C:\Windows\system32
ABE8B868CFE0EF4DAF8865
C:\Windows\system32
5D54C9AF291F8047DD66C3
C:\Windows\system32
25A68A6F943FCBA79A0D97
C:\Windows\system32
F38BAD90EC791368C37C21
C:\Windows\System32
D74355E6FF215AA8CE53BC
C:\Windows\system32
F089DBA719E22BC269720A
C:\Windows\system32
A62EC9AA4514CAF2A10C0A
C:\Windows\System32
089414057EB2047E42C96C
C:\Windows\system32
CBD12FF9BBF33D18B0F3D3
C:\Windows\system32
1575A90EB22A4FB066459B
C:\Windows\system32
889CC7FF143C3549982128
C:\Windows\System32
FAC91E940D373573890844
C:\Windows\system32

13:27:03.0071 0x0694 [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B35

04E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain
C:\Windows\system32
\sysmain.dll
13:27:03.0118 0x0694 SysMain - ok
13:27:03.0118 0x0694 [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F41
21C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\Syste
m32\TabSvc.dll
13:27:03.0134 0x0694 TabletInputService - ok
13:27:03.0134 0x0694 [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452
627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv
C:\Windows\System32
\tapisrv.dll
13:27:03.0149 0x0694 TapiSrv - ok
13:27:03.0149 0x0694 [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E49
2A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS
C:\Windows\System32
\tbssvc.dll
13:27:03.0165 0x0694 TBS - ok
13:27:03.0196 0x0694 [ 37E8FA3779668837CA9E2C36D2415949, FDDA99B7501CDBC3032AA1
2FD8E929F5E3B47DA112D0F8A05E2D833E5609EDEA ] Tcpip
C:\Windows\system32
\drivers\tcpip.sys
13:27:03.0227 0x0694 Tcpip - ok
13:27:03.0274 0x0694 [ 37E8FA3779668837CA9E2C36D2415949, FDDA99B7501CDBC3032AA1
2FD8E929F5E3B47DA112D0F8A05E2D833E5609EDEA ] TCPIP6
C:\Windows\system32
\DRIVERS\tcpip.sys
13:27:03.0290 0x0694 TCPIP6 - ok
13:27:03.0305 0x0694 [ CCA24162E055C3714CE5A88B100C64ED, 9B7712E793B9478BA7A1EF
71EA9CC03CCB9C4004C54EAA911F158958519EDCD9 ] tcpipreg
C:\Windows\system32
\drivers\tcpipreg.sys
13:27:03.0321 0x0694 tcpipreg - ok
13:27:03.0336 0x0694 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A
7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE
C:\Windows\system32
\drivers\tdpipe.sys
13:27:03.0336 0x0694 TDPIPE - ok
13:27:03.0352 0x0694 [ 2C10395BAA4847F83042813C515CC289, CBC058AE2EB6AA5905F9D2
EF52573E1C06330462952E6D6E7083F8DB2C441E3E ] TDTCP
C:\Windows\system32
\drivers\tdtcp.sys
13:27:03.0352 0x0694 TDTCP - ok
13:27:03.0368 0x0694 [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258
E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx
C:\Windows\system32
\DRIVERS\tdx.sys
13:27:03.0368 0x0694 tdx - ok
13:27:03.0368 0x0694 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5
024D738191F858FC734ED040697872D906351EF663 ] TermDD
C:\Windows\system32
\DRIVERS\termdd.sys
13:27:03.0368 0x0694 TermDD - ok
13:27:03.0399 0x0694 [ 052306FD76793D5D5AB5D9891FD1ADBB, A590F01A42EC979664044B
811E7C98F58D6A23AA025B5A1DD0E5F63BF70B2649 ] terminpt
C:\Windows\system32
\drivers\terminpt.sys
13:27:03.0399 0x0694 terminpt - ok
13:27:03.0430 0x0694 [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0
069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService
C:\Windows\System32
\termsrv.dll
13:27:03.0446 0x0694 TermService - ok
13:27:03.0461 0x0694 [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED4
90B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes
C:\Windows\system32
\themeservice.dll
13:27:03.0461 0x0694 Themes - ok
13:27:03.0461 0x0694 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F39
9413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER
C:\Windows\system32
\mmcss.dll
13:27:03.0477 0x0694 THREADORDER - ok

13:27:03.0492 0x0694 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001

DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks
C:\Windows\System32
\trkwks.dll
13:27:03.0492 0x0694 TrkWks - ok
13:27:03.0524 0x0694 [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1
D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servici
ng\TrustedInstaller.exe
13:27:03.0524 0x0694 TrustedInstaller - ok
13:27:03.0539 0x0694 [ 254BB140EEE3C59D6114C1A86B636877, EE09D62E90407A40278F21
36F640DAB16A4E2BF57D4FB6E05F92CA9CC9CF57C0 ] tssecsrv
C:\Windows\system32
\DRIVERS\tssecsrv.sys
13:27:03.0539 0x0694 tssecsrv - ok
13:27:03.0555 0x0694 [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348
D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt
C:\Windows\system32
\drivers\tsusbflt.sys
13:27:03.0555 0x0694 TsUsbFlt - ok
13:27:03.0586 0x0694 [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFF
A3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD
C:\Windows\system32
\drivers\TsUsbGD.sys
13:27:03.0586 0x0694 TsUsbGD - ok
13:27:03.0633 0x0694 [ 045ACB987C650D8186C6B4A692223860, C1CDDF7DABAE531C53290C
7C70F35DD65751B399D269711865AD65F9E4E43B0B ] tsusbhub
C:\Windows\system32
\drivers\tsusbhub.sys
13:27:03.0648 0x0694 tsusbhub - ok
13:27:03.0680 0x0694 [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94
C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel
C:\Windows\system32
\DRIVERS\tunnel.sys
13:27:03.0695 0x0694 tunnel - ok
13:27:03.0726 0x0694 [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34
336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35
C:\Windows\system32
\drivers\uagp35.sys
13:27:03.0726 0x0694 uagp35 - ok
13:27:03.0742 0x0694 [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0
A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs
C:\Windows\system32
\DRIVERS\udfs.sys
13:27:03.0742 0x0694 udfs - ok
13:27:03.0773 0x0694 [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59
BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect
C:\Windows\system32
\UI0Detect.exe
13:27:03.0773 0x0694 UI0Detect - ok
13:27:03.0789 0x0694 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92C
A9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx
C:\Windows\system32
\drivers\uliagpkx.sys
13:27:03.0789 0x0694 uliagpkx - ok
13:27:03.0804 0x0694 [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7
A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus
C:\Windows\system32
\DRIVERS\umbus.sys
13:27:03.0804 0x0694 umbus - ok
13:27:03.0820 0x0694 [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF
6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass
C:\Windows\system32
\drivers\umpass.sys
13:27:03.0820 0x0694 UmPass - ok
13:27:03.0851 0x0694 [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE
4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService
C:\Windows\System32
\umrdp.dll
13:27:03.0851 0x0694 UmRdpService - ok
13:27:03.0882 0x0694 [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C2
29771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost
C:\Windows\System32
\upnphost.dll
13:27:03.0898 0x0694 upnphost - ok

13:27:03.0914 0x0694 [ 7E72E7D7E0757D59481D530FD2B0BFAE,

E3A6ACF8D62A75576F62F0EC159D5E1B257419E9DC ] usbccgp
\drivers\usbccgp.sys
13:27:03.0914 0x0694 usbccgp - ok
13:27:03.0929 0x0694 [ 04EC7CEC62EC3B6D9354EEE93327FC82,
A91FB65BB94AA83EA48992133B5262DC539B334B2E ] usbcir
\drivers\usbcir.sys
13:27:03.0929 0x0694 usbcir - ok
13:27:03.0945 0x0694 [ CFBCE999C057D78979A181C9C60F208E,
818B0863976CF116EBE523046C344AF4E9392FDF80 ] usbehci
\DRIVERS\usbehci.sys
13:27:03.0945 0x0694 usbehci - ok
13:27:03.0960 0x0694 [ 9D22AAD9AC6A07C691A1113E5F860868,
3A792CA1387AE841D4C46781C63C0D29834F9B58E9 ] usbhub
\DRIVERS\usbhub.sys
13:27:03.0960 0x0694 usbhub - ok
13:27:03.0976 0x0694 [ A6FB7957EA7AFB1165991E54CE934B74,
7700A17D58A37A2A77FD72DA69EE0C756B88DB3689 ] usbohci
\DRIVERS\usbohci.sys
13:27:03.0976 0x0694 usbohci - ok
13:27:03.0992 0x0694 [ 797D862FE0875E75C7CC4C1AD7B30252,
032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint
\drivers\usbprint.sys
13:27:03.0992 0x0694 usbprint - ok
13:27:04.0007 0x0694 [ BF63EBFC6979FEFB2BC03DF7989A0C1A,
F0E87F2B5EBCDF8D9B6E8F88EE235602B80145BE31 ] USBSTOR
\DRIVERS\USBSTOR.SYS
13:27:04.0007 0x0694 USBSTOR - ok
13:27:04.0023 0x0694 [ 78780C3EBCE17405B1CCD07A3A8A7D72,
1F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci
\drivers\usbuhci.sys
13:27:04.0023 0x0694 usbuhci - ok
13:27:04.0038 0x0694 [ 081E6E1C91AEC36758902A9F727CD23C,
76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms
\uxsms.dll
13:27:04.0038 0x0694 UxSms - ok
13:27:04.0054 0x0694 [ F42309C4191C506B71DB5D1126D26318,
95D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] VaultSvc
\lsass.exe
13:27:04.0054 0x0694 VaultSvc - ok
13:27:04.0070 0x0694 [ A059C4C3EDB09E07D21A8E5C0AABD3CB,
F9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot
\drivers\vdrvroot.sys
13:27:04.0070 0x0694 vdrvroot - ok
13:27:04.0085 0x0694 [ C3CD30495687C2A2F66A65CA6FD89BE9,
B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds
\vds.exe
13:27:04.0101 0x0694 vds - ok
13:27:04.0116 0x0694 [ 17C408214EA61696CEC9C66E388B14F3,
641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga
\DRIVERS\vgapnp.sys
13:27:04.0116 0x0694 vga - ok
13:27:04.0132 0x0694 [ 8E38096AD5C8570A6F1570A61E251561,
006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave
\drivers\vga.sys
13:27:04.0132 0x0694 VgaSave - ok
13:27:04.0148 0x0694 VGPU - ok
13:27:04.0163 0x0694 [ 5461686CCA2FDA57B024547733AB42E3,
EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp
\drivers\vhdmp.sys

288CAC9F4AC09DEB2B30C6
C:\Windows\system32
6CB41D8644618A5F701F6C
C:\Windows\system32
D60698EAA8A085214D5945
C:\Windows\system32
AC34D36DBB5649650FCD87
C:\Windows\system32
1CE83D9E3276AE380F720C
C:\Windows\system32
1BBE745E4C85F8911076F6
C:\Windows\system32
AFEF764A3E5D52CDBB5074
C:\Windows\system32
FBFF3111E22EE0B4BCAFA8
C:\Windows\system32
9FDAA17A3B99067E035E5D
C:\Windows\System32
29B0A8889857CEBFA6CBD7
C:\Windows\system32
BDD3729B49DF2E2FC72FFE
C:\Windows\system32
582E4706C1D6A151020D14
C:\Windows\System32
829C0416672E2B2DFABCFE
C:\Windows\system32
4DBA3C1397A2203548F45F
C:\Windows\System32

2721D0659AA890172FCAD4
C:\Windows\system32

13:27:04.0163 0x0694 vhdmp - ok

13:27:04.0194 0x0694 [ C829317A37B4BEA8F39735D4B076E923,
7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp
\drivers\viaagp.sys
13:27:04.0194 0x0694 viaagp - ok
13:27:04.0210 0x0694 [ E02F079A6AA107F06B16549C6E5C7B74,
F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7
\drivers\viac7.sys
13:27:04.0210 0x0694 ViaC7 - ok
13:27:04.0226 0x0694 [ E43574F6A56A0EE11809B48C09E4FD3C,
D70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide
\drivers\viaide.sys
13:27:04.0226 0x0694 viaide - ok
13:27:04.0257 0x0694 [ C2F2911156FDC7817C52829C86DA494E,
A3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus
\drivers\vmbus.sys
13:27:04.0257 0x0694 vmbus - ok
13:27:04.0272 0x0694 [ D4D77455211E204F370D08F4963063CE,
94C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID
\drivers\VMBusHID.sys
13:27:04.0272 0x0694 VMBusHID - ok
13:27:04.0288 0x0694 [ 4C63E00F2F4B5F86AB48A58CD990F212,
32A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr
\drivers\volmgr.sys
13:27:04.0288 0x0694 volmgr - ok
13:27:04.0304 0x0694 [ B5BB72067DDDDBBFB04B2F89FF8C3C87,
6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx
\drivers\volmgrx.sys
13:27:04.0319 0x0694 volmgrx - ok
13:27:04.0335 0x0694 [ F497F67932C6FA693D7DE2780631CFE7,
43BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap
\drivers\volsnap.sys
13:27:04.0335 0x0694 volsnap - ok
13:27:04.0350 0x0694 [ 9DFA0CC2F8855A04816729651175B631,
5FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid
\drivers\vsmraid.sys
13:27:04.0366 0x0694 vsmraid - ok
13:27:04.0413 0x0694 [ 209A3B1901B83AEB8527ED211CCE9E4C,
8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS
\vssvc.exe
13:27:04.0444 0x0694 VSS - ok
13:27:04.0460 0x0694 [ 90567B1E658001E79D7C8BBD3DDE5AA6,
23DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus
\drivers\vwifibus.sys
13:27:04.0460 0x0694 vwifibus - ok
13:27:04.0475 0x0694 [ 55187FD710E27D5095D10A472C8BAF1C,
C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time
\w32time.dll
13:27:04.0475 0x0694 W32Time - ok
13:27:04.0506 0x0694 [ DE3721E89C653AA281428C8A69745D90,
412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen
\drivers\wacompen.sys
13:27:04.0506 0x0694 WacomPen - ok
13:27:04.0522 0x0694 [ 3C3C78515F5AB448B022BDF5B8FFDD2E,
3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP
\DRIVERS\wanarp.sys
13:27:04.0522 0x0694 WANARP - ok
13:27:04.0522 0x0694 [ 3C3C78515F5AB448B022BDF5B8FFDD2E,
3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6
\DRIVERS\wanarp.sys

55D1796AE750071E1E05BD
C:\Windows\system32
B530DCE3EE4F285B3D5F69
C:\Windows\system32
3687BF638E21C00E62ABFE
C:\Windows\system32
FE499F189B5016FCE0018A
C:\Windows\system32
2018B2A84C73E0834200A5
C:\Windows\system32
9796BD4B9CFEEEAF57C5E3
C:\Windows\system32
65B9AD55F43940A5FDD88B
C:\Windows\system32
DAE544ED99D2CF570DA313
C:\Windows\system32
37FD9E43A2A3F125E94A31
C:\Windows\system32
1A431F6409F8E0531F600F
C:\Windows\system32
EFC23BEEA7F54A2DC56CB5
C:\Windows\System32
AE298E2D3BA366BCBDC092
C:\Windows\system32
501C78056ED4295625D8A5
C:\Windows\system32
35284174A42039C3C1FF8A
C:\Windows\system32
35284174A42039C3C1FF8A
C:\Windows\system32

13:27:04.0538 0x0694 Wanarpv6 - ok

13:27:04.0569 0x0694 [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA2
21F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine
C:\Windows\system32
\wbengine.exe
13:27:04.0616 0x0694 wbengine - ok
13:27:04.0631 0x0694 [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E86
2DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc
C:\Windows\System32
\wbiosrvc.dll
13:27:04.0631 0x0694 WbioSrvc - ok
13:27:04.0678 0x0694 [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F8
6C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc
C:\Windows\System32
\wcncsvc.dll
13:27:04.0694 0x0694 wcncsvc - ok
13:27:04.0709 0x0694 [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710D
A81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System3
2\WcsPlugInService.dll
13:27:04.0709 0x0694 WcsPlugInService - ok
13:27:04.0725 0x0694 [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E69
45FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd
C:\Windows\system32
\drivers\wd.sys
13:27:04.0725 0x0694 Wd - ok
13:27:04.0756 0x0694 [ 9950E3D0F08141C7E89E64456AE7DC73, DE4B96812B305A63F5874B
BF2DC40354FB45B3D96C1D33436E677099760BA448 ] Wdf01000
C:\Windows\system32
\drivers\Wdf01000.sys
13:27:04.0772 0x0694 Wdf01000 - ok
13:27:04.0772 0x0694 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF
6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\Windows\system32
\wdi.dll
13:27:04.0772 0x0694 WdiServiceHost - ok
13:27:04.0787 0x0694 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF
6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\Windows\system32
\wdi.dll
13:27:04.0787 0x0694 WdiSystemHost - ok
13:27:04.0803 0x0694 [ A9D880F97530D5B8FEE278923349929D, 6A293E2DB9B7C434EA8B4C
D4861E11905D46BD60E014AE27B74DC8C4B2DDF834 ] WebClient
C:\Windows\System32
\webclnt.dll
13:27:04.0803 0x0694 WebClient - ok
13:27:04.0818 0x0694 [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F1
6B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc
C:\Windows\system32
\wecsvc.dll
13:27:04.0818 0x0694 Wecsvc - ok
13:27:04.0834 0x0694 [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0
DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32
\wercplsupport.dll
13:27:04.0834 0x0694 wercplsupport - ok
13:27:04.0834 0x0694 [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76D
A6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc
C:\Windows\System32
\WerSvc.dll
13:27:04.0850 0x0694 WerSvc - ok
13:27:04.0850 0x0694 [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377
A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf
C:\Windows\system32
\DRIVERS\wfplwf.sys
13:27:04.0850 0x0694 WfpLwf - ok
13:27:04.0865 0x0694 [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810
D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount
C:\Windows\system32
\drivers\wimmount.sys
13:27:04.0865 0x0694 WIMMount - ok
13:27:04.0959 0x0694 [ 3FAE8F94296001C32EAB62CD7D82E0FD, 180FAECC426CF8F46700C8
55022E5865D528B1A20686F96D11080AB2FE2E0430 ] WinDefend
C:\Program Files\Wi
ndows Defender\mpsvc.dll

13:27:04.0974 0x0694 WinDefend - ok

13:27:04.0990 0x0694 WinHttpAutoProxySvc - ok
13:27:05.0037 0x0694 [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320C
FBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt
C:\Windows\system32
\wbem\WMIsvc.dll
13:27:05.0037 0x0694 Winmgmt - ok
13:27:05.0084 0x0694 [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945A
D35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM
C:\Windows\system32
\WsmSvc.dll
13:27:05.0115 0x0694 WinRM - ok
13:27:05.0162 0x0694 [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0
E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc
C:\Windows\System32
\wlansvc.dll
13:27:05.0193 0x0694 Wlansvc - ok
13:27:05.0208 0x0694 [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD
0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi
C:\Windows\system32
\drivers\wmiacpi.sys
13:27:05.0208 0x0694 WmiAcpi - ok
13:27:05.0240 0x0694 [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062AD
BB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv
C:\Windows\system32
\wbem\WmiApSrv.exe
13:27:05.0240 0x0694 wmiApSrv - ok
13:27:05.0333 0x0694 [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF
5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Wi
ndows Media Player\wmpnetwk.exe
13:27:05.0364 0x0694 WMPNetworkSvc - ok
13:27:05.0396 0x0694 [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC44
9D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc
C:\Windows\System32
\wpcsvc.dll
13:27:05.0396 0x0694 WPCSvc - ok
13:27:05.0411 0x0694 [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C189
1750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum
C:\Windows\system32
\wpdbusenum.dll
13:27:05.0411 0x0694 WPDBusEnum - ok
13:27:05.0442 0x0694 [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BC
EF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl
C:\Windows\system32
\drivers\ws2ifsl.sys
13:27:05.0442 0x0694 ws2ifsl - ok
13:27:05.0458 0x0694 [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8
863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc
C:\Windows\System32
\wscsvc.dll
13:27:05.0458 0x0694 wscsvc - ok
13:27:05.0458 0x0694 WSearch - ok
13:27:05.0520 0x0694 [ 3026418A50C5B4761BEFA632CEDB7406, 45C3B17793570B93D69037
FD35C069390312B14E778852E7630C8DC63F02DDE8 ] wuauserv
C:\Windows\system32
\wuaueng.dll
13:27:05.0583 0x0694 wuauserv - ok
13:27:05.0630 0x0694 [ E714A1C0354636837E20CCBF00888EE7, 0E31F0DB0AA318E3B0DACD
26C0D3B11519B42F2A996AE580BE67FA8B3C42C436 ] WudfPf
C:\Windows\system32
\drivers\WudfPf.sys
13:27:05.0630 0x0694 WudfPf - ok
13:27:05.0661 0x0694 [ 1023EE888C9B47178C5293ED5336AB69, 62221C80C3F719A5852662
47482A64F7CB2F5EF69AFA8FA07D563CA2B0A37561 ] WUDFRd
C:\Windows\system32
\DRIVERS\WUDFRd.sys
13:27:05.0676 0x0694 WUDFRd - ok
13:27:05.0708 0x0694 [ 8D1E1E529A2C9E9B6A85B55A345F7629, 64B637CFE2AF58A4F7CE6D
8C3D603F8EFD527500F7137E0A37840313C712CA93 ] wudfsvc
C:\Windows\System32
\WUDFSvc.dll
13:27:05.0708 0x0694 wudfsvc - ok
13:27:05.0723 0x0694 [ FF2D745B560F7C71B31F30F4D49F73D2, B2FBF7E5F58E34AC64FE6C

F65800F1F07939279203BDE89375FAC92B884A4F37 ] WwanSvc
C:\Windows\System32
\wwansvc.dll
13:27:05.0739 0x0694 WwanSvc - ok
13:27:05.0739 0x0694 ================ Scan global =============================
==
13:27:05.0754 0x0694 [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D
0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
13:27:05.0770 0x0694 [ A9F564F254E9DDDE120A7135767EC24B, F255DCB4C7F4F941BA2770
0D66684AD0BA3DF114D6F298E2A909095B71B11D94 ] C:\Windows\system32\winsrv.dll
13:27:05.0786 0x0694 [ A9F564F254E9DDDE120A7135767EC24B, F255DCB4C7F4F941BA2770
0D66684AD0BA3DF114D6F298E2A909095B71B11D94 ] C:\Windows\system32\winsrv.dll
13:27:05.0817 0x0694 [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF2
7E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
13:27:05.0832 0x0694 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328
FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
13:27:05.0832 0x0694 [ Global ] - ok
13:27:05.0832 0x0694 ================ Scan MBR ================================
==
13:27:05.0848 0x0694 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:27:06.0238 0x0694 \Device\Harddisk0\DR0 - ok
13:27:06.0238 0x0694 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
13:27:06.0254 0x0694 \Device\Harddisk1\DR1 - ok
13:27:06.0254 0x0694 ================ Scan VBR ================================
==
13:27:06.0254 0x0694 [ 4DBD2F929E11C4C28CE7D5EC8E39D961 ] \Device\Harddisk0\DR0
\Partition1
13:27:06.0254 0x0694 \Device\Harddisk0\DR0\Partition1 - ok
13:27:06.0254 0x0694 [ 08A830BCB577D0849F52130C32A96C24 ] \Device\Harddisk0\DR0
\Partition2
13:27:06.0254 0x0694 \Device\Harddisk0\DR0\Partition2 - ok
13:27:06.0269 0x0694 [ 69B8378E2AB56BF893544F418FBF8CD2 ] \Device\Harddisk0\DR0
\Partition3
13:27:06.0269 0x0694 \Device\Harddisk0\DR0\Partition3 - ok
13:27:06.0269 0x0694 [ FFC8F43BC23BAD563482C3981C528F30 ] \Device\Harddisk1\DR1
\Partition1
13:27:06.0269 0x0694 \Device\Harddisk1\DR1\Partition1 - ok
13:27:06.0269 0x0694 ================ Scan generic autorun ====================
==
13:27:06.0285 0x0694 [ 901AA7A38CE13F14B6BBEC38C0595698, 1E95F2048E2A1782807D52
E9816ED267355718E24D01FF07ACE73D965EDE388A ] C:\Program Files\Microsoft Office\O
ffice14\BCSSync.exe
13:27:06.0300 0x0694 BCSSync - ok
13:27:06.0347 0x0694 [ 56B9FDDB02F46B33BCA915B61FEB3507, BE23F89C9F3D7B802A78B1
9E677191EF3A6C63D5511FB0E9BE36895D59996327 ] C:\Program Files\USB Disk Security\
USBGuard.exe
13:27:06.0378 0x0694 USB Antivirus - ok
13:27:06.0488 0x0694 [ 3FC938A79281B503051DCC0B5A1AA430, 8096ADB07132CC261CA50C
9751A750AAAE90B72813499598DF226B7F1646C91B ] C:\Program Files\Faronics\AE\Antiex
ecutable.exe
13:27:06.0550 0x0694 AntiExecutable - ok
13:27:06.0675 0x0694 [ 048EA4B978851788E9F5E8E4F081DF7A, EB62719AC0DCC18FF056F2
CD84438BF14B61E38F0619617C81961C6257BDFCEC ] C:\Program Files\Common Files\Adobe
\ARM\1.0\AdobeARM.exe
13:27:06.0706 0x0694 Adobe ARM - ok
13:27:06.0846 0x0694 [ E99EE761B237906D42A9236368F2FE01, 05B09427236B832CF58DE5
9CF2CF828085277CCD8133073E6CDB34A3FDEFB317 ] C:\ProgramData\EKA\EKA.exe
13:27:06.0893 0x0694 EKA Start - ok
13:27:06.0940 0x0694 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1
A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Si
debar.exe

13:27:06.0971 0x0694 Sidebar - ok

13:27:07.0002 0x0694 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69
C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
13:27:07.0002 0x0694 mctadmin - ok
13:27:07.0049 0x0694 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1
A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Si
debar.exe
13:27:07.0065 0x0694 Sidebar - ok
13:27:07.0065 0x0694 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69
C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
13:27:07.0080 0x0694 mctadmin - ok
13:27:07.0143 0x0694 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5
F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] C:\Users\LUZBELNET\AppData\Local\Go
ogle\Update\GoogleUpdate.exe
13:27:07.0158 0x0694 Google Update - ok
13:27:07.0190 0x0694 Win FW state via NFP2: disabled
13:27:07.0190 0x0694 ==========================================================
==
13:27:07.0190 0x0694 Scan finished
13:27:07.0190 0x0694 ==========================================================
==
13:27:07.0205 0x03ec Detected object count: 4
13:27:07.0205 0x03ec Actual detected object count: 4
13:27:18.0858 0x03ec C:\Program Files\Faronics\AE\aeengine.exe - copied to quar
antine
13:27:18.0858 0x03ec AEEngine ( LockedService.Multi.Generic ) - User select act
ion: Quarantine
13:27:18.0874 0x03ec C:\Windows\system32\DRIVERS\AeFilter.sys - copied to quara
ntine
13:27:18.0874 0x03ec AeFilter ( LockedService.Multi.Generic ) - User select act
ion: Quarantine
13:27:18.0890 0x03ec C:\Windows\system32\DRIVERS\AeKbd.sys - copied to quaranti
ne
13:27:18.0890 0x03ec AeKbd15 ( LockedService.Multi.Generic ) - User select acti
on: Quarantine
13:27:18.0905 0x03ec C:\Windows\system32\DRIVERS\AeMouse.sys - copied to quaran
tine
13:27:18.0905 0x03ec AeMouse15 ( LockedService.Multi.Generic ) - User select ac
tion: Quarantine
13:27:23.0070 0x0834 Deinitialize success