Mi mini laptop tiene varios problemas

[chicloi]

@Aega18

Por otra parte necesito que me aclares una cuestión, tengo unas carpetas que tienen unos elementos extraños que considero son virus ya que aún sigue estando el “sitool.exe” que según investigué en internet es un virus que genera muchos elementos más.:

Déjame que lo mire y te digo algo, pero probablemente puedan ser “falsos positivos” ya que le he pasado los antivirus, antitroyanos y los limpiadores de registro y han eliminado todos los virus que tenías en tu ordenador, probablemente puedan ser las carpetas que hayan quedado de alguno de los restos que se han limpiado durante la desinfección pero con los antivirus que les he pasado te puedo asegurar que no queda rastro de ningún virus y que está todo libre de virus. Además que se le pasó el programa del "Ccleaner" y el programa del "Glary Utilities" que son los limpiadores que limpian el registro y todos los restos que hayan podido quedar en tu ordenador.

Aún así déjame que lo mire y te digo algo.

[chicloi]

@Aega18

4.SysInfoTool: En esta carpeta están los elementos: data (Archivo) 1KB, y sitool.exe (XML Configuration File) 1KB. Cabe destacar que el “sitool.exe” tiene fecha del 2017 pero el resto de los demas elementos en las otras carpetas son de marzo de este año, ese mismo “sitool.exe” lo pasé por la página “VirusTotal.com” y ningún resultado negativo fue arrojado, pero si escribes “sitool.exe” en Google de una sale que es un virus.

Por mucho que diga Internet con los programas Antivirus que se le ha pasado a tu ordenador si la “PAGINA DE VIRUS TOTAL” más los “ANTIVIRUS” que se le han pasado a tu ordenador te aseguro que eso “NO” es un virus ya que lo que quiere decir es que es un "FALSO POSITIVO", eso quiere decir que no es un virus.

Te reviso el resto y te comento.

[Aega18]

@chicloi

PASO 2: “Descargar e Instalar” en el “Escritorio” de su ordenador los siguientes programas que le menciono a continuación:

• Url Descarga: “Kaspersky Virus Removal Tool”: https://www.infospyware.com/kaspersky-antivirus-online/
• Url descarga: “TdssKiller”: TDSSKiller 3.0 | InfoSpyware
• Url descarga: “Malwarebytes Anti-Rootkit”: Malwarebytes Anti-Rootkit | InfoSpyware

Otra cosa más importante aún, eso de arriba no lo hice ya que el primer paso era actualizar el “Malwarebytes Antimalware” y solo nos centramos en el primer paso, realizo el segundo paso de igual forma cierto?

@chicloi

Además que se le pasó el programa del "Ccleaner" y el programa del "Glary Utilities" que son los limpiadores que limpian el registro y todos los restos que hayan podido quedar en tu ordenador.

En cuanto a esta parte, creo que se te cruzaron los métodos usados con otros equipos que tal vez estés reparando jj, porque es cierto que tengo el “CCleaner” pero aún no me has indicado que lo utilice, en cuanto al programa “Glary Utilities” primera vez que me lo mencionas.

[chicloi]

@Aega18

En cuanto a esta parte, creo que se te cruzaron los métodos usados con otros equipos que tal vez estés reparando jj, porque es cierto que tengo el “CCleaner” pero aún no me has indicado que lo utilice, en cuanto al programa “Glary Utilities” primera vez que me lo mencionas.

Vamos paso a paso, te indico los pasos a seguir!

[chicloi]

@Aega18

Otra cosa más importante aún, eso de arriba no lo hice ya que el primer paso era actualizar el “Malwarebytes Antimalware” y solo nos centramos en el primer paso, realizo el segundo paso de igual forma cierto?

Si, efectivamente, realiza dichos pasos, y me mandas dichos "Informes" cuando terminen dichos programas de analizar por completo y sigue sus respectivos “Manuales de Uso” en el “orden indicado y en el orden establecido”, es decir, primero le pasas el primer programa y hasta que no se pase dicho programa por completo no le pases el siguiente programa y así con los siguientes.

Me mandas dichos Informes cuando hayan realizado dichos programas, por completo su función.

[chicloi]

Realiza los pasos que te pongo a continuación en el orden especificado y al pie de la letra, es decir, primeramente le pasa el primer programa y hasta que no termine de analizar dicho programa por completo no le pase el siguiente programa y así con los siguientes programas:

PASO 2: “Descargar e Instalar” en el “Escritorio” de su ordenador los siguientes programas que le menciono a continuación:

• Url Descarga: “Kaspersky Virus Removal Tool”: https://www.infospyware.com/kaspersky-antivirus-online/
• Url descarga: “TdssKiller”: TDSSKiller 3.0 | InfoSpyware
• Url descarga: “Malwarebytes Anti-Rootkit”: Malwarebytes Anti-Rootkit | InfoSpyware

PASO 3: “Manual de Uso” de los programas programas que se van a utilizar en el "PASO 2":

• Url Descarga: "Manual de Uso": “Kaspersky Virus Removal Tool”: Manual de Kaspersky Virus Removal Tool

• Url descarga: "Manual de Uso": “TdssKiller”: Manual de TDSSKiller - nº 2 por SanMar (Elimine "TODO" lo que encuentre y “NO” restaure nada. Marque dichas opciones tal y como se muestran en dicho "Manual de Uso").

• Url descarga: "Manual de Uso": “Malwarebytes Anti-Rootkit”: Manual Malwarebytes Anti-Rootkit Beta

Finalizado dichos programas por completo me manda dichos "Informes" como lo ha estado realizando correctamente.

[Aega18]

Saludos. Al intentar usar el programa Kaspersky Virus Removal Tool me salió esto.:

Disculpa de verdad que tengas que trabajar con tantas limitantes, me siento muy apenado de verdad que sí. Otra cosa, no he usado los otros dos programas esperando tu respuesta en cuanto a este último resultado.

[chicloi]

Vamos sobre el mismo problema, te está pidiendo que necesita un requisito que es el Instalar Windows 7 Service Pack 1 (SP1)

La manera recomendada (y más sencilla) de obtener el SP1 es activar la actualización automática en “Windows Update” en el panel de control y esperar a que Windows 7 le notifique que el SP1 está listo para instalarse. Tardarás 30 minutos en instalarse y tendrás que reiniciar el equipo aproximadamente a mitad de la instalación.

Esto sólo se consigue si el equipo está actualizado con todas las actualizacioenes que requiere el ordenador con las actualizaciones automáticas ya que si no, la mayoría de programas que quieras instalar en general te van a dar fallo de instalación por el requisito de que no estén activadas las actualizaciones del “Windows Update”. Por ello la importancia de Activar las actualizaciones del Windows Update ya que si no, no te va a dejar instalar la mayoría de programas en tu ordenador que se quieran instalar.

Lee estos 2 artículos que se reflejan a continuación:

Url: Lo que necesitas saber sobre el Service Pack 1 de Windows 7 | Cybernautas

Url 2: Instalar Windows 7 Service Pack 1 (SP1)

Intenta pasarle el resto de programas como se indican en el: “Manual de Uso”. y cuando terminen de analizar me pasas dicho Informe.

[Aega18]

Será viable descargar e instalar manualmente el SP1.?

[chicloi]

@Aega18

Será viable descargar e instalar manualmente el SP1.?

En respuesta a tu pregunta, si me preguntas por si es viable instalar el SP1 manualmente es aconsejable instalarlo desde las actualizaciones del Windows Update ya que el propio Sistema de Windows Update dichas actualizaciones están verificadas y comprobadas por Microsoft ya que el Windows Update es el sistema de actualización oficial por Microsoft para dicha finalidad y por lo tanto se considera el más actualizado, de la otra forma la descarga Manual no es aconsejable ya que hay varias versiones de SP1 y no se puede saber con seguridad si está instalando el SP1 más actualizado por ello es más viable descargar dicha actualización del SP1 por medio del sitio oficial de Windows Update ya que es el sitio oficial patrocinado por Microsoft.

Yo te he dicho lo que es más recomendable desde mi punto de vista y de lo que es más aconsejable, usted considere lo que crea oportuno.

[Aega18]

Los informes son muy largos, los copio y pego como me lo has indicado o subo los documentos de texto.?

[chicloi]

Copia y Pega como te he indicado, si me los tienes que enviar en varias partes me los envías. Intenta enviármelo por orden.

[Aega18]

Aquí primera parte del informe del TDSSKiller.:

08:50:14.0264 0x43f1c  TDSS rootkit removing tool 3.1.0.28 Apr  9 2019 21:11:46
08:50:25.0905 0x43f1c  ============================================================
08:50:25.0905 0x43f1c  Current date / time: 2021/06/14 08:50:25.0905
08:50:25.0905 0x43f1c  SystemInfo:
08:50:25.0905 0x43f1c  
08:50:25.0905 0x43f1c  OS Version: 6.1.7600 ServicePack: 0.0
08:50:25.0905 0x43f1c  Product type: Workstation
08:50:25.0905 0x43f1c  ComputerName: MARLE-PC
08:50:25.0905 0x43f1c  UserName: Usuario
08:50:25.0905 0x43f1c  Windows directory: C:\Windows
08:50:25.0905 0x43f1c  System windows directory: C:\Windows
08:50:25.0905 0x43f1c  Processor architecture: Intel x86
08:50:25.0905 0x43f1c  Number of processors: 2
08:50:25.0905 0x43f1c  Page size: 0x1000
08:50:25.0905 0x43f1c  Boot type: Normal boot
08:50:25.0905 0x43f1c  CodeIntegrityOptions = 0x00000000
08:50:25.0905 0x43f1c  ============================================================
08:50:31.0467 0x43f1c  KLMD registered as C:\Windows\system32\drivers\93756394.sys
08:50:31.0467 0x43f1c  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7600.16385, osProperties = 0x0
08:50:31.0897 0x43f1c  System UUID: {1EF0C80F-FE8A-ABC5-B5B6-2F1E4245A515}
08:50:33.0111 0x43f1c  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
08:50:33.0221 0x43f1c  ============================================================
08:50:33.0221 0x43f1c  \Device\Harddisk0\DR0:
08:50:33.0231 0x43f1c  MBR partitions:
08:50:33.0231 0x43f1c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
08:50:33.0231 0x43f1c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x253FB800
08:50:33.0231 0x43f1c  ============================================================
08:50:33.0606 0x43f1c  C: <-> \Device\Harddisk0\DR0\Partition2
08:50:34.0587 0x43f1c  ============================================================
08:50:34.0587 0x43f1c  Initialize success
08:50:34.0587 0x43f1c  ============================================================
09:49:01.0305 0x2f694  ============================================================
09:49:01.0352 0x2f694  Scan started
09:49:01.0352 0x2f694  Mode: Manual; 
09:49:01.0352 0x2f694  ============================================================
09:49:01.0352 0x2f694  KSN ping started
09:49:17.0872 0x2f694  KSN ping finished: true
09:49:21.0055 0x2f694  ================ Scan BIOS =================================
09:49:21.0055 0x2f694  BIOS info: vendor = Phoenix    , version = BPPNV10A.86A.0018.2012.0703.1000, releaseDate = 07/03/2012
09:49:21.0055 0x2f694  Base board info: manufacturer = Intel Corporation, product = Intel powered classmate PC, version = BP PV
09:49:22.0646 0x2f694  [ F32EFC34FCFBAE6E6B8E6F4D6A6BDE87, F8432070145EFAE6F1852D8229619B99E6629709E2B947424FB69757A7D08819 ] BIOS
09:49:22.0646 0x2f694  BIOS - ok
09:49:22.0646 0x2f694  ================ Scan system memory ========================
09:49:22.0661 0x2f694  System memory - ok
09:49:22.0677 0x2f694  ================ Scan services =============================
09:49:23.0005 0x2f694  [ 6D2ACA41739BFE8CB86EE8E85F29697D, 74A4F53C8309A8E5E94CDE4D440DD5308566185E6D8D98FD08E70A25BD728C91 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
09:49:23.0098 0x2f694  1394ohci - ok
09:49:23.0769 0x2f694  [ F0E07D144C8685B8774BC32FC8DA4DF0, 39816ED2623CA9ABE2B2EDCDB2F8481634742F00FEEF7E324F34D2BAAD668A67 ] ACPI            C:\Windows\system32\DRIVERS\ACPI.sys
09:49:23.0800 0x2f694  ACPI - ok
09:49:23.0831 0x2f694  [ 98D81CA942D19F7D9153B095162AC013, ACE5C073323176621F3312AA9B1EE1A3382F8CDD590D90DC57B34035FD6BC281 ] AcpiPmi         C:\Windows\system32\DRIVERS\acpipmi.sys
09:49:23.0831 0x2f694  AcpiPmi - ok
09:49:24.0112 0x2f694  [ 431B9F2E0D4145164D572671395B4B31, 5D336098251ED4E50D3EAB55A37CD9486F0479893A2D9B5FB849D1486FA63FAD ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
09:49:24.0143 0x2f694  AdobeARMservice - ok
09:49:24.0315 0x2f694  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
09:49:24.0346 0x2f694  adp94xx - ok
09:49:24.0393 0x2f694  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
09:49:24.0424 0x2f694  adpahci - ok
09:49:24.0502 0x2f694  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
09:49:24.0518 0x2f694  adpu320 - ok
09:49:24.0580 0x2f694  [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
09:49:24.0596 0x2f694  AeLookupSvc - ok
09:49:24.0689 0x2f694  [ DDC040FDB01EF1712A6B13E52AFB104C, BF17E91BBB85A04F1EEF580CD006101332CDE5B876A0D04C6932F30707BB184F ] AFD             C:\Windows\system32\drivers\afd.sys
09:49:24.0721 0x2f694  AFD - ok
09:49:24.0767 0x2f694  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\DRIVERS\agp440.sys
09:49:24.0767 0x2f694  agp440 - ok
09:49:24.0845 0x2f694  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys
09:49:24.0861 0x2f694  aic78xx - ok
09:49:24.0908 0x2f694  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
09:49:24.0908 0x2f694  ALG - ok
09:49:24.0939 0x2f694  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\DRIVERS\aliide.sys
09:49:24.0939 0x2f694  aliide - ok
09:49:24.0970 0x2f694  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\DRIVERS\amdagp.sys
09:49:24.0970 0x2f694  amdagp - ok
09:49:25.0001 0x2f694  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\DRIVERS\amdide.sys
09:49:25.0017 0x2f694  amdide - ok
09:49:25.0095 0x2f694  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
09:49:25.0095 0x2f694  AmdK8 - ok
09:49:25.0126 0x2f694  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
09:49:25.0142 0x2f694  AmdPPM - ok
09:49:25.0220 0x2f694  [ 2101A86C25C154F8314B24EF49D7FBC2, E4C1326CF55850793B45B2BFDF361C4E98A07FB13E08BFD6DB50135489700998 ] amdsata         C:\Windows\system32\DRIVERS\amdsata.sys
09:49:25.0235 0x2f694  amdsata - ok
09:49:25.0298 0x2f694  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
09:49:25.0313 0x2f694  amdsbs - ok
09:49:25.0376 0x2f694  [ B81C2B5616F6420A9941EA093A92B150, DA2000C9E06533232F8716A6674BC9DFD5C3AAE1FC46F7A91B8E917DB913F42F ] amdxata         C:\Windows\system32\DRIVERS\amdxata.sys
09:49:25.0376 0x2f694  amdxata - ok
09:49:25.0469 0x2f694  [ FEB834C02CE1E84B6A38F953CA067706, E5A7F8B632ABFBD1283C3D44FB02449814EDB653B204E1720DAA780A6D64FD01 ] AppID           C:\Windows\system32\drivers\appid.sys
09:49:25.0469 0x2f694  AppID - ok
09:49:25.0594 0x2f694  [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc        C:\Windows\System32\appidsvc.dll
09:49:25.0594 0x2f694  AppIDSvc - ok
09:49:25.0625 0x2f694  [ 7DEAD9E3F65DCB2794F2711003BBF650, F541C30EEFD1BDB70F361B878B6E51DC728873695DD137148CE531FBACCDA21B ] Appinfo         C:\Windows\System32\appinfo.dll
09:49:25.0625 0x2f694  Appinfo - ok
09:49:25.0688 0x2f694  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt         C:\Windows\System32\appmgmts.dll
09:49:25.0703 0x2f694  AppMgmt - ok
09:49:25.0766 0x2f694  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\DRIVERS\arc.sys
09:49:25.0781 0x2f694  arc - ok
09:49:25.0828 0x2f694  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
09:49:25.0844 0x2f694  arcsas - ok
09:49:25.0922 0x2f694  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
09:49:25.0922 0x2f694  AsyncMac - ok
09:49:25.0984 0x2f694  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\DRIVERS\atapi.sys
09:49:25.0984 0x2f694  atapi - ok
09:49:26.0078 0x2f694  [ 510C873BFA135AA829F4180352772734, BC528D840EB338B0C5D11801C63D8EADD40AF8043DC77ACB4B42E8D20767538F ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
09:49:26.0125 0x2f694  AudioEndpointBuilder - ok
09:49:26.0187 0x2f694  [ 510C873BFA135AA829F4180352772734, BC528D840EB338B0C5D11801C63D8EADD40AF8043DC77ACB4B42E8D20767538F ] Audiosrv        C:\Windows\System32\Audiosrv.dll
09:49:26.0218 0x2f694  Audiosrv - ok
09:49:26.0265 0x2f694  [ DD6A431B43E34B91A767D1CE33728175, 8BFF6474C9DFBEC96FA7B2789EF9B17C7910B52DBCF70CDA1F0C698CFA5EFB6E ] AxInstSV        C:\Windows\System32\AxInstSV.dll
09:49:26.0265 0x2f694  AxInstSV - ok
09:49:26.0390 0x2f694  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys
09:49:26.0437 0x2f694  b06bdrv - ok
09:49:26.0593 0x2f694  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
09:49:26.0655 0x2f694  b57nd60x - ok
09:49:26.0780 0x2f694  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
09:49:26.0795 0x2f694  BDESVC - ok
09:49:26.0842 0x2f694  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
09:49:26.0858 0x2f694  Beep - ok
09:49:27.0107 0x2f694  [ 85AC71C045CEB054ED48A7841AAE0C11, BA0C0CC50E5C49838116AC9A12A7CF1A683601FD08D3CF6EC06620C51C0806FF ] BFE             C:\Windows\System32\bfe.dll
09:49:27.0170 0x2f694  BFE - ok
09:49:27.0326 0x2f694  [ 53F476476F55A27F580661BDE09C4EC4, 90DFBF97F011CFF41D2CFA2E33978BC746A7E693AC75EED1436130C4F10B4E67 ] BITS            C:\Windows\System32\qmgr.dll
09:49:27.0419 0x2f694  BITS - ok
09:49:27.0482 0x2f694  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
09:49:27.0497 0x2f694  blbdrive - ok
09:49:27.0560 0x2f694  [ FCAFAEF6798D7B51FF029F99A9898961, BFB37686B1386EB883B99DB6AC342C20514939F8B7A5CEC5D63865B3DC2B4D4F ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
09:49:27.0575 0x2f694  bowser - ok
09:49:27.0622 0x2f694  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
09:49:27.0638 0x2f694  BrFiltLo - ok
09:49:27.0653 0x2f694  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
09:49:27.0653 0x2f694  BrFiltUp - ok
09:49:27.0747 0x2f694  [ 598E1280E7FF3744F4B8329366CC5635, 9B6392AEBE7EF26253487AF8C7C114822ABB187BA32DA8DBF622DB1B8DA6F1C0 ] Browser         C:\Windows\System32\browser.dll
09:49:27.0763 0x2f694  Browser - ok
09:49:27.0841 0x2f694  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
09:49:27.0856 0x2f694  Brserid - ok
09:49:27.0919 0x2f694  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
09:49:27.0919 0x2f694  BrSerWdm - ok
09:49:27.0950 0x2f694  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
09:49:27.0950 0x2f694  BrUsbMdm - ok
09:49:27.0997 0x2f694  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
09:49:27.0997 0x2f694  BrUsbSer - ok
09:49:28.0059 0x2f694  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
09:49:28.0059 0x2f694  BTHMODEM - ok
09:49:28.0168 0x2f694  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
09:49:28.0184 0x2f694  bthserv - ok
09:49:28.0262 0x2f694  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
09:49:28.0262 0x2f694  cdfs - ok
09:49:28.0402 0x2f694  [ BA6E70AA0E6091BC39DE29477D866A77, A17A68BDA46995F75FB1C2C593A81CD3B2BFE290CEAA45FA2380DDF5537A23C9 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
09:49:28.0402 0x2f694  cdrom - ok
09:49:28.0449 0x2f694  [ 628A9E30EC5E18DD5DE6BE4DBDC12198, DDA43DCCB195440D6BD5752BD00D984F45BD6D23DBE2A656C33E3CD1E5D17AD7 ] CertPropSvc     C:\Windows\System32\certprop.dll
09:49:28.0449 0x2f694  CertPropSvc - ok
09:49:28.0511 0x2f694  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
09:49:28.0511 0x2f694  circlass - ok
09:49:28.0574 0x2f694  [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS            C:\Windows\system32\CLFS.sys
09:49:28.0605 0x2f694  CLFS - ok
09:49:28.0761 0x2f694  [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:49:28.0777 0x2f694  clr_optimization_v2.0.50727_32 - ok
09:49:28.0808 0x2f694  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
09:49:28.0808 0x2f694  CmBatt - ok
09:49:28.0855 0x2f694  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\DRIVERS\cmdide.sys
09:49:28.0855 0x2f694  cmdide - ok
09:49:28.0948 0x2f694  [ 1B675691ED940766149C93E8F4488D68, A55C41B2B343B1CF53D737ED1752D0510052094FFC60FDB833279A8A52398132 ] CNG             C:\Windows\system32\Drivers\cng.sys
09:49:28.0995 0x2f694  CNG - ok
09:49:29.0042 0x2f694  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
09:49:29.0057 0x2f694  Compbatt - ok
09:49:29.0120 0x2f694  [ F1724BA27E97D627F808FB0BA77A28A6, F7D69082EEFEC0FB8B309F6AEE282D4A5DFC1A40851ED65904AA9582C5DEA5AB ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
09:49:29.0120 0x2f694  CompositeBus - ok
09:49:29.0151 0x2f694  COMSysApp - ok
09:49:29.0198 0x2f694  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
09:49:29.0198 0x2f694  crcdisk - ok
09:49:29.0323 0x2f694  [ 9C231178CE4FB385F4B54B0A9080B8A4, 08EFAEBFF68D5CCE432D75116ED4BDC63FEA651459C9AD363CBEEDB769806527 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
09:49:29.0354 0x2f694  CryptSvc - ok
09:49:29.0479 0x2f694  [ 27C9490BDD0AE48911AB8CF1932591ED, 751F576F797F8A7BA576C32598BD6FD2E60D4FACC7836CC5BA3F68C38D27CCCA ] CSC             C:\Windows\system32\drivers\csc.sys
09:49:29.0525 0x2f694  CSC - ok
09:49:29.0681 0x2f694  [ 56FB5F222EA30D3D3FC459879772CB73, 2C4646774575858E26DBA9C73853E06D0BD18CC8A4C73C633071FF5FE04CA0F4 ] CscService      C:\Windows\System32\cscsvc.dll
09:49:29.0713 0x2f694  CscService - ok
09:49:29.0822 0x2f694  [ B82CD39E336973359D7C9BF911E8E84F, 45DB8F1E88FC25A81D2F3C2F8A8CDB6B34C44950B038E24FB71DCDD9823DB22A ] DcomLaunch      C:\Windows\system32\rpcss.dll
09:49:29.0869 0x2f694  DcomLaunch - ok
09:49:29.0947 0x2f694  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
09:49:29.0978 0x2f694  defragsvc - ok
09:49:30.0118 0x2f694  [ 49E8DCA8C119A07C57A68184EA510D2D, CFD6E4A080374D1D73D1ADF63B54CFCCDA3A37368C249EEC7CB2FDD2D004F577 ] Device Control Service C:\Program Files\Intel\Device Control Service\DeviceControlService.exe
09:49:30.0181 0x2f694  Device Control Service - ok
09:49:30.0243 0x2f694  [ 8E09E52EE2E3CEB199EF3DD99CF9E3FB, B03D0CF11C1D0DCBB76E74D796F3AFA2F9598C918017C29670BED4E3A9962EF5 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
09:49:30.0243 0x2f694  DfsC - ok
09:49:30.0337 0x2f694  [ C56495FBD770712367CAD35E5DE72DA6, 9D5456A2E208F542F0B6C951EFCABA2A10919777C4287D7298A28F543D5BAC32 ] Dhcp            C:\Windows\system32\dhcpcore.dll
09:49:30.0352 0x2f694  Dhcp - ok
09:49:30.0383 0x2f694  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
09:49:30.0399 0x2f694  discache - ok
09:49:30.0477 0x2f694  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
09:49:30.0477 0x2f694  Disk - ok
09:49:30.0539 0x2f694  [ D0722E963D3C6145446874241401B209, 542B3E6EC7E0161AB4732380343139959775E749996A97684A5D423833DDB196 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
09:49:30.0555 0x2f694  Dnscache - ok
09:49:30.0633 0x2f694  [ 4408C85C21EEA48EB0CE486BAEEF0502, 67EA726F4053665D94D7790EC89616EA0698A7548073A9211E3F75937B4384BE ] dot3svc         C:\Windows\System32\dot3svc.dll
09:49:30.0664 0x2f694  dot3svc - ok
09:49:30.0758 0x2f694  [ 7FA81C6E11CAA594ADB52084DA73A1E5, 9ED1C585D9CA091E75E4A2A1E5B923B104EBDC5FC9D12154DE909C583E4D0CAE ] DPS             C:\Windows\system32\dps.dll
09:49:30.0805 0x2f694  DPS - ok
09:49:30.0867 0x2f694  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
09:49:30.0883 0x2f694  drmkaud - ok
09:49:31.0007 0x2f694  [ 39806CFEDDCC55E686A49BCCD2972F23, EFD5816D3E8E7F0F8D8E52AB9C534737F32D2D6D3EACCA78940792C553881C64 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
09:49:31.0070 0x2f694  DXGKrnl - ok
09:49:31.0148 0x2f694  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
09:49:31.0163 0x2f694  EapHost - ok
09:49:31.0429 0x2f694  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys
09:49:31.0647 0x2f694  ebdrv - ok
09:49:31.0709 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] EFS             C:\Windows\System32\lsass.exe
09:49:31.0725 0x2f694  EFS - ok
09:49:31.0850 0x2f694  [ 3A74A6E33685662B125A3269B1F2114F, 183E180E4B35E549B5D7363D926E17226FF70CFDE7328F7B0B3676B9A27E2569 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
09:49:31.0897 0x2f694  ehRecvr - ok
09:49:31.0928 0x2f694  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
09:49:31.0943 0x2f694  ehSched - ok
09:49:32.0053 0x2f694  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
09:49:32.0099 0x2f694  elxstor - ok
09:49:32.0146 0x2f694  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\DRIVERS\errdev.sys
09:49:32.0146 0x2f694  ErrDev - ok
09:49:32.0302 0x2f694  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
09:49:32.0349 0x2f694  EventSystem - ok
09:49:32.0411 0x2f694  ew_hwusbdev - ok
09:49:32.0474 0x2f694  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
09:49:32.0521 0x2f694  exfat - ok
09:49:32.0661 0x2f694  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
09:49:32.0692 0x2f694  fastfat - ok
09:49:32.0895 0x2f694  [ F7EA23CC5E6BF2181F3F399D54F6EFC1, 4659A2EDC5D5171668FB20BED7B56466A674876888519D6F524F7456EBD11263 ] Fax             C:\Windows\system32\fxssvc.exe
09:49:32.0942 0x2f694  Fax - ok
09:49:32.0989 0x2f694  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
09:49:32.0989 0x2f694  fdc - ok
09:49:33.0051 0x2f694  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
09:49:33.0067 0x2f694  fdPHost - ok
09:49:33.0082 0x2f694  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
09:49:33.0098 0x2f694  FDResPub - ok
09:49:33.0145 0x2f694  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
09:49:33.0145 0x2f694  FileInfo - ok
09:49:33.0191 0x2f694  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
09:49:33.0191 0x2f694  Filetrace - ok
09:49:33.0223 0x2f694  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
09:49:33.0223 0x2f694  flpydisk - ok
09:49:33.0285 0x2f694  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
09:49:33.0301 0x2f694  FltMgr - ok
09:49:33.0425 0x2f694  [ B6512A85815FDC3D560C3705F5BDB93D, A04D60BF4649DD7582C0E26E9CED93841D8B2729FDF6E1551F48A94AFD5A6436 ] FontCache       C:\Windows\system32\FntCache.dll
09:49:33.0503 0x2f694  FontCache - ok
09:49:33.0581 0x2f694  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
09:49:33.0597 0x2f694  FontCache3.0.0.0 - ok
09:49:33.0628 0x2f694  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
09:49:33.0628 0x2f694  FsDepends - ok
09:49:33.0691 0x2f694  [ A574B4360E438977038AAE4BF60D79A2, 7255CCDDDAC4853FA72E6487408C4B7390CBA37549CE952929B2A9CF3327C616 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
09:49:33.0691 0x2f694  Fs_Rec - ok
09:49:33.0737 0x2f694  [ 5592F5DBA26282D24D2B080EB438A4D7, 5376D6CFFE9A1406CFA0BF4325EB65206F57A5C50034DA7EB4238BEB08D4D6DB ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
09:49:33.0784 0x2f694  fvevol - ok
09:49:33.0847 0x2f694  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
09:49:33.0847 0x2f694  gagp30kx - ok
09:49:33.0940 0x2f694  game-downloader - ok
09:49:34.0283 0x2f694  [ 518DD1057D8079925CE5C588CCC2F41A, B2077C23EE9626BB4342402ACD8F00CD2FF86CE7939E2937AEBA493350C2DFF3 ] GoogleChromeElevationService C:\Program Files\Google\Chrome\Application\91.0.4472.101\elevation_service.exe
09:49:34.0502 0x2f694  GoogleChromeElevationService - ok
09:49:34.0595 0x2f694  [ 8BA3C04702BF8F927AB36AE8313CA4EE, 3B6460C8134AA9D6E4FB978201B35FE9B67DD5BBB6C8D9625F3097DDA30C2893 ] gpsvc           C:\Windows\System32\gpsvc.dll
09:49:34.0658 0x2f694  gpsvc - ok
09:49:34.0814 0x2f694  [ 84E8954D8AFA6B6F5025EC059144CDE2, 7B03A99631843989C71E6F133BD71E243F33F86516BDA3455784FB11D4FF6736 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
09:49:34.0829 0x2f694  gupdate - ok
09:49:34.0876 0x2f694  [ 84E8954D8AFA6B6F5025EC059144CDE2, 7B03A99631843989C71E6F133BD71E243F33F86516BDA3455784FB11D4FF6736 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
09:49:34.0876 0x2f694  gupdatem - ok
09:49:34.0923 0x2f694  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
09:49:34.0939 0x2f694  hcw85cir - ok
09:49:35.0079 0x2f694  [ 3530CAD25DEBA7DC7DE8BB51632CBC5F, 6706B8AD211A4B89B6571ACD227412026EAD87D71456B3EC6E7DD8FA15B997BE ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
09:49:35.0126 0x2f694  HdAudAddService - ok
09:49:35.0188 0x2f694  [ 717A2207FD6F13AD3E664C7D5A43C7BF, BF28A6F00B64FA0E801493E3289CFFD5E313E724DF7B5AB521C9E37A20890DCF ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
09:49:35.0204 0x2f694  HDAudBus - ok
09:49:35.0235 0x2f694  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
09:49:35.0235 0x2f694  HidBatt - ok
09:49:35.0282 0x2f694  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
09:49:35.0313 0x2f694  HidBth - ok
09:49:35.0407 0x2f694  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
09:49:35.0407 0x2f694  HidIr - ok
09:49:35.0485 0x2f694  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
09:49:35.0485 0x2f694  hidserv - ok
09:49:35.0594 0x2f694  [ 25072FB35AC90B25F9E4E3BACF774102, EBCE089947CC5A251A517CB91E81FCB948B18405FBACA04C874D4A48AF88676D ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
09:49:35.0594 0x2f694  HidUsb - ok
09:49:35.0656 0x2f694  [ 741C2A45CA8407E374AABA3E330B7872, FCF31C46297CFDF8240F0E783A61C8463FEDB1EF7A676AB89DFF0EAE9F3534B4 ] hkmsvc          C:\Windows\system32\kmsvc.dll
09:49:35.0672 0x2f694  hkmsvc - ok
09:49:35.0703 0x2f694  [ A768CA158BB06782A2835B907F4873C3, EFF736C6BA38FB8FC8807286AB273E7274F505E8E59D952E8563DF77C412C5AE ] HomeGroupListener C:\Windows\system32\ListSvc.dll
09:49:35.0719 0x2f694  HomeGroupListener - ok
09:49:35.0812 0x2f694  [ FB08DEC5EF43D0C66D83B8E9694E7549, 9C9ECE9E90F524791FC5DCE797BAE39605F966592126FF058BA3FA0BEFD07BEB ] HomeGroupProvider C:\Windows\system32\provsvc.dll
09:49:35.0828 0x2f694  HomeGroupProvider - ok
09:49:35.0906 0x2f694  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\DRIVERS\HpSAMD.sys
09:49:35.0921 0x2f694  HpSAMD - ok
09:49:36.0015 0x2f694  [ C531C7FD9E8B62021112787C4E2C5A5A, 09205E2A5BFB6C623B312B8AC82F7F7CA8A922B1D9A0E3952BD3BA47BBE1F18C ] HTTP            C:\Windows\system32\drivers\HTTP.sys
09:49:36.0046 0x2f694  HTTP - ok
09:49:36.0077 0x2f694  huawei_cdcacm - ok
09:49:36.0124 0x2f694  huawei_enumerator - ok
09:49:36.0171 0x2f694  hwdatacard - ok
09:49:36.0218 0x2f694  [ 8305F33CDE89AD6C7A0763ED0B5A8D42, A7CA4978DC1FF6105EA39124DF854F0B1FD478476B871ED0E018AF3AE2165282 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
09:49:36.0218 0x2f694  hwpolicy - ok
09:49:36.0389 0x2f694  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
09:49:36.0405 0x2f694  i8042prt - ok
09:49:36.0639 0x2f694  [ 934AF4D7C5F457B9F0743F4299B77B67, F232554352BB7CD716D6173FC1AB2661E49480994BB22E9A6FE7A33B51F0A51B ] iaStorV         C:\Windows\system32\DRIVERS\iaStorV.sys
09:49:36.0686 0x2f694  iaStorV - ok
09:49:37.0154 0x2f694  [ 5AF815EB5BC9802E5A064E2BA62BFC0C, DC8CED05F623D30C57E8A7A382A219B4266C9C766ABF8A8D71783EACB8607B82 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:49:37.0325 0x2f694  idsvc - ok
09:49:38.0402 0x2f694  [ BA41E1BBA410212CE6D30E0DAC47972B, C1D8E5C95EADD9E2083275C1DA633F0B773B65EABEBC0F52224FF1156CBBE8C1 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
09:49:38.0995 0x2f694  igfx - ok
09:49:39.0073 0x2f694  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
09:49:39.0073 0x2f694  iirsp - ok
09:49:39.0182 0x2f694  [ FAC0EE6562B121B1399D6E855583F7A5, 034C9EE9232EB2CE64297EC4BCBEB5DA443ED9176C436CC754EF84FFB4AD4B08 ] IKEEXT          C:\Windows\System32\ikeext.dll
09:49:39.0353 0x2f694  IKEEXT - ok
09:49:39.0478 0x2f694  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\DRIVERS\intelide.sys
09:49:39.0478 0x2f694  intelide - ok
09:49:39.0525 0x2f694  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
09:49:39.0541 0x2f694  intelppm - ok
09:49:39.0572 0x2f694  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
09:49:39.0587 0x2f694  IPBusEnum - ok
09:49:39.0634 0x2f694  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
09:49:39.0634 0x2f694  IpFilterDriver - ok
09:49:39.0759 0x2f694  [ 477397B432A256A50EE7E4339EB9EA14, 3722938E69D16962F773F39669E9B90279DC9527BBC63564B33C89DAFD283497 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
09:49:39.0821 0x2f694  iphlpsvc - ok
09:49:39.0899 0x2f694  [ E4454B6C37D7FFD5649611F6496308A7, 5B2AA8C06076C9A1FF944E5EA07C29BA7FABEBB38E6BFB388ED46933EAC465FB ] IPMIDRV         C:\Windows\system32\DRIVERS\IPMIDrv.sys
09:49:39.0946 0x2f694  IPMIDRV - ok
09:49:40.0024 0x2f694  [ 98F3935D5AA182F9A18AD26C95043ACC, EA936ECA543B6DBF8732636456105D46616DB7C595C4E5A63E654513C8C98EBC ] IPMLEBL         C:\Windows\system32\Drivers\ipmlebl.sys
09:49:40.0040 0x2f694  IPMLEBL - ok
09:49:40.0071 0x2f694  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
09:49:40.0102 0x2f694  IPNAT - ok
09:49:40.0211 0x2f694  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
09:49:40.0211 0x2f694  IRENUM - ok
09:49:40.0258 0x2f694  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\DRIVERS\isapnp.sys
09:49:40.0274 0x2f694  isapnp - ok
09:49:40.0321 0x2f694  [ ED46C223AE46C6866AB77CDC41C404B7, 1B2A4A3FF0E5F8F02717F20983D57612D62DFF809064A7E524700E7254BB7DB3 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys
09:49:40.0383 0x2f694  iScsiPrt - ok
09:49:40.0430 0x2f694  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
09:49:40.0430 0x2f694  kbdclass - ok
09:49:40.0477 0x2f694  [ 3D9F0EBF350EDCFD6498057301455964, B3CB5F0C045B06C86E683F3C67DC0D4E37AF16E20B189B05C926A5A7011438FB ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
09:49:40.0477 0x2f694  kbdhid - ok
09:49:40.0539 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] KeyIso          C:\Windows\system32\lsass.exe
09:49:40.0555 0x2f694  KeyIso - ok
09:49:40.0601 0x2f694  [ E36A061EC11B373826905B21BE10948F, CB9F8B76E0A99307A841B66CBD96C7087CC0B068699CBEF01040E37C6EA60E6A ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
09:49:40.0617 0x2f694  KSecDD - ok
09:49:40.0664 0x2f694  [ 26C046977E85B95036453D7B88BA1820, 375B284AFB407CAE417D2090B112A0ED1CCD516ABFDDBFCD5D6AADE859F14ACD ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
09:49:40.0679 0x2f694  KSecPkg - ok
09:49:40.0773 0x2f694  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
09:49:40.0820 0x2f694  KtmRm - ok
09:49:40.0882 0x2f694  [ BCA92CB047A4326925ECEF759DBAA233, C2A188F5526882A2E3AC4CC0190452DA37CBD93043DFE5571A20E8EFE9D56DA3 ] LanmanServer    C:\Windows\system32\srvsvc.dll
09:49:40.0913 0x2f694  LanmanServer - ok
09:49:40.0960 0x2f694  [ B9891F885DCF1F0513A51CB58493CB1F, C883D243E1E7B7AEA031FB90FE4FCEED631F835DC95F9D9D60BC554E6EC358C2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
09:49:40.0976 0x2f694  LanmanWorkstation - ok
09:49:41.0085 0x2f694  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
09:49:41.0085 0x2f694  lltdio - ok
09:49:41.0147 0x2f694  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
09:49:41.0163 0x2f694  lltdsvc - ok
09:49:41.0225 0x2f694  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
09:49:41.0225 0x2f694  lmhosts - ok
09:49:41.0335 0x2f694  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
09:49:41.0366 0x2f694  LSI_FC - ok
09:49:41.0475 0x2f694  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
09:49:41.0491 0x2f694  LSI_SAS - ok
09:49:41.0553 0x2f694  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
09:49:41.0569 0x2f694  LSI_SAS2 - ok
09:49:41.0647 0x2f694  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
09:49:41.0647 0x2f694  LSI_SCSI - ok
09:49:41.0756 0x2f694  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
09:49:41.0771 0x2f694  luafv - ok
09:49:42.0458 0x2f694  [ 8D32AAA79A584779D36521F661108B6C, FBF070C27CEA4C9E4E9CCF184B121E339338090656253F5D78CC97B62D79E008 ] MBAMService     C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
09:49:43.0051 0x2f694  MBAMService - ok
09:49:43.0222 0x2f694  [ 64B0C873E16508F160DC35EDA029AECA, 4413C9092C72B41EB04FBD0365C8F7EA622C799CC8E83CF97A62CF78E7A8CAC5 ] MBAMSwissArmy   C:\Windows\System32\Drivers\mbamswissarmy.sys
09:49:43.0253 0x2f694  MBAMSwissArmy - ok
09:49:43.0331 0x2f694  [ E2B0887816ED336685954E3D8FDAA51D, 4DCB08ADC6A89DCA68D1285734B283B567888EF72249F6BBA73A63D1BD462466 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
09:49:43.0394 0x2f694  Mcx2Svc - ok
09:49:43.0456 0x2f694  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
09:49:43.0472 0x2f694  megasas - ok
09:49:43.0550 0x2f694  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
09:49:43.0565 0x2f694  MegaSR - ok
09:49:43.0690 0x2f694  [ FAFE367D032ED82E9332B4C741A20216, 7B123766E360570E0FCB211835B7910D6A1806C25A06BCA9227AB9E993376CA8 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
09:49:43.0690 0x2f694  Microsoft Office Groove Audit Service - ok
09:49:43.0737 0x2f694  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
09:49:43.0753 0x2f694  MMCSS - ok
09:49:43.0784 0x2f694  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
09:49:43.0784 0x2f694  Modem - ok
09:49:43.0799 0x2f694  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
09:49:43.0815 0x2f694  monitor - ok
09:49:43.0924 0x2f694  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
09:49:43.0924 0x2f694  mouclass - ok
09:49:43.0971 0x2f694  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
09:49:43.0971 0x2f694  mouhid - ok
09:49:44.0018 0x2f694  [ 921C18727C5920D6C0300736646931C2, 19ACE502982E9C5B0134676102EAEE96675C9CA237E410DB36C389D6B4078301 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
09:49:44.0018 0x2f694  mountmgr - ok
09:49:44.0158 0x2f694  [ FBA4B17B0D8A3CF5CD68AEE42DAAE689, A938C021D665E01FBB161558FEEB3BEF046EF00CC21271FC8389C80963B09CD5 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
09:49:44.0174 0x2f694  MozillaMaintenance - ok
09:49:44.0221 0x2f694  [ 2AF5997438C55FB79D33D015C30E1974, E8F048A02FEB400C133D0BFC1659921E73B59549E3F7D2A13929901B87A1901F ] mpio            C:\Windows\system32\DRIVERS\mpio.sys
09:49:44.0236 0x2f694  mpio - ok
09:49:44.0330 0x2f694  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
09:49:44.0361 0x2f694  mpsdrv - ok
09:49:44.0642 0x2f694  [ 5CD996CECF45CBC3E8D109C86B82D69E, ABE40DA4DA555D3D5054BE28BF82E775D90DCB9E31409DC95FABF2F016B17700 ] MpsSvc          C:\Windows\system32\mpssvc.dll
09:49:44.0720 0x2f694  MpsSvc - ok
09:49:44.0798 0x2f694  [ B1BE47008D20E43DA3ADC37C24CDB89D, 6E8555E84B42E5098227B35EA5ABADF2CD3AC247B37CB9E9304FF67064EBE59B ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
09:49:44.0813 0x2f694  MRxDAV - ok
09:49:44.0923 0x2f694  [ F4A054BE78AF7F410129C4B64B07DC9B, 65E14D38CCAB4FBB0C0D4A12F11B2E150AEC00AC692EE92A5CE6C982CF1190F5 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
09:49:44.0938 0x2f694  mrxsmb - ok
09:49:44.0969 0x2f694  [ DEFFA295BD1895C6ED8E3078412AC60B, 3F13CD67659EC2C8ABADC2C5B48B939ECDC6DB7CAAAAC3C2823AC12842BC1630 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
09:49:45.0001 0x2f694  mrxsmb10 - ok
09:49:45.0032 0x2f694  [ 24D76ABE5DCAD22F19D105F76FDF0CE1, D0A7E033B4DF4AA5A9600A2A7A890FDE20AC7CE87C660817EB92FE10E2DAD343 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
09:49:45.0047 0x2f694  mrxsmb20 - ok
09:49:45.0063 0x2f694  [ 4326D168944123F38DD3B2D9C37A0B12, 322AE93418BE3BA6B3E11C86431EC3F4B23CADC3B968B92978A08A7C0D0D8902 ] msahci          C:\Windows\system32\DRIVERS\msahci.sys
09:49:45.0079 0x2f694  msahci - ok
09:49:45.0141 0x2f694  [ 455029C7174A2DBB03DBA8A0D8BDDD9A, 614D71978B024109ADD9A7A74F74ABD5FAA1C36A2E859AF288398EAE7CD76DF2 ] msdsm           C:\Windows\system32\DRIVERS\msdsm.sys
09:49:45.0141 0x2f694  msdsm - ok
09:49:45.0188 0x2f694  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
09:49:45.0203 0x2f694  MSDTC - ok
09:49:45.0235 0x2f694  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
09:49:45.0235 0x2f694  Msfs - ok
09:49:45.0266 0x2f694  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
09:49:45.0266 0x2f694  mshidkmdf - ok
09:49:45.0297 0x2f694  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\DRIVERS\msisadrv.sys
09:49:45.0297 0x2f694  msisadrv - ok
09:49:45.0391 0x2f694  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
09:49:45.0406 0x2f694  MSiSCSI - ok
09:49:45.0422 0x2f694  msiserver - ok
09:49:45.0484 0x2f694  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
09:49:45.0500 0x2f694  MSKSSRV - ok
09:49:45.0515 0x2f694  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
09:49:45.0515 0x2f694  MSPCLOCK - ok
09:49:45.0547 0x2f694  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
09:49:45.0562 0x2f694  MSPQM - ok
09:49:45.0609 0x2f694  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
09:49:45.0625 0x2f694  MsRPC - ok
09:49:45.0671 0x2f694  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
09:49:45.0671 0x2f694  mssmbios - ok
09:49:45.0703 0x2f694  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
09:49:45.0703 0x2f694  MSTEE - ok
09:49:45.0734 0x2f694  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
09:49:45.0781 0x2f694  MTConfig - ok
09:49:45.0827 0x2f694  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
09:49:45.0843 0x2f694  Mup - ok
09:49:45.0937 0x2f694  [ 80284F1985C70C86F0B5F86DA2DFE1DF, 424A5BBC28C72DA0DBABEB9E423B8C409754CD1BA3DFC9E174BF22D8BCE1BE63 ] napagent        C:\Windows\system32\qagentRT.dll
09:49:46.0030 0x2f694  napagent - ok
09:49:46.0171 0x2f694  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
09:49:46.0233 0x2f694  NativeWifiP - ok
09:49:46.0389 0x2f694  [ 23759D175A0A9BAAF04D05047BC135A8, 2C8C553B4E1ED3A644F619F16BCEDD5A3C6D74A17E6E75A3E740E06B1D636348 ] NDIS            C:\Windows\system32\drivers\ndis.sys
09:49:46.0483 0x2f694  NDIS - ok
09:49:46.0514 0x2f694  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
09:49:46.0514 0x2f694  NdisCap - ok
09:49:46.0561 0x2f694  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
09:49:46.0576 0x2f694  NdisTapi - ok
09:49:46.0592 0x2f694  [ B30AE7F2B6D7E343B0DF32E6C08FCE75, 39BBBF7AF886732CB9ED3E6C06DA4318554089F3BEA74C74328FE1C6EF68E70B ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
09:49:46.0607 0x2f694  Ndisuio - ok
09:49:46.0639 0x2f694  [ 267C415EADCBE53C9CA873DEE39CF3A4, BAA8626BDA7B68176B19A99FBBD40FB2A774C8F44B56F9FFB99A1F5C16A1C555 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
09:49:46.0639 0x2f694  NdisWan - ok
09:49:46.0670 0x2f694  [ AF7E7C63DCEF3F8772726F86039D6EB4, 1CFDED48E8844138864786DBF9D5519162A6DB28F885A781934E8AFBD52EAC50 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
09:49:46.0670 0x2f694  NDProxy - ok
09:49:46.0717 0x2f694  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
09:49:46.0717 0x2f694  NetBIOS - ok
09:49:46.0748 0x2f694  [ DD52A733BF4CA5AF84562A5E2F963B91, 5CEB9664CED3D120F5408A12035748728710D41090A289CF66023CED4C838A1F ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
09:49:46.0779 0x2f694  NetBT - ok
09:49:46.0810 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] Netlogon        C:\Windows\system32\lsass.exe
09:49:46.0826 0x2f694  Netlogon - ok
09:49:46.0888 0x2f694  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
09:49:46.0904 0x2f694  Netman - ok
09:49:46.0966 0x2f694  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
09:49:47.0013 0x2f694  netprofm - ok
09:49:47.0075 0x2f694  [ FE2AA5A684B0DD9B1FAE57B7817C198B, 59137B15AD038C31BEB909EC11019E08C072DD7EE611B9618B7523880453BD4F ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:49:47.0091 0x2f694  NetTcpPortSharing - ok
09:49:48.0136 0x2f694  [ 56A2C2494FB29F0F158FD8D866F966BF, 5FC548F1E846ADF2F80123F362ECF85AFB7EE5B29C9E6A4A6043330B2C17E5D3 ] NETwNs32        C:\Windows\system32\DRIVERS\NETwsn00.sys
09:49:49.0213 0x2f694  NETwNs32 - ok
09:49:49.0306 0x2f694  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
09:49:49.0337 0x2f694  nfrd960 - ok
09:49:49.0478 0x2f694  [ 2226496E34BD40734946A054B1CD657F, 98392D98C9213822268971432BB55047ABD8B4EBD42483FA69BF50FB8FAD64A2 ] NlaSvc          C:\Windows\System32\nlasvc.dll
09:49:49.0509 0x2f694  NlaSvc - ok
09:49:49.0556 0x2f694  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
09:49:49.0556 0x2f694  Npfs - ok
09:49:49.0603 0x2f694  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
09:49:49.0634 0x2f694  nsi - ok
09:49:49.0665 0x2f694  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
09:49:49.0681 0x2f694  nsiproxy - ok
09:49:49.0852 0x2f694  [ 3795DCD21F740EE799FB7223234215AF, B03DBFD33B201134473D23038E0BD86CFE64556754BF4EBA42C10B67AEECAEA6 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
09:49:49.0961 0x2f694  Ntfs - ok
09:49:49.0993 0x2f694  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
09:49:49.0993 0x2f694  Null - ok
09:49:50.0039 0x2f694  [ 3F3D04B1D08D43C16EA7963954EC768D, BA82C1D3D9F4AA5F1C9729D61D4E06DB961FDF2B1E9B483D29DB308204DF0754 ] nvraid          C:\Windows\system32\DRIVERS\nvraid.sys
09:49:50.0071 0x2f694  nvraid - ok

[Aega18]

Segunda parte del informe del TDSSKiller.:

09:49:50.0149 0x2f694  [ C99F251A5DE63C6F129CF71933ACED0F, 24D48A5F5D699AB0DD4D4435F8F7C6B73A924AEF8F9D1170FD644E26499546A2 ] nvstor          C:\Windows\system32\DRIVERS\nvstor.sys
09:49:50.0164 0x2f694  nvstor - ok
09:49:50.0211 0x2f694  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\DRIVERS\nv_agp.sys
09:49:50.0227 0x2f694  nv_agp - ok
09:49:50.0367 0x2f694  [ 84DE1DD996B48B05ACE31AD015FA108A, 4B9D1E4EF83ECED6C77F23D9879C124534F7053D7423E3A2D0F67A4A720CEA94 ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
09:49:50.0429 0x2f694  odserv - ok
09:49:50.0461 0x2f694  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys
09:49:50.0476 0x2f694  ohci1394 - ok
09:49:50.0539 0x2f694  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:49:50.0554 0x2f694  ose - ok
09:49:50.0648 0x2f694  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
09:49:50.0679 0x2f694  p2pimsvc - ok
09:49:50.0741 0x2f694  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
09:49:50.0773 0x2f694  p2psvc - ok
09:49:50.0851 0x2f694  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
09:49:50.0851 0x2f694  Parport - ok
09:49:50.0882 0x2f694  [ FF4218952B51DE44FE910953A3E686B9, 871E4F8300AFE2AE770B8F00C12911A08D8BBD8E07C37A11AFF67CA92607A602 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
09:49:50.0913 0x2f694  partmgr - ok
09:49:50.0944 0x2f694  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
09:49:50.0960 0x2f694  Parvdm - ok
09:49:51.0022 0x2f694  [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc          C:\Windows\System32\pcasvc.dll
09:49:51.0038 0x2f694  PcaSvc - ok
09:49:51.0085 0x2f694  [ C858CB77C577780ECC456A892E7E7D0F, 21AE545B736739DE5A7B02CF227516BA6D02B1AAAECD8CC516CCF9F1FD710BCF ] pci             C:\Windows\system32\DRIVERS\pci.sys
09:49:51.0100 0x2f694  pci - ok
09:49:51.0131 0x2f694  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\DRIVERS\pciide.sys
09:49:51.0131 0x2f694  pciide - ok
09:49:51.0225 0x2f694  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
09:49:51.0241 0x2f694  pcmcia - ok
09:49:51.0287 0x2f694  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
09:49:51.0303 0x2f694  pcw - ok
09:49:51.0646 0x2f694  [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
09:49:51.0724 0x2f694  PEAUTH - ok
09:49:51.0911 0x2f694  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
09:49:51.0974 0x2f694  PeerDistSvc - ok
09:49:52.0223 0x2f694  [ 9C1BFF7910C89A1D12E57343475840CB, 62E00E1278BD263B2AC8CB803C31F2818C54DB143C49470FAD07731E04BD2DE3 ] pla             C:\Windows\system32\pla.dll
09:49:52.0333 0x2f694  pla - ok
09:49:52.0395 0x2f694  [ 2CC2008F1296968FBA162ED9F9AFE328, 670E2BE4EB8210C9D6AEA635DFA20E390936762A22B2BB413BF9C7AF418150D6 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
09:49:52.0426 0x2f694  PlugPlay - ok
09:49:52.0442 0x2f694  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
09:49:52.0473 0x2f694  PNRPAutoReg - ok
09:49:52.0551 0x2f694  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
09:49:52.0582 0x2f694  PNRPsvc - ok
09:49:52.0816 0x2f694  [ 48E1B75C6DC0232FD92BAAE4BD344721, 5BA4EB5A60725836D8085EABF87F51160BA57E318A0C4378410217911A393CE7 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
09:49:52.0879 0x2f694  PolicyAgent - ok
09:49:52.0941 0x2f694  [ DBFF83F709A91049621C1D35DD45C92C, 0A722A44F431CAB5EA77FF5F25EB6975C2111B605564FF9FB59751067E7CD3A7 ] Power           C:\Windows\system32\umpo.dll
09:49:53.0003 0x2f694  Power - ok
09:49:53.0097 0x2f694  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
09:49:53.0113 0x2f694  PptpMiniport - ok
09:49:53.0144 0x2f694  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
09:49:53.0159 0x2f694  Processor - ok
09:49:53.0269 0x2f694  [ 630CF26F0227498B7D5A92B12548960F, 7B6E2A3C398DF2E8F63C03ED5B59BB8DA47D5C1ACA9F37438F71F35633ACD6CD ] ProfSvc         C:\Windows\system32\profsvc.dll
09:49:53.0300 0x2f694  ProfSvc - ok
09:49:53.0362 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] ProtectedStorage C:\Windows\system32\lsass.exe
09:49:53.0362 0x2f694  ProtectedStorage - ok
09:49:53.0409 0x2f694  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
09:49:53.0409 0x2f694  Psched - ok
09:49:53.0627 0x2f694  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
09:49:53.0752 0x2f694  ql2300 - ok
09:49:53.0830 0x2f694  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
09:49:53.0846 0x2f694  ql40xx - ok
09:49:53.0908 0x2f694  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
09:49:53.0939 0x2f694  QWAVE - ok
09:49:53.0971 0x2f694  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
09:49:53.0971 0x2f694  QWAVEdrv - ok
09:49:54.0017 0x2f694  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
09:49:54.0017 0x2f694  RasAcd - ok
09:49:54.0064 0x2f694  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
09:49:54.0080 0x2f694  RasAgileVpn - ok
09:49:54.0111 0x2f694  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
09:49:54.0142 0x2f694  RasAuto - ok
09:49:54.0189 0x2f694  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
09:49:54.0189 0x2f694  Rasl2tp - ok
09:49:54.0283 0x2f694  [ 0CE66EC736B7FC526D78F7624C7D2A94, D70B45AA413691CF84B24E966EBA1689955E54BDDA206380CAB7CD50F56D5CEB ] RasMan          C:\Windows\System32\rasmans.dll
09:49:54.0329 0x2f694  RasMan - ok
09:49:54.0376 0x2f694  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
09:49:54.0392 0x2f694  RasPppoe - ok
09:49:54.0485 0x2f694  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
09:49:54.0501 0x2f694  RasSstp - ok
09:49:54.0548 0x2f694  [ 835D7E81BF517A3B72384BDCC85E1CE6, DC855AF17150C1B27926293115C01B5E1FD00FABCE18AFAEAB3DC68BDE4C908B ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
09:49:54.0579 0x2f694  rdbss - ok
09:49:54.0610 0x2f694  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
09:49:54.0610 0x2f694  rdpbus - ok
09:49:54.0626 0x2f694  [ 1E016846895B15A99F9A176A05029075, 78AE674B6E7D3A69099B24AC07E06563A4C867F9DCD8548E4DAAE6FC5ACA4E29 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
09:49:54.0626 0x2f694  RDPCDD - ok
09:49:54.0719 0x2f694  [ C5FF95883FFEF704D50C40D21CFB3AB5, 26CC53DDE126A6BD99F606695F063BB7FDC4BBABB9F75F7AD7A84B58C837EEAA ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
09:49:54.0735 0x2f694  RDPDR - ok
09:49:54.0782 0x2f694  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
09:49:54.0797 0x2f694  RDPENCDD - ok
09:49:54.0829 0x2f694  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
09:49:54.0844 0x2f694  RDPREFMP - ok
09:49:54.0891 0x2f694  [ 801371BA9782282892D00AADB08EE367, 884DDC24B8400E76F65F54C249053333AD29543224F9EC156C64A6BDF584DDCD ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
09:49:54.0907 0x2f694  RDPWD - ok
09:49:54.0969 0x2f694  [ 4EA225BF1CF05E158853F30A99CA29A7, F211480F13E2FE36C31110AE67ABE74E9D572D3A36BEEDE29E14ECBD8C246878 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
09:49:54.0985 0x2f694  rdyboost - ok
09:49:55.0016 0x2f694  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
09:49:55.0047 0x2f694  RemoteAccess - ok
09:49:55.0109 0x2f694  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
09:49:55.0141 0x2f694  RemoteRegistry - ok
09:49:55.0172 0x2f694  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
09:49:55.0187 0x2f694  RpcEptMapper - ok
09:49:55.0219 0x2f694  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
09:49:55.0265 0x2f694  RpcLocator - ok
09:49:55.0343 0x2f694  [ B82CD39E336973359D7C9BF911E8E84F, 45DB8F1E88FC25A81D2F3C2F8A8CDB6B34C44950B038E24FB71DCDD9823DB22A ] RpcSs           C:\Windows\system32\rpcss.dll
09:49:55.0375 0x2f694  RpcSs - ok
09:49:55.0499 0x2f694  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
09:49:55.0531 0x2f694  rspndr - ok
09:49:55.0624 0x2f694  [ 7DFD48E24479B68B258D8770121155A0, 3B5F7309403C46855DB888CF2058B07C9029690DBC7FB3224BAC7BE5547D2D57 ] RTL8167         C:\Windows\system32\DRIVERS\Rt86win7.sys
09:49:55.0640 0x2f694  RTL8167 - ok
09:49:55.0936 0x2f694  [ 382E200EA455306A33AE6D7EAB15649E, 8A8F045A02F2A1AB6CCDA585C70EAD9035FC9014A92D60EE22C66947BD609900 ] rtl8192se       C:\Windows\system32\DRIVERS\rtl8192se.sys
09:49:56.0045 0x2f694  rtl8192se - ok
09:49:56.0123 0x2f694  [ 5423D8437051E89DD34749F242C98648, 28FD190E13676B0FD452A73C3069B72206E2938DB2240BAA9BDB56687C748A2B ] s3cap           C:\Windows\system32\DRIVERS\vms3cap.sys
09:49:56.0155 0x2f694  s3cap - ok
09:49:56.0170 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] SamSs           C:\Windows\system32\lsass.exe
09:49:56.0186 0x2f694  SamSs - ok
09:49:56.0233 0x2f694  [ 34EE0C44B724E3E4CE2EFF29126DE5B5, D27AAF77CB8830893558A600E19CDBF9A6AA7D69DE4B34F317ED4AFD38E8CAFB ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys
09:49:56.0248 0x2f694  sbp2port - ok
09:49:56.0295 0x2f694  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
09:49:56.0311 0x2f694  SCardSvr - ok
09:49:56.0326 0x2f694  [ A95C54B2AC3CC9C73FCDF9E51A1D6B51, 8C0189A6AF9AEC46CBA4DA422C52B2D3E4858B2F2658DB6CA7996B5F368D2503 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
09:49:56.0342 0x2f694  scfilter - ok
09:49:56.0482 0x2f694  [ 3E8B0C453E25613A1F59762A5C42AA75, 86801C49664441A08F7E95031E52AD2518D61CCB945A857A18F0714351A8158C ] Schedule        C:\Windows\system32\schedsvc.dll
09:49:56.0591 0x2f694  Schedule - ok
09:49:56.0623 0x2f694  [ 628A9E30EC5E18DD5DE6BE4DBDC12198, DDA43DCCB195440D6BD5752BD00D984F45BD6D23DBE2A656C33E3CD1E5D17AD7 ] SCPolicySvc     C:\Windows\System32\certprop.dll
09:49:56.0638 0x2f694  SCPolicySvc - ok
09:49:56.0669 0x2f694  [ 5FD90ABDBFAEE85986802622CBB03446, 0A8D9DC09C2ACA9EAABED04737E9EBF6EFB92BB2B9E5F37F10BFDF47CBF7DEDB ] SDRSVC          C:\Windows\System32\SDRSVC.dll
09:49:56.0685 0x2f694  SDRSVC - ok
09:49:56.0779 0x2f694  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
09:49:56.0794 0x2f694  secdrv - ok
09:49:56.0857 0x2f694  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
09:49:56.0919 0x2f694  seclogon - ok
09:49:56.0981 0x2f694  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
09:49:56.0997 0x2f694  SENS - ok
09:49:57.0059 0x2f694  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
09:49:57.0075 0x2f694  SensrSvc - ok
09:49:57.0137 0x2f694  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
09:49:57.0169 0x2f694  Serenum - ok
09:49:57.0200 0x2f694  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
09:49:57.0247 0x2f694  Serial - ok
09:49:57.0293 0x2f694  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
09:49:57.0293 0x2f694  sermouse - ok
09:49:57.0512 0x2f694  [ 8F55CE568C543D5ADF45C409D16718FC, 64D45854A91B656C1AF36EB272FDC54E9B5FB0200CB93E20F7D997DDA109EF7F ] SessionEnv      C:\Windows\system32\sessenv.dll
09:49:57.0559 0x2f694  SessionEnv - ok
09:49:57.0605 0x2f694  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\DRIVERS\sffdisk.sys
09:49:57.0621 0x2f694  sffdisk - ok
09:49:57.0668 0x2f694  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\DRIVERS\sffp_mmc.sys
09:49:57.0683 0x2f694  sffp_mmc - ok
09:49:57.0699 0x2f694  [ 4F1E5B0FE7C8050668DBFADE8999AEFB, E36DAACC3D11F004808A3F44C471BBFDC2F33411D9F5C18B55B0DB2A6DA6E74C ] sffp_sd         C:\Windows\system32\DRIVERS\sffp_sd.sys
09:49:57.0715 0x2f694  sffp_sd - ok
09:49:57.0730 0x2f694  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
09:49:57.0746 0x2f694  sfloppy - ok
09:49:57.0793 0x2f694  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
09:49:57.0839 0x2f694  SharedAccess - ok
09:49:57.0917 0x2f694  [ CD2E48FA5B29EE2B3B5858056D246EF2, B743F92D0121CF3D827753C85F1F5A14C2DAA1CAFD42C7810C3BECB853DB6175 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
09:49:57.0949 0x2f694  ShellHWDetection - ok
09:49:58.0011 0x2f694  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\DRIVERS\sisagp.sys
09:49:58.0011 0x2f694  sisagp - ok
09:49:58.0042 0x2f694  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
09:49:58.0058 0x2f694  SiSRaid2 - ok
09:49:58.0151 0x2f694  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
09:49:58.0167 0x2f694  SiSRaid4 - ok
09:49:58.0214 0x2f694  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
09:49:58.0214 0x2f694  Smb - ok
09:49:58.0307 0x2f694  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
09:49:58.0307 0x2f694  SNMPTRAP - ok
09:49:58.0339 0x2f694  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
09:49:58.0354 0x2f694  spldr - ok
09:49:58.0417 0x2f694  [ 49B6DD6AB3715B7A67965F17194E98A9, 331D69F3630BA978AC13471A2E7465351D04416343A595C62B94BADFFCD02B3A ] Spooler         C:\Windows\System32\spoolsv.exe
09:49:58.0448 0x2f694  Spooler - ok
09:49:58.0916 0x2f694  [ 4C287F9069FEDBD791178876EE9DE536, 6099E76FF6FBA002EBA2BA7BE4E3238D91332E077524D1DD402E0C9ADA22E852 ] sppsvc          C:\Windows\system32\sppsvc.exe
09:49:59.0259 0x2f694  sppsvc - ok
09:49:59.0321 0x2f694  [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7, E7A8A5774C62DC12B56DC3E0A385ACA9069F3A5E6AC664AD0C383EF44DCF81B3 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
09:49:59.0337 0x2f694  sppuinotify - ok
09:49:59.0431 0x2f694  [ 2BA4EBC7DFBA845A1EDBE1F75913BE33, 58D0B957469D55026A53C3963508C8B36BDB360A0A5B870332B79A39200DB3AC ] srv             C:\Windows\system32\DRIVERS\srv.sys
09:49:59.0477 0x2f694  srv - ok
09:49:59.0555 0x2f694  [ DCE7E10FEAABD4CAE95948B3DE5340BB, B1E9CD14DC24BB161EFC83D83CE95D0A98008AD790041785C6C8B87564A491D7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
09:49:59.0587 0x2f694  srv2 - ok
09:49:59.0633 0x2f694  [ B5665BAA2120B8A54E22E9CD07C05106, 86E50853D412ACDC752AD182ED52B49DD679D75843E1E9D6A6425E750594692C ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
09:49:59.0633 0x2f694  srvnet - ok
09:49:59.0743 0x2f694  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
09:49:59.0758 0x2f694  SSDPSRV - ok
09:49:59.0821 0x2f694  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
09:49:59.0836 0x2f694  SstpSvc - ok
09:49:59.0930 0x2f694  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
09:49:59.0930 0x2f694  stexstor - ok
09:50:00.0055 0x2f694  [ A22825E7BB7018E8AF3E229A5AF17221, 5C97557F8BC6ABBB5BE624AE41AAC22C3D845F76C3E930337A4C07B2381086D7 ] StiSvc          C:\Windows\System32\wiaservc.dll
09:50:00.0117 0x2f694  StiSvc - ok
09:50:00.0226 0x2f694  [ 957E346CA948668F2496A6CCF6FF82CC, 5C0E0F0E0F2D36E3213885C60BC3B075AFD2257FEB4B8186FC1FE253E0C218AF ] storflt         C:\Windows\system32\DRIVERS\vmstorfl.sys
09:50:00.0226 0x2f694  storflt - ok
09:50:00.0273 0x2f694  [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69CAA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc         C:\Windows\system32\storsvc.dll
09:50:00.0289 0x2f694  StorSvc - ok
09:50:00.0320 0x2f694  [ D5751969DC3E4B88BF482AC8EC9FE019, DAEB50C0045364C75965B0E94744C6E2E1E85C8D00F1E8A5593F3EC780BDD7D9 ] storvsc         C:\Windows\system32\DRIVERS\storvsc.sys
09:50:00.0320 0x2f694  storvsc - ok
09:50:00.0367 0x2f694  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
09:50:00.0382 0x2f694  swenum - ok
09:50:00.0460 0x2f694  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
09:50:00.0491 0x2f694  swprv - ok
09:50:00.0616 0x2f694  [ 04105C8DA62353589C29BDAEB8D88BD8, CC7A3A779A143E09FE5C0AA6795A7B13496C4E121347949CB23F7946EE5E2DED ] SysMain         C:\Windows\system32\sysmain.dll
09:50:00.0741 0x2f694  SysMain - ok
09:50:00.0788 0x2f694  [ FCFB6C552FBC0DA299799CBD50AD9FD4, A2A90829087B1A7F9B57D6F184EB4AE38D10B2986B0DC8D2ACA5EE9412CA3976 ] TabletInputService C:\Windows\System32\TabSvc.dll
09:50:00.0803 0x2f694  TabletInputService - ok
09:50:00.0866 0x2f694  [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF, FF66CBA014F3F8B721088F5AB3D004C1711E7F587CC8D4AC3DCFB45CDB746800 ] TapiSrv         C:\Windows\System32\tapisrv.dll
09:50:00.0897 0x2f694  TapiSrv - ok
09:50:00.0959 0x2f694  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
09:50:00.0975 0x2f694  TBS - ok
09:50:01.0131 0x2f694  [ 2CC3D75488ABD3EC628BBB9A4FC84EFC, 62917CDBC6529D1CC3D7F6E211C717DC44033955749333DCBD052F9BF6639767 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
09:50:01.0256 0x2f694  Tcpip - ok
09:50:01.0490 0x2f694  [ 2CC3D75488ABD3EC628BBB9A4FC84EFC, 62917CDBC6529D1CC3D7F6E211C717DC44033955749333DCBD052F9BF6639767 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
09:50:01.0615 0x2f694  TCPIP6 - ok
09:50:01.0677 0x2f694  [ E64444523ADD154F86567C469BC0B17F, FBE8A1DC28C102068183754F6BF0D03F5D18FD24BEB7E4B57D1CFCEBB13B381F ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
09:50:01.0693 0x2f694  tcpipreg - ok
09:50:01.0724 0x2f694  [ 1875C1490D99E70E449E3AFAE9FCBADF, FFDF03826DAB748D51B53B648B632E79B3CD6238F684FDEA749B4D0F93BE5A77 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
09:50:01.0739 0x2f694  TDPIPE - ok
09:50:01.0755 0x2f694  [ 7551E91EA999EE9A8E9C331D5A9C31F3, C98C97DFD6C7276CD999545A7BC67B56E1BDDFB2886412E9198012322F95A10D ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
09:50:01.0755 0x2f694  TDTCP - ok
09:50:01.0786 0x2f694  [ CB39E896A2A83702D1737BFD402B3542, FA77D98EA3606CA2FCEF0E0949FDE2C32A080B47CAFDE46CE903CA3CBFC5DF35 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
09:50:01.0802 0x2f694  tdx - ok
09:50:01.0833 0x2f694  [ C36F41EE20E6999DBF4B0425963268A5, 9DB789A17DF2C283D6E803EEA15F2BDFC56EE3BE342A5606DD5C179C3550ECA6 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
09:50:01.0833 0x2f694  TermDD - ok
09:50:01.0927 0x2f694  [ A01E50A04D7B1960B33E92B9080E6A94, 0512BF11F2FD62BDBD2B1AA34D509BE82AC374C37B925C8C0ED119C6331930FD ] TermService     C:\Windows\System32\termsrv.dll
09:50:01.0973 0x2f694  TermService - ok
09:50:02.0005 0x2f694  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
09:50:02.0005 0x2f694  Themes - ok
09:50:02.0036 0x2f694  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
09:50:02.0051 0x2f694  THREADORDER - ok
09:50:02.0114 0x2f694  [ 5AD05191DC8B444A7BA4D79B76C42A30, 6166E939A5A240388EBA5AF7FF335DC413F2BBCF74C2E1D310F4BE2A5454A610 ] TPM             C:\Windows\system32\drivers\tpm.sys
09:50:02.0129 0x2f694  TPM - ok
09:50:02.0145 0x2f694  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
09:50:02.0176 0x2f694  TrkWks - ok
09:50:02.0317 0x2f694  [ 41A4C781D2286208D397D72099304133, 447CAAD5589AA499EEE49FBA2CB53210359DB76AFF1DF2F0BD4D92A397037C1D ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
09:50:02.0348 0x2f694  TrustedInstaller - ok
09:50:02.0395 0x2f694  [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242, 9606DACB8CBDAF520282BE8C8F064535767405F138D9E9A215D2C59183E93CC1 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
09:50:02.0395 0x2f694  tssecsrv - ok
09:50:02.0441 0x2f694  [ 3E461D890A97F9D4C168F5FDA36E1D00, 82A8778F404F7AC5102802CF46F279F1E58AC74244665D06FD0C68A8BD887536 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
09:50:02.0457 0x2f694  tunnel - ok
09:50:02.0519 0x2f694  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
09:50:02.0535 0x2f694  uagp35 - ok
09:50:02.0597 0x2f694  [ 09CC3E16F8E5EE7168E01CF8FCBE061A, 81EEAC72A7C4D72666C743DEFF8096FDB465AA1FA8076C60D19CC192846F01CA ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
09:50:02.0629 0x2f694  udfs - ok
09:50:02.0753 0x2f694  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
09:50:02.0769 0x2f694  UI0Detect - ok
09:50:02.0831 0x2f694  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\DRIVERS\uliagpkx.sys
09:50:02.0831 0x2f694  uliagpkx - ok
09:50:02.0878 0x2f694  [ 049B3A50B3D646BAEEEE9EEC9B0668DC, 5774438BBD0976424C20559E14BA2AC158D9FF5D4E1FDC1C9C9F4D7A5CE8C377 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
09:50:02.0878 0x2f694  umbus - ok
09:50:02.0909 0x2f694  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
09:50:02.0925 0x2f694  UmPass - ok
09:50:02.0972 0x2f694  [ 8ECACA5454844F66386F7BE4AE0D7CD1, F3B02A9F598C6A9EFA019F5833959DD1A86FDFDB9FDDF99A8687BBB6211AAD00 ] UmRdpService    C:\Windows\System32\umrdp.dll
09:50:03.0003 0x2f694  UmRdpService - ok
09:50:03.0065 0x2f694  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
09:50:03.0081 0x2f694  upnphost - ok
09:50:03.0159 0x2f694  [ 8455C4ED038EFD09E99327F9D2D48FFA, D166F98EA3D85F7DD6B5258949C186714A17EF89B6FDC9804165F7B4FA811C30 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
09:50:03.0159 0x2f694  usbccgp - ok
09:50:03.0206 0x2f694  [ 04EC7CEC62EC3B6D9354EEE93327FC82, 6CB41D8644618A5F701F6CA91FB65BB94AA83EA48992133B5262DC539B334B2E ] usbcir          C:\Windows\system32\DRIVERS\usbcir.sys
09:50:03.0221 0x2f694  usbcir - ok
09:50:03.0284 0x2f694  [ 1C333BFD60F2FED2C7AD5DAF533CB742, 97AE9CA39482B886FCD063E80B8AB153E1FC1459452657393D8B1745EF69E1C3 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
09:50:03.0284 0x2f694  usbehci - ok
09:50:03.0346 0x2f694  [ EE6EF93CCFA94FAE8C6AB298273D8AE2, CBEE16CEAD02E994F0C2AD77DD8C01CB9964C6B42DE49FF7A787849CD25767B4 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
09:50:03.0377 0x2f694  usbhub - ok
09:50:03.0440 0x2f694  [ A6FB7957EA7AFB1165991E54CE934B74, 1CE83D9E3276AE380F720C7700A17D58A37A2A77FD72DA69EE0C756B88DB3689 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
09:50:03.0455 0x2f694  usbohci - ok
09:50:03.0471 0x2f694  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
09:50:03.0487 0x2f694  usbprint - ok
09:50:03.0565 0x2f694  [ 576096CCBC07E7C4EA4F5E6686D6888F, 8C643F43BD0017979548389C4DB36A1EE872CCF19C86FAE3752A4989173E28ED ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
09:50:03.0565 0x2f694  usbscan - ok
09:50:03.0627 0x2f694  [ D8889D56E0D27E57ED4591837FE71D27, DB1B65EEBFB036086EC3347C1181D9D01FF65870EAEC4A1BA08AF43C35075647 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
09:50:03.0643 0x2f694  USBSTOR - ok
09:50:03.0705 0x2f694  [ 78780C3EBCE17405B1CCD07A3A8A7D72, FBFF3111E22EE0B4BCAFA81F89AAE985135BFF48EEFD130C09B49CCF8A9946B9 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
09:50:03.0705 0x2f694  usbuhci - ok
09:50:03.0814 0x2f694  [ F642A7E4BF78CFA359CCA0A3557C28D7, 12F1ABDD5C871147AFC682BCEF099F319A4F542AC3F0B647D7A5DFE63EDAE061 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
09:50:03.0845 0x2f694  usbvideo - ok
09:50:03.0892 0x2f694  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
09:50:03.0923 0x2f694  UxSms - ok
09:50:04.0001 0x2f694  [ F42309C4191C506B71DB5D1126D26318, 29B0A8889857CEBFA6CBD795D5EECDDFFA04E794BD3C73FC488725B2A160F326 ] VaultSvc        C:\Windows\system32\lsass.exe
09:50:04.0017 0x2f694  VaultSvc - ok
09:50:04.0048 0x2f694  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\DRIVERS\vdrvroot.sys
09:50:04.0064 0x2f694  vdrvroot - ok
09:50:04.0142 0x2f694  [ 8C4E7C49D3641BC9E299E466A7F8867D, 4F2E742EFE2DE47EE187B3BCDFDCB525FE484B74700A226D7894F9633F957AFA ] vds             C:\Windows\System32\vds.exe
09:50:04.0204 0x2f694  vds - ok
09:50:04.0251 0x2f694  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
09:50:04.0251 0x2f694  vga - ok
09:50:04.0298 0x2f694  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
09:50:04.0298 0x2f694  VgaSave - ok
09:50:04.0376 0x2f694  [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583, 33DF8F7C9A3176175113CA10D69FAF17A5412C055943F14DDC9923531FADB82D ] vhdmp           C:\Windows\system32\DRIVERS\vhdmp.sys
09:50:04.0391 0x2f694  vhdmp - ok
09:50:04.0438 0x2f694  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\DRIVERS\viaagp.sys
09:50:04.0454 0x2f694  viaagp - ok
09:50:04.0485 0x2f694  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys
09:50:04.0485 0x2f694  ViaC7 - ok
09:50:04.0563 0x2f694  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\DRIVERS\viaide.sys
09:50:04.0563 0x2f694  viaide - ok
09:50:04.0641 0x2f694  [ 830E634EA7B8711A3C242A19840116CE, 5DDE4CFB6FDAFE22EB020F1854563522A557A3A049DD846FCFC77E9593A3D03B ] VKBD            C:\Windows\system32\DRIVERS\virkbd.sys
09:50:04.0657 0x2f694  VKBD - ok
09:50:04.0719 0x2f694  [ 379B349F65F453D2A6E75EA6B7448E49, F52B1B3AE9F5D38B45C889A7B1EBE59533C17E73678D355D1466B5EF3338BF16 ] vmbus           C:\Windows\system32\DRIVERS\vmbus.sys
09:50:04.0735 0x2f694  vmbus - ok
09:50:04.0781 0x2f694  [ EC2BBAB4B84D0738C6C83D2234DC36FE, 8BA2FA187DAC6994D5A29897AE5F46E6424FB53C827553E0BB148E31825D6676 ] VMBusHID        C:\Windows\system32\DRIVERS\VMBusHID.sys
09:50:04.0781 0x2f694  VMBusHID - ok
09:50:04.0828 0x2f694  [ 384E5A2AA49934295171E499F86BA6F3, C79271F98506392422325C075144F45436F9979FE1E002B57F9426F3DA96CEF0 ] volmgr          C:\Windows\system32\DRIVERS\volmgr.sys
09:50:04.0828 0x2f694  volmgr - ok
09:50:04.0906 0x2f694  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
09:50:04.0937 0x2f694  volmgrx - ok
09:50:04.0984 0x2f694  [ 58DF9D2481A56EDDE167E51B334D44FD, C77D7BE83CF1C0DEC80429C5A519E794FD2E8C1E6DAD6F5C92B5EB5694CEB8EA ] volsnap         C:\Windows\system32\DRIVERS\volsnap.sys
09:50:05.0000 0x2f694  volsnap - ok
09:50:05.0062 0x2f694  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
09:50:05.0078 0x2f694  vsmraid - ok
09:50:05.0234 0x2f694  [ 7EA2BCD94D9CFAF4C556F5CC94532A6C, 7CD6637BE0A08E3B0F9991D79751DCA8AEC9224B83301821DAA29C9F42B7A9E3 ] VSS             C:\Windows\system32\vssvc.exe
09:50:05.0359 0x2f694  VSS - ok
09:50:05.0421 0x2f694  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
09:50:05.0421 0x2f694  vwifibus - ok
09:50:05.0483 0x2f694  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
09:50:05.0483 0x2f694  vwififlt - ok
09:50:05.0561 0x2f694  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
09:50:05.0608 0x2f694  W32Time - ok
09:50:05.0671 0x2f694  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
09:50:05.0686 0x2f694  WacomPen - ok
09:50:05.0764 0x2f694  [ 692A712062146E96D28BA0B7D75DE31B, B6D260272330E0C8EBFAD8F09212F48F1EFED42E6BD3F29A5780D0B691D55B34 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
09:50:05.0780 0x2f694  WANARP - ok
09:50:05.0811 0x2f694  [ 692A712062146E96D28BA0B7D75DE31B, B6D260272330E0C8EBFAD8F09212F48F1EFED42E6BD3F29A5780D0B691D55B34 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
09:50:05.0811 0x2f694  Wanarpv6 - ok
09:50:05.0951 0x2f694  [ 7790B77FE1E5EE47DCC66247095BB4C9, FFB541F83CDE32E65007D41217C2F46CDDF68121E2846B638EAB620ACA940B05 ] wbengine        C:\Windows\system32\wbengine.exe
09:50:06.0029 0x2f694  wbengine - ok
09:50:06.0076 0x2f694  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
09:50:06.0092 0x2f694  WbioSrvc - ok
09:50:06.0139 0x2f694  [ D0F88AA11EE1A62BCC6D6A8A7783CA11, 3DBC1806E6F8CD58A9E93EA2A0CDC83C1A90E37B5E385209E4D9A0C81922F447 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
09:50:06.0154 0x2f694  wcncsvc - ok
09:50:06.0201 0x2f694  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
09:50:06.0217 0x2f694  WcsPlugInService - ok
09:50:06.0279 0x2f694  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
09:50:06.0279 0x2f694  Wd - ok
09:50:06.0357 0x2f694  [ 9950E3D0F08141C7E89E64456AE7DC73, DE4B96812B305A63F5874BBF2DC40354FB45B3D96C1D33436E677099760BA448 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
09:50:06.0388 0x2f694  Wdf01000 - ok
09:50:06.0435 0x2f694  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiServiceHost  C:\Windows\system32\wdi.dll
09:50:06.0451 0x2f694  WdiServiceHost - ok
09:50:06.0482 0x2f694  [ 46EF9DC96265FD0B423DB72E7C38C2A5, 43801A51FB0E45CFFC73DF6441B54A75FC2FEAF5E0424DFE7AB04FC26CF6CD16 ] WdiSystemHost   C:\Windows\system32\wdi.dll
09:50:06.0497 0x2f694  WdiSystemHost - ok
09:50:06.0607 0x2f694  [ D87C7D2C517F82A5AB7A73E203063D9E, 8861AB4ECEDAE801008BE0406FCB19418AA2864E89D0776B94E25773E6DB5E88 ] WebClient       C:\Windows\System32\webclnt.dll
09:50:06.0638 0x2f694  WebClient - ok
09:50:06.0669 0x2f694  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
09:50:06.0700 0x2f694  Wecsvc - ok
09:50:06.0763 0x2f694  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
09:50:06.0794 0x2f694  wercplsupport - ok
09:50:06.0856 0x2f694  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
09:50:06.0887 0x2f694  WerSvc - ok
09:50:06.0981 0x2f694  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
09:50:06.0981 0x2f694  WfpLwf - ok
09:50:07.0012 0x2f694  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
09:50:07.0028 0x2f694  WIMMount - ok
09:50:07.0168 0x2f694  [ 3FAE8F94296001C32EAB62CD7D82E0FD, 180FAECC426CF8F46700C855022E5865D528B1A20686F96D11080AB2FE2E0430 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
09:50:07.0215 0x2f694  WinDefend - ok
09:50:07.0246 0x2f694  WinHttpAutoProxySvc - ok
09:50:07.0355 0x2f694  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
09:50:07.0371 0x2f694  Winmgmt - ok
09:50:07.0745 0x2f694  [ C4F5D3901D1B41D602DDC196E0B95B51, 20FF2A9DEE3ECBFB163DFA62A407E30ED49F609EF46936F286C2A08A24EA3E7C ] WinRM           C:\Windows\system32\WsmSvc.dll
09:50:07.0855 0x2f694  WinRM - ok
09:50:08.0057 0x2f694  [ 30FC6E5448D0CBAAA95280EEEF7FEDAE, 04374450882504D9031951F4E9317E5A128EBA5A22A3555ACD28BC742861AF9C ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
09:50:08.0057 0x2f694  WinUsb - ok
09:50:08.0245 0x2f694  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
09:50:08.0369 0x2f694  Wlansvc - ok
09:50:08.0463 0x2f694  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
09:50:08.0463 0x2f694  WmiAcpi - ok
09:50:08.0525 0x2f694  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
09:50:08.0541 0x2f694  wmiApSrv - ok
09:50:08.0697 0x2f694  [ 77FBD400984CF72BA0FC4B3489D65F74, 9AA404F17177FEB43A9EA1A86061B452E7C4A93C873E61B68269047519CD433E ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
09:50:08.0806 0x2f694  WMPNetworkSvc - ok
09:50:08.0884 0x2f694  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
09:50:08.0900 0x2f694  WPCSvc - ok
09:50:08.0947 0x2f694  [ B7F658A2EBC07129538AD9AB35212637, 86774A760189E4B126C972A778F890C00C1C30EDD28044DD43B40644A8778B4D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
09:50:08.0962 0x2f694  WPDBusEnum - ok
09:50:09.0040 0x2f694  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
09:50:09.0040 0x2f694  ws2ifsl - ok
09:50:09.0087 0x2f694  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
09:50:09.0118 0x2f694  wscsvc - ok
09:50:09.0134 0x2f694  WSearch - ok
09:50:09.0399 0x2f694  [ FC3EC24FCE372C89423E015A2AC1A31E, 8D028182CF83667D3E4D148979972D208FA6D9B8540EE47A0A7831B770ECD257 ] wuauserv        C:\Windows\system32\wuaueng.dll
09:50:09.0727 0x2f694  wuauserv - ok
09:50:09.0836 0x2f694  [ 6F9B6C0C93232CFF47D0F72D6DB1D21E, C685A458951820ED0F09E6197251CE6FC55AAB75D4FBEFF2992805309239A47A ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
09:50:09.0851 0x2f694  WudfPf - ok
09:50:09.0914 0x2f694  [ F91FF1E51FCA30B3C3981DB7D5924252, D7052B58F22638CA8B59C6FD7408D6D6DD1C33910912CACC05C133472CE0DDCE ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
09:50:09.0929 0x2f694  WUDFRd - ok
09:50:09.0992 0x2f694  [ DDEE3682FE97037C45F4D7AB467CB8B6, D5A8F07AF4EDD9D7E17FEC6222D187E2981C177A479511E407756E0E5CB8D387 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
09:50:10.0007 0x2f694  wudfsvc - ok
09:50:10.0054 0x2f694  [ FF2D745B560F7C71B31F30F4D49F73D2, B2FBF7E5F58E34AC64FE6CF65800F1F07939279203BDE89375FAC92B884A4F37 ] WwanSvc         C:\Windows\System32\wwansvc.dll
09:50:10.0070 0x2f694  WwanSvc - ok
09:50:10.0210 0x2f694  ================ Scan global ===============================
09:50:10.0241 0x2f694  [ 9A595DF601070DA78C40481120DD2C06, 4C2D6216F212DE9346339ED29152962A39E4435E70F18DD655156727E70818F6 ] C:\Windows\system32\basesrv.dll
09:50:10.0304 0x2f694  [ 827E4F75901CA3F990B1487D3301841E, A0B17C83D52DB95EDBA81C6ABD78E5E4E3BB65CB57F977B07172A96D4C2B743B ] C:\Windows\system32\winsrv.dll
09:50:10.0351 0x2f694  [ 827E4F75901CA3F990B1487D3301841E, A0B17C83D52DB95EDBA81C6ABD78E5E4E3BB65CB57F977B07172A96D4C2B743B ] C:\Windows\system32\winsrv.dll
09:50:10.0429 0x2f694  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
09:50:10.0522 0x2f694  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe
09:50:10.0553 0x2f694  [ Global ] - ok
09:50:10.0553 0x2f694  ================ Scan MBR ==================================
09:50:10.0569 0x2f694  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
09:50:11.0614 0x2f694  \Device\Harddisk0\DR0 - ok
09:50:11.0614 0x2f694  ================ Scan VBR ==================================
09:50:11.0630 0x2f694  [ B2AB26D4AF84611C852CFF7B16A46AC6 ] \Device\Harddisk0\DR0\Partition1
09:50:11.0630 0x2f694  \Device\Harddisk0\DR0\Partition1 - ok
09:50:11.0677 0x2f694  [ 67B37186E4E8049059E7C91B1F12256B ] \Device\Harddisk0\DR0\Partition2
09:50:11.0692 0x2f694  \Device\Harddisk0\DR0\Partition2 - ok
09:50:11.0692 0x2f694  ================ Scan generic autorun ======================
09:50:11.0848 0x2f694  [ EA6EADF6314E43783BA8EEE79F93F73C, 1A4BC2D8DFBDC37AF85C73DEE76A6EE901EBA188D43856BD2FFA96B79A126F73 ] C:\Program Files\Windows Sidebar\Sidebar.exe
09:50:11.0942 0x2f694  Sidebar - ok
09:50:11.0989 0x2f694  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
09:50:12.0004 0x2f694  mctadmin - ok
09:50:12.0129 0x2f694  [ EA6EADF6314E43783BA8EEE79F93F73C, 1A4BC2D8DFBDC37AF85C73DEE76A6EE901EBA188D43856BD2FFA96B79A126F73 ] C:\Program Files\Windows Sidebar\Sidebar.exe
09:50:12.0285 0x2f694  Sidebar - ok
09:50:12.0347 0x2f694  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
09:50:12.0363 0x2f694  mctadmin - ok
09:50:12.0379 0x2f694  Prun - ok
09:50:12.0457 0x2f694  CCleaner Smart Cleaning - ok
09:50:12.0519 0x2f694  brazqxhu - ok
09:50:12.0519 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:13.0533 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:14.0547 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:15.0561 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:16.0575 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:17.0589 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:18.0603 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:19.0617 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:20.0631 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:21.0645 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:22.0659 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:23.0673 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:24.0687 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:25.0701 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:26.0715 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:27.0729 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:28.0743 0x2f694  Waiting for KSN requests completion. In queue: 302
09:50:30.0365 0x2f694  Win FW state via NFP2: enabled ( trusted )
09:50:30.0490 0x2f694  ============================================================
09:50:30.0490 0x2f694  Scan finished
09:50:30.0490 0x2f694  ============================================================
09:50:30.0553 0x56f0c  Detected object count: 0
09:50:30.0553 0x56f0c  Actual detected object count: 0
09:51:37.0789 0x42848  Deinitialize success

[Aega18]

Aquí los informes del Malwarebytes Anti-Rootkit…:

Empezaré por el mbar-log-2021-06-15 (19-29-45).:

Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2021.06.15.11
  rootkit: v2021.06.15.11

Windows 7 x86 NTFS
Internet Explorer 8.0.7600.16385
Usuario :: MARLE-PC [administrator]

15/06/2021 19:29:45
mbar-log-2021-06-15 (19-29-45).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 143551
Time elapsed: 1 hour(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Aquí el system-log…:

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.10.3.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7600 Windows 7 x86

Account is Administrative

Internet Explorer version: 8.0.7600.16385

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 1.662000 GHz
Memory total: 1062584320, free: 144388096

Downloaded database version: v2021.06.15.11
Downloaded database version: v2021.06.15.11
Downloaded database version: v2018.01.20.01
=======================================
Initializing...
Driver version: 4.3.0.15
------------ Kernel report ------------
     06/15/2021 19:28:58
------------ Loaded modules -----------
\SystemRoot\system32\ntkrnlpa.exe
\SystemRoot\system32\halmacpi.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\DRIVERS\ACPI.sys
\SystemRoot\system32\DRIVERS\WMILIB.SYS
\SystemRoot\system32\DRIVERS\msisadrv.sys
\SystemRoot\system32\DRIVERS\pci.sys
\SystemRoot\system32\DRIVERS\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\DRIVERS\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\atapi.sys
\SystemRoot\system32\DRIVERS\ataport.SYS
\SystemRoot\system32\DRIVERS\msahci.sys
\SystemRoot\system32\DRIVERS\PCIIDEX.SYS
\SystemRoot\system32\DRIVERS\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\DRIVERS\vmstorfl.sys
\SystemRoot\system32\DRIVERS\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\igdkmd32.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\Rt86win7.sys
\SystemRoot\system32\DRIVERS\NETwsn00.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\usbuhci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\System32\Drivers\ipmlebl.sys
\SystemRoot\system32\DRIVERS\virkbd.sys
\SystemRoot\system32\drivers\tpm.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_msahci.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\WUDFRd.sys
\SystemRoot\System32\Drivers\mbamswissarmy.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\2521D3F9.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\gdi32.dll
\Windows\System32\lpk.dll
\Windows\System32\ws2_32.dll
\Windows\System32\imagehlp.dll
\Windows\System32\urlmon.dll
\Windows\System32\wininet.dll
\Windows\System32\sechost.dll
\Windows\System32\kernel32.dll
\Windows\System32\oleaut32.dll
\Windows\System32\Wldap32.dll
\Windows\System32\comdlg32.dll
\Windows\System32\ole32.dll
\Windows\System32\msvcrt.dll
\Windows\System32\normaliz.dll
\Windows\System32\clbcatq.dll
\Windows\System32\psapi.dll
\Windows\System32\difxapi.dll
\Windows\System32\setupapi.dll
\Windows\System32\imm32.dll
\Windows\System32\iertutil.dll
\Windows\System32\msctf.dll
\Windows\System32\shlwapi.dll
\Windows\System32\nsi.dll
\Windows\System32\rpcrt4.dll
\Windows\System32\usp10.dll
\Windows\System32\advapi32.dll
\Windows\System32\shell32.dll
\Windows\System32\user32.dll
\Windows\System32\KernelBase.dll
\Windows\System32\crypt32.dll
\Windows\System32\wintrust.dll
\Windows\System32\devobj.dll
\Windows\System32\cfgmgr32.dll
\Windows\System32\comctl32.dll
\Windows\System32\msasn1.dll
----------- End -----------
Done!

Scan started
Database versions:
  main:    v2021.06.15.11
  rootkit: v2021.06.15.11

<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffffffff84337460, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff84338020, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff84337460, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xffffffff84252b88, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffffffff83e6c030, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 852C1

Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 204800
    Partition is bootable
    Partition file system is NTFS

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848  Numsec = 624932864
    Partition is not bootable
    Partition file system is NTFS

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
    Partition is not bootable

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
    Partition is not bootable

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Done!
Physical Sector Size: 0
Drive: 1, DevicePointer: 0xffffffff80df17c8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff80df14b0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff80df17c8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xffffffff80dd6cb8, DeviceName: \Device\0000006d\, DriverName: \Driver\USBSTOR\
------------ End ----------
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-C319DC722F96F7942C8380BE950929695AF61C2A.bin.79" is compressed (flags = 1)
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-C319DC722F96F7942C8380BE950929695AF61C2A.bin.7C" is compressed (flags = 1)
File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-C319DC722F96F7942C8380BE950929695AF61C2A.bin.83" is compressed (flags = 1)
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-206848-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

[chicloi]

@Aega18

TDSSKiller.:

Ha realizado correctamente su función, no ha encontrado ninguna amenaza.

[chicloi]

@Aega18

Aquí el system-log…:

Ha realizado correctamente su función ya que ha encontrado algunas amenzas y las ha eliminado.

[chicloi]

@Aega18

Por otra parte necesito que me aclares una cuestión, tengo unas carpetas que tienen unos elementos extraños que considero son virus ya que aún sigue estando el “sitool.exe” que según investigué en internet es un virus que genera muchos elementos más.:

En la imagen estan las carpetas que indicaré acontinuación con sus respectivos elementos internos.:

1.eEUGePboYEXV: En esta carpeta están los elementos: Attesa (Audio MPEG-4) 922KB, Copriva (Imagen TIFF) 116KB, Pensai.swf (Archivo SWF) 637KB, y Resiste (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 23KB.

2.FZnAWBQnrpYLlbz: En esta carpeta están los elementos: Carne (Microsoft Office Outlook Personal Folders) 117KB, Fina (Microsoft Office Outlook Personal Folders) 922KB, y Scoprirvi (Microsoft Office Outlook Personal Folders) 618KB.

3.Obsidium: Esta carpeta dice que pesa 0 Bytes y contiene otra carpeta llamada “{EAF3AA4B-98B402DE-21B3A957-A3EAA5C4}” la cual está vacía pero es extraño parece una llave o algo así.

4.SysInfoTool: En esta carpeta están los elementos: data (Archivo) 1KB, y sitool.exe (XML Configuration File) 1KB. Cabe destacar que el “sitool.exe” tiene fecha del 2017 pero el resto de los demas elementos en las otras carpetas son de marzo de este año, ese mismo “sitool.exe” lo pasé por la página “VirusTotal.com ” y ningún resultado negativo fue arrojado, pero si escribes “sitool.exe” en Google de una sale que es un virus.

5.ZpdTnKuJHWnQKbM: En esta última Carpeta están los elementos: Cerulea (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 736KB, Dare (Rich Text Format) 12KB, Piu.vsdm (Archivo VSDM) 116KB, y Uso (Secuencia MIDI) 922KB.

Te comento, en cuanto a las carpetas que me mencionas a continuación te dejo las instrucciones a seguir:

En cuanto a esta carpeta que se refleja a continuación puedes borrar dicha carpeta entera ya que pertenece a un parche para el programa Yamicsoft 5in1 por lo tanto puedes borrar por completo esta carpeta:

3. Obsidium: Esta carpeta dice que pesa 0 Bytes y contiene otra carpeta llamada “{EAF3AA4B-98B402DE-21B3A957-A3EAA5C4}” la cual está vacía pero es extraño parece una llave o algo así. (Borrar dicha carpeta; es un parche para el programa:(Lo que he podido encontrar sobre esta carpeta es que pertenece a un Parche para el programa: “Yamicsoft 5in1”) por lo tanto (puedes “Borrar” esta carpeta sin ningún problema).

En cuando a la carpeta que se refleja a continuación analízala con la página Web Virus Total que de dejo a continuación y me mandas el Informe completo con lo que se refleje en dicha página de VirusTotal:

4. SysInfoTool: En esta carpeta están los elementos: data (Archivo) 1KB, y sitool.exe (XML Configuration File) 1KB. Cabe destacar que el “sitool.exe” tiene fecha del 2017 pero el resto de los demas elementos en las otras carpetas son de marzo de este año, ese mismo “sitool.exe”.

Aquí te dejo la Url: VirusTotal: https://www.virustotal.com/gui/

En cuando a la carpeta que se refleja a continuación analízala con la página Web Virus Total que de dejo a continuación y me mandas el Informe completo con lo que se refleje en dicha página de VirusTotal:

5. ZpdTnKuJHWnQKbM: En esta última Carpeta están los elementos: Cerulea (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 736KB, Dare (Rich Text Format) 12KB, Piu.vsdm (Archivo VSDM) 116KB, y Uso (Secuencia MIDI) 922KB.

Aquí te dejo la Url VirusTotal: https://www.virustotal.com/gui/

En cuanto a estas "Dos Carpetas" las he estado revisando y no son virus pero para asegurarnos analiza cada una de estas dos carpetas por la página web de VirusTotal, es decir, por orden, primero que analice una carpeta por completo y cuando acabe de analizar por completo dichas carpetas después que analice la otra carpeta por completo y me mandas dicho "Informe" de ambas carpetas:

1. eEUGePboYEXV: En esta carpeta están los elementos: Attesa (Audio MPEG-4) 922KB, Copriva (Imagen TIFF) 116KB, Pensai.swf (Archivo SWF) 637KB, y Resiste (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 23KB.

2. FZnAWBQnrpYLlbz: En esta carpeta están los elementos: Carne (Microsoft Office Outlook Personal Folders) 117KB, Fina (Microsoft Office Outlook Personal Folders) 922KB, y Scoprirvi (Microsoft Office Outlook Personal Folders) 618KB.

Aquí te dejo la Url: "VirusTotal": https://www.virustotal.com/gui/

Mándame dichos Informes de estas dos carpetas.

Cuando terminen de Analizar "TODAS" las carpetas que te he puesto aquí me mandas los "Informes" de cada una de ellas.

[Aega18]

@chicloi

En cuando a la carpeta que se refleja a continuación analízala con la página Web Virus Total que de dejo a continuación y me mandas el Informe completo con lo que se refleje en dicha página de VirusTotal:

4. SysInfoTool: En esta carpeta están los elementos: data (Archivo) 1KB, y sitool.exe (XML Configuration File) 1KB. Cabe destacar que el “sitool.exe” tiene fecha del 2017 pero el resto de los demas elementos en las otras carpetas son de marzo de este año, ese mismo “sitool.exe”.

Resultado del elemento “data”.: VirusTotal

"sitool.exe".: VirusTotal

@chicloi

En cuando a la carpeta que se refleja a continuación analízala con la página Web Virus Total que de dejo a continuación y me mandas el Informe completo con lo que se refleje en dicha página de VirusTotal:

5. ZpdTnKuJHWnQKbM: En esta última Carpeta están los elementos: Cerulea (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 736KB, Dare (Rich Text Format) 12KB, Piu.vsdm (Archivo VSDM) 116KB, y Uso (Secuencia MIDI) 922KB.

"Cerulea".: VirusTotal

"Dare".: VirusTotal

"Piu".: VirusTotal

"Uso".: VirusTotal

@chicloi

En cuanto a estas "Dos Carpetas" las he estado revisando y no son virus pero para asegurarnos analiza cada una de estas dos carpetas por la página web de VirusTotal, es decir, por orden, primero que analice una carpeta por completo y cuando acabe de analizar por completo dichas carpetas después que analice la otra carpeta por completo y me mandas dicho "Informe" de ambas carpetas:

1. eEUGePboYEXV: En esta carpeta están los elementos: Attesa (Audio MPEG-4) 922KB, Copriva (Imagen TIFF) 116KB, Pensai.swf (Archivo SWF) 637KB, y Resiste (Diapositiva habilitada para macros de Microsoft Office PowerPoint) 23KB.

"Attesa".: VirusTotal

"Copriva".: VirusTotal

"Pensai.swf".: VirusTotal

"Resiste".: VirusTotal

Y la carpeta.:

@chicloi

2. FZnAWBQnrpYLlbz: En esta carpeta están los elementos: Carne (Microsoft Office Outlook Personal Folders) 117KB, Fina (Microsoft Office Outlook Personal Folders) 922KB, y Scoprirvi (Microsoft Office Outlook Personal Folders) 618KB.

"Carne".: VirusTotal

"Fina".: VirusTotal

"Scoprivi".: VirusTotal

[chicloi]

Estoy en proceso de revisión de dichas carpetas, quiero asegurarme de una cosa antes. Sigue estos pasos:

PASO 1: Descargar e Instalar el siguiente programa en el "Escritorio" de su ordenador: “RogueKiller” pero "NO" inicie dicho programa.

PASO 2: "Manual de Uso" del programa: "RogueKiller" y siga los pasos al pie de la letra y en el orden establecido:

Una vez aclarado dicho procedimiento vamos a realizar dichos pasos:

PASO 1: Url Descarga programa: "Rogue Killer": (Descárgue dicho programa en el: "Escritorio" de su ordenador), aquí la Url de Descarga: https://www.adlice.com/download-start/?app=roguekiller&type=setup (Si dicho programa le pide que existe una nueva actualización instale dicha actualización y siga dichos procesos de instalación).

PASO 2: "Manual de Uso" del programa: “RogueKiller” y siga los pasos al pie de la letra y en el orden establecido:

• Desactive "TODOS" los "Sistemas de Seguridad" que tiene instalados en su ordenador. ("Antivirus", "MalwareByte AntimalwareByte" adsolutamente "TODOS"…)

• Configure su pantalla para que su ordenador "NO" se "Apague" y "NO" se ponga en "Estado de Suspensión" ya que podría interferir en que no se pase correctamente dicho programa

• Inicie el programa: RogueKiller desde su "Escritorio" de su ordenador con "Derechos de Administrador". (Si dicho programa le pide que existe una nueva actualización instale dicha actualización y siga dichos procesos de instalación)

• Aparecerá la siguiente pantalla, click donde pone: Ajustes y cliclk en la pestaña donde pone: General y dejar habilitados "ESPECÍFICAMENTE EN DICHO ORDEN" las pestañas que están "ESTRICTAMENTE" reflejadas en dicha imagen y "NO" marcar las que no estén reflejadas en dicha imagen:

• Realizado dicho procedimiento click en donde pone la pestaña: Ajustes y click en la pestaña que pone: Analizar y dejar habilitadas las siguientes pestañas que se reflejan en dicha imagen:

• Click en la pestña que pone: Ajustes y click en la pestaña que pone: Protección y dejar habilitado EXCLUSIVAMENTE Y EXTRICTAMENTE las opciones que se reflejan en la siguientes pestañas, tal y como se refleja en dicha imagen:

Click en la pestaña que pone: Análisis y click en la pestaña que pone: Personalizar tal y como se refleja en dicha imagen:

• Seguidamente aparecerá la siguiente pantalla, dejar marcadas "TODAS" las opciones que se te reflejen a tí, tal y como se muestra en la siguiente imagen y realizado dicho procedimiento, click en la pestaña que pone: Iniciar tal y como se muestra en dicha imagen:

• Comenzará el análisis en busca de Infecciones. Esperar a que se complete el Análisis en busca de Virus y/o Amenazas e Infecciones por completo.

• Una vez finalizado dicho Análisis por completo en busca de Infecciones "Eliminar" ó "Cuarentena" o algo similar para que se eliminen "TODAS" las amenazas que haya detectado. Si dicho programa te pide reiniciar el ordenador para poder eliminar todas las amenazas y/o Infecciones ó Virus que encuentre le dices que SI. Si dicho programa no te dice nada de reiniciar el ordenador para eliminar dichas amenazas y/o Infecciones ó virus que encuentre cuando se haya realizado dicho procedimiento entonces "NO" lo reinicies

• Realizado dicho procedimiento por completo siga estos pasos para poder obtener dicho Informe de dicho programa que genere para poder enviármelo previamente:

• Clik en la pestaña que pone: Historial y clikea en donde pone: Informes y fijarse en la fecha de Análisis de dicho Informe y click sobre ello y click en la pestaña que pone: Abrir tal y como se muestra en la siguiente imagen:

• Aparecerá la siguiente imagen, click donde pone: Exportar y click en la opción que pone: Archivo texto le saldrá donde desea guardar el archivo y guárdelo en el Escritorio de su ordenador

• Valla al Escritorio de su ordenador y envíeme dicho "Informe"

Realizado dicho paso active de nuevo “TODOS” los “Sistemas de Seguridad” en su ordenador ("Antivirus", "Malwarebyte AntimalwareByte"… "TODOS".)