05:28:56.0953 0x0ac4 TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58 05:28:57.0375 0x0ac4 ============================================================ 05:28:57.0375 0x0ac4 Current date / time: 2005/01/01 05:28:57.0375 05:28:57.0375 0x0ac4 SystemInfo: 05:28:57.0375 0x0ac4 05:28:57.0375 0x0ac4 OS Version: 5.1.2600 ServicePack: 3.0 05:28:57.0375 0x0ac4 Product type: Workstation 05:28:57.0375 0x0ac4 ComputerName: DOMEK-154CD7EAF 05:28:57.0375 0x0ac4 UserName: Administrator 05:28:57.0375 0x0ac4 Windows directory: C:\WINDOWS 05:28:57.0375 0x0ac4 System windows directory: C:\WINDOWS 05:28:57.0375 0x0ac4 Processor architecture: Intel x86 05:28:57.0375 0x0ac4 Number of processors: 1 05:28:57.0375 0x0ac4 Page size: 0x1000 05:28:57.0375 0x0ac4 Boot type: Normal boot 05:28:57.0375 0x0ac4 ============================================================ 05:28:57.0375 0x0ac4 BG loaded 05:28:58.0937 0x0ac4 System UUID: {4880D01B-977E-7BFB-C3D4-374EEFD7B248} 05:29:01.0328 0x0ac4 Drive \Device\Harddisk0\DR0 - Size: 0x25432CDE00 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048 05:29:01.0343 0x0ac4 ============================================================ 05:29:01.0343 0x0ac4 \Device\Harddisk0\DR0: 05:29:01.0343 0x0ac4 MBR partitions: 05:29:01.0343 0x0ac4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A14BD0 05:29:01.0359 0x0ac4 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3A14C4E, BlocksNum 0x7801F1A 05:29:01.0375 0x0ac4 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xB216BA7, BlocksNum 0x7801F1A 05:29:01.0375 0x0ac4 ============================================================ 05:29:01.0453 0x0ac4 C: <-> \Device\Harddisk0\DR0\Partition1 05:29:01.0484 0x0ac4 D: <-> \Device\Harddisk0\DR0\Partition2 05:29:01.0578 0x0ac4 E: <-> \Device\Harddisk0\DR0\Partition3 05:29:01.0578 0x0ac4 ============================================================ 05:29:01.0578 0x0ac4 Initialize success 05:29:01.0578 0x0ac4 ============================================================ 05:29:55.0828 0x0e74 ============================================================ 05:29:55.0828 0x0e74 Scan started 05:29:55.0828 0x0e74 Mode: Manual; 05:29:55.0828 0x0e74 ============================================================ 05:29:55.0828 0x0e74 KSN ping started 05:29:58.0281 0x0e74 KSN ping finished: true 05:29:58.0500 0x0e74 ================ Scan system memory ======================== 05:29:58.0515 0x0e74 System memory - ok 05:29:58.0515 0x0e74 ================ Scan services ============================= 05:29:58.0640 0x0e74 Abiosdsk - ok 05:29:58.0656 0x0e74 abp480n5 - ok 05:29:58.0703 0x0e74 [ 05118282F5D039595A2B92B4A4AFE197, 390EBD6088E96571636CE0925E4899D58893D9E5DF2389C09BABBD47A5838B52 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys 05:29:58.0703 0x0e74 ACPI - ok 05:29:58.0875 0x0e74 [ 66A42B7DB194E24B973BBCCE840A0F3F, 2550F8E5B5ACD88E4191656194E46FB8EC8CCC65AFD4B5E6D5CED9FE297B573F ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys 05:29:58.0875 0x0e74 ACPIEC - ok 05:29:58.0937 0x0e74 [ 8D268693A6DCE3D7319DF14834841BAF, 229C95FE2E6A692EBC2842823A1C7D438F8DF18F44691BD7AFE79DB76F092F9D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe 05:29:58.0953 0x0e74 AdobeFlashPlayerUpdateSvc - ok 05:29:58.0968 0x0e74 adpu160m - ok 05:29:59.0000 0x0e74 [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys 05:29:59.0015 0x0e74 aec - ok 05:29:59.0031 0x0e74 [ A7B8A3A79D35215D798A300DF49ED23F, D441633C0F8E22F8976B95D6A3DCD552AA07C616AC5FE4379472954F7BE6075E ] Afc C:\WINDOWS\system32\drivers\Afc.sys 05:29:59.0031 0x0e74 Afc - ok 05:29:59.0062 0x0e74 [ 1E44BC1E83D8FD2305F8D452DB109CF9, CF5EC07E0B589FA2A4701C6CFD69E893FC3ABF274AD57AE3C13FFE49063B02C8 ] AFD C:\WINDOWS\System32\drivers\afd.sys 05:29:59.0078 0x0e74 AFD - ok 05:29:59.0078 0x0e74 Aha154x - ok 05:29:59.0093 0x0e74 aic78u2 - ok 05:29:59.0109 0x0e74 aic78xx - ok 05:29:59.0140 0x0e74 [ 0940030D5A5869067CCC03E3B0B8DEC7, EF3CE1E6687BA4B0A3C1E6431E8A4A85D7BBA183207E6929C5448EF8B83DF71D ] alcan5wn C:\WINDOWS\system32\DRIVERS\alcan5wn.sys 05:29:59.0140 0x0e74 alcan5wn - ok 05:29:59.0171 0x0e74 [ 4C9577888C53243E2991456F510488A1, CF048F1EA31A71253FF3B79571BF9548F15F99161918222999DFA6CDBBC37BB4 ] alcaudsl C:\WINDOWS\system32\DRIVERS\alcaudsl.sys 05:29:59.0171 0x0e74 alcaudsl - ok 05:29:59.0421 0x0e74 [ DD8520280304B6145A6BE31008748C7C, 4007EAA97E501492E450241338759337EF05E4F5C61AA05FF4BA3CFAD036B0D9 ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS 05:29:59.0546 0x0e74 ALCXWDM - ok 05:29:59.0593 0x0e74 [ 27AF056D8C42F0AB3CF1DFDCBBEB3243, 9D893C6C0E8619B0B0DA9EAEB5E470A29C9D730F89EC5632134C3F753DE51AC5 ] Alerter C:\WINDOWS\system32\alrsvc.dll 05:29:59.0609 0x0e74 Alerter - ok 05:29:59.0625 0x0e74 [ D1738DDDFF196C5CEE6D867C136AF745, DD4780276465CB18D14B4DDBB4E70117B374B3A61C618D68B5290714330DB91F ] ALG C:\WINDOWS\System32\alg.exe 05:29:59.0625 0x0e74 ALG - ok 05:29:59.0640 0x0e74 AliIde - ok 05:29:59.0656 0x0e74 amsint - ok 05:29:59.0687 0x0e74 [ 2DB03F8818A6BDABD72E5D9ED582F489, 5559C7ABE2E0FAB36507160F2C0076E6402AA574DC832198C0A4021D1DA70DA8 ] AndNetDiag C:\WINDOWS\system32\DRIVERS\lgandnetdiag.sys 05:29:59.0687 0x0e74 AndNetDiag - ok 05:29:59.0703 0x0e74 [ B5F56697FE088BCD9EFB59B11B0FF671, 31F228D80EFB3E4A4DB0F795394BBC33EC4F33771A75485059D758DCB43821FD ] ANDNetModem C:\WINDOWS\system32\DRIVERS\lgandnetmodem.sys 05:29:59.0703 0x0e74 ANDNetModem - ok 05:29:59.0765 0x0e74 [ 9910A9C7D307A9E156D951248601C33E, F1F5FEBFD5FEA684F2DEC84FF1DA946E1618A916D5FC4BE9DA5CFD4EE2E04642 ] ApfiltrService C:\WINDOWS\system32\DRIVERS\Apfiltr.sys 05:29:59.0781 0x0e74 ApfiltrService - ok 05:29:59.0859 0x0e74 [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 05:29:59.0859 0x0e74 Apple Mobile Device - ok 05:29:59.0890 0x0e74 [ 1561430DA2F2AB81CC0CE71AF95A778D, 1EFD6F9FCD7A00DA6B4AFEC1E04E3DDF4147B7DF1CF021430B31F821E48395A0 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll 05:29:59.0890 0x0e74 AppMgmt - ok 05:29:59.0906 0x0e74 asc - ok 05:29:59.0921 0x0e74 asc3350p - ok 05:29:59.0937 0x0e74 asc3550 - ok 05:30:00.0046 0x0e74 [ 776ACEFA0CA9DF0FAA51A5FB2F435705, 72DF7ED6B085BC468994F5B3189506FD726A9A17A9C42ACA1E420D787691361D ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe 05:30:00.0078 0x0e74 aspnet_state - ok 05:30:00.0093 0x0e74 [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 05:30:00.0093 0x0e74 AsyncMac - ok 05:30:00.0125 0x0e74 [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys 05:30:00.0125 0x0e74 atapi - ok 05:30:00.0140 0x0e74 Atdisk - ok 05:30:00.0171 0x0e74 [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys 05:30:00.0171 0x0e74 Atmarpc - ok 05:30:00.0218 0x0e74 [ 3A28D3E7BAD0EED3810CD918B2525B54, EFC7CEF39D58E846613E419E78ECBD300DFB18630B70110AB2936737EB2B19C1 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll 05:30:00.0218 0x0e74 AudioSrv - ok 05:30:00.0234 0x0e74 [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys 05:30:00.0234 0x0e74 audstub - ok 05:30:00.0281 0x0e74 [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys 05:30:00.0281 0x0e74 Beep - ok 05:30:00.0328 0x0e74 [ 78200FAA6FD9C69394134C238C87FB7F, 4E70BD89BB40222CB0647E8F73DBBAB1020594AEC313848C911048D080D0F26A ] BITS C:\WINDOWS\system32\qmgr.dll 05:30:00.0375 0x0e74 BITS - ok 05:30:00.0453 0x0e74 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 05:30:00.0468 0x0e74 Bonjour Service - ok 05:30:00.0500 0x0e74 [ 9D6788EFFB9972C28C38D9C5E67249D5, A4C5FFE40983AD5C781024280F188E4FBA5797334BF331A56FF7E32E90F02081 ] Browser C:\WINDOWS\System32\browser.dll 05:30:00.0500 0x0e74 Browser - ok 05:30:00.0515 0x0e74 catchme - ok 05:30:00.0546 0x0e74 [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys 05:30:00.0562 0x0e74 cbidf2k - ok 05:30:00.0562 0x0e74 cd20xrnt - ok 05:30:00.0593 0x0e74 [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys 05:30:00.0593 0x0e74 Cdaudio - ok 05:30:00.0609 0x0e74 [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys 05:30:00.0625 0x0e74 Cdfs - ok 05:30:00.0656 0x0e74 [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys 05:30:00.0656 0x0e74 Cdrom - ok 05:30:00.0671 0x0e74 Changer - ok 05:30:00.0687 0x0e74 [ 45B63DF2FB498D219FCBB4425CADE676, D58417D5D0E562E2CCBA04C82CF7E176F6F82026CB4877D45F0DC18944B72960 ] CiSvc C:\WINDOWS\system32\cisvc.exe 05:30:00.0687 0x0e74 CiSvc - ok 05:30:00.0703 0x0e74 [ C94F1B6F61858D6389C0FA06954FB9C4, 832A8BF5D63FD623632823DE7F36636540DAC9192B40A44C2DE6961D2E086320 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe 05:30:00.0703 0x0e74 ClipSrv - ok 05:30:00.0750 0x0e74 [ D87ACAED61E417BBA546CED5E7E36D9C, 14AC6034A5BC0FB2A1AFDAD42BEF4DE641556E54AD30D0C46765660A4BE55462 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 05:30:00.0953 0x0e74 clr_optimization_v2.0.50727_32 - ok 05:30:00.0984 0x0e74 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 05:30:01.0031 0x0e74 clr_optimization_v4.0.30319_32 - ok 05:30:01.0046 0x0e74 CmdIde - ok 05:30:01.0062 0x0e74 COMSysApp - ok 05:30:01.0078 0x0e74 Cpqarray - ok 05:30:01.0109 0x0e74 [ 6B105FE95F2E9F0B6346044BA59D41C9, DC41FC89E6C4F4219015856AEE9D9CE365094D3C8012AFFC188C129DC3B6A9A8 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll 05:30:01.0125 0x0e74 CryptSvc - ok 05:30:01.0171 0x0e74 [ A5BEA0E5C297F5F3835638A87E512FBA, D9C31AE8661CD8AC87E5F28AFE4126C62B5D4AEB96610C9A2F49CEB288AF673A ] CTDevice_Srv C:\Program Files\Creative\Shared Files\CTDevSrv.exe 05:30:01.0171 0x0e74 CTDevice_Srv - ok 05:30:01.0218 0x0e74 [ 8E26D772F53B7883A651E0E4A9598F21, 69A94B643038B874C69998A8BA5C45E04E034D0FF9C21D131BCDA02125BAEE5F ] CTUPnPSv C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe 05:30:01.0218 0x0e74 CTUPnPSv - ok 05:30:01.0234 0x0e74 dac2w2k - ok 05:30:01.0250 0x0e74 dac960nt - ok 05:30:01.0281 0x0e74 [ A37311D9D628C1042A2836731787F0F3, 2A4380021407E84FAD47A2D5B02D37F1F17E8E2B1433710208FFCC70D9ECB5AA ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 05:30:01.0296 0x0e74 DcomLaunch - ok 05:30:01.0328 0x0e74 [ 6B4AFE7C676CFF3EFF2DC06A4EE945F7, 9771808A033C781758AC1356F9F51B198A0750081424F4F7A937CE0D7408CEE1 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll 05:30:01.0328 0x0e74 Dhcp - ok 05:30:01.0359 0x0e74 [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys 05:30:01.0359 0x0e74 Disk - ok 05:30:01.0375 0x0e74 dmadmin - ok 05:30:01.0437 0x0e74 [ BC9219ABC5696942E6F9AC8A9B28670F, DEDD84A5FC12664C7767EC5210E3B4D311664EF8BCE01C9DCF16CC98BE16EDE1 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys 05:30:01.0468 0x0e74 dmboot - ok 05:30:01.0515 0x0e74 [ 5FA232E3BA6E1346F9F5A7E519320CB0, 1C7EEC415C291D3C5FFD479A8454347528AF4FF88F81011EF65EFA8FE8199973 ] dmio C:\WINDOWS\system32\drivers\dmio.sys 05:30:01.0515 0x0e74 dmio - ok 05:30:01.0531 0x0e74 [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys 05:30:01.0531 0x0e74 dmload - ok 05:30:01.0562 0x0e74 [ D858920A05076914D34B0388E8D96CC0, A8F231BA9022F6AEBB24C9DCC1898923F85B79DE3C8E90B696CA0B295B9C99B7 ] dmserver C:\WINDOWS\System32\dmserver.dll 05:30:01.0562 0x0e74 dmserver - ok 05:30:01.0593 0x0e74 [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys 05:30:01.0593 0x0e74 DMusic - ok 05:30:01.0625 0x0e74 [ 082BE13166A3354F25F78E0B2601012B, 881284F659D4D528C96092E79BADE6E6C0C589E4583B3BF3FAC229F50D16C5F0 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 05:30:01.0640 0x0e74 Dnscache - ok 05:30:01.0671 0x0e74 [ E0B7D66CF29D9ADCCF873C77821CD4CA, 09A3D28585B62FC541EF4F2CB4D749DA119BB5F98739393CFD4D745060217C65 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll 05:30:01.0671 0x0e74 Dot3svc - ok 05:30:01.0718 0x0e74 dpti2o - ok 05:30:01.0718 0x0e74 [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 05:30:01.0718 0x0e74 drmkaud - ok 05:30:01.0734 0x0e74 [ 5F256C1AD50FEFDC442CD5AAB58C7DD8, 0FC1F2590195AE4B7CAA802D84CD391B56D73B99CB100BDEBD4D7C002946D06B ] EapHost C:\WINDOWS\System32\eapsvc.dll 05:30:01.0734 0x0e74 EapHost - ok 05:30:01.0765 0x0e74 [ ED1B71382C31FD2CF3CDC4672EFAD6EA, AF3CD28B5E6F1ED1D6B7C71C697019B2E2E79AFFE29EB6282253B30BA205F3EA ] ERSvc C:\WINDOWS\System32\ersvc.dll 05:30:01.0765 0x0e74 ERSvc - ok 05:30:01.0812 0x0e74 [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] Eventlog C:\WINDOWS\system32\services.exe 05:30:01.0812 0x0e74 Eventlog - ok 05:30:01.0859 0x0e74 [ 6AFF804839C85859E0247164FBE5F5BB, 91E1FEC83545BC6489E35CD042BBA756FA31C5BEAD51FC5494DD04F6F8C852AB ] EventSystem C:\WINDOWS\system32\es.dll 05:30:01.0859 0x0e74 EventSystem - ok 05:30:01.0906 0x0e74 [ 0D3C15A505652C9A0E7385E12C1047B9, 5771E955F1D47DD679542A2FD2C3F3354253757D208C336349822EE3844E4880 ] F06DEFF2-5B9C-490D-910F-35D3A9119622 C:\Program Files\Settings Manager\systemk\systemkmgrc2.cfg 05:30:01.0921 0x0e74 F06DEFF2-5B9C-490D-910F-35D3A9119622 - ok 05:30:01.0937 0x0e74 [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys 05:30:01.0937 0x0e74 Fastfat - ok 05:30:01.0968 0x0e74 [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll 05:30:01.0984 0x0e74 FastUserSwitchingCompatibility - ok 05:30:02.0000 0x0e74 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys 05:30:02.0000 0x0e74 Fdc - ok 05:30:02.0031 0x0e74 [ 09E2A4D33F81A06A8AAB2BA0A0B5D235, D71C2D4212C7ABB1D8EE08B21C59CA25D7195F1A0E92E5BDA1DC5226A0E62CB0 ] Fips C:\WINDOWS\system32\drivers\Fips.sys 05:30:02.0031 0x0e74 Fips - ok 05:30:02.0046 0x0e74 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys 05:30:02.0046 0x0e74 Flpydisk - ok 05:30:02.0078 0x0e74 [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys 05:30:02.0078 0x0e74 FltMgr - ok 05:30:02.0125 0x0e74 [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 05:30:02.0140 0x0e74 FontCache3.0.0.0 - ok 05:30:02.0156 0x0e74 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 05:30:02.0156 0x0e74 Fs_Rec - ok 05:30:02.0187 0x0e74 [ ED6D921D8AB423138FB35BEEE6D6A6CB, CF133B76960207595C44181A235E63B84C5A5A4E7BDDDC2E6A01DA837E55832D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys 05:30:02.0187 0x0e74 Ftdisk - ok 05:30:02.0218 0x0e74 [ D1261099E03EEE90976EA19002995B89, E3FEDD3B96122418154D2B080E2B4C42AE3C0C2DF3C0FD78F1493FE7F52EF489 ] FTRTSVC C:\WINDOWS\System32\FTRTSVC.exe 05:30:02.0218 0x0e74 FTRTSVC - ok 05:30:02.0250 0x0e74 [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 05:30:02.0250 0x0e74 GEARAspiWDM - ok 05:30:02.0296 0x0e74 [ FE4D369172AC1CC19C876BDB5BDC31A3, B02D58846C11D63DED9D211A271B1A01788FA162E8CD34645DBEFF136173FB92 ] gfiark C:\WINDOWS\system32\drivers\gfiark.sys 05:30:02.0296 0x0e74 gfiark - ok 05:30:02.0328 0x0e74 [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys 05:30:02.0328 0x0e74 Gpc - ok 05:30:02.0406 0x0e74 [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 05:30:02.0406 0x0e74 gupdate - ok 05:30:02.0421 0x0e74 [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 05:30:02.0437 0x0e74 gupdatem - ok 05:30:02.0484 0x0e74 [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 05:30:02.0484 0x0e74 gusvc - ok 05:30:02.0531 0x0e74 [ AF752014F7EB61542E3F35B9374D7E76, 8D9F1D1B03D5AF9F592C396C4B6353E17F2E852A2A7F1F468F83763C0731435D ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 05:30:02.0531 0x0e74 helpsvc - ok 05:30:02.0546 0x0e74 HidServ - ok 05:30:02.0593 0x0e74 [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys 05:30:02.0593 0x0e74 HidUsb - ok 05:30:02.0625 0x0e74 [ F0273916DA6FB64CC88E0BD77619554F, C6E3B5C367CE52174251B1CE548F0DF8708AEDD228D5AD74D3F6F31FC3857460 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll 05:30:02.0625 0x0e74 hkmsvc - ok 05:30:02.0640 0x0e74 hpn - ok 05:30:02.0671 0x0e74 [ 9F1D80908658EB7F1BF70809E0B51470, 84FD62D34BC63BA41027DD2164B1E4F86BC8783E8A601E9F189627A4B3D54AAA ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys 05:30:02.0671 0x0e74 HPZid412 - ok 05:30:02.0718 0x0e74 [ F7E3E9D50F9CD3DE28085A8FDAA0A1C3, 886A5222940A6E14B359B45AA158390468B601FB58949E7F5BEC93B5459AF689 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 05:30:02.0718 0x0e74 HPZipr12 - ok 05:30:02.0750 0x0e74 [ CF1B7951B4EC8D13F3C93B74BB2B461B, 3A1B8A9A9AB0E916288AD6198C377E3A4D278DB3D8DCD4299F0ADC83973F0495 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys 05:30:02.0750 0x0e74 HPZius12 - ok 05:30:02.0796 0x0e74 [ F80A415EF82CD06FFAF0D971528EAD38, 524D9E9201572929522F6805011783711B7C0F76308B924C89CF75F4B7A1FDF3 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys 05:30:02.0812 0x0e74 HTTP - ok 05:30:02.0843 0x0e74 [ AA268079AC119F3A596E5E27AEE4BD17, 2FD9B52A0627B3ECE618BAC855C19002CA6F5339636D11DF9F998E588027292A ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll 05:30:02.0843 0x0e74 HTTPFilter - ok 05:30:02.0859 0x0e74 i2omgmt - ok 05:30:02.0875 0x0e74 i2omp - ok 05:30:02.0906 0x0e74 [ 177B372AF55C4460D0968B5F1D02AA1C, 39406139B0D42C650F2C1986D85DB2260107D427963BC2C85A11D71561986DEB ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys 05:30:02.0906 0x0e74 i8042prt - ok 05:30:03.0000 0x0e74 [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 05:30:03.0031 0x0e74 idsvc - ok 05:30:03.0078 0x0e74 [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys 05:30:03.0078 0x0e74 Imapi - ok 05:30:03.0109 0x0e74 [ 9125AF650608A921F98A789E5C5BA864, E530C4FE52EB66549D91490B3039EF8DBC6866E4F9B55213F21E3757892B06CE ] ImapiService C:\WINDOWS\system32\imapi.exe 05:30:03.0109 0x0e74 ImapiService - ok 05:30:03.0125 0x0e74 ini910u - ok 05:30:03.0140 0x0e74 IntelIde - ok 05:30:03.0171 0x0e74 [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 05:30:03.0171 0x0e74 Ip6Fw - ok 05:30:03.0187 0x0e74 [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 05:30:03.0187 0x0e74 IpFilterDriver - ok 05:30:03.0218 0x0e74 [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys 05:30:03.0218 0x0e74 IpInIp - ok 05:30:03.0250 0x0e74 [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys 05:30:03.0250 0x0e74 IpNat - ok 05:30:03.0312 0x0e74 [ 463790AEF94D8EAB674631257F53252E, A02972457F45AD6816CB5F60DE4CD15D68256695FA0F3E4EAD6F9E36CBE54576 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 05:30:03.0328 0x0e74 iPod Service - ok 05:30:03.0359 0x0e74 [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys 05:30:03.0359 0x0e74 IPSec - ok 05:30:03.0390 0x0e74 [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys 05:30:03.0406 0x0e74 IRENUM - ok 05:30:03.0421 0x0e74 [ C8EEF2E93835B81BD335DE2123121283, DF7CCA1141CE15050D5EA516C75BF677B095EABA9E08828880E8917EBDEB2418 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys 05:30:03.0421 0x0e74 isapnp - ok 05:30:03.0515 0x0e74 [ 80F08F50D248EEEEB9256F6522891D40, CE118B613786ECB6BB8C1D167D035F19C5329E7821BABCF93DF5B1D54C35C61D ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe 05:30:03.0515 0x0e74 JavaQuickStarterService - ok 05:30:03.0546 0x0e74 [ 2AECA45D4AEAACBDCB77AD11184E4601, 58724D00A0D6FA17CCAF69DC069EF59E535F08C870C199BF2C9269BC22273A63 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys 05:30:03.0546 0x0e74 Kbdclass - ok 05:30:03.0578 0x0e74 [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys 05:30:03.0593 0x0e74 kmixer - ok 05:30:03.0609 0x0e74 [ B467646C54CC746128904E1654C750C1, 3BD71BE3663EA23463D236D8A2A2E42DFA10C502BDB4B6E131FAF0FBA748219E ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys 05:30:03.0609 0x0e74 KSecDD - ok 05:30:03.0640 0x0e74 [ 3C342AF6B920D37FD9155877AF2B4B4E, 54009E6D88265F1CDC153B21155C14DF5B7E69B0FB728338C5870C777712870C ] L8042Kbd C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys 05:30:03.0640 0x0e74 L8042Kbd - ok 05:30:03.0671 0x0e74 [ 061A4BB67C324AC8C176E0D77923B212, C2877FD13FCF7EB422441D08B5BF76D9B1DCE6E9D7A19487E0D7DE14254E0F60 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll 05:30:03.0687 0x0e74 LanmanServer - ok 05:30:03.0718 0x0e74 [ FA17019DA45C5D6464776A639A5A9ABB, 5654615E6130D344D2D42B59DF2F5CD02C6D3B1128BBC2A14ED0CB8078180B17 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll 05:30:03.0734 0x0e74 lanmanworkstation - ok 05:30:03.0750 0x0e74 lbrtfdc - ok 05:30:03.0781 0x0e74 [ 437AA83D68F9FAC234CA68DBD40DB705, 49B4A9E30778FB6D08AA7F9D66AF173572B86F74863477FFE7A66BBF2E6BCE93 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll 05:30:03.0781 0x0e74 LmHosts - ok 05:30:03.0843 0x0e74 [ B066B4B2910C670530B63D5E924E8A2B, D7A3DD40766A78586CFF5CB97124CDABE55BF6EB46933CF3AB49F9EAC0501203 ] mdf16 C:\Program Files\Clarus\Samsung SecretZone\mdf16.sys 05:30:03.0843 0x0e74 mdf16 - ok 05:30:03.0859 0x0e74 [ 36F3AB18B1BE303DA51DE90A67DE3942, E364FF831EFBDC5FF026CE620EE951C129D4E0C79DD0FED823BC767F36ED0021 ] Messenger C:\WINDOWS\System32\msgsvc.dll 05:30:03.0875 0x0e74 Messenger - ok 05:30:03.0906 0x0e74 [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys 05:30:03.0906 0x0e74 mnmdd - ok 05:30:03.0937 0x0e74 [ 845814A8CB9D704D030F076E1BCE83F3, F35FD4B6CE78A06A6FCF207A75EADF5A8315F2254A3E84ED070928F196D32AF4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe 05:30:03.0937 0x0e74 mnmsrvc - ok 05:30:03.0968 0x0e74 [ 4A068DB7DC37D5AFEDB6512D2931D7B3, 491F58509188054EE35962B66A13F0029BDF66CC59ED3B5E4058393146CE001C ] Modem C:\WINDOWS\system32\drivers\Modem.sys 05:30:03.0968 0x0e74 Modem - ok 05:30:04.0000 0x0e74 [ FBED3DF6B884F8CF00447B73507F2C48, 2CAA78DF3DB8BB19C10FD046B6EDC34167D8CA67EF137912703FE751D70803A2 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys 05:30:04.0000 0x0e74 Mouclass - ok 05:30:04.0015 0x0e74 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys 05:30:04.0015 0x0e74 MountMgr - ok 05:30:04.0062 0x0e74 [ 4E9D8041D352A33332FD6F59A3A78B03, D4E6229B07EF9866993EEE4F6223DC7F1FF1108273FE14A3DC74E65C181DE56A ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 05:30:04.0062 0x0e74 MozillaMaintenance - ok 05:30:04.0078 0x0e74 mraid35x - ok 05:30:04.0125 0x0e74 [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys 05:30:04.0140 0x0e74 MRxDAV - ok 05:30:04.0203 0x0e74 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0, DB9B186F7076D7B94F45041AF7B77C1AD2CAB504D683B459C6CB1C22840ED170 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 05:30:04.0218 0x0e74 MRxSmb - ok 05:30:04.0265 0x0e74 [ A54C5EECC7D3424824410BAE0AA6C371, C0C80211DD9A69A529B5277B0751FFABCBB6586292D06A79ED7B842277FBF78A ] MSDTC C:\WINDOWS\system32\msdtc.exe 05:30:04.0265 0x0e74 MSDTC - ok 05:30:04.0296 0x0e74 [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 05:30:04.0296 0x0e74 Msfs - ok 05:30:04.0312 0x0e74 MSIServer - ok 05:30:04.0343 0x0e74 [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 05:30:04.0359 0x0e74 MSKSSRV - ok 05:30:04.0390 0x0e74 [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 05:30:04.0390 0x0e74 MSPCLOCK - ok 05:30:04.0406 0x0e74 [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 05:30:04.0406 0x0e74 MSPQM - ok 05:30:04.0437 0x0e74 [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys 05:30:04.0437 0x0e74 mssmbios - ok 05:30:04.0468 0x0e74 [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup C:\WINDOWS\system32\drivers\Mup.sys 05:30:04.0484 0x0e74 Mup - ok 05:30:04.0500 0x0e74 [ 8405A99D3E250EB017FE7A0DC3A9FFC0, 41B3194DC2F02CFD4709444B68BE67818919F902797CF7E2E465E8038C23AEA8 ] mvd22 C:\Program Files\Clarus\Samsung SecretZone\mvd22.sys 05:30:04.0500 0x0e74 mvd22 - ok 05:30:04.0578 0x0e74 [ 14CB8528E17D1221C50FC8CA88B1795F, E908EAE9A0E606084926941B1802E9F48AE1AC4AE6C6136345DD5699B8B9B526 ] napagent C:\WINDOWS\System32\qagentrt.dll 05:30:04.0625 0x0e74 napagent - ok 05:30:04.0671 0x0e74 [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys 05:30:04.0703 0x0e74 NDIS - ok 05:30:04.0734 0x0e74 [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 05:30:04.0734 0x0e74 NdisTapi - ok 05:30:04.0750 0x0e74 [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys 05:30:04.0750 0x0e74 Ndisuio - ok 05:30:04.0781 0x0e74 [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys 05:30:04.0781 0x0e74 NdisWan - ok 05:30:04.0812 0x0e74 [ 2F597BB467E05B1FE3830EABD821B8E0, 141497F5A49D47CCE3C9289644F4BD838DCB238F6D8E847FC006652E21FE02AC ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 05:30:04.0812 0x0e74 NDProxy - ok 05:30:04.0828 0x0e74 [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys 05:30:04.0890 0x0e74 NetBIOS - ok 05:30:04.0921 0x0e74 [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 05:30:04.0921 0x0e74 NetBT - ok 05:30:04.0953 0x0e74 [ CBB409B314309FCFFCE5E682E91338C6, 75BB788E9154D0437A8449B6C88432E27F1EACD9B6FDF27A46DE5147EC59CF6D ] NetDDE C:\WINDOWS\system32\netdde.exe 05:30:04.0953 0x0e74 NetDDE - ok 05:30:04.0968 0x0e74 [ CBB409B314309FCFFCE5E682E91338C6, 75BB788E9154D0437A8449B6C88432E27F1EACD9B6FDF27A46DE5147EC59CF6D ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe 05:30:04.0984 0x0e74 NetDDEdsdm - ok 05:30:05.0015 0x0e74 [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] Netlogon C:\WINDOWS\system32\lsass.exe 05:30:05.0015 0x0e74 Netlogon - ok 05:30:05.0062 0x0e74 [ 4FE97D0B1B182DF2A9BDD4C02155EF5E, 46F3F4FEB501E1987B49AB1595AADC06432B70E39CA6E9CC67C6410B13DA7B7A ] Netman C:\WINDOWS\System32\netman.dll 05:30:05.0078 0x0e74 Netman - ok 05:30:05.0125 0x0e74 [ D22CD77D4F0D63D1169BB35911BFF12D, 85B1FDFA02E1B8EA4FCB9B7EEB687C5C448697FC7EC9D178C5A2F64D2C9CFEE8 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 05:30:05.0187 0x0e74 NetTcpPortSharing - ok 05:30:05.0265 0x0e74 [ 9D1F13706FB5F02D0E8795FB2D03971D, E4DD5EA83F57D5C0A6739F753E95D0B1E13CE6F8E49CE27641D6D96B2C9FEE78 ] Nla C:\WINDOWS\System32\mswsock.dll 05:30:05.0265 0x0e74 Nla - ok 05:30:05.0406 0x0e74 [ 74149BCF0307BB76D68C0F8912DF731C, 36FB518726E05F46C6CE379991D66A4C3227B1D70A3D90D6F84DCFD793953B1B ] NMIndexingService C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe 05:30:05.0437 0x0e74 NMIndexingService - ok 05:30:05.0468 0x0e74 [ B0A67DE1A128389AEA4D42C5A56215FD, BE70916D507622991408C8256934819B8096A7FDAF2C7BA362AD5786E30F647C ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys 05:30:05.0468 0x0e74 nmwcd - ok 05:30:05.0531 0x0e74 [ 025C54F9F8C8BC1894EA38529C742C54, 176CF78E6202B020551E25AC9D05C6BF7782A8D24A93C545CEAD9B16437A528C ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys 05:30:05.0531 0x0e74 nmwcdc - ok 05:30:05.0546 0x0e74 [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 05:30:05.0546 0x0e74 Npfs - ok 05:30:05.0640 0x0e74 [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 05:30:05.0687 0x0e74 Ntfs - ok 05:30:05.0703 0x0e74 [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] NtLmSsp C:\WINDOWS\system32\lsass.exe 05:30:05.0703 0x0e74 NtLmSsp - ok 05:30:05.0781 0x0e74 [ 3FB5399DBB7001A80D58EDAD64C98225, A790DB873DAADB2B241F2C2426B51C0B73D4E13AC4D804B8EBBF5A74B4A41797 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll 05:30:05.0812 0x0e74 NtmsSvc - ok 05:30:05.0843 0x0e74 [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys 05:30:05.0843 0x0e74 Null - ok 05:30:07.0187 0x0e74 [ 7C56F3FD65B2BDB315CA3605A5392D7B, 1C33B2723BBD958FE06D71B6AC5C54DF1F46491C292749FE0DB8577BF056A765 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 05:30:07.0578 0x0e74 nv - ok 05:30:07.0671 0x0e74 [ 0344AA9113DC16EEC379F4652020849D, 87604FAFCF57AF81388648DB0D66FDC0AF227077D22EEED5B6AF733C99D561EC ] nvata C:\WINDOWS\system32\DRIVERS\nvata.sys 05:30:07.0687 0x0e74 nvata - ok 05:30:07.0734 0x0e74 [ 7D275ECDA4628318912F6C945D5CF963, 78C5125F5A9B5EE1A5AC394BB0D9EDA954EB35103B588B6A98D41E2C32354A96 ] NVENETFD C:\WINDOWS\system32\DRIVERS\NVENETFD.sys 05:30:07.0734 0x0e74 NVENETFD - ok 05:30:07.0781 0x0e74 [ 75E2E77C5497F34E60491D27BF03F1CB, E8989FD0A54E40B211E4BA95C916CE602BD3283C8465A312114EB0EC61C12768 ] nvgts C:\WINDOWS\system32\DRIVERS\nvgts.sys 05:30:07.0781 0x0e74 nvgts - ok 05:30:07.0828 0x0e74 [ B64AACEFAD2BE5BFF5353FE681253C67, A4D81BF67E6D4DBD559C27C8103277D30DA5B37269E0FD6571FC273DA21E892F ] nvnetbus C:\WINDOWS\system32\DRIVERS\nvnetbus.sys 05:30:07.0828 0x0e74 nvnetbus - ok 05:30:07.0859 0x0e74 [ B2F5AC506C9B1103827B62BA18A2C514, 8ED3AAC5203C3D0664C0B539051C5B2D4BA68EED600A3082C3719FEAA2373ACF ] nvsvc C:\WINDOWS\system32\nvsvc32.exe 05:30:07.0859 0x0e74 nvsvc - ok 05:30:07.0906 0x0e74 [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 05:30:07.0906 0x0e74 NwlnkFlt - ok 05:30:07.0937 0x0e74 [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 05:30:07.0937 0x0e74 NwlnkFwd - ok 05:30:08.0093 0x0e74 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 05:30:08.0109 0x0e74 odserv - ok 05:30:08.0156 0x0e74 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 05:30:08.0156 0x0e74 ose - ok 05:30:08.0203 0x0e74 [ 5B20CDFB9BDC98A894695C8FAB3924D3, CC7734917FE4E6F84F3EE7DD8EC478892C6D7C5E38B4B241BADC2905F5BFAF96 ] ousbehci C:\WINDOWS\system32\Drivers\ousbehci.sys 05:30:08.0203 0x0e74 ousbehci - ok 05:30:08.0250 0x0e74 [ 253B50331D6B3F2E6CAE757EE1CD1637, 30595C1A4B575B2B574C34823529D4C04B88270E3198A97FB1D142DC1B3FAB70 ] oxser C:\WINDOWS\system32\DRIVERS\oxser.sys 05:30:08.0250 0x0e74 oxser - ok 05:30:08.0265 0x0e74 [ 2D4CDAEBCED17743AA9E25D3016DC229, F5D138644F114861DD045975136904325304081221B85FB2C151CD9A411097CE ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys 05:30:08.0281 0x0e74 Parport - ok 05:30:08.0296 0x0e74 [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys 05:30:08.0296 0x0e74 PartMgr - ok 05:30:08.0343 0x0e74 [ 453EC2C2A20A1382F564541918520EEB, 797ED3127131BAE255AE793B8327D0E3BB6D054421F8D90511B315937BEBB6B0 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys 05:30:08.0343 0x0e74 ParVdm - ok 05:30:08.0390 0x0e74 [ B670C5D89F0726B7A2A7DFB4E968CDF8, 5C79A6EB9D911ECDBF2AA7F832FF59EDA275B981B6E1BF03AEE16F6D91C247F0 ] PCAMPR5 C:\WINDOWS\system32\PCAMPR5.SYS 05:30:08.0390 0x0e74 PCAMPR5 - ok 05:30:08.0437 0x0e74 [ ECD2F9D67B06606064DAF6961A6D5EFE, E8B98AF7D0731FD1E30C7016492FD078CCA7649873F291C1733CD6EBD319506B ] PCANDIS5 C:\WINDOWS\system32\PCANDIS5.SYS 05:30:08.0437 0x0e74 PCANDIS5 - ok 05:30:08.0453 0x0e74 pccsmcfd - ok 05:30:08.0500 0x0e74 [ 6862C69168D787B85A7D95CCD33C694E, 6B7912156A0BAB6AED4F00FE37034488D10646B17435E86DE0D7DBD5951E8FB9 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys 05:30:08.0515 0x0e74 PCI - ok 05:30:08.0531 0x0e74 PCIDump - ok 05:30:08.0562 0x0e74 [ 548CF2D6369EAE441A4C6BAA75BC4F0A, C659E9E8A16DD4CBEC97FFB50784D8585E02F20FA360D2280D322D975F00A994 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys 05:30:08.0562 0x0e74 PCIIde - ok 05:30:08.0578 0x0e74 [ 8DB27F1AE9593C94095485305A583862, 4FDB24BA306944743B50C3B0E39EFC75BD196A4DA1B0A3C859B974E8599B5128 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys 05:30:08.0593 0x0e74 Pcmcia - ok 05:30:08.0609 0x0e74 PDCOMP - ok 05:30:08.0625 0x0e74 PDFRAME - ok 05:30:08.0640 0x0e74 PDRELI - ok 05:30:08.0640 0x0e74 PDRFRAME - ok 05:30:08.0656 0x0e74 perc2 - ok 05:30:08.0671 0x0e74 perc2hib - ok 05:30:08.0718 0x0e74 [ 6C1618A07B49E3873582B6449E744088, 4C56C042830E0E3A7EE15E6C074D788AE2D6EF2D0901DC1497DA8C4E5D867839 ] pfc C:\WINDOWS\system32\drivers\pfc.sys 05:30:08.0718 0x0e74 pfc - ok 05:30:08.0765 0x0e74 [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] PlugPlay C:\WINDOWS\system32\services.exe 05:30:08.0781 0x0e74 PlugPlay - ok 05:30:08.0812 0x0e74 [ 2D091A99624FB9E7EEF0A86D872EC0C3, 465C0772E23F7959EC71DCCFA3304E2E46FD31548AE37D7BA3DAAA59E6B561FD ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe 05:30:08.0812 0x0e74 Pml Driver HPZ12 - ok 05:30:08.0843 0x0e74 [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] PolicyAgent C:\WINDOWS\system32\lsass.exe 05:30:08.0843 0x0e74 PolicyAgent - ok 05:30:08.0875 0x0e74 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys 05:30:08.0875 0x0e74 PptpMiniport - ok 05:30:08.0906 0x0e74 [ 7A1367D250502C6416A4D3A19EF155F5, 10C36090DCC651EE632C749277AB18135A9A34874FC2A3806ABCA88FC6E8BC72 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys 05:30:08.0906 0x0e74 Processor - ok 05:30:08.0921 0x0e74 [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] ProtectedStorage C:\WINDOWS\system32\lsass.exe 05:30:08.0921 0x0e74 ProtectedStorage - ok 05:30:08.0953 0x0e74 [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys 05:30:08.0953 0x0e74 PSched - ok 05:30:08.0984 0x0e74 [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys 05:30:08.0984 0x0e74 Ptilink - ok 05:30:09.0031 0x0e74 [ 40FEDD328F98245AD201CF5F9F311724, CE1582652B6A7CACE46D8B492CAA8E51EA46C3890EF640E8C5E1E053731A4D74 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys 05:30:09.0031 0x0e74 PxHelp20 - ok 05:30:09.0046 0x0e74 ql1080 - ok 05:30:09.0062 0x0e74 Ql10wnt - ok 05:30:09.0078 0x0e74 ql12160 - ok 05:30:09.0093 0x0e74 ql1240 - ok 05:30:09.0093 0x0e74 ql1280 - ok 05:30:09.0125 0x0e74 [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 05:30:09.0125 0x0e74 RasAcd - ok 05:30:09.0171 0x0e74 [ BC22C5E1238D4D36D65679E249C483C3, 9B01F8D9541F3558F7D6A3E079580EC87DC748EFCA43E10682C83953B8885C3B ] RasAuto C:\WINDOWS\System32\rasauto.dll 05:30:09.0187 0x0e74 RasAuto - ok 05:30:09.0234 0x0e74 [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 05:30:09.0234 0x0e74 Rasl2tp - ok 05:30:09.0265 0x0e74 [ 0C392E397B8D34AAAF19EC6119CBB788, 843C0B52A92A7F62E0D503A62FE56A020655AD98BC287AE8669ACE93B6A02ECA ] RasMan C:\WINDOWS\System32\rasmans.dll 05:30:09.0265 0x0e74 RasMan - ok 05:30:09.0296 0x0e74 [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 05:30:09.0296 0x0e74 RasPppoe - ok 05:30:09.0312 0x0e74 [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys 05:30:09.0312 0x0e74 Raspti - ok 05:30:09.0343 0x0e74 [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 05:30:09.0343 0x0e74 Rdbss - ok 05:30:09.0375 0x0e74 [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 05:30:09.0375 0x0e74 RDPCDD - ok 05:30:09.0421 0x0e74 [ 15CABD0F7C00C47C70124907916AF3F1, 66B5C978B7FB6359AD8BAC9F568FE9D469E358FEAB07B1F129BA9E85F1DF723E ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys 05:30:09.0421 0x0e74 rdpdr - ok 05:30:09.0468 0x0e74 [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys 05:30:09.0484 0x0e74 RDPWD - ok 05:30:09.0531 0x0e74 [ F83907A9A038DB2E35329B039628D293, 683D478C9EC30102BB5A4CB6D200C4772C8BF5DF7BFC757AFA0B5B44DA1F8961 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe 05:30:09.0546 0x0e74 RDSessMgr - ok 05:30:09.0609 0x0e74 [ 96EFEC24346A8EB1157E80523079ADDC, 7F8FC284029856C754E400B6C954369FFE27763C81D8F4AF4E58BFDD44CBC24A ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe 05:30:09.0609 0x0e74 RealNetworks Downloader Resolver Service - ok 05:30:09.0640 0x0e74 [ E0C7BBD18040B58651BAC700C804861D, 91AE8D3C7D9FB391725664996479DAFDA91CB91C31E446BFE9ECF0C4FC86BE2F ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys 05:30:09.0640 0x0e74 redbook - ok 05:30:10.0062 0x0e74 [ 578C8A7D178871F6688EB8AD29D9F812, 18224258BAB9E579B3DC68E29F678BE5E814B9BC8EBEC749FC22AD56B9C9AB29 ] ReimageRealTimeProtector C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe 05:30:10.0250 0x0e74 ReimageRealTimeProtector - ok 05:30:10.0296 0x0e74 [ B3F57E6115BCD4DBADE9874F300655E3, DFF4D6AEA1B22C531216ED5A94B01C88D2C61D0EC3BB34744B4572C672EF89E6 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 05:30:10.0312 0x0e74 RemoteAccess - ok 05:30:10.0343 0x0e74 [ B472B59EF98469C91651B751D3442CB8, 544654D84BDA303CBBA9CFDDFE57BDFD3698F5E7E08A2F25C7CF383A856223FA ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 05:30:10.0343 0x0e74 RemoteRegistry - ok 05:30:10.0359 0x0e74 RkHit - ok 05:30:10.0390 0x0e74 [ D8B0B4ADE32574B2D9C5CC34DC0DBBE7, CDF10D3D8ADA7ADB1CC1567BFA986557C6D69F4099B70FDFABD4C3D09E3CA778 ] ROOTMODEM C:\WINDOWS\system32\Drivers\RootMdm.sys 05:30:10.0390 0x0e74 ROOTMODEM - ok 05:30:10.0421 0x0e74 [ 6BC4D5A70F46EA27DDC14E5414C862A5, D78921FF982CFF26A012A413F19331AACA4F66E53D38C626FE712B4108744E31 ] RpcLocator C:\WINDOWS\system32\locator.exe 05:30:10.0421 0x0e74 RpcLocator - ok 05:30:10.0468 0x0e74 [ A37311D9D628C1042A2836731787F0F3, 2A4380021407E84FAD47A2D5B02D37F1F17E8E2B1433710208FFCC70D9ECB5AA ] RpcSs C:\WINDOWS\System32\rpcss.dll 05:30:10.0484 0x0e74 RpcSs - ok 05:30:10.0515 0x0e74 [ 9ACEE3313020A01235336C2A483AFD1A, 87DD3B037FB80DC5BB9F3E335C9A0F3926481012EF9A8DE2CEF53C5386F69009 ] RSVP C:\WINDOWS\system32\rsvp.exe 05:30:10.0515 0x0e74 RSVP - ok 05:30:10.0562 0x0e74 [ D0EEDC88876B20D42157CDCCA3E647F3, 37DA1053D5DCE42B5A0DF143318BE2BFF196FCA7D65E57B65663501AEF6223D2 ] s1039bus C:\WINDOWS\system32\DRIVERS\s1039bus.sys 05:30:10.0562 0x0e74 s1039bus - ok 05:30:10.0593 0x0e74 [ 7B35091A7BB597C86262C589B0B57D06, 03EABFF404DCB597CD58405D8496B33C129370DD3041BEAF83AF0820CB157C79 ] s1039mdfl C:\WINDOWS\system32\DRIVERS\s1039mdfl.sys 05:30:10.0593 0x0e74 s1039mdfl - ok 05:30:10.0640 0x0e74 [ 4CB1AB13C9813CBF3E4C6406F8043EC2, E147955B9F377A0343D0E649FBA5990ED176D5A21ECA03986F08C0E155FC65A1 ] s1039mdm C:\WINDOWS\system32\DRIVERS\s1039mdm.sys 05:30:10.0640 0x0e74 s1039mdm - ok 05:30:10.0656 0x0e74 [ 2649CA09585A7531126DCC116AD1F88C, 4136543EAF8D4150B36EBC1AEEE37D0142C2CEF8AE1651B74442E472351B92BE ] s1039mgmt C:\WINDOWS\system32\DRIVERS\s1039mgmt.sys 05:30:10.0671 0x0e74 s1039mgmt - ok 05:30:10.0703 0x0e74 [ 6D3F549EFD6DAEDD7D12F3DE2175053F, 1B9066D8255AA6A05E62EDC4A34FAB69F2649AC389CDC30AFADA4139482843E2 ] s1039nd5 C:\WINDOWS\system32\DRIVERS\s1039nd5.sys 05:30:10.0703 0x0e74 s1039nd5 - ok 05:30:10.0734 0x0e74 [ 305E3E3ACA0037AF2E2C1B50A383C91B, 2DF07DDA4F1B59A2413DC844CC355C2789F98A2D228845E23ECDC6783DF1C67E ] s1039obex C:\WINDOWS\system32\DRIVERS\s1039obex.sys 05:30:10.0734 0x0e74 s1039obex - ok 05:30:10.0765 0x0e74 [ 7DD02A58277C84C043442561589914F4, DC7FD909B3121188CF04C6045707D64DB70FCF07AD2B6B0D5BF9805BB5798BBC ] s1039unic C:\WINDOWS\system32\DRIVERS\s1039unic.sys 05:30:10.0765 0x0e74 s1039unic - ok 05:30:10.0796 0x0e74 [ 88296F7943F30A1EE3AF735440B92268, 8ACCF0331EE351EFB1A0F5EF210B92F822343B387D4B8CC29FE3222FDBFA911B ] SamSs C:\WINDOWS\system32\lsass.exe 05:30:10.0796 0x0e74 SamSs - ok 05:30:10.0796 0x0e74 SBRE - ok 05:30:10.0843 0x0e74 [ C6F479218E94896738C06AF5BA6AB3D3, 4077BDDE1A44E2A415FF76A8BB3EAD226D7A29696C0218E81381B81E750CD0BA ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe 05:30:10.0843 0x0e74 SCardSvr - ok 05:30:10.0890 0x0e74 [ DD73C11A5C4D14945846384B90A61A4B, C3C6BD62FB976E27C9E2C4C239D01B5458B7D270E9563A90EFBC9801B5DC55EA ] Schedule C:\WINDOWS\system32\schedsvc.dll 05:30:10.0890 0x0e74 Schedule - ok 05:30:11.0125 0x0e74 [ 98EF79CC2B07398AC525F9EA1AE0366F, D0D5D69696ED339F363024AF3271867F4C55572C67FD0F2AA27D24B37982E39A ] SDScannerService C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe 05:30:11.0250 0x0e74 SDScannerService - ok 05:30:11.0328 0x0e74 [ 14BF6B3AB327D519ED007CDDC56F6900, 4E5DC4AF45347C885E0E87F205EE1F95BB4713A0B581CD7317FBEEE2A9628982 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe 05:30:11.0359 0x0e74 SDUpdateService - ok 05:30:11.0406 0x0e74 [ 820EBE67AB99F033FDE25B2692157991, A9E86FE6EFD3CFD4EA1A26121C706335A6791CC6F81EE98AE2BE7EA566ECFEBB ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe 05:30:11.0406 0x0e74 SDWSCService - ok 05:30:11.0453 0x0e74 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys 05:30:11.0453 0x0e74 Secdrv - ok 05:30:11.0468 0x0e74 [ 2AAD9026648120FFFE2A8D871BB2BBC7, 8F9B35717CBE8B1C30FF15992DA8A857470A96F1A043CDA42CB89E4C6723B4A4 ] seclogon C:\WINDOWS\System32\seclogon.dll 05:30:11.0484 0x0e74 seclogon - ok 05:30:11.0500 0x0e74 [ 9D01E29D59723EB73B72107B208DAFE6, D334E807C6B41CF08EB64DCF8B2C8F68FA553971130FAB2E14C3EEE4D3B968F7 ] SENS C:\WINDOWS\system32\sens.dll 05:30:11.0500 0x0e74 SENS - ok 05:30:11.0515 0x0e74 [ 0F29512CCD6BEAD730039FB4BD2C85CE, 4F98AE390D1B14A755700DD6CEFB9CF921F0404AF2145D2D7E5F52394F87C6A5 ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys 05:30:11.0515 0x0e74 serenum - ok 05:30:11.0546 0x0e74 [ D07B02F88165E69B9F17162CF592C8A6, B494941FC05FC2439F54D4D999B1A65F9709BC296D5AC470C8F73ACFC5DC4729 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys 05:30:11.0546 0x0e74 Serial - ok 05:30:11.0609 0x0e74 [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys 05:30:11.0609 0x0e74 Sfloppy - ok 05:30:11.0656 0x0e74 [ DA5C015911F68F22ED821E9EE49AB233, 53694B0E70F77C775CE936F5DB458F724F051314704B6F69E5C2728180F0DC2C ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 05:30:11.0671 0x0e74 SharedAccess - ok 05:30:11.0687 0x0e74 [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 05:30:11.0703 0x0e74 ShellHWDetection - ok 05:30:11.0718 0x0e74 Simbad - ok 05:30:11.0765 0x0e74 [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 05:30:11.0765 0x0e74 SkypeUpdate - ok 05:30:11.0781 0x0e74 Sparrow - ok 05:30:11.0812 0x0e74 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys 05:30:11.0812 0x0e74 splitter - ok 05:30:11.0859 0x0e74 [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler C:\WINDOWS\system32\spoolsv.exe 05:30:11.0859 0x0e74 Spooler - ok 05:30:11.0921 0x0e74 [ A199171385BE17973FD800FA91F8F78A, 815091DC5A3506A3C8414B9D0213A61DF8289BA8645289CC9D338820536B42EA ] sptd C:\WINDOWS\system32\Drivers\sptd.sys 05:30:11.0921 0x0e74 Suspicious file ( NoAccess ): C:\WINDOWS\system32\Drivers\sptd.sys. md5: A199171385BE17973FD800FA91F8F78A, sha256: 815091DC5A3506A3C8414B9D0213A61DF8289BA8645289CC9D338820536B42EA 05:30:11.0921 0x0e74 sptd - detected LockedFile.Multi.Generic ( 1 ) 05:30:14.0437 0x0e74 Detect skipped due to KSN trusted 05:30:14.0437 0x0e74 sptd - ok 05:30:14.0468 0x0e74 [ EB032822BE406EF220D546DDFFCF0002, 916299B409925AB7326CB5F744799B34FD08CA4C4B447215DA5060FF446FEEBE ] sr C:\WINDOWS\system32\DRIVERS\sr.sys 05:30:14.0468 0x0e74 sr - ok 05:30:14.0500 0x0e74 [ 316D0E66074AE4CDE641C50D3A1C5148, 8429F815AFB4B39F6C1C56FB1CA009E5338C1467A4A02DD8E7E35BADBB8D5221 ] srservice C:\WINDOWS\system32\srsvc.dll 05:30:14.0500 0x0e74 srservice - ok 05:30:14.0546 0x0e74 [ 47DDFC2F003F7F9F0592C6874962A2E7, 17C643BD4EB09B5666FE41817DC785BE04A6E491CE79E8E5A702CDBD98E1BDD7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys 05:30:14.0562 0x0e74 Srv - ok 05:30:14.0593 0x0e74 [ 2C0B1224AA36B4CA1753302BAA855882, F8C90ECBF5BD7C3984E7C82EB00042DFD85A62F263C0205E6790205B6D64E101 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 05:30:14.0593 0x0e74 SSDPSRV - ok 05:30:14.0640 0x0e74 [ E57B778208C783D8DEBAB320C16A1B82, D9B0ACAF219D377E91737337466137F1AC78731659C1F0531BA3D9191DADC483 ] StarOpen C:\WINDOWS\system32\drivers\StarOpen.sys 05:30:14.0640 0x0e74 StarOpen - ok 05:30:14.0687 0x0e74 [ 41508EA375C97DC2B56E5F1AFC067187, 94D8D49AE3634E861DE501E72813C5320F059C49CC61FA01B2867C99E8B36DB4 ] stisvc C:\WINDOWS\system32\wiaservc.dll 05:30:14.0703 0x0e74 stisvc - ok 05:30:14.0718 0x0e74 [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys 05:30:14.0718 0x0e74 swenum - ok 05:30:14.0750 0x0e74 [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys 05:30:14.0750 0x0e74 swmidi - ok 05:30:14.0765 0x0e74 SwPrv - ok 05:30:14.0781 0x0e74 symc810 - ok 05:30:14.0796 0x0e74 symc8xx - ok 05:30:14.0812 0x0e74 sym_hi - ok 05:30:14.0812 0x0e74 sym_u3 - ok 05:30:14.0875 0x0e74 [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys 05:30:14.0875 0x0e74 sysaudio - ok 05:30:14.0906 0x0e74 [ E42048198518F9162027A9984CBB7B5C, 2634DE2B1AE9D856966F40BFB41AD951A41E11C557C4B27E61CFF63288B53D52 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe 05:30:14.0921 0x0e74 SysmonLog - ok 05:30:14.0921 0x0e74 SystemkService2 - ok 05:30:14.0968 0x0e74 [ 2902B85D0DC9CE43D76660C128D8908A, CD9A4E43A9FA2C2EB6D6710006EAE42A908BF0DC4D2D1350A461ACF81C67A76A ] SZASSIST C:\Program Files\Clarus\Samsung SecretZone\SZAssistSVC.exe 05:30:14.0968 0x0e74 SZASSIST - ok 05:30:15.0000 0x0e74 [ 2340E6977548038C88E39A9ECBB3FADC, B8992F5E0689B307B8CC162032B398950FB07C4B4EF997431F7B344351406586 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 05:30:15.0015 0x0e74 TapiSrv - ok 05:30:15.0062 0x0e74 [ 9AEFA14BD6B182D61E3119FA5F436D3D, EA29E49434585409272E7901AF89771FE9D6E911A7DC44AB3C7020CFF8A44552 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys 05:30:15.0062 0x0e74 Tcpip - ok 05:30:15.0093 0x0e74 [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys 05:30:15.0109 0x0e74 TDPIPE - ok 05:30:15.0125 0x0e74 [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys 05:30:15.0125 0x0e74 TDTCP - ok 05:30:15.0156 0x0e74 [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys 05:30:15.0156 0x0e74 TermDD - ok 05:30:15.0203 0x0e74 [ 52E0505408EDD4AB5CCC7F83B67B4299, 93DBA3282025C81DC43D4B43861A6CB30C9557CD0108D4D7E0C3B1269699CF22 ] TermService C:\WINDOWS\System32\termsrv.dll 05:30:15.0218 0x0e74 TermService - ok 05:30:15.0250 0x0e74 [ 55AAE86C7C2CADF6972ACD1D76C24A98, 25631E05E81E7C9C794DBB26B75F111C211EA22A031159F20B4461EA7EBCDF1C ] Themes C:\WINDOWS\System32\shsvcs.dll 05:30:15.0250 0x0e74 Themes - ok 05:30:15.0281 0x0e74 [ B17551AB6EAA71DCA530632C15FA3D9A, C80F22CEB4C1DBDE4C00061732A271C2C097BAD72A77E350E4B5E3DBECBA3903 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe 05:30:15.0281 0x0e74 TlntSvr - ok 05:30:15.0296 0x0e74 TosIde - ok 05:30:15.0328 0x0e74 [ 9E70EB419D7785C286DC458A019BAB9B, 3901C6B9C9C197FED9C1039F2EBE0C5ACE240512ABBFECB388CAD201CE032760 ] TrkWks C:\WINDOWS\system32\trkwks.dll 05:30:15.0328 0x0e74 TrkWks - ok 05:30:15.0359 0x0e74 [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys 05:30:15.0359 0x0e74 Udfs - ok 05:30:15.0375 0x0e74 ultra - ok 05:30:15.0421 0x0e74 [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys 05:30:15.0437 0x0e74 Update - ok 05:30:15.0468 0x0e74 [ E96A6BAEE0B2A14A38B45830D6E30697, 12314B1D96E025718F965C091E3CAD2865EDDAACA2E60A1A0DAF25630AE66B72 ] upnphost C:\WINDOWS\System32\upnphost.dll 05:30:15.0484 0x0e74 upnphost - ok 05:30:15.0515 0x0e74 [ 78B74AF8727A28C128E164E9B53A5413, B731A85DF22FABB8F253C68FC2C7F5DAF8282C516B8BA875AB6A01502323FDDC ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys 05:30:15.0515 0x0e74 upperdev - ok 05:30:15.0531 0x0e74 [ EB90E28B28541EC845E5345609355CA7, 60C8DF04EB5839AB1B8625C385F4B2089C63FE613463026F779B331D9BC4D4D6 ] UPS C:\WINDOWS\System32\ups.exe 05:30:15.0546 0x0e74 UPS - ok 05:30:15.0578 0x0e74 [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys 05:30:15.0578 0x0e74 usbccgp - ok 05:30:15.0593 0x0e74 [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys 05:30:15.0593 0x0e74 usbehci - ok 05:30:15.0625 0x0e74 [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys 05:30:15.0625 0x0e74 usbhub - ok 05:30:15.0640 0x0e74 [ 0DAECCE65366EA32B162F85F07C6753B, 3C33AC2FC95E876933F2016CF0CDA2745491679728684DA8DF95A515CE4804BD ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys 05:30:15.0640 0x0e74 usbohci - ok 05:30:15.0671 0x0e74 [ A717C8721046828520C9EDF31288FC00, 1530BBE832EDBB0974AD89D723A03FF7A0094B368992D73C2C3E62A181DF1E0A ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys 05:30:15.0671 0x0e74 usbprint - ok 05:30:15.0718 0x0e74 [ F8EDE2B6928970DCE3D5614C27D9E7F6, 6E5EBBC8B70C1D593634DAF0C190DEADFDA18C3CBC8F552A76F156F3869EF05B ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys 05:30:15.0718 0x0e74 usbscan - ok 05:30:15.0750 0x0e74 [ 84C44D720655A8AA475E57A9E764D675, 2D450199338A217FBD951317812A74223E8B477974C7634667E8896316C3FEA0 ] usbser C:\WINDOWS\system32\drivers\usbser.sys 05:30:15.0750 0x0e74 usbser - ok 05:30:15.0781 0x0e74 [ 4F8FBC51A1C0A17310846B417A447F91, A283240C88D8A38839F8E21AD9A099AF55118140569362A6F3ED623D2C009D42 ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys 05:30:15.0781 0x0e74 UsbserFilt - ok 05:30:15.0812 0x0e74 [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 05:30:15.0812 0x0e74 USBSTOR - ok 05:30:15.0875 0x0e74 Util sizlsearch - ok 05:30:15.0890 0x0e74 [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave C:\WINDOWS\System32\drivers\vga.sys 05:30:15.0890 0x0e74 VgaSave - ok 05:30:15.0906 0x0e74 ViaIde - ok 05:30:15.0937 0x0e74 [ 56B191AC5FC0DF219949C95A6C87AFE7, 5DCD42BD686869B394CFB9EFD727DCEEEAE239326DDE3D1655C456FCAE949D9F ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys 05:30:15.0937 0x0e74 VolSnap - ok 05:30:15.0968 0x0e74 [ 7F2D7BFFC4554E1C742DD3629FD1FB1B, 4BFFC8A67F98AF69039DF0AFF1FDA11CFAD6464066E8ED92090D48392C43B6ED ] VSS C:\WINDOWS\System32\vssvc.exe 05:30:15.0984 0x0e74 VSS - ok 05:30:16.0015 0x0e74 [ A672CA3981352F8E9C30FEA056E80A62, 9AD34EFEB11EFEB234A246639FADF036F49FC67E542C4DE78D7C01E75BC62B59 ] W32Time C:\WINDOWS\system32\w32time.dll 05:30:16.0031 0x0e74 W32Time - ok 05:30:16.0062 0x0e74 [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 05:30:16.0062 0x0e74 Wanarp - ok 05:30:16.0109 0x0e74 [ D918617B46457B9AC28027722E30F647, 407284D3055DC11944D4EE7E4357E7CF9CAF8CA40CA50633AB6FD4A82CB7EEA6 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys 05:30:16.0125 0x0e74 Wdf01000 - ok 05:30:16.0140 0x0e74 WDICA - ok 05:30:16.0171 0x0e74 [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys 05:30:16.0187 0x0e74 wdmaud - ok 05:30:16.0203 0x0e74 [ 81FB88B975E25D76E00B69879D8A434C, 2340CEE200CA3F0A546F88AAD3AFDCFD0805DB027E8480B4280D92E14F6C1F69 ] WebClient C:\WINDOWS\System32\webclnt.dll 05:30:16.0218 0x0e74 WebClient - ok 05:30:16.0281 0x0e74 [ 70C22297534A88B0AD0568900AB5A6D9, 2457D9B21CD8633D6A59FC053B70B9282A64066789EC020A9F2C937141E95C61 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 05:30:16.0296 0x0e74 winmgmt - ok 05:30:16.0343 0x0e74 [ C51B4A5C05A5475708E3C81C7765B71D, F776D2680BD3407307B7072626F78460361FC5BC38623C9E16F394D300AB25DE ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll 05:30:16.0343 0x0e74 WmdmPmSN - ok 05:30:16.0406 0x0e74 [ AFCE55C392A9676BD24A287D5ED1C777, DFFF02131F25710BDD8F1BD51D3638E70662B67EE9E68153FFF83124E475F762 ] Wmi C:\WINDOWS\System32\advapi32.dll 05:30:16.0437 0x0e74 Wmi - ok 05:30:16.0484 0x0e74 [ A2B12D80A1670511B047A7D8BB647598, BDE141A77034608D926624583D252650D01B64EC2B3E8156A61D735C79E2A0E6 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe 05:30:16.0484 0x0e74 WmiApSrv - ok 05:30:16.0593 0x0e74 [ CDFA647AA82FDBA6C9C7A06155AFCB40, 4ACF2E90E4A933A5C662AFECFFB52997BED865953E452C80A772DF1B049060FD ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe 05:30:16.0625 0x0e74 WMPNetworkSvc - ok 05:30:16.0656 0x0e74 [ CF4DEF1BF66F06964DC0D91844239104, CC1D9CECE2056D29A9651D51BB57C3F4F9BF9E90A4808CF7496C683C874FBD51 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys 05:30:16.0687 0x0e74 WpdUsb - ok 05:30:16.0781 0x0e74 [ 15673BD0B86150CB8E27766059C72A9B, 56C23289A8BFF4945EE532CF6D62D3EC81B827CA15A359F30A327789F9FE9CAF ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 05:30:16.0812 0x0e74 WPFFontCache_v0400 - ok 05:30:16.0859 0x0e74 [ 6ABE6E225ADB5A751622A9CC3BC19CE8, 4061C5D0F051DFF1730E2A3BFC1CCA97B29602FC50F10F6B44D93B0D28F42024 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys 05:30:16.0859 0x0e74 WS2IFSL - ok 05:30:16.0890 0x0e74 [ B6669F49D42E09BC0F9889FAA0F3336D, B6147A60F763E562E26495A6ACAE759492A52AE3BEFEA4BF40B8874E4CF069F1 ] wscsvc C:\WINDOWS\system32\wscsvc.dll 05:30:16.0890 0x0e74 wscsvc - ok 05:30:16.0937 0x0e74 [ 04550D5EB7EE82C115DB547C01DF09FD, 6A4D1E5F4E1C641B47BB48489D4205531597E942E02ECD75BCFA856F60A938B0 ] wuauserv C:\WINDOWS\system32\wuauserv.dll 05:30:16.0937 0x0e74 wuauserv - ok 05:30:16.0968 0x0e74 [ EAA6324F51214D2F6718977EC9CE0DEF, B9DE1521395E09233FE519873702979C3EAF65FEC4B94B12A46CECB16C488543 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys 05:30:16.0968 0x0e74 WudfPf - ok 05:30:17.0000 0x0e74 [ F91FF1E51FCA30B3C3981DB7D5924252, D7052B58F22638CA8B59C6FD7408D6D6DD1C33910912CACC05C133472CE0DDCE ] WUDFRd C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 05:30:17.0015 0x0e74 WUDFRd - ok 05:30:17.0046 0x0e74 [ DDEE3682FE97037C45F4D7AB467CB8B6, D5A8F07AF4EDD9D7E17FEC6222D187E2981C177A479511E407756E0E5CB8D387 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll 05:30:17.0062 0x0e74 WudfSvc - ok 05:30:17.0109 0x0e74 [ C2842273AAA77AC031EDB87FA19A2147, 8542392E337C543BCD9EDC7A15DC6E8DE8E9B8041CC7A8D707217C9FF0446882 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll 05:30:17.0125 0x0e74 WZCSVC - ok 05:30:17.0156 0x0e74 [ 24ED6935771359A5AEF1FE8BF0C56F39, F0C3B781853714F48DE4F42533A7236CE11076208F190E79500F8A77C9CF9849 ] xmlprov C:\WINDOWS\System32\xmlprov.dll 05:30:17.0171 0x0e74 xmlprov - ok 05:30:17.0218 0x0e74 [ 188AFC9E2AA4A2A7319EE75629050524, 7CDEBF08F57F007B2EFD36DB818C7F869CB3345D73E889091D3A81B3DC62654B ] {9d5747ee-0448-4681-8337-1555de75a3b6}Gt C:\WINDOWS\system32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}Gt.sys 05:30:17.0218 0x0e74 {9d5747ee-0448-4681-8337-1555de75a3b6}Gt - ok 05:30:17.0250 0x0e74 [ E5B699FB2435EF448105FD9188121F3F, F7BE6E5F840379EE2894309A0E3770A79E751648A99E89053C6C31F7FCEFA13D ] {9d5747ee-0448-4681-8337-1555de75a3b6}t C:\WINDOWS\system32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}t.sys 05:30:17.0250 0x0e74 {9d5747ee-0448-4681-8337-1555de75a3b6}t - ok 05:30:17.0250 0x0e74 ================ Scan global =============================== 05:30:17.0281 0x0e74 [ 65C782F8CFC1BEBCC58E1532F44B6408, D5EB7357F37AC9CEF96BC1BCACE765B2897E502D699E64145EFA4DD62BCCE80B ] C:\WINDOWS\system32\basesrv.dll 05:30:17.0328 0x0e74 [ F2515CEDFA83C225E126117835D7BF6A, FFDDBC97E0024DF9E05D199CABA0B0A0F0CC7508D477D7C6E2AAD8D505174810 ] C:\WINDOWS\system32\winsrv.dll 05:30:17.0359 0x0e74 [ F2515CEDFA83C225E126117835D7BF6A, FFDDBC97E0024DF9E05D199CABA0B0A0F0CC7508D477D7C6E2AAD8D505174810 ] C:\WINDOWS\system32\winsrv.dll 05:30:17.0390 0x0e74 [ 02A467E27AF55F7064C5B251E587315F, 309D6C6ABC9D7786354758C107B89C50AC722AEA3B10631714F326AB2D3BB3DF ] C:\WINDOWS\system32\services.exe 05:30:17.0406 0x0e74 [ Global ] - ok 05:30:17.0406 0x0e74 ================ Scan MBR ================================== 05:30:17.0421 0x0e74 [ 32052574BF9F325AE309ABC7BFD04460 ] \Device\Harddisk0\DR0 05:30:17.0609 0x0e74 \Device\Harddisk0\DR0 - ok 05:30:17.0609 0x0e74 ================ Scan VBR ================================== 05:30:17.0609 0x0e74 [ C98AFF23EA5B28730C03A90180E4C209 ] \Device\Harddisk0\DR0\Partition1 05:30:17.0625 0x0e74 \Device\Harddisk0\DR0\Partition1 - ok 05:30:17.0625 0x0e74 [ 19AEA2FA35BB94AAA34CE6AC70A04DF0 ] \Device\Harddisk0\DR0\Partition2 05:30:17.0625 0x0e74 \Device\Harddisk0\DR0\Partition2 - ok 05:30:17.0656 0x0e74 [ 39E0A66C5DA9C2851FF2D42F10967860 ] \Device\Harddisk0\DR0\Partition3 05:30:17.0656 0x0e74 \Device\Harddisk0\DR0\Partition3 - ok 05:30:17.0671 0x0e74 ================ Scan generic autorun ====================== 05:30:17.0703 0x0e74 [ CC218C91E7DFEECE0BD17AF29AFD0A69, 0E682EC49650A351E3F71521AE5202E138F062B06DFED6288B473E1CB421F415 ] C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe 05:30:17.0703 0x0e74 MSConfig - ok 05:30:17.0718 0x0e74 Waiting for KSN requests completion. In queue: 215 05:30:18.0718 0x0e74 Waiting for KSN requests completion. In queue: 215 05:30:19.0718 0x0e74 Waiting for KSN requests completion. In queue: 215 05:30:20.0750 0x0e74 AV detected via SS1: PC Cleaner Pro, , disabled, updated 05:30:20.0765 0x0e74 Win FW state via NFM: disabled 05:30:23.0187 0x0e74 ============================================================ 05:30:23.0187 0x0e74 Scan finished 05:30:23.0187 0x0e74 ============================================================ 05:30:23.0187 0x0e6c Detected object count: 0 05:30:23.0187 0x0e6c Actual detected object count: 0 05:31:19.0781 0x0aa8 Deinitialize success