17:07:08.0343 3384  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:07:10.0359 3384  ============================================================
17:07:10.0359 3384  Current date / time: 2017/10/12 17:07:10.0359
17:07:10.0359 3384  SystemInfo:
17:07:10.0359 3384  
17:07:10.0359 3384  OS Version: 5.1.2600 ServicePack: 3.0
17:07:10.0359 3384  Product type: Workstation
17:07:10.0375 3384  ComputerName: FRRINVOERPC
17:07:10.0375 3384  UserName: Gebruiker
17:07:10.0375 3384  Windows directory: C:\WINDOWS
17:07:10.0375 3384  System windows directory: C:\WINDOWS
17:07:10.0375 3384  Processor architecture: Intel x86
17:07:10.0375 3384  Number of processors: 2
17:07:10.0375 3384  Page size: 0x1000
17:07:10.0375 3384  Boot type: Normal boot
17:07:10.0375 3384  ============================================================
17:07:12.0093 3384  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
17:07:12.0250 3384  ============================================================
17:07:12.0250 3384  \Device\Harddisk0\DR0:
17:07:12.0265 3384  MBR partitions:
17:07:12.0265 3384  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1
17:07:12.0265 3384  ============================================================
17:07:12.0296 3384  C: <-> \Device\Harddisk0\DR0\Partition1
17:07:12.0296 3384  ============================================================
17:07:12.0296 3384  Initialize success
17:07:12.0296 3384  ============================================================
17:07:50.0968 1480  ============================================================
17:07:50.0968 1480  Scan started
17:07:50.0968 1480  Mode: Manual; SigCheck; TDLFS; 
17:07:50.0968 1480  ============================================================
17:07:51.0281 1480  ================ Scan system memory ========================
17:07:51.0281 1480  System memory - ok
17:07:51.0281 1480  ================ Scan services =============================
17:07:51.0421 1480  [ 31637CF039DD52468238DE4A06630D90 ] 6to4            C:\WINDOWS\System32\6to4svc.dll
17:07:51.0734 1480  6to4 - ok
17:07:51.0750 1480  Abiosdsk - ok
17:07:51.0750 1480  abp480n5 - ok
17:07:51.0796 1480  [ 02273A448BA21A7D447DAEB47810D40C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:07:51.0984 1480  ACPI - ok
17:07:52.0015 1480  [ 63F517B1A87DABF3F5ACB8A7952FC1D1 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
17:07:52.0203 1480  ACPIEC - ok
17:07:52.0218 1480  adpu160m - ok
17:07:52.0250 1480  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
17:07:52.0468 1480  aec - ok
17:07:52.0515 1480  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
17:07:52.0562 1480  AFD - ok
17:07:52.0578 1480  Aha154x - ok
17:07:52.0578 1480  aic78u2 - ok
17:07:52.0593 1480  aic78xx - ok
17:07:52.0609 1480  [ 8BED67D13DCB55B3E9FF6DAC4C6D3B49 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
17:07:52.0812 1480  Alerter - ok
17:07:52.0828 1480  [ DAB2A89FDE5CF791161200D90C1BCB12 ] ALG             C:\WINDOWS\System32\alg.exe
17:07:52.0906 1480  ALG - ok
17:07:52.0921 1480  AliIde - ok
17:07:52.0937 1480  amsint - ok
17:07:52.0937 1480  amsint32 - ok
17:07:52.0953 1480  AppMgmt - ok
17:07:52.0953 1480  asc - ok
17:07:52.0968 1480  asc3350p - ok
17:07:52.0984 1480  asc3550 - ok
17:07:53.0093 1480  [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
17:07:53.0140 1480  aspnet_state - ok
17:07:53.0156 1480  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:07:53.0359 1480  AsyncMac - ok
17:07:53.0390 1480  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
17:07:53.0593 1480  atapi - ok
17:07:53.0609 1480  Atdisk - ok
17:07:53.0609 1480  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:07:53.0828 1480  Atmarpc - ok
17:07:53.0875 1480  [ F10745ED3195360E69AA4A6E7768C0E0 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
17:07:54.0093 1480  AudioSrv - ok
17:07:54.0140 1480  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
17:07:54.0359 1480  audstub - ok
17:07:54.0406 1480  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
17:07:54.0609 1480  Beep - ok
17:07:54.0671 1480  [ 5C0073A51C4873430FA8B262E92183FF ] BITS            C:\WINDOWS\system32\qmgr.dll
17:07:54.0921 1480  BITS - ok
17:07:54.0953 1480  [ 139102D1865D3C1F152A25ABD16242DB ] Browser         C:\WINDOWS\System32\browser.dll
17:07:55.0015 1480  Browser - ok
17:07:55.0031 1480  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
17:07:55.0203 1480  cbidf2k - ok
17:07:55.0218 1480  cd20xrnt - ok
17:07:55.0234 1480  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
17:07:55.0437 1480  Cdaudio - ok
17:07:55.0468 1480  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
17:07:55.0656 1480  Cdfs - ok
17:07:55.0703 1480  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:07:55.0921 1480  Cdrom - ok
17:07:55.0953 1480  [ BD85400700B80FBE3D4A3412BCE74861 ] CiSvc           C:\WINDOWS\system32\cisvc.exe
17:07:56.0171 1480  CiSvc - ok
17:07:56.0171 1480  [ 4FB6108130829666C8FE96B442FEAD94 ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
17:07:56.0406 1480  ClipSrv - ok
17:07:56.0453 1480  [ 234B1BC2796483E1F5C3F26649FB3388 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:07:56.0484 1480  clr_optimization_v2.0.50727_32 - ok
17:07:56.0515 1480  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:07:56.0609 1480  clr_optimization_v4.0.30319_32 - ok
17:07:56.0609 1480  CmdIde - ok
17:07:56.0625 1480  COMSysApp - ok
17:07:56.0640 1480  Cpqarray - ok
17:07:56.0671 1480  [ 0A9CF5D3CF63A8699F28C814EF821C7E ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
17:07:56.0875 1480  CryptSvc - ok
17:07:56.0890 1480  dac2w2k - ok
17:07:56.0906 1480  dac960nt - ok
17:07:56.0953 1480  [ D9883335CC1C17AFC3A09C8AC3E4DBE4 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
17:07:57.0031 1480  DcomLaunch - ok
17:07:57.0078 1480  [ 146AB038F5DBB366122D28444999AB2C ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
17:07:57.0296 1480  Dhcp - ok
17:07:57.0312 1480  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
17:07:57.0531 1480  Disk - ok
17:07:57.0531 1480  dmadmin - ok
17:07:57.0578 1480  [ DEC123E0C75971D0CC7A6C6A75E28429 ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
17:07:57.0859 1480  dmboot - ok
17:07:57.0890 1480  [ 7268E66259722F6228C730685B201092 ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
17:07:58.0093 1480  dmio - ok
17:07:58.0125 1480  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
17:07:58.0328 1480  dmload - ok
17:07:58.0343 1480  [ 127DB74184E2D3D31655DA525A5EFDE1 ] dmserver        C:\WINDOWS\System32\dmserver.dll
17:07:58.0562 1480  dmserver - ok
17:07:58.0593 1480  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
17:07:58.0812 1480  DMusic - ok
17:07:58.0859 1480  [ DE6CDB6CBC5C27B9085CFA6DFE8E5025 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
17:07:58.0921 1480  Dnscache - ok
17:07:58.0937 1480  [ 90EE765E1A598B578852901F74F914F1 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
17:07:59.0109 1480  Dot3svc - ok
17:07:59.0125 1480  dpti2o - ok
17:07:59.0140 1480  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
17:07:59.0328 1480  drmkaud - ok
17:07:59.0343 1480  [ E6BBDEBF7081899D161C773E8D84D015 ] EapHost         C:\WINDOWS\System32\eapsvc.dll
17:07:59.0531 1480  EapHost - ok
17:07:59.0546 1480  [ 2F5C7F650B7AF178988946EE4B0D9C01 ] ERSvc           C:\WINDOWS\System32\ersvc.dll
17:07:59.0765 1480  ERSvc - ok
17:07:59.0812 1480  esgiguard - ok
17:07:59.0843 1480  [ 01CE484FF6D70A39479BC6D619DE7ED6 ] EsgScanner      C:\WINDOWS\system32\DRIVERS\EsgScanner.sys
17:08:00.0015 1480  EsgScanner - ok
17:08:00.0046 1480  [ C00BBCAEDCC2A3503D0FC27DD96D97C8 ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae.sys
17:08:00.0078 1480  ESProtectionDriver - ok
17:08:00.0125 1480  [ 657B69389B893F440B07590C9E963F23 ] Eventlog        C:\WINDOWS\system32\services.exe
17:08:00.0156 1480  Eventlog - ok
17:08:00.0203 1480  [ 97912DC0679D2DA60CCE589BBC196D72 ] EventSystem     C:\WINDOWS\system32\es.dll
17:08:00.0281 1480  EventSystem - ok
17:08:00.0359 1480  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
17:08:00.0609 1480  Fastfat - ok
17:08:00.0703 1480  [ 2D5D4156292150FE571872C1B88E9299 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
17:08:00.0812 1480  FastUserSwitchingCompatibility - ok
17:08:00.0828 1480  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\DRIVERS\fdc.sys
17:08:01.0031 1480  Fdc - ok
17:08:01.0062 1480  [ 8BFFFB5AC954E19DFDB96D56512AA518 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
17:08:01.0312 1480  Fips - ok
17:08:01.0328 1480  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
17:08:01.0515 1480  Flpydisk - ok
17:08:01.0562 1480  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
17:08:01.0765 1480  FltMgr - ok
17:08:01.0765 1480  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:08:01.0968 1480  Fs_Rec - ok
17:08:01.0968 1480  [ FA8CA22E70245C81FF29C36AF56292FC ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:08:02.0203 1480  Ftdisk - ok
17:08:02.0218 1480  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:08:02.0406 1480  Gpc - ok
17:08:02.0453 1480  [ 0545A3EB959CFA4790D267BFB8C1ACA4 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
17:08:02.0484 1480  gupdate - ok
17:08:02.0484 1480  [ 0545A3EB959CFA4790D267BFB8C1ACA4 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
17:08:02.0515 1480  gupdatem - ok
17:08:02.0562 1480  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
17:08:02.0781 1480  HDAudBus - ok
17:08:02.0828 1480  [ 5327BAD9B35C33D2A64B64E4CF282ECD ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
17:08:03.0015 1480  helpsvc - ok
17:08:03.0046 1480  [ 10003105AAB8D5A7DB51A9CB3D9F55A3 ] HidServ         C:\WINDOWS\System32\hidserv.dll
17:08:03.0218 1480  HidServ - ok
17:08:03.0250 1480  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
17:08:03.0421 1480  hidusb - ok
17:08:03.0453 1480  [ 1FF903FFA2DA1704E5A5443D37D8E49E ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
17:08:03.0625 1480  hkmsvc - ok
17:08:03.0640 1480  hpn - ok
17:08:03.0687 1480  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
17:08:03.0734 1480  HTTP - ok
17:08:03.0765 1480  [ 2529C7BA05242BEED0027F554D0513BB ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
17:08:03.0953 1480  HTTPFilter - ok
17:08:03.0953 1480  i2omp - ok
17:08:04.0000 1480  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
17:08:04.0187 1480  Imapi - ok
17:08:04.0234 1480  [ A117772F94C854DE5D1BBC1F1962B192 ] ImapiService    C:\WINDOWS\system32\imapi.exe
17:08:04.0421 1480  ImapiService - ok
17:08:04.0437 1480  ini910u - ok
17:08:04.0562 1480  [ B2B7AF5DC5E1B6B171DFDA681D105C7C ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
17:08:04.0687 1480  IntcAzAudAddService - ok
17:08:04.0734 1480  [ 72C63AD984D427D34BD5B9DB838D88EB ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
17:08:04.0921 1480  IntelIde - ok
17:08:04.0968 1480  [ 2D2254FAC267E6B1C7865E8EBEF60C6D ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:08:05.0156 1480  intelppm - ok
17:08:05.0203 1480  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
17:08:05.0390 1480  Ip6Fw - ok
17:08:05.0421 1480  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:08:05.0609 1480  IpFilterDriver - ok
17:08:05.0625 1480  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:08:05.0828 1480  IpInIp - ok
17:08:05.0828 1480  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:08:06.0015 1480  IpNat - ok
17:08:06.0031 1480  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:08:06.0234 1480  IPSec - ok
17:08:06.0265 1480  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
17:08:06.0703 1480  IRENUM - ok
17:08:06.0718 1480  [ 0B78E1A31340E1FB1E389D5633F7C3A0 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:08:06.0906 1480  isapnp - ok
17:08:06.0937 1480  [ 380397621E94B32C744E7B2CC1330390 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:08:07.0125 1480  Kbdclass - ok
17:08:07.0140 1480  [ B833B70FE639F01FB36CEDABE57EF031 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
17:08:07.0312 1480  kbdhid - ok
17:08:07.0328 1480  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
17:08:07.0515 1480  kmixer - ok
17:08:07.0546 1480  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
17:08:07.0593 1480  KSecDD - ok
17:08:07.0625 1480  [ C7955E7EDAEA462D04F1C4BE1D340372 ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
17:08:07.0656 1480  LanmanServer - ok
17:08:07.0703 1480  [ A936A575EAF6DCE8DC08BC0C53972ADD ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
17:08:07.0750 1480  lanmanworkstation - ok
17:08:07.0796 1480  [ 91AE20C5C2776C511994AA1308C05283 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
17:08:07.0953 1480  LmHosts - ok
17:08:08.0000 1480  [ 7EB1F631B98A52C1140DB23B25580D95 ] MBAMChameleon   C:\WINDOWS\system32\drivers\MBAMChameleon.sys
17:08:08.0015 1480  MBAMChameleon - ok
17:08:08.0046 1480  [ EA8012B28C87359AB0AB89FF057DB168 ] MBAMProtection  C:\WINDOWS\system32\drivers\mbam.sys
17:08:08.0078 1480  MBAMProtection - ok
17:08:08.0250 1480  [ F168D9361CE59D0A2D11E173A5CC1B9F ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
17:08:08.0406 1480  MBAMService - ok
17:08:08.0453 1480  [ B72EBB5C4727E67BAFDBC7FEA5A8D49F ] MBAMSwissArmy   C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
17:08:08.0500 1480  MBAMSwissArmy - ok
17:08:08.0546 1480  [ C56A45A03DCA11712DE9FDF98224230B ] Messenger       C:\WINDOWS\System32\msgsvc.dll
17:08:08.0750 1480  Messenger - ok
17:08:08.0796 1480  [ 13729C5318EDBCD5E31B4F5020602E42 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
17:08:08.0812 1480  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - warning
17:08:08.0812 1480  Microsoft Office Groove Audit Service - detected UnsignedFile.Multi.Generic (1)
17:08:08.0859 1480  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
17:08:09.0046 1480  mnmdd - ok
17:08:09.0062 1480  [ 5B1D994DCF1895AFA27600E46A2F0FEA ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
17:08:09.0265 1480  mnmsrvc - ok
17:08:09.0281 1480  [ 8114EEAC353F549331AB73E9AF4219ED ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
17:08:09.0453 1480  Modem - ok
17:08:09.0484 1480  [ 1A4E2214DD63E4A876463D3427EE8261 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:08:09.0703 1480  Mouclass - ok
17:08:09.0750 1480  [ 18017899254E01371E1A39754D6BF98C ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
17:08:09.0921 1480  mouhid - ok
17:08:09.0937 1480  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
17:08:10.0125 1480  MountMgr - ok
17:08:10.0140 1480  mraid35x - ok
17:08:10.0140 1480  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:08:10.0328 1480  MRxDAV - ok
17:08:10.0375 1480  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:08:10.0421 1480  MRxSmb - ok
17:08:10.0453 1480  [ 21EA21984D7D1AD50DB2E627020AB14C ] MSDTC           C:\WINDOWS\system32\msdtc.exe
17:08:10.0640 1480  MSDTC - ok
17:08:10.0656 1480  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
17:08:10.0828 1480  Msfs - ok
17:08:10.0828 1480  MSIServer - ok
17:08:10.0859 1480  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:08:11.0031 1480  MSKSSRV - ok
17:08:11.0046 1480  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:08:11.0218 1480  MSPCLOCK - ok
17:08:11.0234 1480  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
17:08:11.0406 1480  MSPQM - ok
17:08:11.0437 1480  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:08:11.0671 1480  mssmbios - ok
17:08:11.0703 1480  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
17:08:11.0765 1480  Mup - ok
17:08:11.0812 1480  [ 87E394C810794D3C70CF22E8316CB23E ] napagent        C:\WINDOWS\System32\qagentrt.dll
17:08:11.0984 1480  napagent - ok
17:08:12.0031 1480  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
17:08:12.0234 1480  NDIS - ok
17:08:12.0281 1480  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:08:12.0328 1480  NdisTapi - ok
17:08:12.0359 1480  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:08:12.0578 1480  Ndisuio - ok
17:08:12.0578 1480  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:08:12.0765 1480  NdisWan - ok
17:08:12.0796 1480  [ 2F597BB467E05B1FE3830EABD821B8E0 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
17:08:12.0859 1480  NDProxy - ok
17:08:12.0875 1480  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
17:08:13.0078 1480  NetBIOS - ok
17:08:13.0093 1480  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
17:08:13.0265 1480  NetBT - ok
17:08:13.0312 1480  [ DC6BAE085E9B3C2F3A963ED46791FEAB ] NetDDE          C:\WINDOWS\system32\netdde.exe
17:08:13.0500 1480  NetDDE - ok
17:08:13.0515 1480  [ DC6BAE085E9B3C2F3A963ED46791FEAB ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
17:08:13.0703 1480  NetDDEdsdm - ok
17:08:13.0734 1480  [ 8754210A3399D19610CE2D71E0C3E5D9 ] Netlogon        C:\WINDOWS\system32\lsass.exe
17:08:13.0906 1480  Netlogon - ok
17:08:13.0921 1480  [ 5431FB616ECAE0D587C5B97D0B86CBD8 ] Netman          C:\WINDOWS\System32\netman.dll
17:08:14.0093 1480  Netman - ok
17:08:14.0140 1480  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:08:14.0187 1480  NetTcpPortSharing - ok
17:08:14.0218 1480  [ 4522CBE00A9E9EEE36AA82ED4B319148 ] Nla             C:\WINDOWS\System32\mswsock.dll
17:08:14.0250 1480  Nla - ok
17:08:14.0281 1480  [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm              C:\WINDOWS\system32\DRIVERS\NMnt.sys
17:08:14.0453 1480  nm - ok
17:08:14.0453 1480  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
17:08:14.0625 1480  Npfs - ok
17:08:14.0671 1480  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
17:08:14.0859 1480  Ntfs - ok
17:08:14.0875 1480  [ 8754210A3399D19610CE2D71E0C3E5D9 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
17:08:15.0046 1480  NtLmSsp - ok
17:08:15.0078 1480  [ AC1A78237B53044735693633F8235468 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
17:08:15.0281 1480  NtmsSvc - ok
17:08:15.0312 1480  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
17:08:15.0500 1480  Null - ok
17:08:15.0937 1480  [ 7C56F3FD65B2BDB315CA3605A5392D7B ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
17:08:16.0531 1480  nv - ok
17:08:16.0562 1480  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:08:16.0750 1480  NwlnkFlt - ok
17:08:16.0750 1480  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:08:16.0937 1480  NwlnkFwd - ok
17:08:17.0000 1480  [ 8B8B1BE2DBA4025DA6786C645F77F123 ] NwlnkIpx        C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
17:08:17.0203 1480  NwlnkIpx - ok
17:08:17.0203 1480  [ 56D34A67C05E94E16377C60609741FF8 ] NwlnkNb         C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
17:08:17.0390 1480  NwlnkNb - ok
17:08:17.0406 1480  [ C0BB7D1615E1ACBDC99757F6CEAF8CF0 ] NwlnkSpx        C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
17:08:17.0578 1480  NwlnkSpx - ok
17:08:17.0671 1480  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:08:17.0718 1480  odserv - ok
17:08:17.0734 1480  [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
17:08:17.0906 1480  ohci1394 - ok
17:08:17.0953 1480  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:08:17.0984 1480  ose - ok
17:08:18.0000 1480  [ E3934CCC20A4D24F1924E13D36D2A5BD ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
17:08:18.0171 1480  Parport - ok
17:08:18.0187 1480  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
17:08:18.0359 1480  PartMgr - ok
17:08:18.0406 1480  [ 1EADE28746A64C21E0A808BB12A63326 ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
17:08:18.0562 1480  ParVdm - ok
17:08:18.0578 1480  [ 3B166F9F753C21AEDAA9A6BD76B49655 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
17:08:18.0750 1480  PCI - ok
17:08:18.0750 1480  [ B31EDEBA4DA28283F6B8DC4756FB9585 ] PCIIde          C:\WINDOWS\system32\drivers\PCIIde.sys
17:08:18.0921 1480  PCIIde - ok
17:08:18.0953 1480  [ 2137FFD65F8E609A3A5ACD487C56CCE0 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
17:08:19.0125 1480  Pcmcia - ok
17:08:19.0140 1480  perc2 - ok
17:08:19.0140 1480  perc2hib - ok
17:08:19.0187 1480  [ 657B69389B893F440B07590C9E963F23 ] PlugPlay        C:\WINDOWS\system32\services.exe
17:08:19.0218 1480  PlugPlay - ok
17:08:19.0234 1480  [ 8754210A3399D19610CE2D71E0C3E5D9 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
17:08:19.0390 1480  PolicyAgent - ok
17:08:19.0421 1480  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:08:19.0578 1480  PptpMiniport - ok
17:08:19.0593 1480  [ 8754210A3399D19610CE2D71E0C3E5D9 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
17:08:19.0765 1480  ProtectedStorage - ok
17:08:19.0781 1480  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
17:08:19.0953 1480  PSched - ok
17:08:19.0968 1480  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:08:20.0156 1480  Ptilink - ok
17:08:20.0156 1480  ql1080 - ok
17:08:20.0171 1480  Ql10wnt - ok
17:08:20.0171 1480  ql12160 - ok
17:08:20.0187 1480  ql1240 - ok
17:08:20.0187 1480  ql1280 - ok
17:08:20.0218 1480  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:08:20.0390 1480  RasAcd - ok
17:08:20.0421 1480  [ 0575D034B1292CA3A9BB9F67A8EE289C ] RasAuto         C:\WINDOWS\System32\rasauto.dll
17:08:20.0578 1480  RasAuto - ok
17:08:20.0578 1480  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:08:20.0765 1480  Rasl2tp - ok
17:08:20.0796 1480  [ 9E7E2DF6971A5F00102BE3F901CC3BDC ] RasMan          C:\WINDOWS\System32\rasmans.dll
17:08:20.0984 1480  RasMan - ok
17:08:20.0984 1480  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:08:21.0187 1480  RasPppoe - ok
17:08:21.0187 1480  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
17:08:21.0359 1480  Raspti - ok
17:08:21.0375 1480  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:08:21.0562 1480  Rdbss - ok
17:08:21.0593 1480  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:08:21.0765 1480  RDPCDD - ok
17:08:21.0812 1480  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
17:08:21.0859 1480  RDPWD - ok
17:08:21.0906 1480  [ EA9FDF71D696B532BDC44C8BFF03A737 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
17:08:22.0078 1480  RDSessMgr - ok
17:08:22.0093 1480  [ 4173BC66E485FD77A03C4819F60BD0DA ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
17:08:22.0265 1480  redbook - ok
17:08:22.0296 1480  [ 4007ABF5D9BF0E55451D775443D1F985 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
17:08:22.0484 1480  RemoteAccess - ok
17:08:22.0500 1480  [ BE078F8F7EC2491EFDD79A53353A060F ] RpcLocator      C:\WINDOWS\system32\locator.exe
17:08:22.0656 1480  RpcLocator - ok
17:08:22.0703 1480  [ D9883335CC1C17AFC3A09C8AC3E4DBE4 ] RpcSs           C:\WINDOWS\System32\rpcss.dll
17:08:22.0734 1480  RpcSs - ok
17:08:22.0781 1480  [ AD1B5F1B99FFF08C99F443D784711A81 ] RSVP            C:\WINDOWS\system32\rsvp.exe
17:08:22.0953 1480  RSVP - ok
17:08:22.0968 1480  [ D507C1400284176573224903819FFDA3 ] rtl8139         C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
17:08:23.0140 1480  rtl8139 - ok
17:08:23.0156 1480  [ 8754210A3399D19610CE2D71E0C3E5D9 ] SamSs           C:\WINDOWS\system32\lsass.exe
17:08:23.0328 1480  SamSs - ok
17:08:23.0359 1480  [ 1B4CD62174E907C7EF8EC5D4D0A2A616 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
17:08:23.0531 1480  SCardSvr - ok
17:08:23.0578 1480  [ 7C288AE0F75CB18CFF1DF6179A67AD8F ] Schedule        C:\WINDOWS\system32\schedsvc.dll
17:08:23.0781 1480  Schedule - ok
17:08:23.0796 1480  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:08:23.0921 1480  Secdrv - ok
17:08:23.0953 1480  [ 6983665BEA867125B1DA5757CD8B2F9D ] seclogon        C:\WINDOWS\System32\seclogon.dll
17:08:24.0140 1480  seclogon - ok
17:08:24.0156 1480  [ F6EC8F1E50E40237BDDEE1CB7FE20B42 ] SENS            C:\WINDOWS\system32\sens.dll
17:08:24.0343 1480  SENS - ok
17:08:24.0343 1480  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
17:08:24.0500 1480  serenum - ok
17:08:24.0515 1480  [ 92C21762653BB2CE51147EB8A9AA654F ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
17:08:24.0703 1480  Serial - ok
17:08:24.0734 1480  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
17:08:24.0921 1480  Sfloppy - ok
17:08:24.0984 1480  [ 7579C4BE909D47F10F3D8D801CB13ED9 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
17:08:25.0156 1480  SharedAccess - ok
17:08:25.0171 1480  [ 2D5D4156292150FE571872C1B88E9299 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:08:25.0203 1480  ShellHWDetection - ok
17:08:25.0218 1480  Simbad - ok
17:08:25.0218 1480  Sparrow - ok
17:08:25.0265 1480  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
17:08:25.0437 1480  splitter - ok
17:08:25.0453 1480  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
17:08:25.0500 1480  Spooler - ok
17:08:25.0515 1480  SpyHunter 4 Service - ok
17:08:25.0562 1480  [ 64D2A7640E0767ECD3BCB38D3200E7CE ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
17:08:25.0640 1480  sr - ok
17:08:25.0656 1480  [ 81CBF363C414620CAA61BD6843D8FDB9 ] srservice       C:\WINDOWS\system32\srsvc.dll
17:08:25.0750 1480  srservice - ok
17:08:25.0781 1480  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
17:08:25.0843 1480  Srv - ok
17:08:25.0875 1480  [ 5B9D0DE64BE96A806819516440FD211C ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
17:08:25.0984 1480  SSDPSRV - ok
17:08:26.0031 1480  [ 5AE996186D2DC694FEF88F14A3FC9242 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
17:08:26.0234 1480  stisvc - ok
17:08:26.0265 1480  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
17:08:26.0421 1480  swenum - ok
17:08:26.0437 1480  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
17:08:26.0609 1480  swmidi - ok
17:08:26.0609 1480  SwPrv - ok
17:08:26.0625 1480  symc810 - ok
17:08:26.0625 1480  symc8xx - ok
17:08:26.0640 1480  sym_hi - ok
17:08:26.0656 1480  sym_u3 - ok
17:08:26.0687 1480  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
17:08:26.0875 1480  sysaudio - ok
17:08:26.0906 1480  [ 251EAE7C56C6AB9490311A3C9757E18D ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
17:08:27.0109 1480  SysmonLog - ok
17:08:27.0140 1480  [ 2BC9FB448F0C2394FF53C83A7BB04731 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
17:08:27.0328 1480  TapiSrv - ok
17:08:27.0375 1480  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:08:27.0453 1480  Tcpip - ok
17:08:27.0484 1480  [ 4E53BBCC4BE37D7A4BD6EF1098C89FF7 ] Tcpip6          C:\WINDOWS\system32\DRIVERS\tcpip6.sys
17:08:27.0531 1480  Tcpip6 - ok
17:08:27.0546 1480  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
17:08:27.0734 1480  TDPIPE - ok
17:08:27.0765 1480  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
17:08:27.0937 1480  TDTCP - ok
17:08:28.0359 1480  [ 250B2B5807E2B0642A3E665F692F1811 ] TeamViewer      C:\Program Files\TeamViewer\TeamViewer_Service.exe
17:08:29.0140 1480  TeamViewer - ok
17:08:29.0187 1480  [ 9101FFFCFCCD1A30E870A5B8A9091B10 ] teamviewervpn   C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys
17:08:29.0265 1480  teamviewervpn - ok
17:08:29.0296 1480  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
17:08:29.0515 1480  TermDD - ok
17:08:29.0546 1480  [ E0AEF86A594C9990D6321C5CA239C5B7 ] TermService     C:\WINDOWS\System32\termsrv.dll
17:08:29.0781 1480  TermService - ok
17:08:29.0812 1480  [ 2D5D4156292150FE571872C1B88E9299 ] Themes          C:\WINDOWS\System32\shsvcs.dll
17:08:29.0843 1480  Themes - ok
17:08:29.0859 1480  TosIde - ok
17:08:29.0890 1480  [ 20655E8CA1C78BC7088B18E93806D21B ] TrkWks          C:\WINDOWS\system32\trkwks.dll
17:08:30.0078 1480  TrkWks - ok
17:08:30.0125 1480  [ 8F861EDA21C05857EB8197300A92501C ] tunmp           C:\WINDOWS\system32\DRIVERS\tunmp.sys
17:08:30.0281 1480  tunmp - ok
17:08:30.0296 1480  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
17:08:30.0453 1480  Udfs - ok
17:08:30.0453 1480  ultra - ok
17:08:30.0515 1480  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
17:08:30.0687 1480  Update - ok
17:08:30.0734 1480  [ 01653D6C9604F1FB31A76EC94E08954F ] upnphost        C:\WINDOWS\System32\upnphost.dll
17:08:30.0875 1480  upnphost - ok
17:08:30.0906 1480  [ A89796DD0DE24CF03B3A39407E1F46A3 ] UPS             C:\WINDOWS\System32\ups.exe
17:08:31.0078 1480  UPS - ok
17:08:31.0109 1480  [ 1B611611C28D2DF25BC057D79C6F13FC ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
17:08:31.0171 1480  usbccgp - ok
17:08:31.0203 1480  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:08:31.0390 1480  usbhub - ok
17:08:31.0390 1480  [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:08:31.0546 1480  usbstor - ok
17:08:31.0546 1480  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:08:31.0718 1480  usbuhci - ok
17:08:31.0734 1480  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
17:08:31.0906 1480  VgaSave - ok
17:08:31.0906 1480  ViaIde - ok
17:08:31.0953 1480  [ 8AB662B3C4691E6DDF61C96BB5B7D103 ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
17:08:32.0156 1480  VolSnap - ok
17:08:32.0187 1480  [ A585EDD6965B301DE8A45C6768C7C215 ] VSS             C:\WINDOWS\System32\vssvc.exe
17:08:32.0296 1480  VSS - ok
17:08:32.0328 1480  [ 390D8E65F362327AD510B08971478301 ] W32Time         C:\WINDOWS\system32\w32time.dll
17:08:32.0484 1480  W32Time - ok
17:08:32.0515 1480  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:08:32.0671 1480  Wanarp - ok
17:08:32.0687 1480  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
17:08:32.0875 1480  wdmaud - ok
17:08:32.0906 1480  [ 33D8E2812054D97A0AEC9B8F04277927 ] WebClient       C:\WINDOWS\System32\webclnt.dll
17:08:33.0078 1480  WebClient - ok
17:08:33.0171 1480  [ F9E105F369C18E4001E0C05AAF600D73 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
17:08:33.0343 1480  winmgmt - ok
17:08:33.0390 1480  [ 2628076412EC86C92827AE5202501E5D ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
17:08:33.0578 1480  WmdmPmSN - ok
17:08:33.0609 1480  [ 87F11D161207C7063EDABAC0AADC33C3 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
17:08:33.0781 1480  WmiApSrv - ok
17:08:33.0859 1480  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:08:33.0906 1480  WPFFontCache_v0400 - ok
17:08:33.0953 1480  [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL         C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:08:34.0125 1480  WS2IFSL - ok
17:08:34.0171 1480  [ 843F7FA8EA38E6A4262976DCC994C81A ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
17:08:34.0343 1480  wscsvc - ok
17:08:34.0390 1480  [ 1E8FDDDEF3FE260BADAB06DAE10D753A ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
17:08:34.0578 1480  wuauserv - ok
17:08:34.0687 1480  [ E99782DBB8FFA2AEE72B31DAC8D8D887 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
17:08:35.0062 1480  WZCSVC - ok
17:08:35.0078 1480  [ FD3C38635808920F8235BF2FED642F54 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
17:08:35.0265 1480  xmlprov - ok
17:08:35.0265 1480  ================ Scan global ===============================
17:08:35.0296 1480  [ 953AD498333B03F7CE547151F96EF241 ] C:\WINDOWS\system32\basesrv.dll
17:08:35.0343 1480  [ 6D43938F4980D62E091AE2F755FC259B ] C:\WINDOWS\system32\winsrv.dll
17:08:35.0359 1480  [ 6D43938F4980D62E091AE2F755FC259B ] C:\WINDOWS\system32\winsrv.dll
17:08:35.0390 1480  [ 657B69389B893F440B07590C9E963F23 ] C:\WINDOWS\system32\services.exe
17:08:35.0390 1480  [Global] - ok
17:08:35.0390 1480  ================ Scan MBR ==================================
17:08:35.0421 1480  [ 3051207086651214E435112E51817DC5 ] \Device\Harddisk0\DR0
17:08:35.0718 1480  \Device\Harddisk0\DR0 - ok
17:08:35.0718 1480  ================ Scan VBR ==================================
17:08:35.0718 1480  [ 4C55AA30E7A6AD579D904BD27FED71B0 ] \Device\Harddisk0\DR0\Partition1
17:08:35.0718 1480  \Device\Harddisk0\DR0\Partition1 - ok
17:08:35.0718 1480  ============================================================
17:08:35.0718 1480  Scan finished
17:08:35.0718 1480  ============================================================
17:08:35.0843 0160  Detected object count: 1
17:08:35.0843 0160  Actual detected object count: 1
17:09:42.0140 0160  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:09:42.0140 0160  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:11:42.0062 1572  ============================================================
17:11:42.0062 1572  Scan started
17:11:42.0062 1572  Mode: Manual; SigCheck; TDLFS; 
17:11:42.0062 1572  ============================================================
17:11:42.0265 1572  ================ Scan system memory ========================
17:11:42.0265 1572  System memory - ok
17:11:42.0265 1572  ================ Scan services =============================
17:11:42.0359 1572  [ 31637CF039DD52468238DE4A06630D90 ] 6to4            C:\WINDOWS\System32\6to4svc.dll
17:11:42.0468 1572  6to4 - ok
17:11:42.0484 1572  Abiosdsk - ok
17:11:42.0484 1572  abp480n5 - ok
17:11:42.0531 1572  [ 02273A448BA21A7D447DAEB47810D40C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:11:42.0718 1572  ACPI - ok
17:11:42.0750 1572  [ 63F517B1A87DABF3F5ACB8A7952FC1D1 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
17:11:42.0937 1572  ACPIEC - ok
17:11:42.0953 1572  adpu160m - ok
17:11:42.0984 1572  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
17:11:43.0171 1572  aec - ok
17:11:43.0218 1572  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
17:11:43.0265 1572  AFD - ok
17:11:43.0281 1572  Aha154x - ok
17:11:43.0281 1572  aic78u2 - ok
17:11:43.0296 1572  aic78xx - ok
17:11:43.0343 1572  [ 8BED67D13DCB55B3E9FF6DAC4C6D3B49 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
17:11:43.0531 1572  Alerter - ok
17:11:43.0546 1572  [ DAB2A89FDE5CF791161200D90C1BCB12 ] ALG             C:\WINDOWS\System32\alg.exe
17:11:43.0640 1572  ALG - ok
17:11:43.0656 1572  AliIde - ok
17:11:43.0656 1572  amsint - ok
17:11:43.0671 1572  amsint32 - ok
17:11:43.0687 1572  AppMgmt - ok
17:11:43.0687 1572  asc - ok
17:11:43.0703 1572  asc3350p - ok
17:11:43.0718 1572  asc3550 - ok
17:11:43.0828 1572  [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
17:11:43.0843 1572  aspnet_state - ok
17:11:43.0859 1572  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:11:44.0062 1572  AsyncMac - ok
17:11:44.0062 1572  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
17:11:44.0265 1572  atapi - ok
17:11:44.0265 1572  Atdisk - ok
17:11:44.0281 1572  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:11:44.0500 1572  Atmarpc - ok
17:11:44.0531 1572  [ F10745ED3195360E69AA4A6E7768C0E0 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
17:11:44.0703 1572  AudioSrv - ok
17:11:44.0734 1572  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
17:11:44.0906 1572  audstub - ok
17:11:44.0953 1572  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
17:11:45.0109 1572  Beep - ok
17:11:45.0171 1572  [ 5C0073A51C4873430FA8B262E92183FF ] BITS            C:\WINDOWS\system32\qmgr.dll
17:11:45.0375 1572  BITS - ok
17:11:45.0437 1572  [ 139102D1865D3C1F152A25ABD16242DB ] Browser         C:\WINDOWS\System32\browser.dll
17:11:45.0468 1572  Browser - ok
17:11:45.0500 1572  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
17:11:45.0671 1572  cbidf2k - ok
17:11:45.0687 1572  cd20xrnt - ok
17:11:45.0703 1572  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
17:11:45.0875 1572  Cdaudio - ok
17:11:45.0906 1572  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
17:11:46.0062 1572  Cdfs - ok
17:11:46.0093 1572  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:11:46.0265 1572  Cdrom - ok
17:11:46.0296 1572  [ BD85400700B80FBE3D4A3412BCE74861 ] CiSvc           C:\WINDOWS\system32\cisvc.exe
17:11:46.0468 1572  CiSvc - ok
17:11:46.0484 1572  [ 4FB6108130829666C8FE96B442FEAD94 ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
17:11:46.0703 1572  ClipSrv - ok
17:11:46.0750 1572  [ 234B1BC2796483E1F5C3F26649FB3388 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:11:46.0781 1572  clr_optimization_v2.0.50727_32 - ok
17:11:46.0812 1572  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:11:46.0828 1572  clr_optimization_v4.0.30319_32 - ok
17:11:46.0843 1572  CmdIde - ok
17:11:46.0843 1572  COMSysApp - ok
17:11:46.0859 1572  Cpqarray - ok
17:11:46.0890 1572  [ 0A9CF5D3CF63A8699F28C814EF821C7E ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
17:11:47.0078 1572  CryptSvc - ok
17:11:47.0078 1572  dac2w2k - ok
17:11:47.0093 1572  dac960nt - ok
17:11:47.0156 1572  [ D9883335CC1C17AFC3A09C8AC3E4DBE4 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
17:11:47.0187 1572  DcomLaunch - ok
17:11:47.0218 1572  [ 146AB038F5DBB366122D28444999AB2C ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
17:11:47.0390 1572  Dhcp - ok
17:11:47.0390 1572  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
17:11:47.0593 1572  Disk - ok
17:11:47.0593 1572  dmadmin - ok
17:11:47.0656 1572  [ DEC123E0C75971D0CC7A6C6A75E28429 ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
17:11:47.0875 1572  dmboot - ok
17:11:47.0906 1572  [ 7268E66259722F6228C730685B201092 ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
17:11:48.0093 1572  dmio - ok
17:11:48.0125 1572  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
17:11:48.0296 1572  dmload - ok
17:11:48.0328 1572  [ 127DB74184E2D3D31655DA525A5EFDE1 ] dmserver        C:\WINDOWS\System32\dmserver.dll
17:11:48.0484 1572  dmserver - ok
17:11:48.0531 1572  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
17:11:48.0687 1572  DMusic - ok
17:11:48.0750 1572  [ DE6CDB6CBC5C27B9085CFA6DFE8E5025 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
17:11:48.0765 1572  Dnscache - ok
17:11:48.0812 1572  [ 90EE765E1A598B578852901F74F914F1 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
17:11:49.0000 1572  Dot3svc - ok
17:11:49.0000 1572  dpti2o - ok
17:11:49.0015 1572  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
17:11:49.0187 1572  drmkaud - ok
17:11:49.0218 1572  [ E6BBDEBF7081899D161C773E8D84D015 ] EapHost         C:\WINDOWS\System32\eapsvc.dll
17:11:49.0406 1572  EapHost - ok
17:11:49.0437 1572  [ 2F5C7F650B7AF178988946EE4B0D9C01 ] ERSvc           C:\WINDOWS\System32\ersvc.dll
17:11:49.0609 1572  ERSvc - ok
17:11:49.0640 1572  esgiguard - ok
17:11:49.0687 1572  [ 01CE484FF6D70A39479BC6D619DE7ED6 ] EsgScanner      C:\WINDOWS\system32\DRIVERS\EsgScanner.sys
17:11:49.0703 1572  EsgScanner - ok
17:11:49.0750 1572  [ C00BBCAEDCC2A3503D0FC27DD96D97C8 ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae.sys
17:11:49.0765 1572  ESProtectionDriver - ok
17:11:49.0812 1572  [ 657B69389B893F440B07590C9E963F23 ] Eventlog        C:\WINDOWS\system32\services.exe
17:11:49.0843 1572  Eventlog - ok
17:11:49.0906 1572  [ 97912DC0679D2DA60CCE589BBC196D72 ] EventSystem     C:\WINDOWS\system32\es.dll
17:11:49.0953 1572  EventSystem - ok
17:11:50.0000 1572  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
17:11:50.0187 1572  Fastfat - ok
17:11:50.0234 1572  [ 2D5D4156292150FE571872C1B88E9299 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
17:11:50.0265 1572  FastUserSwitchingCompatibility - ok
17:11:50.0281 1572  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\DRIVERS\fdc.sys
17:11:50.0468 1572  Fdc - ok
17:11:50.0500 1572  [ 8BFFFB5AC954E19DFDB96D56512AA518 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
17:11:50.0687 1572  Fips - ok
17:11:50.0718 1572  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
17:11:50.0906 1572  Flpydisk - ok
17:11:50.0921 1572  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
17:11:51.0093 1572  FltMgr - ok
17:11:51.0109 1572  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:11:51.0281 1572  Fs_Rec - ok
17:11:51.0296 1572  [ FA8CA22E70245C81FF29C36AF56292FC ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:11:51.0468 1572  Ftdisk - ok
17:11:51.0484 1572  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:11:51.0671 1572  Gpc - ok
17:11:51.0734 1572  [ 0545A3EB959CFA4790D267BFB8C1ACA4 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
17:11:51.0765 1572  gupdate - ok
17:11:51.0765 1572  [ 0545A3EB959CFA4790D267BFB8C1ACA4 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
17:11:51.0796 1572  gupdatem - ok
17:11:51.0859 1572  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
17:11:52.0015 1572  HDAudBus - ok
17:11:52.0062 1572  [ 5327BAD9B35C33D2A64B64E4CF282ECD ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
17:11:52.0218 1572  helpsvc - ok
17:11:52.0250 1572  [ 10003105AAB8D5A7DB51A9CB3D9F55A3 ] HidServ         C:\WINDOWS\System32\hidserv.dll
17:11:52.0437 1572  HidServ - ok
17:11:52.0468 1572  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
17:11:52.0640 1572  hidusb - ok
17:11:52.0671 1572  [ 1FF903FFA2DA1704E5A5443D37D8E49E ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
17:11:52.0843 1572  hkmsvc - ok
17:11:52.0859 1572  hpn - ok
17:11:52.0890 1572  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
17:11:52.0921 1572  HTTP - ok
17:11:52.0968 1572  [ 2529C7BA05242BEED0027F554D0513BB ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
17:11:53.0156 1572  HTTPFilter - ok
17:11:53.0156 1572  i2omp - ok
17:11:53.0187 1572  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
17:11:53.0375 1572  Imapi - ok
17:11:53.0421 1572  [ A117772F94C854DE5D1BBC1F1962B192 ] ImapiService    C:\WINDOWS\system32\imapi.exe
17:11:53.0593 1572  ImapiService - ok
17:11:53.0609 1572  ini910u - ok
17:11:53.0718 1572  [ B2B7AF5DC5E1B6B171DFDA681D105C7C ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
17:11:53.0843 1572  IntcAzAudAddService - ok
17:11:53.0875 1572  [ 72C63AD984D427D34BD5B9DB838D88EB ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
17:11:54.0062 1572  IntelIde - ok
17:11:54.0109 1572  [ 2D2254FAC267E6B1C7865E8EBEF60C6D ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:11:54.0281 1572  intelppm - ok
17:11:54.0312 1572  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
17:11:54.0484 1572  Ip6Fw - ok
17:11:54.0531 1572  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:11:54.0703 1572  IpFilterDriver - ok
17:11:54.0734 1572  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:11:54.0906 1572  IpInIp - ok
17:11:54.0937 1572  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:11:55.0125 1572  IpNat - ok
17:11:55.0140 1572  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:11:55.0312 1572  IPSec - ok
17:11:55.0343 1572  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
17:11:55.0453 1572  IRENUM - ok
17:11:55.0468 1572  [ 0B78E1A31340E1FB1E389D5633F7C3A0 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:11:55.0640 1572  isapnp - ok
17:11:55.0703 1572  [ 380397621E94B32C744E7B2CC1330390 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:11:55.0921 1572  Kbdclass - ok
17:11:55.0953 1572  [ B833B70FE639F01FB36CEDABE57EF031 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
17:11:56.0125 1572  kbdhid - ok
17:11:56.0156 1572  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
17:11:56.0328 1572  kmixer - ok
17:11:56.0343 1572  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
17:11:56.0390 1572  KSecDD - ok
17:11:56.0421 1572  [ C7955E7EDAEA462D04F1C4BE1D340372 ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
17:11:56.0453 1572  LanmanServer - ok
17:11:56.0500 1572  [ A936A575EAF6DCE8DC08BC0C53972ADD ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
17:11:56.0531 1572  lanmanworkstation - ok
17:11:56.0578 1572  [ 91AE20C5C2776C511994AA1308C05283 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
17:11:56.0750 1572  LmHosts - ok
17:11:56.0812 1572  [ 7EB1F631B98A52C1140DB23B25580D95 ] MBAMChameleon   C:\WINDOWS\system32\drivers\MBAMChameleon.sys
17:11:56.0828 1572  MBAMChameleon - ok
17:11:56.0859 1572  [ EA8012B28C87359AB0AB89FF057DB168 ] MBAMProtection  C:\WINDOWS\system32\drivers\mbam.sys
17:11:56.0890 1572  MBAMProtection - ok
17:11:57.0046 1572  [ F168D9361CE59D0A2D11E173A5CC1B9F ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
17:11:57.0203 1572  MBAMService - ok
17:11:57.0250 1572  [ B72EBB5C4727E67BAFDBC7FEA5A8D49F ] MBAMSwissArmy   C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
17:11:57.0281 1572  MBAMSwissArmy - ok
17:11:57.0312 1572  [ C56A45A03DCA11712DE9FDF98224230B ] Messenger       C:\WINDOWS\System32\msgsvc.dll
17:11:57.0500 1572  Messenger - ok
17:11:57.0546 1572  [ 13729C5318EDBCD5E31B4F5020602E42 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
17:11:57.0562 1572  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - warning
17:11:57.0562 1572  Microsoft Office Groove Audit Service - detected UnsignedFile.Multi.Generic (1)
17:11:57.0609 1572  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
17:11:57.0796 1572  mnmdd - ok
17:11:57.0843 1572  [ 5B1D994DCF1895AFA27600E46A2F0FEA ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
17:11:58.0031 1572  mnmsrvc - ok
17:11:58.0046 1572  [ 8114EEAC353F549331AB73E9AF4219ED ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
17:11:58.0234 1572  Modem - ok
17:11:58.0265 1572  [ 1A4E2214DD63E4A876463D3427EE8261 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:11:58.0453 1572  Mouclass - ok
17:11:58.0500 1572  [ 18017899254E01371E1A39754D6BF98C ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
17:11:58.0671 1572  mouhid - ok
17:11:58.0703 1572  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
17:11:58.0875 1572  MountMgr - ok
17:11:58.0890 1572  mraid35x - ok
17:11:58.0906 1572  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:11:59.0109 1572  MRxDAV - ok
17:11:59.0171 1572  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:11:59.0203 1572  MRxSmb - ok
17:11:59.0234 1572  [ 21EA21984D7D1AD50DB2E627020AB14C ] MSDTC           C:\WINDOWS\system32\msdtc.exe
17:11:59.0359 1572  MSDTC - ok
17:11:59.0375 1572  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
17:11:59.0546 1572  Msfs - ok
17:11:59.0562 1572  MSIServer - ok
17:11:59.0609 1572  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:11:59.0812 1572  MSKSSRV - ok
17:11:59.0828 1572  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:12:00.0000 1572  MSPCLOCK - ok
17:12:00.0000 1572  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
17:12:00.0171 1572  MSPQM - ok
17:12:00.0218 1572  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:12:00.0375 1572  mssmbios - ok
17:12:00.0406 1572  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
17:12:00.0421 1572  Mup - ok
17:12:00.0453 1572  [ 87E394C810794D3C70CF22E8316CB23E ] napagent        C:\WINDOWS\System32\qagentrt.dll
17:12:00.0625 1572  napagent - ok
17:12:00.0656 1572  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
17:12:00.0828 1572  NDIS - ok
17:12:00.0875 1572  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:12:00.0906 1572  NdisTapi - ok
17:12:00.0953 1572  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:12:01.0125 1572  Ndisuio - ok
17:12:01.0140 1572  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:12:01.0328 1572  NdisWan - ok
17:12:01.0359 1572  [ 2F597BB467E05B1FE3830EABD821B8E0 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
17:12:01.0390 1572  NDProxy - ok
17:12:01.0406 1572  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
17:12:01.0578 1572  NetBIOS - ok
17:12:01.0609 1572  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
17:12:01.0796 1572  NetBT - ok
17:12:01.0828 1572  [ DC6BAE085E9B3C2F3A963ED46791FEAB ] NetDDE          C:\WINDOWS\system32\netdde.exe
17:12:01.0984 1572  NetDDE - ok
17:12:02.0015 1572  [ DC6BAE085E9B3C2F3A963ED46791FEAB ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
17:12:02.0187 1572  NetDDEdsdm - ok
17:12:02.0218 1572  [ 8754210A3399D19610CE2D71E0C3E5D9 ] Netlogon        C:\WINDOWS\system32\lsass.exe
17:12:02.0390 1572  Netlogon - ok
17:12:02.0437 1572  [ 5431FB616ECAE0D587C5B97D0B86CBD8 ] Netman          C:\WINDOWS\System32\netman.dll
17:12:02.0625 1572  Netman - ok
17:12:02.0671 1572  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:12:02.0703 1572  NetTcpPortSharing - ok
17:12:02.0718 1572  [ 4522CBE00A9E9EEE36AA82ED4B319148 ] Nla             C:\WINDOWS\System32\mswsock.dll
17:12:02.0750 1572  Nla - ok
17:12:02.0796 1572  [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm              C:\WINDOWS\system32\DRIVERS\NMnt.sys
17:12:02.0953 1572  nm - ok
17:12:02.0953 1572  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
17:12:03.0125 1572  Npfs - ok
17:12:03.0171 1572  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
17:12:03.0359 1572  Ntfs - ok
17:12:03.0375 1572  [ 8754210A3399D19610CE2D71E0C3E5D9 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
17:12:03.0546 1572  NtLmSsp - ok
17:12:03.0578 1572  [ AC1A78237B53044735693633F8235468 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
17:12:03.0765 1572  NtmsSvc - ok
17:12:03.0796 1572  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
17:12:03.0968 1572  Null - ok
17:12:04.0406 1572  [ 7C56F3FD65B2BDB315CA3605A5392D7B ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
17:12:04.0984 1572  nv - ok
17:12:05.0015 1572  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:12:05.0187 1572  NwlnkFlt - ok
17:12:05.0187 1572  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:12:05.0375 1572  NwlnkFwd - ok
17:12:05.0421 1572  [ 8B8B1BE2DBA4025DA6786C645F77F123 ] NwlnkIpx        C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
17:12:05.0625 1572  NwlnkIpx - ok
17:12:05.0625 1572  [ 56D34A67C05E94E16377C60609741FF8 ] NwlnkNb         C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
17:12:05.0843 1572  NwlnkNb - ok
17:12:05.0875 1572  [ C0BB7D1615E1ACBDC99757F6CEAF8CF0 ] NwlnkSpx        C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
17:12:06.0015 1572  NwlnkSpx - ok
17:12:06.0125 1572  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:12:06.0156 1572  odserv - ok
17:12:06.0171 1572  [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
17:12:06.0359 1572  ohci1394 - ok
17:12:06.0406 1572  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:12:06.0421 1572  ose - ok
17:12:06.0437 1572  [ E3934CCC20A4D24F1924E13D36D2A5BD ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
17:12:06.0609 1572  Parport - ok
17:12:06.0640 1572  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
17:12:06.0843 1572  PartMgr - ok
17:12:06.0890 1572  [ 1EADE28746A64C21E0A808BB12A63326 ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
17:12:07.0046 1572  ParVdm - ok
17:12:07.0062 1572  [ 3B166F9F753C21AEDAA9A6BD76B49655 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
17:12:07.0218 1572  PCI - ok
17:12:07.0234 1572  [ B31EDEBA4DA28283F6B8DC4756FB9585 ] PCIIde          C:\WINDOWS\system32\drivers\PCIIde.sys
17:12:07.0390 1572  PCIIde - ok
17:12:07.0406 1572  [ 2137FFD65F8E609A3A5ACD487C56CCE0 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
17:12:07.0562 1572  Pcmcia - ok
17:12:07.0578 1572  perc2 - ok
17:12:07.0578 1572  perc2hib - ok
17:12:07.0640 1572  [ 657B69389B893F440B07590C9E963F23 ] PlugPlay        C:\WINDOWS\system32\services.exe
17:12:07.0671 1572  PlugPlay - ok
17:12:07.0671 1572  [ 8754210A3399D19610CE2D71E0C3E5D9 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
17:12:07.0843 1572  PolicyAgent - ok
17:12:07.0875 1572  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:12:08.0046 1572  PptpMiniport - ok
17:12:08.0062 1572  [ 8754210A3399D19610CE2D71E0C3E5D9 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
17:12:08.0234 1572  ProtectedStorage - ok
17:12:08.0250 1572  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
17:12:08.0437 1572  PSched - ok
17:12:08.0437 1572  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:12:08.0609 1572  Ptilink - ok
17:12:08.0625 1572  ql1080 - ok
17:12:08.0625 1572  Ql10wnt - ok
17:12:08.0640 1572  ql12160 - ok
17:12:08.0656 1572  ql1240 - ok
17:12:08.0656 1572  ql1280 - ok
17:12:08.0687 1572  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:12:08.0859 1572  RasAcd - ok
17:12:08.0890 1572  [ 0575D034B1292CA3A9BB9F67A8EE289C ] RasAuto         C:\WINDOWS\System32\rasauto.dll
17:12:09.0078 1572  RasAuto - ok
17:12:09.0109 1572  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:12:09.0296 1572  Rasl2tp - ok
17:12:09.0328 1572  [ 9E7E2DF6971A5F00102BE3F901CC3BDC ] RasMan          C:\WINDOWS\System32\rasmans.dll
17:12:09.0484 1572  RasMan - ok
17:12:09.0500 1572  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:12:09.0671 1572  RasPppoe - ok
17:12:09.0687 1572  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
17:12:09.0828 1572  Raspti - ok
17:12:09.0875 1572  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:12:10.0031 1572  Rdbss - ok
17:12:10.0062 1572  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:12:10.0234 1572  RDPCDD - ok
17:12:10.0265 1572  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
17:12:10.0312 1572  RDPWD - ok
17:12:10.0359 1572  [ EA9FDF71D696B532BDC44C8BFF03A737 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
17:12:10.0531 1572  RDSessMgr - ok
17:12:10.0546 1572  [ 4173BC66E485FD77A03C4819F60BD0DA ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
17:12:10.0703 1572  redbook - ok
17:12:10.0734 1572  [ 4007ABF5D9BF0E55451D775443D1F985 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
17:12:10.0890 1572  RemoteAccess - ok
17:12:10.0906 1572  [ BE078F8F7EC2491EFDD79A53353A060F ] RpcLocator      C:\WINDOWS\system32\locator.exe
17:12:11.0062 1572  RpcLocator - ok
17:12:11.0125 1572  [ D9883335CC1C17AFC3A09C8AC3E4DBE4 ] RpcSs           C:\WINDOWS\System32\rpcss.dll
17:12:11.0156 1572  RpcSs - ok
17:12:11.0203 1572  [ AD1B5F1B99FFF08C99F443D784711A81 ] RSVP            C:\WINDOWS\system32\rsvp.exe
17:12:11.0359 1572  RSVP - ok
17:12:11.0390 1572  [ D507C1400284176573224903819FFDA3 ] rtl8139         C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
17:12:11.0562 1572  rtl8139 - ok
17:12:11.0578 1572  [ 8754210A3399D19610CE2D71E0C3E5D9 ] SamSs           C:\WINDOWS\system32\lsass.exe
17:12:11.0750 1572  SamSs - ok
17:12:11.0765 1572  [ 1B4CD62174E907C7EF8EC5D4D0A2A616 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
17:12:11.0953 1572  SCardSvr - ok
17:12:12.0015 1572  [ 7C288AE0F75CB18CFF1DF6179A67AD8F ] Schedule        C:\WINDOWS\system32\schedsvc.dll
17:12:12.0203 1572  Schedule - ok
17:12:12.0234 1572  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:12:12.0328 1572  Secdrv - ok
17:12:12.0375 1572  [ 6983665BEA867125B1DA5757CD8B2F9D ] seclogon        C:\WINDOWS\System32\seclogon.dll
17:12:12.0546 1572  seclogon - ok
17:12:12.0562 1572  [ F6EC8F1E50E40237BDDEE1CB7FE20B42 ] SENS            C:\WINDOWS\system32\sens.dll
17:12:12.0734 1572  SENS - ok
17:12:12.0750 1572  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
17:12:12.0906 1572  serenum - ok
17:12:12.0921 1572  [ 92C21762653BB2CE51147EB8A9AA654F ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
17:12:13.0093 1572  Serial - ok
17:12:13.0125 1572  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
17:12:13.0296 1572  Sfloppy - ok
17:12:13.0359 1572  [ 7579C4BE909D47F10F3D8D801CB13ED9 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
17:12:13.0531 1572  SharedAccess - ok
17:12:13.0562 1572  [ 2D5D4156292150FE571872C1B88E9299 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
17:12:13.0578 1572  ShellHWDetection - ok
17:12:13.0593 1572  Simbad - ok
17:12:13.0609 1572  Sparrow - ok
17:12:13.0656 1572  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
17:12:13.0828 1572  splitter - ok
17:12:13.0859 1572  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
17:12:13.0890 1572  Spooler - ok
17:12:13.0890 1572  SpyHunter 4 Service - ok
17:12:13.0921 1572  [ 64D2A7640E0767ECD3BCB38D3200E7CE ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
17:12:14.0000 1572  sr - ok
17:12:14.0015 1572  [ 81CBF363C414620CAA61BD6843D8FDB9 ] srservice       C:\WINDOWS\system32\srsvc.dll
17:12:14.0125 1572  srservice - ok
17:12:14.0187 1572  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
17:12:14.0218 1572  Srv - ok
17:12:14.0265 1572  [ 5B9D0DE64BE96A806819516440FD211C ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
17:12:14.0343 1572  SSDPSRV - ok
17:12:14.0406 1572  [ 5AE996186D2DC694FEF88F14A3FC9242 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
17:12:14.0609 1572  stisvc - ok
17:12:14.0625 1572  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
17:12:14.0812 1572  swenum - ok
17:12:14.0812 1572  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
17:12:15.0000 1572  swmidi - ok
17:12:15.0015 1572  SwPrv - ok
17:12:15.0031 1572  symc810 - ok
17:12:15.0031 1572  symc8xx - ok
17:12:15.0046 1572  sym_hi - ok
17:12:15.0062 1572  sym_u3 - ok
17:12:15.0078 1572  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
17:12:15.0265 1572  sysaudio - ok
17:12:15.0296 1572  [ 251EAE7C56C6AB9490311A3C9757E18D ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
17:12:15.0468 1572  SysmonLog - ok
17:12:15.0500 1572  [ 2BC9FB448F0C2394FF53C83A7BB04731 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
17:12:15.0687 1572  TapiSrv - ok
17:12:15.0750 1572  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:12:15.0796 1572  Tcpip - ok
17:12:15.0843 1572  [ 4E53BBCC4BE37D7A4BD6EF1098C89FF7 ] Tcpip6          C:\WINDOWS\system32\DRIVERS\tcpip6.sys
17:12:15.0890 1572  Tcpip6 - ok
17:12:15.0921 1572  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
17:12:16.0109 1572  TDPIPE - ok
17:12:16.0140 1572  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
17:12:16.0296 1572  TDTCP - ok
17:12:16.0750 1572  [ 250B2B5807E2B0642A3E665F692F1811 ] TeamViewer      C:\Program Files\TeamViewer\TeamViewer_Service.exe
17:12:17.0234 1572  TeamViewer - ok
17:12:17.0296 1572  [ 9101FFFCFCCD1A30E870A5B8A9091B10 ] teamviewervpn   C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys
17:12:17.0328 1572  teamviewervpn - ok
17:12:17.0359 1572  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
17:12:17.0515 1572  TermDD - ok
17:12:17.0562 1572  [ E0AEF86A594C9990D6321C5CA239C5B7 ] TermService     C:\WINDOWS\System32\termsrv.dll
17:12:17.0734 1572  TermService - ok
17:12:17.0765 1572  [ 2D5D4156292150FE571872C1B88E9299 ] Themes          C:\WINDOWS\System32\shsvcs.dll
17:12:17.0781 1572  Themes - ok
17:12:17.0796 1572  TosIde - ok
17:12:17.0828 1572  [ 20655E8CA1C78BC7088B18E93806D21B ] TrkWks          C:\WINDOWS\system32\trkwks.dll
17:12:18.0015 1572  TrkWks - ok
17:12:18.0062 1572  [ 8F861EDA21C05857EB8197300A92501C ] tunmp           C:\WINDOWS\system32\DRIVERS\tunmp.sys
17:12:18.0234 1572  tunmp - ok
17:12:18.0265 1572  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
17:12:18.0453 1572  Udfs - ok
17:12:18.0468 1572  ultra - ok
17:12:18.0515 1572  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
17:12:18.0687 1572  Update - ok
17:12:18.0718 1572  [ 01653D6C9604F1FB31A76EC94E08954F ] upnphost        C:\WINDOWS\System32\upnphost.dll
17:12:18.0843 1572  upnphost - ok
17:12:18.0859 1572  [ A89796DD0DE24CF03B3A39407E1F46A3 ] UPS             C:\WINDOWS\System32\ups.exe
17:12:19.0031 1572  UPS - ok
17:12:19.0062 1572  [ 1B611611C28D2DF25BC057D79C6F13FC ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
17:12:19.0093 1572  usbccgp - ok
17:12:19.0156 1572  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:12:19.0312 1572  usbhub - ok
17:12:19.0312 1572  [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:12:19.0500 1572  usbstor - ok
17:12:19.0515 1572  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:12:19.0718 1572  usbuhci - ok
17:12:19.0734 1572  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
17:12:19.0890 1572  VgaSave - ok
17:12:19.0890 1572  ViaIde - ok
17:12:19.0921 1572  [ 8AB662B3C4691E6DDF61C96BB5B7D103 ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
17:12:20.0078 1572  VolSnap - ok
17:12:20.0125 1572  [ A585EDD6965B301DE8A45C6768C7C215 ] VSS             C:\WINDOWS\System32\vssvc.exe
17:12:20.0234 1572  VSS - ok
17:12:20.0281 1572  [ 390D8E65F362327AD510B08971478301 ] W32Time         C:\WINDOWS\system32\w32time.dll
17:12:20.0437 1572  W32Time - ok
17:12:20.0468 1572  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:12:20.0625 1572  Wanarp - ok
17:12:20.0656 1572  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
17:12:20.0843 1572  wdmaud - ok
17:12:20.0875 1572  [ 33D8E2812054D97A0AEC9B8F04277927 ] WebClient       C:\WINDOWS\System32\webclnt.dll
17:12:21.0078 1572  WebClient - ok
17:12:21.0171 1572  [ F9E105F369C18E4001E0C05AAF600D73 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
17:12:21.0343 1572  winmgmt - ok
17:12:21.0390 1572  [ 2628076412EC86C92827AE5202501E5D ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
17:12:21.0562 1572  WmdmPmSN - ok
17:12:21.0609 1572  [ 87F11D161207C7063EDABAC0AADC33C3 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
17:12:21.0796 1572  WmiApSrv - ok
17:12:21.0890 1572  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:12:21.0937 1572  WPFFontCache_v0400 - ok
17:12:21.0984 1572  [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL         C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:12:22.0156 1572  WS2IFSL - ok
17:12:22.0203 1572  [ 843F7FA8EA38E6A4262976DCC994C81A ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
17:12:22.0375 1572  wscsvc - ok
17:12:22.0421 1572  [ 1E8FDDDEF3FE260BADAB06DAE10D753A ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
17:12:22.0593 1572  wuauserv - ok
17:12:22.0640 1572  [ E99782DBB8FFA2AEE72B31DAC8D8D887 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
17:12:22.0843 1572  WZCSVC - ok
17:12:22.0875 1572  [ FD3C38635808920F8235BF2FED642F54 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
17:12:23.0046 1572  xmlprov - ok
17:12:23.0046 1572  ================ Scan global ===============================
17:12:23.0093 1572  [ 953AD498333B03F7CE547151F96EF241 ] C:\WINDOWS\system32\basesrv.dll
17:12:23.0140 1572  [ 6D43938F4980D62E091AE2F755FC259B ] C:\WINDOWS\system32\winsrv.dll
17:12:23.0171 1572  [ 6D43938F4980D62E091AE2F755FC259B ] C:\WINDOWS\system32\winsrv.dll
17:12:23.0187 1572  [ 657B69389B893F440B07590C9E963F23 ] C:\WINDOWS\system32\services.exe
17:12:23.0187 1572  [Global] - ok
17:12:23.0187 1572  ================ Scan MBR ==================================
17:12:23.0203 1572  [ 3051207086651214E435112E51817DC5 ] \Device\Harddisk0\DR0
17:12:23.0531 1572  \Device\Harddisk0\DR0 - ok
17:12:23.0546 1572  ================ Scan VBR ==================================
17:12:23.0562 1572  [ 4C55AA30E7A6AD579D904BD27FED71B0 ] \Device\Harddisk0\DR0\Partition1
17:12:23.0562 1572  \Device\Harddisk0\DR0\Partition1 - ok
17:12:23.0562 1572  ============================================================
17:12:23.0562 1572  Scan finished
17:12:23.0562 1572  ============================================================
17:12:23.0593 0608  Detected object count: 1
17:12:23.0593 0608  Actual detected object count: 1
17:12:40.0234 0608  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:40.0234 0608  Microsoft Office Groove Audit Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:13:50.0734 3348  Deinitialize success