14:12:45.0834 8100  TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
14:12:46.0099 8100  ============================================================
14:12:46.0099 8100  Current date / time: 2012/08/30 14:12:46.0099
14:12:46.0099 8100  SystemInfo:
14:12:46.0099 8100  
14:12:46.0099 8100  OS Version: 6.1.7601 ServicePack: 1.0
14:12:46.0099 8100  Product type: Workstation
14:12:46.0099 8100  ComputerName: PATRYK-KOMPUTER
14:12:46.0099 8100  UserName: Patryk
14:12:46.0099 8100  Windows directory: C:\windows
14:12:46.0099 8100  System windows directory: C:\windows
14:12:46.0099 8100  Processor architecture: Intel x86
14:12:46.0099 8100  Number of processors: 2
14:12:46.0099 8100  Page size: 0x1000
14:12:46.0099 8100  Boot type: Normal boot
14:12:46.0099 8100  ============================================================
14:12:47.0753 8100  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:12:47.0768 8100  ============================================================
14:12:47.0768 8100  \Device\Harddisk0\DR0:
14:12:47.0768 8100  MBR partitions:
14:12:47.0768 8100  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
14:12:47.0768 8100  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x1F9A0000
14:12:47.0784 8100  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1FA05000, BlocksNum 0x3CA7000
14:12:47.0784 8100  ============================================================
14:12:47.0831 8100  C: <-> \Device\Harddisk0\DR0\Partition2
14:12:47.0878 8100  D: <-> \Device\Harddisk0\DR0\Partition3
14:12:47.0878 8100  ============================================================
14:12:47.0878 8100  Initialize success
14:12:47.0878 8100  ============================================================
14:14:02.0305 5888  ============================================================
14:14:02.0305 5888  Scan started
14:14:02.0305 5888  Mode: Manual; 
14:14:02.0305 5888  ============================================================
14:14:02.0648 5888  ================ Scan system memory ========================
14:14:02.0648 5888  System memory - ok
14:14:02.0648 5888  ================ Scan services =============================
14:14:03.0226 5888  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
14:14:03.0226 5888  1394ohci - ok
14:14:03.0272 5888  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\windows\system32\drivers\ACPI.sys
14:14:03.0272 5888  ACPI - ok
14:14:03.0304 5888  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi         C:\windows\system32\drivers\acpipmi.sys
14:14:03.0304 5888  AcpiPmi - ok
14:14:03.0350 5888  [ 0FF1F2F287E65A66A3B72484B9895785 ] ACPIVPC         C:\windows\system32\DRIVERS\AcpiVpc.sys
14:14:03.0350 5888  ACPIVPC - ok
14:14:03.0491 5888  [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:14:03.0491 5888  AdobeARMservice - ok
14:14:03.0553 5888  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx         C:\windows\system32\DRIVERS\adp94xx.sys
14:14:03.0569 5888  adp94xx - ok
14:14:03.0631 5888  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci         C:\windows\system32\DRIVERS\adpahci.sys
14:14:03.0631 5888  adpahci - ok
14:14:03.0647 5888  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320         C:\windows\system32\DRIVERS\adpu320.sys
14:14:03.0662 5888  adpu320 - ok
14:14:03.0678 5888  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc     C:\windows\System32\aelupsvc.dll
14:14:03.0678 5888  AeLookupSvc - ok
14:14:03.0740 5888  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD             C:\windows\system32\drivers\afd.sys
14:14:03.0756 5888  AFD - ok
14:14:03.0772 5888  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\windows\system32\drivers\agp440.sys
14:14:03.0787 5888  agp440 - ok
14:14:03.0834 5888  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx         C:\windows\system32\DRIVERS\djsvs.sys
14:14:03.0850 5888  aic78xx - ok
14:14:03.0912 5888  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG             C:\windows\System32\alg.exe
14:14:03.0912 5888  ALG - ok
14:14:03.0943 5888  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\windows\system32\drivers\aliide.sys
14:14:03.0943 5888  aliide - ok
14:14:03.0974 5888  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\windows\system32\drivers\amdagp.sys
14:14:03.0974 5888  amdagp - ok
14:14:03.0990 5888  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\windows\system32\drivers\amdide.sys
14:14:04.0006 5888  amdide - ok
14:14:04.0052 5888  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8           C:\windows\system32\DRIVERS\amdk8.sys
14:14:04.0052 5888  AmdK8 - ok
14:14:04.0068 5888  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys
14:14:04.0068 5888  AmdPPM - ok
14:14:04.0084 5888  [ D320BF87125326F996D4904FE24300FC ] amdsata         C:\windows\system32\drivers\amdsata.sys
14:14:04.0084 5888  amdsata - ok
14:14:04.0115 5888  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\windows\system32\DRIVERS\amdsbs.sys
14:14:04.0115 5888  amdsbs - ok
14:14:04.0146 5888  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata         C:\windows\system32\drivers\amdxata.sys
14:14:04.0162 5888  amdxata - ok
14:14:04.0208 5888  [ AEA177F783E20150ACE5383EE368DA19 ] AppID           C:\windows\system32\drivers\appid.sys
14:14:04.0208 5888  AppID - ok
14:14:04.0255 5888  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\windows\System32\appidsvc.dll
14:14:04.0271 5888  AppIDSvc - ok
14:14:04.0302 5888  [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo         C:\windows\System32\appinfo.dll
14:14:04.0302 5888  Appinfo - ok
14:14:04.0349 5888  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc             C:\windows\system32\DRIVERS\arc.sys
14:14:04.0349 5888  arc - ok
14:14:04.0364 5888  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\windows\system32\DRIVERS\arcsas.sys
14:14:04.0364 5888  arcsas - ok
14:14:04.0427 5888  [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk        C:\windows\system32\drivers\aswFsBlk.sys
14:14:04.0427 5888  aswFsBlk - ok
14:14:04.0474 5888  [ F76E51561562AC4105DBBE53FC99BC10 ] aswMonFlt       C:\windows\system32\drivers\aswMonFlt.sys
14:14:04.0474 5888  aswMonFlt - ok
14:14:04.0505 5888  [ 924819669AFD0EDF5C067193D371FAB0 ] aswRdr          C:\windows\System32\Drivers\aswrdr2.sys
14:14:04.0505 5888  aswRdr - ok
14:14:04.0552 5888  [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx          C:\windows\system32\drivers\aswSnx.sys
14:14:04.0567 5888  aswSnx - ok
14:14:04.0583 5888  [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP           C:\windows\system32\drivers\aswSP.sys
14:14:04.0583 5888  aswSP - ok
14:14:04.0645 5888  [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi          C:\windows\system32\drivers\aswTdi.sys
14:14:04.0645 5888  aswTdi - ok
14:14:04.0692 5888  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
14:14:04.0692 5888  AsyncMac - ok
14:14:04.0723 5888  [ 338C86357871C167A96AB976519BF59E ] atapi           C:\windows\system32\drivers\atapi.sys
14:14:04.0723 5888  atapi - ok
14:14:04.0786 5888  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
14:14:04.0817 5888  AudioEndpointBuilder - ok
14:14:04.0832 5888  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\windows\System32\Audiosrv.dll
14:14:04.0832 5888  Audiosrv - ok
14:14:04.0942 5888  [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
14:14:04.0942 5888  avast! Antivirus - ok
14:14:05.0004 5888  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\windows\System32\AxInstSV.dll
14:14:05.0004 5888  AxInstSV - ok
14:14:05.0066 5888  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv         C:\windows\system32\DRIVERS\bxvbdx.sys
14:14:05.0082 5888  b06bdrv - ok
14:14:05.0144 5888  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\windows\system32\DRIVERS\b57nd60x.sys
14:14:05.0144 5888  b57nd60x - ok
14:14:05.0285 5888  [ F9CE9B5E049EFC66B8E6C73C18EE8438 ] BCM43XX         C:\windows\system32\DRIVERS\bcmwl6.sys
14:14:05.0316 5888  BCM43XX - ok
14:14:05.0488 5888  [ 6163664C7E9CD110AF70180C126C3FDC ] BcmSqlStartupSvc C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
14:14:05.0488 5888  BcmSqlStartupSvc - ok
14:14:05.0503 5888  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\windows\System32\bdesvc.dll
14:14:05.0503 5888  BDESVC - ok
14:14:05.0550 5888  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\windows\system32\drivers\Beep.sys
14:14:05.0550 5888  Beep - ok
14:14:05.0628 5888  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE             C:\windows\System32\bfe.dll
14:14:05.0644 5888  BFE - ok
14:14:05.0690 5888  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\windows\System32\qmgr.dll
14:14:05.0722 5888  BITS - ok
14:14:05.0784 5888  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys
14:14:05.0784 5888  blbdrive - ok
14:14:06.0143 5888  [ 3C4E43359B761B0224D99B64DD866F61 ] Bluetooth Device Manager C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
14:14:06.0236 5888  Bluetooth Device Manager - ok
14:14:06.0283 5888  [ 93951833910840958CCA106D6A5D175D ] Bluetooth Media Service C:\Program Files\Motorola\Bluetooth\audiosrv.exe
14:14:06.0299 5888  Bluetooth Media Service - ok
14:14:06.0361 5888  [ 5899E443B1C9989451D68012F4AF9E50 ] Bluetooth OBEX Service C:\Program Files\Motorola\Bluetooth\obexsrv.exe
14:14:06.0377 5888  Bluetooth OBEX Service - ok
14:14:06.0439 5888  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
14:14:06.0439 5888  bowser - ok
14:14:06.0470 5888  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\windows\system32\DRIVERS\BrFiltLo.sys
14:14:06.0470 5888  BrFiltLo - ok
14:14:06.0486 5888  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\windows\system32\DRIVERS\BrFiltUp.sys
14:14:06.0486 5888  BrFiltUp - ok
14:14:06.0533 5888  [ B35BB97B6DD9913093579F5C83962636 ] Bridge0         C:\windows\system32\drivers\WDBridge.sys
14:14:06.0533 5888  Bridge0 - ok
14:14:06.0564 5888  [ 6E11F33D14D020F58D5E02E4D67DFA19 ] Browser         C:\windows\System32\browser.dll
14:14:06.0580 5888  Browser - ok
14:14:06.0595 5888  [ 845B8CE732E67F3B4133164868C666EA ] Brserid         C:\windows\System32\Drivers\Brserid.sys
14:14:06.0611 5888  Brserid - ok
14:14:06.0611 5888  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
14:14:06.0626 5888  BrSerWdm - ok
14:14:06.0642 5888  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
14:14:06.0642 5888  BrUsbMdm - ok
14:14:06.0642 5888  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
14:14:06.0658 5888  BrUsbSer - ok
14:14:06.0720 5888  [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum         C:\windows\system32\drivers\BthEnum.sys
14:14:06.0720 5888  BthEnum - ok
14:14:06.0751 5888  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\windows\system32\DRIVERS\bthmodem.sys
14:14:06.0751 5888  BTHMODEM - ok
14:14:06.0751 5888  [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
14:14:06.0767 5888  BthPan - ok
14:14:06.0814 5888  [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT         C:\windows\System32\Drivers\BTHport.sys
14:14:06.0829 5888  BTHPORT - ok
14:14:06.0892 5888  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv         C:\windows\system32\bthserv.dll
14:14:06.0892 5888  bthserv - ok
14:14:06.0907 5888  [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB          C:\windows\System32\Drivers\BTHUSB.sys
14:14:06.0907 5888  BTHUSB - ok
14:14:06.0938 5888  btmaudio - ok
14:14:07.0001 5888  [ E4B498C101B60EAFB46F1ED6241B359F ] BTMCOM          C:\windows\system32\Drivers\btmcom.sys
14:14:07.0001 5888  BTMCOM - ok
14:14:07.0001 5888  BTMUSB - ok
14:14:07.0063 5888  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
14:14:07.0079 5888  cdfs - ok
14:14:07.0157 5888  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom           C:\windows\system32\drivers\cdrom.sys
14:14:07.0157 5888  cdrom - ok
14:14:07.0204 5888  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc     C:\windows\System32\certprop.dll
14:14:07.0204 5888  CertPropSvc - ok
14:14:07.0266 5888  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\windows\system32\DRIVERS\circlass.sys
14:14:07.0266 5888  circlass - ok
14:14:07.0297 5888  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\windows\system32\CLFS.sys
14:14:07.0297 5888  CLFS - ok
14:14:07.0485 5888  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:14:07.0485 5888  clr_optimization_v2.0.50727_32 - ok
14:14:07.0703 5888  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:14:07.0703 5888  clr_optimization_v4.0.30319_32 - ok
14:14:07.0734 5888  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
14:14:07.0734 5888  CmBatt - ok
14:14:07.0765 5888  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\windows\system32\drivers\cmdide.sys
14:14:07.0765 5888  cmdide - ok
14:14:07.0797 5888  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG             C:\windows\system32\Drivers\cng.sys
14:14:07.0812 5888  CNG - ok
14:14:07.0875 5888  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\windows\system32\DRIVERS\compbatt.sys
14:14:07.0875 5888  Compbatt - ok
14:14:07.0937 5888  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys
14:14:07.0937 5888  CompositeBus - ok
14:14:07.0968 5888  COMSysApp - ok
14:14:07.0968 5888  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk         C:\windows\system32\DRIVERS\crcdisk.sys
14:14:07.0968 5888  crcdisk - ok
14:14:08.0015 5888  [ 06E771AA596B8761107AB57E99F128D7 ] CryptSvc        C:\windows\system32\cryptsvc.dll
14:14:08.0031 5888  CryptSvc - ok
14:14:08.0077 5888  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\windows\system32\rpcss.dll
14:14:08.0093 5888  DcomLaunch - ok
14:14:08.0124 5888  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc       C:\windows\System32\defragsvc.dll
14:14:08.0124 5888  defragsvc - ok
14:14:08.0187 5888  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\windows\system32\Drivers\dfsc.sys
14:14:08.0187 5888  DfsC - ok
14:14:08.0265 5888  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\windows\system32\dhcpcore.dll
14:14:08.0265 5888  Dhcp - ok
14:14:08.0296 5888  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\windows\system32\drivers\discache.sys
14:14:08.0296 5888  discache - ok
14:14:08.0327 5888  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\windows\system32\DRIVERS\disk.sys
14:14:08.0327 5888  Disk - ok
14:14:08.0358 5888  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\windows\System32\dnsrslvr.dll
14:14:08.0358 5888  Dnscache - ok
14:14:08.0405 5888  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc         C:\windows\System32\dot3svc.dll
14:14:08.0405 5888  dot3svc - ok
14:14:08.0452 5888  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS             C:\windows\system32\dps.dll
14:14:08.0452 5888  DPS - ok
14:14:08.0499 5888  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud         C:\windows\system32\drivers\drmkaud.sys
14:14:08.0499 5888  drmkaud - ok
14:14:08.0545 5888  [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys
14:14:08.0561 5888  DXGKrnl - ok
14:14:08.0608 5888  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost         C:\windows\System32\eapsvc.dll
14:14:08.0608 5888  EapHost - ok
14:14:08.0748 5888  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv           C:\windows\system32\DRIVERS\evbdx.sys
14:14:08.0826 5888  ebdrv - ok
14:14:08.0873 5888  [ 81951F51E318AECC2D68559E47485CC4 ] EFS             C:\windows\System32\lsass.exe
14:14:08.0873 5888  EFS - ok
14:14:08.0998 5888  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr         C:\windows\ehome\ehRecvr.exe
14:14:09.0013 5888  ehRecvr - ok
14:14:09.0045 5888  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched         C:\windows\ehome\ehsched.exe
14:14:09.0045 5888  ehSched - ok
14:14:09.0123 5888  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor         C:\windows\system32\DRIVERS\elxstor.sys
14:14:09.0138 5888  elxstor - ok
14:14:09.0169 5888  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\windows\system32\drivers\errdev.sys
14:14:09.0169 5888  ErrDev - ok
14:14:09.0232 5888  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem     C:\windows\system32\es.dll
14:14:09.0247 5888  EventSystem - ok
14:14:09.0263 5888  [ 2DC9108D74081149CC8B651D3A26207F ] exfat           C:\windows\system32\drivers\exfat.sys
14:14:09.0263 5888  exfat - ok
14:14:09.0279 5888  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat         C:\windows\system32\drivers\fastfat.sys
14:14:09.0279 5888  fastfat - ok
14:14:09.0357 5888  [ 967EA5B213E9984CBE270205DF37755B ] Fax             C:\windows\system32\fxssvc.exe
14:14:09.0372 5888  Fax - ok
14:14:09.0403 5888  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc             C:\windows\system32\DRIVERS\fdc.sys
14:14:09.0403 5888  fdc - ok
14:14:09.0435 5888  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost         C:\windows\system32\fdPHost.dll
14:14:09.0435 5888  fdPHost - ok
14:14:09.0450 5888  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\windows\system32\fdrespub.dll
14:14:09.0450 5888  FDResPub - ok
14:14:09.0450 5888  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
14:14:09.0466 5888  FileInfo - ok
14:14:09.0466 5888  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace       C:\windows\system32\drivers\filetrace.sys
14:14:09.0466 5888  Filetrace - ok
14:14:09.0575 5888  [ 3D9B36631032FDE0FFEA0DC0260E4E35 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
14:14:09.0575 5888  FLEXnet Licensing Service - ok
14:14:09.0622 5888  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\windows\system32\DRIVERS\flpydisk.sys
14:14:09.0622 5888  flpydisk - ok
14:14:09.0653 5888  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
14:14:09.0653 5888  FltMgr - ok
14:14:09.0715 5888  [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache       C:\windows\system32\FntCache.dll
14:14:09.0747 5888  FontCache - ok
14:14:09.0825 5888  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:14:09.0825 5888  FontCache3.0.0.0 - ok
14:14:09.0856 5888  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends       C:\windows\system32\drivers\FsDepends.sys
14:14:09.0856 5888  FsDepends - ok
14:14:09.0903 5888  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
14:14:09.0903 5888  Fs_Rec - ok
14:14:09.0965 5888  [ F626F291E3F56E8969E35945552FECA3 ] funfrm          C:\windows\system32\drivers\funfrm.sys
14:14:09.0965 5888  funfrm - ok
14:14:10.0012 5888  [ 8A73E79089B282100B9393B644CB853B ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
14:14:10.0027 5888  fvevol - ok
14:14:10.0074 5888  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\windows\system32\DRIVERS\gagp30kx.sys
14:14:10.0074 5888  gagp30kx - ok
14:14:10.0121 5888  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc           C:\windows\System32\gpsvc.dll
14:14:10.0152 5888  gpsvc - ok
14:14:10.0183 5888  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
14:14:10.0183 5888  hcw85cir - ok
14:14:10.0261 5888  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
14:14:10.0261 5888  HdAudAddService - ok
14:14:10.0277 5888  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\windows\system32\drivers\HDAudBus.sys
14:14:10.0277 5888  HDAudBus - ok
14:14:10.0308 5888  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt         C:\windows\system32\DRIVERS\HidBatt.sys
14:14:10.0324 5888  HidBatt - ok
14:14:10.0324 5888  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\windows\system32\DRIVERS\hidbth.sys
14:14:10.0324 5888  HidBth - ok
14:14:10.0355 5888  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr           C:\windows\system32\DRIVERS\hidir.sys
14:14:10.0355 5888  HidIr - ok
14:14:10.0402 5888  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv         C:\windows\system32\hidserv.dll
14:14:10.0402 5888  hidserv - ok
14:14:10.0464 5888  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\windows\system32\DRIVERS\hidusb.sys
14:14:10.0464 5888  HidUsb - ok
14:14:10.0511 5888  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\windows\system32\kmsvc.dll
14:14:10.0511 5888  hkmsvc - ok
14:14:10.0527 5888  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\windows\system32\ListSvc.dll
14:14:10.0542 5888  HomeGroupListener - ok
14:14:10.0573 5888  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\windows\system32\provsvc.dll
14:14:10.0589 5888  HomeGroupProvider - ok
14:14:10.0651 5888  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
14:14:10.0651 5888  HpSAMD - ok
14:14:10.0714 5888  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\windows\system32\drivers\HTTP.sys
14:14:10.0745 5888  HTTP - ok
14:14:10.0761 5888  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
14:14:10.0761 5888  hwpolicy - ok
14:14:10.0823 5888  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\windows\system32\drivers\i8042prt.sys
14:14:10.0839 5888  i8042prt - ok
14:14:10.0885 5888  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV         C:\windows\system32\drivers\iaStorV.sys
14:14:10.0901 5888  iaStorV - ok
14:14:10.0963 5888  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc           C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:14:10.0995 5888  idsvc - ok
14:14:11.0509 5888  [ DCE0B53570703CCE580D066F89EF58CD ] igfx            C:\windows\system32\DRIVERS\igdkmd32.sys
14:14:11.0775 5888  igfx - ok
14:14:11.0931 5888  [ D951D20153E51928F9DB2227D6FF5C7A ] IGRS            C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
14:14:11.0946 5888  IGRS - ok
14:14:11.0993 5888  [ 4173FF5708F3236CF25195FECD742915 ] iirsp           C:\windows\system32\DRIVERS\iirsp.sys
14:14:11.0993 5888  iirsp - ok
14:14:12.0055 5888  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\windows\System32\ikeext.dll
14:14:12.0087 5888  IKEEXT - ok
14:14:12.0227 5888  [ 94B1FF5D243D34B31380A2F79FC48959 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHDA.sys
14:14:12.0258 5888  IntcAzAudAddService - ok
14:14:12.0321 5888  [ E63CD0D9AA8D406CABDE5AA718936F40 ] IntcHdmiAddService C:\windows\system32\drivers\IntcHdmi.sys
14:14:12.0321 5888  IntcHdmiAddService - ok
14:14:12.0336 5888  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\windows\system32\drivers\intelide.sys
14:14:12.0336 5888  intelide - ok
14:14:12.0399 5888  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
14:14:12.0399 5888  intelppm - ok
14:14:12.0430 5888  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum       C:\windows\system32\ipbusenum.dll
14:14:12.0430 5888  IPBusEnum - ok
14:14:12.0461 5888  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
14:14:12.0461 5888  IpFilterDriver - ok
14:14:12.0508 5888  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV         C:\windows\system32\drivers\IPMIDrv.sys
14:14:12.0508 5888  IPMIDRV - ok
14:14:12.0523 5888  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT           C:\windows\system32\drivers\ipnat.sys
14:14:12.0523 5888  IPNAT - ok
14:14:12.0555 5888  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\windows\system32\drivers\irenum.sys
14:14:12.0570 5888  IRENUM - ok
14:14:12.0586 5888  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\windows\system32\drivers\isapnp.sys
14:14:12.0586 5888  isapnp - ok
14:14:12.0617 5888  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
14:14:12.0617 5888  iScsiPrt - ok
14:14:12.0664 5888  [ C4C95805B85BCE1EB9D20F4A02FC5F9B ] k57nd60x        C:\windows\system32\DRIVERS\k57nd60x.sys
14:14:12.0679 5888  k57nd60x - ok
14:14:12.0726 5888  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\windows\system32\drivers\kbdclass.sys
14:14:12.0726 5888  kbdclass - ok
14:14:12.0789 5888  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
14:14:12.0789 5888  kbdhid - ok
14:14:12.0820 5888  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\windows\system32\lsass.exe
14:14:12.0820 5888  KeyIso - ok
14:14:12.0851 5888  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
14:14:12.0867 5888  KSecDD - ok
14:14:12.0882 5888  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys
14:14:12.0882 5888  KSecPkg - ok
14:14:12.0913 5888  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm           C:\windows\system32\msdtckrm.dll
14:14:12.0945 5888  KtmRm - ok
14:14:12.0991 5888  [ A158CEA8644B8A5C1EC0E9A81B70F65A ] L1C             C:\windows\system32\DRIVERS\L1C62x86.sys
14:14:12.0991 5888  L1C - ok
14:14:13.0069 5888  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\windows\system32\srvsvc.dll
14:14:13.0085 5888  LanmanServer - ok
14:14:13.0132 5888  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
14:14:13.0147 5888  LanmanWorkstation - ok
14:14:13.0225 5888  [ 4F83C51720243D6016E6ECD0F2E1B274 ] Lenovo ReadyComm AppSvc C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
14:14:13.0241 5888  Lenovo ReadyComm AppSvc - ok
14:14:13.0257 5888  [ 56688EE2C359BB14479B89A50358FAA2 ] Lenovo ReadyComm ConnSvc C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
14:14:13.0272 5888  Lenovo ReadyComm ConnSvc - ok
14:14:13.0335 5888  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
14:14:13.0335 5888  lltdio - ok
14:14:13.0381 5888  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc         C:\windows\System32\lltdsvc.dll
14:14:13.0397 5888  lltdsvc - ok
14:14:13.0413 5888  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts         C:\windows\System32\lmhsvc.dll
14:14:13.0413 5888  lmhosts - ok
14:14:13.0444 5888  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\windows\system32\DRIVERS\lsi_fc.sys
14:14:13.0444 5888  LSI_FC - ok
14:14:13.0459 5888  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS         C:\windows\system32\DRIVERS\lsi_sas.sys
14:14:13.0459 5888  LSI_SAS - ok
14:14:13.0475 5888  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\windows\system32\DRIVERS\lsi_sas2.sys
14:14:13.0475 5888  LSI_SAS2 - ok
14:14:13.0506 5888  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\windows\system32\DRIVERS\lsi_scsi.sys
14:14:13.0506 5888  LSI_SCSI - ok
14:14:13.0537 5888  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv           C:\windows\system32\drivers\luafv.sys
14:14:13.0553 5888  luafv - ok
14:14:13.0584 5888  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc         C:\windows\system32\Mcx2Svc.dll
14:14:13.0600 5888  Mcx2Svc - ok
14:14:13.0600 5888  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas         C:\windows\system32\DRIVERS\megasas.sys
14:14:13.0600 5888  megasas - ok
14:14:13.0647 5888  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\windows\system32\DRIVERS\MegaSR.sys
14:14:13.0662 5888  MegaSR - ok
14:14:13.0896 5888  Microsoft SharePoint Workspace Audit Service - ok
14:14:13.0927 5888  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS           C:\windows\system32\mmcss.dll
14:14:13.0927 5888  MMCSS - ok
14:14:13.0943 5888  [ F001861E5700EE84E2D4E52C712F4964 ] Modem           C:\windows\system32\drivers\modem.sys
14:14:13.0943 5888  Modem - ok
14:14:13.0990 5888  [ 79D10964DE86B292320E9DFE02282A23 ] monitor         C:\windows\system32\DRIVERS\monitor.sys
14:14:13.0990 5888  monitor - ok
14:14:14.0021 5888  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
14:14:14.0021 5888  mouclass - ok
14:14:14.0099 5888  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
14:14:14.0099 5888  mouhid - ok
14:14:14.0146 5888  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
14:14:14.0146 5888  mountmgr - ok
14:14:14.0255 5888  [ 46297FA8E30A6007F14118FC2B942FBC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:14:14.0271 5888  MozillaMaintenance - ok
14:14:14.0286 5888  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\windows\system32\drivers\mpio.sys
14:14:14.0286 5888  mpio - ok
14:14:14.0317 5888  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
14:14:14.0317 5888  mpsdrv - ok
14:14:14.0427 5888  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\windows\system32\mpssvc.dll
14:14:14.0442 5888  MpsSvc - ok
14:14:14.0473 5888  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
14:14:14.0473 5888  MRxDAV - ok
14:14:14.0551 5888  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
14:14:14.0551 5888  mrxsmb - ok
14:14:14.0598 5888  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
14:14:14.0598 5888  mrxsmb10 - ok
14:14:14.0598 5888  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
14:14:14.0614 5888  mrxsmb20 - ok
14:14:14.0645 5888  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\windows\system32\drivers\msahci.sys
14:14:14.0645 5888  msahci - ok
14:14:14.0676 5888  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm           C:\windows\system32\drivers\msdsm.sys
14:14:14.0676 5888  msdsm - ok
14:14:14.0707 5888  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC           C:\windows\System32\msdtc.exe
14:14:14.0723 5888  MSDTC - ok
14:14:14.0770 5888  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\windows\system32\drivers\Msfs.sys
14:14:14.0770 5888  Msfs - ok
14:14:14.0770 5888  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys
14:14:14.0770 5888  mshidkmdf - ok
14:14:14.0817 5888  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
14:14:14.0817 5888  msisadrv - ok
14:14:14.0863 5888  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI         C:\windows\system32\iscsiexe.dll
14:14:14.0879 5888  MSiSCSI - ok
14:14:14.0879 5888  msiserver - ok
14:14:14.0926 5888  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV         C:\windows\system32\drivers\MSKSSRV.sys
14:14:14.0926 5888  MSKSSRV - ok
14:14:14.0941 5888  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
14:14:14.0941 5888  MSPCLOCK - ok
14:14:14.0941 5888  [ F456E973590D663B1073E9C463B40932 ] MSPQM           C:\windows\system32\drivers\MSPQM.sys
14:14:14.0941 5888  MSPQM - ok
14:14:14.0957 5888  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC           C:\windows\system32\drivers\MsRPC.sys
14:14:14.0957 5888  MsRPC - ok
14:14:15.0004 5888  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\windows\system32\drivers\mssmbios.sys
14:14:15.0004 5888  mssmbios - ok
14:14:15.0051 5888  MSSQL$MSSMLBIZ - ok
14:14:15.0082 5888  [ C06EA83F6FC2959E897C117255B6B1D5 ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
14:14:15.0082 5888  MSSQLServerADHelper - ok
14:14:15.0129 5888  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE           C:\windows\system32\drivers\MSTEE.sys
14:14:15.0129 5888  MSTEE - ok
14:14:15.0144 5888  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\windows\system32\DRIVERS\MTConfig.sys
14:14:15.0144 5888  MTConfig - ok
14:14:15.0144 5888  [ 159FAD02F64E6381758C990F753BCC80 ] Mup             C:\windows\system32\Drivers\mup.sys
14:14:15.0160 5888  Mup - ok
14:14:15.0191 5888  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\windows\system32\qagentRT.dll
14:14:15.0207 5888  napagent - ok
14:14:15.0253 5888  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys
14:14:15.0269 5888  NativeWifiP - ok
14:14:15.0331 5888  [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS            C:\windows\system32\drivers\ndis.sys
14:14:15.0347 5888  NDIS - ok
14:14:15.0378 5888  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap         C:\windows\system32\DRIVERS\ndiscap.sys
14:14:15.0378 5888  NdisCap - ok
14:14:15.0409 5888  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
14:14:15.0409 5888  NdisTapi - ok
14:14:15.0441 5888  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio         C:\windows\system32\DRIVERS\ndisuio.sys
14:14:15.0441 5888  Ndisuio - ok
14:14:15.0472 5888  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan         C:\windows\system32\DRIVERS\ndiswan.sys
14:14:15.0487 5888  NdisWan - ok
14:14:15.0519 5888  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy         C:\windows\system32\drivers\NDProxy.sys
14:14:15.0519 5888  NDProxy - ok
14:14:15.0565 5888  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS         C:\windows\system32\DRIVERS\netbios.sys
14:14:15.0565 5888  NetBIOS - ok
14:14:15.0612 5888  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT           C:\windows\system32\DRIVERS\netbt.sys
14:14:15.0612 5888  NetBT - ok
14:14:15.0643 5888  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\windows\system32\lsass.exe
14:14:15.0659 5888  Netlogon - ok
14:14:15.0706 5888  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\windows\System32\netman.dll
14:14:15.0737 5888  Netman - ok
14:14:15.0753 5888  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\windows\System32\netprofm.dll
14:14:15.0768 5888  netprofm - ok
14:14:15.0784 5888  [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:14:15.0799 5888  NetTcpPortSharing - ok
14:14:15.0940 5888  [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32        C:\windows\system32\DRIVERS\netw5v32.sys
14:14:16.0065 5888  netw5v32 - ok
14:14:16.0096 5888  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960         C:\windows\system32\DRIVERS\nfrd960.sys
14:14:16.0096 5888  nfrd960 - ok
14:14:16.0189 5888  [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc          C:\windows\System32\nlasvc.dll
14:14:16.0236 5888  NlaSvc - ok
14:14:16.0314 5888  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\windows\system32\drivers\Npfs.sys
14:14:16.0314 5888  Npfs - ok
14:14:16.0392 5888  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi             C:\windows\system32\nsisvc.dll
14:14:16.0423 5888  nsi - ok
14:14:16.0501 5888  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
14:14:16.0564 5888  nsiproxy - ok
14:14:16.0642 5888  [ 81189C3D7763838E55C397759D49007A ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
14:14:16.0689 5888  Ntfs - ok
14:14:16.0720 5888  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\windows\system32\drivers\Null.sys
14:14:16.0720 5888  Null - ok
14:14:16.0767 5888  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\windows\system32\drivers\nvraid.sys
14:14:16.0767 5888  nvraid - ok
14:14:16.0798 5888  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\windows\system32\drivers\nvstor.sys
14:14:16.0798 5888  nvstor - ok
14:14:16.0813 5888  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
14:14:16.0813 5888  nv_agp - ok
14:14:16.0845 5888  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
14:14:16.0845 5888  ohci1394 - ok
14:14:16.0938 5888  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:14:16.0938 5888  ose - ok
14:14:17.0157 5888  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:14:17.0313 5888  osppsvc - ok
14:14:17.0359 5888  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
14:14:17.0391 5888  p2pimsvc - ok
14:14:17.0406 5888  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\windows\system32\p2psvc.dll
14:14:17.0437 5888  p2psvc - ok
14:14:17.0453 5888  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport         C:\windows\system32\DRIVERS\parport.sys
14:14:17.0453 5888  Parport - ok
14:14:17.0484 5888  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr         C:\windows\system32\drivers\partmgr.sys
14:14:17.0484 5888  partmgr - ok
14:14:17.0500 5888  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\windows\system32\DRIVERS\parvdm.sys
14:14:17.0500 5888  Parvdm - ok
14:14:17.0531 5888  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\windows\System32\pcasvc.dll
14:14:17.0547 5888  PcaSvc - ok
14:14:17.0578 5888  [ 673E55C3498EB970088E812EA820AA8F ] pci             C:\windows\system32\drivers\pci.sys
14:14:17.0593 5888  pci - ok
14:14:17.0609 5888  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\windows\system32\drivers\pciide.sys
14:14:17.0609 5888  pciide - ok
14:14:17.0640 5888  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\windows\system32\DRIVERS\pcmcia.sys
14:14:17.0640 5888  pcmcia - ok
14:14:17.0656 5888  [ 250F6B43D2B613172035C6747AEEB19F ] pcw             C:\windows\system32\drivers\pcw.sys
14:14:17.0656 5888  pcw - ok
14:14:17.0703 5888  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\windows\system32\drivers\peauth.sys
14:14:17.0734 5888  PEAUTH - ok
14:14:17.0827 5888  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla             C:\windows\system32\pla.dll
14:14:17.0874 5888  pla - ok
14:14:17.0937 5888  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\windows\system32\umpnpmgr.dll
14:14:17.0952 5888  PlugPlay - ok
14:14:17.0983 5888  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll
14:14:17.0999 5888  PNRPAutoReg - ok
14:14:18.0015 5888  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc         C:\windows\system32\pnrpsvc.dll
14:14:18.0015 5888  PNRPsvc - ok
14:14:18.0061 5888  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent     C:\windows\System32\ipsecsvc.dll
14:14:18.0077 5888  PolicyAgent - ok
14:14:18.0108 5888  [ F87D30E72E03D579A5199CCB3831D6EA ] Power           C:\windows\system32\umpo.dll
14:14:18.0139 5888  Power - ok
14:14:18.0186 5888  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
14:14:18.0186 5888  PptpMiniport - ok
14:14:18.0202 5888  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor       C:\windows\system32\DRIVERS\processr.sys
14:14:18.0202 5888  Processor - ok
14:14:18.0264 5888  [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc         C:\windows\system32\profsvc.dll
14:14:18.0295 5888  ProfSvc - ok
14:14:18.0311 5888  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\windows\system32\lsass.exe
14:14:18.0311 5888  ProtectedStorage - ok
14:14:18.0342 5888  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\windows\system32\DRIVERS\pacer.sys
14:14:18.0358 5888  Psched - ok
14:14:18.0358 5888  PS_MDP - ok
14:14:18.0405 5888  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\windows\system32\DRIVERS\ql2300.sys
14:14:18.0451 5888  ql2300 - ok
14:14:18.0467 5888  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\windows\system32\DRIVERS\ql40xx.sys
14:14:18.0467 5888  ql40xx - ok
14:14:18.0514 5888  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE           C:\windows\system32\qwave.dll
14:14:18.0529 5888  QWAVE - ok
14:14:18.0529 5888  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
14:14:18.0545 5888  QWAVEdrv - ok
14:14:18.0545 5888  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
14:14:18.0545 5888  RasAcd - ok
14:14:18.0607 5888  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn     C:\windows\system32\DRIVERS\AgileVpn.sys
14:14:18.0607 5888  RasAgileVpn - ok
14:14:18.0639 5888  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto         C:\windows\System32\rasauto.dll
14:14:18.0670 5888  RasAuto - ok
14:14:18.0685 5888  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp         C:\windows\system32\DRIVERS\rasl2tp.sys
14:14:18.0685 5888  Rasl2tp - ok
14:14:18.0732 5888  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\windows\System32\rasmans.dll
14:14:18.0748 5888  RasMan - ok
14:14:18.0779 5888  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
14:14:18.0779 5888  RasPppoe - ok
14:14:18.0795 5888  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp         C:\windows\system32\DRIVERS\rassstp.sys
14:14:18.0795 5888  RasSstp - ok
14:14:18.0826 5888  [ D528BC58A489409BA40334EBF96A311B ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys
14:14:18.0841 5888  rdbss - ok
14:14:18.0873 5888  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\windows\system32\DRIVERS\rdpbus.sys
14:14:18.0873 5888  rdpbus - ok
14:14:18.0904 5888  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
14:14:18.0904 5888  RDPCDD - ok
14:14:18.0935 5888  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
14:14:18.0935 5888  RDPENCDD - ok
14:14:18.0951 5888  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
14:14:18.0951 5888  RDPREFMP - ok
14:14:18.0997 5888  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD           C:\windows\system32\drivers\RDPWD.sys
14:14:18.0997 5888  RDPWD - ok
14:14:19.0044 5888  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
14:14:19.0044 5888  rdyboost - ok
14:14:19.0075 5888  ReadyComm.DirectRouter - ok
14:14:19.0107 5888  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\windows\System32\mprdim.dll
14:14:19.0122 5888  RemoteAccess - ok
14:14:19.0153 5888  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\windows\system32\regsvc.dll
14:14:19.0153 5888  RemoteRegistry - ok
14:14:19.0216 5888  [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys
14:14:19.0216 5888  RFCOMM - ok
14:14:19.0278 5888  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
14:14:19.0278 5888  RpcEptMapper - ok
14:14:19.0309 5888  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\windows\system32\locator.exe
14:14:19.0325 5888  RpcLocator - ok
14:14:19.0356 5888  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs           C:\windows\system32\rpcss.dll
14:14:19.0356 5888  RpcSs - ok
14:14:19.0419 5888  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
14:14:19.0419 5888  rspndr - ok
14:14:19.0481 5888  [ 96F8DD546677AA5102150ACC140377B3 ] RSUSBSTOR       C:\windows\system32\Drivers\RtsUStor.sys
14:14:19.0481 5888  RSUSBSTOR - ok
14:14:19.0497 5888  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs           C:\windows\system32\lsass.exe
14:14:19.0512 5888  SamSs - ok
14:14:19.0528 5888  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
14:14:19.0543 5888  sbp2port - ok
14:14:19.0575 5888  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\windows\System32\SCardSvr.dll
14:14:19.0590 5888  SCardSvr - ok
14:14:19.0621 5888  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
14:14:19.0621 5888  scfilter - ok
14:14:19.0684 5888  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\windows\system32\schedsvc.dll
14:14:19.0715 5888  Schedule - ok
14:14:19.0731 5888  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc     C:\windows\System32\certprop.dll
14:14:19.0731 5888  SCPolicySvc - ok
14:14:19.0762 5888  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\windows\System32\SDRSVC.dll
14:14:19.0777 5888  SDRSVC - ok
14:14:19.0855 5888  [ D358E077A0A05D9B12DA22D137EE8464 ] SeaPort         C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
14:14:19.0855 5888  SeaPort - ok
14:14:19.0902 5888  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\windows\system32\drivers\secdrv.sys
14:14:19.0902 5888  secdrv - ok
14:14:19.0933 5888  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\windows\system32\seclogon.dll
14:14:19.0933 5888  seclogon - ok
14:14:19.0949 5888  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\windows\System32\sens.dll
14:14:19.0965 5888  SENS - ok
14:14:19.0980 5888  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\windows\system32\sensrsvc.dll
14:14:19.0996 5888  SensrSvc - ok
14:14:20.0011 5888  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum         C:\windows\system32\DRIVERS\serenum.sys
14:14:20.0011 5888  Serenum - ok
14:14:20.0027 5888  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\windows\system32\DRIVERS\serial.sys
14:14:20.0027 5888  Serial - ok
14:14:20.0058 5888  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\windows\system32\DRIVERS\sermouse.sys
14:14:20.0058 5888  sermouse - ok
14:14:20.0121 5888  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\windows\system32\sessenv.dll
14:14:20.0136 5888  SessionEnv - ok
14:14:20.0167 5888  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk         C:\windows\system32\drivers\sffdisk.sys
14:14:20.0167 5888  sffdisk - ok
14:14:20.0183 5888  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
14:14:20.0183 5888  sffp_mmc - ok
14:14:20.0199 5888  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd         C:\windows\system32\drivers\sffp_sd.sys
14:14:20.0199 5888  sffp_sd - ok
14:14:20.0245 5888  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy         C:\windows\system32\DRIVERS\sfloppy.sys
14:14:20.0245 5888  sfloppy - ok
14:14:20.0339 5888  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\windows\System32\ipnathlp.dll
14:14:20.0355 5888  SharedAccess - ok
14:14:20.0386 5888  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\windows\System32\shsvcs.dll
14:14:20.0417 5888  ShellHWDetection - ok
14:14:20.0433 5888  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\windows\system32\drivers\sisagp.sys
14:14:20.0433 5888  sisagp - ok
14:14:20.0479 5888  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\windows\system32\DRIVERS\SiSRaid2.sys
14:14:20.0479 5888  SiSRaid2 - ok
14:14:20.0495 5888  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\windows\system32\DRIVERS\sisraid4.sys
14:14:20.0495 5888  SiSRaid4 - ok
14:14:20.0526 5888  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb             C:\windows\system32\DRIVERS\smb.sys
14:14:20.0526 5888  Smb - ok
14:14:20.0573 5888  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
14:14:20.0589 5888  SNMPTRAP - ok
14:14:20.0698 5888  [ 5211173EBC74B388D096E197C2243675 ] SNP2UVC         C:\windows\system32\DRIVERS\snp2uvc.sys
14:14:20.0760 5888  SNP2UVC - ok
14:14:20.0791 5888  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr           C:\windows\system32\drivers\spldr.sys
14:14:20.0791 5888  spldr - ok
14:14:20.0838 5888  [ 866A43013535DC8587C258E43579C764 ] Spooler         C:\windows\System32\spoolsv.exe
14:14:20.0838 5888  Spooler - ok
14:14:20.0947 5888  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\windows\system32\sppsvc.exe
14:14:20.0994 5888  sppsvc - ok
14:14:21.0041 5888  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify     C:\windows\system32\sppuinotify.dll
14:14:21.0041 5888  sppuinotify - ok
14:14:21.0103 5888  [ B2EC3E1DEAC5F0A764BD3486D213A0AF ] SQLBrowser      c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
14:14:21.0103 5888  SQLBrowser - ok
14:14:21.0135 5888  [ D2F4F32B59440011174B4F8137AF4E0C ] SQLWriter       c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
14:14:21.0135 5888  SQLWriter - ok
14:14:21.0181 5888  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv             C:\windows\system32\DRIVERS\srv.sys
14:14:21.0197 5888  srv - ok
14:14:21.0213 5888  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
14:14:21.0228 5888  srv2 - ok
14:14:21.0259 5888  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
14:14:21.0259 5888  srvnet - ok
14:14:21.0291 5888  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV         C:\windows\System32\ssdpsrv.dll
14:14:21.0306 5888  SSDPSRV - ok
14:14:21.0322 5888  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc         C:\windows\system32\sstpsvc.dll
14:14:21.0322 5888  SstpSvc - ok
14:14:21.0384 5888  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\windows\system32\DRIVERS\stexstor.sys
14:14:21.0384 5888  stexstor - ok
14:14:21.0431 5888  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\windows\System32\wiaservc.dll
14:14:21.0462 5888  StiSvc - ok
14:14:21.0493 5888  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\windows\system32\drivers\swenum.sys
14:14:21.0493 5888  swenum - ok
14:14:21.0525 5888  [ A28BD92DF340E57B024BA433165D34D7 ] swprv           C:\windows\System32\swprv.dll
14:14:21.0556 5888  swprv - ok
14:14:21.0618 5888  [ E09C6AE9F84B5985979046E0A5896584 ] SynTP           C:\windows\system32\DRIVERS\SynTP.sys
14:14:21.0618 5888  SynTP - ok
14:14:21.0681 5888  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain         C:\windows\system32\sysmain.dll
14:14:21.0696 5888  SysMain - ok
14:14:21.0727 5888  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\windows\System32\TabSvc.dll
14:14:21.0743 5888  TabletInputService - ok
14:14:21.0774 5888  [ 613BF4820361543956909043A265C6AC ] TapiSrv         C:\windows\System32\tapisrv.dll
14:14:21.0805 5888  TapiSrv - ok
14:14:21.0821 5888  [ B799D9FDB26111737F58288D8DC172D9 ] TBS             C:\windows\System32\tbssvc.dll
14:14:21.0837 5888  TBS - ok
14:14:21.0946 5888  [ 7FA2E0F8B072BD04B77B421480B6CC22 ] Tcpip           C:\windows\system32\drivers\tcpip.sys
14:14:21.0993 5888  Tcpip - ok
14:14:22.0039 5888  [ 7FA2E0F8B072BD04B77B421480B6CC22 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
14:14:22.0055 5888  TCPIP6 - ok
14:14:22.0102 5888  [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
14:14:22.0102 5888  tcpipreg - ok
14:14:22.0133 5888  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
14:14:22.0149 5888  TDPIPE - ok
14:14:22.0180 5888  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP           C:\windows\system32\drivers\tdtcp.sys
14:14:22.0180 5888  TDTCP - ok
14:14:22.0227 5888  [ B459575348C20E8121D6039DA063C704 ] tdx             C:\windows\system32\DRIVERS\tdx.sys
14:14:22.0227 5888  tdx - ok
14:14:22.0258 5888  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\windows\system32\drivers\termdd.sys
14:14:22.0258 5888  TermDD - ok
14:14:22.0289 5888  [ 382C804C92811BE57829D8E550A900E2 ] TermService     C:\windows\System32\termsrv.dll
14:14:22.0320 5888  TermService - ok
14:14:22.0351 5888  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\windows\system32\themeservice.dll
14:14:22.0367 5888  Themes - ok
14:14:22.0383 5888  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER     C:\windows\system32\mmcss.dll
14:14:22.0383 5888  THREADORDER - ok
14:14:22.0429 5888  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\windows\System32\trkwks.dll
14:14:22.0445 5888  TrkWks - ok
14:14:22.0507 5888  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
14:14:22.0507 5888  TrustedInstaller - ok
14:14:22.0523 5888  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
14:14:22.0539 5888  tssecsrv - ok
14:14:22.0601 5888  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
14:14:22.0601 5888  TsUsbFlt - ok
14:14:22.0663 5888  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
14:14:22.0663 5888  tunnel - ok
14:14:22.0695 5888  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\windows\system32\DRIVERS\uagp35.sys
14:14:22.0695 5888  uagp35 - ok
14:14:22.0726 5888  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\windows\system32\DRIVERS\udfs.sys
14:14:22.0726 5888  udfs - ok
14:14:22.0773 5888  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect       C:\windows\system32\UI0Detect.exe
14:14:22.0773 5888  UI0Detect - ok
14:14:22.0835 5888  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
14:14:22.0851 5888  uliagpkx - ok
14:14:22.0897 5888  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus           C:\windows\system32\drivers\umbus.sys
14:14:22.0897 5888  umbus - ok
14:14:22.0944 5888  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\windows\system32\DRIVERS\umpass.sys
14:14:22.0944 5888  UmPass - ok
14:14:23.0085 5888  [ 83AE4776A4999325213B3088BF17C352 ] UpekSrvc        C:\Program Files\Lenovo\LenovoSecuritySolution FP\upeksrvc.exe
14:14:23.0085 5888  UpekSrvc - ok
14:14:23.0116 5888  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\windows\System32\upnphost.dll
14:14:23.0131 5888  upnphost - ok
14:14:23.0163 5888  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp         C:\windows\system32\DRIVERS\usbccgp.sys
14:14:23.0178 5888  usbccgp - ok
14:14:23.0225 5888  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\windows\system32\drivers\usbcir.sys
14:14:23.0225 5888  usbcir - ok
14:14:23.0241 5888  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci         C:\windows\system32\DRIVERS\usbehci.sys
14:14:23.0241 5888  usbehci - ok
14:14:23.0303 5888  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys
14:14:23.0319 5888  usbhub - ok
14:14:23.0334 5888  [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci         C:\windows\system32\drivers\usbohci.sys
14:14:23.0334 5888  usbohci - ok
14:14:23.0365 5888  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
14:14:23.0365 5888  usbprint - ok
14:14:23.0397 5888  [ F991AB9CC6B908DB552166768176896A ] USBSTOR         C:\windows\system32\DRIVERS\USBSTOR.SYS
14:14:23.0397 5888  USBSTOR - ok
14:14:23.0412 5888  [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci         C:\windows\system32\DRIVERS\usbuhci.sys
14:14:23.0412 5888  usbuhci - ok
14:14:23.0459 5888  [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo        C:\windows\System32\Drivers\usbvideo.sys
14:14:23.0459 5888  usbvideo - ok
14:14:23.0506 5888  [ B71DA871254D96D0349639D03E4C1CC1 ] usb_rndis       C:\windows\system32\DRIVERS\usb8023.sys
14:14:23.0506 5888  usb_rndis - ok
14:14:23.0537 5888  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms           C:\windows\System32\uxsms.dll
14:14:23.0553 5888  UxSms - ok
14:14:23.0568 5888  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\windows\system32\lsass.exe
14:14:23.0568 5888  VaultSvc - ok
14:14:23.0615 5888  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
14:14:23.0615 5888  vdrvroot - ok
14:14:23.0662 5888  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds             C:\windows\System32\vds.exe
14:14:23.0693 5888  vds - ok
14:14:23.0724 5888  [ 17C408214EA61696CEC9C66E388B14F3 ] vga             C:\windows\system32\DRIVERS\vgapnp.sys
14:14:23.0724 5888  vga - ok
14:14:23.0740 5888  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave         C:\windows\System32\drivers\vga.sys
14:14:23.0740 5888  VgaSave - ok
14:14:23.0787 5888  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp           C:\windows\system32\drivers\vhdmp.sys
14:14:23.0802 5888  vhdmp - ok
14:14:23.0833 5888  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\windows\system32\drivers\viaagp.sys
14:14:23.0833 5888  viaagp - ok
14:14:23.0865 5888  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7           C:\windows\system32\DRIVERS\viac7.sys
14:14:23.0865 5888  ViaC7 - ok
14:14:23.0896 5888  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\windows\system32\drivers\viaide.sys
14:14:23.0896 5888  viaide - ok
14:14:23.0911 5888  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\windows\system32\drivers\volmgr.sys
14:14:23.0911 5888  volmgr - ok
14:14:23.0943 5888  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx         C:\windows\system32\drivers\volmgrx.sys
14:14:23.0943 5888  volmgrx - ok
14:14:23.0974 5888  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap         C:\windows\system32\drivers\volsnap.sys
14:14:23.0974 5888  volsnap - ok
14:14:24.0021 5888  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid         C:\windows\system32\DRIVERS\vsmraid.sys
14:14:24.0036 5888  vsmraid - ok
14:14:24.0099 5888  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS             C:\windows\system32\vssvc.exe
14:14:24.0114 5888  VSS - ok
14:14:24.0130 5888  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
14:14:24.0130 5888  vwifibus - ok
14:14:24.0161 5888  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
14:14:24.0161 5888  vwififlt - ok
14:14:24.0208 5888  [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp         C:\windows\system32\DRIVERS\vwifimp.sys
14:14:24.0208 5888  vwifimp - ok
14:14:24.0239 5888  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time         C:\windows\system32\w32time.dll
14:14:24.0270 5888  W32Time - ok
14:14:24.0286 5888  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\windows\system32\DRIVERS\wacompen.sys
14:14:24.0286 5888  WacomPen - ok
14:14:24.0333 5888  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
14:14:24.0333 5888  WANARP - ok
14:14:24.0348 5888  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
14:14:24.0348 5888  Wanarpv6 - ok
14:14:24.0442 5888  [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc     C:\windows\system32\Wat\WatAdminSvc.exe
14:14:24.0473 5888  WatAdminSvc - ok
14:14:24.0520 5888  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\windows\system32\wbengine.exe
14:14:24.0567 5888  wbengine - ok
14:14:24.0629 5888  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
14:14:24.0645 5888  WbioSrvc - ok
14:14:24.0691 5888  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc         C:\windows\System32\wcncsvc.dll
14:14:24.0707 5888  wcncsvc - ok
14:14:24.0738 5888  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
14:14:24.0754 5888  WcsPlugInService - ok
14:14:24.0769 5888  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\windows\system32\DRIVERS\wd.sys
14:14:24.0785 5888  Wd - ok
14:14:24.0801 5888  [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
14:14:24.0801 5888  Wdf01000 - ok
14:14:24.0832 5888  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\windows\system32\wdi.dll
14:14:24.0847 5888  WdiServiceHost - ok
14:14:24.0863 5888  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost   C:\windows\system32\wdi.dll
14:14:24.0863 5888  WdiSystemHost - ok
14:14:24.0894 5888  [ EA4E9DD00E69B35F9BD3D39ACB113E3F ] wdmirror        C:\windows\system32\DRIVERS\WDMirror.sys
14:14:24.0894 5888  wdmirror - ok
14:14:24.0941 5888  [ A9D880F97530D5B8FEE278923349929D ] WebClient       C:\windows\System32\webclnt.dll
14:14:24.0957 5888  WebClient - ok
14:14:24.0972 5888  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\windows\system32\wecsvc.dll
14:14:25.0003 5888  Wecsvc - ok
14:14:25.0035 5888  [ AC804569BB2364FB6017370258A4091B ] wercplsupport   C:\windows\System32\wercplsupport.dll
14:14:25.0050 5888  wercplsupport - ok
14:14:25.0081 5888  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\windows\System32\WerSvc.dll
14:14:25.0097 5888  WerSvc - ok
14:14:25.0144 5888  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
14:14:25.0144 5888  WfpLwf - ok
14:14:25.0175 5888  [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 ] WimFltr         C:\windows\system32\DRIVERS\wimfltr.sys
14:14:25.0175 5888  WimFltr - ok
14:14:25.0175 5888  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\windows\system32\drivers\wimmount.sys
14:14:25.0191 5888  WIMMount - ok
14:14:25.0300 5888  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
14:14:25.0331 5888  WinDefend - ok
14:14:25.0347 5888  WinHttpAutoProxySvc - ok
14:14:25.0440 5888  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt         C:\windows\system32\wbem\WMIsvc.dll
14:14:25.0456 5888  Winmgmt - ok
14:14:25.0503 5888  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM           C:\windows\system32\WsmSvc.dll
14:14:25.0565 5888  WinRM - ok
14:14:25.0627 5888  [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb          C:\windows\system32\DRIVERS\WinUSB.sys
14:14:25.0627 5888  WinUsb - ok
14:14:25.0674 5888  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc         C:\windows\System32\wlansvc.dll
14:14:25.0721 5888  Wlansvc - ok
14:14:25.0783 5888  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi         C:\windows\system32\drivers\wmiacpi.sys
14:14:25.0783 5888  WmiAcpi - ok
14:14:25.0830 5888  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
14:14:25.0830 5888  wmiApSrv - ok
14:14:25.0939 5888  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
14:14:25.0955 5888  WMPNetworkSvc - ok
14:14:25.0986 5888  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\windows\System32\wpcsvc.dll
14:14:26.0002 5888  WPCSvc - ok
14:14:26.0033 5888  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
14:14:26.0064 5888  WPDBusEnum - ok
14:14:26.0095 5888  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl         C:\windows\system32\drivers\ws2ifsl.sys
14:14:26.0095 5888  ws2ifsl - ok
14:14:26.0173 5888  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\windows\System32\wscsvc.dll
14:14:26.0189 5888  wscsvc - ok
14:14:26.0205 5888  WSearch - ok
14:14:26.0236 5888  [ BAEDC491374DEFD5E76336901D6D397D ] wsvd            C:\windows\system32\DRIVERS\wsvd.sys
14:14:26.0236 5888  wsvd - ok
14:14:26.0314 5888  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\windows\system32\wuaueng.dll
14:14:26.0376 5888  wuauserv - ok
14:14:26.0407 5888  [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
14:14:26.0407 5888  WudfPf - ok
14:14:26.0470 5888  [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
14:14:26.0470 5888  WUDFRd - ok
14:14:26.0517 5888  [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc         C:\windows\System32\WUDFSvc.dll
14:14:26.0548 5888  wudfsvc - ok
14:14:26.0579 5888  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc         C:\windows\System32\wwansvc.dll
14:14:26.0610 5888  WwanSvc - ok
14:14:26.0688 5888  ================ Scan global ===============================
14:14:26.0719 5888  [ DAB748AE0439955ED2FA22357533DDDB ] C:\windows\system32\basesrv.dll
14:14:26.0751 5888  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\windows\system32\winsrv.dll
14:14:26.0782 5888  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\windows\system32\winsrv.dll
14:14:26.0829 5888  [ 364455805E64882844EE9ACB72522830 ] C:\windows\system32\sxssrv.dll
14:14:26.0891 5888  [ A302BBFF2A7278C0E239EE5D471D86A9 ] C:\windows\system32\services.exe
14:14:26.0891 5888  C:\windows\system32\services.exe ( Virus.Win32.ZAccess.m ) - infected
14:14:26.0891 5888  C:\windows\system32\services.exe - detected Virus.Win32.ZAccess.m (0)
14:14:26.0891 5888  ================ Scan MBR ==================================
14:14:26.0922 5888  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
14:14:27.0094 5888  \Device\Harddisk0\DR0 - ok
14:14:27.0094 5888  ================ Scan VBR ==================================
14:14:27.0109 5888  [ 7C14523227B2377787341186AA636489 ] \Device\Harddisk0\DR0\Partition1
14:14:27.0109 5888  \Device\Harddisk0\DR0\Partition1 - ok
14:14:27.0125 5888  [ CC2F8DF78445262DEEEDA79F3E3BCD13 ] \Device\Harddisk0\DR0\Partition2
14:14:27.0125 5888  \Device\Harddisk0\DR0\Partition2 - ok
14:14:27.0156 5888  [ B78663E63599C730AFBABF01D5DDE15F ] \Device\Harddisk0\DR0\Partition3
14:14:27.0156 5888  \Device\Harddisk0\DR0\Partition3 - ok
14:14:27.0156 5888  ============================================================
14:14:27.0156 5888  Scan finished
14:14:27.0156 5888  ============================================================
14:14:27.0187 9452  Detected object count: 1
14:14:27.0187 9452  Actual detected object count: 1
14:14:52.0865 9452  C:\windows\system32\services.exe - copied to quarantine
14:15:03.0715 9452  Backup copy found, using it..
14:15:03.0793 9452  C:\windows\system32\services.exe - will be cured on reboot
14:15:03.0793 9452  C:\windows\system32\services.exe ( Virus.Win32.ZAccess.m ) - User select action: Cure 
14:15:22.0295 4636  Deinitialize success