05:28:24.0982 1812  TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
05:28:25.0029 1812  ============================================================
05:28:25.0029 1812  Current date / time: 2012/09/01 05:28:25.0029
05:28:25.0029 1812  SystemInfo:
05:28:25.0029 1812  
05:28:25.0029 1812  OS Version: 6.1.7601 ServicePack: 1.0
05:28:25.0029 1812  Product type: Workstation
05:28:25.0029 1812  ComputerName: BUMPER-KOMPUTER
05:28:25.0044 1812  UserName: DOMINOOO
05:28:25.0044 1812  Windows directory: C:\Windows
05:28:25.0044 1812  System windows directory: C:\Windows
05:28:25.0044 1812  Running under WOW64
05:28:25.0044 1812  Processor architecture: Intel x64
05:28:25.0044 1812  Number of processors: 8
05:28:25.0044 1812  Page size: 0x1000
05:28:25.0044 1812  Boot type: Normal boot
05:28:25.0044 1812  ============================================================
05:28:28.0476 1812  !crdlk
05:28:28.0492 1812  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'A'
05:28:28.0523 1812  ============================================================
05:28:28.0523 1812  \Device\Harddisk0\DR0:
05:28:28.0523 1812  MBR partitions:
05:28:28.0523 1812  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xC501800
05:28:28.0523 1812  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC502000, BlocksNum 0x34102000
05:28:28.0523 1812  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x40604000, BlocksNum 0x34102000
05:28:28.0523 1812  ============================================================
05:28:28.0539 1812  C: <-> \Device\Harddisk0\DR0\Partition1
05:28:28.0554 1812  D: <-> \Device\Harddisk0\DR0\Partition2
05:28:28.0601 1812  E: <-> \Device\Harddisk0\DR0\Partition3
05:28:28.0601 1812  ============================================================
05:28:28.0601 1812  Initialize success
05:28:28.0601 1812  ============================================================
05:28:31.0893 4160  ============================================================
05:28:31.0893 4160  Scan started
05:28:31.0893 4160  Mode: Manual; 
05:28:31.0893 4160  ============================================================
05:28:32.0673 4160  ================ Scan system memory ========================
05:28:32.0673 4160  System memory - ok
05:28:32.0673 4160  ================ Scan services =============================
05:28:32.0829 4160  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
05:28:32.0844 4160  1394ohci - ok
05:28:32.0876 4160  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
05:28:32.0876 4160  ACPI - ok
05:28:32.0891 4160  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
05:28:32.0891 4160  AcpiPmi - ok
05:28:32.0954 4160  [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
05:28:32.0969 4160  AdobeARMservice - ok
05:28:33.0078 4160  [ A9D3B95E8466BD58EEB8A1154654E162 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
05:28:33.0078 4160  AdobeFlashPlayerUpdateSvc - ok
05:28:33.0125 4160  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
05:28:33.0125 4160  adp94xx - ok
05:28:33.0156 4160  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
05:28:33.0156 4160  adpahci - ok
05:28:33.0172 4160  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
05:28:33.0188 4160  adpu320 - ok
05:28:33.0250 4160  [ AC7E481DB75F1EDAEE81F68F41786955 ] AdvancedSystemCareService C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
05:28:33.0250 4160  AdvancedSystemCareService - ok
05:28:33.0281 4160  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
05:28:33.0281 4160  AeLookupSvc - ok
05:28:33.0328 4160  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
05:28:33.0328 4160  AFD - ok
05:28:33.0359 4160  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
05:28:33.0359 4160  agp440 - ok
05:28:33.0390 4160  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
05:28:33.0390 4160  ALG - ok
05:28:33.0390 4160  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
05:28:33.0390 4160  aliide - ok
05:28:33.0422 4160  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
05:28:33.0422 4160  amdide - ok
05:28:33.0437 4160  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
05:28:33.0437 4160  AmdK8 - ok
05:28:33.0453 4160  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
05:28:33.0453 4160  AmdPPM - ok
05:28:33.0468 4160  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
05:28:33.0484 4160  amdsata - ok
05:28:33.0500 4160  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
05:28:33.0500 4160  amdsbs - ok
05:28:33.0515 4160  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
05:28:33.0515 4160  amdxata - ok
05:28:33.0593 4160  [ 59D01FA91962C9C1E9B4022B2D3B46DB ] AppHostSvc      C:\Windows\system32\inetsrv\apphostsvc.dll
05:28:33.0593 4160  AppHostSvc - ok
05:28:33.0624 4160  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
05:28:33.0624 4160  AppID - ok
05:28:33.0656 4160  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
05:28:33.0656 4160  AppIDSvc - ok
05:28:33.0702 4160  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll
05:28:33.0702 4160  Appinfo - ok
05:28:33.0718 4160  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll
05:28:33.0718 4160  AppMgmt - ok
05:28:33.0749 4160  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
05:28:33.0749 4160  arc - ok
05:28:33.0765 4160  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
05:28:33.0765 4160  arcsas - ok
05:28:33.0812 4160  [ FB03A917C1294D3E6D671F24722E1BA3 ] asComSvc        C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
05:28:33.0812 4160  asComSvc - ok
05:28:33.0858 4160  [ FEF9DD9EA587F8886ADE43C1BEFBDAFE ] AsIO            C:\Windows\syswow64\drivers\AsIO.sys
05:28:33.0858 4160  AsIO - ok
05:28:33.0968 4160  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
05:28:33.0968 4160  aspnet_state - ok
05:28:33.0983 4160  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
05:28:33.0983 4160  AsyncMac - ok
05:28:34.0030 4160  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
05:28:34.0030 4160  atapi - ok
05:28:34.0077 4160  [ FC0E8778C000291CAF60EB88C011E931 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
05:28:34.0077 4160  atksgt - ok
05:28:34.0124 4160  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
05:28:34.0124 4160  AudioEndpointBuilder - ok
05:28:34.0139 4160  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
05:28:34.0155 4160  AudioSrv - ok
05:28:34.0186 4160  [ E964EA70249DDE1343C8F694B52575EE ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys
05:28:34.0202 4160  avgtp - ok
05:28:34.0233 4160  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
05:28:34.0233 4160  AxInstSV - ok
05:28:34.0264 4160  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
05:28:34.0264 4160  b06bdrv - ok
05:28:34.0295 4160  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
05:28:34.0295 4160  b57nd60a - ok
05:28:34.0342 4160  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
05:28:34.0342 4160  BDESVC - ok
05:28:34.0358 4160  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
05:28:34.0358 4160  Beep - ok
05:28:34.0404 4160  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
05:28:34.0404 4160  BFE - ok
05:28:34.0451 4160  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
05:28:34.0451 4160  BITS - ok
05:28:34.0482 4160  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
05:28:34.0482 4160  blbdrive - ok
05:28:34.0529 4160  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
05:28:34.0529 4160  bowser - ok
05:28:34.0545 4160  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
05:28:34.0545 4160  BrFiltLo - ok
05:28:34.0576 4160  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
05:28:34.0576 4160  BrFiltUp - ok
05:28:34.0607 4160  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
05:28:34.0607 4160  Browser - ok
05:28:34.0638 4160  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
05:28:34.0638 4160  Brserid - ok
05:28:34.0654 4160  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
05:28:34.0654 4160  BrSerWdm - ok
05:28:34.0670 4160  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
05:28:34.0670 4160  BrUsbMdm - ok
05:28:34.0685 4160  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
05:28:34.0685 4160  BrUsbSer - ok
05:28:34.0701 4160  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
05:28:34.0716 4160  BTHMODEM - ok
05:28:34.0732 4160  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
05:28:34.0732 4160  bthserv - ok
05:28:34.0763 4160  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
05:28:34.0763 4160  cdfs - ok
05:28:34.0794 4160  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys
05:28:34.0794 4160  cdrom - ok
05:28:34.0841 4160  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
05:28:34.0841 4160  CertPropSvc - ok
05:28:34.0872 4160  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
05:28:34.0872 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\circlass.sys. md5: D7CD5C4E1B71FA62050515314CFB52CF
05:28:34.0904 4160  circlass ( LockedFile.Multi.Generic ) - warning
05:28:34.0904 4160  circlass - detected LockedFile.Multi.Generic (1)
05:28:34.0919 4160  [ FF60401F1C659CA2ED4BAE85D3FD14DA ] CISVC           C:\Windows\system32\CISVC.EXE
05:28:34.0935 4160  CISVC - ok
05:28:34.0950 4160  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
05:28:34.0950 4160  Suspicious file (NoAccess): C:\Windows\system32\CLFS.sys. md5: FE1EC06F2253F691FE36217C592A0206
05:28:34.0966 4160  CLFS ( LockedFile.Multi.Generic ) - warning
05:28:34.0966 4160  CLFS - detected LockedFile.Multi.Generic (1)
05:28:35.0028 4160  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
05:28:35.0028 4160  clr_optimization_v2.0.50727_32 - ok
05:28:35.0075 4160  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
05:28:35.0075 4160  clr_optimization_v2.0.50727_64 - ok
05:28:35.0153 4160  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
05:28:35.0153 4160  clr_optimization_v4.0.30319_32 - ok
05:28:35.0184 4160  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
05:28:35.0184 4160  clr_optimization_v4.0.30319_64 - ok
05:28:35.0200 4160  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
05:28:35.0200 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\CmBatt.sys. md5: 0840155D0BDDF1190F84A663C284BD33
05:28:35.0200 4160  CmBatt ( LockedFile.Multi.Generic ) - warning
05:28:35.0200 4160  CmBatt - detected LockedFile.Multi.Generic (1)
05:28:35.0216 4160  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
05:28:35.0216 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\cmdide.sys. md5: E19D3F095812725D88F9001985B94EDD
05:28:35.0231 4160  cmdide ( LockedFile.Multi.Generic ) - warning
05:28:35.0231 4160  cmdide - detected LockedFile.Multi.Generic (1)
05:28:35.0278 4160  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys
05:28:35.0278 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\cng.sys. md5: 9AC4F97C2D3E93367E2148EA940CD2CD
05:28:35.0278 4160  CNG ( LockedFile.Multi.Generic ) - warning
05:28:35.0278 4160  CNG - detected LockedFile.Multi.Generic (1)
05:28:35.0294 4160  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
05:28:35.0294 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\compbatt.sys. md5: 102DE219C3F61415F964C88E9085AD14
05:28:35.0294 4160  Compbatt ( LockedFile.Multi.Generic ) - warning
05:28:35.0294 4160  Compbatt - detected LockedFile.Multi.Generic (1)
05:28:35.0325 4160  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
05:28:35.0325 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\CompositeBus.sys. md5: 03EDB043586CCEBA243D689BDDA370A8
05:28:35.0325 4160  CompositeBus ( LockedFile.Multi.Generic ) - warning
05:28:35.0325 4160  CompositeBus - detected LockedFile.Multi.Generic (1)
05:28:35.0325 4160  COMSysApp - ok
05:28:35.0356 4160  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
05:28:35.0356 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\crcdisk.sys. md5: 1C827878A998C18847245FE1F34EE597
05:28:35.0356 4160  crcdisk ( LockedFile.Multi.Generic ) - warning
05:28:35.0356 4160  crcdisk - detected LockedFile.Multi.Generic (1)
05:28:35.0387 4160  [ 4F5414602E2544A4554D95517948B705 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
05:28:35.0403 4160  CryptSvc - ok
05:28:35.0434 4160  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys
05:28:35.0434 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\csc.sys. md5: 54DA3DFD29ED9F1619B6F53F3CE55E49
05:28:35.0434 4160  CSC ( LockedFile.Multi.Generic ) - warning
05:28:35.0434 4160  CSC - detected LockedFile.Multi.Generic (1)
05:28:35.0465 4160  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
05:28:35.0465 4160  CscService - ok
05:28:35.0496 4160  Suspicious service (NoAccess): d42928de2e89ffa1
05:28:35.0543 4160  [ A990274EF323C7396DC18CCB33C6A9F7 ] d42928de2e89ffa1 C:\Windows\System32\Drivers\d42928de2e89ffa1.sys
05:28:35.0543 4160  Suspicious file (NoAccess): C:\Windows\System32\Drivers\d42928de2e89ffa1.sys. md5: A990274EF323C7396DC18CCB33C6A9F7
05:28:35.0621 4160  d42928de2e89ffa1 ( Rootkit.Win32.Necurs.gen ) - infected
05:28:35.0621 4160  d42928de2e89ffa1 - detected Rootkit.Win32.Necurs.gen (0)
05:28:35.0652 4160  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
05:28:35.0668 4160  DcomLaunch - ok
05:28:35.0699 4160  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
05:28:35.0699 4160  defragsvc - ok
05:28:35.0746 4160  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
05:28:35.0746 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\dfsc.sys. md5: 9BB2EF44EAA163B29C4A4587887A0FE4
05:28:35.0746 4160  DfsC ( LockedFile.Multi.Generic ) - warning
05:28:35.0746 4160  DfsC - detected LockedFile.Multi.Generic (1)
05:28:35.0777 4160  [ 7156833E6DFE0A804EA5CF7B8876AB7C ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
05:28:35.0777 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ssudbus.sys. md5: 7156833E6DFE0A804EA5CF7B8876AB7C
05:28:35.0793 4160  dg_ssudbus ( LockedFile.Multi.Generic ) - warning
05:28:35.0793 4160  dg_ssudbus - detected LockedFile.Multi.Generic (1)
05:28:35.0808 4160  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
05:28:35.0808 4160  Dhcp - ok
05:28:35.0840 4160  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
05:28:35.0840 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\discache.sys. md5: 13096B05847EC78F0977F2C0F79E9AB3
05:28:35.0855 4160  discache ( LockedFile.Multi.Generic ) - warning
05:28:35.0855 4160  discache - detected LockedFile.Multi.Generic (1)
05:28:35.0855 4160  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
05:28:35.0855 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\disk.sys. md5: 9819EEE8B5EA3784EC4AF3B137A5244C
05:28:35.0871 4160  Disk ( LockedFile.Multi.Generic ) - warning
05:28:35.0871 4160  Disk - detected LockedFile.Multi.Generic (1)
05:28:35.0902 4160  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
05:28:35.0902 4160  Dnscache - ok
05:28:35.0933 4160  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
05:28:35.0933 4160  dot3svc - ok
05:28:35.0980 4160  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
05:28:35.0980 4160  DPS - ok
05:28:35.0996 4160  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
05:28:35.0996 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\drmkaud.sys. md5: 9B19F34400D24DF84C858A421C205754
05:28:36.0011 4160  drmkaud ( LockedFile.Multi.Generic ) - warning
05:28:36.0011 4160  drmkaud - detected LockedFile.Multi.Generic (1)
05:28:36.0042 4160  [ FB9BEF3401EE5ECC2603311B9C64F44A ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys
05:28:36.0042 4160  dtsoftbus01 - ok
05:28:36.0089 4160  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
05:28:36.0089 4160  Suspicious file (NoAccess): C:\Windows\System32\drivers\dxgkrnl.sys. md5: F5BEE30450E18E6B83A5012C100616FD
05:28:36.0089 4160  DXGKrnl ( LockedFile.Multi.Generic ) - warning
05:28:36.0089 4160  DXGKrnl - detected LockedFile.Multi.Generic (1)
05:28:36.0120 4160  [ DC1776D086AA9733B1929A3D979D9FDD ] e1cexpress      C:\Windows\system32\DRIVERS\e1c62x64.sys
05:28:36.0120 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\e1c62x64.sys. md5: DC1776D086AA9733B1929A3D979D9FDD
05:28:36.0136 4160  e1cexpress ( LockedFile.Multi.Generic ) - warning
05:28:36.0136 4160  e1cexpress - detected LockedFile.Multi.Generic (1)
05:28:36.0152 4160  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
05:28:36.0152 4160  EapHost - ok
05:28:36.0230 4160  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
05:28:36.0261 4160  ebdrv - ok
05:28:36.0276 4160  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
05:28:36.0292 4160  EFS - ok
05:28:36.0323 4160  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
05:28:36.0339 4160  ehRecvr - ok
05:28:36.0354 4160  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
05:28:36.0370 4160  ehSched - ok
05:28:36.0386 4160  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
05:28:36.0386 4160  elxstor - ok
05:28:36.0417 4160  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
05:28:36.0417 4160  ErrDev - ok
05:28:36.0464 4160  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
05:28:36.0479 4160  EventSystem - ok
05:28:36.0495 4160  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
05:28:36.0495 4160  exfat - ok
05:28:36.0510 4160  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
05:28:36.0510 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\fastfat.sys. md5: 0ADC83218B66A6DB380C330836F3E36D
05:28:36.0526 4160  fastfat ( LockedFile.Multi.Generic ) - warning
05:28:36.0526 4160  fastfat - detected LockedFile.Multi.Generic (1)
05:28:36.0557 4160  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
05:28:36.0557 4160  Fax - ok
05:28:36.0573 4160  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
05:28:36.0573 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\fdc.sys. md5: D765D19CD8EF61F650C384F62FAC00AB
05:28:36.0588 4160  fdc ( LockedFile.Multi.Generic ) - warning
05:28:36.0588 4160  fdc - detected LockedFile.Multi.Generic (1)
05:28:36.0604 4160  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
05:28:36.0604 4160  fdPHost - ok
05:28:36.0620 4160  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
05:28:36.0620 4160  FDResPub - ok
05:28:36.0635 4160  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
05:28:36.0635 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\fileinfo.sys. md5: 655661BE46B5F5F3FD454E2C3095B930
05:28:36.0635 4160  FileInfo ( LockedFile.Multi.Generic ) - warning
05:28:36.0635 4160  FileInfo - detected LockedFile.Multi.Generic (1)
05:28:36.0651 4160  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
05:28:36.0651 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\filetrace.sys. md5: 5F671AB5BC87EEA04EC38A6CD5962A47
05:28:36.0651 4160  Filetrace ( LockedFile.Multi.Generic ) - warning
05:28:36.0651 4160  Filetrace - detected LockedFile.Multi.Generic (1)
05:28:36.0666 4160  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
05:28:36.0666 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\flpydisk.sys. md5: C172A0F53008EAEB8EA33FE10E177AF5
05:28:36.0666 4160  flpydisk ( LockedFile.Multi.Generic ) - warning
05:28:36.0666 4160  flpydisk - detected LockedFile.Multi.Generic (1)
05:28:36.0698 4160  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
05:28:36.0698 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\fltmgr.sys. md5: DA6B67270FD9DB3697B20FCE94950741
05:28:36.0713 4160  FltMgr ( LockedFile.Multi.Generic ) - warning
05:28:36.0713 4160  FltMgr - detected LockedFile.Multi.Generic (1)
05:28:36.0760 4160  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache       C:\Windows\system32\FntCache.dll
05:28:36.0822 4160  FontCache - ok
05:28:36.0932 4160  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
05:28:36.0932 4160  FontCache3.0.0.0 - ok
05:28:36.0963 4160  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
05:28:36.0963 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\FsDepends.sys. md5: D43703496149971890703B4B1B723EAC
05:28:36.0963 4160  FsDepends ( LockedFile.Multi.Generic ) - warning
05:28:36.0963 4160  FsDepends - detected LockedFile.Multi.Generic (1)
05:28:36.0994 4160  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
05:28:36.0994 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Fs_Rec.sys. md5: 6BD9295CC032DD3077C671FCCF579A7B
05:28:37.0010 4160  Fs_Rec ( LockedFile.Multi.Generic ) - warning
05:28:37.0010 4160  Fs_Rec - detected LockedFile.Multi.Generic (1)
05:28:37.0041 4160  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
05:28:37.0041 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\fvevol.sys. md5: 1F7B25B858FA27015169FE95E54108ED
05:28:37.0041 4160  fvevol ( LockedFile.Multi.Generic ) - warning
05:28:37.0041 4160  fvevol - detected LockedFile.Multi.Generic (1)
05:28:37.0056 4160  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
05:28:37.0056 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\gagp30kx.sys. md5: 8C778D335C9D272CFD3298AB02ABE3B6
05:28:37.0072 4160  gagp30kx ( LockedFile.Multi.Generic ) - warning
05:28:37.0072 4160  gagp30kx - detected LockedFile.Multi.Generic (1)
05:28:37.0119 4160  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
05:28:37.0134 4160  gpsvc - ok
05:28:37.0181 4160  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
05:28:37.0181 4160  gupdate - ok
05:28:37.0212 4160  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
05:28:37.0212 4160  gupdatem - ok
05:28:37.0228 4160  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
05:28:37.0228 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\hamachi.sys. md5: 1E6438D4EA6E1174A3B3B1EDC4DE660B
05:28:37.0244 4160  hamachi ( LockedFile.Multi.Generic ) - warning
05:28:37.0244 4160  hamachi - detected LockedFile.Multi.Generic (1)
05:28:37.0353 4160  [ F10C3F2E002100BF8B797DCF283FEA7D ] Hamachi2Svc     C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
05:28:37.0368 4160  Hamachi2Svc - ok
05:28:37.0400 4160  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
05:28:37.0400 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\hcw85cir.sys. md5: F2523EF6460FC42405B12248338AB2F0
05:28:37.0400 4160  hcw85cir ( LockedFile.Multi.Generic ) - warning
05:28:37.0400 4160  hcw85cir - detected LockedFile.Multi.Generic (1)
05:28:37.0446 4160  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
05:28:37.0446 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\HdAudio.sys. md5: 975761C778E33CD22498059B91E7373A
05:28:37.0446 4160  HdAudAddService ( LockedFile.Multi.Generic ) - warning
05:28:37.0446 4160  HdAudAddService - detected LockedFile.Multi.Generic (1)
05:28:37.0478 4160  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
05:28:37.0478 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\HDAudBus.sys. md5: 97BFED39B6B79EB12CDDBFEED51F56BB
05:28:37.0478 4160  HDAudBus ( LockedFile.Multi.Generic ) - warning
05:28:37.0478 4160  HDAudBus - detected LockedFile.Multi.Generic (1)
05:28:37.0493 4160  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
05:28:37.0493 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\HidBatt.sys. md5: 78E86380454A7B10A5EB255DC44A355F
05:28:37.0509 4160  HidBatt ( LockedFile.Multi.Generic ) - warning
05:28:37.0509 4160  HidBatt - detected LockedFile.Multi.Generic (1)
05:28:37.0524 4160  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
05:28:37.0524 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\hidbth.sys. md5: 7FD2A313F7AFE5C4DAB14798C48DD104
05:28:37.0524 4160  HidBth ( LockedFile.Multi.Generic ) - warning
05:28:37.0524 4160  HidBth - detected LockedFile.Multi.Generic (1)
05:28:37.0540 4160  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
05:28:37.0540 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\hidir.sys. md5: 0A77D29F311B88CFAE3B13F9C1A73825
05:28:37.0556 4160  HidIr ( LockedFile.Multi.Generic ) - warning
05:28:37.0556 4160  HidIr - detected LockedFile.Multi.Generic (1)
05:28:37.0587 4160  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
05:28:37.0587 4160  hidserv - ok
05:28:37.0618 4160  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
05:28:37.0618 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\hidusb.sys. md5: 9592090A7E2B61CD582B612B6DF70536
05:28:37.0618 4160  HidUsb ( LockedFile.Multi.Generic ) - warning
05:28:37.0618 4160  HidUsb - detected LockedFile.Multi.Generic (1)
05:28:37.0665 4160  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
05:28:37.0665 4160  hkmsvc - ok
05:28:37.0696 4160  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
05:28:37.0712 4160  HomeGroupListener - ok
05:28:37.0727 4160  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
05:28:37.0727 4160  HomeGroupProvider - ok
05:28:37.0758 4160  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
05:28:37.0758 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\HpSAMD.sys. md5: 39D2ABCD392F3D8A6DCE7B60AE7B8EFC
05:28:37.0758 4160  HpSAMD ( LockedFile.Multi.Generic ) - warning
05:28:37.0758 4160  HpSAMD - detected LockedFile.Multi.Generic (1)
05:28:37.0790 4160  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
05:28:37.0805 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\HTTP.sys. md5: 0EA7DE1ACB728DD5A369FD742D6EEE28
05:28:37.0805 4160  HTTP ( LockedFile.Multi.Generic ) - warning
05:28:37.0805 4160  HTTP - detected LockedFile.Multi.Generic (1)
05:28:37.0805 4160  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
05:28:37.0805 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\hwpolicy.sys. md5: A5462BD6884960C9DC85ED49D34FF392
05:28:37.0821 4160  hwpolicy ( LockedFile.Multi.Generic ) - warning
05:28:37.0821 4160  hwpolicy - detected LockedFile.Multi.Generic (1)
05:28:37.0852 4160  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
05:28:37.0852 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\i8042prt.sys. md5: FA55C73D4AFFA7EE23AC4BE53B4592D3
05:28:37.0852 4160  i8042prt ( LockedFile.Multi.Generic ) - warning
05:28:37.0852 4160  i8042prt - detected LockedFile.Multi.Generic (1)
05:28:37.0883 4160  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
05:28:37.0883 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\iaStorV.sys. md5: AAAF44DB3BD0B9D1FB6969B23ECC8366
05:28:37.0883 4160  iaStorV ( LockedFile.Multi.Generic ) - warning
05:28:37.0883 4160  iaStorV - detected LockedFile.Multi.Generic (1)
05:28:37.0930 4160  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
05:28:37.0930 4160  idsvc - ok
05:28:37.0946 4160  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
05:28:37.0946 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\iirsp.sys. md5: 5C18831C61933628F5BB0EA2675B9D21
05:28:37.0961 4160  iirsp ( LockedFile.Multi.Generic ) - warning
05:28:37.0961 4160  iirsp - detected LockedFile.Multi.Generic (1)
05:28:37.0992 4160  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
05:28:38.0008 4160  IKEEXT - ok
05:28:38.0070 4160  [ DAB7318CCFA8081200D5B7B486793F74 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
05:28:38.0070 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\RTKVHD64.sys. md5: DAB7318CCFA8081200D5B7B486793F74
05:28:38.0086 4160  IntcAzAudAddService ( LockedFile.Multi.Generic ) - warning
05:28:38.0086 4160  IntcAzAudAddService - detected LockedFile.Multi.Generic (1)
05:28:38.0102 4160  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
05:28:38.0102 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\intelide.sys. md5: F00F20E70C6EC3AA366910083A0518AA
05:28:38.0102 4160  intelide ( LockedFile.Multi.Generic ) - warning
05:28:38.0102 4160  intelide - detected LockedFile.Multi.Generic (1)
05:28:38.0133 4160  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
05:28:38.0133 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\intelppm.sys. md5: ADA036632C664CAA754079041CF1F8C1
05:28:38.0133 4160  intelppm ( LockedFile.Multi.Generic ) - warning
05:28:38.0133 4160  intelppm - detected LockedFile.Multi.Generic (1)
05:28:38.0164 4160  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
05:28:38.0164 4160  IPBusEnum - ok
05:28:38.0195 4160  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
05:28:38.0195 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ipfltdrv.sys. md5: C9F0E1BD74365A8771590E9008D22AB6
05:28:38.0195 4160  IpFilterDriver ( LockedFile.Multi.Generic ) - warning
05:28:38.0195 4160  IpFilterDriver - detected LockedFile.Multi.Generic (1)
05:28:38.0258 4160  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
05:28:38.0273 4160  iphlpsvc - ok
05:28:38.0289 4160  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
05:28:38.0289 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\IPMIDrv.sys. md5: 0FC1AEA580957AA8817B8F305D18CA3A
05:28:38.0289 4160  IPMIDRV ( LockedFile.Multi.Generic ) - warning
05:28:38.0289 4160  IPMIDRV - detected LockedFile.Multi.Generic (1)
05:28:38.0304 4160  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
05:28:38.0304 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\ipnat.sys. md5: AF9B39A7E7B6CAA203B3862582E9F2D0
05:28:38.0320 4160  IPNAT ( LockedFile.Multi.Generic ) - warning
05:28:38.0320 4160  IPNAT - detected LockedFile.Multi.Generic (1)
05:28:38.0367 4160  [ 11FE7637A49B67D9B1F895B2AD4D982F ] iprip           C:\Windows\System32\iprip.dll
05:28:38.0367 4160  iprip - ok
05:28:38.0382 4160  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
05:28:38.0382 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\irenum.sys. md5: 3ABF5E7213EB28966D55D58B515D5CE9
05:28:38.0382 4160  IRENUM ( LockedFile.Multi.Generic ) - warning
05:28:38.0382 4160  IRENUM - detected LockedFile.Multi.Generic (1)
05:28:38.0398 4160  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
05:28:38.0398 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\isapnp.sys. md5: 2F7B28DC3E1183E5EB418DF55C204F38
05:28:38.0414 4160  isapnp ( LockedFile.Multi.Generic ) - warning
05:28:38.0414 4160  isapnp - detected LockedFile.Multi.Generic (1)
05:28:38.0429 4160  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
05:28:38.0429 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\msiscsi.sys. md5: D931D7309DEB2317035B07C9F9E6B0BD
05:28:38.0429 4160  iScsiPrt ( LockedFile.Multi.Generic ) - warning
05:28:38.0429 4160  iScsiPrt - detected LockedFile.Multi.Generic (1)
05:28:38.0460 4160  [ 9C6F3F69163133FB8E56AC4A6E163452 ] ISODrive        C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
05:28:38.0460 4160  Suspicious file (NoAccess): C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys. md5: 9C6F3F69163133FB8E56AC4A6E163452
05:28:38.0476 4160  ISODrive ( LockedFile.Multi.Generic ) - warning
05:28:38.0476 4160  ISODrive - detected LockedFile.Multi.Generic (1)
05:28:38.0507 4160  iswtwq - ok
05:28:38.0538 4160  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
05:28:38.0538 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\kbdclass.sys. md5: BC02336F1CBA7DCC7D1213BB588A68A5
05:28:38.0538 4160  kbdclass ( LockedFile.Multi.Generic ) - warning
05:28:38.0538 4160  kbdclass - detected LockedFile.Multi.Generic (1)
05:28:38.0570 4160  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
05:28:38.0570 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\kbdhid.sys. md5: 0705EFF5B42A9DB58548EEC3B26BB484
05:28:38.0570 4160  kbdhid ( LockedFile.Multi.Generic ) - warning
05:28:38.0570 4160  kbdhid - detected LockedFile.Multi.Generic (1)
05:28:38.0585 4160  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
05:28:38.0585 4160  KeyIso - ok
05:28:38.0632 4160  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
05:28:38.0632 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\ksecdd.sys. md5: 97A7070AEA4C058B6418519E869A63B4
05:28:38.0632 4160  KSecDD ( LockedFile.Multi.Generic ) - warning
05:28:38.0632 4160  KSecDD - detected LockedFile.Multi.Generic (1)
05:28:38.0663 4160  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
05:28:38.0663 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\ksecpkg.sys. md5: 26C43A7C2862447EC59DEDA188D1DA07
05:28:38.0663 4160  KSecPkg ( LockedFile.Multi.Generic ) - warning
05:28:38.0663 4160  KSecPkg - detected LockedFile.Multi.Generic (1)
05:28:38.0694 4160  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
05:28:38.0694 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\ksthunk.sys. md5: 6869281E78CB31A43E969F06B57347C4
05:28:38.0694 4160  ksthunk ( LockedFile.Multi.Generic ) - warning
05:28:38.0694 4160  ksthunk - detected LockedFile.Multi.Generic (1)
05:28:38.0741 4160  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
05:28:38.0741 4160  KtmRm - ok
05:28:38.0788 4160  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
05:28:38.0788 4160  LanmanServer - ok
05:28:38.0835 4160  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
05:28:38.0835 4160  LanmanWorkstation - ok
05:28:38.0866 4160  [ 156AB2E56DC3CA0B582E3362E07CDED7 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
05:28:38.0866 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lirsgt.sys. md5: 156AB2E56DC3CA0B582E3362E07CDED7
05:28:38.0866 4160  lirsgt ( LockedFile.Multi.Generic ) - warning
05:28:38.0866 4160  lirsgt - detected LockedFile.Multi.Generic (1)
05:28:38.0882 4160  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
05:28:38.0882 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lltdio.sys. md5: 1538831CF8AD2979A04C423779465827
05:28:38.0882 4160  lltdio ( LockedFile.Multi.Generic ) - warning
05:28:38.0882 4160  lltdio - detected LockedFile.Multi.Generic (1)
05:28:38.0913 4160  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
05:28:38.0928 4160  lltdsvc - ok
05:28:38.0944 4160  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
05:28:38.0944 4160  lmhosts - ok
05:28:38.0991 4160  [ 5DCD36FC4A6ECBF6E7F9B3BF7E0D0F55 ] LPDSVC          C:\Windows\system32\lpdsvc.dll
05:28:38.0991 4160  LPDSVC - ok
05:28:39.0006 4160  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
05:28:39.0006 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lsi_fc.sys. md5: 1A93E54EB0ECE102495A51266DCDB6A6
05:28:39.0022 4160  LSI_FC ( LockedFile.Multi.Generic ) - warning
05:28:39.0022 4160  LSI_FC - detected LockedFile.Multi.Generic (1)
05:28:39.0038 4160  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
05:28:39.0038 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lsi_sas.sys. md5: 1047184A9FDC8BDBFF857175875EE810
05:28:39.0038 4160  LSI_SAS ( LockedFile.Multi.Generic ) - warning
05:28:39.0038 4160  LSI_SAS - detected LockedFile.Multi.Generic (1)
05:28:39.0053 4160  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
05:28:39.0053 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lsi_sas2.sys. md5: 30F5C0DE1EE8B5BC9306C1F0E4A75F93
05:28:39.0069 4160  LSI_SAS2 ( LockedFile.Multi.Generic ) - warning
05:28:39.0069 4160  LSI_SAS2 - detected LockedFile.Multi.Generic (1)
05:28:39.0084 4160  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
05:28:39.0084 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\lsi_scsi.sys. md5: 0504EACAFF0D3C8AED161C4B0D369D4A
05:28:39.0084 4160  LSI_SCSI ( LockedFile.Multi.Generic ) - warning
05:28:39.0084 4160  LSI_SCSI - detected LockedFile.Multi.Generic (1)
05:28:39.0100 4160  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
05:28:39.0100 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\luafv.sys. md5: 43D0F98E1D56CCDDB0D5254CFF7B356E
05:28:39.0116 4160  luafv ( LockedFile.Multi.Generic ) - warning
05:28:39.0116 4160  luafv - detected LockedFile.Multi.Generic (1)
05:28:39.0162 4160  [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
05:28:39.0162 4160  MBAMProtector - ok
05:28:39.0209 4160  [ 43683E970F008C93C9429EF428147A54 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
05:28:39.0209 4160  MBAMService - ok
05:28:39.0240 4160  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
05:28:39.0240 4160  Mcx2Svc - ok
05:28:39.0256 4160  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
05:28:39.0256 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\megasas.sys. md5: A55805F747C6EDB6A9080D7C633BD0F4
05:28:39.0256 4160  megasas ( LockedFile.Multi.Generic ) - warning
05:28:39.0256 4160  megasas - detected LockedFile.Multi.Generic (1)
05:28:39.0287 4160  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
05:28:39.0287 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\MegaSR.sys. md5: BAF74CE0072480C3B6B7C13B2A94D6B3
05:28:39.0287 4160  MegaSR ( LockedFile.Multi.Generic ) - warning
05:28:39.0287 4160  MegaSR - detected LockedFile.Multi.Generic (1)
05:28:39.0318 4160  [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
05:28:39.0318 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\HECIx64.sys. md5: A6518DCC42F7A6E999BB3BEA8FD87567
05:28:39.0318 4160  MEIx64 ( LockedFile.Multi.Generic ) - warning
05:28:39.0318 4160  MEIx64 - detected LockedFile.Multi.Generic (1)
05:28:39.0381 4160  Microsoft SharePoint Workspace Audit Service - ok
05:28:39.0412 4160  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
05:28:39.0412 4160  MMCSS - ok
05:28:39.0428 4160  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
05:28:39.0428 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\modem.sys. md5: 800BA92F7010378B09F9ED9270F07137
05:28:39.0428 4160  Modem ( LockedFile.Multi.Generic ) - warning
05:28:39.0428 4160  Modem - detected LockedFile.Multi.Generic (1)
05:28:39.0443 4160  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
05:28:39.0443 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\monitor.sys. md5: B03D591DC7DA45ECE20B3B467E6AADAA
05:28:39.0459 4160  monitor ( LockedFile.Multi.Generic ) - warning
05:28:39.0459 4160  monitor - detected LockedFile.Multi.Generic (1)
05:28:39.0459 4160  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
05:28:39.0459 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\mouclass.sys. md5: 7D27EA49F3C1F687D357E77A470AEA99
05:28:39.0474 4160  mouclass ( LockedFile.Multi.Generic ) - warning
05:28:39.0474 4160  mouclass - detected LockedFile.Multi.Generic (1)
05:28:39.0474 4160  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
05:28:39.0474 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\mouhid.sys. md5: D3BF052C40B0C4166D9FD86A4288C1E6
05:28:39.0490 4160  mouhid ( LockedFile.Multi.Generic ) - warning
05:28:39.0490 4160  mouhid - detected LockedFile.Multi.Generic (1)
05:28:39.0521 4160  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
05:28:39.0521 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mountmgr.sys. md5: 32E7A3D591D671A6DF2DB515A5CBE0FA
05:28:39.0521 4160  mountmgr ( LockedFile.Multi.Generic ) - warning
05:28:39.0521 4160  mountmgr - detected LockedFile.Multi.Generic (1)
05:28:39.0584 4160  [ E8D79312373F254DC13F3965BDB3D521 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
05:28:39.0584 4160  MozillaMaintenance - ok
05:28:39.0615 4160  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
05:28:39.0615 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mpio.sys. md5: A44B420D30BD56E145D6A2BC8768EC58
05:28:39.0615 4160  mpio ( LockedFile.Multi.Generic ) - warning
05:28:39.0615 4160  mpio - detected LockedFile.Multi.Generic (1)
05:28:39.0630 4160  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
05:28:39.0630 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mpsdrv.sys. md5: 6C38C9E45AE0EA2FA5E551F2ED5E978F
05:28:39.0630 4160  mpsdrv ( LockedFile.Multi.Generic ) - warning
05:28:39.0630 4160  mpsdrv - detected LockedFile.Multi.Generic (1)
05:28:39.0693 4160  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
05:28:39.0693 4160  MpsSvc - ok
05:28:39.0724 4160  [ CD22D2563039DDA6793F7624719363A7 ] MQAC            C:\Windows\system32\drivers\mqac.sys
05:28:39.0724 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mqac.sys. md5: CD22D2563039DDA6793F7624719363A7
05:28:39.0740 4160  MQAC ( LockedFile.Multi.Generic ) - warning
05:28:39.0740 4160  MQAC - detected LockedFile.Multi.Generic (1)
05:28:39.0771 4160  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
05:28:39.0771 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mrxdav.sys. md5: DC722758B8261E1ABAFD31A3C0A66380
05:28:39.0771 4160  MRxDAV ( LockedFile.Multi.Generic ) - warning
05:28:39.0771 4160  MRxDAV - detected LockedFile.Multi.Generic (1)
05:28:39.0802 4160  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
05:28:39.0802 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\mrxsmb.sys. md5: A5D9106A73DC88564C825D317CAC68AC
05:28:39.0818 4160  mrxsmb ( LockedFile.Multi.Generic ) - warning
05:28:39.0818 4160  mrxsmb - detected LockedFile.Multi.Generic (1)
05:28:39.0849 4160  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
05:28:39.0849 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\mrxsmb10.sys. md5: D711B3C1D5F42C0C2415687BE09FC163
05:28:39.0849 4160  mrxsmb10 ( LockedFile.Multi.Generic ) - warning
05:28:39.0849 4160  mrxsmb10 - detected LockedFile.Multi.Generic (1)
05:28:39.0864 4160  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
05:28:39.0864 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\mrxsmb20.sys. md5: 9423E9D355C8D303E76B8CFBD8A5C30C
05:28:39.0880 4160  mrxsmb20 ( LockedFile.Multi.Generic ) - warning
05:28:39.0880 4160  mrxsmb20 - detected LockedFile.Multi.Generic (1)
05:28:39.0896 4160  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
05:28:39.0896 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\msahci.sys. md5: C25F0BAFA182CBCA2DD3C851C2E75796
05:28:39.0896 4160  msahci ( LockedFile.Multi.Generic ) - warning
05:28:39.0896 4160  msahci - detected LockedFile.Multi.Generic (1)
05:28:39.0911 4160  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
05:28:39.0911 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\msdsm.sys. md5: DB801A638D011B9633829EB6F663C900
05:28:39.0927 4160  msdsm ( LockedFile.Multi.Generic ) - warning
05:28:39.0927 4160  msdsm - detected LockedFile.Multi.Generic (1)
05:28:39.0942 4160  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
05:28:39.0942 4160  MSDTC - ok
05:28:39.0974 4160  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
05:28:39.0974 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Msfs.sys. md5: AA3FB40E17CE1388FA1BEDAB50EA8F96
05:28:39.0974 4160  Msfs ( LockedFile.Multi.Generic ) - warning
05:28:39.0974 4160  Msfs - detected LockedFile.Multi.Generic (1)
05:28:39.0989 4160  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
05:28:39.0989 4160  Suspicious file (NoAccess): C:\Windows\System32\drivers\mshidkmdf.sys. md5: F9D215A46A8B9753F61767FA72A20326
05:28:40.0005 4160  mshidkmdf ( LockedFile.Multi.Generic ) - warning
05:28:40.0005 4160  mshidkmdf - detected LockedFile.Multi.Generic (1)
05:28:40.0005 4160  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
05:28:40.0005 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\msisadrv.sys. md5: D916874BBD4F8B07BFB7FA9B3CCAE29D
05:28:40.0020 4160  msisadrv ( LockedFile.Multi.Generic ) - warning
05:28:40.0020 4160  msisadrv - detected LockedFile.Multi.Generic (1)
05:28:40.0067 4160  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
05:28:40.0067 4160  MSiSCSI - ok
05:28:40.0083 4160  msiserver - ok
05:28:40.0114 4160  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
05:28:40.0114 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\MSKSSRV.sys. md5: 49CCF2C4FEA34FFAD8B1B59D49439366
05:28:40.0114 4160  MSKSSRV ( LockedFile.Multi.Generic ) - warning
05:28:40.0114 4160  MSKSSRV - detected LockedFile.Multi.Generic (1)
05:28:40.0130 4160  [ FAAEAEF99E53561BEEE58F946CA56F0D ] MSMQ            C:\Windows\system32\mqsvc.exe
05:28:40.0145 4160  MSMQ - ok
05:28:40.0161 4160  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
05:28:40.0161 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\MSPCLOCK.sys. md5: BDD71ACE35A232104DDD349EE70E1AB3
05:28:40.0161 4160  MSPCLOCK ( LockedFile.Multi.Generic ) - warning
05:28:40.0161 4160  MSPCLOCK - detected LockedFile.Multi.Generic (1)
05:28:40.0176 4160  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
05:28:40.0176 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\MSPQM.sys. md5: 4ED981241DB27C3383D72092B618A1D0
05:28:40.0176 4160  MSPQM ( LockedFile.Multi.Generic ) - warning
05:28:40.0176 4160  MSPQM - detected LockedFile.Multi.Generic (1)
05:28:40.0223 4160  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
05:28:40.0223 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\MsRPC.sys. md5: 759A9EEB0FA9ED79DA1FB7D4EF78866D
05:28:40.0223 4160  MsRPC ( LockedFile.Multi.Generic ) - warning
05:28:40.0223 4160  MsRPC - detected LockedFile.Multi.Generic (1)
05:28:40.0239 4160  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
05:28:40.0239 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\mssmbios.sys. md5: 0EED230E37515A0EAEE3C2E1BC97B288
05:28:40.0239 4160  mssmbios ( LockedFile.Multi.Generic ) - warning
05:28:40.0239 4160  mssmbios - detected LockedFile.Multi.Generic (1)
05:28:40.0254 4160  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
05:28:40.0254 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\MSTEE.sys. md5: 2E66F9ECB30B4221A318C92AC2250779
05:28:40.0270 4160  MSTEE ( LockedFile.Multi.Generic ) - warning
05:28:40.0270 4160  MSTEE - detected LockedFile.Multi.Generic (1)
05:28:40.0286 4160  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
05:28:40.0286 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\MTConfig.sys. md5: 7EA404308934E675BFFDE8EDF0757BCD
05:28:40.0286 4160  MTConfig ( LockedFile.Multi.Generic ) - warning
05:28:40.0286 4160  MTConfig - detected LockedFile.Multi.Generic (1)
05:28:40.0286 4160  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
05:28:40.0286 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\mup.sys. md5: F9A18612FD3526FE473C1BDA678D61C8
05:28:40.0301 4160  Mup ( LockedFile.Multi.Generic ) - warning
05:28:40.0301 4160  Mup - detected LockedFile.Multi.Generic (1)
05:28:40.0348 4160  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
05:28:40.0348 4160  napagent - ok
05:28:40.0379 4160  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
05:28:40.0379 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\nwifi.sys. md5: 1EA3749C4114DB3E3161156FFFFA6B33
05:28:40.0379 4160  NativeWifiP ( LockedFile.Multi.Generic ) - warning
05:28:40.0379 4160  NativeWifiP - detected LockedFile.Multi.Generic (1)
05:28:40.0410 4160  [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS            C:\Windows\system32\drivers\ndis.sys
05:28:40.0410 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\ndis.sys. md5: 79B47FD40D9A817E932F9D26FAC0A81C
05:28:40.0426 4160  NDIS ( LockedFile.Multi.Generic ) - warning
05:28:40.0426 4160  NDIS - detected LockedFile.Multi.Generic (1)
05:28:40.0442 4160  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
05:28:40.0442 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ndiscap.sys. md5: 9F9A1F53AAD7DA4D6FEF5BB73AB811AC
05:28:40.0442 4160  NdisCap ( LockedFile.Multi.Generic ) - warning
05:28:40.0442 4160  NdisCap - detected LockedFile.Multi.Generic (1)
05:28:40.0457 4160  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
05:28:40.0457 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ndistapi.sys. md5: 30639C932D9FEF22B31268FE25A1B6E5
05:28:40.0457 4160  NdisTapi ( LockedFile.Multi.Generic ) - warning
05:28:40.0457 4160  NdisTapi - detected LockedFile.Multi.Generic (1)
05:28:40.0488 4160  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
05:28:40.0488 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ndisuio.sys. md5: 136185F9FB2CC61E573E676AA5402356
05:28:40.0488 4160  Ndisuio ( LockedFile.Multi.Generic ) - warning
05:28:40.0488 4160  Ndisuio - detected LockedFile.Multi.Generic (1)
05:28:40.0535 4160  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
05:28:40.0535 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ndiswan.sys. md5: 53F7305169863F0A2BDDC49E116C2E11
05:28:40.0535 4160  NdisWan ( LockedFile.Multi.Generic ) - warning
05:28:40.0535 4160  NdisWan - detected LockedFile.Multi.Generic (1)
05:28:40.0566 4160  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
05:28:40.0566 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\NDProxy.sys. md5: 015C0D8E0E0421B4CFD48CFFE2825879
05:28:40.0566 4160  NDProxy ( LockedFile.Multi.Generic ) - warning
05:28:40.0566 4160  NDProxy - detected LockedFile.Multi.Generic (1)
05:28:40.0582 4160  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
05:28:40.0582 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\netbios.sys. md5: 86743D9F5D2B1048062B14B1D84501C4
05:28:40.0582 4160  NetBIOS ( LockedFile.Multi.Generic ) - warning
05:28:40.0582 4160  NetBIOS - detected LockedFile.Multi.Generic (1)
05:28:40.0613 4160  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
05:28:40.0613 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\netbt.sys. md5: 09594D1089C523423B32A4229263F068
05:28:40.0613 4160  NetBT ( LockedFile.Multi.Generic ) - warning
05:28:40.0613 4160  NetBT - detected LockedFile.Multi.Generic (1)
05:28:40.0644 4160  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
05:28:40.0644 4160  Netlogon - ok
05:28:40.0691 4160  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
05:28:40.0707 4160  Netman - ok
05:28:40.0754 4160  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
05:28:40.0754 4160  NetMsmqActivator - ok
05:28:40.0754 4160  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
05:28:40.0754 4160  NetPipeActivator - ok
05:28:40.0785 4160  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
05:28:40.0785 4160  netprofm - ok
05:28:40.0800 4160  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
05:28:40.0800 4160  NetTcpActivator - ok
05:28:40.0800 4160  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
05:28:40.0800 4160  NetTcpPortSharing - ok
05:28:40.0816 4160  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
05:28:40.0816 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\nfrd960.sys. md5: 77889813BE4D166CDAB78DDBA990DA92
05:28:40.0832 4160  nfrd960 ( LockedFile.Multi.Generic ) - warning
05:28:40.0832 4160  nfrd960 - detected LockedFile.Multi.Generic (1)
05:28:40.0832 4160  [ 311654EF177ACD01A2B16C34BA3F0960 ] NfsClnt         C:\Windows\system32\nfsclnt.exe
05:28:40.0832 4160  NfsClnt - ok
05:28:40.0863 4160  [ 255B989D47B063E00F89FF6446511DDB ] NfsRdr          C:\Windows\system32\drivers\nfsrdr.sys
05:28:40.0863 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nfsrdr.sys. md5: 255B989D47B063E00F89FF6446511DDB
05:28:40.0863 4160  NfsRdr ( LockedFile.Multi.Generic ) - warning
05:28:40.0863 4160  NfsRdr - detected LockedFile.Multi.Generic (1)
05:28:40.0910 4160  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
05:28:40.0910 4160  NlaSvc - ok
05:28:40.0925 4160  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
05:28:40.0925 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Npfs.sys. md5: 1E4C4AB5C9B8DD13179BBDC75A2A01F7
05:28:40.0941 4160  Npfs ( LockedFile.Multi.Generic ) - warning
05:28:40.0941 4160  Npfs - detected LockedFile.Multi.Generic (1)
05:28:40.0972 4160  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
05:28:40.0972 4160  nsi - ok
05:28:40.0988 4160  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
05:28:40.0988 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nsiproxy.sys. md5: E7F5AE18AF4168178A642A9247C63001
05:28:40.0988 4160  nsiproxy ( LockedFile.Multi.Generic ) - warning
05:28:40.0988 4160  nsiproxy - detected LockedFile.Multi.Generic (1)
05:28:41.0050 4160  [ A2F74975097F52A00745F9637451FDD8 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
05:28:41.0050 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Ntfs.sys. md5: A2F74975097F52A00745F9637451FDD8
05:28:41.0050 4160  Ntfs ( LockedFile.Multi.Generic ) - warning
05:28:41.0050 4160  Ntfs - detected LockedFile.Multi.Generic (1)
05:28:41.0066 4160  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
05:28:41.0066 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Null.sys. md5: 9899284589F75FA8724FF3D16AED75C1
05:28:41.0081 4160  Null ( LockedFile.Multi.Generic ) - warning
05:28:41.0081 4160  Null - detected LockedFile.Multi.Generic (1)
05:28:41.0097 4160  [ 285ACEC1B13A15BA520AAE06BACB9CFF ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys
05:28:41.0097 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\nusb3hub.sys. md5: 285ACEC1B13A15BA520AAE06BACB9CFF
05:28:41.0112 4160  nusb3hub ( LockedFile.Multi.Generic ) - warning
05:28:41.0112 4160  nusb3hub - detected LockedFile.Multi.Generic (1)
05:28:41.0112 4160  [ F6D625FF7B56BB6EA063F0D3A5BBC996 ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys
05:28:41.0112 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\nusb3xhc.sys. md5: F6D625FF7B56BB6EA063F0D3A5BBC996
05:28:41.0128 4160  nusb3xhc ( LockedFile.Multi.Generic ) - warning
05:28:41.0128 4160  nusb3xhc - detected LockedFile.Multi.Generic (1)
05:28:41.0159 4160  [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
05:28:41.0159 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nvhda64v.sys. md5: 102806B360D0E6BC6E55BF47EF655D43
05:28:41.0159 4160  NVHDA ( LockedFile.Multi.Generic ) - warning
05:28:41.0159 4160  NVHDA - detected LockedFile.Multi.Generic (1)
05:28:41.0362 4160  [ BA0B4889C40380A01ECDF84C227A89C9 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
05:28:41.0362 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\nvlddmkm.sys. md5: BA0B4889C40380A01ECDF84C227A89C9
05:28:41.0424 4160  nvlddmkm ( LockedFile.Multi.Generic ) - warning
05:28:41.0424 4160  nvlddmkm - detected LockedFile.Multi.Generic (1)
05:28:41.0456 4160  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
05:28:41.0456 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nvraid.sys. md5: 0A92CB65770442ED0DC44834632F66AD
05:28:41.0456 4160  nvraid ( LockedFile.Multi.Generic ) - warning
05:28:41.0456 4160  nvraid - detected LockedFile.Multi.Generic (1)
05:28:41.0471 4160  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
05:28:41.0471 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nvstor.sys. md5: DAB0E87525C10052BF65F06152F37E4A
05:28:41.0487 4160  nvstor ( LockedFile.Multi.Generic ) - warning
05:28:41.0487 4160  nvstor - detected LockedFile.Multi.Generic (1)
05:28:41.0534 4160  [ 06633CF95BEA62164C3BFCA24BCE6B11 ] nvsvc           C:\Windows\system32\nvvsvc.exe
05:28:41.0534 4160  nvsvc - ok
05:28:41.0627 4160  [ 53B629CE436B110C5689C2F6439E567B ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
05:28:41.0643 4160  nvUpdatusService - ok
05:28:41.0658 4160  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
05:28:41.0674 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\nv_agp.sys. md5: 270D7CD42D6E3979F6DD0146650F0E05
05:28:41.0674 4160  nv_agp ( LockedFile.Multi.Generic ) - warning
05:28:41.0674 4160  nv_agp - detected LockedFile.Multi.Generic (1)
05:28:41.0705 4160  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
05:28:41.0705 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\ohci1394.sys. md5: 3589478E4B22CE21B41FA1BFC0B8B8A0
05:28:41.0705 4160  ohci1394 ( LockedFile.Multi.Generic ) - warning
05:28:41.0705 4160  ohci1394 - detected LockedFile.Multi.Generic (1)
05:28:41.0736 4160  [ 4965B005492CBA7719E82B71E3245495 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
05:28:41.0736 4160  ose64 - ok
05:28:41.0830 4160  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
05:28:41.0877 4160  osppsvc - ok
05:28:42.0017 4160  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
05:28:42.0017 4160  p2pimsvc - ok
05:28:42.0048 4160  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
05:28:42.0048 4160  p2psvc - ok
05:28:42.0080 4160  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
05:28:42.0080 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\parport.sys. md5: 0086431C29C35BE1DBC43F52CC273887
05:28:42.0080 4160  Parport ( LockedFile.Multi.Generic ) - warning
05:28:42.0080 4160  Parport - detected LockedFile.Multi.Generic (1)
05:28:42.0111 4160  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
05:28:42.0111 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\partmgr.sys. md5: E9766131EEADE40A27DC27D2D68FBA9C
05:28:42.0126 4160  partmgr ( LockedFile.Multi.Generic ) - warning
05:28:42.0126 4160  partmgr - detected LockedFile.Multi.Generic (1)
05:28:42.0142 4160  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
05:28:42.0142 4160  PcaSvc - ok
05:28:42.0173 4160  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
05:28:42.0173 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\pci.sys. md5: 94575C0571D1462A0F70BDE6BD6EE6B3
05:28:42.0189 4160  pci ( LockedFile.Multi.Generic ) - warning
05:28:42.0189 4160  pci - detected LockedFile.Multi.Generic (1)
05:28:42.0204 4160  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
05:28:42.0204 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\pciide.sys. md5: B5B8B5EF2E5CB34DF8DCF8831E3534FA
05:28:42.0204 4160  pciide ( LockedFile.Multi.Generic ) - warning
05:28:42.0204 4160  pciide - detected LockedFile.Multi.Generic (1)
05:28:42.0236 4160  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
05:28:42.0236 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\pcmcia.sys. md5: B2E81D4E87CE48589F98CB8C05B01F2F
05:28:42.0236 4160  pcmcia ( LockedFile.Multi.Generic ) - warning
05:28:42.0236 4160  pcmcia - detected LockedFile.Multi.Generic (1)
05:28:42.0251 4160  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
05:28:42.0251 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\pcw.sys. md5: D6B9C2E1A11A3A4B26A182FFEF18F603
05:28:42.0251 4160  pcw ( LockedFile.Multi.Generic ) - warning
05:28:42.0251 4160  pcw - detected LockedFile.Multi.Generic (1)
05:28:42.0282 4160  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
05:28:42.0282 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\peauth.sys. md5: 68769C3356B3BE5D1C732C97B9A80D6E
05:28:42.0298 4160  PEAUTH ( LockedFile.Multi.Generic ) - warning
05:28:42.0298 4160  PEAUTH - detected LockedFile.Multi.Generic (1)
05:28:42.0345 4160  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
05:28:42.0360 4160  PeerDistSvc - ok
05:28:42.0423 4160  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
05:28:42.0423 4160  PerfHost - ok
05:28:42.0501 4160  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
05:28:42.0516 4160  pla - ok
05:28:42.0563 4160  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
05:28:42.0563 4160  PlugPlay - ok
05:28:42.0610 4160  PnkBstrA - ok
05:28:42.0626 4160  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
05:28:42.0626 4160  PNRPAutoReg - ok
05:28:42.0641 4160  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
05:28:42.0641 4160  PNRPsvc - ok
05:28:42.0688 4160  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
05:28:42.0688 4160  PolicyAgent - ok
05:28:42.0735 4160  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
05:28:42.0735 4160  Power - ok
05:28:42.0766 4160  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
05:28:42.0766 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\raspptp.sys. md5: F92A2C41117A11A00BE01CA01A7FCDE9
05:28:42.0766 4160  PptpMiniport ( LockedFile.Multi.Generic ) - warning
05:28:42.0766 4160  PptpMiniport - detected LockedFile.Multi.Generic (1)
05:28:42.0797 4160  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
05:28:42.0797 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\processr.sys. md5: 0D922E23C041EFB1C3FAC2A6F943C9BF
05:28:42.0797 4160  Processor ( LockedFile.Multi.Generic ) - warning
05:28:42.0797 4160  Processor - detected LockedFile.Multi.Generic (1)
05:28:42.0828 4160  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
05:28:42.0844 4160  ProfSvc - ok
05:28:42.0844 4160  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
05:28:42.0844 4160  ProtectedStorage - ok
05:28:42.0891 4160  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
05:28:42.0891 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\pacer.sys. md5: 0557CF5A2556BD58E26384169D72438D
05:28:42.0891 4160  Psched ( LockedFile.Multi.Generic ) - warning
05:28:42.0891 4160  Psched - detected LockedFile.Multi.Generic (1)
05:28:42.0922 4160  [ FDA6EFB7014E8C4524CB6B5B885E8A95 ] PsxDrv          C:\Windows\system32\drivers\psxdrv.sys
05:28:42.0922 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\psxdrv.sys. md5: FDA6EFB7014E8C4524CB6B5B885E8A95
05:28:42.0938 4160  PsxDrv ( LockedFile.Multi.Generic ) - warning
05:28:42.0938 4160  PsxDrv - detected LockedFile.Multi.Generic (1)
05:28:42.0953 4160  [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
05:28:42.0953 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\PxHlpa64.sys. md5: 87B04878A6D59D6C79251DC960C674C1
05:28:42.0969 4160  PxHlpa64 ( LockedFile.Multi.Generic ) - warning
05:28:42.0969 4160  PxHlpa64 - detected LockedFile.Multi.Generic (1)
05:28:43.0000 4160  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
05:28:43.0000 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ql2300.sys. md5: A53A15A11EBFD21077463EE2C7AFEEF0
05:28:43.0000 4160  ql2300 ( LockedFile.Multi.Generic ) - warning
05:28:43.0000 4160  ql2300 - detected LockedFile.Multi.Generic (1)
05:28:43.0031 4160  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
05:28:43.0031 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ql40xx.sys. md5: 4F6D12B51DE1AAEFF7DC58C4D75423C8
05:28:43.0031 4160  ql40xx ( LockedFile.Multi.Generic ) - warning
05:28:43.0031 4160  ql40xx - detected LockedFile.Multi.Generic (1)
05:28:43.0062 4160  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
05:28:43.0078 4160  QWAVE - ok
05:28:43.0094 4160  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
05:28:43.0094 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\qwavedrv.sys. md5: 76707BB36430888D9CE9D705398ADB6C
05:28:43.0094 4160  QWAVEdrv ( LockedFile.Multi.Generic ) - warning
05:28:43.0094 4160  QWAVEdrv - detected LockedFile.Multi.Generic (1)
05:28:43.0109 4160  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
05:28:43.0109 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rasacd.sys. md5: 5A0DA8AD5762FA2D91678A8A01311704
05:28:43.0125 4160  RasAcd ( LockedFile.Multi.Generic ) - warning
05:28:43.0125 4160  RasAcd - detected LockedFile.Multi.Generic (1)
05:28:43.0156 4160  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
05:28:43.0156 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\AgileVpn.sys. md5: 7ECFF9B22276B73F43A99A15A6094E90
05:28:43.0156 4160  RasAgileVpn ( LockedFile.Multi.Generic ) - warning
05:28:43.0156 4160  RasAgileVpn - detected LockedFile.Multi.Generic (1)
05:28:43.0172 4160  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
05:28:43.0172 4160  RasAuto - ok
05:28:43.0187 4160  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
05:28:43.0187 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rasl2tp.sys. md5: 471815800AE33E6F1C32FB1B97C490CA
05:28:43.0187 4160  Rasl2tp ( LockedFile.Multi.Generic ) - warning
05:28:43.0187 4160  Rasl2tp - detected LockedFile.Multi.Generic (1)
05:28:43.0218 4160  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
05:28:43.0234 4160  RasMan - ok
05:28:43.0265 4160  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
05:28:43.0265 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\raspppoe.sys. md5: 855C9B1CD4756C5E9A2AA58A15F58C25
05:28:43.0265 4160  RasPppoe ( LockedFile.Multi.Generic ) - warning
05:28:43.0265 4160  RasPppoe - detected LockedFile.Multi.Generic (1)
05:28:43.0312 4160  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
05:28:43.0312 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rassstp.sys. md5: E8B1E447B008D07FF47D016C2B0EEECB
05:28:43.0312 4160  RasSstp ( LockedFile.Multi.Generic ) - warning
05:28:43.0312 4160  RasSstp - detected LockedFile.Multi.Generic (1)
05:28:43.0328 4160  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
05:28:43.0328 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rdbss.sys. md5: 77F665941019A1594D887A74F301FA2F
05:28:43.0328 4160  rdbss ( LockedFile.Multi.Generic ) - warning
05:28:43.0328 4160  rdbss - detected LockedFile.Multi.Generic (1)
05:28:43.0359 4160  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
05:28:43.0359 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rdpbus.sys. md5: 302DA2A0539F2CF54D7C6CC30C1F2D8D
05:28:43.0359 4160  rdpbus ( LockedFile.Multi.Generic ) - warning
05:28:43.0359 4160  rdpbus - detected LockedFile.Multi.Generic (1)
05:28:43.0374 4160  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
05:28:43.0374 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\RDPCDD.sys. md5: CEA6CC257FC9B7715F1C2B4849286D24
05:28:43.0390 4160  RDPCDD ( LockedFile.Multi.Generic ) - warning
05:28:43.0390 4160  RDPCDD - detected LockedFile.Multi.Generic (1)
05:28:43.0421 4160  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
05:28:43.0421 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rdpdr.sys. md5: 1B6163C503398B23FF8B939C67747683
05:28:43.0421 4160  RDPDR ( LockedFile.Multi.Generic ) - warning
05:28:43.0421 4160  RDPDR - detected LockedFile.Multi.Generic (1)
05:28:43.0437 4160  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
05:28:43.0437 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rdpencdd.sys. md5: BB5971A4F00659529A5C44831AF22365
05:28:43.0452 4160  RDPENCDD ( LockedFile.Multi.Generic ) - warning
05:28:43.0452 4160  RDPENCDD - detected LockedFile.Multi.Generic (1)
05:28:43.0468 4160  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
05:28:43.0468 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rdprefmp.sys. md5: 216F3FA57533D98E1F74DED70113177A
05:28:43.0468 4160  RDPREFMP ( LockedFile.Multi.Generic ) - warning
05:28:43.0468 4160  RDPREFMP - detected LockedFile.Multi.Generic (1)
05:28:43.0530 4160  [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
05:28:43.0530 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rdpvideominiport.sys. md5: 70CBA1A0C98600A2AA1863479B35CB90
05:28:43.0530 4160  RdpVideoMiniport ( LockedFile.Multi.Generic ) - warning
05:28:43.0530 4160  RdpVideoMiniport - detected LockedFile.Multi.Generic (1)
05:28:43.0562 4160  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
05:28:43.0562 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\RDPWD.sys. md5: E61608AA35E98999AF9AAEEEA6114B0A
05:28:43.0562 4160  RDPWD ( LockedFile.Multi.Generic ) - warning
05:28:43.0562 4160  RDPWD - detected LockedFile.Multi.Generic (1)
05:28:43.0608 4160  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
05:28:43.0608 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rdyboost.sys. md5: 34ED295FA0121C241BFEF24764FC4520
05:28:43.0608 4160  rdyboost ( LockedFile.Multi.Generic ) - warning
05:28:43.0608 4160  rdyboost - detected LockedFile.Multi.Generic (1)
05:28:43.0655 4160  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
05:28:43.0655 4160  RemoteAccess - ok
05:28:43.0671 4160  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
05:28:43.0671 4160  RemoteRegistry - ok
05:28:43.0889 4160  [ CAF88D6573D21CD2AA27001DDBFDC74D ] RMCAST          C:\Windows\system32\DRIVERS\RMCAST.sys
05:28:43.0889 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\RMCAST.sys. md5: CAF88D6573D21CD2AA27001DDBFDC74D
05:28:43.0920 4160  RMCAST ( LockedFile.Multi.Generic ) - warning
05:28:43.0920 4160  RMCAST - detected LockedFile.Multi.Generic (1)
05:28:43.0952 4160  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
05:28:43.0952 4160  RpcEptMapper - ok
05:28:43.0983 4160  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
05:28:43.0983 4160  RpcLocator - ok
05:28:44.0030 4160  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
05:28:44.0030 4160  RpcSs - ok
05:28:44.0092 4160  [ 4AFDE1E8925A06BA253DAB6541701F5C ] RpcXdr          C:\Windows\system32\drivers\rpcxdr.sys
05:28:44.0092 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\rpcxdr.sys. md5: 4AFDE1E8925A06BA253DAB6541701F5C
05:28:44.0092 4160  RpcXdr ( LockedFile.Multi.Generic ) - warning
05:28:44.0092 4160  RpcXdr - detected LockedFile.Multi.Generic (1)
05:28:44.0108 4160  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
05:28:44.0108 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\rspndr.sys. md5: DDC86E4F8E7456261E637E3552E804FF
05:28:44.0108 4160  rspndr ( LockedFile.Multi.Generic ) - warning
05:28:44.0108 4160  rspndr - detected LockedFile.Multi.Generic (1)
05:28:44.0139 4160  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
05:28:44.0139 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\vms3cap.sys. md5: E60C0A09F997826C7627B244195AB581
05:28:44.0139 4160  s3cap ( LockedFile.Multi.Generic ) - warning
05:28:44.0139 4160  s3cap - detected LockedFile.Multi.Generic (1)
05:28:44.0186 4160  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
05:28:44.0186 4160  SamSs - ok
05:28:44.0232 4160  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
05:28:44.0232 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\sbp2port.sys. md5: AC03AF3329579FFFB455AA2DAABBE22B
05:28:44.0232 4160  sbp2port ( LockedFile.Multi.Generic ) - warning
05:28:44.0232 4160  sbp2port - detected LockedFile.Multi.Generic (1)
05:28:44.0264 4160  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
05:28:44.0264 4160  SCardSvr - ok
05:28:44.0310 4160  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
05:28:44.0310 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\scfilter.sys. md5: 253F38D0D7074C02FF8DEB9836C97D2B
05:28:44.0326 4160  scfilter ( LockedFile.Multi.Generic ) - warning
05:28:44.0326 4160  scfilter - detected LockedFile.Multi.Generic (1)
05:28:44.0373 4160  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
05:28:44.0420 4160  Schedule - ok
05:28:44.0451 4160  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
05:28:44.0451 4160  SCPolicySvc - ok
05:28:44.0482 4160  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
05:28:44.0482 4160  SDRSVC - ok
05:28:44.0498 4160  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
05:28:44.0498 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\secdrv.sys. md5: 3EA8A16169C26AFBEB544E0E48421186
05:28:44.0498 4160  secdrv ( LockedFile.Multi.Generic ) - warning
05:28:44.0498 4160  secdrv - detected LockedFile.Multi.Generic (1)
05:28:44.0529 4160  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
05:28:44.0529 4160  seclogon - ok
05:28:44.0560 4160  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
05:28:44.0560 4160  SENS - ok
05:28:44.0576 4160  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
05:28:44.0576 4160  SensrSvc - ok
05:28:44.0591 4160  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
05:28:44.0591 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\serenum.sys. md5: CB624C0035412AF0DEBEC78C41F5CA1B
05:28:44.0591 4160  Serenum ( LockedFile.Multi.Generic ) - warning
05:28:44.0591 4160  Serenum - detected LockedFile.Multi.Generic (1)
05:28:44.0607 4160  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
05:28:44.0607 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\serial.sys. md5: C1D8E28B2C2ADFAEC4BA89E9FDA69BD6
05:28:44.0622 4160  Serial ( LockedFile.Multi.Generic ) - warning
05:28:44.0622 4160  Serial - detected LockedFile.Multi.Generic (1)
05:28:44.0669 4160  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
05:28:44.0669 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\sermouse.sys. md5: 1C545A7D0691CC4A027396535691C3E3
05:28:44.0669 4160  sermouse ( LockedFile.Multi.Generic ) - warning
05:28:44.0669 4160  sermouse - detected LockedFile.Multi.Generic (1)
05:28:44.0716 4160  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
05:28:44.0732 4160  SessionEnv - ok
05:28:44.0763 4160  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
05:28:44.0763 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\sffdisk.sys. md5: A554811BCD09279536440C964AE35BBF
05:28:44.0763 4160  sffdisk ( LockedFile.Multi.Generic ) - warning
05:28:44.0763 4160  sffdisk - detected LockedFile.Multi.Generic (1)
05:28:44.0778 4160  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
05:28:44.0778 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\sffp_mmc.sys. md5: FF414F0BAEFEBA59BC6C04B3DB0B87BF
05:28:44.0794 4160  sffp_mmc ( LockedFile.Multi.Generic ) - warning
05:28:44.0794 4160  sffp_mmc - detected LockedFile.Multi.Generic (1)
05:28:44.0810 4160  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
05:28:44.0810 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\sffp_sd.sys. md5: DD85B78243A19B59F0637DCF284DA63C
05:28:44.0825 4160  sffp_sd ( LockedFile.Multi.Generic ) - warning
05:28:44.0825 4160  sffp_sd - detected LockedFile.Multi.Generic (1)
05:28:44.0841 4160  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
05:28:44.0841 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\sfloppy.sys. md5: A9D601643A1647211A1EE2EC4E433FF4
05:28:44.0841 4160  sfloppy ( LockedFile.Multi.Generic ) - warning
05:28:44.0841 4160  sfloppy - detected LockedFile.Multi.Generic (1)
05:28:44.0888 4160  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
05:28:44.0888 4160  SharedAccess - ok
05:28:44.0934 4160  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
05:28:44.0934 4160  ShellHWDetection - ok
05:28:44.0966 4160  [ E9E830D540EDEDED650F906628468548 ] simptcp         C:\Windows\System32\tcpsvcs.exe
05:28:44.0966 4160  simptcp - ok
05:28:44.0997 4160  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
05:28:44.0997 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\SiSRaid2.sys. md5: 843CAF1E5FDE1FFD5FF768F23A51E2E1
05:28:44.0997 4160  SiSRaid2 ( LockedFile.Multi.Generic ) - warning
05:28:44.0997 4160  SiSRaid2 - detected LockedFile.Multi.Generic (1)
05:28:45.0012 4160  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
05:28:45.0012 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\sisraid4.sys. md5: 6A6C106D42E9FFFF8B9FCB4F754F6DA4
05:28:45.0012 4160  SiSRaid4 ( LockedFile.Multi.Generic ) - warning
05:28:45.0012 4160  SiSRaid4 - detected LockedFile.Multi.Generic (1)
05:28:45.0075 4160  [ 94CE7845AF6A2065B829E0126CD56236 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys
05:28:45.0075 4160  Suspicious file (NoAccess): C:\Windows\system32\Drivers\SmartDefragDriver.sys. md5: 94CE7845AF6A2065B829E0126CD56236
05:28:45.0075 4160  SmartDefragDriver ( LockedFile.Multi.Generic ) - warning
05:28:45.0075 4160  SmartDefragDriver - detected LockedFile.Multi.Generic (1)
05:28:45.0090 4160  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
05:28:45.0090 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\smb.sys. md5: 548260A7B8654E024DC30BF8A7C5BAA4
05:28:45.0106 4160  Smb ( LockedFile.Multi.Generic ) - warning
05:28:45.0106 4160  Smb - detected LockedFile.Multi.Generic (1)
05:28:45.0137 4160  [ CA62AE004E98374BF7F082CD765EEA02 ] SNMP            C:\Windows\System32\snmp.exe
05:28:45.0153 4160  SNMP - ok
05:28:45.0184 4160  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
05:28:45.0184 4160  SNMPTRAP - ok
05:28:45.0215 4160  [ 7455ED832A33FEF453407F5411C3342D ] speedfan        C:\Windows\syswow64\speedfan.sys
05:28:45.0215 4160  Suspicious file (NoAccess): C:\Windows\syswow64\speedfan.sys. md5: 7455ED832A33FEF453407F5411C3342D
05:28:45.0215 4160  speedfan ( LockedFile.Multi.Generic ) - warning
05:28:45.0215 4160  speedfan - detected LockedFile.Multi.Generic (1)
05:28:45.0231 4160  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
05:28:45.0231 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\spldr.sys. md5: B9E31E5CACDFE584F34F730A677803F9
05:28:45.0246 4160  spldr ( LockedFile.Multi.Generic ) - warning
05:28:45.0246 4160  spldr - detected LockedFile.Multi.Generic (1)
05:28:45.0293 4160  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
05:28:45.0293 4160  Spooler - ok
05:28:45.0371 4160  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
05:28:45.0387 4160  sppsvc - ok
05:28:45.0465 4160  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
05:28:45.0465 4160  sppuinotify - ok
05:28:45.0496 4160  [ 4B3F898DC1378CED2F35D04E5B0CE0DF ] sptd            C:\Windows\System32\Drivers\sptd.sys
05:28:45.0496 4160  Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: 4B3F898DC1378CED2F35D04E5B0CE0DF
05:28:45.0512 4160  sptd ( LockedFile.Multi.Generic ) - warning
05:28:45.0512 4160  sptd - detected LockedFile.Multi.Generic (1)
05:28:45.0543 4160  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
05:28:45.0543 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\srv.sys. md5: 441FBA48BFF01FDB9D5969EBC1838F0B
05:28:45.0543 4160  srv ( LockedFile.Multi.Generic ) - warning
05:28:45.0543 4160  srv - detected LockedFile.Multi.Generic (1)
05:28:45.0558 4160  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
05:28:45.0558 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\srv2.sys. md5: B4ADEBBF5E3677CCE9651E0F01F7CC28
05:28:45.0574 4160  srv2 ( LockedFile.Multi.Generic ) - warning
05:28:45.0574 4160  srv2 - detected LockedFile.Multi.Generic (1)
05:28:45.0590 4160  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
05:28:45.0590 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\srvnet.sys. md5: 27E461F0BE5BFF5FC737328F749538C3
05:28:45.0590 4160  srvnet ( LockedFile.Multi.Generic ) - warning
05:28:45.0590 4160  srvnet - detected LockedFile.Multi.Generic (1)
05:28:45.0605 4160  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
05:28:45.0605 4160  SSDPSRV - ok
05:28:45.0621 4160  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
05:28:45.0621 4160  SstpSvc - ok
05:28:45.0652 4160  [ 9E1BFA37FCF943C3B48F71F08019EA95 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
05:28:45.0652 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\ssudmdm.sys. md5: 9E1BFA37FCF943C3B48F71F08019EA95
05:28:45.0668 4160  ssudmdm ( LockedFile.Multi.Generic ) - warning
05:28:45.0668 4160  ssudmdm - detected LockedFile.Multi.Generic (1)
05:28:45.0714 4160  Steam Client Service - ok
05:28:45.0777 4160  [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
05:28:45.0792 4160  Stereo Service - ok
05:28:45.0808 4160  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
05:28:45.0808 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\stexstor.sys. md5: F3817967ED533D08327DC73BC4D5542A
05:28:45.0808 4160  stexstor ( LockedFile.Multi.Generic ) - warning
05:28:45.0808 4160  stexstor - detected LockedFile.Multi.Generic (1)
05:28:45.0870 4160  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
05:28:45.0870 4160  stisvc - ok
05:28:45.0902 4160  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
05:28:45.0902 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\vmstorfl.sys. md5: 7785DC213270D2FC066538DAF94087E7
05:28:45.0902 4160  storflt ( LockedFile.Multi.Generic ) - warning
05:28:45.0902 4160  storflt - detected LockedFile.Multi.Generic (1)
05:28:45.0933 4160  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
05:28:45.0933 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\storvsc.sys. md5: D34E4943D5AC096C8EDEEBFD80D76E23
05:28:45.0933 4160  storvsc ( LockedFile.Multi.Generic ) - warning
05:28:45.0933 4160  storvsc - detected LockedFile.Multi.Generic (1)
05:28:45.0964 4160  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
05:28:45.0964 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\swenum.sys. md5: D01EC09B6711A5F8E7E6564A4D0FBC90
05:28:45.0964 4160  swenum ( LockedFile.Multi.Generic ) - warning
05:28:45.0964 4160  swenum - detected LockedFile.Multi.Generic (1)
05:28:46.0011 4160  [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
05:28:46.0026 4160  SwitchBoard - ok
05:28:46.0058 4160  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
05:28:46.0073 4160  swprv - ok
05:28:46.0089 4160  Synth3dVsc - ok
05:28:46.0136 4160  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
05:28:46.0151 4160  SysMain - ok
05:28:46.0182 4160  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
05:28:46.0182 4160  TabletInputService - ok
05:28:46.0198 4160  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
05:28:46.0214 4160  TapiSrv - ok
05:28:46.0229 4160  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
05:28:46.0229 4160  TBS - ok
05:28:46.0292 4160  [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
05:28:46.0292 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\tcpip.sys. md5: ACB82BDA8F46C84F465C1AFA517DC4B9
05:28:46.0292 4160  Tcpip ( LockedFile.Multi.Generic ) - warning
05:28:46.0292 4160  Tcpip - detected LockedFile.Multi.Generic (1)
05:28:46.0323 4160  [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
05:28:46.0323 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\tcpip.sys. md5: ACB82BDA8F46C84F465C1AFA517DC4B9
05:28:46.0323 4160  TCPIP6 ( LockedFile.Multi.Generic ) - warning
05:28:46.0323 4160  TCPIP6 - detected LockedFile.Multi.Generic (1)
05:28:46.0370 4160  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
05:28:46.0370 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\tcpipreg.sys. md5: DF687E3D8836BFB04FCC0615BF15A519
05:28:46.0385 4160  tcpipreg ( LockedFile.Multi.Generic ) - warning
05:28:46.0385 4160  tcpipreg - detected LockedFile.Multi.Generic (1)
05:28:46.0416 4160  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
05:28:46.0416 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\tdpipe.sys. md5: 3371D21011695B16333A3934340C4E7C
05:28:46.0416 4160  TDPIPE ( LockedFile.Multi.Generic ) - warning
05:28:46.0416 4160  TDPIPE - detected LockedFile.Multi.Generic (1)
05:28:46.0448 4160  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
05:28:46.0448 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\tdtcp.sys. md5: 51C5ECEB1CDEE2468A1748BE550CFBC8
05:28:46.0448 4160  TDTCP ( LockedFile.Multi.Generic ) - warning
05:28:46.0448 4160  TDTCP - detected LockedFile.Multi.Generic (1)
05:28:46.0479 4160  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
05:28:46.0479 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\tdx.sys. md5: DDAD5A7AB24D8B65F8D724F5C20FD806
05:28:46.0494 4160  tdx ( LockedFile.Multi.Generic ) - warning
05:28:46.0494 4160  tdx - detected LockedFile.Multi.Generic (1)
05:28:46.0510 4160  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
05:28:46.0510 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\termdd.sys. md5: 561E7E1F06895D78DE991E01DD0FB6E5
05:28:46.0510 4160  TermDD ( LockedFile.Multi.Generic ) - warning
05:28:46.0510 4160  TermDD - detected LockedFile.Multi.Generic (1)
05:28:46.0557 4160  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
05:28:46.0557 4160  TermService - ok
05:28:46.0588 4160  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
05:28:46.0588 4160  Themes - ok
05:28:46.0619 4160  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
05:28:46.0619 4160  THREADORDER - ok
05:28:46.0666 4160  [ 519CB7D7F697F4BA47DE05845C20F158 ] TlntSvr         C:\Windows\System32\tlntsvr.exe
05:28:46.0666 4160  TlntSvr - ok
05:28:46.0697 4160  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
05:28:46.0697 4160  TrkWks - ok
05:28:46.0744 4160  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
05:28:46.0744 4160  TrustedInstaller - ok
05:28:46.0775 4160  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
05:28:46.0775 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\tssecsrv.sys. md5: CE18B2CDFC837C99E5FAE9CA6CBA5D30
05:28:46.0775 4160  tssecsrv ( LockedFile.Multi.Generic ) - warning
05:28:46.0775 4160  tssecsrv - detected LockedFile.Multi.Generic (1)
05:28:46.0791 4160  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
05:28:46.0791 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\tsusbflt.sys. md5: D11C783E3EF9A3C52C0EBE83CC5000E9
05:28:46.0791 4160  TsUsbFlt ( LockedFile.Multi.Generic ) - warning
05:28:46.0791 4160  TsUsbFlt - detected LockedFile.Multi.Generic (1)
05:28:46.0806 4160  tsusbhub - ok
05:28:46.0838 4160  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
05:28:46.0838 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\tunnel.sys. md5: 3566A8DAAFA27AF944F5D705EAA64894
05:28:46.0838 4160  tunnel ( LockedFile.Multi.Generic ) - warning
05:28:46.0838 4160  tunnel - detected LockedFile.Multi.Generic (1)
05:28:46.0853 4160  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
05:28:46.0853 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\uagp35.sys. md5: B4DD609BD7E282BFC683CEC7EAAAAD67
05:28:46.0869 4160  uagp35 ( LockedFile.Multi.Generic ) - warning
05:28:46.0869 4160  uagp35 - detected LockedFile.Multi.Generic (1)
05:28:46.0900 4160  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
05:28:46.0900 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\udfs.sys. md5: FF4232A1A64012BAA1FD97C7B67DF593
05:28:46.0900 4160  udfs ( LockedFile.Multi.Generic ) - warning
05:28:46.0900 4160  udfs - detected LockedFile.Multi.Generic (1)
05:28:46.0931 4160  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
05:28:46.0931 4160  UI0Detect - ok
05:28:46.0947 4160  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
05:28:46.0947 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\uliagpkx.sys. md5: 4BFE1BC28391222894CBF1E7D0E42320
05:28:46.0947 4160  uliagpkx ( LockedFile.Multi.Generic ) - warning
05:28:46.0947 4160  uliagpkx - detected LockedFile.Multi.Generic (1)
05:28:46.0978 4160  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
05:28:46.0978 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\umbus.sys. md5: DC54A574663A895C8763AF0FA1FF7561
05:28:46.0978 4160  umbus ( LockedFile.Multi.Generic ) - warning
05:28:46.0978 4160  umbus - detected LockedFile.Multi.Generic (1)
05:28:47.0072 4160  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
05:28:47.0072 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\umpass.sys. md5: B2E8E8CB557B156DA5493BBDDCC1474D
05:28:47.0072 4160  UmPass ( LockedFile.Multi.Generic ) - warning
05:28:47.0072 4160  UmPass - detected LockedFile.Multi.Generic (1)
05:28:47.0274 4160  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
05:28:47.0290 4160  UmRdpService - ok
05:28:47.0321 4160  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
05:28:47.0321 4160  upnphost - ok
05:28:47.0352 4160  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
05:28:47.0352 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\usbccgp.sys. md5: 6F1A3157A1C89435352CEB543CDB359C
05:28:47.0352 4160  usbccgp ( LockedFile.Multi.Generic ) - warning
05:28:47.0352 4160  usbccgp - detected LockedFile.Multi.Generic (1)
05:28:47.0384 4160  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
05:28:47.0384 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\usbcir.sys. md5: AF0892A803FDDA7492F595368E3B68E7
05:28:47.0384 4160  usbcir ( LockedFile.Multi.Generic ) - warning
05:28:47.0384 4160  usbcir - detected LockedFile.Multi.Generic (1)
05:28:47.0399 4160  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\drivers\usbehci.sys
05:28:47.0399 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\usbehci.sys. md5: C025055FE7B87701EB042095DF1A2D7B
05:28:47.0399 4160  usbehci ( LockedFile.Multi.Generic ) - warning
05:28:47.0399 4160  usbehci - detected LockedFile.Multi.Generic (1)
05:28:47.0430 4160  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
05:28:47.0430 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\usbhub.sys. md5: 287C6C9410B111B68B52CA298F7B8C24
05:28:47.0430 4160  usbhub ( LockedFile.Multi.Generic ) - warning
05:28:47.0430 4160  usbhub - detected LockedFile.Multi.Generic (1)
05:28:47.0446 4160  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
05:28:47.0446 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\usbohci.sys. md5: 9840FC418B4CBD632D3D0A667A725C31
05:28:47.0462 4160  usbohci ( LockedFile.Multi.Generic ) - warning
05:28:47.0462 4160  usbohci - detected LockedFile.Multi.Generic (1)
05:28:47.0462 4160  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
05:28:47.0462 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\usbprint.sys. md5: 73188F58FB384E75C4063D29413CEE3D
05:28:47.0477 4160  usbprint ( LockedFile.Multi.Generic ) - warning
05:28:47.0477 4160  usbprint - detected LockedFile.Multi.Generic (1)
05:28:47.0493 4160  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
05:28:47.0493 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\USBSTOR.SYS. md5: FED648B01349A3C8395A5169DB5FB7D6
05:28:47.0493 4160  USBSTOR ( LockedFile.Multi.Generic ) - warning
05:28:47.0493 4160  USBSTOR - detected LockedFile.Multi.Generic (1)
05:28:47.0508 4160  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
05:28:47.0508 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\usbuhci.sys. md5: 62069A34518BCF9C1FD9E74B3F6DB7CD
05:28:47.0508 4160  usbuhci ( LockedFile.Multi.Generic ) - warning
05:28:47.0508 4160  usbuhci - detected LockedFile.Multi.Generic (1)
05:28:47.0540 4160  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
05:28:47.0540 4160  UxSms - ok
05:28:47.0555 4160  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
05:28:47.0555 4160  VaultSvc - ok
05:28:47.0571 4160  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
05:28:47.0571 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\vdrvroot.sys. md5: C5C876CCFC083FF3B128F933823E87BD
05:28:47.0571 4160  vdrvroot ( LockedFile.Multi.Generic ) - warning
05:28:47.0571 4160  vdrvroot - detected LockedFile.Multi.Generic (1)
05:28:47.0602 4160  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
05:28:47.0602 4160  vds - ok
05:28:47.0633 4160  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
05:28:47.0633 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\vgapnp.sys. md5: DA4DA3F5E02943C2DC8C6ED875DE68DD
05:28:47.0633 4160  vga ( LockedFile.Multi.Generic ) - warning
05:28:47.0633 4160  vga - detected LockedFile.Multi.Generic (1)
05:28:47.0649 4160  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
05:28:47.0649 4160  Suspicious file (NoAccess): C:\Windows\System32\drivers\vga.sys. md5: 53E92A310193CB3C03BEA963DE7D9CFC
05:28:47.0664 4160  VgaSave ( LockedFile.Multi.Generic ) - warning
05:28:47.0664 4160  VgaSave - detected LockedFile.Multi.Generic (1)
05:28:47.0664 4160  VGPU - ok
05:28:47.0696 4160  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
05:28:47.0696 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\vhdmp.sys. md5: 2CE2DF28C83AEAF30084E1B1EB253CBB
05:28:47.0711 4160  vhdmp ( LockedFile.Multi.Generic ) - warning
05:28:47.0711 4160  vhdmp - detected LockedFile.Multi.Generic (1)
05:28:47.0742 4160  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
05:28:47.0742 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\viaide.sys. md5: E5689D93FFE4E5D66C0178761240DD54
05:28:47.0742 4160  viaide ( LockedFile.Multi.Generic ) - warning
05:28:47.0742 4160  viaide - detected LockedFile.Multi.Generic (1)
05:28:47.0742 4160  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys
05:28:47.0742 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\vmbus.sys. md5: 86EA3E79AE350FEA5331A1303054005F
05:28:47.0758 4160  vmbus ( LockedFile.Multi.Generic ) - warning
05:28:47.0758 4160  vmbus - detected LockedFile.Multi.Generic (1)
05:28:47.0774 4160  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
05:28:47.0774 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\VMBusHID.sys. md5: 7DE90B48F210D29649380545DB45A187
05:28:47.0774 4160  VMBusHID ( LockedFile.Multi.Generic ) - warning
05:28:47.0774 4160  VMBusHID - detected LockedFile.Multi.Generic (1)
05:28:47.0789 4160  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
05:28:47.0789 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\volmgr.sys. md5: D2AAFD421940F640B407AEFAAEBD91B0
05:28:47.0789 4160  volmgr ( LockedFile.Multi.Generic ) - warning
05:28:47.0789 4160  volmgr - detected LockedFile.Multi.Generic (1)
05:28:47.0836 4160  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
05:28:47.0836 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\volmgrx.sys. md5: A255814907C89BE58B79EF2F189B843B
05:28:47.0836 4160  volmgrx ( LockedFile.Multi.Generic ) - warning
05:28:47.0836 4160  volmgrx - detected LockedFile.Multi.Generic (1)
05:28:47.0852 4160  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
05:28:47.0852 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\volsnap.sys. md5: 0D08D2F3B3FF84E433346669B5E0F639
05:28:47.0852 4160  volsnap ( LockedFile.Multi.Generic ) - warning
05:28:47.0852 4160  volsnap - detected LockedFile.Multi.Generic (1)
05:28:47.0883 4160  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
05:28:47.0883 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\vsmraid.sys. md5: 5E2016EA6EBACA03C04FEAC5F330D997
05:28:47.0883 4160  vsmraid ( LockedFile.Multi.Generic ) - warning
05:28:47.0883 4160  vsmraid - detected LockedFile.Multi.Generic (1)
05:28:47.0930 4160  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
05:28:47.0945 4160  VSS - ok
05:28:47.0961 4160  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
05:28:47.0961 4160  Suspicious file (NoAccess): C:\Windows\System32\drivers\vwifibus.sys. md5: 36D4720B72B5C5D9CB2B9C29E9DF67A1
05:28:47.0961 4160  vwifibus ( LockedFile.Multi.Generic ) - warning
05:28:47.0961 4160  vwifibus - detected LockedFile.Multi.Generic (1)
05:28:47.0992 4160  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
05:28:47.0992 4160  W32Time - ok
05:28:48.0070 4160  [ B32009DB1972E7F2C227499289C4384A ] W3SVC           C:\Windows\system32\inetsrv\iisw3adm.dll
05:28:48.0070 4160  W3SVC - ok
05:28:48.0086 4160  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
05:28:48.0086 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\wacompen.sys. md5: 4E9440F4F152A7B944CB1663D3935A3E
05:28:48.0101 4160  WacomPen ( LockedFile.Multi.Generic ) - warning
05:28:48.0101 4160  WacomPen - detected LockedFile.Multi.Generic (1)
05:28:48.0117 4160  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
05:28:48.0117 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\wanarp.sys. md5: 356AFD78A6ED4457169241AC3965230C
05:28:48.0117 4160  WANARP ( LockedFile.Multi.Generic ) - warning
05:28:48.0117 4160  WANARP - detected LockedFile.Multi.Generic (1)
05:28:48.0164 4160  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
05:28:48.0164 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\wanarp.sys. md5: 356AFD78A6ED4457169241AC3965230C
05:28:48.0164 4160  Wanarpv6 ( LockedFile.Multi.Generic ) - warning
05:28:48.0164 4160  Wanarpv6 - detected LockedFile.Multi.Generic (1)
05:28:48.0195 4160  [ B32009DB1972E7F2C227499289C4384A ] WAS             C:\Windows\system32\inetsrv\iisw3adm.dll
05:28:48.0195 4160  WAS - ok
05:28:48.0257 4160  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
05:28:48.0273 4160  WatAdminSvc - ok
05:28:48.0335 4160  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
05:28:48.0351 4160  wbengine - ok
05:28:48.0413 4160  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
05:28:48.0413 4160  WbioSrvc - ok
05:28:48.0444 4160  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
05:28:48.0460 4160  wcncsvc - ok
05:28:48.0476 4160  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
05:28:48.0476 4160  WcsPlugInService - ok
05:28:48.0507 4160  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
05:28:48.0507 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\wd.sys. md5: 72889E16FF12BA0F235467D6091B17DC
05:28:48.0507 4160  Wd ( LockedFile.Multi.Generic ) - warning
05:28:48.0507 4160  Wd - detected LockedFile.Multi.Generic (1)
05:28:48.0538 4160  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
05:28:48.0538 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\Wdf01000.sys. md5: 441BD2D7B4F98134C3A4F9FA570FD250
05:28:48.0538 4160  Wdf01000 ( LockedFile.Multi.Generic ) - warning
05:28:48.0538 4160  Wdf01000 - detected LockedFile.Multi.Generic (1)
05:28:48.0554 4160  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
05:28:48.0569 4160  WdiServiceHost - ok
05:28:48.0569 4160  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
05:28:48.0569 4160  WdiSystemHost - ok
05:28:48.0616 4160  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
05:28:48.0616 4160  WebClient - ok
05:28:48.0632 4160  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
05:28:48.0632 4160  Wecsvc - ok
05:28:48.0647 4160  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
05:28:48.0663 4160  wercplsupport - ok
05:28:48.0678 4160  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
05:28:48.0678 4160  WerSvc - ok
05:28:48.0694 4160  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
05:28:48.0694 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\wfplwf.sys. md5: 611B23304BF067451A9FDEE01FBDD725
05:28:48.0694 4160  WfpLwf ( LockedFile.Multi.Generic ) - warning
05:28:48.0694 4160  WfpLwf - detected LockedFile.Multi.Generic (1)
05:28:48.0725 4160  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
05:28:48.0725 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\wimmount.sys. md5: 05ECAEC3E4529A7153B3136CEB49F0EC
05:28:48.0725 4160  WIMMount ( LockedFile.Multi.Generic ) - warning
05:28:48.0725 4160  WIMMount - detected LockedFile.Multi.Generic (1)
05:28:48.0741 4160  WinDefend - ok
05:28:48.0772 4160  WinHttpAutoProxySvc - ok
05:28:48.0834 4160  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
05:28:48.0834 4160  Winmgmt - ok
05:28:48.0897 4160  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
05:28:48.0912 4160  WinRM - ok
05:28:48.0944 4160  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
05:28:48.0944 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\WinUsb.sys. md5: FE88B288356E7B47B74B13372ADD906D
05:28:48.0959 4160  WinUsb ( LockedFile.Multi.Generic ) - warning
05:28:48.0959 4160  WinUsb - detected LockedFile.Multi.Generic (1)
05:28:48.0990 4160  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
05:28:49.0006 4160  Wlansvc - ok
05:28:49.0131 4160  [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
05:28:49.0146 4160  wlidsvc - ok
05:28:49.0178 4160  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
05:28:49.0178 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\wmiacpi.sys. md5: F6FF8944478594D0E414D3F048F0D778
05:28:49.0178 4160  WmiAcpi ( LockedFile.Multi.Generic ) - warning
05:28:49.0178 4160  WmiAcpi - detected LockedFile.Multi.Generic (1)
05:28:49.0209 4160  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
05:28:49.0209 4160  wmiApSrv - ok
05:28:49.0224 4160  WMPNetworkSvc - ok
05:28:49.0240 4160  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
05:28:49.0240 4160  WPCSvc - ok
05:28:49.0256 4160  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
05:28:49.0271 4160  WPDBusEnum - ok
05:28:49.0302 4160  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
05:28:49.0302 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\ws2ifsl.sys. md5: 6BCC1D7D2FD2453957C5479A32364E52
05:28:49.0302 4160  ws2ifsl ( LockedFile.Multi.Generic ) - warning
05:28:49.0302 4160  ws2ifsl - detected LockedFile.Multi.Generic (1)
05:28:49.0318 4160  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
05:28:49.0318 4160  wscsvc - ok
05:28:49.0334 4160  WSearch - ok
05:28:49.0412 4160  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
05:28:49.0427 4160  wuauserv - ok
05:28:49.0458 4160  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
05:28:49.0458 4160  Suspicious file (NoAccess): C:\Windows\system32\drivers\WudfPf.sys. md5: D3381DC54C34D79B22CEE0D65BA91B7C
05:28:49.0458 4160  WudfPf ( LockedFile.Multi.Generic ) - warning
05:28:49.0458 4160  WudfPf - detected LockedFile.Multi.Generic (1)
05:28:49.0505 4160  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
05:28:49.0505 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\WUDFRd.sys. md5: CF8D590BE3373029D57AF80914190682
05:28:49.0505 4160  WUDFRd ( LockedFile.Multi.Generic ) - warning
05:28:49.0505 4160  WUDFRd - detected LockedFile.Multi.Generic (1)
05:28:49.0552 4160  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
05:28:49.0552 4160  wudfsvc - ok
05:28:49.0583 4160  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll
05:28:49.0583 4160  WwanSvc - ok
05:28:49.0630 4160  [ 4A5CE13408945E525503B5F73D29B9C5 ] xnacc           C:\Windows\system32\DRIVERS\xnacc.sys
05:28:49.0630 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\xnacc.sys. md5: 4A5CE13408945E525503B5F73D29B9C5
05:28:49.0646 4160  xnacc ( LockedFile.Multi.Generic ) - warning
05:28:49.0646 4160  xnacc - detected LockedFile.Multi.Generic (1)
05:28:49.0692 4160  [ 2C6BC21B2D5B58D8B1D638C1704CB494 ] xusb21          C:\Windows\system32\DRIVERS\xusb21.sys
05:28:49.0692 4160  Suspicious file (NoAccess): C:\Windows\system32\DRIVERS\xusb21.sys. md5: 2C6BC21B2D5B58D8B1D638C1704CB494
05:28:49.0692 4160  xusb21 ( LockedFile.Multi.Generic ) - warning
05:28:49.0692 4160  xusb21 - detected LockedFile.Multi.Generic (1)
05:28:49.0724 4160  ================ Scan global ===============================
05:28:49.0755 4160  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
05:28:49.0802 4160  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
05:28:49.0802 4160  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
05:28:49.0833 4160  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
05:28:49.0864 4160  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
05:28:49.0864 4160  [Global] - ok
05:28:49.0864 4160  ================ Scan MBR ==================================
05:28:49.0880 4160  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
05:28:49.0973 4160  \Device\Harddisk0\DR0 - ok
05:28:49.0973 4160  ================ Scan VBR ==================================
05:28:49.0973 4160  [ D1B54740C21B93C9A649CB52DF8FB294 ] \Device\Harddisk0\DR0\Partition1
05:28:49.0973 4160  \Device\Harddisk0\DR0\Partition1 - ok
05:28:49.0989 4160  [ 17DC7601EBE4E18CE88FF4287781CEF9 ] \Device\Harddisk0\DR0\Partition2
05:28:49.0989 4160  \Device\Harddisk0\DR0\Partition2 - ok
05:28:50.0020 4160  [ E9471E3EAF0827655119F53C119111B7 ] \Device\Harddisk0\DR0\Partition3
05:28:50.0020 4160  \Device\Harddisk0\DR0\Partition3 - ok
05:28:50.0020 4160  ============================================================
05:28:50.0020 4160  Scan finished
05:28:50.0020 4160  ============================================================
05:28:50.0020 1656  Detected object count: 221
05:28:50.0020 1656  Actual detected object count: 221
05:30:10.0891 1656  circlass ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0891 1656  circlass ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0891 1656  CLFS ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0891 1656  CLFS ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  CmBatt ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  CmBatt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  cmdide ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  cmdide ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  CNG ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  CNG ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  Compbatt ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  Compbatt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  CompositeBus ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  CompositeBus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  crcdisk ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  crcdisk ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0906 1656  CSC ( LockedFile.Multi.Generic ) - skipped by user
05:30:10.0906 1656  CSC ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:10.0937 1656  C:\Windows\System32\Drivers\d42928de2e89ffa1.sys - copied to quarantine
05:30:10.0969 1656  HKLM\SYSTEM\ControlSet003\services\d42928de2e89ffa1 - will be deleted on reboot
05:30:11.0015 1656  HKLM\SYSTEM\ControlSet004\services\d42928de2e89ffa1 - will be deleted on reboot
05:30:11.0359 1656  C:\Windows\System32\Drivers\d42928de2e89ffa1.sys - will be deleted on reboot
05:30:11.0359 1656  d42928de2e89ffa1 ( Rootkit.Win32.Necurs.gen ) - User select action: Delete 
05:30:11.0359 1656  DfsC ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  DfsC ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  dg_ssudbus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  dg_ssudbus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  discache ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  discache ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  Disk ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  Disk ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  drmkaud ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  drmkaud ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  DXGKrnl ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  DXGKrnl ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  e1cexpress ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  e1cexpress ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0359 1656  fastfat ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0359 1656  fastfat ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  fdc ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  fdc ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  FileInfo ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  FileInfo ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  Filetrace ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  Filetrace ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  flpydisk ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  flpydisk ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  FltMgr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  FltMgr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  FsDepends ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  FsDepends ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  Fs_Rec ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  Fs_Rec ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  fvevol ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  fvevol ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  gagp30kx ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  gagp30kx ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  hamachi ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  hamachi ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0374 1656  hcw85cir ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0374 1656  hcw85cir ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HdAudAddService ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HdAudAddService ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HDAudBus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HDAudBus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HidBatt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HidBatt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HidBth ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HidBth ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HidIr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HidIr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HidUsb ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HidUsb ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HpSAMD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HpSAMD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  HTTP ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  HTTP ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  hwpolicy ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  hwpolicy ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  i8042prt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  i8042prt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  iaStorV ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  iaStorV ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0390 1656  iirsp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0390 1656  iirsp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  IntcAzAudAddService ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  IntcAzAudAddService ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  intelide ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  intelide ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  intelppm ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  intelppm ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  IpFilterDriver ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  IpFilterDriver ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  IPMIDRV ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  IPMIDRV ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  IPNAT ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  IPNAT ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  IRENUM ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  IRENUM ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  isapnp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  isapnp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  iScsiPrt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  iScsiPrt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  ISODrive ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  ISODrive ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  kbdclass ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  kbdclass ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  kbdhid ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  kbdhid ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  KSecDD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  KSecDD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  KSecPkg ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  KSecPkg ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  ksthunk ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  ksthunk ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  lirsgt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  lirsgt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  lltdio ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  lltdio ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  LSI_FC ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  LSI_FC ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  LSI_SAS ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  LSI_SAS ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  LSI_SAS2 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  LSI_SAS2 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  LSI_SCSI ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  LSI_SCSI ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  luafv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  luafv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  megasas ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  megasas ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  MegaSR ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  MegaSR ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  MEIx64 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  MEIx64 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0405 1656  Modem ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0405 1656  Modem ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  monitor ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  monitor ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mouclass ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mouclass ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mouhid ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mouhid ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mountmgr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mountmgr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mpio ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mpio ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mpsdrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mpsdrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MQAC ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MQAC ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MRxDAV ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MRxDAV ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mrxsmb ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mrxsmb ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mrxsmb10 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mrxsmb10 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mrxsmb20 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mrxsmb20 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  msahci ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  msahci ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  msdsm ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  msdsm ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  Msfs ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  Msfs ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mshidkmdf ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mshidkmdf ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  msisadrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  msisadrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MSKSSRV ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MSKSSRV ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MSPCLOCK ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MSPCLOCK ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MSPQM ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MSPQM ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MsRPC ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MsRPC ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  mssmbios ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  mssmbios ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MSTEE ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MSTEE ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0421 1656  MTConfig ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0421 1656  MTConfig ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Mup ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Mup ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NativeWifiP ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NativeWifiP ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NDIS ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NDIS ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NdisCap ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NdisCap ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NdisTapi ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NdisTapi ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Ndisuio ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Ndisuio ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NdisWan ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NdisWan ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NDProxy ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NDProxy ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NetBIOS ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NetBIOS ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NetBT ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NetBT ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nfrd960 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nfrd960 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NfsRdr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NfsRdr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Npfs ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Npfs ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nsiproxy ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nsiproxy ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Ntfs ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Ntfs ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Null ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Null ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nusb3hub ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nusb3hub ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nusb3xhc ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nusb3xhc ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  NVHDA ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  NVHDA ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nvlddmkm ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nvlddmkm ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nvraid ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nvraid ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nvstor ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nvstor ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  nv_agp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  nv_agp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  ohci1394 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  ohci1394 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0437 1656  Parport ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0437 1656  Parport ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  partmgr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  partmgr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  pci ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  pci ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  pciide ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  pciide ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  pcmcia ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  pcmcia ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  pcw ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  pcw ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  PEAUTH ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  PEAUTH ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  PptpMiniport ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  PptpMiniport ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  Processor ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  Processor ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  Psched ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  Psched ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  PsxDrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  PsxDrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  PxHlpa64 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  PxHlpa64 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  ql2300 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  ql2300 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  ql40xx ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  ql40xx ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  QWAVEdrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  QWAVEdrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RasAcd ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RasAcd ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RasAgileVpn ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RasAgileVpn ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  Rasl2tp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  Rasl2tp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RasPppoe ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RasPppoe ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RasSstp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RasSstp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  rdbss ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  rdbss ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  rdpbus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  rdpbus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RDPCDD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RDPCDD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RDPDR ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RDPDR ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RDPENCDD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RDPENCDD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0452 1656  RDPREFMP ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0452 1656  RDPREFMP ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  RdpVideoMiniport ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  RdpVideoMiniport ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  RDPWD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  RDPWD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  rdyboost ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  rdyboost ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  RMCAST ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  RMCAST ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  RpcXdr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  RpcXdr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  rspndr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  rspndr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  s3cap ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  s3cap ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sbp2port ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sbp2port ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  scfilter ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  scfilter ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  secdrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  secdrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  Serenum ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  Serenum ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  Serial ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  Serial ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sermouse ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sermouse ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sffdisk ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sffdisk ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sffp_mmc ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sffp_mmc ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sffp_sd ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sffp_sd ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sfloppy ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sfloppy ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  SiSRaid2 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  SiSRaid2 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  SiSRaid4 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  SiSRaid4 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  SmartDefragDriver ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  SmartDefragDriver ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  Smb ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  Smb ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  speedfan ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  speedfan ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  spldr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  spldr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0468 1656  sptd ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0468 1656  sptd ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  srv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  srv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  srv2 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  srv2 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  srvnet ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  srvnet ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  ssudmdm ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  ssudmdm ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  stexstor ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  stexstor ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  storflt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  storflt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  storvsc ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  storvsc ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  swenum ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  swenum ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  Tcpip ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  Tcpip ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  TCPIP6 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  TCPIP6 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  tcpipreg ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  tcpipreg ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  TDPIPE ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  TDPIPE ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  TDTCP ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  TDTCP ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  tdx ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  tdx ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  TermDD ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  TermDD ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  tssecsrv ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  tssecsrv ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  TsUsbFlt ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  TsUsbFlt ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  tunnel ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  tunnel ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  uagp35 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  uagp35 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  udfs ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  udfs ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  uliagpkx ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  uliagpkx ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  umbus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  umbus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  UmPass ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  UmPass ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  usbccgp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  usbccgp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0483 1656  usbcir ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0483 1656  usbcir ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  usbehci ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  usbehci ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  usbhub ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  usbhub ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  usbohci ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  usbohci ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  usbprint ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  usbprint ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  USBSTOR ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  USBSTOR ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  usbuhci ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  usbuhci ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vdrvroot ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vdrvroot ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vga ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vga ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  VgaSave ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  VgaSave ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vhdmp ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vhdmp ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  viaide ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  viaide ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vmbus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vmbus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  VMBusHID ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  VMBusHID ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  volmgr ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  volmgr ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  volmgrx ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  volmgrx ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  volsnap ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  volsnap ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vsmraid ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vsmraid ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  vwifibus ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  vwifibus ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  WacomPen ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  WacomPen ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  WANARP ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  WANARP ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  Wanarpv6 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  Wanarpv6 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  Wd ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  Wd ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  Wdf01000 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  Wdf01000 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  WfpLwf ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  WfpLwf ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0499 1656  WIMMount ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0499 1656  WIMMount ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  WinUsb ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  WinUsb ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  WmiAcpi ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  WmiAcpi ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  ws2ifsl ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  ws2ifsl ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  WudfPf ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  WudfPf ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  WUDFRd ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  WUDFRd ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  xnacc ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  xnacc ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:11.0515 1656  xusb21 ( LockedFile.Multi.Generic ) - skipped by user
05:30:11.0515 1656  xusb21 ( LockedFile.Multi.Generic ) - User select action: Skip 
05:30:17.0396 4820  Deinitialize success