MBAM Blocked and Can't Scan, Can't Upate, Can't install it again

[Michael_SB]

Hi, Malware Bytes has stopped scanning. I had bought the full professional, and it stopped scanning files on request (from the pop-up menu when you right-click on files). I then realised it wouldn't update, and reinstalls have failed. The other virus software I use is simply Windows Defender.

I'm running Windows 8.1 on a Lenovo Y480. I performed the "Read me Before" tasks, and AFT-Cleaner and GMER failed, and Windows Malicious Software Removal tool found nothing on a quick scan. Currently running a deep scan. DDS.scr says it "Will not run in compatibility mode" and closes. So, I basically haven't been able to do any of the prep scans for posting to the virus forum.

Other than MBAM not working I hadn't noticed any downgrade in functionality, so I'm concerned my traffic or data is being monitored. Your help much appreciated.

[Michael_SB]

I should clarify that MBAM professional had been working for about 6 months or so before then.

[gerbil]

Michael, I do not know where you got to in your installation attempts, but if the MBAM program folder exists, check in there for chameleon.exe; if it exists then run it, and again try to install MBAM immediately afterward (no restart beforehand).
If you don't have chameleon, then here it is for download: https://www.malwarebytes.org/chameleon/
It unzips with a help file.
IF that works then update MBAM and post a quick-scan log. Retry GMER.
CCleaner is preferable to AFT. And you likely have an infection (a rootkit malware) which is preventing MBAM from installing or running; chameleon is to deal with that problem specifically.
Given that, you should also run MBAR before attempting to install MBAM... https://www.malwarebytes.org/antirootkit/
The page has the simple instructions.

[SimonTB473]

Hi Michael, I would also use Junkware Removal Tool (JRT) and ADWareCleaner and then re-install MBAM. This has worked for me inthe past.

[Michael_SB]

Hi, thanks for your detailed response. Chameleon didn't work, and I haven't been able to run MBAM after trying all the variant scans it offered. I also tried JRT and ADware, but no results so far. There were errors during both those scans.

[Hiroshe]

DDS.scr says it "Will not run in compatibility mode" and closes.

This might sound like a silly question, but is running in compatibility mode? If it is, try turning it off.

Also, try running malwarebytes in safe mode. If that works, then have a close look at what starts up when your computer turns on, and remove anything you don't need.

If it's still not running, you can try something a little more adventurous: Install Ubuntu onto a usb stick, boot into ubuntu, install wine, install MBAM, and then try to run the scan on your windows partition.

[gerbil]

MBAR found nothing? Interesting.
==Download TDSSkiller from this link, save it to your desktop:
https://support.kaspersky.com/viruses/utility or http://support.kaspersky.com/downloads/utils/tdsskiller.exe -you may need to download it to a clean computer and then transfer it to the desktop using a USB flash drive.
=Start TDSSKiller,(((( click Change Parameters. Under Additional options check both boxes, Verify Driver Digital Signature and Detect TDLFS file system; click OK. ))))
-click Start scan;
-choose Skip for unsigned files;
-choose Cure if TDSSKiller finds a rootkit and prompts a Cure or Delete [a reboot may be required];
-do not Delete or Quarantine any files.
Post the log from C:.

[Michael_SB]

Hi thanks again. TDSKiller opened without problems, but didn't find anything. Log is here:

09:14:37.0848 0x2270  TDSS rootkit removing tool 3.0.0.39 Jun  5 2014 20:35:54
09:14:37.0848 0x2270  UEFI system
09:14:42.0537 0x2270  ============================================================
09:14:42.0537 0x2270  Current date / time: 2014/07/10 09:14:42.0537
09:14:42.0537 0x2270  SystemInfo:
09:14:42.0537 0x2270  
09:14:42.0538 0x2270  OS Version: 6.3.9600 ServicePack: 0.0
09:14:42.0538 0x2270  Product type: Workstation
09:14:42.0538 0x2270  ComputerName: SHAKTIDEVA
09:14:42.0538 0x2270  UserName: Michael
09:14:42.0538 0x2270  Windows directory: C:\WINDOWS
09:14:42.0538 0x2270  System windows directory: C:\WINDOWS
09:14:42.0538 0x2270  Running under WOW64
09:14:42.0538 0x2270  Processor architecture: Intel x64
09:14:42.0538 0x2270  Number of processors: 8
09:14:42.0538 0x2270  Page size: 0x1000
09:14:42.0538 0x2270  Boot type: Normal boot
09:14:42.0538 0x2270  ============================================================
09:14:43.0561 0x2270  KLMD registered as C:\WINDOWS\system32\drivers\89614052.sys
09:14:45.0139 0x2270  System UUID: {DC586B67-9905-2508-105C-B16C539F126F}
09:14:46.0688 0x2270  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
09:14:46.0692 0x2270  ============================================================
09:14:46.0692 0x2270  \Device\Harddisk0\DR0:
09:14:46.0694 0x2270  GPT partitions:
09:14:46.0694 0x2270  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {033195CD-79D7-446E-9E02-F5D6AB75925E}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1F4000
09:14:46.0694 0x2270  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {5CDB7282-CB0C-4A9A-A194-71900DBF8811}, Name: EFI system partition, StartLBA 0x1F4800, BlocksNum 0x82000
09:14:46.0694 0x2270  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {BFBFAFE7-A34F-448A-9A5B-6213EB736C22}, UniqueGUID: {141F6F2F-EAB3-4C9B-96DF-811713C1BA07}, Name: Basic data partition, StartLBA 0x276800, BlocksNum 0x1F4000
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {E001880D-F71C-4F81-B40B-01EC625A027C}, Name: Microsoft reserved partition, StartLBA 0x46A800, BlocksNum 0x40000
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {9DB625A6-EEC7-47A5-A45A-5275711D47B8}, Name: Basic data partition, StartLBA 0x4AA800, BlocksNum 0x37498800
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {934D05CC-A50B-4266-AAAA-C7F508CC510E}, Name: , StartLBA 0x37943000, BlocksNum 0xAF000
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition7: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {33A96A70-B701-4970-AD91-4C665B66E85F}, Name: Basic data partition, StartLBA 0x379F2000, BlocksNum 0x37314000
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition8: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {F7DD82BB-F924-465D-87CF-F9368B202C42}, Name: Basic data partition, StartLBA 0x6ED06800, BlocksNum 0x3200000
09:14:46.0695 0x2270  \Device\Harddisk0\DR0\Partition9: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {C84AE8D3-8843-4C17-933A-227DC5FDDFE9}, Name: Basic data partition, StartLBA 0x71F06800, BlocksNum 0x2800000
09:14:46.0695 0x2270  MBR partitions:
09:14:46.0695 0x2270  ============================================================
09:14:46.0813 0x2270  C: <-> \Device\Harddisk0\DR0\Partition5
09:14:47.0021 0x2270  D: <-> \Device\Harddisk0\DR0\Partition8
09:14:47.0096 0x2270  E: <-> \Device\Harddisk0\DR0\Partition7
09:14:47.0096 0x2270  ============================================================
09:14:47.0096 0x2270  Initialize success
09:14:47.0096 0x2270  ============================================================
09:14:58.0857 0x0420  ============================================================
09:14:58.0857 0x0420  Scan started
09:14:58.0857 0x0420  Mode: Manual; 
09:14:58.0857 0x0420  ============================================================
09:14:58.0857 0x0420  KSN ping started
09:15:01.0642 0x0420  KSN ping finished: true
09:15:03.0441 0x0420  ================ Scan system memory ========================
09:15:03.0441 0x0420  System memory - ok
09:15:03.0442 0x0420  ================ Scan services =============================
09:15:04.0008 0x0420  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
09:15:04.0021 0x0420  1394ohci - ok
09:15:04.0051 0x0420  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware           C:\WINDOWS\system32\drivers\3ware.sys
09:15:04.0054 0x0420  3ware - ok
09:15:04.0132 0x0420  [ 3D30878A269D934100FA5F972E53AF39, 3D2D22D1A9D80DB94D6059C789FBD04DC945722B8644DF6DAA73D5713A10EC52 ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
09:15:04.0154 0x0420  ACPI - ok
09:15:04.0216 0x0420  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
09:15:04.0218 0x0420  acpiex - ok
09:15:04.0236 0x0420  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
09:15:04.0238 0x0420  acpipagr - ok
09:15:04.0255 0x0420  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi         C:\WINDOWS\System32\drivers\acpipmi.sys
09:15:04.0258 0x0420  AcpiPmi - ok
09:15:04.0300 0x0420  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
09:15:04.0303 0x0420  acpitime - ok
09:15:04.0394 0x0420  [ 3B42D95D20CD2AACDB0564471AE43ED7, BF49568D7060159F61D5F6DE7ECDECCCD1F920A2881544BA83CF420C822F6653 ] ACPIVPC         C:\WINDOWS\System32\drivers\AcpiVpc.sys
09:15:04.0397 0x0420  ACPIVPC - ok
09:15:04.0577 0x0420  [ 3927397AC60D943DAF8808AFFED582B7, 2688254085C219E8CA9C5494ABDAD8FAE52533CEF7FA3C152715E0B78D591BCF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
09:15:04.0580 0x0420  AdobeARMservice - ok
09:15:04.0723 0x0420  [ A6B6AB9502B63F43A9A56AE6AFB22078, DD1F0BA3D8F3333F52A71EAE3719A001F6EF844D647FFABF0E4C56C6C764ACA7 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
09:15:04.0734 0x0420  AdobeFlashPlayerUpdateSvc - ok
09:15:04.0842 0x0420  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX         C:\WINDOWS\system32\drivers\ADP80XX.SYS
09:15:04.0857 0x0420  ADP80XX - ok
09:15:04.0909 0x0420  [ B19CA8E441D35AA2B1EE51C10B27DA1B, EBEB96EA44E665B2D4FCD1CC58621A20A17F036EA4A695340A2B65F94F69CDDC ] AeLookupSvc     C:\WINDOWS\System32\aelupsvc.dll
09:15:04.0918 0x0420  AeLookupSvc - ok
09:15:04.0983 0x0420  [ 239268BAB58EAE9A3FF4E08334C00451, 13F927730DF9BAEDB3A7AB6F7238270A20E4CDEB3D5324A1C471DF2209F3D239 ] AFD             C:\WINDOWS\system32\drivers\afd.sys
09:15:04.0999 0x0420  AFD - ok
09:15:05.0031 0x0420  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
09:15:05.0034 0x0420  agp440 - ok
09:15:05.0071 0x0420  [ 8E8E34B7BA059050EED827410D0697A2, 85B6684709F24729A6497563812A90A54068AC2DD9EEA03037CB1EEF5C85AAA9 ] ahcache         C:\WINDOWS\system32\DRIVERS\ahcache.sys
09:15:05.0074 0x0420  ahcache - ok
09:15:05.0123 0x0420  [ A91D8E1E433EFB32551BCE69037E1CE7, 41DFDD5B56918D19D09DFB3E4B07460AA85647A8647ABBBB906158D8D6653290 ] ALG             C:\WINDOWS\System32\alg.exe
09:15:05.0128 0x0420  ALG - ok
09:15:05.0157 0x0420  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8           C:\WINDOWS\System32\drivers\amdk8.sys
09:15:05.0164 0x0420  AmdK8 - ok
09:15:05.0207 0x0420  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
09:15:05.0211 0x0420  AmdPPM - ok
09:15:05.0243 0x0420  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
09:15:05.0246 0x0420  amdsata - ok
09:15:05.0324 0x0420  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
09:15:05.0336 0x0420  amdsbs - ok
09:15:05.0355 0x0420  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
09:15:05.0357 0x0420  amdxata - ok
09:15:05.0373 0x0420  [ 04951A9A937CBE28A2D3FEEA360B6D1F, D8AAF000BE4FE4B203DC2EB2A64F780A542E5238CE3F9952FD03277379B11529 ] AppID           C:\WINDOWS\system32\drivers\appid.sys
09:15:05.0376 0x0420  AppID - ok
09:15:05.0416 0x0420  [ C0DC3F58214A227980AEB091CFD2F973, 0C3E8453C9F65ADA3E74C38C0E3AC3E0CBFD807B827097046265B38839E151E3 ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
09:15:05.0420 0x0420  AppIDSvc - ok
09:15:05.0447 0x0420  [ 7E790DE2487CEDB349D1750B9E47F090, EDA4A87EA2F89ABD174E9590DD46E70B9E7E4B35BDFC3ED90D79CD594F8CB2CD ] Appinfo         C:\WINDOWS\System32\appinfo.dll
09:15:05.0513 0x0420  Appinfo - ok
09:15:05.0573 0x0420  [ 4B964AE0DF433A3BFA7BD24713BC2E9B, DC8933265E67E43CAE96EA64B146CB9067B536A4DA2C90EDCB38302BBFA1CE6B ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
09:15:05.0592 0x0420  AppReadiness - ok
09:15:05.0663 0x0420  [ 0B726D9ED75C787D6FFAF1E3873BCC70, DC3822B35FB65D53CC5D0E3982C326C5F47F0911BEB1F66DCC84A79C84621E1E ] AppXSvc         C:\WINDOWS\system32\appxdeploymentserver.dll
09:15:05.0687 0x0420  AppXSvc - ok
09:15:05.0753 0x0420  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
09:15:05.0759 0x0420  arcsas - ok
09:15:05.0782 0x0420  [ 3DB7721F06BC2FEDB25029EA23AB27DA, 221861148C66FE53E4D6EE49C6E656479AB5804A2D348A280A1CD8093E8AB788 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:15:05.0785 0x0420  AsyncMac - ok
09:15:05.0810 0x0420  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi           C:\WINDOWS\system32\drivers\atapi.sys
09:15:05.0813 0x0420  atapi - ok
09:15:05.0891 0x0420  [ 4903CBC14742B5AB4DCF7A92F7DEC483, B8491FDA1D1E767658ECC5C3C3DDFB3EB12A969F0F6ACF116C18300FF54075D5 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
09:15:05.0900 0x0420  AudioEndpointBuilder - ok
09:15:05.0998 0x0420  [ EF276593AD1BDF5A99032F62D6272848, 3961689B34A6BCD891FF48A044ABD184F5D7320AE882DF79E5ADC57B08205BA9 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
09:15:06.0020 0x0420  Audiosrv - ok
09:15:06.0073 0x0420  [ 7692F4B242E45870873CAF4CB85CF769, 9D28627FD73F62134792528A9D2F2FCCBB0FDD7E45D8D7D816B9FC3C07AE4CA2 ] AxAutoMntSrv    C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
09:15:06.0079 0x0420  AxAutoMntSrv - ok
09:15:06.0181 0x0420  [ 96E8CAF20FC4B6C31CAD7816A801EB78, E4870DB8FFBDCFEE98449338D0BDBF2DD0B5FEC75514E41C11A882BE6EB16833 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
09:15:06.0189 0x0420  AxInstSV - ok
09:15:06.0240 0x0420  [ CF3424DE4891AC43AD372ECD457B8E50, F15843F9BBC42CD59072DE652C193CDE1951FBC1B364FE8C3B65D0A45F461237 ] axscsidrv       C:\WINDOWS\system32\drivers\axscsidrv.sys
09:15:06.0251 0x0420  axscsidrv - ok
09:15:06.0304 0x0420  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv         C:\WINDOWS\system32\drivers\bxvbda.sys
09:15:06.0314 0x0420  b06bdrv - ok
09:15:06.0379 0x0420  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
09:15:06.0383 0x0420  BasicDisplay - ok
09:15:06.0401 0x0420  [ 2748E116F8621A4DB0D39FCDD7318C01, DA2DEB7FE1D887B1EF5E2B5103270B72268D8ABDDA36C396627305C0BA90FC20 ] BasicRender     C:\WINDOWS\System32\drivers\BasicRender.sys
09:15:06.0404 0x0420  BasicRender - ok
09:15:06.0470 0x0420  [ 5F685973740F289BE3C809952DB8408B, 4C0A0C06BB2B6B1879A860B0D68289A55F80CF74947FCCE7815F1D8121232F62 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
09:15:06.0474 0x0420  BBSvc - ok
09:15:06.0492 0x0420  [ 76F78018F45E7F92164CEA5020176933, 76E1CA6E198417F3749864721C43913189A7EA07B5ED320DE543B2037CEA3D65 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
09:15:06.0496 0x0420  BBUpdate - ok
09:15:06.0551 0x0420  [ 70433F7A216BD0B5EC7DA1202EE53E65, 12F3210EC5546714B34225770242F5CF4AC36032BB49A8E8989620BA274AC505 ] bcbtums         C:\WINDOWS\system32\drivers\bcbtums.sys
09:15:06.0559 0x0420  bcbtums - ok
09:15:06.0687 0x0420  [ 18B186BCC56EC611DE519CBA7D4F65B0, 6F2520AAFDAA4208717DCD121527911D580727C5A6B8C4C7F07C4155C4D8662D ] BcmBtRSupport   C:\WINDOWS\system32\BtwRSupportService.exe
09:15:06.0724 0x0420  BcmBtRSupport - ok
09:15:06.0767 0x0420  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
09:15:06.0768 0x0420  bcmfn2 - ok
09:15:06.0817 0x0420  [ BBE61A40665B83488901E41082A6097D, ADF750DB32E1295C57C03D587A60194529C8B83F90F433C3458288FB5E8F475B ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
09:15:06.0885 0x0420  BDESVC - ok
09:15:06.0920 0x0420  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
09:15:06.0922 0x0420  Beep - ok
09:15:06.0996 0x0420  [ 6468B696C65775D51A06615830E0E79D, CC4081B3A4895192B4796A745F0BCE8C9C3149B854A7B9BEF84668A2E1D074B5 ] BFE             C:\WINDOWS\System32\bfe.dll
09:15:07.0013 0x0420  BFE - ok
09:15:07.0107 0x0420  [ 15225081966C785A9192782401643FD4, E2BA0C8D044556FDD9DD7A25F7F71553DE7A2924E78F9284413C2AC46F0BF4EB ] BITS            C:\WINDOWS\System32\qmgr.dll
09:15:07.0132 0x0420  BITS - ok
09:15:07.0200 0x0420  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
09:15:07.0213 0x0420  Bonjour Service - ok
09:15:07.0255 0x0420  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
09:15:07.0258 0x0420  bowser - ok
09:15:07.0302 0x0420  [ A6207A88B596F726DE558425F3B7E592, 126375CC8EA101E0878728323B7EAA69DC8699AC04470FB95D482B1025E0FFB2 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
09:15:07.0308 0x0420  BrokerInfrastructure - ok
09:15:07.0347 0x0420  [ D528D6A92D187777691993DD757AF19A, 2C79978310193431E5FC462368424A172858D5351C92D4815C2A7E35B5DDE50C ] Browser         C:\WINDOWS\System32\browser.dll
09:15:07.0355 0x0420  Browser - ok
09:15:07.0403 0x0420  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
09:15:07.0407 0x0420  BthAvrcpTg - ok
09:15:07.0428 0x0420  [ 131F1C8573E7BFB41C54FBF5309CCD94, DAFE51E3BADBD82A33B580F212B2D6520A120877C23F6D675521FEA2F4BA5A1F ] BthEnum         C:\WINDOWS\system32\DRIVERS\BthEnum.sys
09:15:07.0432 0x0420  BthEnum - ok
09:15:07.0448 0x0420  [ 746B9F94214915AECDE4B7FEA5FF9664, EA2877D49DB4B7B9CE61653D63E8776DFF1CBCCAB12C14DB1D20DA44B8F06357 ] BthHFEnum       C:\WINDOWS\System32\drivers\bthhfenum.sys
09:15:07.0453 0x0420  BthHFEnum - ok
09:15:07.0469 0x0420  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
09:15:07.0472 0x0420  bthhfhid - ok
09:15:07.0546 0x0420  [ FCD8BD17B7193CFFF18C332D1A381D7F, CD8A03086695F8FF2566697164D1FD1B60210C017220EFBD78CB12C38CD12BE1 ] BthLEEnum       C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys
09:15:07.0558 0x0420  BthLEEnum - ok
09:15:07.0605 0x0420  [ 8E601CA574B33308F3C95C89B75F0EED, BE2B3EB9F2E62E9DD070E7CC0BCB9F7A594E3BA5A12E53FFA502BFA210800008 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
09:15:07.0609 0x0420  BTHMODEM - ok
09:15:07.0633 0x0420  [ 3AFE71D80EDF5D4DE0C5731352905669, 3E370169B8C5D301954D1F1DA302F7A0DB2A034990E10B3D64458C48E5693205 ] BthPan          C:\WINDOWS\system32\DRIVERS\bthpan.sys
09:15:07.0639 0x0420  BthPan - ok
09:15:07.0710 0x0420  [ 10EDF9E0838BA4578FFFFF274632D454, 7719C161A3A05DF62124177A8EC97800DFE855D2B738C443F1B44E8643A4CF44 ] BTHPORT         C:\WINDOWS\System32\Drivers\BTHport.sys
09:15:07.0738 0x0420  BTHPORT - ok
09:15:07.0793 0x0420  [ E5E48FEED73D463175EAB1542495191C, 0A8182F5BA7B694AB1DD3680F1194E4A568FE40DBA4BFDFF2EA09BAD045FFB29 ] bthserv         C:\WINDOWS\system32\bthserv.dll
09:15:07.0861 0x0420  bthserv - ok
09:15:07.0881 0x0420  [ 0E7FA34B975764C33B5DBC6F8C401627, 9727B9D216D0670D2F2BC5B464B5FDAEC8BC769CA6ADC7F3858EDA3DA0F8036C ] BTHUSB          C:\WINDOWS\System32\Drivers\BTHUSB.sys
09:15:07.0887 0x0420  BTHUSB - ok
09:15:07.0939 0x0420  [ 20C8EB70C0B179DF06A01CA503F4A824, 1C2DADCBC5D85C1D4F6A28B7F374C829E6DCE0EB720EBDA43CF6AC0AC934AA5E ] btwampfl        C:\WINDOWS\system32\DRIVERS\btwampfl.sys
09:15:07.0948 0x0420  btwampfl - ok
09:15:07.0978 0x0420  [ 91844CCDB0C80182979FAFCF94E25DBC, 867C8894DB94D43507A60C80D5BC2A97AA23569A08582E002045430F35DDEC36 ] btwaudio        C:\WINDOWS\system32\drivers\btwaudio.sys
09:15:07.0987 0x0420  btwaudio - ok
09:15:08.0051 0x0420  [ F707AF3B94BE7AD7AA5F8886CCCADF80, 3E37BD52AE019711EA6D07A31958D9F65EDEDE5B5C24C38B30F6241CCB669EE7 ] btwavdt         C:\WINDOWS\system32\DRIVERS\btwavdt.sys
09:15:08.0056 0x0420  btwavdt - ok
09:15:08.0123 0x0420  [ 7CEE2F14E0771D2354962FF07C97BB5B, 981D7C8F23B2ECBB7A4627A0B89EBF785FF86866DB545FA3CA4351F822CEC5D6 ] btwdins         C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
09:15:08.0136 0x0420  btwdins - ok
09:15:08.0172 0x0420  [ C3C8974D99F976C927165363855690CD, 2B73E11FE341DE581CFF655E58C5671B83F4331529C30DADCAA9B6BE615D5E1F ] btwl2cap        C:\WINDOWS\system32\DRIVERS\btwl2cap.sys
09:15:08.0174 0x0420  btwl2cap - ok
09:15:08.0232 0x0420  [ 54DCF9127FD6548F9C04B40635C59F77, E0E2175CE3FFBFD8439FA145259479416CAE7035C4FF0F8F2A3ACBFBAABFF1CE ] btwrchid        C:\WINDOWS\System32\drivers\btwrchid.sys
09:15:08.0236 0x0420  btwrchid - ok
09:15:08.0281 0x0420  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
09:15:08.0285 0x0420  cdfs - ok
09:15:08.0306 0x0420  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom           C:\WINDOWS\System32\drivers\cdrom.sys
09:15:08.0312 0x0420  cdrom - ok
09:15:08.0357 0x0420  [ AB285CE3431FF3D2ACE669245874C1C7, 6AF4C3E86EFA51F7FB6F8492CB2CCB807C7775EAE0508B87F07134FDAC679BD7 ] CertPropSvc     C:\WINDOWS\System32\certprop.dll
09:15:08.0361 0x0420  CertPropSvc - ok
09:15:08.0428 0x0420  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
09:15:08.0430 0x0420  circlass - ok
09:15:08.0511 0x0420  [ 55FE970B500F6D2A550B5E80AB8C4EAC, B62BFD973949E64F408058D8590EE1BD899ECB11139F3E3B7D6448566161C2D3 ] ClassicShellService C:\Program Files\Classic Shell\ClassicShellService.exe
09:15:08.0515 0x0420  ClassicShellService - ok
09:15:08.0562 0x0420  [ 7F006813C2AFE622C13D7AF94F56CD07, 9F4AEEE19B44F4117BE036F1475CE2E91ED740EB7D8D38364F9724517F777482 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
09:15:08.0575 0x0420  CLFS - ok
09:15:08.0631 0x0420  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
09:15:08.0634 0x0420  CmBatt - ok
09:15:08.0669 0x0420  [ 825BE21E6395E00698D8A23955A87972, 303F10C3BA72ABB3BA27D08968B10E8EB03FFB6951943B0E9DD35CF48BB72578 ] CNG             C:\WINDOWS\system32\Drivers\cng.sys
09:15:08.0685 0x0420  CNG - ok
09:15:08.0704 0x0420  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
09:15:08.0735 0x0420  CompositeBus - ok
09:15:08.0738 0x0420  COMSysApp - ok
09:15:08.0781 0x0420  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
09:15:08.0784 0x0420  condrv - ok
09:15:08.0893 0x0420  [ 6DB7264A95FE984FFA072BA79FA087C8, CF180663B24B1660CD04CB26D8663FB7F357C9CF5731B315635D63B7DB76BCEC ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
09:15:08.0906 0x0420  cphs - ok
09:15:08.0993 0x0420  [ 2C0197886BB851E6589087434D890926, 345AC2F80DB3FB530F6AD89FDB1BFF0423E27EF59B2DC46B65F9E2DB0D9D2E89 ] CrashPlanService C:\Program Files\CrashPlan\CrashPlanService.exe
09:15:09.0002 0x0420  CrashPlanService - ok
09:15:09.0054 0x0420  [ 0EFE4B5884A8032617826A4D76F80969, 083D296CC623C83D36A97AEE343ADF819B17E490F931DBE4D161BD1E8C289E02 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
09:15:09.0059 0x0420  CryptSvc - ok
09:15:09.0071 0x0420  [ 315BA4BC19316D72B2E037534E048B93, 69613635DB23E6A935673B1025C2010ED3E195473D25368CF74234C4C36910BE ] dam             C:\WINDOWS\system32\drivers\dam.sys
09:15:09.0074 0x0420  dam - ok
09:15:09.0194 0x0420  [ 3FD5AE42EC87C6F532A931F96BE731DD, 8282823022391ACF65E23F461FCE5CAFFB5ADC077647FEF80B91BC4BC31EDFE2 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
09:15:09.0214 0x0420  DcomLaunch - ok
09:15:09.0242 0x0420  [ F4CCAADC2C78F57E4F16B24C9201CE22, B76A5C487A814CB986FE8CC398FB7493C9EAB9ACC933A3C35384FA447092EF00 ] defragsvc       C:\WINDOWS\System32\defragsvc.dll
09:15:09.0251 0x0420  defragsvc - ok
09:15:09.0300 0x0420  [ 0BC71D4D3B5883903C37BF4E13B0F0C5, C5EC2AD001FB7E72D3D12DBADFE01C308ACCB7426E0B90CCB3ECE2DE49D5E7D4 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
09:15:09.0308 0x0420  DeviceAssociationService - ok
09:15:09.0328 0x0420  [ 752A457320A946E03C3AA86C3ACD735E, 63946150581532D862F4220606E74FFC479209E1A36CD57AA78AC4AE34A26F49 ] DeviceInstall   C:\WINDOWS\system32\umpnpmgr.dll
09:15:09.0333 0x0420  DeviceInstall - ok
09:15:09.0378 0x0420  [ 5DB26D7E0216D0BF364A81D3829AD7B9, FD786D530EA9ADBCB48782FE091E926505A83F2BF3B4181A3D4EDFAA991C4E5E ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
09:15:09.0381 0x0420  Dfsc - ok
09:15:09.0454 0x0420  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
09:15:09.0460 0x0420  dg_ssudbus - ok
09:15:09.0511 0x0420  [ 8B107F55FD61654A6C9F1B819AEC5FC4, 773B1B9D3583F17B7C89BDE1EC4487ABB0AE039DF4583F8746460425443DA291 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
09:15:09.0521 0x0420  Dhcp - ok
09:15:09.0699 0x0420  [ AFDF32206A8CBBE20A40DEF13462C95E, BA4896D0B6D133105F5B0BC2E648943890F816D7466C0C93A0966321AF9F831C ] Disc Soft Bus Service C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
09:15:09.0713 0x0420  Disc Soft Bus Service - ok
09:15:09.0752 0x0420  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\WINDOWS\system32\drivers\disk.sys
09:15:09.0755 0x0420  disk - ok
09:15:09.0848 0x0420  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc           C:\WINDOWS\System32\drivers\dmvsc.sys
09:15:09.0850 0x0420  dmvsc - ok
09:15:09.0898 0x0420  [ 5BAF7714E68F93515A937A3FA8587EF9, DD9296F75341EF96D514139DD8A8680B332E9B9D476368AB897FDA2D5D674E60 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
09:15:09.0911 0x0420  Dnscache - ok
09:15:09.0930 0x0420  [ 50288EA079BB520C2B8C8A154202D518, 8916A9180CA009D124FFDFB4CCF5FDFEF7FA2FD37CBCD49FAD4C68E051B4734D ] dot3svc         C:\WINDOWS\System32\dot3svc.dll
09:15:09.0938 0x0420  dot3svc - ok
09:15:09.0956 0x0420  [ 281BEE07BA97E3E98D12A822D923D0D8, 6EB482B2D4D6048D145C3738B2B6FA27A90B5EA53E9167447820F9981B004E63 ] DPS             C:\WINDOWS\system32\dps.dll
09:15:09.0962 0x0420  DPS - ok
09:15:09.0978 0x0420  [ DDC11A202207C0400CBE07315B8FDE5E, 3ED0CA3A714582D92001BA3BFF78BE082F4DC8021298D5A2632F3B2B0A1C09DC ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
09:15:09.0979 0x0420  drmkaud - ok
09:15:10.0031 0x0420  [ 5B074F14F5DD6418F46EE4CA2DEB7EA8, B8223D73C3DE123759101F7D5D45C60BD12B221F09D349575A1044CE3F43CBC5 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
09:15:10.0037 0x0420  DsmSvc - ok
09:15:10.0064 0x0420  [ C9914A74045A6D23DB7252FA3985DE25, 0CB2655DDE564810B4F1449B0CB1C2AD18544197F7D061447399BBA98A40D3DF ] dtscsibus       C:\WINDOWS\system32\DRIVERS\dtscsibus.sys
09:15:10.0066 0x0420  dtscsibus - ok
09:15:10.0112 0x0420  [ 46571ED73AE84469DCA53081D33CF3C8, 8BB386BB4F6AD39F06A8607CD1DF3D67CFA45BBE52E40EDB90EB8C862283EBFF ] dtsoftbus01     C:\WINDOWS\System32\drivers\dtsoftbus01.sys
09:15:10.0120 0x0420  dtsoftbus01 - ok
09:15:10.0219 0x0420  [ A3D1CB64DF885ACE126543E6D7067348, AFB5EF73F7B2854669137F586171500E4EB00F12BFCFD6B743FABD165B4AEED3 ] DXGKrnl         C:\WINDOWS\System32\drivers\dxgkrnl.sys
09:15:10.0246 0x0420  DXGKrnl - ok
09:15:10.0286 0x0420  [ 6073537F250B45E1CB2A02E97F0FE1B2, 653F3F2F2019168EDF225944A88AFDBF8393B62AA076BD19980691778F3DB67D ] Eaphost         C:\WINDOWS\System32\eapsvc.dll
09:15:10.0289 0x0420  Eaphost - ok
09:15:10.0428 0x0420  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv           C:\WINDOWS\system32\drivers\evbda.sys
09:15:10.0485 0x0420  ebdrv - ok
09:15:10.0529 0x0420  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] EFS             C:\WINDOWS\System32\lsass.exe
09:15:10.0531 0x0420  EFS - ok
09:15:10.0573 0x0420  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass     C:\WINDOWS\system32\drivers\EhStorClass.sys
09:15:10.0578 0x0420  EhStorClass - ok
09:15:10.0643 0x0420  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
09:15:10.0649 0x0420  EhStorTcgDrv - ok
09:15:10.0698 0x0420  [ A05FC7ECA0966EBB70E4D17B855A853B, 16A0C8138A3BBD8BE2658261131F9777940CFB1431018A10710E5C1A88AB70EA ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
09:15:10.0701 0x0420  ElbyCDIO - ok
09:15:10.0743 0x0420  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
09:15:10.0745 0x0420  ErrDev - ok
09:15:10.0807 0x0420  [ 030CE75B7D8F75FAA7BA1EC6FD0EB5A3, 5264734F0572FAEDCCB008221C9982CCB7922C4FFC358605424EA413CDCDAE99 ] EventSystem     C:\WINDOWS\system32\es.dll
09:15:10.0818 0x0420  EventSystem - ok
09:15:10.0965 0x0420  [ E67E289FA8AA393223AD7F9AFB738FD6, DBAB42EE5C140024CB4FF669664885B5CB404054A430331B5ABF273598A881C0 ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe
09:15:10.0980 0x0420  EvtEng - ok
09:15:11.0028 0x0420  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat           C:\WINDOWS\system32\drivers\exfat.sys
09:15:11.0037 0x0420  exfat - ok
09:15:11.0114 0x0420  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat         C:\WINDOWS\system32\drivers\fastfat.sys
09:15:11.0123 0x0420  fastfat - ok
09:15:11.0200 0x0420  [ 2BC8532ABF2B3756B78FA1DA54147DDE, DF65EE2AB0255A2CF3221085A6BE7C37E3DB6BFEED3BCADCDD69BB1049F6DCB1 ] Fax             C:\WINDOWS\system32\fxssvc.exe
09:15:11.0216 0x0420  Fax - ok
09:15:11.0234 0x0420  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc             C:\WINDOWS\System32\drivers\fdc.sys
09:15:11.0237 0x0420  fdc - ok
09:15:11.0282 0x0420  [ DC1A78BCCCB7EE53D6FD3BD615A8E222, EE16B6853185AAE779D7135035983938009901658F76A8856AAC12EBA15BB34E ] fdPHost         C:\WINDOWS\system32\fdPHost.dll
09:15:11.0284 0x0420  fdPHost - ok
09:15:11.0299 0x0420  [ E5AD448F2DC84B1CF387FA7F2A3D1936, BBB29C79A085C503F5EFFB5144596D5DEC48A4EB34A049A4E7B38B27F6D92E0A ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
09:15:11.0301 0x0420  FDResPub - ok
09:15:11.0323 0x0420  [ 0046E0BD031213D37123876B0D0FA61C, A4FE17D56F0BAFB70D0D421ED9D1B6E50AF8ADAA4B59328A41AEC5B4C068A3CB ] fhsvc           C:\WINDOWS\system32\fhsvc.dll
09:15:11.0326 0x0420  fhsvc - ok
09:15:11.0360 0x0420  [ 957A7A8F5ACCAF23DD9DFF6DAA393CE5, 85D1AC25CF8056FF303930A7E18DE5F7C3AEE429272CB791BD6F81F1DAFB7D8A ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
09:15:11.0362 0x0420  FileInfo - ok
09:15:11.0432 0x0420  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace       C:\WINDOWS\system32\drivers\filetrace.sys
09:15:11.0433 0x0420  Filetrace - ok
09:15:11.0448 0x0420  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
09:15:11.0449 0x0420  flpydisk - ok
09:15:11.0476 0x0420  [ 60D5067FCE6D9433D35E04C01D8538B3, 2D97E9E8FF18CF564DE8E70F68B56F0177DC6C0E9EEB7E1C58BBDF42456CB0D8 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
09:15:11.0483 0x0420  FltMgr - ok
09:15:11.0557 0x0420  [ 183CA7699474FDE235853967D1DA4D9B, 8FBD5997F1E39AFFD8C4322520DF4D2227279B5149017D825C188D7411BA99AF ] FontCache       C:\WINDOWS\system32\FntCache.dll
09:15:11.0581 0x0420  FontCache - ok
09:15:11.0770 0x0420  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
09:15:11.0774 0x0420  FontCache3.0.0.0 - ok
09:15:11.0819 0x0420  [ 35005534E600E993A90B036E4E599F2B, DA56FA3776FBD3D50276CB7410E0CB6F137DD8FCA84C0F3FEF8B1FEA5F6CA592 ] FsDepends       C:\WINDOWS\system32\drivers\FsDepends.sys
09:15:11.0823 0x0420  FsDepends - ok
09:15:11.0839 0x0420  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:15:11.0842 0x0420  Fs_Rec - ok
09:15:11.0944 0x0420  [ 83E1F0983B02A6F8EC764D18E24ECF10, B5CA3FCB442697681C513FB37C6BB74D7A72B67DC65E2FCA93A7F9E81B63EAAC ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
09:15:11.0959 0x0420  fvevol - ok
09:15:11.0977 0x0420  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM           C:\WINDOWS\System32\drivers\fxppm.sys
09:15:11.0978 0x0420  FxPPM - ok
09:15:11.0992 0x0420  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
09:15:11.0994 0x0420  gagp30kx - ok
09:15:12.0012 0x0420  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
09:15:12.0013 0x0420  gencounter - ok
09:15:12.0055 0x0420  [ FDA72810CA2F8409D9B31E833C448E34, FC24350E875D2AF2A41DB5EF0BFE4F876DADEACCC0B34B9B9C9B2CA185CBAE87 ] GPIOClx0101     C:\WINDOWS\system32\Drivers\msgpioclx.sys
09:15:12.0064 0x0420  GPIOClx0101 - ok
09:15:12.0220 0x0420  [ 0BDE0FCF597E9B65600121EF54FF8340, DA5C96E84E05AD09251C82B4BFEDE274342409803730CEBF24EEAD0DCD42DA7E ] gpsvc           C:\WINDOWS\System32\gpsvc.dll
09:15:12.0245 0x0420  gpsvc - ok
09:15:12.0323 0x0420  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:15:12.0328 0x0420  gupdate - ok
09:15:12.0337 0x0420  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
09:15:12.0341 0x0420  gupdatem - ok
09:15:12.0385 0x0420  [ 03909BDBFF0DCACCABF2B2D4ADEE44DC, 42E631B23BB004F5C2128BAD334C21AB20FAD08AFED9E8191AE9373531BC73DD ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
09:15:12.0389 0x0420  HDAudBus - ok
09:15:12.0411 0x0420  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt         C:\WINDOWS\System32\drivers\HidBatt.sys
09:15:12.0413 0x0420  HidBatt - ok
09:15:12.0434 0x0420  [ 1EA1B4FABB8CC348E73CA90DBA22E104, 5C18C6BD499272F216DD4626B5E8D38181AEAC9AD917FBEB614A75B70467B258 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
09:15:12.0440 0x0420  HidBth - ok
09:15:12.0497 0x0420  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
09:15:12.0501 0x0420  hidi2c - ok
09:15:12.0541 0x0420  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr           C:\WINDOWS\System32\drivers\hidir.sys
09:15:12.0545 0x0420  HidIr - ok
09:15:12.0584 0x0420  [ 449A20A674AA3FAA7F0DD4E33EE2DC20, 28B9BDA306456E8640C355718DE3477537B0FAF8C37F633C709129AAB64D9873 ] hidserv         C:\WINDOWS\system32\hidserv.dll
09:15:12.0589 0x0420  hidserv - ok
09:15:12.0634 0x0420  [ F31397220D9687E11EB448649AA6E038, 671ACEAA8E00E0D4ED7E33D06A4558121DA4F56EB94F1CBC16FEB2EF3852F7A5 ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
09:15:12.0637 0x0420  HidUsb - ok
09:15:12.0680 0x0420  [ 7BF3ADCBD021D4F4A84CF40EB49C71B5, 5758A51FD2EBE67E6DBE3A298D714D351910F9E01C428D0C1359457C9242B298 ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
09:15:12.0687 0x0420  hkmsvc - ok
09:15:12.0724 0x0420  [ 6CD9C3819BE8C0A3DACC82AE5D3C4F18, 46BF4A968E506DE17CA401401D716B444CDC10A5C60EB081890DD4B886AEDF5F ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
09:15:12.0735 0x0420  HomeGroupListener - ok
09:15:12.0791 0x0420  [ BE5F89BAFBD4272D5A0C0A37B97865ED, 2F80CE6D123FEED9FA7B00ACF7547FF77E0E6FDC5243942E83BE308C46D414C6 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
09:15:12.0805 0x0420  HomeGroupProvider - ok
09:15:12.0931 0x0420  [ 0D0213498683414DDE29B1686A4C08D5, E9B64406C04B6E55CBD17E7C47B023CEA11FEE07B791154129D6F4F29D15AB7F ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
09:15:12.0940 0x0420  hpqcxs08 - ok
09:15:13.0021 0x0420  [ EE281DD6843F3F697C1AD7933EEB1E9B, 1ECE31C2150B92DDC1DCBBCECFE3E979F2C60B3F106280E3167BEC0269BF7A41 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
09:15:13.0027 0x0420  hpqddsvc - ok
09:15:13.0069 0x0420  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
09:15:13.0072 0x0420  HpSAMD - ok
09:15:13.0143 0x0420  [ C995EA1C6915D897E06D41AF95B9312C, 65DE6599F1C735BBDCCE4728F7F98167BCA0BF1B8D4218BBF7546B025C9A38BD ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
09:15:13.0163 0x0420  HPSLPSVC - ok
09:15:13.0201 0x0420  [ 88C43BDA9CF964600F6DF07F7C52452C, BBCA3204A6CAA095AE5FB2D07019632DE45B201532077B7BE5AAA2884D9056DD ] HssDRV6         C:\WINDOWS\system32\DRIVERS\hssdrv6.sys
09:15:13.0202 0x0420  HssDRV6 - ok
09:15:13.0272 0x0420  [ 3502776E366C913D49C0DA928AE3E6CB, 3FB452F640B78AEDFBC09188F25C566949660163732A180331226A93DB08F26C ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
09:15:13.0290 0x0420  HTTP - ok
09:15:13.0334 0x0420  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
09:15:13.0337 0x0420  hwpolicy - ok
09:15:13.0420 0x0420  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
09:15:13.0422 0x0420  hyperkbd - ok
09:15:13.0440 0x0420  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
09:15:13.0443 0x0420  HyperVideo - ok
09:15:13.0467 0x0420  [ 84CFC5EFA97D0C965EDE1D56F116A541, 0155EA62BF07D99D98D1C9B6559C8E3301B016A20D03DF1EF64B2FAB8C37403B ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
09:15:13.0471 0x0420  i8042prt - ok
09:15:13.0489 0x0420  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
09:15:13.0490 0x0420  iaLPSSi_GPIO - ok
09:15:13.0503 0x0420  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C     C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
09:15:13.0506 0x0420  iaLPSSi_I2C - ok
09:15:13.0628 0x0420  [ 6C024B3AE192D72B216166802AF345DD, 67AEDBEF4A1C1EE1DA9B684BDEB3DB07715E12B766AA72B6684CC6C583A8DCC5 ] iaStorA         C:\WINDOWS\system32\drivers\iaStorA.sys
09:15:13.0639 0x0420  iaStorA - ok
09:15:13.0683 0x0420  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
09:15:13.0695 0x0420  iaStorAV - ok
09:15:13.0772 0x0420  [ 7F7A03D03FA18A0DB2DAC37A8D620E7F, B867A6B38EB81B6FE2501441D4CB69A2488A1F13BA558AB2B728A7507AB1BAC3 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
09:15:13.0774 0x0420  IAStorDataMgrSvc - ok
09:15:13.0881 0x0420  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV         C:\WINDOWS\system32\drivers\iaStorV.sys
09:15:13.0891 0x0420  iaStorV - ok
09:15:13.0894 0x0420  IEEtwCollectorService - ok
09:15:14.0085 0x0420  [ 0AECABC08F9AB4E504935B7662123B6E, 79D1C801A8FB0920469D6088158C518481485A065E8AF2E580FE4FCC1DE8F39B ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
09:15:14.0246 0x0420  igfx - ok
09:15:14.0344 0x0420  [ B82255670D270B75D2D2F0F8747D1443, C40E151AC3FBF289456A4AD9E5744B314067ADA03FE729970410931904305F51 ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
09:15:14.0366 0x0420  IKEEXT - ok
09:15:14.0431 0x0420  [ F0F581A2299CB2BAB1DF2597BCDDB80F, EE485AF3049C87666BC6D6BFFC8A0EB4B95831D9061EB81848ECEE29C4232BF4 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
09:15:14.0434 0x0420  intaud_WaveExtensible - ok
09:15:14.0585 0x0420  [ F1A3ECE3809AF333810ED0A872200226, BF1CC3EE64A9BDE41A5139A56016DE79DB87212D130B6024A03206CFCF65AC72 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
09:15:14.0692 0x0420  IntcAzAudAddService - ok
09:15:14.0750 0x0420  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
09:15:14.0820 0x0420  IntcDAud - ok
09:15:14.0892 0x0420  [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
09:15:14.0905 0x0420  Intel(R) Capability Licensing Service Interface - ok
09:15:14.0972 0x0420  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
09:15:14.0975 0x0420  intelide - ok
09:15:15.0020 0x0420  [ 139CFCDCD36B1B1782FD8C0014AC9B0E, E0D7E0E9B46A8CECE138D689820023BFA650FB689E4FD62855BED37E04F2D9FF ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
09:15:15.0021 0x0420  intelpep - ok
09:15:15.0029 0x0420  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
09:15:15.0032 0x0420  intelppm - ok
09:15:15.0092 0x0420  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:15:15.0097 0x0420  IpFilterDriver - ok
09:15:15.0185 0x0420  [ DFC4050D58565ADBEE793A8D4AEBDAE6, 89B900408F030CD45753A11D6AE6CBAB87E8B0E3F8401402D2D8713C045BF488 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
09:15:15.0204 0x0420  iphlpsvc - ok
09:15:15.0241 0x0420  [ 9949A3C7590B8C536C05312205079A82, 9276A09D5F910AE8358A96505AB3F66C514870944D58B63B71D5E96567D1E6BB ] IPMIDRV         C:\WINDOWS\System32\drivers\IPMIDrv.sys
09:15:15.0243 0x0420  IPMIDRV - ok
09:15:15.0293 0x0420  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT           C:\WINDOWS\system32\drivers\ipnat.sys
09:15:15.0300 0x0420  IPNAT - ok
09:15:15.0344 0x0420  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
09:15:15.0347 0x0420  IRENUM - ok
09:15:15.0364 0x0420  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
09:15:15.0367 0x0420  isapnp - ok
09:15:15.0419 0x0420  [ 034D4BD9DC67C64F3A4C8A049B5173BF, C68AF5A5AD4092AA1C871BD38473AEF84EC3ECF4D06FBEB5F6C09972EF1B8A81 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
09:15:15.0435 0x0420  iScsiPrt - ok
09:15:15.0506 0x0420  [ C2BC9AC9C6514230A481BDCA6A24BEFD, 84E41675D11EF2EEECED23C8469503C8D12810A2C6B6743D7AA322EB6DF7E68D ] iwdbus          C:\WINDOWS\System32\drivers\iwdbus.sys
09:15:15.0509 0x0420  iwdbus - ok
09:15:15.0570 0x0420  [ 78ABBE558F57144047F10A0F50FE4B2F, 6BE608F7697D83FD6C7E6EA422AC5637933BDC96B1044C12DE9A419CE7D6F6CE ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
09:15:15.0573 0x0420  jhi_service - ok
09:15:15.0617 0x0420  [ 38515AF94AC56161F24AEE3F3681EC69, 20115363EA040641C04C75B6890A7CCDE9A65F57EB437BE28DF7AD5200EC4608 ] JMCR            C:\WINDOWS\System32\drivers\jmcr.sys
09:15:15.0625 0x0420  JMCR - ok
09:15:15.0736 0x0420  [ 8BE92376799B6B44D543E8D07CDCF885, 425B8BB1BAF62F735B3CB5A002E6055879F02E7207E55942BFD37F1784F5F368 ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
09:15:15.0742 0x0420  kbdclass - ok
09:15:15.0772 0x0420  [ FB6E47E569D4872ABEB506BE03A45FBA, 5C4056CADA8F67587A119D9AE2A0EFAB30387CF6298F4019FF68AC92E2F6F54B ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
09:15:15.0776 0x0420  kbdhid - ok
09:15:15.0793 0x0420  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic           C:\WINDOWS\system32\DRIVERS\kdnic.sys
09:15:15.0795 0x0420  kdnic - ok
09:15:15.0811 0x0420  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] KeyIso          C:\WINDOWS\system32\lsass.exe
09:15:15.0816 0x0420  KeyIso - ok
09:15:15.0866 0x0420  [ ADDECBCC777665BD113BED437E602AB0, B6283475A1219CE44E9F683DD3BEB8C42DA0943297E5C4699B22176AD8A6A7ED ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
09:15:15.0873 0x0420  KSecDD - ok
09:15:15.0905 0x0420  [ 7296EA420134EAC390798B3232D066A4, 1F5D51EEFD389706660DFB4DB4BF3EC570BEC7097CEB5CAE70EFFE35C3255346 ] KSecPkg         C:\WINDOWS\system32\Drivers\ksecpkg.sys
09:15:15.0911 0x0420  KSecPkg - ok
09:15:15.0931 0x0420  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk         C:\WINDOWS\system32\drivers\ksthunk.sys
09:15:15.0932 0x0420  ksthunk - ok
09:15:15.0991 0x0420  [ 32B1A8351160F307A8C66BCB0F94A9C2, 52F1DEC2BBD4D5DDBB85ED20B99D96BBA7EB83304D76F183A11FDAFDA364E873 ] KtmRm           C:\WINDOWS\system32\msdtckrm.dll
09:15:16.0005 0x0420  KtmRm - ok
09:15:16.0025 0x0420  [ 50AECF8C21AB2A6428A6E1E10549D8E5, 6BC7C60CF5E8AFB9972619EE1C78357756E9C0A3EC783C3056CEB600DCBB1555 ] L1C             C:\WINDOWS\system32\DRIVERS\L1C63x64.sys
09:15:16.0029 0x0420  L1C - ok
09:15:16.0075 0x0420  [ 27B58E16CF895AC1F1A97C04814C2239, D4336155331DDBF91952CDC6C446C68FF524F979099BA8D9B3A578758F97B2BE ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
09:15:16.0086 0x0420  LanmanServer - ok
09:15:16.0162 0x0420  [ D0D9C2ECA4D03A8F06DCD91236B90C98, E2D1144DC8040EA5FEB0602A20BA4CB920B4BC86AD5AD05FC0DF7D74DC95DC66 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
09:15:16.0178 0x0420  LanmanWorkstation - ok
09:15:16.0259 0x0420  [ EE289BD147FDFF95EF1B9BD65D3B974A, EFD9D0F6C73E7D2D52DBE2E2A8D3009BFB6AB24776A100CA528A8365002C6105 ] lfsvc           C:\WINDOWS\System32\GeofenceMonitorService.dll
09:15:16.0275 0x0420  lfsvc - ok
09:15:16.0314 0x0420  [ BE166935083F9C38EDFDC21B9A7A679B, 89C64DBE58E1B974208AAAA5CC757C599B1439C205C3C48BF16BA054A06DBC94 ] LHDmgr          C:\WINDOWS\system32\DRIVERS\LhdX64.sys
09:15:16.0316 0x0420  LHDmgr - ok
09:15:16.0325 0x0420  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
09:15:16.0326 0x0420  lltdio - ok
09:15:16.0436 0x0420  [ 00E070FC0C673311AFD4B068D1242780, 50B0E0E625361145332C849709498FF444E46578DCAD2536E6D0289E0125580F ] lltdsvc         C:\WINDOWS\System32\lltdsvc.dll
09:15:16.0449 0x0420  lltdsvc - ok
09:15:16.0498 0x0420  [ D113FAD71A5E67AA94B32A0F8828D265, 08DDB4BBDB570C59926DBF5E27FCF46DCDF8B8212BB9251E97837E0504516FB3 ] lmhosts         C:\WINDOWS\System32\lmhsvc.dll
09:15:16.0504 0x0420  lmhosts - ok
09:15:16.0588 0x0420  [ 2C24DC448DBE8DB9BE1441B824C57E79, DA2257EEC964A47D03C2BB13317FD788E51D4685E2395B303ED7B2575FEF3B19 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
09:15:16.0592 0x0420  LMS - ok
09:15:16.0640 0x0420  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS         C:\WINDOWS\system32\drivers\lsi_sas.sys
09:15:16.0647 0x0420  LSI_SAS - ok
09:15:16.0665 0x0420  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
09:15:16.0673 0x0420  LSI_SAS2 - ok
09:15:16.0727 0x0420  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\WINDOWS\system32\drivers\lsi_sas3.sys
09:15:16.0732 0x0420  LSI_SAS3 - ok
09:15:16.0754 0x0420  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS         C:\WINDOWS\system32\drivers\lsi_sss.sys
09:15:16.0761 0x0420  LSI_SSS - ok
09:15:16.0838 0x0420  [ B6B69FF200F68888A7FAFDF204D00C91, 4C9BA7B8646C74AE1E49F513EF426930C09969F29F1533D84D020B414BB1609B ] LSM             C:\WINDOWS\System32\lsm.dll
09:15:16.0853 0x0420  LSM - ok
09:15:16.0900 0x0420  [ 5EF604B0698F4FA962778285E8C5F1F2, 0465BDAB7EFBE9CC648E7E736B0B8BE152BD2FAB0917F6306675B9039C77F454 ] luafv           C:\WINDOWS\system32\drivers\luafv.sys
09:15:16.0906 0x0420  luafv - ok
09:15:16.0933 0x0420  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas         C:\WINDOWS\system32\drivers\megasas.sys
09:15:16.0938 0x0420  megasas - ok
09:15:17.0036 0x0420  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
09:15:17.0054 0x0420  megasr - ok
09:15:17.0082 0x0420  [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\WINDOWS\System32\drivers\HECIx64.sys
09:15:17.0084 0x0420  MEIx64 - ok
09:15:17.0148 0x0420  Microsoft SharePoint Workspace Audit Service - ok
09:15:17.0250 0x0420  [ FD788C2D96EA91469A3C1D13E80D7473, 7B14D4BFDE18CECC19FBFFAA5AFF5FD78BFB7FCDA6613990740A8A7DD9873D26 ] MMCSS           C:\WINDOWS\system32\mmcss.dll
09:15:17.0257 0x0420  MMCSS - ok
09:15:17.0272 0x0420  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem           C:\WINDOWS\system32\drivers\modem.sys
09:15:17.0274 0x0420  Modem - ok
09:15:17.0323 0x0420  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor         C:\WINDOWS\System32\drivers\monitor.sys
09:15:17.0326 0x0420  monitor - ok
09:15:17.0348 0x0420  [ CEAC6D40FE887CE8406C2393CF97DE06, 34E76908B802764FF0D7AB3AF89BE77BD35B44787983343FAD89891891C0A045 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
09:15:17.0351 0x0420  mouclass - ok
09:15:17.0390 0x0420  [ 02D98BF804084E9A0D69D1C69B02CCA9, EC5BC5D87043DFFD035FD4DD27B3D94E03119063519E4151BCC3522B613E2D7F ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
09:15:17.0393 0x0420  mouhid - ok
09:15:17.0409 0x0420  [ 515549560D481138E6E21AF7C6998E56, C7E4B38D8CCAF15B9BDA63C8C8209F6193AD220DA02E1264F1B687AACD8F409F ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
09:15:17.0414 0x0420  mountmgr - ok
09:15:17.0465 0x0420  [ 338037EFA0E8E8699B2667D57B751574, 59E0D39806D0C4EB57913AA013242837FD39AD378726AEE42D250CBA87C1C3BF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
09:15:17.0471 0x0420  MozillaMaintenance - ok
09:15:17.0613 0x0420  MpKslce7cc813 - ok
09:15:17.0624 0x0420  [ F170510BE94CF45E3C6274578F6204B2, 344C3DDE1D622607CA2ABECB2C47CB0166D2D258BD94A7960C45A5ADBB640566 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
09:15:17.0626 0x0420  mpsdrv - ok
09:15:17.0715 0x0420  [ D186C5844393252147BE934F3871DB7A, 30160F8268B9F46E82C5CB536867E0CF280DC98074A481595072E3320200E343 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
09:15:17.0737 0x0420  MpsSvc - ok
09:15:17.0762 0x0420  [ 59DCEC7499095DE5AED741358037AE2D, 60C4CEBCAE27C121E9D63BD2BC3E5863A91ABC77616C56C10618273A8F9B6F61 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
09:15:17.0766 0x0420  MRxDAV - ok
09:15:17.0809 0x0420  [ 79B6F3DF7CDFD12159871FF71464F0CE, E01CDD5296237FB60D426784E1142B1AF2CEABDD7CB0B43C4798402C812A94D5 ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:15:17.0818 0x0420  mrxsmb - ok
09:15:17.0840 0x0420  [ 295771B092D4F7FCF2B62F80CCD14320, 53655B5ABA43A6A9114FE545B88F84E52319B905B8393A51BD97678D3F94A178 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
09:15:17.0846 0x0420  mrxsmb10 - ok
09:15:17.0886 0x0420  [ AAF56E4E84D35411B4E446C445732DFE, 7AC41CAA0842AE4DA4EEF976202C58D7923DAA367F0D7E800D432323D5E7DE1A ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
09:15:17.0890 0x0420  mrxsmb20 - ok
09:15:17.0913 0x0420  [ 4E888019078AC363076A5433E89AA4F8, 3DEBDA290230B3E83F956C902C960E39463B7EFE86439199521356762769FD91 ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
09:15:17.0916 0x0420  MsBridge - ok
09:15:17.0958 0x0420  [ A082C17D14D0790E27D064EA4B138AE1, 9A565ED885782D9D5135C8399C11C356DBF9EBF3B8EB4B4504BD2604AD0B45E6 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
09:15:17.0966 0x0420  MSDTC - ok
09:15:18.0015 0x0420  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
09:15:18.0018 0x0420  Msfs - ok
09:15:18.0039 0x0420  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32     C:\WINDOWS\System32\drivers\msgpiowin32.sys
09:15:18.0043 0x0420  msgpiowin32 - ok
09:15:18.0062 0x0420  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf       C:\WINDOWS\System32\drivers\mshidkmdf.sys
09:15:18.0064 0x0420  mshidkmdf - ok
09:15:18.0082 0x0420  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf       C:\WINDOWS\System32\drivers\mshidumdf.sys
09:15:18.0084 0x0420  mshidumdf - ok
09:15:18.0124 0x0420  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
09:15:18.0126 0x0420  msisadrv - ok
09:15:18.0227 0x0420  [ 810F8A0A0680662BB0CE44D0E2CEF90C, 5631B07911B7EF378CB1583A480A3C5715E59A5488B33A528F4D7A2F849B9113 ] MSiSCSI         C:\WINDOWS\system32\iscsiexe.dll
09:15:18.0234 0x0420  MSiSCSI - ok
09:15:18.0238 0x0420  msiserver - ok
09:15:18.0253 0x0420  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:15:18.0254 0x0420  MSKSSRV - ok
09:15:18.0265 0x0420  [ 375E44168F2DFB91A68B8A3F619C5A7C, AC243E02E9A39D0B4DE9571F196941700EE6EB5E94F5B0BA8994FB551E73A7A8 ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
09:15:18.0267 0x0420  MsLldp - ok
09:15:18.0280 0x0420  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:15:18.0280 0x0420  MSPCLOCK - ok
09:15:18.0317 0x0420  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
09:15:18.0319 0x0420  MSPQM - ok
09:15:18.0367 0x0420  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC           C:\WINDOWS\system32\drivers\MsRPC.sys
09:15:18.0382 0x0420  MsRPC - ok
09:15:18.0434 0x0420  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
09:15:18.0550 0x0420  mssmbios - ok
09:15:18.0570 0x0420  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
09:15:18.0572 0x0420  MSTEE - ok
09:15:18.0587 0x0420  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
09:15:18.0589 0x0420  MTConfig - ok
09:15:18.0614 0x0420  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup             C:\WINDOWS\system32\Drivers\mup.sys
09:15:18.0619 0x0420  Mup - ok
09:15:18.0643 0x0420  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
09:15:18.0645 0x0420  mvumis - ok
09:15:18.0737 0x0420  [ 431F065E2A99FC3C670BD20694117C8B, ADE1D6B5EC0C0F078DB5F24FE4E830AC08FA1EDA1C895E7F4873874BCC1F2154 ] MyWiFiDHCPDNS   C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
09:15:18.0749 0x0420  MyWiFiDHCPDNS - ok
09:15:18.0822 0x0420  [ 41A45D2A75494EABF2806EA051E00376, EB2497561C8E33A4297C044604C717FF854C7F046882A9E4A400AE7679BF5467 ] napagent        C:\WINDOWS\system32\qagentRT.dll
09:15:18.0968 0x0420  napagent - ok
09:15:19.0057 0x0420  [ CF8B989D89D6807B887690F2CF24EFD9, 7A3ED124D8D7736F57CD687111C478A206422D117099B2F752B6D933D009BCAC ] NativeWifiP     C:\WINDOWS\system32\DRIVERS\nwifi.sys
09:15:19.0070 0x0420  NativeWifiP - ok
09:15:19.0112 0x0420  [ 71E3C0100AA19D11373CCEB2F51A6008, 58FBF35F5FE19BEABE483C11E9996BE93D76721C8C34465350FA98B465CA3672 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
09:15:19.0119 0x0420  NcaSvc - ok
09:15:19.0143 0x0420  [ 51DF09CAB2CAC64FEE3E371D9028ED01, 9B81604D0D0359AF8F54FED6DA7116FFD2F40407895028EAD99FF1D7CFDC2D14 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
09:15:19.0149 0x0420  NcbService - ok
09:15:19.0168 0x0420  [ 2586C4C167499210DCBF3ECFD8CCE210, D8129FEDE9918BF4FB0057CC58700D4E08457060E810B9CC25CA0F598506ADB8 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
09:15:19.0173 0x0420  NcdAutoSetup - ok
09:15:19.0259 0x0420  [ ED39D676080A1AEA755F1DEC1A8DF1A4, E413DA1113A51F3A68957147A50248AA98C0D365103D137D5AE8638C74E802D7 ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
09:15:19.0281 0x0420  NDIS - ok
09:15:19.0327 0x0420  [ C6BB12BC35D1637CA17AE16D3A4725EB, 01C1D9FA738886A195166F88207EEB6715A1DE0608978ED6C5DC738AF5C02513 ] NdisCap         C:\WINDOWS\system32\DRIVERS\ndiscap.sys
09:15:19.0329 0x0420  NdisCap - ok
09:15:19.0410 0x0420  [ 9F1DA20E943BE7AA4ED5F3E1EBA78B37, CCD99962917BBE256F64AE14CCC9FD12433C72B5DB98E0E57CA8F212A11B3C8F ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
09:15:19.0416 0x0420  NdisImPlatform - ok
09:15:19.0465 0x0420  [ 9423421E735BD5394351E0C47C76BB92, 763E5D06F896C0EF8AD52515464F28BA85DB7A1560E451857AC9AA68FAFCBC66 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:15:19.0468 0x0420  NdisTapi - ok
09:15:19.0495 0x0420  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:15:19.0498 0x0420  Ndisuio - ok
09:15:19.0519 0x0420  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
09:15:19.0521 0x0420  NdisVirtualBus - ok
09:15:19.0569 0x0420  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:15:19.0579 0x0420  NdisWan - ok
09:15:19.0593 0x0420  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy   C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:15:19.0601 0x0420  NdisWanLegacy - ok
09:15:19.0619 0x0420  [ A5BD69A8812FA79D1A487691DD3FB244, 67B5EDE101943E0E8B8041DB2353D20C8B9F2D253E77964761CFE8F136C0BBC7 ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
09:15:19.0621 0x0420  NDProxy - ok
09:15:19.0704 0x0420  [ 5A072F0B90C29C5233D78BE33EF5ED78, B32ED76A674B1FC743361FB7BBD4C915A78B14132AB056AADD445D5995AD4F32 ] Ndu             C:\WINDOWS\system32\drivers\Ndu.sys
09:15:19.0707 0x0420  Ndu - ok
09:15:19.0749 0x0420  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\System32\HPZinw12.dll
09:15:19.0755 0x0420  Net Driver HPZ12 - ok
09:15:19.0773 0x0420  [ A83D67D347A684F10B7D3019C8A6380C, 2B86832967981C8C786BF24C1CF8E13E01745ACE3333CF5C821DD93D623B96E4 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
09:15:19.0777 0x0420  NetBIOS - ok
09:15:19.0822 0x0420  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
09:15:19.0834 0x0420  NetBT - ok
09:15:19.0847 0x0420  [ F6F209DDB94959BA104FC8FC87C53759, 8E862D41F4332EABF64BD034E2C0E3CC8109C7990CB4112C2B2880E8E6EDF2D3 ] Netlogon        C:\WINDOWS\system32\lsass.exe
09:15:19.0849 0x0420  Netlogon - ok
09:15:19.0894 0x0420  [ B7AD851A21FEBA3BA214972627614207, 29605320CCC3DAAD062CAECF0009DACBC2F6D28ED4E8AF7CE76132129F5572A0 ] Netman          C:\WINDOWS\System32\netman.dll
09:15:19.0901 0x0420  Netman - ok
09:15:19.0961 0x0420  [ F0F0A372C2EF6358399C4936F91B6131, CE596C71EB4D1A5E104D3148F2D0D8789882C59FD198DCF33CCAC7A08B50E4EE ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
09:15:19.0973 0x0420  netprofm - ok
09:15:20.0021 0x0420  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
09:15:20.0137 0x0420  NetTcpPortSharing - ok
09:15:20.0179 0x0420  [ 70414DB660BFBB7BD58FCE8EA4364E1B, 6DFB3897CD55E22BA1EDF0AE672F4D7A6A1F512F8A0A26AF106765E6B1CF65AC ] netvsc          C:\WINDOWS\system32\DRIVERS\netvsc63.sys
09:15:20.0184 0x0420  netvsc - ok
09:15:20.0333 0x0420  [ 3483D44E1B24F17E622870801403AD13, EF9C5290777A4E277D47C87A174FF9441BE23CAD2F456D35B808463041F4675C ] NETwNe64        C:\WINDOWS\system32\DRIVERS\NETwew00.sys
09:15:20.0390 0x0420  NETwNe64 - ok
09:15:20.0535 0x0420  [ 8CE7F624D791733E8CECFA443B2DF513, 0401C55596FA5A867C5F3833ABC3B90D493F5F83E541FFBC2D312BF0AF8536AB ] NitroDriverReadSpool2 C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
09:15:20.0544 0x0420  NitroDriverReadSpool2 - ok
09:15:20.0593 0x0420  [ 3A280F3B3C7A46E29C404ACD46ECBF5E, 81C3367A2A212DBCC65B8A0166FD092E3205AB31A146B4B737061335CEC51F9D ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
09:15:20.0606 0x0420  NlaSvc - ok
09:15:20.0778 0x0420  [ AAAE3B793B248A3DF86C65928484AB9A, ECB9E33C1BEAAA59A77001661A313C6819362F3B047819D00D5E3D863591D1C0 ] nlsX86cc        C:\windows\SysWOW64\NLSSRV32.EXE
09:15:20.0780 0x0420  nlsX86cc - ok
09:15:20.0828 0x0420  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
09:15:20.0831 0x0420  Npfs - ok
09:15:20.0871 0x0420  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig       C:\WINDOWS\System32\drivers\npsvctrig.sys
09:15:20.0873 0x0420  npsvctrig - ok
09:15:20.0884 0x0420  [ 6E2271ED0C3E95B8E29F3752B91B9E84, 44026AD9757EA82967D7F7578455802FAD7FE0057EAC088E0AE207C15F594B86 ] nsi             C:\WINDOWS\system32\nsisvc.dll
09:15:20.0890 0x0420  nsi - ok
09:15:20.0965 0x0420  [ E490B459978CB87779E84C761D22B827, 1E5CA38626E41618E4CA16DD0C70EB2FA86E986F0CF21A749BDE2A17015DEEC6 ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
09:15:20.0968 0x0420  nsiproxy - ok
09:15:21.0072 0x0420  [ 4412D565C0278C401575E11072C7DCE3, 82A0E9AA88750900EA0E9983157345456B418745C8BA62FAF339640E759C0418 ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
09:15:21.0106 0x0420  Ntfs - ok
09:15:21.0148 0x0420  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\WINDOWS\system32\drivers\Null.sys
09:15:21.0149 0x0420  Null - ok
09:15:21.0465 0x0420  [ 86B50CE257C74E378FC2686B8A1F8B30, 944093E5182FD076A93D8D9C06979E2B031A310217DFF0B2723CB136EE517772 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
09:15:21.0768 0x0420  nvlddmkm - ok
09:15:21.0794 0x0420  [ 3C4C982A745D50EEF29A59927E4E37CD, DB1C833FDA7873D00578C281EC808A6A303D0B569141E5F08FC6369F84AF8318 ] nvpciflt        C:\WINDOWS\system32\DRIVERS\nvpciflt.sys
09:15:21.0795 0x0420  nvpciflt - ok
09:15:21.0842 0x0420  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
09:15:21.0845 0x0420  nvraid - ok
09:15:21.0929 0x0420  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
09:15:21.0937 0x0420  nvstor - ok
09:15:22.0019 0x0420  [ F44DF61D9B1C1269862CF4E135B64590, 7E6579A63A6E2E75C9CA752A5D16896C1677F6B7461C9ED9E1962B97946E716B ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
09:15:22.0039 0x0420  nvsvc - ok
09:15:22.0271 0x0420  [ 845AF450F71A11B7358C6EFE9A76A894, 8042DF2402D00E210536552AC8202F6112F75C2F1506B0BED8DD3F04AF7BEF3F ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
09:15:22.0290 0x0420  nvUpdatusService - ok
09:15:22.0310 0x0420  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
09:15:22.0313 0x0420  nv_agp - ok
09:15:22.0384 0x0420  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:15:22.0392 0x0420  ose - ok
09:15:22.0674 0x0420  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
09:15:22.0842 0x0420  osppsvc - ok
09:15:22.0895 0x0420  [ 3B510F20806B94E389784ED09DBD2111, EF8896C500B3AA3A811FDE97BC322EF3295E9BD0DE236715D4A4C52CF63727E1 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
09:15:22.0977 0x0420  p2pimsvc - ok
09:15:23.0033 0x0420  [ 2A57A937BC5B1B2D6AFE6A8C5925F50B, 00D84EFED5A7129AAD86945940030474795905C32D65CBD5B1A3EBADCED8F873 ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
09:15:23.0052 0x0420  p2psvc - ok
09:15:23.0073 0x0420  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport         C:\WINDOWS\System32\drivers\parport.sys
09:15:23.0075 0x0420  Parport - ok
09:15:23

[gerbil]

Michael, use one of these online scanners:
http://www.eset.com/int/home//products/online-scanner/ If you do not use IE it will load and run a temporary installer.

Using IE: http://www.f-secure.com/en/web/home_global/online-scanner

Either will identify the locations of malware files and allow you to remove them.

[Michael_SB]

Thanks Gerbil;

I scanned a couple of times with eset, and it found things different times, and I think allowed me to remove them. Atually, it may have quarantined them, I can't seem to get it to reveal the quarantine from previous scans, however.

Anyway, still no joy getting Malwarebytes running, either directly or via Chameleon... Thanks for your help.

[Michael_SB]

Problem solved.

After a couple more attempts to un- and and reinstall MBAM, I noticed this error coming up repeatedly:
internal error: Expression error 'runtime error (at 79:177): External exception E06D7363

A quick google search found the solution here:
https://forums.malwarebytes.org/index.php?/topic/149048-internal-error-expression-error-runtime-error-at-79177-external-exeption-e06d763/

[RobertHDD]

Nice man! good one pat on the back