Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Periodic slowing, stuttering for the past week


  • This topic is locked This topic is locked
13 replies to this topic

#1 ferrouswheel

ferrouswheel

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 26 March 2017 - 05:40 PM

For about the past week, my machine's been slowing down at seemingly random times or when I do things like open new tabs in Firefox. 

It's easiest to notice when I've got music playing, because the music slows down and stutters for a second. It sounds sort of like how stuff sounds on YouTube when it's set to reduced speed. The mouse cursor slows down too, at the same times. It happens system-wide, not just in web browsers. I hear the same stutter at the same times and get the same mouse skipping/slowing when I've got a local audio file playing from VLC media player, for instance.

 

I suspect I've picked up some kind of malware from a malicious website. I was doing some online shopping last week, around the time it started, and I passed through a couple shady looking sites by accident while I was browsing, and that's around the time this started. I also installed some freeware around that time (Adventure Game Studio), but I think it was probably the other sites, if it's not just a hardware issue or something.

 

I scanned for viruses with BitDefender, but nothing came up. Spybot didn't show anything either, but I had to uninstall it to install BitDefender. I'd been using Panda up until then, which didn't find anything either, but I wanted to switch to something else when I started having problems.

 

It's not that bad most of the time, but it varies. Sometimes the slowdown lasts a few seconds, and the other night it got so bad I could barely get the machine shut down or restarted.

 

What should I do?


Edited by hamluis, 27 March 2017 - 09:06 AM.
Emphasis added, moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 anorkneemerse

anorkneemerse

  • Members
  • 56 posts
  • OFFLINE
  •  

Posted 26 March 2017 - 10:07 PM

@ ferrouswheel

 

Possible reasons; ...

 

How are your Disk Defragmenter and Disk Cleanup operations.?

 

By default, Disk Defrag is set to an auto-schedule of bi-weekly and when the hard-disk has been idle for some minutes. IOW, the disk will be auto-defrag once in 2 weeks by Windows. If the users ignorantly disrupt this auto-defrag process, disk complications will follow = slow or bricked computer.

....... So, it is better for Win 7 users to disable auto-scheduled Disk Defrag and manually defrag the hard-disk. The computer should not be used while Disk Defrag is going on.

.

 

What is the subscribed Internet bandwidth from your ISP.?

 

Streaming live music requires an Internet download speed of about 400kbps. Web-surfing for news/info requires about 200kbps. Streaming live videos in HD/720p requires about 2Mbps.

....... If your subscribed Internet bandwidth is less than 500kbps or 0.5Mbps, live-streaming music together with web-surfing will be a problem.



#3 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 26 March 2017 - 11:11 PM

How are your Disk Defragmenter and Disk Cleanup operations.?

...

What is the subscribed Internet bandwidth from your ISP.?

 

I have scheduled defragmentation enabled, and it seems to be taking care of the defragging. I hit Analyze and it says that my HDD is 0% fragmented and defrag isn't needed (and it doesn't appear to give me the option to have it do it anyway, unless I'm missing it).

 

I get the same issue with the music whether it's streaming from online or if I'm listening to a local audio file.

 

It's not limited to when media is playing either, as I notice the mouse-cursor chugging like it does when the music stutters, whether there's any audio or video playing or not. It's just easiest to notice with music going, because the slowdown becomes audible. I notice it while typing too, if I happen to be typing when it happens. It pauses for a second and the letters don't come up, the cursor doesn't blink, and then it catches up and everything I types comes in real fast.

 

It's doing this every few minutes, generally, but sometimes it'll go maybe 10 or 15 minutes without doing it. But then it starts again, and does it every few seconds. Sometimes it's only enough to notice it by hearing it (with music or sound from a video on) but then sometimes it's bad enough to notice in the mouse and keyboard.


Edited by ferrouswheel, 26 March 2017 - 11:11 PM.


#4 anorkneemerse

anorkneemerse

  • Members
  • 56 posts
  • OFFLINE
  •  

Posted 27 March 2017 - 12:22 AM

@ ferrouswheel

 

It is better to disable auto-scheduled Disk Defrag. A computer dummy friend had his Win 7 computer bricked by this default feature after some months.

 

You can try the inbuilt check-disk(& repair) feature .......

https://support.microsoft.com/en-us/help/2641432/check-your-hard-disk-for-errors-in-windows-7



#5 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 27 March 2017 - 09:17 PM

Okay, I ran Check Disk, but it didn't find any problems.



#6 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 31 March 2017 - 01:36 AM

I tried running scans with ESET online scanner and SpyWare Terminator, but neither found anything.

 

I haven't noticed a completely consistent pattern in the slowdowns, but there appears to be some correlation with Javascript. I noticed node.exe (node.js) running and using more memory than other programs, and when I stopped that process, it seemed to stop the problem for a time.

 

But I tried deleting the EXE, which was installed with Adobe Creative Cloud, to see if it would solve it and if maybe I could run the Adobe software without it. But it didn't work. The problem remained. So I restored the deleted files. So I'm not sure if that had anything to do with it or if it was just a coincidence.

 

Should I just keep trying different scanners, or is there something more specific I could try?

 

Edit: The only pattern I notice to it now is that as web pages are loading, it slows down enough that the sound almost stops, and I can't move the mouse at all. But it happens periodically even when pages aren't loading. It's just worst then.


Edited by ferrouswheel, 31 March 2017 - 04:20 AM.


#7 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 31 March 2017 - 11:40 PM

Here are the AdwCleaner, JRT, and CCleaner logs, as requested of someone else with a similar problem in another thread...

 

# AdwCleaner v6.045 - Logfile created 01/04/2017 at 00:00:12
# Updated on 28/03/2017 by Malwarebytes
# Database : 2017-03-31.1 [Server]
# Operating System : Windows 7 Professional Service Pack 1 (X64)
# Username : CommanderX - THEDELL
# Running from : C:\Users\CommanderX\Downloads\AdwCleaner.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****

[-] Service deleted: panda_url_filtering


***** [ Folders ] *****

[-] Folder deleted: C:\ProgramData\Panda Security URL Filtering
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Panda Security URL Filtering
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot


***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com


***** [ Web browsers ] *****

[-] [C:\Users\CommanderX\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com
[-] [C:\Users\CommanderX\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com
[-] [C:\Users\CommanderX\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: thundersoft-free-screen-recorder.en.softonic.com
[-] [C:\Users\CommanderX\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: azlyrics.com


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1759 Bytes] - [01/04/2017 00:00:12]
C:\AdwCleaner\AdwCleaner[S0].txt - [1922 Bytes] - [31/03/2017 23:55:32]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1905 Bytes] ##########
 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.2 (03.10.2017)
Operating System: Windows 7 Professional x64
Ran by CommanderX (Administrator) on Sat 04/01/2017 at  0:11:12.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 19

Successfully deleted: C:\ProgramData\mntemp (File)
Successfully deleted: C:\Windows\wininit.ini (File)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5PBUG2B1 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZ81BALI (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRUWVASL (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\CommanderX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N7L2PH5X (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\system32\REN3CF6.tmp (File)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5PBUG2B1 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZ81BALI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRUWVASL (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N7L2PH5X (Temporary Internet Files Folder)



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D942FF09-9F71-4BAE-AC16-B458961DB7A0} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 04/01/2017 at  0:13:01.80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Cisco EAP-FAST Module    Cisco Systems, Inc.    3/6/2014    1.55 MB    2.2.14
Cisco LEAP Module    Cisco Systems, Inc.    3/6/2014    644 KB    1.0.19
Cisco PEAP Module    Cisco Systems, Inc.    3/6/2014    1.23 MB    1.1.6
Dell WLAN and Bluetooth Client Installation    Dell Inc.    3/6/2014        10.0
Intel® Rapid Storage Technology    Intel Corporation    3/6/2014        12.7.3.1001
Microsoft Visual C++ 2005 Redistributable    Microsoft Corporation    3/6/2014    300 KB    8.0.59193
Realtek Card Reader    Realtek Semiconductor Corp.    3/6/2014        6.2.9200.30164
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    3/6/2014        6.0.1.7004
Shared C Run-time for x64    McAfee    3/6/2014    1.38 MB    10.0.0
Intel® Processor Graphics    Intel Corporation    4/16/2015        9.18.10.3272
Intel® Management Engine Components    Intel Corporation    4/16/2015        9.5.14.1724
Intel® USB 3.0 eXtensible Host Controller Driver    Intel Corporation    4/16/2015        2.5.0.19
Adobe Media Player    Adobe Systems Incorporated    6/11/2015        1.8
Adobe Photoshop CS5    Adobe Systems Incorporated    6/11/2015    2.52 GB    12.0
Google Chrome    Google Inc.    6/11/2015        56.0.2924.87
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17    Microsoft Corporation    6/11/2015    780 KB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17    Microsoft Corporation    6/11/2015    594 KB    9.0.30729
Sculptris Alpha 6    Pixologic    6/11/2015    11.3 MB    Alpha 6
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148    Microsoft Corporation    6/12/2015    788 KB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148    Microsoft Corporation    6/12/2015    596 KB    9.0.30729.4148
ZBrush 4R7    Pixologic    6/12/2015    1.24 GB    4R7
Visual Pinball    Randy Davis    6/18/2015    4.37 MB    0.0.4.1226
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022    Microsoft Corporation    6/24/2015    1.41 MB    9.0.21022
Adobe Reader XI (11.0.11)  MUI    Adobe Systems Incorporated    6/26/2015    642 MB    11.0.11
OpenRL Runtime 1.3.1000.14 x64    Caustic Graphics, Inc.    6/26/2015    12.0 MB    1.3.1000.14
xNormal 3.19.1    S.Orgaz    6/26/2015        
Adobe AIR    Adobe Systems Incorporated    6/28/2015        3.1.0.4880
Adobe Flash Professional CS6    Adobe Systems Incorporated    6/28/2015    2.36 GB    12.0
Adobe Help Manager    Adobe Systems Incorporated    6/28/2015        4.0.244
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161    Microsoft Corporation    6/28/2015    788 KB    9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161    Microsoft Corporation    6/28/2015    600 KB    9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219    Microsoft Corporation    6/28/2015    13.8 MB    10.0.40219
VLC media player    VideoLAN    6/28/2015        2.2.1
Logitech Webcam Software    Logitech Inc.    6/30/2015        2.51
QuickTime 7    Apple Inc.    7/2/2015    70.3 MB    7.77.80.95
Adobe Extension Manager CC    Adobe Systems Incorporated    7/24/2015    66.3 MB    7.3.2
Adobe Extension Manager CS6    Adobe Systems Incorporated    7/24/2015    75.1 MB    6.0.8
Audacity 2.1.0    Audacity Team    7/24/2015    49.8 MB    2.1.0
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219    Microsoft Corporation    7/24/2015    11.1 MB    10.0.40219
LAME v3.99.3 (for Windows)        7/31/2015    1.52 MB    
Entity Framework 6.1.1 Tools  for Visual Studio 2013    Microsoft Corporation    8/12/2015    145 MB    12.0.30610.0
Microsoft .NET Framework 4.5 Multi-Targeting Pack    Microsoft Corporation    8/12/2015    41.8 MB    4.5.50710
Microsoft .NET Framework 4.5 SDK    Microsoft Corporation    8/12/2015    18.5 MB    4.5.50710
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack    Microsoft Corporation    8/12/2015    49.3 MB    4.5.50932
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)    Microsoft Corporation    8/12/2015    74.5 MB    4.5.50932
Microsoft .NET Framework 4.5.1 SDK    Microsoft Corporation    8/12/2015    19.4 MB    4.5.51641
Microsoft Help Viewer 2.1    Microsoft Corporation    8/12/2015    12.1 MB    2.1.21005
Microsoft SQL Server 2012 Command Line Utilities     Microsoft Corporation    8/12/2015    876 KB    11.1.3000.0
Microsoft SQL Server 2012 Data-Tier App Framework     Microsoft Corporation    8/12/2015    10.1 MB    11.1.2902.0
Microsoft SQL Server 2012 Data-Tier App Framework  (x64)    Microsoft Corporation    8/12/2015    10.1 MB    11.1.2902.0
Microsoft SQL Server 2012 Express LocalDB     Microsoft Corporation    8/12/2015    158 MB    11.1.3000.0
Microsoft SQL Server 2012 Management Objects     Microsoft Corporation    8/12/2015    23.8 MB    11.1.3000.0
Microsoft SQL Server 2012 Management Objects  (x64)    Microsoft Corporation    8/12/2015    16.8 MB    11.1.3000.0
Microsoft SQL Server 2012 Native Client     Microsoft Corporation    8/12/2015    7.19 MB    11.1.3000.0
Microsoft SQL Server 2012 T-SQL Language Service     Microsoft Corporation    8/12/2015    6.14 MB    11.1.3000.0
Microsoft SQL Server 2012 Transact-SQL ScriptDom     Microsoft Corporation    8/12/2015    4.53 MB    11.1.3000.0
Microsoft SQL Server 2014 Express LocalDB     Microsoft Corporation    8/12/2015    227 MB    12.0.2000.8
Microsoft SQL Server 2014 Management Objects     Microsoft Corporation    8/12/2015    23.1 MB    12.0.2000.8
Microsoft SQL Server 2014 Management Objects  (x64)    Microsoft Corporation    8/12/2015    15.1 MB    12.0.2000.8
Microsoft SQL Server 2014 T-SQL Language Service     Microsoft Corporation    8/12/2015    6.65 MB    12.0.2000.8
Microsoft SQL Server 2014 Transact-SQL ScriptDom     Microsoft Corporation    8/12/2015    6.17 MB    12.0.2000.8
Microsoft SQL Server Compact 4.0 SP1 x64 ENU    Microsoft Corporation    8/12/2015    19.3 MB    4.0.8876.1
Microsoft SQL Server Data Tools - enu (12.0.41012.0)    Microsoft Corporation    8/12/2015    28.4 MB    12.0.41012.0
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1)    Microsoft Corporation    8/12/2015    2.15 MB    12.0.30919.1
Microsoft System CLR Types for SQL Server 2012    Microsoft Corporation    8/12/2015    1.66 MB    11.1.3366.16
Microsoft System CLR Types for SQL Server 2012 (x64)    Microsoft Corporation    8/12/2015    1.53 MB    11.1.3366.16
Microsoft System CLR Types for SQL Server 2014    Microsoft Corporation    8/12/2015    4.84 MB    12.0.2000.8
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 4    Microsoft Corporation    8/12/2015    5.69 GB    12.0.31101.0
Prerequisites for SSDT     Microsoft Corporation    8/12/2015    6.36 MB    12.0.2000.8
Skype™ 7.8    Skype Technologies S.A.    8/22/2015    71.1 MB    7.8.102
Adobe Shockwave Player 12.1    Adobe Systems, Inc.    8/24/2015        12.1.9.160
Unity Web Player    Unity Technologies ApS    9/1/2015    12.0 MB    5.1.3f1
ArtRage Lite    Ambient Design    9/29/2015        4.5.5
Java 8 Update 65    Oracle Corporation    10/22/2015    21.0 MB    8.0.650.17
Stencyl    Stencyl, LLC    11/16/2015        /root/.jenkins/jobs/Stencyl-Windows/workspace/build
ASIO4ALL    Michael Tippach    12/13/2015        2.12
FL Studio ASIO    Image-Line    12/13/2015        
Akamai NetSession Interface    Akamai Technologies, Inc    12/22/2015        
Autodesk 3ds Max 2016    Autodesk    12/22/2015        18.6.667.0
Autodesk 3ds Max 2016 Populate Data    Autodesk    12/22/2015    582 MB    18.0.0.0
Autodesk Advanced Material Library Image Library 2016    Autodesk    12/22/2015    95.6 MB    6.3.0.19
Autodesk Material Library 2016    Autodesk    12/22/2015    95.8 MB    6.3.0.19
Autodesk Material Library Base Resolution Image Library 2016    Autodesk    12/22/2015    72.2 MB    6.3.0.19
Autodesk Material Library Medium Resolution Image Library 2016    Autodesk    12/22/2015    740 MB    6.3.0.19
Microsoft .NET Framework 4.6    Microsoft Corporation    12/22/2015    38.8 MB    4.6.00081
Silo 2        12/22/2015    48.7 MB    
WinRAR 5.30 (32-bit)    win.rar GmbH    12/22/2015        5.30.0
Swivel    Newgrounds.com, Inc.    1/4/2016        1.11
HP Deskjet 3050 J610 series Basic Device Software    Hewlett-Packard Co.    2/1/2016    117 MB    28.0.1315.0
SuperWave P8    SuperWave    2/9/2016    5.00 MB    2.4
Microsoft Office Word Viewer 2003    Microsoft Corporation    2/23/2016    27.9 MB    11.0.8173.0
Adobe Fuse CC (Preview)    Adobe Systems Incorporated    3/13/2016    4.35 GB    1.0
FastStone Capture 8.4    FastStone Soft    3/28/2016        8.4
Microsoft Visual C++ 2005 Redistributable (x64)    Microsoft Corporation    4/21/2016    708 KB    8.0.61000
eSpeak version 1.48.04        5/11/2016    7.66 MB    
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729    Microsoft Corporation    5/11/2016    230 KB    9.0.30729
Steam    Valve Corporation    5/18/2016        2.10.91.91
Team Fortress 2    Valve    5/18/2016        
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026    Microsoft Corporation    5/30/2016    24.3 MB    14.0.23026.0
NVIDIA Photoshop Plug-ins 64 bit        5/30/2016        8.50
xNormal 3.19.2    S.Orgaz    5/30/2016        
Icecream Screen Recorder version 3.67    Icecream Apps    6/9/2016    126 MB    3.67
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918    Microsoft Corporation    6/22/2016    24.4 MB    14.0.23918.0
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918    Microsoft Corporation    6/22/2016    20.7 MB    14.0.23918.0
Mixxx 2.0.0 (64-bit)    The Mixxx Development Team    7/13/2016        2.0.0
Adobe Flash Builder 4.7 (64 Bit)    Adobe Systems Incorporated    7/14/2016    2.01 GB    4.7
Adobe Gaming SDK 1.4    Adobe Systems Incorporated    7/14/2016    730 MB    1.4
Autodesk 3ds Max 2017    Autodesk    7/25/2016        19.0.1072.0
Autodesk 3ds Max 2017 Populate Data    Autodesk    7/25/2016    581 MB    19.0.0.0
Autodesk Advanced Material Library Image Library 2017    Autodesk    7/25/2016    95.6 MB    15.11.3.0
Autodesk Desktop App    Autodesk    7/25/2016    149 MB    6.2.0.174
Autodesk License Service (x64) - 3.1    Autodesk    7/25/2016    270 MB    3.1.26.0
Autodesk Material Library 2017    Autodesk    7/25/2016    357 MB    15.11.3.0
Autodesk Material Library Base Resolution Image Library 2017    Autodesk    7/25/2016    72.2 MB    15.11.3.0
Autodesk Material Library Medium Resolution Image Library 2017    Autodesk    7/25/2016    731 MB    15.11.3.0
Blender    Blender Foundation    7/25/2016    298 MB    2.77.1
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030    Microsoft Corporation    7/25/2016    20.5 MB    11.0.61030.0
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030    Microsoft Corporation    7/25/2016    17.3 MB    11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501    Microsoft Corporation    7/25/2016    20.5 MB    12.0.30501.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501    Microsoft Corporation    7/25/2016    17.1 MB    12.0.30501.0
NVIDIA mental ray and IRay feature plugins for 3ds Max 2017    Autodesk    7/25/2016    4.26 MB    19.0.0.0
Epic Games Launcher    Epic Games, Inc.    7/26/2016    90.6 MB    1.1.77.0
Native Instruments Massive        7/26/2016        
Bandisoft MPEG-1 Decoder    Bandisoft.com    8/3/2016        
The Secret of Monkey Island: Special Edition    LucasArts    8/18/2016        
Windward Studios Page 2 Stage 1.02        8/25/2016        
EPUB File Reader    epubfilereader.com    11/2/2016    2.05 MB    
Adobe Creative Cloud    Adobe Systems Incorporated    11/7/2016    480 MB    3.9.1.335
Adobe Bridge CC 2017    Adobe Systems Incorporated    11/29/2016    661 MB    7.0
Adobe Character Animator CC (Beta)    Adobe Systems Incorporated    11/29/2016    837 MB    1.0.5
Adobe Media Encoder CC 2017    Adobe Systems Incorporated    11/29/2016    1.51 GB    11.0.0
Adobe Muse CC 2017    Adobe Systems Incorporated    11/29/2016    971 MB    2017.0.0.149
Adobe Prelude CC 2017    Adobe Systems Incorporated    11/29/2016    922 MB    6.0.1
Stella 4.7.3    The Stella Team    12/4/2016    6.22 MB    
WD Drive Utilities    Western Digital Technologies, Inc.    1/17/2017    138 MB    1.4.0.92
UninstallTabletDeviceDriver        2/7/2017    15.4 MB    12.2.17
Windows Driver Package - Graphics Tablet (WinUsb) USBDevice  (04/10/2014 8.33.30.0)    Graphics Tablet    2/7/2017        04/10/2014 8.33.30.0
Adobe Photoshop CC 2017    Adobe Systems Incorporated    2/9/2017    1.72 GB    18.0.1
Adobe Premiere Pro CC 2017    Adobe Systems Incorporated    2/10/2017    2.00 GB    11.0.2
Adobe After Effects CC 2017    Adobe Systems Incorporated    2/22/2017    2.08 GB    14.1.0
Adobe Audition CC 2017    Adobe Systems Incorporated    2/22/2017    738 MB    10.0.2
ZoneAlarm Free Firewall    Check Point    3/2/2017    55.0 MB    15.0.653.17211
Adventure Game Studio 3.4.0 P3    AGS Project Team    3/17/2017    33.5 MB    3.4.0.15
Bitdefender Agent    Bitdefender    3/20/2017        1.0.1
Bitdefender Antivirus Free    Bitdefender    3/20/2017        1.0.6.12
Malwarebytes version 3.0.6.1469    Malwarebytes    3/28/2017    152 MB    3.0.6.1469
Mozilla Firefox 52.0.2 (x86 en-US)    Mozilla    3/28/2017    91.8 MB    52.0.2
Mozilla Maintenance Service    Mozilla    3/28/2017    451 KB    52.0.2.6291
Adobe Animate CC 2017    Adobe Systems Incorporated    3/29/2017    1.64 GB    16.2
Adobe Flash Player 25 NPAPI    Adobe Systems Incorporated    3/29/2017    19.6 MB    25.0.0.127
CCleaner    Piriform    4/1/2017        5.28
 

Yes    HKLM:Run    ZoneAlarm    Check Point Software Technologies Ltd.    "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
Yes    HKLM:Run    USB3MON    Intel Corporation    "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
Yes    HKLM:Run    TabletDriver    Graphic Tablet Company Shenzhen    C:\PenTabletDriver\TabletDriver.exe -hide
Yes    HKLM:Run    RTHDVCPL    Realtek Semiconductor    "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
Yes    HKLM:Run    RtHDVBg    Realtek Semiconductor    "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4P1
Yes    HKLM:Run    Persistence    Intel Corporation    "C:\Windows\system32\igfxpers.exe"
Yes    HKLM:Run    IgfxTray    Intel Corporation    "C:\Windows\system32\igfxtray.exe"
Yes    HKLM:Run    HotKeysCmds    Intel Corporation    "C:\Windows\system32\hkcmd.exe"
Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKCU:Run    AdobeBridge        
No    Startup User    Logitech . Product Registration.lnk    Leader Technologies/Logitech    C:\PROGRA~2\Logitech\Ereg\eReg.exe /remind /language=ENU /_WFM="."
No    HKLM:Run    Wondershare Helper Compact.exe        C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
No    HKLM:Run    SwitchBoard    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
No    HKLM:Run    SunJavaUpdateSched    Oracle Corporation    "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
No    HKLM:Run    RtHDVBg_PushButton    Realtek Semiconductor    "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
No    HKLM:Run    QuickTime Task    Apple Inc.    "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
No    HKLM:Run    LWS    Logitech Inc.    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
No    HKLM:Run    IAStorIcon    Intel Corporation    "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
No    HKLM:Run    DriveUtilitiesHelper        C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
No    HKLM:Run    Autodesk Desktop App    Autodesk, Inc.    "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
No    HKLM:Run    APSDaemon        "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
No    HKLM:Run    ADSKAppManager        "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
No    HKLM:Run    AdobeCS6ServiceManager    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
No    HKLM:Run    AdobeCS5ServiceManager    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
No    HKLM:Run    AdobeAAMUpdater-1.0    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
No    HKLM:Run    Adobe Creative Cloud    Adobe Systems Incorporated    "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
No    HKLM:Run    Adobe ARM    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
No    HKCU:Run    Steam    Valve Corporation    "C:\Program Files (x86)\Steam\steam.exe" -silent
No    HKCU:Run    SpybotPostWindows10UpgradeReInstall    Safer-Networking Ltd.    "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
No    HKCU:Run    Skype    Skype Technologies S.A.    "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
No    HKCU:Run    Icecream_Screen_Recorder_Prefetcher    Icecream    C:\Program Files (x86)\Icecream Screen Recorder\recorder.exe -prefetch
No    HKCU:Run    Akamai NetSession Interface    Akamai Technologies, Inc.    "C:\Users\CommanderX\AppData\Local\Akamai\netsession_win.exe"
 

Yes    Task    Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864    Bitdefender    C:\Program Files\Bitdefender Agent\WatchDog.exe repair
Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    GoogleUpdateTaskMachineCore    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
Yes    Task    GoogleUpdateTaskMachineUA    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
 



#8 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 02 April 2017 - 07:44 PM

MTB log:

 

MiniToolBox by Farbar  Version: 17-06-2016
Ran by CommanderX (administrator) on 02-04-2017 at 20:33:11
Running from "C:\Users\CommanderX\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Model: Inspiron 3847 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
ProxyServer: localhost:8080

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================
========================= IP Configuration: ================================

Dell Wireless 1705 802.11b/g/n (2.4GHZ) = Wireless Network Connection (Connected)
Realtek PCIe GBE Family Controller = Local Area Connection (Media disconnected)
Microsoft Virtual WiFi Miniport Adapter = Wireless Network Connection 2 (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : TheDell
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : tampabay.rr.com

Wireless LAN adapter Wireless Network Connection 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
   Physical Address. . . . . . . . . : 22-48-9A-5B-72-95
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : F8-BC-12-96-18-9E
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

   Connection-specific DNS Suffix  . : tampabay.rr.com
   Description . . . . . . . . . . . : Dell Wireless 1705 802.11b/g/n (2.4GHZ)
   Physical Address. . . . . . . . . : 90-48-9A-5B-72-95
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::79f1:6b65:5920:32e9%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.116(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Saturday, April 01, 2017 10:07:00 PM
   Lease Expires . . . . . . . . . . : Monday, April 03, 2017 7:42:58 PM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 190068016
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-C1-DC-E4-F8-BC-12-96-18-9E
   DNS Servers . . . . . . . . . . . : 75.114.81.1
                                       75.114.81.2
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Reusable ISATAP Interface {B4319339-46F4-468A-9D19-3CD45C470E3C}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : tampabay.rr.com
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 155:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:90d7:3084:22ea:b746:f150(Preferred)
   Link-local IPv6 Address . . . . . : fe80::3084:22ea:b746:f150%188(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled
Server:  75-114-81-1.net.bhntampa.com
Address:  75.114.81.1

Name:    google.com
Addresses:  2607:f8b0:4002:c03::71
      74.125.21.139
      74.125.21.101
      74.125.21.100
      74.125.21.102
      74.125.21.113
      74.125.21.138


Pinging google.com [74.125.196.113] with 32 bytes of data:
Reply from 74.125.196.113: bytes=32 time=33ms TTL=44
Reply from 74.125.196.113: bytes=32 time=33ms TTL=44

Ping statistics for 74.125.196.113:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 33ms, Maximum = 33ms, Average = 33ms
Server:  75-114-81-1.net.bhntampa.com
Address:  75.114.81.1

Name:    yahoo.com
Addresses:  2001:4998:58:c02::a9
      2001:4998:c:a06::2:4008
      2001:4998:44:204::a7
      206.190.36.45
      98.139.183.24
      98.138.253.109


Pinging yahoo.com [98.139.183.24] with 32 bytes of data:
Reply from 98.139.183.24: bytes=32 time=63ms TTL=42
Reply from 98.139.183.24: bytes=32 time=84ms TTL=42

Ping statistics for 98.139.183.24:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 63ms, Maximum = 84ms, Average = 73ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=23ms TTL=128
Reply from 127.0.0.1: bytes=32 time=17ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 17ms, Maximum = 23ms, Average = 20ms
===========================================================================
Interface List
 17...22 48 9a 5b 72 95 ......Microsoft Virtual WiFi Miniport Adapter
 12...f8 bc 12 96 18 9e ......Realtek PCIe GBE Family Controller
 11...90 48 9a 5b 72 95 ......Dell Wireless 1705 802.11b/g/n (2.4GHZ)
  1...........................Software Loopback Interface 1
189...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
188...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.116     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link     192.168.1.116    281
    192.168.1.116  255.255.255.255         On-link     192.168.1.116    281
    192.168.1.255  255.255.255.255         On-link     192.168.1.116    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.1.116    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.1.116    281
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
188     58 ::/0                     On-link
  1    306 ::1/128                  On-link
188     58 2001::/32                On-link
188    306 2001:0:9d38:90d7:3084:22ea:b746:f150/128
                                    On-link
 11    281 fe80::/64                On-link
188    306 fe80::/64                On-link
188    306 fe80::3084:22ea:b746:f150/128
                                    On-link
 11    281 fe80::79f1:6b65:5920:32e9/128
                                    On-link
  1    306 ff00::/8                 On-link
188    306 ff00::/8                 On-link
 11    281 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (04/02/2017 12:14:24 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).

Error: (04/01/2017 10:08:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2017 06:30:44 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).

Error: (04/01/2017 12:11:12 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Users\CommanderX\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"; Description = JRT Pre-Junkware Removal; Error = 0x80070422).

Error: (04/01/2017 12:03:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2017 06:42:02 PM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update; Error = 0x80070422).

Error: (03/31/2017 06:41:06 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).

Error: (03/31/2017 05:20:10 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2017 01:31:44 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).

Error: (03/30/2017 01:30:30 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).


System errors:
=============
Error: (04/01/2017 12:00:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\system32\athihvs.dll

Error: (04/01/2017 12:00:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\system32\athihvs.dll

Error: (04/01/2017 12:00:43 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\system32\athihvs.dll

Error: (04/01/2017 12:00:05 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:05 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:05 AM) (Source: Service Control Manager) (User: )
Description: The WD Drive Manager service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:04 AM) (Source: Service Control Manager) (User: )
Description: The SQL Server VSS Writer service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:04 AM) (Source: Service Control Manager) (User: )
Description: The ProductAgentService service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:04 AM) (Source: Service Control Manager) (User: )
Description: The panda_url_filtering Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (04/01/2017 12:00:03 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Capability Licensing Service Interface service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.


Microsoft Office Sessions:
=========================
Error: (04/02/2017 12:14:24 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80070422

Error: (04/01/2017 10:08:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2017 06:30:44 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80070422

Error: (04/01/2017 12:11:12 AM) (Source: System Restore)(User: )
Description: C:\Users\CommanderX\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"JRT Pre-Junkware Removal0x80070422

Error: (04/01/2017 12:03:11 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2017 06:42:02 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (03/31/2017 06:41:06 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80070422

Error: (03/31/2017 05:20:10 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2017 01:31:44 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80070422

Error: (03/30/2017 01:30:30 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80070422


========================= Memory info: ===================================

Percentage of memory in use: 22%
Total physical RAM: 12204.95 MB
Available physical RAM: 9466.75 MB
Total Virtual: 24408.08 MB
Available Virtual: 21107.98 MB

========================= Partitions: =====================================

1 Drive c: (OS) (Fixed) (Total:909.81 GB) (Free:630.44 GB) NTFS
2 Drive d: (TEENAGE_MUTANT_NINJA_TURTLES) (CDROM) (Total:4.2 GB) (Free:0 GB) UDF
3 Drive e: (RECOVERY) (Fixed) (Total:21.67 GB) (Free:11.91 GB) NTFS
4 Drive g: () (Removable) (Total:7.41 GB) (Free:7.16 GB) FAT32

========================= Users: ========================================

User accounts for \\THEDELL

Administrator            CommanderX               Guest                    


**** End of log ****

             


**** End of log ****

 

Speccy:

http://speccy.piriform.com/results/w5rx3RoqeDvOliSHUH6IpTy

 

TDSSKiller report (no threats found):

 

20:41:03.0599 0x103c  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
20:41:10.0587 0x103c  ============================================================
20:41:10.0587 0x103c  Current date / time: 2017/04/02 20:41:10.0587
20:41:10.0587 0x103c  SystemInfo:
20:41:10.0587 0x103c  
20:41:10.0587 0x103c  OS Version: 6.1.7601 ServicePack: 1.0
20:41:10.0587 0x103c  Product type: Workstation
20:41:10.0587 0x103c  ComputerName: THEDELL
20:41:10.0587 0x103c  UserName: CommanderX
20:41:10.0587 0x103c  Windows directory: C:\Windows
20:41:10.0587 0x103c  System windows directory: C:\Windows
20:41:10.0587 0x103c  Running under WOW64
20:41:10.0587 0x103c  Processor architecture: Intel x64
20:41:10.0587 0x103c  Number of processors: 4
20:41:10.0587 0x103c  Page size: 0x1000
20:41:10.0587 0x103c  Boot type: Normal boot
20:41:10.0590 0x103c  CodeIntegrityOptions = 0x00000001
20:41:10.0590 0x103c  ============================================================
20:41:12.0506 0x103c  KLMD registered as C:\Windows\system32\drivers\85698239.sys
20:41:12.0506 0x103c  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23677, osProperties = 0x1
20:41:12.0852 0x103c  System UUID: {9F21D193-F731-D50F-6E3F-536B20F2625A}
20:41:14.0857 0x103c  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:41:14.0870 0x103c  Drive \Device\Harddisk1\DR1 - Size: 0x1DB000000 ( 7.42 Gb ), SectorSize: 0x200, Cylinders: 0x3C8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
20:41:14.0872 0x103c  ============================================================
20:41:14.0872 0x103c  \Device\Harddisk0\DR0:
20:41:14.0938 0x103c  MBR partitions:
20:41:14.0938 0x103c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x2B55000
20:41:14.0938 0x103c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2B69000, BlocksNum 0x71B9D000
20:41:14.0938 0x103c  \Device\Harddisk1\DR1:
20:41:14.0939 0x103c  MBR partitions:
20:41:14.0939 0x103c  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x2000, BlocksNum 0xED6000
20:41:14.0939 0x103c  ============================================================
20:41:15.0055 0x103c  C: <-> \Device\Harddisk0\DR0\Partition2
20:41:15.0076 0x103c  E: <-> \Device\Harddisk0\DR0\Partition1
20:41:15.0076 0x103c  ============================================================
20:41:15.0076 0x103c  Initialize success
20:41:15.0076 0x103c  ============================================================
20:41:23.0334 0x0d94  ============================================================
20:41:23.0334 0x0d94  Scan started
20:41:23.0334 0x0d94  Mode: Manual;
20:41:23.0334 0x0d94  ============================================================
20:41:23.0334 0x0d94  KSN ping started
20:41:23.0580 0x0d94  KSN ping finished: true
20:41:24.0313 0x0d94  ================ Scan system memory ========================
20:41:24.0313 0x0d94  System memory - ok
20:41:24.0314 0x0d94  ================ Scan services =============================
20:41:24.0392 0x0d94  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
20:41:24.0395 0x0d94  1394ohci - ok
20:41:24.0430 0x0d94  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
20:41:24.0435 0x0d94  ACPI - ok
20:41:24.0447 0x0d94  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
20:41:24.0448 0x0d94  AcpiPmi - ok
20:41:24.0560 0x0d94  [ 0121826AC84AD4AD5E8FEFDD6F555B7A, 3CB8152494CD82E6CE526B46825E7E61433E03F29691A2E90AA4218998BD4913 ] AdAppMgrSvc     C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
20:41:24.0579 0x0d94  AdAppMgrSvc - ok
20:41:24.0630 0x0d94  [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:41:24.0632 0x0d94  AdobeARMservice - ok
20:41:24.0730 0x0d94  [ 8532B30A054D83614A90D24AD61A29DF, 959C74C63AF7F4E5588C705FBF08EA7A8749268BC28819879ED53AB7A3410B74 ] AdobeUpdateService C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
20:41:24.0741 0x0d94  AdobeUpdateService - ok
20:41:24.0771 0x0d94  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
20:41:24.0778 0x0d94  adp94xx - ok
20:41:24.0795 0x0d94  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
20:41:24.0800 0x0d94  adpahci - ok
20:41:24.0813 0x0d94  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
20:41:24.0815 0x0d94  adpu320 - ok
20:41:24.0835 0x0d94  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
20:41:24.0837 0x0d94  AeLookupSvc - ok
20:41:24.0865 0x0d94  [ D1E343BC00136CE03C4D403194D06A80, 94F2543164A2CEA179EDE53E1294EE24391A59CAEFF83BA5CE9385E8E686E89C ] AERTFilters     C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
20:41:24.0867 0x0d94  AERTFilters - ok
20:41:24.0903 0x0d94  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys
20:41:24.0911 0x0d94  AFD - ok
20:41:24.0922 0x0d94  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
20:41:24.0923 0x0d94  agp440 - ok
20:41:25.0014 0x0d94  [ A32EA26C90A47B2BC93D7B0B94994B11, 1CF8DB09CA27EAC5741489EDFDFC04D69485B51C726F539BFCDC3C78E8E09EBE ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
20:41:25.0042 0x0d94  AGSService - ok
20:41:25.0129 0x0d94  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
20:41:25.0200 0x0d94  ALG - ok
20:41:25.0274 0x0d94  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
20:41:25.0275 0x0d94  aliide - ok
20:41:25.0283 0x0d94  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
20:41:25.0284 0x0d94  amdide - ok
20:41:25.0293 0x0d94  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
20:41:25.0294 0x0d94  AmdK8 - ok
20:41:25.0306 0x0d94  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
20:41:25.0307 0x0d94  AmdPPM - ok
20:41:25.0321 0x0d94  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
20:41:25.0323 0x0d94  amdsata - ok
20:41:25.0330 0x0d94  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
20:41:25.0333 0x0d94  amdsbs - ok
20:41:25.0347 0x0d94  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
20:41:25.0348 0x0d94  amdxata - ok
20:41:25.0372 0x0d94  [ B84DDCCB03A9CEDC1E90A88EDA5306DB, 1E51A7336C7E3F6402ED90AB0B3E98FD3827E2DC51B133E7F8BB37140B315192 ] AppID           C:\Windows\system32\drivers\appid.sys
20:41:25.0374 0x0d94  AppID - ok
20:41:25.0388 0x0d94  [ 02B60F8FA4BAB8DC3B14782A7E60564B, D7EB27CB202573734D7A4EB4667B9BCEC1598AA9EBD154F2C9266AF230F51A52 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
20:41:25.0389 0x0d94  AppIDSvc - ok
20:41:25.0421 0x0d94  [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo         C:\Windows\System32\appinfo.dll
20:41:25.0423 0x0d94  Appinfo - ok
20:41:25.0430 0x0d94  [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
20:41:25.0434 0x0d94  AppMgmt - ok
20:41:25.0445 0x0d94  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
20:41:25.0446 0x0d94  arc - ok
20:41:25.0456 0x0d94  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
20:41:25.0458 0x0d94  arcsas - ok
20:41:25.0567 0x0d94  [ EE424A5CE56E3923D59BB7DE2E15036D, 8B8196870EFE74D43EDA72674021A46846D370E97A6A058134D84A721AECD091 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
20:41:25.0568 0x0d94  aspnet_state - ok
20:41:25.0599 0x0d94  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
20:41:25.0601 0x0d94  AsyncMac - ok
20:41:25.0621 0x0d94  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
20:41:25.0622 0x0d94  atapi - ok
20:41:25.0642 0x0d94  [ 65DD42A358451920A703EEEC1AB4995B, 7690EFB12E928ECF3D3D3155F7D1F7A8FEEE742212ABE5319166EA8DB5601884 ] AthBTPort       C:\Windows\system32\DRIVERS\btath_flt.sys
20:41:25.0643 0x0d94  AthBTPort - ok
20:41:25.0695 0x0d94  [ 92A73280AB80C0E693E083EEE18DE4D8, 2AF185F5576D9664E5AC5B1CCDC736D00F3655DCA11F594CC56945E779A7118B ] AtherosSvc      C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
20:41:25.0700 0x0d94  AtherosSvc - ok
20:41:25.0787 0x0d94  [ 12A145262015D6C7F08CC251A4A9713B, 30DFD601983CE8B864FC40A863A3BB83D80CF4BBAD445DE502666CFEB05BFAE6 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
20:41:25.0862 0x0d94  athr - ok
20:41:25.0907 0x0d94  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:41:25.0918 0x0d94  AudioEndpointBuilder - ok
20:41:25.0930 0x0d94  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
20:41:25.0938 0x0d94  AudioSrv - ok
20:41:26.0016 0x0d94  [ DA978AB6E0AAEA82235C943DEED3484C, 42A3ADB76B9E5F7309992C9737956CBE1706DD0FEC9565F493EDD104D8E64C97 ] avc3            C:\Windows\system32\DRIVERS\avc3.sys
20:41:26.0039 0x0d94  avc3 - ok
20:41:26.0062 0x0d94  [ 09A3015AEA14CF9A4ECDE1CEA6AFE0AA, 77A58DE0961F1C2BD9627A975EF661A63EA5E4A3361433353408EABCE6869317 ] avckf           C:\Windows\system32\DRIVERS\avckf.sys
20:41:26.0073 0x0d94  avckf - ok
20:41:26.0098 0x0d94  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
20:41:26.0102 0x0d94  AxInstSV - ok
20:41:26.0130 0x0d94  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
20:41:26.0137 0x0d94  b06bdrv - ok
20:41:26.0148 0x0d94  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
20:41:26.0152 0x0d94  b57nd60a - ok
20:41:26.0170 0x0d94  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
20:41:26.0173 0x0d94  BDESVC - ok
20:41:26.0208 0x0d94  [ BCC56866F6A9BD35B2BC4787787C1F32, 491D2205673D50CD8A5DDE9273B7A36704AE55BCD5810B20D82D95CE31F18E7F ] bdfwfpf         C:\Program Files\Bitdefender Antivirus Free\bdfwfpf.sys
20:41:26.0210 0x0d94  bdfwfpf - ok
20:41:26.0231 0x0d94  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
20:41:26.0232 0x0d94  Beep - ok
20:41:26.0249 0x0d94  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
20:41:26.0261 0x0d94  BFE - ok
20:41:26.0434 0x0d94  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
20:41:26.0446 0x0d94  BITS - ok
20:41:26.0460 0x0d94  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
20:41:26.0461 0x0d94  blbdrive - ok
20:41:26.0500 0x0d94  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
20:41:26.0502 0x0d94  bowser - ok
20:41:26.0517 0x0d94  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
20:41:26.0517 0x0d94  BrFiltLo - ok
20:41:26.0528 0x0d94  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
20:41:26.0529 0x0d94  BrFiltUp - ok
20:41:26.0543 0x0d94  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
20:41:26.0546 0x0d94  Browser - ok
20:41:26.0560 0x0d94  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
20:41:26.0564 0x0d94  Brserid - ok
20:41:26.0571 0x0d94  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
20:41:26.0572 0x0d94  BrSerWdm - ok
20:41:26.0577 0x0d94  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
20:41:26.0578 0x0d94  BrUsbMdm - ok
20:41:26.0585 0x0d94  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
20:41:26.0586 0x0d94  BrUsbSer - ok
20:41:26.0610 0x0d94  [ 6822043C3076A40DD0083C8EB891A530, B42C5C3F272BFE4DA58D1FD05DD962FE0C002BCD60F1D8123871253E80F0C0FE ] BTATH_A2DP      C:\Windows\system32\drivers\btath_a2dp.sys
20:41:26.0616 0x0d94  BTATH_A2DP - ok
20:41:26.0628 0x0d94  [ 599ABCFDCDBAE28AA1FDFE67687DF6EB, 5B8C29DB78FC4EADF38F42701BD933AAD6FB02654280F51D114DBBC5D7B8F151 ] btath_avdt      C:\Windows\system32\drivers\btath_avdt.sys
20:41:26.0630 0x0d94  btath_avdt - ok
20:41:26.0640 0x0d94  [ C6978F7EBA6F37D626482AC6B9390630, B4BF939AB9962A61DE9518604C20347DC2A6FCDCEB3D8AEF295AF12E6F2CDCF3 ] BTATH_BUS       C:\Windows\system32\DRIVERS\btath_bus.sys
20:41:26.0641 0x0d94  BTATH_BUS - ok
20:41:26.0661 0x0d94  [ 4AF7C20F94DAC343C01ED671C82DCB99, 2AABD85D9D76461DE883E0F13F61C391BA81E6198FF88268B319474E25A196C8 ] BTATH_HCRP      C:\Windows\system32\DRIVERS\btath_hcrp.sys
20:41:26.0664 0x0d94  BTATH_HCRP - ok
20:41:26.0674 0x0d94  [ 785C38070043BEEE9E9D591DE4067244, 1C8D15B8A9E80A2799E7094C4AE111FEA9FBC6EAA4A61B13EFE59314C9794949 ] BTATH_LWFLT     C:\Windows\system32\DRIVERS\btath_lwflt.sys
20:41:26.0675 0x0d94  BTATH_LWFLT - ok
20:41:26.0695 0x0d94  [ 859A116D748FBA603AF94C251DC5CF97, D64061721BE01F86386C4B0168B166C6AD076630B2229036E1D368D877389D46 ] BTATH_RCP       C:\Windows\system32\DRIVERS\btath_rcp.sys
20:41:26.0697 0x0d94  BTATH_RCP - ok
20:41:26.0724 0x0d94  [ B02FA3A7FD3A534093D02851F80CE694, 0EF79D104010D22DA5234BFA52B0D0BF81AA1441EF98D99AC06AEEA021B31FF1 ] BtFilter        C:\Windows\system32\DRIVERS\btfilter.sys
20:41:26.0733 0x0d94  BtFilter - ok
20:41:26.0744 0x0d94  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys
20:41:26.0745 0x0d94  BthEnum - ok
20:41:26.0755 0x0d94  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
20:41:26.0757 0x0d94  BTHMODEM - ok
20:41:26.0768 0x0d94  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
20:41:26.0770 0x0d94  BthPan - ok
20:41:26.0794 0x0d94  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
20:41:26.0803 0x0d94  BTHPORT - ok
20:41:26.0815 0x0d94  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
20:41:26.0818 0x0d94  bthserv - ok
20:41:26.0832 0x0d94  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
20:41:26.0834 0x0d94  BTHUSB - ok
20:41:26.0845 0x0d94  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
20:41:26.0848 0x0d94  cdfs - ok
20:41:26.0857 0x0d94  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
20:41:26.0860 0x0d94  cdrom - ok
20:41:26.0880 0x0d94  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
20:41:26.0882 0x0d94  CertPropSvc - ok
20:41:26.0895 0x0d94  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
20:41:26.0896 0x0d94  circlass - ok
20:41:26.0939 0x0d94  [ 3D67C27DD17B254D7915FA16A5AE3573, 5B3A6C6A7F940C06362775DAF13CEADA37C7AA84A509458A57C23B4369970A90 ] CLFS            C:\Windows\system32\CLFS.sys
20:41:26.0945 0x0d94  CLFS - ok
20:41:26.0999 0x0d94  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:41:27.0001 0x0d94  clr_optimization_v2.0.50727_32 - ok
20:41:27.0039 0x0d94  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:41:27.0041 0x0d94  clr_optimization_v2.0.50727_64 - ok
20:41:27.0079 0x0d94  [ 5BAF4F1296D4D91FC28560CDB4C37C4B, ACA4BC57ED1F8432F18F0F215EC7FF956BAEF6E02760779E264E4008A979E9DD ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:41:27.0081 0x0d94  clr_optimization_v4.0.30319_32 - ok
20:41:27.0103 0x0d94  [ 569B54004A7E85A74FD92841DE6058E2, 58949313D0F6B1C06359B2F3C68E29940B1655A17E93FFC3718F6D2EAE1633E4 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:41:27.0105 0x0d94  clr_optimization_v4.0.30319_64 - ok
20:41:27.0108 0x0d94  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
20:41:27.0109 0x0d94  CmBatt - ok
20:41:27.0111 0x0d94  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
20:41:27.0111 0x0d94  cmdide - ok
20:41:27.0124 0x0d94  [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG             C:\Windows\system32\Drivers\cng.sys
20:41:27.0131 0x0d94  CNG - ok
20:41:27.0171 0x0d94  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
20:41:27.0171 0x0d94  Compbatt - ok
20:41:27.0177 0x0d94  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
20:41:27.0179 0x0d94  CompositeBus - ok
20:41:27.0181 0x0d94  COMSysApp - ok
20:41:27.0229 0x0d94  [ 91A03529446513216E58C526C5ED8057, 86B5F9C5CEA1284130B0223688ADD80E059FA6C2939F3F2B381E53A1D0DD8546 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
20:41:27.0233 0x0d94  cphs - ok
20:41:27.0344 0x0d94  [ 29872C7376C42E2A64FA838DAD98AA11, A072197177AAD26C31960694E38E2CAE85AFBAB070929E67E331B99D3A418CF4 ] cpuz140         C:\Users\CommanderX\AppData\Local\Temp\cpuz140\cpuz140_x64.sys
20:41:27.0345 0x0d94  cpuz140 - ok
20:41:27.0348 0x0d94  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
20:41:27.0349 0x0d94  crcdisk - ok
20:41:27.0388 0x0d94  [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
20:41:27.0392 0x0d94  CryptSvc - ok
20:41:27.0413 0x0d94  [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
20:41:27.0421 0x0d94  CSC - ok
20:41:27.0564 0x0d94  [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
20:41:27.0574 0x0d94  CscService - ok
20:41:27.0604 0x0d94  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
20:41:27.0616 0x0d94  DcomLaunch - ok
20:41:27.0634 0x0d94  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
20:41:27.0639 0x0d94  defragsvc - ok
20:41:27.0669 0x0d94  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
20:41:27.0672 0x0d94  DfsC - ok
20:41:27.0683 0x0d94  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
20:41:27.0690 0x0d94  Dhcp - ok
20:41:27.0762 0x0d94  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack       C:\Windows\system32\diagtrack.dll
20:41:27.0784 0x0d94  DiagTrack - ok
20:41:27.0792 0x0d94  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
20:41:27.0793 0x0d94  discache - ok
20:41:27.0805 0x0d94  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
20:41:27.0807 0x0d94  Disk - ok
20:41:27.0821 0x0d94  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
20:41:27.0822 0x0d94  dmvsc - ok
20:41:27.0843 0x0d94  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
20:41:27.0847 0x0d94  Dnscache - ok
20:41:27.0862 0x0d94  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
20:41:27.0867 0x0d94  dot3svc - ok
20:41:27.0875 0x0d94  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
20:41:27.0879 0x0d94  DPS - ok
20:41:27.0913 0x0d94  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
20:41:27.0914 0x0d94  drmkaud - ok
20:41:27.0970 0x0d94  [ 3A9D7D464BDB3B70D7ECF689ADABBD4D, B4F5B23705EA1BA453FE30791CA245E1A5F7FBEABAD026E4A8A15A9FC44E8C9C ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
20:41:27.0982 0x0d94  DXGKrnl - ok
20:41:28.0002 0x0d94  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
20:41:28.0005 0x0d94  EapHost - ok
20:41:28.0078 0x0d94  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
20:41:28.0146 0x0d94  ebdrv - ok
20:41:28.0189 0x0d94  [ 321F80E2E6DA91EEFAE6DF1C090FE1CA, 5EAEA249C93092C49522411525CE4E9CCDA96EA8A02075D62446A67A6738DFC9 ] edrsensor       C:\Windows\system32\DRIVERS\edrsensor.sys
20:41:28.0193 0x0d94  edrsensor - ok
20:41:28.0243 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] EFS             C:\Windows\System32\lsass.exe
20:41:28.0245 0x0d94  EFS - ok
20:41:28.0268 0x0d94  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
20:41:28.0276 0x0d94  elxstor - ok
20:41:28.0279 0x0d94  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
20:41:28.0279 0x0d94  ErrDev - ok
20:41:28.0306 0x0d94  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
20:41:28.0313 0x0d94  EventSystem - ok
20:41:28.0333 0x0d94  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
20:41:28.0336 0x0d94  exfat - ok
20:41:28.0362 0x0d94  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
20:41:28.0365 0x0d94  fastfat - ok
20:41:28.0389 0x0d94  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
20:41:28.0400 0x0d94  Fax - ok
20:41:28.0414 0x0d94  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
20:41:28.0414 0x0d94  fdc - ok
20:41:28.0424 0x0d94  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
20:41:28.0426 0x0d94  fdPHost - ok
20:41:28.0436 0x0d94  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
20:41:28.0439 0x0d94  FDResPub - ok
20:41:28.0445 0x0d94  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
20:41:28.0447 0x0d94  FileInfo - ok
20:41:28.0453 0x0d94  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
20:41:28.0455 0x0d94  Filetrace - ok
20:41:28.0563 0x0d94  [ 1B04D931B3EFA5FE67FA7D8510722222, 3D55A122A19F7D92782D0588F42F7B7CA33DB56B1F987BCA1E338F7F945E03F1 ] FlexNet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
20:41:28.0588 0x0d94  FlexNet Licensing Service 64 - ok
20:41:28.0600 0x0d94  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
20:41:28.0601 0x0d94  flpydisk - ok
20:41:28.0707 0x0d94  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
20:41:28.0713 0x0d94  FltMgr - ok
20:41:28.0775 0x0d94  [ CF0108CBA6D1860563BA20E3D74C6646, 737B5E89A858D7E3AEC8BF660AA4FCC56501A69468EA143531286016AF7C0B33 ] FontCache       C:\Windows\system32\FntCache.dll
20:41:28.0793 0x0d94  FontCache - ok
20:41:28.0860 0x0d94  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:41:28.0862 0x0d94  FontCache3.0.0.0 - ok
20:41:28.0875 0x0d94  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
20:41:28.0878 0x0d94  FsDepends - ok
20:41:28.0890 0x0d94  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
20:41:28.0891 0x0d94  Fs_Rec - ok
20:41:28.0904 0x0d94  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
20:41:28.0908 0x0d94  fvevol - ok
20:41:28.0918 0x0d94  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
20:41:28.0919 0x0d94  gagp30kx - ok
20:41:28.0967 0x0d94  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc           C:\Windows\System32\gpsvc.dll
20:41:28.0979 0x0d94  gpsvc - ok
20:41:29.0056 0x0d94  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:41:29.0058 0x0d94  gupdate - ok
20:41:29.0062 0x0d94  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:41:29.0063 0x0d94  gupdatem - ok
20:41:29.0114 0x0d94  [ F72818A52CBB5A9E8B2C9E350638A945, BB8E637DA21C911465FB13D7D28AAAE80691EA824146EEEA4AB94F86E5203567 ] gzflt           C:\Windows\system32\drivers\gzflt.sys
20:41:29.0117 0x0d94  gzflt - ok
20:41:29.0131 0x0d94  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
20:41:29.0132 0x0d94  hcw85cir - ok
20:41:29.0140 0x0d94  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:41:29.0146 0x0d94  HdAudAddService - ok
20:41:29.0162 0x0d94  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
20:41:29.0165 0x0d94  HDAudBus - ok
20:41:29.0167 0x0d94  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
20:41:29.0168 0x0d94  HidBatt - ok
20:41:29.0172 0x0d94  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
20:41:29.0173 0x0d94  HidBth - ok
20:41:29.0177 0x0d94  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
20:41:29.0178 0x0d94  HidIr - ok
20:41:29.0192 0x0d94  [ FC287A2452F5E3D885A391D5658102EB, 2DD95057079DD128BBCDC7FB947BD1E198F57EA173FD325AA659161C31735120 ] hidkmdf         C:\Windows\system32\DRIVERS\hidkmdf.sys
20:41:29.0193 0x0d94  hidkmdf - ok
20:41:29.0227 0x0d94  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
20:41:29.0229 0x0d94  hidserv - ok
20:41:29.0232 0x0d94  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
20:41:29.0233 0x0d94  HidUsb - ok
20:41:29.0239 0x0d94  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
20:41:29.0242 0x0d94  hkmsvc - ok
20:41:29.0259 0x0d94  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:41:29.0264 0x0d94  HomeGroupListener - ok
20:41:29.0282 0x0d94  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:41:29.0287 0x0d94  HomeGroupProvider - ok
20:41:29.0290 0x0d94  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
20:41:29.0292 0x0d94  HpSAMD - ok
20:41:29.0340 0x0d94  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
20:41:29.0351 0x0d94  HTTP - ok
20:41:29.0358 0x0d94  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
20:41:29.0359 0x0d94  hwpolicy - ok
20:41:29.0363 0x0d94  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
20:41:29.0365 0x0d94  i8042prt - ok
20:41:29.0388 0x0d94  [ 6A1BADFDA5D5BB01B27C3B462050A069, AD5254F9DEA6B38F4DD3AEEB25388A586B58153C67BC7F73923EC9CCABCE8619 ] iaStorA         C:\Windows\system32\drivers\iaStorA.sys
20:41:29.0397 0x0d94  iaStorA - ok
20:41:29.0436 0x0d94  [ ECFFBCCBE9691EACE3B60EEEC970E9E5, 2B770277AB3DA75BAF105DE2E9EA04C702BA6D4504BB266A5C8902EF6EF84417 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
20:41:29.0437 0x0d94  IAStorDataMgrSvc - ok
20:41:29.0453 0x0d94  [ B9B58FE94AEBC70896B10AE0E93124F1, DFC542240F10407CFE2D563AB977463CE594CE4C00CAE58184D650D6972D65D2 ] iaStorF         C:\Windows\system32\drivers\iaStorF.sys
20:41:29.0454 0x0d94  iaStorF - ok
20:41:29.0470 0x0d94  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
20:41:29.0477 0x0d94  iaStorV - ok
20:41:29.0534 0x0d94  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:41:29.0547 0x0d94  idsvc - ok
20:41:29.0663 0x0d94  [ AEF200DC087141A5F66A6B006D2F0FD4, A38A0684637D9FE58271D91B93184A72414948E35145D19246BF6FBC60E28B3C ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
20:41:29.0773 0x0d94  igfx - ok
20:41:29.0808 0x0d94  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
20:41:29.0809 0x0d94  iirsp - ok
20:41:29.0836 0x0d94  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
20:41:29.0850 0x0d94  IKEEXT - ok
20:41:29.0924 0x0d94  [ E9740A3BC0AE6EA035FF7ECE3A1B27B6, 4CA3E094B0057E143955DE5D41C3344688B6D2C4FFC0417235FF46312B600F99 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
20:41:29.0969 0x0d94  IntcAzAudAddService - ok
20:41:29.0982 0x0d94  [ EEE7376243CD8A4B49B885EF122D25E5, A3B89E7B513C95558C4DA41D3C136D464381263BA43E00EC136FC776DAA0BA94 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
20:41:29.0989 0x0d94  IntcDAud - ok
20:41:30.0030 0x0d94  [ 0DB1E3F6189C628675F855C0EB510419, 989F539E82105019D2D81255369B96DC65826CD2A421DA09809155B26F69C555 ] Intel® Capability Licensing Service Interface c:\Program Files\Intel\iCLS Client\HeciServer.exe
20:41:30.0039 0x0d94  Intel® Capability Licensing Service Interface - ok
20:41:30.0069 0x0d94  [ 492AAF2FF66F437F0E796574B116EFC3, 6BF21C61ED05705DD58203952A750D1AB4D4B62F3A2B640BBBD9B85D1ECC3E5C ] Intel® Capability Licensing Service TCP IP Interface c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
20:41:30.0081 0x0d94  Intel® Capability Licensing Service TCP IP Interface - ok
20:41:30.0114 0x0d94  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
20:41:30.0115 0x0d94  intelide - ok
20:41:30.0124 0x0d94  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
20:41:30.0125 0x0d94  intelppm - ok
20:41:30.0138 0x0d94  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
20:41:30.0141 0x0d94  IPBusEnum - ok
20:41:30.0157 0x0d94  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:41:30.0159 0x0d94  IpFilterDriver - ok
20:41:30.0184 0x0d94  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
20:41:30.0193 0x0d94  iphlpsvc - ok
20:41:30.0208 0x0d94  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
20:41:30.0209 0x0d94  IPMIDRV - ok
20:41:30.0224 0x0d94  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
20:41:30.0227 0x0d94  IPNAT - ok
20:41:30.0238 0x0d94  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
20:41:30.0239 0x0d94  IRENUM - ok
20:41:30.0242 0x0d94  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
20:41:30.0243 0x0d94  isapnp - ok
20:41:30.0263 0x0d94  [ D931D7309DEB2317035B07C9F9E6B0BD, 13AD84172ED8C6153F8A98499C01733B74E48464CE07D099508E38D409913ED3 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
20:41:30.0267 0x0d94  iScsiPrt - ok
20:41:30.0292 0x0d94  [ 78D369F8A81A341109FBA1DB64B4C512, E584F693255CCBF7006E7D35984149CF599BB0849A8F02EFDD6223DF0D606049 ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
20:41:30.0293 0x0d94  iusb3hcs - ok
20:41:30.0308 0x0d94  [ 5B632ABA038CE2E2D5D2D1115C6B26D1, 605A8FFA704E4369CF9D17DF8630DC9E196B8920D47F1CC5151759E60B234C1F ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
20:41:30.0313 0x0d94  iusb3hub - ok
20:41:30.0331 0x0d94  [ EA841584EF59528D11F20355770E427E, 515737761BB2A0A233F4AD141E28D93E3B9789320A15B7D5FB3DB5AC3CD8E249 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
20:41:30.0341 0x0d94  iusb3xhc - ok
20:41:30.0375 0x0d94  [ 52069AEB42D3D0F97CBCA1085EBF55E6, ADB2EFFF563B3FE113FCD156FD1E469BC24FC1D68AFEDCA21306F76592C9FF88 ] jhi_service     C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
20:41:30.0378 0x0d94  jhi_service - ok
20:41:30.0391 0x0d94  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
20:41:30.0393 0x0d94  kbdclass - ok
20:41:30.0403 0x0d94  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
20:41:30.0404 0x0d94  kbdhid - ok
20:41:30.0410 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] KeyIso          C:\Windows\system32\lsass.exe
20:41:30.0412 0x0d94  KeyIso - ok
20:41:30.0450 0x0d94  [ 3AAA10BAF3F194F7CD34F4C78F8222EE, 25AE0B764748B13C7F093966E228D506072E270379A5E751F1ED619DEFB40814 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
20:41:30.0452 0x0d94  KSecDD - ok
20:41:30.0463 0x0d94  [ 7B7C28D4E71E4A4365F2B7528DA619F8, 0A507468C6A49870F794F28FF274643FE8FD238A3A9BE86C8656882F237DE77B ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
20:41:30.0465 0x0d94  KSecPkg - ok
20:41:30.0471 0x0d94  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
20:41:30.0473 0x0d94  ksthunk - ok
20:41:30.0500 0x0d94  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
20:41:30.0508 0x0d94  KtmRm - ok
20:41:30.0538 0x0d94  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
20:41:30.0545 0x0d94  LanmanServer - ok
20:41:30.0572 0x0d94  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:41:30.0578 0x0d94  LanmanWorkstation - ok
20:41:30.0587 0x0d94  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
20:41:30.0590 0x0d94  lltdio - ok
20:41:30.0609 0x0d94  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
20:41:30.0615 0x0d94  lltdsvc - ok
20:41:30.0630 0x0d94  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
20:41:30.0632 0x0d94  lmhosts - ok
20:41:30.0651 0x0d94  [ 6A35B295812CE7064CFBCD9F254169CF, 561DD131FED6F90686D8C031B45B87B6D065C7E0C8804AEFCDE239725AAEE43E ] LMS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
20:41:30.0656 0x0d94  LMS - ok
20:41:30.0673 0x0d94  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
20:41:30.0674 0x0d94  LSI_FC - ok
20:41:30.0680 0x0d94  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
20:41:30.0682 0x0d94  LSI_SAS - ok
20:41:30.0691 0x0d94  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
20:41:30.0692 0x0d94  LSI_SAS2 - ok
20:41:30.0700 0x0d94  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
20:41:30.0702 0x0d94  LSI_SCSI - ok
20:41:30.0717 0x0d94  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
20:41:30.0719 0x0d94  luafv - ok
20:41:30.0769 0x0d94  [ A401CFF74982D8DF851F20307C806073, 1D7BA90C9E77FAAE59F60AB5310EC41D9C5B98F1F9A89A3CDB9169E6DEF565DA ] LVRS64          C:\Windows\system32\DRIVERS\lvrs64.sys
20:41:30.0775 0x0d94  LVRS64 - ok
20:41:30.0979 0x0d94  [ 13384CB5F5813E65F31078D6ABFAAF38, A6E7374C15CAECC273197BF62F8F926BA30E9509270A8470756F4710E1DEA126 ] LVUVC64         C:\Windows\system32\DRIVERS\lvuvc64.sys
20:41:31.0062 0x0d94  LVUVC64 - ok
20:41:31.0210 0x0d94  [ 804E3246E3E73D4A936F2F4BCDC53A2D, BF1F9B4AC292238FA6EE541E325B220F311977F9D87D5BC7F90AD058FBF0B35A ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
20:41:31.0293 0x0d94  MBAMService - ok
20:41:31.0307 0x0d94  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
20:41:31.0308 0x0d94  megasas - ok
20:41:31.0326 0x0d94  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
20:41:31.0331 0x0d94  MegaSR - ok
20:41:31.0359 0x0d94  [ 926C135CFB0C75B32FB714B5C0C58FAA, AF627CD125794B69D450D298D5608D357F2C91FB89EBFAA0DA2A0F07C6A304A8 ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
20:41:31.0361 0x0d94  MEIx64 - ok
20:41:31.0503 0x0d94  [ 0AF89452A8CE3928168F4E5B2208C68B, 571F1A9F1F0B31DB5FFAE7FB7F98C16958439D6666A9F2131B0F2E496BF3D2AC ] mi-raysat_3dsmax2016_64 C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
20:41:31.0504 0x0d94  mi-raysat_3dsmax2016_64 - ok
20:41:31.0529 0x0d94  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
20:41:31.0532 0x0d94  MMCSS - ok
20:41:31.0547 0x0d94  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
20:41:31.0548 0x0d94  Modem - ok
20:41:31.0557 0x0d94  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
20:41:31.0558 0x0d94  monitor - ok
20:41:31.0565 0x0d94  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
20:41:31.0566 0x0d94  mouclass - ok
20:41:31.0587 0x0d94  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
20:41:31.0588 0x0d94  mouhid - ok
20:41:31.0624 0x0d94  [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
20:41:31.0626 0x0d94  mountmgr - ok
20:41:31.0732 0x0d94  [ D57B7C101A8216E7769B14645AFEB276, 38BF427F81589173D3CD823A7BD3CA84B0FADD6747467E7AEADB72D1F4E1404B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
20:41:31.0735 0x0d94  MozillaMaintenance - ok
20:41:31.0751 0x0d94  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
20:41:31.0754 0x0d94  mpio - ok
20:41:31.0770 0x0d94  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
20:41:31.0772 0x0d94  mpsdrv - ok
20:41:31.0792 0x0d94  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
20:41:31.0805 0x0d94  MpsSvc - ok
20:41:31.0833 0x0d94  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
20:41:31.0836 0x0d94  MRxDAV - ok
20:41:31.0871 0x0d94  [ 819426D736BCBD31CC7CA27221954E04, 0C4AADEFE282D89EA4A523BDA7B6BB948247F50253D7D0B90C8FC46C4DEEF835 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
20:41:31.0874 0x0d94  mrxsmb - ok
20:41:31.0889 0x0d94  [ 85CB449B319AF69A3538BB1B97EEA2E5, DB75D56A7E631F57D31957105422811C738E96E5B84480C3346B827ACF280E12 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:41:31.0894 0x0d94  mrxsmb10 - ok
20:41:31.0903 0x0d94  [ C0B2DC34587FE163997055AA38EB883A, A0BFD0CF873CCEF266606ADE1A4DA69DF757A67D8AD28330272AFEABD7F481D5 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:41:31.0906 0x0d94  mrxsmb20 - ok
20:41:31.0914 0x0d94  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
20:41:31.0914 0x0d94  msahci - ok
20:41:31.0932 0x0d94  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
20:41:31.0934 0x0d94  msdsm - ok
20:41:32.0023 0x0d94  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
20:41:32.0028 0x0d94  MSDTC - ok
20:41:32.0055 0x0d94  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
20:41:32.0056 0x0d94  Msfs - ok
20:41:32.0061 0x0d94  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
20:41:32.0063 0x0d94  mshidkmdf - ok
20:41:32.0071 0x0d94  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
20:41:32.0072 0x0d94  msisadrv - ok
20:41:32.0096 0x0d94  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
20:41:32.0100 0x0d94  MSiSCSI - ok
20:41:32.0102 0x0d94  msiserver - ok
20:41:32.0112 0x0d94  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
20:41:32.0113 0x0d94  MSKSSRV - ok
20:41:32.0124 0x0d94  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
20:41:32.0126 0x0d94  MSPCLOCK - ok
20:41:32.0134 0x0d94  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
20:41:32.0135 0x0d94  MSPQM - ok
20:41:32.0156 0x0d94  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
20:41:32.0161 0x0d94  MsRPC - ok
20:41:32.0174 0x0d94  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
20:41:32.0175 0x0d94  mssmbios - ok
20:41:32.0186 0x0d94  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
20:41:32.0187 0x0d94  MSTEE - ok
20:41:32.0198 0x0d94  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
20:41:32.0199 0x0d94  MTConfig - ok
20:41:32.0207 0x0d94  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
20:41:32.0209 0x0d94  Mup - ok
20:41:32.0234 0x0d94  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
20:41:32.0243 0x0d94  napagent - ok
20:41:32.0254 0x0d94  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
20:41:32.0259 0x0d94  NativeWifiP - ok
20:41:32.0300 0x0d94  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys
20:41:32.0314 0x0d94  NDIS - ok
20:41:32.0326 0x0d94  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
20:41:32.0328 0x0d94  NdisCap - ok
20:41:32.0331 0x0d94  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
20:41:32.0332 0x0d94  NdisTapi - ok
20:41:32.0348 0x0d94  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
20:41:32.0350 0x0d94  Ndisuio - ok
20:41:32.0356 0x0d94  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
20:41:32.0360 0x0d94  NdisWan - ok
20:41:32.0366 0x0d94  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
20:41:32.0368 0x0d94  NDProxy - ok
20:41:32.0379 0x0d94  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
20:41:32.0380 0x0d94  NetBIOS - ok
20:41:32.0423 0x0d94  [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
20:41:32.0427 0x0d94  NetBT - ok
20:41:32.0431 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] Netlogon        C:\Windows\system32\lsass.exe
20:41:32.0432 0x0d94  Netlogon - ok
20:41:32.0460 0x0d94  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
20:41:32.0467 0x0d94  Netman - ok
20:41:32.0522 0x0d94  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:41:32.0524 0x0d94  NetMsmqActivator - ok
20:41:32.0528 0x0d94  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:41:32.0530 0x0d94  NetPipeActivator - ok
20:41:32.0555 0x0d94  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
20:41:32.0563 0x0d94  netprofm - ok
20:41:32.0567 0x0d94  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:41:32.0569 0x0d94  NetTcpActivator - ok
20:41:32.0572 0x0d94  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:41:32.0574 0x0d94  NetTcpPortSharing - ok
20:41:32.0593 0x0d94  [ 73CE12B8BDD747B0063CB0A7EF44CEA7, F570BB52BE460DBA6203698CC96FFD9674E1903D0E0F5C49375BE3F8D8E89582 ] netvsc          C:\Windows\system32\DRIVERS\netvsc60.sys
20:41:32.0595 0x0d94  netvsc - ok
20:41:32.0609 0x0d94  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
20:41:32.0610 0x0d94  nfrd960 - ok
20:41:32.0655 0x0d94  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
20:41:32.0661 0x0d94  NlaSvc - ok
20:41:32.0667 0x0d94  NPF - ok
20:41:32.0674 0x0d94  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
20:41:32.0675 0x0d94  Npfs - ok
20:41:32.0685 0x0d94  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
20:41:32.0687 0x0d94  nsi - ok
20:41:32.0693 0x0d94  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
20:41:32.0694 0x0d94  nsiproxy - ok
20:41:32.0742 0x0d94  [ B98F8C6E31CD07B2E6F71F7F648E38C0, 2FEA100B80680FBBF644CB6763738804155DF1E94A6542CAE2B2786D770D554E ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
20:41:32.0766 0x0d94  Ntfs - ok
20:41:32.0783 0x0d94  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
20:41:32.0784 0x0d94  Null - ok
20:41:32.0802 0x0d94  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
20:41:32.0804 0x0d94  nvraid - ok
20:41:32.0812 0x0d94  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
20:41:32.0815 0x0d94  nvstor - ok
20:41:32.0825 0x0d94  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
20:41:32.0826 0x0d94  nv_agp - ok
20:41:32.0838 0x0d94  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
20:41:32.0840 0x0d94  ohci1394 - ok
20:41:32.0918 0x0d94  [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:41:32.0920 0x0d94  ose - ok
20:41:32.0938 0x0d94  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
20:41:32.0944 0x0d94  p2pimsvc - ok
20:41:32.0965 0x0d94  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
20:41:32.0973 0x0d94  p2psvc - ok
20:41:32.0987 0x0d94  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys
20:41:32.0988 0x0d94  Parport - ok
20:41:33.0012 0x0d94  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
20:41:33.0014 0x0d94  partmgr - ok
20:41:33.0168 0x0d94  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\Windows\System32\pcasvc.dll
20:41:33.0172 0x0d94  PcaSvc - ok
20:41:33.0194 0x0d94  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
20:41:33.0198 0x0d94  pci - ok
20:41:33.0206 0x0d94  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
20:41:33.0207 0x0d94  pciide - ok
20:41:33.0219 0x0d94  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
20:41:33.0222 0x0d94  pcmcia - ok
20:41:33.0242 0x0d94  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
20:41:33.0243 0x0d94  pcw - ok
20:41:33.0263 0x0d94  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
20:41:33.0273 0x0d94  PEAUTH - ok
20:41:33.0304 0x0d94  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
20:41:33.0325 0x0d94  PeerDistSvc - ok
20:41:33.0370 0x0d94  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
20:41:33.0373 0x0d94  PerfHost - ok
20:41:33.0404 0x0d94  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
20:41:33.0425 0x0d94  pla - ok
20:41:33.0445 0x0d94  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
20:41:33.0454 0x0d94  PlugPlay - ok
20:41:33.0478 0x0d94  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
20:41:33.0481 0x0d94  PNRPAutoReg - ok
20:41:33.0496 0x0d94  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
20:41:33.0502 0x0d94  PNRPsvc - ok
20:41:33.0548 0x0d94  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
20:41:33.0556 0x0d94  PolicyAgent - ok
20:41:33.0569 0x0d94  [ A2CCA4FB273E6050F17A0A416CFF2FCD, C42BA18DF0C8E3F7358669A784E51E4DC7A4112096345EA699EDC95F561E0255 ] Power           C:\Windows\system32\umpo.dll
20:41:33.0573 0x0d94  Power - ok
20:41:33.0590 0x0d94  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
20:41:33.0593 0x0d94  PptpMiniport - ok
20:41:33.0604 0x0d94  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
20:41:33.0606 0x0d94  Processor - ok
20:41:33.0705 0x0d94  [ 9ED60073731578E355E120327622C5DC, 863B4C7C0444E8EB212932739F68910F5E4C8F2677F0CB92381EBF6CB0AB7CC0 ] ProductAgentService C:\Program Files\Bitdefender Agent\ProductAgentService.exe
20:41:33.0721 0x0d94  ProductAgentService - ok
20:41:33.0762 0x0d94  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
20:41:33.0767 0x0d94  ProfSvc - ok
20:41:33.0777 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:41:33.0778 0x0d94  ProtectedStorage - ok
20:41:33.0792 0x0d94  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
20:41:33.0795 0x0d94  Psched - ok
20:41:33.0864 0x0d94  [ 07D57B890DD5693A6AB660CBAE8F91B4, 934895A41C116056E22FE3298418332A9F4280F96E96EEE06C977A4925395674 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
20:41:33.0865 0x0d94  PxHlpa64 - ok
20:41:33.0907 0x0d94  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
20:41:33.0930 0x0d94  ql2300 - ok
20:41:33.0945 0x0d94  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
20:41:33.0947 0x0d94  ql40xx - ok
20:41:33.0968 0x0d94  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
20:41:33.0973 0x0d94  QWAVE - ok
20:41:33.0978 0x0d94  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
20:41:33.0979 0x0d94  QWAVEdrv - ok
20:41:33.0992 0x0d94  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
20:41:33.0993 0x0d94  RasAcd - ok
20:41:34.0014 0x0d94  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
20:41:34.0016 0x0d94  RasAgileVpn - ok
20:41:34.0020 0x0d94  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
20:41:34.0023 0x0d94  RasAuto - ok
20:41:34.0031 0x0d94  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
20:41:34.0034 0x0d94  Rasl2tp - ok
20:41:34.0048 0x0d94  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
20:41:34.0054 0x0d94  RasMan - ok
20:41:34.0067 0x0d94  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
20:41:34.0069 0x0d94  RasPppoe - ok
20:41:34.0074 0x0d94  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
20:41:34.0076 0x0d94  RasSstp - ok
20:41:34.0089 0x0d94  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
20:41:34.0094 0x0d94  rdbss - ok
20:41:34.0099 0x0d94  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
20:41:34.0100 0x0d94  rdpbus - ok
20:41:34.0106 0x0d94  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
20:41:34.0107 0x0d94  RDPCDD - ok
20:41:34.0122 0x0d94  [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
20:41:34.0126 0x0d94  RDPDR - ok
20:41:34.0137 0x0d94  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
20:41:34.0138 0x0d94  RDPENCDD - ok
20:41:34.0150 0x0d94  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
20:41:34.0150 0x0d94  RDPREFMP - ok
20:41:34.0204 0x0d94  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
20:41:34.0269 0x0d94  RDPWD - ok
20:41:34.0297 0x0d94  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
20:41:34.0301 0x0d94  rdyboost - ok
20:41:34.0329 0x0d94  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
20:41:34.0333 0x0d94  RemoteAccess - ok
20:41:34.0341 0x0d94  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
20:41:34.0345 0x0d94  RemoteRegistry - ok
20:41:34.0358 0x0d94  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
20:41:34.0362 0x0d94  RFCOMM - ok
20:41:34.0382 0x0d94  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
20:41:34.0385 0x0d94  RpcEptMapper - ok
20:41:34.0394 0x0d94  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
20:41:34.0396 0x0d94  RpcLocator - ok
20:41:34.0413 0x0d94  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
20:41:34.0421 0x0d94  RpcSs - ok
20:41:34.0424 0x0d94  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
20:41:34.0426 0x0d94  rspndr - ok
20:41:34.0451 0x0d94  [ 9CF8593B62102545CB1652A1D8748FDD, 818639795720A7567CCE01EBC24A0119BFDCEA1B7A5ED4A11B5012D763C1B5CC ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys
20:41:34.0455 0x0d94  RSUSBSTOR - ok
20:41:34.0491 0x0d94  [ DDF3EFB4AD226C61D0ADA6E779E3D968, 5B14B35321F10D974B9F47D60C9DAA527A2C907029C242A6F4214E6012A046DA ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
20:41:34.0495 0x0d94  RtkAudioService - ok
20:41:34.0527 0x0d94  [ 130DD683DCC902F47A4AC35201D07E2F, A1E7082D93C170CF5855007B26F96E8F8183B15126D34A9DB16CBF190BD8EF53 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
20:41:34.0539 0x0d94  RTL8167 - ok
20:41:34.0551 0x0d94  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
20:41:34.0552 0x0d94  s3cap - ok
20:41:34.0577 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] SamSs           C:\Windows\system32\lsass.exe
20:41:34.0578 0x0d94  SamSs - ok
20:41:34.0591 0x0d94  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
20:41:34.0593 0x0d94  sbp2port - ok
20:41:34.0618 0x0d94  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
20:41:34.0623 0x0d94  SCardSvr - ok
20:41:34.0629 0x0d94  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
20:41:34.0631 0x0d94  scfilter - ok
20:41:34.0684 0x0d94  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
20:41:34.0702 0x0d94  Schedule - ok
20:41:34.0722 0x0d94  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
20:41:34.0723 0x0d94  SCPolicySvc - ok
20:41:34.0727 0x0d94  [ 111E0EBC0AD79CB0FA014B907B231CF0, B7D43D156C2524938503CF8E99C4D1F7A5C55E16C0368F57F4CD23C6D833B38F ] sdbus           C:\Windows\system32\drivers\sdbus.sys
20:41:34.0729 0x0d94  sdbus - ok
20:41:34.0739 0x0d94  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
20:41:34.0743 0x0d94  SDRSVC - ok
20:41:34.0756 0x0d94  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
20:41:34.0757 0x0d94  secdrv - ok
20:41:34.0789 0x0d94  [ A19623BDD61E66A12AB53992002B4F3A, E351CEEC086084A417BA3BD0EEF46114D3147EC38E3EF8BE49B724F9D028CC56 ] seclogon        C:\Windows\system32\seclogon.dll
20:41:34.0792 0x0d94  seclogon - ok
20:41:34.0796 0x0d94  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
20:41:34.0798 0x0d94  SENS - ok
20:41:34.0808 0x0d94  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
20:41:34.0812 0x0d94  SensrSvc - ok
20:41:34.0824 0x0d94  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys
20:41:34.0825 0x0d94  Serenum - ok
20:41:34.0836 0x0d94  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
20:41:34.0838 0x0d94  Serial - ok
20:41:34.0843 0x0d94  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
20:41:34.0845 0x0d94  sermouse - ok
20:41:34.0863 0x0d94  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
20:41:34.0867 0x0d94  SessionEnv - ok
20:41:34.0882 0x0d94  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
20:41:34.0883 0x0d94  sffdisk - ok
20:41:34.0887 0x0d94  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
20:41:34.0887 0x0d94  sffp_mmc - ok
20:41:34.0899 0x0d94  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
20:41:34.0900 0x0d94  sffp_sd - ok
20:41:34.0909 0x0d94  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
20:41:34.0909 0x0d94  sfloppy - ok
20:41:34.0934 0x0d94  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
20:41:34.0940 0x0d94  SharedAccess - ok
20:41:34.0951 0x0d94  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:41:34.0958 0x0d94  ShellHWDetection - ok
20:41:34.0972 0x0d94  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
20:41:34.0973 0x0d94  SiSRaid2 - ok
20:41:34.0979 0x0d94  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
20:41:34.0980 0x0d94  SiSRaid4 - ok
20:41:35.0042 0x0d94  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
20:41:35.0046 0x0d94  SkypeUpdate - ok
20:41:35.0061 0x0d94  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
20:41:35.0064 0x0d94  Smb - ok
20:41:35.0088 0x0d94  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
20:41:35.0091 0x0d94  SNMPTRAP - ok
20:41:35.0098 0x0d94  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
20:41:35.0099 0x0d94  spldr - ok
20:41:35.0119 0x0d94  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
20:41:35.0128 0x0d94  Spooler - ok
20:41:35.0207 0x0d94  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
20:41:35.0253 0x0d94  sppsvc - ok
20:41:35.0281 0x0d94  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
20:41:35.0350 0x0d94  sppuinotify - ok
20:41:35.0721 0x0d94  [ 8FD8EE71D7D639F85805EEE4ADB2AA15, 027E680BE49F705843B0117A72FAFC7681798B99685B91989928EF03767CD7A5 ] SQLWriter       C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
20:41:35.0723 0x0d94  SQLWriter - ok
20:41:35.0767 0x0d94  [ EB15C46477EB84B6B520871ED5936CCF, 7366FD2E1315109B9A2F47DA08959CF0CBEEB1F20B2E2DEF449D39B508107D29 ] srv             C:\Windows\system32\DRIVERS\srv.sys
20:41:35.0773 0x0d94  srv - ok
20:41:35.0814 0x0d94  [ 7F4FDC9528BCE6FB919615B6A77D5724, C4843381504E0F50D4B8E4F8886C83112018CE5F64467B875F2809508EA2B182 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
20:41:35.0821 0x0d94  srv2 - ok
20:41:35.0835 0x0d94  [ 3F20CD2A11872284BD667DAD6D4801CC, 917EAA680CD10D3EA59EEF4B77BB3813D5718E7D1CB0846431255EE73035D834 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
20:41:35.0838 0x0d94  srvnet - ok
20:41:35.0847 0x0d94  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
20:41:35.0852 0x0d94  SSDPSRV - ok
20:41:35.0860 0x0d94  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
20:41:35.0864 0x0d94  SstpSvc - ok
20:41:35.0926 0x0d94  [ E06AA279D85877268E34E9A9BC41F560, 6EFE7E3850CD19B919053293B6D8CB61CC638D3B1626BB62594C681625132689 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
20:41:35.0949 0x0d94  Steam Client Service - ok
20:41:35.0963 0x0d94  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
20:41:35.0964 0x0d94  stexstor - ok
20:41:35.0986 0x0d94  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
20:41:35.0997 0x0d94  stisvc - ok
20:41:36.0002 0x0d94  [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
20:41:36.0004 0x0d94  StorSvc - ok
20:41:36.0018 0x0d94  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
20:41:36.0019 0x0d94  storvsc - ok
20:41:36.0027 0x0d94  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
20:41:36.0028 0x0d94  swenum - ok
20:41:36.0089 0x0d94  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
20:41:36.0097 0x0d94  SwitchBoard - ok
20:41:36.0134 0x0d94  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
20:41:36.0143 0x0d94  swprv - ok
20:41:36.0152 0x0d94  [ 4CDD7DF58730D23BA9CB5829A6E2ECEA, 89A2A1604C2BF985894000F51D9D376B32F1327197866850B5BF8640272DE828 ] SynthVid        C:\Windows\system32\DRIVERS\VMBusVideoM.sys
20:41:36.0153 0x0d94  SynthVid - ok
20:41:36.0226 0x0d94  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
20:41:36.0253 0x0d94  SysMain - ok
20:41:36.0268 0x0d94  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
20:41:36.0272 0x0d94  TabletInputService - ok
20:41:36.0284 0x0d94  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
20:41:36.0291 0x0d94  TapiSrv - ok
20:41:36.0301 0x0d94  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
20:41:36.0304 0x0d94  TBS - ok
20:41:36.0365 0x0d94  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
20:41:36.0394 0x0d94  Tcpip - ok
20:41:36.0425 0x0d94  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
20:41:36.0450 0x0d94  TCPIP6 - ok
20:41:36.0486 0x0d94  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
20:41:36.0513 0x0d94  tcpipreg - ok
20:41:36.0523 0x0d94  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
20:41:36.0525 0x0d94  TDPIPE - ok
20:41:36.0531 0x0d94  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
20:41:36.0533 0x0d94  TDTCP - ok
20:41:36.0572 0x0d94  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
20:41:36.0575 0x0d94  tdx - ok
20:41:36.0591 0x0d94  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
20:41:36.0592 0x0d94  TermDD - ok
20:41:36.0642 0x0d94  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
20:41:36.0652 0x0d94  TermService - ok
20:41:36.0661 0x0d94  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
20:41:36.0664 0x0d94  Themes - ok
20:41:36.0688 0x0d94  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
20:41:36.0690 0x0d94  THREADORDER - ok
20:41:36.0780 0x0d94  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
20:41:36.0785 0x0d94  TrkWks - ok
20:41:36.0829 0x0d94  [ AA129EFF64E41947F6A46388A7F5F966, CB3699055EA62F1BE132CDBA1F728C86B48625E4F63A2FD78C686D52A4265906 ] trufos          C:\Windows\system32\drivers\trufos.sys
20:41:36.0836 0x0d94  trufos - ok
20:41:36.0864 0x0d94  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:41:36.0867 0x0d94  TrustedInstaller - ok
20:41:36.0902 0x0d94  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
20:41:36.0904 0x0d94  tssecsrv - ok
20:41:36.0919 0x0d94  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
20:41:36.0921 0x0d94  TsUsbFlt - ok
20:41:36.0931 0x0d94  [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
20:41:36.0932 0x0d94  TsUsbGD - ok
20:41:36.0947 0x0d94  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
20:41:36.0950 0x0d94  tunnel - ok
20:41:36.0967 0x0d94  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
20:41:36.0969 0x0d94  uagp35 - ok
20:41:36.0991 0x0d94  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
20:41:36.0996 0x0d94  udfs - ok
20:41:37.0008 0x0d94  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
20:41:37.0011 0x0d94  UI0Detect - ok
20:41:37.0015 0x0d94  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
20:41:37.0016 0x0d94  uliagpkx - ok
20:41:37.0023 0x0d94  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
20:41:37.0025 0x0d94  umbus - ok
20:41:37.0039 0x0d94  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
20:41:37.0039 0x0d94  UmPass - ok
20:41:37.0052 0x0d94  [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
20:41:37.0057 0x0d94  UmRdpService - ok
20:41:37.0130 0x0d94  [ 62964A687C1D734D3EE2CB6DF358C2FC, F25624C3260BC2C6C307B403E6108975EDB364A4983E99045E142B6ABA42BBCC ] updatesrv       C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
20:41:37.0132 0x0d94  updatesrv - ok
20:41:37.0144 0x0d94  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
20:41:37.0151 0x0d94  upnphost - ok
20:41:37.0197 0x0d94  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
20:41:37.0199 0x0d94  usbaudio - ok
20:41:37.0221 0x0d94  [ 91D3C92A44FC682DD791147604E79152, AA0B6799BF9C26C2C1793C91295288A4989AA43EC5E070B650DA7F0A142817CE ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
20:41:37.0223 0x0d94  usbccgp - ok
20:41:37.0240 0x0d94  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
20:41:37.0241 0x0d94  usbcir - ok
20:41:37.0287 0x0d94  [ F7FFDF2A1D19A76A87759126B244C816, C91F09D77E22D976952A46F7B93F611B719EDAF694D538242FA8FAF1BA9BB2F0 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
20:41:37.0290 0x0d94  usbehci - ok
20:41:37.0317 0x0d94  [ 245FE7FC634D6A993E682E0A9EBA4ABB, F7A536D215EE3A63358EC8B5946D7BB3B56357BF91347B07013E00DAC98775B6 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
20:41:37.0323 0x0d94  usbhub - ok
20:41:37.0336 0x0d94  [ F4A4255E930B6D007A3501C35A3DACC4, E0D0EF801100BE57A199A483330A80FB6C6FF29AEBF3380BEE16BB364A8D7FC7 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
20:41:37.0336 0x0d94  usbohci - ok
20:41:37.0354 0x0d94  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
20:41:37.0356 0x0d94  usbprint - ok
20:41:37.0385 0x0d94  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
20:41:37.0386 0x0d94  usbscan - ok
20:41:37.0422 0x0d94  [ D029DD09E22EB24318A8FC3D8138BA43, C95805E8BF75ECB939520AE86420B16467B0771C161C51C9F1A37649ADFADCD0 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:41:37.0425 0x0d94  USBSTOR - ok
20:41:37.0436 0x0d94  [ 9462E6B70615C1703D4A95FA61FC54A1, A66E75A42E58E126F575F1AFC3BE47E119CF53431CED511776D878A78F597015 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
20:41:37.0439 0x0d94  usbuhci - ok
20:41:37.0467 0x0d94  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
20:41:37.0471 0x0d94  usbvideo - ok
20:41:37.0483 0x0d94  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
20:41:37.0486 0x0d94  UxSms - ok
20:41:37.0493 0x0d94  [ CA69E856332E2D85294665F6B7E97254, A9693F836907FB0154DC1090D9476F1E9242ABE922D932D74D0385772D2EAB65 ] VaultSvc        C:\Windows\system32\lsass.exe
20:41:37.0495 0x0d94  VaultSvc - ok
20:41:37.0500 0x0d94  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
20:41:37.0502 0x0d94  vdrvroot - ok
20:41:37.0516 0x0d94  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
20:41:37.0526 0x0d94  vds - ok
20:41:37.0530 0x0d94  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
20:41:37.0530 0x0d94  vga - ok
20:41:37.0535 0x0d94  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
20:41:37.0537 0x0d94  VgaSave - ok
20:41:37.0556 0x0d94  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
20:41:37.0559 0x0d94  vhdmp - ok
20:41:37.0574 0x0d94  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
20:41:37.0575 0x0d94  viaide - ok
20:41:37.0578 0x0d94  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
20:41:37.0579 0x0d94  VMBusHID - ok
20:41:37.0634 0x0d94  [ 39CCC7F3F7F8BA7895B51B447127B2D5, 2670DC54D9B6A3ED6EF64E54854A12B4C9EA98F4707C1C0D8D569BBAFCDA61ED ] vmulti          C:\Windows\system32\DRIVERS\vmulti.sys
20:41:37.0635 0x0d94  vmulti - ok
20:41:37.0642 0x0d94  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
20:41:37.0644 0x0d94  volmgr - ok
20:41:37.0656 0x0d94  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
20:41:37.0662 0x0d94  volmgrx - ok
20:41:37.0672 0x0d94  [ DF8126BD41180351A093A3AD2FC8903B, AEFF4AA89CDDAAAD43CDE17C6B6EB2A397A0AC1651CBD51B889161EC2BC6527A ] volsnap         C:\Windows\system32\drivers\volsnap.sys
20:41:37.0677 0x0d94  volsnap - ok
20:41:37.0723 0x0d94  [ B0395671CD4A1B046BC7269A37C8E089, 2E6D8843B53D2E34D4FCAD0FB160996536F14D1EC95FB8C2298C9DCD66EFF918 ] Vsdatant        C:\Windows\system32\DRIVERS\vsdatant.sys
20:41:37.0730 0x0d94  Vsdatant - ok
20:41:37.0977 0x0d94  [ ED1F4BDF68C649C6F79A02502BB6C9BC, 3D2830822D4A2C7B3676100B27DEC7B1C2EF640DA36C6543365A9CF2A61BF68E ] VsEtwService120 C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe
20:41:37.0978 0x0d94  VsEtwService120 - ok
20:41:38.0140 0x0d94  [ B9BF343EBE805F42CD856844B98207FA, A3F97C08533A66D513011366C12A5AABF63E088AE4BB32167686650FD9932121 ] vsmon           C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
20:41:38.0191 0x0d94  vsmon - ok
20:41:38.0209 0x0d94  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
20:41:38.0211 0x0d94  vsmraid - ok
20:41:38.0264 0x0d94  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
20:41:38.0286 0x0d94  VSS - ok
20:41:38.0322 0x0d94  [ D0D249E885F53346C5E4887BC07BF8BB, 6C8471C5E5927F284CDCEEB0072608FA649DA229DC78B0F841BE33CFE9D62F61 ] vsserv          C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
20:41:38.0324 0x0d94  vsserv - ok
20:41:38.0341 0x0d94  [ 97583824EC989D5CB2E3A234A97EAAF3, F0A4436E51268B3A30DD1B7F4CCF3ECA8A43F78A1D14C12A84D47CBDED039F8D ] vsservppl       C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
20:41:38.0343 0x0d94  vsservppl - ok
20:41:38.0354 0x0d94  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
20:41:38.0356 0x0d94  vwifibus - ok
20:41:38.0364 0x0d94  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
20:41:38.0366 0x0d94  vwififlt - ok
20:41:38.0392 0x0d94  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
20:41:38.0393 0x0d94  vwifimp - ok
20:41:38.0405 0x0d94  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
20:41:38.0413 0x0d94  W32Time - ok
20:41:38.0419 0x0d94  WacHidRouter - ok
20:41:38.0432 0x0d94  WacHidRouterPro - ok
20:41:38.0435 0x0d94  wacommousefilter - ok
20:41:38.0447 0x0d94  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
20:41:38.0447 0x0d94  WacomPen - ok
20:41:38.0450 0x0d94  wacomrouterfilter - ok
20:41:38.0459 0x0d94  wacomvhid - ok
20:41:38.0470 0x0d94  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
20:41:38.0472 0x0d94  WANARP - ok
20:41:38.0480 0x0d94  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
20:41:38.0481 0x0d94  Wanarpv6 - ok
20:41:38.0539 0x0d94  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
20:41:38.0558 0x0d94  WatAdminSvc - ok
20:41:38.0605 0x0d94  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
20:41:38.0629 0x0d94  wbengine - ok
20:41:38.0643 0x0d94  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
20:41:38.0648 0x0d94  WbioSrvc - ok
20:41:38.0664 0x0d94  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
20:41:38.0672 0x0d94  wcncsvc - ok
20:41:38.0701 0x0d94  [ BC00873272B3771CCDA38336AF2B4D4B, 3E412DEC5F172B4C5FD5C227CD790EE56B90A00A8B538704E8F973D230BE2289 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:41:38.0703 0x0d94  WcsPlugInService - ok
20:41:38.0720 0x0d94  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
20:41:38.0721 0x0d94  Wd - ok
20:41:38.0769 0x0d94  [ CC46CB1B492D69A5EF554F807DA01729, DED4151923A837F4889C84555D237513C9400CE5DF2DBC7FEC9B2DA1CC355C36 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64_prewin8.sys
20:41:38.0770 0x0d94  WDC_SAM - ok
20:41:38.0816 0x0d94  [ BEA4098A4518EC8FEBE6925705CF5BF3, D327D4E0D01E4EE9A73CEFE71EA9B5E1317D600B256DED505170B44970817994 ] WDDriveService  C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
20:41:38.0820 0x0d94  WDDriveService - ok
20:41:38.0839 0x0d94  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
20:41:38.0851 0x0d94  Wdf01000 - ok
20:41:38.0864 0x0d94  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
20:41:38.0869 0x0d94  WdiServiceHost - ok
20:41:38.0872 0x0d94  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
20:41:38.0875 0x0d94  WdiSystemHost - ok
20:41:38.0909 0x0d94  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient       C:\Windows\System32\webclnt.dll
20:41:38.0917 0x0d94  WebClient - ok
20:41:38.0927 0x0d94  [ CBA25A299ECDBAE3A2300B68598AABA3, 5AC6F75FBDA58CD9D17922AF2780A37B89067EB4A97EE792A644B238BE94490D ] Wecsvc          C:\Windows\system32\wecsvc.dll
20:41:38.0934 0x0d94  Wecsvc - ok
20:41:38.0941 0x0d94  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
20:41:38.0944 0x0d94  wercplsupport - ok
20:41:38.0957 0x0d94  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
20:41:38.0960 0x0d94  WerSvc - ok
20:41:38.0965 0x0d94  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
20:41:38.0966 0x0d94  WfpLwf - ok
20:41:39.0019 0x0d94  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
20:41:39.0092 0x0d94  WIMMount - ok
20:41:39.0115 0x0d94  WinDefend - ok
20:41:39.0119 0x0d94  WinHttpAutoProxySvc - ok
20:41:39.0165 0x0d94  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
20:41:39.0169 0x0d94  Winmgmt - ok
20:41:39.0214 0x0d94  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM           C:\Windows\system32\WsmSvc.dll
20:41:39.0245 0x0d94  WinRM - ok
20:41:39.0290 0x0d94  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
20:41:39.0291 0x0d94  WinUsb - ok
20:41:39.0317 0x0d94  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
20:41:39.0333 0x0d94  Wlansvc - ok
20:41:39.0345 0x0d94  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
20:41:39.0346 0x0d94  WmiAcpi - ok
20:41:39.0359 0x0d94  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
20:41:39.0362 0x0d94  wmiApSrv - ok
20:41:39.0369 0x0d94  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
20:41:39.0372 0x0d94  WPCSvc - ok
20:41:39.0381 0x0d94  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
20:41:39.0385 0x0d94  WPDBusEnum - ok
20:41:39.0393 0x0d94  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
20:41:39.0394 0x0d94  ws2ifsl - ok
20:41:39.0401 0x0d94  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
20:41:39.0404 0x0d94  wscsvc - ok
20:41:39.0488 0x0d94  [ 86F11B85102AFA6A1A6101DCE2F09386, 68A0F0E628C8F33FDAC114876DA8ED14776DD74E80AC5A6A52257E19DE011091 ] wuauserv        C:\Windows\system32\wuaueng.dll
20:41:39.0522 0x0d94  wuauserv - ok
20:41:39.0533 0x0d94  [ D3381DC54C34D79B22CEE0D65BA91B7C, 70DC4ADCA4C0C28BB133287511E329D1B6B9B97F96CDE5B1D2F1F59FE1A965D9 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
20:41:39.0536 0x0d94  WudfPf - ok
20:41:39.0545 0x0d94  [ CF8D590BE3373029D57AF80914190682, FB9641777E90A58C063FBE95F081DC6D2F4770827DE19108A9DC3E3D6B17B4BF ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
20:41:39.0548 0x0d94  WUDFRd - ok
20:41:39.0556 0x0d94  [ 7A95C95B6C4CF292D689106BCAE49543, 9029F489E1E817CE12839B8C6656E46190497D445DC3F43C20CF96E5E6BD0691 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
20:41:39.0560 0x0d94  wudfsvc - ok
20:41:39.0571 0x0d94  [ FE90B750AB808FB9DD8FBB428B5FF83B, 3F8F592EC813BE292D305A87C5BA852F8BC3D7CE610612D9871F209A17326AA8 ] WwanSvc         C:\Windows\System32\wwansvc.dll
20:41:39.0577 0x0d94  WwanSvc - ok
20:41:39.0618 0x0d94  [ 4A5CE13408945E525503B5F73D29B9C5, D58BB31AF17752508EA67931BF170CE46877DC204FC5DA7EED5A078AEB0CA0FD ] xnacc           C:\Windows\system32\DRIVERS\xnacc.sys
20:41:39.0628 0x0d94  xnacc - ok
20:41:39.0675 0x0d94  [ E8CB51ED05A15C6D82B34BCEBEAC0A3A, CFADB68E7C4DC56CF11AD1F32A67BEE06EC87BD835EC7825FE441C67CB29DD4C ] ZAPrivacyService C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe
20:41:39.0677 0x0d94  ZAPrivacyService - ok
20:41:39.0721 0x0d94  [ 7DD4F85CB997834E1ADC1238045AD905, 2FF42F7BEC21D361698FFC7921DC690C16DEEC2A357188DDE6ECADA9CFA0B780 ] ZAtheros Wlan Agent C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
20:41:39.0723 0x0d94  ZAtheros Wlan Agent - ok
20:41:39.0783 0x0d94  [ 7A778981A430F463DDDD77C53CF6E622, 8FE73CBCD1A43B3C9FF5B19913E78DEF74A43A3366625BCFE40751803415017D ] ZoneAlarm ICM Service C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe
20:41:39.0796 0x0d94  ZoneAlarm ICM Service - ok
20:41:39.0802 0x0d94  ================ Scan global ===============================
20:41:39.0837 0x0d94  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
20:41:39.0877 0x0d94  [ B68AD91370FA58C1296DE9086BB4BA0A, 3B6B8170990B3B3B321752539A54D8EAB6E6241A25092682FDEE1A46BD39DBF6 ] C:\Windows\system32\winsrv.dll
20:41:39.0886 0x0d94  [ B68AD91370FA58C1296DE9086BB4BA0A, 3B6B8170990B3B3B321752539A54D8EAB6E6241A25092682FDEE1A46BD39DBF6 ] C:\Windows\system32\winsrv.dll
20:41:39.0902 0x0d94  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
20:41:39.0948 0x0d94  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
20:41:39.0953 0x0d94  [ Global ] - ok
20:41:39.0953 0x0d94  ================ Scan MBR ==================================
20:41:39.0961 0x0d94  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
20:41:40.0111 0x0d94  \Device\Harddisk0\DR0 - ok
20:41:40.0115 0x0d94  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
20:41:40.0120 0x0d94  \Device\Harddisk1\DR1 - ok
20:41:40.0121 0x0d94  ================ Scan VBR ==================================
20:41:40.0158 0x0d94  [ 729C51A57D9074CE4BBD184A60D05063 ] \Device\Harddisk0\DR0\Partition1
20:41:40.0226 0x0d94  \Device\Harddisk0\DR0\Partition1 - ok
20:41:40.0228 0x0d94  [ 99803C18B2B2A7BA1E7F0B7B8A068209 ] \Device\Harddisk0\DR0\Partition2
20:41:40.0230 0x0d94  \Device\Harddisk0\DR0\Partition2 - ok
20:41:40.0233 0x0d94  [ 78D12C694FC7985653D18937EEEB34BB ] \Device\Harddisk1\DR1\Partition1
20:41:40.0234 0x0d94  \Device\Harddisk1\DR1\Partition1 - ok
20:41:40.0234 0x0d94  ================ Scan generic autorun ======================
20:41:40.0263 0x0d94  [ BCFF1534AF0EBF5125801F30875B913B, EB00E5B81D6E736E32CE44F1DB2C56E73D5E6F107DCBA39EFCAEECB4BAC3A31D ] C:\Windows\system32\igfxtray.exe
20:41:40.0266 0x0d94  IgfxTray - ok
20:41:40.0292 0x0d94  [ BA286BB9E9F55D5255D99C36DC5BD2C3, 5D789578B55CD6BBE795EF5FA6E026ABC822680A73CF6550C58866C7E24DD42F ] C:\Windows\system32\hkcmd.exe
20:41:40.0297 0x0d94  HotKeysCmds - ok
20:41:40.0309 0x0d94  [ EA15512517E4B79A9C29496FB7009993, 09F329636CF93D413657F1149C6F7C99846E8004CD2A7B682AF5215EBB21E5DF ] C:\Windows\system32\igfxpers.exe
20:41:40.0315 0x0d94  Persistence - ok
20:41:40.0453 0x0d94  [ 2166853BF49ECB1870385736CFA0068C, 37FF80713C4EFDF1248D90253DF501351245A9ECD4CA2C85E5ACAACFF1895C38 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
20:41:40.0541 0x0d94  RTHDVCPL - ok
20:41:40.0579 0x0d94  [ C9C552CE10985B889DC476F6C015F85D, 901A7BFC84A7C42DF0B9CBFB49F39A95DDC62BAC9E08777DA53AB2B1550AAA55 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
20:41:40.0595 0x0d94  RtHDVBg - ok
20:41:40.0644 0x0d94  [ AD5CC33EFF22ACCE785D4F9F18BDCD3A, 52FDE29F63ED5CC32C9E87257EB8C3AC2E44C0AEEAFC09A95C62F6B07C19F478 ] C:\PenTabletDriver\TabletDriver.exe
20:41:40.0652 0x0d94  TabletDriver - ok
20:41:40.0699 0x0d94  [ 50E81F5F143F4ABBCCC4BDF92D70C383, E5723A1CCC0E0B22F36A035ADCFE78D98A97A77CBD9D34CF95E75B78C139F175 ] C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
20:41:40.0703 0x0d94  USB3MON - ok
20:41:40.0732 0x0d94  [ 166E7D6D37D88E06DEBDA49E4847C157, A61BB7B989CCB9A4DAA4D3FDA9BD72927E694041847A1990403E6AA50F25C650 ] C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
20:41:40.0734 0x0d94  ZoneAlarm - ok
20:41:40.0756 0x0d94  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
20:41:40.0760 0x0d94  mctadmin - ok
20:41:40.0763 0x0d94  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
20:41:40.0765 0x0d94  mctadmin - ok
20:41:40.0958 0x0d94  [ 8D3D5BA1638778DE87503E5FEA68DC9F, D54C2B375A6F8A49BC53CAA3ED8A0EEBF53FD113BB47622F4AE6DA762D194FE7 ] C:\Program Files\CCleaner\CCleaner64.exe
20:41:41.0070 0x0d94  CCleaner Monitoring - ok
20:41:41.0076 0x0d94  Waiting for KSN requests completion. In queue: 132
20:41:42.0103 0x0d94  AV detected via SS2: Bitdefender Antivirus Free Antimalware, C:\Program Files\Bitdefender Antivirus Free\ProductActionCenterFix.exe ( 1.0.7.1 ), 0x41000 ( enabled : updated )
20:41:42.0129 0x0d94  FW detected via SS2: ZoneAlarm Free Firewall Firewall, C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZA_WSC_Remediation.exe ( 15.0.653.17211 ), 0x41010 ( enabled )
20:41:42.0395 0x0d94  ============================================================
20:41:42.0395 0x0d94  Scan finished
20:41:42.0395 0x0d94  ============================================================
20:41:42.0399 0x041c  Detected object count: 0
20:41:42.0399 0x041c  Actual detected object count: 0
 


Edited by ferrouswheel, 02 April 2017 - 07:48 PM.


#9 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 21 April 2017 - 09:32 PM

Summary: Whole computer slows way down (enough to make audio played from local files skip like a buzzsaw and the mouse and keyboard cursors to lag) consistently during the loading of websites, and then every so often seemingly at random, possibly along with any Internet traffic. Scans are above, but nothing has been found. It's been doing this for about a month now, but it started suddenly one day. (Logs from scans are posted above.)

 

Also: When I shut down or restart the computer, it usually doesn't have the problem for a few hours, but then it comes back within an hour or so of using any web browser. No apparent correlation with any specific websites, and all I'm using generally is Google, Reddit, Pandora, Youtube, Newgrounds, 9Gag, Hulu, and occasional visits to Facebook and Amazon. I don't generally visit porn sites anymore, but when I do, it's always the same site and it's one of the mainstream ones (not sure if I'm allowed to say the name here). I think I might have accidentally followed some search result links to a malicious site though, around the time the problem started. (I was trying to find local results, and I ended up on some of those sites that have no apparent content but plug your location into their titles. That sort of thing.)

 

And once, maybe a week ago, I also got a BSOD, shortly after starting the machine.

 

It seems to be failing to create system restore points too, according to the logs.

 

Does anyone have any suggestions?


Edited by ferrouswheel, 21 April 2017 - 09:33 PM.


#10 Nimdok

Nimdok

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:46 PM

Posted 21 April 2017 - 09:49 PM

I don't know about the restore points and such, but have you tried cracking open the machine and dusting in there? What you're describing sounds like what happens when the dust bunnies start setting up colonies and demanding rights.



#11 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 23 April 2017 - 02:11 AM

I don't know about the restore points and such, but have you tried cracking open the machine and dusting in there? What you're describing sounds like what happens when the dust bunnies start setting up colonies and demanding rights.

I opened it up and sprayed out the dust with compressed air. But the problem still persists.


Edited by ferrouswheel, 23 April 2017 - 02:11 AM.


#12 seedy21

seedy21

  • Malware Response Team
  • 742 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Yorkshire, UK
  • Local time:01:46 AM

Posted 10 May 2017 - 04:22 PM

I would like to look further into your issue which will involve using tools that are not allowed in this section.

 

Please follow the instructions in the Malware Removal and Log Section Preparation Guide.

 

Once you have completed this, please come back to this topic and post a link to the new topic you just created in the Virus, Trojan, Spyware, and Malware Removal Logs forum, so a Moderator is aware you have opened a new topic.


Edited by seedy21, 10 May 2017 - 04:25 PM.

“It's only after we've lost everything that we're free to do anything.”
― Chuck Palahniuk, Fight Club

unite_blue.png


#13 ferrouswheel

ferrouswheel
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:08:46 PM

Posted 11 May 2017 - 11:23 AM

I would like to look further into your issue which will involve using tools that are not allowed in this section.

 

Please follow the instructions in the Malware Removal and Log Section Preparation Guide.

 

Once you have completed this, please come back to this topic and post a link to the new topic you just created in the Virus, Trojan, Spyware, and Malware Removal Logs forum, so a Moderator is aware you have opened a new topic.

 

https://www.bleepingcomputer.com/forums/t/646382/whole-computer-slows-down-during-web-loading/



#14 NickAu

NickAu

    Bleepin' Fish Doctor


  • Moderator
  • 13,562 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:11:46 AM

Posted 11 May 2017 - 05:02 PM

As the OP has started a new topic in Malware removal logs I am closing this thread to avoid confusion.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users