Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

windows detected hard disk problem


  • Please log in to reply
7 replies to this topic

#1 doughboy123

doughboy123

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 03 December 2017 - 07:21 PM

ran a tdss rootkit.  here it is attached: still pops up


Edited by hamluis, 03 December 2017 - 08:10 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 doughboy123

doughboy123
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 03 December 2017 - 07:23 PM

sorry wasnt attached - didn't allow it - please help me thru the process



#3 OldPhil

OldPhil

    Doppleganger


  • Members
  • 4,124 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Long Island New York
  • Local time:09:51 PM

Posted 03 December 2017 - 07:52 PM

Try clicking on more reply options next to post button.


Honesty & Integrity Above All!


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:51 PM

Posted 04 December 2017 - 12:41 PM

You cannot attach here in Am I Infected... Copy/ paste log... use more than 1 reply if needed.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 doughboy123

doughboy123
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 04 December 2017 - 12:48 PM

thanks

part 1

17:24:10.0748 9060  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

17:24:11.0794 9060  ============================================================

17:24:11.0794 9060  Current date / time: 2017/11/30 17:24:11.0794

17:24:11.0794 9060  SystemInfo:

17:24:11.0794 9060 

17:24:11.0795 9060  OS Version: 6.1.7601 ServicePack: 1.0

17:24:11.0795 9060  Product type: Workstation

17:24:11.0795 9060  ComputerName: DAVEDOHERTY

17:24:11.0795 9060  UserName: Dave Dorehty

17:24:11.0795 9060  Windows directory: C:\Windows

17:24:11.0795 9060  System windows directory: C:\Windows

17:24:11.0795 9060  Running under WOW64

17:24:11.0795 9060  Processor architecture: Intel x64

17:24:11.0795 9060  Number of processors: 4

17:24:11.0795 9060  Page size: 0x1000

17:24:11.0795 9060  Boot type: Normal boot

17:24:11.0795 9060  ============================================================

17:24:12.0652 9060  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

17:24:12.0662 9060  ============================================================

17:24:12.0662 9060  \Device\Harddisk0\DR0:

17:24:12.0662 9060  MBR partitions:

17:24:12.0662 9060  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x258000

17:24:12.0663 9060  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x258800, BlocksNum 0x1B02C800

17:24:12.0663 9060  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1B285000, BlocksNum 0x1F40000

17:24:12.0663 9060  ============================================================

17:24:12.0693 9060  C: <-> \Device\Harddisk0\DR0\Partition2

17:24:12.0766 9060  Q: <-> \Device\Harddisk0\DR0\Partition3

17:24:12.0766 9060  ============================================================

17:24:12.0767 9060  Initialize success

17:24:12.0767 9060  ============================================================

17:24:14.0004 8164  ============================================================

17:24:14.0004 8164  Scan started

17:24:14.0004 8164  Mode: Manual;

17:24:14.0004 8164  ============================================================

17:24:15.0601 8164  ================ Scan system memory ========================

17:24:15.0602 8164  System memory - ok

17:24:15.0603 8164  ================ Scan services =============================

17:24:16.0365 8164  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

17:24:16.0393 8164  1394ohci - ok

17:24:16.0470 8164  [ F4AF97702BAD85BFEF64B9A557F11B6F ] 5U877           C:\Windows\system32\DRIVERS\5U877.sys

17:24:16.0474 8164  5U877 - ok

17:24:16.0548 8164  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

17:24:16.0559 8164  ACPI - ok

17:24:16.0616 8164  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

17:24:16.0618 8164  AcpiPmi - ok

17:24:16.0810 8164  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

17:24:16.0821 8164  AdobeARMservice - ok

17:24:17.0114 8164  [ 5D0A6467159A017D3F2222CAE67031B3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

17:24:17.0116 8164  AdobeFlashPlayerUpdateSvc - ok

17:24:17.0218 8164  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

17:24:17.0269 8164  adp94xx - ok

17:24:17.0311 8164  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\drivers\adpahci.sys

17:24:17.0316 8164  adpahci - ok

17:24:17.0337 8164  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

17:24:17.0344 8164  adpu320 - ok

17:24:17.0384 8164  [ 262D7C87D0AC20B96EF9877D3CA478A0 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

17:24:17.0386 8164  AeLookupSvc - ok

17:24:17.0550 8164  [ 0DC2A9882540DEA4A55B08785E09D8FC ] AFD             C:\Windows\system32\drivers\afd.sys

17:24:17.0633 8164  AFD - ok

17:24:17.0667 8164  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

17:24:17.0670 8164  agp440 - ok

17:24:17.0709 8164  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

17:24:17.0711 8164  ALG - ok

17:24:17.0762 8164  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

17:24:17.0773 8164  aliide - ok

17:24:17.0849 8164  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

17:24:17.0858 8164  amdide - ok

17:24:17.0902 8164  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

17:24:17.0907 8164  AmdK8 - ok

17:24:17.0924 8164  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

17:24:17.0929 8164  AmdPPM - ok

17:24:17.0960 8164  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

17:24:17.0964 8164  amdsata - ok

17:24:18.0005 8164  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

17:24:18.0011 8164  amdsbs - ok

17:24:18.0028 8164  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

17:24:18.0031 8164  amdxata - ok

17:24:18.0107 8164  [ C16B5B379A2A79702CC5FF923EAAE3FD ] AppID           C:\Windows\system32\drivers\appid.sys

17:24:18.0187 8164  AppID - ok

17:24:18.0234 8164  [ 5152D6B29C61EF59537DBDA92BFE2978 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

17:24:18.0280 8164  AppIDSvc - ok

17:24:18.0338 8164  [ DE23E052E557580674785CDF45B613F3 ] Appinfo         C:\Windows\System32\appinfo.dll

17:24:18.0377 8164  Appinfo - ok

17:24:18.0518 8164  [ A5E8EB3B4244358F62DADF769DB59567 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

17:24:18.0520 8164  Apple Mobile Device Service - ok

17:24:18.0574 8164  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll

17:24:18.0579 8164  AppMgmt - ok

17:24:18.0605 8164  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\drivers\arc.sys

17:24:18.0609 8164  arc - ok

17:24:18.0625 8164  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys

17:24:18.0628 8164  arcsas - ok

17:24:18.0757 8164  [ 8637F3119057178364D200F2462E625C ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

17:24:18.0761 8164  aspnet_state - ok

17:24:18.0784 8164  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

17:24:18.0787 8164  AsyncMac - ok

17:24:18.0837 8164  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

17:24:18.0841 8164  atapi - ok

17:24:18.0904 8164  [ 67C717EC24FCAAE7B518D9E06AD036AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

17:24:18.0939 8164  AudioEndpointBuilder - ok

17:24:18.0970 8164  [ 67C717EC24FCAAE7B518D9E06AD036AB ] AudioSrv        C:\Windows\System32\Audiosrv.dll

17:24:18.0981 8164  AudioSrv - ok

17:24:19.0037 8164  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

17:24:19.0041 8164  AxInstSV - ok

17:24:19.0081 8164  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

17:24:19.0092 8164  b06bdrv - ok

17:24:19.0112 8164  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

17:24:19.0118 8164  b57nd60a - ok

17:24:19.0144 8164  bbhyfliq - ok

17:24:19.0176 8164  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

17:24:19.0179 8164  BDESVC - ok

17:24:19.0193 8164  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

17:24:19.0196 8164  Beep - ok

17:24:19.0249 8164  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

17:24:19.0272 8164  BFE - ok

17:24:19.0312 8164  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

17:24:19.0397 8164  BITS - ok

17:24:19.0535 8164  [ 686045905787B68D829CE647A6DFAD2B ] Blackberry Device Manager C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe

17:24:19.0558 8164  Blackberry Device Manager - ok

17:24:19.0603 8164  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

17:24:19.0605 8164  blbdrive - ok

17:24:19.0690 8164  [ B5C2F92EE1106DFE7BB1CCE4D35B6037 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

17:24:19.0702 8164  Bonjour Service - ok

17:24:19.0771 8164  [ ABA3984C822E4D3F889699912D85D6C5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

17:24:19.0773 8164  bowser - ok

17:24:19.0791 8164  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

17:24:19.0793 8164  BrFiltLo - ok

17:24:19.0810 8164  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

17:24:19.0812 8164  BrFiltUp - ok

17:24:19.0856 8164  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

17:24:19.0860 8164  Browser - ok

17:24:19.0878 8164  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

17:24:19.0883 8164  Brserid - ok

17:24:19.0895 8164  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

17:24:19.0898 8164  BrSerWdm - ok

17:24:19.0910 8164  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

17:24:19.0912 8164  BrUsbMdm - ok

17:24:19.0926 8164  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

17:24:19.0927 8164  BrUsbSer - ok

17:24:19.0950 8164  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

17:24:19.0998 8164  BTHMODEM - ok

17:24:20.0072 8164  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

17:24:20.0076 8164  bthserv - ok

17:24:20.0095 8164  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

17:24:20.0100 8164  cdfs - ok

17:24:20.0151 8164  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

17:24:20.0156 8164  cdrom - ok

17:24:20.0202 8164  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

17:24:20.0205 8164  CertPropSvc - ok

17:24:20.0225 8164  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys

17:24:20.0229 8164  circlass - ok

17:24:20.0289 8164  [ 3963FEC1892368DD500E6ED1F5C286CE ] CLFS            C:\Windows\system32\CLFS.sys

17:24:20.0312 8164  CLFS - ok

17:24:20.0398 8164  [ F13EC8A783E0CB0D6DC26A3CA848B7B8 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

17:24:20.0404 8164  clr_optimization_v2.0.50727_32 - ok

17:24:20.0466 8164  [ B4D73F04E9BC076F7CDAC4327DF636BB ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

17:24:20.0471 8164  clr_optimization_v2.0.50727_64 - ok

17:24:20.0556 8164  [ 2BA609641FA64BAB02ACD3C0095672F5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

17:24:20.0562 8164  clr_optimization_v4.0.30319_32 - ok

17:24:20.0580 8164  [ 7C7502CD2A2CFAB399D0D8DA95DB03E7 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

17:24:20.0588 8164  clr_optimization_v4.0.30319_64 - ok

17:24:20.0620 8164  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

17:24:20.0622 8164  CmBatt - ok

17:24:20.0667 8164  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

17:24:20.0671 8164  cmdide - ok

17:24:20.0742 8164  [ A98CED39AD91B445E2E442A9BD67E8B4 ] CNG             C:\Windows\system32\Drivers\cng.sys

17:24:20.0763 8164  CNG - ok

17:24:20.0837 8164  [ DB6F09464C57606892BF6D2458483417 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys

17:24:20.0871 8164  CnxtHdAudService - ok

17:24:20.0920 8164  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

17:24:20.0924 8164  Compbatt - ok

17:24:20.0948 8164  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

17:24:20.0950 8164  CompositeBus - ok

17:24:20.0968 8164  COMSysApp - ok

17:24:20.0992 8164  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

17:24:20.0996 8164  crcdisk - ok

17:24:21.0068 8164  [ 48FEDBE324F1EA9417BA1D62AE863011 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

17:24:21.0173 8164  CryptSvc - ok

17:24:21.0221 8164  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys

17:24:21.0243 8164  CSC - ok

17:24:21.0290 8164  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll

17:24:21.0317 8164  CscService - ok

17:24:21.0361 8164  [ 9D0D050170D47E778B624A28C90F23DE ] CxAudMsg        C:\Windows\system32\CxAudMsg64.exe

17:24:21.0368 8164  CxAudMsg - ok

17:24:21.0524 8164  [ A1F58FFF448E4099297D6EE0641D4D0E ] dbupdate        C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

17:24:21.0527 8164  dbupdate - ok

17:24:21.0579 8164  [ A1F58FFF448E4099297D6EE0641D4D0E ] dbupdatem       C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

17:24:21.0582 8164  dbupdatem - ok

17:24:21.0591 8164  dbx - ok

17:24:21.0626 8164  [ 195841250AD77AF6E7589753F536CC75 ] DbxSvc          C:\Windows\system32\DbxSvc.exe

17:24:21.0630 8164  DbxSvc - ok

17:24:21.0718 8164  [ 3F1A199859B4F3F8357B2A0AF5666A54 ] DcomLaunch      C:\Windows\system32\rpcss.dll

17:24:21.0742 8164  DcomLaunch - ok

17:24:21.0777 8164  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

17:24:21.0783 8164  defragsvc - ok

17:24:21.0832 8164  [ 9B38580063D281A99E68EF5813022A5F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

17:24:21.0869 8164  DfsC - ok

17:24:21.0928 8164  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

17:24:21.0933 8164  Dhcp - ok

17:24:22.0059 8164  [ EE9954237F15BE4DD9304D12E4D305ED ] DiagTrack       C:\Windows\system32\diagtrack.dll

17:24:22.0117 8164  DiagTrack - ok

17:24:22.0143 8164  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

17:24:22.0145 8164  discache - ok

17:24:22.0192 8164  [ 616387BBD83372220B09DE95F4E67BBC ] Disk            C:\Windows\system32\drivers\disk.sys

17:24:22.0197 8164  Disk - ok

17:24:22.0215 8164  [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys

17:24:22.0219 8164  dmvsc - ok

17:24:22.0269 8164  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

17:24:22.0276 8164  Dnscache - ok

17:24:22.0302 8164  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

17:24:22.0310 8164  dot3svc - ok

17:24:22.0375 8164  [ E6987F7818154791A6937BCC6655599B ] DozeSvc         C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE

17:24:22.0398 8164  DozeSvc - ok

17:24:22.0443 8164  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

17:24:22.0449 8164  DPS - ok

17:24:22.0480 8164  [ 26FE888505E5A945B0536AF9A2A27A6F ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

17:24:22.0484 8164  drmkaud - ok

17:24:22.0662 8164  [ 5CEF80AE869336376F550ECAE91E424A ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

17:24:22.0758 8164  DXGKrnl - ok

17:24:22.0815 8164  [ CE4CFFD9F64B86BCEB1C343FC9924D72 ] DzHDD64         C:\Windows\system32\DRIVERS\DzHDD64.sys

17:24:22.0818 8164  DzHDD64 - ok

17:24:22.0866 8164  [ DC1776D086AA9733B1929A3D979D9FDD ] e1cexpress      C:\Windows\system32\DRIVERS\e1c62x64.sys

17:24:22.0875 8164  e1cexpress - ok

17:24:22.0925 8164  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

17:24:22.0930 8164  EapHost - ok

17:24:23.0039 8164  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\drivers\evbda.sys

17:24:23.0158 8164  ebdrv - ok

17:24:23.0216 8164  [ 62056ADD38513A86C4866E912371B56B ] EFS             C:\Windows\System32\lsass.exe

17:24:23.0221 8164  EFS - ok

17:24:23.0299 8164  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

17:24:23.0331 8164  ehRecvr - ok

17:24:23.0344 8164  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

17:24:23.0350 8164  ehSched - ok

17:24:23.0404 8164  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

17:24:23.0427 8164  elxstor - ok

17:24:23.0508 8164  [ ABDD5AD016AFFD34AD40E944CE94BF59 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

17:24:23.0512 8164  EpsonBidirectionalService - ok

17:24:23.0529 8164  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

17:24:23.0532 8164  ErrDev - ok

17:24:23.0573 8164  [ 7D0520A12B31E6858B3BB7E675AFA34E ] ESProtectionDriver C:\Windows\system32\drivers\mbae64.sys

17:24:23.0647 8164  ESProtectionDriver - ok

17:24:23.0682 8164  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

17:24:23.0688 8164  EventSystem - ok

17:24:23.0768 8164  [ 7E45F8B117419ABA3BB26579F6E70324 ] exfat           C:\Windows\system32\drivers\exfat.sys

17:24:23.0859 8164  exfat - ok

17:24:23.0897 8164  [ 6EDFA237D25433C03F42FBFDB16BDD24 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

17:24:23.0904 8164  fastfat - ok

17:24:23.0965 8164  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

17:24:23.0995 8164  Fax - ok

17:24:24.0027 8164  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\drivers\fdc.sys

17:24:24.0031 8164  fdc - ok

17:24:24.0063 8164  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

17:24:24.0065 8164  fdPHost - ok

17:24:24.0077 8164  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

17:24:24.0079 8164  FDResPub - ok

17:24:24.0100 8164  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

17:24:24.0103 8164  FileInfo - ok

17:24:24.0118 8164  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

17:24:24.0120 8164  Filetrace - ok

17:24:24.0136 8164  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

17:24:24.0139 8164  flpydisk - ok

17:24:24.0159 8164  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

17:24:24.0164 8164  FltMgr - ok

17:24:24.0242 8164  [ 785F474FB5E67E448E1931C98E8D0ABC ] FontCache       C:\Windows\system32\FntCache.dll

17:24:24.0376 8164  FontCache - ok

17:24:24.0430 8164  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

17:24:24.0434 8164  FontCache3.0.0.0 - ok

17:24:24.0468 8164  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

17:24:24.0472 8164  FsDepends - ok

17:24:24.0523 8164  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

17:24:24.0527 8164  Fs_Rec - ok

17:24:24.0570 8164  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

17:24:24.0577 8164  fvevol - ok

17:24:24.0612 8164  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

17:24:24.0616 8164  gagp30kx - ok

17:24:24.0685 8164  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

17:24:24.0688 8164  GEARAspiWDM - ok

17:24:24.0750 8164  [ E4AE497857409127ED57562AF913A903 ] gpsvc           C:\Windows\System32\gpsvc.dll

17:24:24.0775 8164  gpsvc - ok

17:24:24.0848 8164  [ 053EEEE1ABAE53F044F1E386E22AE525 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

17:24:24.0849 8164  gupdate - ok

17:24:24.0858 8164  [ 053EEEE1ABAE53F044F1E386E22AE525 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

17:24:24.0859 8164  gupdatem - ok

17:24:24.0881 8164  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

17:24:24.0884 8164  hcw85cir - ok

17:24:24.0924 8164  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

17:24:24.0932 8164  HdAudAddService - ok

17:24:24.0966 8164  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

17:24:24.0969 8164  HDAudBus - ok

17:24:24.0987 8164  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

17:24:25.0007 8164  HidBatt - ok

17:24:25.0047 8164  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

17:24:25.0053 8164  HidBth - ok

17:24:25.0075 8164  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\drivers\hidir.sys

17:24:25.0079 8164  HidIr - ok

17:24:25.0105 8164  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

17:24:25.0109 8164  hidserv - ok

17:24:25.0151 8164  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

17:24:25.0153 8164  HidUsb - ok

17:24:25.0179 8164  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

17:24:25.0182 8164  hkmsvc - ok

17:24:25.0198 8164  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

17:24:25.0203 8164  HomeGroupListener - ok

17:24:25.0234 8164  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

17:24:25.0239 8164  HomeGroupProvider - ok

17:24:25.0278 8164  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

17:24:25.0282 8164  HpSAMD - ok

17:24:25.0386 8164  [ 02F1253476B7F5F818364443DFED3264 ] HPSupportSolutionsFrameworkService C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

17:24:25.0389 8164  HPSupportSolutionsFrameworkService - ok

17:24:25.0461 8164  [ CF5C9BD985120781200D35FD445D0BD5 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

17:24:25.0502 8164  HTTP - ok

17:24:25.0536 8164  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

17:24:25.0537 8164  hwpolicy - ok

17:24:25.0605 8164  [ 9149907FF8681AD6475607EEBF62DD2F ] HyperW7Svc      C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe

17:24:25.0610 8164  HyperW7Svc - ok

17:24:25.0659 8164  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

17:24:25.0662 8164  i8042prt - ok

17:24:25.0727 8164  [ D7921D5A870B11CC1ADAB198A519D50A ] iaStor          C:\Windows\system32\drivers\iaStor.sys

17:24:25.0731 8164  iaStor - ok

17:24:25.0780 8164  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

17:24:25.0788 8164  iaStorV - ok

17:24:25.0825 8164  [ 29ED470689B7C597A9701D6A4C57A578 ] IBMPMDRV        C:\Windows\system32\DRIVERS\ibmpmdrv.sys

17:24:25.0828 8164  IBMPMDRV - ok

17:24:25.0838 8164  [ BC7AF43EEC24E995D770EC92A441D5D8 ] IBMPMSVC        C:\Windows\system32\ibmpmsvc.exe

17:24:25.0841 8164  IBMPMSVC - ok

17:24:25.0911 8164  [ C98A5B9D932430AD8EEBD3EF73756EF7 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

17:24:25.0944 8164  idsvc - ok

17:24:26.0265 8164  [ 66DC0CE2D1867B8178EAA0E11930DBD7 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

17:24:26.0523 8164  igfx - ok

17:24:26.0616 8164  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

17:24:26.0620 8164  iirsp - ok

17:24:26.0679 8164  [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT          C:\Windows\System32\ikeext.dll

17:24:26.0713 8164  IKEEXT - ok

17:24:26.0762 8164  [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys

17:24:26.0770 8164  IntcDAud - ok

17:24:26.0828 8164  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

17:24:26.0843 8164  intelide - ok

17:24:26.0924 8164  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

17:24:26.0926 8164  intelppm - ok

17:24:26.0944 8164  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

17:24:26.0947 8164  IPBusEnum - ok

17:24:26.0965 8164  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

17:24:26.0968 8164  IpFilterDriver - ok

17:24:27.0047 8164  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

17:24:27.0067 8164  iphlpsvc - ok

17:24:27.0090 8164  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

17:24:27.0093 8164  IPMIDRV - ok

17:24:27.0125 8164  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

17:24:27.0128 8164  IPNAT - ok

17:24:27.0197 8164  [ 6F836118C67812A6CC3F8FC9EAF0E65D ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

17:24:27.0220 8164  iPod Service - ok

17:24:27.0247 8164  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

17:24:27.0250 8164  IRENUM - ok

17:24:27.0271 8164  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

17:24:27.0273 8164  isapnp - ok

17:24:27.0315 8164  [ 96BB922A0981BC7432C8CF52B5410FE6 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

17:24:27.0336 8164  iScsiPrt - ok

17:24:27.0430 8164  [ 6C85719A21B3F62C2C76280F4BD36C7B ] jhi_service     C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

17:24:27.0437 8164  jhi_service - ok

17:24:27.0466 8164  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

17:24:27.0470 8164  kbdclass - ok

17:24:27.0508 8164  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

17:24:27.0512 8164  kbdhid - ok

17:24:27.0530 8164  [ 62056ADD38513A86C4866E912371B56B ] KeyIso          C:\Windows\system32\lsass.exe

17:24:27.0535 8164  KeyIso - ok

17:24:27.0593 8164  [ DFE85B031220F8E0271716BBB3C4C8FF ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

17:24:27.0597 8164  KSecDD - ok

17:24:27.0616 8164  [ 70D7302DD70B979637179BFD8295C924 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

17:24:27.0622 8164  KSecPkg - ok

17:24:27.0662 8164  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

17:24:27.0665 8164  ksthunk - ok

17:24:27.0697 8164  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

17:24:27.0718 8164  KtmRm - ok

17:24:27.0789 8164  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

17:24:27.0800 8164  LanmanServer - ok

17:24:27.0832 8164  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

17:24:27.0839 8164  LanmanWorkstation - ok

17:24:27.0901 8164  [ 1EF45F1BD62B8F4C19458326A3E91930 ] LENOVO.CAMMUTE  C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe

17:24:27.0903 8164  LENOVO.CAMMUTE - ok

17:24:27.0958 8164  [ FCE735941DA27929DBFC1918F286FFD8 ] LENOVO.MICMUTE  C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

17:24:27.0961 8164  LENOVO.MICMUTE - ok

17:24:27.0979 8164  [ 2B9D8555DC004E240082D18E7725CE20 ] lenovo.smi      C:\Windows\system32\DRIVERS\smiifx64.sys

17:24:27.0983 8164  lenovo.smi - ok

17:24:27.0995 8164  [ 448BE3E001004A55E8A959C57E17F6D8 ] LENOVO.TPKNRSVC C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

17:24:27.0998 8164  LENOVO.TPKNRSVC - ok

17:24:28.0015 8164  [ 6F2CC57EB5836D2AC9BD37F3554D55F8 ] Lenovo.VIRTSCRLSVC C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe

17:24:28.0018 8164  Lenovo.VIRTSCRLSVC - ok

17:24:28.0051 8164  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

17:24:28.0053 8164  lltdio - ok

17:24:28.0081 8164  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

17:24:28.0089 8164  lltdsvc - ok

17:24:28.0120 8164  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

17:24:28.0123 8164  lmhosts - ok

17:24:28.0156 8164  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

17:24:28.0159 8164  LSI_FC - ok

17:24:28.0189 8164  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

17:24:28.0193 8164  LSI_SAS - ok

17:24:28.0204 8164  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

17:24:28.0206 8164  LSI_SAS2 - ok

17:24:28.0231 8164  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

17:24:28.0234 8164  LSI_SCSI - ok

17:24:28.0285 8164  [ 5416CEB2916BBE635288C4D1075B045E ] luafv           C:\Windows\system32\drivers\luafv.sys

17:24:28.0334 8164  luafv - ok

17:24:28.0403 8164  [ C3C2C7E2EEFECD88A76FF626E72BF123 ] MBAMChameleon   C:\Windows\System32\Drivers\MbamChameleon.sys

17:24:28.0407 8164  MBAMChameleon - ok

17:24:28.0453 8164  [ 20046A5DB1466EBD0DCAEB84D00C5432 ] MBAMFarflt      C:\Windows\system32\DRIVERS\farflt.sys

17:24:28.0455 8164  MBAMFarflt - ok

17:24:28.0506 8164  [ 29BD0BB2CD7E37B8C248CFA933FBD1F4 ] MBAMProtection  C:\Windows\system32\DRIVERS\mbam.sys

17:24:28.0510 8164  MBAMProtection - ok

17:24:28.0730 8164  [ 734B435E1693386213EEFD4D17A70DEB ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe

17:24:28.0758 8164  MBAMService - ok

17:24:28.0876 8164  [ B047B9CE5A0D800E6D713B43D0405221 ] MBAMSwissArmy   C:\Windows\System32\Drivers\mbamswissarmy.sys

17:24:28.0883 8164  MBAMSwissArmy - ok

17:24:28.0924 8164  [ 8135271183EA7C59BD865873C972159D ] MBAMWebProtection C:\Windows\system32\DRIVERS\mwac.sys

17:24:28.0927 8164  MBAMWebProtection - ok

17:24:28.0956 8164  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

17:24:28.0961 8164  Mcx2Svc - ok

17:24:28.0990 8164  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\drivers\megasas.sys

17:24:28.0993 8164  megasas - ok

17:24:29.0018 8164  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

17:24:29.0024 8164  MegaSR - ok

17:24:29.0070 8164  [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys

17:24:29.0073 8164  MEIx64 - ok

17:24:29.0102 8164  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

17:24:29.0105 8164  MMCSS - ok

17:24:29.0120 8164  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

17:24:29.0170 8164  Modem - ok

17:24:29.0241 8164  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

17:24:29.0243 8164  monitor - ok

17:24:29.0290 8164  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

17:24:29.0293 8164  mouclass - ok

17:24:29.0326 8164  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

17:24:29.0329 8164  mouhid - ok

17:24:29.0393 8164  [ 072D8646E23ECF8A3F5F0157017B4DB6 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

17:24:29.0397 8164  mountmgr - ok

17:24:29.0474 8164  [ 3665AB2F67F4024F5F3F80335ED5322A ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys

17:24:29.0481 8164  MpFilter - ok

17:24:29.0513 8164  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

17:24:29.0516 8164  mpio - ok

17:24:29.0668 8164  [ BF2513029E231BE96D82F7C3ABFF87F4 ] MpKslbbf6e8a3   c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9453EE88-32B5-41B7-B94E-2C016F9ADBCE}\MpKslbbf6e8a3.sys

17:24:29.0740 8164  MpKslbbf6e8a3 - ok

17:24:29.0782 8164  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

17:24:29.0786 8164  mpsdrv - ok

17:24:29.0833 8164  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

17:24:29.0867 8164  MpsSvc - ok

17:24:29.0916 8164  [ 98DB1790F0A584E0A2528B92B052417F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

17:24:30.0055 8164  MRxDAV - ok

17:24:30.0101 8164  [ 767C6DF04C5758B9F0790D400541B44F ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

17:24:30.0106 8164  mrxsmb - ok

17:24:30.0134 8164  [ BD55F604FFABC911F8E5500186AE70E5 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

17:24:30.0143 8164  mrxsmb10 - ok

17:24:30.0197 8164  [ 92EECFB046D4706A4B8D699A4069B6EC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

17:24:30.0202 8164  mrxsmb20 - ok


part 2

17:24:30.0249 8164  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

17:24:30.0252 8164  msahci - ok

17:24:30.0287 8164  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

17:24:30.0294 8164  msdsm - ok

17:24:30.0321 8164  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

17:24:30.0329 8164  MSDTC - ok

17:24:30.0368 8164  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

17:24:30.0371 8164  Msfs - ok

17:24:30.0400 8164  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

17:24:30.0403 8164  mshidkmdf - ok

17:24:30.0420 8164  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

17:24:30.0423 8164  msisadrv - ok

17:24:30.0451 8164  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

17:24:30.0457 8164  MSiSCSI - ok

17:24:30.0462 8164  msiserver - ok

17:24:30.0497 8164  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

17:24:30.0500 8164  MSKSSRV - ok

17:24:30.0594 8164  [ 5ADED2C1239D7BD798E2C4EF9EAA1FA3 ] MsMpSvc         c:\Program Files\Microsoft Security Client\MsMpEng.exe

17:24:30.0607 8164  MsMpSvc - ok

17:24:30.0663 8164  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

17:24:30.0698 8164  MSPCLOCK - ok

17:24:30.0917 8164  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

17:24:30.0920 8164  MSPQM - ok

17:24:30.0944 8164  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

17:24:30.0954 8164  MsRPC - ok

17:24:30.0978 8164  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

17:24:30.0982 8164  mssmbios - ok

17:24:30.0987 8164  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

17:24:30.0988 8164  MSTEE - ok

17:24:31.0004 8164  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

17:24:31.0007 8164  MTConfig - ok

17:24:31.0023 8164  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

17:24:31.0026 8164  Mup - ok

17:24:31.0059 8164  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

17:24:31.0070 8164  napagent - ok

17:24:31.0152 8164  [ 9FB2A095B1166CB3C9A06651863B3452 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

17:24:31.0221 8164  NativeWifiP - ok

17:24:31.0346 8164  [ F7309F42555F8AAB7144A51A1F2585B0 ] NDIS            C:\Windows\system32\drivers\ndis.sys

17:24:31.0378 8164  NDIS - ok

17:24:31.0416 8164  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

17:24:31.0419 8164  NdisCap - ok

17:24:31.0444 8164  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

17:24:31.0447 8164  NdisTapi - ok

17:24:31.0476 8164  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

17:24:31.0479 8164  Ndisuio - ok

17:24:31.0495 8164  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

17:24:31.0501 8164  NdisWan - ok

17:24:31.0517 8164  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

17:24:31.0520 8164  NDProxy - ok

17:24:31.0533 8164  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

17:24:31.0536 8164  NetBIOS - ok

17:24:31.0590 8164  [ 734837208CAFD6E0959A7A0333C95C9D ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

17:24:31.0653 8164  NetBT - ok

17:24:31.0690 8164  [ 62056ADD38513A86C4866E912371B56B ] Netlogon        C:\Windows\system32\lsass.exe

17:24:31.0691 8164  Netlogon - ok

17:24:31.0729 8164  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

17:24:31.0735 8164  Netman - ok

17:24:31.0795 8164  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:24:31.0803 8164  NetMsmqActivator - ok

17:24:31.0815 8164  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:24:31.0820 8164  NetPipeActivator - ok

17:24:31.0845 8164  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

17:24:31.0854 8164  netprofm - ok

17:24:31.0859 8164  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:24:31.0861 8164  NetTcpActivator - ok

17:24:31.0866 8164  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:24:31.0867 8164  NetTcpPortSharing - ok

17:24:31.0908 8164  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

17:24:31.0911 8164  nfrd960 - ok

17:24:31.0941 8164  [ CE5F6E635FE4506AE6F2D6EB87425128 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys

17:24:31.0947 8164  NisDrv - ok

17:24:31.0992 8164  [ D630B510E1E3FF6BA12B705F47F115D9 ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe

17:24:32.0002 8164  NisSrv - ok

17:24:32.0073 8164  [ 8B301D474B478E9A92823BAB50A7BC49 ] NlaSvc          C:\Windows\System32\nlasvc.dll

17:24:32.0082 8164  NlaSvc - ok

17:24:32.0102 8164  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

17:24:32.0105 8164  Npfs - ok

17:24:32.0151 8164  [ 668B9EFF5CCA4542F435D2CD9CE3C778 ] nsi             C:\Windows\system32\nsisvc.dll

17:24:32.0203 8164  nsi - ok

17:24:32.0224 8164  [ BE313E566EEA2A4B7F9AAC9782A567D4 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

17:24:32.0238 8164  nsiproxy - ok

17:24:32.0333 8164  [ 1065D9AFE491706EB00AD3CBB76C9E54 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

17:24:32.0457 8164  Ntfs - ok

17:24:32.0488 8164  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

17:24:32.0490 8164  Null - ok

17:24:32.0525 8164  [ 158AD24745BD85BA9BE3C51C38F48C32 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

17:24:32.0528 8164  nusb3hub - ok

17:24:32.0562 8164  [ D40A13B2C0891E218F9523B376955DB6 ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

17:24:32.0567 8164  nusb3xhc - ok

17:24:32.0599 8164  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

17:24:32.0608 8164  nvraid - ok

17:24:32.0635 8164  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

17:24:32.0639 8164  nvstor - ok

17:24:32.0668 8164  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

17:24:32.0673 8164  nv_agp - ok

17:24:32.0693 8164  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

17:24:32.0696 8164  ohci1394 - ok

17:24:32.0789 8164  [ D30981DA22F2EDB8678AF50B634A9587 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

17:24:32.0793 8164  ose - ok

17:24:32.0926 8164  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

17:24:33.0064 8164  osppsvc - ok

17:24:33.0093 8164  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

17:24:33.0100 8164  p2pimsvc - ok

17:24:33.0125 8164  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

17:24:33.0133 8164  p2psvc - ok

17:24:33.0165 8164  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\drivers\parport.sys

17:24:33.0168 8164  Parport - ok

17:24:33.0215 8164  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

17:24:33.0219 8164  partmgr - ok

17:24:33.0292 8164  [ 5EACB8A19CAD7057806FBBF9550165E1 ] PcaSp60         C:\Windows\system32\DRIVERS\PcaSp60.sys

17:24:33.0351 8164  PcaSp60 - ok

17:24:33.0405 8164  [ 3CD83692C43D87088E85E3C916146FFB ] PcaSvc          C:\Windows\System32\pcasvc.dll

17:24:33.0413 8164  PcaSvc - ok

17:24:33.0449 8164  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

17:24:33.0456 8164  pci - ok

17:24:33.0518 8164  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

17:24:33.0521 8164  pciide - ok

17:24:33.0545 8164  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

17:24:33.0552 8164  pcmcia - ok

17:24:33.0576 8164  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

17:24:33.0580 8164  pcw - ok

17:24:33.0643 8164  [ EA4D67448BE493D543F1730D6CD04694 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

17:24:33.0677 8164  PEAUTH - ok

17:24:33.0740 8164  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

17:24:33.0778 8164  PeerDistSvc - ok

17:24:33.0850 8164  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

17:24:33.0853 8164  PerfHost - ok

17:24:33.0912 8164  [ 18EEA095AF22AC5FA16FC27FB98C82D3 ] PHCORE          C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS

17:24:33.0916 8164  PHCORE - ok

17:24:34.0004 8164  [ BC5F8C5C7ACCD0B884FCB8B67616F537 ] pla             C:\Windows\system32\pla.dll

17:24:34.0094 8164  pla - ok

17:24:34.0146 8164  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

17:24:34.0168 8164  PlugPlay - ok

17:24:34.0199 8164  [ 0BEE791C7C7ACE453C134E73633C497D ] pmxdrv          C:\Windows\system32\drivers\pmxdrv.sys

17:24:34.0202 8164  pmxdrv - ok

17:24:34.0235 8164  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

17:24:34.0239 8164  PNRPAutoReg - ok

17:24:34.0260 8164  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

17:24:34.0263 8164  PNRPsvc - ok

17:24:34.0317 8164  [ 80D6B0563ED2BF10656B1D4748331082 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

17:24:34.0340 8164  PolicyAgent - ok

17:24:34.0387 8164  [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power           C:\Windows\system32\umpo.dll

17:24:34.0393 8164  Power - ok

17:24:34.0434 8164  [ AF7186CF9909BEF0D86097175175178F ] Power Manager DBC Service C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE

17:24:34.0439 8164  Power Manager DBC Service - ok

17:24:34.0488 8164  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

17:24:34.0493 8164  PptpMiniport - ok

17:24:34.0518 8164  prkslklv - ok

17:24:34.0540 8164  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\drivers\processr.sys

17:24:34.0545 8164  Processor - ok

17:24:34.0595 8164  [ B6A58491307B4CADA572583D863DC602 ] ProfSvc         C:\Windows\system32\profsvc.dll

17:24:34.0604 8164  ProfSvc - ok

17:24:34.0618 8164  [ 62056ADD38513A86C4866E912371B56B ] ProtectedStorage C:\Windows\system32\lsass.exe

17:24:34.0621 8164  ProtectedStorage - ok

17:24:34.0659 8164  [ A70AD30223866947E39BC221DF4C2306 ] psadd           C:\Windows\system32\DRIVERS\psadd.sys

17:24:34.0662 8164  psadd - ok

17:24:34.0691 8164  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

17:24:34.0697 8164  Psched - ok

17:24:34.0724 8164  [ F036CFB275D0C55F4E45FBBF5F98B3C8 ] PSI_SVC_2       C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

17:24:34.0729 8164  PSI_SVC_2 - ok

17:24:34.0784 8164  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

17:24:34.0818 8164  ql2300 - ok

17:24:34.0840 8164  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

17:24:34.0844 8164  ql40xx - ok

17:24:34.0874 8164  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

17:24:34.0880 8164  QWAVE - ok

17:24:34.0891 8164  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

17:24:34.0893 8164  QWAVEdrv - ok

17:24:34.0908 8164  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

17:24:34.0910 8164  RasAcd - ok

17:24:34.0940 8164  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

17:24:34.0945 8164  RasAgileVpn - ok

17:24:34.0969 8164  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

17:24:34.0975 8164  RasAuto - ok

17:24:34.0994 8164  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

17:24:34.0999 8164  Rasl2tp - ok

17:24:35.0019 8164  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

17:24:35.0028 8164  RasMan - ok

17:24:35.0044 8164  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

17:24:35.0047 8164  RasPppoe - ok

17:24:35.0064 8164  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

17:24:35.0068 8164  RasSstp - ok

17:24:35.0085 8164  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

17:24:35.0092 8164  rdbss - ok

17:24:35.0121 8164  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

17:24:35.0123 8164  rdpbus - ok

17:24:35.0140 8164  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

17:24:35.0141 8164  RDPCDD - ok

17:24:35.0161 8164  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

17:24:35.0167 8164  RDPDR - ok

17:24:35.0185 8164  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

17:24:35.0186 8164  RDPENCDD - ok

17:24:35.0200 8164  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

17:24:35.0202 8164  RDPREFMP - ok

17:24:35.0255 8164  [ FE571E088C2D83619D2D48D4E961BF41 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

17:24:35.0263 8164  RDPWD - ok

17:24:35.0306 8164  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

17:24:35.0314 8164  rdyboost - ok

17:24:35.0352 8164  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

17:24:35.0356 8164  RemoteAccess - ok

17:24:35.0379 8164  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

17:24:35.0385 8164  RemoteRegistry - ok

17:24:35.0442 8164  [ 87ECA4118B28344139DCE9EA9A16F8F8 ] RimUsb          C:\Windows\system32\Drivers\RimUsb_AMD64.sys

17:24:35.0447 8164  RimUsb - ok

17:24:35.0522 8164  [ 344604E6913BD6E4EAEC34AF2E0943D7 ] RimVSerPort     C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys

17:24:35.0526 8164  RimVSerPort - ok

17:24:35.0563 8164  [ 819FE65AE1C0312B535B7AA54D30CFDA ] risdxc          C:\Windows\system32\DRIVERS\risdxc64.sys

17:24:35.0569 8164  risdxc - ok

17:24:35.0617 8164  [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] ROOTMODEM       C:\Windows\system32\Drivers\RootMdm.sys

17:24:35.0620 8164  ROOTMODEM - ok

17:24:35.0644 8164  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

17:24:35.0649 8164  RpcEptMapper - ok

17:24:35.0673 8164  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

17:24:35.0676 8164  RpcLocator - ok

17:24:35.0726 8164  [ 3F1A199859B4F3F8357B2A0AF5666A54 ] RpcSs           C:\Windows\system32\rpcss.dll

17:24:35.0733 8164  RpcSs - ok

17:24:35.0764 8164  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

17:24:35.0767 8164  rspndr - ok

17:24:35.0819 8164  [ 7C44C9A974DE5508910BFDE4ABC2E16C ] RTL8192Ce       C:\Windows\system32\DRIVERS\rtl8192Ce.sys

17:24:35.0846 8164  RTL8192Ce - ok

17:24:35.0873 8164  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

17:24:35.0876 8164  s3cap - ok

17:24:35.0894 8164  [ 62056ADD38513A86C4866E912371B56B ] SamSs           C:\Windows\system32\lsass.exe

17:24:35.0896 8164  SamSs - ok

17:24:35.0900 8164  SAService - ok

17:24:35.0922 8164  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

17:24:35.0925 8164  sbp2port - ok

17:24:35.0955 8164  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

17:24:35.0961 8164  SCardSvr - ok

17:24:35.0991 8164  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

17:24:35.0993 8164  scfilter - ok

17:24:36.0059 8164  [ 40686B59C127F0C93B4234E4A1E3472A ] Schedule        C:\Windows\system32\schedsvc.dll

17:24:36.0094 8164  Schedule - ok

17:24:36.0127 8164  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

17:24:36.0128 8164  SCPolicySvc - ok

17:24:36.0158 8164  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

17:24:36.0164 8164  SDRSVC - ok

17:24:36.0206 8164  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

17:24:36.0208 8164  secdrv - ok

17:24:36.0251 8164  [ A19623BDD61E66A12AB53992002B4F3A ] seclogon        C:\Windows\system32\seclogon.dll

17:24:36.0260 8164  seclogon - ok

17:24:36.0289 8164  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

17:24:36.0297 8164  SENS - ok

17:24:36.0346 8164  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

17:24:36.0350 8164  SensrSvc - ok

17:24:36.0478 8164  [ EF36F5528E33D651763E1524A16928BD ] Ser2pl          C:\Windows\system32\DRIVERS\ser2pl64.sys

17:24:36.0484 8164  Ser2pl - ok

17:24:36.0549 8164  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

17:24:36.0558 8164  Serenum - ok

17:24:36.0658 8164  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\drivers\serial.sys

17:24:36.0691 8164  Serial - ok

17:24:36.0746 8164  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

17:24:36.0863 8164  sermouse - ok

17:24:36.0948 8164  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

17:24:36.0955 8164  SessionEnv - ok

17:24:37.0069 8164  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

17:24:37.0075 8164  sffdisk - ok

17:24:37.0112 8164  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

17:24:37.0125 8164  sffp_mmc - ok

17:24:37.0167 8164  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

17:24:37.0170 8164  sffp_sd - ok

17:24:37.0193 8164  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

17:24:37.0199 8164  sfloppy - ok

17:24:37.0256 8164  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

17:24:37.0267 8164  SharedAccess - ok

17:24:37.0302 8164  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

17:24:37.0310 8164  ShellHWDetection - ok

17:24:37.0335 8164  [ E2FC046D4EDABFE3B5EF7DA06406277D ] Shockprf        C:\Windows\system32\DRIVERS\Apsx64.sys

17:24:37.0339 8164  Shockprf - ok

17:24:37.0427 8164  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

17:24:37.0431 8164  SiSRaid2 - ok

17:24:37.0456 8164  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

17:24:37.0462 8164  SiSRaid4 - ok

17:24:37.0590 8164  [ 18614592402298F32EBE75B85AA98F6A ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

17:24:37.0598 8164  SkypeUpdate - ok

17:24:37.0647 8164  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

17:24:37.0651 8164  Smb - ok

17:24:37.0707 8164  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

17:24:37.0712 8164  SNMPTRAP - ok

17:24:37.0738 8164  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           



#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:51 PM

Posted 05 December 2017 - 10:18 AM

Could you post the rest or at least ,say the last 20 lines
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 doughboy123

doughboy123
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 05 December 2017 - 11:58 AM

08:56:51.0752 8900  spldr - ok

08:56:51.0836 8900  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

08:56:51.0865 8900  Spooler - ok

08:56:52.0036 8900  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

08:56:52.0075 8900  sppsvc - ok

08:56:52.0098 8900  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

08:56:52.0102 8900  sppuinotify - ok

08:56:52.0168 8900  [ 72E6A150A8C8530B201832D1C801CDE6 ] srv             C:\Windows\system32\DRIVERS\srv.sys

08:56:52.0189 8900  srv - ok

08:56:52.0219 8900  [ C4F67ABCC5033D334613F28F9E782809 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

08:56:52.0230 8900  srv2 - ok

08:56:52.0247 8900  [ C53CB62B0E57488AAE41FDA0FF8A0AB9 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

08:56:52.0253 8900  srvnet - ok

08:56:52.0287 8900  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

08:56:52.0296 8900  SSDPSRV - ok

08:56:52.0319 8900  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

08:56:52.0327 8900  SstpSvc - ok

08:56:52.0356 8900  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys

08:56:52.0358 8900  stexstor - ok

08:56:52.0409 8900  [ DECACB6921DED1A38642642685D77DAC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys

08:56:52.0459 8900  StillCam - ok

08:56:52.0512 8900  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

08:56:52.0535 8900  stisvc - ok

08:56:52.0567 8900  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

08:56:52.0571 8900  storflt - ok

08:56:52.0604 8900  [ C40841817EF57D491F22EB103DA587CC ] StorSvc         C:\Windows\system32\storsvc.dll

08:56:52.0610 8900  StorSvc - ok

08:56:52.0648 8900  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

08:56:52.0652 8900  storvsc - ok

08:56:52.0749 8900  [ 266D6BE20B40B7DC0949F5108E838B5E ] SUService       C:\Program Files (x86)\Lenovo\System Update\SUService.exe

08:56:52.0905 8900  SUService - ok

08:56:52.0949 8900  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

08:56:52.0952 8900  swenum - ok

08:56:53.0002 8900  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

08:56:53.0025 8900  swprv - ok

08:56:53.0109 8900  [ 06D602A637E171E151853F1D8ECD34F1 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

08:56:53.0178 8900  SynTP - ok

08:56:53.0281 8900  [ 2E730941CC5BF6200A4F56D1E9C24AAD ] SysMain         C:\Windows\system32\sysmain.dll

08:56:53.0394 8900  SysMain - ok

08:56:53.0439 8900  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

08:56:53.0443 8900  TabletInputService - ok

08:56:53.0466 8900  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

08:56:53.0473 8900  TapiSrv - ok

08:56:53.0566 8900  [ 7FB36A0A036ADDACE0A868E4A43C1C27 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

08:56:53.0638 8900  Tcpip - ok

08:56:53.0730 8900  [ 7FB36A0A036ADDACE0A868E4A43C1C27 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

08:56:53.0753 8900  TCPIP6 - ok

08:56:53.0821 8900  [ 7FE5586314EE7D6AA8483264A089E5AF ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

08:56:53.0825 8900  tcpipreg - ok

08:56:53.0916 8900  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

08:56:53.0920 8900  TDPIPE - ok

08:56:53.0974 8900  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

08:56:53.0981 8900  TDTCP - ok

08:56:54.0036 8900  [ 4DD986720F7CB7A8A5D1226793097B9A ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

08:56:54.0084 8900  tdx - ok

08:56:54.0289 8900  [ 0AA158C4ADDCA8882474AB91334F9C45 ] TeamViewer7     C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

08:56:54.0381 8900  TeamViewer7 - ok

08:56:54.0467 8900  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

08:56:54.0472 8900  TermDD - ok

08:56:54.0547 8900  [ 008CD4EBFABCF78D0F19B3778492648C ] TermService     C:\Windows\System32\termsrv.dll

08:56:54.0570 8900  TermService - ok

08:56:54.0605 8900  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

08:56:54.0607 8900  Themes - ok

08:56:54.0635 8900  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

08:56:54.0641 8900  THREADORDER - ok

08:56:54.0661 8900  [ 55B7FE3E1D3B616BDC4E9EA48D92D6E6 ] TPDIGIMN        C:\Windows\system32\DRIVERS\ApsHM64.sys

08:56:54.0664 8900  TPDIGIMN - ok

08:56:54.0694 8900  [ F0684C62ED8FD3061CD488ECFC851022 ] TPHDEXLGSVC     C:\Windows\system32\TPHDEXLG64.exe

08:56:54.0700 8900  TPHDEXLGSVC - ok

08:56:54.0748 8900  [ 63626012E44CAAA162677B57B6DCB542 ] TPHKLOAD        C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe

08:56:54.0752 8900  TPHKLOAD - ok

08:56:54.0770 8900  [ 9E6E4A9789F76593CC5A6A5AF8FC5929 ] TPHKSVC         C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

08:56:54.0773 8900  TPHKSVC - ok

08:56:54.0825 8900  [ 48DDEF0B921DD331536CC82C1A8FF64F ] TPM             C:\Windows\system32\drivers\tpm.sys

08:56:54.0830 8900  TPM - ok

08:56:54.0863 8900  [ 7165B5A9B4867F64A6D6935F57D4196B ] TPPWRIF         C:\Windows\system32\drivers\Tppwr64v.sys

08:56:54.0866 8900  TPPWRIF - ok

08:56:54.0902 8900  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

08:56:54.0911 8900  TrkWks - ok

08:56:54.0983 8900  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

08:56:54.0990 8900  TrustedInstaller - ok

08:56:55.0043 8900  [ 2CF58216424757ED29605B4F18EC443C ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

08:56:55.0083 8900  tssecsrv - ok

08:56:55.0123 8900  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

08:56:55.0127 8900  TsUsbFlt - ok

08:56:55.0150 8900  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys

08:56:55.0154 8900  TsUsbGD - ok

08:56:55.0186 8900  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

08:56:55.0191 8900  tunnel - ok

08:56:55.0229 8900  [ 4DAAE0413CD4E816258838E2FAFB3147 ] TVTI2C          C:\Windows\system32\DRIVERS\Tvti2c.sys

08:56:55.0233 8900  TVTI2C - ok

08:56:55.0264 8900  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

08:56:55.0269 8900  uagp35 - ok

08:56:55.0293 8900  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

08:56:55.0300 8900  udfs - ok

08:56:55.0337 8900  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

08:56:55.0341 8900  UI0Detect - ok

08:56:55.0418 8900  [ BE788A747457E6916586C410EC0111E7 ] UleadBurningHelper C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

08:56:55.0423 8900  UleadBurningHelper - ok

08:56:55.0458 8900  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

08:56:55.0465 8900  uliagpkx - ok

08:56:55.0510 8900  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

08:56:55.0660 8900  umbus - ok

08:56:55.0719 8900  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

08:56:55.0722 8900  UmPass - ok

08:56:55.0759 8900  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll

08:56:55.0766 8900  UmRdpService - ok

08:56:55.0793 8900  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

08:56:55.0802 8900  upnphost - ok

08:56:55.0863 8900  [ F957092C63CD71D85903CA0D8370F473 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys

08:56:55.0868 8900  USBAAPL64 - ok

08:56:55.0943 8900  [ B0435098C81D04CAFFF80DDB746CD3A2 ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

08:56:55.0949 8900  usbaudio - ok

08:56:56.0578 8900  [ 9E68E917FB4B5C983438969643F53BEF ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys

08:56:56.0655 8900  usbccgp - ok

08:56:56.0708 8900  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

08:56:56.0714 8900  usbcir - ok

08:56:56.0747 8900  [ 3F9D3902CE931E2A28DD8452AE915B67 ] usbehci         C:\Windows\system32\drivers\usbehci.sys

08:56:56.0807 8900  usbehci - ok

08:56:56.0853 8900  [ 86B65EEBC03B936DE8B26E5A18D98FA2 ] usbhub          C:\Windows\system32\drivers\usbhub.sys

08:56:56.0993 8900  usbhub - ok

08:56:57.0023 8900  [ 099C2931C6F73EB1B9E13C560F61B50D ] usbohci         C:\Windows\system32\drivers\usbohci.sys

08:56:57.0096 8900  usbohci - ok

08:56:57.0161 8900  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

08:56:57.0165 8900  usbprint - ok

08:56:57.0190 8900  [ 9661DA76B4531B2DA272ECCE25A8AF24 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

08:56:57.0194 8900  usbscan - ok

08:56:57.0231 8900  [ D029DD09E22EB24318A8FC3D8138BA43 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

08:56:57.0236 8900  USBSTOR - ok

08:56:57.0261 8900  [ 5D7651347C7D702F4A5DE53603DC024F ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

08:56:57.0302 8900  usbuhci - ok

08:56:57.0370 8900  [ 1F775DA4CF1A3A1834207E975A72E9D7 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

08:56:57.0378 8900  usbvideo - ok

08:56:57.0408 8900  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

08:56:57.0413 8900  UxSms - ok

08:56:57.0432 8900  [ 62056ADD38513A86C4866E912371B56B ] VaultSvc        C:\Windows\system32\lsass.exe

08:56:57.0435 8900  VaultSvc - ok

08:56:57.0472 8900  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

08:56:57.0477 8900  vdrvroot - ok

08:56:57.0508 8900  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

08:56:57.0531 8900  vds - ok

08:56:57.0554 8900  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

08:56:57.0559 8900  vga - ok

08:56:57.0578 8900  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

08:56:57.0582 8900  VgaSave - ok

08:56:57.0608 8900  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

08:56:57.0615 8900  vhdmp - ok

08:56:57.0668 8900  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

08:56:57.0673 8900  viaide - ok

08:56:57.0740 8900  [ 6AD85F32EA4AA65BB2EA652F2B9D4005 ] VIPAppService   C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe

08:56:57.0744 8900  VIPAppService - ok

08:56:57.0782 8900  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys

08:56:57.0790 8900  vmbus - ok

08:56:57.0808 8900  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

08:56:57.0812 8900  VMBusHID - ok

08:56:57.0832 8900  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

08:56:57.0836 8900  volmgr - ok

08:56:57.0893 8900  [ 85C5468BC395819AE2A0C747334BA14C ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

08:56:57.0901 8900  volmgrx - ok

08:56:57.0930 8900  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

08:56:57.0936 8900  volsnap - ok

08:56:57.0962 8900  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

08:56:57.0966 8900  vsmraid - ok

08:56:58.0016 8900  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

08:56:58.0024 8900  VSS - ok

08:56:58.0041 8900  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

08:56:58.0043 8900  vwifibus - ok

08:56:58.0059 8900  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

08:56:58.0062 8900  vwififlt - ok

08:56:58.0078 8900  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

08:56:58.0080 8900  vwifimp - ok

08:56:58.0097 8900  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

08:56:58.0104 8900  W32Time - ok

08:56:58.0117 8900  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

08:56:58.0120 8900  WacomPen - ok

08:56:58.0152 8900  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

08:56:58.0158 8900  WANARP - ok

08:56:58.0170 8900  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

08:56:58.0173 8900  Wanarpv6 - ok

08:56:58.0264 8900  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

08:56:58.0336 8900  WatAdminSvc - ok

08:56:58.0390 8900  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

08:56:58.0424 8900  wbengine - ok

08:56:58.0440 8900  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

08:56:58.0445 8900  WbioSrvc - ok

08:56:58.0464 8900  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

08:56:58.0471 8900  wcncsvc - ok

08:56:58.0519 8900  [ BC00873272B3771CCDA38336AF2B4D4B ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

08:56:58.0602 8900  WcsPlugInService - ok

08:56:58.0626 8900  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys

08:56:58.0630 8900  Wd - ok

08:56:58.0686 8900  [ D0335A55E5C3F812548E18300C2ACB62 ] WDC_SAM         C:\Windows\system32\DRIVERS\wdcsam64.sys

08:56:58.0691 8900  WDC_SAM - ok

08:56:58.0770 8900  [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

08:56:58.0802 8900  Wdf01000 - ok

08:56:58.0857 8900  [ C6F7473B55510F0B93961DA03D8E3B38 ] WdiServiceHost  C:\Windows\system32\wdi.dll

08:56:58.0864 8900  WdiServiceHost - ok

08:56:58.0875 8900  [ C6F7473B55510F0B93961DA03D8E3B38 ] WdiSystemHost   C:\Windows\system32\wdi.dll

08:56:58.0881 8900  WdiSystemHost - ok

08:56:58.0929 8900  [ EE841B6D1F2B9508D3ABAE52AC05A94F ] WebClient       C:\Windows\System32\webclnt.dll

08:56:59.0081 8900  WebClient - ok

08:56:59.0125 8900  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

08:56:59.0132 8900  Wecsvc - ok

08:56:59.0146 8900  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

08:56:59.0151 8900  wercplsupport - ok

08:56:59.0181 8900  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

08:56:59.0187 8900  WerSvc - ok

08:56:59.0221 8900  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

08:56:59.0223 8900  WfpLwf - ok

08:56:59.0238 8900  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

08:56:59.0240 8900  WIMMount - ok

08:56:59.0265 8900  WinDefend - ok

08:56:59.0283 8900  WinHttpAutoProxySvc - ok

08:56:59.0339 8900  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

08:56:59.0346 8900  Winmgmt - ok

08:56:59.0459 8900  [ EBDA1B0F15CB9B2CBCC6C94824E4E054 ] WinRM           C:\Windows\system32\WsmSvc.dll

08:56:59.0671 8900  WinRM - ok

08:56:59.0753 8900  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

08:56:59.0758 8900  WinUsb - ok

08:56:59.0833 8900  [ 4B7912EB80820EAC543EE54806EFCAF0 ] Wlansvc         C:\Windows\System32\wlansvc.dll

08:56:59.0867 8900  Wlansvc - ok

08:56:59.0920 8900  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

08:56:59.0925 8900  wlcrasvc - ok

08:57:00.0101 8900  [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

08:57:00.0181 8900  wlidsvc - ok

08:57:00.0219 8900  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

08:57:00.0220 8900  WmiAcpi - ok

08:57:00.0262 8900  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

08:57:00.0266 8900  wmiApSrv - ok

08:57:00.0310 8900  WMPNetworkSvc - ok

08:57:00.0344 8900  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

08:57:00.0352 8900  WPCSvc - ok

08:57:00.0372 8900  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

08:57:00.0380 8900  WPDBusEnum - ok

08:57:00.0408 8900  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

08:57:00.0411 8900  ws2ifsl - ok

08:57:00.0434 8900  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

08:57:00.0440 8900  wscsvc - ok

08:57:00.0470 8900  [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys

08:57:00.0516 8900  WSDPrintDevice - ok

08:57:00.0566 8900  [ 4A2A5C50DD1A63577D3ACA94269FBC7F ] WSDScan         C:\Windows\system32\DRIVERS\WSDScan.sys

08:57:00.0624 8900  WSDScan - ok

08:57:00.0632 8900  WSearch - ok

08:57:00.0752 8900  [ 88009DB9E1166B6B6713A858C176FECD ] wuauserv        C:\Windows\system32\wuaueng.dll

08:57:00.0829 8900  wuauserv - ok

08:57:00.0886 8900  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

08:57:00.0893 8900  WudfPf - ok

08:57:00.0934 8900  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

08:57:00.0941 8900  WUDFRd - ok

08:57:00.0993 8900  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

08:57:01.0001 8900  wudfsvc - ok

08:57:01.0066 8900  [ 04F82965C09CBDF646B487E145060301 ] WwanSvc         C:\Windows\System32\wwansvc.dll

08:57:01.0100 8900  WwanSvc - ok

08:57:01.0133 8900  ================ Scan global ===============================

08:57:01.0180 8900  [ 168EA9CD9BD6056BB6F60B57D5304BBE ] C:\Windows\system32\basesrv.dll

08:57:01.0237 8900  [ 66A8A9412337B08E1735204B8ADEE58C ] C:\Windows\system32\winsrv.dll

08:57:01.0261 8900  [ 66A8A9412337B08E1735204B8ADEE58C ] C:\Windows\system32\winsrv.dll

08:57:01.0304 8900  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

08:57:01.0363 8900  [ 71C85477DF9347FE8E7BC55768473FCA ] C:\Windows\system32\services.exe

08:57:01.0369 8900  [Global] - ok

08:57:01.0370 8900  ================ Scan MBR ==================================

08:57:01.0384 8900  [ A2450DD9D8D17A95525A9FDA501F6487 ] \Device\Harddisk0\DR0

08:57:01.0672 8900  \Device\Harddisk0\DR0 - ok

08:57:01.0673 8900  ================ Scan VBR ==================================

08:57:01.0678 8900  [ B7F797E7921BD06BA28D1C50FE45E7CA ] \Device\Harddisk0\DR0\Partition1

08:57:01.0681 8900  \Device\Harddisk0\DR0\Partition1 - ok

08:57:01.0700 8900  [ F730586D9369065B93EC8589AEA10AB0 ] \Device\Harddisk0\DR0\Partition2

08:57:01.0705 8900  \Device\Harddisk0\DR0\Partition2 - ok

08:57:01.0746 8900  [ DE01231D448C02B91641844E4C4491F9 ] \Device\Harddisk0\DR0\Partition3

08:57:01.0752 8900  \Device\Harddisk0\DR0\Partition3 - ok

08:57:01.0753 8900  ============================================================

08:57:01.0753 8900  Scan finished

08:57:01.0753 8900  ============================================================

08:57:01.0772 1168  Detected object count: 0

08:57:01.0772 1168  Actual detected object count: 0



#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,331 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:51 PM

Posted 05 December 2017 - 12:25 PM

Hello, not a malware post the error message in, I believe you have WIN 7 < forum. They will run other tools.

Mention you were sent back from here (AII forum).

Edited by boopme, 05 December 2017 - 12:26 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users