Traag opstarten Windows 7 (32 bits) en geen systeemherstel mogelijk

[e.vandeklift]

Wederom eerst problemen met het opstarten. Een paar keer moeten herstarten. Geen internetverbinding, geen buro blad e.d.

Daarna TDSS killer laten scannen. Dit gaf een thread.

Hieronder het logbestand. Overigens hoefde ik niet opnieuw op te starten(reboot)

14:15:51.0191 5104 TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30

14:15:52.0365 5104 ============================================================

14:15:52.0365 5104 Current date / time: 2012/05/27 14:15:52.0365

14:15:52.0365 5104 SystemInfo:

14:15:52.0365 5104

14:15:52.0365 5104 OS Version: 6.1.7601 ServicePack: 1.0

14:15:52.0365 5104 Product type: Workstation

14:15:52.0365 5104 ComputerName: RINA-PC

14:15:52.0366 5104 UserName: Rina

14:15:52.0366 5104 Windows directory: C:\Windows

14:15:52.0366 5104 System windows directory: C:\Windows

14:15:52.0366 5104 Processor architecture: Intel x86

14:15:52.0366 5104 Number of processors: 2

14:15:52.0366 5104 Page size: 0x1000

14:15:52.0366 5104 Boot type: Normal boot

14:15:52.0366 5104 ============================================================

14:15:55.0562 5104 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

14:15:55.0582 5104 ============================================================

14:15:55.0583 5104 \Device\Harddisk0\DR0:

14:15:55.0583 5104 MBR partitions:

14:15:55.0583 5104 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x22CA4800

14:15:55.0583 5104 \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x22CA5000, BlocksNum 0x2789000

14:15:55.0583 5104 ============================================================

14:15:55.0734 5104 C: <-> \Device\Harddisk0\DR0\Partition0

14:15:55.0890 5104 D: <-> \Device\Harddisk0\DR0\Partition1

14:15:55.0890 5104 ============================================================

14:15:55.0890 5104 Initialize success

14:15:55.0890 5104 ============================================================

14:16:03.0911 5288 ============================================================

14:16:03.0911 5288 Scan started

14:16:03.0911 5288 Mode: Manual;

14:16:03.0911 5288 ============================================================

14:16:06.0170 5288 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys

14:16:06.0231 5288 1394ohci - ok

14:16:06.0290 5288 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys

14:16:06.0293 5288 ACPI - ok

14:16:06.0308 5288 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys

14:16:06.0364 5288 AcpiPmi - ok

14:16:06.0616 5288 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

14:16:06.0679 5288 AdobeARMservice - ok

14:16:06.0845 5288 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

14:16:06.0914 5288 AdobeFlashPlayerUpdateSvc - ok

14:16:06.0973 5288 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\drivers\adp94xx.sys

14:16:07.0018 5288 adp94xx - ok

14:16:07.0109 5288 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\drivers\adpahci.sys

14:16:07.0123 5288 adpahci - ok

14:16:07.0149 5288 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\drivers\adpu320.sys

14:16:07.0158 5288 adpu320 - ok

14:16:07.0192 5288 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll

14:16:07.0197 5288 AeLookupSvc - ok

14:16:07.0253 5288 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys

14:16:07.0392 5288 AFD - ok

14:16:07.0467 5288 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys

14:16:07.0473 5288 agp440 - ok

14:16:07.0511 5288 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\drivers\djsvs.sys

14:16:07.0514 5288 aic78xx - ok

14:16:07.0541 5288 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe

14:16:07.0547 5288 ALG - ok

14:16:07.0567 5288 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys

14:16:07.0573 5288 aliide - ok

14:16:07.0596 5288 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys

14:16:07.0602 5288 amdagp - ok

14:16:07.0634 5288 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys

14:16:07.0637 5288 amdide - ok

14:16:07.0653 5288 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\drivers\amdk8.sys

14:16:07.0656 5288 AmdK8 - ok

14:16:07.0677 5288 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\drivers\amdppm.sys

14:16:07.0685 5288 AmdPPM - ok

14:16:07.0767 5288 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys

14:16:07.0882 5288 amdsata - ok

14:16:08.0062 5288 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\drivers\amdsbs.sys

14:16:08.0114 5288 amdsbs - ok

14:16:08.0133 5288 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys

14:16:08.0247 5288 amdxata - ok

14:16:08.0290 5288 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys

14:16:08.0401 5288 AppID - ok

14:16:08.0471 5288 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll

14:16:08.0474 5288 AppIDSvc - ok

14:16:08.0502 5288 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll

14:16:08.0503 5288 Appinfo - ok

14:16:08.0557 5288 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll

14:16:08.0609 5288 AppMgmt - ok

14:16:08.0634 5288 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\drivers\arc.sys

14:16:08.0638 5288 arc - ok

14:16:08.0653 5288 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\drivers\arcsas.sys

14:16:08.0660 5288 arcsas - ok

14:16:08.0681 5288 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys

14:16:08.0721 5288 AsyncMac - ok

14:16:08.0752 5288 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys

14:16:08.0753 5288 atapi - ok

14:16:08.0825 5288 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

14:16:08.0872 5288 AudioEndpointBuilder - ok

14:16:08.0881 5288 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

14:16:08.0885 5288 Audiosrv - ok

14:16:08.0907 5288 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll

14:16:08.0953 5288 AxInstSV - ok

14:16:09.0000 5288 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\drivers\bxvbdx.sys

14:16:09.0022 5288 b06bdrv - ok

14:16:09.0048 5288 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys

14:16:09.0062 5288 b57nd60x - ok

14:16:09.0087 5288 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll

14:16:09.0093 5288 BDESVC - ok

14:16:09.0104 5288 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys

14:16:09.0107 5288 Beep - ok

14:16:09.0149 5288 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll

14:16:09.0207 5288 BFE - ok

14:16:09.0270 5288 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\system32\qmgr.dll

14:16:09.0336 5288 BITS - ok

14:16:09.0351 5288 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys

14:16:09.0361 5288 blbdrive - ok

14:16:09.0412 5288 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys

14:16:09.0471 5288 bowser - ok

14:16:09.0489 5288 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\BrFiltLo.sys

14:16:09.0494 5288 BrFiltLo - ok

14:16:09.0498 5288 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\BrFiltUp.sys

14:16:09.0503 5288 BrFiltUp - ok

14:16:09.0551 5288 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys

14:16:09.0557 5288 BridgeMP - ok

14:16:09.0587 5288 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll

14:16:09.0631 5288 Browser - ok

14:16:09.0721 5288 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys

14:16:09.0728 5288 Brserid - ok

14:16:09.0735 5288 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys

14:16:09.0740 5288 BrSerWdm - ok

14:16:09.0767 5288 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys

14:16:09.0770 5288 BrUsbMdm - ok

14:16:09.0774 5288 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys

14:16:09.0780 5288 BrUsbSer - ok

14:16:09.0839 5288 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\DRIVERS\BthEnum.sys

14:16:09.0843 5288 BthEnum - ok

14:16:09.0871 5288 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\drivers\bthmodem.sys

14:16:09.0877 5288 BTHMODEM - ok

14:16:09.0917 5288 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys

14:16:09.0918 5288 BthPan - ok

14:16:10.0016 5288 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\system32\Drivers\BTHport.sys

14:16:10.0096 5288 BTHPORT - ok

14:16:10.0129 5288 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll

14:16:10.0130 5288 bthserv - ok

14:16:10.0167 5288 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\system32\Drivers\BTHUSB.sys

14:16:10.0280 5288 BTHUSB - ok

14:16:10.0530 5288 catchme - ok

14:16:10.0891 5288 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys

14:16:11.0007 5288 cdfs - ok

14:16:11.0245 5288 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys

14:16:11.0301 5288 cdrom - ok

14:16:11.0344 5288 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

14:16:11.0389 5288 CertPropSvc - ok

14:16:11.0442 5288 cfwids (1c7b1e36f3ced9e4b0b13385e627fe8b) C:\Windows\system32\drivers\cfwids.sys

14:16:11.0504 5288 cfwids - ok

14:16:11.0529 5288 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\drivers\circlass.sys

14:16:11.0534 5288 circlass - ok

14:16:11.0584 5288 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys

14:16:11.0590 5288 CLFS - ok

14:16:11.0762 5288 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:16:11.0767 5288 clr_optimization_v2.0.50727_32 - ok

14:16:11.0905 5288 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:16:11.0984 5288 clr_optimization_v4.0.30319_32 - ok

14:16:12.0013 5288 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys

14:16:12.0016 5288 CmBatt - ok

14:16:12.0037 5288 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys

14:16:12.0040 5288 cmdide - ok

14:16:12.0119 5288 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys

14:16:12.0206 5288 CNG - ok

14:16:12.0249 5288 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys

14:16:12.0252 5288 Compbatt - ok

14:16:12.0265 5288 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\DRIVERS\CompositeBus.sys

14:16:12.0320 5288 CompositeBus - ok

14:16:12.0325 5288 COMSysApp - ok

14:16:12.0373 5288 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\drivers\crcdisk.sys

14:16:12.0378 5288 crcdisk - ok

14:16:12.0427 5288 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll

14:16:12.0476 5288 CryptSvc - ok

14:16:12.0557 5288 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys

14:16:12.0658 5288 CSC - ok

14:16:12.0777 5288 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll

14:16:12.0781 5288 CscService - ok

14:16:12.0844 5288 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

14:16:12.0849 5288 DcomLaunch - ok

14:16:12.0922 5288 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll

14:16:12.0940 5288 defragsvc - ok

14:16:13.0025 5288 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys

14:16:13.0081 5288 DfsC - ok

14:16:13.0123 5288 dg_ssudbus (919f338fd36f47d860775368d0748780) C:\Windows\system32\DRIVERS\ssudbus.sys

14:16:13.0226 5288 dg_ssudbus - ok

14:16:13.0332 5288 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll

14:16:13.0335 5288 Dhcp - ok

14:16:13.0371 5288 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys

14:16:13.0380 5288 discache - ok

14:16:13.0406 5288 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\drivers\disk.sys

14:16:13.0410 5288 Disk - ok

14:16:13.0459 5288 dmvsc (2a958ef85db1b61ffca65044fa4bce9e) C:\Windows\system32\drivers\dmvsc.sys

14:16:13.0518 5288 dmvsc - ok

14:16:13.0568 5288 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll

14:16:13.0641 5288 Dnscache - ok

14:16:13.0766 5288 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll

14:16:13.0823 5288 dot3svc - ok

14:16:13.0867 5288 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll

14:16:13.0869 5288 DPS - ok

14:16:13.0917 5288 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys

14:16:13.0925 5288 drmkaud - ok

14:16:13.0999 5288 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys

14:16:14.0077 5288 DXGKrnl - ok

14:16:14.0113 5288 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll

14:16:14.0117 5288 EapHost - ok

14:16:14.0429 5288 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\drivers\evbdx.sys

14:16:14.0520 5288 ebdrv - ok

14:16:14.0752 5288 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe

14:16:14.0818 5288 EFS - ok

14:16:15.0357 5288 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe

14:16:15.0427 5288 ehRecvr - ok

14:16:15.0461 5288 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe

14:16:15.0468 5288 ehSched - ok

14:16:15.0618 5288 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\drivers\elxstor.sys

14:16:15.0662 5288 elxstor - ok

14:16:15.0675 5288 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys

14:16:15.0677 5288 ErrDev - ok

14:16:15.0822 5288 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll

14:16:15.0825 5288 EventSystem - ok

14:16:15.0855 5288 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys

14:16:15.0861 5288 exfat - ok

14:16:15.0895 5288 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys

14:16:15.0914 5288 fastfat - ok

14:16:15.0957 5288 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe

14:16:15.0961 5288 Fax - ok

14:16:15.0982 5288 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\drivers\fdc.sys

14:16:15.0986 5288 fdc - ok

14:16:16.0003 5288 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll

14:16:16.0004 5288 fdPHost - ok

14:16:16.0017 5288 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll

14:16:16.0020 5288 FDResPub - ok

14:16:16.0053 5288 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys

14:16:16.0059 5288 FileInfo - ok

14:16:16.0072 5288 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys

14:16:16.0079 5288 Filetrace - ok

14:16:16.0151 5288 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\drivers\flpydisk.sys

14:16:16.0156 5288 flpydisk - ok

14:16:16.0694 5288 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys

14:16:16.0744 5288 FltMgr - ok

14:16:16.0854 5288 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll

14:16:16.0861 5288 FontCache - ok

14:16:17.0069 5288 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

14:16:17.0073 5288 FontCache3.0.0.0 - ok

14:16:17.0095 5288 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys

14:16:17.0099 5288 FsDepends - ok

14:16:17.0137 5288 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys

14:16:17.0249 5288 fssfltr - ok

14:16:17.0681 5288 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

14:16:17.0821 5288 fsssvc - ok

14:16:18.0304 5288 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys

14:16:18.0360 5288 Fs_Rec - ok

14:16:18.0434 5288 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys

14:16:18.0604 5288 fvevol - ok

14:16:18.0988 5288 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\drivers\gagp30kx.sys

14:16:18.0997 5288 gagp30kx - ok

14:16:19.0087 5288 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll

14:16:19.0135 5288 gpsvc - ok

14:16:19.0306 5288 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe

14:16:19.0307 5288 gupdate - ok

14:16:19.0311 5288 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe

14:16:19.0312 5288 gupdatem - ok

14:16:19.0366 5288 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys

14:16:19.0372 5288 hcw85cir - ok

14:16:19.0428 5288 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys

14:16:19.0589 5288 HdAudAddService - ok

14:16:19.0620 5288 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\DRIVERS\HDAudBus.sys

14:16:19.0622 5288 HDAudBus - ok

14:16:19.0625 5288 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\drivers\HidBatt.sys

14:16:19.0628 5288 HidBatt - ok

14:16:19.0651 5288 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\drivers\hidbth.sys

14:16:19.0658 5288 HidBth - ok

14:16:19.0676 5288 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\drivers\hidir.sys

14:16:19.0682 5288 HidIr - ok

14:16:19.0759 5288 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\System32\hidserv.dll

14:16:19.0760 5288 hidserv - ok

14:16:19.0774 5288 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys

14:16:19.0885 5288 HidUsb - ok

14:16:19.0975 5288 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll

14:16:20.0019 5288 hkmsvc - ok

14:16:20.0046 5288 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll

14:16:20.0102 5288 HomeGroupListener - ok

14:16:20.0188 5288 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll

14:16:20.0191 5288 HomeGroupProvider - ok

14:16:20.0693 5288 hpqcxs08 (5da42d24712e00728cea2342a65009b2) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

14:16:20.0695 5288 hpqcxs08 - ok

14:16:20.0731 5288 hpqddsvc (d86a39bf100069444d026d22d9a6e555) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

14:16:20.0789 5288 hpqddsvc - ok

14:16:20.0815 5288 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys

14:16:20.0821 5288 HpSAMD - ok

14:16:20.0954 5288 HPSLPSVC (a04f4ac48895774a2cf9d1c9eaaacef0) C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

14:16:20.0961 5288 HPSLPSVC - ok

14:16:21.0033 5288 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys

14:16:21.0036 5288 HTTP - ok

14:16:21.0073 5288 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys

14:16:21.0116 5288 hwpolicy - ok

14:16:21.0173 5288 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys

14:16:21.0178 5288 i8042prt - ok

14:16:21.0255 5288 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys

14:16:21.0415 5288 iaStorV - ok

14:16:22.0280 5288 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

14:16:22.0410 5288 idsvc - ok

14:16:22.0457 5288 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\drivers\iirsp.sys

14:16:22.0463 5288 iirsp - ok

14:16:22.0549 5288 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll

14:16:22.0599 5288 IKEEXT - ok

14:16:22.0627 5288 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys

14:16:22.0631 5288 intelide - ok

14:16:22.0650 5288 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys

14:16:22.0651 5288 intelppm - ok

14:16:22.0670 5288 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll

14:16:22.0671 5288 IPBusEnum - ok

14:16:22.0744 5288 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:16:22.0752 5288 IpFilterDriver - ok

14:16:22.0840 5288 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll

14:16:22.0844 5288 iphlpsvc - ok

14:16:23.0003 5288 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys

14:16:23.0063 5288 IPMIDRV - ok

14:16:23.0090 5288 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys

14:16:23.0095 5288 IPNAT - ok

14:16:23.0132 5288 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys

14:16:23.0134 5288 IRENUM - ok

14:16:23.0160 5288 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys

14:16:23.0166 5288 isapnp - ok

14:16:23.0191 5288 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys

14:16:23.0262 5288 iScsiPrt - ok

14:16:23.0321 5288 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys

14:16:23.0324 5288 kbdclass - ok

14:16:23.0349 5288 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys

14:16:23.0459 5288 kbdhid - ok

14:16:23.0489 5288 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:16:23.0491 5288 KeyIso - ok

14:16:23.0556 5288 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys

14:16:23.0640 5288 KSecDD - ok

14:16:23.0797 5288 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys

14:16:23.0920 5288 KSecPkg - ok

14:16:24.0010 5288 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll

14:16:24.0026 5288 KtmRm - ok

14:16:24.0078 5288 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\System32\srvsvc.dll

14:16:24.0123 5288 LanmanServer - ok

14:16:24.0190 5288 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll

14:16:24.0236 5288 LanmanWorkstation - ok

14:16:24.0280 5288 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys

14:16:24.0284 5288 lltdio - ok

14:16:24.0337 5288 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll

14:16:24.0355 5288 lltdsvc - ok

14:16:24.0375 5288 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll

14:16:24.0380 5288 lmhosts - ok

14:16:24.0403 5288 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\drivers\lsi_fc.sys

14:16:24.0411 5288 LSI_FC - ok

14:16:24.0418 5288 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\drivers\lsi_sas.sys

14:16:24.0426 5288 LSI_SAS - ok

14:16:24.0446 5288 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\drivers\lsi_sas2.sys

14:16:24.0453 5288 LSI_SAS2 - ok

14:16:24.0489 5288 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\drivers\lsi_scsi.sys

14:16:24.0493 5288 LSI_SCSI - ok

14:16:24.0516 5288 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys

14:16:24.0523 5288 luafv - ok

14:16:24.0644 5288 McAfee SiteAdvisor Service (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0654 5288 McAfee SiteAdvisor Service - ok

14:16:24.0654 5288 McMPFSvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0654 5288 McMPFSvc - ok

14:16:24.0664 5288 mcmscsvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0664 5288 mcmscsvc - ok

14:16:24.0664 5288 McNaiAnn (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0675 5288 McNaiAnn - ok

14:16:24.0679 5288 McNASvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0681 5288 McNASvc - ok

14:16:24.0820 5288 McODS (42117cbc4849a5cf11129912dabbdeca) C:\Program Files\McAfee\VirusScan\mcods.exe

14:16:24.0823 5288 McODS - ok

14:16:24.0832 5288 McProxy (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:16:24.0834 5288 McProxy - ok

14:16:24.0875 5288 McPvDrv (000751813ecef491689176e72b3a8bee) C:\Windows\system32\drivers\McPvDrv.sys

14:16:24.0994 5288 McPvDrv - ok

14:16:25.0591 5288 McShield (593fa4c378818ece76ba64a11ad56cf2) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

14:16:25.0653 5288 McShield - ok

14:16:25.0909 5288 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll

14:16:25.0955 5288 Mcx2Svc - ok

14:16:25.0985 5288 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\drivers\megasas.sys

14:16:25.0990 5288 megasas - ok

14:16:26.0023 5288 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\drivers\MegaSR.sys

14:16:26.0038 5288 MegaSR - ok

14:16:26.0318 5288 mfeapfk (43c31bdf404a6d7a7ac1bfd5ead2a566) C:\Windows\system32\drivers\mfeapfk.sys

14:16:26.0319 5288 mfeapfk - ok

14:16:26.0391 5288 mfeavfk (c1dc5f42d3367f33b6451be78b38bd46) C:\Windows\system32\drivers\mfeavfk.sys

14:16:26.0460 5288 mfeavfk - ok

14:16:26.0496 5288 mfeavfk01 - ok

14:16:26.0539 5288 mfebopk (0435c43f4c2be01b84868ad2a906397b) C:\Windows\system32\drivers\mfebopk.sys

14:16:26.0540 5288 mfebopk - ok

14:16:26.0589 5288 mfefire (7e1f8b1bdc8240f08bd358b3a466c005) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe

14:16:26.0651 5288 mfefire - ok

14:16:26.0761 5288 mfefirek (4ea6ff90015424517843e931448e00f1) C:\Windows\system32\drivers\mfefirek.sys

14:16:26.0824 5288 mfefirek - ok

14:16:27.0160 5288 mfehidk (d1e998748ba24a731106611d535c6bbf) C:\Windows\system32\drivers\mfehidk.sys

14:16:27.0295 5288 mfehidk - ok

14:16:27.0959 5288 mfenlfk (ac04a618aef3de0fce91c766f9e069da) C:\Windows\system32\DRIVERS\mfenlfk.sys

14:16:28.0019 5288 mfenlfk - ok

14:16:28.0150 5288 mferkdet (f454a13377f0a006d20a8c14a753c432) C:\Windows\system32\drivers\mferkdet.sys

14:16:28.0213 5288 mferkdet - ok

14:17:06.0230 5288 mfevtp (852ab07c731d120118b12165eca6dbb4) C:\Windows\system32\mfevtps.exe

14:17:06.0292 5288 Suspicious file (Forged): C:\Windows\system32\mfevtps.exe. Real md5: 852ab07c731d120118b12165eca6dbb4, Fake md5: b10c4efd40810c08f4b44df2efcb54f7

14:17:06.0292 5288 mfevtp ( ForgedFile.Multi.Generic ) - warning

14:17:06.0292 5288 mfevtp - detected ForgedFile.Multi.Generic (1)

14:17:07.0655 5288 mfewfpk (f284337aedb7483df8a5fa840647e2b0) C:\Windows\system32\drivers\mfewfpk.sys

14:17:07.0866 5288 mfewfpk - ok

14:17:08.0488 5288 Microsoft SharePoint Workspace Audit Service - ok

14:17:08.0796 5288 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll

14:17:08.0812 5288 MMCSS - ok

14:17:09.0191 5288 MOBKbackup (35176fa09a0fc58db630991a81a0ba39) C:\Program Files\McAfee Online Backup\MOBKbackup.exe

14:17:09.0195 5288 MOBKbackup - ok

14:17:09.0586 5288 MOBKFilter (e896775837a8bce436348df460522394) C:\Windows\system32\DRIVERS\MOBK.sys

14:17:09.0696 5288 MOBKFilter - ok

14:17:09.0771 5288 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys

14:17:09.0777 5288 Modem - ok

14:17:09.0822 5288 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys

14:17:09.0823 5288 monitor - ok

14:17:10.0027 5288 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys

14:17:10.0029 5288 mouclass - ok

14:17:10.0129 5288 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys

14:17:10.0133 5288 mouhid - ok

14:17:10.0141 5288 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys

14:17:10.0200 5288 mountmgr - ok

14:17:10.0227 5288 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys

14:17:10.0346 5288 mpio - ok

14:17:10.0374 5288 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys

14:17:10.0377 5288 mpsdrv - ok

14:17:10.0476 5288 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll

14:17:10.0481 5288 MpsSvc - ok

14:17:10.0508 5288 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys

14:17:10.0632 5288 MRxDAV - ok

14:17:10.0999 5288 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys

14:17:11.0167 5288 mrxsmb - ok

14:17:11.0680 5288 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:17:11.0793 5288 mrxsmb10 - ok

14:17:11.0935 5288 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:17:12.0156 5288 mrxsmb20 - ok

14:17:12.0300 5288 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys

14:17:12.0433 5288 msahci - ok

14:17:12.0560 5288 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys

14:17:12.0849 5288 msdsm - ok

14:17:13.0280 5288 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe

14:17:13.0404 5288 MSDTC - ok

14:17:13.0600 5288 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys

14:17:13.0609 5288 Msfs - ok

14:17:13.0635 5288 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys

14:17:13.0638 5288 mshidkmdf - ok

14:17:13.0648 5288 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys

14:17:13.0653 5288 msisadrv - ok

14:17:14.0169 5288 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll

14:17:14.0176 5288 MSiSCSI - ok

14:17:14.0182 5288 msiserver - ok

14:17:14.0297 5288 MSK80Service (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:17:14.0299 5288 MSK80Service - ok

14:17:14.0426 5288 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys

14:17:14.0431 5288 MSKSSRV - ok

14:17:14.0488 5288 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys

14:17:14.0494 5288 MSPCLOCK - ok

14:17:14.0559 5288 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys

14:17:14.0564 5288 MSPQM - ok

14:17:14.0586 5288 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys

14:17:14.0593 5288 MsRPC - ok

14:17:14.0663 5288 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys

14:17:14.0664 5288 mssmbios - ok

14:17:14.0685 5288 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys

14:17:14.0717 5288 MSTEE - ok

14:17:14.0743 5288 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\drivers\MTConfig.sys

14:17:14.0746 5288 MTConfig - ok

14:17:14.0770 5288 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys

14:17:14.0774 5288 Mup - ok

14:17:14.0827 5288 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll

14:17:14.0831 5288 napagent - ok

14:17:14.0858 5288 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys

14:17:14.0860 5288 NativeWifiP - ok

14:17:14.0910 5288 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys

14:17:14.0915 5288 NDIS - ok

14:17:14.0938 5288 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys

14:17:14.0946 5288 NdisCap - ok

14:17:14.0965 5288 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys

14:17:14.0971 5288 NdisTapi - ok

14:17:14.0987 5288 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys

14:17:15.0049 5288 Ndisuio - ok

14:17:15.0063 5288 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys

14:17:15.0186 5288 NdisWan - ok

14:17:15.0211 5288 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys

14:17:15.0274 5288 NDProxy - ok

14:17:15.0313 5288 Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll

14:17:15.0360 5288 Net Driver HPZ12 - ok

14:17:15.0385 5288 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys

14:17:15.0392 5288 NetBIOS - ok

14:17:15.0415 5288 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys

14:17:15.0564 5288 NetBT - ok

14:17:15.0614 5288 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:17:15.0618 5288 Netlogon - ok

14:17:15.0671 5288 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll

14:17:15.0686 5288 Netman - ok

14:17:15.0752 5288 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll

14:17:15.0757 5288 netprofm - ok

14:17:15.0877 5288 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:17:15.0945 5288 NetTcpPortSharing - ok

14:17:16.0229 5288 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys

14:17:16.0325 5288 netw5v32 - ok

14:17:16.0492 5288 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\drivers\nfrd960.sys

14:17:16.0498 5288 nfrd960 - ok

14:17:16.0549 5288 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll

14:17:16.0553 5288 NlaSvc - ok

14:17:16.0569 5288 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys

14:17:16.0576 5288 Npfs - ok

14:17:16.0591 5288 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll

14:17:16.0597 5288 nsi - ok

14:17:16.0612 5288 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys

14:17:16.0619 5288 nsiproxy - ok

14:17:16.0800 5288 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys

14:17:16.0816 5288 Ntfs - ok

14:17:16.0836 5288 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys

14:17:16.0839 5288 Null - ok

14:17:17.0677 5288 nvlddmkm (f452e6ad3eda2852f44be492e283c40f) C:\Windows\system32\DRIVERS\nvlddmkm.sys

14:17:18.0314 5288 nvlddmkm - ok

14:17:18.0660 5288 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys

14:17:18.0731 5288 nvraid - ok

14:17:19.0360 5288 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys

14:17:19.0621 5288 nvstor - ok

14:17:19.0716 5288 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys

14:17:19.0720 5288 nv_agp - ok

14:17:19.0760 5288 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys

14:17:19.0769 5288 ohci1394 - ok

14:17:19.0874 5288 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

14:17:19.0955 5288 ose - ok

14:17:20.0308 5288 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

14:17:20.0486 5288 osppsvc - ok

14:17:20.0661 5288 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

14:17:20.0665 5288 p2pimsvc - ok

14:17:20.0775 5288 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll

14:17:20.0831 5288 p2psvc - ok

14:17:20.0962 5288 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\drivers\parport.sys

14:17:20.0969 5288 Parport - ok

14:17:21.0009 5288 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys

14:17:21.0129 5288 partmgr - ok

14:17:21.0149 5288 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\drivers\parvdm.sys

14:17:21.0153 5288 Parvdm - ok

14:17:21.0203 5288 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll

14:17:21.0206 5288 PcaSvc - ok

14:17:21.0236 5288 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys

14:17:21.0301 5288 pci - ok

14:17:21.0322 5288 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys

14:17:21.0326 5288 pciide - ok

14:17:21.0355 5288 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\drivers\pcmcia.sys

14:17:21.0375 5288 pcmcia - ok

14:17:21.0403 5288 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys

14:17:21.0408 5288 pcw - ok

14:17:21.0451 5288 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys

14:17:21.0474 5288 PEAUTH - ok

14:17:21.0599 5288 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll

14:17:21.0607 5288 PeerDistSvc - ok

14:17:21.0895 5288 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll

14:17:22.0274 5288 pla - ok

14:17:22.0439 5288 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll

14:17:22.0443 5288 PlugPlay - ok

14:17:22.0582 5288 Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll

14:17:22.0633 5288 Pml Driver HPZ12 - ok

14:17:22.0794 5288 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll

14:17:22.0920 5288 PNRPAutoReg - ok

14:17:22.0963 5288 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

14:17:22.0967 5288 PNRPsvc - ok

14:17:23.0025 5288 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll

14:17:23.0029 5288 PolicyAgent - ok

14:17:23.0078 5288 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll

14:17:23.0082 5288 Power - ok

14:17:23.0164 5288 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys

14:17:23.0168 5288 PptpMiniport - ok

14:17:23.0211 5288 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\drivers\processr.sys

14:17:23.0216 5288 Processor - ok

14:17:23.0247 5288 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll

14:17:23.0309 5288 ProfSvc - ok

14:17:23.0341 5288 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:17:23.0343 5288 ProtectedStorage - ok

14:17:23.0391 5288 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys

14:17:23.0392 5288 Psched - ok

14:17:23.0511 5288 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\drivers\ql2300.sys

14:17:23.0546 5288 ql2300 - ok

14:17:23.0721 5288 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\drivers\ql40xx.sys

14:17:23.0725 5288 ql40xx - ok

14:17:23.0767 5288 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll

14:17:23.0784 5288 QWAVE - ok

14:17:23.0800 5288 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys

14:17:23.0804 5288 QWAVEdrv - ok

14:17:23.0815 5288 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys

14:17:23.0826 5288 RasAcd - ok

14:17:23.0864 5288 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys

14:17:23.0873 5288 RasAgileVpn - ok

14:17:23.0890 5288 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll

14:17:23.0897 5288 RasAuto - ok

14:17:23.0918 5288 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys

14:17:23.0926 5288 Rasl2tp - ok

14:17:23.0950 5288 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll

14:17:23.0997 5288 RasMan - ok

14:17:24.0019 5288 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys

14:17:24.0030 5288 RasPppoe - ok

14:17:24.0057 5288 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys

14:17:24.0062 5288 RasSstp - ok

14:17:24.0092 5288 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys

14:17:24.0220 5288 rdbss - ok

14:17:24.0230 5288 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys

14:17:24.0233 5288 rdpbus - ok

14:17:24.0243 5288 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys

14:17:24.0303 5288 RDPCDD - ok

14:17:24.0352 5288 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys

14:17:24.0433 5288 RDPDR - ok

14:17:24.0451 5288 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys

14:17:24.0456 5288 RDPENCDD - ok

14:17:24.0469 5288 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys

14:17:24.0474 5288 RDPREFMP - ok

14:17:25.0056 5288 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys

14:17:25.0172 5288 RDPWD - ok

14:17:25.0204 5288 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys

14:17:25.0314 5288 rdyboost - ok

14:17:25.0389 5288 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll

14:17:25.0396 5288 RemoteAccess - ok

14:17:25.0446 5288 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll

14:17:25.0466 5288 RemoteRegistry - ok

14:17:25.0522 5288 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys

14:17:25.0529 5288 RFCOMM - ok

14:17:25.0548 5288 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll

14:17:25.0555 5288 RpcEptMapper - ok

14:17:25.0592 5288 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe

14:17:25.0598 5288 RpcLocator - ok

14:17:25.0635 5288 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

14:17:25.0640 5288 RpcSs - ok

14:17:25.0653 5288 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys

14:17:25.0661 5288 rspndr - ok

14:17:25.0751 5288 RTL8167 (5283b9a27ff230f2ff70d92451ff409a) C:\Windows\system32\DRIVERS\Rt86win7.sys

14:17:25.0923 5288 RTL8167 - ok

14:17:25.0965 5288 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys

14:17:26.0037 5288 s3cap - ok

14:17:26.0066 5288 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:17:26.0068 5288 SamSs - ok

14:17:26.0087 5288 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys

14:17:26.0204 5288 sbp2port - ok

14:17:26.0232 5288 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll

14:17:26.0250 5288 SCardSvr - ok

14:17:26.0265 5288 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys

14:17:26.0319 5288 scfilter - ok

14:17:26.0376 5288 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll

14:17:26.0428 5288 Schedule - ok

14:17:26.0472 5288 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

14:17:26.0473 5288 SCPolicySvc - ok

14:17:26.0492 5288 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll

14:17:26.0548 5288 SDRSVC - ok

14:17:26.0586 5288 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys

14:17:26.0589 5288 secdrv - ok

14:17:26.0602 5288 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll

14:17:26.0608 5288 seclogon - ok

14:17:26.0631 5288 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\system32\sens.dll

14:17:26.0634 5288 SENS - ok

14:17:26.0677 5288 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll

14:17:26.0686 5288 SensrSvc - ok

14:17:26.0742 5288 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\drivers\serenum.sys

14:17:26.0746 5288 Serenum - ok

14:17:26.0759 5288 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\drivers\serial.sys

14:17:26.0763 5288 Serial - ok

14:17:26.0775 5288 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\drivers\sermouse.sys

14:17:26.0778 5288 sermouse - ok

14:17:26.0828 5288 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll

14:17:26.0872 5288 SessionEnv - ok

14:17:26.0877 5288 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys

14:17:26.0887 5288 sffdisk - ok

14:17:26.0887 5288 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys

14:17:26.0897 5288 sffp_mmc - ok

14:17:26.0897 5288 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys

14:17:26.0958 5288 sffp_sd - ok

14:17:26.0963 5288 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\drivers\sfloppy.sys

14:17:26.0968 5288 sfloppy - ok

14:17:27.0030 5288 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll

14:17:27.0046 5288 SharedAccess - ok

14:17:27.0099 5288 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll

14:17:27.0104 5288 ShellHWDetection - ok

14:17:27.0116 5288 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys

14:17:27.0121 5288 sisagp - ok

14:17:27.0133 5288 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\drivers\SiSRaid2.sys

14:17:27.0138 5288 SiSRaid2 - ok

14:17:27.0158 5288 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\drivers\sisraid4.sys

14:17:27.0164 5288 SiSRaid4 - ok

14:17:27.0182 5288 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys

14:17:27.0186 5288 Smb - ok

14:17:27.0201 5288 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe

14:17:27.0206 5288 SNMPTRAP - ok

14:17:27.0222 5288 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys

14:17:27.0225 5288 spldr - ok

14:17:27.0284 5288 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe

14:17:27.0350 5288 Spooler - ok

14:17:27.0558 5288 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe

14:17:27.0580 5288 sppsvc - ok

14:17:27.0752 5288 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll

14:17:27.0802 5288 sppuinotify - ok

14:17:27.0892 5288 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys

14:17:28.0015 5288 srv - ok

14:17:28.0055 5288 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys

14:17:28.0172 5288 srv2 - ok

14:17:28.0213 5288 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys

14:17:28.0356 5288 srvnet - ok

14:17:28.0375 5288 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll

14:17:28.0379 5288 SSDPSRV - ok

14:17:28.0399 5288 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll

14:17:28.0405 5288 SstpSvc - ok

14:17:28.0454 5288 ssudmdm (e3d493bfb7cd108ec50b2f560c96367c) C:\Windows\system32\DRIVERS\ssudmdm.sys

14:17:28.0604 5288 ssudmdm - ok

14:17:28.0653 5288 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\Windows\system32\DRIVERS\ss_bbus.sys

14:17:28.0714 5288 ss_bbus - ok

14:17:28.0759 5288 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\Windows\system32\DRIVERS\ss_bmdfl.sys

14:17:28.0824 5288 ss_bmdfl - ok

14:17:28.0872 5288 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\Windows\system32\DRIVERS\ss_bmdm.sys

14:17:28.0948 5288 ss_bmdm - ok

14:17:28.0986 5288 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\drivers\stexstor.sys

14:17:28.0996 5288 stexstor - ok

14:17:29.0041 5288 StillCam (edb05bd63148796f23ea78506404a538) C:\Windows\system32\DRIVERS\serscan.sys

14:17:29.0045 5288 StillCam - ok

14:17:29.0116 5288 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll

14:17:29.0185 5288 StiSvc - ok

14:17:29.0226 5288 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys

14:17:29.0296 5288 storflt - ok

14:17:29.0340 5288 StorSvc (0bf669f0a910beda4a32258d363af2a5) C:\Windows\system32\storsvc.dll

14:17:29.0401 5288 StorSvc - ok

14:17:29.0406 5288 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys

14:17:29.0473 5288 storvsc - ok

14:17:29.0477 5288 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys

14:17:29.0483 5288 swenum - ok

14:17:29.0543 5288 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll

14:17:29.0570 5288 swprv - ok

14:17:29.0676 5288 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll

14:17:29.0796 5288 SysMain - ok

14:17:29.0810 5288 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll

14:17:29.0861 5288 TabletInputService - ok

14:17:29.0888 5288 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll

14:17:29.0940 5288 TapiSrv - ok

14:17:29.0967 5288 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll

14:17:29.0971 5288 TBS - ok

14:17:30.0533 5288 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\drivers\tcpip.sys

14:17:30.0541 5288 Tcpip - ok

14:17:30.0558 5288 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\Windows\system32\DRIVERS\tcpip.sys

14:17:30.0566 5288 TCPIP6 - ok

14:17:30.0610 5288 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys

14:17:30.0739 5288 tcpipreg - ok

14:17:30.0772 5288 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys

14:17:30.0892 5288 TDPIPE - ok

14:17:30.0926 5288 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys

14:17:31.0042 5288 TDTCP - ok

14:17:31.0052 5288 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys

14:17:31.0166 5288 tdx - ok

14:17:31.0186 5288 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\DRIVERS\termdd.sys

14:17:31.0274 5288 TermDD - ok

14:17:31.0322 5288 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll

14:17:31.0379 5288 TermService - ok

14:17:31.0393 5288 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll

14:17:31.0400 5288 Themes - ok

14:17:31.0442 5288 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll

14:17:31.0444 5288 THREADORDER - ok

14:17:31.0464 5288 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll

14:17:31.0472 5288 TrkWks - ok

14:17:31.0556 5288 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe

14:17:31.0623 5288 TrustedInstaller - ok

14:17:31.0636 5288 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys

14:17:31.0767 5288 tssecsrv - ok

14:17:31.0794 5288 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys

14:17:31.0856 5288 TsUsbFlt - ok

14:17:31.0871 5288 TsUsbGD (01246f0baad7b68ec0f472aa41e33282) C:\Windows\system32\drivers\TsUsbGD.sys

14:17:31.0935 5288 TsUsbGD - ok

14:17:31.0978 5288 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys

14:17:31.0982 5288 tunnel - ok

14:17:32.0000 5288 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\drivers\uagp35.sys

14:17:32.0005 5288 uagp35 - ok

14:17:32.0036 5288 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys

14:17:32.0112 5288 udfs - ok

14:17:32.0156 5288 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe

14:17:32.0164 5288 UI0Detect - ok

14:17:32.0178 5288 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys

14:17:32.0185 5288 uliagpkx - ok

14:17:32.0195 5288 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\DRIVERS\umbus.sys

14:17:32.0254 5288 umbus - ok

14:17:32.0263 5288 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\drivers\umpass.sys

14:17:32.0269 5288 UmPass - ok

14:17:32.0312 5288 UmRdpService (409994a8eaceee4e328749c0353527a0) C:\Windows\System32\umrdp.dll

14:17:32.0375 5288 UmRdpService - ok

14:17:32.0398 5288 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll

14:17:32.0434 5288 upnphost - ok

14:17:32.0478 5288 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys

14:17:32.0540 5288 usbccgp - ok

14:17:32.0568 5288 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys

14:17:32.0572 5288 usbcir - ok

14:17:32.0606 5288 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys

14:17:32.0722 5288 usbehci - ok

14:17:32.0759 5288 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys

14:17:32.0896 5288 usbhub - ok

14:17:32.0913 5288 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys

14:17:33.0041 5288 usbohci - ok

14:17:33.0060 5288 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\drivers\usbprint.sys

14:17:33.0066 5288 usbprint - ok

14:17:33.0103 5288 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:17:33.0225 5288 USBSTOR - ok

14:17:33.0237 5288 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys

14:17:33.0349 5288 usbuhci - ok

14:17:33.0366 5288 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll

14:17:33.0375 5288 UxSms - ok

14:17:33.0415 5288 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:17:33.0417 5288 VaultSvc - ok

14:17:33.0431 5288 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys

14:17:33.0435 5288 vdrvroot - ok

14:17:33.0478 5288 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe

14:17:33.0567 5288 vds - ok

14:17:33.0587 5288 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys

14:17:33.0591 5288 vga - ok

14:17:33.0606 5288 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys

14:17:33.0613 5288 VgaSave - ok

14:17:33.0643 5288 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys

14:17:33.0710 5288 vhdmp - ok

14:17:33.0736 5288 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys

14:17:33.0743 5288 viaagp - ok

14:17:33.0765 5288 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\drivers\viac7.sys

14:17:33.0769 5288 ViaC7 - ok

14:17:33.0787 5288 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys

14:17:33.0794 5288 viaide - ok

14:17:33.0838 5288 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys

14:17:33.0916 5288 vmbus - ok

14:17:33.0939 5288 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys

14:17:34.0001 5288 VMBusHID - ok

14:17:34.0021 5288 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys

14:17:34.0082 5288 volmgr - ok

14:17:34.0112 5288 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys

14:17:34.0121 5288 volmgrx - ok

14:17:34.0149 5288 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys

14:17:34.0218 5288 volsnap - ok

14:17:34.0245 5288 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\drivers\vsmraid.sys

14:17:34.0250 5288 vsmraid - ok

14:17:34.0350 5288 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe

14:17:34.0359 5288 VSS - ok

14:17:34.0376 5288 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys

14:17:34.0381 5288 vwifibus - ok

14:17:34.0409 5288 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll

14:17:34.0414 5288 W32Time - ok

14:17:34.0434 5288 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\drivers\wacompen.sys

14:17:34.0438 5288 WacomPen - ok

14:17:34.0480 5288 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys

14:17:34.0605 5288 WANARP - ok

14:17:34.0608 5288 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys

14:17:34.0609 5288 Wanarpv6 - ok

14:17:34.0740 5288 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\Windows\system32\Wat\WatAdminSvc.exe

14:17:34.0876 5288 WatAdminSvc - ok

14:17:34.0986 5288 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe

14:17:35.0083 5288 wbengine - ok

14:17:35.0111 5288 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll

14:17:35.0128 5288 WbioSrvc - ok

14:17:35.0154 5288 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll

14:17:35.0213 5288 wcncsvc - ok

14:17:35.0230 5288 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll

14:17:35.0238 5288 WcsPlugInService - ok

14:17:35.0318 5288 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\drivers\wd.sys

14:17:35.0321 5288 Wd - ok

14:17:35.0364 5288 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys

14:17:35.0377 5288 Wdf01000 - ok

14:17:35.0418 5288 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll

14:17:35.0422 5288 WdiServiceHost - ok

14:17:35.0425 5288 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll

14:17:35.0429 5288 WdiSystemHost - ok

14:17:35.0975 5288 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll

14:17:36.0026 5288 WebClient - ok

14:17:36.0064 5288 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll

14:17:36.0085 5288 Wecsvc - ok

14:17:36.0101 5288 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll

14:17:36.0104 5288 wercplsupport - ok

14:17:36.0107 5288 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll

14:17:36.0117 5288 WerSvc - ok

14:17:36.0127 5288 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys

14:17:36.0137 5288 WfpLwf - ok

14:17:36.0160 5288 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys

14:17:36.0164 5288 WIMMount - ok

14:17:36.0328 5288 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll

14:17:36.0359 5288 WinDefend - ok

14:17:36.0382 5288 WinHttpAutoProxySvc - ok

14:17:36.0472 5288 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll

14:17:36.0476 5288 Winmgmt - ok

14:17:36.0606 5288 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll

14:17:36.0690 5288 WinRM - ok

14:17:36.0798 5288 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys

14:17:36.0864 5288 WinUsb - ok

14:17:36.0954 5288 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll

14:17:36.0962 5288 Wlansvc - ok

14:17:37.0107 5288 wlcrasvc (6067acef367e79914af628fa1e9b5330) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

14:17:37.0181 5288 wlcrasvc - ok

14:17:37.0410 5288 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:17:37.0493 5288 wlidsvc - ok

14:17:37.0670 5288 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys

14:17:37.0671 5288 WmiAcpi - ok

14:17:37.0786 5288 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe

14:17:37.0806 5288 wmiApSrv - ok

14:17:38.0018 5288 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe

14:17:38.0026 5288 WMPNetworkSvc - ok

14:17:38.0091 5288 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll

14:17:38.0099 5288 WPCSvc - ok

14:17:38.0113 5288 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll

14:17:38.0117 5288 WPDBusEnum - ok

14:17:38.0137 5288 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys

14:17:38.0140 5288 ws2ifsl - ok

14:17:38.0152 5288 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\system32\wscsvc.dll

14:17:38.0152 5288 wscsvc - ok

14:17:38.0206 5288 WSDPrintDevice (553f6ccd7c58eb98d4a8fbdaf283d7a9) C:\Windows\system32\DRIVERS\WSDPrint.sys

14:17:38.0216 5288 WSDPrintDevice - ok

14:17:38.0220 5288 WSearch - ok

14:17:38.0384 5288 wuauserv (3026418a50c5b4761befa632cedb7406) C:\Windows\system32\wuaueng.dll

14:17:38.0417 5288 wuauserv - ok

14:17:38.0533 5288 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys

14:17:38.0659 5288 WudfPf - ok

14:17:38.0717 5288 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys

14:17:38.0857 5288 WUDFRd - ok

14:17:38.0876 5288 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll

14:17:38.0926 5288 wudfsvc - ok

14:17:38.0947 5288 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll

14:17:38.0967 5288 WwanSvc - ok

14:17:39.0008 5288 XUIF (6bbf7a3bab8ffdccf82057fa2aae2b7b) C:\Windows\system32\Drivers\x10ufx2.sys

14:17:39.0009 5288 XUIF - ok

14:17:39.0023 5288 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

14:17:39.0242 5288 \Device\Harddisk0\DR0 - ok

14:17:39.0245 5288 Boot (0x1200) (5cdd1e0565d424a61b8bf26997c94793) \Device\Harddisk0\DR0\Partition0

14:17:39.0248 5288 \Device\Harddisk0\DR0\Partition0 - ok

14:17:39.0275 5288 Boot (0x1200) (c5054f2f752ef0fcec523ab1fee82b85) \Device\Harddisk0\DR0\Partition1

14:17:39.0276 5288 \Device\Harddisk0\DR0\Partition1 - ok

14:17:39.0277 5288 ============================================================

14:17:39.0277 5288 Scan finished

14:17:39.0277 5288 ============================================================

14:17:39.0288 5352 Detected object count: 1

14:17:39.0288 5352 Actual detected object count: 1

14:18:14.0695 5352 mfevtp ( ForgedFile.Multi.Generic ) - skipped by user

14:18:14.0695 5352 mfevtp ( ForgedFile.Multi.Generic ) - User select action: Skip

14:21:05.0225 2868 ============================================================

14:21:05.0225 2868 Scan started

14:21:05.0225 2868 Mode: Manual;

14:21:05.0225 2868 ============================================================

14:21:06.0024 2868 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys

14:21:06.0026 2868 1394ohci - ok

14:21:06.0065 2868 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys

14:21:06.0067 2868 ACPI - ok

14:21:06.0084 2868 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys

14:21:06.0085 2868 AcpiPmi - ok

14:21:06.0216 2868 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

14:21:06.0218 2868 AdobeARMservice - ok

14:21:06.0363 2868 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

14:21:06.0368 2868 AdobeFlashPlayerUpdateSvc - ok

14:21:06.0415 2868 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\drivers\adp94xx.sys

14:21:06.0418 2868 adp94xx - ok

14:21:06.0451 2868 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\drivers\adpahci.sys

14:21:06.0454 2868 adpahci - ok

14:21:06.0481 2868 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\drivers\adpu320.sys

14:21:06.0482 2868 adpu320 - ok

14:21:06.0523 2868 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll

14:21:06.0524 2868 AeLookupSvc - ok

14:21:06.0584 2868 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys

14:21:06.0587 2868 AFD - ok

14:21:06.0609 2868 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys

14:21:06.0610 2868 agp440 - ok

14:21:06.0631 2868 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\drivers\djsvs.sys

14:21:06.0632 2868 aic78xx - ok

14:21:06.0661 2868 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe

14:21:06.0663 2868 ALG - ok

14:21:06.0732 2868 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys

14:21:06.0732 2868 aliide - ok

14:21:06.0760 2868 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys

14:21:06.0761 2868 amdagp - ok

14:21:06.0776 2868 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys

14:21:06.0777 2868 amdide - ok

14:21:06.0806 2868 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\drivers\amdk8.sys

14:21:06.0807 2868 AmdK8 - ok

14:21:06.0819 2868 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\drivers\amdppm.sys

14:21:06.0820 2868 AmdPPM - ok

14:21:06.0854 2868 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys

14:21:06.0855 2868 amdsata - ok

14:21:06.0882 2868 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\drivers\amdsbs.sys

14:21:06.0884 2868 amdsbs - ok

14:21:06.0897 2868 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys

14:21:06.0898 2868 amdxata - ok

14:21:06.0921 2868 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys

14:21:06.0922 2868 AppID - ok

14:21:06.0946 2868 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll

14:21:06.0947 2868 AppIDSvc - ok

14:21:06.0966 2868 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll

14:21:06.0967 2868 Appinfo - ok

14:21:07.0021 2868 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll

14:21:07.0023 2868 AppMgmt - ok

14:21:07.0043 2868 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\drivers\arc.sys

14:21:07.0044 2868 arc - ok

14:21:07.0061 2868 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\drivers\arcsas.sys

14:21:07.0063 2868 arcsas - ok

14:21:07.0079 2868 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys

14:21:07.0079 2868 AsyncMac - ok

14:21:07.0094 2868 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys

14:21:07.0094 2868 atapi - ok

14:21:07.0155 2868 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

14:21:07.0159 2868 AudioEndpointBuilder - ok

14:21:07.0165 2868 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll

14:21:07.0168 2868 Audiosrv - ok

14:21:07.0193 2868 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll

14:21:07.0194 2868 AxInstSV - ok

14:21:07.0242 2868 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\drivers\bxvbdx.sys

14:21:07.0245 2868 b06bdrv - ok

14:21:07.0267 2868 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys

14:21:07.0269 2868 b57nd60x - ok

14:21:07.0295 2868 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll

14:21:07.0297 2868 BDESVC - ok

14:21:07.0312 2868 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys

14:21:07.0313 2868 Beep - ok

14:21:07.0358 2868 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll

14:21:07.0361 2868 BFE - ok

14:21:07.0451 2868 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\system32\qmgr.dll

14:21:07.0463 2868 BITS - ok

14:21:07.0485 2868 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys

14:21:07.0486 2868 blbdrive - ok

14:21:07.0532 2868 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys

14:21:07.0533 2868 bowser - ok

14:21:07.0553 2868 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\BrFiltLo.sys

14:21:07.0554 2868 BrFiltLo - ok

14:21:07.0576 2868 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\BrFiltUp.sys

14:21:07.0577 2868 BrFiltUp - ok

14:21:07.0604 2868 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys

14:21:07.0605 2868 BridgeMP - ok

14:21:07.0629 2868 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll

14:21:07.0631 2868 Browser - ok

14:21:07.0671 2868 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys

14:21:07.0673 2868 Brserid - ok

14:21:07.0757 2868 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys

14:21:07.0759 2868 BrSerWdm - ok

14:21:07.0776 2868 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys

14:21:07.0777 2868 BrUsbMdm - ok

14:21:07.0792 2868 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys

14:21:07.0793 2868 BrUsbSer - ok

14:21:07.0836 2868 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\DRIVERS\BthEnum.sys

14:21:07.0837 2868 BthEnum - ok

14:21:07.0868 2868 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\drivers\bthmodem.sys

14:21:07.0869 2868 BTHMODEM - ok

14:21:07.0914 2868 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys

14:21:07.0915 2868 BthPan - ok

14:21:07.0980 2868 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\system32\Drivers\BTHport.sys

14:21:07.0983 2868 BTHPORT - ok

14:21:08.0039 2868 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll

14:21:08.0042 2868 bthserv - ok

14:21:08.0089 2868 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\system32\Drivers\BTHUSB.sys

14:21:08.0091 2868 BTHUSB - ok

14:21:08.0199 2868 catchme - ok

14:21:08.0222 2868 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys

14:21:08.0223 2868 cdfs - ok

14:21:08.0242 2868 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys

14:21:08.0244 2868 cdrom - ok

14:21:08.0286 2868 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

14:21:08.0287 2868 CertPropSvc - ok

14:21:08.0328 2868 cfwids (1c7b1e36f3ced9e4b0b13385e627fe8b) C:\Windows\system32\drivers\cfwids.sys

14:21:08.0329 2868 cfwids - ok

14:21:08.0349 2868 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\drivers\circlass.sys

14:21:08.0350 2868 circlass - ok

14:21:08.0382 2868 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys

14:21:08.0384 2868 CLFS - ok

14:21:08.0482 2868 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:21:08.0483 2868 clr_optimization_v2.0.50727_32 - ok

14:21:08.0571 2868 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:21:08.0574 2868 clr_optimization_v4.0.30319_32 - ok

14:21:08.0610 2868 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys

14:21:08.0611 2868 CmBatt - ok

14:21:08.0634 2868 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys

14:21:08.0635 2868 cmdide - ok

14:21:08.0725 2868 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys

14:21:08.0728 2868 CNG - ok

14:21:08.0746 2868 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys

14:21:08.0747 2868 Compbatt - ok

14:21:08.0762 2868 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\DRIVERS\CompositeBus.sys

14:21:08.0763 2868 CompositeBus - ok

14:21:08.0766 2868 COMSysApp - ok

14:21:08.0793 2868 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\drivers\crcdisk.sys

14:21:08.0794 2868 crcdisk - ok

14:21:08.0840 2868 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll

14:21:08.0842 2868 CryptSvc - ok

14:21:08.0910 2868 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys

14:21:08.0912 2868 CSC - ok

14:21:08.0959 2868 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll

14:21:08.0963 2868 CscService - ok

14:21:09.0028 2868 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

14:21:09.0033 2868 DcomLaunch - ok

14:21:09.0086 2868 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll

14:21:09.0091 2868 defragsvc - ok

14:21:09.0144 2868 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys

14:21:09.0145 2868 DfsC - ok

14:21:09.0186 2868 dg_ssudbus (919f338fd36f47d860775368d0748780) C:\Windows\system32\DRIVERS\ssudbus.sys

14:21:09.0187 2868 dg_ssudbus - ok

14:21:09.0216 2868 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll

14:21:09.0219 2868 Dhcp - ok

14:21:09.0234 2868 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys

14:21:09.0235 2868 discache - ok

14:21:09.0246 2868 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\drivers\disk.sys

14:21:09.0247 2868 Disk - ok

14:21:09.0288 2868 dmvsc (2a958ef85db1b61ffca65044fa4bce9e) C:\Windows\system32\drivers\dmvsc.sys

14:21:09.0289 2868 dmvsc - ok

14:21:09.0329 2868 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll

14:21:09.0331 2868 Dnscache - ok

14:21:09.0359 2868 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll

14:21:09.0362 2868 dot3svc - ok

14:21:09.0652 2868 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll

14:21:09.0655 2868 DPS - ok

14:21:09.0757 2868 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys

14:21:09.0758 2868 drmkaud - ok

14:21:09.0833 2868 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys

14:21:09.0839 2868 DXGKrnl - ok

14:21:09.0864 2868 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll

14:21:09.0867 2868 EapHost - ok

14:21:10.0063 2868 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\drivers\evbdx.sys

14:21:10.0083 2868 ebdrv - ok

14:21:10.0225 2868 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe

14:21:10.0228 2868 EFS - ok

14:21:10.0336 2868 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe

14:21:10.0341 2868 ehRecvr - ok

14:21:10.0356 2868 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe

14:21:10.0358 2868 ehSched - ok

14:21:10.0457 2868 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\drivers\elxstor.sys

14:21:10.0461 2868 elxstor - ok

14:21:10.0470 2868 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys

14:21:10.0471 2868 ErrDev - ok

14:21:10.0517 2868 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll

14:21:10.0520 2868 EventSystem - ok

14:21:10.0550 2868 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys

14:21:10.0552 2868 exfat - ok

14:21:10.0578 2868 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys

14:21:10.0580 2868 fastfat - ok

14:21:10.0641 2868 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe

14:21:10.0647 2868 Fax - ok

14:21:10.0666 2868 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\drivers\fdc.sys

14:21:10.0667 2868 fdc - ok

14:21:10.0719 2868 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll

14:21:10.0721 2868 fdPHost - ok

14:21:10.0745 2868 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll

14:21:10.0747 2868 FDResPub - ok

14:21:10.0759 2868 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys

14:21:10.0761 2868 FileInfo - ok

14:21:10.0778 2868 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys

14:21:10.0779 2868 Filetrace - ok

14:21:10.0783 2868 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\drivers\flpydisk.sys

14:21:10.0784 2868 flpydisk - ok

14:21:10.0809 2868 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys

14:21:10.0811 2868 FltMgr - ok

14:21:10.0909 2868 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll

14:21:10.0916 2868 FontCache - ok

14:21:11.0041 2868 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

14:21:11.0042 2868 FontCache3.0.0.0 - ok

14:21:11.0057 2868 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys

14:21:11.0058 2868 FsDepends - ok

14:21:11.0099 2868 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys

14:21:11.0100 2868 fssfltr - ok

14:21:11.0375 2868 fsssvc (40cdfad174b3d5e80f95dda003c0b97f) C:\Program Files\Windows Live\Family Safety\fsssvc.exe

14:21:11.0395 2868 fsssvc - ok

14:21:11.0553 2868 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys

14:21:11.0555 2868 Fs_Rec - ok

14:21:11.0608 2868 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys

14:21:11.0612 2868 fvevol - ok

14:21:11.0643 2868 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\drivers\gagp30kx.sys

14:21:11.0645 2868 gagp30kx - ok

14:21:11.0736 2868 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll

14:21:11.0741 2868 gpsvc - ok

14:21:11.0868 2868 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe

14:21:11.0871 2868 gupdate - ok

14:21:11.0877 2868 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe

14:21:11.0879 2868 gupdatem - ok

14:21:11.0905 2868 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys

14:21:11.0907 2868 hcw85cir - ok

14:21:11.0969 2868 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys

14:21:11.0975 2868 HdAudAddService - ok

14:21:11.0993 2868 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\DRIVERS\HDAudBus.sys

14:21:11.0995 2868 HDAudBus - ok

14:21:11.0999 2868 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\drivers\HidBatt.sys

14:21:12.0000 2868 HidBatt - ok

14:21:12.0022 2868 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\drivers\hidbth.sys

14:21:12.0024 2868 HidBth - ok

14:21:12.0036 2868 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\drivers\hidir.sys

14:21:12.0037 2868 HidIr - ok

14:21:12.0064 2868 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\System32\hidserv.dll

14:21:12.0066 2868 hidserv - ok

14:21:12.0079 2868 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys

14:21:12.0080 2868 HidUsb - ok

14:21:12.0125 2868 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll

14:21:12.0131 2868 hkmsvc - ok

14:21:12.0162 2868 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll

14:21:12.0165 2868 HomeGroupListener - ok

14:21:12.0223 2868 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll

14:21:12.0226 2868 HomeGroupProvider - ok

14:21:12.0363 2868 hpqcxs08 (5da42d24712e00728cea2342a65009b2) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

14:21:12.0369 2868 hpqcxs08 - ok

14:21:12.0388 2868 hpqddsvc (d86a39bf100069444d026d22d9a6e555) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll

14:21:12.0390 2868 hpqddsvc - ok

14:21:12.0417 2868 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys

14:21:12.0418 2868 HpSAMD - ok

14:21:12.0492 2868 HPSLPSVC (a04f4ac48895774a2cf9d1c9eaaacef0) C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL

14:21:12.0499 2868 HPSLPSVC - ok

14:21:12.0543 2868 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys

14:21:12.0547 2868 HTTP - ok

14:21:12.0588 2868 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys

14:21:12.0589 2868 hwpolicy - ok

14:21:12.0600 2868 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys

14:21:12.0601 2868 i8042prt - ok

14:21:12.0658 2868 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys

14:21:12.0661 2868 iaStorV - ok

14:21:12.0811 2868 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

14:21:12.0818 2868 idsvc - ok

14:21:12.0838 2868 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\drivers\iirsp.sys

14:21:12.0839 2868 iirsp - ok

14:21:12.0920 2868 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll

14:21:12.0926 2868 IKEEXT - ok

14:21:12.0953 2868 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys

14:21:12.0954 2868 intelide - ok

14:21:12.0976 2868 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys

14:21:12.0977 2868 intelppm - ok

14:21:12.0995 2868 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll

14:21:12.0997 2868 IPBusEnum - ok

14:21:13.0026 2868 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:21:13.0027 2868 IpFilterDriver - ok

14:21:13.0069 2868 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll

14:21:13.0074 2868 iphlpsvc - ok

14:21:13.0119 2868 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys

14:21:13.0120 2868 IPMIDRV - ok

14:21:13.0147 2868 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys

14:21:13.0148 2868 IPNAT - ok

14:21:13.0169 2868 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys

14:21:13.0169 2868 IRENUM - ok

14:21:13.0197 2868 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys

14:21:13.0197 2868 isapnp - ok

14:21:13.0226 2868 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys

14:21:13.0228 2868 iScsiPrt - ok

14:21:13.0257 2868 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys

14:21:13.0258 2868 kbdclass - ok

14:21:13.0273 2868 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys

14:21:13.0274 2868 kbdhid - ok

14:21:13.0292 2868 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:21:13.0294 2868 KeyIso - ok

14:21:13.0348 2868 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys

14:21:13.0349 2868 KSecDD - ok

14:21:13.0367 2868 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys

14:21:13.0369 2868 KSecPkg - ok

14:21:13.0451 2868 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll

14:21:13.0455 2868 KtmRm - ok

14:21:13.0528 2868 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\System32\srvsvc.dll

14:21:13.0533 2868 LanmanServer - ok

14:21:13.0594 2868 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll

14:21:13.0598 2868 LanmanWorkstation - ok

14:21:13.0632 2868 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys

14:21:13.0633 2868 lltdio - ok

14:21:13.0743 2868 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll

14:21:13.0746 2868 lltdsvc - ok

14:21:13.0767 2868 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll

14:21:13.0769 2868 lmhosts - ok

14:21:13.0795 2868 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\drivers\lsi_fc.sys

14:21:13.0797 2868 LSI_FC - ok

14:21:13.0804 2868 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\drivers\lsi_sas.sys

14:21:13.0805 2868 LSI_SAS - ok

14:21:13.0827 2868 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\drivers\lsi_sas2.sys

14:21:13.0828 2868 LSI_SAS2 - ok

14:21:13.0858 2868 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\drivers\lsi_scsi.sys

14:21:13.0859 2868 LSI_SCSI - ok

14:21:13.0885 2868 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys

14:21:13.0887 2868 luafv - ok

14:21:14.0011 2868 McAfee SiteAdvisor Service (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0014 2868 McAfee SiteAdvisor Service - ok

14:21:14.0018 2868 McMPFSvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0021 2868 McMPFSvc - ok

14:21:14.0025 2868 mcmscsvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0028 2868 mcmscsvc - ok

14:21:14.0031 2868 McNaiAnn (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0033 2868 McNaiAnn - ok

14:21:14.0037 2868 McNASvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0039 2868 McNASvc - ok

14:21:14.0133 2868 McODS (42117cbc4849a5cf11129912dabbdeca) C:\Program Files\McAfee\VirusScan\mcods.exe

14:21:14.0133 2868 McODS - ok

14:21:14.0133 2868 McProxy (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:14.0143 2868 McProxy - ok

14:21:14.0189 2868 McPvDrv (000751813ecef491689176e72b3a8bee) C:\Windows\system32\drivers\McPvDrv.sys

14:21:14.0190 2868 McPvDrv - ok

14:21:14.0273 2868 McShield (593fa4c378818ece76ba64a11ad56cf2) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

14:21:14.0275 2868 McShield - ok

14:21:14.0312 2868 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll

14:21:14.0315 2868 Mcx2Svc - ok

14:21:14.0332 2868 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\drivers\megasas.sys

14:21:14.0333 2868 megasas - ok

14:21:14.0359 2868 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\drivers\MegaSR.sys

14:21:14.0361 2868 MegaSR - ok

14:21:14.0396 2868 mfeapfk (43c31bdf404a6d7a7ac1bfd5ead2a566) C:\Windows\system32\drivers\mfeapfk.sys

14:21:14.0398 2868 mfeapfk - ok

14:21:14.0439 2868 mfeavfk (c1dc5f42d3367f33b6451be78b38bd46) C:\Windows\system32\drivers\mfeavfk.sys

14:21:14.0440 2868 mfeavfk - ok

14:21:14.0443 2868 mfeavfk01 - ok

14:21:14.0485 2868 mfebopk (0435c43f4c2be01b84868ad2a906397b) C:\Windows\system32\drivers\mfebopk.sys

14:21:14.0486 2868 mfebopk - ok

14:21:14.0537 2868 mfefire (7e1f8b1bdc8240f08bd358b3a466c005) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe

14:21:14.0539 2868 mfefire - ok

14:21:14.0574 2868 mfefirek (4ea6ff90015424517843e931448e00f1) C:\Windows\system32\drivers\mfefirek.sys

14:21:14.0577 2868 mfefirek - ok

14:21:14.0640 2868 mfehidk (d1e998748ba24a731106611d535c6bbf) C:\Windows\system32\drivers\mfehidk.sys

14:21:14.0644 2868 mfehidk - ok

14:21:14.0729 2868 mfenlfk (ac04a618aef3de0fce91c766f9e069da) C:\Windows\system32\DRIVERS\mfenlfk.sys

14:21:14.0733 2868 mfenlfk - ok

14:21:15.0137 2868 mferkdet (f454a13377f0a006d20a8c14a753c432) C:\Windows\system32\drivers\mferkdet.sys

14:21:15.0140 2868 mferkdet - ok

14:21:15.0155 2868 mfevtp (b10c4efd40810c08f4b44df2efcb54f7) C:\Windows\system32\mfevtps.exe

14:21:15.0165 2868 mfevtp - ok

14:21:15.0234 2868 mfewfpk (f284337aedb7483df8a5fa840647e2b0) C:\Windows\system32\drivers\mfewfpk.sys

14:21:15.0238 2868 mfewfpk - ok

14:21:15.0386 2868 Microsoft SharePoint Workspace Audit Service - ok

14:21:15.0407 2868 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll

14:21:15.0413 2868 MMCSS - ok

14:21:15.0490 2868 MOBKbackup (35176fa09a0fc58db630991a81a0ba39) C:\Program Files\McAfee Online Backup\MOBKbackup.exe

14:21:15.0495 2868 MOBKbackup - ok

14:21:15.0529 2868 MOBKFilter (e896775837a8bce436348df460522394) C:\Windows\system32\DRIVERS\MOBK.sys

14:21:15.0530 2868 MOBKFilter - ok

14:21:15.0567 2868 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys

14:21:15.0568 2868 Modem - ok

14:21:15.0672 2868 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys

14:21:15.0674 2868 monitor - ok

14:21:15.0769 2868 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys

14:21:15.0770 2868 mouclass - ok

14:21:15.0781 2868 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys

14:21:15.0784 2868 mouhid - ok

14:21:15.0796 2868 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys

14:21:15.0799 2868 mountmgr - ok

14:21:15.0823 2868 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys

14:21:15.0825 2868 mpio - ok

14:21:15.0847 2868 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys

14:21:15.0849 2868 mpsdrv - ok

14:21:15.0890 2868 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll

14:21:15.0896 2868 MpsSvc - ok

14:21:15.0915 2868 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys

14:21:15.0917 2868 MRxDAV - ok

14:21:15.0969 2868 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys

14:21:15.0973 2868 mrxsmb - ok

14:21:16.0022 2868 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:21:16.0027 2868 mrxsmb10 - ok

14:21:16.0079 2868 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:21:16.0082 2868 mrxsmb20 - ok

14:21:16.0099 2868 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys

14:21:16.0101 2868 msahci - ok

14:21:16.0131 2868 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys

14:21:16.0132 2868 msdsm - ok

14:21:16.0160 2868 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe

14:21:16.0164 2868 MSDTC - ok

14:21:16.0188 2868 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys

14:21:16.0189 2868 Msfs - ok

14:21:16.0206 2868 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys

14:21:16.0207 2868 mshidkmdf - ok

14:21:16.0220 2868 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys

14:21:16.0221 2868 msisadrv - ok

14:21:16.0269 2868 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll

14:21:16.0271 2868 MSiSCSI - ok

14:21:16.0278 2868 msiserver - ok

14:21:16.0445 2868 MSK80Service (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe

14:21:16.0447 2868 MSK80Service - ok

14:21:16.0475 2868 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys

14:21:16.0476 2868 MSKSSRV - ok

14:21:16.0515 2868 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys

14:21:16.0516 2868 MSPCLOCK - ok

14:21:16.0530 2868 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys

14:21:16.0531 2868 MSPQM - ok

14:21:16.0557 2868 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys

14:21:16.0559 2868 MsRPC - ok

14:21:16.0678 2868 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys

14:21:16.0679 2868 mssmbios - ok

14:21:16.0745 2868 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys

14:21:16.0746 2868 MSTEE - ok

14:21:16.0770 2868 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\drivers\MTConfig.sys

14:21:16.0772 2868 MTConfig - ok

14:21:16.0798 2868 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys

14:21:16.0800 2868 Mup - ok

14:21:16.0870 2868 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll

14:21:16.0881 2868 napagent - ok

14:21:16.0929 2868 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys

14:21:16.0931 2868 NativeWifiP - ok

14:21:16.0993 2868 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys

14:21:16.0998 2868 NDIS - ok

14:21:17.0021 2868 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys

14:21:17.0022 2868 NdisCap - ok

14:21:17.0036 2868 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys

14:21:17.0037 2868 NdisTapi - ok

14:21:17.0047 2868 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys

14:21:17.0048 2868 Ndisuio - ok

14:21:17.0068 2868 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys

14:21:17.0069 2868 NdisWan - ok

14:21:17.0084 2868 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys

14:21:17.0085 2868 NDProxy - ok

14:21:17.0128 2868 Net Driver HPZ12 (a081cb6fb9a12668f233eb5414be3a0e) C:\Windows\system32\HPZinw12.dll

14:21:17.0130 2868 Net Driver HPZ12 - ok

14:21:17.0145 2868 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys

14:21:17.0146 2868 NetBIOS - ok

14:21:17.0174 2868 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys

14:21:17.0176 2868 NetBT - ok

14:21:17.0207 2868 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:21:17.0209 2868 Netlogon - ok

14:21:17.0265 2868 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll

14:21:17.0268 2868 Netman - ok

14:21:17.0303 2868 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll

14:21:17.0307 2868 netprofm - ok

14:21:17.0459 2868 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:21:17.0461 2868 NetTcpPortSharing - ok

14:21:17.0892 2868 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys

14:21:17.0920 2868 netw5v32 - ok

14:21:18.0186 2868 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\drivers\nfrd960.sys

14:21:18.0187 2868 nfrd960 - ok

14:21:18.0254 2868 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll

14:21:18.0258 2868 NlaSvc - ok

14:21:18.0284 2868 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys

14:21:18.0285 2868 Npfs - ok

14:21:18.0384 2868 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll

14:21:18.0387 2868 nsi - ok

14:21:18.0428 2868 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys

14:21:18.0429 2868 nsiproxy - ok

14:21:18.0560 2868 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys

14:21:18.0570 2868 Ntfs - ok

14:21:18.0607 2868 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys

14:21:18.0608 2868 Null - ok

14:21:19.0724 2868 nvlddmkm (f452e6ad3eda2852f44be492e283c40f) C:\Windows\system32\DRIVERS\nvlddmkm.sys

14:21:19.0791 2868 nvlddmkm - ok

14:21:20.0621 2868 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys

14:21:20.0625 2868 nvraid - ok

14:21:20.0754 2868 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys

14:21:20.0756 2868 nvstor - ok

14:21:20.0804 2868 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys

14:21:20.0806 2868 nv_agp - ok

14:21:20.0827 2868 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys

14:21:20.0828 2868 ohci1394 - ok

14:21:20.0925 2868 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

14:21:20.0928 2868 ose - ok

14:21:21.0283 2868 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

14:21:21.0317 2868 osppsvc - ok

14:21:21.0479 2868 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

14:21:21.0489 2868 p2pimsvc - ok

14:21:21.0555 2868 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll

14:21:21.0560 2868 p2psvc - ok

14:21:21.0634 2868 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\drivers\parport.sys

14:21:21.0636 2868 Parport - ok

14:21:21.0680 2868 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\Windows\system32\drivers\partmgr.sys

14:21:21.0681 2868 partmgr - ok

14:21:21.0742 2868 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\drivers\parvdm.sys

14:21:21.0744 2868 Parvdm - ok

14:21:21.0777 2868 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll

14:21:21.0785 2868 PcaSvc - ok

14:21:21.0817 2868 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys

14:21:21.0821 2868 pci - ok

14:21:21.0848 2868 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys

14:21:21.0849 2868 pciide - ok

14:21:21.0881 2868 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\drivers\pcmcia.sys

14:21:21.0883 2868 pcmcia - ok

14:21:21.0907 2868 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys

14:21:21.0908 2868 pcw - ok

14:21:21.0957 2868 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys

14:21:21.0962 2868 PEAUTH - ok

14:21:22.0059 2868 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll

14:21:22.0069 2868 PeerDistSvc - ok

14:21:22.0206 2868 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll

14:21:22.0218 2868 pla - ok

14:21:22.0418 2868 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll

14:21:22.0429 2868 PlugPlay - ok

14:21:22.0474 2868 Pml Driver HPZ12 (65bc271f337637731d3c71455ae1f476) C:\Windows\system32\HPZipm12.dll

14:21:22.0476 2868 Pml Driver HPZ12 - ok

14:21:22.0492 2868 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll

14:21:22.0494 2868 PNRPAutoReg - ok

14:21:22.0555 2868 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll

14:21:22.0559 2868 PNRPsvc - ok

14:21:22.0617 2868 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll

14:21:22.0621 2868 PolicyAgent - ok

14:21:22.0670 2868 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll

14:21:22.0674 2868 Power - ok

14:21:22.0778 2868 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys

14:21:22.0779 2868 PptpMiniport - ok

14:21:22.0826 2868 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\drivers\processr.sys

14:21:22.0828 2868 Processor - ok

14:21:22.0862 2868 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll

14:21:22.0866 2868 ProfSvc - ok

14:21:22.0900 2868 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:21:22.0902 2868 ProtectedStorage - ok

14:21:22.0949 2868 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys

14:21:22.0951 2868 Psched - ok

14:21:23.0061 2868 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\drivers\ql2300.sys

14:21:23.0070 2868 ql2300 - ok

14:21:23.0348 2868 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\drivers\ql40xx.sys

14:21:23.0351 2868 ql40xx - ok

14:21:23.0419 2868 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll

14:21:23.0425 2868 QWAVE - ok

14:21:23.0435 2868 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys

14:21:23.0436 2868 QWAVEdrv - ok

14:21:23.0451 2868 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys

14:21:23.0452 2868 RasAcd - ok

14:21:23.0482 2868 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys

14:21:23.0483 2868 RasAgileVpn - ok

14:21:23.0504 2868 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll

14:21:23.0507 2868 RasAuto - ok

14:21:23.0521 2868 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys

14:21:23.0522 2868 Rasl2tp - ok

14:21:23.0552 2868 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll

14:21:23.0557 2868 RasMan - ok

14:21:23.0577 2868 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys

14:21:23.0579 2868 RasPppoe - ok

14:21:23.0593 2868 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys

14:21:23.0594 2868 RasSstp - ok

14:21:23.0617 2868 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys

14:21:23.0620 2868 rdbss - ok

14:21:23.0632 2868 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys

14:21:23.0633 2868 rdpbus - ok

14:21:23.0645 2868 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys

14:21:23.0646 2868 RDPCDD - ok

14:21:23.0755 2868 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys

14:21:23.0759 2868 RDPDR - ok

14:21:23.0776 2868 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys

14:21:23.0778 2868 RDPENCDD - ok

14:21:23.0793 2868 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys

14:21:23.0794 2868 RDPREFMP - ok

14:21:23.0851 2868 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys

14:21:23.0853 2868 RDPWD - ok

14:21:23.0873 2868 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys

14:21:23.0875 2868 rdyboost - ok

14:21:23.0924 2868 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll

14:21:23.0927 2868 RemoteAccess - ok

14:21:23.0967 2868 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll

14:21:23.0971 2868 RemoteRegistry - ok

14:21:24.0023 2868 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys

14:21:24.0025 2868 RFCOMM - ok

14:21:24.0039 2868 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll

14:21:24.0042 2868 RpcEptMapper - ok

14:21:24.0082 2868 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe

14:21:24.0085 2868 RpcLocator - ok

14:21:24.0116 2868 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll

14:21:24.0122 2868 RpcSs - ok

14:21:24.0132 2868 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys

14:21:24.0134 2868 rspndr - ok

14:21:24.0203 2868 RTL8167 (5283b9a27ff230f2ff70d92451ff409a) C:\Windows\system32\DRIVERS\Rt86win7.sys

14:21:24.0206 2868 RTL8167 - ok

14:21:24.0244 2868 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys

14:21:24.0245 2868 s3cap - ok

14:21:24.0278 2868 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe

14:21:24.0281 2868 SamSs - ok

14:21:24.0301 2868 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys

14:21:24.0302 2868 sbp2port - ok

14:21:24.0321 2868 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll

14:21:24.0325 2868 SCardSvr - ok

14:21:24.0333 2868 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys

14:21:24.0334 2868 scfilter - ok

14:21:24.0422 2868 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll

14:21:24.0431 2868 Schedule - ok

14:21:24.0473 2868 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll

14:21:24.0475 2868 SCPolicySvc - ok

14:21:24.0493 2868 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll

14:21:24.0497 2868 SDRSVC - ok

14:21:24.0509 2868 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys

14:21:24.0511 2868 secdrv - ok

14:21:24.0526 2868 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll

14:21:24.0529 2868 seclogon - ok

14:21:24.0546 2868 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\system32\sens.dll

14:21:24.0550 2868 SENS - ok

14:21:24.0590 2868 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll

14:21:24.0595 2868 SensrSvc - ok

14:21:24.0610 2868 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\drivers\serenum.sys

14:21:24.0612 2868 Serenum - ok

14:21:24.0638 2868 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\drivers\serial.sys

14:21:24.0639 2868 Serial - ok

14:21:24.0654 2868 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\drivers\sermouse.sys

14:21:24.0655 2868 sermouse - ok

14:21:24.0718 2868 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll

14:21:24.0727 2868 SessionEnv - ok

14:21:24.0764 2868 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys

14:21:24.0765 2868 sffdisk - ok

14:21:24.0769 2868 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys

14:21:24.0770 2868 sffp_mmc - ok

14:21:24.0774 2868 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys

14:21:24.0775 2868 sffp_sd - ok

14:21:24.0779 2868 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\drivers\sfloppy.sys

14:21:24.0780 2868 sfloppy - ok

14:21:24.0831 2868 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll

14:21:24.0839 2868 SharedAccess - ok

14:21:24.0878 2868 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll

14:21:24.0883 2868 ShellHWDetection - ok

14:21:24.0894 2868 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys

14:21:24.0895 2868 sisagp - ok

14:21:24.0912 2868 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\drivers\SiSRaid2.sys

14:21:24.0913 2868 SiSRaid2 - ok

14:21:24.0926 2868 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\drivers\sisraid4.sys

14:21:24.0927 2868 SiSRaid4 - ok

14:21:24.0939 2868 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys

14:21:24.0940 2868 Smb - ok

14:21:24.0980 2868 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe

14:21:24.0983 2868 SNMPTRAP - ok

14:21:24.0990 2868 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys

14:21:24.0991 2868 spldr - ok

14:21:25.0019 2868 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe

14:21:25.0023 2868 Spooler - ok

14:21:25.0226 2868 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe

14:21:25.0248 2868 sppsvc - ok

14:21:25.0377 2868 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll

14:21:25.0384 2868 sppuinotify - ok

14:21:25.0499 2868 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys

14:21:25.0504 2868 srv - ok

14:21:25.0555 2868 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys

14:21:25.0559 2868 srv2 - ok

14:21:25.0603 2868 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys

14:21:25.0605 2868 srvnet - ok

[kweezie wabbit]

14:17:39.0277 5288 Scan finished

14:17:39.0277 5288 ============================================================

14:17:39.0288 5352 Detected object count: 1

14:17:39.0288 5352 Actual detected object count: 1

14:18:14.0695 5352 mfevtp ( ForgedFile.Multi.Generic ) - skipped by user

14:18:14.0695 5352 mfevtp ( ForgedFile.Multi.Generic ) - User select action: Skip

Waarom heb je de gevonden besmetting niet laten verwijderen?

[e.vandeklift]

Ik twijfelde en dacht terug te kunnen bladeren. Dit ging niet meer. Ik heb daarna nog een keertje gescand. Dit gaf geen foutmelding meer. Ik dacht dus datde virus automatisch is verwijderd. Ik ga vanmiddag kijken of het probleem is opgelost. Je hoort van me en alvast bedankt voor jullie hulp tot zover.

[e.vandeklift]

Helaas het probleem is niet verholpen. Hoe nu verder?

[kweezie wabbit]

Download de Emsisoft Emergency Kit naar het bureaublad en pak het ZIP bestand uit.

• Open de map "EmsisoftEmergencyKit" en dubbelklik op "Start.exe"
  
• Klik nu op "Emergency Kit Scanner" u krijg nu een melding dat het is aanbevolen om eerst te updaten sta dit toe door te klikken op "Ja"
  
  
• Als de update gereed is en de melding "Update process is succesvol afgerond" verschijnt klikt u op "menu" en dan op "Scan PC"
  
• Selecteer de optie "Diep" als deze niet standaard al zo is ingesteld.
  
• Klik Nu op de knop "Scan" en doe verder niets op de computer tijdens het scannen, deze scan kan een geruime tijd in beslag nemen dus wacht dit geduldig af.
  
• Het venster met de waarschuwing over een verhoogd risico kunt u sluiten als de scan gereed is.
  
• Zorg ervoor dat alle gevonden items zijn aangevinkt en druk dan op de knop "verwijder geselecteerde" u zal nu de volgende melding krijgen maar klik hier op "Ja"
  
  
• Als het verwijderen gereed is klikt u op de knop "View report" en selecteert u het tekstbestand van deze scan met de naam zoals: a2scan_110730-111615.txt
  
• Plaats de inhoud van dit LOG bestand straks in uw volgende bericht.
  
• Herstart nu de computer.
  

[e.vandeklift]

Afsluiten en opstarten duur ca 15 minuten. Af en toe zelfs geen inlogscherm. Na 4 keer pas ingelogd. Geeft ook via Mcafee internetproblemen. Probleem dus nog niet verholpen.

Ik heb wel een aantal bestanden kunnen verwijderen via de kit.

Ze onderstaande logbestand:

Emsisoft Emergency Kit - Versie 1.0

Laatste Update: 29-5-2012 17:45:54

Scaninstellingen:

Scantype: Diepe Scan

Objecten: Geheugen, Sporen, Cookies, C:\, D:\

Scan archieven: Aan

Heuristieken: Uit

ADS Scan: Aan

Scan gestart: 29-5-2012 17:46:20

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Freeze.com\Installer --> id Ontdekt: Trace.Registry.EZ Game Cheats!A2

Key: HKEY_LOCAL_MACHINE\software\Freeze.com\ Ontdekt: Trace.Registry.Freeze!A2

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\45d0b7c3-7884034a/Rotok.class Ontdekt: JAVA.Inject!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Bar.class Ontdekt: Exploit.-!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia$fffgss.class Ontdekt: Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia$ffhg.class Ontdekt: Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia.class Ontdekt: Exploit.Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Etui.class Ontdekt: JAVA.Inject!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Oi.class Ontdekt: Java.CVE!IK

Gescand

Bestanden: 195424

Sporen: 409585

Cookies: 1161

Processen: 64

Gevonden

Bestanden: 7

Sporen: 2

Cookies: 0

Processen: 0

Registersleutels: 0

Scan Geëindigd: 29-5-2012 18:56:17

Scantijd: 1:09:57

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia.class Verwijderd Exploit.Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia$fffgss.class Verwijderd Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Esia$ffhg.class Verwijderd Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Oi.class Verwijderd Java.CVE!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Bar.class Verwijderd Exploit.-!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\45d0b7c3-7884034a/Rotok.class Verwijderd JAVA.Inject!IK

C:\Users\Rina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\6f5c0db4-61b4ff86/Etui.class Verwijderd JAVA.Inject!IK

Key: HKEY_LOCAL_MACHINE\software\Freeze.com\ Verwijderd Trace.Registry.Freeze!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Freeze.com\Installer --> id Verwijderd Trace.Registry.EZ Game Cheats!A2

Verwijderd

Bestanden: 7

Sporen: 2

Cookies: 0

[kweezie wabbit]

Controleer of het systeemherstel wel is ingeschakeld.

Doe dit via Configuratiescherm -> Systeem en Beveiliging -> Systeem -> Systeembeveiliging

Kijk naar de C schijf of er ingeschakeld bij staat.

[e.vandeklift]

C schijf staat ingeschakeld.

Ik heb al eerder een zelfgemaakt herstelpunt gemaakt dit is ook weg. Wederom een herstelpunt gemaakt. Geen verbetering.

[kweezie wabbit]

Ga naar Configuratiescherm -> Systeem en Beveiliging -> Systeem -> Systeembeveiliging

Selecteer de C schijf en klik op configureren.

Kijk nu of er voldoende ruimte is toegewezen voor de herstelpunten (10 % is normaal)

Vergroot eventueel de toegewezen ruimte en kijk of je dan een nieuw herstelpunt kan maken.

[e.vandeklift]

Ik heb geconfigureerd en het op 13 % gezet. Geen herstelpunt aanwezig en blijft ook niet staan. Het systeem blijft met het afsluiten zeer traag en met het opstarten ook.

Ik heb Mcafee nog een keertje laten scannen, maar dit duurde een eeuwigheid (2 uur over 22%). Ik heb dit geannuleerd.

Wat nog meer te doen?