10:20:00.0171 0x0f74 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 10:20:04.0890 0x0f74 ============================================================ 10:20:04.0890 0x0f74 Current date / time: 2015/07/10 10:20:04.0890 10:20:04.0890 0x0f74 SystemInfo: 10:20:04.0890 0x0f74 10:20:04.0890 0x0f74 OS Version: 5.1.2600 ServicePack: 3.0 10:20:04.0890 0x0f74 Product type: Workstation 10:20:04.0890 0x0f74 ComputerName: PC 10:20:04.0890 0x0f74 UserName: Kamil 10:20:04.0890 0x0f74 Windows directory: C:\WINDOWS 10:20:04.0890 0x0f74 System windows directory: C:\WINDOWS 10:20:04.0890 0x0f74 Processor architecture: Intel x86 10:20:04.0890 0x0f74 Number of processors: 2 10:20:04.0890 0x0f74 Page size: 0x1000 10:20:04.0890 0x0f74 Boot type: Normal boot 10:20:04.0890 0x0f74 ============================================================ 10:20:07.0046 0x0f74 KLMD registered as C:\WINDOWS\system32\drivers\03644195.sys 10:20:07.0281 0x0f74 System UUID: {3E69F6D3-AF30-1E39-7F9A-FAC62AE7A41E} 10:20:08.0265 0x0f74 Drive \Device\Harddisk0\DR0 - Size: 0x4A85C4DE00 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 10:20:08.0265 0x0f74 ============================================================ 10:20:08.0265 0x0f74 \Device\Harddisk0\DR0: 10:20:08.0265 0x0f74 MBR partitions: 10:20:08.0265 0x0f74 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A962B1 10:20:08.0281 0x0f74 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3A9632F, BlocksNum 0x107ABA7B 10:20:08.0296 0x0f74 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x14241DE9, BlocksNum 0x111E7A17 10:20:08.0296 0x0f74 ============================================================ 10:20:08.0312 0x0f74 C: <-> \Device\Harddisk0\DR0\Partition1 10:20:08.0375 0x0f74 D: <-> \Device\Harddisk0\DR0\Partition2 10:20:08.0453 0x0f74 E: <-> \Device\Harddisk0\DR0\Partition3 10:20:08.0453 0x0f74 ============================================================ 10:20:08.0453 0x0f74 Initialize success 10:20:08.0453 0x0f74 ============================================================ 10:20:09.0812 0x0cfc ============================================================ 10:20:09.0812 0x0cfc Scan started 10:20:09.0812 0x0cfc Mode: Manual; 10:20:09.0812 0x0cfc ============================================================ 10:20:09.0812 0x0cfc KSN ping started 10:20:12.0328 0x0cfc KSN ping finished: true 10:20:13.0093 0x0cfc ================ Scan system memory ======================== 10:20:13.0093 0x0cfc System memory - ok 10:20:13.0093 0x0cfc ================ Scan services ============================= 10:20:13.0140 0x0cfc Abiosdsk - ok 10:20:13.0140 0x0cfc abp480n5 - ok 10:20:13.0187 0x0cfc [ 05118282F5D039595A2B92B4A4AFE197, 390EBD6088E96571636CE0925E4899D58893D9E5DF2389C09BABBD47A5838B52 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys 10:20:13.0203 0x0cfc ACPI - ok 10:20:13.0359 0x0cfc [ 66A42B7DB194E24B973BBCCE840A0F3F, 2550F8E5B5ACD88E4191656194E46FB8EC8CCC65AFD4B5E6D5CED9FE297B573F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys 10:20:13.0359 0x0cfc ACPIEC - ok 10:20:13.0406 0x0cfc [ 1234A12B71DAE034E45C714AE5A54412, 079E6BC834F38322ED5ED76295EC3961ED894084EF5CB171DFFBD9B3822CC78D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe 10:20:13.0421 0x0cfc AdobeFlashPlayerUpdateSvc - ok 10:20:13.0421 0x0cfc adpu160m - ok 10:20:13.0453 0x0cfc [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys 10:20:13.0468 0x0cfc aec - ok 10:20:13.0500 0x0cfc [ 1E44BC1E83D8FD2305F8D452DB109CF9, CF5EC07E0B589FA2A4701C6CFD69E893FC3ABF274AD57AE3C13FFE49063B02C8 ] AFD C:\WINDOWS\System32\drivers\afd.sys 10:20:13.0500 0x0cfc AFD - ok 10:20:13.0515 0x0cfc Aha154x - ok 10:20:13.0515 0x0cfc aic78u2 - ok 10:20:13.0515 0x0cfc aic78xx - ok 10:20:13.0546 0x0cfc [ 27AF056D8C42F0AB3CF1DFDCBBEB3243, 9D893C6C0E8619B0B0DA9EAEB5E470A29C9D730F89EC5632134C3F753DE51AC5 ] Alerter C:\WINDOWS\system32\alrsvc.dll 10:20:13.0546 0x0cfc Alerter - ok 10:20:13.0562 0x0cfc [ D1738DDDFF196C5CEE6D867C136AF745, DD4780276465CB18D14B4DDBB4E70117B374B3A61C618D68B5290714330DB91F ] ALG C:\WINDOWS\System32\alg.exe 10:20:13.0578 0x0cfc ALG - ok 10:20:13.0578 0x0cfc AliIde - ok 10:20:13.0671 0x0cfc [ 267FC636801EDC5AB28E14036349E3BE, CFEF5DF5F9BE820283376BB86DB3CF6609C02D316A742E17459A2BFA42E724E0 ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys 10:20:13.0750 0x0cfc Ambfilt - ok 10:20:13.0750 0x0cfc amsint - ok 10:20:13.0765 0x0cfc AppMgmt - ok 10:20:13.0859 0x0cfc [ D0C8B41A2690CD3B57783C759B3B72D5, 1C69AAE92B86B2EE517AC0B5DD0D5BF847F3CAA467BF840C1D96257725609E6F ] AresChatServer C:\Program Files\Ares\chatServer.exe 10:20:13.0875 0x0cfc AresChatServer - ok 10:20:13.0890 0x0cfc asc - ok 10:20:13.0890 0x0cfc asc3350p - ok 10:20:13.0890 0x0cfc asc3550 - ok 10:20:13.0968 0x0cfc [ 0E5E4957549056E2BF2C49F4F6B601AD, F7F19FDC906B719A3516D30A9B4A2262C8CC5B36B94E3D4195C345EC4610FF2B ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 10:20:13.0968 0x0cfc aspnet_state - ok 10:20:14.0000 0x0cfc [ EFDEF61C488A193986D4672658E91532, B2E97542F7C608937005A2ABFA10F7FD8F3E8F1AB3FBE621772E41048BBDDDBE ] aswHwid C:\WINDOWS\system32\drivers\aswHwid.sys 10:20:14.0000 0x0cfc aswHwid - ok 10:20:14.0015 0x0cfc [ 91AAF4792987B43C0653D74516F092C8, DFFB5D0BA6537E2B6A45292B8A2B566F848D54A2FB54017711236E2D3BCBEBBE ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys 10:20:14.0015 0x0cfc aswMonFlt - ok 10:20:14.0031 0x0cfc [ 8FE9BB175E9C789FED4CB6CEFEC4EE18, 2DB5AEFD32E4E204E30581F1F4B16B80DB44BDD88F3BAC263279B0EB80612447 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys 10:20:14.0046 0x0cfc aswRdr - ok 10:20:14.0046 0x0cfc [ 2DB91CE80C367ACDD1331DE9B1E3EAEF, 7AF35FBA1DB6A44928A6DF554E9428C3E21191B376756718832FCD66F9F9D07C ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys 10:20:14.0046 0x0cfc aswRvrt - ok 10:20:14.0093 0x0cfc [ 83DF5B3DE1C6527972946CDB328446F7, F4CA80903EE6FCB7E5A7B0E989692B6B5177CE03D3BFFE6A93D53C8B364EE833 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys 10:20:14.0125 0x0cfc aswSnx - ok 10:20:14.0156 0x0cfc [ CB2B9FBFF7A3104A6AA60E797156800F, CFFA414258FB793CB34344A5B398335554F4A1BB22B26C843939D58CF53F3DB5 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys 10:20:14.0171 0x0cfc aswSP - ok 10:20:14.0187 0x0cfc [ 9064B31FA781B925136DD68C17C0B1B4, 2CC4755E19151342ED4900201925AC1DFF90EF78AA97994C70D8E789F097B623 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys 10:20:14.0187 0x0cfc aswTdi - ok 10:20:14.0203 0x0cfc [ D45875D018F9FB9BF19B976AD8791DE9, 9AA70417A9AAFF5515C6B1FFADD563FBDC0BC62AA0B9FDA8A771E67203C12270 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys 10:20:14.0218 0x0cfc aswVmm - ok 10:20:14.0250 0x0cfc [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 10:20:14.0250 0x0cfc AsyncMac - ok 10:20:14.0265 0x0cfc [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys 10:20:14.0265 0x0cfc atapi - ok 10:20:14.0281 0x0cfc Atdisk - ok 10:20:14.0328 0x0cfc [ 8942748B79F97F5D33621493E7104998, D64C4C703ACF284C1A54361CE0D86A194FFC282275DA95A4AD2606EAA04991FD ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe 10:20:14.0359 0x0cfc Ati HotKey Poller - ok 10:20:14.0718 0x0cfc [ 0A8C8B8B4767F0A5FF169442F55C4F87, 3CF8B44805436D4159AD9CE156AFFC12197DDD06FB0D4C9B941059D88FAD4817 ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 10:20:15.0000 0x0cfc ati2mtag - ok 10:20:15.0062 0x0cfc [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys 10:20:15.0062 0x0cfc Atmarpc - ok 10:20:15.0093 0x0cfc [ 3A28D3E7BAD0EED3810CD918B2525B54, EFC7CEF39D58E846613E419E78ECBD300DFB18630B70110AB2936737EB2B19C1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll 10:20:15.0093 0x0cfc AudioSrv - ok 10:20:15.0125 0x0cfc [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys 10:20:15.0125 0x0cfc audstub - ok 10:20:15.0187 0x0cfc [ 54236E79A44F909612391C8A2D70D512, B0DF5BCC4F90AF087D0306F8D81F90B2CAE0176813E3AA6A7D5460F7878677CD ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe 10:20:15.0218 0x0cfc avast! Antivirus - ok 10:20:15.0250 0x0cfc [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys 10:20:15.0265 0x0cfc Beep - ok 10:20:15.0296 0x0cfc [ 78200FAA6FD9C69394134C238C87FB7F, 4E70BD89BB40222CB0647E8F73DBBAB1020594AEC313848C911048D080D0F26A ] BITS C:\WINDOWS\system32\qmgr.dll 10:20:15.0359 0x0cfc BITS - ok 10:20:15.0390 0x0cfc [ 9D6788EFFB9972C28C38D9C5E67249D5, A4C5FFE40983AD5C781024280F188E4FBA5797334BF331A56FF7E32E90F02081 ] Browser C:\WINDOWS\System32\browser.dll 10:20:15.0390 0x0cfc Browser - ok 10:20:15.0406 0x0cfc [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys 10:20:15.0421 0x0cfc cbidf2k - ok 10:20:15.0421 0x0cfc cd20xrnt - ok 10:20:15.0437 0x0cfc [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys 10:20:15.0437 0x0cfc Cdaudio - ok 10:20:15.0453 0x0cfc [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys 10:20:15.0468 0x0cfc Cdfs - ok 10:20:15.0484 0x0cfc [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys 10:20:15.0484 0x0cfc Cdrom - ok 10:20:15.0484 0x0cfc Changer - ok 10:20:15.0515 0x0cfc [ 45B63DF2FB498D219FCBB4425CADE676, D58417D5D0E562E2CCBA04C82CF7E176F6F82026CB4877D45F0DC18944B72960 ] CiSvc C:\WINDOWS\system32\cisvc.exe 10:20:15.0531 0x0cfc CiSvc - ok 10:20:15.0531 0x0cfc [ C94F1B6F61858D6389C0FA06954FB9C4, 832A8BF5D63FD623632823DE7F36636540DAC9192B40A44C2DE6961D2E086320 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe 10:20:15.0531 0x0cfc ClipSrv - ok 10:20:15.0546 0x0cfc [ 7FA87325900183197BC9710D1CE4C9FA, EFFCB4FDB69A01B019785F203F9779832AF7DE77FCE47B9421BEDC34816C1D82 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 10:20:15.0546 0x0cfc clr_optimization_v2.0.50727_32 - ok 10:20:15.0562 0x0cfc CmdIde - ok 10:20:15.0562 0x0cfc COMSysApp - ok 10:20:15.0578 0x0cfc Cpqarray - ok 10:20:15.0593 0x0cfc [ 6B105FE95F2E9F0B6346044BA59D41C9, DC41FC89E6C4F4219015856AEE9D9CE365094D3C8012AFFC188C129DC3B6A9A8 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll 10:20:15.0609 0x0cfc CryptSvc - ok 10:20:15.0609 0x0cfc dac2w2k - ok 10:20:15.0609 0x0cfc dac960nt - ok 10:20:15.0656 0x0cfc [ A37311D9D628C1042A2836731787F0F3, 2A4380021407E84FAD47A2D5B02D37F1F17E8E2B1433710208FFCC70D9ECB5AA ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 10:20:15.0703 0x0cfc DcomLaunch - ok 10:20:15.0734 0x0cfc [ 6216FD7FD227DE454238A702B218CEC7, 5699FDD253754AE274B8624A41CBE778D74383E95D5167785A48A51AAD67FC70 ] dgderdrv C:\WINDOWS\system32\drivers\dgderdrv.sys 10:20:15.0734 0x0cfc dgderdrv - ok 10:20:15.0765 0x0cfc [ 7A5FB3E4E0D77740D56E516EE6B2DC2B, 5B4636EC04903D2E512AC8FB98A484F7CEBE4EE0A081CF897CD13E8491C0D8CC ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys 10:20:15.0765 0x0cfc dg_ssudbus - ok 10:20:15.0781 0x0cfc [ 6B4AFE7C676CFF3EFF2DC06A4EE945F7, 9771808A033C781758AC1356F9F51B198A0750081424F4F7A937CE0D7408CEE1 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll 10:20:15.0796 0x0cfc Dhcp - ok 10:20:15.0828 0x0cfc [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys 10:20:15.0828 0x0cfc Disk - ok 10:20:15.0843 0x0cfc dmadmin - ok 10:20:15.0906 0x0cfc [ BC9219ABC5696942E6F9AC8A9B28670F, DEDD84A5FC12664C7767EC5210E3B4D311664EF8BCE01C9DCF16CC98BE16EDE1 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys 10:20:15.0953 0x0cfc dmboot - ok 10:20:15.0984 0x0cfc [ 5FA232E3BA6E1346F9F5A7E519320CB0, 1C7EEC415C291D3C5FFD479A8454347528AF4FF88F81011EF65EFA8FE8199973 ] dmio C:\WINDOWS\system32\drivers\dmio.sys 10:20:16.0000 0x0cfc dmio - ok 10:20:16.0031 0x0cfc [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys 10:20:16.0031 0x0cfc dmload - ok 10:20:16.0062 0x0cfc [ D858920A05076914D34B0388E8D96CC0, A8F231BA9022F6AEBB24C9DCC1898923F85B79DE3C8E90B696CA0B295B9C99B7 ] dmserver C:\WINDOWS\System32\dmserver.dll 10:20:16.0062 0x0cfc dmserver - ok 10:20:16.0078 0x0cfc [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys 10:20:16.0093 0x0cfc DMusic - ok 10:20:16.0109 0x0cfc [ 082BE13166A3354F25F78E0B2601012B, 881284F659D4D528C96092E79BADE6E6C0C589E4583B3BF3FAC229F50D16C5F0 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 10:20:16.0125 0x0cfc Dnscache - ok 10:20:16.0171 0x0cfc [ E0B7D66CF29D9ADCCF873C77821CD4CA, 09A3D28585B62FC541EF4F2CB4D749DA119BB5F98739393CFD4D745060217C65 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll 10:20:16.0187 0x0cfc Dot3svc - ok 10:20:16.0187 0x0cfc dpti2o - ok 10:20:16.0203 0x0cfc [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 10:20:16.0203 0x0cfc drmkaud - ok 10:20:16.0234 0x0cfc [ 5F256C1AD50FEFDC442CD5AAB58C7DD8, 0FC1F2590195AE4B7CAA802D84CD391B56D73B99CB100BDEBD4D7C002946D06B ] EapHost C:\WINDOWS\System32\eapsvc.dll 10:20:16.0281 0x0cfc EapHost - ok 10:20:16.0312 0x0cfc [ ED1B71382C31FD2CF3CDC4672EFAD6EA, AF3CD28B5E6F1ED1D6B7C71C697019B2E2E79AFFE29EB6282253B30BA205F3EA ] ERSvc C:\WINDOWS\System32\ersvc.dll 10:20:16.0312 0x0cfc ERSvc - ok 10:20:16.0343 0x0cfc [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] Eventlog C:\WINDOWS\system32\services.exe 10:20:16.0375 0x0cfc Eventlog - ok 10:20:16.0406 0x0cfc [ 6AFF804839C85859E0247164FBE5F5BB, 91E1FEC83545BC6489E35CD042BBA756FA31C5BEAD51FC5494DD04F6F8C852AB ] EventSystem C:\WINDOWS\system32\es.dll 10:20:16.0437 0x0cfc EventSystem - ok 10:20:16.0453 0x0cfc [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys 10:20:16.0468 0x0cfc Fastfat - ok 10:20:16.0500 0x0cfc [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll 10:20:16.0515 0x0cfc FastUserSwitchingCompatibility - ok 10:20:16.0531 0x0cfc [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys 10:20:16.0546 0x0cfc Fdc - ok 10:20:16.0562 0x0cfc [ 09E2A4D33F81A06A8AAB2BA0A0B5D235, D71C2D4212C7ABB1D8EE08B21C59CA25D7195F1A0E92E5BDA1DC5226A0E62CB0 ] Fips C:\WINDOWS\system32\drivers\Fips.sys 10:20:16.0562 0x0cfc Fips - ok 10:20:16.0578 0x0cfc [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys 10:20:16.0578 0x0cfc Flpydisk - ok 10:20:16.0609 0x0cfc [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 10:20:16.0609 0x0cfc FltMgr - ok 10:20:16.0640 0x0cfc [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 10:20:16.0656 0x0cfc FontCache3.0.0.0 - ok 10:20:16.0656 0x0cfc [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 10:20:16.0671 0x0cfc Fs_Rec - ok 10:20:16.0687 0x0cfc [ ED6D921D8AB423138FB35BEEE6D6A6CB, CF133B76960207595C44181A235E63B84C5A5A4E7BDDDC2E6A01DA837E55832D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys 10:20:16.0687 0x0cfc Ftdisk - ok 10:20:16.0703 0x0cfc [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys 10:20:16.0703 0x0cfc Gpc - ok 10:20:16.0734 0x0cfc [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 10:20:16.0750 0x0cfc gupdate - ok 10:20:16.0750 0x0cfc [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 10:20:16.0750 0x0cfc gupdatem - ok 10:20:16.0781 0x0cfc [ 573C7D0A32852B48F3058CFD8026F511, BC384BBA394AFDCDA1A9ABC858C692AA84A1F0A31AF3DDF7F38D120C027927FB ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 10:20:16.0781 0x0cfc HDAudBus - ok 10:20:16.0828 0x0cfc [ AF752014F7EB61542E3F35B9374D7E76, 8D9F1D1B03D5AF9F592C396C4B6353E17F2E852A2A7F1F468F83763C0731435D ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 10:20:16.0828 0x0cfc helpsvc - ok 10:20:16.0859 0x0cfc [ 1776C3B6069EEECC8042535296C1866A, 57B516B7E0C12EF16568647B069441731C0484C0D0E87900D1F2E895BD67FF18 ] HidServ C:\WINDOWS\System32\hidserv.dll 10:20:16.0859 0x0cfc HidServ - ok 10:20:16.0875 0x0cfc [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys 10:20:16.0875 0x0cfc hidusb - ok 10:20:16.0906 0x0cfc [ F0273916DA6FB64CC88E0BD77619554F, C6E3B5C367CE52174251B1CE548F0DF8708AEDD228D5AD74D3F6F31FC3857460 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll 10:20:16.0921 0x0cfc hkmsvc - ok 10:20:16.0937 0x0cfc hpn - ok 10:20:16.0968 0x0cfc [ F80A415EF82CD06FFAF0D971528EAD38, 524D9E9201572929522F6805011783711B7C0F76308B924C89CF75F4B7A1FDF3 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys 10:20:16.0984 0x0cfc HTTP - ok 10:20:17.0015 0x0cfc [ AA268079AC119F3A596E5E27AEE4BD17, 2FD9B52A0627B3ECE618BAC855C19002CA6F5339636D11DF9F998E588027292A ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll 10:20:17.0031 0x0cfc HTTPFilter - ok 10:20:17.0031 0x0cfc i2omgmt - ok 10:20:17.0046 0x0cfc i2omp - ok 10:20:17.0046 0x0cfc [ 177B372AF55C4460D0968B5F1D02AA1C, 39406139B0D42C650F2C1986D85DB2260107D427963BC2C85A11D71561986DEB ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys 10:20:17.0062 0x0cfc i8042prt - ok 10:20:17.0125 0x0cfc [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 10:20:17.0171 0x0cfc idsvc - ok 10:20:17.0187 0x0cfc [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys 10:20:17.0187 0x0cfc Imapi - ok 10:20:17.0218 0x0cfc [ 9125AF650608A921F98A789E5C5BA864, E530C4FE52EB66549D91490B3039EF8DBC6866E4F9B55213F21E3757892B06CE ] ImapiService C:\WINDOWS\system32\imapi.exe 10:20:17.0234 0x0cfc ImapiService - ok 10:20:17.0250 0x0cfc ini910u - ok 10:20:17.0546 0x0cfc [ 063DD51CBDC37B8668E09148E0A118BC, 5FBBD6C067B4614DF99562B3A46EEBD08588CA71D640BBA0BB9A1DAB6CA34D07 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys 10:20:17.0765 0x0cfc IntcAzAudAddService - ok 10:20:17.0796 0x0cfc IntelIde - ok 10:20:17.0812 0x0cfc [ DA153EDC09DE8C4F846C085CAA39D1CC, 7669572FDCC2B458A8DCBA910D0260806E6DD7845221B81C509E627AB82ED7B4 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys 10:20:17.0812 0x0cfc intelppm - ok 10:20:17.0843 0x0cfc [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys 10:20:17.0843 0x0cfc Ip6Fw - ok 10:20:17.0875 0x0cfc [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 10:20:17.0875 0x0cfc IpFilterDriver - ok 10:20:17.0890 0x0cfc [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys 10:20:17.0890 0x0cfc IpInIp - ok 10:20:17.0906 0x0cfc [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys 10:20:17.0937 0x0cfc IpNat - ok 10:20:17.0953 0x0cfc [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys 10:20:17.0953 0x0cfc IPSec - ok 10:20:17.0968 0x0cfc [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys 10:20:17.0968 0x0cfc IRENUM - ok 10:20:18.0000 0x0cfc [ C8EEF2E93835B81BD335DE2123121283, DF7CCA1141CE15050D5EA516C75BF677B095EABA9E08828880E8917EBDEB2418 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys 10:20:18.0000 0x0cfc isapnp - ok 10:20:18.0015 0x0cfc [ 2AECA45D4AEAACBDCB77AD11184E4601, 58724D00A0D6FA17CCAF69DC069EF59E535F08C870C199BF2C9269BC22273A63 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys 10:20:18.0015 0x0cfc Kbdclass - ok 10:20:18.0015 0x0cfc [ F718DCDDAC2544BC693F22977D06F78B, 8C107E6969DA588E329212F2521A9FFE18B44A38CD1FF38BC0ACE37319C8960E ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys 10:20:18.0031 0x0cfc kbdhid - ok 10:20:18.0046 0x0cfc [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys 10:20:18.0062 0x0cfc kmixer - ok 10:20:18.0093 0x0cfc [ B467646C54CC746128904E1654C750C1, 3BD71BE3663EA23463D236D8A2A2E42DFA10C502BDB4B6E131FAF0FBA748219E ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys 10:20:18.0093 0x0cfc KSecDD - ok 10:20:18.0125 0x0cfc [ 061A4BB67C324AC8C176E0D77923B212, C2877FD13FCF7EB422441D08B5BF76D9B1DCE6E9D7A19487E0D7DE14254E0F60 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll 10:20:18.0156 0x0cfc lanmanserver - ok 10:20:18.0187 0x0cfc [ FA17019DA45C5D6464776A639A5A9ABB, 5654615E6130D344D2D42B59DF2F5CD02C6D3B1128BBC2A14ED0CB8078180B17 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll 10:20:18.0218 0x0cfc lanmanworkstation - ok 10:20:18.0218 0x0cfc lbrtfdc - ok 10:20:18.0234 0x0cfc [ 437AA83D68F9FAC234CA68DBD40DB705, 49B4A9E30778FB6D08AA7F9D66AF173572B86F74863477FFE7A66BBF2E6BCE93 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll 10:20:18.0265 0x0cfc LmHosts - ok 10:20:18.0281 0x0cfc [ 36F3AB18B1BE303DA51DE90A67DE3942, E364FF831EFBDC5FF026CE620EE951C129D4E0C79DD0FED823BC767F36ED0021 ] Messenger C:\WINDOWS\System32\msgsvc.dll 10:20:18.0312 0x0cfc Messenger - ok 10:20:18.0312 0x0cfc [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys 10:20:18.0328 0x0cfc mnmdd - ok 10:20:18.0359 0x0cfc [ 845814A8CB9D704D030F076E1BCE83F3, F35FD4B6CE78A06A6FCF207A75EADF5A8315F2254A3E84ED070928F196D32AF4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe 10:20:18.0359 0x0cfc mnmsrvc - ok 10:20:18.0375 0x0cfc [ 4A068DB7DC37D5AFEDB6512D2931D7B3, 491F58509188054EE35962B66A13F0029BDF66CC59ED3B5E4058393146CE001C ] Modem C:\WINDOWS\system32\drivers\Modem.sys 10:20:18.0375 0x0cfc Modem - ok 10:20:18.0453 0x0cfc [ C7D9F9717916B34C1B00DD4834AF485C, A9512A03E8142C83534189963F90ADA6FA425BD606928C40C3D724177105A658 ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys 10:20:18.0531 0x0cfc Monfilt - ok 10:20:18.0562 0x0cfc [ FBED3DF6B884F8CF00447B73507F2C48, 2CAA78DF3DB8BB19C10FD046B6EDC34167D8CA67EF137912703FE751D70803A2 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys 10:20:18.0562 0x0cfc Mouclass - ok 10:20:18.0578 0x0cfc [ ECEC1E6CD558AB80F944F31326E9D3B5, E61B7124FDFE36D7C9081ABA7745F87F83592CE683AB49F7C31359D393B2E691 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys 10:20:18.0578 0x0cfc mouhid - ok 10:20:18.0609 0x0cfc [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys 10:20:18.0609 0x0cfc MountMgr - ok 10:20:18.0656 0x0cfc [ 9FC679D10A7377BB04ECC3D0E2E26B53, 24ACD4EC1618A052C29E4463138B28F62C8B78D442DB82F4925E64FC5849A096 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 10:20:18.0656 0x0cfc MozillaMaintenance - ok 10:20:18.0656 0x0cfc mraid35x - ok 10:20:18.0671 0x0cfc [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys 10:20:18.0687 0x0cfc MRxDAV - ok 10:20:18.0734 0x0cfc [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0, DB9B186F7076D7B94F45041AF7B77C1AD2CAB504D683B459C6CB1C22840ED170 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 10:20:18.0765 0x0cfc MRxSmb - ok 10:20:18.0765 0x0cfc [ A54C5EECC7D3424824410BAE0AA6C371, C0C80211DD9A69A529B5277B0751FFABCBB6586292D06A79ED7B842277FBF78A ] MSDTC C:\WINDOWS\system32\msdtc.exe 10:20:18.0781 0x0cfc MSDTC - ok 10:20:18.0796 0x0cfc [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 10:20:18.0796 0x0cfc Msfs - ok 10:20:18.0796 0x0cfc MSIServer - ok 10:20:18.0812 0x0cfc [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 10:20:18.0812 0x0cfc MSKSSRV - ok 10:20:18.0828 0x0cfc [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 10:20:18.0828 0x0cfc MSPCLOCK - ok 10:20:18.0843 0x0cfc [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 10:20:18.0843 0x0cfc MSPQM - ok 10:20:18.0859 0x0cfc [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys 10:20:18.0875 0x0cfc mssmbios - ok 10:20:18.0890 0x0cfc [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup C:\WINDOWS\system32\drivers\Mup.sys 10:20:18.0906 0x0cfc Mup - ok 10:20:18.0937 0x0cfc [ 14CB8528E17D1221C50FC8CA88B1795F, E908EAE9A0E606084926941B1802E9F48AE1AC4AE6C6136345DD5699B8B9B526 ] napagent C:\WINDOWS\System32\qagentrt.dll 10:20:18.0968 0x0cfc napagent - ok 10:20:18.0984 0x0cfc [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys 10:20:19.0000 0x0cfc NDIS - ok 10:20:19.0015 0x0cfc [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 10:20:19.0031 0x0cfc NdisTapi - ok 10:20:19.0031 0x0cfc [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys 10:20:19.0046 0x0cfc Ndisuio - ok 10:20:19.0062 0x0cfc [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys 10:20:19.0062 0x0cfc NdisWan - ok 10:20:19.0078 0x0cfc [ 2F597BB467E05B1FE3830EABD821B8E0, 141497F5A49D47CCE3C9289644F4BD838DCB238F6D8E847FC006652E21FE02AC ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 10:20:19.0093 0x0cfc NDProxy - ok 10:20:19.0093 0x0cfc [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys 10:20:19.0109 0x0cfc NetBIOS - ok 10:20:19.0125 0x0cfc [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 10:20:19.0140 0x0cfc NetBT - ok 10:20:19.0156 0x0cfc [ CBB409B314309FCFFCE5E682E91338C6, 75BB788E9154D0437A8449B6C88432E27F1EACD9B6FDF27A46DE5147EC59CF6D ] NetDDE C:\WINDOWS\system32\netdde.exe 10:20:19.0171 0x0cfc NetDDE - ok 10:20:19.0187 0x0cfc [ CBB409B314309FCFFCE5E682E91338C6, 75BB788E9154D0437A8449B6C88432E27F1EACD9B6FDF27A46DE5147EC59CF6D ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe 10:20:19.0187 0x0cfc NetDDEdsdm - ok 10:20:19.0203 0x0cfc [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] Netlogon C:\WINDOWS\system32\lsass.exe 10:20:19.0218 0x0cfc Netlogon - ok 10:20:19.0250 0x0cfc [ 4FE97D0B1B182DF2A9BDD4C02155EF5E, 46F3F4FEB501E1987B49AB1595AADC06432B70E39CA6E9CC67C6410B13DA7B7A ] Netman C:\WINDOWS\System32\netman.dll 10:20:19.0265 0x0cfc Netman - ok 10:20:19.0328 0x0cfc [ D34612C5D02D026535B3095D620626AE, 1BBCCCBF49EB8807240A77DCB43C25C21682073CC5356594E2C4F53EF36BF657 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 10:20:19.0343 0x0cfc NetTcpPortSharing - ok 10:20:19.0390 0x0cfc [ 9D1F13706FB5F02D0E8795FB2D03971D, E4DD5EA83F57D5C0A6739F753E95D0B1E13CE6F8E49CE27641D6D96B2C9FEE78 ] Nla C:\WINDOWS\System32\mswsock.dll 10:20:19.0406 0x0cfc Nla - ok 10:20:19.0421 0x0cfc [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 10:20:19.0421 0x0cfc Npfs - ok 10:20:19.0453 0x0cfc [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 10:20:19.0500 0x0cfc Ntfs - ok 10:20:19.0500 0x0cfc [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] NtLmSsp C:\WINDOWS\system32\lsass.exe 10:20:19.0500 0x0cfc NtLmSsp - ok 10:20:19.0562 0x0cfc [ 3FB5399DBB7001A80D58EDAD64C98225, A790DB873DAADB2B241F2C2426B51C0B73D4E13AC4D804B8EBBF5A74B4A41797 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll 10:20:19.0593 0x0cfc NtmsSvc - ok 10:20:19.0625 0x0cfc [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys 10:20:19.0625 0x0cfc Null - ok 10:20:19.0640 0x0cfc [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 10:20:19.0640 0x0cfc NwlnkFlt - ok 10:20:19.0656 0x0cfc [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 10:20:19.0656 0x0cfc NwlnkFwd - ok 10:20:19.0671 0x0cfc [ 8B8B1BE2DBA4025DA6786C645F77F123, E47D5EED2F3AF85E2332C325DA80AEF2C4EC989E38A175194EBBFA967BA8BF81 ] NwlnkIpx C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys 10:20:19.0687 0x0cfc NwlnkIpx - ok 10:20:19.0687 0x0cfc [ 56D34A67C05E94E16377C60609741FF8, ABE48D3E7D38DB20E9D4884FC6FE42FAE0C5FAFD3AC86F1E585A4BB17C6F09C5 ] NwlnkNb C:\WINDOWS\system32\DRIVERS\nwlnknb.sys 10:20:19.0703 0x0cfc NwlnkNb - ok 10:20:19.0703 0x0cfc [ C0BB7D1615E1ACBDC99757F6CEAF8CF0, 899905C0EB182ABCDAE0D0D749C0BC39CD231B9FAEE733D5DFDAE86EB8BC755B ] NwlnkSpx C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys 10:20:19.0718 0x0cfc NwlnkSpx - ok 10:20:19.0750 0x0cfc [ 38A88B31CF25C2AF0C98E75144F5560E, F025BE763DE19BE950781F6175C410BE6E2AE88F9AEAF8E4DDD8D05E380E23F2 ] NwSapAgent C:\WINDOWS\System32\ipxsap.dll 10:20:19.0750 0x0cfc NwSapAgent - ok 10:20:19.0812 0x0cfc [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 10:20:19.0812 0x0cfc ose - ok 10:20:19.0828 0x0cfc [ 2D4CDAEBCED17743AA9E25D3016DC229, F5D138644F114861DD045975136904325304081221B85FB2C151CD9A411097CE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys 10:20:19.0828 0x0cfc Parport - ok 10:20:19.0843 0x0cfc [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys 10:20:19.0859 0x0cfc PartMgr - ok 10:20:19.0859 0x0cfc [ 453EC2C2A20A1382F564541918520EEB, 797ED3127131BAE255AE793B8327D0E3BB6D054421F8D90511B315937BEBB6B0 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys 10:20:19.0859 0x0cfc ParVdm - ok 10:20:19.0875 0x0cfc [ 6862C69168D787B85A7D95CCD33C694E, 6B7912156A0BAB6AED4F00FE37034488D10646B17435E86DE0D7DBD5951E8FB9 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys 10:20:19.0890 0x0cfc PCI - ok 10:20:19.0890 0x0cfc PCIDump - ok 10:20:19.0906 0x0cfc [ 548CF2D6369EAE441A4C6BAA75BC4F0A, C659E9E8A16DD4CBEC97FFB50784D8585E02F20FA360D2280D322D975F00A994 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys 10:20:19.0906 0x0cfc PCIIde - ok 10:20:19.0953 0x0cfc [ 8DB27F1AE9593C94095485305A583862, 4FDB24BA306944743B50C3B0E39EFC75BD196A4DA1B0A3C859B974E8599B5128 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys 10:20:19.0953 0x0cfc Pcmcia - ok 10:20:19.0968 0x0cfc PDCOMP - ok 10:20:19.0968 0x0cfc PDFRAME - ok 10:20:19.0968 0x0cfc PDRELI - ok 10:20:19.0984 0x0cfc PDRFRAME - ok 10:20:19.0984 0x0cfc perc2 - ok 10:20:20.0000 0x0cfc perc2hib - ok 10:20:20.0031 0x0cfc [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] PlugPlay C:\WINDOWS\system32\services.exe 10:20:20.0046 0x0cfc PlugPlay - ok 10:20:20.0078 0x0cfc [ 205E1B699FD3F2F9B036EEA2EC30C620, 9D5C8009BC3F6F76438FC82C3DAAA3E9CC87F74CDE841A0ADD9EF00E98DB6890 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe 10:20:20.0078 0x0cfc PnkBstrA - ok 10:20:20.0093 0x0cfc [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] PolicyAgent C:\WINDOWS\system32\lsass.exe 10:20:20.0109 0x0cfc PolicyAgent - ok 10:20:20.0125 0x0cfc [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys 10:20:20.0125 0x0cfc PptpMiniport - ok 10:20:20.0140 0x0cfc [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] ProtectedStorage C:\WINDOWS\system32\lsass.exe 10:20:20.0140 0x0cfc ProtectedStorage - ok 10:20:20.0156 0x0cfc [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys 10:20:20.0156 0x0cfc PSched - ok 10:20:20.0171 0x0cfc [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys 10:20:20.0171 0x0cfc Ptilink - ok 10:20:20.0171 0x0cfc ql1080 - ok 10:20:20.0187 0x0cfc Ql10wnt - ok 10:20:20.0187 0x0cfc ql12160 - ok 10:20:20.0203 0x0cfc ql1240 - ok 10:20:20.0203 0x0cfc ql1280 - ok 10:20:20.0234 0x0cfc [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 10:20:20.0265 0x0cfc RasAcd - ok 10:20:20.0312 0x0cfc [ BC22C5E1238D4D36D65679E249C483C3, 9B01F8D9541F3558F7D6A3E079580EC87DC748EFCA43E10682C83953B8885C3B ] RasAuto C:\WINDOWS\System32\rasauto.dll 10:20:20.0328 0x0cfc RasAuto - ok 10:20:20.0343 0x0cfc [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 10:20:20.0343 0x0cfc Rasl2tp - ok 10:20:20.0375 0x0cfc [ 0C392E397B8D34AAAF19EC6119CBB788, 843C0B52A92A7F62E0D503A62FE56A020655AD98BC287AE8669ACE93B6A02ECA ] RasMan C:\WINDOWS\System32\rasmans.dll 10:20:20.0406 0x0cfc RasMan - ok 10:20:20.0421 0x0cfc [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 10:20:20.0421 0x0cfc RasPppoe - ok 10:20:20.0437 0x0cfc [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys 10:20:20.0437 0x0cfc Raspti - ok 10:20:20.0453 0x0cfc [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 10:20:20.0468 0x0cfc Rdbss - ok 10:20:20.0484 0x0cfc [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 10:20:20.0484 0x0cfc RDPCDD - ok 10:20:20.0515 0x0cfc [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys 10:20:20.0531 0x0cfc RDPWD - ok 10:20:20.0546 0x0cfc [ F83907A9A038DB2E35329B039628D293, 683D478C9EC30102BB5A4CB6D200C4772C8BF5DF7BFC757AFA0B5B44DA1F8961 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe 10:20:20.0578 0x0cfc RDSessMgr - ok 10:20:20.0593 0x0cfc [ E0C7BBD18040B58651BAC700C804861D, 91AE8D3C7D9FB391725664996479DAFDA91CB91C31E446BFE9ECF0C4FC86BE2F ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys 10:20:20.0593 0x0cfc redbook - ok 10:20:20.0625 0x0cfc [ B3F57E6115BCD4DBADE9874F300655E3, DFF4D6AEA1B22C531216ED5A94B01C88D2C61D0EC3BB34744B4572C672EF89E6 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 10:20:20.0656 0x0cfc RemoteAccess - ok 10:20:20.0656 0x0cfc [ 6BC4D5A70F46EA27DDC14E5414C862A5, D78921FF982CFF26A012A413F19331AACA4F66E53D38C626FE712B4108744E31 ] RpcLocator C:\WINDOWS\system32\locator.exe 10:20:20.0671 0x0cfc RpcLocator - ok 10:20:20.0703 0x0cfc [ A37311D9D628C1042A2836731787F0F3, 2A4380021407E84FAD47A2D5B02D37F1F17E8E2B1433710208FFCC70D9ECB5AA ] RpcSs C:\WINDOWS\system32\rpcss.dll 10:20:20.0718 0x0cfc RpcSs - ok 10:20:20.0765 0x0cfc [ 9ACEE3313020A01235336C2A483AFD1A, 87DD3B037FB80DC5BB9F3E335C9A0F3926481012EF9A8DE2CEF53C5386F69009 ] RSVP C:\WINDOWS\system32\rsvp.exe 10:20:20.0781 0x0cfc RSVP - ok 10:20:20.0984 0x0cfc [ B916D4C11EB16F6F5B91360E78DADFF7, F47E9241C4445EB131D2CDCD65ED54890A68951F4DC41BF4039EAA6675067D68 ] RTHDMIAzAudService C:\WINDOWS\system32\drivers\RtKHDMI.sys 10:20:21.0171 0x0cfc RTHDMIAzAudService - ok 10:20:21.0218 0x0cfc [ 71439E5BF872A91DB450641BE445F51C, 7157CBC9D45CAB0070CEA5F67489E4F9B7360761A8BBA15E5F1E4489E75AFEAE ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 10:20:21.0234 0x0cfc RTLE8023xp - ok 10:20:21.0250 0x0cfc [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] SamSs C:\WINDOWS\system32\lsass.exe 10:20:21.0250 0x0cfc SamSs - ok 10:20:21.0265 0x0cfc [ C6F479218E94896738C06AF5BA6AB3D3, 4077BDDE1A44E2A415FF76A8BB3EAD226D7A29696C0218E81381B81E750CD0BA ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe 10:20:21.0281 0x0cfc SCardSvr - ok 10:20:21.0312 0x0cfc [ DD73C11A5C4D14945846384B90A61A4B, C3C6BD62FB976E27C9E2C4C239D01B5458B7D270E9563A90EFBC9801B5DC55EA ] Schedule C:\WINDOWS\system32\schedsvc.dll 10:20:21.0343 0x0cfc Schedule - ok 10:20:21.0375 0x0cfc [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys 10:20:21.0375 0x0cfc Secdrv - ok 10:20:21.0406 0x0cfc [ 2AAD9026648120FFFE2A8D871BB2BBC7, 8F9B35717CBE8B1C30FF15992DA8A857470A96F1A043CDA42CB89E4C6723B4A4 ] seclogon C:\WINDOWS\System32\seclogon.dll 10:20:21.0421 0x0cfc seclogon - ok 10:20:21.0437 0x0cfc [ 9D01E29D59723EB73B72107B208DAFE6, D334E807C6B41CF08EB64DCF8B2C8F68FA553971130FAB2E14C3EEE4D3B968F7 ] SENS C:\WINDOWS\system32\sens.dll 10:20:21.0453 0x0cfc SENS - ok 10:20:21.0484 0x0cfc [ 0F29512CCD6BEAD730039FB4BD2C85CE, 4F98AE390D1B14A755700DD6CEFB9CF921F0404AF2145D2D7E5F52394F87C6A5 ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys 10:20:21.0484 0x0cfc serenum - ok 10:20:21.0500 0x0cfc [ D07B02F88165E69B9F17162CF592C8A6, B494941FC05FC2439F54D4D999B1A65F9709BC296D5AC470C8F73ACFC5DC4729 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys 10:20:21.0515 0x0cfc Serial - ok 10:20:21.0531 0x0cfc [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys 10:20:21.0531 0x0cfc Sfloppy - ok 10:20:21.0578 0x0cfc [ DA5C015911F68F22ED821E9EE49AB233, 53694B0E70F77C775CE936F5DB458F724F051314704B6F69E5C2728180F0DC2C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 10:20:21.0609 0x0cfc SharedAccess - ok 10:20:21.0625 0x0cfc [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 10:20:21.0640 0x0cfc ShellHWDetection - ok 10:20:21.0640 0x0cfc Simbad - ok 10:20:21.0687 0x0cfc [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 10:20:21.0703 0x0cfc SkypeUpdate - ok 10:20:21.0718 0x0cfc Sparrow - ok 10:20:21.0734 0x0cfc [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys 10:20:21.0734 0x0cfc splitter - ok 10:20:21.0765 0x0cfc [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler C:\WINDOWS\system32\spoolsv.exe 10:20:21.0781 0x0cfc Spooler - ok 10:20:21.0796 0x0cfc [ EB032822BE406EF220D546DDFFCF0002, 916299B409925AB7326CB5F744799B34FD08CA4C4B447215DA5060FF446FEEBE ] sr C:\WINDOWS\system32\DRIVERS\sr.sys 10:20:21.0796 0x0cfc sr - ok 10:20:21.0828 0x0cfc [ 316D0E66074AE4CDE641C50D3A1C5148, 8429F815AFB4B39F6C1C56FB1CA009E5338C1467A4A02DD8E7E35BADBB8D5221 ] srservice C:\WINDOWS\system32\srsvc.dll 10:20:21.0859 0x0cfc srservice - ok 10:20:21.0890 0x0cfc [ 47DDFC2F003F7F9F0592C6874962A2E7, 17C643BD4EB09B5666FE41817DC785BE04A6E491CE79E8E5A702CDBD98E1BDD7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys 10:20:22.0000 0x0cfc Srv - ok 10:20:22.0031 0x0cfc [ 2C0B1224AA36B4CA1753302BAA855882, F8C90ECBF5BD7C3984E7C82EB00042DFD85A62F263C0205E6790205B6D64E101 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 10:20:22.0046 0x0cfc SSDPSRV - ok 10:20:22.0109 0x0cfc [ 5EE6503C932CB79B493E4B4D8E23D219, 51DC712611E21F5CF3ED2322A146E167769D082E826B82601471CF782090E8B5 ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys 10:20:22.0125 0x0cfc ssudmdm - ok 10:20:22.0281 0x0cfc [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe 10:20:22.0406 0x0cfc ss_conn_service - ok 10:20:22.0437 0x0cfc [ 41508EA375C97DC2B56E5F1AFC067187, 94D8D49AE3634E861DE501E72813C5320F059C49CC61FA01B2867C99E8B36DB4 ] stisvc C:\WINDOWS\system32\wiaservc.dll 10:20:22.0515 0x0cfc stisvc - ok 10:20:22.0546 0x0cfc [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys 10:20:22.0546 0x0cfc swenum - ok 10:20:22.0578 0x0cfc [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys 10:20:22.0578 0x0cfc swmidi - ok 10:20:22.0578 0x0cfc SwPrv - ok 10:20:22.0593 0x0cfc symc810 - ok 10:20:22.0593 0x0cfc symc8xx - ok 10:20:22.0609 0x0cfc sym_hi - ok 10:20:22.0609 0x0cfc sym_u3 - ok 10:20:22.0640 0x0cfc [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys 10:20:22.0656 0x0cfc sysaudio - ok 10:20:22.0687 0x0cfc [ E42048198518F9162027A9984CBB7B5C, 2634DE2B1AE9D856966F40BFB41AD951A41E11C557C4B27E61CFF63288B53D52 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe 10:20:22.0718 0x0cfc SysmonLog - ok 10:20:22.0765 0x0cfc [ 2340E6977548038C88E39A9ECBB3FADC, B8992F5E0689B307B8CC162032B398950FB07C4B4EF997431F7B344351406586 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 10:20:22.0796 0x0cfc TapiSrv - ok 10:20:22.0828 0x0cfc [ 9AEFA14BD6B182D61E3119FA5F436D3D, EA29E49434585409272E7901AF89771FE9D6E911A7DC44AB3C7020CFF8A44552 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys 10:20:22.0859 0x0cfc Tcpip - ok 10:20:22.0875 0x0cfc [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys 10:20:22.0890 0x0cfc TDPIPE - ok 10:20:22.0921 0x0cfc [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys 10:20:22.0953 0x0cfc TDTCP - ok 10:20:22.0968 0x0cfc [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys 10:20:23.0031 0x0cfc TermDD - ok 10:20:23.0093 0x0cfc [ 52E0505408EDD4AB5CCC7F83B67B4299, 93DBA3282025C81DC43D4B43861A6CB30C9557CD0108D4D7E0C3B1269699CF22 ] TermService C:\WINDOWS\System32\termsrv.dll 10:20:23.0140 0x0cfc TermService - ok 10:20:23.0187 0x0cfc [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] Themes C:\WINDOWS\System32\shsvcs.dll 10:20:23.0203 0x0cfc Themes - ok 10:20:23.0203 0x0cfc TosIde - ok 10:20:23.0218 0x0cfc [ 9E70EB419D7785C286DC458A019BAB9B, 3901C6B9C9C197FED9C1039F2EBE0C5ACE240512ABBFECB388CAD201CE032760 ] TrkWks C:\WINDOWS\system32\trkwks.dll 10:20:23.0281 0x0cfc TrkWks - ok 10:20:23.0312 0x0cfc [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys 10:20:23.0312 0x0cfc Udfs - ok 10:20:23.0312 0x0cfc ultra - ok 10:20:23.0343 0x0cfc [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys 10:20:23.0359 0x0cfc Update - ok 10:20:23.0406 0x0cfc [ E96A6BAEE0B2A14A38B45830D6E30697, 12314B1D96E025718F965C091E3CAD2865EDDAACA2E60A1A0DAF25630AE66B72 ] upnphost C:\WINDOWS\System32\upnphost.dll 10:20:23.0437 0x0cfc upnphost - ok 10:20:23.0468 0x0cfc [ EB90E28B28541EC845E5345609355CA7, 60C8DF04EB5839AB1B8625C385F4B2089C63FE613463026F779B331D9BC4D4D6 ] UPS C:\WINDOWS\System32\ups.exe 10:20:23.0484 0x0cfc UPS - ok 10:20:23.0515 0x0cfc [ 65898A183FBF1D1F7759D5CCB364DCD4, 85E823123FDB4CA5F8255064E22A444627999055EC3419DFD001371893F36AB9 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys 10:20:23.0546 0x0cfc usbaudio - ok 10:20:23.0578 0x0cfc [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys 10:20:23.0578 0x0cfc usbccgp - ok 10:20:23.0593 0x0cfc [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys 10:20:23.0609 0x0cfc usbehci - ok 10:20:23.0640 0x0cfc [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys 10:20:23.0656 0x0cfc usbhub - ok 10:20:23.0671 0x0cfc [ A717C8721046828520C9EDF31288FC00, 1530BBE832EDBB0974AD89D723A03FF7A0094B368992D73C2C3E62A181DF1E0A ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys 10:20:23.0687 0x0cfc usbprint - ok 10:20:23.0718 0x0cfc [ F8EDE2B6928970DCE3D5614C27D9E7F6, 6E5EBBC8B70C1D593634DAF0C190DEADFDA18C3CBC8F552A76F156F3869EF05B ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys 10:20:23.0734 0x0cfc usbscan - ok 10:20:23.0750 0x0cfc [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 10:20:23.0765 0x0cfc USBSTOR - ok 10:20:23.0765 0x0cfc [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys 10:20:23.0781 0x0cfc usbuhci - ok 10:20:23.0796 0x0cfc [ B4D7B7AD8A9F7C063C5CC3E2C1A0724E, CFA47A71403419CA7C94333B4F7766DFC97C5DCDBC3AD1B106044B93C979A5C5 ] usb_rndisx C:\WINDOWS\system32\DRIVERS\usb8023x.sys 10:20:23.0812 0x0cfc usb_rndisx - ok 10:20:23.0812 0x0cfc [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave C:\WINDOWS\System32\drivers\vga.sys 10:20:23.0828 0x0cfc VgaSave - ok 10:20:23.0828 0x0cfc ViaIde - ok 10:20:23.0843 0x0cfc [ 56B191AC5FC0DF219949C95A6C87AFE7, 5DCD42BD686869B394CFB9EFD727DCEEEAE239326DDE3D1655C456FCAE949D9F ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys 10:20:23.0859 0x0cfc VolSnap - ok 10:20:23.0906 0x0cfc [ 7F2D7BFFC4554E1C742DD3629FD1FB1B, 4BFFC8A67F98AF69039DF0AFF1FDA11CFAD6464066E8ED92090D48392C43B6ED ] VSS C:\WINDOWS\System32\vssvc.exe 10:20:23.0953 0x0cfc VSS - ok 10:20:23.0984 0x0cfc [ A672CA3981352F8E9C30FEA056E80A62, 9AD34EFEB11EFEB234A246639FADF036F49FC67E542C4DE78D7C01E75BC62B59 ] W32Time C:\WINDOWS\system32\w32time.dll 10:20:24.0015 0x0cfc W32Time - ok 10:20:24.0031 0x0cfc [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 10:20:24.0046 0x0cfc Wanarp - ok 10:20:24.0062 0x0cfc WDICA - ok 10:20:24.0078 0x0cfc [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys 10:20:24.0093 0x0cfc wdmaud - ok 10:20:24.0125 0x0cfc [ 81FB88B975E25D76E00B69879D8A434C, 2340CEE200CA3F0A546F88AAD3AFDCFD0805DB027E8480B4280D92E14F6C1F69 ] WebClient C:\WINDOWS\System32\webclnt.dll 10:20:24.0140 0x0cfc WebClient - ok 10:20:24.0265 0x0cfc [ 70C22297534A88B0AD0568900AB5A6D9, 2457D9B21CD8633D6A59FC053B70B9282A64066789EC020A9F2C937141E95C61 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 10:20:24.0281 0x0cfc winmgmt - ok 10:20:24.0343 0x0cfc [ 845AF1BA23C8D5E64DEF61BCC441604C, 206EE7A7C3F4D9496F742CCB84718F556ECB4BA2A95FE7E0CDF3A003FFBE4597 ] WinRing0_1_2_0 C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys 10:20:24.0343 0x0cfc WinRing0_1_2_0 - ok 10:20:24.0390 0x0cfc [ 051B1BDECD6DEE18C771B5D5EC7F044D, E9D4870C7E4E6119B274CF788D564BE9C48EA63790F5D6A2E987EB6DF7C93200 ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll 10:20:24.0406 0x0cfc WmdmPmSN - ok 10:20:24.0437 0x0cfc [ A2B12D80A1670511B047A7D8BB647598, BDE141A77034608D926624583D252650D01B64EC2B3E8156A61D735C79E2A0E6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe 10:20:24.0453 0x0cfc WmiApSrv - ok 10:20:24.0593 0x0cfc [ 9FBD45F6726D59F9D2A31E6552DF3A04, EBA9178859EE07B12011A3C3B1252B5FABFFEC9AEEB9DADBDB1285FB9829715D ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe 10:20:24.0718 0x0cfc WMPNetworkSvc - ok 10:20:24.0765 0x0cfc [ C60DC16D4E406810FAD54B98DC92D5EC, 43E7DF323BBD7C889CAD078176E239319A40EE4BEBC7BD753012B94CF5E48551 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys 10:20:24.0765 0x0cfc WpdUsb - ok 10:20:24.0796 0x0cfc [ 6ABE6E225ADB5A751622A9CC3BC19CE8, 4061C5D0F051DFF1730E2A3BFC1CCA97B29602FC50F10F6B44D93B0D28F42024 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys 10:20:24.0812 0x0cfc WS2IFSL - ok 10:20:24.0843 0x0cfc [ B6669F49D42E09BC0F9889FAA0F3336D, B6147A60F763E562E26495A6ACAE759492A52AE3BEFEA4BF40B8874E4CF069F1 ] wscsvc C:\WINDOWS\system32\wscsvc.dll 10:20:24.0875 0x0cfc wscsvc - ok 10:20:24.0890 0x0cfc [ 04550D5EB7EE82C115DB547C01DF09FD, 6A4D1E5F4E1C641B47BB48489D4205531597E942E02ECD75BCFA856F60A938B0 ] wuauserv C:\WINDOWS\system32\wuauserv.dll 10:20:24.0906 0x0cfc wuauserv - ok 10:20:24.0937 0x0cfc [ F15FEAFFFBB3644CCC80C5DA584E6311, 79B3E9AF35976CE49921E9BEA3BA3B4A8AF762FD3F284B62954038B5FFB32471 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys 10:20:24.0953 0x0cfc WudfPf - ok 10:20:24.0984 0x0cfc [ 28B524262BCE6DE1F7EF9F510BA3985B, AEFF02B899801A63CBB262757C3D4369E38BFF0690BD085DE60E873DFBE3C3F4 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys 10:20:25.0000 0x0cfc WudfRd - ok 10:20:25.0015 0x0cfc [ 05231C04253C5BC30B26CBAAE680ED89, 5C03C2D7E0B573646D32F4093E2FF2C3BA391C39F5BA37D67F69D38E357FCC3D ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll 10:20:25.0093 0x0cfc WudfSvc - ok 10:20:25.0156 0x0cfc [ C2842273AAA77AC031EDB87FA19A2147, 8542392E337C543BCD9EDC7A15DC6E8DE8E9B8041CC7A8D707217C9FF0446882 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll 10:20:25.0250 0x0cfc WZCSVC - ok 10:20:25.0343 0x0cfc [ 24ED6935771359A5AEF1FE8BF0C56F39, F0C3B781853714F48DE4F42533A7236CE11076208F190E79500F8A77C9CF9849 ] xmlprov C:\WINDOWS\System32\xmlprov.dll 10:20:25.0390 0x0cfc xmlprov - ok 10:20:25.0406 0x0cfc ================ Scan global =============================== 10:20:25.0421 0x0cfc [ 65C782F8CFC1BEBCC58E1532F44B6408, D5EB7357F37AC9CEF96BC1BCACE765B2897E502D699E64145EFA4DD62BCCE80B ] C:\WINDOWS\system32\basesrv.dll 10:20:25.0484 0x0cfc [ F2515CEDFA83C225E126117835D7BF6A, FFDDBC97E0024DF9E05D199CABA0B0A0F0CC7508D477D7C6E2AAD8D505174810 ] C:\WINDOWS\system32\winsrv.dll 10:20:25.0578 0x0cfc [ F2515CEDFA83C225E126117835D7BF6A, FFDDBC97E0024DF9E05D199CABA0B0A0F0CC7508D477D7C6E2AAD8D505174810 ] C:\WINDOWS\system32\winsrv.dll 10:20:25.0640 0x0cfc [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] C:\WINDOWS\system32\services.exe 10:20:25.0640 0x0cfc [ Global ] - ok 10:20:25.0640 0x0cfc ================ Scan MBR ================================== 10:20:25.0656 0x0cfc [ 32052574BF9F325AE309ABC7BFD04460 ] \Device\Harddisk0\DR0 10:20:28.0109 0x0cfc \Device\Harddisk0\DR0 - ok 10:20:28.0109 0x0cfc ================ Scan VBR ================================== 10:20:28.0125 0x0cfc [ B27A1B01325196F7BCE8B10A532C5339 ] \Device\Harddisk0\DR0\Partition1 10:20:28.0125 0x0cfc \Device\Harddisk0\DR0\Partition1 - ok 10:20:28.0156 0x0cfc [ EB4812F031081A6283C5E6E79F561306 ] \Device\Harddisk0\DR0\Partition2 10:20:28.0187 0x0cfc \Device\Harddisk0\DR0\Partition2 - ok 10:20:28.0203 0x0cfc [ 9BA8266FB77446BEB325EEDB58C759E1 ] \Device\Harddisk0\DR0\Partition3 10:20:28.0312 0x0cfc \Device\Harddisk0\DR0\Partition3 - ok 10:20:28.0312 0x0cfc ================ Scan generic autorun ====================== 10:20:28.0437 0x0cfc [ 649B0B848C29E3755CCB0B213233516B, 017E227A999AD57D2965B2FA7D7953A941DF97F2156DFA26BE7AC8F6A9DADAB0 ] C:\Program Files\Beniamin\tguard.exe 10:20:28.0453 0x0cfc tguard - ok 10:20:28.0921 0x0cfc [ 65C6AA484AD2287D20541C7735989437, 1842787640391F4A4CD9ED0A531298A61F4B2FB09BEC98FEE256313AFB458EDB ] C:\Program Files\AVAST Software\Avast\AvastUI.exe 10:20:29.0359 0x0cfc AvastUI.exe - ok 10:20:29.0437 0x0cfc [ 1BD41EDA5B869AFC99895C39A8DE36E1, B532692D7E082A8AE60A199951F82C2E0EE0BAEA3A61F9BAE59E955C914FA3F0 ] C:\WINDOWS\system32\CTFMON.EXE 10:20:29.0437 0x0cfc CTFMON.EXE - ok 10:20:29.0453 0x0cfc [ 1BD41EDA5B869AFC99895C39A8DE36E1, B532692D7E082A8AE60A199951F82C2E0EE0BAEA3A61F9BAE59E955C914FA3F0 ] C:\WINDOWS\system32\CTFMON.EXE 10:20:29.0453 0x0cfc CTFMON.EXE - ok 10:20:29.0500 0x0cfc [ 9C59BA09559E4002C18B8C139BBDF37D, EC63D01E8FB034B58176E1459315A2C518BCEF069B507C27F0830BD6133BDDAB ] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE 10:20:29.0515 0x0cfc EPSON SX210 Series - ok 10:20:29.0578 0x0cfc [ F52D27F779736DD58C0342B723591DDB, E065E2AC6DA963D2267AB835877311572D073DEB8C4E4408170840E575DF3A3F ] C:\Program Files\Ares\Ares.exe 10:20:29.0609 0x0cfc ares - ok 10:20:29.0734 0x0cfc [ 2E27F3B65C71B1F8C73A2B609D483956, FE2FDC2568C8C3BE815E3D79E7271436B0143185145570F5ADD4FB3D2D50210D ] C:\Program Files\Gadu-Gadu\gg.exe 10:20:29.0843 0x0cfc Gadu-Gadu - ok 10:20:30.0093 0x0cfc [ 2E4EE47FBD9BB663A5220DBC38579986, 264A48ADA13FEC6F49F34C3118ABFFEEB569B631E9EE35168FE19DE78AF9C7C8 ] C:\Program Files\CCleaner\CCleaner.exe 10:20:30.0281 0x0cfc CCleaner Monitoring - ok 10:20:30.0312 0x0cfc [ 1BD41EDA5B869AFC99895C39A8DE36E1, B532692D7E082A8AE60A199951F82C2E0EE0BAEA3A61F9BAE59E955C914FA3F0 ] C:\WINDOWS\system32\ctfmon.exe 10:20:30.0312 0x0cfc ctfmon.exe - ok 10:20:30.0515 0x0cfc [ 229F9A301B7B44C0E551C83629222B5E, 4688CA0320BF01E5D1E27A4B7BA909B83955FF6652E7356C2B1B7BA26222FA6C ] D:\daj\BitTorrent.exe 10:20:30.0578 0x0cfc BitTorrent - ok 10:20:30.0593 0x0cfc [ 1BD41EDA5B869AFC99895C39A8DE36E1, B532692D7E082A8AE60A199951F82C2E0EE0BAEA3A61F9BAE59E955C914FA3F0 ] C:\WINDOWS\system32\CTFMON.EXE 10:20:30.0593 0x0cfc CTFMON.EXE - ok 10:20:30.0593 0x0cfc Waiting for KSN requests completion. In queue: 159 10:20:31.0593 0x0cfc Waiting for KSN requests completion. In queue: 159 10:20:32.0593 0x0cfc Waiting for KSN requests completion. In queue: 159 10:20:33.0593 0x0cfc Waiting for KSN requests completion. In queue: 159 10:20:34.0593 0x0cfc Waiting for KSN requests completion. In queue: 159 10:20:35.0640 0x0cfc AV detected via SS1: avast! Antivirus, 5.0.167905450, enabled, updated 10:20:35.0640 0x0cfc FW detected via SS1: avast! Antivirus, 5.0.167905450, disabled 10:20:35.0640 0x0cfc Win FW state via NFM: enabled 10:20:48.0593 0x0cfc ============================================================ 10:20:48.0593 0x0cfc Scan finished 10:20:48.0593 0x0cfc ============================================================ 10:20:48.0609 0x0cec Detected object count: 0 10:20:48.0609 0x0cec Actual detected object count: 0