Used windows defender offline now windows won't start

[empresssoul]

so open notepad on the clean computer?

 

[cottonball]

empresssoul,

Please await my instructions before you do anything else!

Do not run the script above.

Thanks!

 

[VistaKing]

Yes . Sorry I wasn't very clear .

 

[cottonball]

empresssoul,

On the clean computer, please open: Notepad
Copy/paste all the contents of the quote box below to Notepad (do not copy the word 'Quote').
Save it on the flash drive as: fixlist.txt

start
C:\Windows\svchost.exe
TDL4: custom:26000022
ATTENTION: Malware custom entry on BCD on drive e: detected.
cmd: bootrec /fixmbr
cmd: bootrec /fixboot
end

WARNING: This script is written specifically for empresssoul, for use on this particular computer.
Running the script on another computer may cause damage to the Operating System.

Now, in the infected computer, plug in the USB flash drive, and enter System Recovery Options as you did before.

Run FRST again, but this time press the Fix button just once, and wait.

When done, the tool makes a log on the flash drive. This time it is called: Fixlog.txt

Try to boot the computer into normal mode and post back on what happens.

Also, please post Fixlog.txt in your reply.


If the computer still does not boot into Windows, just hang in there.

 

[VistaKing]

Cottonball

Wouldn't it be "ATTENTION: Malware custom entry on BCD on drive e: detected"

 

[empresssoul]

It worked....I am on my desktop!
when I selected Internet explorer it won't open, but google chrome did, also my micro secur Essen is off and when attempting to turn on it comes back with an error message

 

[cottonball]

Great job, empresssoul!!
You are very good at applying instructions.

My bad on: Malware custom entry on BCD on drive e: detected. (Your drive was not: y)
However, it does not matter, since that is not a crucial entry.
The rest of the entries is what matters.



Now, let's see where the damage is, and give it a whirl.

Please press on with Downloading Farbar Service Scanner
Save to the Desktop

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
• Press: Scan
• FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

 

[empresssoul]

Farbar Service Scanner Version: 14-04-2013
Ran by Empress (administrator) on 29-04-2013 at 22:51:23
Running from "C:\Users\Empress\Downloads"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

[cottonball]

Not the results expected...

When you open IE, what happens? Does it just flash and close, or, does it give you an error message?
If so, describe.

On MSE, what is the error message you are getting?

 

[cottonball]

Also, please go to the TDSSKiller Download
Select the .exe version
Double-click on TDSSKiller.exe to run the program.


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan

•If a suspicious object is detected by this program, the default action is Skip. Leave this action as is, and click on: Continue
•If malicious objects are found, they show in the Scan results.
Ensure Cure (the default action) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool creates a log on the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_29.04.2013_15.31.43_log.txt


Please post or attach the TDSSKiller log in your reply.

 

[empresssoul]

IE just flashes and closes. I am not sure what version.
When I saw MSE want running i reinstalled. it currently shows as active and protected when i select it from start menu

 

[VistaKing]

empresssoul

Do what Cottonball has on post #50

 

[empresssoul]

23:31:04.0828 6724 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
23:31:05.0156 6724 ============================================================
23:31:05.0156 6724 Current date / time: 2013/04/29 23:31:05.0156
23:31:05.0156 6724 SystemInfo:
23:31:05.0156 6724
23:31:05.0156 6724 OS Version: 6.1.7601 ServicePack: 1.0
23:31:05.0156 6724 Product type: Workstation
23:31:05.0156 6724 ComputerName: EMPRESS-PC
23:31:05.0156 6724 UserName: Empress
23:31:05.0156 6724 Windows directory: C:\Windows
23:31:05.0156 6724 System windows directory: C:\Windows
23:31:05.0156 6724 Running under WOW64
23:31:05.0156 6724 Processor architecture: Intel x64
23:31:05.0156 6724 Number of processors: 2
23:31:05.0156 6724 Page size: 0x1000
23:31:05.0156 6724 Boot type: Normal boot
23:31:05.0156 6724 ============================================================
23:31:05.0718 6724 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:31:05.0740 6724 ============================================================
23:31:05.0740 6724 \Device\Harddisk0\DR0:
23:31:05.0741 6724 MBR partitions:
23:31:05.0741 6724 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1D9F000
23:31:05.0741 6724 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1DB3000, BlocksNum 0x72953000
23:31:05.0741 6724 ============================================================
23:31:05.0786 6724 C: <-> \Device\Harddisk0\DR0\Partition2
23:31:05.0786 6724 ============================================================
23:31:05.0787 6724 Initialize success
23:31:05.0787 6724 ============================================================
23:31:28.0089 4840 ============================================================
23:31:28.0089 4840 Scan started
23:31:28.0089 4840 Mode: Manual; TDLFS;
23:31:28.0090 4840 ============================================================
23:31:28.0325 4840 ================ Scan system memory ========================
23:31:28.0325 4840 System memory - ok
23:31:28.0326 4840 ================ Scan services =============================
23:31:28.0439 4840 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
23:31:28.0441 4840 1394ohci - ok
23:31:28.0477 4840 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
23:31:28.0479 4840 ACPI - ok
23:31:28.0488 4840 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
23:31:28.0488 4840 AcpiPmi - ok
23:31:28.0580 4840 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:31:28.0581 4840 AdobeARMservice - ok
23:31:28.0702 4840 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:31:28.0704 4840 AdobeFlashPlayerUpdateSvc - ok
23:31:28.0745 4840 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
23:31:28.0749 4840 adp94xx - ok
23:31:28.0761 4840 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
23:31:28.0763 4840 adpahci - ok
23:31:28.0773 4840 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
23:31:28.0775 4840 adpu320 - ok
23:31:28.0806 4840 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:31:28.0807 4840 AeLookupSvc - ok
23:31:28.0857 4840 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
23:31:28.0861 4840 AFD - ok
23:31:28.0868 4840 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
23:31:28.0869 4840 agp440 - ok
23:31:28.0884 4840 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
23:31:28.0885 4840 ALG - ok
23:31:28.0890 4840 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
23:31:28.0891 4840 aliide - ok
23:31:28.0906 4840 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
23:31:28.0907 4840 amdide - ok
23:31:28.0912 4840 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
23:31:28.0913 4840 AmdK8 - ok
23:31:28.0918 4840 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
23:31:28.0919 4840 AmdPPM - ok
23:31:28.0934 4840 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
23:31:28.0934 4840 amdsata - ok
23:31:28.0962 4840 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
23:31:28.0962 4840 amdsbs - ok
23:31:28.0987 4840 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
23:31:28.0988 4840 amdxata - ok
23:31:29.0038 4840 [ 59D01FA91962C9C1E9B4022B2D3B46DB ] AppHostSvc C:\Windows\system32\inetsrv\apphostsvc.dll
23:31:29.0039 4840 AppHostSvc - ok
23:31:29.0070 4840 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
23:31:29.0071 4840 AppID - ok
23:31:29.0075 4840 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
23:31:29.0076 4840 AppIDSvc - ok
23:31:29.0104 4840 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
23:31:29.0105 4840 Appinfo - ok
23:31:29.0180 4840 [ 7EF47644B74EBE721CC32211D3C35E76 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:31:29.0181 4840 Apple Mobile Device - ok
23:31:29.0188 4840 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
23:31:29.0189 4840 arc - ok
23:31:29.0196 4840 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
23:31:29.0197 4840 arcsas - ok

 

[empresssoul]

23:31:29.0291 4840 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:31:29.0291 4840 aspnet_state - ok
23:31:29.0318 4840 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:31:29.0318 4840 AsyncMac - ok
23:31:29.0330 4840 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
23:31:29.0331 4840 atapi - ok
23:31:29.0362 4840 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:31:29.0367 4840 AudioEndpointBuilder - ok
23:31:29.0387 4840 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
23:31:29.0390 4840 AudioSrv - ok
23:31:29.0427 4840 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
23:31:29.0429 4840 AxInstSV - ok
23:31:29.0461 4840 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
23:31:29.0465 4840 b06bdrv - ok
23:31:29.0500 4840 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
23:31:29.0502 4840 b57nd60a - ok
23:31:29.0512 4840 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
23:31:29.0513 4840 BDESVC - ok
23:31:29.0542 4840 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
23:31:29.0542 4840 Beep - ok
23:31:29.0577 4840 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
23:31:29.0581 4840 BFE - ok
23:31:29.0641 4840 BHDrvx64 - ok
23:31:29.0679 4840 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
23:31:29.0687 4840 BITS - ok
23:31:29.0710 4840 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
23:31:29.0711 4840 blbdrive - ok
23:31:29.0768 4840 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
23:31:29.0772 4840 Bonjour Service - ok
23:31:29.0805 4840 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:31:29.0806 4840 bowser - ok
23:31:29.0812 4840 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
23:31:29.0812 4840 BrFiltLo - ok
23:31:29.0819 4840 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
23:31:29.0820 4840 BrFiltUp - ok
23:31:29.0880 4840 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
23:31:30.0103 4840 Browser - ok
23:31:30.0130 4840 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
23:31:30.0131 4840 Brserid - ok
23:31:30.0137 4840 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
23:31:30.0138 4840 BrSerWdm - ok
23:31:30.0143 4840 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
23:31:30.0143 4840 BrUsbMdm - ok
23:31:30.0148 4840 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
23:31:30.0149 4840 BrUsbSer - ok
23:31:30.0156 4840 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
23:31:30.0157 4840 BTHMODEM - ok
23:31:30.0181 4840 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
23:31:30.0182 4840 bthserv - ok
23:31:30.0197 4840 ccSet_MCLIENT - ok
23:31:30.0210 4840 ccSet_NAV - ok
23:31:30.0215 4840 ccSet_NST - ok
23:31:30.0231 4840 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:31:30.0426 4840 cdfs - ok
23:31:30.0459 4840 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:31:30.0460 4840 cdrom - ok
23:31:30.0488 4840 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
23:31:30.0489 4840 CertPropSvc - ok
23:31:30.0526 4840 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
23:31:30.0724 4840 circlass - ok
23:31:30.0739 4840 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
23:31:30.0741 4840 CLFS - ok
23:31:30.0788 4840 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:31:30.0788 4840 clr_optimization_v2.0.50727_32 - ok
23:31:30.0827 4840 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:31:30.0828 4840 clr_optimization_v2.0.50727_64 - ok
23:31:30.0885 4840 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:31:30.0887 4840 clr_optimization_v4.0.30319_32 - ok
23:31:30.0896 4840 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:31:30.0897 4840 clr_optimization_v4.0.30319_64 - ok
23:31:30.0904 4840 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
23:31:30.0905 4840 CmBatt - ok
23:31:30.0911 4840 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:31:30.0911 4840 cmdide - ok
23:31:30.0968 4840 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
23:31:30.0971 4840 CNG - ok
23:31:30.0977 4840 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
23:31:30.0978 4840 Compbatt - ok
23:31:31.0000 4840 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
23:31:31.0001 4840 CompositeBus - ok
23:31:31.0005 4840 COMSysApp - ok
23:31:31.0011 4840 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

 

[empresssoul]

23:31:31.0011 4840 crcdisk - ok
23:31:31.0050 4840 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:31:31.0051 4840 CryptSvc - ok
23:31:31.0128 4840 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
23:31:31.0135 4840 cvhsvc - ok
23:31:31.0164 4840 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
23:31:31.0167 4840 DcomLaunch - ok
23:31:31.0193 4840 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
23:31:31.0196 4840 defragsvc - ok
23:31:31.0224 4840 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:31:31.0225 4840 DfsC - ok
23:31:31.0255 4840 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
23:31:31.0258 4840 Dhcp - ok
23:31:31.0271 4840 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
23:31:31.0272 4840 discache - ok
23:31:31.0301 4840 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
23:31:31.0302 4840 Disk - ok
23:31:31.0332 4840 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:31:31.0334 4840 Dnscache - ok
23:31:31.0359 4840 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
23:31:31.0360 4840 dot3svc - ok
23:31:31.0385 4840 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
23:31:31.0386 4840 DPS - ok
23:31:31.0435 4840 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:31:31.0435 4840 drmkaud - ok
23:31:31.0477 4840 [ 3EEF0B3489EDBF725564E17C77CABAFD ] dsNcAdpt C:\Windows\system32\DRIVERS\dsNcAdpt.sys
23:31:31.0478 4840 dsNcAdpt - ok
23:31:31.0503 4840 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:31:31.0507 4840 DXGKrnl - ok
23:31:31.0524 4840 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
23:31:31.0526 4840 EapHost - ok
23:31:31.0600 4840 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
23:31:31.0617 4840 ebdrv - ok
23:31:31.0663 4840 eeCtrl - ok
23:31:31.0689 4840 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
23:31:31.0691 4840 EFS - ok
23:31:31.0734 4840 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:31:31.0740 4840 ehRecvr - ok
23:31:31.0770 4840 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
23:31:31.0771 4840 ehSched - ok
23:31:31.0802 4840 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
23:31:31.0806 4840 elxstor - ok
23:31:31.0894 4840 [ DFEB7EE15BA8BA03E722C375F7E6A379 ] EPSON_PM_RPCV4_05 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
23:31:31.0895 4840 EPSON_PM_RPCV4_05 - ok
23:31:31.0916 4840 EraserUtilDrv11220 - ok
23:31:31.0924 4840 EraserUtilRebootDrv - ok
23:31:31.0934 4840 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:31:31.0935 4840 ErrDev - ok
23:31:31.0976 4840 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
23:31:31.0978 4840 EventSystem - ok
23:31:31.0995 4840 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
23:31:31.0996 4840 exfat - ok
23:31:32.0012 4840 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:31:32.0014 4840 fastfat - ok
23:31:32.0038 4840 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
23:31:32.0042 4840 Fax - ok
23:31:32.0047 4840 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
23:31:32.0048 4840 fdc - ok
23:31:32.0058 4840 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
23:31:32.0058 4840 fdPHost - ok
23:31:32.0067 4840 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
23:31:32.0068 4840 FDResPub - ok
23:31:32.0075 4840 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:31:32.0076 4840 FileInfo - ok
23:31:32.0089 4840 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:31:32.0089 4840 Filetrace - ok
23:31:32.0093 4840 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
23:31:32.0094 4840 flpydisk - ok
23:31:32.0114 4840 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:31:32.0115 4840 FltMgr - ok
23:31:32.0176 4840 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
23:31:32.0186 4840 FontCache - ok
23:31:32.0211 4840 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:31:32.0212 4840 FontCache3.0.0.0 - ok
23:31:32.0217 4840 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
23:31:32.0217 4840 FsDepends - ok
23:31:32.0246 4840 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:31:32.0246 4840 Fs_Rec - ok
23:31:32.0292 4840 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
23:31:32.0294 4840 fvevol - ok
23:31:32.0313 4840 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
23:31:32.0314 4840 gagp30kx - ok
23:31:32.0396 4840 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
23:31:32.0398 4840 GamesAppService - ok
23:31:32.0428 4840 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
23:31:32.0429 4840 GEARAspiWDM - ok
23:31:32.0463 4840 [ D3316F6E3C011435F36E3D6E49B3196C ] GoToAssist C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
23:31:32.0464 4840 GoToAssist - ok
23:31:32.0499 4840 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
23:31:32.0505 4840 gpsvc - ok
23:31:32.0602 4840 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:31:32.0603 4840 gupdate - ok
23:31:32.0620 4840 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:31:32.0621 4840 gupdatem - ok
23:31:32.0658 4840 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
23:31:32.0658 4840 hcw85cir - ok
23:31:32.0680 4840 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
23:31:32.0681 4840 HDAudBus - ok
23:31:32.0687 4840 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
23:31:32.0688 4840 HidBatt - ok
23:31:32.0693 4840 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
23:31:32.0695 4840 HidBth - ok
23:31:32.0700 4840 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
23:31:32.0701 4840 HidIr - ok
23:31:32.0716 4840 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
23:31:32.0717 4840 hidserv - ok
23:31:32.0751 4840 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
23:31:32.0751 4840 HidUsb - ok
23:31:32.0771 4840 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:31:32.0772 4840 hkmsvc - ok
23:31:32.0799 4840 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:31:32.0801 4840 HomeGroupListener - ok
23:31:32.0819 4840 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:31:32.0822 4840 HomeGroupProvider - ok
23:31:32.0828 4840 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
23:31:32.0829 4840 HpSAMD - ok
23:31:32.0862 4840 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:31:32.0867 4840 HTTP - ok
23:31:32.0877 4840 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
23:31:32.0877 4840 hwpolicy - ok
23:31:32.0886 4840 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
23:31:32.0887 4840 i8042prt - ok
23:31:32.0929 4840 [ 1D004CB1DA6323B1F55CAEF7F94B61D9 ] iaStor C:\Windows\system32\drivers\iaStor.sys

 

[empresssoul]

23:31:32.0932 4840 iaStor - ok
23:31:32.0961 4840 [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
23:31:32.0962 4840 IAStorDataMgrSvc - ok
23:31:32.0974 4840 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
23:31:32.0977 4840 iaStorV - ok
23:31:33.0041 4840 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:31:33.0047 4840 idsvc - ok
23:31:33.0062 4840 IDSVia64 - ok
23:31:33.0237 4840 [ C6238C6ABD6AC99F5D152DA4E9439A3D ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
23:31:33.0283 4840 igfx - ok
23:31:33.0313 4840 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
23:31:33.0313 4840 iirsp - ok
23:31:33.0348 4840 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
23:31:33.0356 4840 IKEEXT - ok
23:31:33.0435 4840 [ 492CD3A94913D753B4591CD9E29EC843 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
23:31:33.0447 4840 IntcAzAudAddService - ok
23:31:33.0466 4840 [ D485D3BD3E2179AA86853A182F70699F ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys
23:31:33.0466 4840 IntcHdmiAddService - ok
23:31:33.0471 4840 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
23:31:33.0471 4840 intelide - ok
23:31:33.0479 4840 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:31:33.0480 4840 intelppm - ok
23:31:33.0491 4840 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:31:33.0493 4840 IPBusEnum - ok
23:31:33.0502 4840 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:31:33.0502 4840 IpFilterDriver - ok
23:31:33.0538 4840 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:31:33.0542 4840 iphlpsvc - ok
23:31:33.0547 4840 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
23:31:33.0547 4840 IPMIDRV - ok
23:31:33.0553 4840 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
23:31:33.0554 4840 IPNAT - ok
23:31:33.0650 4840 [ 50D6CCC6FF5561F9F56946B3E6164FB8 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
23:31:33.0657 4840 iPod Service - ok
23:31:33.0671 4840 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:31:33.0672 4840 IRENUM - ok
23:31:33.0678 4840 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:31:33.0678 4840 isapnp - ok
23:31:33.0707 4840 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
23:31:33.0709 4840 iScsiPrt - ok
23:31:33.0744 4840 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
23:31:33.0745 4840 kbdclass - ok
23:31:33.0763 4840 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
23:31:33.0764 4840 kbdhid - ok
23:31:33.0772 4840 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
23:31:33.0774 4840 KeyIso - ok
23:31:33.0805 4840 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:31:33.0806 4840 KSecDD - ok
23:31:33.0822 4840 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
23:31:33.0823 4840 KSecPkg - ok
23:31:33.0839 4840 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
23:31:33.0839 4840 ksthunk - ok
23:31:33.0861 4840 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
23:31:33.0865 4840 KtmRm - ok
23:31:33.0891 4840 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
23:31:33.0895 4840 LanmanServer - ok
23:31:33.0911 4840 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:31:33.0914 4840 LanmanWorkstation - ok
23:31:33.0939 4840 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
23:31:33.0940 4840 lltdio - ok
23:31:33.0978 4840 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:31:33.0982 4840 lltdsvc - ok
23:31:34.0007 4840 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
23:31:34.0008 4840 lmhosts - ok
23:31:34.0045 4840 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
23:31:34.0046 4840 LSI_FC - ok
23:31:34.0051 4840 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
23:31:34.0052 4840 LSI_SAS - ok
23:31:34.0057 4840 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
23:31:34.0058 4840 LSI_SAS2 - ok
23:31:34.0064 4840 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
23:31:34.0065 4840 LSI_SCSI - ok
23:31:34.0089 4840 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
23:31:34.0089 4840 luafv - ok
23:31:34.0095 4840 MCLIENT - ok
23:31:34.0124 4840 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:31:34.0126 4840 Mcx2Svc - ok
23:31:34.0131 4840 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
23:31:34.0131 4840 megasas - ok
23:31:34.0138 4840 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
23:31:34.0140 4840 MegaSR - ok
23:31:34.0158 4840 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
23:31:34.0159 4840 MMCSS - ok
23:31:34.0172 4840 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
23:31:34.0173 4840 Modem - ok
23:31:34.0214 4840 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:31:34.0215 4840 monitor - ok
23:31:34.0229 4840 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:31:34.0230 4840 mouclass - ok
23:31:34.0253 4840 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:31:34.0254 4840 mouhid - ok
23:31:34.0277 4840 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
23:31:34.0278 4840 mountmgr - ok
23:31:34.0322 4840 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
23:31:34.0324 4840 MpFilter - ok
23:31:34.0332 4840 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
23:31:34.0333 4840 mpio - ok
23:31:34.0410 4840 MpKsl24555c48 - ok
23:31:34.0434 4840 MpKsl83e79362 - ok
23:31:34.0463 4840 MpKsled119a6c - ok
23:31:34.0485 4840 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:31:34.0486 4840 mpsdrv - ok
23:31:34.0518 4840 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
23:31:34.0526 4840 MpsSvc - ok
23:31:34.0550 4840 [ CD22D2563039DDA6793F7624719363A7 ] MQAC C:\Windows\system32\drivers\mqac.sys
23:31:34.0552 4840 MQAC - ok
23:31:34.0562 4840 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:31:34.0563 4840 MRxDAV - ok
23:31:34.0598 4840 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:31:34.0599 4840 mrxsmb - ok
23:31:34.0637 4840 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:31:34.0639 4840 mrxsmb10 - ok
23:31:34.0654 4840 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:31:34.0655 4840 mrxsmb20 - ok
23:31:34.0661 4840 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
23:31:34.0662 4840 msahci - ok
23:31:34.0668 4840 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:31:34.0669 4840 msdsm - ok
23:31:34.0682 4840 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
23:31:34.0684 4840 MSDTC - ok
23:31:34.0706 4840 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:31:34.0706 4840 Msfs - ok
23:31:34.0716 4840 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
23:31:34.0716 4840 mshidkmdf - ok
23:31:34.0731 4840 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:31:34.0731 4840 msisadrv - ok
23:31:34.0769 4840 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:31:34.0771 4840 MSiSCSI - ok
23:31:34.0776 4840 msiserver - ok
23:31:34.0821 4840 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:31:34.0822 4840 MSKSSRV - ok
23:31:34.0894 4840 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
23:31:34.0895 4840 MsMpSvc - ok
23:31:34.0904 4840 [ FAAEAEF99E53561BEEE58F946CA56F0D ] MSMQ C:\Windows\system32\mqsvc.exe
23:31:34.0906 4840 MSMQ - ok
23:31:34.0917 4840 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:31:34.0918 4840 MSPCLOCK - ok
23:31:34.0924 4840 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:31:34.0925 4840 MSPQM - ok
23:31:34.0947 4840 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:31:34.0948 4840 MsRPC - ok
23:31:34.0959 4840 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
23:31:34.0960 4840 mssmbios - ok
23:31:34.0963 4840 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:31:34.0964 4840 MSTEE - ok
23:31:34.0969 4840 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
23:31:34.0969 4840 MTConfig - ok
23:31:34.0986 4840 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
23:31:34.0987 4840 Mup - ok
23:31:35.0001 4840 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
23:31:35.0004 4840 napagent - ok
23:31:35.0035 4840 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:31:35.0037 4840 NativeWifiP - ok
23:31:35.0046 4840 NAV - ok
23:31:35.0051 4840 NAVENG - ok
23:31:35.0056 4840 NAVEX15 - ok
23:31:35.0062 4840 NCO - ok
23:31:35.0103 4840 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
23:31:35.0107 4840 NDIS - ok
23:31:35.0134 4840 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
23:31:35.0134 4840 NdisCap - ok
23:31:35.0149 4840 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:31:35.0150 4840 NdisTapi - ok
23:31:35.0154 4840 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:31:35.0155 4840 Ndisuio - ok
23:31:35.0171 4840 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:31:35.0172 4840 NdisWan - ok
23:31:35.0180 4840 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:31:35.0181 4840 NDProxy - ok
23:31:35.0198 4840 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:31:35.0198 4840 NetBIOS - ok
23:31:35.0211 4840 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
23:31:35.0213 4840 NetBT - ok
23:31:35.0230 4840 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
23:31:35.0232 4840 Netlogon - ok
23:31:35.0254 4840 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
23:31:35.0257 4840 Netman - ok
23:31:35.0287 4840 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:31:35.0288 4840 NetMsmqActivator - ok
23:31:35.0292 4840 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:31:35.0294 4840 NetPipeActivator - ok
23:31:35.0320 4840 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
23:31:35.0325 4840 netprofm - ok
23:31:35.0330 4840 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:31:35.0331 4840 NetTcpActivator - ok
23:31:35.0335 4840 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:31:35.0336 4840 NetTcpPortSharing - ok
23:31:35.0365 4840 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
23:31:35.0366 4840 nfrd960 - ok
23:31:35.0414 4840 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
23:31:35.0416 4840 NisDrv - ok
23:31:35.0448 4840 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
23:31:35.0451 4840 NisSrv - ok
23:31:35.0476 4840 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
23:31:35.0478 4840 NlaSvc - ok
23:31:35.0595 4840 [ B9B72FAAAA41D59B73B88FE3DD737ED1 ] NOBU C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
23:31:35.0607 4840 NOBU - ok
23:31:35.0617 4840 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:31:35.0617 4840 Npfs - ok
23:31:35.0631 4840 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
23:31:35.0632 4840 nsi - ok
23:31:35.0642 4840 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:31:35.0642 4840 nsiproxy - ok

 

[empresssoul]

23:31:35.0682 4840 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:31:35.0689 4840 Ntfs - ok
23:31:35.0709 4840 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
23:31:35.0709 4840 Null - ok
23:31:35.0714 4840 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:31:35.0715 4840 nvraid - ok
23:31:35.0737 4840 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:31:35.0738 4840 nvstor - ok
23:31:35.0745 4840 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:31:35.0746 4840 nv_agp - ok
23:31:35.0751 4840 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
23:31:35.0751 4840 ohci1394 - ok
23:31:35.0756 4840 ojhzvyns - ok
23:31:35.0817 4840 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:31:35.0818 4840 ose - ok
23:31:35.0937 4840 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:31:35.0958 4840 osppsvc - ok
23:31:35.0982 4840 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
23:31:35.0985 4840 p2pimsvc - ok
23:31:36.0000 4840 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
23:31:36.0003 4840 p2psvc - ok
23:31:36.0011 4840 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
23:31:36.0011 4840 Parport - ok
23:31:36.0039 4840 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:31:36.0039 4840 partmgr - ok
23:31:36.0054 4840 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
23:31:36.0058 4840 PcaSvc - ok
23:31:36.0074 4840 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
23:31:36.0076 4840 pci - ok
23:31:36.0081 4840 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
23:31:36.0082 4840 pciide - ok
23:31:36.0092 4840 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
23:31:36.0094 4840 pcmcia - ok
23:31:36.0109 4840 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
23:31:36.0110 4840 pcw - ok
23:31:36.0138 4840 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:31:36.0142 4840 PEAUTH - ok
23:31:36.0204 4840 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
23:31:36.0205 4840 PerfHost - ok
23:31:36.0251 4840 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
23:31:36.0258 4840 pla - ok
23:31:36.0306 4840 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:31:36.0310 4840 PlugPlay - ok
23:31:36.0320 4840 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
23:31:36.0322 4840 PNRPAutoReg - ok
23:31:36.0341 4840 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
23:31:36.0343 4840 PNRPsvc - ok
23:31:36.0365 4840 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:31:36.0369 4840 PolicyAgent - ok
23:31:36.0395 4840 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
23:31:36.0398 4840 Power - ok
23:31:36.0419 4840 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
23:31:36.0420 4840 PptpMiniport - ok
23:31:36.0427 4840 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
23:31:36.0428 4840 Processor - ok
23:31:36.0463 4840 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
23:31:36.0465 4840 ProfSvc - ok
23:31:36.0480 4840 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:31:36.0482 4840 ProtectedStorage - ok
23:31:36.0507 4840 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
23:31:36.0508 4840 Psched - ok
23:31:36.0565 4840 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
23:31:36.0566 4840 PxHlpa64 - ok
23:31:36.0589 4840 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
23:31:36.0601 4840 ql2300 - ok
23:31:36.0610 4840 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
23:31:36.0611 4840 ql40xx - ok
23:31:36.0636 4840 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
23:31:36.0638 4840 QWAVE - ok
23:31:36.0643 4840 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:31:36.0644 4840 QWAVEdrv - ok
23:31:36.0649 4840 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:31:36.0649 4840 RasAcd - ok
23:31:36.0694 4840 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
23:31:36.0695 4840 RasAgileVpn - ok

 

[empresssoul]

23:31:36.0700 4840 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
23:31:36.0702 4840 RasAuto - ok
23:31:36.0716 4840 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:31:36.0717 4840 Rasl2tp - ok
23:31:36.0735 4840 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
23:31:36.0738 4840 RasMan - ok
23:31:36.0755 4840 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:31:36.0756 4840 RasPppoe - ok
23:31:36.0781 4840 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:31:36.0782 4840 RasSstp - ok
23:31:36.0804 4840 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:31:36.0806 4840 rdbss - ok
23:31:36.0810 4840 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
23:31:36.0811 4840 rdpbus - ok
23:31:36.0829 4840 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:31:36.0829 4840 RDPCDD - ok
23:31:36.0854 4840 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:31:36.0855 4840 RDPENCDD - ok
23:31:36.0863 4840 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
23:31:36.0864 4840 RDPREFMP - ok
23:31:36.0897 4840 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:31:36.0898 4840 RDPWD - ok
23:31:36.0918 4840 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
23:31:36.0920 4840 rdyboost - ok
23:31:36.0949 4840 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
23:31:36.0951 4840 RemoteAccess - ok
23:31:36.0982 4840 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:31:36.0984 4840 RemoteRegistry - ok
23:31:37.0093 4840 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
23:31:37.0101 4840 RoxMediaDB12OEM - ok
23:31:37.0130 4840 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
23:31:37.0132 4840 RoxWatch12 - ok
23:31:37.0159 4840 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
23:31:37.0162 4840 RpcEptMapper - ok
23:31:37.0178 4840 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
23:31:37.0180 4840 RpcLocator - ok
23:31:37.0197 4840 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
23:31:37.0200 4840 RpcSs - ok
23:31:37.0215 4840 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
23:31:37.0216 4840 rspndr - ok
23:31:37.0269 4840 [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
23:31:37.0271 4840 RTL8167 - ok
23:31:37.0297 4840 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
23:31:37.0299 4840 SamSs - ok
23:31:37.0307 4840 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:31:37.0308 4840 sbp2port - ok
23:31:37.0333 4840 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:31:37.0337 4840 SCardSvr - ok
23:31:37.0343 4840 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
23:31:37.0344 4840 scfilter - ok
23:31:37.0384 4840 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
23:31:37.0390 4840 Schedule - ok
23:31:37.0421 4840 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
23:31:37.0422 4840 SCPolicySvc - ok
23:31:37.0467 4840 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:31:37.0470 4840 SDRSVC - ok
23:31:37.0498 4840 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:31:37.0499 4840 secdrv - ok
23:31:37.0521 4840 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
23:31:37.0524 4840 seclogon - ok
23:31:37.0544 4840 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
23:31:37.0547 4840 SENS - ok
23:31:37.0564 4840 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
23:31:37.0567 4840 SensrSvc - ok
23:31:37.0574 4840 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
23:31:37.0575 4840 Serenum - ok
23:31:37.0583 4840 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
23:31:37.0584 4840 Serial - ok
23:31:37.0591 4840 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
23:31:37.0592 4840 sermouse - ok
23:31:37.0616 4840 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
23:31:37.0619 4840 SessionEnv - ok
23:31:37.0623 4840 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
23:31:37.0624 4840 sffdisk - ok
23:31:37.0628 4840 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:31:37.0628 4840 sffp_mmc - ok
23:31:37.0633 4840 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
23:31:37.0633 4840 sffp_sd - ok
23:31:37.0639 4840 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
23:31:37.0640 4840 sfloppy - ok
23:31:37.0665 4840 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys
23:31:37.0669 4840 Sftfs - ok
23:31:37.0725 4840 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
23:31:37.0729 4840 sftlist - ok
23:31:37.0758 4840 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys
23:31:37.0760 4840 Sftplay - ok
23:31:37.0782 4840 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys
23:31:37.0782 4840 Sftredir - ok
23:31:37.0855 4840 [ 74EC60E20516AAA573BE74F31175270F ] SftService C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
23:31:37.0867 4840 SftService - ok
23:31:37.0874 4840 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys
23:31:37.0875 4840 Sftvol - ok
23:31:37.0887 4840 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
23:31:37.0888 4840 sftvsa - ok
23:31:37.0929 4840 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:31:37.0931 4840 SharedAccess - ok
23:31:37.0971 4840 [ AAF932B4011D14052955D4B212A4DA8D ]

 

[empresssoul]

ShellHWDetection C:\Windows\System32\shsvcs.dll
23:31:37.0976 4840 ShellHWDetection - ok
23:31:37.0988 4840 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
23:31:37.0989 4840 SiSRaid2 - ok
23:31:37.0995 4840 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
23:31:37.0996 4840 SiSRaid4 - ok
23:31:38.0031 4840 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
23:31:38.0033 4840 SkypeUpdate - ok
23:31:38.0062 4840 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:31:38.0063 4840 Smb - ok
23:31:38.0098 4840 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:31:38.0099 4840 SNMPTRAP - ok
23:31:38.0113 4840 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
23:31:38.0114 4840 spldr - ok
23:31:38.0155 4840 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
23:31:38.0161 4840 Spooler - ok
23:31:38.0224 4840 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
23:31:38.0245 4840 sppsvc - ok
23:31:38.0267 4840 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
23:31:38.0269 4840 sppuinotify - ok
23:31:38.0288 4840 SRTSP - ok
23:31:38.0296 4840 SRTSPX - ok
23:31:38.0329 4840 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
23:31:38.0333 4840 srv - ok
23:31:38.0353 4840 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:31:38.0356 4840 srv2 - ok
23:31:38.0370 4840 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:31:38.0371 4840 srvnet - ok
23:31:38.0400 4840 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:31:38.0403 4840 SSDPSRV - ok
23:31:38.0414 4840 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:31:38.0416 4840 SstpSvc - ok
23:31:38.0439 4840 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
23:31:38.0439 4840 stexstor - ok
23:31:38.0481 4840 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
23:31:38.0488 4840 stisvc - ok
23:31:38.0576 4840 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
23:31:38.0577 4840 stllssvr - ok
23:31:38.0598 4840 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
23:31:38.0599 4840 swenum - ok
23:31:38.0617 4840 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
23:31:38.0623 4840 swprv - ok
23:31:38.0637 4840 SymDS - ok
23:31:38.0646 4840 SymEFA - ok
23:31:38.0652 4840 SymEvent - ok
23:31:38.0661 4840 SymIRON - ok
23:31:38.0667 4840 SymNetS - ok
23:31:38.0702 4840 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
23:31:38.0711 4840 SysMain - ok
23:31:38.0736 4840 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:31:38.0738 4840 TabletInputService - ok
23:31:38.0771 4840 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
23:31:38.0776 4840 TapiSrv - ok
23:31:38.0796 4840 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
23:31:38.0798 4840 TBS - ok
23:31:38.0861 4840 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:31:38.0871 4840 Tcpip - ok
23:31:38.0915 4840 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
23:31:38.0923 4840 TCPIP6 - ok
23:31:38.0975 4840 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:31:38.0976 4840 tcpipreg - ok
23:31:38.0993 4840 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:31:38.0994 4840 TDPIPE - ok
23:31:39.0023 4840 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:31:39.0024 4840 TDTCP - ok
23:31:39.0046 4840 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:31:39.0047 4840 tdx - ok
23:31:39.0069 4840 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
23:31:39.0070 4840 TermDD - ok
23:31:39.0093 4840 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
23:31:39.0097 4840 TermService - ok
23:31:39.0115 4840 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
23:31:39.0117 4840 Themes - ok
23:31:39.0140 4840 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
23:31:39.0142 4840 THREADORDER - ok
23:31:39.0153 4840 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
23:31:39.0155 4840 TrkWks - ok
23:31:39.0199 4840 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:31:39.0201 4840 TrustedInstaller - ok
23:31:39.0220 4840 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:31:39.0221 4840 tssecsrv - ok
23:31:39.0237 4840 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
23:31:39.0237 4840 TsUsbFlt - ok
23:31:39.0257 4840 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
23:31:39.0257 4840 TsUsbGD - ok
23:31:39.0289 4840 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:31:39.0290 4840 tunnel - ok
23:31:39.0296 4840 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
23:31:39.0298 4840 uagp35 - ok
23:31:39.0323 4840 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:31:39.0325 4840 udfs - ok
23:31:39.0340 4840 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:31:39.0342 4840 UI0Detect - ok
23:31:39.0346 4840 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:31:39.0348 4840 uliagpkx - ok
23:31:39.0366 4840 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
23:31:39.0367 4840 umbus - ok
23:31:39.0370 4840 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
23:31:39.0371 4840 UmPass - ok
23:31:39.0383 4840 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
23:31:39.0386 4840 upnphost - ok
23:31:39.0433 4840 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
23:31:39.0434 4840 USBAAPL64 - ok
23:31:39.0472 4840 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
23:31:39.0473 4840 usbaudio - ok
23:31:39.0488 4840 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
23:31:39.0490 4840 usbccgp - ok
23:31:39.0510 4840 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:31:39.0512 4840 usbcir - ok
23:31:39.0535 4840 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
23:31:39.0536 4840 usbehci - ok
23:31:39.0551 4840 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:31:39.0554 4840 usbhub - ok
23:31:39.0559 4840 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
23:31:39.0560 4840 usbohci - ok
23:31:39.0577 4840 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:31:39.0578 4840 usbprint - ok
23:31:39.0598 4840 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
23:31:39.0599 4840 usbscan - ok
23:31:39.0624 4840 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:31:39.0625 4840 USBSTOR - ok
23:31:39.0640 4840 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
23:31:39.0641 4840 usbuhci - ok
23:31:39.0648 4840 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
23:31:39.0650 4840 UxSms - ok
23:31:39.0663 4840 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
23:31:39.0665 4840 VaultSvc - ok
23:31:39.0675 4840 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:31:39.0675 4840 vdrvroot - ok
23:31:39.0710 4840 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
23:31:39.0716 4840 vds - ok
23:31:39.0739 4840 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:31:39.0740 4840 vga - ok
23:31:39.0755 4840 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
23:31:39.0756 4840 VgaSave - ok
23:31:39.0763 4840 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
23:31:39.0766 4840 vhdmp - ok
23:31:39.0771 4840 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
23:31:39.0771 4840 viaide - ok
23:31:39.0790 4840 VMnetAdapter - ok
23:31:39.0807 4840 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:31:39.0808 4840 volmgr - ok
23:31:39.0823 4840 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:31:39.0825 4840 volmgrx - ok
23:31:39.0839 4840 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:31:39.0841 4840 volsnap - ok
23:31:39.0854 4840 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
23:31:39.0855 4840 vsmraid - ok
23:31:39.0890 4840 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
23:31:39.0899 4840 VSS - ok
23:31:39.0911 4840 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
23:31:39.0912 4840 vwifibus - ok
23:31:39.0927 4840 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
23:31:39.0931 4840 W32Time - ok
23:31:39.0990 4840 [ B32009DB1972E7F2C227499289C4384A ] W3SVC C:\Windows\system32\inetsrv\iisw3adm.dll
23:31:39.0994 4840 W3SVC - ok
23:31:40.0000 4840 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
23:31:40.0001 4840 WacomPen - ok
23:31:40.0007 4840 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
23:31:40.0008 4840 WANARP - ok
23:31:40.0011 4840 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:31:40.0012 4840 Wanarpv6 - ok
23:31:40.0031 4840 [ B32009DB1972E7F2C227499289C4384A ] WAS C:\Windows\system32\inetsrv\iisw3adm.dll
23:31:40.0033 4840 WAS - ok
23:31:40.0098 4840 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
23:31:40.0107 4840 WatAdminSvc - ok
23:31:40.0141 4840 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
23:31:40.0149 4840 wbengine - ok
23:31:40.0165 4840 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
23:31:40.0168 4840 WbioSrvc - ok
23:31:40.0198 4840 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:31:40.0201 4840 wcncsvc - ok
23:31:40.0222 4840 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:31:40.0224 4840 WcsPlugInService - ok
23:31:40.0228 4840 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
23:31:40.0229 4840 Wd - ok
23:31:40.0269 4840 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:31:40.0273 4840 Wdf01000 - ok
23:31:40.0288 4840 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:31:40.0290 4840 WdiServiceHost - ok
23:31:40.0293 4840 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:31:40.0295 4840 WdiSystemHost - ok
23:31:40.0310 4840 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
23:31:40.0312 4840 WebClient - ok
23:31:40.0335 4840 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:31:40.0337 4840 Wecsvc - ok
23:31:40.0353 4840 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:31:40.0355 4840 wercplsupport - ok
23:31:40.0379 4840 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
23:31:40.0382 4840 WerSvc - ok
23:31:40.0403 4840 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
23:31:40.0403 4840 WfpLwf - ok
23:31:40.0436 4840 [ B14EF15BD757FA488F9C970EEE9C0D35 ]

 

[empresssoul]

WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
23:31:40.0437 4840 WimFltr - ok
23:31:40.0446 4840 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
23:31:40.0447 4840 WIMMount - ok
23:31:40.0467 4840 WinDefend - ok
23:31:40.0473 4840 WinHttpAutoProxySvc - ok
23:31:40.0514 4840 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:31:40.0515 4840 Winmgmt - ok
23:31:40.0571 4840 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
23:31:40.0583 4840 WinRM - ok
23:31:40.0623 4840 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
23:31:40.0624 4840 WinUsb - ok
23:31:40.0663 4840 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
23:31:40.0670 4840 Wlansvc - ok
23:31:40.0745 4840 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:31:40.0746 4840 wlcrasvc - ok
23:31:40.0829 4840 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:31:40.0846 4840 wlidsvc - ok
23:31:40.0869 4840 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
23:31:40.0870 4840 WmiAcpi - ok
23:31:40.0898 4840 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:31:40.0899 4840 wmiApSrv - ok
23:31:40.0924 4840 WMPNetworkSvc - ok
23:31:40.0937 4840 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:31:40.0939 4840 WPCSvc - ok
23:31:40.0958 4840 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:31:40.0960 4840 WPDBusEnum - ok
23:31:40.0965 4840 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:31:40.0966 4840 ws2ifsl - ok
23:31:40.0976 4840 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
23:31:40.0978 4840 wscsvc - ok
23:31:40.0982 4840 WSearch - ok
23:31:41.0051 4840 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
23:31:41.0064 4840 wuauserv - ok
23:31:41.0095 4840 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
23:31:41.0096 4840 WudfPf - ok
23:31:41.0129 4840 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:31:41.0130 4840 WUDFRd - ok
23:31:41.0155 4840 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:31:41.0158 4840 wudfsvc - ok
23:31:41.0176 4840 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
23:31:41.0179 4840 WwanSvc - ok
23:31:41.0197 4840 ================ Scan global ===============================
23:31:41.0229 4840 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
23:31:41.0266 4840 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
23:31:41.0275 4840 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
23:31:41.0287 4840 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
23:31:41.0318 4840 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
23:31:41.0320 4840 [Global] - ok
23:31:41.0321 4840 ================ Scan MBR ==================================
23:31:41.0333 4840 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:31:41.0560 4840 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
23:31:41.0560 4840 \Device\Harddisk0\DR0 - detected TDSS File System (1)
23:31:41.0561 4840 ================ Scan VBR ==================================
23:31:41.0564 4840 [ E314E7E6177DF6F4A2ABD7F9E58D5EE7 ] \Device\Harddisk0\DR0\Partition1
23:31:41.0566 4840 \Device\Harddisk0\DR0\Partition1 - ok
23:31:41.0594 4840 [ B804508635205136C710CF035B0EF7DB ] \Device\Harddisk0\DR0\Partition2
23:31:41.0595 4840 \Device\Harddisk0\DR0\Partition2 - ok
23:31:41.0596 4840 ============================================================
23:31:41.0596 4840 Scan finished
23:31:41.0596 4840 ============================================================
23:31:41.0608 5828 Detected object count: 1
23:31:41.0608 5828 Actual detected object count: 1
23:32:41.0998 5828 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
23:32:41.0998 5828 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
23:32:46.0625 1468 Deinitialize success