Velmi pomalý notebook

[Jimmm]

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.9.2
Run by Oujezdsky at 8:42:57 on 2014-04-10
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.2758.1448 [GMT 2:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Symantec Endpoint Protection *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\atiesrxx.exe
C:\Program Files\IDT\WDM\STacSV.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Fortinet\FortiClient\scheduler.exe
C:\Program Files\Fortinet\FortiClient\FCDBLog.exe
C:\Program Files\Fortinet\FortiClient\fcappdb.exe
C:\Program Files\Fortinet\FortiClient\FortiProxy.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\24x7Help\App24x7Svc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\aestsrv.exe
C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe
C:\Program Files\Bluetooth Suite\adminservice.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\Hewlett-Packard\HP DayStarter\HPDayStarterService.exe
C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe
C:\Windows\system32\ArcVCapRender\uArcCapture.exe
C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbarsvc.exe
C:\Windows\system32\xmesrv.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Fortinet\FortiClient\FortiTray.exe
C:\Program Files\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\Bluetooth Suite\BtvStack.exe
C:\Program Files\Bluetooth Suite\AthBtTray.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Inbox Toolbar\Inbox.exe
C:\Program Files\SiteRanker\SiteRankTray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\24x7Help\App24x7Help.exe
C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
C:\Program Files\Mobogenie\DaemonProcess.exe
C:\Program Files\24x7Help\App24x7Hook.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
E:\_Instalace\viry.cz\dds.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\conhost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\PROGRA~1\Fortinet\FORTIC~1\FORTIS~1.EXE
C:\Windows\system32\DllHost.exe
C:\Program Files\Mobogenie\mgusb.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxps://www.google.cz/
uURLSearchHooks: UrlSearchHook Class: {00000000-6E41-4FD3-8538-502F5495E5FC} -
uURLSearchHooks: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - <orphaned>
uURLSearchHooks: <No Name>: {93a3111f-4f74-4ed8-895e-d9708497629e} - c:\program files\videodownloadconverter_4z\bar\1.bin\4zSrcAs.dll
mURLSearchHooks: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - <orphaned>
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - c:\program files\mcafee security scan\3.8.130\McAfeeMSS_IE.dll
BHO: <No Name>: {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - c:\program files\siteranker\SiteRank.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {30F9B915-B755-4826-820B-08FBA6BD249D} - <orphaned>
BHO: Toolbar BHO: {312f84fb-8970-4fd3-bddb-7012eac4afc9} -
BHO: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\ips\IPSBHO.dll
BHO: AppGraffiti: {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - c:\program files\appgraffiti\AppGraffiti.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: CIESpeechBHO Class: {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - c:\program files\bluetooth suite\IEPlugIn.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Search Assistant BHO: {c547c6c2-561b-4169-a2a5-20ba771ca93b} - c:\program files\videodownloadconverter_4z\bar\1.bin\4zSrcAs.dll
BHO: <No Name>: {CCB69577-088B-4004-9ED8-FF5BCC83A039} - c:\program files\rebateinformer\RebateI.dll
BHO: {D4027C7F-154A-4066-A1AD-4243D8127440} - <orphaned>
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - <orphaned>
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [PDF Complete] c:\program files\pdf complete\pdfsty.exe
mRun: [HPConnectionManager] c:\program files\hewlett-packard\hp connection manager\HPCMDelayStart.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SysTrayApp] c:\program files\idt\wdm\sttray.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [QLBController] c:\program files\hewlett-packard\hp hotkey support\QLBController.exe /start
mRun: [NUSB3MON] "c:\program files\renesas electronics\usb 3.0 host controller driver\application\nusb3mon.exe"
mRun: [AtherosBtStack] "c:\program files\bluetooth suite\BtvStack.exe"
mRun: [AthBtTray] "c:\program files\bluetooth suite\AthBtTray.exe"
mRun: [IAStorIcon] c:\program files\intel\intel(r) rapid storage technology\IAStorIcon.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [InboxToolbar] "c:\program files\inbox toolbar\Inbox.exe" /STARTUP
mRun: [24x7HELP] "c:\program files\24x7help\App24x7Help.exe" /STARTUP
mRun: [SiteRanker] "c:\program files\siteranker\SiteRankTray.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [ApnUpdater] "c:\program files\ask.com\updater\Updater.exe"
mRun: [VideoDownloadConverter Search Scope Monitor] "c:\progra~1\videod~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
mRun: [VideoDownloadConverter_4z Browser Plugin Loader] c:\progra~1\videod~2\bar\1.bin\4zbrmon.exe
mRun: [Gemini NCM Status] c:\sberbank\ncm\GNCMTray.exe
mRun: [mobilegeni daemon] c:\program files\mobogenie\DaemonProcess.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\3.8.130\SSScheduler.exe
mPolicies-Explorer: NoWelcomeScreen = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\micros~1\office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\micros~1\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - c:\program files\bluetooth suite\IEPlugIn.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} - hxxps://bb24.csob.cz/comp/IcaSignerCZ.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 192.168.1.2
TCP: Interfaces\{66E7A772-56B3-443B-9C7D-CD4E798A5BB7} : DHCPNameServer = 192.168.1.2
TCP: Interfaces\{E4387C8D-5C59-4CB9-8552-DE60B1FE4CB4} : DHCPNameServer = 192.168.1.2
TCP: Interfaces\{E4387C8D-5C59-4CB9-8552-DE60B1FE4CB4}\1405F435 : DHCPNameServer = 46.149.114.2 192.168.1.110
TCP: Interfaces\{E4387C8D-5C59-4CB9-8552-DE60B1FE4CB4}\46F6D6160373 : DHCPNameServer = 84.16.121.1 84.16.96.2
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - c:\program files\inbox toolbar\Inbox.dll
Handler: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - c:\program files\rebateinformer\RebateI.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
Notify: SEP - c:\program files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\WinLogoutNotifier.dll
SSODL: WebCheck - <orphaned>
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\oujezdsky\appdata\roaming\mozilla\firefox\profiles\2exb5srk.default\
FF - prefs.js: browser.search.selectedEngine - Ask Web Search
FF - prefs.js: browser.startup.homepage - hxxp://home.tb.ask.com/index.jhtml?ptb=B3B6E6A5-6360-4CB9-9BB6-34F55FE070F9&n=77fd59e1&p2=^HJ^xdm007^YYA^cz&si=CNuA45Oj4rkCFYOWtAodajkA9Q
FF - prefs.js: keyword.URL - hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=B3B6E6A5-6360-4CB9-9BB6-34F55FE070F9&n=77fd59e1&ind=2013092321&p2=^HJ^xdm007^YYA^cz&si=CNuA45Oj4rkCFYOWtAodajkA9Q&searchfor=
FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.23.9\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\mcafee security scan\3.8.130\npMcAfeeMSS.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\videodownloadconverter_4z\bar\1.bin\NP4zStub.dll
FF - plugin: c:\users\oujezdsky\appdata\roaming\csas\lib\x86\npPKIComponentNPAPI.dll
FF - plugin: c:\users\oujezdsky\appdata\roaming\kb-ext\lib\x86\npPKIComponentNPAPI-kbext.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - ExtSQL: !HIDDEN! 2013-09-23 21:41; 4zffxtbr@VideoDownloadConverter_4z.com; c:\program files\videodownloadconverter_4z\bar\1.bin
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\sep\0c0103e8\009d.105\x86\SymDS.sys [2011-7-16 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\sep\0c0103e8\009d.105\x86\SymEFA.sys [2011-8-27 758904]
R1 BHDrvx86;BHDrvx86;c:\programdata\symantec\symantec endpoint protection\12.1.1000.157.105\data\definitions\bashdefs\20140319.011\BHDrvx86.sys [2014-3-19 1098968]
R1 FortiFilter;Fortinet NDIS6 Packet Filter Service;c:\windows\system32\drivers\FortiFilter.sys [2011-6-24 20832]
R1 FortiShield;FortiShield;c:\windows\system32\drivers\FortiShield.sys [2012-1-30 40552]
R1 IDSVix86;IDSVix86;c:\programdata\symantec\symantec endpoint protection\12.1.1000.157.105\data\definitions\ipsdefs\20140409.001\IDSvix86.sys [2014-3-31 395992]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\sep\0c0103e8\009d.105\x86\Ironx86.sys [2011-9-13 137336]
R1 SYMNETS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\sep\0c0103e8\009d.105\x86\symnets.sys [2011-9-8 299640]
R2 24x7HelpSvc;24x7HelpService;c:\program files\24x7help\App24x7Svc.exe [2012-11-8 342168]
R2 AESTFilters;Andrea ST Filters Service;c:\program files\idt\wdm\AEstSrv.exe [2012-4-18 81920]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-4-18 176128]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files\bluetooth suite\Ath_CoexAgent.exe [2011-1-6 138400]
R2 AtherosSvc;AtherosSvc;c:\program files\bluetooth suite\AdminService.exe [2011-1-6 56480]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\skype\toolbars\autoupdate\SkypeC2CAutoUpdateSvc.exe [2014-3-3 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\skype\toolbars\pnrsvc\SkypeC2CPNRSvc.exe [2014-3-3 1748608]
R2 HPDayStarterService;HP DayStarter Service;c:\program files\hewlett-packard\hp daystarter\HPDayStarterService.exe [2011-1-28 133688]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\hewlett-packard\shared\HPDrvMntSvc.exe [2011-11-2 227896]
R2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files\hewlett-packard\hp hotkey support\hpHotkeyMonitor.exe [2011-7-6 1698360]
R2 hpsrv;HP Service;c:\windows\system32\hpservice.exe [2011-5-13 26168]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files\intel\intel(r) rapid storage technology\IAStorDataMgrSvc.exe [2012-4-18 13336]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\pdf complete\pdfsvc.exe [2012-4-18 1128952]
R2 SepMasterService;Symantec Endpoint Protection;c:\program files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\ccSvcHst.exe [2011-9-20 137224]
R2 uArcCapture;ArcCapture;c:\windows\system32\arcvcaprender\uArcCapture.exe [2012-4-18 502464]
R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;c:\windows\system32\drivers\ArcSoftVCapture.sys [2012-4-18 29760]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\drivers\btath_flt.sys [2011-1-6 34976]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-1-6 258720]
R3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\drivers\btath_bus.sys [2011-1-6 24736]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\drivers\btath_hcrp.sys [2011-1-6 175776]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\drivers\btath_lwflt.sys [2011-1-6 49312]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\drivers\btath_rcp.sys [2011-1-6 141088]
R3 BtFilter;BtFilter;c:\windows\system32\drivers\btfilter.sys [2011-1-6 241824]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2014-4-3 108120]
R3 fortiapd;fortiapd;c:\windows\system32\drivers\fortiapd.sys [2012-1-30 13416]
R3 FortiRdr;FortiRdr;c:\windows\system32\drivers\FortiRdr2.sys [2012-1-30 37480]
R3 intelkmd;intelkmd;c:\windows\system32\drivers\igdpmd32.sys [2012-4-18 10855424]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2012-4-18 144472]
R3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [2010-10-19 41088]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys [2012-4-18 69504]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys [2012-4-18 161664]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2011-6-10 394856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464]
S3 Fortips;Fortips;c:\windows\system32\drivers\fortips.sys [2012-1-30 106088]
S3 ft_vnic;Fortinet network virtual adapter;c:\windows\system32\drivers\ftvnic.sys [2012-4-19 14496]
S3 GemCCID;GemCCID;c:\windows\system32\drivers\GemCCID.sys [2013-4-24 98816]
S3 GNCM;Gemini Network Communication Manager;c:\sberbank\ncm\GNCM.exe [2007-2-15 196608]
S3 hpCMSrv;HP Connection Manager 4 Service;c:\program files\hewlett-packard\hp connection manager\hpCMSrv.exe [2011-5-23 1098296]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\3.8.130\McCHSvc.exe [2013-9-6 235216]
S3 StorSvc;Služba úložiště;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 SyDvCtrl;SyDvCtrl;c:\program files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\SyDvCtrl32.sys [2011-10-30 23984]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
.
=============== Created Last 30 ================
.
2014-04-10 05:48:56 -------- d-----w- c:\programdata\LightScribe
2014-04-09 09:03:18 -------- d-----w- c:\program files\ESET
2014-04-02 17:45:42 -------- d-sh--w- C:\found.002
2014-03-20 11:41:51 -------- d-----w- c:\users\oujezdsky\appdata\roaming\EurekaLog
.
==================== Find3M ====================
.
2014-03-12 18:05:28 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 18:05:28 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7601 Disk: Hitachi_ rev.JE4O -> Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: >>UNKNOWN [0x82E1F000]<< >>UNKNOWN [0x8B1B6000]<< >>UNKNOWN [0x8B1A5000]<< >>UNKNOWN [0x8B16A000]<< >>UNKNOWN [0x83231000]<< >>UNKNOWN [0x8A8AD000]<< >>UNKNOWN [0x8AA3C000]<<
_asm { DEC EBP; POP EDX; NOP ; ADD [EBX], AL; ADD [EAX], AL; ADD [EAX+EAX], AL; ADD [EAX], AL; }
1 ntkrnlpa!IofCallDriver[0x82E5652A] -> \Device\Harddisk0\DR0[0x878B8130]
\Driver\Disk[0x878B7AC0] -> IRP_MJ_CREATE -> 0x8B1BA39F
3 [0x8B1BA59E] -> ntkrnlpa!IofCallDriver[0x82E5652A] -> [0x878B87D0]
\Driver\hpdskflt[0x853EC8B0] -> IRP_MJ_CREATE -> 0x8B16BEB2
5 [0x8B16BF92] -> ntkrnlpa!IofCallDriver[0x82E5652A] -> [0x85D3D840]
\Driver\ACPI[0x8534A5F0] -> IRP_MJ_CREATE -> 0x8A8B64CC
7 [0x8A8B63D4] -> ntkrnlpa!IofCallDriver[0x82E5652A] -> \Device\Ide\IAAStorageDevice-1[0x85D55028]
\Driver\iaStor[0x85D8A9F0] -> IRP_MJ_CREATE -> 0x8AA5F0F8
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; MOV CX, 0x4; MOV BP, 0x7be; CMP BYTE [BP+0x0], 0x0; }
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 8:44:49,38 ===============

[vyosek]

Zdravim

Stahnete si TDSSKiller http://media.kaspersky.com/utilities/Vi ... killer.exe

• Po spusteni odsouhlaste licencni podminky (klik na Accept)
• Kliknete na volbu Change parametrs
• V okne Additional Option zakliknete vsechny moznosti
• Kliknete na OK
• Utilite prikazte, at skenuje - klik na Start Scan
• Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip
• Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip
• Pokud mate vsude Skip, kliknete na Continue
• Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte

[Jimmm]

1. část

10:11:36.0335 0x1ea0 TDSS rootkit removing tool 3.0.0.30 Apr 7 2014 15:39:12
10:11:41.0372 0x1ea0 ============================================================
10:11:41.0372 0x1ea0 Current date / time: 2014/04/10 10:11:41.0372
10:11:41.0372 0x1ea0 SystemInfo:
10:11:41.0372 0x1ea0
10:11:41.0372 0x1ea0 OS Version: 6.1.7601 ServicePack: 1.0
10:11:41.0372 0x1ea0 Product type: Workstation
10:11:41.0372 0x1ea0 ComputerName: NTB-OUJEZDSKY
10:11:41.0372 0x1ea0 UserName: Oujezdsky
10:11:41.0372 0x1ea0 Windows directory: C:\Windows
10:11:41.0372 0x1ea0 System windows directory: C:\Windows
10:11:41.0372 0x1ea0 Processor architecture: Intel x86
10:11:41.0372 0x1ea0 Number of processors: 4
10:11:41.0372 0x1ea0 Page size: 0x1000
10:11:41.0372 0x1ea0 Boot type: Normal boot
10:11:41.0372 0x1ea0 ============================================================
10:11:42.0568 0x1ea0 KLMD registered as C:\Windows\system32\drivers\70656642.sys
10:11:46.0031 0x1ea0 System UUID: {B04016D2-9DEB-411E-4FA9-CF346B9CB04C}
10:11:53.0459 0x1ea0 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
10:11:53.0459 0x1ea0 Drive \Device\Harddisk1\DR5 - Size: 0x1DE000000 (7.47 Gb), SectorSize: 0x200, Cylinders: 0x3CE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
10:11:53.0459 0x1ea0 ============================================================
10:11:53.0459 0x1ea0 \Device\Harddisk0\DR0:
10:11:53.0475 0x1ea0 MBR partitions:
10:11:53.0475 0x1ea0 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
10:11:53.0475 0x1ea0 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x56B0F000
10:11:53.0475 0x1ea0 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x56B41800, BlocksNum 0xA00000
10:11:53.0475 0x1ea0 \Device\Harddisk1\DR5:
10:11:53.0475 0x1ea0 MBR partitions:
10:11:53.0475 0x1ea0 \Device\Harddisk1\DR5\Partition1: MBR, Type 0xB, StartLBA 0x50, BlocksNum 0xEEFFB0
10:11:53.0475 0x1ea0 ============================================================
10:11:53.0522 0x1ea0 C: <-> \Device\Harddisk0\DR0\Partition2
10:11:53.0537 0x1ea0 F: <-> \Device\Harddisk0\DR0\Partition3
10:11:53.0537 0x1ea0 ============================================================
10:11:53.0537 0x1ea0 Initialize success
10:11:53.0537 0x1ea0 ============================================================
10:12:00.0691 0x12a8 ============================================================
10:12:00.0691 0x12a8 Scan started
10:12:00.0691 0x12a8 Mode: Manual; SigCheck; TDLFS;
10:12:00.0691 0x12a8 ============================================================
10:12:00.0691 0x12a8 KSN ping started
10:12:24.0060 0x12a8 KSN ping finished: true
10:12:24.0263 0x12a8 ================ Scan system memory ========================
10:12:24.0263 0x12a8 System memory - ok
10:12:24.0263 0x12a8 ================ Scan services =============================
10:12:24.0559 0x12a8 [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
10:12:24.0668 0x12a8 1394ohci - ok
10:12:24.0793 0x12a8 [ 3090B373E931ED3DE94F357BA25BF18C, E5D6D090ECC05B73404B4CDF49E92832E8D10E3C620EBD31C0DE265AF0B5A8F9 ] 24x7HelpSvc C:\Program Files\24x7Help\App24x7Svc.exe
10:12:24.0824 0x12a8 24x7HelpSvc - ok
10:12:24.0856 0x12a8 [ CC1F1D3D70DC13C2C281488D347D4415, 3AB1495F8982C727D02E9975E2E04203B918AFAA7B05B5E7FEB5142EB30D1998 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys
10:12:24.0871 0x12a8 Accelerometer - ok
10:12:24.0918 0x12a8 [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys
10:12:24.0949 0x12a8 ACPI - ok
10:12:24.0965 0x12a8 [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
10:12:24.0980 0x12a8 AcpiPmi - ok
10:12:25.0058 0x12a8 [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
10:12:25.0074 0x12a8 AdobeARMservice - ok
10:12:25.0152 0x12a8 [ 9D96B0D5855FD1B98023B3EEC9F06786, E4C79233158BE8AA4E9C6DD71585E5D2703A5156531EB3D692D7D81BC443E844 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:12:25.0168 0x12a8 AdobeFlashPlayerUpdateSvc - ok
10:12:25.0277 0x12a8 [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
10:12:25.0292 0x12a8 adp94xx - ok
10:12:25.0324 0x12a8 [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\drivers\adpahci.sys
10:12:25.0355 0x12a8 adpahci - ok
10:12:25.0370 0x12a8 [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\drivers\adpu320.sys
10:12:25.0386 0x12a8 adpu320 - ok
10:12:25.0417 0x12a8 [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
10:12:25.0480 0x12a8 AeLookupSvc - ok
10:12:25.0558 0x12a8 [ 827DBC22C96EECF6D36A13162FABAFD3, EBBC04A6AD3BC83E3791569C1120BBBB59AF70512FA2CEB6A8BA2A257F3F6C32 ] AESTFilters C:\Program Files\IDT\WDM\aestsrv.exe
10:12:25.0573 0x12a8 AESTFilters - ok
10:12:25.0620 0x12a8 [ 9EBBBA55060F786F0FCAA3893BFA2806, 2E5A0FA2995989E9391771024839F5AD040A041CEE56787286D8FC421E26FE90 ] AFD C:\Windows\system32\drivers\afd.sys
10:12:25.0651 0x12a8 AFD - ok
10:12:25.0667 0x12a8 [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys
10:12:25.0698 0x12a8 agp440 - ok
10:12:25.0729 0x12a8 [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\drivers\djsvs.sys
10:12:25.0745 0x12a8 aic78xx - ok
10:12:25.0792 0x12a8 [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe
10:12:25.0807 0x12a8 ALG - ok
10:12:25.0838 0x12a8 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys
10:12:25.0854 0x12a8 aliide - ok
10:12:25.0885 0x12a8 [ 2B207D12162F6A831564BE4F72307032, 3E5155091A108F7373E3A2F1F6212971ECCF3161635525EE564B706ED25FF75C ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
10:12:25.0916 0x12a8 AMD External Events Utility - ok
10:12:25.0948 0x12a8 [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
10:12:25.0963 0x12a8 amdagp - ok
10:12:25.0979 0x12a8 [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide C:\Windows\system32\drivers\amdide.sys
10:12:25.0994 0x12a8 amdide - ok
10:12:26.0010 0x12a8 [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
10:12:26.0041 0x12a8 AmdK8 - ok
10:12:26.0384 0x12a8 [ E652316A5C46E19766B4D6066A1D9F74, 8A2CC801612AC57C389AC14D90CE4B8B91EEFA98AAA9E973FA253534BEC67AB4 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
10:12:26.0759 0x12a8 amdkmdag - ok
10:12:26.0821 0x12a8 [ 1BE5B3052FFDE789B72C37FA3EC48CD5, 09ECAA2E5B70C49432DA15822E255B3C177BDB1C2478DFCC2925604AF031AB79 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
10:12:26.0852 0x12a8 amdkmdap - ok
10:12:26.0868 0x12a8 [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
10:12:26.0899 0x12a8 AmdPPM - ok
10:12:26.0930 0x12a8 [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys
10:12:26.0946 0x12a8 amdsata - ok
10:12:26.0993 0x12a8 [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
10:12:27.0008 0x12a8 amdsbs - ok
10:12:27.0055 0x12a8 [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys
10:12:27.0071 0x12a8 amdxata - ok
10:12:27.0086 0x12a8 [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID C:\Windows\system32\drivers\appid.sys
10:12:27.0118 0x12a8 AppID - ok
10:12:27.0164 0x12a8 [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc C:\Windows\System32\appidsvc.dll
10:12:27.0227 0x12a8 AppIDSvc - ok
10:12:27.0242 0x12a8 [ FB1959012294D6AD43E5304DF65E3C26, CFE906B07FF71A178CF9C254B056C6F5A303DDC511F0E4E1E75808F1D5326495 ] Appinfo C:\Windows\System32\appinfo.dll
10:12:27.0289 0x12a8 Appinfo - ok
10:12:27.0336 0x12a8 [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt C:\Windows\System32\appmgmts.dll
10:12:27.0352 0x12a8 AppMgmt - ok
10:12:27.0398 0x12a8 [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\drivers\arc.sys
10:12:27.0414 0x12a8 arc - ok
10:12:27.0430 0x12a8 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\drivers\arcsas.sys
10:12:27.0461 0x12a8 arcsas - ok
10:12:27.0492 0x12a8 [ 0309F8D544F565BE13EEFC21824CA827, 238C70C9FDB4061DCFA1E258F8E284D02B2C159198ECEEF898A0973709E4BBDF ] ARCVCAM C:\Windows\system32\DRIVERS\ArcSoftVCapture.sys
10:12:27.0523 0x12a8 ARCVCAM - ok
10:12:27.0539 0x12a8 [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
10:12:27.0586 0x12a8 AsyncMac - ok
10:12:27.0617 0x12a8 [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys
10:12:27.0664 0x12a8 atapi - ok
10:12:27.0695 0x12a8 [ 882EDBAFCC227852C9DCA23EA48D2E78, 309E4247EC236F2488E86B38EBA2995518ECFDC5916FBB6CF5054073C3010A1B ] AthBTPort C:\Windows\system32\DRIVERS\btath_flt.sys
10:12:27.0726 0x12a8 AthBTPort - ok
10:12:27.0757 0x12a8 [ 4C4A576818EA028257C624AE36FF7A03, 951521E0531D943EF55737EE99BBCBD6CC6ABC50530985D774EEBE8564166EDB ] Atheros Bt&Wlan Coex Agent C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe
10:12:27.0773 0x12a8 Atheros Bt&Wlan Coex Agent - detected UnsignedFile.Multi.Generic ( 1 )
10:12:30.0227 0x12a8 Detect skipped due to KSN trusted
10:12:30.0227 0x12a8 Atheros Bt&Wlan Coex Agent - ok
10:12:30.0290 0x12a8 [ 5EBF6F512E7037CC6AD139ADB197796D, C2A52E3A0430B9F58813A72C7E774CD948737755B5479A436C48D5B8463F20C1 ] AtherosSvc C:\Program Files\Bluetooth Suite\adminservice.exe
10:12:30.0321 0x12a8 AtherosSvc - detected UnsignedFile.Multi.Generic ( 1 )
10:12:32.0817 0x12a8 Detect skipped due to KSN trusted
10:12:32.0817 0x12a8 AtherosSvc - ok
10:12:33.0063 0x12a8 [ 512144424558D1298BD43340E5C5368F, E0221ED6A4F70ABB4B63AF0739EAC448C607AAABF3DA6309521AA6D811D7974C ] athr C:\Windows\system32\DRIVERS\athr.sys
10:12:33.0157 0x12a8 athr - ok
10:12:33.0235 0x12a8 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:12:33.0282 0x12a8 AudioEndpointBuilder - ok
10:12:33.0313 0x12a8 [ CE3B4E731638D2EF62FCB419BE0D39F0, 3B98179CB0101778D9E7810D2CD46D9C0D7120E141BA11471666E7D9EB3C93CC ] Audiosrv C:\Windows\System32\Audiosrv.dll
10:12:33.0360 0x12a8 Audiosrv - ok
10:12:33.0391 0x12a8 [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll
10:12:33.0422 0x12a8 AxInstSV - ok
10:12:33.0469 0x12a8 [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\drivers\bxvbdx.sys
10:12:33.0516 0x12a8 b06bdrv - ok
10:12:33.0531 0x12a8 [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
10:12:33.0562 0x12a8 b57nd60x - ok
10:12:33.0609 0x12a8 [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll
10:12:33.0640 0x12a8 BDESVC - ok
10:12:33.0656 0x12a8 [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys
10:12:33.0687 0x12a8 Beep - ok
10:12:33.0734 0x12a8 [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll
10:12:33.0796 0x12a8 BFE - ok
10:12:34.0015 0x12a8 [ 0305AF513F52CCCD0716002EC06AC2AA, 4D371F6077C8F8041E17D4ACA75CDD9FE4867E959205E822842B73333DE579F6 ] BHDrvx86 C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\BASHDefs\20140319.011\BHDrvx86.sys
10:12:34.0062 0x12a8 BHDrvx86 - ok
10:12:34.0108 0x12a8 [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\System32\qmgr.dll
10:12:34.0171 0x12a8 BITS - ok
10:12:34.0218 0x12a8 [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
10:12:34.0233 0x12a8 blbdrive - ok
10:12:34.0264 0x12a8 [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
10:12:34.0280 0x12a8 bowser - ok
10:12:34.0311 0x12a8 [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
10:12:34.0327 0x12a8 BrFiltLo - ok
10:12:34.0358 0x12a8 [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
10:12:34.0374 0x12a8 BrFiltUp - ok
10:12:34.0405 0x12a8 [ 6E11F33D14D020F58D5E02E4D67DFA19, 9563E4E8CE769B7619745F6F6DE618389A1595785023BF1F295AD8301B27F0AF ] Browser C:\Windows\System32\browser.dll
10:12:34.0452 0x12a8 Browser - ok
10:12:34.0483 0x12a8 [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys
10:12:34.0545 0x12a8 Brserid - ok
10:12:34.0561 0x12a8 [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
10:12:34.0592 0x12a8 BrSerWdm - ok
10:12:34.0608 0x12a8 [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
10:12:34.0623 0x12a8 BrUsbMdm - ok
10:12:34.0639 0x12a8 [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
10:12:34.0654 0x12a8 BrUsbSer - ok
10:12:34.0701 0x12a8 [ D57BC943ED4EF85A51165F408E4C15A7, 095C7200E8F5EEAEB0C11396901F46C908F2CA3360F62918410E5B7F3F210B74 ] BTATH_A2DP C:\Windows\system32\drivers\btath_a2dp.sys
10:12:34.0732 0x12a8 BTATH_A2DP - ok
10:12:34.0779 0x12a8 [ F60E0C722442EA91F0C253B7814D8192, FCD383C9DD38B57FADB8EC5F915D8040E6B116E59DC062BD3600C7BED4039F21 ] BTATH_BUS C:\Windows\system32\DRIVERS\btath_bus.sys
10:12:34.0795 0x12a8 BTATH_BUS - ok
10:12:34.0810 0x12a8 [ F31E369DB8258B28E3DCF66705AEA9E9, 75D653846A66D082B1F2235474FA0D206E50DFA6C1537FDFB64890A3945FB740 ] BTATH_HCRP C:\Windows\system32\DRIVERS\btath_hcrp.sys
10:12:34.0842 0x12a8 BTATH_HCRP - ok
10:12:34.0873 0x12a8 [ 6651798266FDE23159D961463A63A77D, 636E4DA3122282CC37B92AA67A3B392012B57F4BDFC91AE655CD6978B8E60D22 ] BTATH_LWFLT C:\Windows\system32\DRIVERS\btath_lwflt.sys
10:12:34.0888 0x12a8 BTATH_LWFLT - ok
10:12:34.0904 0x12a8 [ 08EF5298DF80BC136523BCD2ED8B9C37, 0970A24DB16160F8BF30AF2FFC4A98A2676619A0ABDC36FCF16BE74291A4E206 ] BTATH_RCP C:\Windows\system32\DRIVERS\btath_rcp.sys
10:12:34.0920 0x12a8 BTATH_RCP - ok
10:12:34.0951 0x12a8 [ 6C692B2920D0E1B2FDB19329B7D69C6A, 4FC34270FD411939BCCA3F2BC737D29D81671E9FDCDC88EFE4E712693D23B7AD ] BtFilter C:\Windows\system32\DRIVERS\btfilter.sys
10:12:34.0982 0x12a8 BtFilter - ok
10:12:35.0013 0x12a8 [ 2865A5C8E98C70C605F417908CEBB3A4, B1C5AC228BD7072AF8668C009C6CDC13EE9FCB9481F57524300F37C40BF1E935 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
10:12:35.0029 0x12a8 BthEnum - ok
10:12:35.0044 0x12a8 [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
10:12:35.0076 0x12a8 BTHMODEM - ok
10:12:35.0091 0x12a8 [ AD1872E5829E8A2C3B5B4B641C3EAB0E, 8C2DBCAC08DDB41E2B44E257C55FA2D0272959B308EFF9EAF5FF9AE1E4A0AA39 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
10:12:35.0122 0x12a8 BthPan - ok
10:12:35.0138 0x12a8 [ C2FBF6D271D9A94D839C416BF186EAD9, 492F8344BD2E354C3525E1E535A1BAAAC17A38EE01868B986AC112E33B3B2A66 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
10:12:35.0185 0x12a8 BTHPORT - ok
10:12:35.0216 0x12a8 [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll
10:12:35.0247 0x12a8 bthserv - ok
10:12:35.0278 0x12a8 [ C81E9413A25A439F436B1D4B6A0CF9E9, A4C290163207AED22C70C7F90B28F6FC24892889643D60D915059405AC5A4A72 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
10:12:35.0294 0x12a8 BTHUSB - ok
10:12:35.0466 0x12a8 [ BE531939BB6D153DB63DBBFBD398A713, CB63FD4051198A89EDB3CF45199F99F5816A672FA9374E166ED7A5D17ED47468 ] c2cautoupdatesvc C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
10:12:35.0528 0x12a8 c2cautoupdatesvc - ok
10:12:35.0715 0x12a8 [ 33E9F08F675EF94633C8EF8A7C4EADF3, E1556CF27F7FB3B03EE63F3464F5EE92E7B09E67C5D8AA4A9346FEEBD716A152 ] c2cpnrsvc C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
10:12:35.0793 0x12a8 c2cpnrsvc - ok
10:12:35.0840 0x12a8 [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
10:12:35.0871 0x12a8 cdfs - ok
10:12:35.0918 0x12a8 [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
10:12:35.0949 0x12a8 cdrom - ok
10:12:35.0980 0x12a8 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll
10:12:36.0012 0x12a8 CertPropSvc - ok
10:12:36.0058 0x12a8 [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\drivers\circlass.sys
10:12:36.0090 0x12a8 circlass - ok
10:12:36.0105 0x12a8 [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS C:\Windows\system32\CLFS.sys
10:12:36.0136 0x12a8 CLFS - ok
10:12:36.0199 0x12a8 [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:12:36.0214 0x12a8 clr_optimization_v2.0.50727_32 - ok
10:12:36.0277 0x12a8 [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:12:36.0292 0x12a8 clr_optimization_v4.0.30319_32 - ok
10:12:36.0324 0x12a8 [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
10:12:36.0339 0x12a8 CmBatt - ok
10:12:36.0355 0x12a8 [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys
10:12:36.0370 0x12a8 cmdide - ok
10:12:36.0417 0x12a8 [ 6427525D76F61D0C519B008D3680E8E7, 956E0FE9C628D0017F36C01F1A326231DA64D1CD94D5AB16EBFEA103D3960367 ] CNG C:\Windows\system32\Drivers\cng.sys
10:12:36.0448 0x12a8 CNG - ok
10:12:36.0495 0x12a8 [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
10:12:36.0511 0x12a8 Compbatt - ok
10:12:36.0526 0x12a8 [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
10:12:36.0558 0x12a8 CompositeBus - ok
10:12:36.0573 0x12a8 COMSysApp - ok
10:12:36.0604 0x12a8 [ C4DEAE8A386619E1E14BED3D79C7F032, 8C2D0B8AB94FE6C404FCB72FF25BAA0641AF6DA5618C1AE19BAD9698C399A5C8 ] cphs C:\Windows\system32\IntelCpHeciSvc.exe
10:12:36.0636 0x12a8 cphs - ok
10:12:36.0651 0x12a8 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
10:12:36.0667 0x12a8 crcdisk - ok
10:12:36.0698 0x12a8 [ A585BEBF7D054BD9618EDA0922D5484A, 340DF730E88F8B6A4EF542F620EBA2A720546AFAB4DFFA00F066B7610A1026C5 ] CryptSvc C:\Windows\system32\cryptsvc.dll
10:12:36.0729 0x12a8 CryptSvc - ok
10:12:36.0776 0x12a8 [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC C:\Windows\system32\drivers\csc.sys
10:12:36.0807 0x12a8 CSC - ok
10:12:36.0854 0x12a8 [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService C:\Windows\System32\cscsvc.dll
10:12:36.0885 0x12a8 CscService - ok
10:12:36.0932 0x12a8 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll
10:12:36.0979 0x12a8 DcomLaunch - ok
10:12:37.0010 0x12a8 [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll
10:12:37.0057 0x12a8 defragsvc - ok
10:12:37.0088 0x12a8 [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
10:12:37.0119 0x12a8 DfsC - ok
10:12:37.0150 0x12a8 [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll
10:12:37.0213 0x12a8 Dhcp - ok
10:12:37.0228 0x12a8 [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys
10:12:37.0260 0x12a8 discache - ok
10:12:37.0306 0x12a8 [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\drivers\disk.sys
10:12:37.0322 0x12a8 Disk - ok
10:12:37.0353 0x12a8 [ 2A958EF85DB1B61FFCA65044FA4BCE9E, C83511685EE1CE85A5ADF9B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
10:12:37.0369 0x12a8 dmvsc - ok
10:12:37.0384 0x12a8 [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll
10:12:37.0416 0x12a8 Dnscache - ok
10:12:37.0447 0x12a8 [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll
10:12:37.0494 0x12a8 dot3svc - ok
10:12:37.0509 0x12a8 [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll
10:12:37.0556 0x12a8 DPS - ok
10:12:37.0587 0x12a8 [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
10:12:37.0603 0x12a8 drmkaud - ok
10:12:37.0650 0x12a8 [ 23F5D28378A160352BA8F817BD8C71CB, 11BF7B7E6276C28EFF74B8AF89B493CBB89B394D2A091708EDA15DA5C342FF19 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
10:12:37.0681 0x12a8 DXGKrnl - ok
10:12:37.0728 0x12a8 [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll
10:12:37.0774 0x12a8 EapHost - ok
10:12:37.0915 0x12a8 [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\drivers\evbdx.sys
10:12:38.0046 0x12a8 ebdrv - ok
10:12:38.0108 0x12a8 [ 08EE8892FD19A6A951F40254E97F6EF3, 76F19B49DDC7B1CD7839BF0DF6A417F2DD756C924931F39291BC1D25A3C6077D ] eeCtrl C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
10:12:38.0139 0x12a8 eeCtrl - ok
10:12:38.0170 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] EFS C:\Windows\System32\lsass.exe
10:12:38.0202 0x12a8 EFS - ok
10:12:38.0264 0x12a8 [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
10:12:38.0311 0x12a8 ehRecvr - ok
10:12:38.0326 0x12a8 [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe
10:12:38.0358 0x12a8 ehSched - ok
10:12:38.0404 0x12a8 [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\drivers\elxstor.sys
10:12:38.0436 0x12a8 elxstor - ok
10:12:38.0498 0x12a8 [ 050D136C61DBCF36C257206ADBBEC009, 0FD13A4B43534ABF84B637F0749AED30CAF8EB2A50C0ABE70B76608AEE925A30 ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
10:12:38.0514 0x12a8 EraserUtilRebootDrv - ok
10:12:38.0529 0x12a8 [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys
10:12:38.0545 0x12a8 ErrDev - ok
10:12:38.0592 0x12a8 [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll
10:12:38.0638 0x12a8 EventSystem - ok
10:12:38.0670 0x12a8 [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys
10:12:38.0716 0x12a8 exfat - ok
10:12:38.0732 0x12a8 [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys
10:12:38.0779 0x12a8 fastfat - ok
10:12:38.0826 0x12a8 [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe
10:12:38.0857 0x12a8 Fax - ok
10:12:38.0950 0x12a8 [ 12A97041435D7B1C4DDFA8F5E5DEEE87, EA0A0287F8295656E8A68D6CD161EDE1083546055414596DAD541A9C7B77CBC6 ] FA_Scheduler C:\Program Files\Fortinet\FortiClient\scheduler.exe
10:12:38.0966 0x12a8 FA_Scheduler - detected UnsignedFile.Multi.Generic ( 1 )
10:12:46.0865 0x12a8 Detect skipped due to KSN trusted
10:12:46.0865 0x12a8 FA_Scheduler - ok
10:12:46.0928 0x12a8 [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\drivers\fdc.sys
10:12:46.0943 0x12a8 fdc - ok
10:12:46.0959 0x12a8 [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll
10:12:47.0006 0x12a8 fdPHost - ok
10:12:47.0006 0x12a8 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll
10:12:47.0053 0x12a8 FDResPub - ok
10:12:47.0068 0x12a8 [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
10:12:47.0084 0x12a8 FileInfo - ok
10:12:47.0099 0x12a8 [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
10:12:47.0131 0x12a8 Filetrace - ok
10:12:47.0146 0x12a8 [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
10:12:47.0177 0x12a8 flpydisk - ok
10:12:47.0193 0x12a8 [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
10:12:47.0224 0x12a8 FltMgr - ok
10:12:47.0287 0x12a8 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074, BD0DB5D6B6DB46AD33028304D8A75C4C400637C7827D8BBA5A1534CAA8A45690 ] FontCache C:\Windows\system32\FntCache.dll
10:12:47.0333 0x12a8 FontCache - ok
10:12:47.0380 0x12a8 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
10:12:47.0396 0x12a8 FontCache3.0.0.0 - ok
10:12:47.0443 0x12a8 [ A758042A25BDA111B9914987DF866DA9, 8D5A7F1FF3292253731AC256634694D9CD8B0AD2C61E405693E0123EC66F26C5 ] fortiapd C:\Windows\system32\drivers\fortiapd.sys
10:12:47.0458 0x12a8 fortiapd - ok
10:12:47.0458 0x12a8 [ C14C839541CBE1FBD3A212B6B6E3DEFB, CD27343FF7058AD67E4D029AF6B5013CD3842CE2F3797895F424B1D9BB1CE6AA ] FortiFilter C:\Windows\system32\DRIVERS\FortiFilter.sys
10:12:47.0474 0x12a8 FortiFilter - ok
10:12:47.0489 0x12a8 [ 578A4704EAE407B2FDC55A91265B8917, D4C5A147390D5798BC436E5E26C528FA6944AC64712D69E04E6DF8C50E8022CA ] Fortips C:\Windows\system32\drivers\fortips.sys
10:12:47.0505 0x12a8 Fortips - ok
10:12:47.0521 0x12a8 [ 01180BDC9D014919A474896C7F948ABD, 8A3E6EC8095DACB2E6033BCE5A875DE2DE921038BFE2DD8F6D99EA347A62622F ] FortiRdr C:\Windows\system32\drivers\FortiRdr2.sys
10:12:47.0536 0x12a8 FortiRdr - ok
10:12:47.0552 0x12a8 [ 9B732C702991E5DD9329617EB5468483, B92AFDD983F581AB4E77047BADA8F03BF19EF9BE5182FBA1ED03A572D19DBEF5 ] FortiShield C:\Windows\system32\drivers\FortiShield.sys
10:12:47.0567 0x12a8 FortiShield - ok
10:12:47.0599 0x12a8 [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
10:12:47.0614 0x12a8 FsDepends - ok
10:12:47.0645 0x12a8 [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
10:12:47.0661 0x12a8 Fs_Rec - ok
10:12:47.0708 0x12a8 [ 6F8AC27B43ECE9504FA5D521E086A92A, C1F3F10BE0B43D03F33A16D49953F67247CC2BD3D1EAC2F209AD68FF0D7866C1 ] ft_vnic C:\Windows\system32\DRIVERS\ftvnic.sys
10:12:47.0708 0x12a8 ft_vnic - ok
10:12:47.0755 0x12a8 [ 8A73E79089B282100B9393B644CB853B, 844DC5AADFABBD050B967904B796BA06BFD64C9112616EA26229D084F8B3AD41 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
10:12:47.0770 0x12a8 fvevol - ok
10:12:47.0817 0x12a8 [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
10:12:47.0833 0x12a8 gagp30kx - ok
10:12:47.0879 0x12a8 [ F545C5DBCB118A9F0D44200EB37DAE22, DE2AD531A76D6D68BB818105165D396E75574316C61FE99EA0444FD7ED70D9CA ] GemCCID C:\Windows\system32\Drivers\GemCCID.sys
10:12:47.0911 0x12a8 GemCCID - ok
10:12:47.0942 0x12a8 GNCM - ok
10:12:47.0989 0x12a8 [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll
10:12:48.0035 0x12a8 gpsvc - ok
10:12:48.0145 0x12a8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
10:12:48.0146 0x12a8 gupdate - ok
10:12:48.0177 0x12a8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
10:12:48.0208 0x12a8 gupdatem - ok
10:12:48.0224 0x12a8 [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
10:12:48.0239 0x12a8 hcw85cir - ok
10:12:48.0302 0x12a8 [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:12:48.0333 0x12a8 HdAudAddService - ok
10:12:48.0348 0x12a8 [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
10:12:48.0380 0x12a8 HDAudBus - ok
10:12:48.0395 0x12a8 [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
10:12:48.0426 0x12a8 HidBatt - ok
10:12:48.0442 0x12a8 [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\drivers\hidbth.sys
10:12:48.0458 0x12a8 HidBth - ok
10:12:48.0489 0x12a8 [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\drivers\hidir.sys
10:12:48.0520 0x12a8 HidIr - ok
10:12:48.0536 0x12a8 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\system32\hidserv.dll
10:12:48.0567 0x12a8 hidserv - ok
10:12:48.0614 0x12a8 [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
10:12:48.0645 0x12a8 HidUsb - ok
10:12:48.0660 0x12a8 [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll
10:12:48.0707 0x12a8 hkmsvc - ok
10:12:48.0723 0x12a8 [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:12:48.0754 0x12a8 HomeGroupListener - ok
10:12:48.0785 0x12a8 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:12:48.0816 0x12a8 HomeGroupProvider - ok
10:12:48.0910 0x12a8 [ C5D2F308E1C12A5C328EF549696DBC05, 4BBDA3E0707854CC80FF8699A478D0D2AF18094B9F7EFB629B0CE4F890C44464 ] hpCMSrv C:\Program Files\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
10:12:48.0957 0x12a8 hpCMSrv - ok
10:12:49.0019 0x12a8 [ A9FC4D7EA174BBF5A675B299FFAD80A2, C9272E0C20EABBAC6B68FC6CDEA7577426B1F3FCD9E619EBC87556A625EEF1A3 ] HPDayStarterService C:\Program Files\Hewlett-Packard\HP DayStarter\HPDayStarterService.exe
10:12:49.0050 0x12a8 HPDayStarterService - ok
10:12:49.0128 0x12a8 [ 85ED336AB69149A91D2D6617FC5CA1B3, F1FB4E3DE5D3F0DA198704D68CC84A9825FA81E6212FE87E5900CB1AA82603C5 ] HPDrvMntSvc.exe C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
10:12:49.0144 0x12a8 HPDrvMntSvc.exe - ok
10:12:49.0175 0x12a8 [ 4EF10B866C62ABBEAF7511CDD05A19BE, B758DCB9CD8C7E6ED4DEFB666A94B0F749CB86964D2CA9004DF94C5E321F5151 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys
10:12:49.0191 0x12a8 hpdskflt - ok
10:12:49.0347 0x12a8 [ 7D10E0F2F603A3CE65F0B9750F7ABDB2, 21C070BE170C9C05590892982E81559684980FC0504F0E50EAE30418F361B6B1 ] hpHotkeyMonitor C:\Program Files\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe
10:12:49.0409 0x12a8 hpHotkeyMonitor - ok
10:12:49.0456 0x12a8 [ EE9F88368739554DCCA142AE0214BCB1, 1D48FE1A0D633E998F382C3FC3455FCF7E6CF73EE1B624BEEEC8F82EF45003D6 ] HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
10:12:49.0472 0x12a8 HpqKbFiltr - ok
10:12:49.0534 0x12a8 [ 41830DB0E11FCC3A38689F7E680BD0ED, D4A5E3BB9A5C89053B1B795ADB20658B11CC533869F5D40CCD8A8C7CAE2F9923 ] hpqwmiex C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
10:12:49.0581 0x12a8 hpqwmiex - ok
10:12:49.0612 0x12a8 [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
10:12:49.0643 0x12a8 HpSAMD - ok
10:12:49.0643 0x12a8 [ C0BEB56ED79B59B7B33D0AA6C38A0BA6, 8A21DB7B51BF533CBA08640498C132560641244B9218C483E2053502DF88313D ] hpsrv C:\Windows\system32\Hpservice.exe
10:12:49.0674 0x12a8 hpsrv - ok
10:12:49.0706 0x12a8 [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP C:\Windows\system32\drivers\HTTP.sys
10:12:49.0768 0x12a8 HTTP - ok
10:12:49.0768 0x12a8 [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
10:12:49.0784 0x12a8 hwpolicy - ok
10:12:49.0830 0x12a8 [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
10:12:49.0846 0x12a8 i8042prt - ok
10:12:49.0893 0x12a8 [ F989555F1662581032CCE1578A8FF28E, 5F9EF3ED3A9517C7E7D816D4440DCCBA108C1A272D1A12EE09E2F396B24D5ED6 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
10:12:49.0924 0x12a8 iaStor - ok
10:12:49.0986 0x12a8 [ 117FF657E0D9BBD61B5C3E71E63D3919, F8AD1C861F018754A9BF348C9F1D6503854ED9D7DEEBF40E6B4E2FEA9FC6E56A ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
10:12:50.0002 0x12a8 IAStorDataMgrSvc - ok
10:12:50.0049 0x12a8 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
10:12:50.0080 0x12a8 iaStorV - ok
10:12:50.0174 0x12a8 [ C521D7EB6497BB1AF6AFA89E322FB43C, BDDCFCBB5B76A9295669B5AC9F732D6127199ED5C300770B554C4E4794F66BB7 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:12:50.0220 0x12a8 idsvc - ok
10:12:50.0314 0x12a8 [ 373C0F67CC49772028D311FD147F4E85, D88613EB4DCB6F0A77D947D3DAB853689FFD71331484723C7CDCBADC7F01CB34 ] IDSVix86 C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\IPSDefs\20140409.001\IDSvix86.sys
10:12:50.0345 0x12a8 IDSVix86 - ok
10:12:50.0797 0x12a8 [ 24CCEC128BEBB148E50C6093523AD686, FE9DBB25127ED3BAC9EB2789A63D17D5F22EDCC9414E2C89B333083646625736 ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
10:12:51.0250 0x12a8 igfx - ok
10:12:51.0312 0x12a8 [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\drivers\iirsp.sys
10:12:51.0328 0x12a8 iirsp - ok
10:12:51.0375 0x12a8 [ F95622F161474511B8D80D6B093AA610, F2320E25EB9B4AA9A8366BD3AA23EABEBE111A5610D3A62EBA47D90427D5BC26 ] IKEEXT C:\Windows\System32\ikeext.dll
10:12:51.0437 0x12a8 IKEEXT - ok
10:12:51.0453 0x12a8 [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys
10:12:51.0468 0x12a8 intelide - ok
10:12:51.0921 0x12a8 [ 24CCEC128BEBB148E50C6093523AD686, FE9DBB25127ED3BAC9EB2789A63D17D5F22EDCC9414E2C89B333083646625736 ] intelkmd C:\Windows\system32\DRIVERS\igdpmd32.sys
10:12:52.0404 0x12a8 intelkmd - ok
10:12:52.0482 0x12a8 [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
10:12:52.0498 0x12a8 intelppm - ok
10:12:52.0529 0x12a8 [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
10:12:52.0560 0x12a8 IPBusEnum - ok
10:12:52.0576 0x12a8 [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:12:52.0607 0x12a8 IpFilterDriver - ok
10:12:52.0669 0x12a8 [ 4D65A07B795D6674312F879D09AA7663, 8D72FE0B51A6FF71F85D2602DB3AE91C8749F70869B6789552F047BA81411EDA ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
10:12:52.0716 0x12a8 iphlpsvc - ok
10:12:52.0747 0x12a8 [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
10:12:52.0763 0x12a8 IPMIDRV - ok
10:12:52.0779 0x12a8 [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
10:12:52.0810 0x12a8 IPNAT - ok
10:12:52.0841 0x12a8 [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys
10:12:52.0857 0x12a8 IRENUM - ok
10:12:52.0888 0x12a8 [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys
10:12:52.0903 0x12a8 isapnp - ok
10:12:52.0935 0x12a8 [ CB7A9ABB12B8415BCE5D74994C7BA3AE, 464BFF3F5EEE985BE075E23E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
10:12:52.0950 0x12a8 iScsiPrt - ok
10:12:52.0981 0x12a8 [ 5C2F34F60AAEC9DB4DAA973915CBAEDC, 34B4E5A097477C0E2BE475980B4A516DCB5895040E7C2A827EC10AB2B5DEBC93 ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys
10:12:53.0013 0x12a8 JMCR - ok
10:12:53.0028 0x12a8 [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
10:12:53.0044 0x12a8 kbdclass - ok
10:12:53.0059 0x12a8 [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
10:12:53.0091 0x12a8 kbdhid - ok
10:12:53.0106 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] KeyIso C:\Windows\system32\lsass.exe
10:12:53.0122 0x12a8 KeyIso - ok
10:12:53.0184 0x12a8 [ F4647BB23DB9038A7536CF6B68F4207F, 9C6BC7DEF87FC10F4446910DF05CAA92F99C525380579FE7AC0178EC870E232C ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
10:12:53.0193 0x12a8 KSecDD - ok
10:12:53.0240 0x12a8 [ E73CAE53BBB72BA26918492C6B4C229D, D3CCF0C8CA04E205DBE54E338D1F1FBC1E8DF089C22E23AA19C59669B6ADA1DA ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
10:12:53.0272 0x12a8 KSecPkg - ok
10:12:53.0318 0x12a8 [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll
10:12:53.0365 0x12a8 KtmRm - ok
10:12:53.0412 0x12a8 [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\system32\srvsvc.dll
10:12:53.0459 0x12a8 LanmanServer - ok
10:12:53.0490 0x12a8 [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:12:53.0521 0x12a8 LanmanWorkstation - ok
10:12:53.0584 0x12a8 [ C34411A244029F1C08687F7C752C4563, 4FC1D6156D760AE8138547262B33677118BD9369F4930F5C5F9BAA2FE6E78EA3 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
10:12:53.0584 0x12a8 LightScribeService - detected UnsignedFile.Multi.Generic ( 1 )
10:12:56.0064 0x12a8 Detect skipped due to KSN trusted
10:12:56.0064 0x12a8 LightScribeService - ok
10:12:56.0095 0x12a8 [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
10:12:56.0142 0x12a8 lltdio - ok
10:12:56.0173 0x12a8 [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll
10:12:56.0220 0x12a8 lltdsvc - ok
10:12:56.0236 0x12a8 [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll
10:12:56.0267 0x12a8 lmhosts - ok
10:12:56.0298 0x12a8 [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
10:12:56.0314 0x12a8 LSI_FC - ok
10:12:56.0329 0x12a8 [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
10:12:56.0345 0x12a8 LSI_SAS - ok
10:12:56.0360 0x12a8 [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
10:12:56.0376 0x12a8 LSI_SAS2 - ok
10:12:56.0392 0x12a8 [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
10:12:56.0423 0x12a8 LSI_SCSI - ok
10:12:56.0423 0x12a8 [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys
10:12:56.0470 0x12a8 luafv - ok
10:12:56.0579 0x12a8 [ E4DFBE4C4A9C2BD87C1430F445F3E3CB, 34A0295D0AC37537B010FEC4534535D92AA4C30900DC37444C992C15F86D3AA4 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe
10:12:56.0626 0x12a8 McComponentHostService - ok
10:12:56.0657 0x12a8 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
10:12:56.0688 0x12a8 Mcx2Svc - ok
10:12:56.0719 0x12a8 [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\drivers\megasas.sys
10:12:56.0735 0x12a8 megasas - ok
10:12:56.0766 0x12a8 [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
10:12:56.0782 0x12a8 MegaSR - ok
10:12:56.0828 0x12a8 [ D86AC00883B9C98B570E7643AAF8E554, 4B4BDC01DC20F820A9D1E1B8E875B6445F9B920F0AB1E115ADD9651A368911C4 ] MEI C:\Windows\system32\DRIVERS\HECI.sys
10:12:56.0844 0x12a8 MEI - ok
10:12:56.0860 0x12a8 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll
10:12:56.0906 0x12a8 MMCSS - ok
10:12:56.0922 0x12a8 [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys
10:12:56.0953 0x12a8 Modem - ok
10:12:56.0984 0x12a8 [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
10:12:57.0000 0x12a8 monitor - ok
10:12:57.0031 0x12a8 [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
10:12:57.0047 0x12a8 mouclass - ok
10:12:57.0062 0x12a8 [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
10:12:57.0078 0x12a8 mouhid - ok
10:12:57.0125 0x12a8 [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
10:12:57.0140 0x12a8 mountmgr - ok
10:12:57.0156 0x12a8 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys
10:12:57.0172 0x12a8 mpio - ok
10:12:57.0203 0x12a8 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
10:12:57.0234 0x12a8 mpsdrv - ok
10:12:57.0281 0x12a8 [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll
10:12:57.0328 0x12a8 MpsSvc - ok
10:12:57.0359 0x12a8 [ CEB46AB7C01C9F825F8CC6BABC18166A, AA98898204FC58878502C170FE6ED8BA681396DDD8BF3689D0C3642DEA87BEF8 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
10:12:57.0374 0x12a8 MRxDAV - ok
10:12:57.0406 0x12a8 [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
10:12:57.0437 0x12a8 mrxsmb - ok
10:12:57.0452 0x12a8 [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:12:57.0484 0x12a8 mrxsmb10 - ok
10:12:57.0499 0x12a8 [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:12:57.0515 0x12a8 mrxsmb20 - ok
10:12:57.0546 0x12a8 [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys
10:12:57.0562 0x12a8 msahci - ok
10:12:57.0577 0x12a8 [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys
10:12:57.0593 0x12a8 msdsm - ok

[Jimmm]

2. část


10:12:57.0608 0x12a8 [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe
10:12:57.0640 0x12a8 MSDTC - ok
10:12:57.0655 0x12a8 [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys
10:12:57.0702 0x12a8 Msfs - ok
10:12:57.0718 0x12a8 [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
10:12:57.0749 0x12a8 mshidkmdf - ok
10:12:57.0764 0x12a8 [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
10:12:57.0780 0x12a8 msisadrv - ok
10:12:57.0811 0x12a8 [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll
10:12:57.0842 0x12a8 MSiSCSI - ok
10:12:57.0858 0x12a8 msiserver - ok
10:12:57.0889 0x12a8 [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
10:12:57.0936 0x12a8 MSKSSRV - ok
10:12:57.0952 0x12a8 [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
10:12:57.0998 0x12a8 MSPCLOCK - ok
10:12:57.0998 0x12a8 [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
10:12:58.0030 0x12a8 MSPQM - ok
10:12:58.0045 0x12a8 [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
10:12:58.0076 0x12a8 MsRPC - ok
10:12:58.0076 0x12a8 [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
10:12:58.0092 0x12a8 mssmbios - ok
10:12:58.0123 0x12a8 [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
10:12:58.0154 0x12a8 MSTEE - ok
10:12:58.0170 0x12a8 [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
10:12:58.0186 0x12a8 MTConfig - ok
10:12:58.0201 0x12a8 [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys
10:12:58.0217 0x12a8 Mup - ok
10:12:58.0264 0x12a8 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll
10:12:58.0309 0x12a8 napagent - ok
10:12:58.0356 0x12a8 [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
10:12:58.0387 0x12a8 NativeWifiP - ok
10:12:58.0496 0x12a8 [ 81E928EE3751FAF725C87CC17726C05D, 8AB84270DCB35F239B00FA4B9AC90E9520967B8188085D897F28E994CBF911FB ] NAVENG C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\VirusDefs\20140409.023\NAVENG.SYS
10:12:58.0527 0x12a8 NAVENG - ok
10:12:58.0621 0x12a8 [ E0C39FA6C76AE8ED53ABF043F35ECDFF, CD2F87D3CB64F3362508D1855B24F40F1C44CF4132E3626971CCF4E7C49E61D6 ] NAVEX15 C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\Definitions\VirusDefs\20140409.023\NAVEX15.SYS
10:12:58.0683 0x12a8 NAVEX15 - ok
10:12:58.0761 0x12a8 [ E7C54812A2AAF43316EB6930C1FFA108, C8A6FC1957FA29A3B372132FEA9145538BC767044A11D77316D3D1A3EAA60630 ] NDIS C:\Windows\system32\drivers\ndis.sys
10:12:58.0792 0x12a8 NDIS - ok
10:12:58.0824 0x12a8 [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
10:12:58.0855 0x12a8 NdisCap - ok
10:12:58.0886 0x12a8 [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
10:12:58.0917 0x12a8 NdisTapi - ok
10:12:58.0948 0x12a8 [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
10:12:58.0980 0x12a8 Ndisuio - ok
10:12:58.0995 0x12a8 [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
10:12:59.0042 0x12a8 NdisWan - ok
10:12:59.0058 0x12a8 [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
10:12:59.0089 0x12a8 NDProxy - ok
10:12:59.0120 0x12a8 [ F7C14F5077BF2BC476C348B88A7F74E2, 2B9B73143AD279BF38FADE86F815CCECE90F727D33693FEF52658D93A7101A0F ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
10:12:59.0136 0x12a8 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
10:13:01.0631 0x12a8 Detect skipped due to KSN trusted
10:13:01.0631 0x12a8 Net Driver HPZ12 - ok
10:13:01.0678 0x12a8 [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
10:13:01.0709 0x12a8 NetBIOS - ok
10:13:01.0756 0x12a8 [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
10:13:01.0787 0x12a8 NetBT - ok
10:13:01.0803 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] Netlogon C:\Windows\system32\lsass.exe
10:13:01.0834 0x12a8 Netlogon - ok
10:13:01.0865 0x12a8 [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll
10:13:01.0912 0x12a8 Netman - ok
10:13:01.0943 0x12a8 [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll
10:13:01.0990 0x12a8 netprofm - ok
10:13:02.0021 0x12a8 [ F476EC40033CDB91EFBE73EB99B8362D, B17535037BC070F9AE1F6B381C2DBEE27658A8FDE15FB0E061F485EA7C7CBE59 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:13:02.0037 0x12a8 NetTcpPortSharing - ok
10:13:02.0068 0x12a8 [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
10:13:02.0084 0x12a8 nfrd960 - ok
10:13:02.0115 0x12a8 [ 912084381D30D8B89EC4E293053F4710, 99B8CD043DF531D4B9725ED167F63CED220608B2FED3EE8250C217D15762DFD7 ] NlaSvc C:\Windows\System32\nlasvc.dll
10:13:02.0162 0x12a8 NlaSvc - ok
10:13:02.0177 0x12a8 [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys
10:13:02.0209 0x12a8 Npfs - ok
10:13:02.0240 0x12a8 [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll
10:13:02.0271 0x12a8 nsi - ok
10:13:02.0302 0x12a8 [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
10:13:02.0333 0x12a8 nsiproxy - ok
10:13:02.0411 0x12a8 [ 81189C3D7763838E55C397759D49007A, 680800947511E5E4EB09D915C70E7BB25AB29584F1928BB51D9586D32CDBAAA3 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
10:13:02.0458 0x12a8 Ntfs - ok
10:13:02.0489 0x12a8 [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys
10:13:02.0521 0x12a8 Null - ok
10:13:02.0536 0x12a8 [ 2DA2169C7CAFDA18DE0CB4CB15630E0F, FC80F35A37CB30FEF7ED635AA77C8ECE9F8402282D23790BFFEBDAB59B434909 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
10:13:02.0552 0x12a8 nusb3hub - ok
10:13:02.0583 0x12a8 [ 46663F90EF648DB8225EE57B7ACFC20C, 7D688B88BDFA7D759232807D1F7AE7CE9CF3D5FC9E14BE2CB58B2795FEF3C628 ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
10:13:02.0614 0x12a8 nusb3xhc - ok
10:13:02.0630 0x12a8 [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys
10:13:02.0661 0x12a8 nvraid - ok
10:13:02.0661 0x12a8 [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys
10:13:02.0677 0x12a8 nvstor - ok
10:13:02.0723 0x12a8 [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
10:13:02.0739 0x12a8 nv_agp - ok
10:13:02.0739 0x12a8 [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
10:13:02.0770 0x12a8 ohci1394 - ok
10:13:02.0817 0x12a8 [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:13:02.0848 0x12a8 ose - ok
10:13:03.0082 0x12a8 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7, F342100E2E9001F11FDF93F856B50FA43F9B85D2C6B5706EC0433E77206498DA ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:13:03.0269 0x12a8 osppsvc - ok
10:13:03.0333 0x12a8 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
10:13:03.0364 0x12a8 p2pimsvc - ok
10:13:03.0411 0x12a8 [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll
10:13:03.0442 0x12a8 p2psvc - ok
10:13:03.0458 0x12a8 [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\drivers\parport.sys
10:13:03.0489 0x12a8 Parport - ok
10:13:03.0504 0x12a8 [ BF8F6AF06DA75B336F07E23AEF97D93B, 2F2C4314872732550A112BFF2F803484D4A3D697F0D69D352350CE208FD8A1A4 ] partmgr C:\Windows\system32\drivers\partmgr.sys
10:13:03.0520 0x12a8 partmgr - ok
10:13:03.0520 0x12a8 [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
10:13:03.0536 0x12a8 Parvdm - ok
10:13:03.0582 0x12a8 [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc C:\Windows\System32\pcasvc.dll
10:13:03.0614 0x12a8 PcaSvc - ok
10:13:03.0645 0x12a8 [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys
10:13:03.0660 0x12a8 pci - ok
10:13:03.0676 0x12a8 [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys
10:13:03.0692 0x12a8 pciide - ok
10:13:03.0723 0x12a8 [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
10:13:03.0738 0x12a8 pcmcia - ok
10:13:03.0754 0x12a8 [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys
10:13:03.0770 0x12a8 pcw - ok
10:13:03.0801 0x12a8 pdfcDispatcher - ok
10:13:03.0848 0x12a8 [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
10:13:03.0894 0x12a8 PEAUTH - ok
10:13:03.0957 0x12a8 [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
10:13:04.0019 0x12a8 PeerDistSvc - ok
10:13:04.0113 0x12a8 [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll
10:13:04.0206 0x12a8 pla - ok
10:13:04.0253 0x12a8 [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll
10:13:04.0284 0x12a8 PlugPlay - ok
10:13:04.0316 0x12a8 [ E638656001C52A1FAA34F92E6D3A086B, 1DFB3991346657277CB83AC32D232855B377C8A87C871329214FB942D14E5271 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
10:13:04.0331 0x12a8 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
10:13:06.0890 0x12a8 Detect skipped due to KSN trusted
10:13:06.0890 0x12a8 Pml Driver HPZ12 - ok
10:13:06.0921 0x12a8 [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
10:13:06.0952 0x12a8 PNRPAutoReg - ok
10:13:06.0983 0x12a8 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
10:13:07.0014 0x12a8 PNRPsvc - ok
10:13:07.0061 0x12a8 [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
10:13:07.0108 0x12a8 PolicyAgent - ok
10:13:07.0124 0x12a8 [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll
10:13:07.0170 0x12a8 Power - ok
10:13:07.0202 0x12a8 [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
10:13:07.0248 0x12a8 PptpMiniport - ok
10:13:07.0264 0x12a8 [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\drivers\processr.sys
10:13:07.0280 0x12a8 Processor - ok
10:13:07.0326 0x12a8 [ 43CA4CCC22D52FB58E8988F0198851D0, DF67BD70D9D82677AE61244B4E54677A5008A7F5EB531DF2A7E7D33F1658EA78 ] ProfSvc C:\Windows\system32\profsvc.dll
10:13:07.0358 0x12a8 ProfSvc - ok
10:13:07.0373 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] ProtectedStorage C:\Windows\system32\lsass.exe
10:13:07.0389 0x12a8 ProtectedStorage - ok
10:13:07.0420 0x12a8 [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
10:13:07.0467 0x12a8 Psched - ok
10:13:07.0576 0x12a8 [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\drivers\ql2300.sys
10:13:07.0638 0x12a8 ql2300 - ok
10:13:07.0654 0x12a8 [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
10:13:07.0670 0x12a8 ql40xx - ok
10:13:07.0701 0x12a8 [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll
10:13:07.0732 0x12a8 QWAVE - ok
10:13:07.0763 0x12a8 [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
10:13:07.0794 0x12a8 QWAVEdrv - ok
10:13:07.0810 0x12a8 [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
10:13:07.0841 0x12a8 RasAcd - ok
10:13:07.0872 0x12a8 [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
10:13:07.0904 0x12a8 RasAgileVpn - ok
10:13:07.0935 0x12a8 [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll
10:13:07.0982 0x12a8 RasAuto - ok
10:13:07.0997 0x12a8 [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
10:13:08.0044 0x12a8 Rasl2tp - ok
10:13:08.0060 0x12a8 [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll
10:13:08.0106 0x12a8 RasMan - ok
10:13:08.0122 0x12a8 [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
10:13:08.0153 0x12a8 RasPppoe - ok
10:13:08.0184 0x12a8 [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
10:13:08.0216 0x12a8 RasSstp - ok
10:13:08.0247 0x12a8 [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
10:13:08.0294 0x12a8 rdbss - ok
10:13:08.0309 0x12a8 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
10:13:08.0325 0x12a8 rdpbus - ok
10:13:08.0340 0x12a8 [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
10:13:08.0372 0x12a8 RDPCDD - ok
10:13:08.0388 0x12a8 [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
10:13:08.0419 0x12a8 RDPDR - ok
10:13:08.0435 0x12a8 [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
10:13:08.0466 0x12a8 RDPENCDD - ok
10:13:08.0497 0x12a8 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
10:13:08.0529 0x12a8 RDPREFMP - ok
10:13:08.0560 0x12a8 [ 244C83332F44589AE98FC347F11B2693, 857B15FDB1163AD2A6770473E891E2BBCFBD3B9AA6FCC0D31023F9BE536F3B36 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
10:13:08.0591 0x12a8 RDPWD - ok
10:13:08.0622 0x12a8 [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
10:13:08.0638 0x12a8 rdyboost - ok
10:13:08.0669 0x12a8 [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll
10:13:08.0716 0x12a8 RemoteAccess - ok
10:13:08.0747 0x12a8 [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll
10:13:08.0778 0x12a8 RemoteRegistry - ok
10:13:08.0809 0x12a8 [ CB928D9E6DAF51879DD6BA8D02F01321, DFD263B67DDF98AE09AF6D6986CBC7BE3206BCE8403AAC51BCF9459E78233D12 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
10:13:08.0841 0x12a8 RFCOMM - ok
10:13:08.0856 0x12a8 [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
10:13:08.0903 0x12a8 RpcEptMapper - ok
10:13:08.0919 0x12a8 [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe
10:13:08.0950 0x12a8 RpcLocator - ok
10:13:08.0965 0x12a8 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll
10:13:09.0028 0x12a8 RpcSs - ok
10:13:09.0059 0x12a8 [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
10:13:09.0106 0x12a8 rspndr - ok
10:13:09.0168 0x12a8 [ 5283B9A27FF230F2FF70D92451FF409A, B8BAC70E1DE4485C79CA7B47D4DCFE0223CECEA8ED75CE4F128D47051F95FE5D ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
10:13:09.0215 0x12a8 RTL8167 - ok
10:13:09.0246 0x12a8 [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap C:\Windows\system32\drivers\vms3cap.sys
10:13:09.0277 0x12a8 s3cap - ok
10:13:09.0293 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] SamSs C:\Windows\system32\lsass.exe
10:13:09.0324 0x12a8 SamSs - ok
10:13:09.0340 0x12a8 [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
10:13:09.0355 0x12a8 sbp2port - ok
10:13:09.0402 0x12a8 [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll
10:13:09.0433 0x12a8 SCardSvr - ok
10:13:09.0465 0x12a8 [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
10:13:09.0496 0x12a8 scfilter - ok
10:13:09.0543 0x12a8 [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll
10:13:09.0621 0x12a8 Schedule - ok
10:13:09.0636 0x12a8 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll
10:13:09.0667 0x12a8 SCPolicySvc - ok
10:13:09.0714 0x12a8 [ 0328BE1C7F1CBA23848179F8762E391C, EA80853F04BAE6F46F658B3EFED34BFDDE20E6F2BDA349EBC17EC75DFF19855D ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
10:13:09.0745 0x12a8 sdbus - ok
10:13:09.0761 0x12a8 [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll
10:13:09.0792 0x12a8 SDRSVC - ok
10:13:09.0808 0x12a8 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys
10:13:09.0855 0x12a8 secdrv - ok
10:13:09.0870 0x12a8 [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll
10:13:09.0917 0x12a8 seclogon - ok
10:13:09.0933 0x12a8 [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\System32\sens.dll
10:13:09.0964 0x12a8 SENS - ok
10:13:09.0995 0x12a8 [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll
10:13:10.0011 0x12a8 SensrSvc - ok
10:13:10.0089 0x12a8 [ 74885BDFF62E537F268EBF8E8CEC24BB, D49949C3ED3CE748FD5EF0CA4ECEA5F30B9EEAE365EBA7072A0BE203A84D8227 ] SepMasterService C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe
10:13:10.0104 0x12a8 SepMasterService - ok
10:13:10.0135 0x12a8 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\drivers\serenum.sys
10:13:10.0151 0x12a8 Serenum - ok
10:13:10.0182 0x12a8 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\drivers\serial.sys
10:13:10.0198 0x12a8 Serial - ok
10:13:10.0229 0x12a8 [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\drivers\sermouse.sys
10:13:10.0245 0x12a8 sermouse - ok
10:13:10.0291 0x12a8 [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll
10:13:10.0323 0x12a8 SessionEnv - ok
10:13:10.0354 0x12a8 [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
10:13:10.0369 0x12a8 sffdisk - ok
10:13:10.0385 0x12a8 [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
10:13:10.0401 0x12a8 sffp_mmc - ok
10:13:10.0416 0x12a8 [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
10:13:10.0432 0x12a8 sffp_sd - ok
10:13:10.0463 0x12a8 [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
10:13:10.0494 0x12a8 sfloppy - ok
10:13:10.0541 0x12a8 [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll
10:13:10.0588 0x12a8 SharedAccess - ok
10:13:10.0619 0x12a8 [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:13:10.0666 0x12a8 ShellHWDetection - ok
10:13:10.0697 0x12a8 [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys
10:13:10.0713 0x12a8 sisagp - ok
10:13:10.0744 0x12a8 [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
10:13:10.0759 0x12a8 SiSRaid2 - ok
10:13:10.0759 0x12a8 [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
10:13:10.0791 0x12a8 SiSRaid4 - ok
10:13:10.0900 0x12a8 [ 3467821FD04A66C9786DF0C8C0219A73, 6CB08F4E6E2D993D736F25D997F567C8BDAD8DBBC08EF44DC586AAE69EDD21B8 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
10:13:10.0931 0x12a8 SkypeUpdate - ok
10:13:10.0947 0x12a8 [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys
10:13:10.0978 0x12a8 Smb - ok
10:13:11.0102 0x12a8 [ 244687A7F63848235B8B5CC493B6CAFF, D72DF2C923AF32059B4B59C727631A779F7EAE7FA086AAE667ABCFCD8CDE8BA6 ] SmcService C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe
10:13:11.0180 0x12a8 SmcService - ok
10:13:11.0305 0x12a8 [ 6CD803703835CC3EA4E8D47B2517F1C1, 401AE6364EADFFBEAAC58DEEA0B47331AE328BE63D65A7B463DC3C7A42AB9BD2 ] SNAC C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\snac.exe
10:13:11.0336 0x12a8 SNAC - ok
10:13:11.0383 0x12a8 [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
10:13:11.0399 0x12a8 SNMPTRAP - ok
10:13:11.0492 0x12a8 [ 9ACB9D24D9D62B3103FB875BBFB1A4B5, 8304CE9B67E2A9510752608E101ABE95A7EE0F7723F5F1BFB1B43A549AC6F7D8 ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
10:13:11.0555 0x12a8 SNP2UVC - ok
10:13:11.0586 0x12a8 [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys
10:13:11.0602 0x12a8 spldr - ok
10:13:11.0633 0x12a8 [ 866A43013535DC8587C258E43579C764, B2BE846B5167A2ECD1E30C69A81385FCC6EAE6033394D08458A5583D311C4D82 ] Spooler C:\Windows\System32\spoolsv.exe
10:13:11.0695 0x12a8 Spooler - ok
10:13:11.0820 0x12a8 [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe
10:13:11.0976 0x12a8 sppsvc - ok
10:13:12.0038 0x12a8 [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll
10:13:12.0085 0x12a8 sppuinotify - ok
10:13:12.0148 0x12a8 [ 818FF33E09C5EF86E721E1FC00154564, 272E213813AAAC0954EF23ED59DFB87C5D90575B1223FFA9D2557E7642C761B0 ] SRTSP C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\SRTSP.SYS
10:13:12.0179 0x12a8 SRTSP - ok
10:13:12.0210 0x12a8 [ 3C01529E8B986D9DC7489F7CE8BCAD91, 1727DFEDF8389FD3FEF3BA381DC34F47BEB8B0F62C3B11778330DB15E2C3487A ] SRTSPX C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\SRTSPX.SYS
10:13:12.0210 0x12a8 SRTSPX - ok
10:13:12.0257 0x12a8 [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys
10:13:12.0272 0x12a8 srv - ok
10:13:12.0319 0x12a8 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
10:13:12.0366 0x12a8 srv2 - ok
10:13:12.0382 0x12a8 [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
10:13:12.0397 0x12a8 srvnet - ok
10:13:12.0428 0x12a8 [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
10:13:12.0475 0x12a8 SSDPSRV - ok
10:13:12.0491 0x12a8 [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll
10:13:12.0522 0x12a8 SstpSvc - ok
10:13:12.0600 0x12a8 [ D7E1ABB442BA1EA44BE57F9D60C01F7B, C915647F8FCB2E8DCF8C249DAA94141245D485908D1364B88904B3319C6BC4D4 ] STacSV C:\Program Files\IDT\WDM\STacSV.exe
10:13:12.0631 0x12a8 STacSV - ok
10:13:12.0647 0x12a8 [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\drivers\stexstor.sys
10:13:12.0662 0x12a8 stexstor - ok
10:13:12.0694 0x12a8 [ 2B0A7CE7D7026177984573162466629F, 673700311332662E78040BF1240BD8871025F91CCA9650EBDA43F7D261BA08DE ] STHDA C:\Windows\system32\DRIVERS\stwrt.sys
10:13:12.0725 0x12a8 STHDA - ok
10:13:12.0787 0x12a8 [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll
10:13:12.0834 0x12a8 StiSvc - ok
10:13:12.0865 0x12a8 [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt C:\Windows\system32\drivers\vmstorfl.sys
10:13:12.0881 0x12a8 storflt - ok
10:13:12.0912 0x12a8 [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69CAA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc C:\Windows\system32\storsvc.dll
10:13:12.0928 0x12a8 StorSvc - ok
10:13:12.0959 0x12a8 [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc C:\Windows\system32\drivers\storvsc.sys
10:13:12.0974 0x12a8 storvsc - ok
10:13:13.0006 0x12a8 [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
10:13:13.0021 0x12a8 swenum - ok
10:13:13.0052 0x12a8 [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll
10:13:13.0099 0x12a8 swprv - ok
10:13:13.0130 0x12a8 [ A0B824E49347B279ACB3903C04C78F75, 15A986F33EC778C9798BBD0E45183144383419695021469476BCDD0C6CD43518 ] SyDvCtrl C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\SyDvCtrl32.sys
10:13:13.0146 0x12a8 SyDvCtrl - ok
10:13:13.0177 0x12a8 [ 4F52D56310FEF75249914F352DDE7D13, CA2744F37867E1D436C25A349C096384FCD6E67D773AA900058468B48C5EF91C ] SymDS C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\SYMDS.SYS
10:13:13.0193 0x12a8 SymDS - ok
10:13:13.0255 0x12a8 [ 71B5577BADCF9C9420393395601BB995, F3C56E9FFE65895398CD0CCEA783DBB43C22F33DBAC82909960C21CCCCD6EA30 ] SymEFA C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\SYMEFA.SYS
10:13:13.0286 0x12a8 SymEFA - ok
10:13:13.0333 0x12a8 [ 98D28D08E68145FB550EE7670B43BAF2, 57FF6A6A280F4F468346927C3E4FC54C513A6E2705A4BFE83E4FA8042A1575A1 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT.SYS
10:13:13.0349 0x12a8 SymEvent - ok
10:13:13.0411 0x12a8 [ 7450A24AFBC9B0804D0A987204FFC0F8, F2CA1DAC9461E82B0BBDE33232D43150545956859D2CFD5E6B25D9B2E57788B8 ] SymIRON C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\Ironx86.SYS
10:13:13.0427 0x12a8 SymIRON - ok
10:13:13.0475 0x12a8 [ 6E70D06E851F7920281677FE20AC0E92, 5064EF00F6C26EC4E345D1686B5AD2C944C66A8E1523903B89ECC379C558AED4 ] SYMNETS C:\Windows\system32\Drivers\SEP\0C0103E8\009D.105\x86\SYMNETS.SYS
10:13:13.0490 0x12a8 SYMNETS - ok
10:13:13.0553 0x12a8 [ A75DCF3DBBD167D2254F46B1B1C02E8A, 9DC78243DBCBD5CAF63867EB747DF0C0160C47243B26E8E9C44D1C9043164DFC ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
10:13:13.0568 0x12a8 SynTP - ok
10:13:13.0677 0x12a8 [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll
10:13:13.0771 0x12a8 SysMain - ok
10:13:13.0787 0x12a8 [ 65C165C4324D153429BF3BA9350F3084, CE7FE6AFF934DCF28E905B6E3399B12BD833B2BDBD818A54DD3294854889F4EF ] SysPlant C:\Windows\system32\Drivers\SysPlant.sys
10:13:13.0802 0x12a8 SysPlant - ok
10:13:13.0833 0x12a8 [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
10:13:13.0865 0x12a8 TabletInputService - ok
10:13:13.0880 0x12a8 [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll
10:13:13.0911 0x12a8 TapiSrv - ok
10:13:13.0927 0x12a8 [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll
10:13:13.0974 0x12a8 TBS - ok
10:13:14.0036 0x12a8 [ 65D10B191C59C5501A1263FC33F6894B, 001DC52617E5E0E7A29504905BF5F3F9C6C09BF128330FC995610AC01EFA55BA ] Tcpip C:\Windows\system32\drivers\tcpip.sys
10:13:14.0099 0x12a8 Tcpip - ok
10:13:14.0177 0x12a8 [ 65D10B191C59C5501A1263FC33F6894B, 001DC52617E5E0E7A29504905BF5F3F9C6C09BF128330FC995610AC01EFA55BA ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
10:13:14.0223 0x12a8 TCPIP6 - ok
10:13:14.0255 0x12a8 [ CCA24162E055C3714CE5A88B100C64ED, 9B7712E793B9478BA7A1EF71EA9CC03CCB9C4004C54EAA911F158958519EDCD9 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
10:13:14.0286 0x12a8 tcpipreg - ok
10:13:14.0317 0x12a8 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
10:13:14.0333 0x12a8 TDPIPE - ok
10:13:14.0364 0x12a8 [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
10:13:14.0379 0x12a8 TDTCP - ok
10:13:14.0395 0x12a8 [ B459575348C20E8121D6039DA063C704, 1B4328A9EA39FF5A57F258E02254D04B73455F1DF7C997C13702A8B2F12D0347 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
10:13:14.0426 0x12a8 tdx - ok
10:13:14.0473 0x12a8 [ 438A8CA953BDC64AF68AA9C5E9624ED6, 7BD844771C9F43E80A66AC8B1BCDF618ABD9B60499002527C565BA515A862F72 ] Teefer2 C:\Windows\system32\DRIVERS\Teefer.sys
10:13:14.0489 0x12a8 Teefer2 - ok
10:13:14.0520 0x12a8 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
10:13:14.0535 0x12a8 TermDD - ok
10:13:14.0567 0x12a8 [ 382C804C92811BE57829D8E550A900E2, 5F52C2E7902024CF1C9CC0069F411C3F19CCA3DB209F437FA0F3932D4898EB50 ] TermService C:\Windows\System32\termsrv.dll
10:13:14.0629 0x12a8 TermService - ok
10:13:14.0645 0x12a8 [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll
10:13:14.0660 0x12a8 Themes - ok
10:13:14.0676 0x12a8 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll
10:13:14.0707 0x12a8 THREADORDER - ok
10:13:14.0738 0x12a8 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll
10:13:14.0785 0x12a8 TrkWks - ok
10:13:14.0832 0x12a8 [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:13:14.0894 0x12a8 TrustedInstaller - ok
10:13:14.0910 0x12a8 [ 254BB140EEE3C59D6114C1A86B636877, EE09D62E90407A40278F2136F640DAB16A4E2BF57D4FB6E05F92CA9CC9CF57C0 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
10:13:14.0941 0x12a8 tssecsrv - ok
10:13:14.0957 0x12a8 [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
10:13:14.0972 0x12a8 TsUsbFlt - ok
10:13:15.0003 0x12a8 [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
10:13:15.0019 0x12a8 TsUsbGD - ok
10:13:15.0066 0x12a8 [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
10:13:15.0097 0x12a8 tunnel - ok
10:13:15.0128 0x12a8 [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
10:13:15.0144 0x12a8 uagp35 - ok
10:13:15.0191 0x12a8 [ E92F73AD3E9FEF408422B4555B95B02E, 24A4405AAFA810447FAED5D8CEDC58D69E4260DD3CC14D8CDB6B0F290704D62A ] uArcCapture C:\Windows\system32\ArcVCapRender\uArcCapture.exe
10:13:15.0222 0x12a8 uArcCapture - ok
10:13:15.0253 0x12a8 [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
10:13:15.0284 0x12a8 udfs - ok
10:13:15.0315 0x12a8 [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe
10:13:15.0347 0x12a8 UI0Detect - ok
10:13:15.0378 0x12a8 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
10:13:15.0393 0x12a8 uliagpkx - ok
10:13:15.0425 0x12a8 [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
10:13:15.0456 0x12a8 umbus - ok
10:13:15.0487 0x12a8 [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
10:13:15.0503 0x12a8 UmPass - ok
10:13:15.0518 0x12a8 [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService C:\Windows\System32\umrdp.dll
10:13:15.0549 0x12a8 UmRdpService - ok
10:13:15.0581 0x12a8 [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll
10:13:15.0627 0x12a8 upnphost - ok
10:13:15.0674 0x12a8 [ BD9C55D7023C5DE374507ACC7A14E2AC, 1DBAFF733DE5C1A6A2374B15BD94512A22D9C0F4DF91F997801340828333AF3C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
10:13:15.0690 0x12a8 usbccgp - ok
10:13:15.0721 0x12a8 [ 04EC7CEC62EC3B6D9354EEE93327FC82, 6CB41D8644618A5F701F6CA91FB65BB94AA83EA48992133B5262DC539B334B2E ] usbcir C:\Windows\system32\drivers\usbcir.sys
10:13:15.0737 0x12a8 usbcir - ok
10:13:15.0752 0x12a8 [ F92DE757E4B7CE9C07C5E65423F3AE3B, B3FDEE4A8F1C7EC12405D99ACABC3E633FA4ED08D2A2AA871526ED7927A35A91 ] usbehci C:\Windows\system32\drivers\usbehci.sys
10:13:15.0783 0x12a8 usbehci - ok
10:13:15.0799 0x12a8 [ 8DC94AEC6A7E644A06135AE7506DC2E9, 3ACB621D57BC8691DBBCDEF27563AA6390370362F21AFA6E7BA35BC429E14590 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
10:13:15.0830 0x12a8 usbhub - ok
10:13:15.0846 0x12a8 [ E185D44FAC515A18D9DEDDC23C2CDF44, EF69D0253CC8F1D29929FD5E74F18737ECF5D238874B6E1505E2EAEE66D9D987 ] usbohci C:\Windows\system32\drivers\usbohci.sys
10:13:15.0877 0x12a8 usbohci - ok
10:13:15.0893 0x12a8 [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
10:13:15.0924 0x12a8 usbprint - ok
10:13:15.0939 0x12a8 [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:13:15.0971 0x12a8 USBSTOR - ok
10:13:16.0002 0x12a8 [ 68DF884CF41CDADA664BEB01DAF67E3D, 142781FE2FF93B269D8FA11D4C3F60967552A867E94533D94EF1C2D777A67872 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
10:13:16.0017 0x12a8 usbuhci - ok
10:13:16.0049 0x12a8 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2, F9B72DE82078FDB5551D48988190F46EECA9B99655C591B7865FEA1AFB31F637 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
10:13:16.0080 0x12a8 usbvideo - ok
10:13:16.0173 0x12a8 [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll
10:13:16.0220 0x12a8 UxSms - ok
10:13:16.0236 0x12a8 [ 81951F51E318AECC2D68559E47485CC4, ACF76395EF4A2ED03AB919A9DA04D3A4C03B4D0EDC60BE123B3BE1AFE78BC71B ] VaultSvc C:\Windows\system32\lsass.exe
10:13:16.0267 0x12a8 VaultSvc - ok
10:13:16.0298 0x12a8 [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
10:13:16.0314 0x12a8 vdrvroot - ok
10:13:16.0329 0x12a8 [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe
10:13:16.0392 0x12a8 vds - ok
10:13:16.0407 0x12a8 [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
10:13:16.0423 0x12a8 vga - ok
10:13:16.0454 0x12a8 [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys
10:13:16.0485 0x12a8 VgaSave - ok
10:13:16.0501 0x12a8 [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
10:13:16.0517 0x12a8 vhdmp - ok
10:13:16.0563 0x12a8 [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys
10:13:16.0579 0x12a8 viaagp - ok
10:13:16.0595 0x12a8 [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
10:13:16.0610 0x12a8 ViaC7 - ok
10:13:16.0626 0x12a8 [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys
10:13:16.0641 0x12a8 viaide - ok
10:13:16.0719 0x12a8 [ 622FCF264119F7DF127BE353F796B319, 6689D8F62F860178685496EF45520967AFAEFF94CFBCC64CF77074F21577E0A2 ] VideoDownloadConverter_4zService C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbarsvc.exe
10:13:16.0735 0x12a8 VideoDownloadConverter_4zService - ok
10:13:16.0782 0x12a8 [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus C:\Windows\system32\drivers\vmbus.sys
10:13:16.0797 0x12a8 vmbus - ok
10:13:16.0813 0x12a8 [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
10:13:16.0829 0x12a8 VMBusHID - ok
10:13:16.0860 0x12a8 [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys
10:13:16.0875 0x12a8 volmgr - ok
10:13:16.0891 0x12a8 [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
10:13:16.0922 0x12a8 volmgrx - ok
10:13:16.0938 0x12a8 [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys
10:13:16.0969 0x12a8 volsnap - ok
10:13:16.0985 0x12a8 [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
10:13:17.0016 0x12a8 vsmraid - ok
10:13:17.0063 0x12a8 [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe
10:13:17.0141 0x12a8 VSS - ok
10:13:17.0156 0x12a8 [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
10:13:17.0187 0x12a8 vwifibus - ok
10:13:17.0219 0x12a8 [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
10:13:17.0265 0x12a8 vwififlt - ok
10:13:17.0281 0x12a8 [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
10:13:17.0312 0x12a8 vwifimp - ok
10:13:17.0375 0x12a8 [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll
10:13:17.0453 0x12a8 W32Time - ok
10:13:17.0484 0x12a8 [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
10:13:17.0499 0x12a8 WacomPen - ok
10:13:17.0531 0x12a8 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
10:13:17.0562 0x12a8 WANARP - ok
10:13:17.0562 0x12a8 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
10:13:17.0609 0x12a8 Wanarpv6 - ok
10:13:17.0718 0x12a8 [ 353A04C273EC58475D8633E75CCD5604, FFAE53B6B53AEFC9E8A10BF27480E072D74430276BEB532FE1D473E9616D8CE0 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
10:13:17.0780 0x12a8 WatAdminSvc - ok
10:13:17.0858 0x12a8 [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe
10:13:17.0921 0x12a8 wbengine - ok
10:13:17.0936 0x12a8 [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
10:13:17.0967 0x12a8 WbioSrvc - ok
10:13:17.0999 0x12a8 [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll
10:13:18.0030 0x12a8 wcncsvc - ok
10:13:18.0045 0x12a8 [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:13:18.0061 0x12a8 WcsPlugInService - ok
10:13:18.0092 0x12a8 [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\drivers\wd.sys
10:13:18.0108 0x12a8 Wd - ok
10:13:18.0139 0x12a8 [ 9950E3D0F08141C7E89E64456AE7DC73, DE4B96812B305A63F5874BBF2DC40354FB45B3D96C1D33436E677099760BA448 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
10:13:18.0170 0x12a8 Wdf01000 - ok
10:13:18.0201 0x12a8 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost C:\Windows\system32\wdi.dll
10:13:18.0233 0x12a8 WdiServiceHost - ok
10:13:18.0233 0x12a8 [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost C:\Windows\system32\wdi.dll
10:13:18.0264 0x12a8 WdiSystemHost - ok
10:13:18.0279 0x12a8 [ A9D880F97530D5B8FEE278923349929D, 6A293E2DB9B7C434EA8B4CD4861E11905D46BD60E014AE27B74DC8C4B2DDF834 ] WebClient C:\Windows\System32\webclnt.dll
10:13:18.0311 0x12a8 WebClient - ok
10:13:18.0326 0x12a8 [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll
10:13:18.0373 0x12a8 Wecsvc - ok
10:13:18.0404 0x12a8 [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll
10:13:18.0435 0x12a8 wercplsupport - ok
10:13:18.0467 0x12a8 [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll
10:13:18.0483 0x12a8 WerSvc - ok
10:13:18.0541 0x12a8 [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
10:13:18.0573 0x12a8 WfpLwf - ok
10:13:18.0588 0x12a8 [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys
10:13:18.0619 0x12a8 WIMMount - ok
10:13:18.0682 0x12a8 [ 3FAE8F94296001C32EAB62CD7D82E0FD, 180FAECC426CF8F46700C855022E5865D528B1A20686F96D11080AB2FE2E0430 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
10:13:18.0729 0x12a8 WinDefend - ok
10:13:18.0744 0x12a8 WinHttpAutoProxySvc - ok
10:13:18.0791 0x12a8 [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
10:13:18.0838 0x12a8 Winmgmt - ok
10:13:18.0900 0x12a8 [ 1B91CD34EA3A90AB6A4EF0550174F4CC, 5B6618615EBFBA594C945AD35F5C68DA8C6053892B6D12D626BB6120910D80DC ] WinRM C:\Windows\system32\WsmSvc.dll
10:13:18.0994 0x12a8 WinRM - ok
10:13:19.0025 0x12a8 [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys
10:13:19.0056 0x12a8 WinUsb - ok
10:13:19.0103 0x12a8 [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll
10:13:19.0165 0x12a8 Wlansvc - ok
10:13:19.0197 0x12a8 [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
10:13:19.0228 0x12a8 WmiAcpi - ok
10:13:19.0259 0x12a8 [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
10:13:19.0275 0x12a8 wmiApSrv - ok
10:13:19.0368 0x12a8 [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
10:13:19.0446 0x12a8 WMPNetworkSvc - ok
10:13:19.0462 0x12a8 [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll
10:13:19.0493 0x12a8 WPCSvc - ok
10:13:19.0493 0x12a8 [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
10:13:19.0524 0x12a8 WPDBusEnum - ok
10:13:19.0555 0x12a8 [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
10:13:19.0602 0x12a8 ws2ifsl - ok
10:13:19.0618 0x12a8 [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\System32\wscsvc.dll
10:13:19.0649 0x12a8 wscsvc - ok
10:13:19.0649 0x12a8 WSearch - ok
10:13:19.0758 0x12a8 [ 3026418A50C5B4761BEFA632CEDB7406, 45C3B17793570B93D69037FD35C069390312B14E778852E7630C8DC63F02DDE8 ] wuauserv C:\Windows\system32\wuaueng.dll
10:13:19.0883 0x12a8 wuauserv - ok
10:13:19.0899 0x12a8 [ E714A1C0354636837E20CCBF00888EE7, 0E31F0DB0AA318E3B0DACD26C0D3B11519B42F2A996AE580BE67FA8B3C42C436 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
10:13:19.0945 0x12a8 WudfPf - ok
10:13:19.0977 0x12a8 [ 1023EE888C9B47178C5293ED5336AB69, 62221C80C3F719A585266247482A64F7CB2F5EF69AFA8FA07D563CA2B0A37561 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
10:13:20.0008 0x12a8 WUDFRd - ok
10:13:20.0039 0x12a8 [ 8D1E1E529A2C9E9B6A85B55A345F7629, 64B637CFE2AF58A4F7CE6D8C3D603F8EFD527500F7137E0A37840313C712CA93 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
10:13:20.0086 0x12a8 wudfsvc - ok
10:13:20.0101 0x12a8 [ FF2D745B560F7C71B31F30F4D49F73D2, B2FBF7E5F58E34AC64FE6CF65800F1F07939279203BDE89375FAC92B884A4F37 ] WwanSvc C:\Windows\System32\wwansvc.dll
10:13:20.0148 0x12a8 WwanSvc - ok
10:13:20.0164 0x12a8 [ 168C75B5B42D80E8946ABEF7BC28C584, 1424E86A9F21ABF362E9E3005D1C05278F6C3DABD8943DCD8E5366F822AC99E9 ] xmengine service C:\Windows\system32\xmesrv.exe
10:13:20.0179 0x12a8 xmengine service - ok
10:13:20.0242 0x12a8 ================ Scan global ===============================
10:13:20.0273 0x12a8 [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
10:13:20.0304 0x12a8 [ 183B4188D5D91B271613EC3EFD1B3CEF, 29E296B753E6380F0772290725DEC39DB83CB518302C1DDF303123996F3EEA0A ] C:\Windows\system32\winsrv.dll
10:13:20.0335 0x12a8 [ 183B4188D5D91B271613EC3EFD1B3CEF, 29E296B753E6380F0772290725DEC39DB83CB518302C1DDF303123996F3EEA0A ] C:\Windows\system32\winsrv.dll
10:13:20.0367 0x12a8 [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
10:13:20.0398 0x12a8 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
10:13:20.0413 0x12a8 [ Global ] - ok
10:13:20.0413 0x12a8 ================ Scan MBR ==================================
10:13:20.0413 0x12a8 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:13:20.0959 0x12a8 \Device\Harddisk0\DR0 - ok
10:13:20.0975 0x12a8 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR5
10:13:21.0069 0x12a8 \Device\Harddisk1\DR5 - ok
10:13:21.0069 0x12a8 ================ Scan VBR ==================================
10:13:21.0069 0x12a8 [ C2344B5950920431255C4ECF6ED5B619 ] \Device\Harddisk0\DR0\Partition1
10:13:21.0084 0x12a8 \Device\Harddisk0\DR0\Partition1 - ok
10:13:21.0100 0x12a8 [ 2D9E1DCE7D70770BA0C80F70352FEB11 ] \Device\Harddisk0\DR0\Partition2
10:13:21.0115 0x12a8 \Device\Harddisk0\DR0\Partition2 - ok
10:13:21.0162 0x12a8 [ 122928EB89B55BA33EB8934D9384C1C2 ] \Device\Harddisk0\DR0\Partition3
10:13:21.0162 0x12a8 \Device\Harddisk0\DR0\Partition3 - ok
10:13:21.0178 0x12a8 [ 19330A0F9C558814420EFD22662EDAFA ] \Device\Harddisk1\DR5\Partition1
10:13:21.0178 0x12a8 \Device\Harddisk1\DR5\Partition1 - ok
10:13:21.0178 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:22.0192 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:23.0206 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:24.0207 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:25.0221 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:26.0235 0x12a8 Waiting for KSN requests completion. In queue: 347
10:13:27.0249 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:28.0263 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:29.0265 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:30.0279 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:31.0293 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:32.0307 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:33.0321 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:34.0328 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:35.0342 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:36.0356 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:37.0370 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:38.0384 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:39.0385 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:40.0399 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:41.0413 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:42.0426 0x12a8 Waiting for KSN requests completion. In queue: 187
10:13:43.0456 0x12a8 AV detected via SS2: Symantec Endpoint Protection, C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\WSCSavNotifier.exe ( 12.1.1000.157 ), 0x71000 ( enabled : updated )
10:13:43.0456 0x12a8 FW detected via SS2: Symantec Endpoint Protection, C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe ( 12.1.1000.157 ), 0x41010 ( enabled )
10:13:45.0949 0x12a8 ============================================================
10:13:45.0949 0x12a8 Scan finished
10:13:45.0949 0x12a8 ============================================================
10:13:45.0964 0x0978 Detected object count: 0
10:13:45.0964 0x0978 Actual detected object count: 0

[vyosek]

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[Jimmm]

Tak notebook si vzala specializovaná firma a snad to opraví. Díky za pomoc

[vyosek]

No jak chcete, mohl jste pripadne vyuzit i nasi vzdalene pomoci http://www.neslape.cz

Pak prosim pripadne napiste s jakym vysledkem jste u nich pochodil a pripadne i cenu

Diky