Jump to content

League of Angels popup


Recommended Posts

Hi,

Ive noticed that i get the same 'league of angels' popup on sites which would usually have none. It seems to be quite random and occuring for 4+ days, so i suspect i have adware. I searched on the internet, and found alot of sites claiming to help with removal, however their manual removal advice was always very vague and not practical, and all written in the same style (probably the sites were bogus).

Im still in the process of deleting some programmes that may be causing the infection (there are no obvious candidates), but in the meantime i have tried Malware bytes, Hitman pro, adware cleaner, combofix, jrt, and the following day the ad always returns. In fact, Malware bytes or Hitman never find anything on the scans. Adware remover always suggests delted the 'prefs file' in appdata>Firefox>roaming, but i think firefox automatically creates this on opening.  I have also reinstalled/reset firefox, updated pluggins, ad disabled system restore....not sure how esle to proceed.

Is it a harmless popup? Firefox vulnerability? Or something concerning on the computer?

Thanks a lot for your help in advance

 

Link to post
Share on other sites

  • Replies 65
  • Created
  • Last Reply

Top Posters In This Topic

Hello and post-32477-1261866970.gif

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Run Malwarebytes,  Open > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick scan

Make sure that everything is checked, and click Remove Selected on any found items.

 

Post the produced log

 

Next,

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.


Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Let me see those logs..

 

Kevin

Link to post
Share on other sites

Hello Kevin,

Thanks for your help.

Malwarebytes scan:


----------------------------------------------------
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.25.02

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16843
John :: LAPTOP [administrator]

25/03/2014 07:46:29
mbam-log-2014-03-25 (07-46-29).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 226737
Time elapsed: 4 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
---------------------------------------------------------

Farbar scan:


The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Trusteer Ltd.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Trusteer Ltd.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(WinZip Computing International, LLC) C:\Program Files\File Association Helper\FAHWindow.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIIME.EXE
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(F-Secure Corporation) C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSLAUNCH.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [sysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-22] (IDT, Inc.)
HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [FAHConsole] - C:\Program Files\File Association Helper\FAHConsole.exe [216248 2013-09-26] (WinZip Computing International, LLC)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2185032 2009-10-19] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [HP CoolSense] - C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [F-Secure Hoster (44515)] - C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe [183864 2012-11-26] (F-Secure Corporation)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE [310992 2012-10-18] (F-Secure Corporation)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE [283232 2012-11-02] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1935344830-3333155245-2583117102-1001\...\Run: [steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-1935344830-3333155245-2583117102-1001\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE [283232 2012-11-02] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1935344830-3333155245-2583117102-1001\...\Run: [sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1935344830-3333155245-2583117102-1001\...\Run: [skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPNOT13/2
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPNOT13/2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT13/2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPNOT13/2
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {C5366604-2FED-4B35-9AEB-30FC4DA8F5B8} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - {C5366604-2FED-4B35-9AEB-30FC4DA8F5B8} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} -  No File
Handler-x32: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files (x86)\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\vjg0qiq9.default-1395655567045
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\IPSFFPlgn\

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748608 2014-03-03] (Microsoft Corporation)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)
R2 fshoster; C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe [183864 2012-11-26] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE [208592 2012-10-18] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe [60352 2013-09-03] (F-Secure Corporation)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-10-24] ()
R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1444120 2014-03-19] (Trusteer Ltd.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2014-03-04] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69480 2014-03-04] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-09-03] ()
R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [42672 2013-09-03] ()
R3 fsni; C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [14032 2012-10-18] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 pfc; C:\Windows\SysWOW64\drivers\pfc.sys [10368 2004-04-01] (Padus, Inc.)
R1 RapportCerberus_59849; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys [606672 2013-11-14] ()
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [282712 2014-03-19] (Trusteer Ltd.)
R0 RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [273592 2014-03-19] (Trusteer Ltd.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [316312 2014-03-19] (Trusteer Ltd.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [397848 2014-03-19] (Trusteer Ltd.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-06-27] (Hewlett-Packard Development Company, L.P.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-25 07:53 - 2014-03-25 07:56 - 00018804 _____ () C:\Users\John\Downloads\FRST.txt
2014-03-25 07:53 - 2014-03-25 07:54 - 00029732 _____ () C:\Users\John\Downloads\Addition.txt
2014-03-25 07:52 - 2014-03-25 07:56 - 00000000 ____D () C:\FRST
2014-03-25 07:43 - 2014-03-25 07:43 - 02157056 _____ (Farbar) C:\Users\John\Downloads\FRST64.exe
2014-03-24 21:42 - 2014-03-24 21:42 - 00000552 _____ () C:\Windows\PFRO.log
2014-03-24 21:33 - 2014-03-24 21:33 - 00019724 _____ () C:\ComboFix.txt
2014-03-24 21:07 - 2011-06-26 06:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-24 21:07 - 2010-11-07 17:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-24 21:07 - 2009-04-20 04:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-24 21:07 - 2000-08-31 00:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-24 21:03 - 2014-03-24 21:33 - 00000000 ____D () C:\Qoobox
2014-03-24 21:02 - 2014-03-24 21:31 - 00000000 ____D () C:\Windows\erdnt
2014-03-24 21:01 - 2014-03-24 21:02 - 05192353 ____R (Swearware) C:\Users\John\Downloads\ComboFix.exe
2014-03-24 20:56 - 2014-03-24 20:56 - 12589848 _____ (Malwarebytes Corp.) C:\Users\John\Downloads\mbar-1.07.0.1009.exe
2014-03-24 20:54 - 2014-03-24 20:54 - 00001063 _____ () C:\Users\John\Desktop\JRT.txt
2014-03-24 20:32 - 2014-03-24 20:32 - 00000030 _____ () C:\Users\John\AppData\Roaming\mbam.context.scan
2014-03-24 10:06 - 2014-03-24 10:06 - 00000000 ____D () C:\Users\John\Desktop\Old Firefox Data
2014-03-24 09:56 - 2014-03-24 21:41 - 00000000 ____D () C:\AdwCleaner
2014-03-24 09:36 - 2014-03-24 09:37 - 01950720 _____ () C:\Users\John\Downloads\AdwCleaner.exe
2014-03-24 09:32 - 2014-03-24 09:32 - 04134240 _____ (Kaspersky Lab ZAO) C:\Users\John\Downloads\tdsskiller.exe
2014-03-24 09:13 - 2014-03-24 09:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Users\John\AppData\Roaming\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Users\John\AppData\Local\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-24 08:34 - 2014-03-24 08:34 - 01038974 _____ (Thisisu) C:\Users\John\Downloads\JRT.exe
2014-03-24 08:08 - 2014-03-24 08:09 - 00000000 ____D () C:\Users\John\Desktop\cccleaner reg files edit
2014-03-24 07:53 - 2014-03-24 07:53 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-24 07:53 - 2014-03-24 07:53 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-24 07:53 - 2014-03-24 07:53 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-24 07:51 - 2014-03-24 07:52 - 04765152 _____ (Piriform Ltd) C:\Users\John\Downloads\ccsetup411.exe
2014-03-22 21:56 - 2014-03-22 21:56 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2014-03-22 21:45 - 2014-03-22 21:45 - 00001897 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-22 21:43 - 2014-03-22 21:43 - 10820032 _____ (SurfRight B.V.) C:\Users\John\Downloads\HitmanPro_x64.exe
2014-03-22 21:42 - 2014-03-22 21:42 - 09988304 _____ (SurfRight B.V.) C:\Users\John\Downloads\HitmanPro.exe
2014-03-22 17:15 - 2014-03-22 17:15 - 00000000 ____D () C:\ProgramData\GridinSoft
2014-03-22 14:45 - 2014-03-22 14:45 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-22 14:45 - 2014-03-22 14:45 - 00000000 _____ () C:\autoexec.bat
2014-03-22 14:44 - 2014-03-22 15:38 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-20 15:33 - 2014-03-20 15:33 - 00000000 ____D () C:\Users\John\Desktop\Santander
2014-03-20 15:31 - 2014-03-24 21:58 - 00000000 ____D () C:\Users\John\Desktop\Job info
2014-03-15 16:59 - 2014-03-15 16:59 - 00360968 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 09:30 - 2013-10-25 07:34 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-03-13 09:30 - 2013-10-24 22:34 - 00248240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-03-13 09:29 - 2014-02-23 08:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 09:29 - 2014-02-08 04:34 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 09:28 - 2014-02-23 08:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 09:28 - 2014-02-23 08:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 09:28 - 2014-02-23 08:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-03-13 09:28 - 2014-02-23 08:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-03-13 09:28 - 2014-02-23 08:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 09:28 - 2014-02-23 08:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 09:28 - 2014-02-23 08:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 09:28 - 2014-02-23 08:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 09:28 - 2014-02-23 06:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 09:28 - 2014-02-23 06:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 09:28 - 2014-02-23 06:54 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 09:28 - 2014-02-23 06:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 09:28 - 2014-02-23 06:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 09:28 - 2014-02-23 06:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 09:28 - 2014-02-23 04:06 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-03-13 09:27 - 2014-02-05 23:41 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 09:27 - 2014-02-05 23:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 09:27 - 2014-01-31 00:48 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 09:27 - 2014-01-31 00:06 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 09:27 - 2013-12-07 06:36 - 19751936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-03-13 09:27 - 2013-12-07 05:15 - 17560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-03-11 21:22 - 2014-03-11 21:22 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-03 14:43 - 2014-03-24 08:09 - 00000000 ____D () C:\Users\John\Desktop\UKVI
2014-03-01 12:49 - 2014-03-01 12:49 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-01 12:49 - 2014-03-01 12:49 - 00000000 ____D () C:\Users\John\AppData\Local\Skype
2014-03-01 12:01 - 2014-03-01 12:01 - 00000000 ____D () C:\Users\John\AppData\Local\Windows Live
2014-02-27 20:35 - 2014-02-28 10:45 - 00000000 ____D () C:\Users\John\AppData\Roaming\vlc
2014-02-27 20:25 - 2014-02-27 20:25 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-27 20:25 - 2014-02-27 20:25 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-23 19:54 - 2014-03-03 17:32 - 00000000 ____D () C:\Users\John\Desktop\New folder

==================== One Month Modified Files and Folders =======

2014-03-25 07:56 - 2014-03-25 07:53 - 00018804 _____ () C:\Users\John\Downloads\FRST.txt
2014-03-25 07:56 - 2014-03-25 07:52 - 00000000 ____D () C:\FRST
2014-03-25 07:54 - 2014-03-25 07:53 - 00029732 _____ () C:\Users\John\Downloads\Addition.txt
2014-03-25 07:44 - 2013-01-11 14:28 - 01696160 _____ () C:\Windows\WindowsUpdate.log
2014-03-25 07:43 - 2014-03-25 07:43 - 02157056 _____ (Farbar) C:\Users\John\Downloads\FRST64.exe
2014-03-25 07:41 - 2013-01-11 23:41 - 00000000 ____D () C:\Users\John\Documents\My Games
2014-03-25 07:22 - 2013-06-29 14:25 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-25 07:21 - 2013-01-18 14:18 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-25 07:12 - 2012-07-26 08:12 - 00000000 ____D () C:\Windows\system32\sru
2014-03-24 21:58 - 2014-03-20 15:31 - 00000000 ____D () C:\Users\John\Desktop\Job info
2014-03-24 21:58 - 2013-01-16 19:43 - 00010980 _____ () C:\Users\John\AppData\Roaming\wklnhst.dat
2014-03-24 21:42 - 2014-03-24 21:42 - 00000552 _____ () C:\Windows\PFRO.log
2014-03-24 21:42 - 2012-07-26 07:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-24 21:41 - 2014-03-24 09:56 - 00000000 ____D () C:\AdwCleaner
2014-03-24 21:41 - 2012-07-26 05:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-03-24 21:33 - 2014-03-24 21:33 - 00019724 _____ () C:\ComboFix.txt
2014-03-24 21:33 - 2014-03-24 21:03 - 00000000 ____D () C:\Qoobox
2014-03-24 21:31 - 2014-03-24 21:02 - 00000000 ____D () C:\Windows\erdnt
2014-03-24 21:30 - 2012-07-26 05:26 - 00000215 _____ () C:\Windows\system.ini
2014-03-24 21:02 - 2014-03-24 21:01 - 05192353 ____R (Swearware) C:\Users\John\Downloads\ComboFix.exe
2014-03-24 20:56 - 2014-03-24 20:56 - 12589848 _____ (Malwarebytes Corp.) C:\Users\John\Downloads\mbar-1.07.0.1009.exe
2014-03-24 20:54 - 2014-03-24 20:54 - 00001063 _____ () C:\Users\John\Desktop\JRT.txt
2014-03-24 20:32 - 2014-03-24 20:32 - 00000030 _____ () C:\Users\John\AppData\Roaming\mbam.context.scan
2014-03-24 12:01 - 2013-01-11 14:39 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1935344830-3333155245-2583117102-1001
2014-03-24 10:06 - 2014-03-24 10:06 - 00000000 ____D () C:\Users\John\Desktop\Old Firefox Data
2014-03-24 09:37 - 2014-03-24 09:36 - 01950720 _____ () C:\Users\John\Downloads\AdwCleaner.exe
2014-03-24 09:32 - 2014-03-24 09:32 - 04134240 _____ (Kaspersky Lab ZAO) C:\Users\John\Downloads\tdsskiller.exe
2014-03-24 09:18 - 2013-06-29 14:25 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-24 09:18 - 2013-06-29 14:25 - 00000000 ____D () C:\Users\John\AppData\Local\Adobe
2014-03-24 09:13 - 2014-03-24 09:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Users\John\AppData\Roaming\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Users\John\AppData\Local\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-24 09:13 - 2014-03-24 09:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-24 08:56 - 2013-01-19 12:03 - 00000342 _____ () C:\Windows\Tasks\HPCeeScheduleForJohn.job
2014-03-24 08:34 - 2014-03-24 08:34 - 01038974 _____ (Thisisu) C:\Users\John\Downloads\JRT.exe
2014-03-24 08:09 - 2014-03-24 08:08 - 00000000 ____D () C:\Users\John\Desktop\cccleaner reg files edit
2014-03-24 08:09 - 2014-03-03 14:43 - 00000000 ____D () C:\Users\John\Desktop\UKVI
2014-03-24 08:09 - 2014-01-12 09:45 - 00000000 ____D () C:\Users\John\Desktop\ideas
2014-03-24 07:57 - 2013-01-13 22:19 - 01137664 ___SH () C:\Users\John\Desktop\Thumbs.db
2014-03-24 07:55 - 2012-08-03 23:21 - 00000000 ____D () C:\Windows\Panther
2014-03-24 07:53 - 2014-03-24 07:53 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-24 07:53 - 2014-03-24 07:53 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-24 07:53 - 2014-03-24 07:53 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-24 07:52 - 2014-03-24 07:51 - 04765152 _____ (Piriform Ltd) C:\Users\John\Downloads\ccsetup411.exe
2014-03-23 22:01 - 2013-01-15 19:13 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-23 12:55 - 2013-01-19 12:03 - 00003154 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForJohn
2014-03-23 12:55 - 2013-01-11 14:28 - 00000000 ____D () C:\Users\John
2014-03-23 12:46 - 2012-07-26 07:28 - 00941050 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-22 21:56 - 2014-03-22 21:56 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2014-03-22 21:56 - 2013-08-25 10:39 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-22 21:45 - 2014-03-22 21:45 - 00001897 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-22 21:45 - 2013-08-25 16:34 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-22 21:43 - 2014-03-22 21:43 - 10820032 _____ (SurfRight B.V.) C:\Users\John\Downloads\HitmanPro_x64.exe
2014-03-22 21:42 - 2014-03-22 21:42 - 09988304 _____ (SurfRight B.V.) C:\Users\John\Downloads\HitmanPro.exe
2014-03-22 21:16 - 2013-08-20 19:40 - 00360960 ___SH () C:\Users\John\Downloads\Thumbs.db
2014-03-22 17:15 - 2014-03-22 17:15 - 00000000 ____D () C:\ProgramData\GridinSoft
2014-03-22 15:38 - 2014-03-22 14:44 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-22 15:24 - 2014-02-08 17:20 - 00000000 ____D () C:\Windows\Minidump
2014-03-22 14:45 - 2014-03-22 14:45 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-22 14:45 - 2014-03-22 14:45 - 00000000 _____ () C:\autoexec.bat
2014-03-21 14:18 - 2013-03-12 16:40 - 00000000 ____D () C:\Users\John\Documents\John
2014-03-20 15:33 - 2014-03-20 15:33 - 00000000 ____D () C:\Users\John\Desktop\Santander
2014-03-20 15:33 - 2014-01-12 09:42 - 00000000 ____D () C:\Users\John\Desktop\terrazza
2014-03-20 15:14 - 2013-01-18 17:53 - 00000000 ____D () C:\Users\John\AppData\Roaming\Tropico 3
2014-03-20 07:44 - 2013-07-23 15:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-20 07:40 - 2012-07-26 05:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-03-20 07:39 - 2013-01-12 17:18 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-20 07:28 - 2012-07-26 08:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-03-19 21:27 - 2013-01-15 10:58 - 00316312 _____ (Trusteer Ltd.) C:\Windows\system32\Drivers\RapportKE64.sys
2014-03-19 21:27 - 2013-01-15 10:58 - 00273592 _____ (Trusteer Ltd.) C:\Windows\system32\Drivers\RapportHades64.sys
2014-03-19 13:12 - 2012-07-26 08:12 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-18 08:28 - 2013-01-15 19:12 - 00000000 ____D () C:\ProgramData\Skype
2014-03-15 17:48 - 2012-07-26 08:12 - 00000000 ____D () C:\Windows\rescache
2014-03-15 16:59 - 2014-03-15 16:59 - 00360968 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 12:54 - 2013-01-12 12:45 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-15 12:54 - 2013-01-12 12:44 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-03-15 10:03 - 2013-01-11 14:31 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-15 10:03 - 2013-01-11 14:31 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-14 22:26 - 2012-07-26 08:12 - 00000000 ___RD () C:\Windows\ToastData
2014-03-14 22:26 - 2012-07-26 08:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-14 22:26 - 2012-07-26 08:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-14 22:26 - 2012-07-26 08:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-14 22:26 - 2012-07-26 08:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-14 14:30 - 2013-01-15 19:13 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype
2014-03-11 21:22 - 2014-03-11 21:22 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-11 12:57 - 2013-01-11 14:28 - 00000000 ____D () C:\Users\John\AppData\Local\Packages
2014-03-11 12:10 - 2013-09-19 11:43 - 00000000 ____D () C:\Users\John\AppData\Local\ABBYY
2014-03-04 22:52 - 2013-11-14 21:23 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-04 22:52 - 2013-11-14 21:23 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-03 17:32 - 2014-02-23 19:54 - 00000000 ____D () C:\Users\John\Desktop\New folder
2014-03-01 12:49 - 2014-03-01 12:49 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-01 12:49 - 2014-03-01 12:49 - 00000000 ____D () C:\Users\John\AppData\Local\Skype
2014-03-01 12:19 - 2014-01-12 20:58 - 00000000 ____D () C:\Users\John\Desktop\english teaching
2014-03-01 12:01 - 2014-03-01 12:01 - 00000000 ____D () C:\Users\John\AppData\Local\Windows Live
2014-02-28 10:45 - 2014-02-27 20:35 - 00000000 ____D () C:\Users\John\AppData\Roaming\vlc
2014-02-27 20:25 - 2014-02-27 20:25 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-27 20:25 - 2014-02-27 20:25 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-23 08:13 - 2014-03-13 09:28 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-23 08:13 - 2014-03-13 09:28 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-23 08:13 - 2014-03-13 09:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-02-23 08:13 - 2014-03-13 09:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-02-23 08:13 - 2014-03-13 09:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-23 08:12 - 2014-03-13 09:29 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-23 08:12 - 2014-03-13 09:28 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-23 08:12 - 2014-03-13 09:28 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-23 08:11 - 2014-03-13 09:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-23 06:54 - 2014-03-13 09:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-23 06:54 - 2014-03-13 09:28 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-23 06:54 - 2014-03-13 09:28 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-23 06:53 - 2014-03-13 09:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-23 06:35 - 2014-03-13 09:28 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-23 06:31 - 2014-03-13 09:28 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-23 04:06 - 2014-03-13 09:28 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

Some content of TEMP:
====================
C:\Users\John\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-18 09:04

==================== End Of Log ============================

Farbar Addition



==================== Security Center ========================

AV: Computer Security (Disabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Computer Security (Disabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7 Wonders II (x32 Version: 2.2.0.98 - WildTangent) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe Audition 1.5 (HKLM-x32\...\{86EF9FC4-F209-4520-B7E1-C7FF0EEBDFFF}) (Version: 1.5 - Adobe Systems)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed Revelations (HKLM-x32\...\Steam App 201870) (Version:  - Ubisoft Montreal)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot 4 - Power Source (x32 Version: 2.2.0.98 - WildTangent) Hidden
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version:  - )
Canon MP250 series User Registration (HKLM-x32\...\Canon MP250 series User Registration) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Computer Security 12.71.102.0 (release) (x32 Version: 12.71.102.0 - F-Secure Corporation) Hidden
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Crazy Chicken Soccer (x32 Version: 2.2.0.98 - WildTangent) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3.6326 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3.6326 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.4.2928 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3119 - CyberLink Corp.)
CyberLink PhotoDirector (x32 Version: 2.0.1.3119 - CyberLink Corp.) Hidden
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDirector 10 (x32 Version: 10.0.1.1925 - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.6.4319 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.6.4319 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.4.5527 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.4.5527 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)
Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard)
Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-202 203 206 Series Printer Uninstall (HKLM\...\EPSON XP-202 203 206 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Europa Universalis III (HKLM-x32\...\Steam App 25800) (Version:  - Paradox Development Studio)
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
File Association Helper (HKLM\...\{572D0504-2C67-4016-801F-D70879A3026A}) (Version: 1.1.6.53763 - WinZip Computing International, LLC)
Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden
Football Manager 2010 (HKLM-x32\...\Steam App 34000) (Version:  - SI Games)
F-Secure CCF Reputation (x32 Version: 1.0.25.1877 - F-Secure) Hidden
F-Secure CCF Scanning 1.23.124.8831 (release) (x32 Version: 1.23.124.8831 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.126 (x32 Version: 1.02.126 - F-Secure Corporation) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.212 - SurfRight B.V.)
HP 3D DriveGuard (HKLM\...\{54CE68A8-4F2D-4328-B1F7-D6C720405F7F}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP CoolSense (HKLM-x32\...\{11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F}) (Version: 2.10.51 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (HKLM-x32\...\{1AC082E0-049D-4C5C-9ECF-9473AD5A949D}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.3.0 - WildTangent)
HP Postscript Converter (Version: 3.1.3554 - Hewlett-Packard) Hidden
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 7.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{675D093B-815D-47FD-AB2C-192EC751E8E2}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.7 - Hewlett-Packard)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6417.0 - IDT)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest II (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word 2002 (HKLM-x32\...\{911B0409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2627.01 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}) (Version: 08.04.0623 - Microsoft Corporation)
Microsoft Works 2005 Setup Launcher (HKLM-x32\...\Works2005Setup) (Version:  - )
Microsoft Works Suite Add-in for Microsoft Word (HKLM-x32\...\{CB54ABA8-D67F-47AD-A76C-2631BADA9FE5}) (Version: 8.0.0.0000 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 en-US)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
Network Guide EPSON XP-202 203 206 Series (HKLM-x32\...\EPSON XP-202 203 206 Series Netg) (Version:  - )
Online Safety 2.71.927.655 (x32 Version: 2.71.927.655 - F-Secure Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Power2Go (x32 Version: 8.0 - CyberLink Corp.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.2.0 - Ralink)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Rapport (x32 Version: 3.5.1304.61 - Trusteer) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Shockwave (HKLM-x32\...\Shockwave) (Version:  - )
Sid Meier's Civilization 4 - Beyond the Sword (HKCU\...\{32E4F0D2-C135-475E-A841-1D59A0D22989}) (Version: 3.19 - Firaxis Games)
Sid Meier's Civilization 4 (HKCU\...\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}) (Version: 1.74 - Firaxis Games)
Sid Meier's Civilization 4 (x32 Version: 1.00.0000 - Firaxis Games) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization V SDK (HKLM-x32\...\Steam App 16830) (Version:  - Firaxis Games)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Sony PC Companion 2.10.188 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Safe Boost (HKLM-x32\...\F-Secure ServiceEnabler 44515) (Version: 1.71.340.0 - F-Secure Corporation)
Super Safe Boost (x32 Version: 1.71.340.0 - F-Secure Corporation) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Tropico 3 1.02 (HKLM-x32\...\Tropico3) (Version: 1.02 - Kalypso Media)
Trusteer Endpoint Protection (HKLM-x32\...\Rapport_msi) (Version: 3.5.1304.61 - Trusteer)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
User's Guide EPSON XP-202 203 206 Series (HKLM-x32\...\EPSON XP-202 203 206 Series Useg) (Version:  - )
Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.9.6 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Works Upgrade (x32 Version: 8.0.0.0000 - Microsoft Corporation) Hidden
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Restore Points  =========================


==================== Hosts content: ==========================

2012-07-26 05:26 - 2014-03-24 21:30 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {06088D2F-2BE5-477A-95F9-77F2CD852DED} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe
Task: {0926AAFF-7EA1-40DC-9422-E2844D06FF14} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {0AF97890-F738-4B4A-A3B4-62A10BA825EA} - System32\Tasks\Microsoft\Windows\Setup\Windows Upgrade Notification Task => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {12593FFB-CA2E-4AB6-8A69-81AA705560CA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {522A4505-103D-443A-A1A8-22E41D397211} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
Task: {588FA457-B78A-40F9-AAC5-8D0DB127FFF5} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {633962BC-8504-4B7C-AB86-388C595CDC6C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-02-10] (Hewlett-Packard)
Task: {9E71F6AB-8F90-44BA-B587-184F7FD352F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-24] (Adobe Systems Incorporated)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {B15FC8DC-D0C4-4C0D-BA28-DDB95B77924D} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {BBEBA448-95D2-487F-B482-0D1566AD8E77} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CCB69D09-B70A-41CD-AFB0-4A38293EAC9F} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe
Task: {DCA39277-1CCA-4CC5-B439-590B58442440} - System32\Tasks\HPCeeScheduleForJohn => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {E681D283-29C8-4BC4-87E7-EF92C0D6676B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-02-10] (Hewlett-Packard)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F2983181-7450-450E-BAD9-3F61B3E53A60} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe
Task: {F6E0ED5B-7A46-45BD-842E-4918CF2248EF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForJohn.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2013-09-17 14:05 - 2013-10-24 10:54 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-06-01 07:46 - 2013-06-01 07:46 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-08-08 05:17 - 2012-08-08 05:17 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-12-26 19:38 - 2013-10-31 11:35 - 00070880 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2013-01-15 10:58 - 2014-02-08 17:24 - 01125592 _____ () C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll
2012-11-26 12:49 - 2012-11-26 12:49 - 00216632 _____ () C:\Program Files (x86)\TalkTalk\Security\daas2.dll
2013-09-03 14:10 - 2013-09-03 14:10 - 00030888 _____ () C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2013-09-03 13:59 - 2013-12-11 08:27 - 00212008 _____ () C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Spam Control\fsas.dll
2013-09-03 13:58 - 2014-03-04 07:20 - 00949288 _____ () C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2012-10-22 09:47 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2012-06-27 14:09 - 2012-06-27 14:09 - 00557056 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll
2013-12-26 19:38 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2013-12-26 19:38 - 2013-09-13 10:02 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2013-09-03 12:25 - 2013-09-03 12:25 - 00593464 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll
2014-03-24 09:13 - 2014-03-15 08:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/25/2014 07:53:52 AM) (Source: FSecure-FSecure-F-Secure DeepGuard) (User: )
Description: 1  2014-03-25  07:53:52+01:00  LAPTOP  SYSTEM  F-Secure DeepGuard
 Application was blocked. This was determined to be a high-risk application by system control heuristics.
 Application path: \\?\c:\windows\mod_frst.exe
 File hash: 4bb423ae4bf7b46ba1cd43c521cf9314c03cf8c4

Error: (03/25/2014 07:20:37 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (03/25/2014 07:10:54 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/24/2014 09:43:58 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/24/2014 10:18:32 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/24/2014 08:57:49 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/24/2014 07:35:30 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/23/2014 00:40:13 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/23/2014 08:07:09 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Failed to add certificate to Third-Party Root Certification Authorities store with error: Illegal operation attempted on a registry key that has been marked for deletion.

Error: (03/23/2014 07:31:38 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (03/24/2014 09:42:19 PM) (Source: Application Popup) (User: )
Description: \SystemRoot\SysWow64\drivers\pfc.sys

Error: (03/24/2014 09:30:47 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (03/24/2014 09:30:17 PM) (Source: Application Popup) (User: )
Description: \??\C:\ComboFix\catchme.sys

Error: (03/24/2014 09:25:00 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (03/24/2014 10:17:17 AM) (Source: Application Popup) (User: )
Description: \SystemRoot\SysWow64\drivers\pfc.sys

Error: (03/24/2014 08:56:35 AM) (Source: Application Popup) (User: )
Description: \SystemRoot\SysWow64\drivers\pfc.sys

Error: (03/23/2014 00:38:49 PM) (Source: Application Popup) (User: )
Description: \SystemRoot\SysWow64\drivers\pfc.sys

Error: (03/23/2014 00:37:56 PM) (Source: DCOM) (User: LAPTOP)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/23/2014 00:37:56 PM) (Source: DCOM) (User: LAPTOP)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/23/2014 00:37:56 PM) (Source: DCOM) (User: LAPTOP)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (03/25/2014 07:53:52 AM) (Source: FSecure-FSecure-F-Secure DeepGuard)(User: )
Description: 1  2014-03-25  07:53:52+01:00  LAPTOP  SYSTEM  F-Secure DeepGuard
 Application was blocked. This was determined to be a high-risk application by system control heuristics.
 Application path: \\?\c:\windows\mod_frst.exe
 File hash: 4bb423ae4bf7b46ba1cd43c521cf9314c03cf8c4

Error: (03/25/2014 07:20:37 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005

Error: (03/25/2014 07:10:54 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/24/2014 09:43:58 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/24/2014 10:18:32 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/24/2014 08:57:49 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/24/2014 07:35:30 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/23/2014 00:40:13 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/23/2014 08:07:09 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: Illegal operation attempted on a registry key that has been marked for deletion.

Error: (03/23/2014 07:31:38 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall


CodeIntegrity Errors:
===================================
  Date: 2014-03-25 07:56:34.982
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:56:00.838
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:56:00.790
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:52:25.100
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:52:22.489
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:51:53.659
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:50:45.381
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:46:21.416
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:44:49.017
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-03-25 07:44:14.791
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Percentage of memory in use: 32%
Total physical RAM: 6036.27 MB
Available physical RAM: 4072.65 MB
Total Pagefile: 7124.27 MB
Available Pagefile: 4931.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:910.64 GB) (Free:803.73 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:20.11 GB) (Free:2.49 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive e: (CIV4BTS_303) (CDROM) (Total:0.65 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 2D842E40)

Partition: GPT Partition Type.

==================== End Of Log ============================



 

Link to post
Share on other sites

I see you have used Combofix, can you post that log please.. Will be here :- C:\Combofix.txt

 

Next,

 

1.Download Malwarebytes Anti-Rootkit from this link:

 

 http://www.malwarebytes.org/products/mbar/

 

2. Unzip the File to a convenient location. (Recommend the Desktop)

3. Open the folder where the contents were unzipped to run mbar.exe

 

Image1.png

 

4. Double-click on the mbar.exe file, you may receive a User Account Control prompt asking if you are sure you wish to allow the program to run. Please allow the program to run and MBAR will now start to install any necessary drivers that are required for the program to operate correctly. If a rootkit is interfering with the installation of the drivers you will see a message that states that the DDA driver was not installed and that you should reboot your computer to install it. You will see this image:

 

mbarwm.png

 

5. If you receive this message, please click on the Yes button and Malwarebytes Anti-Rootkit will now restart your computer. Once the computer is rebooted and you login, MBAR will automatically start and you will now be at the start screen. (If no Rootkit warning you will go from step 4 to 6.)

 

6. The following image opens, select Next.

 

Image2.png

 

7. The following image opens, select Update

 

Image3.png

 

8. When the update completes select Next.

 

Image4.png

 

9. In the following window ensure "Targets" are ticked. Then select "Scan"

 

Image5.png

 

10. If an infection is found select the "Cleanup Button" to remove threats, Reboot if prompted. Wait while the system shuts down and the cleanup process is performed.

 

MBAntiRKcleanA.png

 

11. Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click "Cleanup Button" once more and repeat the process.

12. If no threats were found you will see the following image, Select Exit:

 

Image6.png

 

13. Verify that your system is now running normally, making sure that the following items are functional:

 


  •      
  • Internet access
         
  • Windows Update
         
  • Windows Firewall

 

14.  If there are additional problems with your system, such as any of those listed above or other system issues, then run the 'fixdamage' tool included within Malwarebytes Anti-Rootkit folder.

 

15. Select "Y" from your Keyboard, tap Enter.

 

16. The fix will be applied, select any key to Exit.

 

17. Let me know how your system now responds. Copy and paste the two following logs from the mbar folder:

 

System - log

Mbar - log   Date and time of scan will also be shown

 

Thanks,

 

Kevin...

Link to post
Share on other sites

Hello,

Combo fix (from yesterday)

ComboFix 14-03-24.01 - John 24/03/2014  21:08:44.1.4 - x64
Microsoft Windows 8  6.2.9200.0.1252.44.2057.18.6036.4225 [GMT 0:00]
Running from: c:\users\John\Downloads\ComboFix.exe
AV: Computer Security *Enabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Computer Security *Enabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\John\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
.
.
(((((((((((((((((((((((((   Files Created from 2014-02-24 to 2014-03-24  )))))))))))))))))))))))))))))))
.
.
2014-03-24 09:56 . 2014-03-24 10:16    --------    d-----w-    C:\AdwCleaner
2014-03-24 09:13 . 2014-03-24 09:13    --------    d-----w-    c:\users\John\AppData\Local\Mozilla
2014-03-24 09:13 . 2014-03-24 09:13    --------    d-----w-    c:\program files (x86)\Mozilla Maintenance Service
2014-03-24 08:57 . 2014-03-24 08:57    --------    d-----w-    c:\windows\ServiceProfiles\LocalService\winhttp
2014-03-24 07:53 . 2014-03-24 07:53    --------    d-----w-    c:\program files\CCleaner
2014-03-22 21:56 . 2014-03-22 21:56    12872    ----a-w-    c:\windows\system32\bootdelete.exe
2014-03-22 17:15 . 2014-03-22 17:15    --------    d-----w-    c:\programdata\GridinSoft
2014-03-22 14:45 . 2014-03-22 14:45    --------    d-----w-    c:\program files\Enigma Software Group
2014-03-22 14:44 . 2014-03-22 15:38    --------    d-----w-    c:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-22 14:44 . 2014-03-22 14:44    --------    d-----w-    c:\program files (x86)\Common Files\Wise Installation Wizard
2014-03-15 10:27 . 2014-03-15 10:27    254640    ----a-w-    c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10236.bin
2014-03-13 09:29 . 2014-02-08 04:34    4036608    ----a-w-    c:\windows\system32\win32k.sys
2014-03-13 09:29 . 2014-02-23 08:12    19273216    ----a-w-    c:\windows\system32\mshtml.dll
2014-03-13 09:27 . 2013-12-07 06:36    19751936    ----a-w-    c:\windows\system32\shell32.dll
2014-03-13 09:27 . 2014-02-05 23:41    595968    ----a-w-    c:\windows\system32\qedit.dll
2014-03-13 09:27 . 2014-02-05 23:37    496640    ----a-w-    c:\windows\SysWow64\qedit.dll
2014-03-13 09:27 . 2014-01-31 00:06    1628160    ----a-w-    c:\windows\system32\WindowsCodecs.dll
2014-03-13 09:27 . 2014-01-31 00:48    1339392    ----a-w-    c:\windows\SysWow64\WindowsCodecs.dll
2014-03-11 21:22 . 2014-03-11 21:22    5777288    ----a-w-    c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-03-01 12:49 . 2014-03-01 12:49    --------    d-----w-    c:\users\John\AppData\Local\Skype
2014-03-01 12:49 . 2014-03-01 12:49    --------    d-----w-    c:\program files (x86)\Common Files\Skype
2014-03-01 12:01 . 2014-03-01 12:01    --------    d-----w-    c:\users\John\AppData\Local\Windows Live
2014-02-27 20:35 . 2014-02-28 10:45    --------    d-----w-    c:\users\John\AppData\Roaming\vlc
2014-02-27 20:25 . 2014-02-27 20:25    --------    d-----w-    c:\program files (x86)\VideoLAN
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-20 07:39 . 2013-01-12 17:18    90015360    ----a-w-    c:\windows\system32\MRT.exe
2014-03-19 21:27 . 2013-01-15 10:58    273592    ----a-w-    c:\windows\system32\drivers\RapportHades64.sys
2014-03-19 21:27 . 2013-01-15 10:58    316312    ----a-w-    c:\windows\system32\drivers\RapportKE64.sys
2014-03-04 22:52 . 2013-11-14 21:23    78304    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-04 22:52 . 2013-11-14 21:23    694240    ----a-w-    c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-12 23:30 . 2014-02-12 18:34    2032640    ----a-w-    c:\windows\SysWow64\d3d10warp.dll
2014-01-12 23:30 . 2014-02-12 18:34    2238976    ----a-w-    c:\windows\system32\d3d10warp.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2014-02-25 1821888]
"EPLTarget\P0000000000000001"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE" [2012-11-02 283232]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-10-31 449760]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]
"HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"F-Secure Hoster (44515)"="c:\program files (x86)\TalkTalk\Security\fshoster32.exe" [2012-11-26 183864]
"F-Secure Manager"="c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE" [2012-10-18 310992]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2011-10-31 1058400]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-09-07 581024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE" [2012-11-02 283232]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE -b -l [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 WSDScan;WSD Scan Support;c:\windows\System32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 RapportHades64;RapportHades64;c:\windows\System32\Drivers\RapportHades64.sys;c:\windows\SYSNATIVE\Drivers\RapportHades64.sys [x]
S0 RapportKE64;RapportKE64;c:\windows\System32\Drivers\RapportKE64.sys;c:\windows\SYSNATIVE\Drivers\RapportKE64.sys [x]
S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]
S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]
S1 RapportCerberus_59849;RapportCerberus_59849;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys [x]
S1 RapportEI64;RapportEI64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [x]
S1 RapportPG64;RapportPG64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [x]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\TalkTalk\Security\fshoster32.exe;c:\program files (x86)\TalkTalk\Security\fshoster32.exe [x]
S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel® ME Service;Intel® ME Service;c:\program files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 RapportMgmtService;Rapport Management Service;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [x]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]
S3 fsni;fsni;c:\program files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys [x]
S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
apphost    REG_MULTI_SZ       apphostsvc
iissvcs    REG_MULTI_SZ       w3svc was
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2013-09-05 14:04    215416    ----a-w-    c:\program files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll
.
Contents of the 'Scheduled Tasks' folder
.
2014-03-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-11 09:18]
.
2014-03-24 c:\windows\Tasks\HPCeeScheduleForJohn.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 21:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-08 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-08 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-08 440640]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-07-22 1425408]
"FAHConsole"="c:\program files\File Association Helper\FAHConsole.exe" [2013-09-26 216248]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="c:\program files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2014-03-12 21720]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\users\John\AppData\Roaming\Mozilla\Firefox\Profiles\vjg0qiq9.default-1395655567045\
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fshoster]
"ImagePath"="\"c:\program files (x86)\TalkTalk\Security\fshoster32.exe\" -hosterid:0"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1935344830-3333155245-2583117102-1001CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\Software\G*e*n*i*e*"!\FM Genie Scout 10]
"GameDir"="c:\\Users\\John\\Documents\\Sports Interactive\\Football Manager 2010\\games"
"ShortlistDir"="c:\\Users\\John\\Documents\\Sports Interactive\\Football Manager 2010\\shortlists"
"ScreenshotsDir"="c:\\Users\\John\\Documents\\Sports Interactive\\Football Manager 2010"
"SaveDir"="c:\\Users\\John\\Documents\\Sports Interactive\\Football Manager 2010\\"
"HistoryDir"="c:\\Users\\John\\Desktop\\FM Genie Scout 10\\History Points"
"LangDB"="c:\\Program Files (x86)\\Steam\\steamapps\\common\\Football Manager 2010\\data\\updates\\update-1030\\db\\1030\\lang_db.dat"
"LastSaveGame"=""
"Language"="English"
"LoadLangDB"=dword:00000001
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"GraphStep"=dword:00000000
"SkinName"="Steklo Black"
"LastUpdateCheck"=dword:0000a237
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000001
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"Version"=dword:00000074
"UniqueID"="E7-A2B0-ECDF"
"Currency"=dword:00000056
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\F-Secure\My Services Agent\Protected]
@Denied: ) (Everyone)
"AgentIdentifier"="95dd369f-d924-40fc-b740-3bb3a9f5dc99"
"AuthorizationCode"=""
"44515_AgentIdentifier"="95dd369f-d924-40fc-b740-3bb3a9f5dc99"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Completion time: 2014-03-24  21:33:08
ComboFix-quarantined-files.txt  2014-03-24 21:33
.
Pre-Run: 855,217,975,296 bytes free
Post-Run: 855,269,617,664 bytes free
.
- - End Of File - - DC471C5FD656D5B5E3E7A16AFC0B4C10

system log

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

© Malwarebytes Corporation 2011-2012

OS version: 6.2.9200 Windows 8 x64

Account is Administrative

Internet Explorer version: 10.0.9200.16843

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.494000 GHz
Memory total: 6329487360, free: 4468797440

Downloaded database version: v2014.03.25.04
Downloaded database version: v2014.03.18.01
=======================================
Initializing...
------------ Kernel report ------------
     03/25/2014 14:48:16
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kd.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\System32\drivers\CLFS.SYS
\SystemRoot\System32\drivers\tm.sys
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\system32\CI.dll
\SystemRoot\System32\drivers\msrpc.sys
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\System32\Drivers\acpiex.sys
\SystemRoot\System32\Drivers\WppRecorder.sys
\SystemRoot\System32\drivers\ACPI.sys
\SystemRoot\System32\drivers\WMILIB.SYS
\SystemRoot\System32\drivers\msisadrv.sys
\SystemRoot\System32\drivers\pci.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\system32\drivers\tpm.sys
\SystemRoot\System32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pdc.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\System32\drivers\spaceport.sys
\SystemRoot\System32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\System32\drivers\iaStorA.sys
\SystemRoot\System32\drivers\storport.sys
\SystemRoot\System32\drivers\EhStorClass.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\System32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\DRIVERS\wfplwfs.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\hpdskflt.sys
\SystemRoot\System32\drivers\wd.sys
\SystemRoot\System32\drivers\volsnap.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\RapportKE64.sys
\SystemRoot\System32\Drivers\RapportHades64.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\Drivers\fsbts.sys
\SystemRoot\System32\drivers\disk.sys
\SystemRoot\System32\drivers\CLASSPNP.SYS
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\drivers\cdrom.sys
\??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
\??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\BasicRender.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\System32\drivers\BasicDisplay.sys
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\System32\drivers\npsvctrig.sys
\SystemRoot\System32\drivers\mssmbios.sys
\??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys
\??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\System32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\kdnic.sys
\SystemRoot\System32\drivers\umbus.sys
\SystemRoot\System32\drivers\CmBatt.sys
\SystemRoot\System32\drivers\BATTC.SYS
\SystemRoot\system32\DRIVERS\igdkmd64.sys
\SystemRoot\System32\drivers\USBXHCI.SYS
\SystemRoot\System32\drivers\ucx01000.sys
\SystemRoot\System32\drivers\HECIx64.sys
\SystemRoot\System32\drivers\usbehci.sys
\SystemRoot\System32\drivers\USBPORT.SYS
\SystemRoot\System32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\netr28x.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\System32\drivers\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt630x64.sys
\SystemRoot\System32\drivers\i8042prt.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\System32\drivers\kbdclass.sys
\SystemRoot\System32\drivers\mouclass.sys
\SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys
\SystemRoot\system32\DRIVERS\Accelerometer.sys
\SystemRoot\System32\drivers\WirelessButtonDriver64.sys
\SystemRoot\System32\drivers\HIDCLASS.SYS
\SystemRoot\System32\drivers\HIDPARSE.SYS
\SystemRoot\System32\drivers\wmiacpi.sys
\SystemRoot\System32\drivers\intelppm.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\System32\drivers\swenum.sys
\SystemRoot\System32\drivers\ks.sys
\SystemRoot\System32\drivers\rdpbus.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\System32\drivers\usbhub.sys
\SystemRoot\System32\drivers\UsbHub3.sys
\SystemRoot\system32\DRIVERS\stwrt64.sys
\SystemRoot\system32\DRIVERS\portcls.sys
\SystemRoot\system32\DRIVERS\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\IntcDAud.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\drivers\monitor.sys
\SystemRoot\System32\drivers\usbccgp.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\system32\DRIVERS\cdfs.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_iaStorA.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\drivers\luafv.sys
\??\C:\Windows\system32\drivers\mbam.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\vwifimp.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\Ndu.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\drivers\condrv.sys
\??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys
\??\C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys
\SystemRoot\System32\drivers\rdpvideominiport.sys
\SystemRoot\System32\cdd.dll
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa80071fb060
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000040\
Lower Device Object: 0xfffffa800655d400
Lower Device Driver Name: \Driver\iaStorA\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa80071fb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80071fbb10, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa80071fb060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
DevicePointer: 0xfffffa8007138950, DeviceName: Unknown, DriverName: \Driver\hpdskflt\
DevicePointer: 0xfffffa800655d400, DeviceName: \Device\00000040\, DriverName: \Driver\iaStorA\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Read File: File "C:\Windows\System32\Drivers\vwifibus.sys" is compressed (flags = 1)
Read File: File "C:\WINDOWS\SYSTEM32\drivers\vwifibus.sys" is compressed (flags = 1)
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: 2D842E40

GPT Protective MBR Partition information:

    Partition 0 type is EFI-GPT (0xee)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1  Numsec = 1953525167

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

GPT Partition information:

    GPT Header Signature 4546492050415254
    GPT Header Revision 65536 Size 92 CRC 2316418003
    GPT Header CurrentLba = 1 BackupLba 1953525167
    GPT Header FirstUsableLba 34  LastUsableLba 1953525134
    GPT Header Guid 8974fe1f-f013-4fd4-9231-2e03b224ed9
    GPT Header Contains 128 partition entries starting at LBA 2
    GPT Header Partition entry size = 128

    Backup GPT header Signature 4546492050415254
    Backup GPT header Revision 65536 Size 92 CRC 2316418003
    Backup GPT header CurrentLba = 1953525167 BackupLba 1
    Backup GPT header FirstUsableLba 34  LastUsableLba 1953525134
    Backup GPT header Guid 8974fe1f-f013-4fd4-9231-2e03b224ed9
    Backup GPT header Contains 128 partition entries starting at LBA 1953525135
    Backup GPT header Partition entry size = 128

    Partition 0 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac
    Partition ID 14a2ec7a-314a-4bda-86ad-fbec98e9628a
    FirstLBA 2048  Last LBA 821247
    Attributes 1
    Partition Name                 Basic data partition

    Partition 1 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b
    Partition ID bf254a3e-4074-44ca-878b-891710bcf732
    FirstLBA 821248  Last LBA 1353727
    Attributes 0
    Partition Name                 EFI system partition

    GPT Partition 1 is bootable
    Partition 2 Type e3c9e316-b5c-4db8-817d-f92df0215ae
    Partition ID a2ec2995-d31f-4f2d-93f2-d1d7e090a3e7
    FirstLBA 1353728  Last LBA 1615871
    Attributes 0
    Partition Name         Microsoft reserved partition

    Partition 3 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
    Partition ID 464fc413-fef9-44b9-8848-6250aed889e7
    FirstLBA 1615872  Last LBA 1911357439
    Attributes 0
    Partition Name                 Basic data partition

    Partition 4 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
    Partition ID 99e3b03f-eb2-4e73-ae3c-54ef59c5dcfa
    FirstLBA 1911357440  Last LBA 1953523711
    Attributes 1
    Partition Name                 Basic data partition

Disk Size: 1000204886016 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

mbar log

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.03.25.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16843
John :: LAPTOP [administrator]

25/03/2014 14:48:19
mbar-log-2014-03-25 (14-48-19).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 247412
Time elapsed: 27 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)




Thanks


 

Link to post
Share on other sites

Hello,

I will post the log in 2 messages, as it says 'post is too long':


Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by John on 26/03/2014 at  9:25:12.01.
Microsoft Windows 8 6.2.9200  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\John\Desktop\zoek\zoek.com [scan all users] [script inserted]

==== System Restore Info ======================

26/03/2014 09:27:02 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1935344830-3333155245-2583117102-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} deleted successfully
HKEY_USERS\S-1-5-21-1935344830-3333155245-2583117102-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{BBDA0591-3099-440a-AA10-41764D9DB4DB} deleted successfully

==== Installed Programs ======================

7 Wonders II  
ABBYY FineReader 9.0 Sprint  
Adobe Audition 1.5  
Adobe Flash Player 12 Plugin  
Adobe Reader XI (11.0.06)  
Adobe Shockwave Player 12.1  
Aloha TriPeaks  
Assassin's Creed Brotherhood  
Assassin's Creed II  
Assassin's Creed Revelations  
Bejeweled 3  
Bonjour  
Build-a-lot 4 - Power Source  
Canon Easy-WebPrint EX  
Canon MP Navigator EX 3.0  
Canon MP250 series MP Drivers  
Canon MP250 series User Registration  
Canon Utilities Easy-PhotoPrint EX  
Canon Utilities My Printer  
Canon Utilities Solution Menu  
CCleaner  
Chuzzle Deluxe  
Computer Security 12.71.102.0 (release)  
Connected Music powered by Universal Music Group version 1.0  
Cradle of Rome 2  
Crazy Chicken Soccer  
CyberLink LabelPrint  
CyberLink Media Suite 10  
CyberLink PhotoDirector  
CyberLink PowerDirector 10  
CyberLink PowerDVD  
CyberLink YouCam  
D3DX10  
Download Navigator  
Energy Star  
Epson Easy Photo Print 2  
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)  
Epson Event Manager  
EPSON Scan  
EPSON XP-202 203 206 Series Printer Uninstall  
EpsonNet Print  
Europa Universalis III  
F-Secure CCF Reputation  
F-Secure CCF Scanning 1.23.124.8831 (release)  
F-Secure Network CCF 1.02.126  
Farm Frenzy  
File Association Helper  
Final Drive Fury  
Football Manager 2010  
Governor of Poker 2 Premium Edition  
Hewlett-Packard ACLM.NET v1.2.1.1  
HitmanPro 3.7  
HP 3D DriveGuard  
HP Connected Music (Meridian - installer)  
HP CoolSense  
HP Customer Experience Enhancements  
HP Documentation  
HP Games  
HP Postscript Converter  
HP Quick Launch  
HP Recovery Manager  
HP Registration Service  
HP Software Framework  
HP Support Assistant  
HP Utility Center  
HP Wireless Button Driver  
IDT Audio  
Intel® Management Engine Components  
Intel® Processor Graphics  
Intel® SDK for OpenCL - CPU Only Runtime Package  
Intel© Trusted Connect Service Client  
Java 7 Update 51  
Java Auto Updater  
Jewel Match 3  
Jewel Quest II  
Jewel Quest Solitaire 2  
Mahjongg Artifacts  
Malwarebytes Anti-Malware version 1.75.0.1300  
Microsoft Application Error Reporting  
Microsoft Office  
Microsoft SQL Server 2005 Compact Edition [ENU]  
Microsoft Visual C++ 2005 Redistributable  
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219  
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219  
Microsoft Word 2002  
Microsoft Works  
Microsoft Works 2005 Setup Launcher  
Microsoft Works Suite Add-in for Microsoft Word  
More Games from WildTangent Games  
Mozilla Firefox 28.0 (x86 en-US)  
Mozilla Maintenance Service  
MSVCRT  
Mystery of Mortlake Mansion  
Network Guide EPSON XP-202 203 206 Series  
Online Safety 2.71.927.655  
Polar Bowler  
Power2Go  
Ralink RT5390R 802.11bgn Wi-Fi Adapter  
Ranch Rush 2 - Premium Edition  
Rapport  
Realtek Ethernet Controller Driver  
Realtek PCIE Card Reader  
Shockwave  
Shockwave Director 8.0  
Shockwave Flash  
Sid Meier's Civilization 4 - Beyond the Sword  
Sid Meier's Civilization 4  
Sid Meier's Civilization V  
Sid Meier's Civilization V SDK  
SkypeT 6.14  
Sony PC Companion 2.10.197  
Steam  
Super Safe Boost  
swMSM  
Synaptics Pointing Device Driver  
Trinklit Supreme  
Tropico 3 1.02  
Trusteer Endpoint Protection  
Ubisoft Game Launcher  
Update Installer for WildTangent Games App  
User's Guide EPSON XP-202 203 206 Series  
Virtual Families  
VLC media player 2.1.3  
Wedding Dash  
Windows Live Communications Platform  
Windows Live Essentials  
Windows Live Installer  
Windows Live Language Selector  
Windows Live Movie Maker  
Windows Live Photo Common  
Windows Live Photo Gallery  
Windows Live PIMT Platform  
Windows Live SOXE  
Windows Live SOXE Definitions  
Windows Live UX Platform  
Windows Live UX Platform Language Pack  
Windows Live Writer  
Windows Live Writer Resources  
Works Upgrade  
Zuma's Revenge  

==== Running Processes ======================

C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE
C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files (x86)\Microsoft Works\WkDStore.exe
C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSLAUNCH.EXE
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted
C:\Users\John\ia_remove.sh1104.tmp deleted
C:\Users\John\ia_remove.sh1491.tmp deleted
C:\Users\John\ia_remove.sh4674.tmp deleted
C:\Users\John\ia_remove.sh7167.tmp deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted

==== System Specs ======================

Windows: Windows Version 6.2 (Build 9200)
Memory (RAM): 6037 MB
CPU Info: Intel® Core i5-3210M CPU @ 2.50GHz
CPU Speed: 2521.2 MHz
Sound Card: Speakers and Headphones (IDT Hi |
Display Adapters: Intel® HD Graphics 4000 | Intel® HD Graphics 4000 | Intel® HD Graphics 4000
Monitors: 1x; Generic PnP Monitor |
Screen Resolution: 1366 X 768 - 32 bit
Network: Network Present
Network Adapters: Microsoft Wi-Fi Direct Virtual Adapter | Ralink RT5390R 802.11bgn Wi-Fi Adapter | Realtek PCIe FE Family Controller
CD / DVD Drives: 1x (E: | ) E: hp      DVD-RAM UJ8D1
Ports: COM Ports NOT Present. LPT Port NOT Present.
Mouse: 5 Button Wheel Mouse Present
Hard Disks: C:  910.6GB | D:  20.1GB
Hard Disks - Free: C:  803.2GB | D:  2.5GB
Manufacturer *: Insyde
BIOS Info: AT/AT COMPATIBLE |  | HPQOEM - 1
Time Zone: GMT Standard Time
Motherboard *: Hewlett-Packard 183F
Country: United Kingdom
Language: ENG

==== System Specs (Software) ======================

Anti-Virus: Computer Security On-access scanning disabled (Outdated)
Anti-Virus: Windows Defender On-access scanning disabled (Outdated)
Anti-Spyware: Computer Security disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Default Browser: Firefox    28.0
Internet Explorer Version: 10.0.9200.16843
Mozilla Firefox version: 28.0 (x86 en-US)
Adobe Reader version: 11.0.06.70
Sun Java version: 1.7.0_51 (32-bit)
Flash Player version: 12.0.0.77
Shockwave Player version: 12.1r150

==== Files Recently Created / Modified ======================

====== C:\Windows ====
2014-03-24 21:07:00    F042EE4C8D66248D9B86DCF52ABAE416    256000    ----a-w-    C:\Windows\PEV.exe
2014-03-24 21:07:00    9E05A9C264C8A908A8E79450FCBFF047    80412    ----a-w-    C:\Windows\grep.exe
2014-03-24 21:07:00    5E832F4FAF5F481F2EAF3B3A48F603B8    68096    ----a-w-    C:\Windows\zip.exe
2014-03-24 21:07:00    0297C72529807322B152F517FDB0A9FC    406528    ----a-w-    C:\Windows\SWSC.exe
2014-03-24 21:07:00    0277C027A26428DB64EF4F64F52BB4FD    208896    ----a-w-    C:\Windows\MBR.exe
====== C:\Users\John\AppData\Local\Temp ====
2014-03-25 12:13:50    53D4253E1E2BA2974C0EE16A659ED296    20270608    ----a-w-    C:\Users\John\AppData\Local\temp\Sony\Sony PC Companion\AutoUpdate\Sony PC Companion_2.10.197_NetStorage.exe
====== Java Cache =====
2014-03-23 07:25:18    04673311002E12BCE8560B2BABB3F230    34    ----a-w-    C:\Users\John\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\splash\splash.xml
====== C:\Windows\SysWOW64 =====
2014-03-13 09:28:59    9F378D86F983E84A0212678C1D18D7FC    14358016    ----a-w-    C:\Windows\SysWOW64\mshtml.dll
2014-03-13 09:28:48    67B5955F5F2F36D58993EB87101B3D2B    13761024    ----a-w-    C:\Windows\SysWOW64\ieframe.dll
2014-03-13 09:28:46    D7B1721B587698D495079B28758F13B3    1140736    ----a-w-    C:\Windows\SysWOW64\urlmon.dll
2014-03-13 09:28:46    9284BA6C27D360D71A5C0ECC8456E78E    1767936    ----a-w-    C:\Windows\SysWOW64\wininet.dll
2014-03-13 09:28:45    BE2E9A1E68FB4EC3603037DEFEE54ACE    109056    ----a-w-    C:\Windows\SysWOW64\iesysprep.dll
2014-03-13 09:28:45    24E07A483C6FA35F91E9D2F84495819E    2049024    ----a-w-    C:\Windows\SysWOW64\iertutil.dll
2014-03-13 09:28:44    803063FFA8F118D8F4CB9161F02B7B84    493056    ----a-w-    C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 09:28:44    3F2FD720B6C4EF55B25B330808121069    2877952    ----a-w-    C:\Windows\SysWOW64\jscript9.dll
2014-03-13 09:28:43    CAF4F8373A49BF979F2F296966E7E2A0    690688    ----a-w-    C:\Windows\SysWOW64\jscript.dll
2014-03-13 09:28:42    0F3B6590824D9C61B107A4134BB13A2F    163840    ----a-w-    C:\Windows\SysWOW64\msrating.dll
2014-03-13 09:28:41    B22641984AFD3D4B7D7478761C32FBCD    44032    ----a-w-    C:\Windows\SysWOW64\UXInit.dll
2014-03-13 09:28:41    006345E0F3F4C34CFFDA6CE0DB59E2F6    33280    ----a-w-    C:\Windows\SysWOW64\iernonce.dll
2014-03-13 09:28:40    CA0398A7BEB5DB12594EF4ABDB078A5D    39936    ----a-w-    C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 09:28:40    ABB14EEA787B326975C53E7ED05B91F6    61440    ----a-w-    C:\Windows\SysWOW64\iesetup.dll
2014-03-13 09:28:40    640DE326C818DEAA57C11F97A4E20BCC    534528    ----a-w-    C:\Windows\SysWOW64\uxtheme.dll
2014-03-13 09:28:38    03430E5004CFEBAE4BC8C47A366F869A    2706432    ----a-w-    C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 09:27:35    2B529B7B7109BE07A9156B198F812E21    17560576    ----a-w-    C:\Windows\SysWOW64\shell32.dll
2014-03-13 09:27:13    82EABFF4B896E5D3CD5F51E38E23B56B    496640    ----a-w-    C:\Windows\SysWOW64\qedit.dll
2014-03-13 09:27:08    7E25073A2E14B0628F9325859F8D7D48    1339392    ----a-w-    C:\Windows\SysWOW64\WindowsCodecs.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-03-22 21:56:56    5614386D4CFDF9E56F355C45BEEBC976    12872    ----a-w-    C:\Windows\Sysnative\bootdelete.exe
2014-03-15 16:59:40    397B448E57B24C5AF9178D07EB0DD662    360968    ----a-w-    C:\Windows\Sysnative\FNTCACHE.DAT
2014-03-13 09:29:56    126D6B3B7E8339A2537C4E1FEFA454A7    4036608    ----a-w-    C:\Windows\Sysnative\win32k.sys
2014-03-13 09:29:12    87478BFD51053034E45AAB2740285AF1    19273216    ----a-w-    C:\Windows\Sysnative\mshtml.dll
2014-03-13 09:28:53    EC8AE061C8F2134B9BD89634C156F425    15404032    ----a-w-    C:\Windows\Sysnative\ieframe.dll
2014-03-13 09:28:47    8D06EB11925D312D276C672CF5E8EE9C    2648576    ----a-w-    C:\Windows\Sysnative\iertutil.dll
2014-03-13 09:28:46    7D3FD710460FC0155C0F6A877AE46A48    1365504    ----a-w-    C:\Windows\Sysnative\urlmon.dll
2014-03-13 09:28:46    1CF15F7C401B901AC21C0F9D5D302C23    915968    ----a-w-    C:\Windows\Sysnative\uxtheme.dll
2014-03-13 09:28:45    79EDF01FA13D886F8E1B655D542011FB    2241536    ----a-w-    C:\Windows\Sysnative\wininet.dll
2014-03-13 09:28:45    10322D8C1BC36CA7EAA5C754A54045F8    136704    ----a-w-    C:\Windows\Sysnative\iesysprep.dll
2014-03-13 09:28:44    5EA008B3EEEC19ED0AB6A5345C811499    3960320    ----a-w-    C:\Windows\Sysnative\jscript9.dll
2014-03-13 09:28:43    2BFCEB6DC571E3277927D2E7C051C922    603136    ----a-w-    C:\Windows\Sysnative\msfeeds.dll
2014-03-13 09:28:42    EB9402ABE2A48993A829964FA55625CC    51712    ----a-w-    C:\Windows\Sysnative\ie4uinit.exe
2014-03-13 09:28:42    97FE0CAE98FCCAF5BB97681F38A01CEC    197120    ----a-w-    C:\Windows\Sysnative\msrating.dll
2014-03-13 09:28:42    3D08744AD10BF721361214D88462F094    855552    ----a-w-    C:\Windows\Sysnative\jscript.dll
2014-03-13 09:28:41    BE16B6EA1F7549DFB458CC200F4978FD    53760    ----a-w-    C:\Windows\Sysnative\UXInit.dll
2014-03-13 09:28:41    A2D58DB0C1C9C0BBCF10F59855D460BD    39936    ----a-w-    C:\Windows\Sysnative\iernonce.dll
2014-03-13 09:28:40    D12B64D097BF978D52720593D492674D    67072    ----a-w-    C:\Windows\Sysnative\iesetup.dll
2014-03-13 09:28:40    C8F4FB5B401942E6E25D3D2360B47C86    53760    ----a-w-    C:\Windows\Sysnative\jsproxy.dll
2014-03-13 09:28:36    E230D5CD7249CF451A9B345A1353C59A    2706432    ----a-w-    C:\Windows\Sysnative\mshtml.tlb
2014-03-13 09:27:55    2AFD6F0E07EDE3E7B31C3EE2DA6C403C    19751936    ----a-w-    C:\Windows\Sysnative\shell32.dll
2014-03-13 09:27:13    220FC13B64A483A8B0ED2E3758CFAA56    595968    ----a-w-    C:\Windows\Sysnative\qedit.dll
2014-03-13 09:27:10    D27626A720F5A62CC163B82596E96DE9    1628160    ----a-w-    C:\Windows\Sysnative\WindowsCodecs.dll
====== C:\Windows\Sysnative\drivers =====
2014-03-25 14:44:51    CD51E1D0D638F1E07A6EDC98CD7F5DDA    91352    ----a-w-    C:\Windows\Sysnative\drivers\mbamchameleon.sys
2014-03-13 09:30:04    CEBD9CDAADA11FAECCA82E4C06BCDD8E    248240    ----a-w-    C:\Windows\Sysnative\drivers\WdFilter.sys
2014-03-13 09:30:04    07D19A55CD27B330534D2DDEA60D5FC6    35856    ----a-w-    C:\Windows\Sysnative\drivers\WdBoot.sys
====== C:\Windows\Tasks ======
2014-03-26 09:23:56    94B0A177AAEBB11444F7CA096927FB92    3130    ----a-w-    C:\Windows\Sysnative\Tasks\{5638B9E7-A3B6-4481-BE5C-6DFCEB5ED30E}
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-03-22 14:45:23    --------    d-----w-    C:\Program Files\Enigma Software Group
======= C:\PROGRA~2 =====
2014-03-24 09:13:17    --------    d-----w-    C:\PROGRA~2\Mozilla Maintenance Service
2014-03-22 14:44:30    --------    d-----w-    C:\PROGRA~2\COMMON~1\Wise Installation Wizard
2014-03-01 12:49:25    --------    d-----w-    C:\PROGRA~2\COMMON~1\Skype
2014-02-27 20:25:17    --------    d-----w-    C:\PROGRA~2\VideoLAN
======= C: =====
2014-03-22 14:45:55    D41D8CD98F00B204E9800998ECF8427E    0    ----a-w-    C:\autoexec.bat
====== C:\Users\John\AppData\Roaming ======
2014-03-24 21:33:10    --------    d-----w-    C:\Users\Public\AppData\Local\temp
2014-03-24 21:33:10    --------    d-----w-    C:\Users\John\AppData\Local\temp
2014-03-24 21:33:10    --------    d-----w-    C:\Users\Default\AppData\Local\temp
2014-03-24 21:33:10    --------    d-----w-    C:\Users\Default User\AppData\Local\temp
2014-03-24 20:32:55    45A5F456D034239FA3FEE9808FBB1B9D    30    ----a-w-    C:\Users\John\AppData\Roaming\mbam.context.scan
2014-03-24 09:13:25    --------    d-----w-    C:\Users\John\AppData\Roaming\Mozilla
2014-03-24 09:13:25    --------    d-----w-    C:\Users\John\AppData\Local\Mozilla
2014-03-01 12:49:39    --------    d-----w-    C:\Users\John\AppData\Local\Skype
2014-03-01 12:01:36    --------    d-----w-    C:\Users\John\AppData\Local\Windows Live
2014-02-27 20:35:50    --------    d-----w-    C:\Users\John\AppData\Roaming\vlc
====== C:\Users\John ======
2014-03-25 14:44:19    99D69C3E87FE1556B76886F778480E2D    12589848    ----a-w-    C:\Users\John\Downloads\mbar-1.07.0.1009(1).exe
2014-03-25 09:52:07    DF06DC5837316EA78746E3F790A950ED    1950720    ----a-w-    C:\Users\John\Downloads\AdwCleaner.exe
2014-03-25 07:43:22    6655936E40C43120145A11547734F01F    2157056    ----a-w-    C:\Users\John\Downloads\FRST64.exe
2014-03-24 21:33:10    --------    d-----w-    C:\Users\Public\AppData
2014-03-24 20:56:17    99D69C3E87FE1556B76886F778480E2D    12589848    ----a-w-    C:\Users\John\Downloads\mbar-1.07.0.1009.exe
2014-03-24 09:32:06    B55D431B5EEC32FF6E7B7111DABD5711    4134240    ----a-w-    C:\Users\John\Downloads\tdsskillertest.exe
2014-03-24 09:13:17    --------    d-----w-    C:\ProgramData\Mozilla
2014-03-24 08:57:08    --------    d-----w-    C:\Windows\serviceprofiles\Localservice\winhttp
2014-03-24 08:34:06    519A940A2CDAADE35F1EC164CB81DD82    1038974    ----a-w-    C:\Users\John\Downloads\JRT.exe
2014-03-24 07:51:59    C8F069A68D57DA55102D58CFE24C0D72    4765152    ----a-w-    C:\Users\John\Downloads\ccsetup411.exe
2014-03-22 21:45:09    --------    d-----w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-03-22 21:43:42    6F4788FFB65599DB10D7B527A9619B3A    10820032    ----a-w-    C:\Users\John\Downloads\HitmanPro_x64.exe
2014-03-22 21:42:28    283CCAEB29C5B49D28EE3B0A2256223A    9988304    ----a-w-    C:\Users\John\Downloads\HitmanPro.exe
2014-03-22 17:15:01    --------    d-----w-    C:\ProgramData\GridinSoft
2014-03-01 12:49:26    --------    d-----w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-02-27 20:25:51    --------    d-----w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

====== C: exe-files ==
2014-03-25 12:14:27    6E0105823B4FE91632C9DA8314418417    655536    ----a-w-    C:\Program Files (x86)\InstallShield Installation Information\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}\setup.exe
2014-03-24 09:13:17    AEE4E9CC59CDEB55B1ECB0E596E796BE    119408    ----a-w-    C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
2014-03-24 09:13:17    13EFFCD1B16F980CE675DAB4350BEF11    106212    ----a-w-    C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
2014-03-22 21:45:09    6F4788FFB65599DB10D7B527A9619B3A    10820032    ----a-w-    C:\Program Files\HitmanPro\HitmanPro.exe
=== C: other files ==
2014-03-25 14:44:51    CD51E1D0D638F1E07A6EDC98CD7F5DDA    91352    ----a-w-    C:\Windows\System32\Drivers\mbamchameleon.sys
2014-03-22 14:45:55    D41D8CD98F00B204E9800998ECF8427E    0    ----a-w-    C:\autoexec.bat
2014-03-19 21:27:58    A69947307E331E8E37F34AC40E0146F7    108    ----a-w-    C:\Program Files (x86)\Trusteer\Rapport\global.zip
2014-03-19 21:27:40    EBA3D20E285D7461C2177AD2E64DA7EF    282712    ----a-w-    C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
2014-03-19 21:27:40    E36D2CEC679CEDC1A298C36BCDAF8E23    397848    ----a-w-    C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
2014-03-19 21:27:40    7252FEA79A5EE99C6F7A432090978852    316312    ----a-w-    C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportKE64.sys
2014-03-19 21:27:40    6F8512C8B25445860A07B5103394FB3D    273592    ----a-w-    C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportHades64.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT EPLTarget\P0000000000000000 /M XP-202 203 206 Series"

[HKEY_USERS\S-1-5-21-1935344830-3333155245-2583117102-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"EPLTarget\P0000000000000001"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT EPLTarget\P0000000000000001 /M XP-202 203 206 Series"
"Sony PC Companion"="C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe /Background"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT EPLTarget\P0000000000000000 /M XP-202 203 206 Series"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"HP CoolSense"="C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"F-Secure Hoster (44515)"="C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe -app -hosterid:1"
"F-Secure Manager"="C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE /splash"
"EEventManager"="C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"EPLTarget\P0000000000000001"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT EPLTarget\P0000000000000001 /M XP-202 203 206 Series"
"Sony PC Companion"="C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe /Background"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"FAHConsole"="C:\Program Files\File Association Helper\FAHConsole.exe"
"CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon"
"CanonSolutionMenu"="C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon"
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update"

==== Startup Folders ======================

2013-01-16 19:03:04    1999    ----a-w-    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a-------- [undetermined Task]
C:\Windows\tasks\HPCeeScheduleForJohn.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [13/09/2010 21:15]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\HPCeeScheduleForJohn" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\Windows\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe]
"C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe"]
"C:\Windows\SysNative\tasks\Synaptics TouchPad Enhancements" [\Program Files\Synaptics\SynTP\SynTPEnh.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe]
"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\vjg0qiq9.default-1395655567045
95812430959AE88CDD0301AB3A71913B    - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll -    Shockwave Flash
0E8B2D0D9E3415A91EF259CE1112C579    - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll -    Shockwave for Director / Shockwave for Director
F3B0E300AFC94E1A775A2D935A7D384F    - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll -    Shockwave for Director / Shockwave for Director


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://g.uk.msn.com/HPNOT13/2"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://g.uk.msn.com/HPNOT13/2"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{D944BB61-2E34-4DBF-A683-47E505C587DC} eBay  Url="http://rover.ebay.com/rover/1/710-29550-11896-25/4"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk deleted successfully

==== HijackThis Entries ======================

O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [F-Secure Hoster (44515)] "C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe" -app -hosterid:1
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-202 203 206 Series"
O4 - HKCU\..\Run: [sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-18\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-202 203 206 Series" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-202 203 206 Series" (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: F-Secure Dll Hoster (fshoster) - F-Secure Corporation - C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem87.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

 

Link to post
Share on other sites

==== Sysinternals Autoruns Log ======================

C:\Users\John\AppData\Local\Microsoft\Windows Sidebar\Settings.ini
   Protection Status
     C:\Program Files\windows sidebar\gadgets\F-Secure.Gadget
     See your computer's protection status. This requires supported security software.
     F-secure Corporation
     C:\Program Files\windows sidebar\gadgets\F-Secure.Gadget\Gadget.xml
     18/10/2012 16:43

HKLM\System\CurrentControlSet\Services
   ABBYY.Licensing.FineReader.Sprint.9.0
     "C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
     This service is required for the operation of the ABBYY FineReader 9.0 Express Edition licensing mechanism.
     ABBYY
     1.0.0.375
     c:\program files (x86)\common files\abbyy\finereadersprint\9.00\licensing\networklicenseserver.exe
     14/05/2009 14:07
   AdobeARMservice
     "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
     Adobe Acrobat Updater keeps your Adobe software up to date.
     Adobe Systems Incorporated
     1.701.3.3014
     c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe
     21/11/2013 16:55
   AdobeFlashPlayerUpdateSvc
     C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
     This service keeps your Adobe Flash Player installation up to date with the latest enhancements and security fixes.
     Adobe Systems Incorporated
     12.0.0.77
     c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
     03/03/2014 21:44
   Bonjour Service
     "C:\Program Files\Bonjour\mDNSResponder.exe"
     Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence.
     Apple Inc.
     3.0.0.10
     c:\program files\bonjour\mdnsresponder.exe
     31/08/2011 05:52
   cphs
     %SystemRoot%\SysWow64\IntelCpHeciSvc.exe
     Intel® Content Protection HECI Service - enables communication with the Content Protection FW
     Intel Corporation
     1.0.1.14
     c:\windows\syswow64\intelcphecisvc.exe
     22/12/2011 06:45
   EpsonBidirectionalService
     C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
     eEBAPI Core Process module
     SEIKO EPSON CORPORATION
     2.3.4.0
     c:\program files (x86)\common files\epson\ebapi\eebsvc.exe
     19/12/2006 12:53
   EpsonScanSvc
     C:\Windows\system32\EscSvc64.exe
     Epson Scanner Service (64bit)
     Seiko Epson Corporation
     1.0.2.1
     c:\windows\system32\escsvc64.exe
     12/12/2011 02:27
   fshoster
     "C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe" -hosterid:0
     F-Secure Dll Hoster Service
     F-Secure Corporation
     1.4.35127.0
     c:\program files (x86)\talktalk\security\fshoster32.exe
     01/10/2012 10:23
   FSMA
     "C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE"
     F-Secure Management Agent
     F-Secure Corporation
     8.30.43098.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fsma32.exe
     28/09/2012 12:09
   FSORSPClient
     "C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe"
     F-Secure ORSP Service
     F-Secure Corporation
     1.1.25.2280
     c:\program files (x86)\talktalk\security\apps\ccf_reputation\fsorsp.exe
     05/06/2013 18:49
   GamesAppService
     "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe"
     WT Games App Services
     WildTangent, Inc.
     4.0.4918.0
     c:\program files (x86)\wildtangent games\app\gamesappservice.exe
     04/10/2010 22:15
   HP Support Assistant Service
     "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
     HP Support Assistant Service
     Hewlett-Packard Company
     7.0.39.14
     c:\program files (x86)\hewlett-packard\hp support framework\hpsa_service.exe
     27/09/2012 11:55
   hpqwmiex
     "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
     HP Software Framework WMI Service
     Hewlett-Packard Company
     4.6.10.1
     c:\program files (x86)\hewlett-packard\shared\hpqwmiex.exe
     06/09/2012 15:18
   hpsrv
     %SystemRoot%\system32\Hpservice.exe
     HpService
     Hewlett-Packard Company
     4.2.9.1
     c:\windows\system32\hpservice.exe
     24/09/2012 15:32
   HPWMISVC
     C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
     HP Quick Launch WMI Service
     Hewlett-Packard Development Company, L.P.
     3.0.1.0
     c:\program files (x86)\hewlett-packard\hp quick launch\hpwmisvc.exe
     07/09/2012 06:51
   IconMan_R
     "C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
     Realtek Card Reader Patch Tool.
     Realsil Microelectronics Inc.
     1.5.0.0
     c:\program files (x86)\realtek\realtek pcie card reader\riconman.exe
     13/07/2012 09:02
   Intel® Capability Licensing Service Interface
     "C:\Program Files\Intel\iCLS Client\HeciServer.exe"
     Version: 1.24.388.1
     Intel® Corporation
     1.24.388.1
     c:\program files\intel\icls client\heciserver.exe
     20/04/2012 12:16
   Intel® ME Service
     C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
     Intel© Manageability Engine Service (Intel© ME Service)
     Intel Corporation
     8.1.0.1256
     c:\program files (x86)\intel\intel® management engine components\fwservice\intelmefwservice.exe
     27/06/2012 19:39
   jhi_service
     C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
     Intel® Dynamic Application Loader Host Interface Service - Allows applications to access the local Intel ® DAL
     Intel Corporation
     8.1.0.1252
     c:\program files (x86)\intel\intel® management engine components\dal\jhi_service.exe
     25/06/2012 17:43
   LMS
     C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
     Allows applications to access the local Intel® Management and Security Application using its locally-available selected network interfaces.
     Intel Corporation
     8.1.0.1252
     c:\program files (x86)\intel\intel® management engine components\lms\lms.exe
     25/06/2012 17:36
   MBAMScheduler
     "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
     Malwarebytes Anti-Malware scheduler
     Malwarebytes Corporation
     1.70.0.0
     c:\program files (x86)\malwarebytes' anti-malware\mbamscheduler.exe
     28/02/2013 20:38
   MBAMService
     "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
     Malwarebytes Anti-Malware service
     Malwarebytes Corporation
     1.70.0.0
     c:\program files (x86)\malwarebytes' anti-malware\mbamservice.exe
     28/02/2013 20:38
   MozillaMaintenance
     "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
     The Mozilla Maintenance Service ensures that you have the latest and most secure version of Mozilla Firefox on your computer. Keeping Firefox up to date is very important for your online security, and Mozilla strongly recommends that you keep this service enabled.
     Mozilla Foundation
     28.0.0.5186
     c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe
     15/03/2014 06:21
   PnkBstrA
     C:\Windows\system32\PnkBstrA.exe
     PunkBuster Service Component [v1034] http://www.evenbalance.com
     c:\windows\syswow64\pnkbstra.exe
     17/11/2010 05:25
   RapportMgmtService
     "C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
     Trusteer Endpoint Protection Central Management and Monitoring Service
     Trusteer Ltd.
     3.5.1304.61
     c:\program files (x86)\trusteer\rapport\bin\rapportmgmtservice.exe
     19/03/2014 19:03
   SkypeUpdate
     "C:\Program Files (x86)\Skype\Updater\Updater.exe"
     Enables the detection, download and installation of updates for Skype.
     Skype Technologies
     6.8.1.61523
     c:\program files (x86)\skype\updater\updater.exe
     23/10/2013 08:12
   Sony PC Companion
     "C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe"
     Provides support for Sony PC Companion Core and Services.
     Avanquest Software
     1.0.0.0
     c:\program files (x86)\sony\sony pc companion\pccservice.exe
     11/01/2012 16:34
   STacSV
     C:\Program Files\IDT\WDM\STacSV64.exe
     Manages audio jack configurations.
     IDT, Inc.
     1.0.6417.0
     c:\program files\idt\wdm\stacsv64.exe
     21/07/2012 13:48
   Steam Client Service
     "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
     Steam Client Service monitors and updates Steam content
     Valve Corporation
     2.13.4.49
     c:\program files (x86)\common files\steam\steamservice.exe
     25/02/2014 21:44
   UNS
     "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
     Intel® Management and Security Application User Notification Service - Updates the Windows Event Log with notifications of pre defined events received from the local Intel® Management and Security Application Device.
     Intel Corporation
     8.1.0.1252
     c:\program files (x86)\intel\intel® management engine components\uns\uns.exe
     25/06/2012 17:38

HKLM\System\CurrentControlSet\Services
   3ware
     System32\drivers\3ware.sys
     LSI 3ware SCSI Storport Driver
     LSI
     5.1.0.47
     c:\windows\system32\drivers\3ware.sys
     08/03/2012 20:33
   Accelerometer
     \SystemRoot\system32\DRIVERS\Accelerometer.sys
     HP Accelerometer
     Hewlett-Packard Company
     4.2.9.1
     c:\windows\system32\drivers\accelerometer.sys
     24/09/2012 15:31
   adp94xx
     System32\drivers\adp94xx.sys
     Adaptec Windows SAS/SATA Storport Driver
     Adaptec, Inc.
     1.6.6.4
     c:\windows\system32\drivers\adp94xx.sys
     05/12/2008 23:54
   adpahci
     System32\drivers\adpahci.sys
     Adaptec Windows SATA Storport Driver
     Adaptec, Inc.
     1.6.6.1
     c:\windows\system32\drivers\adpahci.sys
     01/05/2007 17:30
   adpu320
     System32\drivers\adpu320.sys
     Adaptec StorPort Ultra320 SCSI Driver (X64)
     Adaptec, Inc.
     7.2.0.0
     c:\windows\system32\drivers\adpu320.sys
     28/02/2007 00:04
   amdkmdag
     \SystemRoot\system32\DRIVERS\atikmdag.sys
     ATI Radeon Kernel Mode Driver
     Advanced Micro Devices, Inc.
     8.1.1.1248
     c:\windows\system32\drivers\atikmdag.sys
     18/06/2012 21:21
   amdkmdap
     \SystemRoot\system32\DRIVERS\atikmpag.sys
     AMD multi-vendor Miniport Driver
     Advanced Micro Devices, Inc.
     8.14.1.6264
     c:\windows\system32\drivers\atikmpag.sys
     18/06/2012 20:41
   amdsata
     System32\drivers\amdsata.sys
     AHCI 1.2 Device Driver
     Advanced Micro Devices
     1.1.4.6
     c:\windows\system32\drivers\amdsata.sys
     11/06/2012 22:19
   amdsbs
     System32\drivers\amdsbs.sys
     AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform
     AMD Technologies Inc.
     3.7.1540.30
     c:\windows\system32\drivers\amdsbs.sys
     21/02/2012 18:15
   amdxata
     System32\drivers\amdxata.sys
     Storage Filter Driver
     Advanced Micro Devices
     1.1.4.6
     c:\windows\system32\drivers\amdxata.sys
     11/06/2012 22:36
   arc
     System32\drivers\arc.sys
     Adaptec RAID Storport Driver
     PMC-Sierra, Inc.
     5.2.0.18702
     c:\windows\system32\drivers\arc.sys
     19/03/2012 17:49
   arcsas
     System32\drivers\arcsas.sys
     Adaptec SAS RAID WS03 Driver
     PMC-Sierra, Inc.
     5.2.0.18702
     c:\windows\system32\drivers\arcsas.sys
     19/03/2012 17:51
   b06bdrv
     System32\drivers\bxvbda.sys
     Broadcom NetXtreme II GigE VBD
     Broadcom Corporation
     7.0.1.36
     c:\windows\system32\drivers\bxvbda.sys
     23/07/2012 23:30
   catchme
     \??\C:\ComboFix\catchme.sys
     File not found: C:\ComboFix\catchme.sys
     
   dg_ssudbus
     \SystemRoot\system32\DRIVERS\ssudbus.sys
     SAMSUNG USB Composite Device Driver (MSS Ver.3)
     DEVGURU Co., LTD.(www.devguru.co.kr)
     2.9.510.0
     c:\windows\system32\drivers\ssudbus.sys
     23/05/2013 06:33
   ebdrv
     System32\drivers\evbda.sys
     Broadcom NetXtreme II 10 GigE VBD
     Broadcom Corporation
     7.0.35.95
     c:\windows\system32\drivers\evbda.sys
     24/07/2012 12:22
   esgiguard
     \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
     File not found: C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
     
   F-Secure Gatekeeper
     \??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys
     F-Secure Gatekeeper
     F-Secure Corporation
     10.80.29.22
     c:\program files (x86)\talktalk\security\apps\computersecurity\anti-virus\minifilter\fsgk.sys
     27/01/2014 13:38
   F-Secure HIPS
     \??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys
     F-Secure HIPS Driver
     F-Secure Corporation
     5.0.436.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\hips\drivers\fshs.sys
     15/01/2014 11:05
   fsbts
     system32\Drivers\fsbts.sys
     fsbts
     F-Secure Corporation
     2.0.18200.23
     c:\windows\system32\drivers\fsbts.sys
     14/05/2012 11:03
   fsni
     \??\C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys
     F-Secure Network Interceptor Driver, 64bit
     F-Secure Corporation
     1.23.124.0
     c:\program files (x86)\talktalk\security\apps\ccf_scanning\fsni64.sys
     25/04/2013 02:11
   fsvista
     \??\C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys
     F-Secure Vista Support Driver
     F-Secure Corporation
     7.70.14120.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\anti-virus\minifilter\fsvista.sys
     18/03/2008 06:37
   hpdskflt
     system32\DRIVERS\hpdskflt.sys
     HP Disk Filter - SATA/RAID
     Hewlett-Packard Company
     4.2.9.1
     c:\windows\system32\drivers\hpdskflt.sys
     24/09/2012 15:31
   HpSAMD
     System32\drivers\HpSAMD.sys
     Smart Array SAS/SATA Controller Media Driver
     Hewlett-Packard Company
     7.0.12.0
     c:\windows\system32\drivers\hpsamd.sys
     30/05/2012 22:24
   iaStorA
     System32\drivers\iaStorA.sys
     Intel Rapid Storage Technology driver - x64
     Intel Corporation
     11.5.2.1001
     c:\windows\system32\drivers\iastora.sys
     31/07/2012 18:21
   iaStorV
     System32\drivers\iaStorV.sys
     Intel Matrix Storage Manager driver - x64
     Intel Corporation
     8.6.2.1019
     c:\windows\system32\drivers\iastorv.sys
     11/04/2011 18:48
   igfx
     \SystemRoot\system32\DRIVERS\igdkmd64.sys
     Intel Graphics Kernel Mode Driver
     Intel Corporation
     9.17.10.2828
     c:\windows\system32\drivers\igdkmd64.sys
     31/07/2012 22:05
   iirsp
     System32\drivers\iirsp.sys
     Intel/ICP Raid Storport Driver
     Intel Corp./ICP vortex GmbH
     5.4.22.0
     c:\windows\system32\drivers\iirsp.sys
     13/12/2005 21:47
   IntcDAud
     \SystemRoot\system32\DRIVERS\IntcDAud.sys
     Intel® Display Audio Driver
     Intel® Corporation
     6.14.0.3097
     c:\windows\system32\drivers\intcdaud.sys
     19/06/2012 14:40
   LSI_SAS
     System32\drivers\lsi_sas.sys
     LSI Fusion-MPT SAS Driver (StorPort)
     LSI Corporation
     1.34.2.6
     c:\windows\system32\drivers\lsi_sas.sys
     11/05/2012 19:40
   LSI_SAS2
     System32\drivers\lsi_sas2.sys
     LSI SAS Gen2 Driver (StorPort)
     LSI Corporation
     2.0.55.84
     c:\windows\system32\drivers\lsi_sas2.sys
     12/03/2012 20:28
   LSI_SCSI
     System32\drivers\lsi_scsi.sys
     LSI Fusion-MPT SCSI Driver (StorPort)
     LSI Corporation
     1.34.2.5
     c:\windows\system32\drivers\lsi_scsi.sys
     21/02/2012 23:59
   LSI_SSS
     System32\drivers\lsi_sss.sys
     LSI SSS PCIe/Flash Driver (StorPort)
     LSI Corporation
     2.10.55.81
     c:\windows\system32\drivers\lsi_sss.sys
     22/02/2012 00:00
   MBAMProtector
     \??\C:\Windows\system32\drivers\mbam.sys
     Malwarebytes Anti-Malware
     Malwarebytes Corporation
     1.60.2.0
     c:\windows\system32\drivers\mbam.sys
     28/02/2013 20:33
   megasas
     System32\drivers\megasas.sys
     MEGASAS RAID Controller Driver for Windows
     LSI Corporation
     6.2.8313.0
     c:\windows\system32\drivers\megasas.sys
     03/04/2012 19:45
   MegaSR
     System32\drivers\MegaSR.sys
     LSI MegaRAID Software RAID Driver
     LSI Corporation, Inc.
     14.6.1007.2012
     c:\windows\system32\drivers\megasr.sys
     24/02/2012 18:22
   MEIx64
     \SystemRoot\System32\drivers\HECIx64.sys
     Intel® Management Engine Interface
     Intel Corporation
     8.1.0.1263
     c:\windows\system32\drivers\hecix64.sys
     02/07/2012 22:14
   mvumis
     System32\drivers\mvumis.sys
     Marvell Flash Controller Driver
     Marvell Semiconductor, Inc.
     1.0.5.7
     c:\windows\system32\drivers\mvumis.sys
     20/03/2012 07:43
   netr28x
     \SystemRoot\system32\DRIVERS\netr28x.sys
     Ralink 802.11 Wireless Adapter Driver
     Ralink Technology, Corp.
     5.0.25.0
     c:\windows\system32\drivers\netr28x.sys
     13/04/2013 02:22
   nfrd960
     System32\drivers\nfrd960.sys
     IBM ServeRAID Controller Driver
     IBM Corporation
     7.10.0.0
     c:\windows\system32\drivers\nfrd960.sys
     06/06/2006 21:11
   nvraid
     System32\drivers\nvraid.sys
     NVIDIA© nForce RAID Driver
     NVIDIA Corporation
     10.6.0.22
     c:\windows\system32\drivers\nvraid.sys
     13/09/2011 00:01
   nvstor
     System32\drivers\nvstor.sys
     NVIDIA© nForce Sata Performance Driver
     NVIDIA Corporation
     10.6.0.22
     c:\windows\system32\drivers\nvstor.sys
     12/09/2011 23:53
   pfc
     system32\drivers\pfc.sys
     File not found: system32\drivers\pfc.sys
     
   RapportCerberus_59849
     \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys
     c:\programdata\trusteer\rapport\store\exts\rapportcerberus\baseline\rapportcerberus64_59849.sys
     21/09/2013 21:47
   RapportEI64
     \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
     RapportEI64
     Trusteer Ltd.
     13.5.1304.61
     c:\program files (x86)\trusteer\rapport\bin\x64\rapportei64.sys
     19/03/2014 19:24
   RapportHades64
     System32\Drivers\RapportHades64.sys
     RapportHades64
     Trusteer Ltd.
     13.5.1304.61
     c:\windows\system32\drivers\rapporthades64.sys
     19/03/2014 19:24
   RapportKE64
     System32\Drivers\RapportKE64.sys
     RapportKE
     Trusteer Ltd.
     13.5.1304.61
     c:\windows\system32\drivers\rapportke64.sys
     19/03/2014 19:24
   RapportPG64
     \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
     RapportPG64
     Trusteer Ltd.
     13.5.1304.61
     c:\program files (x86)\trusteer\rapport\bin\x64\rapportpg64.sys
     19/03/2014 19:25
   RSP2STOR
     \SystemRoot\system32\DRIVERS\RtsP2Stor.sys
     Realtek Pcie CardReader Driver for 2K/XP/Vista/Win7/Win8
     Realtek Semiconductor Corp.
     6.2.8400.29029
     c:\windows\system32\drivers\rtsp2stor.sys
     03/07/2012 06:00
   RTL8168
     \SystemRoot\system32\DRIVERS\Rt630x64.sys
     Realtek 8101E/8168/8169 NDIS 6.30 64-bit Driver                
     Realtek                                            
     8.3.730.2012
     c:\windows\system32\drivers\rt630x64.sys
     30/07/2012 16:03
   secdrv
     secdrv
     Macrovision SECURITY Driver
     Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
     4.3.86.0
     c:\windows\system32\drivers\secdrv.sys
     13/09/2006 13:18
   SiSRaid2
     System32\drivers\SiSRaid2.sys
     SiS RAID Stor Miniport Driver
     Silicon Integrated Systems Corp.
     5.1.1039.2600
     c:\windows\system32\drivers\sisraid2.sys
     24/09/2008 18:28
   SiSRaid4
     System32\drivers\sisraid4.sys
     SiS AHCI Stor-Miniport Driver
     Silicon Integrated Systems
     5.1.1039.3600
     c:\windows\system32\drivers\sisraid4.sys
     01/10/2008 21:56
   SmbDrv
     \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys
     Synaptics SMBus Driver
     Synaptics Incorporated
     16.2.10.12
     c:\windows\system32\drivers\smb_driver_amdasf.sys
     24/08/2012 23:21
   SmbDrvI
     \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys
     Synaptics SMBus Driver
     Synaptics Incorporated
     16.2.10.12
     c:\windows\system32\drivers\smb_driver_intel.sys
     24/08/2012 23:22
   ssudmdm
     \SystemRoot\system32\DRIVERS\ssudmdm.sys
     @oem20.inf,%ssud.Service.Desc%;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.)
     DEVGURU Co., LTD.(www.devguru.co.kr)
     2.9.510.0
     c:\windows\system32\drivers\ssudmdm.sys
     23/05/2013 06:33
   stexstor
     System32\drivers\stexstor.sys
     Promise SuperTrak EX Series Driver for Windows x64
     Promise Technology, Inc.
     5.1.0.9
     c:\windows\system32\drivers\stexstor.sys
     19/11/2011 00:27
   STHDA
     \SystemRoot\system32\DRIVERS\stwrt64.sys
     IDT PC Audio
     IDT, Inc.
     6.10.6417.0
     c:\windows\system32\drivers\stwrt64.sys
     21/07/2012 13:36
   SynTP
     \SystemRoot\system32\DRIVERS\SynTP.sys
     Synaptics Touchpad Driver
     Synaptics Incorporated
     16.2.10.12
     c:\windows\system32\drivers\syntp.sys
     24/08/2012 23:20
   viaide
     System32\drivers\viaide.sys
     VIA Generic PCI IDE Bus Driver
     VIA Technologies, Inc.
     6.0.6000.170
     c:\windows\system32\drivers\viaide.sys
     26/07/2012 02:29
   vsmraid
     System32\drivers\vsmraid.sys
     VIA RAID DRIVER FOR AMD-X86-64
     VIA Technologies Inc.,Ltd
     7.0.8140.6290
     c:\windows\system32\drivers\vsmraid.sys
     31/01/2012 19:55
   VSTXRAID
     System32\drivers\vstxraid.sys
     VIA StorX RAID Controller Driver
     VIA Corporation
     8.0.8220.8080
     c:\windows\system32\drivers\vstxraid.sys
     26/03/2012 17:42
   WirelessButtonDriver
     \SystemRoot\System32\drivers\WirelessButtonDriver64.sys
     HP Wireless Button Driver
     Hewlett-Packard Development Company, L.P.
     1.0.6.1
     c:\windows\system32\drivers\wirelessbuttondriver64.sys
     30/08/2012 03:11

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
   igfxcui
     igfxdev.dll
     igfxdev Module
     Intel Corporation
     8.15.10.2828
     c:\windows\system32\igfxdev.dll
     31/07/2012 21:14

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
   Canon BJ Language Monitor MP250 series
     CNMLM9W.DLL
     IJ Language Monitor
     CANON INC.
     0.3.0.1
     c:\windows\system32\cnmlm9w.dll
     04/02/2010 04:23
   EPSON XP-202 203 206 Series 64MonitorBE
     E_ILMIME.DLL
     EPSON Bi-directional Monitor AMD64
     SEIKO EPSON CORPORATION
     3.3.0.0
     c:\windows\system32\e_ilmime.dll
     19/04/2011 04:13
   EpsonNet Print Port
     enppmon.dll
     EpsonNet Print Component
     SEIKO EPSON CORPORATION
     2.6.0.6
     c:\windows\system32\enppmon.dll
     12/11/2012 06:15
   HP Universal Port Monitor
     hpbprtmon.dll
     Port Monitor Server DLL
     Hewlett-Packard
     0.3.1282.3554
     c:\windows\system32\hpbprtmon.dll
     24/07/2012 18:54

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries
   mdnsNSP
     C:\Program Files (x86)\Bonjour\mdnsNSP.dll
     Bonjour Namespace Provider
     Apple Inc.
     3.0.0.10
     c:\program files (x86)\bonjour\mdnsnsp.dll
     31/08/2011 05:44

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64
   mdnsNSP
     C:\Program Files\Bonjour\mdnsNSP.dll
     Bonjour Namespace Provider
     Apple Inc.
     3.0.0.10
     c:\program files\bonjour\mdnsnsp.dll
     31/08/2011 05:53

HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
   _Wow64cpu
     Wow64cpu.dll
     File not found: C:\Windows\syswow64\Wow64cpu.dll
     
   _Wow64win
     Wow64win.dll
     File not found: C:\Windows\syswow64\Wow64win.dll
     
   _Wow64
     Wow64.dll
     File not found: C:\Windows\syswow64\Wow64.dll
     

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   IgfxTray
     C:\Windows\system32\igfxtray.exe
     igfxTray Module
     Intel Corporation
     8.15.10.2828
     c:\windows\system32\igfxtray.exe
     31/07/2012 21:15
   HotKeysCmds
     C:\Windows\system32\hkcmd.exe
     hkcmd Module
     Intel Corporation
     8.15.10.2828
     c:\windows\system32\hkcmd.exe
     31/07/2012 21:14
   Persistence
     C:\Windows\system32\igfxpers.exe
     persistence Module
     Intel Corporation
     8.15.10.2828
     c:\windows\system32\igfxpers.exe
     31/07/2012 21:14
   SysTrayApp
     C:\Program Files\IDT\WDM\sttray64.exe
     IDT PC Audio
     IDT, Inc.
     1.0.6417.0
     c:\program files\idt\wdm\sttray64.exe
     21/07/2012 13:49
   SynTPEnh
     %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
     Synaptics TouchPad Enhancements
     Synaptics Incorporated
     16.2.10.12
     c:\program files\synaptics\syntp\syntpenh.exe
     25/08/2012 00:02
   FAHConsole
     C:\Program Files\File Association Helper\FAHConsole.exe
     File Association Helper
     WinZip Computing International, LLC
     1.1.6.53763
     c:\program files\file association helper\fahconsole.exe
     26/09/2013 07:40
   CanonMyPrinter
     C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
     Canon My Printer
     CANON INC.
     2.1.2.0
     c:\program files\canon\myprinter\bjmyprt.exe
     19/10/2009 05:59
   CanonSolutionMenu
     C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon
     CNSLMAIN
     CANON INC.
     1.4.3.0
     c:\program files (x86)\canon\solutionmenu\cnslmain.exe
     03/09/2009 12:37

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
   RemoteControl10
     "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
     PowerDVD RC Service
     CyberLink Corp.
     7.0.2314.0
     c:\program files (x86)\cyberlink\powerdvd10\pdvd10serv.exe
     28/03/2012 10:22
   HP CoolSense
     C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
     HP CoolSense
     Hewlett-Packard Development Company, L.P.
     2.1.0.51
     c:\program files (x86)\hewlett-packard\hp coolsense\coolsense.exe
     05/11/2012 08:13
   Adobe ARM
     "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
     Adobe Reader and Acrobat Manager
     Adobe Systems Incorporated
     1.701.3.3014
     c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
     21/11/2013 16:56
   F-Secure Hoster (44515)
     "C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe" -app -hosterid:1
     F-Secure Host Process
     F-Secure Corporation
     1.4.35127.0
     c:\program files (x86)\talktalk\security\fshoster32.exe
     01/10/2012 10:23
   F-Secure Manager
     "C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE" /splash
     F-Secure Settings and Statistics
     F-Secure Corporation
     8.30.43098.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fsm32.exe
     28/09/2012 12:07
   EEventManager
     "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
     EEventManager Application
     SEIKO EPSON CORPORATION
     3.0.0.1
     c:\program files (x86)\epson software\event manager\eeventmanager.exe
     31/10/2011 05:23
   SunJavaUpdateSched
     "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
     Java Update Scheduler
     Oracle Corporation
     2.1.9.8
     c:\program files (x86)\common files\java\java update\jusched.exe
     02/07/2013 16:16
   HP Quick Launch
     C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
     HP Message Service
     Hewlett-Packard Development Company, L.P.
     3.0.6.0
     c:\program files (x86)\hewlett-packard\hp quick launch\hpmsgsvc.exe
     07/09/2012 09:31

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
   NCPluginUpdater
     "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
     NCPluginUpdater
     Hewlett-Packard
     1.0.0.0
     c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\ncpluginupdater.exe
     22/10/2013 02:52

HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components
   Adobe Reader User Settings
     "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings
     Acrobat Install On Demand
     Adobe Systems, Inc.
     11.0.4.63
     c:\program files (x86)\adobe\reader 11.0\esl\aiodlite.dll
     05/09/2013 12:29

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
   Steam
     "C:\Program Files (x86)\Steam\Steam.exe" -silent
     Steam Client Bootstrapper
     Valve Corporation
     2.13.4.49
     c:\program files (x86)\steam\steam.exe
     25/02/2014 21:45
   EPLTarget\P0000000000000001
     C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-202 203 206 Series"
     EPSON Status Monitor 3
     SEIKO EPSON CORPORATION
     7.0.3.0
     c:\windows\system32\spool\drivers\x64\3\e_iatiime.exe
     29/02/2012 07:26
   Sony PC Companion
     "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
     Sony PC Companion
     Sony
     2.1.0.0
     c:\program files (x86)\sony\sony pc companion\pccompanion.exe
     11/10/2013 13:35
   Skype
     "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
     Skype
     Skype Technologies S.A.
     6.14.0.104
     c:\program files (x86)\skype\phone\skype.exe
     10/02/2014 17:37

Task Scheduler
   \Adobe Flash Player Updater
     "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe"
     Adobe© Flash© Player Update Service 12.0 r0
     Adobe Systems Incorporated
     12.0.0.77
     c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
     03/03/2014 21:44
   \CCleanerSkipUAC
     "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
     CCleaner
     Piriform Ltd
     4.11.0.4619
     c:\program files\ccleaner\ccleaner.exe
     19/02/2014 14:42
   \HPCeeScheduleForJohn
     "C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe" HPCeeScheduleForJohn (null)
     HP Ceement
     Hewlett-Packard
     6.0.1.7
     c:\program files (x86)\hewlett-packard\hp ceement\hpcee.exe
     14/09/2010 05:11
   \MirageAgent
     "C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
     YouCam Mirage
     CyberLink
     1.0.0.526
     c:\program files (x86)\cyberlink\youcam\ycmmirage.exe
     26/05/2010 02:59
   \Norton WSC Integration
     "C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe" /taskschd
     File not found: C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe
     
   \Synaptics TouchPad Enhancements
     "\Program Files\Synaptics\SynTP\SynTPEnh.exe"
     Synaptics TouchPad Enhancements
     Synaptics Incorporated
     16.2.10.12
     c:\program files\synaptics\syntp\syntpenh.exe
     25/08/2012 00:02
   \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start
     "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe" /taskrestart
     HP Support Assistant
     Hewlett-Packard Company
     7.0.39.15
     c:\program files (x86)\hewlett-packard\hp support framework\hpsf.exe
     27/09/2012 13:40
   \Hewlett-Packard\HP Support Assistant\PC Health Analysis
     "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe" /L Analysis
     HP Support Assistant
     Hewlett-Packard Company
     7.0.39.15
     c:\program files (x86)\hewlett-packard\hp support framework\hpsf.exe
     27/09/2012 13:40
   \Hewlett-Packard\HP Support Assistant\Update Check
     "C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe" /s /p 1
     HPSFUpdater
     Hewlett-Packard Company
     7.3.0.10
     c:\programdata\hewlett-packard\hp support framework\resources\updater7\hpsfupdater.exe
     12/12/2013 22:17
   \Hewlett-Packard\HP Support Assistant\WarrantyChecker
     "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe"
     HPWarrantyChecker
     Hewlett-Packard
     3.4.2.2
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpwarrantycheck\hpwarrantychecker.exe
     10/02/2014 22:23
   \Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan
     "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe" /DeviceScanR6
     HPWarrantyChecker
     Hewlett-Packard
     3.4.2.2
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpwarrantycheck\hpwarrantychecker.exe
     10/02/2014 22:23
   \Microsoft\Windows\NetTrace\GatherNetworkInfo
     "%windir%\system32\gatherNetworkInfo.vbs"
     c:\windows\system32\gathernetworkinfo.vbs
     02/06/2012 14:31
   \Norton Internet Security\Norton Error Analyzer
     "C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe" /analyze
     File not found: C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe
     
   \Norton Internet Security\Norton Error Processor
     "C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe" /submit
     File not found: C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe
     

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
   Canon Easy-WebPrint EX BHO
     HKCR\CLSID\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}
     Easy-WebPrint EX
     CANON INC.
     1.3.5.0
     c:\program files (x86)\canon\easy-webprint ex\ewpexbho.dll
     14/06/2012 02:32
   HP Network Check Helper
     HKCR\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
     HP Network Check IE Plug-in
     Hewlett-Packard
     7.3.1.0
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpnetworkcheck\hpnetworkcheckplugin.dll
     28/08/2013 08:28

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
   Canon Easy-WebPrint EX BHO
     HKCR\CLSID\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}
     Easy-WebPrint EX
     CANON INC.
     1.3.5.0
     c:\program files (x86)\canon\easy-webprint ex\ewpexbho.dll
     14/06/2012 02:32
   HP Network Check Helper
     HKCR\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
     HP Network Check IE Plug-in
     Hewlett-Packard
     7.3.1.0
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpnetworkcheck\hpnetworkcheckplugin.dll
     28/08/2013 08:28

HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers
   FileAssociationHelper
     HKCR\CLSID\{D5CF14A2-B3CA-49DC-8E3E-0BB233B26D09}
     File Association Helper
     WinZip Computing International, LLC
     1.1.6.53763
     c:\program files\file association helper\fahdll.dll
     26/09/2013 07:40
   F-Prot Shell Extension
     HKCR\CLSID\{23814B80-52A2-11d0-BC1A-004095606CB9}
     FSAV Shell Extension Dll
     F-Secure Corporation
     8.80.15180.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fpshx.dll
     08/10/2012 08:24

HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers
   FSAV Shell Extension
     HKCR\CLSID\{23814B80-52A2-11d0-BC1A-004095606CB9}
     FSAV Shell Extension Dll
     F-Secure Corporation
     8.80.15180.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fpshx.dll
     08/10/2012 08:24

HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
   MBAMShlExt
     HKCR\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3}
     Malwarebytes Anti-Malware
     Malwarebytes Corporation
     1.70.0.0
     c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll
     14/12/2012 20:52

HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
   F-Prot Shell Extension
     HKCR\CLSID\{23814B80-52A2-11D0-BC1A-004095606CB9}
     FSAV Shell Extension Dll
     F-Secure Corporation
     8.80.15180.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fpshx.dll
     08/10/2012 08:24

HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers
   igfxcui
     HKCR\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}
     igfxpph Module
     Intel Corporation
     8.15.10.2828
     c:\windows\system32\igfxpph.dll
     31/07/2012 21:14

HKLM\Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers
   PDF Shell Extension
     HKCR\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}
     PDF Shell Extension
     Adobe Systems, Inc.
     11.0.3.37
     c:\program files (x86)\common files\adobe\acrobat\activex\pdfshell.dll
     11/05/2013 09:34

HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers
   MBAMShlExt
     HKCR\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3}
     Malwarebytes Anti-Malware
     Malwarebytes Corporation
     1.70.0.0
     c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll
     14/12/2012 20:52
   F-Prot Shell Extension
     HKCR\CLSID\{23814B80-52A2-11d0-BC1A-004095606CB9}
     FSAV Shell Extension Dll
     F-Secure Corporation
     8.80.15180.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fpshx.dll
     08/10/2012 08:24

HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers
   FSAV Shell Extension
     HKCR\CLSID\{23814B80-52A2-11d0-BC1A-004095606CB9}
     FSAV Shell Extension Dll
     F-Secure Corporation
     8.80.15180.0
     c:\program files (x86)\talktalk\security\apps\computersecurity\common\fpshx.dll
     08/10/2012 08:24

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar
   Canon Easy-WebPrint EX
     HKCR\CLSID\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F}
     Easy-WebPrint EX
     CANON INC.
     1.3.5.0
     c:\program files (x86)\canon\easy-webprint ex\ewpexhlp.dll
     14/06/2012 02:31

HKLM\Software\Microsoft\Internet Explorer\Extensions
   HP Network Check
     C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
     NCLauncherFromIE
     Hewlett-Packard
     7.0.0.0
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpnetworkcheck\nclauncherfromie.exe
     09/07/2012 22:46

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
   HP Network Check
     C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
     NCLauncherFromIE
     Hewlett-Packard
     7.0.0.0
     c:\program files (x86)\hewlett-packard\hp support framework\resources\hpnetworkcheck\nclauncherfromie.exe
     09/07/2012 22:46

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
   msacm.l3acm
     C:\Windows\System32\l3codeca.acm
     MPEG Layer-3 Audio Codec for MSACM
     Fraunhofer Institut Integrierte Schaltungen IIS
     1.9.0.401
     c:\windows\system32\l3codeca.acm
     26/07/2012 02:13

HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32
   msacm.l3acm
     C:\Windows\SysWOW64\l3codeca.acm
     MPEG Layer-3 Audio Codec for MSACM
     Fraunhofer Institut Integrierte Schaltungen IIS
     1.9.0.401
     c:\windows\syswow64\l3codeca.acm
     26/07/2012 02:19
   vidc.cvid
     iccvid.dll
     Cinepak© Codec
     Radius Inc.
     1.10.0.12
     c:\windows\syswow64\iccvid.dll
     26/07/2012 02:19

HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance
   CyberLink Audio Wizard
     HKCR\CLSID\{1986FDCF-F657-4866-A83C-998B943A6321}
     CyberLink Audio Wizard Filter
     CyberLink Corp.
     1.0.0.4414
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\claudwizard.ax
     14/08/2009 13:26
   CyberLink Line21 Decoder (PDVD10)
     HKCR\CLSID\{24C79DBF-961B-4DF9-8440-3BEE8C76F1E1}
     CyberLink Line21 Decoder Filter
     CyberLink Corp.
     4.0.0.10324
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clline21.ax
     24/07/2009 02:21
   CyberLink DVD Navigator (PDVD10)
     HKCR\CLSID\{2AF76B80-2BDA-4731-932D-3FCFA9276B11}
     CyberLink DVD Navigation Filter
     CyberLink Corp.
     8.1.4208.0
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clnavx.ax
     08/06/2012 08:59
   CyberLink AudioCD Filter (PDVD10)
     HKCR\CLSID\{2D6F8EBB-80A6-4CF1-8C86-F2A8932DED3F}
     CyberLink AudioCD Filter
     CyberLink Corp.
     5.0.0.7823
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\claudiocd.ax
     23/06/2009 14:00
   Audition Null Audio
     HKCR\CLSID\{2EEB323F-1389-48B5-8D33-3CA84B6C1861}
     Adobe© AuditionT SCSI CD Interface
     Adobe Systems©, Incorporated
     1.5.0.0
     c:\program files (x86)\adobe\audition 1.5\videodump.ax
     04/05/2004 21:26
   CyberLink Matroska Splitter(PDVD10)
     HKCR\CLSID\{35F0AE98-673B-465F-A4D6-9F18A01F2454}
     CyberLink Matroska Splitter
     CyberLink Corp.
     1.0.0.1902
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clmkvsplter.ax
     02/07/2010 09:20
   CyberLink TimeStretch Filter (PDVD10)
     HKCR\CLSID\{36F74DF0-12FF-4881-8A55-E7CE4D12688E}
     CLAuTS.ax
     CyberLink Corp.
     2.0.0.3404
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\clauts.ax
     04/10/2010 03:39
   CyberLink RealMedia Splitter(PDVD10)
     HKCR\CLSID\{38A6AC0C-4B7C-4922-8ADC-D22C55B86666}
     CyberLink RealMedia Splitter
     CyberLink Corp.
     1.0.0.1706
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clrmsplitter.ax
     06/05/2010 09:42
   CyberLink MPEG Splitter
     HKCR\CLSID\{4A55271F-A2C7-4EE5-BDCE-154FEB954E1C}
     CyberLink MPEG Splitter
     CyberLink Corp.
     3.4.0.3408
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clsplter.ax
     08/10/2010 08:23
   CyberLink Audio Decoder (PDVD10)
     HKCR\CLSID\{501099E1-5C05-4ED3-B0CB-371F97F5412C}
     CyberLink Audio Decoder Filter
     CyberLink Corp.
     9.0.0.1722
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\claud.ax
     22/05/2012 08:03
   CyberLink Video/SP Decoder (PDVD10)
     HKCR\CLSID\{516F1EFA-42F4-436E-801C-B752EB9343EB}
     CyberLink Video/SP Filter
     CyberLink Corp.
     8.4.0.2505
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clvsd.ax
     05/01/2011 11:11
   CyberLink HD/BD Mixer (PDVD10)
     HKCR\CLSID\{5193BE4B-0FAF-4E3E-A7F8-5CB7140D7B7E}
     CLHBMixer
      
     2.0.0.5211
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\clhbmixer.ax
     11/04/2012 10:03
   CyberLink Audio Effect (PDVD10)
     HKCR\CLSID\{5EFC04B3-68C0-4BFF-8BD4-61037272D70D}
     CyberLink Audio Effect Filter
     CyberLink Corporation
     6.0.0.7225
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\claudfx.ax
     25/12/2009 08:54
   CyberLink Digest Filter (PDVD10)
     HKCR\CLSID\{7A4A08EA-409C-4618-AE4A-FC7584FDCB7A}
     DigestFilter Dynamic Link Library
     1.0.0.4028
     c:\program files (x86)\cyberlink\powerdvd10\digestfilter.dll
     28/04/2010 12:54
   Cyberlink SubTitle Importor (PDVD10)
     HKCR\CLSID\{8BF03152-F394-4C94-A2EB-44D6B80C9E91}
     CLSubTitle.ax
     CyberLink Corp.
     2.0.0.1823
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clsubtitle.ax
     23/06/2011 07:22
   CyberLink HAM Decoder
     HKCR\CLSID\{A93F76CF-4B73-4B67-89ED-7E0AF90BBFED}
     CyberLink Video Decoder Filter
     CyberLink Corp.
     1.0.8390.4214
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clcvd.ax
     14/06/2012 07:37
   CyberLink Tzan Filter (PDVD10)
     HKCR\CLSID\{B5F41335-A18B-4362-A406-F09E43658116}
     CyberLink Tzan Filter
     CyberLink Corp.
     3.5.0.4515
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\cltzan.ax
     15/09/2011 06:04
   CyberLink RealVideo Decoder(PDVD10)
     HKCR\CLSID\{C548BB6C-0E62-4A25-AE4E-DE41856BC682}
     CyberLink RealMedia Video Decoder
     CyberLink Corp.
     1.0.0.1225
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clrmvd.ax
     25/12/2009 03:42
   Cyberlink SubTitle Importor 2.0 (PDVD10)
     HKCR\CLSID\{C88A3744-DE30-4316-BAFB-269C8A25856C}
     CLSubTitle.ax
     CyberLink Corp.
     2.0.0.1823
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clsubtitle.ax
     23/06/2011 07:22
   CyberLink Video Decoder (PDVD10)
     HKCR\CLSID\{D00E73D7-06F5-44F9-8BE4-B7DB191E9E7E}
     CyberLink Video Decoder Filter
     CyberLink Corp.
     1.0.8390.4214
     c:\program files (x86)\cyberlink\powerdvd10\videofilter\clcvd.ax
     14/06/2012 07:37
   Audition VideoDump
     HKCR\CLSID\{D88B0736-3DBF-44BF-92FF-2F3A9231C7FF}
     Adobe© AuditionT SCSI CD Interface
     Adobe Systems©, Incorporated
     1.5.0.0
     c:\program files (x86)\adobe\audition 1.5\videodump.ax
     04/05/2004 21:26
   CyberLink MPEG-4 Splitter (PDVD10)
     HKCR\CLSID\{DB17C0D7-EA02-4CC0-94A3-C8E07B1510F9}
     CyberLink MPEG-4 Splitter
     CyberLink Corp.
     1.1.0.2906
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clm4splt.ax
     06/05/2010 10:39
   CyberLink RealAudio Decoder(PDVD10)
     HKCR\CLSID\{DB5D8193-CB8D-4C72-98A5-1C147E075EDF}
     CyberLink RealMedia Audio Decoder
     CyberLink Corp.
     1.0.0.1225
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\clrmaud.ax
     25/12/2009 03:44
   CyberLink FLV Splitter(PDVD10)
     HKCR\CLSID\{ECA099DE-D413-4500-B401-6C4FF1EB9580}
     CyberLink FLV Splitter
     CyberLink Corp.
     1.0.0.3327
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\clflvsplitter.ax
     27/09/2011 07:30
   CyberLink Audio Watermark Detector
     HKCR\CLSID\{F0219FAD-541A-4FCD-9E8E-22E4C14CA8BA}
     Audio Watermark Detector
     CyberLink
     1.0.0.516
     c:\program files (x86)\cyberlink\powerdvd10\audiofilter\clawmdetector.ax
     16/05/2012 02:01
   Cyberlink Demuxer 2.0
     HKCR\CLSID\{F07E981B-0EC4-4665-A671-C24955D11A38}
     CLDemuxer2
     Cyberlink
     2.0.6.2518
     c:\program files (x86)\cyberlink\powerdvd10\navfilter\cldemuxer2.ax
     18/01/2011 12:29

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UVGLI7RT will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\John\AppData\Local\Mozilla\Firefox\Profiles\vjg0qiq9.default-1395655567045\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=27 folders=2 327679 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\John\AppData\Local\temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\John\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UVGLI7RT" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on 26/03/2014 at  9:50:04.49 ======================
 

Link to post
Share on other sites

Hi,

Im afraid the popup is still there, and also my rapport software shows that trying to access my bank page takes me to an unknown ip address....i imagine the 2 are linked in terms of an infection, although im not sure? Usually the popup occurs on the same website, a well known premier league football site with millions of users, and it has never had popups before. But it has occurred on other standard sites too in the last week. What do you think?

Link to post
Share on other sites

Please download RogueKiller from here:

 

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe'>http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe  <- 32 bit version

http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe'>http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe  <- 64 bit version

                                   

  • Make sure to get the correct version for your system.
  • Quit all running programs
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe
  • Wait until Prescan has finished...
  • The following EULA will appear, please select accept
     
    RKLicence.png
     
  • Ensure MBR scan, Check faked and AntiRootkit are checked
  • Select Scan
     
    RK1A.png
     
  • When the scan completes select Report, copy and paste that to your reply.
     
    RK2A.png
     
  • The log should be found in RKreport[?].txt on your Desktop
  • Exit/Close RogueKiller


     
    Kevin
Link to post
Share on other sites

Hi,

I have only clicked 'report', not delete/fix. Is that fine?

Here is the report. Thanks



RogueKiller V8.8.14 _x64_ [Mar 26 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 8 (6.2.9200 ) 64 bits version
Started in : Normal mode
User : John [Admin rights]
Mode : Scan -- Date : 03/26/2014 23:35:33
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
[Address] EAT @explorer.exe (FS_Init) : fspmapi_64.dll -> HOOKED (c:\program files (x86)\talktalk\security\apps\computersecurity\hips\fshook64.dll @ 0x62D51E30)
[Address] EAT @explorer.exe (AssocCreate) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43B20)
[Address] EAT @explorer.exe (AssocGetPerceivedType) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF44940)
[Address] EAT @explorer.exe (AssocIsDangerous) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5CFBC)
[Address] EAT @explorer.exe (AssocQueryKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A870)
[Address] EAT @explorer.exe (AssocQueryKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43A20)
[Address] EAT @explorer.exe (AssocQueryStringA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5E60C)
[Address] EAT @explorer.exe (AssocQueryStringByKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5E440)
[Address] EAT @explorer.exe (AssocQueryStringByKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF441A0)
[Address] EAT @explorer.exe (AssocQueryStringW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF49CC0)
[Address] EAT @explorer.exe (ChrCmpIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A03C)
[Address] EAT @explorer.exe (ChrCmpIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A02C)
[Address] EAT @explorer.exe (ColorAdjustLuma) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F7A8)
[Address] EAT @explorer.exe (ColorHLSToRGB) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4BFF0)
[Address] EAT @explorer.exe (ColorRGBToHLS) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4BF30)
[Address] EAT @explorer.exe (ConnectToConnectionPoint) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF442B0)
[Address] EAT @explorer.exe (DelayLoadFailureHook) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F8F0)
[Address] EAT @explorer.exe (DllGetClassObject) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6D448)
[Address] EAT @explorer.exe (DllGetVersion) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF55AE0)
[Address] EAT @explorer.exe (GUIDFromStringW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4F786)
[Address] EAT @explorer.exe (GetAcceptLanguagesA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF597D0)
[Address] EAT @explorer.exe (GetAcceptLanguagesW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45A40)
[Address] EAT @explorer.exe (GetMenuPosFromID) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45A60)
[Address] EAT @explorer.exe (HashData) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF597C0)
[Address] EAT @explorer.exe (IStream_Copy) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A1A0)
[Address] EAT @explorer.exe (IStream_Read) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42B80)
[Address] EAT @explorer.exe (IStream_ReadPidl) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF49980)
[Address] EAT @explorer.exe (IStream_ReadStr) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41120)
[Address] EAT @explorer.exe (IStream_Reset) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46340)
[Address] EAT @explorer.exe (IStream_Size) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A180)
[Address] EAT @explorer.exe (IStream_Write) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46320)
[Address] EAT @explorer.exe (IStream_WritePidl) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6F194)
[Address] EAT @explorer.exe (IStream_WriteStr) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46350)
[Address] EAT @explorer.exe (IUnknown_AtomicRelease) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A09C)
[Address] EAT @explorer.exe (IUnknown_Exec) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45B80)
[Address] EAT @explorer.exe (IUnknown_GetSite) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF460B0)
[Address] EAT @explorer.exe (IUnknown_GetWindow) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42D20)
[Address] EAT @explorer.exe (IUnknown_QueryService) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43300)
[Address] EAT @explorer.exe (IUnknown_QueryStatus) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6BBA8)
[Address] EAT @explorer.exe (IUnknown_Set) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41130)
[Address] EAT @explorer.exe (IUnknown_SetSite) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43310)
[Address] EAT @explorer.exe (IntlStrEqWorkerA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E3C)
[Address] EAT @explorer.exe (IntlStrEqWorkerW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E2C)
[Address] EAT @explorer.exe (IsCharSpaceA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A80)
[Address] EAT @explorer.exe (IsCharSpaceW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41140)
[Address] EAT @explorer.exe (IsInternetESCEnabled) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF597B0)
[Address] EAT @explorer.exe (IsOS) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42B60)
[Address] EAT @explorer.exe (MLFreeLibrary) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF69EF4)
[Address] EAT @explorer.exe (MLLoadLibraryA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF69F48)
[Address] EAT @explorer.exe (MLLoadLibraryW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF69FA8)
[Address] EAT @explorer.exe (ParseURLA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF597A0)
[Address] EAT @explorer.exe (ParseURLW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4C250)
[Address] EAT @explorer.exe (PathAddBackslashA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B2C)
[Address] EAT @explorer.exe (PathAddBackslashW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43C00)
[Address] EAT @explorer.exe (PathAddExtensionA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CCC)
[Address] EAT @explorer.exe (PathAddExtensionW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CBC)
[Address] EAT @explorer.exe (PathAppendA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CAC)
[Address] EAT @explorer.exe (PathAppendW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45A10)
[Address] EAT @explorer.exe (PathBuildRootA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A05C)
[Address] EAT @explorer.exe (PathBuildRootW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A06C)
[Address] EAT @explorer.exe (PathCanonicalizeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C9C)
[Address] EAT @explorer.exe (PathCanonicalizeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42CF0)
[Address] EAT @explorer.exe (PathCombineA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B5C)
[Address] EAT @explorer.exe (PathCombineW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43C10)
[Address] EAT @explorer.exe (PathCommonPrefixA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59DAC)
[Address] EAT @explorer.exe (PathCommonPrefixW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D9C)
[Address] EAT @explorer.exe (PathCompactPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5AF90)
[Address] EAT @explorer.exe (PathCompactPathExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5AD80)
[Address] EAT @explorer.exe (PathCompactPathExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46530)
[Address] EAT @explorer.exe (PathCompactPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5EB08)
[Address] EAT @explorer.exe (PathCreateFromUrlA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59790)
[Address] EAT @explorer.exe (PathCreateFromUrlAlloc) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59780)
[Address] EAT @explorer.exe (PathCreateFromUrlW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF436E0)
[Address] EAT @explorer.exe (PathFileExistsA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C0C)
[Address] EAT @explorer.exe (PathFileExistsAndAttributesW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45930)
[Address] EAT @explorer.exe (PathFileExistsW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43690)
[Address] EAT @explorer.exe (PathFindExtensionA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C3C)
[Address] EAT @explorer.exe (PathFindExtensionW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410C0)
[Address] EAT @explorer.exe (PathFindFileNameA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BFC)
[Address] EAT @explorer.exe (PathFindFileNameW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41090)
[Address] EAT @explorer.exe (PathFindNextComponentA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59AE0)
[Address] EAT @explorer.exe (PathFindNextComponentW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A210)
[Address] EAT @explorer.exe (PathFindOnPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5B610)
[Address] EAT @explorer.exe (PathFindOnPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF49170)
[Address] EAT @explorer.exe (PathFindSuffixArrayA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5B534)
[Address] EAT @explorer.exe (PathFindSuffixArrayW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF453D0)
[Address] EAT @explorer.exe (PathGetArgsA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5962C)
[Address] EAT @explorer.exe (PathGetArgsW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4C880)
[Address] EAT @explorer.exe (PathGetCharTypeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59648)
[Address] EAT @explorer.exe (PathGetCharTypeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46480)
[Address] EAT @explorer.exe (PathGetDriveNumberA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D5C)
[Address] EAT @explorer.exe (PathGetDriveNumberW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41050)
[Address] EAT @explorer.exe (PathIsContentTypeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5ABAC)
[Address] EAT @explorer.exe (PathIsContentTypeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A2C0)
[Address] EAT @explorer.exe (PathIsDirectoryA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5B404)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5B334)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5EE78)
[Address] EAT @explorer.exe (PathIsDirectoryW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF454D0)
[Address] EAT @explorer.exe (PathIsFileSpecA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D6C)
[Address] EAT @explorer.exe (PathIsFileSpecW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46200)
[Address] EAT @explorer.exe (PathIsLFNFileSpecA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CFC)
[Address] EAT @explorer.exe (PathIsLFNFileSpecW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CEC)
[Address] EAT @explorer.exe (PathIsNetworkPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A07C)
[Address] EAT @explorer.exe (PathIsNetworkPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF429A0)
[Address] EAT @explorer.exe (PathIsPrefixA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D8C)
[Address] EAT @explorer.exe (PathIsPrefixW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D7C)
[Address] EAT @explorer.exe (PathIsRelativeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D4C)
[Address] EAT @explorer.exe (PathIsRelativeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43680)
[Address] EAT @explorer.exe (PathIsRootA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C8C)
[Address] EAT @explorer.exe (PathIsRootW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42CE0)
[Address] EAT @explorer.exe (PathIsSameRootA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D1C)
[Address] EAT @explorer.exe (PathIsSameRootW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D0C)
[Address] EAT @explorer.exe (PathIsSystemFolderA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A834)
[Address] EAT @explorer.exe (PathIsSystemFolderW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5E948)
[Address] EAT @explorer.exe (PathIsUNCA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B3C)
[Address] EAT @explorer.exe (PathIsUNCServerA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C1C)
[Address] EAT @explorer.exe (PathIsUNCServerShareA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C2C)
[Address] EAT @explorer.exe (PathIsUNCServerShareW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E60)
[Address] EAT @explorer.exe (PathIsUNCServerW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E70)
[Address] EAT @explorer.exe (PathIsUNCW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41040)
[Address] EAT @explorer.exe (PathIsURLA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59770)
[Address] EAT @explorer.exe (PathIsURLW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF436C0)
[Address] EAT @explorer.exe (PathMakePrettyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5BCB0)
[Address] EAT @explorer.exe (PathMakePrettyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF49FC0)
[Address] EAT @explorer.exe (PathMakeSystemFolderA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A8C0)
[Address] EAT @explorer.exe (PathMakeSystemFolderW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41270)
[Address] EAT @explorer.exe (PathMatchSpecA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BAC)
[Address] EAT @explorer.exe (PathMatchSpecExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B8C)
[Address] EAT @explorer.exe (PathMatchSpecExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B7C)
[Address] EAT @explorer.exe (PathMatchSpecW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B9C)
[Address] EAT @explorer.exe (PathParseIconLocationA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BEC)
[Address] EAT @explorer.exe (PathParseIconLocationW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E20)
[Address] EAT @explorer.exe (PathQuoteSpacesA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BCC)
[Address] EAT @explorer.exe (PathQuoteSpacesW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42D00)
[Address] EAT @explorer.exe (PathRelativePathToA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B14)
[Address] EAT @explorer.exe (PathRelativePathToW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59AF4)
[Address] EAT @explorer.exe (PathRemoveArgsA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5BC74)
[Address] EAT @explorer.exe (PathRemoveArgsW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46450)
[Address] EAT @explorer.exe (PathRemoveBackslashA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59CDC)
[Address] EAT @explorer.exe (PathRemoveBackslashW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43730)
[Address] EAT @explorer.exe (PathRemoveBlanksA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BBC)
[Address] EAT @explorer.exe (PathRemoveBlanksW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43BD0)
[Address] EAT @explorer.exe (PathRemoveExtensionA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C7C)
[Address] EAT @explorer.exe (PathRemoveExtensionW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E30)
[Address] EAT @explorer.exe (PathRemoveFileSpecA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B4C)
[Address] EAT @explorer.exe (PathRemoveFileSpecW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF44040)
[Address] EAT @explorer.exe (PathRenameExtensionA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C6C)
[Address] EAT @explorer.exe (PathRenameExtensionW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C5C)
[Address] EAT @explorer.exe (PathSearchAndQualifyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5961C)
[Address] EAT @explorer.exe (PathSearchAndQualifyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42E00)
[Address] EAT @explorer.exe (PathSetDlgItemPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5AC50)
[Address] EAT @explorer.exe (PathSetDlgItemPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5E9D0)
[Address] EAT @explorer.exe (PathSkipRootA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D2C)
[Address] EAT @explorer.exe (PathSkipRootW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45A20)
[Address] EAT @explorer.exe (PathStripPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59D3C)
[Address] EAT @explorer.exe (PathStripPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46220)
[Address] EAT @explorer.exe (PathStripToRootA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59C4C)
[Address] EAT @explorer.exe (PathStripToRootW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E50)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59B6C)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42DF0)
[Address] EAT @explorer.exe (PathUndecorateA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A75C)
[Address] EAT @explorer.exe (PathUndecorateW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF464D0)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A86C)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5E984)
[Address] EAT @explorer.exe (PathUnquoteSpacesA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59BDC)
[Address] EAT @explorer.exe (PathUnquoteSpacesW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43BE0)
[Address] EAT @explorer.exe (QISearch) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41010)
[Address] EAT @explorer.exe (SHAllocShared) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF429D0)
[Address] EAT @explorer.exe (SHAnsiToAnsi) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A310)
[Address] EAT @explorer.exe (SHAnsiToUnicode) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A320)
[Address] EAT @explorer.exe (SHAutoComplete) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4BE10)
[Address] EAT @explorer.exe (SHCopyKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A2F0)
[Address] EAT @explorer.exe (SHCopyKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A070)
[Address] EAT @explorer.exe (SHCreateMemStream) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF432B0)
[Address] EAT @explorer.exe (SHCreateShellPalette) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42890)
[Address] EAT @explorer.exe (SHCreateStreamOnFileA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0DC)
[Address] EAT @explorer.exe (SHCreateStreamOnFileEx) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46070)
[Address] EAT @explorer.exe (SHCreateStreamOnFileW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF464A0)
[Address] EAT @explorer.exe (SHCreateStreamWrapper) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4F792)
[Address] EAT @explorer.exe (SHCreateThread) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45E80)
[Address] EAT @explorer.exe (SHCreateThreadRef) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45B30)
[Address] EAT @explorer.exe (SHCreateThreadWithHandle) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46400)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0FC)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0EC)
[Address] EAT @explorer.exe (SHDeleteKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A2E0)
[Address] EAT @explorer.exe (SHDeleteKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42C60)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6EFB8)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6EF48)
[Address] EAT @explorer.exe (SHDeleteValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A10C)
[Address] EAT @explorer.exe (SHDeleteValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42CA0)
[Address] EAT @explorer.exe (SHEnumKeyExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A290)
[Address] EAT @explorer.exe (SHEnumKeyExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A280)
[Address] EAT @explorer.exe (SHEnumValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A250)
[Address] EAT @explorer.exe (SHEnumValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A1D0)
[Address] EAT @explorer.exe (SHFormatDateTimeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F004)
[Address] EAT @explorer.exe (SHFormatDateTimeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F070)
[Address] EAT @explorer.exe (SHFreeShared) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF429E0)
[Address] EAT @explorer.exe (SHGetInverseCMAP) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF60830)
[Address] EAT @explorer.exe (SHGetThreadRef) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF49140)
[Address] EAT @explorer.exe (SHGetValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF443C0)
[Address] EAT @explorer.exe (SHGetValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42B20)
[Address] EAT @explorer.exe (SHGetViewStatePropertyBag) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46FA0)
[Address] EAT @explorer.exe (SHIsChildOrSelf) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43510)
[Address] EAT @explorer.exe (SHIsLowMemoryMachine) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6BC3C)
[Address] EAT @explorer.exe (SHLoadIndirectString) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43340)
[Address] EAT @explorer.exe (SHLockShared) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6F838)
[Address] EAT @explorer.exe (SHMessageBoxCheckA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6ADD4)
[Address] EAT @explorer.exe (SHMessageBoxCheckW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6AF00)
[Address] EAT @explorer.exe (SHOpenRegStream2A) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0AC)
[Address] EAT @explorer.exe (SHOpenRegStream2W) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF443F0)
[Address] EAT @explorer.exe (SHOpenRegStreamA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0CC)
[Address] EAT @explorer.exe (SHOpenRegStreamW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A0BC)
[Address] EAT @explorer.exe (SHPackDispParamsV) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF47DB0)
[Address] EAT @explorer.exe (SHPropertyBag_ReadStrAlloc) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF71598)
[Address] EAT @explorer.exe (SHPropertyBag_WriteBSTR) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF71498)
[Address] EAT @explorer.exe (SHQueryInfoKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A230)
[Address] EAT @explorer.exe (SHQueryInfoKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A210)
[Address] EAT @explorer.exe (SHQueryValueExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A120)
[Address] EAT @explorer.exe (SHQueryValueExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF463A0)
[Address] EAT @explorer.exe (SHRegCloseUSKey) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A70)
[Address] EAT @explorer.exe (SHRegCreateUSKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A58)
[Address] EAT @explorer.exe (SHRegCreateUSKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42640)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A44)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A34)
[Address] EAT @explorer.exe (SHRegDeleteUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A24)
[Address] EAT @explorer.exe (SHRegDeleteUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59A14)
[Address] EAT @explorer.exe (SHRegDuplicateHKey) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A1F0)
[Address] EAT @explorer.exe (SHRegEnumUSKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF599FC)
[Address] EAT @explorer.exe (SHRegEnumUSKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF599DC)
[Address] EAT @explorer.exe (SHRegEnumUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59998)
[Address] EAT @explorer.exe (SHRegEnumUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42590)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59984)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4C220)
[Address] EAT @explorer.exe (SHRegGetBoolValueFromHKCUHKLM) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46330)
[Address] EAT @explorer.exe (SHRegGetIntW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A1E0)
[Address] EAT @explorer.exe (SHRegGetPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A1C0)
[Address] EAT @explorer.exe (SHRegGetPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A240)
[Address] EAT @explorer.exe (SHRegGetUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59948)
[Address] EAT @explorer.exe (SHRegGetUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A280)
[Address] EAT @explorer.exe (SHRegGetValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A2A4)
[Address] EAT @explorer.exe (SHRegGetValueFromHKCUHKLM) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46EBC)
[Address] EAT @explorer.exe (SHRegGetValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF421B0)
[Address] EAT @explorer.exe (SHRegOpenUSKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59928)
[Address] EAT @explorer.exe (SHRegOpenUSKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59908)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF598E0)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42610)
[Address] EAT @explorer.exe (SHRegQueryUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF598A0)
[Address] EAT @explorer.exe (SHRegQueryUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59860)
[Address] EAT @explorer.exe (SHRegSetPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A1A0)
[Address] EAT @explorer.exe (SHRegSetPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A180)
[Address] EAT @explorer.exe (SHRegSetUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59838)
[Address] EAT @explorer.exe (SHRegSetUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59810)
[Address] EAT @explorer.exe (SHRegWriteUSValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF597E4)
[Address] EAT @explorer.exe (SHRegWriteUSValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF425E0)
[Address] EAT @explorer.exe (SHRegisterValidateTemplate) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF758E0)
[Address] EAT @explorer.exe (SHReleaseThreadRef) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A08C)
[Address] EAT @explorer.exe (SHRunIndirectRegClientCommand) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5C95C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6A27C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42CC0)
[Address] EAT @explorer.exe (SHSetThreadRef) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45B10)
[Address] EAT @explorer.exe (SHSetValueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A14C)
[Address] EAT @explorer.exe (SHSetValueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF463D0)
[Address] EAT @explorer.exe (SHSkipJunction) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42E20)
[Address] EAT @explorer.exe (SHStrDupA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4A260)
[Address] EAT @explorer.exe (SHStrDupW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41070)
[Address] EAT @explorer.exe (SHStripMneumonicA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6A900)
[Address] EAT @explorer.exe (SHStripMneumonicW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42DB0)
[Address] EAT @explorer.exe (SHUnicodeToAnsi) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF432E0)
[Address] EAT @explorer.exe (SHUnicodeToAnsiCP) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF4F7B9)
[Address] EAT @explorer.exe (SHUnicodeToUnicode) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5A300)
[Address] EAT @explorer.exe (SHUnlockShared) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6F818)
[Address] EAT @explorer.exe (ShellMessageBoxA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5C604)
[Address] EAT @explorer.exe (ShellMessageBoxW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F54C)
[Address] EAT @explorer.exe (StrCSpnA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59EEC)
[Address] EAT @explorer.exe (StrCSpnIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59EDC)
[Address] EAT @explorer.exe (StrCSpnIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59ECC)
[Address] EAT @explorer.exe (StrCSpnW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF45A30)
[Address] EAT @explorer.exe (StrCatBuffA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FDC)
[Address] EAT @explorer.exe (StrCatBuffW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FEC)
[Address] EAT @explorer.exe (StrCatChainW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59DCC)
[Address] EAT @explorer.exe (StrCatW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FCF8)
[Address] EAT @explorer.exe (StrChrA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FCC)
[Address] EAT @explorer.exe (StrChrIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F9C)
[Address] EAT @explorer.exe (StrChrIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410E0)
[Address] EAT @explorer.exe (StrChrNIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F8C)
[Address] EAT @explorer.exe (StrChrNW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FBC)
[Address] EAT @explorer.exe (StrChrW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41080)
[Address] EAT @explorer.exe (StrCmpCA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59DEC)
[Address] EAT @explorer.exe (StrCmpCW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42C90)
[Address] EAT @explorer.exe (StrCmpICA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41100)
[Address] EAT @explorer.exe (StrCmpICW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410F0)
[Address] EAT @explorer.exe (StrCmpIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43650)
[Address] EAT @explorer.exe (StrCmpLogicalW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59DDC)
[Address] EAT @explorer.exe (StrCmpNA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59EBC)
[Address] EAT @explorer.exe (StrCmpNCA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E0C)
[Address] EAT @explorer.exe (StrCmpNCW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59DFC)
[Address] EAT @explorer.exe (StrCmpNIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59EAC)
[Address] EAT @explorer.exe (StrCmpNICA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF460A0)
[Address] EAT @explorer.exe (StrCmpNICW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42B70)
[Address] EAT @explorer.exe (StrCmpNIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43670)
[Address] EAT @explorer.exe (StrCmpNW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43770)
[Address] EAT @explorer.exe (StrCmpW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410B0)
[Address] EAT @explorer.exe (StrCpyNW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FFC)
[Address] EAT @explorer.exe (StrCpyW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FD38)
[Address] EAT @explorer.exe (StrDupA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E4C)
[Address] EAT @explorer.exe (StrDupW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF42B50)
[Address] EAT @explorer.exe (StrFormatByteSize64A) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FC00)
[Address] EAT @explorer.exe (StrFormatByteSizeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FBF4)
[Address] EAT @explorer.exe (StrFormatByteSizeEx) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF432D0)
[Address] EAT @explorer.exe (StrFormatByteSizeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FC60)
[Address] EAT @explorer.exe (StrFormatKBSizeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FB74)
[Address] EAT @explorer.exe (StrFormatKBSizeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FBE0)
[Address] EAT @explorer.exe (StrFromTimeIntervalA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF68AC8)
[Address] EAT @explorer.exe (StrFromTimeIntervalW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF68A44)
[Address] EAT @explorer.exe (StrIsIntlEqualA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E3C)
[Address] EAT @explorer.exe (StrIsIntlEqualW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E2C)
[Address] EAT @explorer.exe (StrNCatA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FCB8)
[Address] EAT @explorer.exe (StrNCatW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FC74)
[Address] EAT @explorer.exe (StrPBrkA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F5C)
[Address] EAT @explorer.exe (StrPBrkW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF461E0)
[Address] EAT @explorer.exe (StrRChrA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59FAC)
[Address] EAT @explorer.exe (StrRChrIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F7C)
[Address] EAT @explorer.exe (StrRChrIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F6C)
[Address] EAT @explorer.exe (StrRChrW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46210)
[Address] EAT @explorer.exe (StrRStrIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E9C)
[Address] EAT @explorer.exe (StrRStrIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E8C)
[Address] EAT @explorer.exe (StrRetToBSTR) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF460D0)
[Address] EAT @explorer.exe (StrRetToBufA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5F9E8)
[Address] EAT @explorer.exe (StrRetToBufW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41110)
[Address] EAT @explorer.exe (StrRetToStrA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5FA98)
[Address] EAT @explorer.exe (StrRetToStrW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43330)
[Address] EAT @explorer.exe (StrSpnA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F0C)
[Address] EAT @explorer.exe (StrSpnW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59EFC)
[Address] EAT @explorer.exe (StrStrA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E7C)
[Address] EAT @explorer.exe (StrStrIA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF46490)
[Address] EAT @explorer.exe (StrStrIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410D0)
[Address] EAT @explorer.exe (StrStrNIW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E5C)
[Address] EAT @explorer.exe (StrStrNW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E6C)
[Address] EAT @explorer.exe (StrStrW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43660)
[Address] EAT @explorer.exe (StrToInt64ExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F2C)
[Address] EAT @explorer.exe (StrToInt64ExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F3C)
[Address] EAT @explorer.exe (StrToIntA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F4C)
[Address] EAT @explorer.exe (StrToIntExA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59F1C)
[Address] EAT @explorer.exe (StrToIntExW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF461F0)
[Address] EAT @explorer.exe (StrToIntW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF410A0)
[Address] EAT @explorer.exe (StrTrimA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59E1C)
[Address] EAT @explorer.exe (StrTrimW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43320)
[Address] EAT @explorer.exe (UrlApplySchemeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59760)
[Address] EAT @explorer.exe (UrlApplySchemeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59750)
[Address] EAT @explorer.exe (UrlCanonicalizeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59740)
[Address] EAT @explorer.exe (UrlCanonicalizeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF436B0)
[Address] EAT @explorer.exe (UrlCombineA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59728)
[Address] EAT @explorer.exe (UrlCombineW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43750)
[Address] EAT @explorer.exe (UrlCompareA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59714)
[Address] EAT @explorer.exe (UrlCompareW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59704)
[Address] EAT @explorer.exe (UrlCreateFromPathA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF596F4)
[Address] EAT @explorer.exe (UrlCreateFromPathW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43BF0)
[Address] EAT @explorer.exe (UrlEscapeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF596E4)
[Address] EAT @explorer.exe (UrlEscapeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43720)
[Address] EAT @explorer.exe (UrlFixupW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF596D4)
[Address] EAT @explorer.exe (UrlGetLocationA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF596C4)
[Address] EAT @explorer.exe (UrlGetLocationW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF596B4)
[Address] EAT @explorer.exe (UrlGetPartA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5969C)
[Address] EAT @explorer.exe (UrlGetPartW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF43700)
[Address] EAT @explorer.exe (UrlHashA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59688)
[Address] EAT @explorer.exe (UrlHashW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59678)
[Address] EAT @explorer.exe (UrlIsA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59668)
[Address] EAT @explorer.exe (UrlIsNoHistoryA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF595EC)
[Address] EAT @explorer.exe (UrlIsNoHistoryW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF41150)
[Address] EAT @explorer.exe (UrlIsOpaqueA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF5960C)
[Address] EAT @explorer.exe (UrlIsOpaqueW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF595FC)
[Address] EAT @explorer.exe (UrlIsW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF436A0)
[Address] EAT @explorer.exe (UrlUnescapeA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF59658)
[Address] EAT @explorer.exe (UrlUnescapeW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF436D0)
[Address] EAT @explorer.exe (WhichPlatform) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF6A6D0)
[Address] EAT @explorer.exe (wnsprintfA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF693AC)
[Address] EAT @explorer.exe (wnsprintfW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF69318)
[Address] EAT @explorer.exe (wvnsprintfA) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF693F8)
[Address] EAT @explorer.exe (wvnsprintfW) : imagehlp.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xAFF69368)

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1       localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS541010A9E680 +++++
--- User ---
[MBR] 8e4e14f27291f4ddccf5ca7da0716fb1
[bSP] 7a953ccb260afb33417e633f79ea4ff4 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 953869 MB
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_S_03262014_233533.txt >>
 

Link to post
Share on other sites

Yes not deleting fixing is good, nothing conclusive in that log. Run the following please se what this one shows..

 

Please download the latest version of TDSSKiller from here:

http://support.kaspersky.com/downloads/utils/tdsskiller.exe and save it to your Desktop.

 

  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
     
     
    image000q.png
     
     
  • Put a checkmark beside loaded modules.
     
     
    2012081514h0118.png
     
     
  • A reboot will be needed to apply the changes. Do it.
  • TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  • Then click on Change parameters in TDSSKiller.
  • Check all boxes then click OK.
     
     
    2012081517h0349.png
     
     
  • Click the Start Scan button.
     
     
    19695967.jpg
     
     
  • The scan will be quick.
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
     
     
    67776163.jpg
     
     
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
     
     
    62117367.jpg
     
     
  • Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  • A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

     

    Kevin..

Link to post
Share on other sites

Ive downloaded and run it. The link above didnt work, just FYI, but i found it on the developer site.

Secondly, it crashed first time through the scan. When i reran the scan, the comp didnt need to reboot to load the modules - i guess thats ok.

Here is the scan (will post in 2/3 messages as is too long for 1). There was nothing to cure or delete.....Thanks

00:08:49.0223 0x0b00  TDSS rootkit removing tool 3.0.0.26 Mar 24 2014 07:28:43
00:08:49.0223 0x0b00  UEFI system
00:08:53.0364 0x0b00  ============================================================
00:08:53.0364 0x0b00  Current date / time: 2014/03/27 00:08:53.0364
00:08:53.0364 0x0b00  SystemInfo:
00:08:53.0364 0x0b00  
00:08:53.0364 0x0b00  OS Version: 6.2.9200 ServicePack: 0.0
00:08:53.0364 0x0b00  Product type: Workstation
00:08:53.0364 0x0b00  ComputerName: LAPTOP
00:08:53.0364 0x0b00  UserName: John
00:08:53.0364 0x0b00  Windows directory: C:\Windows
00:08:53.0364 0x0b00  System windows directory: C:\Windows
00:08:53.0364 0x0b00  Running under WOW64
00:08:53.0364 0x0b00  Processor architecture: Intel x64
00:08:53.0364 0x0b00  Number of processors: 4
00:08:53.0364 0x0b00  Page size: 0x1000
00:08:53.0364 0x0b00  Boot type: Normal boot
00:08:53.0364 0x0b00  ============================================================
00:08:53.0364 0x0b00  BG loaded
00:08:53.0520 0x0b00  System UUID: {B35504A9-EFD1-EED1-FE98-FC59203DD966}
00:08:53.0864 0x0b00  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:08:53.0864 0x0b00  ============================================================
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0:
00:08:53.0864 0x0b00  GPT partitions:
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {14A2EC7A-314A-4BDA-86AD-FBEC98E9628A}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xC8000
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {BF254A3E-4074-44CA-878B-891710BCF732}, Name: EFI system partition, StartLBA 0xC8800, BlocksNum 0x82000
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {A2EC2995-D31F-4F2D-93F2-D1D7E090A3E7}, Name: Microsoft reserved partition, StartLBA 0x14A800, BlocksNum 0x40000
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {464FC413-FEF9-44B9-8848-6250AED889E7}, Name: Basic data partition, StartLBA 0x18A800, BlocksNum 0x71D45800
00:08:53.0864 0x0b00  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {99E3B03F-0EB2-4E73-AE3C-54EF59C5DCFA}, Name: Basic data partition, StartLBA 0x71ED0000, BlocksNum 0x2836800
00:08:53.0864 0x0b00  MBR partitions:
00:08:53.0864 0x0b00  ============================================================
00:08:53.0911 0x0b00  C: <-> \Device\Harddisk0\DR0\Partition4
00:08:53.0957 0x0b00  D: <-> \Device\Harddisk0\DR0\Partition5
00:08:53.0957 0x0b00  ============================================================
00:08:53.0957 0x0b00  Initialize success
00:08:53.0957 0x0b00  ============================================================
00:09:26.0147 0x04a0  ============================================================
00:09:26.0147 0x04a0  Scan started
00:09:26.0147 0x04a0  Mode: Manual; SigCheck; TDLFS;
00:09:26.0147 0x04a0  ============================================================
00:09:26.0147 0x04a0  KSN ping started
00:09:28.0444 0x04a0  KSN ping finished: true
00:09:29.0553 0x04a0  ================ Scan system memory ========================
00:09:29.0553 0x04a0  System memory - ok
00:09:29.0553 0x04a0  ================ Scan services =============================
00:09:29.0662 0x04a0  [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
00:09:29.0772 0x04a0  1394ohci - ok
00:09:29.0787 0x04a0  [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware           C:\Windows\system32\drivers\3ware.sys
00:09:29.0803 0x04a0  3ware - ok
00:09:29.0928 0x04a0  [ B33CF4DE909A5B30F526D82053A63C8E, ABF5BB962C038E545C18B96E686E072D780C907096C7BB341297AF31D3703ABD ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
00:09:30.0100 0x04a0  ABBYY.Licensing.FineReader.Sprint.9.0 - ok
00:09:30.0131 0x04a0  [ 899B7E724BF19F17978B6A37B864A277, F7D166DC5F7642D4B834B1E0D956929BA94F3E4D402989FC1A681A08FA1F86B6 ] Accelerometer   C:\Windows\system32\DRIVERS\Accelerometer.sys
00:09:30.0147 0x04a0  Accelerometer - ok
00:09:30.0225 0x04a0  [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI            C:\Windows\system32\drivers\ACPI.sys
00:09:30.0287 0x04a0  ACPI - ok
00:09:30.0319 0x04a0  [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
00:09:30.0366 0x04a0  acpiex - ok
00:09:30.0381 0x04a0  [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
00:09:30.0397 0x04a0  acpipagr - ok
00:09:30.0412 0x04a0  [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
00:09:30.0428 0x04a0  AcpiPmi - ok
00:09:30.0444 0x04a0  [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
00:09:30.0459 0x04a0  acpitime - ok
00:09:30.0506 0x04a0  [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
00:09:30.0553 0x04a0  AdobeARMservice - ok
00:09:30.0631 0x04a0  [ 9D96B0D5855FD1B98023B3EEC9F06786, E4C79233158BE8AA4E9C6DD71585E5D2703A5156531EB3D692D7D81BC443E844 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
00:09:30.0694 0x04a0  AdobeFlashPlayerUpdateSvc - ok
00:09:30.0725 0x04a0  [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
00:09:30.0819 0x04a0  adp94xx - ok
00:09:30.0850 0x04a0  [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci         C:\Windows\system32\drivers\adpahci.sys
00:09:30.0928 0x04a0  adpahci - ok
00:09:30.0959 0x04a0  [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
00:09:30.0991 0x04a0  adpu320 - ok
00:09:31.0037 0x04a0  [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
00:09:31.0069 0x04a0  AeLookupSvc - ok
00:09:31.0100 0x04a0  [ 7C0E0EDF18D6CC565D7BFBB451709FA5, 47C21CD9D87B5C1B5EB14F6166B5E3349B1A6F10501E63CCED8D52A9FE22765D ] AFD             C:\Windows\system32\drivers\afd.sys
00:09:31.0247 0x04a0  AFD - ok
00:09:31.0274 0x04a0  [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440          C:\Windows\system32\drivers\agp440.sys
00:09:31.0321 0x04a0  agp440 - ok
00:09:31.0336 0x04a0  [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG             C:\Windows\System32\alg.exe
00:09:31.0368 0x04a0  ALG - ok
00:09:31.0383 0x04a0  [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\Windows\system32\AUInstallAgent.dll
00:09:31.0414 0x04a0  AllUserInstallAgent - ok
00:09:31.0430 0x04a0  [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
00:09:31.0461 0x04a0  AmdK8 - ok
00:09:31.0774 0x04a0  [ 8DC532B5BF820E48194C6AFC8862FCBC, AA8040A2EC9004FBED4B94166B2DD5A4F5BC835EBADD6199651C856A695AA3E1 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
00:09:32.0399 0x04a0  amdkmdag - ok
00:09:32.0446 0x04a0  [ AA48FEABA50C2DED9C485DFDBA044E40, AE52933B85494F51E4F1524489BEAC4C16F80D09BC8974D97F792D94EAD2A231 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
00:09:32.0524 0x04a0  amdkmdap - ok
00:09:32.0555 0x04a0  [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
00:09:32.0602 0x04a0  AmdPPM - ok
00:09:32.0633 0x04a0  [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata         C:\Windows\system32\drivers\amdsata.sys
00:09:32.0665 0x04a0  amdsata - ok
00:09:32.0680 0x04a0  [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
00:09:32.0711 0x04a0  amdsbs - ok
00:09:32.0743 0x04a0  [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
00:09:32.0758 0x04a0  amdxata - ok
00:09:32.0821 0x04a0  [ 823F34D1DEF120A657BB7529ABF4461F, C56D6614F6B3DA13DF7F6AC6B70ACA39D1DB146F7324CF96029CA038C3063DB3 ] AppHostSvc      C:\Windows\system32\inetsrv\apphostsvc.dll
00:09:32.0852 0x04a0  AppHostSvc - ok
00:09:32.0899 0x04a0  [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID           C:\Windows\system32\drivers\appid.sys
00:09:32.0946 0x04a0  AppID - ok
00:09:32.0977 0x04a0  [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc        C:\Windows\System32\appidsvc.dll
00:09:33.0008 0x04a0  AppIDSvc - ok
00:09:33.0040 0x04a0  [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo         C:\Windows\System32\appinfo.dll
00:09:33.0055 0x04a0  Appinfo - ok
00:09:33.0102 0x04a0  [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc             C:\Windows\system32\drivers\arc.sys
00:09:33.0118 0x04a0  arc - ok
00:09:33.0149 0x04a0  [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
00:09:33.0165 0x04a0  arcsas - ok
00:09:33.0227 0x04a0  [ 108FB6DDB69E537A2EA53F425363FAE5, B12A9F5338D39805E08A44A335FF7AA77F2266F535A2F5C8412CC746C75E5B1D ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
00:09:33.0274 0x04a0  aspnet_state - ok
00:09:33.0290 0x04a0  [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
00:09:33.0321 0x04a0  AsyncMac - ok
00:09:33.0336 0x04a0  [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi           C:\Windows\system32\drivers\atapi.sys
00:09:33.0352 0x04a0  atapi - ok
00:09:33.0399 0x04a0  [ BCD7A47EF587DC00DD61D12D9C2D1E44, 95BC9AC8BA8A86DB5C7A6317002BD9872F193B401A0C58DF252DCF3D4A7541E2 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
00:09:33.0446 0x04a0  AudioEndpointBuilder - ok
00:09:33.0493 0x04a0  [ 599B3F685A263A114FFAF3BE29C49C75, 579E9561BA8537888E061E303F3F89E2E6F8B8DED74369C3767DB10B35CD45E8 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
00:09:33.0649 0x04a0  Audiosrv - ok
00:09:33.0680 0x04a0  [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
00:09:33.0711 0x04a0  AxInstSV - ok
00:09:33.0758 0x04a0  [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
00:09:33.0883 0x04a0  b06bdrv - ok
00:09:33.0899 0x04a0  [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
00:09:33.0930 0x04a0  BasicDisplay - ok
00:09:33.0930 0x04a0  [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys
00:09:33.0946 0x04a0  BasicRender - ok
00:09:33.0993 0x04a0  [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC          C:\Windows\System32\bdesvc.dll
00:09:34.0024 0x04a0  BDESVC - ok
00:09:34.0040 0x04a0  [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep            C:\Windows\system32\drivers\Beep.sys
00:09:34.0086 0x04a0  Beep - ok
00:09:34.0165 0x04a0  [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] BFE             C:\Windows\System32\bfe.dll
00:09:34.0243 0x04a0  BFE - ok
00:09:34.0321 0x04a0  [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS            C:\Windows\system32\qmgr.dll
00:09:34.0415 0x04a0  BITS - ok
00:09:34.0477 0x04a0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
00:09:34.0618 0x04a0  Bonjour Service - ok
00:09:34.0633 0x04a0  [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
00:09:34.0649 0x04a0  bowser - ok
00:09:34.0696 0x04a0  [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
00:09:34.0727 0x04a0  BrokerInfrastructure - ok
00:09:34.0743 0x04a0  [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser         C:\Windows\System32\browser.dll
00:09:34.0774 0x04a0  Browser - ok
00:09:34.0821 0x04a0  [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
00:09:34.0837 0x04a0  BthAvrcpTg - ok
00:09:34.0868 0x04a0  [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys
00:09:34.0899 0x04a0  BthHFEnum - ok
00:09:34.0930 0x04a0  [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
00:09:34.0962 0x04a0  bthhfhid - ok
00:09:34.0977 0x04a0  [ 033916CE8784A848B9A3D686B7F66D97, B4D0514D59646CF6B70D4FA488CF95C38EA38CC5C509329CC8753E897C640AFA ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
00:09:35.0008 0x04a0  BTHMODEM - ok
00:09:35.0040 0x04a0  [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv         C:\Windows\system32\bthserv.dll
00:09:35.0055 0x04a0  bthserv - ok
00:09:35.0212 0x04a0  [ 33E9F08F675EF94633C8EF8A7C4EADF3, E1556CF27F7FB3B03EE63F3464F5EE92E7B09E67C5D8AA4A9346FEEBD716A152 ] c2cpnrsvc       C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
00:09:35.0508 0x04a0  c2cpnrsvc - ok
00:09:35.0508 0x04a0  catchme - ok
00:09:35.0555 0x04a0  [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
00:09:35.0571 0x04a0  cdfs - ok
00:09:35.0587 0x04a0  [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom           C:\Windows\System32\drivers\cdrom.sys
00:09:35.0602 0x04a0  cdrom - ok
00:09:35.0633 0x04a0  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc     C:\Windows\System32\certprop.dll
00:09:35.0665 0x04a0  CertPropSvc - ok
00:09:35.0696 0x04a0  [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass        C:\Windows\System32\drivers\circlass.sys
00:09:35.0712 0x04a0  circlass - ok
00:09:35.0758 0x04a0  [ 9905168708DB68849B879B5548F68AB3, B7A495E57B9398704988DC472126CBC5B8D76761A34F51732FBF6CC88E3AB79A ] CLFS            C:\Windows\system32\drivers\CLFS.sys
00:09:35.0821 0x04a0  CLFS - ok
00:09:35.0821 0x04a0  [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
00:09:35.0852 0x04a0  CmBatt - ok
00:09:35.0899 0x04a0  [ E708BFF0473EC6B271EA46B65B16CA56, 2B4C661F7C5A4395CA4204122A1C3C8AA766B56C3D01CD8BAAFA18F71FC7B591 ] CNG             C:\Windows\system32\Drivers\cng.sys
00:09:35.0977 0x04a0  CNG - ok
00:09:35.0993 0x04a0  [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus    C:\Windows\System32\drivers\CompositeBus.sys
00:09:36.0008 0x04a0  CompositeBus - ok
00:09:36.0024 0x04a0  COMSysApp - ok
00:09:36.0024 0x04a0  [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv          C:\Windows\system32\drivers\condrv.sys
00:09:36.0040 0x04a0  condrv - ok
00:09:36.0118 0x04a0  [ DA8066CFED07DEBECB8DC08A55946ACE, 094AF4E198AACCB22F8FEA1DF0D7D8A4626BE3D2C3AE5310C47281998B84AB12 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
00:09:36.0212 0x04a0  cphs - ok
00:09:36.0243 0x04a0  [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
00:09:36.0274 0x04a0  CryptSvc - ok
00:09:36.0305 0x04a0  [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam             C:\Windows\system32\drivers\dam.sys
00:09:36.0337 0x04a0  dam - ok
00:09:36.0430 0x04a0  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch      C:\Windows\system32\rpcss.dll
00:09:36.0508 0x04a0  DcomLaunch - ok
00:09:36.0540 0x04a0  [ C8650D1F61149AA546BDBC99172EBBC1, D9592ED1B6F23B6EC76A0B93635B6E38702311B0A6982F0F9DEC37FCDAF1288B ] defragsvc       C:\Windows\System32\defragsvc.dll
00:09:36.0665 0x04a0  defragsvc - ok
00:09:36.0696 0x04a0  [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\Windows\system32\das.dll
00:09:36.0759 0x04a0  DeviceAssociationService - ok
00:09:36.0790 0x04a0  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll
00:09:36.0821 0x04a0  DeviceInstall - ok
00:09:36.0852 0x04a0  [ 09D9EB9E7898F8E6561473A20CC808B9, 0F511593D36084843E5138AF6D55FE08D77803968AE12A236A02368DB364347E ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
00:09:36.0884 0x04a0  Dfsc - ok
00:09:36.0915 0x04a0  [ 0B3F6C8F93C5C25977EA5A8B2E656357, 1B1C8DA8592D2B892382E062017E60BF02B1B6642822039F21446DF01FAFDEE1 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
00:09:36.0946 0x04a0  dg_ssudbus - ok
00:09:36.0977 0x04a0  [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
00:09:37.0009 0x04a0  Dhcp - ok
00:09:37.0040 0x04a0  [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache        C:\Windows\system32\drivers\discache.sys
00:09:37.0055 0x04a0  discache - ok
00:09:37.0087 0x04a0  [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk            C:\Windows\system32\drivers\disk.sys
00:09:37.0118 0x04a0  disk - ok
00:09:37.0134 0x04a0  [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys
00:09:37.0149 0x04a0  dmvsc - ok
00:09:37.0180 0x04a0  [ 066B9710B36AB550E01EEFCA52155968, DCA9F3F4856A6866D3F5A2EEE34E96A83F40198DB0B5AC6381A7568DE1F56FAB ] Dnscache        C:\Windows\System32\dnsrslvr.dll
00:09:37.0227 0x04a0  Dnscache - ok
00:09:37.0259 0x04a0  [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc         C:\Windows\System32\dot3svc.dll
00:09:37.0290 0x04a0  dot3svc - ok
00:09:37.0305 0x04a0  [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS             C:\Windows\system32\dps.dll
00:09:37.0337 0x04a0  DPS - ok
00:09:37.0368 0x04a0  [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
00:09:37.0415 0x04a0  drmkaud - ok
00:09:37.0462 0x04a0  [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
00:09:37.0493 0x04a0  DsmSvc - ok
00:09:37.0571 0x04a0  [ E6AF4DF1817953D73C519B17CF849756, 26A90EB368A3F572086F223ABED87B8FC6F998AE401C9E52BEB5EE76AB052702 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
00:09:37.0649 0x04a0  DXGKrnl - ok
00:09:37.0680 0x04a0  [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost         C:\Windows\System32\eapsvc.dll
00:09:37.0712 0x04a0  Eaphost - ok
00:09:37.0837 0x04a0  [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv           C:\Windows\system32\drivers\evbda.sys
00:09:38.0055 0x04a0  ebdrv - ok
00:09:38.0134 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] EFS             C:\Windows\System32\lsass.exe
00:09:38.0180 0x04a0  EFS - ok
00:09:38.0196 0x04a0  [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys
00:09:38.0212 0x04a0  EhStorClass - ok
00:09:38.0243 0x04a0  [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
00:09:38.0274 0x04a0  EhStorTcgDrv - ok
00:09:38.0352 0x04a0  [ ABDD5AD016AFFD34AD40E944CE94BF59, 61089124CD8FEA31142CD4D3C47224A6310B9BE7B7FA974956D9EDDAD4381503 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
00:09:38.0399 0x04a0  EpsonBidirectionalService - detected UnsignedFile.Multi.Generic ( 1 )
00:09:40.0774 0x04a0  Detect skipped due to KSN trusted
00:09:40.0774 0x04a0  EpsonBidirectionalService - ok
00:09:40.0821 0x04a0  [ 20ECD0A490A121CB34F553FAD1DBBD39, 17C9DA33E78FBC7582B0AA53C611929B80FBBE1343B84A179D515B51C964D218 ] EpsonScanSvc    C:\Windows\system32\EscSvc64.exe
00:09:40.0852 0x04a0  EpsonScanSvc - ok
00:09:40.0868 0x04a0  [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
00:09:40.0899 0x04a0  ErrDev - ok
00:09:40.0946 0x04a0  esgiguard - ok
00:09:41.0009 0x04a0  [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem     C:\Windows\system32\es.dll
00:09:41.0102 0x04a0  EventSystem - ok
00:09:41.0134 0x04a0  [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat           C:\Windows\system32\drivers\exfat.sys
00:09:41.0196 0x04a0  exfat - ok
00:09:41.0306 0x04a0  [ 085CA7DA099678506A862AFCE927C229, A6C53F6ECF4B39FFEC6744142E586F08C7402BD562FAFCA9B50AA4CEED4148A3 ] F-Secure Gatekeeper C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys
00:09:41.0337 0x04a0  F-Secure Gatekeeper - ok
00:09:41.0384 0x04a0  [ A71D66253EC610626AE80C7DBC0EC15E, 892C2661818B8D2ECFC6CBFD977B0DDD05D55EB9A2C73E07B745AEB448B9EC12 ] F-Secure HIPS   C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys
00:09:41.0415 0x04a0  F-Secure HIPS - ok
00:09:41.0431 0x04a0  [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
00:09:41.0462 0x04a0  fastfat - ok
00:09:41.0524 0x04a0  [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax             C:\Windows\system32\fxssvc.exe
00:09:41.0665 0x04a0  Fax - ok
00:09:41.0696 0x04a0  [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc             C:\Windows\System32\drivers\fdc.sys
00:09:41.0712 0x04a0  fdc - ok
00:09:41.0743 0x04a0  [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost         C:\Windows\system32\fdPHost.dll
00:09:41.0759 0x04a0  fdPHost - ok
00:09:41.0774 0x04a0  [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub        C:\Windows\system32\fdrespub.dll
00:09:41.0821 0x04a0  FDResPub - ok
00:09:41.0853 0x04a0  [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc           C:\Windows\system32\fhsvc.dll
00:09:41.0899 0x04a0  fhsvc - ok
00:09:41.0899 0x04a0  [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
00:09:41.0931 0x04a0  FileInfo - ok
00:09:41.0946 0x04a0  [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
00:09:41.0962 0x04a0  Filetrace - ok
00:09:41.0993 0x04a0  [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
00:09:42.0009 0x04a0  flpydisk - ok
00:09:42.0040 0x04a0  [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
00:09:42.0103 0x04a0  FltMgr - ok
00:09:42.0165 0x04a0  [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache       C:\Windows\system32\FntCache.dll
00:09:42.0353 0x04a0  FontCache - ok
00:09:42.0415 0x04a0  [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
00:09:42.0462 0x04a0  FontCache3.0.0.0 - ok
00:09:42.0493 0x04a0  [ F59F2C574AA5D84477EB89F87C938F16, 0F3905D56440F9216911F7338061CFB8BEF243DDF9DC1E5D57254874EBBFA629 ] fsbts           C:\Windows\system32\Drivers\fsbts.sys
00:09:42.0540 0x04a0  fsbts - ok
00:09:42.0556 0x04a0  [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
00:09:42.0587 0x04a0  FsDepends - ok
00:09:42.0618 0x04a0  [ 10881D41226100F44DF3BF66F5EA75C6, A2B3B46A085D10F30A2D82186C51BCBC006390EB66E6ECF4B26293FF6506B2A9 ] fshoster        C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
00:09:42.0649 0x04a0  fshoster - ok
00:09:42.0696 0x04a0  [ 11CA1330E16D1772E868A86FBFD8A0AD, 337D5FF88C27BDA70A1364CACEADF8E5A26A240C1258550ECE62EEB0F72B0B7E ] FSMA            C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE
00:09:42.0759 0x04a0  FSMA - ok
00:09:42.0806 0x04a0  [ 4C19B29A6C8736B011AEABB4CEF74862, 0F7455A086976D884672A551B83AEB54EC09F51A4E9419F5EBCDEDA485697707 ] fsni            C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys
00:09:42.0837 0x04a0  fsni - ok
00:09:42.0884 0x04a0  [ 45303CDBC1FD8F8D371E726BF126F771, AEBAD185AD6DA8648900C840DE64C2D83E94515EC0E08586C52BF64C8C2E4B6F ] FSORSPClient    C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe
00:09:42.0931 0x04a0  FSORSPClient - ok
00:09:42.0931 0x04a0  [ 339E52896B03045FC2A738F9997FA38D, A5EDCF14BBA63DC1F855E799E671AD210734A462D41154B44551D525272DB502 ] fsvista         C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys
00:09:42.0962 0x04a0  fsvista - ok
00:09:42.0978 0x04a0  [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
00:09:42.0993 0x04a0  Fs_Rec - ok
00:09:43.0040 0x04a0  [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
00:09:43.0103 0x04a0  fvevol - ok
00:09:43.0134 0x04a0  [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM           C:\Windows\System32\drivers\fxppm.sys
00:09:43.0181 0x04a0  FxPPM - ok
00:09:43.0196 0x04a0  [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
00:09:43.0212 0x04a0  gagp30kx - ok
00:09:43.0274 0x04a0  [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
00:09:43.0321 0x04a0  GamesAppService - ok
00:09:43.0337 0x04a0  [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
00:09:43.0353 0x04a0  gencounter - ok
00:09:43.0368 0x04a0  [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys
00:09:43.0399 0x04a0  GPIOClx0101 - ok
00:09:43.0462 0x04a0  [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc           C:\Windows\System32\gpsvc.dll
00:09:43.0603 0x04a0  gpsvc - ok
00:09:43.0634 0x04a0  [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
00:09:43.0712 0x04a0  HdAudAddService - ok
00:09:43.0743 0x04a0  [ 7D87B5B6C7188D553E11B59DC7F0B111, FC633DB71E1D72E8AD8F89BBB54324CC6ED17F5594EF55DD0BDB58EE1F601FF5 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
00:09:43.0774 0x04a0  HDAudBus - ok
00:09:43.0806 0x04a0  [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys
00:09:43.0821 0x04a0  HidBatt - ok
00:09:43.0853 0x04a0  [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth          C:\Windows\System32\drivers\hidbth.sys
00:09:43.0884 0x04a0  HidBth - ok
00:09:43.0915 0x04a0  [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
00:09:43.0946 0x04a0  hidi2c - ok
00:09:43.0978 0x04a0  [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr           C:\Windows\System32\drivers\hidir.sys
00:09:44.0009 0x04a0  HidIr - ok
00:09:44.0025 0x04a0  [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv         C:\Windows\System32\hidserv.dll
00:09:44.0056 0x04a0  hidserv - ok
00:09:44.0071 0x04a0  [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
00:09:44.0087 0x04a0  HidUsb - ok
00:09:44.0118 0x04a0  [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc          C:\Windows\system32\kmsvc.dll
00:09:44.0150 0x04a0  hkmsvc - ok
00:09:44.0181 0x04a0  [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\Windows\system32\ListSvc.dll
00:09:44.0212 0x04a0  HomeGroupListener - ok
00:09:44.0259 0x04a0  [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\Windows\system32\provsvc.dll
00:09:44.0321 0x04a0  HomeGroupProvider - ok
00:09:44.0384 0x04a0  [ BB1FC298BE53AAB1E110F6E786BD8AC5, C2DA2C3CE96D5F8B50013063B5EF7BED7478636896C709A7AF34855B2E69B9F1 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
00:09:44.0415 0x04a0  HP Support Assistant Service - detected UnsignedFile.Multi.Generic ( 1 )
00:09:46.0806 0x04a0  Detect skipped due to KSN trusted
00:09:46.0806 0x04a0  HP Support Assistant Service - ok
00:09:46.0915 0x04a0  [ D104FF402FC3DDB686E6DEF00334DB26, 6CCE56587C02ECE474C6BF959C4A6F752A1FF0B718FBE8EE4FD9755313A207C1 ] hpdskflt        C:\Windows\system32\DRIVERS\hpdskflt.sys
00:09:46.0947 0x04a0  hpdskflt - ok
00:09:47.0009 0x04a0  [ 514455F6586473791C5C6B25BA4E1BAB, 0C2CAE8F35241F1B936C502AAB7C9303C643D898BAB1D060FCA1E6B3A7D9FDB9 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
00:09:47.0228 0x04a0  hpqwmiex - ok
00:09:47.0275 0x04a0  [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
00:09:47.0306 0x04a0  HpSAMD - ok
00:09:47.0337 0x04a0  [ 55FFCBB036D7BE4BCA6FA1421203A27F, 5BB865FC631390F59AF5F2452D4D2DA47E34A49E194C8010E942F5A2013F3895 ] hpsrv           C:\Windows\system32\Hpservice.exe
00:09:47.0353 0x04a0  hpsrv - ok
00:09:47.0400 0x04a0  [ 3C5B2067338E4EFDADE94E4A72728F23, 72E21FA1E660F9405A5E39B0F89AB21C60F20BAC13247567EF7139AC130F1897 ] HPWMISVC        C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
00:09:47.0431 0x04a0  HPWMISVC - ok
00:09:47.0478 0x04a0  [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
00:09:47.0618 0x04a0  HTTP - ok
00:09:47.0650 0x04a0  [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
00:09:47.0665 0x04a0  hwpolicy - ok
00:09:47.0697 0x04a0  [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
00:09:47.0728 0x04a0  hyperkbd - ok
00:09:47.0743 0x04a0  [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo      C:\Windows\system32\DRIVERS\HyperVideo.sys
00:09:47.0759 0x04a0  HyperVideo - ok
00:09:47.0775 0x04a0  [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
00:09:47.0790 0x04a0  i8042prt - ok
00:09:47.0822 0x04a0  [ 050F2539E14F9D5E90A4B61738EC29BD, 0E65468B9F452FA7DB6DF2C1B2B2E9439C79031E27054FBDBDFE28A9F98721D7 ] iaStorA         C:\Windows\system32\drivers\iaStorA.sys
00:09:47.0978 0x04a0  iaStorA - ok
00:09:48.0009 0x04a0  [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
00:09:48.0103 0x04a0  iaStorV - ok
00:09:48.0197 0x04a0  [ ABEFA4BD23329FD9BD47496BF2E58774, 9689D4C6380735EE1CC7F480696CDDC229E0FA511942AC813314D353584D82DD ] IconMan_R       C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
00:09:48.0353 0x04a0  IconMan_R - detected UnsignedFile.Multi.Generic ( 1 )
00:09:50.0697 0x04a0  Detect skipped due to KSN trusted
00:09:50.0697 0x04a0  IconMan_R - ok
00:09:50.0978 0x04a0  [ 11A31FC2481BFE69B0507ED8C80215F4, 8A1E90611F749E8F04B6D86E835E981CAC16D0841305CADB19E58682DA006698 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
00:09:51.0259 0x04a0  igfx - ok
00:09:51.0306 0x04a0  [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
00:09:51.0337 0x04a0  iirsp - ok
00:09:51.0447 0x04a0  [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] IKEEXT          C:\Windows\System32\ikeext.dll
00:09:51.0619 0x04a0  IKEEXT - ok
00:09:51.0650 0x04a0  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
00:09:51.0712 0x04a0  IntcDAud - ok
00:09:51.0822 0x04a0  [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel® Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
00:09:51.0994 0x04a0  Intel® Capability Licensing Service Interface - ok
00:09:52.0041 0x04a0  [ 30E9FAC23E2537D82F2836CB81AEE186, 03E5072D43ECED70EF004D2E6E654B4CCCE059825CC3C641C0534E4C0BC0C7E8 ] Intel® ME Service C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
00:09:52.0072 0x04a0  Intel® ME Service - ok
00:09:52.0087 0x04a0  [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide        C:\Windows\system32\drivers\intelide.sys
00:09:52.0103 0x04a0  intelide - ok
00:09:52.0150 0x04a0  [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm        C:\Windows\System32\drivers\intelppm.sys
00:09:52.0181 0x04a0  intelppm - ok
00:09:52.0212 0x04a0  [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
00:09:52.0244 0x04a0  IpFilterDriver - ok
00:09:52.0275 0x04a0  [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
00:09:52.0369 0x04a0  iphlpsvc - ok
00:09:52.0416 0x04a0  [ 6E98A046A12AA113F8898AA5D612BD6E, 28816CC1F03F2BFBF099C087C0BB6949E959F44C888DD2D0528FF7ED5D665ECF ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys
00:09:52.0447 0x04a0  IPMIDRV - ok
00:09:52.0478 0x04a0  [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
00:09:52.0509 0x04a0  IPNAT - ok
00:09:52.0525 0x04a0  [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM          C:\Windows\system32\drivers\irenum.sys
00:09:52.0556 0x04a0  IRENUM - ok
00:09:52.0572 0x04a0  [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp          C:\Windows\system32\drivers\isapnp.sys
00:09:52.0587 0x04a0  isapnp - ok
00:09:52.0634 0x04a0  [ 69C8BF0BC2B0EA10F130F4D3104DC2EF, 8FFF92828C3DC20F0F42C42E58A03B59A4E0187963F728DC618C9595FB2D0239 ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
00:09:52.0681 0x04a0  iScsiPrt - ok
00:09:52.0728 0x04a0  [ 3C4002D339491AF73D663FFC7F6E5ECB, 0B53047989BDB781572253BC3AA757912FE54366870C1955E687972CE210C285 ] jhi_service     C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
00:09:52.0775 0x04a0  jhi_service - ok
00:09:52.0791 0x04a0  [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
00:09:52.0822 0x04a0  kbdclass - ok
00:09:52.0837 0x04a0  [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
00:09:52.0869 0x04a0  kbdhid - ok
00:09:52.0869 0x04a0  [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic           C:\Windows\system32\DRIVERS\kdnic.sys
00:09:52.0884 0x04a0  kdnic - ok
00:09:52.0916 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] KeyIso          C:\Windows\system32\lsass.exe
00:09:52.0931 0x04a0  KeyIso - ok
00:09:52.0978 0x04a0  [ DFA480F6DED551464F3A5B959F437800, C07AB6F28A09FCBE11EECAD03B06CEAE1016EC24031FCA0C092639E90FBA84CF ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
00:09:53.0009 0x04a0  KSecDD - ok
00:09:53.0056 0x04a0  [ 127FB0AAD232BAAD2C9BBACD374F4FC5, 3BC56F6B4374062C96149D69ACE053DF81A278F0361599F5A2F3DB1F76F0AD68 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
00:09:53.0072 0x04a0  KSecPkg - ok
00:09:53.0103 0x04a0  [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
00:09:53.0134 0x04a0  ksthunk - ok
00:09:53.0181 0x04a0  [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm           C:\Windows\system32\msdtckrm.dll
00:09:53.0244 0x04a0  KtmRm - ok
00:09:53.0306 0x04a0  [ 256EE31588257E8A555DBFAA13F1908E, B6817F632EDEA483E35BF26846DCDD4E95E860620959179B2A5D8AD7EEDDB126 ] LanmanServer    C:\Windows\System32\srvsvc.dll
00:09:53.0369 0x04a0  LanmanServer - ok
00:09:53.0400 0x04a0  [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
00:09:53.0431 0x04a0  LanmanWorkstation - ok
00:09:53.0463 0x04a0  [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
00:09:53.0478 0x04a0  lltdio - ok
00:09:53.0509 0x04a0  [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
00:09:53.0541 0x04a0  lltdsvc - ok
00:09:53.0572 0x04a0  [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts         C:\Windows\System32\lmhsvc.dll
00:09:53.0588 0x04a0  lmhosts - ok
00:09:53.0634 0x04a0  [ 4269D44BB47A6DA5D80B11F4C8536458, 7A8FFC8F851DD9E5C43986BE0888831CB71D188138DF3CF7F787DADDA70915B0 ] LMS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
00:09:53.0728 0x04a0  LMS - ok
00:09:53.0744 0x04a0  [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
00:09:53.0759 0x04a0  LSI_SAS - ok
00:09:53.0822 0x04a0  [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
00:09:53.0853 0x04a0  LSI_SAS2 - ok
00:09:53.0853 0x04a0  [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
00:09:53.0884 0x04a0  LSI_SCSI - ok
00:09:53.0884 0x04a0  [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys
00:09:53.0900 0x04a0  LSI_SSS - ok
00:09:53.0947 0x04a0  [ A57BA284F5996FFD32DCDBC41A4657DB, 2106B83873A824BC83EF42FAC9DD9A0F741209535A84AE65EA8E786519920043 ] LSM             C:\Windows\System32\lsm.dll
00:09:54.0025 0x04a0  LSM - ok
00:09:54.0041 0x04a0  [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv           C:\Windows\system32\drivers\luafv.sys
00:09:54.0072 0x04a0  luafv - ok
00:09:54.0103 0x04a0  [ 0BB97D43299910CBFBA59C461B99B910, 27C22D9D9EE8A410D7396960DA93E9E260D4DCDD38DCE06E85E45C5E24C067DE ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
00:09:54.0150 0x04a0  MBAMProtector - ok
00:09:54.0181 0x04a0  [ 65085456FD9A74D7F1A999520C299ECB, EA564BC913EF1B8A4CAA9242FC70F525B68CF1F3CA462F63B0B7215B93FE8530 ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
00:09:54.0291 0x04a0  MBAMScheduler - ok
00:09:54.0322 0x04a0  [ E0D7732F2D2E24B2DB3F67B6750295B8, AA5CA86AF1ACEC900F60339016B3DC55472DB40ADB99186005A7ABE67B7D66FC ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
00:09:54.0463 0x04a0  MBAMService - ok
00:09:54.0541 0x04a0  [ E416E967E3FB6FB1E9AE12B9C7DAB526, 4849AE6B628D349F64D26CDD638B34E598E7C839335961C6AE39B305765106A3 ] MDM             C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
00:09:54.0572 0x04a0  MDM - detected UnsignedFile.Multi.Generic ( 1 )
00:09:56.0947 0x04a0  Detect skipped due to KSN trusted
00:09:56.0947 0x04a0  MDM - ok
00:09:56.0994 0x04a0  [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas         C:\Windows\system32\drivers\megasas.sys
00:09:57.0041 0x04a0  megasas - ok
00:09:57.0056 0x04a0  [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
00:09:57.0119 0x04a0  MegaSR - ok
00:09:57.0135 0x04a0  [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] MEIx64          C:\Windows\System32\drivers\HECIx64.sys
00:09:57.0181 0x04a0  MEIx64 - ok
00:09:57.0213 0x04a0  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS           C:\Windows\system32\mmcss.dll
00:09:57.0228 0x04a0  MMCSS - ok
00:09:57.0260 0x04a0  [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem           C:\Windows\system32\drivers\modem.sys
00:09:57.0291 0x04a0  Modem - ok
00:09:57.0322 0x04a0  [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor         C:\Windows\System32\drivers\monitor.sys
00:09:57.0338 0x04a0  monitor - ok
00:09:57.0353 0x04a0  [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass        C:\Windows\System32\drivers\mouclass.sys
00:09:57.0369 0x04a0  mouclass - ok
00:09:57.0385 0x04a0  [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid          C:\Windows\System32\drivers\mouhid.sys
00:09:57.0416 0x04a0  mouhid - ok
00:09:57.0416 0x04a0  [ 89D263DBF08119CE16273991C120D6DD, 9771EDAD266F0E234E71DFB6792F396710E051F2ADCA5CDADEBBD2790D0E6054 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
00:09:57.0431 0x04a0  mountmgr - ok
00:09:57.0510 0x04a0  [ AEE4E9CC59CDEB55B1ECB0E596E796BE, 674F6F38D86D238AFD6223E03A862F8B43DD8499FBC2D4B7A04E510EC5EACF3B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
00:09:57.0556 0x04a0  MozillaMaintenance - ok
00:09:57.0588 0x04a0  [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
00:09:57.0603 0x04a0  mpsdrv - ok
00:09:57.0650 0x04a0  [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc          C:\Windows\system32\mpssvc.dll
00:09:57.0775 0x04a0  MpsSvc - ok
00:09:57.0791 0x04a0  [ 3D70147F55F1EC84EB9139ED7FFE48BC, 12429C2FDDDA13815F0E18F9009011AA5360955759A23A38175543F480CB92EF ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
00:09:57.0822 0x04a0  MRxDAV - ok
00:09:57.0885 0x04a0  [ 93179D48066918323628CB016D8C94DC, FE110BF7A10EDD1DF7F6B933D373FCA51F37413282EBC4187E7C9B1965186BCC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
00:09:57.0947 0x04a0  mrxsmb - ok
00:09:57.0963 0x04a0  [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
00:09:57.0994 0x04a0  mrxsmb10 - ok
00:09:58.0041 0x04a0  [ 5C7DD2E5759FFCCD2C7341C1B90F2B26, 9822FA53E6067C0E39B7A3A3F1E88719D5D8B055D86FF894F0475B158289EA45 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
00:09:58.0057 0x04a0  mrxsmb20 - ok
00:09:58.0088 0x04a0  [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge        C:\Windows\system32\DRIVERS\bridge.sys
00:09:58.0119 0x04a0  MsBridge - ok
00:09:58.0150 0x04a0  [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC           C:\Windows\System32\msdtc.exe
00:09:58.0166 0x04a0  MSDTC - ok
00:09:58.0197 0x04a0  [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
00:09:58.0213 0x04a0  Msfs - ok
00:09:58.0244 0x04a0  [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys
00:09:58.0260 0x04a0  msgpiowin32 - ok
00:09:58.0275 0x04a0  [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
00:09:58.0291 0x04a0  mshidkmdf - ok
00:09:58.0307 0x04a0  [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys
00:09:58.0322 0x04a0  mshidumdf - ok
00:09:58.0322 0x04a0  [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
00:09:58.0353 0x04a0  msisadrv - ok
00:09:58.0385 0x04a0  [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
00:09:58.0416 0x04a0  MSiSCSI - ok
00:09:58.0416 0x04a0  msiserver - ok
00:09:58.0447 0x04a0  [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
00:09:58.0463 0x04a0  MSKSSRV - ok
00:09:58.0478 0x04a0  [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp          C:\Windows\system32\DRIVERS\mslldp.sys
00:09:58.0494 0x04a0  MsLldp - ok
00:09:58.0510 0x04a0  [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
00:09:58.0525 0x04a0  MSPCLOCK - ok
00:09:58.0525 0x04a0  [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
00:09:58.0557 0x04a0  MSPQM - ok
00:09:58.0572 0x04a0  [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
00:09:58.0635 0x04a0  MsRPC - ok
00:09:58.0650 0x04a0  [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
00:09:58.0682 0x04a0  mssmbios - ok
00:09:58.0713 0x04a0  [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
00:09:58.0728 0x04a0  MSTEE - ok
00:09:58.0760 0x04a0  [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
00:09:58.0775 0x04a0  MTConfig - ok
00:09:58.0775 0x04a0  [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup             C:\Windows\system32\Drivers\mup.sys
00:09:58.0791 0x04a0  Mup - ok
00:09:58.0807 0x04a0  [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
00:09:58.0853 0x04a0  mvumis - ok
00:09:58.0885 0x04a0  [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent        C:\Windows\system32\qagentRT.dll
00:09:58.0963 0x04a0  napagent - ok
00:09:58.0978 0x04a0  [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
00:09:59.0041 0x04a0  NativeWifiP - ok
00:09:59.0072 0x04a0  [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc          C:\Windows\System32\ncasvc.dll
00:09:59.0088 0x04a0  NcaSvc - ok
00:09:59.0119 0x04a0  [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
00:09:59.0150 0x04a0  NcdAutoSetup - ok
00:09:59.0213 0x04a0  [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS            C:\Windows\system32\drivers\ndis.sys
00:09:59.0400 0x04a0  NDIS - ok
00:09:59.0432 0x04a0  [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
00:09:59.0447 0x04a0  NdisCap - ok
00:09:59.0463 0x04a0  [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform  C:\Windows\system32\DRIVERS\NdisImPlatform.sys
00:09:59.0494 0x04a0  NdisImPlatform - ok
00:09:59.0541 0x04a0  [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
00:09:59.0557 0x04a0  NdisTapi - ok
00:09:59.0572 0x04a0  [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
00:09:59.0603 0x04a0  Ndisuio - ok
00:09:59.0603 0x04a0  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
00:09:59.0635 0x04a0  NdisWan - ok
00:09:59.0635 0x04a0  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY   C:\Windows\system32\DRIVERS\ndiswan.sys
00:09:59.0666 0x04a0  NDISWANLEGACY - ok
00:09:59.0697 0x04a0  [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
00:09:59.0713 0x04a0  NDProxy - ok
00:09:59.0713 0x04a0  [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu             C:\Windows\system32\drivers\Ndu.sys
00:09:59.0744 0x04a0  Ndu - ok
00:09:59.0744 0x04a0  [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
00:09:59.0775 0x04a0  NetBIOS - ok
00:09:59.0791 0x04a0  [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
00:09:59.0853 0x04a0  NetBT - ok
00:09:59.0869 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] Netlogon        C:\Windows\system32\lsass.exe
00:09:59.0900 0x04a0  Netlogon - ok
00:09:59.0916 0x04a0  [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman          C:\Windows\System32\netman.dll
00:09:59.0947 0x04a0  Netman - ok
00:09:59.0994 0x04a0  [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm        C:\Windows\System32\netprofmsvc.dll
00:10:00.0057 0x04a0  netprofm - ok
00:10:00.0166 0x04a0  [ 080417AC9E51B2B29656EC26B62E87F1, F85B0F301396913427CA410AEA302119BBDC625AFDB560D9B7A08E9E622AEB8E ] netr28x         C:\Windows\system32\DRIVERS\netr28x.sys
00:10:00.0338 0x04a0  netr28x - ok
00:10:00.0385 0x04a0  [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
00:10:00.0416 0x04a0  NetTcpPortSharing - ok
00:10:00.0447 0x04a0  [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
00:10:00.0463 0x04a0  nfrd960 - ok
00:10:00.0525 0x04a0  [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] NlaSvc          C:\Windows\System32\nlasvc.dll
00:10:00.0604 0x04a0  NlaSvc - ok
00:10:00.0635 0x04a0  [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
00:10:00.0682 0x04a0  Npfs - ok
00:10:00.0682 0x04a0  [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys
00:10:00.0713 0x04a0  npsvctrig - ok
00:10:00.0744 0x04a0  [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi             C:\Windows\system32\nsisvc.dll
00:10:00.0760 0x04a0  nsi - ok
00:10:00.0760 0x04a0  [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
00:10:00.0791 0x04a0  nsiproxy - ok
00:10:00.0900 0x04a0  [ 76929F4A69E425911A63B407E26C2589, 17896DB6EDEF2637D159432DB61E8B5FA2F4F54B5F50BCD6215827C321ED2C2A ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
00:10:01.0119 0x04a0  Ntfs - ok
00:10:01.0135 0x04a0  [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null            C:\Windows\system32\drivers\Null.sys
00:10:01.0166 0x04a0  Null - ok
00:10:01.0182 0x04a0  [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
00:10:01.0213 0x04a0  nvraid - ok
00:10:01.0213 0x04a0  [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
00:10:01.0244 0x04a0  nvstor - ok
00:10:01.0260 0x04a0  [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
00:10:01.0275 0x04a0  nv_agp - ok
00:10:01.0307 0x04a0  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
00:10:01.0338 0x04a0  p2pimsvc - ok
00:10:01.0369 0x04a0  [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc          C:\Windows\system32\p2psvc.dll
00:10:01.0432 0x04a0  p2psvc - ok
00:10:01.0463 0x04a0  [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport         C:\Windows\System32\drivers\parport.sys
00:10:01.0510 0x04a0  Parport - ok
00:10:01.0541 0x04a0  [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
00:10:01.0557 0x04a0  partmgr - ok
00:10:01.0588 0x04a0  [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc          C:\Windows\System32\pcasvc.dll
00:10:01.0682 0x04a0  PcaSvc - ok
00:10:01.0697 0x04a0  [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci             C:\Windows\system32\drivers\pci.sys
00:10:01.0744 0x04a0  pci - ok
00:10:01.0760 0x04a0  [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide          C:\Windows\system32\drivers\pciide.sys
00:10:01.0807 0x04a0  pciide - ok
00:10:01.0838 0x04a0  [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
00:10:01.0885 0x04a0  pcmcia - ok
00:10:01.0900 0x04a0  [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw             C:\Windows\system32\drivers\pcw.sys
00:10:01.0916 0x04a0  pcw - ok
00:10:01.0947 0x04a0  [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc             C:\Windows\system32\drivers\pdc.sys
00:10:01.0979 0x04a0  pdc - ok
00:10:02.0041 0x04a0  [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
00:10:02.0119 0x04a0  PEAUTH - ok
00:10:02.0182 0x04a0  [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost        C:\Windows\SysWow64\perfhost.exe
00:10:02.0229 0x04a0  PerfHost - ok
00:10:02.0244 0x04a0  pfc - ok
00:10:02.0275 0x04a0  [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla             C:\Windows\system32\pla.dll
00:10:02.0369 0x04a0  pla - ok
00:10:02.0400 0x04a0  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
00:10:02.0447 0x04a0  PlugPlay - ok
00:10:02.0447 0x04a0  PnkBstrA - ok
00:10:02.0463 0x04a0  [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
00:10:02.0494 0x04a0  PNRPAutoReg - ok
00:10:02.0525 0x04a0  [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
00:10:02.0557 0x04a0  PNRPsvc - ok
00:10:02.0604 0x04a0  [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
00:10:02.0713 0x04a0  PolicyAgent - ok
00:10:02.0744 0x04a0  [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power           C:\Windows\system32\umpo.dll
00:10:02.0791 0x04a0  Power - ok
00:10:02.0822 0x04a0  [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
00:10:02.0838 0x04a0  PptpMiniport - ok
00:10:02.0963 0x04a0  [ C2D3B3D0060619D5E03E696BD56FF59F, 155954F16B6F9B51BA16F43F1AE6F977B1EC4DE77862C6F6C722293189BE0DD2 ] PrintNotify     C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
00:10:03.0135 0x04a0  PrintNotify - ok
00:10:03.0166 0x04a0  [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor       C:\Windows\System32\drivers\processr.sys
00:10:03.0197 0x04a0  Processor - ok
00:10:03.0229 0x04a0  [ 429E8502AD2227CF88F8840FC5BD590D, A186DA46C083580ACEDE9C7E3156865034302CD803140EEEC8E1DE16DA4BC99B ] ProfSvc         C:\Windows\system32\profsvc.dll
00:10:03.0276 0x04a0  ProfSvc - ok
00:10:03.0307 0x04a0  [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
00:10:03.0338 0x04a0  Psched - ok
00:10:03.0369 0x04a0  [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE           C:\Windows\system32\qwave.dll
00:10:03.0416 0x04a0  QWAVE - ok
00:10:03.0447 0x04a0  [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys




 

Link to post
Share on other sites

10:03.0463 0x04a0  QWAVEdrv - ok
00:10:03.0619 0x04a0  [ 000D82CC258E2D341605A6F350C4D1E6, 59EC5BA95D8B9EC739BC7D0BBE0E244CA2AE2DF01A8B65BFF7741DFBE38C2940 ] RapportCerberus_59849 C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys
00:10:03.0744 0x04a0  RapportCerberus_59849 - ok
00:10:03.0838 0x04a0  [ EBA3D20E285D7461C2177AD2E64DA7EF, C24D0CBB030F632325C77CAD2982BB9E1B2A259FEA6EAF261F988547CFBBA2EC ] RapportEI64     C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
00:10:03.0901 0x04a0  RapportEI64 - ok
00:10:03.0932 0x04a0  [ 6F8512C8B25445860A07B5103394FB3D, 228DE7AFD20AAF58CE9F0BFDE6CF0422048D137B0398094D05CF042A37552893 ] RapportHades64  C:\Windows\system32\Drivers\RapportHades64.sys
00:10:03.0979 0x04a0  RapportHades64 - ok
00:10:03.0994 0x04a0  [ 7252FEA79A5EE99C6F7A432090978852, D9BCA7CC4FFE615335D224155BB3F9D4EFE45F985EE8FD1474C5CC70476C3C58 ] RapportKE64     C:\Windows\system32\Drivers\RapportKE64.sys
00:10:04.0057 0x04a0  RapportKE64 - ok
00:10:04.0135 0x04a0  [ E0A588F701D3F89592B59C4B37037F52, 8A1CCC2485EEE45120090BD0EF5B865E5E085A5CF1DA3069AEE9300A99E1EFD0 ] RapportMgmtService C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
00:10:04.0713 0x04a0  RapportMgmtService - ok
00:10:04.0744 0x04a0  [ E36D2CEC679CEDC1A298C36BCDAF8E23, B6F01940963C89B70732D89E59F3020D2EE60246CC0CB1B73CC4C13288B634C3 ] RapportPG64     C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
00:10:04.0822 0x04a0  RapportPG64 - ok
00:10:04.0838 0x04a0  [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
00:10:04.0869 0x04a0  RasAcd - ok
00:10:04.0901 0x04a0  [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
00:10:04.0947 0x04a0  RasAgileVpn - ok
00:10:04.0979 0x04a0  [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto         C:\Windows\System32\rasauto.dll
00:10:05.0026 0x04a0  RasAuto - ok
00:10:05.0057 0x04a0  [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
00:10:05.0088 0x04a0  Rasl2tp - ok
00:10:05.0104 0x04a0  [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan          C:\Windows\System32\rasmans.dll
00:10:05.0166 0x04a0  RasMan - ok
00:10:05.0198 0x04a0  [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
00:10:05.0229 0x04a0  RasPppoe - ok
00:10:05.0229 0x04a0  [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
00:10:05.0260 0x04a0  RasSstp - ok
00:10:05.0307 0x04a0  [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
00:10:05.0385 0x04a0  rdbss - ok
00:10:05.0401 0x04a0  [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
00:10:05.0432 0x04a0  rdpbus - ok
00:10:05.0463 0x04a0  [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
00:10:05.0510 0x04a0  RDPDR - ok
00:10:05.0541 0x04a0  [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
00:10:05.0573 0x04a0  RdpVideoMiniport - ok
00:10:05.0604 0x04a0  [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
00:10:05.0666 0x04a0  RDPWD - ok
00:10:05.0682 0x04a0  [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
00:10:05.0713 0x04a0  rdyboost - ok
00:10:05.0744 0x04a0  [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess    C:\Windows\System32\mprdim.dll
00:10:05.0791 0x04a0  RemoteAccess - ok
00:10:05.0823 0x04a0  [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
00:10:05.0854 0x04a0  RemoteRegistry - ok
00:10:05.0885 0x04a0  [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
00:10:05.0901 0x04a0  RpcEptMapper - ok
00:10:05.0932 0x04a0  [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator      C:\Windows\system32\locator.exe
00:10:05.0963 0x04a0  RpcLocator - ok
00:10:05.0994 0x04a0  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs           C:\Windows\system32\rpcss.dll
00:10:06.0073 0x04a0  RpcSs - ok
00:10:06.0088 0x04a0  [ D38250F459BF60D6F4B69B79DCD948CC, E68C864C1A4C9352EA939062F28789ADE9F0672E8CB3F3909D2891786C76F06F ] RSP2STOR        C:\Windows\system32\DRIVERS\RtsP2Stor.sys
00:10:06.0119 0x04a0  RSP2STOR - ok
00:10:06.0151 0x04a0  [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
00:10:06.0182 0x04a0  rspndr - ok
00:10:06.0229 0x04a0  [ 34DA0D14F5C3F1883A331AFB975AB434, BB5D580C1DCAE59CC1DB75C411A5A4DDF435931469E7EBFF5DFDADBFE07ADEBF ] RTL8168         C:\Windows\system32\DRIVERS\Rt630x64.sys
00:10:06.0385 0x04a0  RTL8168 - ok
00:10:06.0401 0x04a0  [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys
00:10:06.0448 0x04a0  s3cap - ok
00:10:06.0479 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] SamSs           C:\Windows\system32\lsass.exe
00:10:06.0526 0x04a0  SamSs - ok
00:10:06.0541 0x04a0  [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
00:10:06.0557 0x04a0  sbp2port - ok
00:10:06.0619 0x04a0  [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
00:10:06.0666 0x04a0  SCardSvr - ok
00:10:06.0698 0x04a0  [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
00:10:06.0729 0x04a0  scfilter - ok
00:10:06.0838 0x04a0  [ ED40ED9A65F3E79A8C43DD50C5FDADBF, 2323BFAB1BC3D661A376650B7AC14C7780C92BA575DA048F3C7611CDB3F7F04A ] Schedule        C:\Windows\system32\schedsvc.dll
00:10:07.0026 0x04a0  Schedule - ok
00:10:07.0057 0x04a0  [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc     C:\Windows\System32\certprop.dll
00:10:07.0088 0x04a0  SCPolicySvc - ok
00:10:07.0135 0x04a0  [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus           C:\Windows\System32\drivers\sdbus.sys
00:10:07.0166 0x04a0  sdbus - ok
00:10:07.0213 0x04a0  [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
00:10:07.0244 0x04a0  SDRSVC - ok
00:10:07.0291 0x04a0  [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor          C:\Windows\System32\drivers\sdstor.sys
00:10:07.0323 0x04a0  sdstor - ok
00:10:07.0354 0x04a0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
00:10:07.0401 0x04a0  secdrv - ok
00:10:07.0432 0x04a0  [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon        C:\Windows\system32\seclogon.dll
00:10:07.0463 0x04a0  seclogon - ok
00:10:07.0479 0x04a0  [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS            C:\Windows\system32\sens.dll
00:10:07.0510 0x04a0  SENS - ok
00:10:07.0541 0x04a0  [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
00:10:07.0573 0x04a0  SensrSvc - ok
00:10:07.0588 0x04a0  [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx           C:\Windows\system32\drivers\SerCx.sys
00:10:07.0604 0x04a0  SerCx - ok
00:10:07.0620 0x04a0  [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum         C:\Windows\System32\drivers\serenum.sys
00:10:07.0666 0x04a0  Serenum - ok
00:10:07.0682 0x04a0  [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial          C:\Windows\System32\drivers\serial.sys
00:10:07.0713 0x04a0  Serial - ok
00:10:07.0713 0x04a0  [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse        C:\Windows\System32\drivers\sermouse.sys
00:10:07.0760 0x04a0  sermouse - ok
00:10:07.0791 0x04a0  [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv      C:\Windows\system32\sessenv.dll
00:10:07.0807 0x04a0  SessionEnv - ok
00:10:07.0823 0x04a0  [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys
00:10:07.0854 0x04a0  sfloppy - ok
00:10:07.0885 0x04a0  [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
00:10:07.0963 0x04a0  SharedAccess - ok
00:10:08.0041 0x04a0  [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
00:10:08.0151 0x04a0  ShellHWDetection - ok
00:10:08.0182 0x04a0  [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
00:10:08.0307 0x04a0  SiSRaid2 - ok
00:10:08.0323 0x04a0  [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
00:10:08.0416 0x04a0  SiSRaid4 - ok
00:10:08.0463 0x04a0  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
00:10:08.0541 0x04a0  SkypeUpdate - ok
00:10:08.0557 0x04a0  [ AF5CC3F9B88F140D78FC967ABF0F4EC7, 7CE3AB7B0A36635CF00E35E84C14B8661FAF794ABCFA61AE45A0E5E8EA996A3B ] SmbDrv          C:\Windows\System32\drivers\Smb_driver_AMDASF.sys
00:10:08.0588 0x04a0  SmbDrv - ok
00:10:08.0620 0x04a0  [ 19555D03CB179BED8B8AAA239A36BDA4, 7B975821D52ABE077496B3CFC010B33D478CD2C36E6A74D8F72D2BF582B8C84A ] SmbDrvI         C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys
00:10:08.0635 0x04a0  SmbDrvI - ok
00:10:08.0666 0x04a0  [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
00:10:08.0682 0x04a0  SNMPTRAP - ok
00:10:08.0776 0x04a0  [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
00:10:08.0807 0x04a0  Sony PC Companion - ok
00:10:08.0838 0x04a0  [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport       C:\Windows\system32\drivers\spaceport.sys
00:10:08.0932 0x04a0  spaceport - ok
00:10:08.0963 0x04a0  [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys
00:10:09.0010 0x04a0  SpbCx - ok
00:10:09.0073 0x04a0  [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler         C:\Windows\System32\spoolsv.exe
00:10:09.0213 0x04a0  Spooler - ok
00:10:09.0573 0x04a0  [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc          C:\Windows\system32\sppsvc.exe
00:10:09.0870 0x04a0  sppsvc - ok
00:10:09.0963 0x04a0  [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] srv             C:\Windows\system32\DRIVERS\srv.sys
00:10:10.0057 0x04a0  srv - ok
00:10:10.0135 0x04a0  [ 56218A571ECF8D55E0CDFF8DF2546CF1, 44B34722108EDDC8757A0B7C939A854457BB7EBC92A83C4284DFFAECFC2E3619 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
00:10:10.0276 0x04a0  srv2 - ok
00:10:10.0323 0x04a0  [ 14FC338B80CFF7E04215133B568D15C4, 1F437BE0EC887097F0C3409D4198A20981FC325FDF915532AB85070D337DEF2B ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
00:10:10.0370 0x04a0  srvnet - ok
00:10:10.0385 0x04a0  [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
00:10:10.0432 0x04a0  SSDPSRV - ok
00:10:10.0432 0x04a0  [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
00:10:10.0448 0x04a0  SstpSvc - ok
00:10:10.0479 0x04a0  [ EA8F41484CCC5BA6A1455C2AD3D1BE3C, B206AA8F4BA7C1E15561B4F2011FA483C5401B0300914F747804A116CCE972BF ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
00:10:10.0510 0x04a0  ssudmdm - ok
00:10:10.0635 0x04a0  [ F452B51D895D894BF5487057E11D44CF, 4B4F54646B1069EA27D4A4F17CB85A66FF7B36A6087F3D07F12221B29DFBF8F2 ] STacSV          C:\Program Files\IDT\WDM\STacSV64.exe
00:10:10.0760 0x04a0  STacSV - detected UnsignedFile.Multi.Generic ( 1 )
00:10:13.0135 0x04a0  Detect skipped due to KSN trusted
00:10:13.0135 0x04a0  STacSV - ok
00:10:13.0245 0x04a0  [ 2F3B5A3567FFB343D8867C3D34C687F1, D01971412506746B2EA1CBB0ACF9472889ABBC23318C1332BEC9C8256011183E ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
00:10:13.0464 0x04a0  Steam Client Service - ok
00:10:13.0479 0x04a0  [ 4E85355B94CFCB67C135F6521A4895A7, AC4FC65C1E62A54B3834E7FE0A2B1ECC48A2AA563AE5BD508326EE68FFFBBEEE ] stexstor        C:\Windows\system32\drivers\stexstor.sys
00:10:13.0510 0x04a0  stexstor - ok
00:10:13.0542 0x04a0  [ B05AEC4014FFDC1793B5CCB6D9BD28D1, ED9CC2B5954BDB12868357703B451D8A086FC9DDA0A8F0EA486E3834B0854EE6 ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys
00:10:13.0667 0x04a0  STHDA - ok
00:10:13.0714 0x04a0  [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] stisvc          C:\Windows\System32\wiaservc.dll
00:10:13.0792 0x04a0  stisvc - ok
00:10:13.0807 0x04a0  [ B240874B2CA0CD02E8CD11E140B14C57, 0FDBEE3DB644175A30065CAF020F375703ADC45A33221788C010F3111707FC25 ] storahci        C:\Windows\system32\drivers\storahci.sys
00:10:13.0839 0x04a0  storahci - ok
00:10:13.0854 0x04a0  [ F74DBC95A57B1EE866D3732EB5F79BE2, E4FE9D5CD0A385ACB60D5D5E8D969F26C3A6BC0C08FF0838DBE9CA106229C8DE ] storflt         C:\Windows\system32\DRIVERS\vmstorfl.sys
00:10:13.0885 0x04a0  storflt - ok
00:10:13.0901 0x04a0  [ 5337E138B49ED1F44CCBA4073BC35C20, 2B296973215E3865A56C46DC3D27F1460D96BC321558CE7A911B05B0E7BF397F ] StorSvc         C:\Windows\system32\storsvc.dll
00:10:13.0932 0x04a0  StorSvc - ok
00:10:13.0948 0x04a0  [ 543CD3CC0E05B8D8815E0D4F040B6F59, 4B57C9534E94A0A67FC82DBD4FAECACA180BEC281FB477550A37C0A04777E09E ] storvsc         C:\Windows\system32\drivers\storvsc.sys
00:10:13.0964 0x04a0  storvsc - ok
00:10:13.0995 0x04a0  [ 8BC1C1ED6EF9C985A3FAA6A72F41679A, 82CC77030D23013572B4A64A64B6156789F253BF56268B790093CE3D345410A0 ] svsvc           C:\Windows\system32\svsvc.dll
00:10:14.0026 0x04a0  svsvc - ok
00:10:14.0042 0x04a0  [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] swenum          C:\Windows\System32\drivers\swenum.sys
00:10:14.0073 0x04a0  swenum - ok
00:10:14.0104 0x04a0  [ 502F9488540051F3E6C39889ECFA76BB, 22ABD681BE4CF8A1F484C6363C1334B1EF7A6C074D837B0121DE1896887B84C6 ] swprv           C:\Windows\System32\swprv.dll
00:10:14.0214 0x04a0  swprv - ok
00:10:14.0245 0x04a0  [ 3F45C3FE208CA5E68832B65C597A35A6, EACE9AAFC01C2BA52F4DA129AEF7BFA3CF7F10146E4F4330CD344BFC39DC959C ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
00:10:14.0323 0x04a0  SynTP - ok
00:10:14.0370 0x04a0  [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] SysMain         C:\Windows\system32\sysmain.dll
00:10:14.0589 0x04a0  SysMain - ok
00:10:14.0636 0x04a0  [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
00:10:14.0667 0x04a0  SystemEventsBroker - ok
00:10:14.0698 0x04a0  [ A6C06C45C44AD06C70AF8899AEC15BDC, AC2CCCDBA6B94BA85A6D41B47343193D175786D4ECF71AE9C7766ADD63A1273F ] TabletInputService C:\Windows\System32\TabSvc.dll
00:10:14.0745 0x04a0  TabletInputService - ok
00:10:14.0761 0x04a0  [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] TapiSrv         C:\Windows\System32\tapisrv.dll
00:10:14.0792 0x04a0  TapiSrv - ok
00:10:15.0057 0x04a0  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
00:10:15.0386 0x04a0  Tcpip - ok
00:10:15.0464 0x04a0  [ DD4249F03598043DED6FA540EB14898A, 7015BD1A692F75D54B0F96E5EDC5C4DF41B0C831E85D0F6EF0AFBEFCA2F6DA83 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
00:10:15.0698 0x04a0  TCPIP6 - ok
00:10:15.0714 0x04a0  [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
00:10:15.0792 0x04a0  tcpipreg - ok
00:10:15.0807 0x04a0  [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
00:10:15.0839 0x04a0  tdx - ok
00:10:15.0854 0x04a0  [ F7C8AB5D8AFFAA318D6A21093D139BF4, 0A35052EF7DC8615783A23897358D8C579BE694363615C9563FF629E7B719991 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
00:10:15.0886 0x04a0  terminpt - ok
00:10:15.0917 0x04a0  [ 541EE228D0DEF392F7B2DFD885DD021B, 594D6538FA4DB5EF4D130007D7C29051EC2EDCA39EBB119695B58E9CBB0EB728 ] TermService     C:\Windows\System32\termsrv.dll
00:10:15.0995 0x04a0  TermService - ok
00:10:16.0042 0x04a0  [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] Themes          C:\Windows\system32\themeservice.dll
00:10:16.0073 0x04a0  Themes - ok
00:10:16.0104 0x04a0  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] THREADORDER     C:\Windows\system32\mmcss.dll
00:10:16.0120 0x04a0  THREADORDER - ok
00:10:16.0182 0x04a0  [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] TimeBroker      C:\Windows\System32\TimeBrokerServer.dll
00:10:16.0245 0x04a0  TimeBroker - ok
00:10:16.0276 0x04a0  [ E94F7A7B48C7638D1F3F8089344C97B7, 276CDE59614D563A52529BCC4BFC726E5F5BE131C9C4142558A644D79328C810 ] TPM             C:\Windows\system32\drivers\tpm.sys
00:10:16.0323 0x04a0  TPM - ok
00:10:16.0339 0x04a0  [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] TrkWks          C:\Windows\System32\trkwks.dll
00:10:16.0354 0x04a0  TrkWks - ok
00:10:16.0401 0x04a0  [ 8ABBB5CE0C62E0A6D28F32F44B7F865C, 4C78FE2A4A25A758D5191C4EDB2A6FE691FF82E7C16C0F146DC96DAD87D4F64E ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
00:10:16.0448 0x04a0  TrustedInstaller - ok
00:10:16.0479 0x04a0  [ 4E7C5FB10A50435523DE0CAA37DE2BD3, D6206DF61950F2541FB754E57C4D9EF9FA0CC1EDD6F6FA4E45F02B47958493F7 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
00:10:16.0511 0x04a0  TsUsbFlt - ok
00:10:16.0526 0x04a0  [ 16D684A820872EE54F6370703AC0B513, 795E20484358424CE9FA766937DD99413025A8AF967D03490392E8E02A382D0B ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys
00:10:16.0557 0x04a0  TsUsbGD - ok
00:10:16.0573 0x04a0  [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
00:10:16.0589 0x04a0  tunnel - ok
00:10:16.0604 0x04a0  [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A, AA7DA2207C0236F47859A4791F9D7301E7ADB50A59D831DC859ECC7CA70D3E1D ] uagp35          C:\Windows\system32\drivers\uagp35.sys
00:10:16.0620 0x04a0  uagp35 - ok
00:10:16.0651 0x04a0  [ 6FD6D03B7752C78712E5CFF29A305026, F09C5188AAFCF4C77B05BA1E604F9912782A9F1371F72F959288EBC2725407ED ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
00:10:16.0682 0x04a0  UASPStor - ok
00:10:16.0729 0x04a0  [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] UCX01000        C:\Windows\System32\drivers\ucx01000.sys
00:10:16.0761 0x04a0  UCX01000 - ok
00:10:16.0792 0x04a0  [ 25C50F4EDF70D0A831E0566BD181CCF2, F2F9E86FB5617C16077D2073EC0AA747F76F1EB5148BA110347A84F3C3569F83 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
00:10:16.0886 0x04a0  udfs - ok
00:10:16.0901 0x04a0  [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D, 16DE6E0894C356A58AF12BEC2FE9B188F147DD4B16CB2414DE600CE4127F929D ] UI0Detect       C:\Windows\system32\UI0Detect.exe
00:10:16.0979 0x04a0  UI0Detect - ok
00:10:17.0011 0x04a0  [ 07FEBCDF24FABA0D47B635D85A0FFB7A, 452C04B14681EBCE8B1B25B75A1B7CC978722B7DDE54D624E17841B14ACCF65D ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
00:10:17.0026 0x04a0  uliagpkx - ok
00:10:17.0042 0x04a0  [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] umbus           C:\Windows\System32\drivers\umbus.sys
00:10:17.0058 0x04a0  umbus - ok
00:10:17.0089 0x04a0  [ 991EE6B5FC41EAEF99C8AF5B92F2CA09, 30AAD7D18FF5962CEC7180359D148EED5A1BF193DDB2B34508897FC3EBA692C3 ] UmPass          C:\Windows\System32\drivers\umpass.sys
00:10:17.0104 0x04a0  UmPass - ok
00:10:17.0136 0x04a0  [ 43FEFB040A0CC30F795FBF544169594D, F2A730C0F7C883321C378D4564120A40428D7F8E393F02C8D6A08934795A35C7 ] UmRdpService    C:\Windows\System32\umrdp.dll
00:10:17.0183 0x04a0  UmRdpService - ok
00:10:17.0308 0x04a0  [ DBE2E6388379D5CC78099650541E9566, 1914BC929F109A49FB18ED31F239A9813A010B0A3914BC8CD0D6A94A67A072D7 ] UNS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
00:10:17.0401 0x04a0  UNS - ok
00:10:17.0433 0x04a0  [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] upnphost        C:\Windows\System32\upnphost.dll
00:10:17.0558 0x04a0  upnphost - ok
00:10:17.0589 0x04a0  [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys
00:10:17.0620 0x04a0  usbccgp - ok
00:10:17.0651 0x04a0  [ 427B6DB8C05A5A977E8C3525370A2595, C67222CA9123AE12D953995326B3B582C146CEA89594B7209DB0B1F628A0118D ] usbcir          C:\Windows\System32\drivers\usbcir.sys
00:10:17.0729 0x04a0  usbcir - ok
00:10:17.0776 0x04a0  [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] usbehci         C:\Windows\System32\drivers\usbehci.sys
00:10:17.0839 0x04a0  usbehci - ok
00:10:17.0901 0x04a0  [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] usbhub          C:\Windows\System32\drivers\usbhub.sys
00:10:18.0011 0x04a0  usbhub - ok
00:10:18.0042 0x04a0  [ E5F7328B1D29BCE791862CD3C0DD382A, E520D75CA6E4EDB06F576D97FB6B7CFD46A3EF3A3AC881537DE3BB8C862FE8C3 ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys
00:10:18.0136 0x04a0  USBHUB3 - ok
00:10:18.0151 0x04a0  [ 325F6179009B5A7F6118951A5BA422AB, 756CB2893530485E8C3ACFF5A40F4C6EB446E72B2296E8772058E407A5E066DE ] usbohci         C:\Windows\System32\drivers\usbohci.sys
00:10:18.0245 0x04a0  usbohci - ok
00:10:18.0276 0x04a0  [ 9FDBA6982582A6F2354144980F641E7B, 054A65412CB22C5BE970FD3A266E140110D869B614B9F9894628D553CE82C991 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
00:10:18.0323 0x04a0  usbprint - ok
00:10:18.0354 0x04a0  [ AD91D1BBE5D3CF4501887DC1C09384FD, ED9E27CD1D52401087427EC20E389FBE2497193483C2E53E8DE5D70DACF5D928 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
00:10:18.0386 0x04a0  usbscan - ok
00:10:18.0417 0x04a0  [ BFC7FE4AAEB61317A921871B4085EF4B, CBC3FBAEAD6C82A437CC87A97007EF807C64053AB8FA5C3233C2A0CF6FC8D019 ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS
00:10:18.0479 0x04a0  USBSTOR - ok
00:10:18.0495 0x04a0  [ 1ABF657259DB57F7E5558E4DF1357C0C, 34EAF5DEA3293CFA96BA81B036305FD90ABAE05B9CB73D4F54FB236448C1978C ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys
00:10:18.0526 0x04a0  usbuhci - ok
00:10:18.0573 0x04a0  [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
00:10:18.0604 0x04a0  usbvideo - ok
00:10:18.0667 0x04a0  [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS
00:10:18.0729 0x04a0  USBXHCI - ok
00:10:18.0745 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] VaultSvc        C:\Windows\system32\lsass.exe
00:10:18.0776 0x04a0  VaultSvc - ok
00:10:18.0792 0x04a0  [ BACECBFF9C97F7627A60B0E0F1FE7EE8, DC82F767D066B93A48A090DC7146EBCCDC54B43C6CD9DF29A160E09E3A531DC8 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
00:10:18.0808 0x04a0  vdrvroot - ok
00:10:18.0854 0x04a0  [ 1B4488988E5E7512E6C5CD1255E9E973, B82C26E767A8895CFFD76C11D07D5C945C38E1BD32CC27D20A6C0FA7F6064FC5 ] vds             C:\Windows\System32\vds.exe
00:10:18.0980 0x04a0  vds - ok
00:10:19.0011 0x04a0  [ 74FA2D4368DE6F6CE14393EDF1F342BE, C5CE4164B2C3D583A7FB8687ADEADCDB08D36A5AB1965E5FC6949AEED15881C8 ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys
00:10:19.0042 0x04a0  VerifierExt - ok
00:10:19.0073 0x04a0  [ 500BE6B2E49883720D0AE8BB859ED7A3, 4606B02A3E8123510676E554635EB5ECF9DC5F2B83928710C8563787C52CC102 ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys
00:10:19.0198 0x04a0  vhdmp - ok
00:10:19.0230 0x04a0  [ F5B4A14B00E89250C50982AC762DDD1D, 581CD97DD42E74A82F06BFB827DFC82618B4A8667ACA7E93C628BB0D056CE8F0 ] viaide          C:\Windows\system32\drivers\viaide.sys
00:10:19.0276 0x04a0  viaide - ok
00:10:19.0292 0x04a0  [ 78DB50F7329F6D1311658DABFFFC8BE0, 8CB0C831608033C4BC1D2DA7FAA7D429333A3654E76A989F7AF85BFC5F086BE9 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
00:10:19.0339 0x04a0  vmbus - ok
00:10:19.0355 0x04a0  [ ECFEE2F2BA3932C7880D1A8F67D68F91, 57DCD55A518A9FBDEF72B511C643B1062C3F7BD339F4B0FC19E9D84C615B968D ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
00:10:19.0401 0x04a0  VMBusHID - ok
00:10:19.0464 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicheartbeat   C:\Windows\System32\ICSvc.dll
00:10:19.0542 0x04a0  vmicheartbeat - ok
00:10:19.0558 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmickvpexchange C:\Windows\System32\ICSvc.dll
00:10:19.0573 0x04a0  vmickvpexchange - ok
00:10:19.0589 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicrdv         C:\Windows\System32\ICSvc.dll
00:10:19.0620 0x04a0  vmicrdv - ok
00:10:19.0620 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicshutdown    C:\Windows\System32\ICSvc.dll
00:10:19.0651 0x04a0  vmicshutdown - ok
00:10:19.0651 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmictimesync    C:\Windows\System32\ICSvc.dll
00:10:19.0683 0x04a0  vmictimesync - ok
00:10:19.0698 0x04a0  [ B8FF4248103E6EA47B9D85C55673ABA3, 4337FA0F0FB5C45BFC42FF17DFAA5DCA394C74BA8283851504AD79F47B69CB0D ] vmicvss         C:\Windows\System32\ICSvc.dll
00:10:19.0730 0x04a0  vmicvss - ok
00:10:19.0761 0x04a0  [ CB60FAAED8B49B812EBBF77EB87D9B18, ADA7C68D4C4981555ED48981E8B7ACBEEF5C39F902EB98782FC3DFF495FE0C33 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
00:10:19.0792 0x04a0  volmgr - ok
00:10:19.0792 0x04a0  [ A74101DA9809251BCD0E5A26BAE0F824, 15A3A7CC31A13C5882812C344D0937A8A4503D12DB07B9F7F2A8191B739CDBF7 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
00:10:19.0855 0x04a0  volmgrx - ok
00:10:19.0886 0x04a0  [ 78A5BBA3819FFFC62FFEC3E2220D102D, A95797B97D576374C2CDA8A09E6C51A89BADE428AAA89D5093579C85062E5874 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
00:10:19.0964 0x04a0  volsnap - ok
00:10:19.0995 0x04a0  [ A8DA1C1B52ECEA3726DEBED4FF1B700D, 75C024EC3858DF24FB82FE105BDD1E37900D53EFE9D72F42CDDFFD0742525586 ] vpci            C:\Windows\System32\drivers\vpci.sys
00:10:20.0042 0x04a0  vpci - ok
00:10:20.0058 0x04a0  [ 38A60CD9C009C55C6D3B5586F8E6A353, 7F7E2AE39F1A0A5245650911E310E0948BC22A18262A16FA76B44A042D66312D ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
00:10:20.0089 0x04a0  vsmraid - ok
00:10:20.0261 0x04a0  [ D0C69E44BC1E1D4AD290FD84104623D8, 4C86760EA4BD2A64FFD42D89284EC3E5048CB2F0F6F3B80D017B41C0D2456A90 ] VSS             C:\Windows\system32\vssvc.exe
00:10:20.0417 0x04a0  VSS - ok
00:10:20.0448 0x04a0  [ A0F6FE0FC2F647C22BBFD6BD4249DBCC, AC2F3C70EDCA0AFBB2606267DFE6D3E8E7B0772140153BAD6B0A9EDE6A1D2F29 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
00:10:20.0542 0x04a0  VSTXRAID - ok
00:10:20.0558 0x04a0  [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
00:10:20.0589 0x04a0  vwifibus - ok
00:10:20.0605 0x04a0  [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
00:10:20.0651 0x04a0  vwififlt - ok
00:10:20.0667 0x04a0  [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
00:10:20.0683 0x04a0  vwifimp - ok
00:10:20.0730 0x04a0  [ F690B6EEAA94576727B24376D7ED3601, A61EE96024C8FC4058481DFB1E7F0AD746565368672FA3B6BA8F9E23D0F47E4C ] W32Time         C:\Windows\system32\w32time.dll
00:10:20.0808 0x04a0  W32Time - ok
00:10:20.0839 0x04a0  [ 6B806E893714019969E2B50D7EF6A4D9, 38FE2B01082DC4C2A0C11A292016A727F48C3DF1293DC3A0216B2254A452263F ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
00:10:20.0901 0x04a0  WacomPen - ok
00:10:20.0933 0x04a0  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
00:10:20.0964 0x04a0  Wanarp - ok
00:10:20.0964 0x04a0  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
00:10:20.0995 0x04a0  Wanarpv6 - ok
00:10:21.0105 0x04a0  [ 901CC968412F8155B08D7ABE0171166A, D05A8E3D4D159546394E902C618D0583FE497B51C8F1C86D8E3B9E046819DD53 ] WAS             C:\Windows\system32\inetsrv\iisw3adm.dll
00:10:21.0198 0x04a0  WAS - ok
00:10:21.0292 0x04a0  [ 42DF22F8C448E7CD219F6D63743505E2, 063F4280C7BD20CE1360436B76A17DFE17FF611F75337A47373D098CC6C263BF ] wbengine        C:\Windows\system32\wbengine.exe
00:10:21.0448 0x04a0  wbengine - ok
00:10:21.0480 0x04a0  [ 31D37B2F6069C631EF0557D322924812, 6E18A1060F3C8F4BF220E286C44327866A8F9109E74928AA2D8C2DA9C452038B ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
00:10:21.0542 0x04a0  WbioSrvc - ok
00:10:21.0573 0x04a0  [ AF1349386D4C6786EF4E34FACEF15042, 6B33778409BC54C1955B92508ADDEBAFD629141961B71C94A91DC4CFE8391A13 ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
00:10:21.0636 0x04a0  Wcmsvc - ok
00:10:21.0667 0x04a0  [ 5B5FEAB51172F5513C2CF7B39CFA6A01, 4FDAC5168E00D44781C6F5D98ECD4977A12663C5CE6FFDFF9DBC89A28D6212D8 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
00:10:21.0745 0x04a0  wcncsvc - ok
00:10:21.0761 0x04a0  [ E19556D414332E2BEBA1F368229006B4, AB3454EC85D7B6E62D44C4510C1547AE7F736558588E54B0E265F7B3A5810E15 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
00:10:21.0792 0x04a0  WcsPlugInService - ok
00:10:21.0823 0x04a0  [ B3A4D918DAB90505B6BC7B70632913CB, ECC19DCD7902C29D0682C70B9546CF8B82477A32147EE30EB6750D8499605B46 ] Wd              C:\Windows\system32\drivers\wd.sys
00:10:21.0839 0x04a0  Wd - ok
00:10:21.0870 0x04a0  [ 07D19A55CD27B330534D2DDEA60D5FC6, 9C9441EA6943481838F61FD929F88FE25DC60BB8513A2C01CB4712918A883E3F ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
00:10:21.0886 0x04a0  WdBoot - ok
00:10:21.0948 0x04a0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
00:10:22.0073 0x04a0  Wdf01000 - ok
00:10:22.0120 0x04a0  [ CEBD9CDAADA11FAECCA82E4C06BCDD8E, 6D6E4BF0EB97004F9C07327923C9BD2B451FDDA567FAF39556595302EE5A1A54 ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
00:10:22.0167 0x04a0  WdFilter - ok
00:10:22.0198 0x04a0  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiServiceHost  C:\Windows\system32\wdi.dll
00:10:22.0245 0x04a0  WdiServiceHost - ok
00:10:22.0245 0x04a0  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] WdiSystemHost   C:\Windows\system32\wdi.dll
00:10:22.0277 0x04a0  WdiSystemHost - ok
00:10:22.0323 0x04a0  [ 9B1384CE8E681D2D77BB3524B8E86311, BDEF9D0A79A7C26A88088A306F91632F300E587736CDD2C64717EC54DD6E89FF ] WebClient       C:\Windows\System32\webclnt.dll
00:10:22.0370 0x04a0  WebClient - ok
00:10:22.0402 0x04a0  [ 35FD720943D4FCD75C3275BF062FF140, 9D8345E6DE1AE23F93AD0B52D27D1CCFD69EF7EE50654F92CA999BEC4570A773 ] Wecsvc          C:\Windows\system32\wecsvc.dll
00:10:22.0448 0x04a0  Wecsvc - ok
00:10:22.0480 0x04a0  [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
00:10:22.0542 0x04a0  wercplsupport - ok
00:10:22.0589 0x04a0  [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] WerSvc          C:\Windows\System32\WerSvc.dll
00:10:22.0636 0x04a0  WerSvc - ok
00:10:22.0683 0x04a0  [ 44BB9C31E6242C4BD1CE7C2B440C2533, E603BB001028918B687818E930340008C752679B133037367A8A8E41DA559FFE ] WFPLWFS         C:\Windows\system32\DRIVERS\wfplwfs.sys
00:10:22.0730 0x04a0  WFPLWFS - ok
00:10:22.0745 0x04a0  [ 60E0C220593DA4F7C289CB909D2DBAE0, 057CA7727F748600CC155043081AB9E3244763CF4913F317D13226A515F6FDB6 ] WiaRpc          C:\Windows\System32\wiarpc.dll
00:10:22.0777 0x04a0  WiaRpc - ok
00:10:22.0792 0x04a0  [ A3C7624A42A3447EF5EDD1ED37FE4E60, BD8BDF0A571873FA8277878AF7AED11196CFF1B4DF1EA6BA13BD4887D7B63B94 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
00:10:22.0823 0x04a0  WIMMount - ok
00:10:22.0839 0x04a0  WinDefend - ok
00:10:22.0964 0x04a0  [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
00:10:23.0120 0x04a0  WinHttpAutoProxySvc - ok
00:10:23.0167 0x04a0  [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
00:10:23.0245 0x04a0  Winmgmt - ok
00:10:23.0480 0x04a0  [ 8E212A627F33F6FC3B5F3BB47212F66E, 9BBFE26ABFA14F346FE3711D13D959523EEA23608A33C16F3D750D66CA511911 ] WinRM           C:\Windows\system32\WsmSvc.dll
00:10:23.0761 0x04a0  WinRM - ok
00:10:23.0777 0x04a0  [ BB20956C424531003F7FA6CD36F11D5D, 2C55F1C7553A527A7C4C34E730BE943269AE23928731C64D3DC945E07AE1771E ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
00:10:23.0823 0x04a0  WinUsb - ok
00:10:23.0870 0x04a0  [ 4F2A80D65AE6F845776E2F06AE6782ED, 2455537C048115435D9EDE4B18F9F54C43912076AEF36BDEFEC35AF2140B8B2E ] WirelessButtonDriver C:\Windows\System32\drivers\WirelessButtonDriver64.sys
00:10:23.0902 0x04a0  WirelessButtonDriver - ok
00:10:23.0995 0x04a0  [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] WlanSvc         C:\Windows\System32\wlansvc.dll
00:10:24.0074 0x04a0  WlanSvc - ok
00:10:24.0152 0x04a0  [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] wlidsvc         C:\Windows\system32\wlidsvc.dll
00:10:24.0339 0x04a0  wlidsvc - ok
00:10:24.0370 0x04a0  [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys
00:10:24.0402 0x04a0  WmiAcpi - ok
00:10:24.0449 0x04a0  [ D113499052C5E541906B727779F0F959, 05FB51086C0A0CE3812A7E6098C5A454ECCFE8553669CFA715153564F2226DB0 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
00:10:24.0495 0x04a0  wmiApSrv - ok

Link to post
Share on other sites

10:24.0527 0x04a0  WMPNetworkSvc - ok
00:10:24.0542 0x04a0  [ C6FF953D5D6F2EAE3B8883474D5076B3, 001CBB7FBC30209C892869258E5ABD3F0932886E156ECB10DCA599F6D32648BE ] wpcfltr         C:\Windows\system32\DRIVERS\wpcfltr.sys
00:10:24.0574 0x04a0  wpcfltr - ok
00:10:24.0605 0x04a0  [ A6ED163169876BFD2437E872FE2F1509, C13E8676800EEEF690F51C4DEA660B36C8734AE2CCAAC48054E10D74B98949B8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
00:10:24.0652 0x04a0  WPCSvc - ok
00:10:24.0683 0x04a0  [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
00:10:24.0714 0x04a0  WPDBusEnum - ok
00:10:24.0730 0x04a0  [ 0346CAFC181C91C6E2330332EB332ED6, D46F44C339399CAAE13CD71C53A169E95065208E07E5420DE00A4509D6CB056F ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys
00:10:24.0777 0x04a0  WpdUpFltr - ok
00:10:24.0808 0x04a0  [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
00:10:24.0902 0x04a0  ws2ifsl - ok
00:10:24.0933 0x04a0  [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] wscsvc          C:\Windows\system32\wscsvc.dll
00:10:24.0980 0x04a0  wscsvc - ok
00:10:25.0011 0x04a0  [ 74EFDA0526862C3D8D01A776182798EA, 7C9AD6118CB344C63B60A8BA5FA8C85ADED30933821ABD1427857E826EFC2952 ] WSDPrintDevice  C:\Windows\System32\drivers\WSDPrint.sys
00:10:25.0074 0x04a0  WSDPrintDevice - ok
00:10:25.0089 0x04a0  [ FA07DF46070F0826139709EF4D31FB71, 8F46A55D5C4336536E7974C9CEAFED55E7E9E9BF133D2AD0F6A55174F70B2F03 ] WSDScan         C:\Windows\System32\drivers\WSDScan.sys
00:10:25.0136 0x04a0  WSDScan - ok
00:10:25.0152 0x04a0  WSearch - ok
00:10:25.0292 0x04a0  [ D4D04839F3DFAF09D94BAB1016F7A297, 944A41D251F522EE87189C1D01CF7EEE2C70BF4353BA4005C44F03DB485F843F ] WSService       C:\Windows\System32\WSService.dll
00:10:25.0449 0x04a0  WSService - ok
00:10:25.0839 0x04a0  [ 311E5E1976E0BD9110A88B93158055D5, F1AA738D6AD74C33785EEFE1FBE8A869AAB62417B7D079389293AB1209A849C1 ] wuauserv        C:\Windows\system32\wuaueng.dll
00:10:26.0214 0x04a0  wuauserv - ok
00:10:26.0246 0x04a0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
00:10:26.0277 0x04a0  WudfPf - ok
00:10:26.0308 0x04a0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
00:10:26.0355 0x04a0  WUDFRd - ok
00:10:26.0355 0x04a0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFSensorLP    C:\Windows\system32\DRIVERS\WUDFRd.sys
00:10:26.0386 0x04a0  WUDFSensorLP - ok
00:10:26.0417 0x04a0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
00:10:26.0464 0x04a0  wudfsvc - ok
00:10:26.0496 0x04a0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys
00:10:26.0527 0x04a0  WUDFWpdFs - ok
00:10:26.0542 0x04a0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
00:10:26.0589 0x04a0  WUDFWpdMtp - ok
00:10:26.0652 0x04a0  [ 6D9E07436B6646EC8F7EFFD39B6BA288, 82C1CEA93ECEF17D221AD0F87C5BD96F3FD8143841C16BD9608BD4D58D90B8E0 ] WwanSvc         C:\Windows\System32\wwansvc.dll
00:10:26.0730 0x04a0  WwanSvc - ok
00:10:26.0746 0x04a0  ================ Scan global ===============================
00:10:26.0792 0x04a0  [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\Windows\system32\basesrv.dll
00:10:26.0839 0x04a0  [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\Windows\system32\winsrv.dll
00:10:26.0886 0x04a0  [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\Windows\system32\sxssrv.dll
00:10:26.0980 0x04a0  [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\Windows\system32\services.exe
00:10:26.0996 0x04a0  [ Global ] - ok
00:10:26.0996 0x04a0  ================ Scan MBR ==================================
00:10:26.0996 0x04a0  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
00:10:28.0277 0x04a0  \Device\Harddisk0\DR0 - ok
00:10:28.0277 0x04a0  ================ Scan VBR ==================================
00:10:28.0292 0x04a0  [ E107C461E61970F7F80FE2FAB9D2776F ] \Device\Harddisk0\DR0\Partition1
00:10:28.0386 0x04a0  \Device\Harddisk0\DR0\Partition1 - ok
00:10:28.0417 0x04a0  [ F41DBC41C27B567FF305116D233588FC ] \Device\Harddisk0\DR0\Partition2
00:10:28.0480 0x04a0  \Device\Harddisk0\DR0\Partition2 - ok
00:10:28.0511 0x04a0  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
00:10:28.0511 0x04a0  \Device\Harddisk0\DR0\Partition3 - ok
00:10:28.0543 0x04a0  [ 64355BED7BAC0428493FF34BFD82477E ] \Device\Harddisk0\DR0\Partition4
00:10:28.0668 0x04a0  \Device\Harddisk0\DR0\Partition4 - ok
00:10:28.0714 0x04a0  [ 083DF7149AB6B929054E39D0EF5862AB ] \Device\Harddisk0\DR0\Partition5
00:10:28.0808 0x04a0  \Device\Harddisk0\DR0\Partition5 - ok
00:10:28.0808 0x04a0  ================ Scan active images ========================
00:10:28.0824 0x04a0  [ 07C872F13ACC81A5F10DEC6CF37BF9A8, F017F30879F4231C13A5E3DBE8072BA7D0C84F6596667E5335C155A1C5B628DD ] C:\Windows\System32\Drivers\crashdmp.sys
00:10:28.0824 0x04a0  C:\Windows\System32\Drivers\crashdmp.sys - ok
00:10:28.0824 0x04a0  [ AAF40EB125BED7271F05289873EC4EDB, 4FD912F0BEFD5A16270686BF56BDD8F12A9CAB5E3636E2A3860815B1CA6DD8B3 ] C:\Windows\System32\Drivers\Diskdump.sys
00:10:28.0824 0x04a0  C:\Windows\System32\Drivers\Diskdump.sys - ok
00:10:28.0824 0x04a0  [ 050F2539E14F9D5E90A4B61738EC29BD, 0E65468B9F452FA7DB6DF2C1B2B2E9439C79031E27054FBDBDFE28A9F98721D7 ] C:\Windows\System32\Drivers\iaStorA.sys
00:10:28.0824 0x04a0  C:\Windows\System32\Drivers\iaStorA.sys - ok
00:10:28.0839 0x04a0  [ CB9EAD11F3312C77CE9B7F29B59C3A39, E71B768CD85068A5D22697BC1670EBE70885740AC347F52E604CFA8C481995D0 ] C:\Windows\System32\Drivers\dumpfve.sys
00:10:28.0839 0x04a0  C:\Windows\System32\Drivers\dumpfve.sys - ok
00:10:28.0839 0x04a0  [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] C:\Windows\System32\Drivers\cdrom.sys
00:10:28.0839 0x04a0  C:\Windows\System32\Drivers\cdrom.sys - ok
00:10:28.0839 0x04a0  [ E36D2CEC679CEDC1A298C36BCDAF8E23, B6F01940963C89B70732D89E59F3020D2EE60246CC0CB1B73CC4C13288B634C3 ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
00:10:28.0839 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys - ok
00:10:28.0855 0x04a0  [ 000D82CC258E2D341605A6F350C4D1E6, 59EC5BA95D8B9EC739BC7D0BBE0E244CA2AE2DF01A8B65BFF7741DFBE38C2940 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys
00:10:28.0855 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys - ok
00:10:28.0855 0x04a0  [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] C:\Windows\System32\Drivers\BasicRender.sys
00:10:28.0855 0x04a0  C:\Windows\System32\Drivers\BasicRender.sys - ok
00:10:28.0855 0x04a0  [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] C:\Windows\System32\Drivers\beep.sys
00:10:28.0855 0x04a0  C:\Windows\System32\Drivers\beep.sys - ok
00:10:28.0855 0x04a0  [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] C:\Windows\System32\Drivers\null.sys
00:10:28.0855 0x04a0  C:\Windows\System32\Drivers\null.sys - ok
00:10:28.0855 0x04a0  [ E6AF4DF1817953D73C519B17CF849756, 26A90EB368A3F572086F223ABED87B8FC6F998AE401C9E52BEB5EE76AB052702 ] C:\Windows\System32\Drivers\dxgkrnl.sys
00:10:28.0855 0x04a0  C:\Windows\System32\Drivers\dxgkrnl.sys - ok
00:10:28.0871 0x04a0  [ B9FF5E13079ADB858ED5C0B1E4CAB225, 56D58A7622618B53E8384AD4A2D62370E0E4368E35BFAD344B2C37FF9ACAE9EE ] C:\Windows\System32\Drivers\watchdog.sys
00:10:28.0871 0x04a0  C:\Windows\System32\Drivers\watchdog.sys - ok
00:10:28.0871 0x04a0  [ 28619B6E5A37F71AE1145643949CFA60, 3F987B3932733067D8752C3E204718CC17199EDCE2D0AB792B5AEF23F8A44131 ] C:\Windows\System32\Drivers\dxgmms1.sys
00:10:28.0871 0x04a0  C:\Windows\System32\Drivers\dxgmms1.sys - ok
00:10:28.0871 0x04a0  [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] C:\Windows\System32\Drivers\BasicDisplay.sys
00:10:28.0871 0x04a0  C:\Windows\System32\Drivers\BasicDisplay.sys - ok
00:10:28.0871 0x04a0  [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] C:\Windows\System32\Drivers\msfs.sys
00:10:28.0871 0x04a0  C:\Windows\System32\Drivers\msfs.sys - ok
00:10:28.0871 0x04a0  [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] C:\Windows\System32\Drivers\npfs.sys
00:10:28.0871 0x04a0  C:\Windows\System32\Drivers\npfs.sys - ok
00:10:28.0886 0x04a0  [ 749AFA28C01233E93F59BD31B2B088B1, 38D4E4DAFE79F28F67CAED64243689CCD9C9D79E4E9B8D76F6F0C8D36EFA13C7 ] C:\Windows\System32\Drivers\tdi.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\tdi.sys - ok
00:10:28.0886 0x04a0  [ 73DC722CE5DF26D7638CE2446F2655C7, 9B8E6F6DEA5E0C2AEAC24A31897D2E73F86EF44F1C25FEF82D2C860353793817 ] C:\Windows\System32\Drivers\tdx.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\tdx.sys - ok
00:10:28.0886 0x04a0  [ BC8B5CB336E63BB25EAD1CE8EDD34B81, A42759956EDCCC6D0688240AA4F833FB9CA132D42D2D901CDCBB24DCE1788C1D ] C:\Windows\System32\Drivers\ws2ifsl.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\ws2ifsl.sys - ok
00:10:28.0886 0x04a0  [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] C:\Windows\System32\Drivers\netbt.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\netbt.sys - ok
00:10:28.0886 0x04a0  [ 7C0E0EDF18D6CC565D7BFBB451709FA5, 47C21CD9D87B5C1B5EB14F6166B5E3349B1A6F10501E63CCED8D52A9FE22765D ] C:\Windows\System32\Drivers\afd.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\afd.sys - ok
00:10:28.0886 0x04a0  [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] C:\Windows\System32\Drivers\pacer.sys
00:10:28.0886 0x04a0  C:\Windows\System32\Drivers\pacer.sys - ok
00:10:28.0902 0x04a0  [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] C:\Windows\System32\Drivers\netbios.sys
00:10:28.0902 0x04a0  C:\Windows\System32\Drivers\netbios.sys - ok
00:10:28.0902 0x04a0  [ 095E943D27025E4D588AF0A72CC2318F, 3CE406A202F93EF8C4BC7317621A672670D734C69166393CA7256D5E5E667041 ] C:\Windows\System32\Drivers\vwififlt.sys
00:10:28.0902 0x04a0  C:\Windows\System32\Drivers\vwififlt.sys - ok
00:10:28.0902 0x04a0  [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] C:\Windows\System32\Drivers\rdbss.sys
00:10:28.0902 0x04a0  C:\Windows\System32\Drivers\rdbss.sys - ok
00:10:28.0902 0x04a0  [ 61F6972FF9AC9A8D0B4D62076DC30051, 5A028036461534CA53CB2D6C1D720783D408A9F17FD77AB1ECDD75FBAD9F2381 ] C:\Windows\System32\Drivers\wanarp.sys
00:10:28.0902 0x04a0  C:\Windows\System32\Drivers\wanarp.sys - ok
00:10:28.0902 0x04a0  [ EBA3D20E285D7461C2177AD2E64DA7EF, C24D0CBB030F632325C77CAD2982BB9E1B2A259FEA6EAF261F988547CFBBA2EC ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
00:10:28.0902 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys - ok
00:10:28.0902 0x04a0  [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] C:\Windows\System32\Drivers\mssmbios.sys
00:10:28.0902 0x04a0  C:\Windows\System32\Drivers\mssmbios.sys - ok
00:10:28.0918 0x04a0  [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] C:\Windows\System32\Drivers\npsvctrig.sys
00:10:28.0918 0x04a0  C:\Windows\System32\Drivers\npsvctrig.sys - ok
00:10:28.0918 0x04a0  [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] C:\Windows\System32\Drivers\nsiproxy.sys
00:10:28.0918 0x04a0  C:\Windows\System32\Drivers\nsiproxy.sys - ok
00:10:28.0918 0x04a0  [ 339E52896B03045FC2A738F9997FA38D, A5EDCF14BBA63DC1F855E799E671AD210734A462D41154B44551D525272DB502 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys
00:10:28.0918 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys - ok
00:10:28.0918 0x04a0  [ A71D66253EC610626AE80C7DBC0EC15E, 892C2661818B8D2ECFC6CBFD977B0DDD05D55EB9A2C73E07B745AEB448B9EC12 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys
00:10:28.0918 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys - ok
00:10:28.0918 0x04a0  [ 09D9EB9E7898F8E6561473A20CC808B9, 0F511593D36084843E5138AF6D55FE08D77803968AE12A236A02368DB364347E ] C:\Windows\System32\Drivers\dfsc.sys
00:10:28.0918 0x04a0  C:\Windows\System32\Drivers\dfsc.sys - ok
00:10:28.0933 0x04a0  [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] C:\Windows\System32\Drivers\discache.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\discache.sys - ok
00:10:28.0933 0x04a0  [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] C:\Windows\System32\Drivers\dam.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\dam.sys - ok
00:10:28.0933 0x04a0  [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] C:\Windows\System32\Drivers\ndistapi.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\ndistapi.sys - ok
00:10:28.0933 0x04a0  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] C:\Windows\System32\Drivers\ndiswan.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\ndiswan.sys - ok
00:10:28.0933 0x04a0  [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] C:\Windows\System32\Drivers\agilevpn.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\agilevpn.sys - ok
00:10:28.0933 0x04a0  [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] C:\Windows\System32\Drivers\CompositeBus.sys
00:10:28.0933 0x04a0  C:\Windows\System32\Drivers\CompositeBus.sys - ok
00:10:28.0949 0x04a0  [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] C:\Windows\System32\Drivers\rassstp.sys
00:10:28.0949 0x04a0  C:\Windows\System32\Drivers\rassstp.sys - ok
00:10:28.0949 0x04a0  [ 78C9EE193AC2B4CBDBC48B620314D740, 41523E47D321BFF5778F5E453545B928C0A469C3BBA51578E74D6721D7DF9273 ] C:\Windows\System32\Drivers\tunnel.sys
00:10:28.0949 0x04a0  C:\Windows\System32\Drivers\tunnel.sys - ok
00:10:28.0949 0x04a0  [ 08F850FEBDBDE7C89017B6B0CA0D1CD2, 04B671CF2F269A12B996633E83B397F2924EBBAC425919D74E2BBC3013A238B5 ] C:\Windows\System32\smss.exe
00:10:28.0949 0x04a0  C:\Windows\System32\smss.exe - ok
00:10:28.0949 0x04a0  [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] C:\Windows\System32\Drivers\kdnic.sys
00:10:28.0949 0x04a0  C:\Windows\System32\Drivers\kdnic.sys - ok
00:10:28.0949 0x04a0  [ 02CEB3FE6152668A7BA420B93B664860, 613F27540FD1EFE2442E326F507DACD5A25691C8481937022B7E1104F3E6E9E2 ] C:\Windows\System32\Drivers\umbus.sys
00:10:28.0949 0x04a0  C:\Windows\System32\Drivers\umbus.sys - ok
00:10:28.0949 0x04a0  [ A05BA2FE3B3FFE1920F383E3E321D9A2, 4AF9852622346852FC078501D49C84702D3285A059FA16F61A548A2978851ED3 ] C:\Windows\System32\ntdll.dll
00:10:28.0949 0x04a0  C:\Windows\System32\ntdll.dll - ok
00:10:28.0964 0x04a0  [ E47235E8DF26CA48DA189ACFD756329C, C1E8D7B2C9C434376359172B10D5162A54E937DA359FB41E76F84C68DEDE9473 ] C:\Windows\System32\autochk.exe
00:10:28.0964 0x04a0  C:\Windows\System32\autochk.exe - ok
00:10:28.0964 0x04a0  [ 04F5D7396FE6414150FEEDB60FDAC670, 502871E61CE2B5A84FF9A58E33348C9CDDF5CD68E27582C3F8332C6619E2AE03 ] C:\Windows\System32\Drivers\battc.sys
00:10:28.0964 0x04a0  C:\Windows\System32\Drivers\battc.sys - ok
00:10:28.0964 0x04a0  [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] C:\Windows\System32\Drivers\CmBatt.sys
00:10:28.0964 0x04a0  C:\Windows\System32\Drivers\CmBatt.sys - ok
00:10:28.0964 0x04a0  [ 11A31FC2481BFE69B0507ED8C80215F4, 8A1E90611F749E8F04B6D86E835E981CAC16D0841305CADB19E58682DA006698 ] C:\Windows\System32\Drivers\igdkmd64.sys
00:10:28.0964 0x04a0  C:\Windows\System32\Drivers\igdkmd64.sys - ok
00:10:28.0964 0x04a0  [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] C:\Windows\System32\Drivers\fastfat.sys
00:10:28.0964 0x04a0  C:\Windows\System32\Drivers\fastfat.sys - ok
00:10:28.0964 0x04a0  [ 061BA3EE0D2BE17944990544008CF190, C9236D368EC2281B545E8C008BC2801F21A9716ED3D4DAEDB0751A5008346E81 ] C:\Windows\System32\Drivers\UCX01000.SYS
00:10:28.0964 0x04a0  C:\Windows\System32\Drivers\UCX01000.SYS - ok
00:10:28.0980 0x04a0  [ 8DC398D7B8E02C929A2096E74A170970, 87B3CE84D05F50C33935B28F0AFF1CB15DAA4530768BA1FB25C311609CD4B0A5 ] C:\Windows\System32\Drivers\USBXHCI.SYS
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\USBXHCI.SYS - ok
00:10:28.0980 0x04a0  [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] C:\Windows\System32\Drivers\HECIx64.sys
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\HECIx64.sys - ok
00:10:28.0980 0x04a0  [ B24FDEB1B18496F1B463782235AA3AF1, 3F5036F36987C8007D03DAFC3EC30615515BE96D9A1DF879BCD4EB0E66CD50B1 ] C:\Windows\System32\Drivers\usbehci.sys
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\usbehci.sys - ok
00:10:28.0980 0x04a0  [ 7CB7E04259F323D051A10515B8863564, 30A506AAAE4999C2C171C3FB3DCE46EF9CAB4B94A59B3EB70AB650EE7A1028D2 ] C:\Windows\System32\Drivers\usbport.sys
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\usbport.sys - ok
00:10:28.0980 0x04a0  [ 7D87B5B6C7188D553E11B59DC7F0B111, FC633DB71E1D72E8AD8F89BBB54324CC6ED17F5594EF55DD0BDB58EE1F601FF5 ] C:\Windows\System32\Drivers\hdaudbus.sys
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\hdaudbus.sys - ok
00:10:28.0980 0x04a0  [ 080417AC9E51B2B29656EC26B62E87F1, F85B0F301396913427CA410AEA302119BBDC625AFDB560D9B7A08E9E622AEB8E ] C:\Windows\System32\Drivers\netr28x.sys
00:10:28.0980 0x04a0  C:\Windows\System32\Drivers\netr28x.sys - ok
00:10:28.0996 0x04a0  [ 62460A45435A26A334907E3F2EA45611, FEF86E05117CC0AAB8211CA1542776EB620BD4699BD590D91F16621ED35B9824 ] C:\Windows\System32\Drivers\vwifibus.sys
00:10:28.0996 0x04a0  C:\Windows\System32\Drivers\vwifibus.sys - ok
00:10:28.0996 0x04a0  [ 34DA0D14F5C3F1883A331AFB975AB434, BB5D580C1DCAE59CC1DB75C411A5A4DDF435931469E7EBFF5DFDADBFE07ADEBF ] C:\Windows\System32\Drivers\Rt630x64.sys
00:10:28.0996 0x04a0  C:\Windows\System32\Drivers\Rt630x64.sys - ok
00:10:28.0996 0x04a0  [ D38250F459BF60D6F4B69B79DCD948CC, E68C864C1A4C9352EA939062F28789ADE9F0672E8CB3F3909D2891786C76F06F ] C:\Windows\System32\Drivers\RtsP2Stor.sys
00:10:28.0996 0x04a0  C:\Windows\System32\Drivers\RtsP2Stor.sys - ok
00:10:28.0996 0x04a0  [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] C:\Windows\System32\Drivers\i8042prt.sys
00:10:28.0996 0x04a0  C:\Windows\System32\Drivers\i8042prt.sys - ok
00:10:28.0996 0x04a0  [ 3F45C3FE208CA5E68832B65C597A35A6, EACE9AAFC01C2BA52F4DA129AEF7BFA3CF7F10146E4F4330CD344BFC39DC959C ] C:\Windows\System32\Drivers\SynTP.sys
00:10:28.0996 0x04a0  C:\Windows\System32\Drivers\SynTP.sys - ok
00:10:29.0011 0x04a0  [ 9F83642C3709D1A4DD49EEE9F48F839D, 65C795FFB5F399D575FDD44D90087429FA99CC04AD469D8805C3C11DD59C1887 ] C:\Windows\System32\Drivers\usbd.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\usbd.sys - ok
00:10:29.0011 0x04a0  [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] C:\Windows\System32\Drivers\kbdclass.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\kbdclass.sys - ok
00:10:29.0011 0x04a0  [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] C:\Windows\System32\Drivers\mouclass.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\mouclass.sys - ok
00:10:29.0011 0x04a0  [ 19555D03CB179BED8B8AAA239A36BDA4, 7B975821D52ABE077496B3CFC010B33D478CD2C36E6A74D8F72D2BF582B8C84A ] C:\Windows\System32\Drivers\Smb_driver_Intel.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\Smb_driver_Intel.sys - ok
00:10:29.0011 0x04a0  [ 899B7E724BF19F17978B6A37B864A277, F7D166DC5F7642D4B834B1E0D956929BA94F3E4D402989FC1A681A08FA1F86B6 ] C:\Windows\System32\Drivers\Accelerometer.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\Accelerometer.sys - ok
00:10:29.0011 0x04a0  [ 961A45CC15514178E511BBF1384CE0B8, 3DD66CB079B797736CE0B55579EC4E6B770E4DBC4C117AB9D45C3902FD1D444D ] C:\Windows\System32\Drivers\hidclass.sys
00:10:29.0011 0x04a0  C:\Windows\System32\Drivers\hidclass.sys - ok
00:10:29.0027 0x04a0  [ 346DEF1A9DB0B4133CE0FA38AAF565C0, 5C7190EF5F8C14AD165CB2FEC1261BEF861427F2F4758A48516AD3CFAE3A1DDC ] C:\Windows\System32\Drivers\hidparse.sys
00:10:29.0027 0x04a0  C:\Windows\System32\Drivers\hidparse.sys - ok
00:10:29.0027 0x04a0  [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] C:\Windows\System32\Drivers\intelppm.sys
00:10:29.0027 0x04a0  C:\Windows\System32\Drivers\intelppm.sys - ok
00:10:29.0027 0x04a0  [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] C:\Windows\System32\Drivers\raspptp.sys
00:10:29.0027 0x04a0  C:\Windows\System32\Drivers\raspptp.sys - ok
00:10:29.0027 0x04a0  [ 4F2A80D65AE6F845776E2F06AE6782ED, 2455537C048115435D9EDE4B18F9F54C43912076AEF36BDEFEC35AF2140B8B2E ] C:\Windows\System32\Drivers\WirelessButtonDriver64.sys
00:10:29.0027 0x04a0  C:\Windows\System32\Drivers\WirelessButtonDriver64.sys - ok
00:10:29.0027 0x04a0  [ E2A596CACFC6504306CDB7B593B90084, DF89CF57249553CE922C841F18B99A213185FA1099C053B9BB8C0F6E5BC3FEC0 ] C:\Windows\System32\Drivers\wmiacpi.sys
00:10:29.0027 0x04a0  C:\Windows\System32\Drivers\wmiacpi.sys - ok
00:10:29.0043 0x04a0  [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] C:\Windows\System32\Drivers\rasl2tp.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\rasl2tp.sys - ok
00:10:29.0043 0x04a0  [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] C:\Windows\System32\Drivers\raspppoe.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\raspppoe.sys - ok
00:10:29.0043 0x04a0  [ 36C27EA76685391BC5CAA1FA25E29FBF, 413FFEA5D9E1CBA24E5B0DA62B59FA39AE31787762057AFF8AFD2B59C8EBFB08 ] C:\Windows\System32\Drivers\ks.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\ks.sys - ok
00:10:29.0043 0x04a0  [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] C:\Windows\System32\Drivers\ndproxy.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\ndproxy.sys - ok
00:10:29.0043 0x04a0  [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] C:\Windows\System32\Drivers\rdpbus.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\rdpbus.sys - ok
00:10:29.0043 0x04a0  [ 4AFD66AAE74FFB5986BC240744DC5FC9, 0C9347614E3FD3B4D3B29FA4A5DA23FF6EE4CD9A1FFC378B855B8DE61B2876CF ] C:\Windows\System32\Drivers\swenum.sys
00:10:29.0043 0x04a0  C:\Windows\System32\Drivers\swenum.sys - ok
00:10:29.0058 0x04a0  [ F8C2A832DF9403F5EA8080CBDBDA95FB, 50E9455465672BC13EB945BEC132D2F30BA2EB25C68928D2B4C256F2DB292A83 ] C:\Windows\System32\Drivers\usbhub.sys
00:10:29.0058 0x04a0  C:\Windows\System32\Drivers\usbhub.sys - ok
00:10:29.0058 0x04a0  [ 2E3EDE81672653E0C759F0A1135F704F, DD670B8F3997D5C9B36968CD1E1EDCD5292E3EA553C2EAFCA8A0D5F88964D7A6 ] C:\Windows\System32\clbcatq.dll
00:10:29.0058 0x04a0  C:\Windows\System32\clbcatq.dll - ok
00:10:29.0058 0x04a0  [ 7653DB77F0DB2A50392F015321E42E37, C53F7A8C36CDEFF0322A74EEE203490E7F821BEDAC68A9A416B2EAC9A3EA314B ] C:\Windows\System32\setupapi.dll
00:10:29.0058 0x04a0  C:\Windows\System32\setupapi.dll - ok
00:10:29.0058 0x04a0  [ F85D33830D2655FB2916667579D45725, 71E81E2EFC09A845BA1F5A2EC0B50EF71601ADD8EBA8C6FB9554D0D6A44DADF9 ] C:\Windows\System32\msctf.dll
00:10:29.0058 0x04a0  C:\Windows\System32\msctf.dll - ok
00:10:29.0058 0x04a0  [ 7D3FD710460FC0155C0F6A877AE46A48, 7A8A86DC18F0163AF9C04E09B6B9A2CFB5298A4E77A18B2184EFA858E4F93F88 ] C:\Windows\System32\urlmon.dll
00:10:29.0058 0x04a0  C:\Windows\System32\urlmon.dll - ok
00:10:29.0058 0x04a0  [ CC81790E0A18535853C33BABBFF15D56, 03D086F691038A1291EF4F517C36B231AC6002A08ABD3C8258E430C6F1F289E8 ] C:\Windows\System32\lpk.dll
00:10:29.0058 0x04a0  C:\Windows\System32\lpk.dll - ok
00:10:29.0074 0x04a0  [ 2299D30B0C3F41687127DDAC5B3CAC32, FCE9322707F415144D4DF5417142CE475AB0360C16B8B2930AC12BE4781275B0 ] C:\Windows\System32\gdi32.dll
00:10:29.0074 0x04a0  C:\Windows\System32\gdi32.dll - ok
00:10:29.0074 0x04a0  [ 2AE813F005223E5B39E0C4D7B8314732, 3F24D78F2F0B61B9ED24A06D6792CF7732E3A17B94A8F71ACB29D04A8918113F ] C:\Windows\System32\wow64win.dll
00:10:29.0074 0x04a0  C:\Windows\System32\wow64win.dll - ok
00:10:29.0074 0x04a0  [ 8D06EB11925D312D276C672CF5E8EE9C, 44032C8E573A326CAE5A2037035DFC41E5BAC5E324282A3D4826A5C554216A8B ] C:\Windows\System32\iertutil.dll
00:10:29.0074 0x04a0  C:\Windows\System32\iertutil.dll - ok
00:10:29.0074 0x04a0  [ 2AFD6F0E07EDE3E7B31C3EE2DA6C403C, F5C8E8AA5559AF4E7BA4EAF9CE2381C80A9E316808D672EF5DFAA9AB5A7FFC79 ] C:\Windows\System32\shell32.dll
00:10:29.0074 0x04a0  C:\Windows\System32\shell32.dll - ok
00:10:29.0074 0x04a0  [ DA66D6D4A0B77D57F5CF449B1231010F, 4F590109EC31F8761FDFD5C4149165B36B2A93C423F577FEF85B221DE8CE47C2 ] C:\Windows\System32\imm32.dll
00:10:29.0074 0x04a0  C:\Windows\System32\imm32.dll - ok
00:10:29.0074 0x04a0  [ AECED95ACFDCF96757EDD8D0CFFE34B8, A76487C0572BC588BA0B87A15B1341674EA54C55AE95565086927007FF1EDFB6 ] C:\Windows\System32\msvcrt.dll
00:10:29.0074 0x04a0  C:\Windows\System32\msvcrt.dll - ok
00:10:29.0089 0x04a0  [ 75CB0458521FFA420E4230A931E4517B, 319B06970F31528A81C86BD965BE901D602158CA9822F6EAE7C3A51BE68EAD2E ] C:\Windows\System32\normaliz.dll
00:10:29.0089 0x04a0  C:\Windows\System32\normaliz.dll - ok
00:10:29.0089 0x04a0  [ 6BDCC68E85A386414E4E028DEB768350, 3D8BE9951B23EB3724D2DBA58138484CA0D42296F6E7668463CA049982FF67C9 ] C:\Windows\System32\rpcrt4.dll
00:10:29.0089 0x04a0  C:\Windows\System32\rpcrt4.dll - ok
00:10:29.0089 0x04a0  [ BB1B37C53D09CA41E2A55DD9D6C1B32E, 7620EC9436EF154FE66368385EBA4C6335AC3ECF4F7E7F72356C60E3614BA4F0 ] C:\Windows\System32\oleaut32.dll
00:10:29.0089 0x04a0  C:\Windows\System32\oleaut32.dll - ok
00:10:29.0089 0x04a0  [ 544A2EB9629532C6C8D4FE7DB9181FA4, FC3780AC14ED98AF194E4EC09346EEB03C8673DDAD59AFBFDEACD23395552727 ] C:\Windows\System32\imagehlp.dll
00:10:29.0089 0x04a0  C:\Windows\System32\imagehlp.dll - ok
00:10:29.0089 0x04a0  [ 79EDF01FA13D886F8E1B655D542011FB, 52453D60D76720668CEEC9C103C0EFBD09173EDC4F0BFF5F76DD65223EA4F1BD ] C:\Windows\System32\wininet.dll
00:10:29.0089 0x04a0  C:\Windows\System32\wininet.dll - ok
00:10:29.0089 0x04a0  [ 1D2731630A5437C54217CDE1C4830F81, 153E04E449A05B902CF956F0C48490C7279158757C484550AD725DEB45998620 ] C:\Windows\System32\ole32.dll
00:10:29.0105 0x04a0  C:\Windows\System32\ole32.dll - ok
00:10:29.0105 0x04a0  [ 0341C9184C252000D1AD396C71CFD860, 910155B34763EDA22EC7D63625B4177B00F8B3AA2F68B807E26B10BCB0540547 ] C:\Windows\System32\combase.dll
00:10:29.0105 0x04a0  C:\Windows\System32\combase.dll - ok
00:10:29.0105 0x04a0  [ 2E5B349ACDA36C20612795754DB93312, 323A623FEF29F20E364528B58CF5C188B550F2CD38E9ED64B34071C74B9BC391 ] C:\Windows\System32\ws2_32.dll
00:10:29.0105 0x04a0  C:\Windows\System32\ws2_32.dll - ok
00:10:29.0105 0x04a0  [ 8542BEA78795403D705A21B83ABD589F, 73FBD20662212323CBE6EB091994E89BFF86538C073EBA7C9C1AC321EF25B888 ] C:\Windows\System32\GdiPlus.dll
00:10:29.0105 0x04a0  C:\Windows\System32\GdiPlus.dll - ok
00:10:29.0105 0x04a0  [ B74C50954E234506548CBBF3933AF391, 50A1C0704069AAD9E7158689C521442CE8F29F47F247A6E3FCBCBB107E665ADA ] C:\Windows\System32\wow64.dll
00:10:29.0105 0x04a0  C:\Windows\System32\wow64.dll - ok
00:10:29.0105 0x04a0  [ 6B3F1596000CB33F73E14B6F7D5CFF82, 4DA1A14B39413F19D507B8371C99F9265E3FC17DC7F0842057B254C9D5ADD69D ] C:\Windows\System32\difxapi.dll
00:10:29.0105 0x04a0  C:\Windows\System32\difxapi.dll - ok
00:10:29.0105 0x04a0  [ 85B5B3797315F714A62AC986FFB2B17E, DF6590235BA33AFF42F7153646DA70C600EC607C1E01BBB58C468A54E0E795EF ] C:\Windows\System32\sechost.dll
00:10:29.0105 0x04a0  C:\Windows\System32\sechost.dll - ok
00:10:29.0121 0x04a0  [ 3A30E09AAA2BB060D39C8FA5E20D4FA3, F172A0F7194D73AD4A11A4B1C12459385C64F334E471C25E3471B8B57EED6E5C ] C:\Windows\System32\advapi32.dll
00:10:29.0121 0x04a0  C:\Windows\System32\advapi32.dll - ok
00:10:29.0121 0x04a0  [ 46501A8D9CF0383A104120810E1BABA6, 8062AB1FC35F61448D08E26919FD7DA3F91D807C912E41321918F24C4ADBBA1D ] C:\Windows\System32\shlwapi.dll
00:10:29.0121 0x04a0  C:\Windows\System32\shlwapi.dll - ok
00:10:29.0121 0x04a0  [ A99AD14F26BDA7D7F27F76BC91B7EED7, 98491CFA2524A9650367BEF87814A58B198F467335C6AB7A446004A9D0320EC6 ] C:\Windows\System32\user32.dll
00:10:29.0121 0x04a0  C:\Windows\System32\user32.dll - ok
00:10:29.0121 0x04a0  [ E5F7328B1D29BCE791862CD3C0DD382A, E520D75CA6E4EDB06F576D97FB6B7CFD46A3EF3A3AC881537DE3BB8C862FE8C3 ] C:\Windows\System32\Drivers\USBHUB3.SYS
00:10:29.0121 0x04a0  C:\Windows\System32\Drivers\USBHUB3.SYS - ok
00:10:29.0121 0x04a0  [ 946ECE07334A74373FAFBFAA063E62F2, C5A3D3E122330B078BA1F371EE18B1C5E4597850F88EB2D510C23C4940D3F19C ] C:\Windows\System32\Drivers\drmk.sys
00:10:29.0121 0x04a0  C:\Windows\System32\Drivers\drmk.sys - ok
00:10:29.0136 0x04a0  [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] C:\Windows\System32\Drivers\ksthunk.sys
00:10:29.0136 0x04a0  C:\Windows\System32\Drivers\ksthunk.sys - ok
00:10:29.0136 0x04a0  [ 857433889008F86728E8C099C740729D, 71B978D490E50D8FF2118ED2D79A3A9E93D9E89B945BAE1D887244B075F77F57 ] C:\Windows\System32\Drivers\portcls.sys
00:10:29.0136 0x04a0  C:\Windows\System32\Drivers\portcls.sys - ok
00:10:29.0136 0x04a0  [ B05AEC4014FFDC1793B5CCB6D9BD28D1, ED9CC2B5954BDB12868357703B451D8A086FC9DDA0A8F0EA486E3834B0854EE6 ] C:\Windows\System32\Drivers\stwrt64.sys
00:10:29.0136 0x04a0  C:\Windows\System32\Drivers\stwrt64.sys - ok
00:10:29.0136 0x04a0  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] C:\Windows\System32\Drivers\IntcDAud.sys
00:10:29.0136 0x04a0  C:\Windows\System32\Drivers\IntcDAud.sys - ok
00:10:29.0136 0x04a0  [ C3D51000E8FBEF76BC91E145B0D7FC67, 5B7F37042B51C6321D8AC3E31385E2A6742523EB74A23BA43662738AFF14C09C ] C:\Windows\System32\comdlg32.dll
00:10:29.0136 0x04a0  C:\Windows\System32\comdlg32.dll - ok
00:10:29.0136 0x04a0  [ 1E2E99B4FA9A5F0D9934F8B99B528A62, 89CE514C386A78D656E97AD2100A949A129D7B1EBBFF9500753C423C37D3EB33 ] C:\Windows\System32\wow64cpu.dll
00:10:29.0136 0x04a0  C:\Windows\System32\wow64cpu.dll - ok
00:10:29.0152 0x04a0  [ E1B2751640FA7840CC5EB6E78513A632, 2F81762EDA6B2FCA88F4D78D3696E856A2D1F4809C9A53702D8069D9B643BF20 ] C:\Windows\System32\Wldap32.dll
00:10:29.0152 0x04a0  C:\Windows\System32\Wldap32.dll - ok
00:10:29.0152 0x04a0  [ E1FF9D65E6B86F7EBB531AE36C5AF635, 92981D598DC950C191B0320955DD777FBAC7BBEE1C17CB8D6171AC40FFC7B026 ] C:\Windows\System32\kernel32.dll
00:10:29.0152 0x04a0  C:\Windows\System32\kernel32.dll - ok
00:10:29.0152 0x04a0  [ A74C6A6DA5A35686D7639ACDBD458BFB, FEC49FE822C462F6C2FE1B8480C119C0C524CD9BC800B5CD0524507461D5FEDC ] C:\Windows\System32\nsi.dll
00:10:29.0152 0x04a0  C:\Windows\System32\nsi.dll - ok
00:10:29.0152 0x04a0  [ 41AC2B1335317D2F8700E17328F71E0C, E570C6D2FD54BF5B0BBD321FBF4C9AAB115A5A92D6F7EF7FDF53F5F75088E1DD ] C:\Windows\System32\psapi.dll
00:10:29.0152 0x04a0  C:\Windows\System32\psapi.dll - ok
00:10:29.0152 0x04a0  [ 74466D77EE8588C04B95AE9DBC693EF8, E164FC36601D2F2B4E5CF08A5E9D535F461DA6C5B342B734215F589B4F2C7549 ] C:\Windows\System32\wintrust.dll
00:10:29.0152 0x04a0  C:\Windows\System32\wintrust.dll - ok
00:10:29.0152 0x04a0  [ F37BD0CAA604B6FE5CEC9D0BC05ABAF8, B084F5E3EF08623473A33954686BE8DDD978F14B66AC9E665FEAA498CDC680DD ] C:\Windows\System32\KernelBase.dll
00:10:29.0152 0x04a0  C:\Windows\System32\KernelBase.dll - ok
00:10:29.0168 0x04a0  [ 8A8DB47DDF6B2118DF4D1561CEA586B3, C8F149AF8F3AA900C1BDC6139AF451A7245E81A926E0927C7E322088F2EFAE01 ] C:\Windows\System32\comctl32.dll
00:10:29.0168 0x04a0  C:\Windows\System32\comctl32.dll - ok
00:10:29.0168 0x04a0  [ 51B6CB1852B49E150F7E8B8C2F4CB0F7, C069D14E79F01468521EE466AE5DC5757E53765B7A05567F9D8E3DE21EC1E7B5 ] C:\Windows\System32\devobj.dll
00:10:29.0168 0x04a0  C:\Windows\System32\devobj.dll - ok
00:10:29.0168 0x04a0  [ 61EE56D354A5B425845F6A38CE401F92, 7EBF58A6A1369109820370FAA1969281EBECF219D323B202A4C5BB4D8727433E ] C:\Windows\System32\crypt32.dll
00:10:29.0168 0x04a0  C:\Windows\System32\crypt32.dll - ok
00:10:29.0168 0x04a0  [ C26780F936820DBB3A1323FC1C09E05F, A7F38B8959C668D02CED78306917FE8F7740CB199129DB5F9408FB728A66CC5F ] C:\Windows\System32\cfgmgr32.dll
00:10:29.0168 0x04a0  C:\Windows\System32\cfgmgr32.dll - ok
00:10:29.0168 0x04a0  [ C763F7DC50C70E657DCB164FA9D92085, 9006A11034F128250DE9B918F478AB5B3AAD1685FA9B5BEC5FA259439DCFFAA1 ] C:\Windows\System32\msasn1.dll
00:10:29.0168 0x04a0  C:\Windows\System32\msasn1.dll - ok
00:10:29.0168 0x04a0  [ 36D755FFED947A08B1650ACE9644FAB8, B37629A1EB7B3E1AC6C9164A5B7FDEAF8A3B4629B732CD885089BDB3BEE31CF5 ] C:\Windows\SysWOW64\lpk.dll
00:10:29.0168 0x04a0  C:\Windows\SysWOW64\lpk.dll - ok
00:10:29.0183 0x04a0  [ BD321B58C0CC6C8196F8CF4EE226E830, 592D62425AFCF37E10088202B9DD01C22C20A9D4F5F562006D407B8B26CDBB3F ] C:\Windows\SysWOW64\normaliz.dll
00:10:29.0183 0x04a0  C:\Windows\SysWOW64\normaliz.dll - ok
00:10:29.0183 0x04a0  [ 126D6B3B7E8339A2537C4E1FEFA454A7, 0EF770CAD7F2BAC0A390CDAC76EA9D62C8582D8ACB02037C8D6AF10D8B434929 ] C:\Windows\System32\win32k.sys
00:10:29.0183 0x04a0  C:\Windows\System32\win32k.sys - ok
00:10:29.0183 0x04a0  [ 0D9F14739D05F8B8B028B539FC6F1F29, 07751B8D090F4E159C0E38FB569B3C781DC8AAF0CE5A9505AC4F37265B5F4654 ] C:\Windows\System32\csrss.exe
00:10:29.0183 0x04a0  C:\Windows\System32\csrss.exe - ok
00:10:29.0183 0x04a0  [ 1C510F9C2DB7393468EB789A96DAAFA8, ED20E82B4754BA3B93F70E85890505E6C3177C72B7F5BDC3AA465DB236CF0834 ] C:\Windows\System32\csrsrv.dll
00:10:29.0183 0x04a0  C:\Windows\System32\csrsrv.dll - ok
00:10:29.0183 0x04a0  [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\Windows\System32\basesrv.dll
00:10:29.0183 0x04a0  C:\Windows\System32\basesrv.dll - ok
00:10:29.0183 0x04a0  [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\Windows\System32\winsrv.dll
00:10:29.0183 0x04a0  C:\Windows\System32\winsrv.dll - ok
00:10:29.0199 0x04a0  [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\Windows\System32\sxssrv.dll
00:10:29.0199 0x04a0  C:\Windows\System32\sxssrv.dll - ok
00:10:29.0199 0x04a0  [ F14D77B1B3347ED08272B65A3F80B4CE, 355875455F744C2E02C7C9934636F8CD82ACB22DD86A81B05D093A0DFB562A4E ] C:\Windows\System32\tsddd.dll
00:10:29.0199 0x04a0  C:\Windows\System32\tsddd.dll - ok
00:10:29.0199 0x04a0  [ FE9AB232B56A12224E8A3F3F9878C9A3, 09326E764DAF190D1A888E6E4786FAE471EF93BEFB03ABB405357F6DED5F9ABC ] C:\Windows\System32\wininit.exe
00:10:29.0199 0x04a0  C:\Windows\System32\wininit.exe - ok
00:10:29.0199 0x04a0  [ 6C2146239D657326A2D4DA72685AA315, 11C1B7EA3FC1B25B8C821D3C2E0949587D4F2F1906D6DA351657ED666185C4CA ] C:\Windows\System32\KBDUK.DLL
00:10:29.0199 0x04a0  C:\Windows\System32\KBDUK.DLL - ok
00:10:29.0199 0x04a0  [ 4C7303709714F589A0809AC82F03CA84, 6D2BF13F52831C48A26A74FEB6458EDB4C578292C1B79AF419BF0BE9CA9A88FA ] C:\Windows\System32\profapi.dll
00:10:29.0199 0x04a0  C:\Windows\System32\profapi.dll - ok
00:10:29.0214 0x04a0  [ 8144BCD1736C3C76978B8378556CA746, 4E1FE0847716C697360E3601CB6D842599DCD46C853C06D480BB66463D95F0D2 ] C:\Windows\System32\wininitext.dll
00:10:29.0214 0x04a0  C:\Windows\System32\wininitext.dll - ok
00:10:29.0214 0x04a0  [ 10564D7D4FBAABDB826E9D607679C85F, 1E85B8F5A24CB9261A55BF9D16B365D1DC5F36EC409E6086481F736FD60AB08C ] C:\Windows\System32\WlS0WndH.dll
00:10:29.0214 0x04a0  C:\Windows\System32\WlS0WndH.dll - ok
00:10:29.0214 0x04a0  [ 7679414791657155EDF45D388325BEFE, 70467B3284BF0E85E4BD25E702D60C6299621B2FEE2CBB764BC1D4F78285EA67 ] C:\Windows\System32\sxs.dll
00:10:29.0214 0x04a0  C:\Windows\System32\sxs.dll - ok
00:10:29.0214 0x04a0  [ 2577AEA213B0B70FF5B4E3D180E66B11, A5C6D937BF2FE09FE63FD87528F853567A40C94AEC492E9F9B9CA9D9121B07D2 ] C:\Windows\System32\cryptbase.dll
00:10:29.0214 0x04a0  C:\Windows\System32\cryptbase.dll - ok
00:10:29.0214 0x04a0  [ 7F4E2FB897E35952C5B22BE48047FCA8, 68E1AA815C667C0CBAA931D27746F8544943E51398D798D027C24A44EA2A64A2 ] C:\Windows\System32\bcryptprimitives.dll
00:10:29.0214 0x04a0  C:\Windows\System32\bcryptprimitives.dll - ok
00:10:29.0214 0x04a0  [ C976C4306F9AE133D6BBD47FDFC3BF92, 820413D92D6A89055A7F26523BF5CC4B668610C4A06E8B0D163FBF929B1DFA9A ] C:\Windows\System32\Drivers\usbccgp.sys
00:10:29.0214 0x04a0  C:\Windows\System32\Drivers\usbccgp.sys - ok
00:10:29.0230 0x04a0  [ 8D46D6195A59F6DBE993385D6B26B5C7, EEE7902C8A11B2E3F68908868E97BD3A7623F99010E9264F2B66C76C23F18FAC ] C:\Windows\System32\cdd.dll
00:10:29.0230 0x04a0  C:\Windows\System32\cdd.dll - ok
00:10:29.0230 0x04a0  [ BCF2036A0DD579E47C008C133550283E, 52F95F4A253C431221852FA0E0FB9AB94752FDEE597750949460C74242887B09 ] C:\Windows\System32\winlogon.exe
00:10:29.0230 0x04a0  C:\Windows\System32\winlogon.exe - ok
00:10:29.0230 0x04a0  [ EF72CFB67C73A8751F3BC4F4C98EAD4C, 47A0E97C24FBBEA83954C32FCA98D69B5DF1CC59DA020030018CB9E23E7A8F69 ] C:\Windows\System32\powrprof.dll
00:10:29.0230 0x04a0  C:\Windows\System32\powrprof.dll - ok
00:10:29.0230 0x04a0  [ C0FAB7DDA13CE5593A48B40056AA278D, 7CDA1C4A43E25A284B8DE20E6065199BC6569EF6BAB5D034A73DA3B559D65ABF ] C:\Windows\System32\samcli.dll
00:10:29.0230 0x04a0  C:\Windows\System32\samcli.dll - ok
00:10:29.0230 0x04a0  [ 9D7EAFBAD213566D70BAE9A14B847666, 9E181A029835789C449D6D756F5CDFCA3712A393DEEA96831DB2AAC12B1169D1 ] C:\Windows\System32\winsta.dll
00:10:29.0230 0x04a0  C:\Windows\System32\winsta.dll - ok
00:10:29.0230 0x04a0  [ E8001E0F56F0B0F5D204EF865F47372B, 6B1A23443F4F9737CB654AD7257968C080958C1AA5C0615DCD2A00BA9278259F ] C:\Windows\System32\wtsapi32.dll
00:10:29.0230 0x04a0  C:\Windows\System32\wtsapi32.dll - ok
00:10:29.0246 0x04a0  [ 9EF7C01D3ACCBC243B5CB1A95865B2FF, 367A7640B4992E68EB3E1BBD78D3014742F4CC4056750E389048C653251DAD33 ] C:\Windows\System32\Drivers\usbvideo.sys
00:10:29.0246 0x04a0  C:\Windows\System32\Drivers\usbvideo.sys - ok
00:10:29.0246 0x04a0  [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] C:\Windows\System32\Drivers\monitor.sys
00:10:29.0246 0x04a0  C:\Windows\System32\Drivers\monitor.sys - ok
00:10:29.0246 0x04a0  [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] C:\Windows\System32\Drivers\cdfs.sys
00:10:29.0246 0x04a0  C:\Windows\System32\Drivers\cdfs.sys - ok
00:10:29.0246 0x04a0  [ D293F2E8CEE73B87B04790D5169C0F25, 6B05D92ACC59FC1FBEAE0E31298F72ED4FF9E2BE2D8263F848057F15A033EF8F ] C:\Windows\System32\lsasrv.dll
00:10:29.0246 0x04a0  C:\Windows\System32\lsasrv.dll - ok
00:10:29.0246 0x04a0  [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] C:\Windows\System32\lsass.exe
00:10:29.0246 0x04a0  C:\Windows\System32\lsass.exe - ok
00:10:29.0246 0x04a0  [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\Windows\System32\services.exe
00:10:29.0246 0x04a0  C:\Windows\System32\services.exe - ok
00:10:29.0261 0x04a0  [ D1AEFA79EE1EE089D03249BE581D5DD6, E8A41BB6004F10AA829F7DD348F3349FB891B28F7CCE6E6AFC237D9A21EB07F3 ] C:\Windows\System32\sspicli.dll
00:10:29.0261 0x04a0  C:\Windows\System32\sspicli.dll - ok
00:10:29.0261 0x04a0  [ 90BEE4B9728DDCF9787100CB8A04815C, 036D94C59ECF3A9C1EF193AA66CEFC384B628D1F36BBE1648FDF8F1778659AE2 ] C:\Windows\System32\sspisrv.dll
00:10:29.0261 0x04a0  C:\Windows\System32\sspisrv.dll - ok
00:10:29.0261 0x04a0  [ ECFC9AF8D1A6E16223E1B17EA732FA08, BF74E48E2F14DCBA257473FCCEC3E512C7283335610205E3B84CB16449E86335 ] C:\Windows\System32\scext.dll
00:10:29.0261 0x04a0  C:\Windows\System32\scext.dll - ok
00:10:29.0261 0x04a0  [ 16C7029B1FBD1F80B2337933E66BF793, B73A60D94B1179ABA543856BA62B1F240A94D420DD01D01828AD43F6EE641ADE ] C:\Windows\System32\ubpm.dll
00:10:29.0261 0x04a0  C:\Windows\System32\ubpm.dll - ok
00:10:29.0261 0x04a0  [ DF8111BDC2F35006F0CD471A2CC65665, 9469D6E40D6F66E3171CD1C7765DC2E6CC0D62699B64A68AD04C6CED21CA126A ] C:\Windows\System32\SPInf.dll
00:10:29.0261 0x04a0  C:\Windows\System32\SPInf.dll - ok
00:10:29.0261 0x04a0  [ D71A882FE7A74F01B92F6A2C74305E45, B8E7A987B58DED89CC6423E286E052A110B0448EC9E15B9E00FD8303C192A5D2 ] C:\Windows\System32\srvcli.dll
00:10:29.0261 0x04a0  C:\Windows\System32\srvcli.dll - ok
00:10:29.0277 0x04a0  [ F51618F0CBA3D733560D816AF43AEE29, 68061207ED10210B40858EC18D2E8A6F531C4968EBD6E43E4D473D543B7E60DA ] C:\Windows\System32\samsrv.dll
00:10:29.0277 0x04a0  C:\Windows\System32\samsrv.dll - ok
00:10:29.0277 0x04a0  [ E3D5F59826899393970533A8E6AB34EE, 1FE5E545C1CDE06843B8E79FA378A7D6DFAF438CBEEF886D8035E56B45A45FA5 ] C:\Windows\System32\bcrypt.dll
00:10:29.0277 0x04a0  C:\Windows\System32\bcrypt.dll - ok
00:10:29.0277 0x04a0  [ EA697BA99655FA048BB297EE9A3CCBC7, 1AD4B8717B41AA79D5AAC5E49619DAB3FBFA528B4B20A037317B5C465F78F040 ] C:\Windows\System32\ncrypt.dll
00:10:29.0277 0x04a0  C:\Windows\System32\ncrypt.dll - ok
00:10:29.0277 0x04a0  [ 39084062AB7B7CA19DBF0AA4581D833B, F70757667060222A94037D4B62FA236B6EFC5D4CD72559F8F21F562002D93B83 ] C:\Windows\System32\msprivs.dll
00:10:29.0277 0x04a0  C:\Windows\System32\msprivs.dll - ok
00:10:29.0277 0x04a0  [ 21AA2C2564DDB9F3B83CE322D9E97F9C, 492B583B3182DF3B80C2E237DD77656711FACFB97A19F8F3E52A9E34E6F2D1DB ] C:\Windows\System32\netjoin.dll
00:10:29.0277 0x04a0  C:\Windows\System32\netjoin.dll - ok
00:10:29.0277 0x04a0  [ A6FE1FCAB4AC686D6BD7884B317935F7, 08B3BD92505F781E23AA823E9F34D4F49033EAE13FD75A4C47DD81BBA7BA385C ] C:\Windows\System32\ntasn1.dll
00:10:29.0277 0x04a0  C:\Windows\System32\ntasn1.dll - ok
00:10:29.0293 0x04a0  [ 058B0CDA8E19AF2A7E6CFA7604BB8D14, D0F645CB1F43A998C97FAEFAE511A752DECF5C82588A1E8EDB29DE96618DA0AE ] C:\Windows\System32\cryptdll.dll
00:10:29.0293 0x04a0  C:\Windows\System32\cryptdll.dll - ok
00:10:29.0293 0x04a0  [ 510A64BC84EA509337AAA67A888F101C, 6CB756E5545F0FD16FC82C937CD48A5F632310B70879D7745F4AD2990E3F8A67 ] C:\Windows\System32\kerberos.dll
00:10:29.0293 0x04a0  C:\Windows\System32\kerberos.dll - ok
00:10:29.0293 0x04a0  [ 016EDF8CF3BC0428F9A910637E918808, AC099B0BC04A6F4A2599E3305FA1E1FB3B90E4B4D71F37C616AE8B9C3A20B12A ] C:\Windows\System32\negoexts.dll
00:10:29.0293 0x04a0  C:\Windows\System32\negoexts.dll - ok
00:10:29.0293 0x04a0  [ 8F9F55C4B857E35552D78A2AAF1BADF9, D5F17DEB76C4B96177798C15C81A34FC0A7EB9DBF70A92395BBF5083FCF215E7 ] C:\Windows\System32\cryptsp.dll
00:10:29.0293 0x04a0  C:\Windows\System32\cryptsp.dll - ok
00:10:29.0293 0x04a0  [ 1AC307A2F7317007BC382046B3835202, A1FC763F34D12872C76551A66BBD8DED07DF55712F54773372FE6B4F27BC8DF5 ] C:\Windows\System32\mswsock.dll
00:10:29.0293 0x04a0  C:\Windows\System32\mswsock.dll - ok
00:10:29.0308 0x04a0  [ 4543E23FF678CA9D2C943A45B5B82A17, 1025FEF57E115A84217BE0F0DAFE0F2FA65F69F1C7FF0103FAE82816696B419B ] C:\Windows\System32\msv1_0.dll
00:10:29.0308 0x04a0  C:\Windows\System32\msv1_0.dll - ok
00:10:29.0308 0x04a0  [ FDC70965F0FC9DFEBC919627DED5DDFF, 54ED1E203720963982706F0D402449059A0C6057A771A72903122A3C41BF5E14 ] C:\Windows\System32\netlogon.dll
00:10:29.0308 0x04a0  C:\Windows\System32\netlogon.dll - ok
00:10:29.0308 0x04a0  [ B16A14270DB26838B48A06835FDBBFB4, E12D0314E4F09FBA9CC85D7191ADDFE70F6419AA120FFC6C14E0F3B5FFB68195 ] C:\Windows\System32\dnsapi.dll
00:10:29.0308 0x04a0  C:\Windows\System32\dnsapi.dll - ok
00:10:29.0308 0x04a0  [ 113E9BB020461D5F9D0C0C6EA29C513F, BA8F05244F9F500026D647C3329FE965119DE9E6E20AEF20ED6A806CC9AACC17 ] C:\Windows\System32\logoncli.dll
00:10:29.0308 0x04a0  C:\Windows\System32\logoncli.dll - ok
00:10:29.0308 0x04a0  [ 4F54EB37483A890F8C19478207FC5004, 621D8B58348F5F1739F7D79AE956EE9C79A39C20453AABC6BB169B356F669A7F ] C:\Windows\System32\schannel.dll
00:10:29.0308 0x04a0  C:\Windows\System32\schannel.dll - ok
00:10:29.0308 0x04a0  [ 72FCEDD4EEE5F1C38F84F0947A26950E, 9B9A14632160346B69973CDAA38D8EC6D5648E161C3ABE984159CB9EADD74093 ] C:\Windows\System32\userenv.dll
00:10:29.0308 0x04a0  C:\Windows\System32\userenv.dll - ok
00:10:29.0324 0x04a0  [ 0DFEBCD834EF05A112BF90F8A7993212, 0059B928F19C832DE87B515D64E4D51DA5D8A4E221444CDA2AC0EA6356E1B2D1 ] C:\Windows\System32\wdigest.dll
00:10:29.0324 0x04a0  C:\Windows\System32\wdigest.dll - ok
00:10:29.0324 0x04a0  [ 77DAB73F2AF988D07D72FD2DA0DC91FC, 200E95D4DA2AE725EF7433A947ACBB33BE3CE32EBA863EC8DB558F0F87E366AB ] C:\Windows\System32\rsaenh.dll
00:10:29.0324 0x04a0  C:\Windows\System32\rsaenh.dll - ok
00:10:29.0324 0x04a0  [ CC6D17EDB5B1C73523E4B7D6EB7BBC09, BBFC18708273C7D2E34FFD4F63A7D86C3E0BA3BE3A35CB2C773440EE77E67CAE ] C:\Windows\System32\TSpkg.dll
00:10:29.0324 0x04a0  C:\Windows\System32\TSpkg.dll - ok
00:10:29.0324 0x04a0  [ 0059D2032BCA18EBBC03D6D1308892F6, AE1C8DBCBAE564D9814C6AFB52C2B9A493FCC9BC9E789DAD080132828FD09280 ] C:\Windows\System32\pku2u.dll
00:10:29.0324 0x04a0  C:\Windows\System32\pku2u.dll - ok
00:10:29.0324 0x04a0  [ D8BEFDDADA7125E5A4DD37EA5AC620D9, E91E26353E2151C755C5D5B4F25084F0CEF688A9F1CA7FF309C57C607BCF9DF4 ] C:\Windows\System32\efslsaext.dll
00:10:29.0324 0x04a0  C:\Windows\System32\efslsaext.dll - ok
00:10:29.0324 0x04a0  [ 5B92CE37EBE65A5424074E50C48AA52E, 1B8679051E25E06E76B539AECFAD4E700A8A2ADDE9C2E6EC949FE68FC456E09A ] C:\Windows\System32\livessp.dll
00:10:29.0324 0x04a0  C:\Windows\System32\livessp.dll - ok
00:10:29.0339 0x04a0  [ 8EA33056071F6EB7A97C68E978F01573, 0A3FEF2C7B00CB6DE1CA6216BE06C6F3D61B15CC3A06F9B0F1BCB8C1443A25EA ] C:\Windows\System32\credssp.dll
00:10:29.0339 0x04a0  C:\Windows\System32\credssp.dll - ok
00:10:29.0339 0x04a0  [ 2F5E3751FAB4AE994262E2FB9CEDC885, 6B2429CF621D05D72CBF38163C92BC9508D72EB5D4951382321A16859CE871FA ] C:\Windows\System32\dpapisrv.dll
00:10:29.0339 0x04a0  C:\Windows\System32\dpapisrv.dll - ok
00:10:29.0339 0x04a0  [ 4F6E1CA672370A9BCAC049CE3AB7F666, E984A9803615B2C90933694B65A7D9B95919680F29354B9E93126889BE2BF5B4 ] C:\Windows\System32\scecli.dll
00:10:29.0339 0x04a0  C:\Windows\System32\scecli.dll - ok
00:10:29.0339 0x04a0  [ C0D0F60B47079C2AAD30B836326313F4, 0EB155BCA65D4B7FBE3DCB12832DEE555449ED21D403EBE6CED1F1B9B81A7FE4 ] C:\Windows\System32\scesrv.dll
00:10:29.0339 0x04a0  C:\Windows\System32\scesrv.dll - ok
00:10:29.0339 0x04a0  [ 0D7B278E91F0F07BBC4DFDF634BEFDB5, 3EC751DE5364FB5F4B965338A4F741625C5EB85187419B7242EA9678C6250148 ] C:\Windows\System32\authz.dll
00:10:29.0339 0x04a0  C:\Windows\System32\authz.dll - ok
00:10:29.0339 0x04a0  [ E17EA93682D88F1CE94CCE2A804FA691, DDD2A8EB5100EA96983FFBC38097EC5C4BEB9E3335D3A124261776A2E4981FDC ] C:\Windows\System32\netutils.dll
00:10:29.0339 0x04a0  C:\Windows\System32\netutils.dll - ok
00:10:29.0355 0x04a0  [ EDE27EACE742EE2888C5DD36400A2EC0, 4AE0C5191FE9D93E1BE2B99C0C64BF3CA43272CD66003139476192F946F0BEC4 ] C:\Windows\System32\svchost.exe
00:10:29.0355 0x04a0  C:\Windows\System32\svchost.exe - ok
00:10:29.0355 0x04a0  [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] C:\Windows\System32\umpnpmgr.dll
00:10:29.0355 0x04a0  C:\Windows\System32\umpnpmgr.dll - ok
00:10:29.0355 0x04a0  [ 0CE9A21C24E62DFD77E273B56B11C2C7, 5380B306AAE6BE15472874994DA013D43D10F3BF637C81DA2E5AD05C0DC7EECA ] C:\Windows\System32\devrtl.dll
00:10:29.0355 0x04a0  C:\Windows\System32\devrtl.dll - ok
00:10:29.0355 0x04a0  [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] C:\Windows\System32\umpo.dll
00:10:29.0355 0x04a0  C:\Windows\System32\umpo.dll - ok
00:10:29.0355 0x04a0  [ 61A8BF961A244C60697814D8CC2741FA, 1F67DEC687A6FDBDC62E5CB52CC177673A601676605949B6F2132AC3BCEFA054 ] C:\Windows\System32\pcwum.dll
00:10:29.0355 0x04a0  C:\Windows\System32\pcwum.dll - ok
00:10:29.0355 0x04a0  [ 58CE8F135CC6F3271603A8BB094B1967, A47AD0441433A583766A90117176C8ECB42D9ACE4AA6B593010C2140395A8A8F ] C:\Windows\System32\umpoext.dll
00:10:29.0355 0x04a0  C:\Windows\System32\umpoext.dll - ok
00:10:29.0371 0x04a0  [ 5C2758C697F6EC1C3771902D5FDF8079, 1A1BC2B91181D4B9F6B05A7A25E73FAF86C89DE6C246D75C6497CCB784D53C78 ] C:\Windows\System32\gpapi.dll
00:10:29.0371 0x04a0  C:\Windows\System32\gpapi.dll - ok
00:10:29.0371 0x04a0  [ 2BA42F109B70D10E2F12072AD5BFFE27, ACB02141234D0D83899602F192AF55BDEACC33D14362A97CDDEC971F9B2EB59A ] C:\Windows\System32\hid.dll
00:10:29.0371 0x04a0  C:\Windows\System32\hid.dll - ok
00:10:29.0371 0x04a0  [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] C:\Windows\System32\Drivers\luafv.sys
00:10:29.0371 0x04a0  C:\Windows\System32\Drivers\luafv.sys - ok
00:10:29.0371 0x04a0  [ 0BB97D43299910CBFBA59C461B99B910, 27C22D9D9EE8A410D7396960DA93E9E260D4DCDD38DCE06E85E45C5E24C067DE ] C:\Windows\System32\Drivers\mbam.sys
00:10:29.0371 0x04a0  C:\Windows\System32\Drivers\mbam.sys - ok
00:10:29.0371 0x04a0  [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] C:\Windows\System32\rpcss.dll
00:10:29.0371 0x04a0  C:\Windows\System32\rpcss.dll - ok
00:10:29.0371 0x04a0  [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] C:\Windows\System32\RpcEpMap.dll
00:10:29.0371 0x04a0  C:\Windows\System32\RpcEpMap.dll - ok
00:10:29.0386 0x04a0  [ 587089B7A93F3DE43832F3DBDD8F4653, 9A026D63576454ECF009E09809E09B75874E43B78C031F64C31012A871CAF91D ] C:\Windows\System32\RpcRtRemote.dll
00:10:29.0386 0x04a0  C:\Windows\System32\RpcRtRemote.dll - ok
00:10:29.0386 0x04a0  [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] C:\Windows\System32\bisrv.dll
00:10:29.0386 0x04a0  C:\Windows\System32\bisrv.dll - ok
00:10:29.0386 0x04a0  [ 8018DC4AA69B7B2159B4EBEC9833C67E, 032B96DD3D98AD92A4C51A9E603A86F55E304C3076F4D325BF0FF2F6AA04052F ] C:\Windows\System32\psmsrv.dll
00:10:29.0386 0x04a0  C:\Windows\System32\psmsrv.dll - ok
00:10:29.0386 0x04a0  [ A57BA284F5996FFD32DCDBC41A4657DB, 2106B83873A824BC83EF42FAC9DD9A0F741209535A84AE65EA8E786519920043 ] C:\Windows\System32\lsm.dll
00:10:29.0386 0x04a0  C:\Windows\System32\lsm.dll - ok
00:10:29.0386 0x04a0  [ 09DC813EA00294A6F5B2B6C75E2740ED, 541138A689F464EAD93DDFA45D3F7F46F928DEB4DB86BAC4C388F75C10A8EC77 ] C:\Windows\System32\FirewallAPI.dll
00:10:29.0386 0x04a0  C:\Windows\System32\FirewallAPI.dll - ok
00:10:29.0402 0x04a0  [ 2383FFF04B78586DB2F78E82583F630A, 35081F9BDC2D1FFECAAF9DF974D75416A769722643650F2752BB32DA6F9D84FF ] C:\Windows\System32\sysntfy.dll
00:10:29.0402 0x04a0  C:\Windows\System32\sysntfy.dll - ok
00:10:29.0402 0x04a0  [ BE16B6EA1F7549DFB458CC200F4978FD, 14A27C4B87D95E9F81F82A79625BCDC5CF4CF9985EC94964CCDF6C780F0736A2 ] C:\Windows\System32\UXInit.dll
00:10:29.0402 0x04a0  C:\Windows\System32\UXInit.dll - ok
00:10:29.0402 0x04a0  [ E5D1CB25AB7050FE4A4397089BE2AA09, 4806EC7A712E28FF8B473EE71E22CD8B73CA5249C51640F58B4A9A683350CBD4 ] C:\Windows\System32\wmsgapi.dll
00:10:29.0402 0x04a0  C:\Windows\System32\wmsgapi.dll - ok
00:10:29.0402 0x04a0  [ 1CF15F7C401B901AC21C0F9D5D302C23, FA09F22E38B6D1E5A4FF84D1BEA3A3539977D701D6CECE9A5371C06C28B4EB56 ] C:\Windows\System32\uxtheme.dll
00:10:29.0402 0x04a0  C:\Windows\System32\uxtheme.dll - ok
00:10:29.0402 0x04a0  [ 52576C623E5877D6CD73479610A532C2, 58D8596659AFF4E68F1C8D21042D4DB00227A4B07BB3470B3CF5BE1B5950D3BD ] C:\Windows\System32\dpapi.dll
00:10:29.0402 0x04a0  C:\Windows\System32\dpapi.dll - ok
00:10:29.0402 0x04a0  [ 97F8694D6CDD8A3BBDF0A24D9B321C7B, 163F6CA5954B5D60645F27AC0BC0A2D0A05C61067347035B8C7D6DECCC2B9099 ] C:\Windows\System32\authui.dll
00:10:29.0402 0x04a0  C:\Windows\System32\authui.dll - ok
00:10:29.0418 0x04a0  [ 0CBF0748B3F6C978233BBDD1D9D6A023, 7AE78B94A0D3974A3B4C3EB6C4F08C3A8003E6961B4A1175EC6A7788C148692F ] C:\Windows\System32\dwm.exe
00:10:29.0418 0x04a0  C:\Windows\System32\dwm.exe - ok
00:10:29.0418 0x04a0  [ A6D52417607B399790678AFB2B44CDF3, 5BF832A731B90FCF4FBAF75E250BFFFF20CB11C7441309E23E71066BDA4E4825 ] C:\Windows\System32\dwmredir.dll
00:10:29.0418 0x04a0  C:\Windows\System32\dwmredir.dll - ok
00:10:29.0418 0x04a0  [ FAD009934DE5E8FA2511109B2349B9B1, DBAA161E24CD91DD15F135469556E8569DCCC47A8AC52F5196996F72EDACAC54 ] C:\Windows\System32\LogonUI.exe
00:10:29.0418 0x04a0  C:\Windows\System32\LogonUI.exe - ok
00:10:29.0418 0x04a0  [ 5170FF8948D9FBFA5386E7AC915B7A66, DACCB696410DABA470686F9C22E77D379D9CBADF67F53C12A5F192B98304EE22 ] C:\Windows\System32\dwmcore.dll
00:10:29.0418 0x04a0  C:\Windows\System32\dwmcore.dll - ok
00:10:29.0418 0x04a0  [ B1256D36D6D415FB924A26957A83C2CB, 24058235181F322D76D138BC0413474FD399DED2FE522F843DF5611A2A75364F ] C:\Windows\System32\dcomp.dll
00:10:29.0418 0x04a0  C:\Windows\System32\dcomp.dll - ok
00:10:29.0418 0x04a0  [ A28DE7725EC0426BC76C064B3A9D64EF, E693B3B51DF23E67164999DC21FC1D38C43142F645FF8F5329E67B317B4ECE52 ] C:\Windows\System32\SHCore.dll
00:10:29.0418 0x04a0  C:\Windows\System32\SHCore.dll - ok
00:10:29.0433 0x04a0  [ E0A588F701D3F89592B59C4B37037F52, 8A1CCC2485EEE45120090BD0EF5B865E5E085A5CF1DA3069AEE9300A99E1EFD0 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
00:10:29.0433 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe - ok
00:10:29.0433 0x04a0  [ D27626A720F5A62CC163B82596E96DE9, E2C288FE8E27BC09AFDF2398AB403E53766B7833F0414681CFBF3B776C9A8FF3 ] C:\Windows\System32\WindowsCodecs.dll
00:10:29.0433 0x04a0  C:\Windows\System32\WindowsCodecs.dll - ok
00:10:29.0433 0x04a0  [ E2B8F9FE6FA401AEB0BDFF8ED61A7568, AF1866C4DB5904BCA4CFBA4CECA6AE478BEAE24DC83D8B13414E7B4139C9FFDE ] C:\Windows\System32\wmiclnt.dll
00:10:29.0433 0x04a0  C:\Windows\System32\wmiclnt.dll - ok
00:10:29.0433 0x04a0  [ 80E5C64479952266CCFCF52CBBBE84DC, A6A94784396A7DB55C2239D02C5D315022FE67F0E8EA1A4107756DEDBCA6CBAE ] C:\Windows\System32\dui70.dll
00:10:29.0433 0x04a0  C:\Windows\System32\dui70.dll - ok
00:10:29.0433 0x04a0  [ 6CB5B0F8F835B0E69857436405BA6E28, 8D166C6C9340F8E0785A24751AC52C83E1BA3E2A6C48F6513676B40364C0080F ] C:\Windows\System32\d3d10_1.dll
00:10:29.0433 0x04a0  C:\Windows\System32\d3d10_1.dll - ok
00:10:29.0433 0x04a0  [ 3951ECF063787EB40CD33D2961B39E23, 40818482DF1EB61A0E077A0EC8B7D9B024BBC4BBD6509E985C40B3575FDCBCC0 ] C:\Windows\System32\d3d10_1core.dll
00:10:29.0433 0x04a0  C:\Windows\System32\d3d10_1core.dll - ok
00:10:29.0449 0x04a0  [ 02DF949C584B02FAB05868502C578D42, 18ED0FAC5DDA7B1A77B003B48D58BC41679ECC32F48CB1A180C0710E6963C30A ] C:\Windows\System32\dxgi.dll
00:10:29.0449 0x04a0  C:\Windows\System32\dxgi.dll - ok
00:10:29.0449 0x04a0  [ 38082C25FC60B10977AC729127A4463D, 4F6D3DCD33C6DA86E8AF74DADDBB78B87AB09627EAFF5193EA94C84747A8BF5A ] C:\Windows\System32\dwmapi.dll
00:10:29.0449 0x04a0  C:\Windows\System32\dwmapi.dll - ok
00:10:29.0449 0x04a0  [ FCCEDE04F10EC0B72321333FF928E5AF, 235ADDDD6EC0418AABA5A4159B66009CA9F3A08DC24FBCAAA867F083C2393819 ] C:\Windows\SysWOW64\ntdll.dll
00:10:29.0449 0x04a0  C:\Windows\SysWOW64\ntdll.dll - ok
00:10:29.0449 0x04a0  [ 941B22338052E8A0ADA7944B827E3E2A, 0EC2911E08348C951870AFFC1C83AAC7B5906A0BADE41F22F3F14DA8C8B11CB8 ] C:\Windows\SysWOW64\kernel32.dll
00:10:29.0449 0x04a0  C:\Windows\SysWOW64\kernel32.dll - ok
00:10:29.0449 0x04a0  [ 5A3BF11D81C7F7EE8EDE9A2430B70878, FCB465DB8A773A016A6D4F8460D4B48B54C4976E8CCEA3164296480493B08C95 ] C:\Windows\SysWOW64\KernelBase.dll
00:10:29.0449 0x04a0  C:\Windows\SysWOW64\KernelBase.dll - ok
00:10:29.0449 0x04a0  [ 4C84C8C217EB4AFE1DF9131BDE946EC7, 1955CB74072CE16C35AF5F0CE2409553395E3C752AA33E8CD21D4BDE41D10467 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportUtil.dll
00:10:29.0449 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportUtil.dll - ok
00:10:29.0464 0x04a0  [ BFEF608CD713A4CD3165D72E2AEB23F2, EBB4D0DC1F695A8A0B4C34AD7FB8099E5A769019FF838EFF1671DC23F048B717 ] C:\Windows\SysWOW64\advapi32.dll
00:10:29.0464 0x04a0  C:\Windows\SysWOW64\advapi32.dll - ok
00:10:29.0464 0x04a0  [ 58EE457D0D49A95A1E981F6F67FB560F, D02158F903713EC4B8CC5A8C8ACC340637150EE61FD89BD12E202B0C1242B0EB ] C:\Windows\SysWOW64\userenv.dll
00:10:29.0464 0x04a0  C:\Windows\SysWOW64\userenv.dll - ok
00:10:29.0464 0x04a0  [ 715A1F4D2A064DA1DDCAC2533FAF780F, DE0D0C6B373910CCAC4BCDBAEDB3EE8FFC69DF2A07BED383986242B73F348618 ] C:\Windows\SysWOW64\wtsapi32.dll
00:10:29.0464 0x04a0  C:\Windows\SysWOW64\wtsapi32.dll - ok
00:10:29.0464 0x04a0  [ EEBA695841A6D82E9BBF2900F5A765E0, AC5E895FAAECFB21FF724DB6A99FDBA2A5181EDF11B8AEA03F01C10D814A3F73 ] C:\Program Files (x86)\Trusteer\Rapport\bin\TRF.dll
00:10:29.0464 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\TRF.dll - ok
00:10:29.0464 0x04a0  [ BA1C3ACD929A71E88B49C2B6E38F92B3, A6087A8AE0C1440BC7C315D7A3AB40CBDC642AA5FB26B528CBC54FBB168839B8 ] C:\Windows\SysWOW64\user32.dll
00:10:29.0464 0x04a0  C:\Windows\SysWOW64\user32.dll - ok
00:10:29.0464 0x04a0  [ 2B529B7B7109BE07A9156B198F812E21, E3140AADC850BB1B25B850CFAD760F07EED5F1A806EFA896B9DC9F5FE9D05FBA ] C:\Windows\SysWOW64\shell32.dll
00:10:29.0464 0x04a0  C:\Windows\SysWOW64\shell32.dll - ok
00:10:29.0480 0x04a0  [ BEB9FF627ACB97F10D0B65D404D62C7A, 545B733976106942F35C2B33676FBFB9A1A23ACAF541D0E4A482E9651506664F ] C:\Windows\System32\d3d11.dll
00:10:29.0480 0x04a0  C:\Windows\System32\d3d11.dll - ok
00:10:29.0480 0x04a0  [ 6ADA7F192919DD51930A73F364129433, B56F5CFBC62EF6809A6941FB12E0A97EE137A05DFD16DFED6C2C7A959824EFB2 ] C:\Windows\SysWOW64\ole32.dll
00:10:29.0480 0x04a0  C:\Windows\SysWOW64\ole32.dll - ok
00:10:29.0480 0x04a0  [ 2C1467A6FF34E6E13920D9E546D47E50, F2236FD9ACE66A5B569DC7CC88A74FDD8285B8D82719CA373513050174A8BAB6 ] C:\Windows\SysWOW64\oleaut32.dll
00:10:29.0480 0x04a0  C:\Windows\SysWOW64\oleaut32.dll - ok
00:10:29.0480 0x04a0  [ 4C8A880EABC0B4D462CC4B2472116EA1, 2026F3C4F830DFF6883B88E2647272A52A132F25EB42C0D423E36B3F65A94D08 ] C:\Program Files (x86)\Trusteer\Rapport\bin\msvcp80.dll
00:10:29.0480 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\msvcp80.dll - ok
00:10:29.0480 0x04a0  [ E4FECE18310E23B1D8FEE993E35E7A6F, 02BDDE38E4C6BD795A092D496B8D6060CDBE71E22EF4D7A204E3050C1BE44FA9 ] C:\Program Files (x86)\Trusteer\Rapport\bin\msvcr80.dll
00:10:29.0480 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\msvcr80.dll - ok
00:10:29.0496 0x04a0  [ B8ECF8A56EEF75468F9ABFECE70AF555, 0B0F821595664D1B6671B4981025E151326CF24ACE433FAA5BF882E633B1CC2D ] C:\Windows\SysWOW64\shlwapi.dll
00:10:29.0496 0x04a0  C:\Windows\SysWOW64\shlwapi.dll - ok
00:10:29.0496 0x04a0  [ 682C3D4982B5375732A4273809365A0A, FA62EB00740311D631C8237DB40E2503B1C9FBAB050AA17970339995C54845BE ] C:\Windows\SysWOW64\version.dll
00:10:29.0496 0x04a0  C:\Windows\SysWOW64\version.dll - ok
00:10:29.0496 0x04a0  [ 3588D5D12FF7BFEBF2A4955C36B38EB0, A5B4531EF91F32A02CA13AA0ABD0A32DADB2B979876F2E2B2E7FCB116ABDF3C6 ] C:\Windows\SysWOW64\psapi.dll
00:10:29.0496 0x04a0  C:\Windows\SysWOW64\psapi.dll - ok
00:10:29.0496 0x04a0  [ 9284BA6C27D360D71A5C0ECC8456E78E, 1619E95E183AB48535158814826A4F87B1A67AC4777A1637124FCAEF04453768 ] C:\Windows\SysWOW64\wininet.dll
00:10:29.0496 0x04a0  C:\Windows\SysWOW64\wininet.dll - ok
00:10:29.0496 0x04a0  [ A2B03204078BBB32CDD3AF779717FCC4, 3B6E1867FD458042583A676D6A7E8884BB4D60080D70FBBC61ACBE595739C84C ] C:\Windows\SysWOW64\wsock32.dll
00:10:29.0496 0x04a0  C:\Windows\SysWOW64\wsock32.dll - ok
00:10:29.0496 0x04a0  [ 4B38E4C990EF80D03BEF9586F273C149, 466B80881758AA38C6A5772C150BBEA29E862FB87D5485467355E949F510F19B ] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_ba1cf6b7e09f1918\GdiPlus.dll
00:10:29.0496 0x04a0  C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_ba1cf6b7e09f1918\GdiPlus.dll - ok
00:10:29.0511 0x04a0  [ B3CC9EDFD97F7087013A9A47089DF571, D9D13A76621FFDBBAD5298C8FB5BFE136443FDE264977567839337EC21A9190D ] C:\Windows\SysWOW64\ws2_32.dll
00:10:29.0511 0x04a0  C:\Windows\SysWOW64\ws2_32.dll - ok
00:10:29.0511 0x04a0  [ 8EF66E7F4CEE23A30917D27C460CDB8D, 2F48089EAB69DF54E541E895C082868C68932579DCD0BCAE09F20F03B1BAC6A1 ] C:\Windows\SysWOW64\crypt32.dll
00:10:29.0511 0x04a0  C:\Windows\SysWOW64\crypt32.dll - ok
00:10:29.0511 0x04a0  [ 23787853DA559818AC593D470E27441E, 7F684F57FB19E96A66E67BF8611D942CD316E9D274A498321FB84493B88C0F2E ] C:\Windows\SysWOW64\gdi32.dll
00:10:29.0511 0x04a0  C:\Windows\SysWOW64\gdi32.dll - ok
00:10:29.0511 0x04a0  [ B59E9810F8A416B9E5354834F26969D4, 266896E8A1807D899633F7EB8A07B262A59B956368F1C42F0D7E933B21C60CF0 ] C:\Windows\SysWOW64\msvcrt.dll
00:10:29.0511 0x04a0  C:\Windows\SysWOW64\msvcrt.dll - ok
00:10:29.0511 0x04a0  [ DDF8C39C085D2E98BD030B3E8A1F40B8, 10EC29D288CD416D7E4D04171E820210B661BE99A4EC00567D7C986901257681 ] C:\Windows\SysWOW64\secur32.dll
00:10:29.0511 0x04a0  C:\Windows\SysWOW64\secur32.dll - ok
00:10:29.0527 0x04a0  [ B4CB5AE28AD921DBB2BB5D0A6D1FDD9D, 763C35E365B2F5F355AB7377C76DB11EC49E1477168E73F3668C9C11F9C654CA ] C:\Windows\SysWOW64\rpcrt4.dll
00:10:29.0527 0x04a0  C:\Windows\SysWOW64\rpcrt4.dll - ok
00:10:29.0527 0x04a0  [ 08B3A62B406421E7D4A03B2F93F6CFDA, D57E90D901044644454ABBC69EC76B312031FE6979E248249DF48CEC9B049257 ] C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef\comctl32.dll
00:10:29.0527 0x04a0  C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef\comctl32.dll - ok
00:10:29.0527 0x04a0  [ D05FDB359808642231FC244CD06E8E4C, A0E4B6DC899309508450BB122B62F945DCB7A7C0178039285B15B112A4B517D7 ] C:\Windows\System32\d3d10warp.dll
00:10:29.0527 0x04a0  C:\Windows\System32\d3d10warp.dll - ok
00:10:29.0527 0x04a0  [ C3DD7D527E57BDACE264BFE3FB993AF5, 65D8234B36532FDD6B83A126D61067C473913EB5A7650BE0D22E75BFD83FD66F ] C:\Windows\System32\igdumd64.dll
00:10:29.0527 0x04a0  C:\Windows\System32\igdumd64.dll - ok
00:10:29.0527 0x04a0  [ F2F6018D867767464414F90E392DF600, 0A2D32496EB56246D66C24792AE118B42EB9F6832793E177A1E1734E9592B9FB ] C:\Windows\System32\igd10umd64.dll
00:10:29.0527 0x04a0  C:\Windows\System32\igd10umd64.dll - ok
00:10:29.0527 0x04a0  [ 0E0A4CDB1258FF435D96BA51AB329B7A, 5EBEBE1220E070847677A3C3A91EA7A8CDE663467335A9E7E801DFFD97E14EC2 ] C:\Windows\System32\duser.dll
00:10:29.0527 0x04a0  C:\Windows\System32\duser.dll - ok

Link to post
Share on other sites

00:10:29.0543 0x04a0  [ D39F1714D8944A0AC590B08F5A2DD0E7, 2A642B28DBE1B855D3A1E35E08C07DA4A57EA643C33EA8519611B483AF091D40 ] C:\Windows\System32\SndVolSSO.dll
00:10:29.0543 0x04a0  C:\Windows\System32\SndVolSSO.dll - ok
00:10:29.0543 0x04a0  [ B5FEAE9A8C299EB6D1B6D810CDB4A9A7, 583C67C3A72BB444D9B5E0515E8AE86875331454A28403218388507DA263691A ] C:\Windows\System32\MMDevAPI.dll
00:10:29.0543 0x04a0  C:\Windows\System32\MMDevAPI.dll - ok
00:10:29.0543 0x04a0  [ 7ACA8A8C9180334B88C402F8FB5FC517, F858EF10B3F8B9493BC208B8D956F36BAD338A216066601CE5EB233E244FD329 ] C:\Windows\System32\BCP47Langs.dll
00:10:29.0543 0x04a0  C:\Windows\System32\BCP47Langs.dll - ok
00:10:29.0543 0x04a0  [ 156B8769D44187090781DFA9FED1AE18, E78130BD3771344D15785D4F73012E107EAE8350D203C9DD6147993A36A548F6 ] C:\Windows\System32\SmartcardCredentialProvider.dll
00:10:29.0543 0x04a0  C:\Windows\System32\SmartcardCredentialProvider.dll - ok
00:10:29.0543 0x04a0  [ C98F6286818474AB284144A73EC7BA6D, 34FBB46A9F1676FC977C9E624C0568589F8869D9B3CAAF7101FFCBAD91DD58EB ] C:\Windows\System32\cngcredui.dll
00:10:29.0543 0x04a0  C:\Windows\System32\cngcredui.dll - ok
00:10:29.0543 0x04a0  [ 3E57DE8477F6F851B43904B50B1816C5, 7ECF255AEFCD35602F2182D5748D88445EA0FECFDEA14F7CA0F4665D404CE89F ] C:\Windows\System32\DWrite.dll
00:10:29.0558 0x04a0  C:\Windows\System32\DWrite.dll - ok
00:10:29.0558 0x04a0  [ D142894EBEFD276A5CFE876884A6E3F9, 23C70855328491916519D9193CE066BE08BAC4ACD3486CBF4239DDD38AC3CFFA ] C:\Windows\System32\uDWM.dll
00:10:29.0558 0x04a0  C:\Windows\System32\uDWM.dll - ok
00:10:29.0558 0x04a0  [ 2C71C009DFAC4C6EE7795C6C042090B4, F4BA7EA954F735E9B61CCFF99D319F618FA16688191CC8ECC5D923B4DE29E554 ] C:\Windows\System32\slc.dll
00:10:29.0558 0x04a0  C:\Windows\System32\slc.dll - ok
00:10:29.0558 0x04a0  [ 828CFD406E60311A9E5414685FA7EEDF, 2561C970B9DF4E1BBD701866D6FD77509B18E0063DC250E61B868C5C7CCB4759 ] C:\Windows\SysWOW64\combase.dll
00:10:29.0558 0x04a0  C:\Windows\SysWOW64\combase.dll - ok
00:10:29.0558 0x04a0  [ 7D2306701584AE7B77B8622314B55F78, 89E250231402D7C3685E3A120BAE1F2D4280CE44F2760F8658144ADDB7D86882 ] C:\Windows\SysWOW64\profapi.dll
00:10:29.0558 0x04a0  C:\Windows\SysWOW64\profapi.dll - ok
00:10:29.0558 0x04a0  [ 496E036F16467D7B7D12E0794E9FB85D, 33A26F4DD38AEE725E03B3E88D762D4D6171E52E91CE787930EC47045A1B28DC ] C:\Windows\SysWOW64\sechost.dll
00:10:29.0558 0x04a0  C:\Windows\SysWOW64\sechost.dll - ok
00:10:29.0574 0x04a0  [ 24E07A483C6FA35F91E9D2F84495819E, DB77A32D91117159250EDA17ED722C7B6A48323F74BA1BF935EE7BF5CCDB2FC5 ] C:\Windows\SysWOW64\iertutil.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\iertutil.dll - ok
00:10:29.0574 0x04a0  [ 0D3C6E1A7EBD401F46E00EDBD61D1A72, 54375377F13A2F686B605812319715523868E978D427C296AD3B74E05BDC0B55 ] C:\Windows\SysWOW64\cryptbase.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\cryptbase.dll - ok
00:10:29.0574 0x04a0  [ AFAACBE85092FBD8EE7F54CA7FF3F0F1, BD79E678B1FAA611A9855507B3C02175448D8EA335D52FF93520F1865FF88523 ] C:\Windows\SysWOW64\msasn1.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\msasn1.dll - ok
00:10:29.0574 0x04a0  [ 1AFB56F8A39455ACBAB16A29A45C30AC, 2EF2A0DECC9654EE6D265CE6D03DE72C3BB559401731091B97C1962241134CEC ] C:\Windows\SysWOW64\nsi.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\nsi.dll - ok
00:10:29.0574 0x04a0  [ 39B721A0FB5F3E9880EE247F04012D8C, FB0DF4CD6A130E2A40F3EDC7C1D8079F1C677D62952E7790C4853FC5E1EF4090 ] C:\Windows\SysWOW64\sspicli.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\sspicli.dll - ok
00:10:29.0574 0x04a0  [ 7DFC3FCD0D5B7FC2F60C344BB384607C, B034A9B7D348C4C438F50E0A5616C2F538F29C6B520C74F17A7154FF2819ACEA ] C:\Windows\SysWOW64\bcryptprimitives.dll
00:10:29.0574 0x04a0  C:\Windows\SysWOW64\bcryptprimitives.dll - ok
00:10:29.0589 0x04a0  [ 51E886381803D55926A6D50643B9436C, B4AB1D1E7740DE87D7FE5229A43D22546FCEA27F9A92286DE6B2AFE35F15A761 ] C:\Windows\SysWOW64\imm32.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\imm32.dll - ok
00:10:29.0589 0x04a0  [ D8FED3E93970890FC25C5D378E6A5BD6, 76BF604DF0967016ADF6BB2A6AC9D20607AEC882E159F24D40651676C2FB8E94 ] C:\Windows\SysWOW64\msctf.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\msctf.dll - ok
00:10:29.0589 0x04a0  [ 62601FF7577D8CC2132D26BDF6B4997F, C1992C3EA15639E38868AB9BAF64DC35EBFFA985A7ECB9ADD381677D26BBB5E1 ] C:\Windows\SysWOW64\SHCore.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\SHCore.dll - ok
00:10:29.0589 0x04a0  [ 7D20883F79FF846AEE49678238BE8A7A, B0C8752AA25FA32E4D313C041BC9869FC076E971ABCCF14CFCBF685F47B0456D ] C:\Windows\SysWOW64\cryptsp.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\cryptsp.dll - ok
00:10:29.0589 0x04a0  [ 434D27871C24D123038BCE8507010276, DB8810EE1D6F942DA2240699A18A22683963ABF839AC1EFC0C04469354273A5B ] C:\Windows\SysWOW64\rsaenh.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\rsaenh.dll - ok
00:10:29.0589 0x04a0  [ 5192F9A06BC32684ADF938EE16E118D9, 36BBC1B76E3A027DCE485761567A8BB606C86160783E8D9EC3E52F1B316006AD ] C:\Windows\SysWOW64\ntmarta.dll
00:10:29.0589 0x04a0  C:\Windows\SysWOW64\ntmarta.dll - ok
00:10:29.0605 0x04a0  [ 855D7BA4DC79E4157651FF5B23B41FD0, 81CDD8271D5C82B847BAFD3AA26565ECF918EE5DE1B13845FC5A3626ABD42665 ] C:\Windows\System32\UIAnimation.dll
00:10:29.0605 0x04a0  C:\Windows\System32\UIAnimation.dll - ok
00:10:29.0605 0x04a0  [ 7FA8C13A62CAEB2D84A731030DC1B866, CDDD1F4E96D215BC07FEEC79E54D42BBA8F9C3D5490A9CCB7A5F8098F45483C0 ] C:\Windows\System32\oleacc.dll
00:10:29.0605 0x04a0  C:\Windows\System32\oleacc.dll - ok
00:10:29.0605 0x04a0  [ 21E796CF2D1B8A6FAA2347B0070316CE, 6E6B2441FA1B7D64B6A26E19472686F58627AAC5D65D23A753D9DD46624C1146 ] C:\Windows\System32\winbrand.dll
00:10:29.0605 0x04a0  C:\Windows\System32\winbrand.dll - ok
00:10:29.0605 0x04a0  [ 439580916E49358F8BE33005E98E4B1F, 88C7E7EB90FAD41CBDADAC2CEF0A174DB2D295F2E509A492ABEDB70FDB242C79 ] C:\Windows\System32\BioCredProv.dll
00:10:29.0605 0x04a0  C:\Windows\System32\BioCredProv.dll - ok
00:10:29.0605 0x04a0  [ 77DA2B3F012A1F0D88F29C612F606F28, 0D98A159E1D8985D2E041456F08ED268AB18C3CBF1635BC80F006C356A4F17DA ] C:\Windows\System32\winbio.dll
00:10:29.0605 0x04a0  C:\Windows\System32\winbio.dll - ok
00:10:29.0605 0x04a0  [ 5C96F30D1144AB5D8F03DFF045B8C791, EB2705DB5BDA2BFC458635194EF914B26B9E31FD969F4206EACFB61B29261096 ] C:\Windows\SysWOW64\netapi32.dll
00:10:29.0605 0x04a0  C:\Windows\SysWOW64\netapi32.dll - ok
00:10:29.0621 0x04a0  [ 7FFC244DFE77909A13F52CF54B1FE475, 5994B8747CBF82E7BA54ECB370D6E66A4FC941775A09FE56A1EA70C4BCB8DE85 ] C:\Windows\SysWOW64\netutils.dll
00:10:29.0621 0x04a0  C:\Windows\SysWOW64\netutils.dll - ok
00:10:29.0621 0x04a0  [ D8533AF2AAE712047A3CCAC9AC98EDC4, F9AE92E0C151020C6219FAC30B7A303AE7C494199795A7B88B23CB52A0FA9F31 ] C:\Windows\SysWOW64\srvcli.dll
00:10:29.0621 0x04a0  C:\Windows\SysWOW64\srvcli.dll - ok
00:10:29.0621 0x04a0  [ 182DD861AD25CD72AE6F3B54AE7AA8AD, 4AC95A181AE344B243FE8E90E5A1076BE6F20B8B5258219451AE144203568B02 ] C:\Windows\SysWOW64\wkscli.dll
00:10:29.0621 0x04a0  C:\Windows\SysWOW64\wkscli.dll - ok
00:10:29.0621 0x04a0  [ CE0884D5E82E48F0959BEE3006BEA0E1, 4D6E115B40FBEE9A11F3E989C996CD403D356B88F27DE2A5521D6A7C7F615945 ] C:\Windows\System32\certCredProvider.dll
00:10:29.0621 0x04a0  C:\Windows\System32\certCredProvider.dll - ok
00:10:29.0621 0x04a0  [ B9868B46EC3A67EF9B85B9437DB2CB65, 69D3636BEB9DA5C96B989F3C70F75380F568BC78FDEEA755C965516B934D3D65 ] C:\Windows\System32\d2d1.dll
00:10:29.0621 0x04a0  C:\Windows\System32\d2d1.dll - ok
00:10:29.0621 0x04a0  [ 15E300200794A8FC38589B44A0B314D6, 5083ABE1F777938FB310EA7A584BE2DBFC2B74C780DDA54A6B32D71591D11F42 ] C:\Windows\System32\xmllite.dll
00:10:29.0621 0x04a0  C:\Windows\System32\xmllite.dll - ok
00:10:29.0636 0x04a0  [ 1D03DD2BA438D4B3E1A0289738619056, 598DD04E851566E38496A7BC671BB0AF2D8C88BFAE1A6734AD570516AEE9F050 ] C:\Windows\System32\wlidcredprov.dll
00:10:29.0636 0x04a0  C:\Windows\System32\wlidcredprov.dll - ok
00:10:29.0636 0x04a0  [ EC7C1F9882A5E2F4C5391DDC43582110, AECFDC57EEFE492749B5167C16AF7773F8E19227EEDD5F5822AED494C2F49204 ] C:\Windows\System32\rasplap.dll
00:10:29.0636 0x04a0  C:\Windows\System32\rasplap.dll - ok
00:10:29.0636 0x04a0  [ 6E578460E165F14D9BA473ED54E3299B, 9C479BFC6D6D06509233A47513563E614909DE550D67BDD249B1D1BFB81CA4EA ] C:\Windows\System32\rasapi32.dll
00:10:29.0636 0x04a0  C:\Windows\System32\rasapi32.dll - ok
00:10:29.0636 0x04a0  [ 4E251FE2729D6A3FCCC87DC13F823DC2, 70F2D7A4EC3E6CDAC4D644FDBCB2DB3019FF0860E336C52F9CC821DED0AA8221 ] C:\Windows\System32\rtutils.dll
00:10:29.0636 0x04a0  C:\Windows\System32\rtutils.dll - ok
00:10:29.0636 0x04a0  [ 8C988C29CFB9B3673E882B4DA5EEC81D, 93C6FC9ECC08DB44FF1CE1EEB19B9C8A7D58A2B89D467EEE9223B86B55409DE1 ] C:\Windows\System32\rasman.dll
00:10:29.0636 0x04a0  C:\Windows\System32\rasman.dll - ok
00:10:29.0652 0x04a0  [ 58FE249FBABBA09A98EBAF28B0E0C382, B6B12B92B8AB821EF64F78DBBA75E166EFF9F6192B35C1D150CCE45BFB0C06DE ] C:\Windows\System32\UIAutomationCore.dll
00:10:29.0652 0x04a0  C:\Windows\System32\UIAutomationCore.dll - ok
00:10:29.0652 0x04a0  [ 10FAE4240EB37E32B3E027CAB5101FA8, D173A108F32F0528AA3147EFF9344C75167D95D1E0C8D6DFAB47096D0C645C5A ] C:\Windows\SysWOW64\samlib.dll
00:10:29.0652 0x04a0  C:\Windows\SysWOW64\samlib.dll - ok
00:10:29.0652 0x04a0  [ 83C4E13852335E1EAC12AA62A2F01E52, 3647F74F779F7298E08117EEA7C7C03AB99AA2177649E8FE7C9DDC4ECC9A2380 ] C:\Windows\SysWOW64\winsta.dll
00:10:29.0652 0x04a0  C:\Windows\SysWOW64\winsta.dll - ok
00:10:29.0652 0x04a0  [ 1EC16D86801AF0D1B5BCB7BBD08BFEE2, A1A038CC506DEA7F3B91157990872C2D0ADA385D13FB1B6E74D132BAFE8F32BE ] C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\KoanLight.dll
00:10:29.0652 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\KoanLight.dll - ok
00:10:29.0652 0x04a0  [ 41E843174754F87D86EF0FBF7F60DB0D, C5FEC9110FE8B7587787987AF858097324B0FC8978D6548CB0084C1870BE116D ] C:\Windows\SysWOW64\oleacc.dll
00:10:29.0652 0x04a0  C:\Windows\SysWOW64\oleacc.dll - ok
00:10:29.0652 0x04a0  [ 4C8A880EABC0B4D462CC4B2472116EA1, 2026F3C4F830DFF6883B88E2647272A52A132F25EB42C0D423E36B3F65A94D08 ] C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\msvcp80.dll
00:10:29.0652 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\msvcp80.dll - ok
00:10:29.0668 0x04a0  [ E4FECE18310E23B1D8FEE993E35E7A6F, 02BDDE38E4C6BD795A092D496B8D6060CDBE71E22EF4D7A204E3050C1BE44FA9 ] C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\msvcr80.dll
00:10:29.0668 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\msvcr80.dll - ok
00:10:29.0668 0x04a0  [ 3C7DEF3CBBCA6284867AA4621D5D8A54, DB18738202DCDA842DCE505ECD0B858D7B4C55886CAC29827305F0DC3839143A ] C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\atl80.dll
00:10:29.0668 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\KoanLight\baseline\atl80.dll - ok
00:10:29.0668 0x04a0  [ 9EBAB3697E9A44291ECD532A5DFC8732, FA01CB1E3FF17EFAEFA48E568CFFA58922017F652B46DD6B7C7738DA24AD35AF ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus.dll
00:10:29.0668 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus.dll - ok
00:10:29.0668 0x04a0  [ F7A43B51E2C1D7C332FB17D0A804AF60, 519B9F6177E7EB398294604ABDA6786CBE31198EA28B809877DF8D12F9C674B8 ] C:\Windows\SysWOW64\wintrust.dll
00:10:29.0668 0x04a0  C:\Windows\SysWOW64\wintrust.dll - ok
00:10:29.0668 0x04a0  [ 07CFA2D6E8BB6EA2B6B5EDC4429A365D, 24AE6D2F734E4CADE7EA55301301DBB6DEB5F7EB47B23E11F0E6BA5833DB4598 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\RapportGP.dll
00:10:29.0668 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\RapportGP.dll - ok
00:10:29.0683 0x04a0  [ 4C8A880EABC0B4D462CC4B2472116EA1, 2026F3C4F830DFF6883B88E2647272A52A132F25EB42C0D423E36B3F65A94D08 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\msvcp80.dll
00:10:29.0683 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\msvcp80.dll - ok
00:10:29.0683 0x04a0  [ E4FECE18310E23B1D8FEE993E35E7A6F, 02BDDE38E4C6BD795A092D496B8D6060CDBE71E22EF4D7A204E3050C1BE44FA9 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\msvcr80.dll
00:10:29.0683 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\msvcr80.dll - ok
00:10:29.0683 0x04a0  [ 9E771B590FF7C76EB75A81D213A01172, EFFAC5D75492AED3107A2D386FD63CB6CC61ACDDE4FD9E4A547B718FE4EF2262 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll
00:10:29.0683 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll - ok
00:10:29.0683 0x04a0  [ 519BEC37CD450548555FC0417AA8BB40, 971A34BE6612A40B8ECB2E2DFC85F744317DBCF0D5F2F498BED3AD5A76CBDC0C ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\RapportVB.dll
00:10:29.0683 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\RapportVB.dll - ok
00:10:29.0683 0x04a0  [ C2C86942ED94D1CD81F61BEFB3036AF6, CD2E2243AF04D7E7A3E3F78D9B39C7049CD53F1992BF691A1EC4C5CA5FE17C5C ] C:\Windows\SysWOW64\comdlg32.dll
00:10:29.0683 0x04a0  C:\Windows\SysWOW64\comdlg32.dll - ok
00:10:29.0683 0x04a0  [ 4C8A880EABC0B4D462CC4B2472116EA1, 2026F3C4F830DFF6883B88E2647272A52A132F25EB42C0D423E36B3F65A94D08 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\msvcp80.dll
00:10:29.0683 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\msvcp80.dll - ok
00:10:29.0699 0x04a0  [ E4FECE18310E23B1D8FEE993E35E7A6F, 02BDDE38E4C6BD795A092D496B8D6060CDBE71E22EF4D7A204E3050C1BE44FA9 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\msvcr80.dll
00:10:29.0699 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\msvcr80.dll - ok
00:10:29.0699 0x04a0  [ 1136EC767D7915D0F945E38BBC64024C, E91F56D9F55CCA067439620B4611DCCA2F5449DE9C0EB1D10C34877A6DF44F0A ] C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9200.16658_none_bf1359a245f1cd12\comctl32.dll
00:10:29.0699 0x04a0  C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9200.16658_none_bf1359a245f1cd12\comctl32.dll - ok
00:10:29.0699 0x04a0  [ 7EF5A70138F7007478FFBBF945BDF809, 9D99BBD3C7D4DB1D10666594C1DAC16FF83095C591E0DEEC9ACDA428EC064DE0 ] C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\TanzanLight.dll
00:10:29.0699 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\TanzanLight.dll - ok
00:10:29.0699 0x04a0  [ 4C8A880EABC0B4D462CC4B2472116EA1, 2026F3C4F830DFF6883B88E2647272A52A132F25EB42C0D423E36B3F65A94D08 ] C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\msvcp80.dll
00:10:29.0699 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\msvcp80.dll - ok
00:10:29.0699 0x04a0  [ E4FECE18310E23B1D8FEE993E35E7A6F, 02BDDE38E4C6BD795A092D496B8D6060CDBE71E22EF4D7A204E3050C1BE44FA9 ] C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\msvcr80.dll
00:10:29.0699 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\msvcr80.dll - ok
00:10:29.0699 0x04a0  [ 3C7DEF3CBBCA6284867AA4621D5D8A54, DB18738202DCDA842DCE505ECD0B858D7B4C55886CAC29827305F0DC3839143A ] C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\atl80.dll
00:10:29.0699 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\TanzanLight\baseline\atl80.dll - ok
00:10:29.0714 0x04a0  [ 11EA2B2C58E38BDBBEC4298BCEE40A59, BE7EB8717B6E82879398058E85F4B58969C469B4FC14EE4B8B174B13D7F0487B ] C:\Windows\System32\wevtsvc.dll
00:10:29.0714 0x04a0  C:\Windows\System32\wevtsvc.dll - ok
00:10:29.0714 0x04a0  [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] C:\Windows\System32\gpsvc.dll
00:10:29.0714 0x04a0  C:\Windows\System32\gpsvc.dll - ok
00:10:29.0714 0x04a0  [ F0C56FAF38A244599CBC173D581E27FC, 6F2A2DDB435E52450C60B4432D1020088ABFAFCD2D06697FC24D39CC6CA08509 ] C:\Windows\System32\nlaapi.dll
00:10:29.0714 0x04a0  C:\Windows\System32\nlaapi.dll - ok
00:10:29.0714 0x04a0  [ 429E8502AD2227CF88F8840FC5BD590D, A186DA46C083580ACEDE9C7E3156865034302CD803140EEEC8E1DE16DA4BC99B ] C:\Windows\System32\profsvc.dll
00:10:29.0714 0x04a0  C:\Windows\System32\profsvc.dll - ok
00:10:29.0714 0x04a0  [ 91E1A704990CEE32FFFBDF8AB8C258E4, 7FAC1A8A21E7C4F15F54F882CA2166B4C2BD92C52D691824F54F37D7A9283B00 ] C:\Windows\System32\dsrole.dll
00:10:29.0714 0x04a0  C:\Windows\System32\dsrole.dll - ok
00:10:29.0730 0x04a0  [ 91F2CB5172B120F7BE0645882D4427C8, 6C7BD71AAC26C4244C96EDEBB47CF93638D2C28C8A85012814A31A31173D081F ] C:\Windows\System32\profsvcext.dll
00:10:29.0730 0x04a0  C:\Windows\System32\profsvcext.dll - ok
00:10:29.0730 0x04a0  [ 519A6F672FFF56B7D8EE8C730CEC8ECD, 2B36F10C0AE16A261DC0887B1050808BA1F0568F3879E4ABC3D370F08C3FADB7 ] C:\Windows\System32\themeservice.dll
00:10:29.0730 0x04a0  C:\Windows\System32\themeservice.dll - ok
00:10:29.0730 0x04a0  [ BB6591EA99CBCD17989CBF04214DD7E8, 860ED35BE8697B7ED89E8BC1A6AECE5F40FBF9CD2B0C10B4E510C88DB6795661 ] C:\Windows\System32\ntdsapi.dll
00:10:29.0730 0x04a0  C:\Windows\System32\ntdsapi.dll - ok
00:10:29.0730 0x04a0  [ F235600515AD6CBE06DB440FBB7C8E01, F5241F9388EC8D7C470DCEC07E4B307B80CB55DC9FF5638A2EB5AE32D79A6E20 ] C:\Windows\System32\atl.dll
00:10:29.0730 0x04a0  C:\Windows\System32\atl.dll - ok
00:10:29.0730 0x04a0  [ D70E930E67968D0F849333841DDBA02B, D671D8176E9AB24A294F6389D4CDB08C795D3C4E63186600412AF88EA3112CED ] C:\Windows\System32\netapi32.dll
00:10:29.0730 0x04a0  C:\Windows\System32\netapi32.dll - ok
00:10:29.0730 0x04a0  [ 4A945F0177124D653B5EF975D11DA9F8, 15ABE16F232F34E8539AD9E9A926067E7829AC9BAABE925F03F12029247AE56E ] C:\Windows\System32\dfscli.dll
00:10:29.0730 0x04a0  C:\Windows\System32\dfscli.dll - ok
00:10:29.0746 0x04a0  [ FC414C8C91848FACFD6514AEF88A5ABA, E00EF2380FEAD83A23A8720BDA16FB7218C1B8D5C5EE6FDA3B446D75364CC7A1 ] C:\Windows\System32\wkscli.dll
00:10:29.0746 0x04a0  C:\Windows\System32\wkscli.dll - ok
00:10:29.0746 0x04a0  [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] C:\Windows\System32\es.dll
00:10:29.0746 0x04a0  C:\Windows\System32\es.dll - ok
00:10:29.0746 0x04a0  [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] C:\Windows\System32\Sens.dll
00:10:29.0746 0x04a0  C:\Windows\System32\Sens.dll - ok
00:10:29.0746 0x04a0  [ BCD7A47EF587DC00DD61D12D9C2D1E44, 95BC9AC8BA8A86DB5C7A6317002BD9872F193B401A0C58DF252DCF3D4A7541E2 ] C:\Windows\System32\AudioEndpointBuilder.dll
00:10:29.0746 0x04a0  C:\Windows\System32\AudioEndpointBuilder.dll - ok
00:10:29.0746 0x04a0  [ 37843E6888569097918544F0338BC19D, C9FCBE51494225FBEFDC8A7D863CE5FD7318E454F13D066D719F415D9F3786A4 ] C:\Windows\System32\avrt.dll
00:10:29.0746 0x04a0  C:\Windows\System32\avrt.dll - ok
00:10:29.0746 0x04a0  [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] C:\Windows\System32\FntCache.dll
00:10:29.0746 0x04a0  C:\Windows\System32\FntCache.dll - ok
00:10:29.0761 0x04a0  [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] C:\Windows\System32\mmcss.dll
00:10:29.0761 0x04a0  C:\Windows\System32\mmcss.dll - ok
00:10:29.0761 0x04a0  [ 4B249FD266D2FF17EE8809EB46A173A6, 7DA4CBC84F905BE6E76C9554642549A3D98C1BED4D3AA41E3D36FA5B27BF3E38 ] C:\Windows\System32\taskschd.dll
00:10:29.0761 0x04a0  C:\Windows\System32\taskschd.dll - ok
00:10:29.0761 0x04a0  [ F452B51D895D894BF5487057E11D44CF, 4B4F54646B1069EA27D4A4F17CB85A66FF7B36A6087F3D07F12221B29DFBF8F2 ] C:\Program Files\IDT\WDM\stacsv64.exe
00:10:29.0761 0x04a0  C:\Program Files\IDT\WDM\stacsv64.exe - ok
00:10:29.0761 0x04a0  [ BBFFB477EA4470766227D00C6B01E715, D7F2C3BABACD80D8BF88E14BC4269DC119116AC291CC2C6AB7ECC0F23FFE6C4F ] C:\Windows\System32\dsound.dll
00:10:29.0761 0x04a0  C:\Windows\System32\dsound.dll - ok
00:10:29.0761 0x04a0  [ 827AE73CD7CB3A8292A50EF39169071F, B54F2A5F650B3ECEDFE2D8279F545308C8604BBD31ED30D4FD7FDBD643269324 ] C:\Windows\System32\winmm.dll
00:10:29.0761 0x04a0  C:\Windows\System32\winmm.dll - ok
00:10:29.0761 0x04a0  [ 0ABF97013CA7400213DCBDC7B499AF85, 3C1165DC451BC1EF48FDF743C83B85C3E476A6EEF10F4F69339BD94FB01001F1 ] C:\Windows\System32\winmmbase.dll
00:10:29.0761 0x04a0  C:\Windows\System32\winmmbase.dll - ok
00:10:29.0777 0x04a0  [ CCE6519EA7FDFA28C76AA207AEFEADB5, CB398E7B6B0A825947AF0C030268958A41FAB822308D3EE52D3E3A10BC6C75EA ] C:\Windows\System32\stapi64.dll
00:10:29.0777 0x04a0  C:\Windows\System32\stapi64.dll - ok
00:10:29.0777 0x04a0  [ 599B3F685A263A114FFAF3BE29C49C75, 579E9561BA8537888E061E303F3F89E2E6F8B8DED74369C3767DB10B35CD45E8 ] C:\Windows\System32\audiosrv.dll
00:10:29.0777 0x04a0  C:\Windows\System32\audiosrv.dll - ok
00:10:29.0777 0x04a0  [ 78DF3884149D09A3E703DDCA91BFFD84, 7ED4E1B4B72A66124186D9C9F7499320C8BCE4BC5896D68AD6E889C4EC20B9A6 ] C:\Windows\System32\AudioSes.dll
00:10:29.0777 0x04a0  C:\Windows\System32\AudioSes.dll - ok
00:10:29.0777 0x04a0  [ 55FFCBB036D7BE4BCA6FA1421203A27F, 5BB865FC631390F59AF5F2452D4D2DA47E34A49E194C8010E942F5A2013F3895 ] C:\Windows\System32\hpservice.exe
00:10:29.0777 0x04a0  C:\Windows\System32\hpservice.exe - ok
00:10:29.0777 0x04a0  [ D90555A2344D05E839F22CE3896E190D, C46DE07BD6AE51348B6F11FB60149CAC0D54D2412EC620919F1B2FE756BA8DF7 ] C:\Windows\System32\mfc42u.dll
00:10:29.0777 0x04a0  C:\Windows\System32\mfc42u.dll - ok
00:10:29.0793 0x04a0  [ 998BC4E7EBEF6E32D96CE0CB824B8CDB, 578B6A7ECA89D5C33F481B91EA403A29CBA5FABF7CD011FCB3F4BE2026210E19 ] C:\Windows\System32\accelerometerdll.DLL
00:10:29.0793 0x04a0  C:\Windows\System32\accelerometerdll.DLL - ok
00:10:29.0793 0x04a0  [ 08DE98E814902B495D893F8BD7F07F42, 6AEF6BA3CF982DEEA99BE0FF0259AAFC53A110701543031298950B9734FA5D80 ] C:\Windows\System32\odbc32.dll
00:10:29.0793 0x04a0  C:\Windows\System32\odbc32.dll - ok
00:10:29.0793 0x04a0  [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] C:\Windows\System32\Drivers\lltdio.sys
00:10:29.0793 0x04a0  C:\Windows\System32\Drivers\lltdio.sys - ok
00:10:29.0793 0x04a0  [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] C:\Windows\System32\Drivers\ndisuio.sys
00:10:29.0793 0x04a0  C:\Windows\System32\Drivers\ndisuio.sys - ok
00:10:29.0793 0x04a0  [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] C:\Windows\System32\Drivers\nwifi.sys
00:10:29.0793 0x04a0  C:\Windows\System32\Drivers\nwifi.sys - ok
00:10:29.0808 0x04a0  [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] C:\Windows\System32\Drivers\rspndr.sys
00:10:29.0808 0x04a0  C:\Windows\System32\Drivers\rspndr.sys - ok
00:10:29.0808 0x04a0  [ 04A9D55BDCD79EBB2F32D91FE5946C28, A295750E156760FD28E02ED83E8DBA0731BD90C9374F3D735A80D7472D2FE95A ] C:\Windows\System32\IPHLPAPI.DLL
00:10:29.0808 0x04a0  C:\Windows\System32\IPHLPAPI.DLL - ok
00:10:29.0808 0x04a0  [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] C:\Windows\System32\lmhsvc.dll
00:10:29.0808 0x04a0  C:\Windows\System32\lmhsvc.dll - ok
00:10:29.0808 0x04a0  [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] C:\Windows\System32\nsisvc.dll
00:10:29.0808 0x04a0  C:\Windows\System32\nsisvc.dll - ok
00:10:29.0808 0x04a0  [ F28C7A1A04C73FD099CBA2441B07842D, 2680D367DF0FDEDAF88DEE6D177225701682742E8702125D8E85C4BFA520BD75 ] C:\Windows\System32\nrpsrv.dll
00:10:29.0808 0x04a0  C:\Windows\System32\nrpsrv.dll - ok
00:10:29.0808 0x04a0  [ AF1349386D4C6786EF4E34FACEF15042, 6B33778409BC54C1955B92508ADDEBAFD629141961B71C94A91DC4CFE8391A13 ] C:\Windows\System32\wcmsvc.dll
00:10:29.0824 0x04a0  C:\Windows\System32\wcmsvc.dll - ok
00:10:29.0824 0x04a0  [ 0911A3B2DE545EA2498E560D745B7E71, 9A32494AD2D8B9166B81543A2D602AFA15944CC25084CC3F704ED93C52227FD0 ] C:\Windows\System32\winnsi.dll
00:10:29.0824 0x04a0  C:\Windows\System32\winnsi.dll - ok
00:10:29.0824 0x04a0  [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] C:\Windows\System32\dhcpcore.dll
00:10:29.0824 0x04a0  C:\Windows\System32\dhcpcore.dll - ok
00:10:29.0824 0x04a0  [ 6351724B8FA0255C2DBD970297F00B93, A02F274479F9F32E30C75A5BD991B008B3CCB47D380D5870563EF918DAC5730E ] C:\Windows\System32\wlansvc.dll
00:10:29.0824 0x04a0  C:\Windows\System32\wlansvc.dll - ok
00:10:29.0824 0x04a0  [ 8C7D71CE2F03E8CD6F1045D9275E6E1D, 032DDC966851D87133A7B34D4DDDC517E0657BE160BD415AB2BB87DB2B24FCC8 ] C:\Windows\System32\wcmcsp.dll
00:10:29.0824 0x04a0  C:\Windows\System32\wcmcsp.dll - ok
00:10:29.0824 0x04a0  [ ACB80C69E775A1EA1D0500CE8C72FD69, 3AC431A3CE0ADF07C8BF33E9DB94F64297947E37F4CB318DE14C47245F066DC2 ] C:\Windows\System32\dhcpcore6.dll
00:10:29.0824 0x04a0  C:\Windows\System32\dhcpcore6.dll - ok
00:10:29.0839 0x04a0  [ 066B9710B36AB550E01EEFCA52155968, DCA9F3F4856A6866D3F5A2EEE34E96A83F40198DB0B5AC6381A7568DE1F56FAB ] C:\Windows\System32\dnsrslvr.dll
00:10:29.0839 0x04a0  C:\Windows\System32\dnsrslvr.dll - ok
00:10:29.0839 0x04a0  [ 103E609A08474C43C04FB064440FCAE7, 5621577B397F656273FF71DA7DD50B2AD40C83B2AD14FB41F91BDC92E0F70A75 ] C:\Windows\System32\shacct.dll
00:10:29.0839 0x04a0  C:\Windows\System32\shacct.dll - ok
00:10:29.0839 0x04a0  [ 246612D5622F7BA13E87BA08D2F7489A, D5A8B34A9EA312D01F4DCB36684CDEE4D8CAB5CD2B9593866F63095FF504CD66 ] C:\Windows\System32\samlib.dll
00:10:29.0839 0x04a0  C:\Windows\System32\samlib.dll - ok
00:10:29.0839 0x04a0  [ 81ECD8768D3E4AD61DB7EE27401A25E9, 32166BA146CE840FC89BDDF8E4C36189637C897D0C0FC6CFB0B7AB24E94A3291 ] C:\Windows\System32\wevtapi.dll
00:10:29.0839 0x04a0  C:\Windows\System32\wevtapi.dll - ok
00:10:29.0839 0x04a0  [ BA47A3E78521EC9EA4341F6FA8A75EC9, 4605269D80E7336CF56A7C95453C170E8A62EFC2CAA8B679696160D06CEAF0D7 ] C:\Windows\System32\propsys.dll
00:10:29.0839 0x04a0  C:\Windows\System32\propsys.dll - ok
00:10:29.0839 0x04a0  [ 9C09F1D54C7F391B1C3D7440AF30720A, 2CB74FE80A8AD9C05C50E2D989C0B7CBAF6C34C6FF09F61479E817503885BB04 ] C:\Windows\System32\InputSwitch.dll
00:10:29.0839 0x04a0  C:\Windows\System32\InputSwitch.dll - ok
00:10:29.0855 0x04a0  [ F9D935D60C397809FC6E1E0676F4AC6E, B526CDE36112D17BCFF95B18663970758A25F1CC089F8B2AA492FF6E729B2815 ] C:\Windows\System32\wuaext.dll
00:10:29.0855 0x04a0  C:\Windows\System32\wuaext.dll - ok
00:10:29.0855 0x04a0  [ 53B518707ECB8132E173ADAF42D68054, 53FC46B36408FB952B2B0EAB7D46B6884CFBE7F9B37B618DEC1FA70713322AEE ] C:\Windows\System32\Windows.UI.Immersive.dll
00:10:29.0855 0x04a0  C:\Windows\System32\Windows.UI.Immersive.dll - ok
00:10:29.0855 0x04a0  [ F0E5C2AACB8DFD8EF2F7A67A12CCDA5D, 8A5801FCDECF5735DC150498E7C68F4E598DDD75A9B96A1E42043E390C1B7916 ] C:\Windows\System32\IDStore.dll
00:10:29.0855 0x04a0  C:\Windows\System32\IDStore.dll - ok
00:10:29.0855 0x04a0  [ 554F73A015A84FA8B5F23635FE016314, 7A8A76878608EBDF3EF1D25841853A99DF7B000EE4F243767BF674416B5CD15A ] C:\Windows\System32\wlidres.dll
00:10:29.0855 0x04a0  C:\Windows\System32\wlidres.dll - ok
00:10:29.0855 0x04a0  [ 2640C2240F9B6529AE779D83E8FF2127, E962AF0EC3C1257156D6D7ED9B8FB9D32975361A7AC0CDC32B90DE03DED82179 ] C:\Windows\System32\apphelp.dll
00:10:29.0855 0x04a0  C:\Windows\System32\apphelp.dll - ok
00:10:29.0855 0x04a0  [ F38DD05686AC8597BCD38C2F324900B9, 65FFDC35E1487950844CBC5194D0ECB1FFA99B2C425DE034930D0587409CFA1A ] C:\Windows\System32\AuthExt.dll
00:10:29.0855 0x04a0  C:\Windows\System32\AuthExt.dll - ok
00:10:29.0871 0x04a0  [ 58B7BEACEB8B19A9698FE85B76C88ED9, 1B2C3E482F70F9E2CB85E9D52C9450946B1508F12087BFD4A78D4B1458AB20BD ] C:\Windows\System32\FWPUCLNT.DLL
00:10:29.0871 0x04a0  C:\Windows\System32\FWPUCLNT.DLL - ok
00:10:29.0871 0x04a0  [ 7D6BDD2A339080EFA03D9EB39398F4E6, 956CAE39979A4A7A7BFBBF5FDCF0553F3F9B0DB9D52FB33FF9135114ABB2856F ] C:\Windows\System32\wlanmsm.dll
00:10:29.0871 0x04a0  C:\Windows\System32\wlanmsm.dll - ok
00:10:29.0871 0x04a0  [ BC484B89C153942BF5D8BFBE832274E1, 3F46D93C5B1A6A10BAE3D75E5E385C9E6F3B2121423260F76B60EFE037C71AF8 ] C:\Windows\System32\batmeter.dll
00:10:29.0871 0x04a0  C:\Windows\System32\batmeter.dll - ok
00:10:29.0871 0x04a0  [ 76E6465F3153FCA20F07928BBA62D7B8, 828A91F337A55AE25440749FFE96079018754906DC429DC4AB386A1088DE36CE ] C:\Windows\System32\Windows.Globalization.dll
00:10:29.0871 0x04a0  C:\Windows\System32\Windows.Globalization.dll - ok
00:10:29.0871 0x04a0  [ 560A9357766AB0CDF38143EA3A66DA64, 0097C9EAA9E1236C7D01C9549A553F161E0B4CC3CF4C5542EF1A8884B2B0CC2E ] C:\Windows\System32\msftedit.dll
00:10:29.0871 0x04a0  C:\Windows\System32\msftedit.dll - ok
00:10:29.0871 0x04a0  [ 185C71A41C02724A56BA625578651817, 0C0C41CBEE1887EDAFE00F17EDE00156206083791F6B50CFC96AC49C4ED15BA8 ] C:\Windows\System32\NetworkStatus.dll
00:10:29.0871 0x04a0  C:\Windows\System32\NetworkStatus.dll - ok
00:10:29.0886 0x04a0  [ 137BBCFB2080C5F6F4E5C4EB6314D97A, 6152A78B2E7782B502045AA94C230948340FD6720A25E44BE2F9F398F1548646 ] C:\Windows\System32\dnsext.dll
00:10:29.0886 0x04a0  C:\Windows\System32\dnsext.dll - ok
00:10:29.0886 0x04a0  [ 72EC1DEF102304EE8C2E47566328F035, A16B5CBCBE9D31661FFC725D3FE28F97EF6AA5AA2FF894F43082E3447EF8EBA2 ] C:\Windows\System32\onex.dll
00:10:29.0886 0x04a0  C:\Windows\System32\onex.dll - ok
00:10:29.0886 0x04a0  [ BA34C32F67F91AD0DA3D3A3425C9236A, 05C5083DE29838857CA78DC1D0797DF25A52242B3F618EE7FCE0C56AD753310D ] C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5\comctl32.dll
00:10:29.0886 0x04a0  C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5\comctl32.dll - ok
00:10:29.0886 0x04a0  [ 7A4797475ABAD6ECF1BCB08637922ECA, EFD91794165E06139D5488F0EFA53652620AA002F814E6BA6A364B7204CB0A36 ] C:\Windows\SysWOW64\winhttp.dll
00:10:29.0886 0x04a0  C:\Windows\SysWOW64\winhttp.dll - ok
00:10:29.0886 0x04a0  [ BD483C1AE32D5B21A22CABE74A9D4798, 02EDAA1C8AEB28E8E9547EF5A455B14A683851CDAA79CA58A2C909DFF04D098D ] C:\Windows\SysWOW64\IPHLPAPI.DLL
00:10:29.0886 0x04a0  C:\Windows\SysWOW64\IPHLPAPI.DLL - ok
00:10:29.0902 0x04a0  [ C317E72447B437F99CC750BD876DF30E, 5B4D4BD365F4FEB72662100B1EBC10A155250898599D0A3044862F564D3FCE32 ] C:\Windows\SysWOW64\mswsock.dll
00:10:29.0902 0x04a0  C:\Windows\SysWOW64\mswsock.dll - ok
00:10:29.0902 0x04a0  [ 77ADCD16CCEB8A9AD1FD81FC464B1A6B, E066AAC7AD4E3EB3AC59475CD186074D431C743139F6CBB9211391011445C5EC ] C:\Windows\SysWOW64\winnsi.dll
00:10:29.0902 0x04a0  C:\Windows\SysWOW64\winnsi.dll - ok
00:10:29.0902 0x04a0  [ 0F3B2F57676DEBB7F86B74A51BEC079C, 7ECCCD1519D119D12D345E3AA4A3027705F6107ABEC6ADEF41CCFF83EECA2C24 ] C:\Windows\SysWOW64\dhcpcsvc6.dll
00:10:29.0902 0x04a0  C:\Windows\SysWOW64\dhcpcsvc6.dll - ok
00:10:29.0902 0x04a0  [ 84F0DC88E6AE4B49B032509868B4BD73, A9453FEDD2D317C9B47FA27D0E6AEF0A0157333F8D83418487AB41067AF184D5 ] C:\Windows\SysWOW64\dhcpcsvc.dll
00:10:29.0902 0x04a0  C:\Windows\SysWOW64\dhcpcsvc.dll - ok
00:10:29.0902 0x04a0  [ 14D785DFBE808D9CF7B8C06884730B1D, C352EFB9B798AABC41A130ECD7E471F903EA0764411120A914CAEA0A0EE7F0C6 ] C:\Windows\System32\wlansec.dll
00:10:29.0902 0x04a0  C:\Windows\System32\wlansec.dll - ok
00:10:29.0902 0x04a0  [ 47AC075FC4DE7DCF690E861B9B2C22A9, 8ADCC665167D46C52D70DD142495C71C86EE75AABBDF32E51011096681CD39D9 ] C:\Windows\System32\ninput.dll
00:10:29.0902 0x04a0  C:\Windows\System32\ninput.dll - ok
00:10:29.0918 0x04a0  [ 8341C75945D37A0CA7642A47B7E79260, 3AD1C15ACFD847AC199769AE0B9634986D98E37ECC6218A67E13388AA1CE0518 ] C:\Windows\System32\dhcpcsvc.dll
00:10:29.0918 0x04a0  C:\Windows\System32\dhcpcsvc.dll - ok
00:10:29.0918 0x04a0  [ EB87F1EFE1376CE0283635563026F9E0, 86AB2AB2A37996944E725B48B957C3B34E649F79708F0034A4CDDA357DDC058A ] C:\Windows\System32\dhcpcsvc6.dll
00:10:29.0918 0x04a0  C:\Windows\System32\dhcpcsvc6.dll - ok
00:10:29.0918 0x04a0  [ 6684C72C745F0E5E385EEAFF3C15538F, 9EEEB59D28417C45CDDFD46566234C352D456929B8819B0D3273987F81359B19 ] C:\Windows\System32\eappprxy.dll
00:10:29.0918 0x04a0  C:\Windows\System32\eappprxy.dll - ok
00:10:29.0918 0x04a0  [ 36E419B92BFBF76438B8C0C4DD28B9E6, B5F6A5C3C638B7011E47BA8C120C3172680B51ECFBA7ED150C331E84AC0D64DB ] C:\Windows\System32\msxml6.dll
00:10:29.0918 0x04a0  C:\Windows\System32\msxml6.dll - ok
00:10:29.0918 0x04a0  [ D9AEEA13463C68BC9506342A7D15CBDA, 9E41E7937C26C5C23D167B12822891DAD3CA92A4213631DD8E62A98DFB96C6A5 ] C:\Windows\System32\wlgpclnt.dll
00:10:29.0918 0x04a0  C:\Windows\System32\wlgpclnt.dll - ok
00:10:29.0918 0x04a0  [ 193F8B5C8E94D2F4512868135CDB3B1A, DC548C8D0F37073E01A798AE44DD51CFB82DD7F32DBC0F046EE7E25DA3964469 ] C:\Windows\System32\l2gpstore.dll
00:10:29.0918 0x04a0  C:\Windows\System32\l2gpstore.dll - ok
00:10:29.0933 0x04a0  [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] C:\Windows\System32\shsvcs.dll
00:10:29.0933 0x04a0  C:\Windows\System32\shsvcs.dll - ok
00:10:29.0933 0x04a0  [ 047DB56D72FDC16114606B1A6576904B, A1264FC9A7891557172CADDD7BE71FD88ECE7C0AA8D441AF0170C88EB768C129 ] C:\Windows\System32\wlanapi.dll
00:10:29.0933 0x04a0  C:\Windows\System32\wlanapi.dll - ok
00:10:29.0933 0x04a0  [ ED40ED9A65F3E79A8C43DD50C5FDADBF, 2323BFAB1BC3D661A376650B7AC14C7780C92BA575DA048F3C7611CDB3F7F04A ] C:\Windows\System32\schedsvc.dll
00:10:29.0933 0x04a0  C:\Windows\System32\schedsvc.dll - ok
00:10:29.0933 0x04a0  [ D058F369A791DD5B4DF8E7C18C0EB282, B710758473B752A6D21E93778255192F5E1C541A939D7505C1F6C417A9027FBF ] C:\Windows\System32\ktmw32.dll
00:10:29.0933 0x04a0  C:\Windows\System32\ktmw32.dll - ok
00:10:29.0933 0x04a0  [ 59FB8ADC92BF41345BD0034F02187C0E, B62D38CD939289E6547EF7D5E51FE0F44C4064CB6C75A30F3A7110F931916E41 ] C:\Windows\System32\wlanhlp.dll
00:10:29.0933 0x04a0  C:\Windows\System32\wlanhlp.dll - ok
00:10:29.0933 0x04a0  [ EB4EE894AF86408776C6FD03376DEA29, 7DDBC722E40C502887A574516C1DD7BA2CC16EF0475508C35CC61036B3266420 ] C:\Windows\System32\fveapi.dll
00:10:29.0933 0x04a0  C:\Windows\System32\fveapi.dll - ok
00:10:29.0949 0x04a0  [ 3E5177CAE5C4325C49345B4D48626856, 5162866034888429584464245B3782FB48C1183D7AAE87DAC2ABB79F475BFC83 ] C:\Windows\System32\SubscriptionMgr.dll
00:10:29.0949 0x04a0  C:\Windows\System32\SubscriptionMgr.dll - ok
00:10:29.0949 0x04a0  [ 8FF250BD9B3AC4D9D3F325570F901F36, B9324A54D9C6074E7A9AE0A985CFF43755FE10C310BB6E5B71A2693FDEEF19D7 ] C:\Windows\System32\fvecerts.dll
00:10:29.0949 0x04a0  C:\Windows\System32\fvecerts.dll - ok
00:10:29.0949 0x04a0  [ AA221DD533C7B0897B90B92AFFA45A7E, 411611DC8AD56EB92DD9D2AADE9C30E5DB33D200B9A3083BBC458D4E30C0331B ] C:\Windows\System32\taskcomp.dll
00:10:29.0949 0x04a0  C:\Windows\System32\taskcomp.dll - ok
00:10:29.0949 0x04a0  [ 3DB7FFC313BD190D0E64931302776BAF, E7F12568729DBF43323C47B4AE12F231A05B4E57D677D339E98555B01E2498B8 ] C:\Windows\System32\ntmarta.dll
00:10:29.0949 0x04a0  C:\Windows\System32\ntmarta.dll - ok
00:10:29.0949 0x04a0  [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] C:\Windows\System32\Drivers\http.sys
00:10:29.0949 0x04a0  C:\Windows\System32\Drivers\http.sys - ok
00:10:29.0949 0x04a0  [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] C:\Windows\System32\spoolsv.exe
00:10:29.0949 0x04a0  C:\Windows\System32\spoolsv.exe - ok
00:10:29.0964 0x04a0  [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] C:\Windows\System32\BFE.DLL
00:10:29.0964 0x04a0  C:\Windows\System32\BFE.DLL - ok
00:10:29.0964 0x04a0  [ 406388E840C631E3C338F4E3551F791C, DA74B2340C156F83F4D999774B77DD58E682304482340E4A2D69E721E8F3F163 ] C:\Windows\System32\ProximityCommon.dll
00:10:29.0964 0x04a0  C:\Windows\System32\ProximityCommon.dll - ok
00:10:29.0964 0x04a0  [ 599FCE13B819BA7D2D4D4E9C5AD08002, 5D4E9721F691DFFA9F4B5CD2BD0B0756F75A3633BBE6DEC36318034E95BCF271 ] C:\Windows\System32\ProximityService.dll
00:10:29.0964 0x04a0  C:\Windows\System32\ProximityService.dll - ok
00:10:29.0964 0x04a0  [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] C:\Windows\System32\Drivers\bowser.sys
00:10:29.0964 0x04a0  C:\Windows\System32\Drivers\bowser.sys - ok
00:10:29.0964 0x04a0  [ 3426BE7D0ED8888ACFE04BA6BB9AF83B, 1B297A8AF0AFBAEFF0C2CFEA93E2D2B688D43B45D82990034FF4E2404F0C58F6 ] C:\Windows\System32\taskhost.exe
00:10:29.0964 0x04a0  C:\Windows\System32\taskhost.exe - ok
00:10:29.0964 0x04a0  [ D3CD3034E2292DBECCD3161DC29D8E07, 04FAE31ECF9383729E52A69E4F4E24568C496D67FEFED0B9DFADFB0F4B086841 ] C:\Windows\System32\netcfgx.dll
00:10:29.0964 0x04a0  C:\Windows\System32\netcfgx.dll - ok
00:10:29.0980 0x04a0  [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] C:\Windows\System32\Drivers\mpsdrv.sys
00:10:29.0980 0x04a0  C:\Windows\System32\Drivers\mpsdrv.sys - ok
00:10:29.0980 0x04a0  [ 93179D48066918323628CB016D8C94DC, FE110BF7A10EDD1DF7F6B933D373FCA51F37413282EBC4187E7C9B1965186BCC ] C:\Windows\System32\Drivers\mrxsmb.sys
00:10:29.0980 0x04a0  C:\Windows\System32\Drivers\mrxsmb.sys - ok
00:10:29.0980 0x04a0  [ 73FA1A41A97A5C34ADC03B3577FF1A86, CBA4BC0DA837C163587BBB4BF2AC1549C72440307C984D3CDF8995023718136C ] C:\Windows\System32\Drivers\vwifimp.sys
00:10:29.0980 0x04a0  C:\Windows\System32\Drivers\vwifimp.sys - ok
00:10:29.0980 0x04a0  [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] C:\Windows\System32\MPSSVC.dll
00:10:29.0980 0x04a0  C:\Windows\System32\MPSSVC.dll - ok
00:10:29.0980 0x04a0  [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] C:\Windows\System32\Drivers\mrxsmb10.sys
00:10:29.0980 0x04a0  C:\Windows\System32\Drivers\mrxsmb10.sys - ok
00:10:29.0980 0x04a0  [ D87775F050DD29AADDF479F5C17E4200, 20F6AE9989803A741256EC584B38D35A7EAD5CC163EB68BABB296F8354903CEF ] C:\Windows\System32\adhapi.dll
00:10:29.0980 0x04a0  C:\Windows\System32\adhapi.dll - ok
00:10:29.0996 0x04a0  [ 5C7DD2E5759FFCCD2C7341C1B90F2B26, 9822FA53E6067C0E39B7A3A3F1E88719D5D8B055D86FF894F0475B158289EA45 ] C:\Windows\System32\Drivers\mrxsmb20.sys
00:10:29.0996 0x04a0  C:\Windows\System32\Drivers\mrxsmb20.sys - ok
00:10:29.0996 0x04a0  [ FF468871BC365B52AE650D422FEA21F5, 917F1B6042E08284680E3C81A9E7A7513CF35EAFCCA0577AC589B921E0B12ACF ] C:\Windows\System32\wfapigp.dll
00:10:29.0996 0x04a0  C:\Windows\System32\wfapigp.dll - ok
00:10:29.0996 0x04a0  [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] C:\Windows\System32\wkssvc.dll
00:10:29.0996 0x04a0  C:\Windows\System32\wkssvc.dll - ok
00:10:29.0996 0x04a0  [ ABDD5AD016AFFD34AD40E944CE94BF59, 61089124CD8FEA31142CD4D3C47224A6310B9BE7B7FA974956D9EDDAD4381503 ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
00:10:29.0996 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe - ok
00:10:29.0996 0x04a0  [ 78E3A1BE942B6CA69C01BAD7263D888C, 7B7D83C6EDB50BF02A579C7389983746A724B827BBF7169143A3A2357F9DDC68 ] C:\Windows\SysWOW64\EEBUtil.dll
00:10:29.0996 0x04a0  C:\Windows\SysWOW64\EEBUtil.dll - ok
00:10:30.0011 0x04a0  [ 8D6D80315A238D049AE8A33C1EE632F8, C2E93B0823C9C189BEE6083A6FADF62E9E6F1A2C27EBB2B3EFED3DC85D35EBBA ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBRsvc.dll
00:10:30.0011 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBRsvc.dll - ok
00:10:30.0011 0x04a0  [ 7E70D0B6A85502C5D3A1DB062B72E78C, E3F877CCBD93C52243D8416A10AB0CBA04D033C9350EFAF2EFB71C6223FCDD70 ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBLPBidiDev.DLL
00:10:30.0011 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBLPBidiDev.DLL - ok
00:10:30.0011 0x04a0  [ 65BB5D319081E4EC2880A78A0091A84B, CF9028C4B9D382E36291CEBC1972BAE0136CB91AED1C83B97D2FE805FD8A1C58 ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBIPDev.DLL
00:10:30.0011 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBIPDev.DLL - ok
00:10:30.0011 0x04a0  [ 4F583ABEF86D3B9DD2C0D24C9E41138E, 0CF8059493DF2AA7E56BDC0791A328FBBFC670423ADF6D8BB810D899FEBF293A ] C:\Windows\SysWOW64\winspool.drv
00:10:30.0011 0x04a0  C:\Windows\SysWOW64\winspool.drv - ok
00:10:30.0011 0x04a0  [ 59CDF93DFA24264E6D75E1E3C00CD27F, A696DDD572BC96BE21EF8C5C7565295D16B37773B6D1C27AFC3AF41A531A7D83 ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBNWDev.dll
00:10:30.0011 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBNWDev.dll - ok
00:10:30.0027 0x04a0  [ 2510150D2BB54115141E83F3205B6013, 6E9A83F6087ADAE694AAD2DA5995A81C96385FFEB2E14F7ECBA1ED058026FF6F ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBMSDev.dll
00:10:30.0027 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBMSDev.dll - ok
00:10:30.0027 0x04a0  [ 93DEB6C3A52996F1D76731BBA856983A, B1D65FA0AC38CEF6F360DB0CCA12FD9E269F362312A0424B4EEEEB040DF55FE4 ] C:\Program Files (x86)\Common Files\EPSON\EBAPI\epLocalBidi.DLL
00:10:30.0027 0x04a0  C:\Program Files (x86)\Common Files\EPSON\EBAPI\epLocalBidi.DLL - ok
00:10:30.0027 0x04a0  [ 785838B984563D12D4612256D2C78B48, 70537173C440F0CA903153AD2F9CF158F54DC94D4650E418D5D2408238E7BAFE ] C:\Windows\SysWOW64\mpr.dll
00:10:30.0027 0x04a0  C:\Windows\SysWOW64\mpr.dll - ok
00:10:30.0027 0x04a0  [ B33CF4DE909A5B30F526D82053A63C8E, ABF5BB962C038E545C18B96E686E072D780C907096C7BB341297AF31D3703ABD ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
00:10:30.0027 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe - ok
00:10:30.0027 0x04a0  [ BE8BD75FD8BE17B95365619D0B34CDBC, 7FE6C35DBEF62F173B4ACBE76B66264F223A9B128B95849B4E42B5EDF1790A0A ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\FineObj.dll
00:10:30.0027 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\FineObj.dll - ok
00:10:30.0043 0x04a0  [ 39D3E26AC0C684BCBEA6D2EA99035440, E859AE5FD497F456A2910FFD27A3DF3DB2A76B5D2CA24A77650A481ACCF66602 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\FineNet.dll
00:10:30.0043 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\FineNet.dll - ok
00:10:30.0043 0x04a0  [ 86F1895AE8C5E8B17D99ECE768A70732, 8094AF5EE310714CAEBCCAEEE7769FFB08048503BA478B879EDFEF5F1A24FEFE ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\msvcr71.dll
00:10:30.0043 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\msvcr71.dll - ok
00:10:30.0043 0x04a0  [ DB8AA8CCA66DBD641C2B942ED5C15CE5, 8922DDE1EE1D04AE91BA461DDCD167E4BDDB31DA51486244F30226ECDF18063D ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\AbbyyZlib.dll
00:10:30.0043 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\AbbyyZlib.dll - ok
00:10:30.0043 0x04a0  [ C3CD50F19851FB3DB7A9418B32E1FEC1, 4155CD6FC9C3918D36F0230DA0519A4BF9B25FBC715F6BB44E6485896D9FD204 ] C:\Windows\SysWOW64\samcli.dll
00:10:30.0043 0x04a0  C:\Windows\SysWOW64\samcli.dll - ok
00:10:30.0043 0x04a0  [ FD50B596A5C2FC595AAE0D5A791B939A, 07F4AA2A585F2C52B1917C456A8ABBF9CB5BB192DCF4E0D249CC2286917AB9CE ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensingShared.dll
00:10:30.0043 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensingShared.dll - ok
00:10:30.0058 0x04a0  [ 2DE87B444AA507D6DD2BA2FE739B047C, 016957AFA9CFE3622CDFD21AA2B1376E8EA763D07BCF3793763FABF0D3691E5C ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing0.dll
00:10:30.0058 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing0.dll - ok
00:10:30.0058 0x04a0  [ 42FF7DC63C1CB122CE2C8061B5FE4390, EA3CF25128E2DA61864434CC8A0CAF97C06284A67E484469C36B5831A0DBECFC ] C:\Windows\SysWOW64\shfolder.dll
00:10:30.0058 0x04a0  C:\Windows\SysWOW64\shfolder.dll - ok
00:10:30.0058 0x04a0  [ 803260C5EE2EE9289C6D53087EC50017, D8A604098A8020FE888BB9C841D368A310367B6D27BCE86CE8DD2DFB33F7F544 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing1.dll
00:10:30.0058 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing1.dll - ok
00:10:30.0058 0x04a0  [ BEDE8BC1F0FE794829269C115C1A588E, CFE332C3CBD3ECAC370E371C239F6BADD733E345C8BFFC4E1FBD53A64E322E16 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing13.dll
00:10:30.0058 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing13.dll - ok
00:10:30.0058 0x04a0  [ AEFD4172AAC818D987D26EDAF4A3B7C5, E254BBB26504960160C75DBF890A4A110336343F56744E10A9E33030166A3376 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing14.dll
00:10:30.0058 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing14.dll - ok
00:10:30.0058 0x04a0  [ 81DA9DF8C65BBB4CA871B5E2728674D5, 340FC2FE5957FFE2BD18B6CD376CD1F615C059D5C0303F23CD50578054F81455 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing15.dll
00:10:30.0058 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing15.dll - ok
00:10:30.0074 0x04a0  [ 08E688BEE5FEF9214B9BB15CFB36E23A, 939060266F6895521B0DC9224C8D43B59D7C66DB57FD0BA0A8363E86DE621876 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing16.dll
00:10:30.0074 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing16.dll - ok
00:10:30.0074 0x04a0  [ F5E2D6E3FF6238893215585A04192AD7, 6D942DB3983786A64216B23B80F6BFD6D408376EF5BDBC703D7F820A25294309 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing17.dll
00:10:30.0074 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing17.dll - ok
00:10:30.0074 0x04a0  [ 9EF03D654D3AE8DA10F2D089B859337E, 1DE424FB7C512E89DBB14B3B83A0D39CE07C122FA015873F2526A4ECC517BFAA ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing2.dll
00:10:30.0074 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing2.dll - ok
00:10:30.0074 0x04a0  [ D7EE31A22CA2781FC6EBD12C831F6B59, 5802E60AB5117F63CBAB47D6A9601B68987D04251B2436F6F70BB33A5E391546 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing23.dll
00:10:30.0074 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing23.dll - ok
00:10:30.0074 0x04a0  [ 74BAF2D00BD902B80D69BE42A61F83DD, 84240BB1DF05BB890B7F290EF41837B4CE8C24D9A49EEED329DA48AF6690F87B ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing24.dll
00:10:30.0074 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing24.dll - ok
00:10:30.0089 0x04a0  [ 42E2F8798B445F76671C88C155C1F18D, AD08870CEC54F3D9F0C853B93A9276798FA9F7934ADF153D5121B652686B6C63 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing26.dll
00:10:30.0089 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing26.dll - ok
00:10:30.0089 0x04a0  [ 239935CF6E2A2D464AB66E51EB067D66, 30EABB84709C69E28262C5EB3DEC38292DEA30A9458FB156C23C90D39BC0E1EC ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing3.dll
00:10:30.0089 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing3.dll - ok
00:10:30.0089 0x04a0  [ 1AA94A15B0CE226341F4D731225D924C, 1AEBDAED1C5F411DE2301EEE9122DE230A014B19464BD52580F8B0AF74D4E112 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing5.dll
00:10:30.0089 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing5.dll - ok
00:10:30.0089 0x04a0  [ F85AF7D697A2E3C9E69380C7AABA8F69, F95A7C2745BA15180875283D5019B80B1CA7FD90562011E8060A1FE359F5E13A ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing6.dll
00:10:30.0089 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing6.dll - ok
00:10:30.0089 0x04a0  [ 7E13358593468500BDE154C5C497EC1A, F9E839E5DFBAD545DE192F8EA6BFA2565C718193E2A870991F30495536A92826 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing63.dll
00:10:30.0089 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing63.dll - ok
00:10:30.0105 0x04a0  [ ABE4B349D12138772B0D3B1B55C5F2A8, 524BD0CAD64C89F265C349D11F703535111D4DC8DB2A9CA7E17C5C5DFACCABF5 ] C:\Windows\System32\MrmCoreR.dll
00:10:30.0105 0x04a0  C:\Windows\System32\MrmCoreR.dll - ok
00:10:30.0105 0x04a0  [ 80D7A6E0EA9845F8D20E932DAFA4AC60, E9757543168145F7726BF8134A17F4D93AFD2DB68B32D0E2F471C4641DCF9145 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing64.dll
00:10:30.0105 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing64.dll - ok
00:10:30.0105 0x04a0  [ 28A3EED9BB0A781677E8F28BA4040FF6, 6B9519E8D063B0CED3E298745AAEFE59DB3B3950316233602E2A3426C88F0BA6 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing65.dll
00:10:30.0105 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing65.dll - ok
00:10:30.0105 0x04a0  [ C70FDA0C297D51B0A42E7AA322856541, B3AC4534E7FEF9A9210DA5D722FDC5BC216E75E3BCDE2F91729358DEE953BFEB ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing69.dll
00:10:30.0105 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing69.dll - ok
00:10:30.0105 0x04a0  [ F1B54578D13C99842EC23238284162F9, A6C1CB0B2FC8E97E5C605492155D3276C0924DAE5FA9BAD8B53F805CB7EE27B7 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing7.dll
00:10:30.0105 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\ProductLicensing7.dll - ok
00:10:30.0121 0x04a0  [ B362181ED3771DC03B4141927C80F801, 69514E5177A0AEA89C27C2234712F9F82E8D8F99E1FD4273898C9324C6FF7472 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
00:10:30.0121 0x04a0  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - ok
00:10:30.0121 0x04a0  [ F1F9EEEF647CFA62A7104C054CE0999B, E77C7BB47F927865E7B4D689172321CDB70E296BD9A77CB64FF5C405AEDC6973 ] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6871_none_50944e7cbcb706e5\msvcr90.dll
00:10:30.0121 0x04a0  C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6871_none_50944e7cbcb706e5\msvcr90.dll - ok
00:10:30.0121 0x04a0  [ 823F34D1DEF120A657BB7529ABF4461F, C56D6614F6B3DA13DF7F6AC6B70ACA39D1DB146F7324CF96029CA038C3063DB3 ] C:\Windows\System32\inetsrv\apphostsvc.dll
00:10:30.0121 0x04a0  C:\Windows\System32\inetsrv\apphostsvc.dll - ok
00:10:30.0121 0x04a0  [ 3B3F1B06FAD6B14AEADD6BF5465386BD, 9B649E668CAAC82A08A0E5F7DCB1F39BF3689CB285153D7F50A491933B750178 ] C:\Windows\System32\inetsrv\iisutil.dll
00:10:30.0121 0x04a0  C:\Windows\System32\inetsrv\iisutil.dll - ok
00:10:30.0121 0x04a0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] C:\Program Files\Bonjour\mDNSResponder.exe
00:10:30.0121 0x04a0  C:\Program Files\Bonjour\mDNSResponder.exe - ok
00:10:30.0121 0x04a0  [ 921E00A2245BAC544E3DD706FBFD1F54, 429B084DF677B129F5327E5DD4C383C7FD9A8D5C76B055D4C1805A5C76F07DF7 ] C:\Windows\System32\inetsrv\nativerd.dll
00:10:30.0121 0x04a0  C:\Windows\System32\inetsrv\nativerd.dll - ok
00:10:30.0136 0x04a0  [ 467497DF10CF8D4014BD25CCE987EA84, D7FDACE671E3F6697EE9901849F5B2369E0F303E2F0A218514782224487350CE ] C:\Windows\System32\wcmapi.dll
00:10:30.0136 0x04a0  C:\Windows\System32\wcmapi.dll - ok
00:10:30.0136 0x04a0  [ F8D4C122F9B78449AE0EE6FE44EAFFA5, 1C330479F2419659B8C3FE408D693582B681B255533B0E3B262F2FBA35702BDD ] C:\Windows\System32\inetsrv\iisres.dll
00:10:30.0136 0x04a0  C:\Windows\System32\inetsrv\iisres.dll - ok
00:10:30.0136 0x04a0  [ 9C2CB23B77E539D87B4652FA68A6C275, D927888766B5197DF5CAB0A3D2373774BFC00C0A5BEA92495D20C38B5D25FF55 ] C:\Windows\System32\vssapi.dll
00:10:30.0136 0x04a0  C:\Windows\System32\vssapi.dll - ok
00:10:30.0136 0x04a0  [ 5579A2CE7756B59F4BB778AFDCAF2096, BD3B9A39DC077EA64502915A5E71593402D2555A04D9979B28DA86678F1D2A7F ] C:\Windows\System32\vsstrace.dll
00:10:30.0136 0x04a0  C:\Windows\System32\vsstrace.dll - ok
00:10:30.0136 0x04a0  [ 33E9F08F675EF94633C8EF8A7C4EADF3, E1556CF27F7FB3B03EE63F3464F5EE92E7B09E67C5D8AA4A9346FEEBD716A152 ] C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
00:10:30.0136 0x04a0  C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe - ok
00:10:30.0152 0x04a0  [ 5B5878314B78A6827BA4431C4C3379EB, 88D85CC882FE132B83370F3969D1455B0C6CCB850714E10205D1689BB3F0CE5F ] C:\Windows\System32\mlang.dll
00:10:30.0152 0x04a0  C:\Windows\System32\mlang.dll - ok
00:10:30.0152 0x04a0  [ 9D918237A6ECED5D2202804D8CE3A35F, B9552BCEBB590CF18467F160AC919697BF3358CADE06208C6B85F1885BFD7ED7 ] C:\Windows\SysWOW64\httpapi.dll
00:10:30.0152 0x04a0  C:\Windows\SysWOW64\httpapi.dll - ok
00:10:30.0152 0x04a0  [ 3C5846581F329FD6768E5E7C1780151E, 1C55CB41A1A19C38091739FE96D26BBBA40B0FB3CCE00DCA368DFEF89861BB13 ] C:\Windows\System32\cryptcatsvc.dll
00:10:30.0152 0x04a0  C:\Windows\System32\cryptcatsvc.dll - ok
00:10:30.0152 0x04a0  [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] C:\Windows\System32\cryptsvc.dll
00:10:30.0152 0x04a0  C:\Windows\System32\cryptsvc.dll - ok
00:10:30.0152 0x04a0  [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] C:\Windows\System32\das.dll
00:10:30.0152 0x04a0  C:\Windows\System32\das.dll - ok
00:10:30.0152 0x04a0  [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] C:\Windows\System32\dps.dll
00:10:30.0152 0x04a0  C:\Windows\System32\dps.dll - ok
00:10:30.0168 0x04a0  [ B278B76FF26BE911DD369724612F2D03, 515F606AE0EA88B0CE971377D5067424181E81A7B08B9686DB53454FAC07B354 ] C:\Windows\System32\dasHost.exe
00:10:30.0168 0x04a0  C:\Windows\System32\dasHost.exe - ok
00:10:30.0168 0x04a0  [ 10881D41226100F44DF3BF66F5EA75C6, A2B3B46A085D10F30A2D82186C51BCBC006390EB66E6ECF4B26293FF6506B2A9 ] C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe
00:10:30.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fshoster32.exe - ok
00:10:30.0168 0x04a0  [ 12BC4D22DD8280FED7D3004E099DC499, 4D2FFD16A0903C9C66E66BC246014A701C9CDF48F2E71EAD9A5E1C9FB6340388 ] C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_d089c358442de345\msvcp80.dll
00:10:30.0168 0x04a0  C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_d089c358442de345\msvcp80.dll - ok
00:10:30.0168 0x04a0  [ B6A5F92A417ED4BDE54BE170AF0A9E31, 75B8D2D19A74468867913443F3E457E34F445396BE78733E4F9A47A77597AC64 ] C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_d089c358442de345\msvcr80.dll
00:10:30.0168 0x04a0  C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_d089c358442de345\msvcr80.dll - ok
00:10:30.0168 0x04a0  [ 7E949DDEE385AC23EEBAB7B27B4686C3, 3C36F2B388C4BAC079539E9C49F1F8E7E1CE5F589701B3CBD043F51FBD12DC9A ] C:\Program Files (x86)\TalkTalk\Security\CCFIPC.dll
00:10:30.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CCFIPC.dll - ok
00:10:30.0168 0x04a0  [ 62F55246D3EC35D643D3CDC32A7259A9, F0DB7B24725E213A4D37298B62433C74DFF562612B950CDDC112062641B9C515 ] C:\Program Files (x86)\TalkTalk\Security\CCFDLLHosterAPI.dll
00:10:30.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CCFDLLHosterAPI.dll - ok
00:10:30.0183 0x04a0  [ 45303CDBC1FD8F8D371E726BF126F771, AEBAD185AD6DA8648900C840DE64C2D83E94515EC0E08586C52BF64C8C2E4B6F ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe
00:10:30.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\fsorsp.exe - ok
00:10:30.0183 0x04a0  [ A3253792C789BBB0BAFAFBF0D86D8505, 79D269DB964E3CCC8F38ADAAF4665183A0F96A3E4EB1D0BE723FFB8312C14887 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_settings_server.dll
00:10:30.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_settings_server.dll - ok
00:10:30.0183 0x04a0  [ 5D73B8B2BB517D56B7B2D061B0DB60D1, C4B5EF4043FC8601B934072F1865618A7A23B7FF7222E1BBEE28CF7705255A48 ] C:\Program Files (x86)\TalkTalk\Security\CCFHosterShutdownPlugin.dll
00:10:30.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CCFHosterShutdownPlugin.dll - ok
00:10:30.0183 0x04a0  [ 91B3A39405431B9C1182F92E30CB23B6, 50EFD700740B9D5EB2B73CF0727853660FBCCAE5C96E216596750947EAC28421 ] C:\Program Files (x86)\TalkTalk\Security\fs_se_hotfix_plugin.dll
00:10:30.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_se_hotfix_plugin.dll - ok
00:10:30.0183 0x04a0  [ 8D4892971BB57CEAE5AB0DE658E9CB13, 59CF237E838A3B7D153714F9815CA41AB5731A25B803B6B5546411383660703B ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Network\fsmbb32.dll
00:10:30.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Network\fsmbb32.dll - ok
00:10:30.0199 0x04a0  [ 62F46FB1AED31B289F6A64718A3E5ECF, F1E8D1610CD22685C378286E46FE68CF2A05588A3A447DD0988B03F7B86AEE83 ] C:\Windows\SysWOW64\clbcatq.dll
00:10:30.0199 0x04a0  C:\Windows\SysWOW64\clbcatq.dll - ok
00:10:30.0199 0x04a0  [ E2CA40BC789F2DCEC08C25CDF3D7705D, 10DE088C045EB8AB049DD0889E48C71E9211453A675987F55AB1419B0D7A7312 ] C:\Windows\SysWOW64\WWanAPI.dll
00:10:30.0199 0x04a0  C:\Windows\SysWOW64\WWanAPI.dll - ok
00:10:30.0199 0x04a0  [ 3C5B2067338E4EFDADE94E4A72728F23, 72E21FA1E660F9405A5E39B0F89AB21C60F20BAC13247567EF7139AC130F1897 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
00:10:30.0199 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe - ok
00:10:30.0199 0x04a0  [ 1BBA916FCC54CF113CCF7AD3784B81F6, 4492386E950E86BF06F05C3D9D830B8346CE31A1403584283707AEE9D728488E ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspplug.dll
00:10:30.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspplug.dll - ok
00:10:30.0199 0x04a0  [ A959C34C47C82CB4F41F0073C8572FC2, 14C67C20B3F1909D1544C97F80EBBEE2F8640A1E4A0C09D28A6F6E185A191FD7 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_settings32.dll
00:10:30.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_settings32.dll - ok
00:10:30.0199 0x04a0  [ 330F647F64D8525B2F3895FA9606718E, ED962A0F580D4AAEE17B863CDB901FE868F62964CD824A2C7AE408B508D95323 ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\json_c.dll
00:10:30.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\json_c.dll - ok
00:10:30.0214 0x04a0  [ 7873D395D26096555B2F0BF30EB62F6D, 8225DFD033D44C3F27BE6BCD8BE8F856C0D206151DD8D042903B6D9E8843F79D ] C:\Program Files (x86)\TalkTalk\Security\fsclm.dll
00:10:30.0214 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fsclm.dll - ok
00:10:30.0214 0x04a0  [ CC9ADF25BE2091D3378D5DE6696BDE8B, DD6D2BBCD21AD4690E91579A5AEC6A7484E5F97F1D754B186C7EF4A679A46ACE ] C:\Windows\SysWOW64\wwapi.dll
00:10:30.0214 0x04a0  C:\Windows\SysWOW64\wwapi.dll - ok
00:10:30.0214 0x04a0  [ E290E6713E97BD854B811FFC22CD7C91, F2803FEED9D9B84134ADC50BFA0215279CCCDE720C39C6B8DFC4C07DF123A8BD ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsgk32st.dll
00:10:30.0214 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsgk32st.dll - ok
00:10:30.0214 0x04a0  [ 8CFD3A12468F8DC32C43362B26FF2BCB, 91065FC435186C358B8B01CF91B6C3FA614D9E60DCADEE15A3741F4B8A3AC356 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
00:10:30.0214 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe - ok
00:10:30.0214 0x04a0  [ F2276326C73714F9389FE0D5F01944F5, 98BA2B4D673152774E01E208D8668536A28E09E7130F09A107599625CB6B1A19 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\updcfg.dll
00:10:30.0214 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\updcfg.dll - ok
00:10:30.0230 0x04a0  [ 0E37FBFA79D349D672456923EC5FBBE3, 8793353461826FBD48F25EA8B835BE204B758CE7510DB2AF631B28850355BD18 ] C:\Windows\SysWOW64\msvcr100.dll
00:10:30.0230 0x04a0  C:\Windows\SysWOW64\msvcr100.dll - ok
00:10:30.0230 0x04a0  [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] C:\Windows\System32\IKEEXT.DLL
00:10:30.0230 0x04a0  C:\Windows\System32\IKEEXT.DLL - ok
00:10:30.0230 0x04a0  [ C37508B16F7C26CDF20BAD5646034670, 81F8D1510CBBA5C9B008C77B87D2C2541387F4F6339C3B63F9D4910586C9C8B0 ] C:\Windows\System32\vpnikeapi.dll
00:10:30.0230 0x04a0  C:\Windows\System32\vpnikeapi.dll - ok

Link to post
Share on other sites

00:10:30.0230 0x04a0  [ 3B538C11E955B8355F7BBAFCF79030A5, 6D0AF51BEB679AAF8036016E3CC1659550C5D9870B36348A244E651E2CC041A6 ] C:\Program Files (x86)\TalkTalk\Security\daas2.dll
00:10:30.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\daas2.dll - ok
00:10:30.0230 0x04a0  [ BB3717D6FC27A22D0403C825A93BC068, DC7B070DA7FDD78099E00C5D2576D878B09C58F61A94968479C2C1BAF14944FD ] C:\Windows\SysWOW64\dnsapi.dll
00:10:30.0230 0x04a0  C:\Windows\SysWOW64\dnsapi.dll - ok
00:10:30.0230 0x04a0  [ 40947436A70E0034E41123DF5A0A7702, 5D40FD92DA5CA59C1BADB58AD509DB6A6D613F18660A9A270A53ECA85D34C3A9 ] C:\Program Files (x86)\Bonjour\mdnsNSP.dll
00:10:30.0230 0x04a0  C:\Program Files (x86)\Bonjour\mdnsNSP.dll - ok
00:10:30.0246 0x04a0  [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] C:\Program Files\Intel\iCLS Client\HeciServer.exe
00:10:30.0246 0x04a0  C:\Program Files\Intel\iCLS Client\HeciServer.exe - ok
00:10:30.0246 0x04a0  [ 7CD424F005ED71204DCB14CF11F1EB0C, 728BF0EDF925815E575583D601F8C53FE6F041257B15FFCE41CB8D6A6ECACBE1 ] C:\Windows\SysWOW64\rasadhlp.dll
00:10:30.0246 0x04a0  C:\Windows\SysWOW64\rasadhlp.dll - ok
00:10:30.0246 0x04a0  [ 3C4002D339491AF73D663FFC7F6E5ECB, 0B53047989BDB781572253BC3AA757912FE54366870C1955E687972CE210C285 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
00:10:30.0246 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe - ok
00:10:30.0246 0x04a0  [ BC83108B18756547013ED443B8CDB31B, B2AD109C15EAA92079582787B7772BA0A2F034F7D075907FF87028DF0EAEA671 ] C:\Windows\SysWOW64\msvcp100.dll
00:10:30.0246 0x04a0  C:\Windows\SysWOW64\msvcp100.dll - ok
00:10:30.0246 0x04a0  [ 65085456FD9A74D7F1A999520C299ECB, EA564BC913EF1B8A4CAA9242FC70F525B68CF1F3CA462F63B0B7215B93FE8530 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
00:10:30.0246 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe - ok
00:10:30.0246 0x04a0  [ EF39CCCC9AD927A25334AE0B41A8A343, EC5FB376F84697F42B632BC9775D362CF6C54A68E26A0CF027D90F5A419BEA74 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
00:10:30.0246 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll - ok
00:10:30.0261 0x04a0  [ 9275F02BEA644F43A459E316A932658F, A4B9A716BEF1ADFDDA4C44D4838EC57BD77DEE29C4B4737B58A9375C2366A87F ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll
00:10:30.0261 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll - ok
00:10:30.0261 0x04a0  [ 1C51CD68DB8C774E4C69CD628CFC4C80, 64BEEDB08BEEC4C3ABC79403FC8419D92BEB048BF79EC8F5BEC9FA739474C40D ] C:\Windows\SysWOW64\FWPUCLNT.DLL
00:10:30.0261 0x04a0  C:\Windows\SysWOW64\FWPUCLNT.DLL - ok
00:10:30.0261 0x04a0  [ 57FCBA2D832FFB18A6C88B78A227E531, 68973FEBEF1C3E6A26027CDAE48A35CC854AB9952536ABA84FCF82C7895D59B3 ] C:\Program Files (x86)\TalkTalk\Security\fs_settings_tool.exe
00:10:30.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_settings_tool.exe - ok
00:10:30.0261 0x04a0  [ D532837B6964B923C985941C1C2C0143, 9DCE08B0F39C853C0AD9AA2287B58BCB6533A1CF4E010E08E1CF1BB358EB3CF5 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMAPI.DLL
00:10:30.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMAPI.DLL - ok
00:10:30.0261 0x04a0  [ 14E1F15F58097C5526666407AAD3376B, B794026DFE42F8FFB0B8CBF264988E357AA3D0E98F761DAC410FCA2F767A7598 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32S.DLL
00:10:30.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32S.DLL - ok
00:10:30.0277 0x04a0  [ E0D7732F2D2E24B2DB3F67B6750295B8, AA5CA86AF1ACEC900F60339016B3DC55472DB40ADB99186005A7ABE67B7D66FC ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
00:10:30.0277 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe - ok
00:10:30.0277 0x04a0  [ 80D8679BF84A9383BFF33E07D5D9FC35, 0986806F2504C8A66FA8DEF7923A69E90A2390DD447BE53AD1824240CE68EC1E ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll
00:10:30.0277 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll - ok
00:10:30.0277 0x04a0  [ E416E967E3FB6FB1E9AE12B9C7DAB526, 4849AE6B628D349F64D26CDD638B34E598E7C839335961C6AE39B305765106A3 ] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
00:10:30.0277 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe - ok
00:10:30.0277 0x04a0  [ 6A0C81508755C7F8EA5C5A4BC0E922CB, EABC691A8BEC3F85E8FA4F3FA72AB1D5D4FF466DCEDCD3B0C419C54EECFEC489 ] C:\Windows\SysWOW64\apphelp.dll
00:10:30.0277 0x04a0  C:\Windows\SysWOW64\apphelp.dll - ok
00:10:30.0277 0x04a0  [ DF6F0D101A91CFD6A5906F802EDF0AEB, B6AACD874B7416D051CA40F4DADB31BD60F2B890DAD6B8AD0AB0554E90B01020 ] C:\Windows\apppatch\acwow64.dll
00:10:30.0277 0x04a0  C:\Windows\apppatch\acwow64.dll - ok
00:10:30.0277 0x04a0  [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] C:\Windows\System32\Drivers\Ndu.sys
00:10:30.0293 0x04a0  C:\Windows\System32\Drivers\Ndu.sys - ok
00:10:30.0293 0x04a0  [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] C:\Windows\System32\netman.dll
00:10:30.0293 0x04a0  C:\Windows\System32\netman.dll - ok
00:10:30.0293 0x04a0  [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] C:\Windows\System32\nlasvc.dll
00:10:30.0293 0x04a0  C:\Windows\System32\nlasvc.dll - ok
00:10:30.0293 0x04a0  [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] C:\Windows\System32\pcasvc.dll
00:10:30.0293 0x04a0  C:\Windows\System32\pcasvc.dll - ok
00:10:30.0293 0x04a0  [ 1580A33C6CD8E0117247A48C31825D6E, 3A5E9B2A65B8DFCA700AA7C85B2E0CF9EEDA582D479F51CF08C79A13FDEC42C1 ] C:\Windows\System32\aepic.dll
00:10:30.0293 0x04a0  C:\Windows\System32\aepic.dll - ok
00:10:30.0293 0x04a0  [ B07866073403CA67EFD4E90199DFB481, 8ECF360D0BD3F3B6BAE0718D351897267A39187E4BC45C5FF49638682B8AF970 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Scanner-Interface\fsgkiapi.dll
00:10:30.0293 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Scanner-Interface\fsgkiapi.dll - ok
00:10:30.0308 0x04a0  [ BC172419399E6C479B979988D619B170, F904B86CC5298507002151C8CD9E6C07D0BD188D2947035EAF1AC13FA7621E41 ] C:\Windows\SysWOW64\fltLib.dll
00:10:30.0308 0x04a0  C:\Windows\SysWOW64\fltLib.dll - ok
00:10:30.0308 0x04a0  [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] C:\Windows\System32\Drivers\PEAuth.sys
00:10:30.0308 0x04a0  C:\Windows\System32\Drivers\PEAuth.sys - ok
00:10:30.0308 0x04a0  [ 6B48734D5856F32A8CACE40CD1AD9B33, F7F92CF25B933348D0E0A4011AF4B001212AC767D5114281CD4E1001371EE6E1 ] C:\Windows\System32\ncsi.dll
00:10:30.0308 0x04a0  C:\Windows\System32\ncsi.dll - ok
00:10:30.0308 0x04a0  [ 7911470B6018059A880469A63B65700A, 4B6131491A028FBCA54AC261112D183EFD42E98160545C8E8DFBDA01C87B3FB5 ] C:\Windows\System32\winhttp.dll
00:10:30.0308 0x04a0  C:\Windows\System32\winhttp.dll - ok
00:10:30.0308 0x04a0  [ 5858AA1B5AF20C37B186971A21460A4E, 5BD4708E4E6AFC22B3AAFE592A7800C9621BFC3833585F00F00FFE6294A42915 ] C:\Windows\System32\ssdpapi.dll
00:10:30.0308 0x04a0  C:\Windows\System32\ssdpapi.dll - ok
00:10:30.0308 0x04a0  [ C954FE5796A0BFCDCDD8A9C210E9D2C3, B935E2E16F20CBE4172509EB7A71C1CCF52EBFFF629CE64D1F6698A7AE6CFDBA ] C:\Windows\System32\sfc_os.dll
00:10:30.0308 0x04a0  C:\Windows\System32\sfc_os.dll - ok
00:10:30.0324 0x04a0  [ 5DCBA1A3AE7150D2B71347BDD08639ED, 1F95863F935EA963AF10D6E0A66E57F222E1ABCFAE7A9EBFD64028B7B34B8E02 ] C:\Windows\System32\version.dll
00:10:30.0324 0x04a0  C:\Windows\System32\version.dll - ok
00:10:30.0324 0x04a0  [ 3A2BDD76E7D2A5F40A7174793D1BA794, 029EE2C2F71AEC7906600EEC4F855DC5648C1ECF53F11426079B04591F24D067 ] C:\Windows\SysWOW64\PnkBstrA.exe
00:10:30.0324 0x04a0  C:\Windows\SysWOW64\PnkBstrA.exe - ok
00:10:30.0324 0x04a0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] C:\Windows\System32\Drivers\secdrv.sys
00:10:30.0324 0x04a0  C:\Windows\System32\Drivers\secdrv.sys - ok
00:10:30.0324 0x04a0  [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] C:\Program Files (x86)\Skype\Updater\Updater.exe
00:10:30.0324 0x04a0  C:\Program Files (x86)\Skype\Updater\Updater.exe - ok
00:10:30.0324 0x04a0  [ BC7AA3511B4A2CF53405EF8AAEC807E5, 7DF8AC2090B4EBC4D8589F69CEDD52D8D532F2B3106F628884078197DFF4DD2D ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FCH32.DLL
00:10:30.0324 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FCH32.DLL - ok
00:10:30.0324 0x04a0  [ 14FC338B80CFF7E04215133B568D15C4, 1F437BE0EC887097F0C3409D4198A20981FC325FDF915532AB85070D337DEF2B ] C:\Windows\System32\Drivers\srvnet.sys
00:10:30.0324 0x04a0  C:\Windows\System32\Drivers\srvnet.sys - ok
00:10:30.0339 0x04a0  [ D233B16999A8E626F6004BD7814C57EC, 5BBFE5DDF1269617ABD1BDBED85A79D99BB52EA29C2BB3A8F4A1827BFAA1A747 ] C:\Windows\System32\sstpsvc.dll
00:10:30.0339 0x04a0  C:\Windows\System32\sstpsvc.dll - ok
00:10:30.0339 0x04a0  [ B07EBDFDAE2D8DA74E9AC38D72A25348, 3B3DF784925E38E9A38E14F81953CDB607B10B410441A2813F99F4FD7D0F2DB7 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_upstream_plugin_32.dll
00:10:30.0339 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_upstream_plugin_32.dll - ok
00:10:30.0339 0x04a0  [ 8F2A13A5DF99D72FDDE87F502A66F989, 2228C62ACDB4CBBFDD2BE705E604E0B9A8AEA7146F65F2D8B9B2A2FB49ACFAE1 ] C:\Windows\System32\Drivers\tcpipreg.sys
00:10:30.0339 0x04a0  C:\Windows\System32\Drivers\tcpipreg.sys - ok
00:10:30.0339 0x04a0  [ A06CB9269D29EE3D0F3F5630ABB660B8, 519A01FC7D9414B26CCBC23E7FB1CEAF1C91CD173B4F4A4025F8316B7460C584 ] C:\Windows\System32\sysmain.dll
00:10:30.0339 0x04a0  C:\Windows\System32\sysmain.dll - ok
00:10:30.0339 0x04a0  [ 88B7721AB551C4325036B25A34A2BF7B, 2817CC6294542524EC373A674535F913440736BEBE81233CA91D5ECD93620B02 ] C:\Windows\System32\tapisrv.dll
00:10:30.0339 0x04a0  C:\Windows\System32\tapisrv.dll - ok
00:10:30.0355 0x04a0  [ BAC8A721736AECC55A4F71523AEAB65F, B52E1303B13A961A5FC190829E55B6F28ACA409A6EEF44B358D1D210558FE1D8 ] C:\Windows\System32\wiaservc.dll
00:10:30.0355 0x04a0  C:\Windows\System32\wiaservc.dll - ok
00:10:30.0355 0x04a0  [ EB1669BAD1F2BCF16352E74D61117339, AC25B791D8438C1A49181E5D0290B5A043D7DED85928AE4247C77DD83599E29F ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_upstream_32.dll
00:10:30.0355 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_upstream_32.dll - ok
00:10:30.0355 0x04a0  [ 3D6B518B71C75C8FA4115A33615C107A, ED7A266013D29D3B1A462464735C3632BEA121D1B32553907AEAA0B00595C3DF ] C:\Windows\System32\wbem\WMIsvc.dll
00:10:30.0355 0x04a0  C:\Windows\System32\wbem\WMIsvc.dll - ok
00:10:30.0355 0x04a0  [ 2935B83ADDED04242622580091251474, 717F1CB2ADDA8D9DE5447FFFD82B1104B8365A32E32952B65F17A9AE4B3E1982 ] C:\Windows\System32\wiatrace.dll
00:10:30.0355 0x04a0  C:\Windows\System32\wiatrace.dll - ok
00:10:30.0355 0x04a0  [ D8043053F4B1E850AF56B7AC768ED9FC, 0BAD392D89AA07A8793D9F6D892230567D8F117441CF00B7873C301F579E59AB ] C:\Program Files (x86)\TalkTalk\Security\SELocalInfoAPI.dll
00:10:30.0355 0x04a0  C:\Program Files (x86)\TalkTalk\Security\SELocalInfoAPI.dll - ok
00:10:30.0355 0x04a0  [ 8F625E3E627BC99823E7E168A9AB5625, ACD73EE7B9E0812AD99B646C7D62DEDAB57387431F7EBFD1855F5F3E1AC3F35E ] C:\Windows\System32\wsdchngr.dll
00:10:30.0355 0x04a0  C:\Windows\System32\wsdchngr.dll - ok
00:10:30.0371 0x04a0  [ 8C8CF3041B27E7657ADD0EE17F6DBFCA, A6846478B9E7B0A509E5A28C6C7B66ED39F0247F9AFF01E3C3CADC0DBEF3CA00 ] C:\Windows\System32\trkwks.dll
00:10:30.0371 0x04a0  C:\Windows\System32\trkwks.dll - ok
00:10:30.0371 0x04a0  [ DEE6E5F4CD4C78DB612B0B62C4E321A9, 981E4B299A9DC9E9B10BBC0D7B419B29F58810F4469D56AE6BCF54AB1E447381 ] C:\Program Files (x86)\TalkTalk\Security\fsaua.dll
00:10:30.0371 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fsaua.dll - ok
00:10:30.0371 0x04a0  [ 7320560F4A6FA26EC432D0E4AFE6112F, 80B657202720B18F2869F3B7F25F3CDEECB87235D2B63477C82824FD9ADBA873 ] C:\Windows\SysWOW64\SensApi.dll
00:10:30.0371 0x04a0  C:\Windows\SysWOW64\SensApi.dll - ok
00:10:30.0371 0x04a0  [ 050B3961FC435F43BD04F5D44DA61325, 36D4FFF7BB6D2BA1D1BF3B151975B2C5BEB08A27BA2598E89B7E32950001A88E ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_nid32.dll
00:10:30.0371 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_nid32.dll - ok
00:10:30.0371 0x04a0  [ 72D34C6DE5DEBF26442F6A7EC91517C1, 9D4032C1C4557308E8907F9A4AD49C288BA386EFAE888E4A0F74D266AEEAC221 ] C:\Program Files (x86)\TalkTalk\Security\daemon.dll
00:10:30.0371 0x04a0  C:\Program Files (x86)\TalkTalk\Security\daemon.dll - ok
00:10:30.0386 0x04a0  [ 282191A781E23B9CB50BF7652A5F511C, 70299AE38C41D7793C30D998C91EF1A8AF428CD576DC742C1AE0E963ED744951 ] C:\Windows\System32\httpapi.dll
00:10:30.0386 0x04a0  C:\Windows\System32\httpapi.dll - ok
00:10:30.0386 0x04a0  [ 21CA3869D0EA99C902B26ED697BD78E5, C18AC7A07EF12C3242FEC2E68952F8B91F365ADF755E6E7D1ADE9319C0041CDC ] C:\Windows\System32\wbemcomn.dll
00:10:30.0386 0x04a0  C:\Windows\System32\wbemcomn.dll - ok
00:10:30.0386 0x04a0  [ B330CE47FB74A6BE9A3FFFF4B3F64D9B, B76226808406D8B38DE2D3A8CCE633BB507022C8BAAA6C3DAD34204CC6CE1284 ] C:\Windows\System32\wlidsvc.dll
00:10:30.0386 0x04a0  C:\Windows\System32\wlidsvc.dll - ok
00:10:30.0386 0x04a0  [ 311E5E1976E0BD9110A88B93158055D5, F1AA738D6AD74C33785EEFE1FBE8A869AAB62417B7D079389293AB1209A849C1 ] C:\Windows\System32\wuaueng.dll
00:10:30.0386 0x04a0  C:\Windows\System32\wuaueng.dll - ok
00:10:30.0386 0x04a0  [ 56218A571ECF8D55E0CDFF8DF2546CF1, 44B34722108EDDC8757A0B7C939A854457BB7EBC92A83C4284DFFAECFC2E3619 ] C:\Windows\System32\Drivers\srv2.sys
00:10:30.0386 0x04a0  C:\Windows\System32\Drivers\srv2.sys - ok
00:10:30.0386 0x04a0  [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6, 61EEB1349489CB85204F1B4E398BE24EDC01FB914120C9DD0487F8EE1EDA055E ] C:\Windows\System32\Drivers\srv.sys
00:10:30.0386 0x04a0  C:\Windows\System32\Drivers\srv.sys - ok
00:10:30.0402 0x04a0  [ F082773EF130B7293E0F6D64B962A118, 8E2F70EBDCE4CE43650323FF34204A2CD7B2D5E6E9708CCFBF4AF929228828E0 ] C:\Windows\System32\deviceassociation.dll
00:10:30.0402 0x04a0  C:\Windows\System32\deviceassociation.dll - ok
00:10:30.0402 0x04a0  [ 47E892006A6155BE617F526E02CA09DD, 3528CF57B1506DD2277B8C0301C68AA489F83FDDF33DB38F620C55C38488C0A2 ] C:\Windows\System32\fundisc.dll
00:10:30.0402 0x04a0  C:\Windows\System32\fundisc.dll - ok
00:10:30.0402 0x04a0  [ 508F0DE3A65183A3D7ADF4C1F20E9696, CBDDDAD6FE5F5AE4A79B24197043BB7A489E6158E1F6766A3F80BAEA084B9B11 ] C:\Windows\System32\PortableDeviceWiaCompat.dll
00:10:30.0402 0x04a0  C:\Windows\System32\PortableDeviceWiaCompat.dll - ok
00:10:30.0402 0x04a0  [ 56DA495DE9758984ADF855D4EA30D4A9, B21E68473130F6A6FF3DD124CF8EFBB958D6BFB3F9B15BAFF944243A9B0AEBD1 ] C:\Windows\System32\esent.dll
00:10:30.0402 0x04a0  C:\Windows\System32\esent.dll - ok
00:10:30.0402 0x04a0  [ C84B51243DF6A6C5835FF6CAEC5C6B97, 37B1A02E3561FB7296CA899EC9E124D206B801002653B1B6E0C10B9F38A69BDA ] C:\Windows\System32\webio.dll
00:10:30.0402 0x04a0  C:\Windows\System32\webio.dll - ok
00:10:30.0418 0x04a0  [ 8542BEA78795403D705A21B83ABD589F, 73FBD20662212323CBE6EB091994E89BFF86538C073EBA7C9C1AC321EF25B888 ] C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\GdiPlus.dll
00:10:30.0418 0x04a0  C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\GdiPlus.dll - ok
00:10:30.0418 0x04a0  [ E24FCC199F4AD27289ACEC15D8A6740C, 84AA1777D751ED135FED09DEF227F25FFB5547AFA2D53300167CCBC05564FAE7 ] C:\Windows\System32\fdPnp.dll
00:10:30.0418 0x04a0  C:\Windows\System32\fdPnp.dll - ok
00:10:30.0418 0x04a0  [ AFE9464D80CFE0B0ECFE906C8A5996A0, 15F76F5F035286209B2BBF95A6959E1AE44C9EFED649F91346FA3BE371100709 ] C:\Windows\System32\winspool.drv
00:10:30.0418 0x04a0  C:\Windows\System32\winspool.drv - ok
00:10:30.0418 0x04a0  [ A0CFAE5D60E2011E7531F1921028259C, 8D0E6C024FECE67AEA51B6669CB9469D70B4083E865235BF95DC9F89958D6166 ] C:\Windows\System32\cabinet.dll
00:10:30.0418 0x04a0  C:\Windows\System32\cabinet.dll - ok
00:10:30.0418 0x04a0  [ F21C16DA28157B5897555588E7949E9E, 36D18FFE5662E729361AE81AB7A30DA35C49D8AD482225DA39B80143A8E00743 ] C:\Windows\System32\mspatcha.dll
00:10:30.0418 0x04a0  C:\Windows\System32\mspatcha.dll - ok
00:10:30.0418 0x04a0  [ 256EE31588257E8A555DBFAA13F1908E, B6817F632EDEA483E35BF26846DCDD4E95E860620959179B2A5D8AD7EEDDB126 ] C:\Windows\System32\srvsvc.dll
00:10:30.0418 0x04a0  C:\Windows\System32\srvsvc.dll - ok
00:10:30.0433 0x04a0  [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] C:\Windows\System32\browser.dll
00:10:30.0433 0x04a0  C:\Windows\System32\browser.dll - ok
00:10:30.0433 0x04a0  [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] C:\Windows\System32\rasmans.dll
00:10:30.0433 0x04a0  C:\Windows\System32\rasmans.dll - ok
00:10:30.0433 0x04a0  [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] C:\Windows\System32\iphlpsvc.dll
00:10:30.0433 0x04a0  C:\Windows\System32\iphlpsvc.dll - ok
00:10:30.0433 0x04a0  [ 547D152592C3B4960DD80D9C61F7C8A9, 391730B171A4BE09B6C2C89614ED39B3750529DF43AE652E79CE3E463466611B ] C:\Windows\System32\mi.dll
00:10:30.0433 0x04a0  C:\Windows\System32\mi.dll - ok
00:10:30.0433 0x04a0  [ 3C14BC7A5590DFDD754CA7A15CED0A9A, ABC82F9D02A6BD0B90459BD8300F4CEA39AA40D1705CAA34A145FBCADF54F3E2 ] C:\Windows\System32\sscore.dll
00:10:30.0433 0x04a0  C:\Windows\System32\sscore.dll - ok
00:10:30.0433 0x04a0  [ C5D0659CEA9A87C4C4E82B0464683F19, 8F789FB1E65A1BD5CD1F44FDD3B6ED1CDE1BAFE2A320E95B3401AE25BCD7BF12 ] C:\Windows\System32\sscoreext.dll
00:10:30.0433 0x04a0  C:\Windows\System32\sscoreext.dll - ok
00:10:30.0449 0x04a0  [ A0C07056756C94FA19B231BBE58C33DF, DFA3D95B2130413939F6CEA309729B1361AECF6C07FD30C519FE48EB0DC56D6B ] C:\Windows\System32\wups.dll
00:10:30.0449 0x04a0  C:\Windows\System32\wups.dll - ok
00:10:30.0449 0x04a0  [ 8CABB7DB418AA58CEC8A00E43368EAA7, 1BFD20A806FE6FD4E00240D2940C1CC8D368F312254CF4AF9EFE06780797A1C8 ] C:\Windows\System32\miutils.dll
00:10:30.0449 0x04a0  C:\Windows\System32\miutils.dll - ok
00:10:30.0449 0x04a0  [ 6FCBBD06ED5EFC708FB7D00D5D099C70, FFF9FBB181A3C9314EC65D1D74255CB3548D48EAC25CD30CF9A56BCAA99307D1 ] C:\Windows\System32\rastapi.dll
00:10:30.0449 0x04a0  C:\Windows\System32\rastapi.dll - ok
00:10:30.0449 0x04a0  [ 39F77E95F29C4E13D774AF25C504282A, D5A16EC7CB44D14A82CB4969C9907E6392AC904A41A307EBE509C3D7ACB8FEB9 ] C:\Windows\System32\tapi32.dll
00:10:30.0449 0x04a0  C:\Windows\System32\tapi32.dll - ok
00:10:30.0449 0x04a0  [ 0AEF3F58E05D5BBCD8A3CF2B393FE465, F9697AA818175E2F07936B90C0FE6C8436A5DFB759D0E5A4CD9B0E5CEE53C563 ] C:\Windows\System32\wmidcom.dll
00:10:30.0449 0x04a0  C:\Windows\System32\wmidcom.dll - ok
00:10:30.0464 0x04a0  [ 633B9891D7C18B992CE9C6AF08DF4D05, 522EC553CCC5EFFD4AA8A2BEE3D250E8783E6638FD4237EAD3AF88C720C69E8B ] C:\Windows\System32\wups2.dll
00:10:30.0464 0x04a0  C:\Windows\System32\wups2.dll - ok
00:10:30.0464 0x04a0  [ 104BA949E64659ED6B8D23BA08299F55, 6BBFF261D527CD679DE2568BA452D3AFCA6FD43639660F86EE890E8C128DB0C5 ] C:\Windows\System32\httpprxm.dll
00:10:30.0464 0x04a0  C:\Windows\System32\httpprxm.dll - ok
00:10:30.0464 0x04a0  [ D728042519B8FCBEE14EC250E3F050B8, 1739032E4B3E8224E1BB7062BFA9B74370189AFD1835B90D79FFADB13DF53EA6 ] C:\Windows\System32\resutils.dll
00:10:30.0464 0x04a0  C:\Windows\System32\resutils.dll - ok
00:10:30.0464 0x04a0  [ DE9FDB812157F77CA4EB46E3ABB40448, 244F7DFBCEA4041C8F0814B06D9ADA8DAFDB0FF1147A1C206783677FCD1ED687 ] C:\Windows\System32\clusapi.dll
00:10:30.0464 0x04a0  C:\Windows\System32\clusapi.dll - ok
00:10:30.0464 0x04a0  [ 0E2BB2E43DCCE4ED986BF3B8641DFC08, F51D0C10539F218DFF151B6C9BA7C4125D0DC2DE2A3B1A1F7172F9DBB5D465B1 ] C:\Windows\System32\adhsvc.dll
00:10:30.0464 0x04a0  C:\Windows\System32\adhsvc.dll - ok
00:10:30.0464 0x04a0  [ 8BD33FC2A78607E00D012D550C0E2E69, 5382A95932F7BAA3B55948AA99D3AFA8B324BFB8D7CAEC2465C4A81C93390D56 ] C:\Windows\System32\ncbservice.dll
00:10:30.0464 0x04a0  C:\Windows\System32\ncbservice.dll - ok
00:10:30.0480 0x04a0  [ 43B20FC33366C5F867C9F05D03DA651F, B452243C9145DB677E9810335EE31CE38AA5A75F48CFBC4F151803C6BADA74B5 ] C:\Windows\System32\netprofm.dll
00:10:30.0480 0x04a0  C:\Windows\System32\netprofm.dll - ok
00:10:30.0480 0x04a0  [ A1E7D1141A5AF2AD243E252767BAD2EC, 4751E76E6AC52D9380684B273250D60D61D462AB5EBFDC37BBBBAEECE826942F ] C:\Windows\System32\unimdm.tsp
00:10:30.0480 0x04a0  C:\Windows\System32\unimdm.tsp - ok
00:10:30.0480 0x04a0  [ C9DA260FC97E22905A97FFC3D5F42B18, E424CB675532C7323E3628DA0D498FCD34CB636ECC05C6D7F449F61C78606CE9 ] C:\Windows\System32\bi.dll
00:10:30.0480 0x04a0  C:\Windows\System32\bi.dll - ok
00:10:30.0480 0x04a0  [ 68F75813B8779365C6905DAB831FE5C0, CE403881CA7A62DA32B81F2A3770510FE609367EA214A7A1264C194B8AD3C9F2 ] C:\Windows\System32\kmddsp.tsp
00:10:30.0480 0x04a0  C:\Windows\System32\kmddsp.tsp - ok
00:10:30.0480 0x04a0  [ 52CCF6A430D77C88F3A795CA0004C39F, 297FF656EEC33CB9E27240D1A6B988437E88B6EFF596CE4852BC9245BFE1F94F ] C:\Windows\System32\uniplat.dll
00:10:30.0480 0x04a0  C:\Windows\System32\uniplat.dll - ok
00:10:30.0480 0x04a0  [ 5BB9A5EE8B0A787028382C31A0E3610A, AA0A5988D154D84BDA290D37EA65DA9313EEFE2A393AAD92710FC3DFFC0B04F7 ] C:\Windows\System32\ndptsp.tsp
00:10:30.0480 0x04a0  C:\Windows\System32\ndptsp.tsp - ok
00:10:30.0496 0x04a0  [ 55C6944DC9FBE9884F24F5F4CD82A245, C68A0B0826FE9937BA3CEC3209193B6499CDBB3ED6BC56CFFB68A72D8C300E6A ] C:\Windows\System32\hidphone.tsp
00:10:30.0496 0x04a0  C:\Windows\System32\hidphone.tsp - ok
00:10:30.0496 0x04a0  [ 64F6AFD2F4F8D0DB5B8770EC59103778, A681B1D160BC2E4855B0C907110870D0FC0BB917C89B35C8327679E0DEC5E1FB ] C:\Windows\System32\PortableDeviceApi.dll
00:10:30.0496 0x04a0  C:\Windows\System32\PortableDeviceApi.dll - ok
00:10:30.0496 0x04a0  [ AC89ADD10CDAC8D5647928FBE5B94621, 2670131BA80D4729499042EDC5E6AD31DF1DEB3B3A7C30094327BA079C268066 ] C:\Windows\System32\PortableDeviceTypes.dll
00:10:30.0496 0x04a0  C:\Windows\System32\PortableDeviceTypes.dll - ok
00:10:30.0496 0x04a0  [ 40527161F01D26228A2792A351D1E76C, C83AAC3A1FCA477AA749FB86DABA242C408DCF911A6F980A515B4399EBAAA884 ] C:\Windows\System32\WSDScDrv.dll
00:10:30.0496 0x04a0  C:\Windows\System32\WSDScDrv.dll - ok
00:10:30.0496 0x04a0  [ 96486A251B78FFBD9C559C78054BAD59, 05DE8DB2F8F23033DBA66DC377EB54364123E2CD4DDFB1D0628F3A1F8FB8AA29 ] C:\Windows\System32\WSDApi.dll
00:10:30.0496 0x04a0  C:\Windows\System32\WSDApi.dll - ok
00:10:30.0496 0x04a0  [ 5C51484B4D2211FBE88DEB472588B5DF, C67B371351DF5627B6E2F23B768F3D1743CD2E248FFE0B9A945E1FF05839B14B ] C:\Windows\System32\wdscore.dll
00:10:30.0496 0x04a0  C:\Windows\System32\wdscore.dll - ok
00:10:30.0511 0x04a0  [ 509192E80BF34E985C4D277A8FFF2893, C0FFAC035C24DCDD0C945CD95265ED14604937A199AB453891AEE6BD36544833 ] C:\Windows\System32\webservices.dll
00:10:30.0511 0x04a0  C:\Windows\System32\webservices.dll - ok
00:10:30.0511 0x04a0  [ 0EC28714499583607F412A3E4BD7EBBE, FA3C5AA39036B3A273AB019FE0920DDEEB2FEC18490D01D54E727B533F5B2B38 ] C:\Windows\System32\rasppp.dll
00:10:30.0511 0x04a0  C:\Windows\System32\rasppp.dll - ok
00:10:30.0511 0x04a0  [ 6625A9EECF1846921DA7230062E483FE, 7C7B81E42C6A2990D4BACE7B2043D7D298D6EA4A8A53A72594406FC3C6C31F11 ] C:\Windows\System32\eappcfg.dll
00:10:30.0511 0x04a0  C:\Windows\System32\eappcfg.dll - ok
00:10:30.0511 0x04a0  [ 58D768B03F3C7FF919004634C29E7843, A8D1ADB08CE993C6F83F27FDEF6B5491E63FF41E37C64E0B56FDAB8CE3C54CB7 ] C:\Windows\System32\nci.dll
00:10:30.0511 0x04a0  C:\Windows\System32\nci.dll - ok
00:10:30.0511 0x04a0  [ 20ECD0A490A121CB34F553FAD1DBBD39, 17C9DA33E78FBC7582B0AA53C611929B80FBBE1343B84A179D515B51C964D218 ] C:\Windows\System32\escsvc64.exe
00:10:30.0511 0x04a0  C:\Windows\System32\escsvc64.exe - ok
00:10:30.0527 0x04a0  [ 61EF83CFCCF2142BF33E49660479122F, 74D479C351DEAFE4CCE3E98F302931DB0F2807840B50151901A9A28A7F6B32C6 ] C:\Program Files (x86)\TalkTalk\Security\CuifApi.dll
00:10:30.0527 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CuifApi.dll - ok
00:10:30.0527 0x04a0  [ C9289AEEF5E1E58161E0F858E24C019C, 2A4626775835637CD87D5F62CD56EB48BEFD586E5B2CF9E6B31F1875ED4922BE ] C:\Program Files (x86)\TalkTalk\Security\fs_se_latebound.dll
00:10:30.0527 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_se_latebound.dll - ok
00:10:30.0527 0x04a0  [ B2FBCEF15811AC6288DD1BAD5239FC96, 090CFBFB4C54D8A7377903392D36237EE007AFDF00342BC2E09A63DB3DFACD7C ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtXml4.dll
00:10:30.0527 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtXml4.dll - ok
00:10:30.0527 0x04a0  [ 10647322DC6D894C4B6E1A197A27DBC3, 43638E05DCA8C53FC7585131588CB100B824D1A51B80155EA9F96DDD20E506C4 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCore4.dll
00:10:30.0527 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCore4.dll - ok
00:10:30.0527 0x04a0  [ 92DE412ADECB84A639653043046A7A9D, 45EE2F7C840D8CF085CDEFB1AFAFDF8A48F1509F48D68BEB79C10DCD1AA38944 ] C:\Program Files (x86)\TalkTalk\Security\fs_secl_32.dll
00:10:30.0527 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_secl_32.dll - ok
00:10:30.0527 0x04a0  [ 64385BE2B299792E7920CA9993C18B2F, 7CD63A020D298D823388E0150CBD0F9DFF1C153357B4CC59E120EECBCF7227BD ] C:\Program Files (x86)\TalkTalk\Security\CCF_Licensing.dll
00:10:30.0527 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CCF_Licensing.dll - ok
00:10:30.0543 0x04a0  [ 0E38A984BE8C1F4A095B4A4E8BA1EB23, B05DB6BE638D13805F9CDCB0259EF69007B53A5B3E3335BFFA3F4427E7D42800 ] C:\Windows\SysWOW64\winmm.dll
00:10:30.0543 0x04a0  C:\Windows\SysWOW64\winmm.dll - ok
00:10:30.0543 0x04a0  [ DF790AE26A476DAA05210BA571B45AAC, 05450E3DF1CD1388E8E1F97C899CD4BAE62BC32DF75A44DFAF3B30103BA36A5F ] C:\Windows\SysWOW64\winmmbase.dll
00:10:30.0543 0x04a0  C:\Windows\SysWOW64\winmmbase.dll - ok
00:10:30.0543 0x04a0  [ 567612D556BBC4FC98169EA98F6EA480, 2B76C6CEB61177DF590FA4B589C448205B543958F691073EFA8248F0245EE75B ] C:\Windows\SysWOW64\cfgmgr32.dll
00:10:30.0543 0x04a0  C:\Windows\SysWOW64\cfgmgr32.dll - ok
00:10:30.0543 0x04a0  [ B2A25F2C3DCCD9858701E0AF13E5EE4D, 623221CB1610C150AE1F952680118DB42F93A5B3E4B8487552286A6BF4B3853B ] C:\Windows\SysWOW64\devobj.dll
00:10:30.0543 0x04a0  C:\Windows\SysWOW64\devobj.dll - ok
00:10:30.0543 0x04a0  [ BC38399854D5BE6D8C589298CB8C301A, 09A74B512BD80EC59784684C1AC113F0045A6F5B423EB063C1B6BB42D22C82E4 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_flyer_api.dll
00:10:30.0543 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_flyer_api.dll - ok
00:10:30.0558 0x04a0  [ E82587882256B48A65F1FC82AE1D0FC3, 60C603DC4A7B37F6DCFBE783E754984D0653F867F805FEE4BF01A668E781F4A3 ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspapi.dll
00:10:30.0558 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspapi.dll - ok
00:10:30.0558 0x04a0  [ 8D623FB4D93D320501DC20941797DEF3, B21FC48122F44E0C4BBF4945468FAA5F7682EA240752755894884681A2746DE4 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_id_converter32.dll
00:10:30.0558 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_id_converter32.dll - ok
00:10:30.0558 0x04a0  [ EAC10B32AD63C164CD7AA912529400CA, DAC05EB0C2285A630CA1E00C2D2851F7265D269889CED8FAD561486967544CC6 ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fs_ccf_ni_plg_banking_protection32.dll
00:10:30.0558 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fs_ccf_ni_plg_banking_protection32.dll - ok
00:10:30.0558 0x04a0  [ 76260C0FC2B57D9B0CC225E373C3578F, CD089A12F407C7A3471AAFD70C4351629751B00B29097973A6D2CA3119A20C4A ] C:\Windows\SysWOW64\wuapi.dll
00:10:30.0558 0x04a0  C:\Windows\SysWOW64\wuapi.dll - ok
00:10:30.0558 0x04a0  [ 0EFCE333980CA8C9CC7C13D067EB80AF, 1CB128F943EA539290B669FD2E0FBF01BB85580C7A6E02BCACEF0740EEA1B291 ] C:\Windows\SysWOW64\cabinet.dll
00:10:30.0558 0x04a0  C:\Windows\SysWOW64\cabinet.dll - ok
00:10:30.0558 0x04a0  [ AAAF8AB8C31A5CFC6532DF6CFEB44BAA, A77ADEF94C2449989DB56D4A322C45C70CCC9CC9457182F65200BA4F43B3C3DE ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_blockpage32.dll
00:10:30.0558 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_blockpage32.dll - ok
00:10:30.0574 0x04a0  [ B607284B548E9749B7DFE21F0B0EE376, B5C6FA52AB5F3FA15BB5420240B133B3A833F07BAD0318CFBC5634BE70FC9643 ] C:\Windows\SysWOW64\wups.dll
00:10:30.0574 0x04a0  C:\Windows\SysWOW64\wups.dll - ok
00:10:30.0574 0x04a0  [ 0EA5A25A35877161C57A972AD6BA62A9, 99485D65824815F5826815C5A655DD3B6A9F0E6EDC2688D9A656BD8A6AAF8DE9 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_ticketingapi32.dll
00:10:30.0574 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_ticketingapi32.dll - ok
00:10:30.0574 0x04a0  [ 729C7B60899FC70AE21137ED1BBE03B5, E30FC3DBEC3B6F9CCFCEAEFC3A663F70DF0BD1A9EA6E552748C0D7586B671041 ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspupd.exe
00:10:30.0574 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Reputation\orspupd.exe - ok
00:10:30.0574 0x04a0  [ 1D503C09E4CF2322A0B403EAEC43A06B, 9D96B35D8944274DDFEE98F12FAB6EF5BD35E146D8599BEBB690F9417F14E590 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_download_32.dll
00:10:30.0574 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_download_32.dll - ok
00:10:30.0574 0x04a0  [ 58C0CA86362B32ABC87E39A99013C75A, ACCAE2E3800FBE15E41069C4F756D1623D91F9D948966EF2B677875FCDB1E432 ] C:\Windows\System32\conhost.exe
00:10:30.0574 0x04a0  C:\Windows\System32\conhost.exe - ok
00:10:30.0589 0x04a0  [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] C:\Windows\System32\Drivers\condrv.sys
00:10:30.0589 0x04a0  C:\Windows\System32\Drivers\condrv.sys - ok
00:10:30.0589 0x04a0  [ 8FA11A7DDBD2AD5809E85DFCF6652BE4, 08A97743125F7D113725A8C945111FAF92EE5388D873265E373227C6A2E98422 ] C:\Program Files (x86)\TalkTalk\Security\fs_ccf_action_center_api_32.dll
00:10:30.0589 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fs_ccf_action_center_api_32.dll - ok
00:10:30.0589 0x04a0  [ 1E0DFBB85EA37AB2BA780EA9AB522026, 41617A92F5F353395F61ED1C2B94A7F720FB58BF379400BBE341BABDFD273331 ] C:\Windows\SysWOW64\setupapi.dll
00:10:30.0589 0x04a0  C:\Windows\SysWOW64\setupapi.dll - ok
00:10:30.0589 0x04a0  [ F51F613DB14A45185730E5BDFE136595, F4F04877BD17B8BBFBA90DCCB836AA4DBB1A5A499DA5DCE0D9784BDEB1F38D2B ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fs_ols_ni_plg_contentfilter32.dll
00:10:30.0589 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fs_ols_ni_plg_contentfilter32.dll - ok
00:10:30.0589 0x04a0  [ 2097219BDE589008E9B603E29D8C8476, 04F2EBCC57CF3948A938F930C986C18120093CDDEAECCAB4F95AAADD8D7FB038 ] C:\Program Files (x86)\TalkTalk\Security\fsinstall.exe
00:10:30.0589 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fsinstall.exe - ok
00:10:30.0589 0x04a0  [ D86F25F0AD6CA6E77A9F67641EEB6722, 15066B624C54A3FEDEEB840330E45B7F24A411941DB39DFB75177225409C57B4 ] C:\Windows\System32\sqmapi.dll
00:10:30.0589 0x04a0  C:\Windows\System32\sqmapi.dll - ok
00:10:30.0605 0x04a0  [ EF6D330ECBD93DDB460EED60E045BEF4, A3FFD3392678EAD7DB66EEBC1272CA2CDD4CEB4847964567C8C98392CA538407 ] C:\Windows\System32\vpnike.dll
00:10:30.0605 0x04a0  C:\Windows\System32\vpnike.dll - ok
00:10:30.0605 0x04a0  [ C863C1F383F395988FA2B3D11BD921E6, 9010C0BDA2F86629B899519DD8A341D3A80A975ADDE478265A95977E148BE2EC ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_http_util32.dll
00:10:30.0605 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_http_util32.dll - ok
00:10:30.0605 0x04a0  [ EF5EAB49E03D78014225333E36CC2226, 7DD37E745B8699CACA27CD24D69AEC3D72A3A9B5EED1CF6153D6A659C2613BA7 ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_orsp32.dll
00:10:30.0605 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fs_ccf_ni_plg_orsp32.dll - ok
00:10:30.0605 0x04a0  [ 501B17AE73658A3B8642F25B82579601, 47ED768E5E0E95A371DF884EBB581545ED151263B3F2909C1B29C467DC4E0040 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fs_ccf_ni_plg_wts.dll
00:10:30.0605 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fs_ccf_ni_plg_wts.dll - ok
00:10:30.0605 0x04a0  [ 4CB89F24538F31E2C63C41B9F1E5A26E, 0FF6664B74A72E857C1A4CC60660E2061D5BE63DEC36C082B1A9AF5122832705 ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fsosstat.dll
00:10:30.0605 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fsosstat.dll - ok
00:10:30.0621 0x04a0  [ 1371A0F5CE8C77C3AC87A7331AEF3D56, 7DB79BB5569FD1981C7D3D66FA1250EB0FD0C39EF7403178A679E63D7FDB3D56 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\ULFW\program\fs_ccf_ni_plg_ulfw32.dll
00:10:30.0621 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\ULFW\program\fs_ccf_ni_plg_ulfw32.dll - ok
00:10:30.0621 0x04a0  [ A22FBC91EA1AF6499555183CDDB2BD96, FF7482CDE66D403D08CA5575B510C16C1C16E847661D9B359F593002FA3A9768 ] C:\Windows\System32\sti.dll
00:10:30.0621 0x04a0  C:\Windows\System32\sti.dll - ok
00:10:30.0621 0x04a0  [ CEB35EB551BE4F216691255D38867346, DD4F2492DAA55452E4CA4B5753FF003E2DC3AC4EA7155D98A25A4A28F38DE91E ] C:\Windows\System32\activeds.dll
00:10:30.0621 0x04a0  C:\Windows\System32\activeds.dll - ok
00:10:30.0621 0x04a0  [ 6AE7DC415EFF4840512E5354CE99F4A5, 1067A1A802EE5C11ED0D8B54662548604570C498EEA680F18886C76E435F7ADE ] C:\Windows\System32\adsldpc.dll
00:10:30.0621 0x04a0  C:\Windows\System32\adsldpc.dll - ok
00:10:30.0621 0x04a0  [ F9D908DE6B166DAC9B89BF62FA291CE8, D0A918AD60221623BB0278EA94CD6938744617FDBB2054968AFAFC2940648F02 ] C:\Program Files\Bonjour\mdnsNSP.dll
00:10:30.0621 0x04a0  C:\Program Files\Bonjour\mdnsNSP.dll - ok
00:10:30.0621 0x04a0  [ 11A9C08F39F929B0D04FEE7C743CE8D9, 7EAA4CC06E5F63D81609DADA3A7135C1199E20FE02B89A6BCA60B1A67CE71268 ] C:\Windows\System32\adsldp.dll
00:10:30.0621 0x04a0  C:\Windows\System32\adsldp.dll - ok
00:10:30.0636 0x04a0  [ 04C84B41AD7BC0C663A613CA9E3D3FC5, 3E588C77AC9F2396DDD624F9DB34601728AF417FDED4DC757165A15DEF51B9BD ] C:\Windows\System32\rasadhlp.dll
00:10:30.0636 0x04a0  C:\Windows\System32\rasadhlp.dll - ok
00:10:30.0636 0x04a0  [ F10C09A8331B0A9B30C8056F1FEB14CE, B2A76106574C456FB77562661660C006697E11D7C579C4F736E50C14D0952FD1 ] C:\Windows\System32\raschap.dll
00:10:30.0636 0x04a0  C:\Windows\System32\raschap.dll - ok
00:10:30.0636 0x04a0  [ 46558835A2092077DB5E90BE3E9715B1, CE4B184A40E98C659E34424808C99D2F29B44BAFFD65DDCD85F06CDEF8599466 ] C:\Windows\System32\credui.dll
00:10:30.0636 0x04a0  C:\Windows\System32\credui.dll - ok
00:10:30.0636 0x04a0  [ 8B5D475B48506471669B9B46945138B0, 88956FDA549DA91BFE914955450AAE973460BC72870EA3C76B0A0C370B2D3D83 ] C:\Windows\System32\wer.dll
00:10:30.0636 0x04a0  C:\Windows\System32\wer.dll - ok
00:10:30.0636 0x04a0  [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] C:\Windows\System32\ipnathlp.dll
00:10:30.0636 0x04a0  C:\Windows\System32\ipnathlp.dll - ok
00:10:30.0636 0x04a0  [ FA6C8E59B74908550607EBEDCD7BA1E2, BCD5847CA9C6E781E20C4377DF097BC30A32F5D911BFC365BD1329EEB751862A ] C:\Windows\System32\secur32.dll
00:10:30.0636 0x04a0  C:\Windows\System32\secur32.dll - ok
00:10:30.0652 0x04a0  [ 909EBA9AF43AF0E70EA7FFC352484424, 7C028D773E9B2CEB2ADD0ACA8ADD038C470D98C3CCC3DBC80C06F4BC64C3E967 ] C:\Windows\System32\mprapi.dll
00:10:30.0652 0x04a0  C:\Windows\System32\mprapi.dll - ok
00:10:30.0652 0x04a0  [ 335C4488A14AC4B52B3E1CDF6D6F7780, E5DAF500A18952F9D64116A8025B19E34B18CCE4C1069D8505253FE64932E153 ] C:\Windows\System32\hnetcfg.dll
00:10:30.0652 0x04a0  C:\Windows\System32\hnetcfg.dll - ok
00:10:30.0652 0x04a0  [ 52EF3A32EC17D3E9580A79A23B712917, 1A5C013334E48AB404BA958CEDF346B10CDDE823332B357416BC5F45CB79CF63 ] C:\Windows\System32\brdgcfg.dll
00:10:30.0652 0x04a0  C:\Windows\System32\brdgcfg.dll - ok
00:10:30.0652 0x04a0  [ 55955FB63C2E045AA9915184880B4F27, 19731B1D96A58B58E53BB1A52171C4469DD74B2B3FA27058ECF931FD0FAFC44D ] C:\Windows\System32\cscapi.dll
00:10:30.0652 0x04a0  C:\Windows\System32\cscapi.dll - ok
00:10:30.0652 0x04a0  [ 08AF5B64DA03D206508CBACAEB9E1FF3, 3254D0AE75D14E0B46885DBDB64C3A3043C6C450F80B0E172FEE05F9C5018732 ] C:\Windows\System32\ndiscapCfg.dll
00:10:30.0652 0x04a0  C:\Windows\System32\ndiscapCfg.dll - ok
00:10:30.0668 0x04a0  [ DD35092F11DCED777EF8621D4EE2505A, 92A6FA9989834632986DAAD9A7F168BD85673C9D51AAC4F55F6CA723C92E4156 ] C:\Windows\System32\rascfg.dll
00:10:30.0668 0x04a0  C:\Windows\System32\rascfg.dll - ok
00:10:30.0668 0x04a0  [ B6191C2187460A0568A9F510188DE2ED, 2F948A82E885FD9E78FAEE152A79C05B8B64305D1EDACA8C5A2B6618F6FFBF46 ] C:\Windows\System32\wbem\wbemprox.dll
00:10:30.0668 0x04a0  C:\Windows\System32\wbem\wbemprox.dll - ok
00:10:30.0668 0x04a0  [ 11F0834544D68B955E6C44DFFB272122, B02C18C530033B413FA5FB72AF2AAC4B14CA179FC150BC004A28B8C951520E84 ] C:\Windows\System32\mprmsg.dll
00:10:30.0668 0x04a0  C:\Windows\System32\mprmsg.dll - ok
00:10:30.0668 0x04a0  [ F6BB843AFC93AEE9E928CFE4BB5B743C, 82AFF0865BF7292CCC862F18FB19A8A1D4408C7468402C4536BC560D8C3176ED ] C:\Windows\System32\LldpNotify.dll
00:10:30.0668 0x04a0  C:\Windows\System32\LldpNotify.dll - ok
00:10:30.0668 0x04a0  [ 25FD6AB608C7CFDEAAC24BA882AC4052, 22388DD49B652D48B53A786581A309D46CB2429921DEF0B29A65CA232E65A2E6 ] C:\Windows\System32\NdisImPlatform.dll
00:10:30.0668 0x04a0  C:\Windows\System32\NdisImPlatform.dll - ok
00:10:30.0668 0x04a0  [ AF56A8936DF2F7031D4311C81D065CE9, 788E138D579E71616AB3E10AF0959674BF59165505FB031795D71BAD0213198E ] C:\Windows\System32\tcpipcfg.dll
00:10:30.0668 0x04a0  C:\Windows\System32\tcpipcfg.dll - ok
00:10:30.0683 0x04a0  [ 735D4C58ADC1F4DE5A59850078910218, BBBE7A15C1078F6BC7045BCC0C216F6C0203F66C3D921D84334EB80F8D94FF13 ] C:\Windows\System32\wbem\wbemcore.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\wbemcore.dll - ok
00:10:30.0683 0x04a0  [ E54F732758B5BB7405C2F4E05A64D6E1, 072FE1A984150196D02FED1D88D380DE000211EB396E2C6388B55A6EA72BC301 ] C:\Windows\System32\wbem\esscli.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\esscli.dll - ok
00:10:30.0683 0x04a0  [ 19304E66115DD1400182211B4FD7E73A, 5E15C03A18B56142DC243125BB7EE1F66A5FD1DAE08B0DC5B5871A2C2035BB5D ] C:\Windows\System32\wbem\fastprox.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\fastprox.dll - ok
00:10:30.0683 0x04a0  [ 9B7280BAF510CE8AA3E712BC63EE50E3, 1A1AA6B665F162823AB5E88688B1C9042099B10E359D328966B068DD6CCEA837 ] C:\Windows\System32\wbem\wbemsvc.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\wbemsvc.dll - ok
00:10:30.0683 0x04a0  [ 4811A86C4CA6EDC58D316A29E56629F6, EEED60D7D8BC534CF9A2F782FB01A22C6DA2606104937E1A1548105D84EF4DE8 ] C:\Windows\System32\wbem\wmiutils.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\wmiutils.dll - ok
00:10:30.0683 0x04a0  [ 616285E00B6B7F2DE84891F6D094528B, 7B71CA5D755FBC9E46A8CEECE364768AFF8B8BE64A73A27D690853D1F2CD763F ] C:\Windows\System32\wbem\repdrvfs.dll
00:10:30.0683 0x04a0  C:\Windows\System32\wbem\repdrvfs.dll - ok
00:10:30.0699 0x04a0  [ 1ACFB845970106D77B57D7176429A811, 3D6D7743C85D95E63E59B418B5AF3CCA83C9DE0B8A95F284F99EB6B5DAF3A212 ] C:\Windows\System32\wbem\WmiPrvSD.dll
00:10:30.0699 0x04a0  C:\Windows\System32\wbem\WmiPrvSD.dll - ok
00:10:30.0699 0x04a0  [ 54482D83FF8501A46BB0B349FED0DAEB, 3506E8039D63F737F6858E1E63EBBC669EE19F2B6B6EC033E89F3BE05A0231D1 ] C:\Windows\System32\ncobjapi.dll
00:10:30.0699 0x04a0  C:\Windows\System32\ncobjapi.dll - ok
00:10:30.0699 0x04a0  [ E296B0D7842DD5478605B6C86573E52F, D03A634475192424ECC266301E36E47DF3632A5BA075DC449BB9DC8B4F3CEAE1 ] C:\Windows\System32\wbem\wbemess.dll
00:10:30.0699 0x04a0  C:\Windows\System32\wbem\wbemess.dll - ok
00:10:30.0699 0x04a0  [ F7FE8684ADE6E144F6BCDA556B6907E7, DC7CF70482A83FADE7862FF840F3615E22AAA4851C6E38CFE44CAF0A0625A96F ] C:\Windows\System32\dafupnp.dll
00:10:30.0699 0x04a0  C:\Windows\System32\dafupnp.dll - ok
00:10:30.0699 0x04a0  [ 085CA7DA099678506A862AFCE927C229, A6C53F6ECF4B39FFEC6744142E586F08C7402BD562FAFCA9B50AA4CEED4148A3 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys
00:10:30.0699 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys - ok
00:10:30.0699 0x04a0  [ 240FC332484572227CD1DF82407F33E5, 5210549EC519DD3BCA6BBC995F01E1E3E0988580797E4BD1433F429E0CB30412 ] C:\Windows\System32\wdi.dll
00:10:30.0699 0x04a0  C:\Windows\System32\wdi.dll - ok
00:10:30.0714 0x04a0  [ 54A59A152C795E4FD51FB247841F57D6, 07DD8A9E518E52A1826399A5DA280F5A523301E6DC3ACFDE1533E1438A1F3C9C ] C:\Windows\System32\diagperf.dll
00:10:30.0714 0x04a0  C:\Windows\System32\diagperf.dll - ok
00:10:30.0714 0x04a0  [ D1A04DC07552A12553D64404CDBAB3A1, CD6765C36FAF2E7DC61A869B6CB164448C6765F34A70437B9F0B54FD5A617F26 ] C:\Windows\System32\perftrack.dll
00:10:30.0714 0x04a0  C:\Windows\System32\perftrack.dll - ok
00:10:30.0714 0x04a0  [ 7417B004B5BD4B9EC1140890131CD41D, 717212F4628B211803BCA98FF8936DE242127FB94278D5C6CCE9AA309A5C1594 ] C:\Windows\System32\pnpts.dll
00:10:30.0714 0x04a0  C:\Windows\System32\pnpts.dll - ok
00:10:30.0714 0x04a0  [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] C:\Windows\System32\netprofmsvc.dll
00:10:30.0714 0x04a0  C:\Windows\System32\netprofmsvc.dll - ok
00:10:30.0714 0x04a0  [ 26D38C1391CD81ADDD791DE136E2FEA7, 56B794F554E223FC4D0827652B84AAC28106DBCE2BF33D83AF1AE2BEDCB6C3FD ] C:\Windows\System32\npmproxy.dll
00:10:30.0714 0x04a0  C:\Windows\System32\npmproxy.dll - ok
00:10:30.0714 0x04a0  [ D7B1721B587698D495079B28758F13B3, D1725300E6176F8CBC746A9CD95B4FCFF371D97A143ECA3C42E8498C27CCE92E ] C:\Windows\SysWOW64\urlmon.dll
00:10:30.0714 0x04a0  C:\Windows\SysWOW64\urlmon.dll - ok
00:10:30.0730 0x04a0  [ 11CA1330E16D1772E868A86FBFD8A0AD, 337D5FF88C27BDA70A1364CACEADF8E5A26A240C1258550ECE62EEB0F72B0B7E ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE
00:10:30.0730 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.EXE - ok
00:10:30.0730 0x04a0  [ B8D6C9C297E36CCC8E51F3782EDBA4C8, 1DB75A86ADE06D82C638B51833584551332DB3EE8944DE4F5270DC441B965B82 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.DLL
00:10:30.0730 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA32.DLL - ok
00:10:30.0730 0x04a0  [ 4C19B29A6C8736B011AEABB4CEF74862, 0F7455A086976D884672A551B83AEB54EC09F51A4E9419F5EBCDEDA485697707 ] C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys
00:10:30.0730 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\CCF_Scanning\fsni64.sys - ok
00:10:30.0730 0x04a0  [ 0F57DEA30340B49B06DCB8B077BEF072, B48D794036B68C9E2F2AFBC0D2B2A848445CBE3A325E07010FD70DC9285F4D54 ] C:\Windows\System32\PortableDeviceConnectApi.dll
00:10:30.0730 0x04a0  C:\Windows\System32\PortableDeviceConnectApi.dll - ok
00:10:30.0730 0x04a0  [ 3013658A4D327854BEEC4A08D9655194, C4CF5AA6A47CC55E7037B0BFE20AE0A6442ADDC5DEB89D6861C98C61851FA821 ] C:\Windows\System32\wpdbusenum.dll
00:10:30.0730 0x04a0  C:\Windows\System32\wpdbusenum.dll - ok
00:10:30.0746 0x04a0  [ 7A20882D76D4A78240A5AC9F2C2EBA21, ACA05211EE542999A118BBD2CD051038A7DC8C40C4B8971DC6514BA90E90EC61 ] C:\Windows\System32\ssdpsrv.dll
00:10:30.0746 0x04a0  C:\Windows\System32\ssdpsrv.dll - ok
00:10:30.0746 0x04a0  [ C27A04116A918D72C3D50CF3696F71E1, 0108CAA97ADC3BA468078803B15C851EBB3964751DF96EE4EB270D5A1CB05855 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMENG.DLL
00:10:30.0746 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMENG.DLL - ok
00:10:30.0746 0x04a0  [ FF18F8D50DC7FE1A783C6DFFDA9DB38B, 90C864E3A1D221DA81C03138AE4893632D18CE21FA8479FDB0F2735476977DB3 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fships.dll
00:10:30.0746 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fships.dll - ok
00:10:30.0746 0x04a0  [ E4B3CE98A6DBE4B609133C045D2C8525, CA8739164032C320B180C7D546D31DD4BA9966F32CC76658ECA36E47FE6BE925 ] C:\Windows\SysWOW64\cscapi.dll
00:10:30.0746 0x04a0  C:\Windows\SysWOW64\cscapi.dll - ok
00:10:30.0746 0x04a0  [ E896C75EE5CB36A252B1C908E2DDAB2C, 1101BC178BFABDDF0106348350DD99B56E5FD24E3B49E61134E39E5C1EFEE421 ] C:\Windows\SysWOW64\NapiNSP.dll
00:10:30.0746 0x04a0  C:\Windows\SysWOW64\NapiNSP.dll - ok
00:10:30.0761 0x04a0  [ DA74DB6E019D7B27C7EA25155EE6DE34, 0DAA75AB8A2E075F040381BD0F29931ADBA9241F4C19217921CCBD8B8FA9312F ] C:\Windows\SysWOW64\nlaapi.dll
00:10:30.0761 0x04a0  C:\Windows\SysWOW64\nlaapi.dll - ok
00:10:30.0761 0x04a0  [ E31D5851E5F789D29DB955C75C3760BA, 148ABDDAEE387C86662FEEDE347B57F2D23971FD870DE9B603C263E42021E2D9 ] C:\Windows\SysWOW64\pnrpnsp.dll
00:10:30.0761 0x04a0  C:\Windows\SysWOW64\pnrpnsp.dll - ok
00:10:30.0761 0x04a0  [ BAB337D3F4C2ECDF883B9CAEC41F49FB, 8C4A7477B1A65029AD9C73FC273FA4A07C95A3410051EA08791FB84FEA050E6B ] C:\Windows\SysWOW64\winrnr.dll
00:10:30.0761 0x04a0  C:\Windows\SysWOW64\winrnr.dll - ok
00:10:30.0761 0x04a0  [ 110BC797DD54997BFE11953317EB06D9, D8110A665BD47B1241E59B2F350871679D4B2B88A78798178EEF76D18FB932E2 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsav32.dll
00:10:30.0761 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsav32.dll - ok
00:10:30.0761 0x04a0  [ 7C90B79A521386AF11BDBD543A5E5F60, 405E37E739D1C261DA773C8F3EAADA0330D98C25462A51210686638D80EFFCF4 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FAMEH32.DLL
00:10:30.0761 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FAMEH32.DLL - ok
00:10:30.0761 0x04a0  [ 75C7C56A4E0DF8ECD99AC694D75C9AA1, 820058C0F8312C4D940CB7BD8A20F174B5C98C8975A38B565996428ED9B68164 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSHDLL64.EXE
00:10:30.0761 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSHDLL64.EXE - ok
00:10:30.0777 0x04a0  [ 5AFB8BF6DDC46D9A32C76734A7F0BC31, 667866D49D3579A5E1AABB0BB715C6C7530DB239C99F2903729B476C150F218C ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA_64.DLL
00:10:30.0777 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMA_64.DLL - ok
00:10:30.0777 0x04a0  [ 43CE5D7EC85ADAC710A090A68EA9ABD5, CD8257E5E762BF0598975BCEA82C525F4814FCCCA20846FB8B5992BB3398DCB0 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fslapi.dll
00:10:30.0777 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fslapi.dll - ok
00:10:30.0777 0x04a0  [ 126EDB56BDD99D4B74740D31D43D9F4B, B3C6D89F2866033B83E155BF95CCD05E93FE4281106F0FC1CEE703FF7DA91EF5 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMAPI_64.DLL
00:10:30.0777 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSPMAPI_64.DLL - ok
00:10:30.0777 0x04a0  [ 34B6C15D32A3DB1CA23654EEE5CD3758, B16EFF4E4DAEB2B20F19D7D921C6706BABF70C019592143557DBFD6C4DADB680 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\AMEHEVN.DLL
00:10:30.0777 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\AMEHEVN.DLL - ok
00:10:30.0777 0x04a0  [ 026A959D23E61EB1CE5A3BDA7DF3BD8D, B90CB777138D74DF7FDF81BDE33196FFD72CDE06C494AE7F99DB5F289D48B034 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\AMEHLOG.DLL
00:10:30.0777 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\AMEHLOG.DLL - ok
00:10:30.0793 0x04a0  [ 5A8133A9C2DEC4913E108963B1044F5F, AA3533B648F1EFC70024EFF2A780E5F580961874A9641FB494A58DA317F972EB ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\dbghelp.dll
00:10:30.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\dbghelp.dll - ok
00:10:30.0793 0x04a0  [ 44B4F0DD8047A15EBD8EA8308417DFAA, 4B5091573A42FC556324E8FE398198CA6A165CBA966446BA33F5FD961964CF8B ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fsumihost.dll
00:10:30.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fsumihost.dll - ok
00:10:30.0793 0x04a0  [ D61213DCB51E00C8556D7C82CE55A2E7, 4C7B5E23459B81982CE75A256DD1CE71A374384A2D124E68244551541706AC83 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fsumi.dll
00:10:30.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fsumi.dll - ok
00:10:30.0793 0x04a0  [ CC5512FC3FCCEA164F01592B5979F1BE, E06EA0DDB51EA49775FD102382719700142D124F102F221AB790C9B70A662B94 ] C:\Windows\System32\srumsvc.dll
00:10:30.0793 0x04a0  C:\Windows\System32\srumsvc.dll - ok
00:10:30.0793 0x04a0  [ 0D97A065E85D59B8F0EE2BD31A679456, 63F2E92CEECDB48E865B44C95F47502E98156A94D52D8D9E520D8227BB8A8AFA ] C:\Windows\System32\wdiasqmmodule.dll
00:10:30.0793 0x04a0  C:\Windows\System32\wdiasqmmodule.dll - ok
00:10:30.0793 0x04a0  [ D6A2CEA9A45B652C37C389F49805B283, 126362D7334518D748BD30A2820C7C08541D910068A9F952AE1EE11A20EB2A7E ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\TNB\fstnb.dll
00:10:30.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\TNB\fstnb.dll - ok
00:10:30.0808 0x04a0  [ 4EF4481A6C5AE3D38F580BC0FF3D0E4F, BD4E33977D64FEF01A78E094FB0A0CBF7F1A606759C62C4085E4CB5E3DFDBC2E ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
00:10:30.0808 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe - ok
00:10:30.0808 0x04a0  [ 8D454387D12D4DB13805F4128DE8F117, 75D0F07519EE9EFF74EFA183F1D38A706EC891905552A76051A4EF06FC1CFFF2 ] C:\Windows\System32\cryptnet.dll
00:10:30.0808 0x04a0  C:\Windows\System32\cryptnet.dll - ok
00:10:30.0808 0x04a0  [ 855E7E347893BDB93245120E137577FB, 893EB173BFA795EDA7211228AFDEE3B74948E458A88BFAEA028EAEDE2D379417 ] C:\Windows\System32\radardt.dll
00:10:30.0808 0x04a0  C:\Windows\System32\radardt.dll - ok
00:10:30.0808 0x04a0  [ 2D7BB53EA2BB3F213CE558A79EC8448D, B1BF16715C45329B184D0B0DADBB078EE08EF33FCB10C815909F96EBA004C8BA ] C:\Windows\System32\nduprov.dll
00:10:30.0808 0x04a0  C:\Windows\System32\nduprov.dll - ok
00:10:30.0808 0x04a0  [ D0A82052050909677C648B2496C0909E, 52F3FA666A33CBF1622084D8B894A8E280FC30948AC7191661491D860DEF1E87 ] C:\Windows\System32\wpnsruprov.dll
00:10:30.0808 0x04a0  C:\Windows\System32\wpnsruprov.dll - ok
00:10:30.0824 0x04a0  [ 9E2E7FE5237CFE3A0529B54C53021CA0, 0FF7EDCB907C08BF1A9422A8EC93F82D93D3A1AED2A1CA05450AB7113F580153 ] C:\Windows\System32\appsruprov.dll
00:10:30.0824 0x04a0  C:\Windows\System32\appsruprov.dll - ok
00:10:30.0824 0x04a0  [ 71697EDF104E5EACD75822E588FA8149, AEC6646D74CD1419D252017CF3FDD36B63E7EC12BF7A793C0AA1A023E94CAF23 ] C:\Windows\System32\energyprov.dll
00:10:30.0824 0x04a0  C:\Windows\System32\energyprov.dll - ok
00:10:30.0824 0x04a0  [ AE03E9CBFFB8EDE81B3DA7603E546F56, F8DEB21B67CBD41D0BB8BD8B772C6546D21876CACAFB04ACE807E29E1123CFC5 ] C:\Windows\System32\srumapi.dll
00:10:30.0824 0x04a0  C:\Windows\System32\srumapi.dll - ok
00:10:30.0824 0x04a0  [ CB01365A7708D9D104B254EAFDEB1142, 5591E3FA6608E381C37034C00EAF70EE3EFA2D595A0D7E6CE90A79D69F592755 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fshook64.dll
00:10:30.0824 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fshook64.dll - ok
00:10:30.0824 0x04a0  [ 56729AF2106FEB49800E16B5155B0312, 14614E9ACC58987026C03F4481FFA89E3EE1DE54C019DADAE99CFF6797A6B00F ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fshive2.dll
00:10:30.0824 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fshive2.dll - ok
00:10:30.0824 0x04a0  [ 7CC5951B917EAC1C2E42600A1B669373, 2AF1658DE420510E7C234244B1135053B6F36547D3AF81C58A2218FA0DC456A8 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
00:10:30.0824 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll - ok
00:10:30.0839 0x04a0  [ EC071B9681922208B4AE953CB5916C97, F44606BF94E4F4419D4362E8507C3DB4B5FD3E8BADF73D6BBCC220128B90F6C9 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\aquarius\fpiaqu.dll
00:10:30.0839 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\aquarius\fpiaqu.dll - ok
00:10:30.0839 0x04a0  [ 1755023407FDE00D9916505A557569D5, DA76FDB86B8A2C67FD5D04DC276C24D84A71B7EC3FD97577D9ABA56E4442DE7B ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\aquarius\core\bdcore.dll
00:10:30.0839 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\aquarius\core\bdcore.dll - ok
00:10:30.0839 0x04a0  [ 722257734A6F45C958AE7D650B2166FA, 5B3AD9335C7972F72FD472CEBCB8FE5C77300B12231EFDB11DF9F4936AF13E72 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsavhres.eng
00:10:30.0839 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsavhres.eng - ok
00:10:30.0839 0x04a0  [ E0D5B6ED856B3E720B3EF4056A40CEF9, D32F8E902F1C8C34483A1528BDC0794A2506D638C96609AE155ABE888EDDC417 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsched.dll
00:10:30.0839 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsched.dll - ok
00:10:30.0839 0x04a0  [ CA4FAFFA957C71C006B59E29DFE3EB8B, 2144DD4B49D61CFB49A52439BE8F76AE9468A101627287B11328370B00A22C44 ] C:\Windows\System32\pnrpnsp.dll
00:10:30.0839 0x04a0  C:\Windows\System32\pnrpnsp.dll - ok
00:10:30.0855 0x04a0  [ 768B5A538A11E9C6F8EDD9AFDFA16936, 6CBFA8E69BB3CE9148C141EE060D5DE88C08F964C1E21EF2F2A825E10ADD47FB ] C:\Windows\System32\winrnr.dll
00:10:30.0855 0x04a0  C:\Windows\System32\winrnr.dll - ok
00:10:30.0855 0x04a0  [ 149FEE067A002D75B7714C300D019C9E, CA50C77FEF5B87228266437B9439B8FDB479D8B2E95768C3ABE98D4A9E47B544 ] C:\Windows\System32\NapiNSP.dll
00:10:30.0855 0x04a0  C:\Windows\System32\NapiNSP.dll - ok
00:10:30.0855 0x04a0  [ F6F1B55FC775E6F096AD400030E9D0B8, A49A0EE8DD53DB8040B46116B55FF0013597B7A1C7DD28AACA124A1BC0F25281 ] C:\Windows\System32\dimsjob.dll
00:10:30.0855 0x04a0  C:\Windows\System32\dimsjob.dll - ok
00:10:30.0855 0x04a0  [ A6E506E122DF3244443BE6113404EB96, 56A08FC40BB7ECBDAF5A89E6AF92500C96E22EBCE4667A4F995164F94E7AECDA ] C:\Windows\System32\pautoenr.dll
00:10:30.0855 0x04a0  C:\Windows\System32\pautoenr.dll - ok
00:10:30.0855 0x04a0  [ 37814A36DBAF1AE9D42BE89889ECB4B7, 7ADB5D36C24191B8968350C11225A43EFE9611A2F555D1BFFEB8045F67B5D5AA ] C:\Windows\System32\certca.dll
00:10:30.0855 0x04a0  C:\Windows\System32\certca.dll - ok
00:10:30.0855 0x04a0  [ 15E174928C1ABD23B3647270F2632D6C, EFDEE7EBF1EDBA828EB2EEF237A7737232363C12DA74DA75D16505BFFAED14C2 ] C:\Windows\System32\CertEnroll.dll
00:10:30.0855 0x04a0  C:\Windows\System32\CertEnroll.dll - ok
00:10:30.0871 0x04a0  [ 1E1694792A584ABED81C18F68ABB28D0, 9A95E4A991483550FAC1835988748DCC6641F8BA31024B1C90228376825A6132 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fpshx.eng
00:10:30.0871 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fpshx.eng - ok
00:10:30.0871 0x04a0  [ DABB68CB0AFF1EF837EDFE99A59A8EF2, A5A7216EC24CEE67DB63EE3D8F198AB3F6B992B783F6241CFB104FC791C8CAF0 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSABTRES.eng
00:10:30.0871 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSABTRES.eng - ok
00:10:30.0871 0x04a0  [ 3982E79D2399BC31E8A17E3E42C0A226, A80CC320CCC8E8692CE16DCA0BDA98A1FBA7767A24AB42B0FB7D5A4FBAF704AB ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fsavres.eng
00:10:30.0871 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fsavres.eng - ok
00:10:30.0871 0x04a0  [ E266A1D16DCFB30BFABB7650088E724E, 95B4F7353924D91B71EA1C11DFFDE173021D85B53FE8A4E7EFCE7C3F81B3F01F ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fships.eng
00:10:30.0871 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fships.eng - ok
00:10:30.0871 0x04a0  [ 7FEDB5752A65415A131A749288656803, 90E448E26EE314E2980B759827BB2094C12C1677F083EA75D5919901CB3AAB7D ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSHOTFIX.eng
00:10:30.0871 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSHOTFIX.eng - ok
00:10:30.0886 0x04a0  [ 7A7DA8CD353E0D099A0BE2F3EBE79188, 3B18B20B1100F8990642752C90E2C2E0BC2B6EC5A0D2098960C03ED620DDF2BB ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMAINST.ENG
00:10:30.0886 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMAINST.ENG - ok
00:10:30.0886 0x04a0  [ 57DD66955D4CA606D1827EC94065002A, 83BEC1D710B9E39309889F67F13F5F484AC19C6CE6A080D3061118C5998B4A83 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMARES.eng
00:10:30.0886 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMARES.eng - ok
00:10:30.0886 0x04a0  [ 9464B46E76BA2253688B1D0167E36BF0, 97FAD1F49113B9FAD388693222F6495DDC45637B431034E4CE2EE0F1FA757126 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMAURES.eng
00:10:30.0886 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMAURES.eng - ok
00:10:30.0886 0x04a0  [ 54E5D3676182A5270F13F86F5D79028A, 98E926437C5122BB81D37EB435429FBA681CB347212069E1E9620B783DBA310F ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMRES.eng
00:10:30.0886 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSMRES.eng - ok
00:10:30.0886 0x04a0  [ 755059FD6A758EA4413B58A1B423E7D1, 621D29ABBF9F72FB8CAC62ADC230B69C3BB6990BEB6215C2B285190EE97D17E3 ] C:\Windows\System32\SettingSyncInfo.dll
00:10:30.0886 0x04a0  C:\Windows\System32\SettingSyncInfo.dll - ok
00:10:30.0886 0x04a0  [ B617F2E83951A9A4F495BBA58CF492B2, 7EFB78957D73DEF36264E0C941A442DF7B0B4DB2ADCB9E3602627C2B1F7C88F2 ] C:\Windows\System32\dllhost.exe
00:10:30.0886 0x04a0  C:\Windows\System32\dllhost.exe - ok
00:10:30.0902 0x04a0  [ 0899BF12B2142213630D49E645B8A507, CC544B5534D11077555344A980CB439697D7F7FD6728008D1A31EB9C0B4BC8E1 ] C:\Windows\System32\taskhostex.exe
00:10:30.0902 0x04a0  C:\Windows\System32\taskhostex.exe - ok
00:10:30.0902 0x04a0  [ B8388569DBA7BEA6D129B236DCAB8E74, F9F61BA55CDBE3B402320B9C72372615EDCA389221057B034989136A50DE0711 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
00:10:30.0902 0x04a0  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe - ok
00:10:30.0902 0x04a0  [ 38E669E49C35B6A02A9AF0737C526C0F, 6F1DB7CE5AF490EB700B61388F994CD4D73BA16535CA28FFEDC44A224965EB69 ] C:\Windows\System32\PlaySndSrv.dll
00:10:30.0902 0x04a0  C:\Windows\System32\PlaySndSrv.dll - ok
00:10:30.0902 0x04a0  [ 98D9EC5E81ECFCCEEB94894D19AA9F7E, FBE4C9179B2119C80C7A26C5F7D692E0042F9ACCF6FD26C330F6473C8404CEEB ] C:\Windows\System32\mpr.dll
00:10:30.0902 0x04a0  C:\Windows\System32\mpr.dll - ok
00:10:30.0902 0x04a0  [ 0E925F7BA032920D58DD284B6181A247, BEB43ECDCC0F56A477F59E03B7E4D3C8274FE88AFBE095F1E55DDF4BFA21798D ] C:\Windows\System32\userinit.exe
00:10:30.0902 0x04a0  C:\Windows\System32\userinit.exe - ok
00:10:30.0918 0x04a0  [ D1D5DAB39DCB4BE0359943738D87409B, 0BA45FE28568E852502879AE83C081517BB8103359BD5783328833EC59A54681 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
00:10:30.0918 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe - ok
00:10:30.0918 0x04a0  [ 8A8DB47DDF6B2118DF4D1561CEA586B3, C8F149AF8F3AA900C1BDC6139AF451A7245E81A926E0927C7E322088F2EFAE01 ] C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9200.16658_none_776622cb3175a40c\comctl32.dll
00:10:30.0918 0x04a0  C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9200.16658_none_776622cb3175a40c\comctl32.dll - ok
00:10:30.0918 0x04a0  [ 8BC5E1F477761F75B26E66746828915D, D8163F93274B68E8CC87086566EAA256C0AF3AA5C919B98773650536F0F54E0B ] C:\Windows\System32\HotStartUserAgent.dll
00:10:30.0918 0x04a0  C:\Windows\System32\HotStartUserAgent.dll - ok
00:10:30.0918 0x04a0  [ CD09341CCD92DA45EA5A0C725270FA51, E171F1724BAA5557720CEB45211F5D59069511467DBBEF0E545D0B94C270FA97 ] C:\Windows\System32\userinitext.dll
00:10:30.0918 0x04a0  C:\Windows\System32\userinitext.dll - ok
00:10:30.0918 0x04a0  [ 2CD702E123B5ED02C7008E66996D56E2, CDE408D7664E2E2CE85CEAE970731D7B1593655B1DFEC6F9EC7DB39211063749 ] C:\Windows\System32\SynCOM.dll
00:10:30.0918 0x04a0  C:\Windows\System32\SynCOM.dll - ok
00:10:30.0918 0x04a0  [ 773227D1B1D83D3D48A3FBADAFAA1200, FC0F5F956ACD6C8FC084413FD5DA731B046EE6366DE82AB8C0095F39D96EDBD3 ] C:\Windows\System32\SynTPAPI.dll
00:10:30.0918 0x04a0  C:\Windows\System32\SynTPAPI.dll - ok
00:10:30.0933 0x04a0  [ A572A1F193C14D7C17AB2BF3029A52BB, 9671A07BB27FF76FD346E5EABB8FDD660631627E665AFBA8CC0D01940DD82439 ] C:\Windows\System32\MsCtfMonitor.dll
00:10:30.0933 0x04a0  C:\Windows\System32\MsCtfMonitor.dll - ok
00:10:30.0933 0x04a0  [ 1A196FE539A6F81977805B6CE4F90BDC, C7E4BCDC4DCBC69C6850B3EE7BFB948F83E2C023B8AC75983E9A2EA43A5B640D ] C:\Windows\System32\msutb.dll
00:10:30.0933 0x04a0  C:\Windows\System32\msutb.dll - ok
00:10:30.0933 0x04a0  [ 640DE326C818DEAA57C11F97A4E20BCC, AD17CFCABACF5CF62299ED292AA48F33F7629B4C27540F87A009CC4D79B3E376 ] C:\Windows\SysWOW64\uxtheme.dll
00:10:30.0933 0x04a0  C:\Windows\SysWOW64\uxtheme.dll - ok
00:10:30.0933 0x04a0  [ 341ADCBB9A744F559C3CF3CA5D3D8934, F08D9693FB24CE50256F9F0FE67C8F79099A7E99AF55DF01346791A1C2453E4E ] C:\Windows\SysWOW64\dwmapi.dll
00:10:30.0933 0x04a0  C:\Windows\SysWOW64\dwmapi.dll - ok
00:10:30.0933 0x04a0  [ 4969314030A5FB18DDDEBFCFCF69E4D1, 4DEDC2A73B71AAEFC5D3A7AE482A3BDBAD562D37C52F2ABB02D179BB5960EF17 ] C:\Program Files\Synaptics\SynTP\SynTPRes.dll
00:10:30.0933 0x04a0  C:\Program Files\Synaptics\SynTP\SynTPRes.dll - ok
00:10:30.0933 0x04a0  [ 0E8E6463F81C80AFBED533E0F1F8895D, B68C5524D867E09EB39FB417694ED02F2DD171A1A1223BF15E03238E5D44B650 ] C:\Windows\explorer.exe
00:10:30.0933 0x04a0  C:\Windows\explorer.exe - ok
00:10:30.0949 0x04a0  [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] C:\Windows\System32\appinfo.dll
00:10:30.0949 0x04a0  C:\Windows\System32\appinfo.dll - ok
00:10:30.0949 0x04a0  [ 8411147754C00B3B096C5C0ED95B3CFC, 8FBE93CBCAECDB7CC05F41B68140668EEA08A0165484DACE6E7CD8EF933BA709 ] C:\Windows\System32\runonce.exe
00:10:30.0949 0x04a0  C:\Windows\System32\runonce.exe - ok
00:10:30.0949 0x04a0  [ DD79A6B15C2F28DE98DF4852AAF6B13B, 0F7E9023E0BA4B40E2DE9A9FA34E85FEAF72B93049AAB3E1D73AD046BB113E05 ] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe
00:10:30.0949 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe - ok
00:10:30.0949 0x04a0  [ 5DE0DC895CD108C5B6FFA00A7298DD0D, 2900E6112B3A087C114BCE9442F7BC3E3D31742EF5B08FF2FBE1A690F0E9F790 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fshook32.dll
00:10:30.0949 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\HIPS\fshook32.dll - ok
00:10:30.0949 0x04a0  [ CCA14076376D8D0161BA4EDC5A2CA81C, 7709325BF3EDDB45EADEF356A0C2E66A06BC6E9E14F8E81DE1B543C05AA129CB ] C:\Windows\System32\mscoree.dll
00:10:30.0949 0x04a0  C:\Windows\System32\mscoree.dll - ok
00:10:30.0964 0x04a0  [ 0FA29BD2E724CBBEB2D430384A181CA3, 261E838C8CB8350E695E334018F33FF422746A12325B6B9DBDDD68974FB2E11D ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
00:10:30.0964 0x04a0  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - ok
00:10:30.0964 0x04a0  [ 574341F9155AB2B425EF2021E4BCB173, 8EAB04F19B3D46AE8AF2591BC080BFC2AD31D2DA3D656D91800BB22BAA4DF2D4 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
00:10:30.0964 0x04a0  C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - ok
00:10:30.0964 0x04a0  [ 2D43B15DA25E6CDC39C733730D48F110, 69B08A736A04B0D9B352788F90B9D716EA816B1A460B373F8FF60DA35D594A06 ] C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_88dc8c812fb1ba3f\msvcr80.dll
00:10:30.0964 0x04a0  C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6910_none_88dc8c812fb1ba3f\msvcr80.dll - ok
00:10:30.0964 0x04a0  [ 8FC16497E8B2EDE2CE50F9C6CDF0FFE6, CDAA78FA74CEBF034CEE0B02DEDE96567A3AF80B3743DEEB36E5DD0B111EFD29 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsbl.dll
00:10:30.0964 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsbl.dll - ok
00:10:30.0964 0x04a0  [ E053AD1EA4F713DED08164069BF2A105, 8353DDE1FCAFCB640F290C1FD9EBD7EA9FABD67FFAE0981600F649211C294769 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsbld.dll
00:10:30.0964 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsbld.dll - ok
00:10:30.0964 0x04a0  [ E7CE0E0BE6DAB7A6EEAC72EF516626FD, 77BC61172D3F46D61F6F181F61BB4709EC0610DD00507E11C4F549AF45B3C5E8 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Gemini\fsgem.dll
00:10:30.0964 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Gemini\fsgem.dll - ok
00:10:30.0980 0x04a0  [ D12F9B2E31E1E4E6949C46A523965A5A, DF99C6F4DD36F8884BBA62EC794A66A2E8763242089D7EC8BA85B8B0108360F1 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Gemini\fsgeme.dll
00:10:30.0980 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Gemini\fsgeme.dll - ok
00:10:30.0980 0x04a0  [ 7259831EF8E30B2943316FAA343E96C0, 6A551C77544795A7410DFA13D85049B59DE34DF034DBF826143369483348DDEB ] C:\PROGRA~2\TalkTalk\Security\apps\COMPUT~1\ANTI-V~1\fsepx32.dll
00:10:30.0980 0x04a0  C:\PROGRA~2\TalkTalk\Security\apps\COMPUT~1\ANTI-V~1\fsepx32.dll - ok
00:10:30.0980 0x04a0  [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] C:\Windows\System32\IPSECSVC.DLL
00:10:30.0980 0x04a0  C:\Windows\System32\IPSECSVC.DLL - ok

Link to post
Share on other sites

00:10:30.0980 0x04a0  [ 5F46797ED1629F152EF4A8DD0DBBC31F, 0DE647B0B2C277DDAF639D951707DD0C695FA8364D69B971C1D8668C3D3F1BE2 ] C:\Windows\System32\DAFWSD.dll
00:10:30.0980 0x04a0  C:\Windows\System32\DAFWSD.dll - ok
00:10:30.0980 0x04a0  [ ACA7A882A6CAD94A08632868AA2EE64A, 73AA41960A4A39BCA960743083ADCFC494B19FADCBADD53FD7386934D6141E69 ] C:\Windows\System32\FwRemoteSvr.dll
00:10:30.0980 0x04a0  C:\Windows\System32\FwRemoteSvr.dll - ok
00:10:30.0996 0x04a0  [ A4AD730C8F3DC619EF033260C2F6C373, 45E0BA31B4D2C5F833A2CC74CD3167784CF41433016A3CAC6B85D82EA3AF04AC ] C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\061d0414114241f4f2fe0908bf53b076\mscorlib.ni.dll
00:10:30.0996 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\061d0414114241f4f2fe0908bf53b076\mscorlib.ni.dll - ok
00:10:30.0996 0x04a0  [ E80F8803C65547334800A28B4B6BA214, C1228E10EB2EF313BDE687098CF5328CEBD18CE1335E2A3E65539914ABD4B033 ] C:\PROGRA~2\TalkTalk\Security\apps\COMPUT~1\ANTI-V~1\fsecr32.dll
00:10:30.0996 0x04a0  C:\PROGRA~2\TalkTalk\Security\apps\COMPUT~1\ANTI-V~1\fsecr32.dll - ok
00:10:30.0996 0x04a0  [ 37E7633EFA709BB310A3E084D058DA23, ACEBDC2D750CD5530DC3AF76FA8511E3E8D03A6747FF725AB4D498955930E68C ] C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
00:10:30.0996 0x04a0  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe - ok
00:10:30.0996 0x04a0  [ 910C8964A4F5212C50601BE31607A138, 5F457F19892B4F942BFF3DD9A78F0D9BAAA8501A4A5872B9952348C1FBE7B383 ] C:\Windows\System32\wlroamextension.dll
00:10:30.0996 0x04a0  C:\Windows\System32\wlroamextension.dll - ok
00:10:30.0996 0x04a0  [ 5544F876B3932D3D6ED67656B28228CF, F5B9588544E44B2EF6FB953E70AB85EEE6C2D263B08DD11AEC1D10837BDC6602 ] C:\Windows\System32\consent.exe
00:10:30.0996 0x04a0  C:\Windows\System32\consent.exe - ok
00:10:30.0996 0x04a0  [ AF433565E5E02857C5D0AFFD932AF150, F87E322C81988EC00EAF0EB0A7327614676CE7B0BD243C74831508E820CC3210 ] C:\Windows\System32\msimg32.dll
00:10:30.0996 0x04a0  C:\Windows\System32\msimg32.dll - ok
00:10:31.0011 0x04a0  [ A2418204EBFA6F41DE3DF2FBB46B7F3F, 18BF0FDF8EF215F73C5ED7E13ED8D0C662BA1313FB9928545A2BC50AC88B719B ] C:\Windows\System32\pcacli.dll
00:10:31.0011 0x04a0  C:\Windows\System32\pcacli.dll - ok
00:10:31.0011 0x04a0  [ 4DD390AE1E1AD7EE02EFBB40FFBFE353, 5048107BF7E6E63139C496FEDFD781F51A6156CF62F9E19084D5CB02852411CA ] C:\Windows\System32\NotificationUI.exe
00:10:31.0011 0x04a0  C:\Windows\System32\NotificationUI.exe - ok
00:10:31.0011 0x04a0  [ 31F671016B2F3403D39A2FD6B58D63EE, 8F5D9F03EAFB9AEE5FA56561908CF08947E6BBD92B1608CA9008C46C4AE90DC5 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
00:10:31.0011 0x04a0  C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll - ok
00:10:31.0011 0x04a0  [ B4A8196583408768088F71ECFB8EAE1D, 8FBC83FF2F47521554CA6C46B5B7BA78F7D02F9E8D10E73D24F8B232F66461B6 ] C:\Windows\System32\riched20.dll
00:10:31.0011 0x04a0  C:\Windows\System32\riched20.dll - ok
00:10:31.0011 0x04a0  [ C6B2D1AE7F957BCA38C6C86E800BDC3F, 653317C168276537AEBC054B2AA2B51132DE5543F55A432E9F145B1ECA4A5198 ] C:\Windows\System32\usp10.dll
00:10:31.0011 0x04a0  C:\Windows\System32\usp10.dll - ok
00:10:31.0027 0x04a0  [ 3D3AE51E3778D89CCDB7CE3714F24E7D, 698B4DFF92847CA745094A635D113C0BEE72B761EB280DD380F0665668FA0CA6 ] C:\Windows\System32\msls31.dll
00:10:31.0027 0x04a0  C:\Windows\System32\msls31.dll - ok
00:10:31.0027 0x04a0  [ FC0F11E0253A58BBA13A31C75C8BC091, 895017DD5A613342CDAC9BF5394F1CEEDFEF5EAE00FDB901C8FFAFC423F667A3 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
00:10:31.0027 0x04a0  C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - ok
00:10:31.0027 0x04a0  [ 82D6849CDA1D699794C775F9D3F4B69C, C51C50AF183A9D27302906AE6DF9A34A7CAAE9383DF7D857B206961A77A7B990 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System\04880ad19c3db0d7c93d6e6c53d24c4a\System.ni.dll
00:10:31.0027 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System\04880ad19c3db0d7c93d6e6c53d24c4a\System.ni.dll - ok
00:10:31.0027 0x04a0  [ 85C6CC5EC607128363C741D41EA55F40, 4737F0BE6F5CD91E493DE36FF8C536CBC93331E6E827294B7635556BFAED079B ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\8b88ae6d063a9d8ffc2f312af5d40ce5\System.Drawing.ni.dll
00:10:31.0027 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\8b88ae6d063a9d8ffc2f312af5d40ce5\System.Drawing.ni.dll - ok
00:10:31.0027 0x04a0  [ A5C0162F06B89906C3A006003189D7F7, 8CD49049E6102E9892E2EB6041C56EC4C3236F11E0FBD42A4E8846A3B2A872F8 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\01a89d2c3499af1e3378797d51eec364\System.Windows.Forms.ni.dll
00:10:31.0027 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\01a89d2c3499af1e3378797d51eec364\System.Windows.Forms.ni.dll - ok
00:10:31.0027 0x04a0  [ 58C8403A5D5099813810F99E57F3E7A3, 9AEC00829E6CE8DD64C83151D6AA1540A1AEE86744784FCA7389235440C5E223 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Spam Control\fsas.dll
00:10:31.0027 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Spam Control\fsas.dll - ok
00:10:31.0043 0x04a0  [ B511D627D2E525E1F06DD7CCF52410E7, 1E36220847C3AE17A85E050A6E6E1A2C3F069445EB81C52F61A258CD41019E9B ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsuss.dll
00:10:31.0043 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsuss.dll - ok
00:10:31.0043 0x04a0  [ 5E58E452808360AD3BD0EA5C5F6CDCDA, E921DA187C9B4632A6371CF182F9B68DEFC2320453294EEA4131BFFBAE494AAC ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fs_win_store_app_api_32.dll
00:10:31.0043 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fs_win_store_app_api_32.dll - ok
00:10:31.0043 0x04a0  [ 17643DEFFC8CF5CA874A84F1AC8C478C, 2018414B282C9E2673E2BDC3121F3AA69912EF1CB4D3AEAF53BF54FCE30B4078 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsusscr.dll
00:10:31.0043 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsusscr.dll - ok
00:10:31.0043 0x04a0  [ F0408DB6F94E3F0D5ED94B16C097A622, 5DF9FEABA1258882966C3FD59488F6CCDF5D6A1F153176C801C153DFB3CA47D4 ] C:\Windows\SysWOW64\runonce.exe
00:10:31.0043 0x04a0  C:\Windows\SysWOW64\runonce.exe - ok
00:10:31.0043 0x04a0  [ BFDD523AB06AB9932B6327E52C6E9AE6, 7EA9BE9F33ED3B25D519235391B574FFF0110AB1E78D893E397B745CADC9858A ] C:\Windows\SysWOW64\propsys.dll
00:10:31.0043 0x04a0  C:\Windows\SysWOW64\propsys.dll - ok
00:10:31.0058 0x04a0  [ 0515FF4F49057EDE5FAAB6537D26D5EB, CB6076A36C8109AC2E99422F8B1A495EBD13AA7A0F3ECCEFCFD791228811F6E7 ] C:\Windows\System32\dssenh.dll
00:10:31.0058 0x04a0  C:\Windows\System32\dssenh.dll - ok
00:10:31.0058 0x04a0  [ 65F5702109057C9BF7C45366992199D2, 7C4591931E0F7D30F35EC72D92C3302AA8EDB492CEEE256C7EC19389DA6C55B6 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
00:10:31.0058 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe - ok
00:10:31.0058 0x04a0  [ 2BA3C1B040FA5C83C78D25DB36B57710, 8DDE0BC50990873EF38D60E071E10C6A832606A89836BA962B3DE03B8A735BCA ] C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll
00:10:31.0058 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll - ok
00:10:31.0058 0x04a0  [ 04BC1373D96A54FDC32E24A094DFC041, B02151F02A4BC2FDEC4457EAB2A3C75B82C03ABA0AFA5DE305F2D2503141F83C ] C:\Windows\SysWOW64\ktmw32.dll
00:10:31.0058 0x04a0  C:\Windows\SysWOW64\ktmw32.dll - ok
00:10:31.0058 0x04a0  [ 5996C79FB52BDE3FA10F77396654AE42, 910D521315B83BB0D805EACEAC3C83169AA791D1D1E64B417077C01AE21FEB66 ] C:\Windows\SysWOW64\cmd.exe
00:10:31.0058 0x04a0  C:\Windows\SysWOW64\cmd.exe - ok
00:10:31.0074 0x04a0  [ F2E12B5B7EEDE6854104E5AF8AC841A8, 733DD36D212A4793475F917E92755290CFE3942D1751CFC60A94B223F88043EE ] C:\Windows\SysWOW64\cmdext.dll
00:10:31.0074 0x04a0  C:\Windows\SysWOW64\cmdext.dll - ok
00:10:31.0074 0x04a0  [ 42946DF60DA82E1350AB6D636AE19B3D, 950A9DAA685614975BE4A788FEF0D7E87C3F1FDF5D3FEA923F034C91C38BE3CE ] C:\Windows\SysWOW64\shdocvw.dll
00:10:31.0074 0x04a0  C:\Windows\SysWOW64\shdocvw.dll - ok
00:10:31.0074 0x04a0  [ B55D431B5EEC32FF6E7B7111DABD5711, 00B19F1A1B078FD85AA1057CDA4DECFD7812E0FF033751DBA1DB208FC7BD1D50 ] C:\Users\John\AppData\Local\Temp\{EBA5EECF-0341-4AB0-AAC5-E74590B620E2}.exe
00:10:31.0074 0x04a0  C:\Users\John\AppData\Local\Temp\{EBA5EECF-0341-4AB0-AAC5-E74590B620E2}.exe - ok
00:10:31.0074 0x04a0  [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] C:\Windows\System32\aelupsvc.dll
00:10:31.0074 0x04a0  C:\Windows\System32\aelupsvc.dll - ok
00:10:31.0074 0x04a0  [ F8DE2E949B135BA7E45AE18DC82BF262, 195918BB87110095D2A73A325CF971B0FFA926ED75873E36E24146154D4DD525 ] C:\Windows\SysWOW64\pcacli.dll
00:10:31.0074 0x04a0  C:\Windows\SysWOW64\pcacli.dll - ok
00:10:31.0074 0x04a0  [ 0313A5DFA5966E31220C26A6167FD479, 3B5ADB421CEEA9AEFBCA49DC47059EB9C15530323A4FBCCD246488866503006E ] C:\Windows\SysWOW64\sfc_os.dll
00:10:31.0074 0x04a0  C:\Windows\SysWOW64\sfc_os.dll - ok
00:10:31.0090 0x04a0  [ 4E1278D5040A2D2D274EB98661CBF07E, 16BCFB3D1CD6A2F0C8D6456877E2643DD3AEED7D31027E84DB6BC5675883A97C ] C:\Windows\SysWOW64\devrtl.dll
00:10:31.0090 0x04a0  C:\Windows\SysWOW64\devrtl.dll - ok
00:10:31.0090 0x04a0  [ 9A777EDE50D61A30265C4448A67F80E9, FB694F98E2825517028C6F47853FD92CDC095124D65B2650E5E71920ACD02E6E ] C:\Windows\System32\themeui.dll
00:10:31.0090 0x04a0  C:\Windows\System32\themeui.dll - ok
00:10:31.0090 0x04a0  [ 18D61C0822414ACDBD88EB8AD6319D70, 5D2258330D71B212D1E0FA85FA7A443D69FF7622C9C7AF349F2270B322EEA329 ] C:\Windows\System32\ExplorerFrame.dll
00:10:31.0090 0x04a0  C:\Windows\System32\ExplorerFrame.dll - ok
00:10:31.0090 0x04a0  [ 51187F2413CDB487542290E046B6378E, E5435609622A944E1D2FEB157A20EEFE86ECAE19C3089C2A6DAE703C1BEFF89A ] C:\Windows\System32\twinapi.dll
00:10:31.0090 0x04a0  C:\Windows\System32\twinapi.dll - ok
00:10:31.0090 0x04a0  [ 5EE6D3195E6470DB22F480CCF5F5FF4A, D124D18CE265B05F1F01D0D2976B8D573785911E676D5588B0FE186A0B4ECEF2 ] C:\Windows\System32\actxprxy.dll
00:10:31.0090 0x04a0  C:\Windows\System32\actxprxy.dll - ok
00:10:31.0090 0x04a0  [ BD7849649C6E85118802010F442F67A8, BDD4BCE48CC70229F8DA63A8B3A8023EB8BD90099AE5DD068D5FFE1CF73A3B26 ] C:\Windows\SysWOW64\webio.dll
00:10:31.0090 0x04a0  C:\Windows\SysWOW64\webio.dll - ok
00:10:31.0105 0x04a0  [ 09B07DFC6792D49516073FEF024315C9, 2A5AE32370B165C1BD95CB70DD1D3377F7607C1EF7852726010725EAE2329604 ] C:\Windows\System32\twinui.dll
00:10:31.0105 0x04a0  C:\Windows\System32\twinui.dll - ok
00:10:31.0105 0x04a0  [ 70C3B722AE97E6C6A144EC20E5D7C080, 395F03942442A3EF9B929203E266E1D9A60AB9DA66A27E276896A786ABFC9726 ] C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
00:10:31.0105 0x04a0  C:\Windows\System32\windows.immersiveshell.serviceprovider.dll - ok
00:10:31.0105 0x04a0  [ C4729C10C3D9E1517EFF2C7AAE72E819, A3F9267805D9F14FA23EA8EB6011D11D6651748B2A80F4FAF613793A06F9C399 ] C:\Windows\System32\gameux.dll
00:10:31.0105 0x04a0  C:\Windows\System32\gameux.dll - ok
00:10:31.0105 0x04a0  [ A73DDB7A61AB940A608AD213E951DAB3, 91AC9D5F49FD0E6D9FD425E35386FCC774755249697BE46F64F2DAF4042E90C6 ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFTaskbar.dll
00:10:31.0105 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFTaskbar.dll - ok
00:10:31.0105 0x04a0  [ 7A5CEBA9595BF3F43747F219E4A0909D, 17D1CB6E7DDA1A6546352C3E526F4EFDEF94DEEB0F1B72941D860733954D0667 ] C:\Program Files (x86)\Trusteer\Rapport\bin\rooksbas.dll
00:10:31.0105 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\rooksbas.dll - ok
00:10:31.0105 0x04a0  [ 6C24489FABD0CA8A31C8E73B006B5E34, 2469B21CE82397CDF89A2206B60C68603E9F2F3C9865106D1AEA698DDDBC82EE ] C:\Program Files (x86)\Trusteer\Rapport\bin\rooksdol.dll
00:10:31.0105 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\rooksdol.dll - ok
00:10:31.0121 0x04a0  [ EBE9921C45BF96C5DF7EC362FBA4E2F1, 858CC628164093283FCAE1B81F96ECDB5AE12F0A5098ABBAB0A2461ABBCEE8D1 ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe
00:10:31.0121 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe - ok
00:10:31.0121 0x04a0  [ 58033D22B59059739927BE1146A944D8, FA7C32E17BF2F2147183867AA8BD71CB9E96DAD9D4B8C89CC0E42D79DC83F2AB ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportUtil_x64.dll
00:10:31.0121 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportUtil_x64.dll - ok
00:10:31.0121 0x04a0  [ AB279D4734BC508911C004F8D1011973, 2FA5B8D37D92BEE6DCC3DBD528CF5198D4777679AA02EA88F16D38312BBFCBA3 ] C:\Windows\System32\wpncore.dll
00:10:31.0121 0x04a0  C:\Windows\System32\wpncore.dll - ok
00:10:31.0121 0x04a0  [ C121D6818C4FD2B8572F3409D4FF556F, 7B3EF8358D0081A4B3FC4F7A595E41E36C24380EE5BB3B0C193CA85E0D87A0F9 ] C:\Windows\System32\sppc.dll
00:10:31.0121 0x04a0  C:\Windows\System32\sppc.dll - ok
00:10:31.0121 0x04a0  [ FCD59C405ADFADAC1B0729C580F7F70C, DDF1EECFF48A448E56A693EC31895BE9B97445022CC1CF344EF4BCD56B6C8886 ] C:\Windows\System32\wlidprov.dll
00:10:31.0121 0x04a0  C:\Windows\System32\wlidprov.dll - ok
00:10:31.0136 0x04a0  [ ABA65977D6966D3EC53B8FF7EBDF4601, B47607D861F5A38765B608ED91D89FB20C29890DEC954604D5330334B632CA88 ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\TRF_x64.dll
00:10:31.0136 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\TRF_x64.dll - ok
00:10:31.0136 0x04a0  [ 9DD06F00898AA5CA7E24186EFC8E5E25, 51141D0D07DBC955B63281351D3F17163ACE9A5B08628EA1C82F33FD2913970E ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{0D2C6208-CC5B-4642-AE7F-428E086C50C6}.tmp
00:10:31.0136 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{0D2C6208-CC5B-4642-AE7F-428E086C50C6}.tmp - ok
00:10:31.0136 0x04a0  [ C332DB81197E6E5D4A67D3789DBEB02A, D3ED3FEF0F3FD9D547D7EF60D5F532D6AAB5BD45966ABCB24BDF61DEC60C813E ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\msvcp80.dll
00:10:31.0136 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\msvcp80.dll - ok
00:10:31.0136 0x04a0  [ 9314C83DE37182685C788FCA3CEC43A4, BD068BD8C8A82B5C36E40656B6ED9247BBF6089FBB5695BAD5788E3FCFA9A683 ] C:\Windows\System32\thumbcache.dll
00:10:31.0136 0x04a0  C:\Windows\System32\thumbcache.dll - ok
00:10:31.0136 0x04a0  [ 9C0502C5E747C8011D700DCA681A55A1, 44829A5B251A07AD032C3C9ADECEEA335A2C70B3D17C0A0E2B73BC328BC726A8 ] C:\Windows\System32\ELSCore.dll
00:10:31.0136 0x04a0  C:\Windows\System32\ELSCore.dll - ok
00:10:31.0152 0x04a0  [ A0F844B0E9ADACA064B832CAF0AEE338, 2EC9D69B0D5D4B03B3636152CC25C0E8990B96CDFC62B344C909E82091EACA3A ] C:\Windows\System32\elsTrans.dll
00:10:31.0152 0x04a0  C:\Windows\System32\elsTrans.dll - ok
00:10:31.0152 0x04a0  [ 6FB88606C4A71E1BFAF97D63A676C673, D72F93A482E989ACA50F9647B7AD699A4656AEAACF377BB2B8CEBB094B748852 ] C:\Windows\System32\SystemEventsBrokerServer.dll
00:10:31.0152 0x04a0  C:\Windows\System32\SystemEventsBrokerServer.dll - ok
00:10:31.0152 0x04a0  [ 4515B9E4140F04FB3907692DF89FCA87, F68EC56524BDA877646E987BE7414C1D622BD9FF05A5AEADCA39030FDC2B0115 ] C:\Windows\System32\TimeBrokerServer.dll
00:10:31.0152 0x04a0  C:\Windows\System32\TimeBrokerServer.dll - ok
00:10:31.0152 0x04a0  [ D8B30620769A323FCB6253BCBA9542B6, B8FAC26DC5E2F773417D3F9E716AC531C37D09E59E50D659AD79F72E86E075A9 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamtoast.dll
00:10:31.0152 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamtoast.dll - ok
00:10:31.0152 0x04a0  [ F6F335A35D54FF8A55D15FA35E0F7671, B30CBA2DB4B087FED5E3EC86E56D30261BC91A08FF387DCB6E226884F6FEAD3C ] C:\Windows\System32\elslad.dll
00:10:31.0152 0x04a0  C:\Windows\System32\elslad.dll - ok
00:10:31.0152 0x04a0  [ 4D89F6191DB56CFA659388378F3DD688, 2219E15B66ABA301909128E6775E0B4F8B28B529B3EC087161EDAE55E2676C65 ] C:\Program Files (x86)\Trusteer\Rapport\bin\x64\msvcr80.dll
00:10:31.0152 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\x64\msvcr80.dll - ok
00:10:31.0168 0x04a0  [ AF7B06FD7BD48DEFB7AF89BAEB1EADB4, 143A660106472AB8952A50A30CC68FE175ED48E4DD1C8B3B01390B8F1F8D0C0F ] C:\Windows\SysWOW64\wpnapps.dll
00:10:31.0168 0x04a0  C:\Windows\SysWOW64\wpnapps.dll - ok
00:10:31.0168 0x04a0  [ 4E2A0C91A8246AB25B140695123EAECA, 0DE6C55BF83BE439025055F0776CE4129E42122E30ACEA5BAAFFD65DAF863CB8 ] C:\Windows\SysWOW64\msxml6.dll
00:10:31.0168 0x04a0  C:\Windows\SysWOW64\msxml6.dll - ok
00:10:31.0168 0x04a0  [ DCB7509F83B2A2089DBE07DDEDB52017, 4DD79932C95C74E4A54B3CF255DF3858A97DF10C3396FF6B2A4620C9C9379E8C ] C:\Windows\System32\WinTypes.dll
00:10:31.0168 0x04a0  C:\Windows\System32\WinTypes.dll - ok
00:10:31.0168 0x04a0  [ 91A7771934C0D9D2DA7699D25BB5B348, 154A6EB866AF22B38AEE8DB5A864653FEB15DED69DE26E5B602B7C5056CDDF72 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{C9E81ED2-E66A-440A-8B56-7B2C67778F7C}.tmp
00:10:31.0168 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{C9E81ED2-E66A-440A-8B56-7B2C67778F7C}.tmp - ok
00:10:31.0168 0x04a0  [ 48067CB53E31B98A394CB12024F26D1B, 9E26CDC31DC57E0DD5CCB2E84C55714475A4B4326A62A339B0F41227CA90529C ] C:\Windows\System32\Windows.Globalization.Fontgroups.dll
00:10:31.0168 0x04a0  C:\Windows\System32\Windows.Globalization.Fontgroups.dll - ok
00:10:31.0168 0x04a0  [ 3410BF41386F16445E5A360C0B6D8771, 093E059B99FBC6F1BF1681365119E8CCCD3FC6E85A6FD22B2C32FAF46C27B77F ] C:\Windows\SysWOW64\actxprxy.dll
00:10:31.0168 0x04a0  C:\Windows\SysWOW64\actxprxy.dll - ok
00:10:31.0183 0x04a0  [ DF04DA8F1209DF1107249E41E6F7BC89, A0B8274B89C1CB87B0B68F0C638ADFBE0A54366DB811D4F7DD63062142AF2375 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportKoan.dll
00:10:31.0183 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportKoan.dll - ok
00:10:31.0183 0x04a0  [ 7C3B449F661D99A9B1033A14033D2987, AE996EDB9B050677C4F82D56092EFDC75F0ADDC97A14E2C46753E2DB3F6BD732 ] C:\Program Files\WindowsApps\Microsoft.VCLibs.110.00_11.0.51106.1_x64__8wekyb3d8bbwe\msvcr110.dll
00:10:31.0183 0x04a0  C:\Program Files\WindowsApps\Microsoft.VCLibs.110.00_11.0.51106.1_x64__8wekyb3d8bbwe\msvcr110.dll - ok
00:10:31.0183 0x04a0  [ AD383EE9E91812AADE79A3F1DA370094, 55A8C4EEFA133AD093757B5C704BA46E1839C1CFA08E32BBBF1E227F8825B9A5 ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
00:10:31.0183 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe - ok
00:10:31.0183 0x04a0  [ 3C7DEF3CBBCA6284867AA4621D5D8A54, DB18738202DCDA842DCE505ECD0B858D7B4C55886CAC29827305F0DC3839143A ] C:\Program Files (x86)\Trusteer\Rapport\bin\atl80.dll
00:10:31.0183 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\atl80.dll - ok
00:10:31.0183 0x04a0  [ BB79224CBD269617D51505A20BAFB8FF, B40F33B5577DF44D04EE4BE7569641F38C12D3DDCF493CA75BEB25B007666326 ] C:\Program Files (x86)\Trusteer\Rapport\bin\rookscom.dll
00:10:31.0183 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\rookscom.dll - ok
00:10:31.0199 0x04a0  [ 5EFD801A12FB267405B24945012F5E1A, D4E5535FEC97DEF597E443C3CEFF70C5A8301C1DD4FE235F4B239C8B88446694 ] C:\Windows\System32\linkinfo.dll
00:10:31.0199 0x04a0  C:\Windows\System32\linkinfo.dll - ok
00:10:31.0199 0x04a0  [ 5125C1F27F8537F33076D0C0151F6B7F, 25D16B44387DC7758CD8F5C50C59B97221DF692D0EF728EF5F12F314204BA6E6 ] C:\Windows\SysWOW64\dbghelp.dll
00:10:31.0199 0x04a0  C:\Windows\SysWOW64\dbghelp.dll - ok
00:10:31.0199 0x04a0  [ E482BED932FFF4CA65099ED19A760574, 5A22543EBE9E36545899EAE5AF539AA410E87BFDCA64D1A1687CE6A1C6B304D6 ] C:\Windows\System32\stobject.dll
00:10:31.0199 0x04a0  C:\Windows\System32\stobject.dll - ok
00:10:31.0199 0x04a0  [ 3AFF7946963C85D7B657CEC22F71168C, CB33F78453F4AD3EB90F2F06701FEF347C0498E7CEB7DCBD0621C02722DFE97D ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\wllog.dll
00:10:31.0199 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\wllog.dll - ok
00:10:31.0199 0x04a0  [ D12BEB5E114701442F1FAA92A739E60E, 0C65F1545DA31F228F87125E5CD14D97F61D030C1EB5A454B37A4E5D79F4DD5F ] C:\Windows\System32\prnfldr.dll
00:10:31.0199 0x04a0  C:\Windows\System32\prnfldr.dll - ok
00:10:31.0199 0x04a0  [ E7CAC31C2E520D1DDA36F51EE9A7D19D, D4D393DF08720735122105E206FCA6151E5000C3EA222370D48390A80406A680 ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Service.dll
00:10:31.0199 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Service.dll - ok
00:10:31.0215 0x04a0  [ 09AC558DC422E46C317171885E266D81, 22072A0B0ED2222646D82A055BC9BB08B6DAB9AAD70A072D6844D9C46DD99033 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan36.dll
00:10:31.0215 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan36.dll - ok
00:10:31.0215 0x04a0  [ 80808656078CFCC32CF8BFEB0DD66279, 383F37599ABF16EEDEB2A60242DB7EDCC3D210A2A59DD61169047059F7041C5C ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{08FF0F68-EB97-4B41-8E31-179F2A74EAD0}.tmp
00:10:31.0215 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{08FF0F68-EB97-4B41-8E31-179F2A74EAD0}.tmp - ok
00:10:31.0215 0x04a0  [ DFB8703836AF863A25FC55BF88176591, 8867EC026DE1CCD2C8A1D5305A1C9BD1A1F8E4A1566A85F0FDF186E68C9A4F6F ] C:\Windows\System32\shdocvw.dll
00:10:31.0215 0x04a0  C:\Windows\System32\shdocvw.dll - ok
00:10:31.0215 0x04a0  [ F2F9A8706CE809A4C992214A12D76588, 2911D5AB368BD7CA67E6C65AE2777AC500C9222D1F44322CD7BCAEA93978A0EE ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan17.dll
00:10:31.0215 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan17.dll - ok
00:10:31.0215 0x04a0  [ 1BAF176DEB4E51E3304B21E96C92C2EE, E0D93BA164776477F29F2F75C072F1EE9CD9C2F7605156643DF36D8703EACA4E ] C:\Windows\System32\Windows.Networking.Connectivity.dll
00:10:31.0215 0x04a0  C:\Windows\System32\Windows.Networking.Connectivity.dll - ok
00:10:31.0230 0x04a0  [ F5488B7B215766F3AF4F3222C85BD906, 2BDEF5850C1F3804613B6A5B836197AF2E991B6F2AB734F8C34B488E230868E4 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan22.dll
00:10:31.0230 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan22.dll - ok
00:10:31.0230 0x04a0  [ 44F388C294370B255F7EB751939BD6E3, A9913A987DF00543857767E05F32C19F0F199A68418662ED2F4B8269C575085F ] C:\Windows\System32\wpnprv.dll
00:10:31.0230 0x04a0  C:\Windows\System32\wpnprv.dll - ok
00:10:31.0230 0x04a0  [ F7C576B31DD1D18E8C45A43AE807C5F5, ED9A370F3C1C0EA9A8F40FBD3BFC9B68809FEC6323FD1136F0AE254FF89AA2A5 ] C:\Windows\System32\ThumbnailExtractionHost.exe
00:10:31.0230 0x04a0  C:\Windows\System32\ThumbnailExtractionHost.exe - ok
00:10:31.0230 0x04a0  [ CB7242A05FFD365BBBBE102D24786DEE, 8ADB0DCD17FC46AD014196BF52CB793C6D3301E526CD14DB2EB4D41B5F6DB8B9 ] C:\Windows\System32\Windows.Storage.ApplicationData.dll
00:10:31.0230 0x04a0  C:\Windows\System32\Windows.Storage.ApplicationData.dll - ok
00:10:31.0230 0x04a0  [ D10587D957CFED8CC3B9B3D017C69003, 98D4D2E618F271A2C4A6AE991ED06027F68B0FFA6A71531F1FF8E2C130BE7052 ] C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll
00:10:31.0230 0x04a0  C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll - ok
00:10:31.0230 0x04a0  [ CE0BD323EB9BDFD140271E550CBA4111, D3082F0BC6FD634B581D86E41FBCDA3285451A5555F3E34DBAA5699147546D44 ] C:\Windows\System32\TimeBrokerClient.dll
00:10:31.0230 0x04a0  C:\Windows\System32\TimeBrokerClient.dll - ok
00:10:31.0246 0x04a0  [ 83A075C07425E84ACC6687FFF7126930, B55E8B421FC5AC3958B522A527F5DDF4ABC9A8E5AE23FBACE1510322F024F90D ] C:\Windows\System32\Windows.Networking.Sockets.PushEnabledApplication.dll
00:10:31.0246 0x04a0  C:\Windows\System32\Windows.Networking.Sockets.PushEnabledApplication.dll - ok
00:10:31.0246 0x04a0  [ DF471F11CC78BE02FE6BA15F2D94F65B, 9AC230DE58CE40E78AE6872BCF4778B69EEBF17E0E41B1301FF364ABD4737A78 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{BC6B38C0-5533-4A5C-8FE8-CAA7BD04812A}.tmp
00:10:31.0246 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{BC6B38C0-5533-4A5C-8FE8-CAA7BD04812A}.tmp - ok
00:10:31.0246 0x04a0  [ 043B150DA8B3559BD7AE701D3496D232, 77C16D0F380E4ECE02020B0ADE20ED07F06E4DC1264DA4F1AA9E458420D8E960 ] C:\Windows\System32\DXP.dll
00:10:31.0246 0x04a0  C:\Windows\System32\DXP.dll - ok
00:10:31.0246 0x04a0  [ F6E06380D717875F6AEFC2B0694B9E9D, 2ED566322CD7A90EB7C39C139C5B138808E0220A2FB48DFFC2EB52373F0CD225 ] C:\Windows\System32\ncryptprov.dll
00:10:31.0246 0x04a0  C:\Windows\System32\ncryptprov.dll - ok
00:10:31.0246 0x04a0  [ 4215C49E751ECA4BC42B3C10C8A55950, 3DB415C5F1A7FA98CF7259802DD1FD749C64DC5AD2D8CB788D2B356A83AC9F16 ] C:\Windows\System32\ncryptsslp.dll
00:10:31.0246 0x04a0  C:\Windows\System32\ncryptsslp.dll - ok
00:10:31.0246 0x04a0  [ 5A5E57A0E1D3674AE9ADBC9CAD80428D, AADCCEC98FE2F4CE21CFB1DAD4876EC3B70E8658C50664E538E5135411C244D5 ] C:\Windows\System32\Syncreg.dll
00:10:31.0261 0x04a0  C:\Windows\System32\Syncreg.dll - ok
00:10:31.0261 0x04a0  [ EDE97C468FD1765DF2CB41FC9A77055C, 7A82240BD12B95B7F677ADE2B08C4CCC27FC619C4CF8774C64B4FFCA55F0B74D ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan23.dll
00:10:31.0261 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan23.dll - ok
00:10:31.0261 0x04a0  [ 9E7FE5D6177EAFE200AE85296E1126ED, 468A648803C81535CDCF36D9B768F96CBBD20FB19C2A8215DA11F78EEF2E441F ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan24.dll
00:10:31.0261 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan24.dll - ok
00:10:31.0261 0x04a0  [ 0FD19BDDD2513874FF6903F717367795, DFAF9C33F993BA26FC84EF66ABC7C483E62762F7E1FC763605A75ACC2E8AA4EE ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{30D02E8F-A284-4D15-9479-8A6A2B9BE76E}.tmp
00:10:31.0261 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{30D02E8F-A284-4D15-9479-8A6A2B9BE76E}.tmp - ok
00:10:31.0261 0x04a0  [ DD236E26397C1C79D55684F5A72E1C3C, 17EB26C3ED2D4BBAF1D6CF85F60DD5B11181F483FE5DCFBF6C17354469C0C4C8 ] C:\Windows\System32\PhotoMetadataHandler.dll
00:10:31.0261 0x04a0  C:\Windows\System32\PhotoMetadataHandler.dll - ok
00:10:31.0261 0x04a0  [ D86F25F0AD6CA6E77A9F67641EEB6722, 15066B624C54A3FEDEEB840330E45B7F24A411941DB39DFB75177225409C57B4 ] C:\Program Files\Internet Explorer\sqmapi.dll
00:10:31.0261 0x04a0  C:\Program Files\Internet Explorer\sqmapi.dll - ok
00:10:31.0277 0x04a0  [ 84B0CA2C1C42A88CE7CB854E8EFC2ACD, 9F0AE933AC9AE93072796B24C02A1371149270926B3EE72E674330D4C106B266 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan25.dll
00:10:31.0277 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan25.dll - ok
00:10:31.0277 0x04a0  [ DD88BBF87A43331A4E99E37F7BF59FDB, 872190F559FA0DD1F711E9FA101BA1AB6E6DE5ED0CCCE1AB7AFE45BC3B78A0F1 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{95DA9556-48CB-4766-BDAF-5DF72F55B3CF}.tmp
00:10:31.0277 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{95DA9556-48CB-4766-BDAF-5DF72F55B3CF}.tmp - ok
00:10:31.0277 0x04a0  [ 0C08FCA7E1D534ED2FE5E37AB9869D74, C9865B8A40E93256A71EB0A6A3EFE7B95900168C884ADE96B699957975E136D1 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan26.dll
00:10:31.0277 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan26.dll - ok
00:10:31.0277 0x04a0  [ 8FFAF3CD36E924215F38DF8A02856CEF, B9427ED3239E355C565C69E32735F3446D8B14D07B5856342ED2155EB6E660FC ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan27.dll
00:10:31.0277 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan27.dll - ok
00:10:31.0277 0x04a0  [ 1E833CECF75535A4229363C6EB051576, FC27692533062B5D7C9F95887058E4988C3EB8C4475F76B6FFD4FD74CA20EA86 ] C:\Windows\System32\WWanAPI.dll
00:10:31.0277 0x04a0  C:\Windows\System32\WWanAPI.dll - ok
00:10:31.0293 0x04a0  [ 006104B1B6DC856D8B436D6357E7D918, 22DC16ABDC458BD1F1EF271775DA791A0DAFF08BAED7EEA27601787B078F987B ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan28.dll
00:10:31.0293 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportTanzan28.dll - ok
00:10:31.0293 0x04a0  [ DC12FF4A1B00CAE279D5744F36B74873, C3F35377E81112AD42B60D94325B79BB53D6C77C915CF69C541FED660B1A5D6A ] C:\Windows\System32\wwapi.dll
00:10:31.0293 0x04a0  C:\Windows\System32\wwapi.dll - ok
00:10:31.0293 0x04a0  [ 89BC25626FB62DEB8CC6174DA1CBD956, 659FFCF0249909BBF1EB9B08111552BC2F35429204418B6A3D86AF42BE672B62 ] C:\Program Files (x86)\Trusteer\Rapport\bin\RapportNikko.dll
00:10:31.0293 0x04a0  C:\Program Files (x86)\Trusteer\Rapport\bin\RapportNikko.dll - ok
00:10:31.0293 0x04a0  [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] C:\Windows\System32\qmgr.dll
00:10:31.0293 0x04a0  C:\Windows\System32\qmgr.dll - ok
00:10:31.0293 0x04a0  [ 4261449C1CADA6B007E5C27522946D2B, 11E79D1C529E816CCCAC9266089C77A4DB44676CAEEE25C66D6DB420B18D3ACB ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{9633B193-F6C1-499B-870D-113B04EE4FEF}.tmp
00:10:31.0293 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{9633B193-F6C1-499B-870D-113B04EE4FEF}.tmp - ok
00:10:31.0293 0x04a0  [ 7CD252214BC8C4004FB0814B1DBB1E0F, BBF848E833A4BFBB7BFD6F107BAB3F506C4A65D3F70E4A1BAAD9915604DC5D7B ] C:\Windows\System32\bitsperf.dll
00:10:31.0293 0x04a0  C:\Windows\System32\bitsperf.dll - ok
00:10:31.0308 0x04a0  [ 357CA105C57C860526342C3F35A7C4E6, A5A09E844B649826C7C21054D982F7EF20C2B57391FBA5EB5348C0A076E4E386 ] C:\Windows\System32\bitsigd.dll
00:10:31.0308 0x04a0  C:\Windows\System32\bitsigd.dll - ok
00:10:31.0308 0x04a0  [ E9B9C28A237D8FEF1FCD2C0D08E7D3C4, 52841100F7EC2E6A85825CA2EDCCF00705FF3AD3B52AD445276B5FC1215FEEA0 ] C:\Windows\System32\upnp.dll
00:10:31.0308 0x04a0  C:\Windows\System32\upnp.dll - ok
00:10:31.0308 0x04a0  [ 6627AA675A5C1B0330487A02E23F0560, 256AE9BA4273D4247FFAD6099D5A4FC8E98EDB27293AC8CAF7A571EB3890FAA7 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{27EDD463-0318-44EB-9508-8A86EAF5526E}.tmp
00:10:31.0308 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{27EDD463-0318-44EB-9508-8A86EAF5526E}.tmp - ok
00:10:31.0308 0x04a0  [ 923260FAA0F64A90FA63F7EAC08881AF, E3CA4F7D24C3F489D7E95EC992BA76082A6FBCE5F936B1187BBD95D6445849EF ] C:\Windows\System32\AltTab.dll
00:10:31.0308 0x04a0  C:\Windows\System32\AltTab.dll - ok
00:10:31.0308 0x04a0  [ B24AA0AC52483A412107B5B246A1C427, 693339A4C54835ADA129E04420B0700BFBFBC7809820419FFDABE4C7BE617F10 ] C:\Windows\System32\qmgrprxy.dll
00:10:31.0308 0x04a0  C:\Windows\System32\qmgrprxy.dll - ok
00:10:31.0308 0x04a0  [ F3F9FB5F953B2DEB36565F8EEB35784F, 8A51EC1760E0D0523F3848363D1A17E92C289A7FF5D97D9F41FA5D33CA9C2C4B ] C:\Windows\System32\bitsprx2.dll
00:10:31.0308 0x04a0  C:\Windows\System32\bitsprx2.dll - ok
00:10:31.0324 0x04a0  [ 9C5C6526AA212D84EB1A291DE63ED4EE, 87DFB8FC517A33E9D00AECEB0629D51E6CE55B008AFCE723C030AE6296E996C2 ] C:\Windows\System32\bitsprx3.dll
00:10:31.0324 0x04a0  C:\Windows\System32\bitsprx3.dll - ok
00:10:31.0324 0x04a0  [ 066FCDCBFF294CFD6B8F74863DDA72EC, E747A5150CACBA2A8629C0CE036CE89E4FFD4F61C8378CACCDB3320098952DBB ] C:\Windows\System32\bitsprx5.dll
00:10:31.0324 0x04a0  C:\Windows\System32\bitsprx5.dll - ok
00:10:31.0324 0x04a0  [ 4A62D39EFBD3AA5E7ECE5E0082B32DA1, ABEABB6342CBDD74028EE5C76A945677C1E3D562C49CA94DEF23E436366F3535 ] C:\Windows\System32\bitsprx7.dll
00:10:31.0324 0x04a0  C:\Windows\System32\bitsprx7.dll - ok
00:10:31.0324 0x04a0  [ 723B834A07F7DF7DE4CEB637D57ACEA3, B42867045DD3FB7682CDBD133970421010F0F14125E4992C73657CABA4659250 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{2AF2D989-B106-4D22-AD08-B46E73E6DB9E}.tmp
00:10:31.0324 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{2AF2D989-B106-4D22-AD08-B46E73E6DB9E}.tmp - ok
00:10:31.0324 0x04a0  [ C1DE893FAF6D7F6CFB479A1F61835482, AD5FA3CE73777704C67C933691F1F068E1A7FF545F728B97574F9C33AC4BBC01 ] C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{1AA415D0-8C7F-4177-B04C-0C69596A6251}.tmp
00:10:31.0324 0x04a0  C:\Users\John\AppData\Local\Temp\{DAE3E964-8B72-4855-AAE1-3F63A71FA076}\{1AA415D0-8C7F-4177-B04C-0C69596A6251}.tmp - ok
00:10:31.0340 0x04a0  [ 027B79DCC7E1C07B659A0C4A5D8BD440, 463D2621CC9EBDB2A2E945A5F31A32FD9B06121510685C13D8EA611F9C6B1198 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\qrt.dll
00:10:31.0340 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\qrt.dll - ok
00:10:31.0340 0x04a0  [ 56C91F36ADE867F0EDFE0BC6179AC2BC, 4DA83009D6BCA72B3C4DBCB7171980815E4A76C8358B51015AC20DDDD62D7151 ] C:\Windows\System32\WPDShServiceObj.dll
00:10:31.0340 0x04a0  C:\Windows\System32\WPDShServiceObj.dll - ok
00:10:31.0340 0x04a0  [ 09D886BA5A4BCC31079A2B12980CCF50, 92FD2987877E84E5DC4D4343B2A2DDBF01B46EB5CDC29E68739099FE37D8273E ] C:\Windows\SysWOW64\msi.dll
00:10:31.0340 0x04a0  C:\Windows\SysWOW64\msi.dll - ok
00:10:31.0340 0x04a0  [ 4681211F6D66604F34646FA6EB84D989, 6FDBE1002BA2A10904423DF7C75E51F2655D95E2B12F8DD91A65AA3BFFCAFF23 ] C:\Program Files\Windows Portable Devices\sqmapi.dll
00:10:31.0340 0x04a0  C:\Program Files\Windows Portable Devices\sqmapi.dll - ok
00:10:31.0340 0x04a0  [ B5198D9837E0EC371EF0D3F5BE423C61, E4199D112C65ACE1CB3C23195486D527ABA4C51416F451F698DEDAC71DF5A959 ] C:\Windows\System32\SettingMonitor.dll
00:10:31.0340 0x04a0  C:\Windows\System32\SettingMonitor.dll - ok
00:10:31.0340 0x04a0  [ 797119E1F2752761610CDAA02CC472A3, B3D66015F2267BA833C6FAD924D7015829F68D55E71F4AAA3D50D4DDAD6C5C8C ] C:\Windows\System32\IME\SHARED\IMEROAMING.DLL
00:10:31.0340 0x04a0  C:\Windows\System32\IME\SHARED\IMEROAMING.DLL - ok
00:10:31.0355 0x04a0  [ EC8AE061C8F2134B9BD89634C156F425, 68BF9BF858FC9780A8A24884906C9F41251DD5563098C149F59BF7A2A62497C5 ] C:\Windows\System32\ieframe.dll
00:10:31.0355 0x04a0  C:\Windows\System32\ieframe.dll - ok
00:10:31.0355 0x04a0  [ AAB25C7F73532849DE843C563BADA8CF, BC1F6943516CF205FEB1EB41DDF297780501B8A6D44E32E5A4067FCB366117B5 ] C:\Windows\System32\PackageStateRoaming.dll
00:10:31.0355 0x04a0  C:\Windows\System32\PackageStateRoaming.dll - ok
00:10:31.0355 0x04a0  [ 15AC3A854C3DD59DFD11EEE2FF63C79A, A9BEB4537A886325E8DC937824ABA8A7FDCCE23AB59EEC381BEFA42A702EC796 ] C:\Windows\SysWOW64\riched20.dll
00:10:31.0355 0x04a0  C:\Windows\SysWOW64\riched20.dll - ok
00:10:31.0355 0x04a0  [ BC9503A901A545FAD807909F8C86B286, EBF9E2E10CE69D90E6020B45ACD3F5711E28B3B79919A489E85EB61ED7AFC1CB ] C:\Windows\SysWOW64\usp10.dll
00:10:31.0355 0x04a0  C:\Windows\SysWOW64\usp10.dll - ok
00:10:31.0355 0x04a0  [ C4A6771ABE5F9B2B9B5876175F14E61A, 620D90F024F3C8B16BB2105F6D163A3758C5FE442C2F706C837D72E9844DAADC ] C:\Windows\SysWOW64\msls31.dll
00:10:31.0355 0x04a0  C:\Windows\SysWOW64\msls31.dll - ok
00:10:31.0355 0x04a0  [ 074223C4D8109C016B5864DEBF356BD8, 8301009C38244CB8457E94ED30456341E5A61469F442D6BC59FD1BD75C178E29 ] C:\Windows\SysWOW64\ExplorerFrame.dll
00:10:31.0355 0x04a0  C:\Windows\SysWOW64\ExplorerFrame.dll - ok
00:10:31.0371 0x04a0  [ FF5ACC9AA26A3FBDC2ECFDA51A735960, BC14AC543D71ADE4883954843CF5432E0B59E9F483F897722CD96317148CA347 ] C:\Windows\SysWOW64\duser.dll
00:10:31.0371 0x04a0  C:\Windows\SysWOW64\duser.dll - ok
00:10:31.0371 0x04a0  [ FB11241B62F07C9FFE664610E262C528, 0DECFD4C293D2E5D361B33FFA27C6D231A065BA5D772C82DDDA7378D17CCD5F2 ] C:\Windows\SysWOW64\dui70.dll
00:10:31.0371 0x04a0  C:\Windows\SysWOW64\dui70.dll - ok
00:10:31.0371 0x04a0  [ A084CB0B1898CE603EEF210DF7C13C2D, 7C333124881D25D4315071BD45F4CE6AC159D7DD2A1999CC23A2041E55CE6DFE ] C:\Windows\System32\pnidui.dll
00:10:31.0371 0x04a0  C:\Windows\System32\pnidui.dll - ok
00:10:31.0371 0x04a0  [ 973490D8FA14A14C6307BC4F672178DB, 8F0E91A9208C88EC86E795C1DB4FBCAFBFB9A0636A3386BCC9A0D91895A29DC2 ] C:\Windows\SysWOW64\wscapi.dll
00:10:31.0371 0x04a0  C:\Windows\SysWOW64\wscapi.dll - ok
00:10:31.0371 0x04a0  [ 7CEE52B25CA677E5B62DC00E3BD3BBCE, 1252B4F2FAEBC587750E7E5935465B5C4EF7329AF77B4CC3AD622F3A02F362B2 ] C:\Windows\System32\ActionCenter.dll
00:10:31.0371 0x04a0  C:\Windows\System32\ActionCenter.dll - ok
00:10:31.0386 0x04a0  [ 4B5A42E0FDD2012B6940CC14F447E8D8, EE6BD4C910C4DF5A519AC9B4FC6E05BECC8BC73CDFC28C6884D1125DC767E55C ] C:\Windows\System32\NcaApi.dll
00:10:31.0386 0x04a0  C:\Windows\System32\NcaApi.dll - ok
00:10:31.0386 0x04a0  [ 0208CAE5E09FA01DA2649702AE9616F6, 8321F929353905A2AE4E78D86AB1EFEDB133917F05FF9B433F1DD4E45E737765 ] C:\Windows\System32\srchadmin.dll
00:10:31.0386 0x04a0  C:\Windows\System32\srchadmin.dll - ok
00:10:31.0386 0x04a0  [ AEC1FCA0CDBFFBA1A90E17D1358E77AC, 973D3CD2323D00FB10100E7226E1DA3DE87641D44B684924D252D87B606FD4D9 ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\shared\bici.dll
00:10:31.0386 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\shared\bici.dll - ok
00:10:31.0386 0x04a0  [ AAA384C8F6412103973518D60FCEAAD0, FBD00C65F43869674D0ED2D3FAA080DE56DF88A0615D3527873C8830E6ED99C0 ] C:\Windows\System32\bthprops.cpl
00:10:31.0386 0x04a0  C:\Windows\System32\bthprops.cpl - ok
00:10:31.0386 0x04a0  [ 3E4CC1E808A0FC8F487036349F4E6810, 6B0267590F32E930E61346DAB4AC47A9276A45E4ACFEF72BF50EDEC1EC39A014 ] C:\Windows\System32\threadpoolwinrt.dll
00:10:31.0386 0x04a0  C:\Windows\System32\threadpoolwinrt.dll - ok
00:10:31.0386 0x04a0  [ D8DCEE270674DDB6503730CC4C2F1691, AC58EB378CA65642487F8660637A9F4A2E9CAADED71D71D8020F1D7CE94EF03F ] C:\Windows\System32\BluetoothApis.dll
00:10:31.0386 0x04a0  C:\Windows\System32\BluetoothApis.dll - ok
00:10:31.0402 0x04a0  [ BCB4D840095140EC137CD2C57C23615C, B9CDE3D99A795CFE8BAB07F002959477989A81403030CE5A4C7507DD7BFC8D5F ] C:\Windows\System32\biwinrt.dll
00:10:31.0402 0x04a0  C:\Windows\System32\biwinrt.dll - ok
00:10:31.0402 0x04a0  [ 9FDAA6957F04A6D1917463B7CBBEF88A, B34BB8213F1A019229289B16A5D53822470FDBC74A9DBBC518F58B3019598762 ] C:\Windows\System32\SearchIndexer.exe
00:10:31.0402 0x04a0  C:\Windows\System32\SearchIndexer.exe - ok
00:10:31.0402 0x04a0  [ 07744E351CDF1970745BDE0004674AE7, 9F9529CC7A57013ED4A71E8D91AD2B1E02D17DB4BC07460C3018CCE89A21A452 ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.dll
00:10:31.0402 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.dll - ok
00:10:31.0402 0x04a0  [ 45005B77B9DACCE166D44ADA87240325, D507C0419C864CF839F2E7D4CD62378C1A361AEF5530F476F7758B87096B5720 ] C:\Windows\System32\Windows.ApplicationModel.dll
00:10:31.0402 0x04a0  C:\Windows\System32\Windows.ApplicationModel.dll - ok
00:10:31.0402 0x04a0  [ 30454C0337F045E79C2906E9DC039CC5, 385BB49DB6FBE96D8CB84EE73D336966CE552DDF8248593566EF5228B197E18E ] C:\Windows\System32\RuntimeBroker.exe
00:10:31.0402 0x04a0  C:\Windows\System32\RuntimeBroker.exe - ok
00:10:31.0418 0x04a0  [ 64C3C2FCFECC783279FBC51769673144, 4ACAC188E60A169EB0F9DC0A8F80B4CE55C603B601BEF40D30A94BFE1F093033 ] C:\Windows\System32\tquery.dll
00:10:31.0418 0x04a0  C:\Windows\System32\tquery.dll - ok
00:10:31.0418 0x04a0  [ 5F0849B64B014098A84813D6653009A8, 75015D54D935EDFE7CD09E1EA2D29C51EA71B05E2D2FFC375B11B02B204ED1AF ] C:\Windows\System32\bitsprx6.dll
00:10:31.0418 0x04a0  C:\Windows\System32\bitsprx6.dll - ok
00:10:31.0418 0x04a0  [ 13FC1A4A3463E9DE1EF1881E8525EB56, 45847E20C4C90515C8632AC808946EDB4D5DEF64892000C870532506CAC8F192 ] C:\Windows\System32\mssrch.dll
00:10:31.0418 0x04a0  C:\Windows\System32\mssrch.dll - ok
00:10:31.0418 0x04a0  [ AB8D91A41F11BF31D5AE4FF722B07FC0, C5961DC94CE9473908DE2CD15A58005B5AB4384F9B644A246610ACA7689A2FC3 ] C:\Program Files (x86)\TalkTalk\Security\fsaua_api_dll.dll
00:10:31.0418 0x04a0  C:\Program Files (x86)\TalkTalk\Security\fsaua_api_dll.dll - ok
00:10:31.0418 0x04a0  [ 94F97611FFCFF810BF8CB0D467BADA60, 890E3A39E0A65027A093BF0A209D2A55B25E857CAF61D939D96E47F3BF7BAE32 ] C:\Windows\System32\msidle.dll
00:10:31.0418 0x04a0  C:\Windows\System32\msidle.dll - ok
00:10:31.0418 0x04a0  [ 3C77496ED7DB0D802427689F7E613777, 2D47D94CB4656B2941D21646F7F6038DCF1565B9F8D3795C62D3CDE5B4307AB6 ] C:\Windows\System32\mssprxy.dll
00:10:31.0418 0x04a0  C:\Windows\System32\mssprxy.dll - ok
00:10:31.0433 0x04a0  [ 72FDF51B6F91401A97C3271180A46C39, 1CC8343A7FAA4D5460E7FF4107AF5FC3952EE443C882D06574FDD384BB5C45B3 ] C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll
00:10:31.0433 0x04a0  C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll - ok
00:10:31.0433 0x04a0  [ 16B0D0C1D0CFDB8F5F3DE9849487B509, 6B449796A7B1611C6C7FA6A3535B57E7C351FED057494E1FE0ABE3F44F133084 ] C:\Windows\System32\SyncCenter.dll
00:10:31.0433 0x04a0  C:\Windows\System32\SyncCenter.dll - ok
00:10:31.0433 0x04a0  [ 805AD714EF4126BE2D2390D446CA4280, 31F647818E9D2F9C4FF4805839D103652EDB361A661E38144EE59FE849B6E935 ] C:\Windows\System32\imapi2.dll
00:10:31.0433 0x04a0  C:\Windows\System32\imapi2.dll - ok
00:10:31.0433 0x04a0  [ FA0672B09ED377939BB9F3D39895B404, DF571CC82DADD5B41F9E460111FB73B2AB6E4E255CDE9069D89F0AADFA8C38D9 ] C:\Windows\SysWOW64\wbemcomn.dll
00:10:31.0433 0x04a0  C:\Windows\SysWOW64\wbemcomn.dll - ok
00:10:31.0433 0x04a0  [ 2BD1447ECF8A9697AFCF4D7C71D45AA7, 976579652DBAFDB22D4431C071000D904C30CDC8C2AE84CA987F931374EAD379 ] C:\Windows\SysWOW64\wbem\wbemprox.dll
00:10:31.0433 0x04a0  C:\Windows\SysWOW64\wbem\wbemprox.dll - ok
00:10:31.0433 0x04a0  [ 992BD101F370B0D93A1131227BA342F6, 9034637756768BFD687E9CE569059FACA3BCAAFD998BC990C84D94AA7CE82CC5 ] C:\Windows\SysWOW64\wbem\fastprox.dll
00:10:31.0433 0x04a0  C:\Windows\SysWOW64\wbem\fastprox.dll - ok
00:10:31.0449 0x04a0  [ 7139C54E7282804745F9991F588FE506, F8693CF2A6B5C6D2D6EF6CBF0241B7DABE33E546383D8144601F2DF9D73EC8C5 ] C:\Windows\SysWOW64\wbem\wbemsvc.dll
00:10:31.0449 0x04a0  C:\Windows\SysWOW64\wbem\wbemsvc.dll - ok
00:10:31.0449 0x04a0  [ B16BA8C18B51D0FDF120B1ED4E07C399, 2B6BF47C9205CC6D36FE53741943B0CA6219422C331552B98AE11CC2AF1C4551 ] C:\Windows\System32\hgcpl.dll
00:10:31.0449 0x04a0  C:\Windows\System32\hgcpl.dll - ok
00:10:31.0449 0x04a0  [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] C:\Windows\System32\provsvc.dll
00:10:31.0449 0x04a0  C:\Windows\System32\provsvc.dll - ok
00:10:31.0449 0x04a0  [ 3A4DE678E4E709C0794DA57C198AA7E3, 0BA37D0DB6D5D74E9B1D8EBC540C1ACD4A471386D683E5392360F06E06E60DE4 ] C:\Windows\System32\wbem\WmiPrvSE.exe
00:10:31.0449 0x04a0  C:\Windows\System32\wbem\WmiPrvSE.exe - ok
00:10:31.0449 0x04a0  [ EB0FC0A3A0CD213478A955F6DE09E3D6, 114A219A31E4FF1275C56055A32EBC057C41F9F3C7F9783590FCAC317F540AAE ] C:\Windows\System32\wbem\cimwin32.dll
00:10:31.0449 0x04a0  C:\Windows\System32\wbem\cimwin32.dll - ok
00:10:31.0465 0x04a0  [ 9913A96B7A27DF38A8AA3B2A949F4008, 26B3876F1F7E060CA4D3F01DB5D6B7A756CB341B77D00AC3534FDBA10749F134 ] C:\Windows\System32\framedynos.dll
00:10:31.0465 0x04a0  C:\Windows\System32\framedynos.dll - ok
00:10:31.0465 0x04a0  [ 1F01E2357745C87A250C22640D138A30, 5F886C5FDE4D542289B46DFBE97EBB6EEF05146B83EA4D02A309ECC825AC4605 ] C:\Windows\System32\browcli.dll
00:10:31.0465 0x04a0  C:\Windows\System32\browcli.dll - ok
00:10:31.0465 0x04a0  [ 0A0B3EA1A3DE327C7A9BF49BABDE0F14, 27FB70918BE3257A6F5D7E835F1E87802AD61B4D98A428BC1130C9E74594A604 ] C:\Windows\System32\schedcli.dll
00:10:31.0465 0x04a0  C:\Windows\System32\schedcli.dll - ok
00:10:31.0465 0x04a0  [ 203BEA6A8C2C2FA22A05C3FA9D01E222, 5E0E9D666AB10EE3E1FA4E202C975DC576981C2B2E700384704E77931A058363 ] C:\Windows\System32\wmi.dll
00:10:31.0465 0x04a0  C:\Windows\System32\wmi.dll - ok
00:10:31.0465 0x04a0  [ 1CD203FFC8CD27E95FF1B2B60EADE477, 06B29238BD3D161ED04D0186B46790FC3FAA9ED47E315013BF2D7A85A2ACEED3 ] C:\Windows\System32\perfos.dll
00:10:31.0465 0x04a0  C:\Windows\System32\perfos.dll - ok
00:10:31.0465 0x04a0  [ A069FB34FDEECB7F17BA2B44A3E67966, 626944DB512B10CF16F285A7423A6AB3BA4CDE9035A513C9CD4FBAD088F3CB19 ] C:\Windows\System32\srclient.dll
00:10:31.0465 0x04a0  C:\Windows\System32\srclient.dll - ok
00:10:31.0480 0x04a0  [ A0DA711042F699122119A0C77CAF1179, 1088B37FE11D9126A945CD3A8597DFB121D4B35D4606FB42B2B36CF0CA9460B2 ] C:\Windows\System32\srwmi.dll
00:10:31.0480 0x04a0  C:\Windows\System32\srwmi.dll - ok
00:10:31.0480 0x04a0  [ 4D7CACEB878FA78458541617DB25667A, C42472E6B89A657C7CFC705725D3F4B45ECC8AE504E5F5A6DADC3AF3E331CEDE ] C:\Windows\System32\spp.dll
00:10:31.0480 0x04a0  C:\Windows\System32\spp.dll - ok
00:10:31.0480 0x04a0  [ DA3021EFAC1D185AC725AFCCD3398521, 7FBA9E570984C0A9C96C5D39FCC63533F5019663D12830F0A83E15604775F999 ] C:\Windows\System32\msi.dll
00:10:31.0480 0x04a0  C:\Windows\System32\msi.dll - ok
00:10:31.0480 0x04a0  [ 520C138EB08059060D30C92BE5F817FE, 9A27DAFD99D9D352B72E510561B15138659A6074FCE5EAB9DFE66403405F9D49 ] C:\Windows\System32\msiltcfg.dll
00:10:31.0480 0x04a0  C:\Windows\System32\msiltcfg.dll - ok
00:10:31.0480 0x04a0  [ AE216A0329FAC7804DC4DFEA49254F0D, 5242ED8D536A05073213BB60AA6F02BAC07B0C7B626D842D03B677249F7C82A0 ] C:\Windows\System32\ntshrui.dll
00:10:31.0480 0x04a0  C:\Windows\System32\ntshrui.dll - ok
00:10:31.0480 0x04a0  [ 7308CF302FAD17A77A2EB87ACE9185E0, 6A65DBDB143EBFC35DEECD89A6F2A2CED318EC1950270370BB1A4A0E143D6B2C ] C:\Windows\System32\networkexplorer.dll
00:10:31.0480 0x04a0  C:\Windows\System32\networkexplorer.dll - ok
00:10:31.0496 0x04a0  [ 8F6A65D15A0CB3653E2CA3A3B937F6B6, 96E9299A311C5499BE3EDB1855AF2F0637ED52F2CF64940E02714EDEA34A9E86 ] C:\Windows\System32\EhStorShell.dll
00:10:31.0496 0x04a0  C:\Windows\System32\EhStorShell.dll - ok
00:10:31.0496 0x04a0  [ 353F85DB0B6EB92A77DA1DC2B9DD4FEF, D4917C00275FB29902608DD7D0A173016B733BE7676F814E716F0758AA3F9647 ] C:\Windows\System32\davclnt.dll
00:10:31.0496 0x04a0  C:\Windows\System32\davclnt.dll - ok
00:10:31.0496 0x04a0  [ E70F241D136B61E5CCA39B9C1A2A591D, 8B8AAE16DA7E6E92A50ACFAE071ACAFD6E8B81798FFB33AF56790E061840D73F ] C:\Windows\System32\drprov.dll
00:10:31.0496 0x04a0  C:\Windows\System32\drprov.dll - ok
00:10:31.0496 0x04a0  [ 64E9DC1084B44DA86555DD5729D1357F, 2843B3366EA48DE28FB1929AC5C1C52F565DE63131C857C62DC7AC868D9977EA ] C:\Windows\System32\ntlanman.dll
00:10:31.0496 0x04a0  C:\Windows\System32\ntlanman.dll - ok
00:10:31.0496 0x04a0  [ 82B7E2AADC7F3DD0F79D7926CE06AE63, B2D52ECA6A16A272460CB25C666BE4625C8877F99147EE10530115284D28DAB0 ] C:\Windows\System32\davhlpr.dll
00:10:31.0496 0x04a0  C:\Windows\System32\davhlpr.dll - ok
00:10:31.0496 0x04a0  [ 71A488228C040CAF2DF30B8CB09FF5B9, BD86869190034003B50994CBCA9DE84D4CC73C4EC56FC5A9764FA86AD7CE4091 ] C:\Windows\System32\CertPolEng.dll
00:10:31.0496 0x04a0  C:\Windows\System32\CertPolEng.dll - ok
00:10:31.0511 0x04a0  [ 360609B4B55380EFD8F862B4B482576E, 5733D80D524CE4DC020A680FE8AC450DA762631DE601B7A1F9B46081E3564F83 ] C:\Windows\System32\SearchFolder.dll
00:10:31.0511 0x04a0  C:\Windows\System32\SearchFolder.dll - ok
00:10:31.0511 0x04a0  [ AEE89C0F144223B97EEDBAAE41CE181A, DF1842423F273D4860B44E7B1E340F0CA2E13FDEC7211027F17D64E45CDF3B46 ] C:\Windows\System32\wpnapps.dll
00:10:31.0511 0x04a0  C:\Windows\System32\wpnapps.dll - ok
00:10:31.0511 0x04a0  [ 73DD34A96A1A9AEF2B9313B046A2A5FE, 9DFDB774A28118F52A9361A48BCB536D8EA6E2D18B21CEDA23D347A157328BF5 ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Shared.Market.dll
00:10:31.0511 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Shared.Market.dll - ok
00:10:31.0511 0x04a0  [ 3E8F7FA4F31477A4C9594721780800D5, 28D7DFEBB4A213CA5E4D5ADB2ACFDC00D011A107AD3E37713E27ED3430C8CC7F ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Eas.dll
00:10:31.0511 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Eas.dll - ok
00:10:31.0511 0x04a0  [ EB576DA7D4D5AF0E20D1080CAD65D758, 90279EFB195717E3C9FC0EB1D7E1E48C512A83BD19CF156C420174143AC68B2B ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Calendar.dll
00:10:31.0511 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.Calendar.dll - ok
00:10:31.0527 0x04a0  [ F68F697F5B4E74217159C38FFFD37964, 782A532B90B38FCF8453CC8FAF93B449BACEF8CA63BD7E67A70B579840EFFED2 ] C:\Windows\System32\apprepapi.dll
00:10:31.0527 0x04a0  C:\Windows\System32\apprepapi.dll - ok
00:10:31.0527 0x04a0  [ B53D3AFAA2A39BE79BF0D093063DB958, 9AE40F5A18906B2640B54B2ECF32D27F2E3D883DD7FF55EEC9F1D6E6201DED43 ] C:\Windows\System32\igfxtray.exe
00:10:31.0527 0x04a0  C:\Windows\System32\igfxtray.exe - ok
00:10:31.0527 0x04a0  [ 67204AB9CC5D89E10B53AF227EC0AC92, CC8FB5DCD59BF8A54CE5025311E95474D2A468ED0470DC3268C817A9782E531D ] C:\Windows\System32\hccutils.dll
00:10:31.0527 0x04a0  C:\Windows\System32\hccutils.dll - ok
00:10:31.0527 0x04a0  [ 301BA2D7560517A5C3A58FC7B7164E1A, 569B1618AE9C1748DDE4FC950AAFD4B99583451668B636FEFB93B7FB681AE18D ] C:\Windows\System32\igfxsrvc.exe
00:10:31.0527 0x04a0  C:\Windows\System32\igfxsrvc.exe - ok
00:10:31.0527 0x04a0  [ AE9609CF4930650A9B13CBC115842BBB, 44BCBD4B2296C8645D3946B7A69FB1A43CCED3CA318630816BBFFD9FBECCE74D ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernChat\app\Components\ConversationSystem\Dll\Microsoft.WindowsLive.Chat.ChatSystem.dll
00:10:31.0527 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernChat\app\Components\ConversationSystem\Dll\Microsoft.WindowsLive.Chat.ChatSystem.dll - ok
00:10:31.0543 0x04a0  [ 95CC8BA55AA133E80593065BB12ACE04, 36CC2155BE46B1B7EF860AE54D3ED4D70F830C24ECA68C0FB2C9704B8B3AEC56 ] C:\Windows\System32\igfxdev.dll
00:10:31.0543 0x04a0  C:\Windows\System32\igfxdev.dll - ok
00:10:31.0543 0x04a0  [ E07DDB51BACAC918D9318BB82E9D8353, F7BD173B9C1C7D3D87C7BFEA9F8903B201873664A70E7A57019FF5E8C418004D ] C:\Windows\System32\igfxsrvc.dll
00:10:31.0543 0x04a0  C:\Windows\System32\igfxsrvc.dll - ok
00:10:31.0543 0x04a0  [ 2698A43DF7F9284AB9A5D1C09803F4B4, 4C3E63514D5BF217750D966E20283B49D4EBA66143129548AE10076B35C07610 ] C:\Windows\System32\hkcmd.exe
00:10:31.0543 0x04a0  C:\Windows\System32\hkcmd.exe - ok
00:10:31.0543 0x04a0  [ AA4E756EF659971CE23745D510C9C679, 5F29BC7A2A5E4CA06CB1C4A5DB22DA5F3690BB6869039F0A97D041AB20159204 ] C:\Windows\System32\igfxrenu.lrc
00:10:31.0543 0x04a0  C:\Windows\System32\igfxrenu.lrc - ok
00:10:31.0543 0x04a0  [ E9E28079BB504541D8B3977063ABCE05, 7430E356338929332078BBF80E554BD9210646807C8546E0903082B4F65636EC ] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.PresenceIM.dll
00:10:31.0543 0x04a0  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\Microsoft.WindowsLive.Platform.PresenceIM.dll - ok
00:10:31.0543 0x04a0  [ E7E53DAE852983E46C6E5A37F154684A, A983B3A49795FE73D76FAA9769B94BC90168A67D0443618B9D35490EADB1ACDB ] C:\Windows\System32\SystemEventsBrokerClient.dll
00:10:31.0543 0x04a0  C:\Windows\System32\SystemEventsBrokerClient.dll - ok
00:10:31.0558 0x04a0  [ B7F55E2AE978D3D34F7876EE5D689AAE, 2A950042529DC2C6495E691557043B5B15E483079F4135675E495C121F7C0ED0 ] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
00:10:31.0558 0x04a0  C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe - ok
00:10:31.0558 0x04a0  [ 3D6137DEF42AF8FFAEB03E3084C830AD, 3E6B16D5DC6B5F213472831C30EFD3F5BA7124B3887AC2BED978F41DA59177C4 ] C:\Windows\SysWOW64\devenum.dll
00:10:31.0558 0x04a0  C:\Windows\SysWOW64\devenum.dll - ok
00:10:31.0558 0x04a0  [ 031F55A771669B7279FB427A89724E7C, 3DFCFFCCE6E583366B4830F0A58A42001B260ABA56AA968E5DEE19D964AABF35 ] C:\Windows\SysWOW64\msdmo.dll
00:10:31.0558 0x04a0  C:\Windows\SysWOW64\msdmo.dll - ok
00:10:31.0558 0x04a0  [ D9842A24135F888B12AB5122A12B78D3, DFE470C4B3B206685D822E405FBED984EADA7949F4442CF034E821C6F92F5EF8 ] C:\Windows\SysWOW64\avicap32.dll
00:10:31.0558 0x04a0  C:\Windows\SysWOW64\avicap32.dll - ok
00:10:31.0558 0x04a0  [ 22F15218BBAAAF1724D06E40FE3FFA8E, F18933681375E98C769C2601C28B79257270FBCDC9EAA9B829327E1D47C769F6 ] C:\Windows\SysWOW64\msvfw32.dll
00:10:31.0558 0x04a0  C:\Windows\SysWOW64\msvfw32.dll - ok
00:10:31.0574 0x04a0  [ C7325FC085E4CBB35608C01003EF0E36, D562E4C3A6ECD702EF38A32B8122B7737909278DEFF7F8F3D7FEA76D1FD8C2DC ] C:\Windows\System32\igfxpers.exe
00:10:31.0574 0x04a0  C:\Windows\System32\igfxpers.exe - ok
00:10:31.0574 0x04a0  [ 105CFE016CCB20175BEACEC146F175AB, BA21F40CDBF159EE4EACCBFB2A7D20EB9E1C2758883AF089A8E53EE478002E83 ] C:\Windows\System32\IccLibDll_x64.dll
00:10:31.0574 0x04a0  C:\Windows\System32\IccLibDll_x64.dll - ok
00:10:31.0574 0x04a0  [ 37360B977F4711E694D99F9EC8BC4049, EE323A27A20009B0FA99408C9F3A14E0E7811DB14FD3E0446AB5063A867D4DA7 ] C:\Windows\System32\AuthBroker.dll
00:10:31.0574 0x04a0  C:\Windows\System32\AuthBroker.dll - ok
00:10:31.0574 0x04a0  [ 88A4A2C413BAA86B774D727B05F3FA15, 7A61E0364241BC5DEFA37AFDF93425E0E526501A8CA9DB370EF9696797CBDFF0 ] C:\Windows\System32\profext.dll
00:10:31.0574 0x04a0  C:\Windows\System32\profext.dll - ok
00:10:31.0574 0x04a0  [ 21247A9F74DA9C8AF98E6847F82D07A8, BE84D3CD0A2149E3FC5EDC78C09C0A94FD3CE354B7C5C3F88457C6C1FAF82ECF ] C:\Program Files\IDT\WDM\sttray64.exe
00:10:31.0574 0x04a0  C:\Program Files\IDT\WDM\sttray64.exe - ok
00:10:31.0574 0x04a0  [ 10A7BA22BA3054E52FB846A50BEC06EC, 15B0974B8E7CE6D4C1C70732B1330E5AC062B46907388ACEEDBC1CD6357323C1 ] C:\Program Files\IDT\WDM\stlang64.dll
00:10:31.0574 0x04a0  C:\Program Files\IDT\WDM\stlang64.dll - ok
00:10:31.0590 0x04a0  [ 72DD5642D7DEEC9E0C0AB50E2A9ABD65, D272F996F0BABEAC418750B9824725D56D2B543E424B0094C4C18022A54A6E2F ] C:\Program Files\File Association Helper\FAHConsole.exe
00:10:31.0590 0x04a0  C:\Program Files\File Association Helper\FAHConsole.exe - ok
00:10:31.0590 0x04a0  [ 118E2C06EF5FFC94852D9F06BDD0B7C2, 07222FC7D2106EF932F373EFDA64223B186735A409CDCCDB325A7CCFAA950ABE ] C:\Program Files\File Association Helper\FAHWindow.exe
00:10:31.0590 0x04a0  C:\Program Files\File Association Helper\FAHWindow.exe - ok
00:10:31.0590 0x04a0  [ 96F7A5C43E6D57C299CB0CFC521CAC29, 24C2E75D4F54BB51455C05F5A877700EF63949FC05F69E1FCC7833F9826AEFC3 ] C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
00:10:31.0590 0x04a0  C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE - ok
00:10:31.0590 0x04a0  [ D10179299596D6D6354647A7972474EF, 47CF4C47DBECB16B64B940A05588DFA811CCAC525CDB93DFDCC1ED96A2250CD6 ] C:\Program Files\File Association Helper\FAHDll.dll
00:10:31.0590 0x04a0  C:\Program Files\File Association Helper\FAHDll.dll - ok
00:10:31.0590 0x04a0  [ 37F04C533F3D8BA106B9F52FCE76616A, 7AEC510AD8B7BD8A422FCF18CB3CD6D4606B375EAEFCDC38598B2E7791DAF2CD ] C:\Program Files\Canon\MyPrinter\CNMPU.DLL
00:10:31.0590 0x04a0  C:\Program Files\Canon\MyPrinter\CNMPU.DLL - ok
00:10:31.0590 0x04a0  [ 7CD07AC37A76C99FAB31FCE90AE28D71, 9735ADBBF99719B8EE2A61CB64948B2DA461A234D1A464450E8E1E436C957045 ] C:\Program Files\Canon\MyPrinter\BJMYRES.DLL
00:10:31.0590 0x04a0  C:\Program Files\Canon\MyPrinter\BJMYRES.DLL - ok
00:10:31.0605 0x04a0  [ 605BB2B2A2171D3F5748F4919E80E6C7, 4EBAAE4E2122048603D058C83E32C56F64F8FB9E7B9BB2F83E659BFFD7CB12EE ] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.EXE
00:10:31.0605 0x04a0  C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.EXE - ok
00:10:31.0605 0x04a0  [ DE7F11C59789AD6616F2381BBC48A97F, D90121E7A222945C41F731E38E6F95C8818918923E360E09A7F44F2F81BCF4EF ] C:\Program Files (x86)\Steam\Steam.exe
00:10:31.0605 0x04a0  C:\Program Files (x86)\Steam\Steam.exe - ok
00:10:31.0605 0x04a0  [ 2287DAEA100837E40232FD9053F635D8, 8E905B8BC72F8DD6C7C71A7E04CD8D8EC1E9AD2B77EF5A48E089E439A75043D6 ] C:\Windows\System32\spool\drivers\x64\3\E_IATIIME.EXE
00:10:31.0605 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IATIIME.EXE - ok
00:10:31.0605 0x04a0  [ 814F4A0774F08F580D71FA7E880CD454, 97AFF613618579BA6294EDD8DCE51AE4E0FECF41C49C06BAEA5FCD5273E3472E ] C:\Windows\System32\localspl.dll
00:10:31.0605 0x04a0  C:\Windows\System32\localspl.dll - ok
00:10:31.0605 0x04a0  [ 55A07D76F345CD44070890FFC693BEF6, 0CDD712CD1EC6D6ED9F9505948BDA17F099BFC4BB80157C395FC95975F852CFD ] C:\Windows\System32\spoolss.dll
00:10:31.0605 0x04a0  C:\Windows\System32\spoolss.dll - ok
00:10:31.0621 0x04a0  [ C1068D5B56225622811E21FB80E987F8, 193D945794795F5ED822C0D27CDEF77CDBB44FB842233F4D701A903B1C060097 ] C:\Program Files (x86)\Steam\crashhandler.dll
00:10:31.0621 0x04a0  C:\Program Files (x86)\Steam\crashhandler.dll - ok
00:10:31.0621 0x04a0  [ BF7186DC4ACB2A4D1F51B3FE6F070125, 0D33295C47551FC84EFBA2EB64482D2591B3884406340B6C2B62857DB349567B ] C:\Windows\System32\CNMLM9W.DLL
00:10:31.0621 0x04a0  C:\Windows\System32\CNMLM9W.DLL - ok
00:10:31.0621 0x04a0  [ 7D8902670720152867617016CE940ED8, 476AF47041B60B961321A052FC43A0252041D29D1AECF964646DC900218791F4 ] C:\Windows\System32\PrintIsolationProxy.dll
00:10:31.0621 0x04a0  C:\Windows\System32\PrintIsolationProxy.dll - ok
00:10:31.0621 0x04a0  [ 9459134133FB09BA956A28AAFAE78186, 5E9E8773287EC9A7C3A060CB83958892E93619DE32B172D9F7496B00FCAE37FF ] C:\Windows\System32\E_ILMIME.DLL
00:10:31.0621 0x04a0  C:\Windows\System32\E_ILMIME.DLL - ok
00:10:31.0621 0x04a0  [ 01E0D3508E6E6F4497A242BE8DDBCC14, 966F7EDB55B7753546E74CB74DC2EA076D34784F0EAD84B0C4571EDA25A85BE3 ] C:\Windows\System32\enppmon.dll
00:10:31.0621 0x04a0  C:\Windows\System32\enppmon.dll - ok
00:10:31.0621 0x04a0  [ 74984FC408BF5BB10A0660B321E4BC5D, F627697C89C057C79CECFBFE43A41A9AF8FE154E7010BCE18AECC0E15CB40275 ] C:\Windows\System32\enpres.dll
00:10:31.0621 0x04a0  C:\Windows\System32\enpres.dll - ok
00:10:31.0636 0x04a0  [ CDE04A2DF5FB8837034DBA60F2A41E63, 3343C3595C41C7043EBB14A09F3EE438F325D3C4AD5E7B6AB5ECBD15C028FF78 ] C:\Windows\System32\msvcp60.dll
00:10:31.0636 0x04a0  C:\Windows\System32\msvcp60.dll - ok
00:10:31.0636 0x04a0  [ F2238CDACADA0FEB79425BFC995339A7, 780D1164A6813663B7B0802C09808019AA4F8919BD0199C5D241B187FFBEE6AB ] C:\Windows\System32\hpbprtmon.dll
00:10:31.0636 0x04a0  C:\Windows\System32\hpbprtmon.dll - ok
00:10:31.0636 0x04a0  [ 04ED9A5B39FFDDDD8314E8F34049022F, 669B87FEABE0BB5BF31AD705D1ED9B3B57306C3C470BD941AD2D5670D97A752F ] C:\Windows\System32\dbghelp.dll
00:10:31.0636 0x04a0  C:\Windows\System32\dbghelp.dll - ok
00:10:31.0636 0x04a0  [ 8F53ADA5F97BA99E2F4B6E0CB7A6F977, B6F8E882AD84305B2E637CD4B74D3A4ADE77699BD60AC42EFE75452E0394A062 ] C:\Program Files (x86)\Steam\steamerrorreporter.exe
00:10:31.0636 0x04a0  C:\Program Files (x86)\Steam\steamerrorreporter.exe - ok
00:10:31.0636 0x04a0  [ AE6FAC1335F253DACB6836B3FD35DF88, 778A21E0A3EB3293630FC7C06B182CEB264D850F7BF515DB0DB72EB5D0D4E610 ] C:\Program Files (x86)\Steam\tier0_s.dll
00:10:31.0636 0x04a0  C:\Program Files (x86)\Steam\tier0_s.dll - ok
00:10:31.0636 0x04a0  [ C50F9CEC69C907DFF45BFC7E83255FA2, B246275DDF9C67D28B961C63C17DBB9A853014327C0202F1269556682B7F9813 ] C:\Program Files (x86)\Steam\vstdlib_s.dll
00:10:31.0636 0x04a0  C:\Program Files (x86)\Steam\vstdlib_s.dll - ok
00:10:31.0652 0x04a0  [ B438F17D9EF2FC83AE9412BFA8A6F7C2, 2CD069F292B7913D2537675F65D149D1F76B1FBA4E77697B38A8ADF77D297AA8 ] C:\Windows\System32\hpbrprtmon.dll
00:10:31.0652 0x04a0  C:\Windows\System32\hpbrprtmon.dll - ok
00:10:31.0652 0x04a0  [ A40824624D8667FE31333B0CEB936169, 25549EBC9FD8B2E559ECE566761443B85639EAFBFC3403F4EFD07CBC42FD033C ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
00:10:31.0652 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe - ok
00:10:31.0652 0x04a0  [ E8DF2DAD385DAAB92D55AD1332538F5A, 44893ADD7FA4B496EE51FACE04B1FD6DBC147AE88EE8006CEE55DA795D2ADC36 ] C:\Windows\System32\FXSMON.dll
00:10:31.0652 0x04a0  C:\Windows\System32\FXSMON.dll - ok
00:10:31.0652 0x04a0  [ AF5A41782DBD2010497851B8E955BD2A, ECC6908FF5501D2A0D99005CEBDC3BB43D9AFC0005A459322AE26AE09D42424F ] C:\Windows\System32\tcpmon.dll
00:10:31.0652 0x04a0  C:\Windows\System32\tcpmon.dll - ok
00:10:31.0652 0x04a0  [ 85EBAAA913E187B65FB5B47EA36FA306, 57B20E164248A04BF117892E30F4303806E9C2C3E424B7F2FF17D3A9DF78E487 ] C:\Windows\System32\snmpapi.dll
00:10:31.0652 0x04a0  C:\Windows\System32\snmpapi.dll - ok
00:10:31.0668 0x04a0  [ ADB778A085E71B9835F3FA776878184B, 4CC4EACB11BC70B35A123D5995251255215420C5BDB56785847FA7D1F1604065 ] C:\Windows\System32\wsnmp32.dll
00:10:31.0668 0x04a0  C:\Windows\System32\wsnmp32.dll - ok
00:10:31.0668 0x04a0  [ BE611E28DD9AF75A6B904B55F5D6E6C3, F871BDA796B9F216B58AD1723712CB34040A6A177E111BDC3520A975FFF2EF7E ] C:\Windows\System32\usbmon.dll
00:10:31.0668 0x04a0  C:\Windows\System32\usbmon.dll - ok
00:10:31.0668 0x04a0  [ B852BB8E1D0902064346A09A7B32FC17, 26FFA667560B01945406C98735858EA159194D00AB03F035E245716C0CBA0283 ] C:\Windows\System32\WSDMon.dll
00:10:31.0668 0x04a0  C:\Windows\System32\WSDMon.dll - ok
00:10:31.0668 0x04a0  [ A6B742C6B8CF9A37E0EF470DF890F74B, 5A48F3734AEC1BDE85374774DDBE18576E84ABD8C9D3D468AAC8787EF5DDD2C1 ] C:\Windows\System32\drvstore.dll
00:10:31.0668 0x04a0  C:\Windows\System32\drvstore.dll - ok
00:10:31.0668 0x04a0  [ 42AC50FBA7D6038D3E695B0699B4A327, FBDE6FDFEC33BFC7AD0DEC79F1E13B9DB5F5C22CDACB578396531EC95CA3B47B ] C:\Program Files (x86)\Sony\Sony PC Companion\NewUI.dll
00:10:31.0668 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\NewUI.dll - ok
00:10:31.0668 0x04a0  [ 06165D46CD00A0A5DBEB27E95F63B4BD, 41A5B420806758EBE3295E6FEC13C035DF1CDB6C8858502B28E27BFCB893E8A2 ] C:\Program Files (x86)\Sony\Sony PC Companion\bvrpctln.dll
00:10:31.0668 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\bvrpctln.dll - ok
00:10:31.0683 0x04a0  [ C2FB4CC314A45CD8D8A1A1FA0B2F5896, 316A53B848D8444C1A7C646C3E48AE0A97214F3361EABECE478B5348BDBACC5D ] C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
00:10:31.0683 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll - ok
00:10:31.0683 0x04a0  [ 6FA9D09428E56C11E01066CAF2FB5031, 20F3914606813346D58A0843383CAF0D887DAA856E7A8C6A2774B2615BB2D0CB ] C:\Windows\SysWOW64\msimg32.dll
00:10:31.0683 0x04a0  C:\Windows\SysWOW64\msimg32.dll - ok
00:10:31.0683 0x04a0  [ 6E3FE9ED37F6B3EE671AB3893DF8717A, 27424B61B7DC9F70C7894A524B20AB4DD8E0974FF1BF9A901BE2741A54A526FE ] C:\Windows\SysWOW64\imagehlp.dll
00:10:31.0683 0x04a0  C:\Windows\SysWOW64\imagehlp.dll - ok
00:10:31.0683 0x04a0  [ 2F36484E310A1CBF7D7068778578A665, 44D45582B64A6FB2D5394D8F6B8FC87108FD7E47821BC8764C67770AD99EA5A3 ] C:\Program Files (x86)\Steam\SteamUI.dll
00:10:31.0683 0x04a0  C:\Program Files (x86)\Steam\SteamUI.dll - ok
00:10:31.0683 0x04a0  [ 159CE760EDBE4762DE9FA6677D7635EF, 57CE6D346D8995459D1E8844C808FDC434CB1C6C6082A8F9ED593DDFF0E4428F ] C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL
00:10:31.0683 0x04a0  C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL - ok
00:10:31.0683 0x04a0  [ D1CA3C8C5DC6DC357CE4C08F0BCC1EEE, C15346A5C57B541C4CC6552C40B65DB27902E7DA81A6C330612A4AEDA71ACA36 ] C:\Windows\System32\spool\prtprocs\x64\winprint.dll
00:10:31.0683 0x04a0  C:\Windows\System32\spool\prtprocs\x64\winprint.dll - ok
00:10:31.0699 0x04a0  [ F6104D2DBF254FE23928F978F6CABE35, FCE28A41334707A4990698DA1571EACBC574B28E20DF044169B051B30D3BAD42 ] C:\Windows\SysWOW64\oledlg.dll
00:10:31.0699 0x04a0  C:\Windows\SysWOW64\oledlg.dll - ok
00:10:31.0699 0x04a0  [ 77E22D208D11D5A6307197F1B09A09F0, 4C6F667ECAC7ED1DE5A4CD695D874569F771EF77FF70B983D0285E4741224CBA ] C:\Windows\SysWOW64\avifil32.dll
00:10:31.0699 0x04a0  C:\Windows\SysWOW64\avifil32.dll - ok
00:10:31.0699 0x04a0  [ E4A6D4B0E58231488F3BB32A24995D85, 6C7D478F30BAE0FC777D4FEF750140919609F6532950989CDD54AB3D52AA6CEB ] C:\Windows\SysWOW64\msacm32.dll
00:10:31.0699 0x04a0  C:\Windows\SysWOW64\msacm32.dll - ok
00:10:31.0699 0x04a0  [ 93CF42531671EA4E24DA842B124FA269, 2962DB9EF279BA9DDC5F104B55472E58346D17D81D2816AB1DD84D4729088472 ] C:\Windows\System32\win32spl.dll
00:10:31.0699 0x04a0  C:\Windows\System32\win32spl.dll - ok
00:10:31.0699 0x04a0  [ 644F1A561B82F670A7A9A613FA8C462B, 9E322E21E59F8AE88AC52B5557D982EFEB0091C47DF3DCECC461013340B636EF ] C:\Windows\System32\inetpp.dll
00:10:31.0699 0x04a0  C:\Windows\System32\inetpp.dll - ok
00:10:31.0715 0x04a0  [ A665183399FF69C72EF18E716512F5DB, 23F4078489AE4D28ADF762185B1C5CA2673449DFA5456098D693A43ACF644278 ] C:\Windows\System32\spool\drivers\x64\3\E_IAUDIME.DLL
00:10:31.0715 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IAUDIME.DLL - ok
00:10:31.0715 0x04a0  [ 0089D84F0349CA2F22745E2E06C48B69, 7BCCF51BAB3350C14B315AEA367D9E4904E706B7E603876C40B6276DEA6816F3 ] C:\Windows\System32\spool\drivers\x64\3\hpbxjobsvr1202.dll
00:10:31.0715 0x04a0  C:\Windows\System32\spool\drivers\x64\3\hpbxjobsvr1202.dll - ok
00:10:31.0715 0x04a0  [ 0F6D06A88A88007AAEE5F0EE1ECE42E4, 28CCBE9B152A0C6D94D9BFAD021E223909BDD1B40CF796C6A035FF65EFF7F72F ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
00:10:31.0715 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe - ok
00:10:31.0715 0x04a0  [ EA9FCF8A296C372473D29E4424EEF800, 88E63B700595F9A195AF42A3A5F3D0AC8FBC2E76D0DADB4EFFE7A27C37A69D63 ] C:\Windows\System32\bidispl.dll
00:10:31.0715 0x04a0  C:\Windows\System32\bidispl.dll - ok
00:10:31.0715 0x04a0  [ 6E013C7AD7A4C28417FF02700521CDA1, 631F2CA94F6CCFB3151800D3528A72392EB0497CC776E29C0308A739935475EE ] C:\Program Files (x86)\Steam\libavresample-1.dll
00:10:31.0715 0x04a0  C:\Program Files (x86)\Steam\libavresample-1.dll - ok
00:10:31.0715 0x04a0  [ 2DB14D7B6400A4ABD74CF85F2106EE9C, 137BA2ECCBE5E10999EA036571CC490D2DBBB765D979F26969540C6EBCDEE2F2 ] C:\Program Files (x86)\Steam\libavutil-52.dll
00:10:31.0715 0x04a0  C:\Program Files (x86)\Steam\libavutil-52.dll - ok
00:10:31.0730 0x04a0  [ A02857F809918F40A396BE91FE45D8E6, 0C4D2FB13FB7F1822163813EF857523D01A3A20EF92DB70281FB4F427E1C5939 ] C:\Windows\System32\spool\drivers\x64\3\CNMCP9W.DLL
00:10:31.0730 0x04a0  C:\Windows\System32\spool\drivers\x64\3\CNMCP9W.DLL - ok
00:10:31.0730 0x04a0  [ 7C82A4577031429AC80547B271D12EF7, E182022548A9C2AAC6C3C6F9ABDEA3A033D56B9AABFBA17D85D5DE3DDFFE64C3 ] C:\Windows\System32\spool\drivers\x64\3\CNMFU9W.DLL
00:10:31.0730 0x04a0  C:\Windows\System32\spool\drivers\x64\3\CNMFU9W.DLL - ok
00:10:31.0730 0x04a0  [ 1CF4D20E36FF02178EAAC531730145E1, DFF95C7538ABCF00A04454769A55E4DDF88606E05A6A4C6B8C520C2BC6FA2113 ] C:\Program Files (x86)\Steam\SDL2.dll
00:10:31.0730 0x04a0  C:\Program Files (x86)\Steam\SDL2.dll - ok
00:10:31.0730 0x04a0  [ 760DCBB78549A9F5C68F18DF7F63324F, 65FC5E778CB9D732294F8C54B85E33BC2580C1F8B23AA7525B82F07AC2261D96 ] C:\Windows\System32\spool\drivers\x64\3\CNML29W.DLL
00:10:31.0730 0x04a0  C:\Windows\System32\spool\drivers\x64\3\CNML29W.DLL - ok
00:10:31.0730 0x04a0  [ 99BB7A5E76592D891B31D17F9DA20B68, 9A1BC7D1A5E7A859888CFDB42FC3BC6714520F52E9D465FD0781B19EEF7C328C ] C:\Windows\System32\ntprint.dll
00:10:31.0730 0x04a0  C:\Windows\System32\ntprint.dll - ok
00:10:31.0746 0x04a0  [ 270030FDFF0E4020ADBCB67146FD154C, 40C47162ACE403758BA4B7B0F497FE0C3D77B933E567B9BBEE62D4D5EF6001E7 ] C:\Windows\System32\mscms.dll
00:10:31.0746 0x04a0  C:\Windows\System32\mscms.dll - ok
00:10:31.0746 0x04a0  [ FD72763B3DDB2C06CF19717FE36603DD, D8FCE9E45E60A1788DBD1DFB815C88C1AE804156445DC62DBC8F9BFCF7326988 ] C:\Program Files (x86)\Steam\bin\filesystem_stdio.dll
00:10:31.0746 0x04a0  C:\Program Files (x86)\Steam\bin\filesystem_stdio.dll - ok
00:10:31.0746 0x04a0  [ 8BD764C6F6ED996843B3BBB179E81396, 44162FDE444F279A0EC38C4C57E4DC9FDC8EB943173DCDD2FF2BA5F9C29AA897 ] C:\Program Files (x86)\Steam\bin\vgui2_s.dll
00:10:31.0746 0x04a0  C:\Program Files (x86)\Steam\bin\vgui2_s.dll - ok
00:10:31.0746 0x04a0  [ 9E64D04072912FEDDC869218D21E83C5, BCD235A235D189BC8A6CFF1FB87926CEBA5325B4F224683976E232D9781C7EA1 ] C:\Windows\System32\spfileq.dll
00:10:31.0746 0x04a0  C:\Windows\System32\spfileq.dll - ok
00:10:31.0746 0x04a0  [ 00FFA769A1358C45F1A09EF40980B52E, 5E5662F4FA0DABFE3DA6EF14D7D4A8BDA8057260F62D16F4787075B5B715843F ] C:\Windows\System32\spool\drivers\x64\3\E_ILMWIME.DLL
00:10:31.0746 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_ILMWIME.DLL - ok
00:10:31.0746 0x04a0  [ 5FC50E7BCB0D02A1174FD7E731A4B173, 5CB940A11A25642A5A6C40732A9493C080849B4C1A49F9D130C8D426DAA3769D ] C:\Windows\SysWOW64\opengl32.dll
00:10:31.0746 0x04a0  C:\Windows\SysWOW64\opengl32.dll - ok
00:10:31.0761 0x04a0  [ 7E25073A2E14B0628F9325859F8D7D48, ED9EB717F7DC873923BAF8C0B98A834BB76A09C4D43233B1F681FBFC3871C358 ] C:\Windows\SysWOW64\WindowsCodecs.dll
00:10:31.0761 0x04a0  C:\Windows\SysWOW64\WindowsCodecs.dll - ok
00:10:31.0761 0x04a0  [ B23844859184BCD60AA14A33B510DB0A, 220108908DFF38652B45C2DE26DB470DDF8CC3FD9545EF15C3C773F276051D5E ] C:\Windows\System32\spool\drivers\x64\3\E_IASRIME.DLL
00:10:31.0761 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IASRIME.DLL - ok
00:10:31.0761 0x04a0  [ 1C1DB77436838E22B646D985F4323659, 1016B6C25C648935E8FFBCDA18913EFF20FD14132C6C9B5914E4F1AB606515EA ] C:\Windows\System32\spool\drivers\x64\3\E_IABRIME.DLL
00:10:31.0761 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IABRIME.DLL - ok
00:10:31.0761 0x04a0  [ FC320B910DFBDFE314D6321ADCC8D8C7, D42990922E0D6330E2B3C8A372BACD4BFCBBC55094F73761A4981C6EC455F1F0 ] C:\Windows\SysWOW64\ddraw.dll
00:10:31.0761 0x04a0  C:\Windows\SysWOW64\ddraw.dll - ok
00:10:31.0761 0x04a0  [ 6650AF9022463AF2C8CD69496C6E6D68, 582EC75E35DACF415F81273D7661E0B7BE52B85E76BB50D65238B2CAA584429F ] C:\Windows\SysWOW64\glu32.dll
00:10:31.0761 0x04a0  C:\Windows\SysWOW64\glu32.dll - ok
00:10:31.0777 0x04a0  [ 4B4E4FE26318D7428B74340B3F67D283, D3D800FC8BF7956AA0BDDEF8680045DB58CFE21060FB3B07EB2C5A6F935F609F ] C:\Windows\SysWOW64\dciman32.dll
00:10:31.0777 0x04a0  C:\Windows\SysWOW64\dciman32.dll - ok
00:10:31.0777 0x04a0  [ 3742C1C13D47EE483B21F243B021137C, B229474EFCDE57BCA39AD9F4EC38A6E9E9F9DFB8633BA62EE8D634F55CCEC2F2 ] C:\Program Files (x86)\Sony\Sony PC Companion\Device.dll
00:10:31.0777 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\Device.dll - ok
00:10:31.0777 0x04a0  [ AA669F0E3FDF9073AE21550CF6C1178D, F571A9609436320F3D8AD57770C4B61BB7874A54516C785FC371DDADFDD4462D ] C:\Program Files (x86)\Steam\bin\chromehtml.dll
00:10:31.0777 0x04a0  C:\Program Files (x86)\Steam\bin\chromehtml.dll - ok
00:10:31.0777 0x04a0  [ 7BB2731F01E58391B3BEE7375D872113, C3DE5CEEBCFA77C2000E0A81782C2AF9CAED039703CB62D31CF4B9AE3EEAE787 ] C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
00:10:31.0777 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll - ok
00:10:31.0777 0x04a0  [ 7B8DD6235920D8E7EA79ACBB78A8F302, 28433187A318DD6574E0EF9A8317E9D9FE4515AD4D6D501C20D23D53FC8CAB2D ] C:\Program Files (x86)\Steam\bin\libcef.dll
00:10:31.0777 0x04a0  C:\Program Files (x86)\Steam\bin\libcef.dll - ok
00:10:31.0777 0x04a0  [ 6D251326609149B742D617735999068C, D9D9C5E1F7B258BC3F13241FB6C09630375EEB52D71E1F8B3584413690CE8F39 ] C:\Program Files (x86)\Sony\Sony PC Companion\WUNPACLN.dll
00:10:31.0777 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\WUNPACLN.dll - ok
00:10:31.0793 0x04a0  [ 6469D9F25E8BC905A216026C6FFC34EC, 69C4E59740E1680440A01D18E597A767541BB50E7A7A57A43C1CAEE81D01579B ] C:\Windows\SysWOW64\tapi32.dll
00:10:31.0793 0x04a0  C:\Windows\SysWOW64\tapi32.dll - ok
00:10:31.0793 0x04a0  [ BEDA4D03B0273A8383E965143DF3D4AD, 1CFA2D0BB04B6F119172167D34319A38A0379656E4B74C81BDF94229B20EA860 ] C:\Windows\SysWOW64\newdev.dll
00:10:31.0793 0x04a0  C:\Windows\SysWOW64\newdev.dll - ok
00:10:31.0793 0x04a0  [ D36EF60B954E97BB7CF57AF3F0145BFF, 3CE635815592ABA49322F364BA7EBEC64661425D1CF83609D54D7792252B22A9 ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.dll
00:10:31.0793 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.dll - ok
00:10:31.0793 0x04a0  [ BE47DEE2F1F72B92FB5CD2BB3CF48B22, 22DA0BEB04B595DD92B2E61EF874CB255890E28895A0A5F3FB83759D426F68BD ] C:\Windows\SysWOW64\rasapi32.dll
00:10:31.0793 0x04a0  C:\Windows\SysWOW64\rasapi32.dll - ok
00:10:31.0793 0x04a0  [ 130A6BC8A1AB9EAE49806A89819DBB87, 479665D99013E12E9435DD4041E434C4A3173CE4A46AA954E4FD4B3E146F3A59 ] C:\Windows\SysWOW64\rasman.dll
00:10:31.0793 0x04a0  C:\Windows\SysWOW64\rasman.dll - ok
00:10:31.0793 0x04a0  [ 66BE641B1A0990BB2835A227363FEE5C, 01B0184C87363C18893ACFED2726FECD8C6C2BF679A7C38D893F512928D339A9 ] C:\Program Files (x86)\Sony\Sony PC Companion\PluginManager.dll
00:10:31.0793 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PluginManager.dll - ok
00:10:31.0808 0x04a0  [ 03D2AF7C49C75C134CE2D4DFD4C39670, E7D0A53C3F5AD2BC9F703FFDE7FCC6C43C279E908658D20CAF001DAFB18A24D0 ] C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdateTools.dll
00:10:31.0808 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdateTools.dll - ok
00:10:31.0808 0x04a0  [ 9D7CA0BBBF1D1F2EA20529C82BD5E307, 8EB18DCF21F92E327E54326E8333AA3FCD3B42E88D77839D59A2CF2C01209550 ] C:\Program Files (x86)\Sony\Sony PC Companion\DownloadManager.dll
00:10:31.0808 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\DownloadManager.dll - ok
00:10:31.0808 0x04a0  [ 045D0F4F41CA53D4CB22BDC814A22B64, A20010E097E5A4AE7F7065DA7B290CB535D1EF98A6A7CC299A343E26D688AA5D ] C:\Program Files (x86)\Steam\bin\icudt.dll
00:10:31.0808 0x04a0  C:\Program Files (x86)\Steam\bin\icudt.dll - ok
00:10:31.0808 0x04a0  [ 9F38E0E4F9EA7DD9E58C48B21F202B63, 740FC1F557A6B51C6F49D4456EED35624A03677A66255232BF9C0967D1A37B48 ] C:\Windows\SysWOW64\msxml3.dll
00:10:31.0808 0x04a0  C:\Windows\SysWOW64\msxml3.dll - ok
00:10:31.0808 0x04a0  [ 693EA71F916949A818229FC671D3EB6B, A47354FB2997FB6F9D66EEE9191613BCBAA391E96F15552085253B96E22F5E2E ] C:\Windows\System32\spool\drivers\x64\3\E_IASOIME.DLL
00:10:31.0808 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IASOIME.DLL - ok
00:10:31.0824 0x04a0  [ 765C51D25C0441944542D49E408E224B, 607A0162CACD953787F46E07271B5EF8D2D2E3648DD45FD6F22C4DD0AE3517FC ] C:\Windows\System32\oledlg.dll
00:10:31.0824 0x04a0  C:\Windows\System32\oledlg.dll - ok
00:10:31.0824 0x04a0  [ A0F220EA79CCF88A571D8CF104F2DF11, 14643A4D3C79CAC12B73C7D112BC74D21762B51C4D93C54F71AFE607233F2EF1 ] C:\Windows\System32\spool\drivers\x64\3\E_IAPRIME.DLL
00:10:31.0824 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IAPRIME.DLL - ok
00:10:31.0824 0x04a0  [ C82020F726F659478ACB95051C054CB5, 7288E990448132BCD752CB9DCAF25F7E4EF0F5B61B63E7F1F12D9C79B8D2E425 ] C:\Windows\SysWOW64\sxs.dll
00:10:31.0824 0x04a0  C:\Windows\SysWOW64\sxs.dll - ok
00:10:31.0824 0x04a0  [ 3213F234B8FC8D0869D50B98884EB5F4, 3F2E2A3AD819503D10D18E9620B4F29F7E1453FB9CDC5B96CB4F2928D52676D2 ] C:\Windows\SysWOW64\DWrite.dll
00:10:31.0824 0x04a0  C:\Windows\SysWOW64\DWrite.dll - ok
00:10:31.0824 0x04a0  [ 349C3C6B4D335923865E7CC5C68E1051, DA660CA17FAB80CD3923A49E359CF6F48FD9D6BF3364FA1B160E3C0E50AFD0AE ] C:\Windows\System32\spool\drivers\x64\3\E_IBA7IME.DLL
00:10:31.0824 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IBA7IME.DLL - ok
00:10:31.0824 0x04a0  [ BBA1FE328CEA501FCCE1E5DF16276439, F5522D2C936DE8D53F97A6EC439D8F8391CB50A0BC6008A399F9454C00929D35 ] C:\Program Files (x86)\Steam\bin\avcodec-53.dll
00:10:31.0824 0x04a0  C:\Program Files (x86)\Steam\bin\avcodec-53.dll - ok
00:10:31.0840 0x04a0  [ 3D22AFE5ABF58750D7CB979D529B24F1, 0AB0A472BBB6CA2DA6CBA478F1CCE58442809CFCBB1D4F0CFDC4B0562228FC28 ] C:\Windows\System32\spool\drivers\x64\3\E_IBEWIME.DLL
00:10:31.0840 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IBEWIME.DLL - ok
00:10:31.0840 0x04a0  [ 17E5C84EDB7CC1806B6BBEDBFD354DDF, 09935A38C187E65E8D04AC46725A2C5993FD8D4194F4E400FCEF6CF9100D909E ] C:\Windows\System32\spool\drivers\x64\3\E_IBL6IME.DLL
00:10:31.0840 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IBL6IME.DLL - ok
00:10:31.0840 0x04a0  [ 2A8B8A15A58EDF3B443083EC29894E54, 84E6875F1869B8CFD73525F0C04F1BF2CF0D0D08B1226F62CFD44FF14FE0345D ] C:\Program Files (x86)\Steam\bin\avutil-51.dll
00:10:31.0840 0x04a0  C:\Program Files (x86)\Steam\bin\avutil-51.dll - ok
00:10:31.0840 0x04a0  [ 7D16196C58287F15272DD885F8DA7F0E, FF04B4C78491F607700B2A1D67A140A6547D212438716DFA17D916892B3BBBA0 ] C:\Windows\System32\spool\drivers\x64\3\E_IERSIME.DLL
00:10:31.0840 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IERSIME.DLL - ok
00:10:31.0840 0x04a0  [ C5CCB86CD745746B9908031A54315F90, AC1F83180E07AC2B3D1E6F80F94AEE0B2591BE13E8A1FE63998CF7F0A9F18F1E ] C:\Program Files (x86)\Steam\bin\avformat-53.dll
00:10:31.0840 0x04a0  C:\Program Files (x86)\Steam\bin\avformat-53.dll - ok
00:10:31.0840 0x04a0  [ 5C25C45FB33F8A92F41783587854D7DE, DBFCE19A8FAB8FF224455ADC7B64043552602CDD1439D901E8D85E6A2B81FD2E ] C:\Program Files (x86)\Steam\steamclient.dll
00:10:31.0840 0x04a0  C:\Program Files (x86)\Steam\steamclient.dll - ok
00:10:31.0855 0x04a0  [ 7CFA57D9E63AFE400BA45FF96EB835FC, 8ACE3A7E630EFC4230548837A62E0667193C87FA6F610725628610A407169A2F ] C:\Windows\System32\FXSRESM.dll
00:10:31.0855 0x04a0  C:\Windows\System32\FXSRESM.dll - ok
00:10:31.0855 0x04a0  [ 2F3B5A3567FFB343D8867C3D34C687F1, D01971412506746B2EA1CBB0ACF9472889ABBC23318C1332BEC9C8256011183E ] C:\Program Files (x86)\Common Files\Steam\SteamService.exe
00:10:31.0855 0x04a0  C:\Program Files (x86)\Common Files\Steam\SteamService.exe - ok
00:10:31.0855 0x04a0  [ 6A10586D2456BBE6E1F7DBAABB2C5F28, 03D4F21A3BEDF2C62E38F0C0F9EDA5E49D9D5A1FFD4A07FFB33BD148B8180512 ] C:\Windows\SysWOW64\FirewallAPI.dll
00:10:31.0855 0x04a0  C:\Windows\SysWOW64\FirewallAPI.dll - ok
00:10:31.0855 0x04a0  [ 3126A761946ADC65C6BA511971EF033D, A5F6B1BFD5562FC34ADC9EEE49D6DAD52401B55D691B1427A5AEBC94BD46E9B9 ] C:\Windows\SysWOW64\MMDevAPI.dll
00:10:31.0855 0x04a0  C:\Windows\SysWOW64\MMDevAPI.dll - ok
00:10:31.0855 0x04a0  [ FA245BB3D82A7A9061508097BB0FBCA5, 79374F05B7700F2055531AAF83EC30B084399BBA4D494617A084AB572A016C9F ] C:\Windows\SysWOW64\ksuser.dll
00:10:31.0855 0x04a0  C:\Windows\SysWOW64\ksuser.dll - ok
00:10:31.0871 0x04a0  [ CCF086F9C7366A79EC2C1E1C9D659B70, BBA73C0AC0297242F898B35817FB2DAEC937F1E1CE04BD49E15EFB954DACB8B6 ] C:\Windows\SysWOW64\wdmaud.drv
00:10:31.0871 0x04a0  C:\Windows\SysWOW64\wdmaud.drv - ok
00:10:31.0871 0x04a0  [ 973AFEFCFD1FC8BE410C98E0865551D2, 69D2239E8E944D7A20A212A362835A527CFE91799C8D46EB2829F13608B8CAFD ] C:\Windows\SysWOW64\avrt.dll
00:10:31.0871 0x04a0  C:\Windows\SysWOW64\avrt.dll - ok
00:10:31.0871 0x04a0  [ 1F2C7F52F7A53751ED38287EF90942C8, 38AB39FF5559974DBC10B355DCFEABA9B52D1E6E31E8368CEE122A16BDAE2EAB ] C:\Windows\SysWOW64\AudioSes.dll
00:10:31.0871 0x04a0  C:\Windows\SysWOW64\AudioSes.dll - ok
00:10:31.0871 0x04a0  [ 6C20BD6E46D606CB40A13C22D52B90C7, 3AC55198B0DEEDF8CDC818D76466B3600FE03EDCCC57AF7A4E2DCAAC053089A4 ] C:\Windows\SysWOW64\powrprof.dll
00:10:31.0871 0x04a0  C:\Windows\SysWOW64\powrprof.dll - ok
00:10:31.0871 0x04a0  [ 62BE157BC780A5BCBC391C76615C286E, 2E48437092DBCB4B6DD3E62CCCBE61210FAC8C06A73688CD74CDDA16D82BCEC2 ] C:\Program Files (x86)\Steam\bin\steamservice.dll
00:10:31.0871 0x04a0  C:\Program Files (x86)\Steam\bin\steamservice.dll - ok
00:10:31.0871 0x04a0  [ A7532E66EA2F168A0970E829D8986423, 908B92E80C41D2782C6806C2B05F2FBB4C34A9F95D603C16C188384A9E4EF989 ] C:\Program Files (x86)\Steam\dbghelp.dll
00:10:31.0871 0x04a0  C:\Program Files (x86)\Steam\dbghelp.dll - ok
00:10:31.0886 0x04a0  [ A97542F6C1B3C99E739E6D2A79C1E1A3, 6BF04694F04E486B7A17EA0CC82B83AC6CA614C8970F660E9A2C39DE9D4B0395 ] C:\Windows\SysWOW64\dsound.dll
00:10:31.0886 0x04a0  C:\Windows\SysWOW64\dsound.dll - ok
00:10:31.0886 0x04a0  [ 38E655CF5DD5713146E3CEF041BAADC4, 50F08A45683B9580965C26EDE59B80B307E2ACA363A3BB14BEDA285AE20B7A7E ] C:\Windows\SysWOW64\midimap.dll
00:10:31.0886 0x04a0  C:\Windows\SysWOW64\midimap.dll - ok
00:10:31.0886 0x04a0  [ 3AECCDC2EA5C01E453242DC716F57C24, F7780E026EC7700375DCCAFE3FDABF48796E67FC4357AFEDBFBA40F8EE8A3C51 ] C:\Windows\SysWOW64\msacm32.drv
00:10:31.0886 0x04a0  C:\Windows\SysWOW64\msacm32.drv - ok
00:10:31.0886 0x04a0  [ 09B2F3A41C6A8BFA22640826F70E9810, 7208F1C21C166C885754918F1FDBE1A7EC5D3EAEED23EEE41D0243F68B24C89C ] C:\Windows\System32\audiodg.exe
00:10:31.0886 0x04a0  C:\Windows\System32\audiodg.exe - ok
00:10:31.0886 0x04a0  [ 6B8EDB9EC94DC2D1370C57564E853051, C8960461CE94DE892A0886A2136D137388642052D4508970A1FA69CB7FEFDF2E ] C:\Windows\System32\AudioEng.dll
00:10:31.0886 0x04a0  C:\Windows\System32\AudioEng.dll - ok
00:10:31.0902 0x04a0  [ 6246774331042E74F7E1ADA504C24063, 49714225D1468F3E6551045829E552239C007FAA7BD432E551A5DDE5B015A6DD ] C:\Windows\System32\AUDIOKSE.dll
00:10:31.0902 0x04a0  C:\Windows\System32\AUDIOKSE.dll - ok
00:10:31.0902 0x04a0  [ 55C83A2C1380B3D9A6D2F6598650EDD8, FFD5A89060A53B5CFE7813DD0FB1B753EABA3CE0B673710A109B5147338CCBFD ] C:\Windows\System32\stapo64.dll
00:10:31.0902 0x04a0  C:\Windows\System32\stapo64.dll - ok
00:10:31.0902 0x04a0  [ 151A9FFA90027B9E636F99295D9672AB, CF5C43A392E54380699C8C5D1DBFD3934033D5CB30DFFE14CC0CDFA3A7042A1A ] C:\Windows\System32\deviceaccess.dll
00:10:31.0902 0x04a0  C:\Windows\System32\deviceaccess.dll - ok
00:10:31.0902 0x04a0  [ 7184ECD4769D68BC3DA228BE9657FF38, EEEBF6A126465C2B8612A98FD4C31C92BDBBA673D940ED0B038F2AEE067B4AB7 ] C:\Program Files (x86)\Sony\Sony PC Companion\CrashDump.dll
00:10:31.0902 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\CrashDump.dll - ok
00:10:31.0902 0x04a0  [ 67B5955F5F2F36D58993EB87101B3D2B, 09BC41D0A9D469E1F9C49308ED81FF31DCC0A1CCC8FEBDBB554F60941C35B9C9 ] C:\Windows\SysWOW64\ieframe.dll
00:10:31.0902 0x04a0  C:\Windows\SysWOW64\ieframe.dll - ok
00:10:31.0902 0x04a0  [ 5BC65464354A9FD3BEAA28E18839734A, EBF910C9EF023C72D45964E263A80C3E8B3B33C0351EA97B9AA0EFF5C31DF4C2 ] C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
00:10:31.0902 0x04a0  C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE - ok
00:10:31.0918 0x04a0  [ A3CDCDF1A0EE11A39F6BDEABB4DDE7EE, 14B7A79AD2CD96524671F8A63D63ED665253EFCF02DA74A814FEC83F33225134 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\MSO.DLL
00:10:31.0918 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\MSO.DLL - ok
00:10:31.0918 0x04a0  [ B7995C675014EEBE77A0BEB7AFCCFC08, 41D186C63273301CF0A1C1EE7B6EB0BB75A251DD441532C5CEB7A4095FB103CD ] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
00:10:31.0918 0x04a0  C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe - ok
00:10:31.0918 0x04a0  [ 809A1EC7868924B5E92421F018587AC9, ED35819B78C452D9A7DB07686F828A2353C07EAEBB3EA185301C47EC647B7681 ] C:\Program Files (x86)\CyberLink\PowerDVD10\CLRCEngine3.dll

 

Link to post
Share on other sites

00:10:31.0918 0x04a0  C:\Program Files (x86)\CyberLink\PowerDVD10\CLRCEngine3.dll - ok
00:10:31.0918 0x04a0  [ 86F1895AE8C5E8B17D99ECE768A70732, 8094AF5EE310714CAEBCCAEEE7769FFB08048503BA478B879EDFEF5F1A24FEFE ] C:\Program Files (x86)\CyberLink\PowerDVD10\msvcr71.dll
00:10:31.0918 0x04a0  C:\Program Files (x86)\CyberLink\PowerDVD10\msvcr71.dll - ok
00:10:31.0918 0x04a0  [ D1C8B0DC04347B6B9B5B3B9204DF6756, DA4D1CC98DCDFDF674F83164843A6B4E8830232700BE13CC755F94638351DA8B ] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
00:10:31.0918 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe - ok
00:10:31.0918 0x04a0  [ 9F378D86F983E84A0212678C1D18D7FC, 235EAE4D6052B83EF761A4B28980A8146AB32AB0C9220E8535D0F937343B5541 ] C:\Windows\SysWOW64\mshtml.dll
00:10:31.0918 0x04a0  C:\Windows\SysWOW64\mshtml.dll - ok
00:10:31.0933 0x04a0  [ 4214EBCC2EA861B6F7FA9CD1596879AC, 41E900BF70F1EA5BC4FD985DEB34398F162F36B5B460E6DA9D4DEAADA04CB849 ] C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll
00:10:31.0933 0x04a0  C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll - ok
00:10:31.0933 0x04a0  [ 514455F6586473791C5C6B25BA4E1BAB, 0C2CAE8F35241F1B936C502AAB7C9303C643D898BAB1D060FCA1E6B3A7D9FDB9 ] C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
00:10:31.0933 0x04a0  C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe - ok
00:10:31.0933 0x04a0  [ A660114928770700B00995E2117E587D, E6C99EA5453BDF80D94C931717346D88AFC726EB87C6CE97507806A2EBD03AD6 ] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\pdm.dll
00:10:31.0933 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\pdm.dll - ok
00:10:31.0933 0x04a0  [ 53A9581EEE82D76CB90CDB0202973504, B5B4F955BABAD0DC6DA4292E2A4AADA05EEB9D29CF66785116254769C12990C6 ] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll
00:10:31.0933 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll - ok
00:10:31.0933 0x04a0  [ 048EA4B978851788E9F5E8E4F081DF7A, EB62719AC0DCC18FF056F2CD84438BF14B61E38F0619617C81961C6257BDFCEC ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
00:10:31.0933 0x04a0  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok
00:10:31.0949 0x04a0  [ D8A3C6866F682377C8960DDE3CCE9DEE, 24DAE9BEBF3EAC031CD0768CD45F74DDF66468FEEB1210DD527AF22AC721E3EB ] C:\Program Files (x86)\Sony\Sony PC Companion\Statistics.dll
00:10:31.0949 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\Statistics.dll - ok
00:10:31.0949 0x04a0  [ E6ED7FEE05030120A89738A48B816383, E7C17F287BA69BA608B0C0E459F8E824D3281A41262AF9DDDDDFEA046E68C8B6 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE
00:10:31.0949 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\FSM32.EXE - ok
00:10:31.0949 0x04a0  [ 01D92A226791867F2DED688F25271905, E2B8F12C9675C8AA1BE96BB68570E40F6F62CA81B6BE6EC3FAACCD096F303D15 ] C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
00:10:31.0949 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe - ok
00:10:31.0949 0x04a0  [ 6198A9BC15ED77F318D5DDD1918CF1D1, 6C7E619BB053F09021F5867E3A70A3A2890E2318CF1A5CE294A5F894CB3A4890 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
00:10:31.0949 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe - ok
00:10:31.0949 0x04a0  [ 4811BEA676D8355C158246D1F9B7A4F2, C86F34D8F4A87F82C965D8BEC9CCABC5EEEE69E70C0F509A362B1CB7CBFFEE4D ] C:\Windows\SysWOW64\netprofm.dll
00:10:31.0949 0x04a0  C:\Windows\SysWOW64\netprofm.dll - ok
00:10:31.0949 0x04a0  [ 3A57A288F098188E92C6B0309CBC50B2, 3C4CE9334919E34006F81A353853649D847272A7B5F334F11DC4ECB80695DAB0 ] C:\Windows\SysWOW64\npmproxy.dll
00:10:31.0949 0x04a0  C:\Windows\SysWOW64\npmproxy.dll - ok
00:10:31.0965 0x04a0  [ 54268A531E71982E5F5EEB6919D94ED2, CBE2897F974E0C89C9C3FCB47999736A061C069752F3FAD329CAE970AC2343A0 ] C:\Windows\SysWOW64\rtutils.dll
00:10:31.0965 0x04a0  C:\Windows\SysWOW64\rtutils.dll - ok
00:10:31.0965 0x04a0  [ 97D3B79F36CBD8B70F0D9BA6939D2462, 4492C7AF7467205CDE678FB94108DF2D0646A25B99FDD6B4658498DB6A9955C6 ] C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll
00:10:31.0965 0x04a0  C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll - ok
00:10:31.0965 0x04a0  [ 73AF7AD0C9FD76981865219563D884CC, D69DD72E0945080C483D72218A533D1E4C32611E38BA00C1CC4B25405BA59C46 ] C:\Windows\SysWOW64\msimtf.dll
00:10:31.0965 0x04a0  C:\Windows\SysWOW64\msimtf.dll - ok
00:10:31.0965 0x04a0  [ 4D77A4ECFAFCCE6CEE0F8FEE88E637A8, 35E8CA22F77D91E5C0E010CE1027E4129F5DAB74430DC4CEAE06D317F3FB9A88 ] C:\Windows\SysWOW64\dxgi.dll
00:10:31.0965 0x04a0  C:\Windows\SysWOW64\dxgi.dll - ok
00:10:31.0965 0x04a0  [ 3F2FD720B6C4EF55B25B330808121069, 86B110DEBD41AB404B7B0CC6587E31F8C27FE979E51EF3A5E7BA585F9E878D45 ] C:\Windows\SysWOW64\jscript9.dll
00:10:31.0965 0x04a0  C:\Windows\SysWOW64\jscript9.dll - ok
00:10:31.0965 0x04a0  [ EFAAA955B7D44729B250160A3DDDB6C5, A7C4B20E28E5CCCE0D30CA248720E44C934CDD5740A821E03C0BC93E74090173 ] C:\Windows\SysWOW64\mlang.dll
00:10:31.0965 0x04a0  C:\Windows\SysWOW64\mlang.dll - ok
00:10:31.0980 0x04a0  [ 9E435BA84F1D0E7A390418581882B330, 5E5F1A2244AB430EA9C741C9E87BAE1645AB7153D59C629E3893136E8C581DBA ] C:\Windows\System32\wbem\wmiprov.dll
00:10:31.0980 0x04a0  C:\Windows\System32\wbem\wmiprov.dll - ok
00:10:31.0980 0x04a0  [ 3D3C56EDE6C5B7176BDE056828064D68, 352EF36E456746AAF867A8BEB396EF23C7353A9133D273293A46EDF783DC63DF ] C:\Windows\SysWOW64\msiltcfg.dll
00:10:31.0980 0x04a0  C:\Windows\SysWOW64\msiltcfg.dll - ok
00:10:31.0980 0x04a0  [ 5DDEA740B911D4E910AC031090183E6A, 7CF71ACD9A9FAB1FA7D605EBBFAD93D0ABDF8C07A78255ED939E0B7F280DB3F6 ] C:\Windows\SysWOW64\sfc.dll
00:10:31.0980 0x04a0  C:\Windows\SysWOW64\sfc.dll - ok
00:10:31.0980 0x04a0  [ A5723DB2ABF2992EC5E6541E65DFB791, 0EEB098E3FB5BF107E0C683C8FCCCEE372945A4F35604EC81837A730E5193346 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\penusa.dll
00:10:31.0980 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\penusa.dll - ok
00:10:31.0980 0x04a0  [ A5723DB2ABF2992EC5E6541E65DFB791, 0EEB098E3FB5BF107E0C683C8FCCCEE372945A4F35604EC81837A730E5193346 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\skchui.dll
00:10:31.0980 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\skchui.dll - ok
00:10:31.0996 0x04a0  [ C7E96470AD5552C67092B073B667121B, A9149464CDD0FC63D4ECC751D6A1C41088988289103EC136A1D1AF933787319D ] C:\Windows\SysWOW64\d2d1.dll
00:10:31.0996 0x04a0  C:\Windows\SysWOW64\d2d1.dll - ok
00:10:31.0996 0x04a0  [ 70E7F0A9520C7D488AEB43D19BAF3655, 7C6BCC49D98B81949EF3207125548DF9FA2F348A172DA7AFFD8C096D83B57CAD ] C:\Program Files (x86)\TalkTalk\Security\ControlLayer.dll
00:10:31.0996 0x04a0  C:\Program Files (x86)\TalkTalk\Security\ControlLayer.dll - ok
00:10:31.0996 0x04a0  [ 1D93697FEB66BC506AE5F063F6561B64, C13828C3863AE127DB6F53DDA546A2DF6FA4DB8953DB8797C4F43E5A199C7DEE ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsmuiav.dll
00:10:31.0996 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsmuiav.dll - ok
00:10:31.0996 0x04a0  [ 0D3E7D871FAAFFCCE7E1AC3099D7843A, 25AB73F69472CF1FF3D8CA50FFA72F53D3A19B8823B313058A5831F9770724C7 ] C:\Program Files (x86)\TalkTalk\Security\JsonParser.dll
00:10:31.0996 0x04a0  C:\Program Files (x86)\TalkTalk\Security\JsonParser.dll - ok
00:10:31.0996 0x04a0  [ 1BD5525D087D65BF775D6EC853F73B68, 18D7907B39807358C13769D699B72E071BFB7E0AD1D74662FE15F534AF088A56 ] C:\Program Files (x86)\TalkTalk\Security\CuifTypes.dll
00:10:31.0996 0x04a0  C:\Program Files (x86)\TalkTalk\Security\CuifTypes.dll - ok
00:10:32.0011 0x04a0  [ 6BF86710D9CEFC59A6B3702A8100E32D, 671253EB271D2B57A6518FC9C53CD286F666902A2A8104E9C5AB494D77D6526A ] C:\Program Files (x86)\TalkTalk\Security\DataLayer.dll
00:10:32.0011 0x04a0  C:\Program Files (x86)\TalkTalk\Security\DataLayer.dll - ok
00:10:32.0011 0x04a0  [ 78AB615C90D57BE0C8160234998FAD57, 05826FF03E6A3F7776989201289915F814410E938E85A05A3A4C7795D46B9889 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\gres.dll
00:10:32.0011 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\gres.dll - ok
00:10:32.0011 0x04a0  [ 5F96687B87B35AB996FE125DC0288544, A618F513BB09C20EDAC7C26801B4DC2123E350C5CD413E7FEEC47A13499E9D74 ] C:\Windows\SysWOW64\d3d11.dll
00:10:32.0011 0x04a0  C:\Windows\SysWOW64\d3d11.dll - ok
00:10:32.0011 0x04a0  [ 023E313A0ABCF0C47369F524B8015C19, 3185AAB2CAA42B8BBCBFC04BBE66124F0849523E092A0C534F303D5612485F80 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\guilaunc.dll
00:10:32.0011 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\guilaunc.dll - ok
00:10:32.0027 0x04a0  [ 58B8702C20DE211D1FCB248D2FDD71D1, B2F6E3BA6FB5250F0E70555B39D34F19ADA760BDDA7E1A44113B97C3A1FD3F8B ] C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe
00:10:32.0027 0x04a0  C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe - ok
00:10:32.0027 0x04a0  [ 64E93ED82EB4A29208B862A3F592CA36, B16203F2F06D6B1D7EB85A086EDAAA1298550FD50763D4498B93A0B208048857 ] C:\Windows\SysWOW64\dpapi.dll
00:10:32.0027 0x04a0  C:\Windows\SysWOW64\dpapi.dll - ok
00:10:32.0027 0x04a0  [ 86746880DDC41FCAFAB51B0701821B67, 5F215C77372DA8FBDBF595ADB5B0EA2DA9492256195C1E969E21FA82C357D2FA ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsavesui.dll
00:10:32.0027 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsavesui.dll - ok
00:10:32.0027 0x04a0  [ F8D06F89521E0BA208F8BCA399EEE819, EB18C524B8E03C3066116DE6A40170BB778D39C9BCBA2D887F46A27C48DEA149 ] C:\Program Files (x86)\TalkTalk\Security\DeclarationHandler.dll
00:10:32.0027 0x04a0  C:\Program Files (x86)\TalkTalk\Security\DeclarationHandler.dll - ok
00:10:32.0027 0x04a0  [ 2031DCC0083A134AF9451CD1402FFCE3, 4E2646A5607C543648F9324A5B59FB389E683F6B652004A736B8FFAC7E0112CD ] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
00:10:32.0027 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll - ok
00:10:32.0027 0x04a0  [ CB0AD586EA7C13AEF616848B64C5CC53, 528238DD95D48884931299AEFC7FCE9E1A16571BDD74B949E27FDDA05D96ADB3 ] C:\Windows\SysWOW64\d3d10warp.dll
00:10:32.0027 0x04a0  C:\Windows\SysWOW64\d3d10warp.dll - ok
00:10:32.0043 0x04a0  [ 942C929DC72DF1C18C8387249F1448F3, 0C6D7AF01BCE4DBEC273D04B87A342C5F20B6F393F56A898A78A0E2CC3DCF1CB ] C:\Windows\SysWOW64\sti.dll
00:10:32.0043 0x04a0  C:\Windows\SysWOW64\sti.dll - ok
00:10:32.0043 0x04a0  [ 55276F5914D1B605656EA44AE411859E, 241DF97AD4A58BF9E4C2E0AED6FC89EA0D5FE86027394368F0781B165C937700 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtWebKit4.dll
00:10:32.0043 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtWebKit4.dll - ok
00:10:32.0043 0x04a0  [ 509D7340346D5C38C36A83F2DD0AD4C3, D19E13A43BE2A8BB5EF1E2E0CEE8211D7F84F45CB2A874F8DD3955BB3619BE44 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsavures.eng
00:10:32.0043 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\fsavures.eng - ok
00:10:32.0043 0x04a0  [ 837BBE03FE228237E17C4849BEBBBBBE, ACDAB49D3E3419BBEDFEB87A6A8ADFB701CBA5B05ADD9D7EB4C579E2A31ACF69 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\flyer.dll
00:10:32.0043 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\flyer.dll - ok
00:10:32.0043 0x04a0  [ 51A34398C23DD48AA9614C2C7BFE222A, DDBF20EA77DEB5703F91D8185C7C6F9325231558ED07213A27D410D108D368D2 ] C:\Program Files (x86)\EPSON Software\Event Manager\ScanEngine30.dll
00:10:32.0043 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\ScanEngine30.dll - ok
00:10:32.0058 0x04a0  [ 1A1CEF512F488D45BB624C148E53356D, 8768AD452B2C6E8FA16CAC763C806F0F70860DC46F7923E28D232312FB7EBEA9 ] C:\Program Files (x86)\EPSON Software\Event Manager\ScnMgr10.dll
00:10:32.0058 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\ScnMgr10.dll - ok
00:10:32.0058 0x04a0  [ 930C61F63FB900CEE15D4EEB98BD5238, C2649C39BEDA5A578A9CD1B0EC54CD8262C0D02A0B1594C25C2E8565129B3A21 ] C:\Program Files (x86)\EPSON Software\Event Manager\ScnCom10.dll
00:10:32.0058 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\ScnCom10.dll - ok
00:10:32.0058 0x04a0  [ 903E85BA90D0A9D32368B200634B2B67, 234FD348EA123CE07B3A30D89F439DAEEEE43DB7AC999B4872F216DCE5E823E6 ] C:\Program Files (x86)\EPSON Software\Event Manager\ScnEps25.dll
00:10:32.0058 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\ScnEps25.dll - ok
00:10:32.0058 0x04a0  [ 14EF30CFFB4C81A9123A9AC3862A85F7, A41715F65E17F2361B97D34F8B5F204874B492A3B5163C04C4275CC1F06C6CA9 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\strres.eng
00:10:32.0058 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\strres.eng - ok
00:10:32.0058 0x04a0  [ DA7EB5D3652FE2B1676AAA9E6E241E68, 27791174850A385CF873C2794DBF81674D0E41F2F850C049C3118FDE9E761E40 ] C:\Windows\twain_32.dll
00:10:32.0058 0x04a0  C:\Windows\twain_32.dll - ok
00:10:32.0074 0x04a0  [ E1F5ACD2E86DFC938AD781EC162B745D, 576B4326B5F4AE66BA92DE0B892492558AC5997CAB61AE0966AF2839AED57922 ] C:\Windows\System32\wbem\NCProv.dll
00:10:32.0074 0x04a0  C:\Windows\System32\wbem\NCProv.dll - ok
00:10:32.0074 0x04a0  [ 3AC4B33989FC029C57ADA46940389AFA, 1E87F1DE770BC78678EB0B3E78EFA65157E1ADC1E8D9C824BB6C7F7F798735D7 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtGui4.dll
00:10:32.0074 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtGui4.dll - ok
00:10:32.0074 0x04a0  [ 530959CEE0B6FEE8797CB29ABB34EFAA, 60C46FE72B3D8DAF5E8333814C15FE4612C4F1F1AC0C0090EA17DE1E2C3DBF1B ] C:\Program Files (x86)\TalkTalk\Security\ParserFramework.dll
00:10:32.0074 0x04a0  C:\Program Files (x86)\TalkTalk\Security\ParserFramework.dll - ok
00:10:32.0074 0x04a0  [ 63D7B951B44BD0F48D786D09E74E70AE, ECF2F869BB6A3320163160EB2A05D57D077CDDDB8835044DA0BAE1558955341B ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtNetwork4.dll
00:10:32.0074 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtNetwork4.dll - ok
00:10:32.0074 0x04a0  [ C4374F9F5A36E79E21DF4633C4E7923A, 91148AE097A94FDABDB0190AEB3D9A035AE5BDD61E6B62A83E6326F382910385 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll
00:10:32.0074 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll - ok
00:10:32.0074 0x04a0  [ 4B443FE783F46EC155015089565DB2CE, 1612ADE296B95B5AA962EB5C91D4810C7F407C9840601434B4606741975ECFD1 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtOpenGL4.dll
00:10:32.0074 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtOpenGL4.dll - ok
00:10:32.0090 0x04a0  [ FB2BE4175BF06D592F2C95E5863CA198, 0A66D80114A25F8AF24401CFDD6E86BE46062820D31BC7A4AE777CA47E880109 ] C:\Windows\twain_32\escndv\xp200.ds
00:10:32.0090 0x04a0  C:\Windows\twain_32\escndv\xp200.ds - ok
00:10:32.0090 0x04a0  [ F39FF52530A5E4C744E67C9875EABF19, 60D093834AD9F3F9661EED9747AAC255F3BA0B4C1F30378C36B46A7D8EFEC30C ] C:\Windows\twain_32\MP250 series\CISDS.DS
00:10:32.0090 0x04a0  C:\Windows\twain_32\MP250 series\CISDS.DS - ok
00:10:32.0090 0x04a0  [ 4E935102B66EFE967E8250506344A041, 1C1F29690E6E3C7C9689A90278DA3549355AEDE943733545582E204B7AEA625C ] C:\Windows\SysWOW64\wiadss.dll
00:10:32.0090 0x04a0  C:\Windows\SysWOW64\wiadss.dll - ok
00:10:32.0090 0x04a0  [ 55A145D45193F55F0079E996512470B5, A095DE91D10B84569668A9B3BE8FA5A5021C8B17CB59698CC195CB8081BC61E0 ] C:\Windows\twain_32\wiatwain.ds
00:10:32.0090 0x04a0  C:\Windows\twain_32\wiatwain.ds - ok
00:10:32.0090 0x04a0  [ 5880FB7B6A6CDF549C81694A9AFA8BE3, 83EF0D0FA177049F3829EB22B5C7255F09FA1E91721185D0BCB94D9B6C6AB3E1 ] C:\Windows\SysWOW64\wiatrace.dll
00:10:32.0090 0x04a0  C:\Windows\SysWOW64\wiatrace.dll - ok
00:10:32.0105 0x04a0  [ 177A91DD3139B732E36308DBF06A77B1, 83A98D3A98BEFC08E4E6D3743CDE075ED85879C1ED0D9938B05476CB564FB09A ] C:\Program Files (x86)\EPSON Software\Event Manager\EPNSM.dll
00:10:32.0105 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\EPNSM.dll - ok
00:10:32.0105 0x04a0  [ 637124CDBFF5819CB8A8478838A33048, 7B6F46A73308E26E8AB22B01C7F6A7A94032AB0469B55ACF83ACE7EB0D612699 ] C:\Program Files (x86)\EPSON Software\Event Manager\ESPSUTL.dll
00:10:32.0105 0x04a0  C:\Program Files (x86)\EPSON Software\Event Manager\ESPSUTL.dll - ok
00:10:32.0105 0x04a0  [ 4795466FCB17D739DE050D41BA47CCB2, 88EE35787C91CB59B5C65B4A7435900222E24B2766076F9B2357584BD78EAB9B ] C:\Program Files (x86)\TalkTalk\Security\widgets\CuifWidgets.dll
00:10:32.0105 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\CuifWidgets.dll - ok
00:10:32.0105 0x04a0  [ 1E9619D38118AF7D4FD0E4B8233A9241, 3B8BE12A709FB86EBC9B1E74E3F5BD90847B41A1AE8930D923ADBD6548B6D3AC ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCWebServices.dll
00:10:32.0105 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PCCWebServices.dll - ok
00:10:32.0105 0x04a0  [ 38671530B05BCC631BAEC684DB324080, 289FB65DD63E729BC9C2D8D647661EA2AF050BC5CBC1F1C771C788311B8A53F5 ] C:\Windows\SysWOW64\thumbcache.dll
00:10:32.0105 0x04a0  C:\Windows\SysWOW64\thumbcache.dll - ok
00:10:32.0121 0x04a0  [ 5783FC1E2924A883FA9FFB121BF286A0, 7DA345B464FF8D3406722CAF99491CA9D62A1660BE41D3708DA03355674279FD ] C:\Program Files (x86)\TalkTalk\Security\widgets\HelpWidgets.dll
00:10:32.0121 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\HelpWidgets.dll - ok
00:10:32.0121 0x04a0  [ A8F6EACF6381C4C3F67D04A11ABD7486, 25E0C69CE72F3BBF0FAB3C0F5A6AECA650843E24420877854DF133A8945E0F16 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtHelp4.dll
00:10:32.0121 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtHelp4.dll - ok
00:10:32.0121 0x04a0  [ E4D9FAEDF8F80B4B08754F8AF2CE5AFF, 00A66A15A4847244187B234F166D968826BB8C1EB8FB070E969FB88A77689D1C ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtSql4.dll
00:10:32.0121 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtSql4.dll - ok
00:10:32.0121 0x04a0  [ 1C0972FF5D6433DC5BA5B406914054B1, 4B9DD72A815CBC385708AAC06C39F068BB614FF6C932B32DF6973F4FACB62396 ] C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCLucene4.dll
00:10:32.0121 0x04a0  C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtCLucene4.dll - ok
00:10:32.0121 0x04a0  [ 078E0DD99212DBC2E20004AE0D8E1BD8, DEC8D38844D3BB157476622FA0EB95A9EB3CE2B05B7E7539AEFD5306DA1B0EDC ] C:\Windows\System32\RMapi.dll
00:10:32.0121 0x04a0  C:\Windows\System32\RMapi.dll - ok
00:10:32.0121 0x04a0  [ 8246D6B66CC5116BDE735BC319BBBCDE, 00E778D6E5442BC3FCB3C8FD81993E27070D563B55D9AE6AAE287E878F405A4D ] C:\Windows\System32\WwanRadioManager.dll
00:10:32.0121 0x04a0  C:\Windows\System32\WwanRadioManager.dll - ok
00:10:32.0136 0x04a0  [ F516A105BA52628BCD11957510ADB4D2, FDC315B76D44B0DB5151A464096491B9701F55AF0FFEE1E22FE1993BCD7A35E3 ] C:\Windows\System32\WlanRadioManager.dll
00:10:32.0136 0x04a0  C:\Windows\System32\WlanRadioManager.dll - ok
00:10:32.0136 0x04a0  [ CD9C070D0E5EE7B8861E247ADF6B939B, 102EDED265DA81EF9F46FF886F1AA897B4CD8CFDE24FB16A47858B13B0DA1777 ] C:\Windows\System32\BthRadioMedia.dll
00:10:32.0136 0x04a0  C:\Windows\System32\BthRadioMedia.dll - ok
00:10:32.0136 0x04a0  [ 2F5766A71A736B119292FE1EB67D6603, BBC8420B9895304AFAE1BB2779C49BC0028358558E77F70A34BAC54BCF5DB37F ] C:\Program Files (x86)\TalkTalk\Security\widgets\CommonSettingsWidgets.dll
00:10:32.0136 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\CommonSettingsWidgets.dll - ok
00:10:32.0136 0x04a0  [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
00:10:32.0136 0x04a0  C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe - ok
00:10:32.0152 0x04a0  [ 2C743484FEBFAFFFA1575CCDCA1AD519, 400B0F15C1606C2FD38E8DCA9DE89FE51F0EF8DC65A4B0F15E8FFDB1F9509212 ] C:\Program Files (x86)\TalkTalk\Security\widgets\ActionCenterWidgets.dll
00:10:32.0152 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\ActionCenterWidgets.dll - ok
00:10:32.0152 0x04a0  [ 76DD53EF12594C4FB05F9D39A762253E, BF681339712616F83BE9BD0E7C629C555D1C873465B8442C517C77390515A8EB ] C:\Program Files (x86)\TalkTalk\Security\widgets\LaunchPadWidgets.dll
00:10:32.0152 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\LaunchPadWidgets.dll - ok
00:10:32.0152 0x04a0  [ F906D956DC61A76E683ADF11A01D8210, 59CAFCE893672D4AB56BE1678257C3B346789DC91E8EB1BC037E25E5667D7C12 ] C:\Program Files (x86)\TalkTalk\Security\widgets\servicewidgets.dll
00:10:32.0152 0x04a0  C:\Program Files (x86)\TalkTalk\Security\widgets\servicewidgets.dll - ok
00:10:32.0152 0x04a0  [ D99597330C760D34BF20E779E6CC0EB5, 3030825021A6B11068CF21399E2433ADEFDE216B9B4C2A94B81ACAE3827991DE ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\widgets\OnlineSafetyWidgets.dll
00:10:32.0152 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\widgets\OnlineSafetyWidgets.dll - ok
00:10:32.0152 0x04a0  [ F76E7A2DCD699BECF73B7793FC9D28BF, BFE54D8E30676387BF471AF4712AA5238360599CBDDF769B6D5E46B20CED175D ] C:\Program Files (x86)\TalkTalk\Security\imageformats\qgif4.dll
00:10:32.0152 0x04a0  C:\Program Files (x86)\TalkTalk\Security\imageformats\qgif4.dll - ok
00:10:32.0168 0x04a0  [ C3C09FDB0B2450D7751FDEB9DBDA3FAF, 32C3D14715379ED43D18107004687AA2E23A75FFA2A6A0A089CC7E7AB895849C ] C:\Program Files (x86)\TalkTalk\Security\imageformats\qico4.dll
00:10:32.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\imageformats\qico4.dll - ok
00:10:32.0168 0x04a0  [ 355B487BC08A13840AFD340EAEEBFE4B, C76BAAD3DA13B9B809318F2FA7414E206DBA273A387C019613E3E173CFEF56C2 ] C:\Program Files (x86)\TalkTalk\Security\imageformats\qjpeg4.dll
00:10:32.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\imageformats\qjpeg4.dll - ok
00:10:32.0168 0x04a0  [ 6E01BC147921001042D9431F851AD1FB, 7DE91C82B1F4F8D529F26BF57C8DCB7E95A58F8F090BA8BD536D18ADB65BE0E9 ] C:\Program Files (x86)\TalkTalk\Security\imageformats\qmng4.dll
00:10:32.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\imageformats\qmng4.dll - ok
00:10:32.0168 0x04a0  [ 02BAAC6AB36571A0009859F4A6A22D3A, 4CB3F48D858294964BEE4A0E68757FB9C1B157412D176EE04FE8E743D227DDB9 ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\plugins\ControlPanelTools.dll
00:10:32.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\plugins\ControlPanelTools.dll - ok
00:10:32.0168 0x04a0  [ 94B5FB5713C5D1ED364937F1A416D970, 8133607FE827A2B59CDD7377203C6CF52B379C88C377BE0A3E93DD8157ED0386 ] C:\Program Files (x86)\TalkTalk\Security\plugins\ActionCenterPlugin.dll
00:10:32.0168 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\ActionCenterPlugin.dll - ok
00:10:32.0183 0x04a0  [ 92D7A18F7DA74EE725604FC6C24DDB6E, 4502B5C937C28953C6CAE53A03102038E031DD503B73B7A41AD8278C6B29E29F ] C:\Program Files (x86)\TalkTalk\Security\plugins\AboutPlugin.dll
00:10:32.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\AboutPlugin.dll - ok
00:10:32.0183 0x04a0  [ 20EFBF365E1B9253141D3942ECCD8A84, 5C880153C3C81F4D6F707552AC332F562406665FFB6097D97561186C37F5F617 ] C:\Program Files (x86)\TalkTalk\Security\plugins\NotificationsHistoryPlugin.dll
00:10:32.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\NotificationsHistoryPlugin.dll - ok
00:10:32.0183 0x04a0  [ 92D4C983026989AAC5AF8E953C6F0775, 30236F31269F62DE5166FBD6874D6CE4C43AC61D0EF04000C2A125B895C0176C ] C:\Program Files (x86)\TalkTalk\Security\plugins\checkforupdatesui.dll
00:10:32.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\checkforupdatesui.dll - ok
00:10:32.0183 0x04a0  [ 19C48C6FED6811A6D201F7E6D6846BCF, 8882B1DA649B7F70E022D554A4E59B2A58C17820D34FDD7E04FAB94E85208A8E ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\LocaleInfo.dll
00:10:32.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\LocaleInfo.dll - ok
00:10:32.0183 0x04a0  [ BA824EADB02B8A39A5FB223A6BDADB54, EC679547EDB004D579F407BB7CAC015C5DE286178FC2799F2F71F9E4B691E18F ] C:\Program Files (x86)\TalkTalk\Security\plugins\HelpPlugin.dll
00:10:32.0183 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\HelpPlugin.dll - ok
00:10:32.0199 0x04a0  [ 9AC4DD657D60B1517CF6DD0581C2E39D, CC5965A27DE55B78E22752C428D26941C7323ADF78221C9AEAFC6477702105CE ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\plugins\OnlineSafety.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\gui\plugins\OnlineSafety.dll - ok
00:10:32.0199 0x04a0  [ 1B11CFAC0EBFAC70EEE8A565101838FD, 12814763FFB0D0EEC803346405E28E1335876912567A964F054FA2D38FA1C693 ] C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fsccapi.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\OnlineSafety\fsccapi.dll - ok
00:10:32.0199 0x04a0  [ F49BF8EC1E02824C953E996DA20BE31C, E365FBDC2A91356BBEEE376CED387DB309551BCF4BA0E0569DC815CB884B957F ] C:\Program Files (x86)\TalkTalk\Security\plugins\agent.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\agent.dll - ok
00:10:32.0199 0x04a0  [ C1A23F75515CC171D85D4857072AE764, 0351441FB3917ADE25A6802CAB2CA4DF8B6DDD889CA00F726DE2E101C1297AE0 ] C:\Program Files (x86)\TalkTalk\Security\plugins\addproductplugin.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\addproductplugin.dll - ok
00:10:32.0199 0x04a0  [ E4797DB5CE6DF10F8408459761A49606, F1455DB184CCF24ECE8258CBD457E1EB78E23CC96B23B01CE19C0EB7DC357A36 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Help.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Help.dll - ok
00:10:32.0199 0x04a0  [ CC26AC88341C0DBE3D48C4EF52710E49, 001B03C91618E6ED626B76ABA0116A1B255DF0436A77D170D7678B56D51A66B6 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\LegacyLink.dll
00:10:32.0199 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\LegacyLink.dll - ok
00:10:32.0215 0x04a0  [ C6C60703BE6BF56BBFB29F3FE44F6747, 11457E2F5F9E0BE10AB121D592E30E8CCBBC6F7D93782220CD91DD9949CDE531 ] C:\Program Files (x86)\TalkTalk\Security\plugins\CommonSettingsPlugin.dll
00:10:32.0215 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\CommonSettingsPlugin.dll - ok
00:10:32.0215 0x04a0  [ 8453CD1A1B3541C53A20437EC426ACC3, 87A0E1CD7FF7E90CF5BE5D3D4AAD11162EF6AE6A7B63222E6C1E0D8FEC30DF47 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\TryAndBuy.dll
00:10:32.0215 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\TryAndBuy.dll - ok
00:10:32.0215 0x04a0  [ 19018B41EBA8AFD4F2F1B6C40E1EAC40, BF1EEA1DDD416BB1B69797E7E8CD2FA540DC438EE5515C8CED63BD68ED770057 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\SystemInfo.dll
00:10:32.0215 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\SystemInfo.dll - ok
00:10:32.0215 0x04a0  [ 1F2B63F2F4594918BC24DC5224D180FB, C9EF46F56AE65130DD3D53C3415CD8520DF61BCF384CE396C9C4CE156C703D9A ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\About.dll
00:10:32.0215 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\About.dll - ok
00:10:32.0215 0x04a0  [ AE08F601EAEA70C935B000C50A3F5864, 63E3E4981B558627F9D62EB2CDE0224894A42FDC1688D77408096712F6DAC9DD ] C:\Program Files (x86)\TalkTalk\Security\plugins\LaunchPadPlugin.dll
00:10:32.0215 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\LaunchPadPlugin.dll - ok
00:10:32.0230 0x04a0  [ B642DF53DF3123D0A7968E4C9E84E011, CEC743970ADD031F75274FC0BF9569C87A98983EB4DC4B059C0EFF0C668E7DD3 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ProductInfo.dll
00:10:32.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ProductInfo.dll - ok
00:10:32.0230 0x04a0  [ D505CF419D31786D427B325CD549F31C, B902ABD6D6B4B180646E9987671B54B518E3B559CFE72B0E3B0C6007BF6AA1B2 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Navigator.dll
00:10:32.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Navigator.dll - ok
00:10:32.0230 0x04a0  [ 0CC320448EB252AA84300B3970EE4790, EAD6BB72722CDABC69E8F24173A98429652CD048C260D1DE37A74D22506641ED ] C:\Program Files (x86)\TalkTalk\Security\plugins\CuifSimpleAction.dll
00:10:32.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\CuifSimpleAction.dll - ok
00:10:32.0230 0x04a0  [ 9534A4B34E38AE62F87C395B3463AB80, E5C88607158F716D74226A9D8B7FB891CF087FECB63F09E83A64D92450C26220 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\fs_cs_status_notification.dll
00:10:32.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\fs_cs_status_notification.dll - ok
00:10:32.0230 0x04a0  [ 2E19425D443BA563036EDD345123F1F2, 2DFB1048CDABADB895DE0157075441133594DB2271932AB0BFB4A9EC5697D582 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Status.dll
00:10:32.0230 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\Status.dll - ok
00:10:32.0246 0x04a0  [ 0461F3CA903DE46F45C6D2F87214FC71, 90CF0FDBA836299769EDC8EC372DC6F9319E118859191E3743DD6BFF3A4CFC34 ] C:\Program Files (x86)\TalkTalk\Security\plugins\Localization.dll
00:10:32.0246 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\Localization.dll - ok
00:10:32.0246 0x04a0  [ 1F95DF6E47330916F6971E083919DB6B, 47978282BB5824875726614EBE5508BB644BEDCA33CA7D3A2796789F9B4F715F ] C:\Program Files (x86)\TalkTalk\Security\plugins\serviceinstallerui.dll
00:10:32.0246 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\serviceinstallerui.dll - ok
00:10:32.0246 0x04a0  [ 147D716E2139F3EE6842FBAAB1810281, D69E000C03F89E1EE3A9F69261EBF302EA5C0121076154CD6E3B10211858B164 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent.dll
00:10:32.0246 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent.dll - ok
00:10:32.0246 0x04a0  [ FA28D8AD3FFB3D1F1F2FD33ACB645413, 90913A5A94DCBCFC1299F34DF981D1DB8FEEE7BE06652E3DB13B8E11EFAC3831 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AntiVirus.dll
00:10:32.0246 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AntiVirus.dll - ok
00:10:32.0246 0x04a0  [ BC6803D8A5F59B43F6BB245E5E9D7AE1, 951C4F4455AC21ECE33C6E0A82A04F50C5A9F3BBC912F29211B4255718DECEBF ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\WinFirewall.dll
00:10:32.0246 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\WinFirewall.dll - ok
00:10:32.0261 0x04a0  [ EC31869CB8CBBFB062F372126A2DA791, 479653556FAEB7CA0E068AF062830A24E227C6D1EC27B6B0F9FE72967F07EED5 ] C:\Program Files (x86)\TalkTalk\Security\plugins\FlyerPlugin.dll
00:10:32.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\plugins\FlyerPlugin.dll - ok
00:10:32.0261 0x04a0  [ 6BA7FD07402436AFD7850DB335FF705A, 80F98FE96DB7948A5D21C0D9DBCAB3878B23F632A8A891D4EB6916A37F492310 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AUASettings.dll
00:10:32.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\AUASettings.dll - ok
00:10:32.0261 0x04a0  [ F2B49335A4ACEE2D6B5545C750DEB992, 36639A88695AEC60E147E3E538F1D49DAEDA0D931D65A9005BE05FE5334FFD6E ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\Email.dll
00:10:32.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\Email.dll - ok
00:10:32.0261 0x04a0  [ 691FF7D757405A9F10C4DBD28262507E, 6A9FFD1E35A5A6C17546E48939EB33326FFA20D7F42F6D61EC6DDCD7693DFA88 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\CentralManagement.dll
00:10:32.0261 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\FSGUI\data\ManagementAgent\CentralManagement.dll - ok
00:10:32.0261 0x04a0  [ B1E63281081B64BB570EA5B3EC5146C5, CB9C7EF52393702EFA13E13DB38B74B99610429E1C4CBBF995358872E40917F8 ] C:\Windows\System32\sfc.dll
00:10:32.0261 0x04a0  C:\Windows\System32\sfc.dll - ok
00:10:32.0261 0x04a0  [ 68F07A4750EEC27B4F6E85015798F26E, D7C93116FEAAB2C67655C2548BEF80ED90633C9BC1DBA5F4F12C5E6D6D6016E6 ] C:\Windows\System32\spool\drivers\x64\3\E_ILGRIME.DLL
00:10:32.0261 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_ILGRIME.DLL - ok
00:10:32.0277 0x04a0  [ E20802BE63FD2222EC4E079F3F14F34C, 3B128C664120AA12CD02875E4794607AB2278EADE778F46E66C5854E80D77B73 ] C:\Windows\System32\spool\drivers\x64\3\E_IMAIIME.DLL
00:10:32.0277 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IMAIIME.DLL - ok
00:10:32.0277 0x04a0  [ E152218F82A6D2B24C77C6B541E1E562, 27ECBDF3A1255F0B20E333D428DA58C3AE534DD24D3BB1DD3F46A17B7564809E ] C:\Windows\System32\spool\drivers\x64\3\E_IUICIME.DLL
00:10:32.0277 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IUICIME.DLL - ok
00:10:32.0277 0x04a0  [ 7F2E16251303BA1B839376ACA063280A, EF65F0F1FBCAC3AB283EB55D9920D4BDCB6AF4EE6C81C6EC8607B836B0E81FC3 ] C:\Windows\System32\spool\drivers\x64\3\E_IEPEIME.DLL
00:10:32.0277 0x04a0  C:\Windows\System32\spool\drivers\x64\3\E_IEPEIME.DLL - ok
00:10:32.0277 0x04a0  [ 3C6D8B1D5DB146DDB0F651E247AAE2D2, C711B760F340954B1A7A427B731F4CFF42014B65B4E04892124873B46A82C492 ] C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE
00:10:32.0277 0x04a0  C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE - ok
00:10:32.0277 0x04a0  [ CCBFC667F7D9FF80C560EA378C1B5F3E, 455ED4AA13B96C5331CBFB4B6FFEE725CAC1E7D3B0424037559B4C056E7DF792 ] C:\Windows\apppatch\AcGenral.dll
00:10:32.0277 0x04a0  C:\Windows\apppatch\AcGenral.dll - ok
00:10:32.0277 0x04a0  [ EB5C0F01D97B26295A5A27D9273E80A8, D0E53100480B131FAA62E25664791CEEF685BF1D571D5EC39D60E985654B721F ] C:\Windows\apppatch\AcSpecfc.dll
00:10:32.0277 0x04a0  C:\Windows\apppatch\AcSpecfc.dll - ok
00:10:32.0293 0x04a0  [ F95E431A10B9D970B63601195863F6EC, 26A5217631A4B0ED5445E9B041AD6FD2A849C63AFA1CEB95B3C7B7A8CF750E44 ] C:\Windows\SysWOW64\mscms.dll
00:10:32.0293 0x04a0  C:\Windows\SysWOW64\mscms.dll - ok
00:10:32.0293 0x04a0  [ C6B60D86B37D1C10AF7E7764D74D9194, 5B085618DF895C83AD77379280F76B10998C58569E59BCAFEA3AE89712BC3779 ] C:\Windows\apppatch\AcLayers.dll
00:10:32.0293 0x04a0  C:\Windows\apppatch\AcLayers.dll - ok
00:10:32.0293 0x04a0  [ 6B53C96B13B4295F4758EFC8F36FAF5C, 68B490D6B4FB2BEF33CBE9CC9467829B05896E91E1399A59D55B285ECE3167CF ] C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\RICHED20.DLL
00:10:32.0293 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\RICHED20.DLL - ok
00:10:32.0293 0x04a0  [ 94D9E7E4A5A57EBE4FDFE1E70371A546, 464EED10CF50BCF880CC11EA17E57462258AB51DD1F3C8A6C8BF9845F3C120A8 ] C:\Program Files (x86)\Microsoft Works\wkwdaddn.dll
00:10:32.0293 0x04a0  C:\Program Files (x86)\Microsoft Works\wkwdaddn.dll - ok
00:10:32.0293 0x04a0  [ E7EE78A9D4420F0539FF18609488D0ED, 87A2BE5AD41A59A566FBE4E3BAC49A1BE608B9948528EF5A2DE5699726309550 ] C:\Program Files (x86)\Microsoft Works\WkWbl.dll
00:10:32.0293 0x04a0  C:\Program Files (x86)\Microsoft Works\WkWbl.dll - ok
00:10:32.0308 0x04a0  [ 53F1262EAD0135E09D0246494B724273, 2F74201A42ADC93D438E3656B122708CB9EF19006A46B6270BAD069621F3E7B9 ] C:\Program Files (x86)\Microsoft Works\WkWat.dll
00:10:32.0308 0x04a0  C:\Program Files (x86)\Microsoft Works\WkWat.dll - ok
00:10:32.0308 0x04a0  [ F00821E67CE5CF51644061D1F1884BFC, 4AB89577918E972573155B3A116A05C282A6238658565C8AC22EA028E699A7C4 ] C:\Program Files (x86)\Microsoft Works\WkWinUni.dll
00:10:32.0308 0x04a0  C:\Program Files (x86)\Microsoft Works\WkWinUni.dll - ok
00:10:32.0308 0x04a0  [ 86F1895AE8C5E8B17D99ECE768A70732, 8094AF5EE310714CAEBCCAEEE7769FFB08048503BA478B879EDFEF5F1A24FEFE ] C:\Program Files (x86)\Microsoft Works\msvcr71.dll
00:10:32.0308 0x04a0  C:\Program Files (x86)\Microsoft Works\msvcr71.dll - ok
00:10:32.0308 0x04a0  [ 561FA2ABB31DFA8FAB762145F81667C2, DF96156F6A548FD6FE5672918DE5AE4509D3C810A57BFFD2A91DE45A3ED5B23B ] C:\Program Files (x86)\Microsoft Works\msvcp71.dll
00:10:32.0308 0x04a0  C:\Program Files (x86)\Microsoft Works\msvcp71.dll - ok
00:10:32.0308 0x04a0  [ E1744BB60446F1DAC10F66CFA2AD403A, ED829D2D61F48A13E20A3FE68720ACD1FA695D30690E0067139D6602EC002645 ] C:\Program Files (x86)\Microsoft Works\1033\WkGL80.dll
00:10:32.0308 0x04a0  C:\Program Files (x86)\Microsoft Works\1033\WkGL80.dll - ok
00:10:32.0324 0x04a0  [ B971B568C9E0645FB00BF3FEABA96275, D88D1AAD42E90EE952AB009F19663A2C6F07CF6572AFD1A3A2EE5CFBDC71DD81 ] C:\Program Files (x86)\Microsoft Works\1033\wkwdlang.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Microsoft Works\1033\wkwdlang.dll - ok
00:10:32.0324 0x04a0  [ BA98B5F47CDAED44C0935E01690258E6, 17F5852B65A222EC9A719BC6BBD4637CB2714456CF48FB05A32C1945A514329B ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration.dll - ok
00:10:32.0324 0x04a0  [ 0DE71ADCF86C8B5BB675D4ACB9F80E4A, 5742B2E9442E82434C62BE3571105F3425DD42915C298FFD8C88CC1D8E68B34C ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration0.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration0.dll - ok
00:10:32.0324 0x04a0  [ 2A5397EA38E19C08879140CBF26ED779, 3351E6A8502312627E91D0E2A5C6C2563884F099C1DADC76C3DB30B9461DC0B5 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration1.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration1.dll - ok
00:10:32.0324 0x04a0  [ 9E67744CA89C5AB7A212D6F7472278C3, 44428F9BFE0C0086BD5CBEED9584C39C3CCF9F603A281986BF39848AF68CF8DB ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration13.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration13.dll - ok
00:10:32.0324 0x04a0  [ 905DBE8E0E5FA9143D58DB33B1EDDC65, E7A47889058B832C0576557E4BE469B444AD668067CC3DF010EAA9D9B631E0CB ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration14.dll
00:10:32.0324 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration14.dll - ok
00:10:32.0340 0x04a0  [ 7A91B0C5FD43F3248CA43A7EEB51EC4C, 8C9742CB67E94524ECCDDC98562DB1BBF3A5A28F66CEAB25F24E3AC1F34E6BC0 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration15.dll
00:10:32.0340 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration15.dll - ok
00:10:32.0340 0x04a0  [ 2615FDAD24D55950568B38141552F014, D7E2DB1B8EEEAFA29956DCACC20589AF578BAFCFE483D781083D646743E676B7 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration16.dll
00:10:32.0340 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration16.dll - ok
00:10:32.0340 0x04a0  [ E35F7B98F777DDD9F994C66DBE55F2B6, A3F2709078A689B35B6B849357373239444D47F1008B1A25A8AE08093BBB4FD1 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration17.dll
00:10:32.0340 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration17.dll - ok
00:10:32.0340 0x04a0  [ 3184A835F57737CD994628D69A2A6FF7, B42C8F6D8BC41EBBF919803476FC620CB40E402D439C89C50FBE7951FA3F22D3 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration2.dll
00:10:32.0340 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration2.dll - ok
00:10:32.0340 0x04a0  [ EE17E8459201DBE4AA959D835479CD2A, 95535B0406DF36370032A8C5498FC690731E3124CB1126C6BC757AC20140F0C8 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration23.dll
00:10:32.0340 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration23.dll - ok
00:10:32.0355 0x04a0  [ 89F928B614251636822BC47EBC1B8D08, F70692BB6379E7BFBAC96D22AAF4F0ADA78A921FD68CE16030494148983FC8D5 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration24.dll
00:10:32.0355 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration24.dll - ok
00:10:32.0355 0x04a0  [ F47C217236FE6435165D556B5147172B, 00CB48356FE5F1571EADD7F3FC0553CBDB0EB989602A1B450076506A5AEEDA68 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration26.dll
00:10:32.0355 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration26.dll - ok
00:10:32.0355 0x04a0  [ 23BF868CD1F7D82449B60D6AA29A2673, 8A4DCF52EFBE21AB419651693A21DB8F937E4ED01180718482633FB4FC6D7EF4 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration3.dll
00:10:32.0355 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration3.dll - ok
00:10:32.0355 0x04a0  [ 8004BA88725E5BD5163BAFAF94B4E974, 70238923023D6D7F17EC9023B600536A0AF7DEDC1B3213BD4EBB56A5E15E1137 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration5.dll
00:10:32.0355 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration5.dll - ok
00:10:32.0355 0x04a0  [ 6DB936136D92ABBBE30B49BCF6140682, 74484777D09C2530456B35E9D1E30AD9D08FB0BF2B5C4C5F284F129AB8A01519 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration6.dll
00:10:32.0355 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration6.dll - ok
00:10:32.0371 0x04a0  [ 62291E61836841A184DD43F3F76A3E94, 83BD5E77D21F569563B4AD21428BB812F4882DF57E80CC659C24A1F474821BE3 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration63.dll
00:10:32.0371 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration63.dll - ok
00:10:32.0371 0x04a0  [ A583F77ECD27F359322B2C978356F883, 7D6C806C96038B85EFD866908097DC85E12D2ACB1FB9189D9371BF12271A1668 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration64.dll
00:10:32.0371 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration64.dll - ok
00:10:32.0371 0x04a0  [ 09DBEB3389B01BFC95DDDB4E8B00BDF8, BDB70EE54E24DE77501375EF33907F5EF066990256FF0AB6C1BE2F1DAF17B449 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration65.dll
00:10:32.0371 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration65.dll - ok
00:10:32.0371 0x04a0  [ 8F28F0A13115F933BE5B277460D6CF62, 068D6D915F561C5A5ED7573C1356EBF712F2E7DA626A88164BB23F4360963C28 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration69.dll
00:10:32.0371 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration69.dll - ok
00:10:32.0371 0x04a0  [ 9F4263D14CD45CB66CAA1E29F46B31B9, DD32D2DAD349A86D29AA6B81F7DFDDFD2E7D19B65DEA9AA610EDA3F036064855 ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration7.dll
00:10:32.0371 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegration7.dll - ok
00:10:32.0386 0x04a0  [ FE60358C7EA4D814741ABD72A41F061A, 1C4D4C318FF7B386431659200A4CCD89D1125815EBA86CD332E31A7B11F3145C ] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegrationRes.dll
00:10:32.0386 0x04a0  C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Integration\SprintIntegrationRes.dll - ok
00:10:32.0386 0x04a0  [ 18D8A2B5725BB2E60D6A249718C924FE, 9AF7AE368E3AF04F803B017BFC2E413D15FEBEB58248260C7C620B827E9A9B61 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\MSSPELL3.DLL
00:10:32.0386 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\MSSPELL3.DLL - ok
00:10:32.0386 0x04a0  [ 4F528E041F063B87CC0342C1F6A8C76B, 62B6C57FA024C72BB14381E03D83F29690A94D9996296439D527610807D293BB ] C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\UCS20.DLL
00:10:32.0386 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\UCS20.DLL - ok
00:10:32.0386 0x04a0  [ 6D682A9D1BA5218798882A30F44E7194, 166092400C7076BC1971EC0004627243FC1B0B5FB412203EE654E0792A8A0530 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\USP10.DLL
00:10:32.0386 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Office10\USP10.DLL - ok
00:10:32.0386 0x04a0  [ D1447FC501CACC7B80329C4342810747, 1DC398E24374C3281452F7467FC116E4812902914FA0001A48020168E5D12570 ] C:\Program Files (x86)\Microsoft Works\workssvc.dll
00:10:32.0386 0x04a0  C:\Program Files (x86)\Microsoft Works\workssvc.dll - ok
00:10:32.0386 0x04a0  [ 6F68652E9F7BAAB66622815D77FF042D, A8F115C1CB4F8AD54712D42B2827D3C7488A692C14ED087646A4CCCCBA55EE46 ] C:\Program Files (x86)\Microsoft Works\WkDStore.exe
00:10:32.0386 0x04a0  C:\Program Files (x86)\Microsoft Works\WkDStore.exe - ok
00:10:32.0402 0x04a0  [ 11A60270BA2664F97EBD6304D287442A, 9BC317EE611DDDB5D62EF27E3F91DABE50E506D0D1156D502625AD110A6FF733 ] C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA6\VBE6.DLL
00:10:32.0402 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\VBA\VBA6\VBE6.DLL - ok
00:10:32.0402 0x04a0  [ 2C745564C1556C041ACD9FE5040BF6C9, 3DC6467BE519D91A8F509BAAD981B5661B60FDDE3F5DF6C0F8C7DD2CB0D2F688 ] C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\1033\VBE6INTL.DLL
00:10:32.0402 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\1033\VBE6INTL.DLL - ok
00:10:32.0402 0x04a0  [ 7F340E28F02EF3420E01CAADCDAB9020, 24B6BC6D8D17C974FFD1512AFF2C3E66A6AAA8FD1572C6629D161C1D00A892B7 ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FSTOCK.DLL
00:10:32.0402 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FSTOCK.DLL - ok
00:10:32.0402 0x04a0  [ 595FC7AC26E2653A343F1FE787EB8561, C3A15BD7776276C195DE01C25016D84D03C368164DC50A5EAA0E50DF13E26C6A ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FPERSON.DLL
00:10:32.0402 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FPERSON.DLL - ok
00:10:32.0402 0x04a0  [ 6D89239F9364C8A9C5D2F9C924F7F0E4, 13FD1AC44CCB691DAE76BABAC1E87C9971757085885F12FEFCA0EABD62BF5C6A ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FPLACE.DLL
00:10:32.0402 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FPLACE.DLL - ok
00:10:32.0418 0x04a0  [ 7BEA81F36E073FAC6F9081B9BAD13801, 69F8FED1FAAA39A7748313EB94D550F7473CFD2504F6487112E2E29D7AFDDA02 ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\MOFL.DLL
00:10:32.0418 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\MOFL.DLL - ok
00:10:32.0418 0x04a0  [ 2E92A5D362A65278DE3AFAB803B07127, 4ECA1BCA41EDC7B1BB23CA887F4E9F717A60EFBCF7FD844D301463CA18DA4015 ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FDATE.DLL
00:10:32.0418 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FDATE.DLL - ok
00:10:32.0418 0x04a0  [ 72A0DF237F9118F18AD136E99266E816, 76CEB7AC5BE1F645423424641FE4F6087D20B5E066FBA6FF0D688467A48883BC ] C:\Program Files (x86)\Microsoft Office\Office10\MSOHEV.DLL
00:10:32.0418 0x04a0  C:\Program Files (x86)\Microsoft Office\Office10\MSOHEV.DLL - ok
00:10:32.0418 0x04a0  [ 860BBE64C0BDC46E8548C8767103CB1A, BF0D742560DBE474949626B410DFE8800FEB7E530616F5F3E010E78D57D44764 ] C:\Windows\SysWOW64\linkinfo.dll
00:10:32.0418 0x04a0  C:\Windows\SysWOW64\linkinfo.dll - ok
00:10:32.0418 0x04a0  [ E61429F85351840CB24A1013DD665D81, 3782F3FF9BB33DB451C307F10D34FF80B351E238B424B4C8289A6C8C4D8E2682 ] C:\Windows\SysWOW64\ntshrui.dll
00:10:32.0418 0x04a0  C:\Windows\SysWOW64\ntshrui.dll - ok
00:10:32.0418 0x04a0  [ 7D50A20F9A56E250B38D0655812D50F5, D8F2F1933583CE4D8D64E798927B5CBF2ABFF9933E5060D0851B450CE8D3C295 ] C:\Windows\SysWOW64\hid.dll
00:10:32.0418 0x04a0  C:\Windows\SysWOW64\hid.dll - ok
00:10:32.0433 0x04a0  [ 350BC850EAF105C5DE1ACF46F7BE5BFF, 03404C998DD735CE2BA4B912580DB982A6B6A2D51E8337F4BBBEC98641FCFB0F ] C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FNAME.DLL
00:10:32.0433 0x04a0  C:\PROGRA~2\COMMON~1\MICROS~1\SMARTT~1\FNAME.DLL - ok
00:10:32.0433 0x04a0  [ 971FFAF1206D101F2B7875698124CCBF, 1125DDE8F83FD7FA904A21F9E4B895651611A108802F6A063EE054B8E1CB7C59 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\MSLID.DLL
00:10:32.0433 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\MSLID.DLL - ok
00:10:32.0433 0x04a0  [ 9CF99B650334066A9A6BCD8AD67D7622, B8B4D3C742810DA46AB5D5014AFA0FDBEF37F3B4422C06251BCC15B1F3AE37A2 ] C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\1033\MSGR3EN.DLL
00:10:32.0433 0x04a0  C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\1033\MSGR3EN.DLL - ok
00:10:32.0433 0x04a0  [ 974A3A675E5E0CECA74F62F6C39AF592, 0E8464E2D7E6C09866A05AD096BC798D309F3364E1D643F471AE547E2B7E6E99 ] C:\Windows\splwow64.exe
00:10:32.0433 0x04a0  C:\Windows\splwow64.exe - ok
00:10:32.0433 0x04a0  [ 4FCC016C981EB650390557D220E149EB, 2A723570DE2F35406CF1015F040CD32E07A35F64914109DDFA7276CAA7378331 ] C:\Windows\System32\spool\drivers\x64\3\CNMUI9W.DLL
00:10:32.0433 0x04a0  C:\Windows\System32\spool\drivers\x64\3\CNMUI9W.DLL - ok
00:10:32.0433 0x04a0  [ 827D109E7C4213C41C76C5D7A05C483C, B2A56DDB49C1D0F9DD279A400E1686B79184A28DB5106E1CEE0E529874A18C9B ] C:\Windows\System32\PrintIsolationHost.exe
00:10:32.0433 0x04a0  C:\Windows\System32\PrintIsolationHost.exe - ok
00:10:32.0449 0x04a0  [ 844BA1071FA19C6C12D36A2C42F21D9F, 339E178C72213FED95FE6802457AEB0BCD9A2C998FB5880770D1D13C058F42E0 ] C:\Windows\System32\spool\drivers\x64\3\CNMDR9W.DLL
00:10:32.0449 0x04a0  C:\Windows\System32\spool\drivers\x64\3\CNMDR9W.DLL - ok
00:10:32.0449 0x04a0  [ BB1FC298BE53AAB1E110F6E786BD8AC5, C2DA2C3CE96D5F8B50013063B5EF7BED7478636896C709A7AF34855B2E69B9F1 ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
00:10:32.0449 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe - ok
00:10:32.0449 0x04a0  [ 85604A30DDF4EF1ECA76AC5143B525E3, 4F86840A40DC8446D4A2A9251CF93C3827B813237C3383A04516C06F93E297D4 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8f06d743c07365c427bafa7f5967c6bb\System.ServiceProcess.ni.dll
00:10:32.0449 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8f06d743c07365c427bafa7f5967c6bb\System.ServiceProcess.ni.dll - ok
00:10:32.0449 0x04a0  [ DCE082671A44EDF2C541251A2AB237EC, F4569C321E10C89CB61361A310BD9AF92E912FCC33E5C12248FB90932A4FE9D1 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\ebb25213c68180f50aba9e7b34a1210e\System.Runtime.Remoting.ni.dll
00:10:32.0449 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\ebb25213c68180f50aba9e7b34a1210e\System.Runtime.Remoting.ni.dll - ok
00:10:32.0449 0x04a0  [ AEA052132903B2751391F21555A123EF, 69B7B62740F1CA3C3EDAF608749614C4C7B9840EA0BBE9636188E2236D244AFC ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll
00:10:32.0449 0x04a0  C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll - ok
00:10:32.0465 0x04a0  [ ABEFA4BD23329FD9BD47496BF2E58774, 9689D4C6380735EE1CC7F480696CDDC229E0FA511942AC813314D353584D82DD ] C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
00:10:32.0465 0x04a0  C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe - ok
00:10:32.0465 0x04a0  [ C0FCDE5B040C2F1430E15B7747B4FEB1, 4B09A77957A22C416DBBDA1FD17B9C155FA001B5CC8F70EA2E9C7A720569DBFA ] C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RsCRLib.dll
00:10:32.0465 0x04a0  C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RsCRLib.dll - ok
00:10:32.0465 0x04a0  [ 30E9FAC23E2537D82F2836CB81AEE186, 03E5072D43ECED70EF004D2E6E654B4CCCE059825CC3C641C0534E4C0BC0C7E8 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
00:10:32.0465 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe - ok
00:10:32.0465 0x04a0  [ 4269D44BB47A6DA5D80B11F4C8536458, 7A8FFC8F851DD9E5C43986BE0888831CB71D188138DF3CF7F787DADDA70915B0 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
00:10:32.0465 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe - ok
00:10:32.0465 0x04a0  [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] C:\Windows\System32\sppsvc.exe
00:10:32.0465 0x04a0  C:\Windows\System32\sppsvc.exe - ok
00:10:32.0465 0x04a0  [ 5C34AF33933E36E690A951AEFCD89108, 8263916FF84301F65A8CC8C842C6EEF9DC74EC0E7927A764CCA9652EBCA2F36F ] C:\Windows\System32\cryptxml.dll
00:10:32.0465 0x04a0  C:\Windows\System32\cryptxml.dll - ok
00:10:32.0480 0x04a0  [ 012CFE7F0F95266F554EE3B91EE2128A, 866312F6BF7369BE686F1BA9F01311C99E95E268C6E63BE37C841F54F5AA0DB8 ] C:\Windows\System32\wscsvc.dll
00:10:32.0480 0x04a0  C:\Windows\System32\wscsvc.dll - ok
00:10:32.0480 0x04a0  [ C9549BC9C3E3DECD8BE81E527137B85F, 8944F987C9D415EA561EA5314F3B5F19F8B65945E391C13112C2BA33341BDB2C ] C:\Windows\System32\wuapi.dll
00:10:32.0480 0x04a0  C:\Windows\System32\wuapi.dll - ok
00:10:32.0480 0x04a0  [ DBE2E6388379D5CC78099650541E9566, 1914BC929F109A49FB18ED31F239A9813A010B0A3914BC8CD0D6A94A67A072D7 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
00:10:32.0480 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe - ok
00:10:32.0480 0x04a0  [ 5C9332B307B4986C10200979BE1CE721, 30F255008B7A56E0157C8249129EFC170AB89DF140A798B46F9BFCD08D5D8910 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fswscs.exe
00:10:32.0480 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fswscs.exe - ok
00:10:32.0480 0x04a0  [ 64EE4663A3876638471F03586474DC13, E940F56893ACC0086CE44BE239AB7869BC11233D84FDDAAAF64FC1BE98110492 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
00:10:32.0480 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll - ok
00:10:32.0496 0x04a0  [ D0C751D4D43B16327566FE17F39F461D, 56AB216BC6017E8171CA51DD21AEDAECC56C8BB2DFE83A1A54403A4CC7070B79 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\WsmanClient.dll
00:10:32.0496 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\WsmanClient.dll - ok
00:10:32.0496 0x04a0  [ E2430ECA924632371CC085AA4F086E65, 0C5A418B5A2B678335CEC5D0150A89CE1D59F2D686A30AA7CC66209D2F316E56 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\Common.dll
00:10:32.0496 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\Common.dll - ok
00:10:32.0496 0x04a0  [ 7B07B798B13DB6C65DFD16FC765F7139, FC4AF97A1D580D6FA0F810BA9174CF57D3ED960E0B5BEBB42E8E7C9810687E24 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\GmsCommon.dll
00:10:32.0496 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\GmsCommon.dll - ok
00:10:32.0496 0x04a0  [ B7CFDB21D7E98B462EB1AF3112F9293C, 5550C3B3DB370397B7435AC9BC2C9441517951DE2E7E7B3FCA073FCA60F7CBD2 ] C:\Windows\SysWOW64\ncrypt.dll
00:10:32.0496 0x04a0  C:\Windows\SysWOW64\ncrypt.dll - ok
00:10:32.0496 0x04a0  [ 9AD609CFDA377BFCE0CB7ABF294BC74B, 06234B481F99312C3A86A67264C373254670C8726097D9EF335725DB197A1F04 ] C:\Windows\SysWOW64\wscisvif.dll
00:10:32.0496 0x04a0  C:\Windows\SysWOW64\wscisvif.dll - ok
00:10:32.0496 0x04a0  [ 10EB888ED897F031B9BFAC5867F5B290, D77BE722C98557737D4CEB4F6D6AD688EBD1F761ED9F32CA038C39D08CCE94D1 ] C:\Windows\SysWOW64\bcrypt.dll
00:10:32.0496 0x04a0  C:\Windows\SysWOW64\bcrypt.dll - ok
00:10:32.0511 0x04a0  [ D12DE9350321CF21238FCA4ED76B12A7, CBD5849728671E7998AE9BCDA6E521EF8F21F1D0F7CDFA2BCB30D49F1F92C4A8 ] C:\Windows\SysWOW64\ntasn1.dll
00:10:32.0511 0x04a0  C:\Windows\SysWOW64\ntasn1.dll - ok
00:10:32.0511 0x04a0  [ B7B9CDFA627D8886314A5C1EC482796F, 6DACEE5192EDCE8AEDDCD00BA76AC378818D106817E6643DA96DBC11F8CAAEF0 ] C:\Windows\SysWOW64\wscproxystub.dll
00:10:32.0511 0x04a0  C:\Windows\SysWOW64\wscproxystub.dll - ok
00:10:32.0511 0x04a0  [ D97ED8735E58E646D64C96AF1E2999DB, EE2D85E77CAB8A20198841C716E9538C803A78CC9560A096A0D9579DC099C213 ] C:\Windows\SysWOW64\gpapi.dll
00:10:32.0511 0x04a0  C:\Windows\SysWOW64\gpapi.dll - ok
00:10:32.0511 0x04a0  [ A50E9F5111BFB5451750F1A66DFC088B, DA9763B85C5CA2F3B1035D7FB275DED0E9D7122711AF5FA145A26497D5C707F6 ] C:\Windows\SysWOW64\cryptnet.dll
00:10:32.0511 0x04a0  C:\Windows\SysWOW64\cryptnet.dll - ok
00:10:32.0527 0x04a0  [ 4FB65BDDEBD93066477F22D9075EC272, B57CA2300652A7376F3AD1E278E83218096868A2ACD9A14DA7409FA76CFF1E7E ] C:\Program Files\Windows Defender\MpCmdRun.exe
00:10:32.0527 0x04a0  C:\Program Files\Windows Defender\MpCmdRun.exe - ok
00:10:32.0527 0x04a0  [ 1496430C99C30396065A0A7050D9C7B6, B6FE3AA6FD681FB137B18ADDE907D3C1836FA9881DA54F5F884F83B5D60BB535 ] C:\Windows\SysWOW64\Wldap32.dll
00:10:32.0527 0x04a0  C:\Windows\SysWOW64\Wldap32.dll - ok
00:10:32.0527 0x04a0  [ 2120A35C9222C972AE75950A234CCB50, 101A95CFA18E8BD3380B26B2434538731F079864092CF968FFBB253C32973C66 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\Configurator.dll
00:10:32.0527 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\Configurator.dll - ok
00:10:32.0527 0x04a0  [ 4D3D037C655D35AE8FF6F8A30B11CF90, 3B85A8A6489F35FF758DD7820B24F53509EA0F212868BB0D7E9338EAA3643C3F ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\EventManager.dll
00:10:32.0527 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\EventManager.dll - ok
00:10:32.0527 0x04a0  [ 04B16F85684A1D3F74E4A07653F6BF14, 11065B347AF9A1D446DE122D8D885083434B3528F8CBBAA6D0CF59C947A1AF69 ] C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\StatusEventHandler.dll
00:10:32.0527 0x04a0  C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\StatusEventHandler.dll - ok
00:10:32.0527 0x04a0  [ 49709B93D611FCF6401388F628E283FF, 4FFB3D4BFBD38326E4CE8E97C955924A14F8FC3C82126E8CFE9CE4A0293D6602 ] C:\Program Files\Windows Media Player\wmpnetwk.exe
00:10:32.0527 0x04a0  C:\Program Files\Windows Media Player\wmpnetwk.exe - ok
00:10:32.0543 0x04a0  [ 1C3588802EE33660E620A046A505A337, EDE374A8328C56AC9A5B6468323927A534286B3ECE898230C44535B14DEEFE76 ] C:\Program Files\Windows Defender\MpClient.dll
00:10:32.0543 0x04a0  C:\Program Files\Windows Defender\MpClient.dll - ok
00:10:32.0543 0x04a0  [ 721CAFC7474688EFB2961726DBBF1C78, 5659D84310D783D0E36F3B5A89D70079DB355F76DEE52F43B08EEECD62B30B09 ] C:\Windows\System32\wsock32.dll
00:10:32.0543 0x04a0  C:\Windows\System32\wsock32.dll - ok
00:10:32.0543 0x04a0  [ 110B70302AC6EC29FE013C5BB99BA559, 4D2019B833F3BA81EA30C5CF0305651F5CDE98CF146ECE438A5D6089355FB643 ] C:\Windows\System32\wmpmde.dll
00:10:32.0543 0x04a0  C:\Windows\System32\wmpmde.dll - ok
00:10:32.0543 0x04a0  [ 1717CE7906AB980501948CEC53DFF636, 0A3183B009CBD01EC2A8E52D98BC07C9FDBDE577216C775CAD3AE9F2AED57057 ] C:\Windows\System32\mfplat.dll
00:10:32.0543 0x04a0  C:\Windows\System32\mfplat.dll - ok
00:10:32.0543 0x04a0  [ 1B00B3C7FB636953B1059705290B502A, 51A3133F0B4DA34DB9BA0DD797FDF00072C1BBF260D08B3C2556BB3FF7B00E91 ] C:\Windows\System32\mfcore.dll
00:10:32.0543 0x04a0  C:\Windows\System32\mfcore.dll - ok
00:10:32.0558 0x04a0  [ 7DBFCB05BCD03500D6B877C54FEE4971, 94B5E4E649C7B45804FA82762F5C8BBAE564321780280C438B757A3F3A0B881D ] C:\Windows\System32\ksuser.dll
00:10:32.0558 0x04a0  C:\Windows\System32\ksuser.dll - ok
00:10:32.0558 0x04a0  [ 292933A5701EA9DF9D70CF783922E5B9, 6F2CC3BE43F431A9024A7CD42D3E4F046AE436F25FD644F763F72E2E40AAC56A ] C:\Windows\System32\WinSATAPI.dll
00:10:32.0558 0x04a0  C:\Windows\System32\WinSATAPI.dll - ok
00:10:32.0558 0x04a0  [ 9463EC0C4176744EFC632A43BB3090B5, 27F35FE334BFB92885ECD27DB432FBE5ECD3F1C718C0D6EFBC8EEE96377725A4 ] C:\Windows\System32\MSMPEG2ENC.DLL
00:10:32.0558 0x04a0  C:\Windows\System32\MSMPEG2ENC.DLL - ok
00:10:32.0558 0x04a0  [ C2403472971E594DDF8FF9BD36F1AE98, 0E5282A6F596C756314464CC77DD0E9565CE67B08B18F3323898BB88AB3D2BBE ] C:\Windows\System32\StructuredQuery.dll
00:10:32.0558 0x04a0  C:\Windows\System32\StructuredQuery.dll - ok
00:10:32.0558 0x04a0  [ B447650079883B58626DD6BBAE857877, F765672DC2895038E7C270DFAF13C1355C9D64B73F8D847BDEC82DD559584AE3 ] C:\Windows\System32\NaturalLanguage6.dll
00:10:32.0558 0x04a0  C:\Windows\System32\NaturalLanguage6.dll - ok
00:10:32.0558 0x04a0  [ 49E2346A397A7512DD9D12E1D6D9A174, C8C3EB34920C7382236F294A450AF7A852AF52C2960EBACB1B0E698032A0C125 ] C:\Windows\System32\NlsData0009.dll
00:10:32.0558 0x04a0  C:\Windows\System32\NlsData0009.dll - ok
00:10:32.0574 0x04a0  [ 47DCA6F50C1D1E93F4DB5248557ED63C, 0F1ECE190C65BC7471A73DA78497CF18BE8694E861EC996EFEF0E6AD5FC47465 ] C:\Windows\System32\NlsLexicons0009.dll
00:10:32.0574 0x04a0  C:\Windows\System32\NlsLexicons0009.dll - ok
00:10:32.0574 0x04a0  [ 14D22C411854AA2560AFC94CD2D5E61F, BB376734733671C02319E6DB1800D41212694446FD65465498C92D4ECBFE7458 ] C:\Windows\System32\upnphost.dll
00:10:32.0574 0x04a0  C:\Windows\System32\upnphost.dll - ok
00:10:32.0574 0x04a0  [ 20FAFBD28EC1128955308E7ABA5E765A, EEB7959FC87165FB4173D151C70F5E466A6A3EF44205EDE2B5283EA283ABAEBF ] C:\Windows\System32\sppwinob.dll
00:10:32.0574 0x04a0  C:\Windows\System32\sppwinob.dll - ok
00:10:32.0574 0x04a0  [ C80BE09E09CBD2D85D95C96CD9EA839B, DDEE60F71151A3A803D732AD40F1793BF6757FD3304D7CB0749656237A416CC4 ] C:\Windows\System32\sppobjs.dll
00:10:32.0574 0x04a0  C:\Windows\System32\sppobjs.dll - ok
00:10:32.0574 0x04a0  [ 105991E8AF7853F169F9A8B7DD7CFE1F, 6968C4CD71DA0DFAE0D8E48808AE5F5B363F0E221C0E08C148E26AB742407993 ] C:\Windows\Branding\Basebrd\basebrd.dll
00:10:32.0574 0x04a0  C:\Windows\Branding\Basebrd\basebrd.dll - ok
00:10:32.0574 0x04a0  [ FD60C40D0A2398E0E36BF0EAF5E2B045, B9285BC963CA1A4DB5127659547695237A65BA35CAD78F93B4E914F2F536E2A2 ] C:\Windows\System32\wscinterop.dll
00:10:32.0574 0x04a0  C:\Windows\System32\wscinterop.dll - ok
00:10:32.0590 0x04a0  [ 1551DEAE4879D18E604379CDB592CC88, 0959920E0FFC6C85B6C311D8C2530C958B306803FA9B3E1F1088C3D9FD4153C2 ] C:\Windows\System32\wscapi.dll
00:10:32.0590 0x04a0  C:\Windows\System32\wscapi.dll - ok
00:10:32.0590 0x04a0  [ 86DC4983A3E32F4FE40E5AFB0FC05E85, 24C4FE689DAB96C7862F24DC74B5BE268AC5AC942B31F407D83BB3077A939536 ] C:\Windows\System32\wscui.cpl
00:10:32.0590 0x04a0  C:\Windows\System32\wscui.cpl - ok
00:10:32.0590 0x04a0  [ 53DFBEB6A47058048799833BC3432837, DF304833CC8A19FCC5AE31F52DBF3B40E40F93254C4CD14CFFF6331307A26153 ] C:\Windows\System32\werconcpl.dll
00:10:32.0590 0x04a0  C:\Windows\System32\werconcpl.dll - ok
00:10:32.0590 0x04a0  [ 4D2612E3C462B68F499D840B1133263E, 4DDAEB4480AEC31A8184838588E0D3DFA31CE6D2FA6E906926860C75F52DC7B7 ] C:\Windows\System32\wercplsupport.dll
00:10:32.0590 0x04a0  C:\Windows\System32\wercplsupport.dll - ok
00:10:32.0590 0x04a0  [ FDA5CA129374C0EEA20E492DE1EA88AA, 246A6AA92FA18DB50920ACB1A9B63728AA12B3D76BE3A28AEECA72142FD02464 ] C:\Windows\System32\hcproviders.dll
00:10:32.0590 0x04a0  C:\Windows\System32\hcproviders.dll - ok
00:10:32.0590 0x04a0  [ 1DCFBD829D009A54EF1510369B51804C, 474029F4F57C92A016CC536059740F2B90EA82A2D9A187390FF7C1EC39C058CC ] C:\Program Files\Internet Explorer\ieproxy.dll
00:10:32.0590 0x04a0  C:\Program Files\Internet Explorer\ieproxy.dll - ok
00:10:32.0605 0x04a0  [ 5802F650D1C5ED43EBB67D6898B27D0D, AB87DB2CF9D6357EEF772BA38FB287DBD8473D2B0F3F149A0B1AC65717AC2073 ] C:\Windows\System32\SettingSyncHost.exe
00:10:32.0605 0x04a0  C:\Windows\System32\SettingSyncHost.exe - ok
00:10:32.0605 0x04a0  [ 3A2BB90FA51D895F5C53D705C55E9C20, 1E8DE6709FE48628680FC2BCFD3AE7D2FCB927BC0A1C741F30A46298458847ED ] C:\Windows\System32\WinSync.dll
00:10:32.0605 0x04a0  C:\Windows\System32\WinSync.dll - ok
00:10:32.0605 0x04a0  [ 5690B3793FD93716EF4C5CE71D9FF156, 1D731BDBDB325120DF035A75C93613B1C902DFF32C81CCF8621B1F8C1EAEB7C4 ] C:\Windows\System32\SettingSync.dll
00:10:32.0605 0x04a0  C:\Windows\System32\SettingSync.dll - ok
00:10:32.0605 0x04a0  [ 9441160E0B431461F8803E89CC5E919E, 9D63F9BCCB9E1F1D78428BE380819696E162D6FAA354F8BBB69D1941E91612B2 ] C:\Windows\System32\Winlangdb.dll
00:10:32.0605 0x04a0  C:\Windows\System32\Winlangdb.dll - ok
00:10:32.0605 0x04a0  [ 480FB2259449C49C630D4AC3EC1EB426, F8203B156AC538004B807B4CB096D70FC282BDE8CA0BA3B9A95DBC426A32FA61 ] C:\Windows\System32\SearchProtocolHost.exe
00:10:32.0605 0x04a0  C:\Windows\System32\SearchProtocolHost.exe - ok
00:10:32.0621 0x04a0  [ E55A2C4497247F8CA09F1B2AAFAEDD3C, B58A3D5F8116B36DC03DA2491BA28802DCEDD87BBA66484E5E548036D985C928 ] C:\Windows\System32\msshooks.dll
00:10:32.0621 0x04a0  C:\Windows\System32\msshooks.dll - ok
00:10:32.0621 0x04a0  [ 3EA778FE9D9B56E67C0783A63C4B142E, A598E8143A29390B70016D16A8AA013549B4B79E7169D919BFB5365433853202 ] C:\Windows\System32\SearchFilterHost.exe
00:10:32.0621 0x04a0  C:\Windows\System32\SearchFilterHost.exe - ok
00:10:32.0621 0x04a0  [ 38069D6F774EB0B83A9301E5698B52CA, 3254AAC1C4BFD09431A90A851F8092275664F149CB02E74DEBD157F2121F4809 ] C:\Windows\System32\mssph.dll
00:10:32.0621 0x04a0  C:\Windows\System32\mssph.dll - ok
00:10:32.0621 0x04a0  [ D7507B2F96098C43D1BC835F8B8E5E8E, AD420B10879407FF6D636407861020007043D6538C4E20783A91C9CFD3BB4CF0 ] C:\Windows\System32\mapi32.dll
00:10:32.0621 0x04a0  C:\Windows\System32\mapi32.dll - ok
00:10:32.0621 0x04a0  [ C5C8342E3047746B787E0F306DF6CCA1, 53A6B111C3A62586EF4D17BB31C5CAEC93E2DD45E23885EB5520AC61AD050FD5 ] C:\Windows\System32\offfilt.dll
00:10:32.0621 0x04a0  C:\Windows\System32\offfilt.dll - ok
00:10:32.0621 0x04a0  [ 5F70EBFC1F75B487DE79501E3CCBDB54, 2FCA57BF60A43B03BB42FBF22BBFC19AD2266FBBD818494AD114125E6E433321 ] C:\Windows\System32\wersvc.dll
00:10:32.0621 0x04a0  C:\Windows\System32\wersvc.dll - ok
00:10:32.0636 0x04a0  [ BCC776526768DA346CF1C5403080D76B, D2A8157C334672659C09F7AD69614B700C5DE52F80CAF2A28BACAD5A68E57288 ] C:\Windows\System32\Faultrep.dll
00:10:32.0636 0x04a0  C:\Windows\System32\Faultrep.dll - ok
00:10:32.0636 0x04a0  [ 3631AE3089DE4FAA50D3BD62E370299E, AE3AF9D2EB88E2861F22CC82BB5488D3A41278723009318AF6631F4CE2C00FAC ] C:\Windows\SysWOW64\WerFault.exe
00:10:32.0636 0x04a0  C:\Windows\SysWOW64\WerFault.exe - ok
00:10:32.0636 0x04a0  [ 17824F0C753189A361C8F555116FCC3D, DBEA42BFC2B0EB05D5735811E1C78F725276C526B5D639D9A0037DFA71E1D1EE ] C:\Windows\SysWOW64\wer.dll
00:10:32.0636 0x04a0  C:\Windows\SysWOW64\wer.dll - ok
00:10:32.0636 0x04a0  [ 71B118BDFA59A420DCBD19A5DCCFCCC5, EE7DC33F2D1A11C9E88DBD413F978FC100CC4491C9510CB6524C1DA10467FEDD ] C:\Windows\SysWOW64\Faultrep.dll
00:10:32.0636 0x04a0  C:\Windows\SysWOW64\Faultrep.dll - ok
00:10:32.0636 0x04a0  [ EF088D55166AAD7557B1D22C89E31219, 4FDBC4A28B0F01A2E610735E53DC29A3FC4BB289E9B9D97117C0A2B14F79E5FB ] C:\Windows\SysWOW64\dbgeng.dll
00:10:32.0636 0x04a0  C:\Windows\SysWOW64\dbgeng.dll - ok
00:10:32.0636 0x04a0  [ A6A4847EE1A2FF86681D6ED8D99FBF18, D62136945BB9C5B9191FEEC34CB0A49A6AD2231671AE5337B0FCEB68DC31C345 ] C:\Windows\SysWOW64\werui.dll
00:10:32.0636 0x04a0  C:\Windows\SysWOW64\werui.dll - ok
00:10:32.0652 0x04a0  [ 79769509BE58094CBE718EF9A70322EA, A194E456605C56DC45C1FE608325BAD3480E46C3761FE191B7ED2705F4F0AAEF ] C:\Windows\SysWOW64\slc.dll
00:10:32.0652 0x04a0  C:\Windows\SysWOW64\slc.dll - ok
00:10:32.0652 0x04a0  [ 24360C89F7487992B7BC1D8B9AAF52B6, C38D275546D4DD049737269C45E4C11D767E2800EA69F8655EC829461BCE354C ] C:\Windows\SysWOW64\xmllite.dll
00:10:32.0652 0x04a0  C:\Windows\SysWOW64\xmllite.dll - ok
00:10:32.0652 0x04a0  [ 2A2AD16DC708EF09B79604CEE9FF4722, FE4B455372F182B1BBCA485FE4DCE977AE2E82FB27BF06F5FF0C8ABA83226B1B ] C:\Windows\SysWOW64\schannel.dll
00:10:32.0652 0x04a0  C:\Windows\SysWOW64\schannel.dll - ok
00:10:32.0652 0x04a0  [ 52A8E4DF7C139295919F4897A62B7F74, A661F92388672E84DD62FDC3AD058358443C7DA313D7883B0DDEE63EF84C85AD ] C:\Windows\SysWOW64\ncryptsslp.dll
00:10:32.0652 0x04a0  C:\Windows\SysWOW64\ncryptsslp.dll - ok
00:10:32.0652 0x04a0  [ AA33DA95CA8C2D543969F69B04C52782, 64178E465ACEDA5CC9A361BB2A99751EFBB1F1271638FFA0AC9C42A39B3B9619 ] C:\Windows\System32\wbem\WMIADAP.exe
00:10:32.0652 0x04a0  C:\Windows\System32\wbem\WMIADAP.exe - ok
00:10:32.0652 0x04a0  [ 927560169D763EB9C1CCCE689A0F3CA5, 959D36FF618E976B8407778B3E5A52EEC1508FE1CF1523B5158AD9B7F9576B43 ] C:\Windows\System32\loadperf.dll
00:10:32.0652 0x04a0  C:\Windows\System32\loadperf.dll - ok
00:10:32.0668 0x04a0  [ 0AE2C218A9AB6C16D79160CCE55B35FC, 59739EE3BCAA001BCE8A53DC4B32CB11C4054D4E937445C2D1D2B4476ABC3A6B ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
00:10:32.0668 0x04a0  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe - ok
00:10:32.0668 0x04a0  [ D49936A37AD85B8A27BA0AEE9F6E566C, 94D1F20B3ABF43EBE9B592852D8C0672BE9336A849E63D836A436EA31B80E803 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\a8a7c61bbfb315f5a25f99be9f855c89\WindowsBase.ni.dll
00:10:32.0668 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\a8a7c61bbfb315f5a25f99be9f855c89\WindowsBase.ni.dll - ok
00:10:32.0668 0x04a0  [ CAB30BEC2E0DADD4FFA4F64D7A6A5A8F, 2B57CCEFE0818FD57816FE04E97A442A73E51748E0F666E23A4442DD643DD89E ] C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\14996c565338d8efbe753f58f4ec7449\PresentationCore.ni.dll
00:10:32.0668 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\14996c565338d8efbe753f58f4ec7449\PresentationCore.ni.dll - ok
00:10:32.0668 0x04a0  [ E74D205B40FC7CCBE3BC35029F3954B8, ABAA195DCBE8DDB2139534A146AFFC04BA493974CDBC8EAF4E852FB8B7FA9A2E ] C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a01b7418a8bd32283cab89887b6227b6\PresentationFramework.ni.dll
00:10:32.0668 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a01b7418a8bd32283cab89887b6227b6\PresentationFramework.ni.dll - ok
00:10:32.0668 0x04a0  [ 234DA4E47055B32DD833FBD0F4FA4D8B, A19AD8C8BA2FF67EF87A241D56A123AC9C50C81381BFD6DE367622A8AA103E7F ] C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
00:10:32.0668 0x04a0  C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll - ok
00:10:32.0683 0x04a0  [ A22296DFDE7816D2B46A3D8BFF765ED7, FFA40E08B3567F2F41631BAE369B9895A8797091BC10DD428A1087840E547943 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\9e699982310966dfd33ec39de085d2e2\System.Xml.ni.dll
00:10:32.0683 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\9e699982310966dfd33ec39de085d2e2\System.Xml.ni.dll - ok
00:10:32.0683 0x04a0  [ 5E01B5363F8331543B02F6937222472E, 92CBCD9E92719AB23B6DFEAE55CCA7F07DA0FE47BF16535DB195135CD063BACD ] C:\Windows\System32\twext.dll
00:10:32.0683 0x04a0  C:\Windows\System32\twext.dll - ok
00:10:32.0683 0x04a0  [ 0B1C3C977F5C7261E6C569C3CF40D6D1, 37979173915908359E9A092229F929BB0324040A758426A59B10FB451A3C273B ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
00:10:32.0683 0x04a0  C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll - ok
00:10:32.0683 0x04a0  [ D8DD9FE566746F599331E352B5D0E043, FC086E77A4B2776FD39C2A8FAB64A9C1D34698B660640A88607EF898FFADB5BC ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fpshx.dll
00:10:32.0683 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fpshx.dll - ok
00:10:32.0683 0x04a0  [ F72A98AF7A1B9C04E2486E526FCEE4AE, 17323F88707960A617DF94E3C185A9A3627DDE52CAA73E3CA6BCFA85B45A9C68 ] C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fslapi64.dll
00:10:32.0683 0x04a0  C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Common\fslapi64.dll - ok
00:10:32.0699 0x04a0  [ AA722E788988FFCFDFB191254B03207E, 6F1B641A8F5A2C710946F10F07319826CB2076E02F4D4D7F939998A98C1F0404 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\6b6655bc7b445a111c9d41ec374e6dc7\System.Web.ni.dll
00:10:32.0699 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\6b6655bc7b445a111c9d41ec374e6dc7\System.Web.ni.dll - ok
00:10:32.0699 0x04a0  [ 008E1F6E1968391F2B1E823D394EB2A6, 21E8C357101F5E8CBC77E4F3BB58F861CA2B9958BF0704A35183309572C341D2 ] C:\Windows\System32\syncui.dll
00:10:32.0699 0x04a0  C:\Windows\System32\syncui.dll - ok
00:10:32.0699 0x04a0  [ 3EFAE47CC9169E22E58F0A689C00C984, 6B08C3DEDC93EF43D0ADA742678FD0486B70FDDB840411B899C02A60B401AF49 ] C:\Windows\System32\synceng.dll
00:10:32.0699 0x04a0  C:\Windows\System32\synceng.dll - ok
00:10:32.0699 0x04a0  [ D9AD6E1971162EB4DACB3B6BECEAC4B7, A2DE2128BEA15BE62631231D0DDFEBD74BD4F12CDA2E39D23C5965096B107BE0 ] C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
00:10:32.0699 0x04a0  C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - ok
00:10:32.0699 0x04a0  [ C9A56080FB80A5E220C9C39431DD3F9E, 905E2A4ACE014A2B15830993BE92539911D4DFDF0B1B57EB231E060995356363 ] C:\Windows\System32\UIRibbon.dll
00:10:32.0699 0x04a0  C:\Windows\System32\UIRibbon.dll - ok
00:10:32.0699 0x04a0  [ 7F6B53ECA0704E0C9D7DCA243D2F4E5F, 92219754C79621C316519E7C5A22CC23E657FFE7EB1A94EFC79EDCD177CBAFC7 ] C:\Windows\System32\UIRibbonRes.dll
00:10:32.0699 0x04a0  C:\Windows\System32\UIRibbonRes.dll - ok
00:10:32.0715 0x04a0  [ 863CCE025CADCB8F6E581D9BD2A1278C, E531EB36D41F5216B48212A00059D4D0A281FE4EFE2AC2FACA3C8F621F1F06F1 ] C:\Windows\System32\IconCodecService.dll
00:10:32.0715 0x04a0  C:\Windows\System32\IconCodecService.dll - ok
00:10:32.0715 0x04a0  [ D1DD08E7ED384DDC88DF2A1CD8EF4B61, DD8BDDB48F7E4ECEAAD4E7AFF92372B68E84C7177A0398E33C952401E19A7077 ] C:\Windows\System32\networkitemfactory.dll
00:10:32.0715 0x04a0  C:\Windows\System32\networkitemfactory.dll - ok
00:10:32.0715 0x04a0  [ 7F81942E5269D4079BC77A60E2A08A24, 4F6B134FA47417F58908370C06688FBAB0ABBC00A371A42197518E118C89D7A4 ] C:\Windows\System32\dlnashext.dll
00:10:32.0715 0x04a0  C:\Windows\System32\dlnashext.dll - ok
00:10:32.0715 0x04a0  [ 06856DA4C306F557BF115C4EF2269095, 953C820A6733A80B22633368C09B30B838ACA1DB15FBEE3027471892BE68FE84 ] C:\Windows\System32\dtsh.dll
00:10:32.0715 0x04a0  C:\Windows\System32\dtsh.dll - ok
00:10:32.0715 0x04a0  [ 22841396DDA983B3FE9B9B1A39213105, 6A30B7F88B284B231CA55D960860F14CF48D2F37776E0F0697E7B07EB7B349FD ] C:\Windows\System32\Windows.Media.Streaming.dll
00:10:32.0715 0x04a0  C:\Windows\System32\Windows.Media.Streaming.dll - ok
00:10:32.0715 0x04a0  [ 50361572A98348A6E780FFE231B55D49, A903DFBA8BC9A1D696396A5158327268B1C5975AF1755BED28650A4A6526E7D7 ] C:\Windows\System32\DevDispItemProvider.dll
00:10:32.0715 0x04a0  C:\Windows\System32\DevDispItemProvider.dll - ok
00:10:32.0730 0x04a0  [ BA2BA6F87720AB2486C0E5D84C6E5ED1, 90762D98CA57497BF8BB9AEA05447A53A05F968C03316749498647F65158E5A9 ] C:\Windows\System32\wpdshext.dll
00:10:32.0730 0x04a0  C:\Windows\System32\wpdshext.dll - ok
00:10:32.0730 0x04a0  [ 7BEE878EDFA955B87822E80AA8AD6F31, B3018DB1C0A22631CC9C86381F3D4EED217D9D1F6565E4AD27E616D8377FDCCE ] C:\Windows\System32\EhStorAPI.dll
00:10:32.0730 0x04a0  C:\Windows\System32\EhStorAPI.dll - ok
00:10:32.0730 0x04a0  [ 4D8B51722AFEE69A69B2A1BEF7E49668, BE4E2E3C1B088531574780C9642036318CEB65FF2C3E204EDB645F2224520A5D ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\19a250dadb887a9500f80a140b3821b3\System.Management.ni.dll
00:10:32.0730 0x04a0  C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\19a250dadb887a9500f80a140b3821b3\System.Management.ni.dll - ok
00:10:32.0730 0x04a0  [ 4DD66B8118B529EF72A36150BC15DCAB, FB5D89B4DFB95414766EE19947B0FAC8E61EA5ECAD9EAD5109E89A52778D007F ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll
00:10:32.0730 0x04a0  C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll - ok
00:10:32.0730 0x04a0  [ 7C45360A8C55B61BE997B1E080ED8607, 512D62AB17C4F17606CDF050B22480D9CEC95228B4DDD33DA53A12E91E0E4502 ] C:\Windows\System32\security.dll
00:10:32.0730 0x04a0  C:\Windows\System32\security.dll - ok
00:10:32.0746 0x04a0  [ BD3D0B828D67A55F604599421B5F9042, 48FE5B4F0E17FEF5EB7023A8241C6055212B14BA3C18026E4720B11A7242570E ] C:\Windows\System32\shfolder.dll
00:10:32.0746 0x04a0  C:\Windows\System32\shfolder.dll - ok
00:10:32.0746 0x04a0  [ B55D431B5EEC32FF6E7B7111DABD5711, 00B19F1A1B078FD85AA1057CDA4DECFD7812E0FF033751DBA1DB208FC7BD1D50 ] C:\Users\John\Downloads\tdsskiller.exe
00:10:32.0746 0x04a0  C:\Users\John\Downloads\tdsskiller.exe - ok
00:10:32.0746 0x04a0  [ B938289D040F341BA457C7F27B507A7F, B63AA6EF1D48BF90AFA4DA5F8F8C39A3002056FFB0889B79762179E1FB797258 ] C:\Windows\System32\wdmaud.drv
00:10:32.0746 0x04a0  C:\Windows\System32\wdmaud.drv - ok
00:10:32.0746 0x04a0  [ 714F76BF1B594CD7D38AF1515F6F25E5, 1F7B79610B3832078CF1C86E3DAF819DAE3561B94922D83B0232CDF5481DF391 ] C:\Windows\System32\msacm32.drv
00:10:32.0746 0x04a0  C:\Windows\System32\msacm32.drv - ok
00:10:32.0746 0x04a0  [ 1BA72303004CC0C35217722D703B8311, F6D7FEC8FA64CBDEBAD3513E81B406469D302A3D838E70E31969FAEA2B844A85 ] C:\Windows\System32\midimap.dll
00:10:32.0746 0x04a0  C:\Windows\System32\midimap.dll - ok
00:10:32.0746 0x04a0  [ 802EEA1D3BB0D99892DF2DCE5B5610DE, 6522EFB00409DE333FBA7B48A9F69C1C4DD89BDF93BBD0CB874759F66906D7F9 ] C:\Windows\System32\msacm32.dll
00:10:32.0746 0x04a0  C:\Windows\System32\msacm32.dll - ok
00:10:32.0761 0x04a0  [ 722AD253B1F2697D9D5D0E5347952375, 04B8AD224B8F0317427912435736E61FC8D780A5D5D2495C01E1B4A7BE466D76 ] C:\Windows\System32\keepaliveprovider.dll
00:10:32.0761 0x04a0  C:\Windows\System32\keepaliveprovider.dll - ok
00:10:32.0761 0x04a0  [ 9DD06F00898AA5CA7E24186EFC8E5E25, 51141D0D07DBC955B63281351D3F17163ACE9A5B08628EA1C82F33FD2913970E ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{A0C6C347-8A33-409F-828F-D3E29D0DBA41}.tmp
00:10:32.0761 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{A0C6C347-8A33-409F-828F-D3E29D0DBA41}.tmp - ok
00:10:32.0761 0x04a0  [ 91A7771934C0D9D2DA7699D25BB5B348, 154A6EB866AF22B38AEE8DB5A864653FEB15DED69DE26E5B602B7C5056CDDF72 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{BEA429F3-B10D-4D57-9929-7255256F73D1}.tmp
00:10:32.0761 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{BEA429F3-B10D-4D57-9929-7255256F73D1}.tmp - ok
00:10:32.0761 0x04a0  [ 80808656078CFCC32CF8BFEB0DD66279, 383F37599ABF16EEDEB2A60242DB7EDCC3D210A2A59DD61169047059F7041C5C ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{8018A7C8-C60B-4A37-B9DB-C853C28424D5}.tmp
00:10:32.0761 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{8018A7C8-C60B-4A37-B9DB-C853C28424D5}.tmp - ok
00:10:32.0761 0x04a0  [ DF471F11CC78BE02FE6BA15F2D94F65B, 9AC230DE58CE40E78AE6872BCF4778B69EEBF17E0E41B1301FF364ABD4737A78 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{1608C004-D9BE-4323-939D-B3688FD7DEA8}.tmp
00:10:32.0761 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{1608C004-D9BE-4323-939D-B3688FD7DEA8}.tmp - ok
00:10:32.0777 0x04a0  [ 0FD19BDDD2513874FF6903F717367795, DFAF9C33F993BA26FC84EF66ABC7C483E62762F7E1FC763605A75ACC2E8AA4EE ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{80682361-06E4-4B93-916B-FE9515F6BE71}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{80682361-06E4-4B93-916B-FE9515F6BE71}.tmp - ok
00:10:32.0777 0x04a0  [ DD88BBF87A43331A4E99E37F7BF59FDB, 872190F559FA0DD1F711E9FA101BA1AB6E6DE5ED0CCCE1AB7AFE45BC3B78A0F1 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{9C5C20BE-94B1-4E53-89E1-82E08CEABF13}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{9C5C20BE-94B1-4E53-89E1-82E08CEABF13}.tmp - ok
00:10:32.0777 0x04a0  [ 4261449C1CADA6B007E5C27522946D2B, 11E79D1C529E816CCCAC9266089C77A4DB44676CAEEE25C66D6DB420B18D3ACB ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{1418A011-A5A6-4706-AF6E-BEFBB64B2EB5}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{1418A011-A5A6-4706-AF6E-BEFBB64B2EB5}.tmp - ok
00:10:32.0777 0x04a0  [ 6627AA675A5C1B0330487A02E23F0560, 256AE9BA4273D4247FFAD6099D5A4FC8E98EDB27293AC8CAF7A571EB3890FAA7 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{C1B76EC7-8D77-4C0C-B0CC-E099C92EC6A0}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{C1B76EC7-8D77-4C0C-B0CC-E099C92EC6A0}.tmp - ok
00:10:32.0777 0x04a0  [ 723B834A07F7DF7DE4CEB637D57ACEA3, B42867045DD3FB7682CDBD133970421010F0F14125E4992C73657CABA4659250 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{4B6AE3BC-8497-438B-9139-B84DB0A13953}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{4B6AE3BC-8497-438B-9139-B84DB0A13953}.tmp - ok
00:10:32.0777 0x04a0  [ C1DE893FAF6D7F6CFB479A1F61835482, AD5FA3CE73777704C67C933691F1F068E1A7FF545F728B97574F9C33AC4BBC01 ] C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{C9C713DF-DEE6-4A83-8331-E7576CB2257C}.tmp
00:10:32.0777 0x04a0  C:\Users\John\AppData\Local\Temp\{D7F72448-5AB5-42F6-A22A-9E555DB6C00D}\{C9C713DF-DEE6-4A83-8331-E7576CB2257C}.tmp - ok
00:10:32.0793 0x04a0  [ 83E7AA6B7A0BD16E5D19A725F50D7901, 61E0E552F8036476886B9F0FCF309282FBA0B4C9835BD7E92512A35941712A00 ] C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso64.sys
00:10:32.0793 0x04a0  C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso64.sys - ok
00:10:32.0793 0x04a0  [ 528492B58124CEDF1CA2E7DCC5649C13, 5788084564B3915DB9DAC6EEECE3C13235A8014CBC338D3E7671EE8CD98A6E1C ] C:\Program Files (x86)\TalkTalk\Security\_fs_se_hotfix.exe
00:10:32.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\_fs_se_hotfix.exe - ok
00:10:32.0793 0x04a0  [ 288CC6D7FAE224442C49E0257F236120, 10AD9D0D5622832093D79AC0776A2B82B9F8DC5F2213B2BBE09091599443E3B3 ] C:\Program Files (x86)\TalkTalk\Security\zlib_32.dll
00:10:32.0793 0x04a0  C:\Program Files (x86)\TalkTalk\Security\zlib_32.dll - ok
00:10:32.0808 0x04a0  AV detected via SS2: Computer Security, C:\Program Files (x86)\TalkTalk\Security\apps\ComputerSecurity\Anti-Virus\fsavwsch.exe ( 9.10.15260.0 ), 0x41000 ( enabled : updated )
00:10:32.0840 0x04a0  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.4.304.0 ), 0x60100 ( disabled : updated )
00:10:32.0840 0x04a0  Win FW state via NFP2: enabled
00:10:35.0183 0x04a0  ============================================================
00:10:35.0183 0x04a0  Scan finished
00:10:35.0183 0x04a0  ============================================================
00:10:35.0183 0x16d4  Detected object count: 0
00:10:35.0183 0x16d4  Actual detected object count: 0

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.