Olur, nasıl yapacağız?

Öncelikle konuyu doğru yere mi açtım bilemiyorum. Yeniyim o yüzden kusuruma bakmayın. Sanırsam bilgisayarımda virüs var. Virüsün türü usb belleklerde kısayol oluşturan ve belgelerinize ulaşımı engelleyen bir virüs türü. Telefonuma acilen yedeklemem gereken dosyalarım var. Elimdeki usb bellekler virüse kurban gittiği için kullanamıyorum. Soruya gelelim. Telefonumu bilgisayarıma taktığımda virüs bulaşır mı? Not: İşletim Sistemim Windows 8.1

Usbfix ile tarama yaptım. Hem bilgisayarı hem de usb'yi. Fakat hala devam etti sorunum. Galiba yanlış virüs programı seçmişim. Şimdi de KIS 2015'i deneyeceğim. Sonucu bildiririm.

Özel mesaj attım okuyun.

Hocam, Bide belirtmek isterim. Her virüs Androide zarar veremez. Android le Windows farklıdır. Tabi bazı virüsler dışında, bazıları her iki platforma da zarar verebilir

Bu hatayı veriyor. Son düzenleyen: Moderatör: 14 Temmuz 2015

Kod:Panoya kopyala 15:05:56.0044 0x0704 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 15:06:00.0013 0x0704 15:06:00.0013 0x0704 Current date / time: 2015/07/14 15:06:00.0013 15:06:00.0013 0x0704 SystemInfo: 15:06:00.0013 0x0704 15:06:00.0013 0x0704 OS Version: 6.3.9600 ServicePack: 0.0 15:06:00.0013 0x0704 Product type: Workstation 15:06:00.0013 0x0704 ComputerName: MERT 15:06:00.0013 0x0704 UserName: Merts 15:06:00.0013 0x0704 Windows directory: C:\Windows 15:06:00.0013 0x0704 System windows directory: C:\Windows 15:06:00.0013 0x0704 Running under WOW64 15:06:00.0013 0x0704 Processor architecture: Intel x64 15:06:00.0013 0x0704 Number of processors: 4 15:06:00.0013 0x0704 Page size: 0x1000 15:06:00.0013 0x0704 Boot type: Safe boot with network 15:06:00.0013 0x0704 15:06:00.0435 0x0704 KLMD registered as C:\Windows\system32\drivers\09059132. sys 15:06:05.0028 0x0704 System UUID: 15:06:05.0294 0x0704! crdlk 15:06:05.0325 0x0704 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'A' 15:06:05.0341 0x0704 Drive \Device\Harddisk1\DR1 - Size: 0x1CE800000 ( 7.23 Gb ), SectorSize: 0x200, Cylinders: 0x3AF, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 15:06:05.0341 0x0704 15:06:05.0341 0x0704 \Device\Harddisk0\DR0: 15:06:05.0341 0x0704 MBR partitions: 15:06:05.0341 0x0704 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAF000 15:06:05.0341 0x0704 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xAF800, BlocksNum 0x3A2D6000 15:06:05.0341 0x0704 \Device\Harddisk1\DR1: 15:06:05.0341 0x0704 MBR partitions: 15:06:05.0341 0x0704 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0xE73C21 15:06:05.0341 0x0704 15:06:05.0357 0x0704 C: <-> \Device\Harddisk0\DR0\Partition2 15:06:05.0357 0x0704 15:06:05.0357 0x0704 Initialize success 15:06:05.0357 0x0704 15:06:12.0544 0x0760 15:06:12.0544 0x0760 Scan started 15:06:12.0544 0x0760 Mode: Manual; SigCheck; TDLFS; 15:06:12.0544 0x0760 15:06:12.0544 0x0760 KSN ping started 15:06:14.0998 0x0760 KSN ping finished: true 15:06:16.0092 0x0760 Scan system memory 15:06:16.0092 0x0760 System memory - ok 15:06:16.0092 0x0760 Scan services 15:06:16.0263 0x0760 1394ohci C:\Windows\System32\drivers\1394ohci. sys 15:06:16.0357 0x0760 1394ohci - ok 15:06:16.0388 0x0760 3ware C:\Windows\system32\drivers\3ware. sys 15:06:16.0404 0x0760 3ware - ok 15:06:16.0498 0x0760 7BB32CF2 C:\Windows\system32\drivers\7BB32CF2. sys 15:06:16.0592 0x0760 7BB32CF2 - ok 15:06:16.0623 0x0760 Suspicious service : 8436f649de97ccad 15:06:16.0638 0x0760 8436f649de97ccad C:\Windows\System32\Drivers\8436f649de97ccad. sys 15:06:16.0638 0x0760 Suspicious file : C:\Windows\System32\Drivers\8436f649de97ccad. sys. md5: 864D08557CB7A49689C6977E69C4F9FD, sha256: A77B212A1FC502160669754DB3444EC214987B115EA807448B1133F76B5B13A2 15:06:16.0670 0x0760 8436f649de97ccad - detected Rootkit. Win32. Necurs. gen ( 0 ) 15:06:19.0185 0x0760 8436f649de97ccad ( Rootkit. Win32. Necurs. gen ) - infected 15:06:19.0185 0x0760 Force sending object to P2P due to detect: 8436f649de97ccad 15:06:21.0748 0x0760 Object send P2P result: true 15:06:24.0311 0x0760 ACPI C:\Windows\system32\drivers\ACPI. sys 15:06:24.0342 0x0760 ACPI - ok 15:06:24.0389 0x0760 acpiex C:\Windows\system32\Drivers\acpiex. sys 15:06:24.0404 0x0760 acpiex - ok 15:06:24.0404 0x0760 acpipagr C:\Windows\System32\drivers\acpipagr. sys 15:06:24.0420 0x0760 acpipagr - ok 15:06:24.0436 0x0760 AcpiPmi C:\Windows\System32\drivers\acpipmi. sys 15:06:24.0514 0x0760 AcpiPmi - ok 15:06:24.0529 0x0760 acpitime C:\Windows\System32\drivers\acpitime. sys 15:06:24.0545 0x0760 acpitime - ok 15:06:24.0608 0x0760 AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc. exe 15:06:24.0623 0x0760 AdobeARMservice - ok 15:06:24.0654 0x0760 ADP80XX C:\Windows\system32\drivers\ADP80XX. SYS 15:06:24.0686 0x0760 ADP80XX - ok 15:06:24.0748 0x0760 AeLookupSvc C:\Windows\System32\aelupsvc. dll 15:06:24.0826 0x0760 AeLookupSvc - ok 15:06:24.0873 0x0760 AFD C:\Windows\system32\drivers\afd. sys 15:06:25.0045 0x0760 AFD - ok 15:06:25.0076 0x0760 agp440 C:\Windows\system32\drivers\agp440. sys 15:06:25.0092 0x0760 agp440 - ok 15:06:25.0123 0x0760 ahcache C:\Windows\system32\DRIVERS\ahcache. sys 15:06:25.0201 0x0760 ahcache - ok 15:06:25.0248 0x0760 ALG C:\Windows\System32\alg. exe 15:06:25.0326 0x0760 ALG - ok 15:06:25.0389 0x0760 ALSysIO - ok 15:06:25.0404 0x0760 AmdK8 C:\Windows\System32\drivers\amdk8. sys 15:06:25.0436 0x0760 AmdK8 - ok 15:06:25.0467 0x0760 AmdPPM C:\Windows\System32\drivers\amdppm. sys 15:06:25.0483 0x0760 AmdPPM - ok 15:06:25.0498 0x0760 amdsata C:\Windows\system32\drivers\amdsata. sys 15:06:25.0514 0x0760 amdsata - ok 15:06:25.0529 0x0760 amdsbs C:\Windows\system32\drivers\amdsbs. sys 15:06:25.0545 0x0760 amdsbs - ok 15:06:25.0561 0x0760 amdxata C:\Windows\system32\drivers\amdxata. sys 15:06:25.0561 0x0760 amdxata - ok 15:06:25.0608 0x0760 Andbus C:\Windows\System32\drivers\lgandbus64. sys 15:06:25.0654 0x0760 Andbus - ok 15:06:25.0670 0x0760 AndDiag C:\Windows\system32\DRIVERS\lganddiag64. sys 15:06:25.0686 0x0760 AndDiag - ok 15:06:25.0733 0x0760 AndGps C:\Windows\system32\DRIVERS\lgandgps64. sys 15:06:25.0748 0x0760 AndGps - ok 15:06:25.0795 0x0760 ANDModem C:\Windows\system32\DRIVERS\lgandmodem64. sys 15:06:25.0811 0x0760 ANDModem - ok 15:06:25.0873 0x0760 AndnetBus C:\Windows\System32\drivers\lgandnetbus64. sys 15:06:25.0904 0x0760 AndnetBus - ok 15:06:25.0936 0x0760 AndNetDiag C:\Windows\system32\DRIVERS\lgandnetdiag64. sys 15:06:25.0951 0x0760 AndNetDiag - ok 15:06:26.0014 0x0760 ANDNetModem C:\Windows\system32\DRIVERS\lgandnetmodem64. sys 15:06:26.0029 0x0760 ANDNetModem - ok 15:06:26.0076 0x0760 AppID C:\Windows\system32\drivers\appid. sys 15:06:26.0108 0x0760 AppID - ok 15:06:26.0170 0x0760 AppIDSvc C:\Windows\System32\appidsvc. dll 15:06:26.0186 0x0760 AppIDSvc - ok 15:06:26.0248 0x0760 Appinfo C:\Windows\System32\appinfo. dll 15:06:26.0264 0x0760 Appinfo - ok 15:06:26.0342 0x0760 AppMgmt C:\Windows\System32\appmgmts. dll 15:06:26.0389 0x0760 AppMgmt - ok 15:06:26.0451 0x0760 AppReadiness C:\Windows\system32\AppReadiness. dll 15:06:26.0530 0x0760 AppReadiness - ok 15:06:26.0608 0x0760 AppXSvc C:\Windows\system32\appxdeploymentserver. dll 15:06:26.0686 0x0760 AppXSvc - ok 15:06:26.0701 0x0760 arcsas C:\Windows\system32\drivers\arcsas. sys 15:06:26.0717 0x0760 arcsas - ok 15:06:26.0733 0x0760 atapi C:\Windows\system32\drivers\atapi. sys 15:06:26.0748 0x0760 atapi - ok 15:06:26.0889 0x0760 athr C:\Windows\system32\DRIVERS\athwbx. sys 15:06:26.0998 0x0760 athr - ok 15:06:27.0076 0x0760 athur C:\Windows\system32\DRIVERS\athurx. sys 15:06:27.0155 0x0760 athur - ok 15:06:27.0201 0x0760 AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder. dll 15:06:27.0248 0x0760 AudioEndpointBuilder - ok 15:06:27.0295 0x0760 Audiosrv C:\Windows\System32\Audiosrv. dll 15:06:27.0358 0x0760 Audiosrv - ok 15:06:27.0420 0x0760 Autodesk Content Service C:\Program Files (x86)\Autodesk\Content Service\Connect. Service. ContentService. exe 15:06:27.0451 0x0760 Autodesk Content Service - detected UnsignedFile. Multi. Generic ( 1 ) 15:06:29.0889 0x0760 Detect skipped due to KSN trusted 15:06:29.0889 0x0760 Autodesk Content Service - ok 15:06:29.0967 0x0760 AxInstSV C:\Windows\System32\AxInstSV. dll 15:06:30.0014 0x0760 AxInstSV - ok 15:06:30.0045 0x0760 b06bdrv C:\Windows\system32\drivers\bxvbda. sys 15:06:30.0077 0x0760 b06bdrv - ok 15:06:30.0092 0x0760 BasicDisplay C:\Windows\System32\drivers\BasicDisplay. sys 15:06:30.0139 0x0760 BasicDisplay - ok 15:06:30.0155 0x0760 BasicRender C:\Windows\System32\drivers\BasicRender. sys 15:06:30.0202 0x0760 BasicRender - ok 15:06:30.0264 0x0760 bcmfn2 C:\Windows\System32\drivers\bcmfn2. sys 15:06:30.0264 0x0760 bcmfn2 - ok 15:06:30.0327 0x0760 BDESVC C:\Windows\System32\bdesvc. dll 15:06:30.0405 0x0760 BDESVC - ok 15:06:30.0420 0x0760 Beep C:\Windows\system32\drivers\Beep. sys 15:06:30.0467 0x0760 Beep - ok 15:06:30.0545 0x0760 BFE C:\Windows\System32\bfe. dll 15:06:30.0608 0x0760 BFE - ok 15:06:30.0686 0x0760 BITS C:\Windows\System32\qmgr. dll 15:06:30.0764 0x0760 BITS - ok 15:06:30.0905 0x0760 Bonjour Service C:\Program Files\Bonjour\mDNSResponder. exe 15:06:30.0920 0x0760 Bonjour Service - ok 15:06:30.0936 0x0760 bowser C:\Windows\system32\DRIVERS\bowser. sys 15:06:30.0967 0x0760 bowser - ok 15:06:31.0045 0x0760 BrokerInfrastructure C:\Windows\System32\bisrv. dll 15:06:31.0092 0x0760 BrokerInfrastructure - ok 15:06:31.0139 0x0760 Browser C:\Windows\System32\browser. dll 15:06:31.0170 0x0760 Browser - ok 15:06:31.0217 0x0760 BtFilter C:\Windows\system32\DRIVERS\btfilter. sys 15:06:31.0233 0x0760 BtFilter - ok 15:06:31.0264 0x0760 BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg. sys 15:06:31.0295 0x0760 BthAvrcpTg - ok 15:06:31.0327 0x0760 BthEnum C:\Windows\System32\drivers\BthEnum. sys 15:06:31.0389 0x0760 BthEnum - ok 15:06:31.0420 0x0760 BthHFEnum C:\Windows\System32\drivers\bthhfenum. sys 15:06:31.0483 0x0760 BthHFEnum - ok 15:06:31.0499 0x0760 bthhfhid C:\Windows\System32\drivers\BthHFHid. sys 15:06:31.0499 0x0760 bthhfhid - ok 15:06:31.0561 0x0760 BthHFSrv C:\Windows\System32\BthHFSrv. dll 15:06:31.0592 0x0760 BthHFSrv - ok 15:06:31.0624 0x0760 BthLEEnum C:\Windows\system32\DRIVERS\BthLEEnum. sys 15:06:31.0655 0x0760 BthLEEnum - ok 15:06:31.0686 0x0760 BTHMODEM C:\Windows\System32\drivers\bthmodem. sys 15:06:31.0686 0x0760 BTHMODEM - ok 15:06:31.0733 0x0760 BthPan C:\Windows\System32\drivers\bthpan. sys 15:06:31.0780 0x0760 BthPan - ok 15:06:31.0842 0x0760 BTHPORT C:\Windows\System32\Drivers\BTHport. sys 15:06:31.0889 0x0760 BTHPORT - ok 15:06:31.0952 0x0760 bthserv C:\Windows\system32\bthserv. dll 15:06:31.0983 0x0760 bthserv - ok 15:06:32.0030 0x0760 BTHUSB C:\Windows\System32\Drivers\BTHUSB. sys 15:06:32.0045 0x0760 BTHUSB - ok 15:06:32.0170 0x0760 c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc. exe 15:06:32.0233 0x0760 c2cautoupdatesvc - ok 15:06:32.0311 0x0760 c2cpnrsvc C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc. exe 15:06:32.0374 0x0760 c2cpnrsvc - ok 15:06:32.0389 0x0760 cdfs C:\Windows\system32\DRIVERS\cdfs. sys 15:06:32.0436 0x0760 cdfs - ok 15:06:32.0452 0x0760 cdrom C:\Windows\System32\drivers\cdrom. sys 15:06:32.0467 0x0760 cdrom - ok 15:06:32.0530 0x0760 CertPropSvc C:\Windows\System32\certprop. dll 15:06:32.0561 0x0760 CertPropSvc - ok 15:06:32.0577 0x0760 circlass C:\Windows\System32\drivers\circlass. sys 15:06:32.0592 0x0760 circlass - ok 15:06:32.0624 0x0760 CLFS C:\Windows\system32\drivers\CLFS. sys 15:06:32.0639 0x0760 CLFS - ok 15:06:32.0686 0x0760 CmBatt C:\Windows\System32\drivers\CmBatt. sys 15:06:32.0717 0x0760 CmBatt - ok 15:06:32.0795 0x0760 CNG C:\Windows\system32\Drivers\cng. sys 15:06:32.0811 0x0760 CNG - ok 15:06:32.0842 0x0760 CompositeBus C:\Windows\System32\drivers\CompositeBus. sys 15:06:32.0858 0x0760 CompositeBus - ok 15:06:32.0874 0x0760 COMSysApp - ok 15:06:32.0889 0x0760 condrv C:\Windows\system32\drivers\condrv. sys 15:06:32.0905 0x0760 condrv - ok 15:06:32.0983 0x0760 cphs C:\Windows\SysWow64\IntelCpHeciSvc. exe 15:06:33.0045 0x0760 cphs - ok 15:06:33.0124 0x0760 CryptSvc C:\Windows\system32\cryptsvc. dll 15:06:33.0186 0x0760 CryptSvc - ok 15:06:33.0249 0x0760 CSC C:\Windows\system32\drivers\csc. sys 15:06:33.0311 0x0760 CSC - ok 15:06:33.0358 0x0760 CscService C:\Windows\System32\cscsvc. dll 15:06:33.0405 0x0760 CscService - ok 15:06:33.0420 0x0760 dam C:\Windows\system32\drivers\dam. sys 15:06:33.0436 0x0760 dam - ok 15:06:33.0514 0x0760 DcomLaunch C:\Windows\system32\rpcss. dll 15:06:33.0608 0x0760 DcomLaunch - ok 15:06:33.0670 0x0760 defragsvc C:\Windows\System32\defragsvc. dll 15:06:33.0702 0x0760 defragsvc - ok 15:06:33.0764 0x0760 DeviceAssociationService C:\Windows\system32\das. dll 15:06:33.0780 0x0760 DeviceAssociationService - ok 15:06:33.0811 0x0760 DeviceInstall C:\Windows\system32\umpnpmgr. dll 15:06:33.0827 0x0760 DeviceInstall - ok 15:06:33.0858 0x0760 Dfsc C:\Windows\system32\Drivers\dfsc. sys 15:06:33.0920 0x0760 Dfsc - ok 15:06:33.0952 0x0760 DFX11_1 C:\Windows\system32\drivers\dfx11_1x64. sys 15:06:33.0952 0x0760 DFX11_1 - ok 15:06:33.0999 0x0760 Dhcp C:\Windows\system32\dhcpcore. dll 15:06:34.0030 0x0760 Dhcp - ok 15:06:34.0124 0x0760 DiagTrack C:\Windows\system32\diagtrack. dll 15:06:34.0202 0x0760 DiagTrack - ok 15:06:34.0280 0x0760 Disc Soft Lite Bus Service C:\Program Files\DAEMON Tools Lite\DiscSoftBusService. exe 15:06:34.0327 0x0760 Disc Soft Lite Bus Service - ok 15:06:34.0342 0x0760 disk C:\Windows\system32\drivers\disk. sys 15:06:34.0358 0x0760 disk - ok 15:06:34.0374 0x0760 dmvsc C:\Windows\System32\drivers\dmvsc. sys 15:06:34.0421 0x0760 dmvsc - ok 15:06:34.0467 0x0760 Dnscache C:\Windows\System32\dnsrslvr. dll 15:06:34.0483 0x0760 Dnscache - ok 15:06:34.0546 0x0760 dot3svc C:\Windows\System32\dot3svc. dll 15:06:34.0577 0x0760 dot3svc - ok 15:06:34.0608 0x0760 DPS C:\Windows\system32\dps. dll 15:06:34.0639 0x0760 DPS - ok 15:06:34.0686 0x0760 drmkaud C:\Windows\system32\drivers\drmkaud. sys 15:06:34.0702 0x0760 drmkaud - ok 15:06:34.0764 0x0760 DsmSvc C:\Windows\System32\DeviceSetupManager. dll 15:06:34.0780 0x0760 DsmSvc - ok 15:06:34.0796 0x0760 dtlitescsibus C:\Windows\System32\drivers\dtlitescsibus. sys 15:06:34.0796 0x0760 dtlitescsibus - ok 15:06:34.0889 0x0760 DXGKrnl C:\Windows\System32\drivers\dxgkrnl. sys 15:06:34.0936 0x0760 DXGKrnl - ok 15:06:34.0936 0x0760 EagleX64 - ok 15:06:34.0983 0x0760 Eaphost C:\Windows\System32\eapsvc. dll 15:06:35.0030 0x0760 Eaphost - ok 15:06:35.0124 0x0760 ebdrv C:\Windows\system32\drivers\evbda. sys 15:06:35.0249 0x0760 ebdrv - ok 15:06:35.0327 0x0760 EFS C:\Windows\System32\lsass. exe 15:06:35.0327 0x0760 EFS - ok 15:06:35.0358 0x0760 EhStorClass C:\Windows\system32\drivers\EhStorClass. sys 15:06:35.0358 0x0760 EhStorClass - ok 15:06:35.0389 0x0760 EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv. sys 15:06:35.0405 0x0760 EhStorTcgDrv - ok 15:06:35.0421 0x0760 ErrDev C:\Windows\System32\drivers\errdev. sys 15:06:35.0436 0x0760 ErrDev - ok 15:06:35.0577 0x0760 EventSystem C:\Windows\system32\es. dll 15:06:35.0608 0x0760 EventSystem - ok 15:06:35.0639 0x0760 exfat C:\Windows\system32\drivers\exfat. sys 15:06:35.0702 0x0760 exfat - ok 15:06:35.0717 0x0760 fastfat C:\Windows\system32\drivers\fastfat. sys 15:06:35.0733 0x0760 fastfat - ok 15:06:35.0796 0x0760 Fax C:\Windows\system32\fxssvc. exe 15:06:35.0889 0x0760 Fax - ok 15:06:35.0905 0x0760 fdc C:\Windows\System32\drivers\fdc. sys 15:06:35.0905 0x0760 fdc - ok 15:06:35.0952 0x0760 fdPHost C:\Windows\system32\fdPHost. dll 15:06:35.0999 0x0760 fdPHost - ok 15:06:36.0046 0x0760 FDResPub C:\Windows\system32\fdrespub. dll 15:06:36.0061 0x0760 FDResPub - ok 15:06:36.0124 0x0760 fhsvc C:\Windows\system32\fhsvc. dll 15:06:36.0155 0x0760 fhsvc - ok 15:06:36.0171 0x0760 FileInfo C:\Windows\system32\drivers\fileinfo. sys 15:06:36.0171 0x0760 FileInfo - ok 15:06:36.0217 0x0760 Filetrace C:\Windows\system32\drivers\filetrace. sys 15:06:36.0233 0x0760 Filetrace - ok 15:06:36.0327 0x0760 FlexNet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64. exe 15:06:36.0389 0x0760 FlexNet Licensing Service 64 - ok 15:06:36.0405 0x0760 flpydisk C:\Windows\System32\drivers\flpydisk. sys 15:06:36.0405 0x0760 flpydisk - ok 15:06:36.0499 0x0760 FltMgr C:\Windows\system32\drivers\fltmgr. sys 15:06:36.0514 0x0760 FltMgr - ok 15:06:36.0592 0x0760 FontCache C:\Windows\system32\FntCache. dll 15:06:36.0702 0x0760 FontCache - ok 15:06:36.0811 0x0760 FontCache3.0.0.0 C:\Windows\Microsoft. Net\Framework64\v3.0\WPF\PresentationFontCache. exe 15:06:36.0811 0x0760 FontCache3.0.0.0 - ok 15:06:36.0874 0x0760 FsDepends C:\Windows\system32\drivers\FsDepends. sys 15:06:36.0874 0x0760 FsDepends - ok 15:06:36.0889 0x0760 Fs_Rec C:\Windows\system32\drivers\Fs_Rec. sys 15:06:36.0889 0x0760 Fs_Rec - ok 15:06:36.0952 0x0760 fvevol C:\Windows\system32\DRIVERS\fvevol. sys 15:06:36.0968 0x0760 fvevol - ok 15:06:36.0983 0x0760 FxPPM C:\Windows\System32\drivers\fxppm. sys 15:06:37.0014 0x0760 FxPPM - ok 15:06:37.0030 0x0760 gagp30kx C:\Windows\system32\drivers\gagp30kx. sys 15:06:37.0030 0x0760 gagp30kx - ok 15:06:37.0061 0x0760 gencounter C:\Windows\System32\drivers\vmgencounter. sys 15:06:37.0077 0x0760 gencounter - ok 15:06:37.0186 0x0760 GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService. exe 15:06:37.0218 0x0760 GfExperienceService - ok 15:06:37.0264 0x0760 GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx. sys 15:06:37.0264 0x0760 GPIOClx0101 - ok 15:06:37.0358 0x0760 gpsvc C:\Windows\System32\gpsvc. dll 15:06:37.0421 0x0760 gpsvc - ok 15:06:37.0499 0x0760 gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate. exe 15:06:37.0530 0x0760 gupdate - ok 15:06:37.0530 0x0760 gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate. exe 15:06:37.0546 0x0760 gupdatem - ok 15:06:37.0593 0x0760 Hamachi C:\Windows\system32\DRIVERS\Hamdrv. sys 15:06:37.0593 0x0760 Hamachi - ok 15:06:37.0624 0x0760 HdAudAddService C:\Windows\system32\drivers\HdAudio. sys 15:06:37.0655 0x0760 HdAudAddService - ok 15:06:37.0702 0x0760 HDAudBus C:\Windows\System32\drivers\HDAudBus. sys 15:06:37.0749 0x0760 HDAudBus - ok 15:06:37.0780 0x0760 HidBatt C:\Windows\System32\drivers\HidBatt. sys 15:06:37.0796 0x0760 HidBatt - ok 15:06:37.0827 0x0760 HidBth C:\Windows\System32\drivers\hidbth. sys 15:06:37.0858 0x0760 HidBth - ok 15:06:37.0858 0x0760 hidi2c C:\Windows\System32\drivers\hidi2c. sys 15:06:37.0874 0x0760 hidi2c - ok 15:06:37.0889 0x0760 HidIr C:\Windows\System32\drivers\hidir. sys 15:06:37.0905 0x0760 HidIr - ok 15:06:37.0968 0x0760 hidserv C:\Windows\system32\hidserv. dll 15:06:38.0155 0x0760 hidserv - ok 15:06:38.0186 0x0760 HidUsb C:\Windows\System32\drivers\hidusb. sys 15:06:38.0264 0x0760 HidUsb - ok 15:06:38.0311 0x0760 hkmsvc C:\Windows\system32\kmsvc. dll 15:06:38.0374 0x0760 hkmsvc - ok 15:06:38.0421 0x0760 HomeGroupListener C:\Windows\system32\ListSvc. dll 15:06:38.0483 0x0760 HomeGroupListener - ok 15:06:38.0546 0x0760 HomeGroupProvider C:\Windows\system32\provsvc. dll 15:06:38.0561 0x0760 HomeGroupProvider - ok 15:06:38.0593 0x0760 HpSAMD C:\Windows\system32\drivers\HpSAMD. sys 15:06:38.0608 0x0760 HpSAMD - ok 15:06:38.0655 0x0760 HTTP C:\Windows\system32\drivers\HTTP. sys 15:06:38.0686 0x0760 HTTP - ok 15:06:38.0718 0x0760 hwpolicy C:\Windows\system32\drivers\hwpolicy. sys 15:06:38.0718 0x0760 hwpolicy - ok 15:06:38.0733 0x0760 hyperkbd C:\Windows\System32\drivers\hyperkbd. sys 15:06:38.0749 0x0760 hyperkbd - ok 15:06:38.0749 0x0760 HyperVideo C:\Windows\system32\DRIVERS\HyperVideo. sys 15:06:38.0764 0x0760 HyperVideo - ok 15:06:38.0811 0x0760 i8042prt C:\Windows\System32\drivers\i8042prt. sys 15:06:38.0858 0x0760 i8042prt - ok 15:06:38.0889 0x0760 iaLPSSi_GPIO C:\Windows\System32\drivers\iaLPSSi_GPIO. sys 15:06:38.0889 0x0760 iaLPSSi_GPIO - ok 15:06:38.0905 0x0760 iaLPSSi_I2C C:\Windows\System32\drivers\iaLPSSi_I2C. sys 15:06:38.0921 0x0760 iaLPSSi_I2C - ok 15:06:38.0968 0x0760 iaStorAV C:\Windows\system32\drivers\iaStorAV. sys 15:06:38.0999 0x0760 iaStorAV - ok 15:06:39.0030 0x0760 iaStorV C:\Windows\system32\drivers\iaStorV. sys 15:06:39.0046 0x0760 iaStorV - ok 15:06:39.0061 0x0760 IEEtwCollectorService - ok 15:06:39.0171 0x0760 igfx C:\Windows\system32\DRIVERS\igdkmd64. sys 15:06:39.0311 0x0760 igfx - ok 15:06:39.0358 0x0760 igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService. exe 15:06:39.0358 0x0760 igfxCUIService1.0.0.0 - ok 15:06:39.0436 0x0760 IJPLMSVC C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC. EXE 15:06:39.0436 0x0760 IJPLMSVC - ok 15:06:39.0515 0x0760 IKEEXT C:\Windows\System32\ikeext. dll 15:06:39.0561 0x0760 IKEEXT - ok 15:06:39.0608 0x0760 intaud_WaveExtensible C:\Windows\system32\drivers\intelaud. sys 15:06:39.0608 0x0760 intaud_WaveExtensible - ok 15:06:39.0624 0x0760 intelide C:\Windows\system32\drivers\intelide. sys 15:06:39.0640 0x0760 intelide - ok 15:06:39.0671 0x0760 intelpep C:\Windows\system32\drivers\intelpep. sys 15:06:39.0671 0x0760 intelpep - ok 15:06:39.0686 0x0760 intelppm C:\Windows\System32\drivers\intelppm. sys 15:06:39.0702 0x0760 intelppm - ok 15:06:39.0733 0x0760 IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv. sys 15:06:39.0796 0x0760 IpFilterDriver - ok 15:06:39.0858 0x0760 iphlpsvc C:\Windows\System32\iphlpsvc. dll 15:06:39.0905 0x0760 iphlpsvc - ok 15:06:39.0936 0x0760 IPMIDRV C:\Windows\System32\drivers\IPMIDrv. sys 15:06:40.0030 0x0760 IPMIDRV - ok 15:06:40.0061 0x0760 IPNAT C:\Windows\system32\drivers\ipnat. sys 15:06:40.0093 0x0760 IPNAT - ok 15:06:40.0108 0x0760 IRENUM C:\Windows\system32\drivers\irenum. sys 15:06:40.0124 0x0760 IRENUM - ok 15:06:40.0140 0x0760 isapnp C:\Windows\system32\drivers\isapnp. sys 15:06:40.0155 0x0760 isapnp - ok 15:06:40.0186 0x0760 iScsiPrt C:\Windows\System32\drivers\msiscsi. sys 15:06:40.0202 0x0760 iScsiPrt - ok 15:06:40.0468 0x0760 ITbrain Agent C:\Program Files (x86)\ITbrain Agent\itbrain_agent. exe 15:06:40.0655 0x0760 ITbrain Agent - detected UnsignedFile. Multi. Generic ( 1 ) 15:06:43.0108 0x0760 ITbrain Agent - warning 15:06:45.0671 0x0760 iwdbus C:\Windows\System32\drivers\iwdbus. sys 15:06:45.0687 0x0760 iwdbus - ok 15:06:45.0718 0x0760 k57nd60a C:\Windows\system32\DRIVERS\k57nd60a. sys 15:06:45.0734 0x0760 k57nd60a - ok 15:06:45.0796 0x0760 kbdclass C:\Windows\System32\drivers\kbdclass. sys 15:06:45.0796 0x0760 kbdclass - ok 15:06:45.0843 0x0760 kbdhid C:\Windows\System32\drivers\kbdhid. sys 15:06:45.0859 0x0760 kbdhid - ok 15:06:45.0890 0x0760 kbldfltr C:\Windows\system32\drivers\kbldfltr. sys 15:06:45.0905 0x0760 kbldfltr - ok 15:06:45.0921 0x0760 kdnic C:\Windows\system32\DRIVERS\kdnic. sys 15:06:45.0968 0x0760 kdnic - ok 15:06:45.0984 0x0760 KeyIso C:\Windows\system32\lsass. exe 15:06:45.0999 0x0760 KeyIso - ok 15:06:46.0062 0x0760 KSecDD C:\Windows\system32\Drivers\ksecdd. sys 15:06:46.0062 0x0760 KSecDD - ok 15:06:46.0093 0x0760 KSecPkg C:\Windows\system32\Drivers\ksecpkg. sys 15:06:46.0109 0x0760 KSecPkg - ok 15:06:46.0124 0x0760 ksthunk C:\Windows\system32\drivers\ksthunk. sys 15:06:46.0140 0x0760 ksthunk - ok 15:06:46.0218 0x0760 KtmRm C:\Windows\system32\msdtckrm. dll 15:06:46.0249 0x0760 KtmRm - ok 15:06:46.0296 0x0760 LanmanServer C:\Windows\system32\srvsvc. dll 15:06:46.0359 0x0760 LanmanServer - ok 15:06:46.0390 0x0760 LanmanWorkstation C:\Windows\System32\wkssvc. dll 15:06:46.0421 0x0760 LanmanWorkstation - ok 15:06:46.0484 0x0760 lfsvc C:\Windows\System32\GeofenceMonitorService. dll 15:06:46.0562 0x0760 lfsvc - ok 15:06:46.0609 0x0760 LGBusEnum C:\Windows\system32\drivers\LGBusEnum. sys 15:06:46.0624 0x0760 LGBusEnum - ok 15:06:46.0640 0x0760 LGSHidFilt C:\Windows\system32\DRIVERS\LGSHidFilt. Sys 15:06:46.0655 0x0760 LGSHidFilt - ok 15:06:46.0687 0x0760 LGVirHid C:\Windows\system32\drivers\LGVirHid. sys 15:06:46.0702 0x0760 LGVirHid - ok 15:06:46.0796 0x0760 LiveUpdateSvc C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate. exe 15:06:46.0890 0x0760 LiveUpdateSvc - ok 15:06:46.0905 0x0760 lltdio C:\Windows\system32\DRIVERS\lltdio. sys 15:06:46.0921 0x0760 lltdio - ok 15:06:46.0968 0x0760 lltdsvc C:\Windows\System32\lltdsvc. dll 15:06:46.0984 0x0760 lltdsvc - ok 15:06:47.0046 0x0760 lmhosts C:\Windows\System32\lmhsvc. dll 15:06:47.0077 0x0760 lmhosts - ok 15:06:47.0124 0x0760 LSI_SAS C:\Windows\system32\drivers\lsi_sas. sys 15:06:47.0124 0x0760 LSI_SAS - ok 15:06:47.0140 0x0760 LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2. sys 15:06:47.0155 0x0760 LSI_SAS2 - ok 15:06:47.0171 0x0760 LSI_SAS3 C:\Windows\system32\drivers\lsi_sas3. sys 15:06:47.0187 0x0760 LSI_SAS3 - ok 15:06:47.0202 0x0760 LSI_SSS C:\Windows\system32\drivers\lsi_sss. sys 15:06:47.0202 0x0760 LSI_SSS - ok 15:06:47.0280 0x0760 LSM C:\Windows\System32\lsm. dll 15:06:47.0327 0x0760 LSM - ok 15:06:47.0359 0x0760 luafv C:\Windows\system32\drivers\luafv. sys 15:06:47.0390 0x0760 luafv - ok 15:06:47.0405 0x0760 megasas C:\Windows\system32\drivers\megasas. sys 15:06:47.0405 0x0760 megasas - ok 15:06:47.0437 0x0760 megasr C:\Windows\system32\drivers\megasr. sys 15:06:47.0468 0x0760 megasr - ok 15:06:47.0499 0x0760 MEIx64 C:\Windows\System32\drivers\HECIx64. sys 15:06:47.0499 0x0760 MEIx64 - ok 15:06:47.0546 0x0760 Microsoft SharePoint Workspace Audit Service - ok 15:06:47.0609 0x0760 MMCSS C:\Windows\system32\mmcss. dll 15:06:47.0671 0x0760 MMCSS - ok 15:06:47.0687 0x0760 Modem C:\Windows\system32\drivers\modem. sys 15:06:47.0702 0x0760 Modem - ok 15:06:47.0734 0x0760 monitor C:\Windows\System32\drivers\monitor. sys 15:06:47.0781 0x0760 monitor - ok 15:06:47.0827 0x0760 mouclass C:\Windows\System32\drivers\mouclass. sys 15:06:47.0843 0x0760 mouclass - ok 15:06:47.0859 0x0760 mouhid C:\Windows\System32\drivers\mouhid. sys 15:06:47.0890 0x0760 mouhid - ok 15:06:47.0937 0x0760 mountmgr C:\Windows\system32\drivers\mountmgr. sys 15:06:47.0952 0x0760 mountmgr - ok 15:06:48.0015 0x0760 MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice. exe 15:06:48.0015 0x0760 MozillaMaintenance - ok 15:06:48.0046 0x0760 mpsdrv C:\Windows\system32\drivers\mpsdrv. sys 15:06:48.0077 0x0760 mpsdrv - ok 15:06:48.0156 0x0760 MpsSvc C:\Windows\system32\mpssvc. dll 15:06:48.0187 0x0760 MpsSvc - ok 15:06:48.0249 0x0760 MRxDAV C:\Windows\system32\drivers\mrxdav. sys 15:06:48.0296 0x0760 MRxDAV - ok 15:06:48.0343 0x0760 mrxsmb C:\Windows\system32\DRIVERS\mrxsmb. sys 15:06:48.0406 0x0760 mrxsmb - ok 15:06:48.0452 0x0760 mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10. sys 15:06:48.0484 0x0760 mrxsmb10 - ok 15:06:48.0546 0x0760 mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20. sys 15:06:48.0562 0x0760 mrxsmb20 - ok 15:06:48.0609 0x0760 MsBridge C:\Windows\system32\DRIVERS\bridge. sys 15:06:48.0640 0x0760 MsBridge - ok 15:06:48.0671 0x0760 MSDTC C:\Windows\System32\msdtc. exe 15:06:48.0687 0x0760 MSDTC - ok 15:06:48.0702 0x0760 Msfs C:\Windows\system32\drivers\Msfs. sys 15:06:48.0718 0x0760 Msfs - ok 15:06:48.0749 0x0760 msgpiowin32 C:\Windows\System32\drivers\msgpiowin32. sys 15:06:48.0765 0x0760 msgpiowin32 - ok 15:06:48.0781 0x0760 mshidkmdf C:\Windows\System32\drivers\mshidkmdf. sys 15:06:48.0796 0x0760 mshidkmdf - ok 15:06:48.0843 0x0760 mshidumdf C:\Windows\System32\drivers\mshidumdf. sys 15:06:48.0843 0x0760 mshidumdf - ok 15:06:48.0859 0x0760 msisadrv C:\Windows\system32\drivers\msisadrv. sys 15:06:48.0859 0x0760 msisadrv - ok 15:06:48.0890 0x0760 MSiSCSI C:\Windows\system32\iscsiexe. dll 15:06:48.0906 0x0760 MSiSCSI - ok 15:06:48.0921 0x0760 msiserver - ok 15:06:48.0952 0x0760 MsKeyboardFilter C:\Windows\System32\KeyboardFilterSvc. dll 15:06:48.0968 0x0760 MsKeyboardFilter - ok 15:06:48.0984 0x0760 MSKSSRV C:\Windows\system32\drivers\MSKSSRV. sys 15:06:48.0999 0x0760 MSKSSRV - ok 15:06:49.0046 0x0760 MsLldp C:\Windows\system32\DRIVERS\mslldp. sys 15:06:49.0109 0x0760 MsLldp - ok 15:06:49.0124 0x0760 MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK. sys 15:06:49.0156 0x0760 MSPCLOCK - ok 15:06:49.0171 0x0760 MSPQM C:\Windows\system32\drivers\MSPQM. sys 15:06:49.0187 0x0760 MSPQM - ok 15:06:49.0218 0x0760 MsRPC C:\Windows\system32\drivers\MsRPC. sys 15:06:49.0249 0x0760 MsRPC - ok 15:06:49.0265 0x0760 mssmbios C:\Windows\System32\drivers\mssmbios. sys 15:06:49.0265 0x0760 mssmbios - ok 15:06:49.0296 0x0760 MSTEE C:\Windows\system32\drivers\MSTEE. sys 15:06:49.0312 0x0760 MSTEE - ok 15:06:49.0327 0x0760 MTConfig C:\Windows\System32\drivers\MTConfig. sys 15:06:49.0327 0x0760 MTConfig - ok 15:06:49.0359 0x0760 Mup C:\Windows\system32\Drivers\mup. sys 15:06:49.0359 0x0760 Mup - ok 15:06:49.0374 0x0760 mvumis C:\Windows\system32\drivers\mvumis. sys 15:06:49.0390 0x0760 mvumis - ok 15:06:49.0421 0x0760 napagent C:\Windows\system32\qagentRT. dll 15:06:49.0437 0x0760 napagent - ok 15:06:49.0484 0x0760 NativeWifiP C:\Windows\system32\DRIVERS\nwifi. sys 15:06:49.0515 0x0760 NativeWifiP - ok 15:06:49.0546 0x0760 NcaSvc C:\Windows\System32\ncasvc. dll 15:06:49.0577 0x0760 NcaSvc - ok 15:06:49.0624 0x0760 NcbService C:\Windows\System32\ncbservice. dll 15:06:49.0702 0x0760 NcbService - ok 15:06:49.0734 0x0760 NcdAutoSetup C:\Windows\System32\NcdAutoSetup. dll 15:06:49.0781 0x0760 NcdAutoSetup - ok 15:06:49.0843 0x0760 NDIS C:\Windows\system32\drivers\ndis. sys 15:06:49.0890 0x0760 NDIS - ok 15:06:49.0921 0x0760 NdisCap C:\Windows\system32\DRIVERS\ndiscap. sys 15:06:49.0921 0x0760 NdisCap - ok 15:06:49.0952 0x0760 NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform. sys 15:06:49.0984 0x0760 NdisImPlatform - ok 15:06:50.0015 0x0760 NdisTapi C:\Windows\system32\DRIVERS\ndistapi. sys 15:06:50.0046 0x0760 NdisTapi - ok 15:06:50.0062 0x0760 Ndisuio C:\Windows\system32\DRIVERS\ndisuio. sys 15:06:50.0124 0x0760 Ndisuio - ok 15:06:50.0187 0x0760 NdisVirtualBus C:\Windows\System32\drivers\NdisVirtualBus. sys 15:06:50.0203 0x0760 NdisVirtualBus - ok 15:06:50.0343 0x0760 NdisWan C:\Windows\system32\DRIVERS\ndiswan. sys 15:06:50.0390 0x0760 NdisWan - ok 15:06:50.0468 0x0760 NdisWanLegacy C:\Windows\system32\DRIVERS\ndiswan. sys 15:06:50.0468 0x0760 NdisWanLegacy - ok 15:06:50.0703 0x0760 NDProxy C:\Windows\system32\drivers\NDProxy. sys 15:06:50.0718 0x0760 NDProxy - ok 15:06:50.0749 0x0760 Ndu C:\Windows\system32\drivers\Ndu. sys 15:06:50.0796 0x0760 Ndu - ok 15:06:50.0859 0x0760 NetBIOS C:\Windows\system32\DRIVERS\netbios. sys 15:06:50.0859 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\netbios. sys. md5: 42FF4975D032CAE558AE4BB8448F6E5A, sha256: 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D 15:06:50.0890 0x0760 NetBIOS - detected LockedFile. Multi. Generic ( 1 ) 15:06:53.0640 0x0760 Detect skipped due to KSN trusted 15:06:53.0640 0x0760 NetBIOS - ok 15:06:53.0734 0x0760 NetBT C:\Windows\system32\DRIVERS\netbt. sys 15:06:53.0812 0x0760 NetBT - ok 15:06:53.0843 0x0760 Netlogon C:\Windows\system32\lsass. exe 15:06:53.0859 0x0760 Netlogon - ok 15:06:53.0921 0x0760 Netman C:\Windows\System32\netman. dll 15:06:53.0953 0x0760 Netman - ok 15:06:54.0015 0x0760 netprofm C:\Windows\System32\netprofmsvc. dll 15:06:54.0046 0x0760 netprofm - ok 15:06:54.0140 0x0760 netr28ux C:\Windows\system32\DRIVERS\netr28ux. sys 15:06:54.0218 0x0760 netr28ux - ok 15:06:54.0265 0x0760 NetTcpPortSharing C:\Windows\Microsoft. NET\Framework64\v4.0.30319\SMSvcHost. exe 15:06:54.0296 0x0760 NetTcpPortSharing - ok 15:06:54.0359 0x0760 netvsc C:\Windows\System32\drivers\netvsc63. sys 15:06:54.0437 0x0760 netvsc - ok 15:06:54.0484 0x0760 NlaSvc C:\Windows\System32\nlasvc. dll 15:06:54.0546 0x0760 NlaSvc - ok 15:06:54.0578 0x0760 Npfs C:\Windows\system32\drivers\Npfs. sys 15:06:54.0593 0x0760 Npfs - ok 15:06:54.0609 0x0760 npsvctrig C:\Windows\System32\drivers\npsvctrig. sys 15:06:54.0609 0x0760 Suspicious file : C:\Windows\System32\drivers\npsvctrig. sys. md5: CBDB4F0871C88DF930FC0E8588CA67FC, sha256: 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 15:06:54.0609 0x0760 npsvctrig - detected LockedFile. Multi. Generic ( 1 ) 15:06:57.0140 0x0760 Detect skipped due to KSN trusted 15:06:57.0140 0x0760 npsvctrig - ok 15:06:57.0218 0x0760 nsi C:\Windows\system32\nsisvc. dll 15:06:57.0250 0x0760 nsi - ok 15:06:57.0297 0x0760 nsiproxy C:\Windows\system32\drivers\nsiproxy. sys 15:06:57.0312 0x0760 nsiproxy - ok 15:06:57.0406 0x0760 Ntfs C:\Windows\system32\drivers\Ntfs. sys 15:06:57.0406 0x0760 Suspicious file : C:\Windows\system32\drivers\Ntfs. sys. md5: 7F68063A5A0461E02BC860CE0E6BFDDC, sha256: 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE 15:06:57.0406 0x0760 Ntfs - detected LockedFile. Multi. Generic ( 1 ) 15:06:59.0953 0x0760 Detect skipped due to KSN trusted 15:06:59.0953 0x0760 Ntfs - ok 15:07:00.0031 0x0760 Null C:\Windows\system32\drivers\Null. sys 15:07:00.0078 0x0760 Null - ok 15:07:00.0375 0x0760 nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm. sys 15:07:00.0375 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\nvlddmkm. sys. md5: BF769EC1CC472FAD4C6EAEEB96ED857E, sha256: BBF8BA2B703BF4C36DFC7F69B4D8E477C8162BEC492C6C5D1A7751C19305ABE8 15:07:00.0406 0x0760 nvlddmkm - detected LockedFile. Multi. Generic ( 1 ) 15:07:02.0844 0x0760 Detect skipped due to KSN trusted 15:07:02.0844 0x0760 nvlddmkm - ok 15:07:02.0953 0x0760 NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService. exe 15:07:03.0016 0x0760 NvNetworkService - ok 15:07:03.0031 0x0760 nvpciflt C:\Windows\system32\DRIVERS\nvpciflt. sys 15:07:03.0031 0x0760 nvpciflt - ok 15:07:03.0062 0x0760 nvraid C:\Windows\system32\drivers\nvraid. sys 15:07:03.0062 0x0760 Suspicious file : C:\Windows\system32\drivers\nvraid. sys. md5: BC6B5942AFF25EBAF62DE43C3807EDF8, sha256: CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 15:07:03.0078 0x0760 nvraid - detected LockedFile. Multi. Generic ( 1 ) 15:07:05.0609 0x0760 Detect skipped due to KSN trusted 15:07:05.0609 0x0760 nvraid - ok 15:07:05.0703 0x0760 nvstor C:\Windows\system32\drivers\nvstor. sys 15:07:05.0703 0x0760 Suspicious file : C:\Windows\system32\drivers\nvstor. sys. md5: 1F43ABFFAC3D6CA356851D517392966E, sha256: 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 15:07:05.0703 0x0760 nvstor - detected LockedFile. Multi. Generic ( 1 ) 15:07:08.0250 0x0760 Detect skipped due to KSN trusted 15:07:08.0250 0x0760 nvstor - ok 15:07:08.0360 0x0760 NvStreamKms C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms. sys 15:07:08.0360 0x0760 Suspicious file : C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms. sys. md5: 9408391358F3B9FD0F59E27151383C51, sha256: 777A41DE1D8D71833369D1335A083BA8F197317CB62D0E65EFFCC9760D84F2AB 15:07:08.0360 0x0760 NvStreamKms - detected LockedFile. Multi. Generic ( 1 ) 15:07:10.0891 0x0760 Detect skipped due to KSN trusted 15:07:10.0891 0x0760 NvStreamKms - ok 15:07:10.0938 0x0760 NvStreamSvc - ok 15:07:11.0000 0x0760 nvsvc C:\Windows\system32\nvvsvc. exe 15:07:11.0016 0x0760 nvsvc - ok 15:07:11.0063 0x0760 nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v. sys 15:07:11.0078 0x0760 Suspicious file : C:\Windows\system32\drivers\nvvad64v. sys. md5: 6AC68DDFCAC19A300D738AF3493E46AA, sha256: 4E92215B6E3ED263E89489851C6FEAD08D3155C82A74E880DA460DED0021DF42 15:07:11.0094 0x0760 nvvad_WaveExtensible - detected LockedFile. Multi. Generic ( 1 ) 15:07:13.0641 0x0760 Detect skipped due to KSN trusted 15:07:13.0641 0x0760 nvvad_WaveExtensible - ok 15:07:13.0704 0x0760 nv_agp C:\Windows\system32\drivers\nv_agp. sys 15:07:13.0719 0x0760 Suspicious file : C:\Windows\system32\drivers\nv_agp. sys. md5: 6934A936A7369DFE37B7DBA93F5E5E49, sha256: 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 15:07:13.0938 0x0760 nv_agp - detected LockedFile. Multi. Generic ( 1 ) 15:07:16.0469 0x0760 Detect skipped due to KSN trusted 15:07:16.0469 0x0760 nv_agp - ok 15:07:16.0501 0x0760 ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE. EXE 15:07:16.0516 0x0760 ose64 - ok 15:07:16.0704 0x0760 osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC. EXE 15:07:16.0860 0x0760 osppsvc - ok 15:07:16.0923 0x0760 p2pimsvc C:\Windows\system32\pnrpsvc. dll 15:07:17.0032 0x0760 p2pimsvc - ok 15:07:17.0094 0x0760 p2psvc C:\Windows\system32\p2psvc. dll 15:07:17.0204 0x0760 p2psvc - ok 15:07:17.0391 0x0760 Parport C:\Windows\System32\drivers\parport. sys 15:07:17.0391 0x0760 Suspicious file : C:\Windows\System32\drivers\parport. sys. md5: 764B1121867B2D9B31C491668AC72B2B, sha256: 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 15:07:17.0407 0x0760 Parport - detected LockedFile. Multi. Generic ( 1 ) 15:07:19.0954 0x0760 Detect skipped due to KSN trusted 15:07:19.0954 0x0760 Parport - ok 15:07:20.0141 0x0760 partmgr C:\Windows\system32\drivers\partmgr. sys 15:07:20.0141 0x0760 Suspicious file : C:\Windows\system32\drivers\partmgr. sys. md5: BAFF6122CFC9F95CA175AD8C348179A4, sha256: 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C 15:07:20.0313 0x0760 partmgr - detected LockedFile. Multi. Generic ( 1 ) 15:07:23.0208 0x0760 Detect skipped due to KSN trusted 15:07:23.0208 0x0760 partmgr - ok 15:07:23.0347 0x0760 PcaSvc C:\Windows\System32\pcasvc. dll 15:07:23.0368 0x0760 PcaSvc - ok 15:07:23.0420 0x0760 pci C:\Windows\system32\drivers\pci. sys 15:07:23.0420 0x0760 Suspicious file : C:\Windows\system32\drivers\pci. sys. md5: 91ED124E261EA8FAA1C0FFDF2A71B0C4, sha256: 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC 15:07:23.0425 0x0760 pci - detected LockedFile. Multi. Generic ( 1 ) 15:07:25.0872 0x0760 Detect skipped due to KSN trusted 15:07:25.0872 0x0760 pci - ok 15:07:25.0990 0x0760 pciide C:\Windows\system32\drivers\pciide. sys 15:07:25.0990 0x0760 Suspicious file : C:\Windows\system32\drivers\pciide. sys. md5: 346E38FCC6859A727DD28AFAD1F0AFF4, sha256: FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 15:07:25.0995 0x0760 pciide - detected LockedFile. Multi. Generic ( 1 ) 15:07:28.0530 0x0760 Detect skipped due to KSN trusted 15:07:28.0530 0x0760 pciide - ok 15:07:28.0655 0x0760 pcmcia C:\Windows\system32\drivers\pcmcia. sys 15:07:28.0655 0x0760 Suspicious file : C:\Windows\system32\drivers\pcmcia. sys. md5: 4D3BDCC1C7B40C9D7B6AD990E6DEC397, sha256: 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E 15:07:28.0655 0x0760 pcmcia - detected LockedFile. Multi. Generic ( 1 ) 15:07:31.0264 0x0760 Detect skipped due to KSN trusted 15:07:31.0264 0x0760 pcmcia - ok 15:07:31.0405 0x0760 pcw C:\Windows\system32\drivers\pcw. sys 15:07:31.0405 0x0760 Suspicious file : C:\Windows\system32\drivers\pcw. sys. md5: BF28771D1436C88BE1D297D3098B0F7D, sha256: 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 15:07:31.0405 0x0760 pcw - detected LockedFile. Multi. Generic ( 1 ) 15:07:33.0952 0x0760 Detect skipped due to KSN trusted 15:07:33.0952 0x0760 pcw - ok 15:07:34.0061 0x0760 pdc C:\Windows\system32\drivers\pdc. sys 15:07:34.0061 0x0760 Suspicious file : C:\Windows\system32\drivers\pdc. sys. md5: 24A8DFC07E4BAF29AEA26E383D4CC886, sha256: 1B903FE52CD816662D37A8113930B4B7019B6996D49F1982D8F42933A3525A67 15:07:34.0061 0x0760 pdc - detected LockedFile. Multi. Generic ( 1 ) 15:07:36.0499 0x0760 Detect skipped due to KSN trusted 15:07:36.0499 0x0760 pdc - ok 15:07:36.0530 0x0760 PEAUTH C:\Windows\system32\drivers\peauth. sys 15:07:36.0530 0x0760 Suspicious file : C:\Windows\system32\drivers\peauth. sys. md5: 0ECEE590F2E2EF969FB74A6FC583A1E6, sha256: 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 15:07:36.0593 0x0760 PEAUTH - detected LockedFile. Multi. Generic ( 1 ) 15:07:39.0062 0x0760 Detect skipped due to KSN trusted 15:07:39.0062 0x0760 PEAUTH - ok 15:07:39.0140 0x0760 PeerDistSvc C:\Windows\system32\peerdistsvc. dll 15:07:39.0280 0x0760 PeerDistSvc - ok 15:07:39.0358 0x0760 PerfHost C:\Windows\SysWow64\perfhost. exe 15:07:39.0405 0x0760 PerfHost - ok 15:07:39.0499 0x0760 pla C:\Windows\system32\pla. dll 15:07:39.0562 0x0760 pla - ok 15:07:39.0608 0x0760 PlugPlay C:\Windows\system32\umpnpmgr. dll 15:07:39.0624 0x0760 PlugPlay - ok 15:07:39.0671 0x0760 PNRPAutoReg C:\Windows\system32\pnrpauto. dll 15:07:39.0687 0x0760 PNRPAutoReg - ok 15:07:39.0718 0x0760 PNRPsvc C:\Windows\system32\pnrpsvc. dll 15:07:39.0733 0x0760 PNRPsvc - ok 15:07:39.0796 0x0760 PolicyAgent C:\Windows\System32\ipsecsvc. dll 15:07:39.0812 0x0760 PolicyAgent - ok 15:07:39.0874 0x0760 Power C:\Windows\system32\umpo. dll 15:07:39.0937 0x0760 Power - ok 15:07:40.0062 0x0760 PrintNotify C:\Windows\system32\spool\drivers\x64\3\PrintConfig. dll 15:07:40.0233 0x0760 PrintNotify - ok 15:07:40.0265 0x0760 Processor C:\Windows\System32\drivers\processr. sys 15:07:40.0265 0x0760 Suspicious file : C:\Windows\System32\drivers\processr. sys. md5: ECD373F9571C745894367CC2635EA44F, sha256: E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 15:07:40.0265 0x0760 Processor - detected LockedFile. Multi. Generic ( 1 ) 15:07:42.0687 0x0760 Detect skipped due to KSN trusted 15:07:42.0687 0x0760 Processor - ok 15:07:42.0827 0x0760 ProfSvc C:\Windows\system32\profsvc. dll 15:07:42.0874 0x0760 ProfSvc - ok 15:07:42.0937 0x0760 Psched C:\Windows\system32\DRIVERS\pacer. sys 15:07:42.0937 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\pacer. sys. md5: FC0141B4A5AD6D637D883C1A89FC45C5, sha256: DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 15:07:42.0937 0x0760 Psched - detected LockedFile. Multi. Generic ( 1 ) 15:07:45.0359 0x0760 Detect skipped due to KSN trusted 15:07:45.0359 0x0760 Psched - ok 15:07:45.0609 0x0760 QWAVE C:\Windows\system32\qwave. dll 15:07:45.0656 0x0760 QWAVE - ok 15:07:45.0765 0x0760 QWAVEdrv C:\Windows\system32\drivers\qwavedrv. sys 15:07:45.0765 0x0760 Suspicious file : C:\Windows\system32\drivers\qwavedrv. sys. md5: 83868EB2924E6BC21A54337C65D614D1, sha256: 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 15:07:45.0827 0x0760 QWAVEdrv - detected LockedFile. Multi. Generic ( 1 ) 15:07:48.0359 0x0760 Detect skipped due to KSN trusted 15:07:48.0359 0x0760 QWAVEdrv - ok 15:07:48.0828 0x0760 RasAcd C:\Windows\system32\DRIVERS\rasacd. sys 15:07:48.0828 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\rasacd. sys. md5: B337B1F1E82A83E20A1743E008E25C0F, sha256: A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 15:07:49.0062 0x0760 RasAcd - detected LockedFile. Multi. Generic ( 1 ) 15:07:51.0609 0x0760 Detect skipped due to KSN trusted 15:07:51.0609 0x0760 RasAcd - ok 15:07:51.0890 0x0760 RasAuto C:\Windows\System32\rasauto. dll 15:07:51.0906 0x0760 RasAuto - ok 15:07:52.0172 0x0760 RasMan C:\Windows\System32\rasmans. dll 15:07:52.0187 0x0760 RasMan - ok 15:07:52.0547 0x0760 RasPppoe C:\Windows\system32\DRIVERS\raspppoe. sys 15:07:52.0547 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\raspppoe. sys. md5: 5247F308C4103CDC4FE12AE1D235800A, sha256: E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 15:07:52.0562 0x0760 RasPppoe - detected LockedFile. Multi. Generic ( 1 ) 15:07:54.0998 0x0760 Detect skipped due to KSN trusted 15:07:54.0998 0x0760 RasPppoe - ok 15:07:55.0078 0x0760 Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService. exe 15:07:55.0088 0x0760 Razer Game Scanner Service - ok 15:07:55.0123 0x0760 rdbss C:\Windows\system32\DRIVERS\rdbss. sys 15:07:55.0124 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\rdbss. sys. md5: A1A5E79C0D1352AFDC08328A623DA051, sha256: 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 15:07:55.0128 0x0760 rdbss - detected LockedFile. Multi. Generic ( 1 ) 15:07:57.0667 0x0760 Detect skipped due to KSN trusted 15:07:57.0667 0x0760 rdbss - ok 15:07:57.0727 0x0760 rdpbus C:\Windows\System32\drivers\rdpbus. sys 15:07:57.0728 0x0760 Suspicious file : C:\Windows\System32\drivers\rdpbus. sys. md5: 6B21EBF892CD8CACB71669B35AB5DE32, sha256: 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 15:07:57.0732 0x0760 rdpbus - detected LockedFile. Multi. Generic ( 1 ) 15:08:00.0182 0x0760 Detect skipped due to KSN trusted 15:08:00.0182 0x0760 rdpbus - ok 15:08:00.0203 0x0760 RDPDR C:\Windows\system32\drivers\rdpdr. sys 15:08:00.0203 0x0760 Suspicious file : C:\Windows\system32\drivers\rdpdr. sys. md5: 680C1DAE268B6FB67FA21B389A8B79EF, sha256: 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD 15:08:00.0208 0x0760 RDPDR - detected LockedFile. Multi. Generic ( 1 ) 15:08:02.0649 0x0760 Detect skipped due to KSN trusted 15:08:02.0649 0x0760 RDPDR - ok 15:08:02.0707 0x0760 RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport. sys 15:08:02.0707 0x0760 Suspicious file : C:\Windows\system32\drivers\rdpvideominiport. sys. md5: BC8A79C625568DDB7DCA49D0C2741A64, sha256: AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 15:08:02.0721 0x0760 RdpVideoMiniport - detected LockedFile. Multi. Generic ( 1 ) 15:08:05.0276 0x0760 Detect skipped due to KSN trusted 15:08:05.0277 0x0760 RdpVideoMiniport - ok 15:08:05.0311 0x0760 rdyboost C:\Windows\system32\drivers\rdyboost. sys 15:08:05.0311 0x0760 Suspicious file : C:\Windows\system32\drivers\rdyboost. sys. md5: A26AEC49F318FEE141DDDB2C5F99B3E6, sha256: 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F 15:08:05.0322 0x0760 rdyboost - detected LockedFile. Multi. Generic ( 1 ) 15:08:07.0859 0x0760 Detect skipped due to KSN trusted 15:08:07.0859 0x0760 rdyboost - ok 15:08:07.0934 0x0760 ReFS C:\Windows\system32\drivers\ReFS. sys 15:08:07.0934 0x0760 Suspicious file : C:\Windows\system32\drivers\ReFS. sys. md5: 615DFD97DEA56CE1C3A52185A3038FF8, sha256: 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 15:08:07.0939 0x0760 ReFS - detected LockedFile. Multi. Generic ( 1 ) 15:08:10.0372 0x0760 Detect skipped due to KSN trusted 15:08:10.0372 0x0760 ReFS - ok 15:08:10.0439 0x0760 RemoteAccess C:\Windows\System32\mprdim. dll 15:08:10.0463 0x0760 RemoteAccess - ok 15:08:10.0553 0x0760 RemoteRegistry C:\Windows\system32\regsvc. dll 15:08:10.0598 0x0760 RemoteRegistry - ok 15:08:10.0639 0x0760 RFCOMM C:\Windows\System32\drivers\rfcomm. sys 15:08:10.0639 0x0760 Suspicious file : C:\Windows\System32\drivers\rfcomm. sys. md5: DC66AE45816614D2999DCD3834DCCC4E, sha256: 1C26225135E851DDD1307F52401DD7055B26B3F3B8FDD693B21042C2896E235A 15:08:10.0663 0x0760 RFCOMM - detected LockedFile. Multi. Generic ( 1 ) 15:08:13.0239 0x0760 Detect skipped due to KSN trusted 15:08:13.0239 0x0760 RFCOMM - ok 15:08:13.0363 0x0760 RpcEptMapper C:\Windows\System32\RpcEpMap. dll 15:08:13.0386 0x0760 RpcEptMapper - ok 15:08:13.0431 0x0760 RpcLocator C:\Windows\system32\locator. exe 15:08:13.0456 0x0760 RpcLocator - ok 15:08:13.0530 0x0760 RpcSs C:\Windows\system32\rpcss. dll 15:08:13.0555 0x0760 RpcSs - ok 15:08:13.0594 0x0760 rspndr C:\Windows\system32\DRIVERS\rspndr. sys 15:08:13.0594 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\rspndr. sys. md5: 2D05A5508F4685412F2B89E8C2189ABC, sha256: 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D 15:08:13.0630 0x0760 rspndr - detected LockedFile. Multi. Generic ( 1 ) 15:08:16.0090 0x0760 Detect skipped due to KSN trusted 15:08:16.0090 0x0760 rspndr - ok 15:08:16.0152 0x0760 RzKLService C:\Program Files (x86)\Razer\Razer Cortex\RzKLService. exe 15:08:16.0162 0x0760 RzKLService - ok 15:08:16.0182 0x0760 rzpmgrk C:\Windows\system32\drivers\rzpmgrk. sys 15:08:16.0182 0x0760 Suspicious file : C:\Windows\system32\drivers\rzpmgrk. sys. md5: F17F84511E7DFDEEAB646F0699A006D7, sha256: 5237937841FBD1F99A5D6161DEBA26182DDAF617CA98946EE7DB0AB67FC149EA 15:08:16.0186 0x0760 rzpmgrk - detected LockedFile. Multi. Generic ( 1 ) 15:08:19.0657 0x0760 Detect skipped due to KSN trusted 15:08:19.0657 0x0760 rzpmgrk - ok 15:08:19.0731 0x0760 s3cap C:\Windows\System32\drivers\vms3cap. sys 15:08:19.0731 0x0760 Suspicious file : C:\Windows\System32\drivers\vms3cap. sys. md5: 1A063730F221B2746FF00457AE17E4F0, sha256: 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 15:08:19.0738 0x0760 s3cap - detected LockedFile. Multi. Generic ( 1 ) 15:08:22.0285 0x0760 Detect skipped due to KSN trusted 15:08:22.0285 0x0760 s3cap - ok 15:08:22.0334 0x0760 SamSs C:\Windows\system32\lsass. exe 15:08:22.0342 0x0760 SamSs - ok 15:08:22.0408 0x0760 sbp2port C:\Windows\system32\drivers\sbp2port. sys 15:08:22.0408 0x0760 Suspicious file : C:\Windows\system32\drivers\sbp2port. sys. md5: C624A1B32211C3166EDB3F4AB02A30B7, sha256: 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 15:08:22.0468 0x0760 sbp2port - detected LockedFile. Multi. Generic ( 1 ) 15:08:24.0940 0x0760 Detect skipped due to KSN trusted 15:08:24.0940 0x0760 sbp2port - ok 15:08:25.0027 0x0760 SCardSvr C:\Windows\System32\SCardSvr. dll 15:08:25.0055 0x0760 SCardSvr - ok 15:08:25.0146 0x0760 ScDeviceEnum C:\Windows\System32\ScDeviceEnum. dll 15:08:25.0172 0x0760 ScDeviceEnum - ok 15:08:25.0217 0x0760 scfilter C:\Windows\system32\DRIVERS\scfilter. sys 15:08:25.0217 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\scfilter. sys. md5: 13BEA6C882D4D877A5A85CA149C86BC1, sha256: 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F 15:08:25.0242 0x0760 scfilter - detected LockedFile. Multi. Generic ( 1 ) 15:08:27.0809 0x0760 Detect skipped due to KSN trusted 15:08:27.0809 0x0760 scfilter - ok 15:08:27.0886 0x0760 Schedule C:\Windows\system32\schedsvc. dll 15:08:27.0942 0x0760 Schedule - ok 15:08:27.0993 0x0760 SCPolicySvc C:\Windows\System32\certprop. dll 15:08:28.0004 0x0760 SCPolicySvc - ok 15:08:28.0074 0x0760 sdbus C:\Windows\System32\drivers\sdbus. sys 15:08:28.0074 0x0760 Suspicious file : C:\Windows\System32\drivers\sdbus. sys. md5: C54B6B2170BF628FD42F799A66956D75, sha256: BCF460A124CAA6F1F1A9A7BCBDCC2D5E39B0404D96B7C9FFAC806E041782B91E 15:08:28.0084 0x0760 sdbus - detected LockedFile. Multi. Generic ( 1 ) 15:08:30.0649 0x0760 Detect skipped due to KSN trusted 15:08:30.0649 0x0760 sdbus - ok 15:08:30.0710 0x0760 sdstor C:\Windows\System32\drivers\sdstor. sys 15:08:30.0710 0x0760 Suspicious file : C:\Windows\System32\drivers\sdstor. sys. md5: 0B1E929D11A8E358106955603FAC65E8, sha256: A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 15:08:30.0717 0x0760 sdstor - detected LockedFile. Multi. Generic ( 1 ) 15:08:33.0154 0x0760 Detect skipped due to KSN trusted 15:08:33.0154 0x0760 sdstor - ok 15:08:33.0181 0x0760 secdrv C:\Windows\system32\drivers\secdrv. sys 15:08:33.0182 0x0760 Suspicious file : C:\Windows\system32\drivers\secdrv. sys. md5: 3EA8A16169C26AFBEB544E0E48421186, sha256: 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D 15:08:33.0189 0x0760 secdrv - detected LockedFile. Multi. Generic ( 1 ) 15:08:35.0714 0x0760 Detect skipped due to KSN trusted 15:08:35.0714 0x0760 secdrv - ok 15:08:35.0776 0x0760 seclogon C:\Windows\system32\seclogon. dll 15:08:35.0798 0x0760 seclogon - ok 15:08:35.0856 0x0760 SENS C:\Windows\System32\sens. dll 15:08:35.0876 0x0760 SENS - ok 15:08:35.0941 0x0760 SensrSvc C:\Windows\system32\sensrsvc. dll 15:08:36.0048 0x0760 SensrSvc - ok 15:08:36.0080 0x0760 SerCx C:\Windows\system32\drivers\SerCx. sys 15:08:36.0080 0x0760 Suspicious file : C:\Windows\system32\drivers\SerCx. sys. md5: DB2FF24CE0BDD15FE75870AFE312BA89, sha256: 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 15:08:36.0086 0x0760 SerCx - detected LockedFile. Multi. Generic ( 1 ) 15:08:38.0629 0x0760 Detect skipped due to KSN trusted 15:08:38.0629 0x0760 SerCx - ok 15:08:38.0647 0x0760 SerCx2 C:\Windows\system32\drivers\SerCx2. sys 15:08:38.0647 0x0760 Suspicious file : C:\Windows\system32\drivers\SerCx2. sys. md5: 0044B31F93946D5D41982314381FE431, sha256: 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 15:08:38.0651 0x0760 SerCx2 - detected LockedFile. Multi. Generic ( 1 ) 15:08:41.0208 0x0760 Detect skipped due to KSN trusted 15:08:41.0208 0x0760 SerCx2 - ok 15:08:41.0218 0x0760 Serenum C:\Windows\System32\drivers\serenum. sys 15:08:41.0218 0x0760 Suspicious file : C:\Windows\System32\drivers\serenum. sys. md5: 3CD600C089C1251BEEB4CD4CD5164F9E, sha256: D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 15:08:41.0221 0x0760 Serenum - detected LockedFile. Multi. Generic ( 1 ) 15:08:43.0675 0x0760 Detect skipped due to KSN trusted 15:08:43.0675 0x0760 Serenum - ok 15:08:46.0029 0x0760 Serial C:\Windows\System32\drivers\serial. sys 15:08:46.0030 0x0760 Suspicious file : C:\Windows\System32\drivers\serial. sys. md5: D864381BC9C725FAB01D94C060660166, sha256: 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 15:08:47.0025 0x0760 Serial - detected LockedFile. Multi. Generic ( 1 ) 15:08:49.0587 0x0760 Detect skipped due to KSN trusted 15:08:49.0587 0x0760 Serial - ok 15:08:50.0326 0x0760 sermouse C:\Windows\System32\drivers\sermouse. sys 15:08:50.0327 0x0760 Suspicious file : C:\Windows\System32\drivers\sermouse. sys. md5: 96B01F117057FB4DAE0FF919ACB55770, sha256: D0F58F1CAE4F81D60FCE60BB0065A34B4F897E8105DF17B6DAA334938CD25A56 15:08:50.0352 0x0760 sermouse - detected LockedFile. Multi. Generic ( 1 ) 15:08:53.0407 0x0760 Detect skipped due to KSN trusted 15:08:53.0407 0x0760 sermouse - ok 15:08:56.0497 0x0760 Service KMSELDI C:\Program Files\KMSpico\Service_KMS. exe 15:08:56.0577 0x0760 Service KMSELDI - detected UnsignedFile. Multi. Generic ( 1 ) 15:08:59.0329 0x0760 Service KMSELDI - warning 15:09:01.0891 0x0760 SessionEnv C:\Windows\system32\sessenv. dll 15:09:01.0969 0x0760 SessionEnv - ok 15:09:01.0985 0x0760 sfloppy C:\Windows\System32\drivers\sfloppy. sys 15:09:01.0985 0x0760 Suspicious file : C:\Windows\System32\drivers\sfloppy. sys. md5: 472B7A5AC181C050888DB454663DD764, sha256: C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 15:09:02.0016 0x0760 sfloppy - detected LockedFile. Multi. Generic ( 1 ) 15:09:04.0563 0x0760 Detect skipped due to KSN trusted 15:09:04.0563 0x0760 sfloppy - ok 15:09:04.0626 0x0760 SharedAccess C:\Windows\System32\ipnathlp. dll 15:09:04.0657 0x0760 SharedAccess - ok 15:09:04.0720 0x0760 ShellHWDetection C:\Windows\System32\shsvcs. dll 15:09:04.0782 0x0760 ShellHWDetection - ok 15:09:04.0798 0x0760 SiSRaid2 C:\Windows\system32\drivers\SiSRaid2. sys 15:09:04.0798 0x0760 Suspicious file : C:\Windows\system32\drivers\SiSRaid2. sys. md5: 2F518D13DD6F3053837FE606F1A2EA1F, sha256: 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 15:09:04.0813 0x0760 SiSRaid2 - detected LockedFile. Multi. Generic ( 1 ) 15:09:07.0407 0x0760 Detect skipped due to KSN trusted 15:09:07.0407 0x0760 SiSRaid2 - ok 15:09:07.0423 0x0760 SiSRaid4 C:\Windows\system32\drivers\sisraid4. sys 15:09:07.0423 0x0760 Suspicious file : C:\Windows\system32\drivers\sisraid4. sys. md5: 1AC9A200A9C49C4508F04AAFFCA34A3F, sha256: 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 15:09:07.0423 0x0760 SiSRaid4 - detected LockedFile. Multi. Generic ( 1 ) 15:09:10.0017 0x0760 Detect skipped due to KSN trusted 15:09:10.0017 0x0760 SiSRaid4 - ok 15:09:10.0110 0x0760 SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater. exe 15:09:10.0126 0x0760 SkypeUpdate - ok 15:09:10.0173 0x0760 smphost C:\Windows\System32\smphost. dll 15:09:10.0204 0x0760 smphost - ok 15:09:10.0282 0x0760 SNMPTRAP C:\Windows\System32\snmptrap. exe 15:09:10.0282 0x0760 SNMPTRAP - ok 15:09:10.0345 0x0760 spaceport C:\Windows\system32\drivers\spaceport. sys 15:09:10.0345 0x0760 Suspicious file : C:\Windows\system32\drivers\spaceport. sys. md5: D24B1945ED1F9C96DA786DBBF1E983CE, sha256: B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 15:09:10.0360 0x0760 spaceport - detected LockedFile. Multi. Generic ( 1 ) 15:09:12.0829 0x0760 Detect skipped due to KSN trusted 15:09:12.0829 0x0760 spaceport - ok 15:09:12.0845 0x0760 SpbCx C:\Windows\system32\drivers\SpbCx. sys 15:09:12.0845 0x0760 Suspicious file : C:\Windows\system32\drivers\SpbCx. sys. md5: F337BE11071818FC3F5DC2940B6BDE34, sha256: D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D 15:09:12.0845 0x0760 SpbCx - detected LockedFile. Multi. Generic ( 1 ) 15:09:15.0314 0x0760 Detect skipped due to KSN trusted 15:09:15.0314 0x0760 SpbCx - ok 15:09:15.0423 0x0760 Spooler C:\Windows\System32\spoolsv. exe 15:09:15.0501 0x0760 Spooler - ok 15:09:15.0689 0x0760 sppsvc C:\Windows\system32\sppsvc. exe 15:09:15.0908 0x0760 sppsvc - ok 15:09:15.0970 0x0760 srv C:\Windows\system32\DRIVERS\srv. sys 15:09:15.0970 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\srv. sys. md5: 6416E79A58A8FCC33A447A4DDDD3BF04, sha256: 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 15:09:15.0986 0x0760 srv - detected LockedFile. Multi. Generic ( 1 ) 15:09:18.0533 0x0760 Detect skipped due to KSN trusted 15:09:18.0533 0x0760 srv - ok 15:09:18.0611 0x0760 srv2 C:\Windows\system32\DRIVERS\srv2. sys 15:09:18.0611 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\srv2. sys. md5: 00D8AC8E3053290BDE6EA2FB6810D2FC, sha256: 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D 15:09:18.0611 0x0760 srv2 - detected LockedFile. Multi. Generic ( 1 ) 15:09:21.0033 0x0760 Detect skipped due to KSN trusted 15:09:21.0033 0x0760 srv2 - ok 15:09:21.0095 0x0760 srvnet C:\Windows\system32\DRIVERS\srvnet. sys 15:09:21.0095 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\srvnet. sys. md5: D047CD668E6277FD80F0C613946F034C, sha256: BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 15:09:21.0127 0x0760 srvnet - detected LockedFile. Multi. Generic ( 1 ) 15:09:23.0689 0x0760 Detect skipped due to KSN trusted 15:09:23.0689 0x0760 srvnet - ok 15:09:23.0736 0x0760 SSDPSRV C:\Windows\System32\ssdpsrv. dll 15:09:23.0752 0x0760 SSDPSRV - ok 15:09:23.0830 0x0760 SstpSvc C:\Windows\system32\sstpsvc. dll 15:09:23.0845 0x0760 SstpSvc - ok 15:09:23.0908 0x0760 Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService. exe 15:09:23.0924 0x0760 Steam Client Service - ok 15:09:23.0955 0x0760 stexstor C:\Windows\system32\drivers\stexstor. sys 15:09:23.0955 0x0760 Suspicious file : C:\Windows\system32\drivers\stexstor. sys. md5: 366DEA74BBA65B362BCCFC6FC2ADFD8B, sha256: 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 15:09:23.0970 0x0760 stexstor - detected LockedFile. Multi. Generic ( 1 ) 15:09:26.0408 0x0760 Detect skipped due to KSN trusted 15:09:26.0408 0x0760 stexstor - ok 15:09:26.0486 0x0760 stisvc C:\Windows\System32\wiaservc. dll 15:09:26.0580 0x0760 stisvc - ok 15:09:26.0596 0x0760 storahci C:\Windows\system32\drivers\storahci. sys 15:09:26.0596 0x0760 Suspicious file : C:\Windows\system32\drivers\storahci. sys. md5: 0ED2E318ABB68C1A35A8B8038BDB4C90, sha256: 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 15:09:26.0611 0x0760 storahci - detected LockedFile. Multi. Generic ( 1 ) 15:09:29.0064 0x0760 Detect skipped due to KSN trusted 15:09:29.0064 0x0760 storahci - ok 15:09:29.0127 0x0760 storflt C:\Windows\system32\drivers\vmstorfl. sys 15:09:29.0127 0x0760 Suspicious file : C:\Windows\system32\drivers\vmstorfl. sys. md5: 8B9486B64E5FC17FB9CC04CA10B77A34, sha256: C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 15:09:29.0361 0x0760 storflt - detected LockedFile. Multi. Generic ( 1 ) 15:09:31.0924 0x0760 Detect skipped due to KSN trusted 15:09:31.0924 0x0760 storflt - ok 15:09:31.0955 0x0760 stornvme C:\Windows\system32\drivers\stornvme. sys 15:09:31.0955 0x0760 Suspicious file : C:\Windows\system32\drivers\stornvme. sys. md5: 6B06E2D11E604BE2B1A406C4CB3B90DE, sha256: 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 15:09:31.0971 0x0760 stornvme - detected LockedFile. Multi. Generic ( 1 ) 15:09:34.0408 0x0760 Detect skipped due to KSN trusted 15:09:34.0408 0x0760 stornvme - ok 15:09:34.0549 0x0760 StorSvc C:\Windows\system32\storsvc. dll 15:09:34.0612 0x0760 StorSvc - ok 15:09:34.0627 0x0760 storvsc C:\Windows\system32\drivers\storvsc. sys 15:09:34.0627 0x0760 Suspicious file : C:\Windows\system32\drivers\storvsc. sys. md5: 548759755BC73DAD663250239D7E0B9F, sha256: D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D 15:09:34.0643 0x0760 storvsc - detected LockedFile. Multi. Generic ( 1 ) 15:09:37.0080 0x0760 Detect skipped due to KSN trusted 15:09:37.0080 0x0760 storvsc - ok 15:09:37.0096 0x0760 storvsp C:\Windows\System32\drivers\storvsp. sys 15:09:37.0096 0x0760 Suspicious file : C:\Windows\System32\drivers\storvsp. sys. md5: 03618F935379614837F915D04C45FC0E, sha256: 9CC0CBA7AFC58E7F921C13FA3F5269714F1F827535A311E11EA48689C4D539DE 15:09:37.0112 0x0760 storvsp - detected LockedFile. Multi. Generic ( 1 ) 15:09:39.0659 0x0760 Detect skipped due to KSN trusted 15:09:39.0659 0x0760 storvsp - ok 15:09:39.0815 0x0760 svsvc C:\Windows\system32\svsvc. dll 15:09:39.0831 0x0760 svsvc - ok 15:09:39.0924 0x0760 swenum C:\Windows\System32\drivers\swenum. sys 15:09:39.0924 0x0760 Suspicious file : C:\Windows\System32\drivers\swenum. sys. md5: 65454187E0F8B6C0DCECB0287D06EC43, sha256: 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE 15:09:39.0971 0x0760 swenum - detected LockedFile. Multi. Generic ( 1 ) 15:09:42.0440 0x0760 Detect skipped due to KSN trusted 15:09:42.0440 0x0760 swenum - ok 15:09:42.0518 0x0760 swprv C:\Windows\System32\swprv. dll 15:09:42.0565 0x0760 swprv - ok 15:09:42.0643 0x0760 SysMain C:\Windows\system32\sysmain. dll 15:09:42.0706 0x0760 SysMain - ok 15:09:43.0253 0x0760 SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer. dll 15:09:43.0362 0x0760 SystemEventsBroker - ok 15:09:43.0487 0x0760 TabletInputService C:\Windows\System32\TabSvc. dll 15:09:43.0612 0x0760 TabletInputService - ok 15:09:43.0706 0x0760 TapiSrv C:\Windows\System32\tapisrv. dll 15:09:43.0815 0x0760 TapiSrv - ok 15:09:43.0956 0x0760 Tcpip C:\Windows\system32\drivers\tcpip. sys 15:09:43.0956 0x0760 Suspicious file : C:\Windows\system32\drivers\tcpip. sys. md5: 468273F7089A3A33D149955F0F203FA4, sha256: 18FD0B73FBD63550E904EE76D4323EFE163BFF8C3DC6DE67F4BE6003C7DC6879 15:09:44.0034 0x0760 Tcpip - detected LockedFile. Multi. Generic ( 1 ) 15:09:46.0581 0x0760 Detect skipped due to KSN trusted 15:09:46.0581 0x0760 Tcpip - ok 15:09:46.0675 0x0760 TCPIP6 C:\Windows\system32\DRIVERS\tcpip. sys 15:09:46.0675 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\tcpip. sys. md5: 468273F7089A3A33D149955F0F203FA4, sha256: 18FD0B73FBD63550E904EE76D4323EFE163BFF8C3DC6DE67F4BE6003C7DC6879 15:09:46.0706 0x0760 TCPIP6 - detected LockedFile. Multi. Generic ( 1 ) 15:09:46.0706 0x0760 Detect skipped due to KSN trusted 15:09:46.0706 0x0760 TCPIP6 - ok 15:09:46.0753 0x0760 tcpipreg C:\Windows\system32\drivers\tcpipreg. sys 15:09:46.0753 0x0760 Suspicious file : C:\Windows\system32\drivers\tcpipreg. sys. md5: 41CF802064F72E55F50CA0A221FD36D4, sha256: 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F 15:09:46.0768 0x0760 tcpipreg - detected LockedFile. Multi. Generic ( 1 ) 15:09:49.0581 0x0760 Detect skipped due to KSN trusted 15:09:49.0581 0x0760 tcpipreg - ok 15:09:49.0659 0x0760 tdx C:\Windows\system32\DRIVERS\tdx. sys 15:09:49.0659 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\tdx. sys. md5: FFF28F9F6823EB1756C60F1649560BBF, sha256: 208DFF8BF0329D0D4761C7E31527AEED7FF5F3C36C5005953D01477F35408D5C 15:09:49.0737 0x0760 tdx - detected LockedFile. Multi. Generic ( 1 ) 15:09:52.0284 0x0760 Detect skipped due to KSN trusted 15:09:52.0284 0x0760 tdx - ok 15:09:52.0612 0x0760 TeamViewer C:\Program Files (x86)\TeamViewer\TeamViewer_Service. exe 15:09:52.0769 0x0760 TeamViewer - ok 15:09:52.0831 0x0760 terminpt C:\Windows\System32\drivers\terminpt. sys 15:09:52.0831 0x0760 Suspicious file : C:\Windows\System32\drivers\terminpt. sys. md5: 232D185D2337F141311D0CF1983E1431, sha256: 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 15:09:52.0878 0x0760 terminpt - detected LockedFile. Multi. Generic ( 1 ) 15:09:55.0425 0x0760 Detect skipped due to KSN trusted 15:09:55.0425 0x0760 terminpt - ok 15:09:55.0691 0x0760 TermService C:\Windows\System32\termsrv. dll 15:09:55.0738 0x0760 TermService - ok 15:09:55.0863 0x0760 Themes C:\Windows\system32\themeservice. dll 15:09:55.0878 0x0760 Themes - ok 15:09:55.0941 0x0760 THREADORDER C:\Windows\system32\mmcss. dll 15:09:55.0956 0x0760 THREADORDER - ok 15:09:56.0019 0x0760 TimeBroker C:\Windows\System32\TimeBrokerServer. dll 15:09:56.0066 0x0760 TimeBroker - ok 15:09:56.0097 0x0760 TPM C:\Windows\system32\drivers\tpm. sys 15:09:56.0097 0x0760 Suspicious file : C:\Windows\system32\drivers\tpm. sys. md5: 82F909359600D3603FE852DB7F135626, sha256: 2EB2BB9D81AC9A2E432B2628E296B7B21F1C82EAE8009300EEF1B8596A9F418D 15:09:56.0128 0x0760 TPM - detected LockedFile. Multi. Generic ( 1 ) 15:09:58.0675 0x0760 Detect skipped due to KSN trusted 15:09:58.0675 0x0760 TPM - ok 15:09:58.0769 0x0760 TrkWks C:\Windows\System32\trkwks. dll 15:09:58.0800 0x0760 TrkWks - ok 15:09:58.0878 0x0760 TrustedInstaller C:\Windows\servicing\TrustedInstaller. exe 15:09:58.0941 0x0760 TrustedInstaller - ok 15:09:58.0972 0x0760 TsUsbFlt C:\Windows\system32\drivers\tsusbflt. sys 15:09:58.0972 0x0760 Suspicious file : C:\Windows\system32\drivers\tsusbflt. sys. md5: BF8F54CA37E9C9D6582C31C5761F8C93, sha256: 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F 15:09:58.0988 0x0760 TsUsbFlt - detected LockedFile. Multi. Generic ( 1 ) 15:10:01.0441 0x0760 Detect skipped due to KSN trusted 15:10:01.0441 0x0760 TsUsbFlt - ok 15:10:01.0488 0x0760 TsUsbGD C:\Windows\System32\drivers\TsUsbGD. sys 15:10:01.0488 0x0760 Suspicious file : C:\Windows\System32\drivers\TsUsbGD. sys. md5: 20185BEB7512EDE4EFECDFA148AC9F99, sha256: 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F 15:10:01.0503 0x0760 TsUsbGD - detected LockedFile. Multi. Generic ( 1 ) 15:10:04.0050 0x0760 Detect skipped due to KSN trusted 15:10:04.0050 0x0760 TsUsbGD - ok 15:10:04.0082 0x0760 tunnel C:\Windows\system32\DRIVERS\tunnel. sys 15:10:04.0082 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\tunnel. sys. md5: C8E0E78B5D284C2FF59BDFFDAF997242, sha256: BA1576C491A1246EF9866762426D110F4570F9DB42A68C174943C7D5020FE3E2 15:10:04.0082 0x0760 tunnel - detected LockedFile. Multi. Generic ( 1 ) 15:10:06.0769 0x0760 Detect skipped due to KSN trusted 15:10:06.0769 0x0760 tunnel - ok 15:10:06.0832 0x0760 uagp35 C:\Windows\system32\drivers\uagp35. sys 15:10:06.0832 0x0760 Suspicious file : C:\Windows\system32\drivers\uagp35. sys. md5: F6EEAD052943B5A3104C1405BB856C54, sha256: FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 15:10:06.0879 0x0760 uagp35 - detected LockedFile. Multi. Generic ( 1 ) 15:10:09.0332 0x0760 Detect skipped due to KSN trusted 15:10:09.0332 0x0760 uagp35 - ok 15:10:09.0535 0x0760 UASPStor C:\Windows\System32\drivers\uaspstor. sys 15:10:09.0535 0x0760 Suspicious file : C:\Windows\System32\drivers\uaspstor. sys. md5: FE6067B1FD4E63650C667B33D080565B, sha256: 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 15:10:09.0691 0x0760 UASPStor - detected LockedFile. Multi. Generic ( 1 ) 15:10:12.0113 0x0760 Detect skipped due to KSN trusted 15:10:12.0113 0x0760 UASPStor - ok 15:10:12.0301 0x0760 UCX01000 C:\Windows\System32\drivers\ucx01000. sys 15:10:12.0301 0x0760 Suspicious file : C:\Windows\System32\drivers\ucx01000. sys. md5: 807F8CF3E973305FC435C61CBBEE2A49, sha256: 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 15:10:12.0410 0x0760 UCX01000 - detected LockedFile. Multi. Generic ( 1 ) 15:10:14.0863 0x0760 Detect skipped due to KSN trusted 15:10:14.0863 0x0760 UCX01000 - ok 15:10:15.0020 0x0760 udfs C:\Windows\system32\DRIVERS\udfs. sys 15:10:15.0035 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\udfs. sys. md5: C61EAF8E1E4B2F62BA4FDF457440B2C6, sha256: 961F76A789925234AC27F56AAE34556FA06088D71580B42C24B0BC209EAFD67E 15:10:15.0082 0x0760 udfs - detected LockedFile. Multi. Generic ( 1 ) 15:10:17.0535 0x0760 Detect skipped due to KSN trusted 15:10:17.0535 0x0760 udfs - ok 15:10:17.0582 0x0760 UEFI C:\Windows\System32\drivers\UEFI. sys 15:10:17.0582 0x0760 Suspicious file : C:\Windows\System32\drivers\UEFI. sys. md5: 9578691F297E1B1F519970FE6D47CB21, sha256: 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 15:10:17.0582 0x0760 UEFI - detected LockedFile. Multi. Generic ( 1 ) 15:10:20.0145 0x0760 Detect skipped due to KSN trusted 15:10:20.0145 0x0760 UEFI - ok 15:10:20.0239 0x0760 UI0Detect C:\Windows\system32\UI0Detect. exe 15:10:20.0254 0x0760 UI0Detect - ok 15:10:20.0270 0x0760 uliagpkx C:\Windows\system32\drivers\uliagpkx. sys 15:10:20.0270 0x0760 Suspicious file : C:\Windows\system32\drivers\uliagpkx. sys. md5: 5EAB5117DDB24FC4D39E6FFFCF1837B9, sha256: 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 15:10:20.0301 0x0760 uliagpkx - detected LockedFile. Multi. Generic ( 1 ) 15:10:22.0817 0x0760 Detect skipped due to KSN trusted 15:10:22.0817 0x0760 uliagpkx - ok 15:10:23.0005 0x0760 umbus C:\Windows\System32\drivers\umbus. sys 15:10:23.0005 0x0760 Suspicious file : C:\Windows\System32\drivers\umbus. sys. md5: DA34C39A18E60E7C3FA0630566408034, sha256: 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 15:10:23.0067 0x0760 umbus - detected LockedFile. Multi. Generic ( 1 ) 15:10:25.0630 0x0760 Detect skipped due to KSN trusted 15:10:25.0630 0x0760 umbus - ok 15:10:25.0848 0x0760 UmPass C:\Windows\System32\drivers\umpass. sys 15:10:25.0848 0x0760 Suspicious file : C:\Windows\System32\drivers\umpass. sys. md5: AE8294875E5446E359B1E8035D40C05E, sha256: AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA 15:10:25.0927 0x0760 UmPass - detected LockedFile. Multi. Generic ( 1 ) 15:10:28.0567 0x0760 Detect skipped due to KSN trusted 15:10:28.0567 0x0760 UmPass - ok 15:10:29.0020 0x0760 UmRdpService C:\Windows\System32\umrdp. dll 15:10:29.0161 0x0760 UmRdpService - ok 15:10:29.0458 0x0760 upnphost C:\Windows\System32\upnphost. dll 15:10:29.0489 0x0760 upnphost - ok 15:10:29.0786 0x0760 usbccgp C:\Windows\System32\drivers\usbccgp. sys 15:10:29.0786 0x0760 Suspicious file : C:\Windows\System32\drivers\usbccgp. sys. md5: FF78D053A05E5A394F4E3C1816CC65A8, sha256: 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D 15:10:29.0849 0x0760 usbccgp - detected LockedFile. Multi. Generic ( 1 ) 15:10:32.0302 0x0760 Detect skipped due to KSN trusted 15:10:32.0302 0x0760 usbccgp - ok 15:10:32.0505 0x0760 usbcir C:\Windows\System32\drivers\usbcir. sys 15:10:32.0505 0x0760 Suspicious file : C:\Windows\System32\drivers\usbcir. sys. md5: 0139248F6B95CF0D837B5B46A2722D40, sha256: 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 15:10:32.0692 0x0760 usbcir - detected LockedFile. Multi. Generic ( 1 ) 15:10:35.0146 0x0760 Detect skipped due to KSN trusted 15:10:35.0146 0x0760 usbcir - ok 15:10:35.0224 0x0760 usbehci C:\Windows\System32\drivers\usbehci. sys 15:10:35.0224 0x0760 Suspicious file : C:\Windows\System32\drivers\usbehci. sys. md5: 48BA326A3DBA5B5BEB5F2777F4618696, sha256: B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 15:10:35.0239 0x0760 usbehci - detected LockedFile. Multi. Generic ( 1 ) 15:10:37.0724 0x0760 Detect skipped due to KSN trusted 15:10:37.0724 0x0760 usbehci - ok 15:10:37.0802 0x0760 usbhub C:\Windows\System32\drivers\usbhub. sys 15:10:37.0802 0x0760 Suspicious file : C:\Windows\System32\drivers\usbhub. sys. md5: FEF0BC107812B36849741C3211BA6B60, sha256: B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD 15:10:37.0958 0x0760 usbhub - detected LockedFile. Multi. Generic ( 1 ) 15:10:40.0537 0x0760 Detect skipped due to KSN trusted 15:10:40.0537 0x0760 usbhub - ok 15:10:40.0615 0x0760 USBHUB3 C:\Windows\System32\drivers\UsbHub3. sys 15:10:40.0615 0x0760 Suspicious file : C:\Windows\System32\drivers\UsbHub3. sys. md5: 95B0179BDA907252025DEEA183699FB3, sha256: A6BDFB93EE9418A83407024204A41640A08638C60E2BE75C249D102601DC1D80 15:10:40.0662 0x0760 USBHUB3 - detected LockedFile. Multi. Generic ( 1 ) 15:10:43.0193 0x0760 Detect skipped due to KSN trusted 15:10:43.0193 0x0760 USBHUB3 - ok 15:10:43.0255 0x0760 usbohci C:\Windows\System32\drivers\usbohci. sys 15:10:43.0255 0x0760 Suspicious file : C:\Windows\System32\drivers\usbohci. sys. md5: 3019097FB6C985EF24C058090FF3BDBD, sha256: 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 15:10:43.0318 0x0760 usbohci - detected LockedFile. Multi. Generic ( 1 ) 15:10:45.0771 0x0760 Detect skipped due to KSN trusted 15:10:45.0771 0x0760 usbohci - ok 15:10:45.0849 0x0760 usbprint C:\Windows\System32\drivers\usbprint. sys 15:10:45.0849 0x0760 Suspicious file : C:\Windows\System32\drivers\usbprint. sys. md5: 4D655E3B684BE9B0F7FFD8A2935C348C, sha256: 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 15:10:45.0865 0x0760 usbprint - detected LockedFile. Multi. Generic ( 1 ) 15:10:48.0412 0x0760 Detect skipped due to KSN trusted 15:10:48.0412 0x0760 usbprint - ok 15:10:48.0459 0x0760 USBSTOR C:\Windows\System32\drivers\USBSTOR. SYS 15:10:48.0459 0x0760 Suspicious file : C:\Windows\System32\drivers\USBSTOR. SYS. md5: 66732C13628BDB1AB0D6FD46027327C2, sha256: B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C 15:10:48.0506 0x0760 USBSTOR - detected LockedFile. Multi. Generic ( 1 ) 15:10:51.0068 0x0760 Detect skipped due to KSN trusted 15:10:51.0068 0x0760 USBSTOR - ok 15:10:51.0287 0x0760 usbuhci C:\Windows\System32\drivers\usbuhci. sys 15:10:51.0287 0x0760 Suspicious file : C:\Windows\System32\drivers\usbuhci. sys. md5: 064260B3A5868AC894A4943543BC7AB7, sha256: D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 15:10:51.0381 0x0760 usbuhci - detected LockedFile. Multi. Generic ( 1 ) 15:10:53.0928 0x0760 Detect skipped due to KSN trusted 15:10:53.0928 0x0760 usbuhci - ok 15:10:54.0022 0x0760 usbvideo C:\Windows\System32\Drivers\usbvideo. sys 15:10:54.0022 0x0760 Suspicious file : C:\Windows\System32\Drivers\usbvideo. sys. md5: 5C8F604F6DC74177CDD8372D7B1ADFF0, sha256: C1DE9A37A7A01CCCBFCE13C1E5B26683F620AB21EDA5A14C82022E2F49C84484 15:10:54.0053 0x0760 usbvideo - detected LockedFile. Multi. Generic ( 1 ) 15:10:56.0600 0x0760 Detect skipped due to KSN trusted 15:10:56.0600 0x0760 usbvideo - ok 15:10:56.0678 0x0760 USBXHCI C:\Windows\System32\drivers\USBXHCI. SYS 15:10:56.0678 0x0760 Suspicious file : C:\Windows\System32\drivers\USBXHCI. SYS. md5: 44603DA5A87FB491EF59C889EBBB4DDB, sha256: 59AA9B6B0B5D66F9312CD3F999D0D9F12F1A2C5D230365AD7287CD71FD86961C 15:10:56.0709 0x0760 USBXHCI - detected LockedFile. Multi. Generic ( 1 ) 15:10:59.0241 0x0760 Detect skipped due to KSN trusted 15:10:59.0241 0x0760 USBXHCI - ok 15:10:59.0303 0x0760 VaultSvc C:\Windows\system32\lsass. exe 15:10:59.0319 0x0760 VaultSvc - ok 15:10:59.0350 0x0760 vdrvroot C:\Windows\system32\drivers\vdrvroot. sys 15:10:59.0350 0x0760 Suspicious file : C:\Windows\system32\drivers\vdrvroot. sys. md5: FEB26E3B8345A7E8D62F945C4AE86562, sha256: 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF 15:10:59.0350 0x0760 vdrvroot - detected LockedFile. Multi. Generic ( 1 ) 15:11:01.0897 0x0760 Detect skipped due to KSN trusted 15:11:01.0897 0x0760 vdrvroot - ok 15:11:02.0194 0x0760 vds C:\Windows\System32\vds. exe 15:11:02.0256 0x0760 vds - ok 15:11:02.0288 0x0760 VerifierExt C:\Windows\system32\drivers\VerifierExt. sys 15:11:02.0288 0x0760 Suspicious file : C:\Windows\system32\drivers\VerifierExt. sys. md5: A026EDEAA5EECAE0B08E2748B616D4BD, sha256: 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 15:11:02.0303 0x0760 VerifierExt - detected LockedFile. Multi. Generic ( 1 ) 15:11:04.0850 0x0760 Detect skipped due to KSN trusted 15:11:04.0850 0x0760 VerifierExt - ok 15:11:05.0069 0x0760 vhdmp C:\Windows\System32\drivers\vhdmp. sys 15:11:05.0069 0x0760 Suspicious file : C:\Windows\System32\drivers\vhdmp. sys. md5: C06E8481E068F170A258441639AC5792, sha256: 2F550530BACB511A195D5047F003B01CB6E04FA9A0DCCF638CB3D51FF5467DC7 15:11:05.0116 0x0760 vhdmp - detected LockedFile. Multi. Generic ( 1 ) 15:11:07.0553 0x0760 Detect skipped due to KSN trusted 15:11:07.0553 0x0760 vhdmp - ok 15:11:07.0741 0x0760 viaide C:\Windows\system32\drivers\viaide. sys 15:11:07.0741 0x0760 Suspicious file : C:\Windows\system32\drivers\viaide. sys. md5: 06D38968028E9AB19DE9B618C7B6D199, sha256: 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 15:11:07.0819 0x0760 viaide - detected LockedFile. Multi. Generic ( 1 ) 15:11:10.0382 0x0760 Detect skipped due to KSN trusted 15:11:10.0382 0x0760 viaide - ok 15:11:10.0522 0x0760 Vid C:\Windows\System32\drivers\Vid. sys 15:11:10.0522 0x0760 Suspicious file : C:\Windows\System32\drivers\Vid. sys. md5: 3CE922E34DB12D9F3C0EA856BC09687C, sha256: E50A1885FBC775E49614989ECFEA4ACBBDDA16AF459CC5361EED9E23CC7CD42C 15:11:10.0960 0x0760 Vid - detected LockedFile. Multi. Generic ( 1 ) 15:11:13.0554 0x0760 Detect skipped due to KSN trusted 15:11:13.0554 0x0760 Vid - ok 15:11:13.0835 0x0760 vmbus C:\Windows\system32\drivers\vmbus. sys 15:11:13.0835 0x0760 Suspicious file : C:\Windows\system32\drivers\vmbus. sys. md5: 511AD3FF957A0127E6BD336FF6F89C38, sha256: 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 15:11:13.0976 0x0760 vmbus - detected LockedFile. Multi. Generic ( 1 ) 15:11:16.0523 0x0760 Detect skipped due to KSN trusted 15:11:16.0523 0x0760 vmbus - ok 15:11:16.0757 0x0760 VMBusHID C:\Windows\System32\drivers\VMBusHID. sys 15:11:16.0757 0x0760 Suspicious file : C:\Windows\System32\drivers\VMBusHID. sys. md5: DA40BEA0A863CE768C940CA9723BF81F, sha256: 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 15:11:16.0835 0x0760 VMBusHID - detected LockedFile. Multi. Generic ( 1 ) 15:11:19.0382 0x0760 Detect skipped due to KSN trusted 15:11:19.0382 0x0760 VMBusHID - ok 15:11:19.0585 0x0760 vmbusr C:\Windows\System32\drivers\vmbusr. sys 15:11:19.0585 0x0760 Suspicious file : C:\Windows\System32\drivers\vmbusr. sys. md5: 68F8C26DEA2D42E8DEC0778943433C80, sha256: 81E8F9D62815F94952CEEABD0689473CC330F7890F66872DCD35A43C06ED33CD 15:11:19.0710 0x0760 vmbusr - detected LockedFile. Multi. Generic ( 1 ) 15:11:22.0179 0x0760 Detect skipped due to KSN trusted 15:11:22.0179 0x0760 vmbusr - ok 15:11:22.0492 0x0760 vmicguestinterface C:\Windows\System32\ICSvc. dll 15:11:22.0539 0x0760 vmicguestinterface - ok 15:11:22.0835 0x0760 vmicheartbeat C:\Windows\System32\ICSvc. dll 15:11:22.0851 0x0760 vmicheartbeat - ok 15:11:23.0117 0x0760 vmickvpexchange C:\Windows\System32\ICSvc. dll 15:11:23.0132 0x0760 vmickvpexchange - ok 15:11:23.0414 0x0760 vmicrdv C:\Windows\System32\ICSvc. dll 15:11:23.0429 0x0760 vmicrdv - ok 15:11:23.0695 0x0760 vmicshutdown C:\Windows\System32\ICSvc. dll 15:11:23.0710 0x0760 vmicshutdown - ok 15:11:24.0054 0x0760 vmictimesync C:\Windows\System32\ICSvc. dll 15:11:24.0070 0x0760 vmictimesync - ok 15:11:24.0289 0x0760 vmicvss C:\Windows\System32\ICSvc. dll 15:11:24.0304 0x0760 vmicvss - ok 15:11:24.0492 0x0760 volmgr C:\Windows\system32\drivers\volmgr. sys 15:11:24.0492 0x0760 Suspicious file : C:\Windows\system32\drivers\volmgr. sys. md5: 55D7D963DE85162F1C49721E502F9744, sha256: 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F 15:11:24.0601 0x0760 volmgr - detected LockedFile. Multi. Generic ( 1 ) 15:11:27.0258 0x0760 Detect skipped due to KSN trusted 15:11:27.0258 0x0760 volmgr - ok 15:11:27.0508 0x0760 volmgrx C:\Windows\system32\drivers\volmgrx. sys 15:11:27.0508 0x0760 Suspicious file : C:\Windows\system32\drivers\volmgrx. sys. md5: CCB9E901F7254BF96D28EB1B0E5329B7, sha256: F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 15:11:27.0539 0x0760 volmgrx - detected LockedFile. Multi. Generic ( 1 ) 15:11:29.0992 0x0760 Detect skipped due to KSN trusted 15:11:29.0992 0x0760 volmgrx - ok 15:11:30.0242 0x0760 volsnap C:\Windows\system32\drivers\volsnap. sys 15:11:30.0242 0x0760 Suspicious file : C:\Windows\system32\drivers\volsnap. sys. md5: 64CA2B4A49A8EAF495E435623ECCE7DB, sha256: 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 15:11:30.0305 0x0760 volsnap - detected LockedFile. Multi. Generic ( 1 ) 15:11:32.0789 0x0760 Detect skipped due to KSN trusted 15:11:32.0789 0x0760 volsnap - ok 15:11:32.0992 0x0760 vpci C:\Windows\System32\drivers\vpci. sys 15:11:32.0992 0x0760 Suspicious file : C:\Windows\System32\drivers\vpci. sys. md5: EF31713EE4C7CCFE4049F7E7F15645A2, sha256: 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 15:11:33.0023 0x0760 vpci - detected LockedFile. Multi. Generic ( 1 ) 15:11:35.0461 0x0760 Detect skipped due to KSN trusted 15:11:35.0461 0x0760 vpci - ok 15:11:35.0742 0x0760 vpcivsp C:\Windows\System32\drivers\vpcivsp. sys 15:11:35.0742 0x0760 Suspicious file : C:\Windows\System32\drivers\vpcivsp. sys. md5: ADBE96C33D1A5BB1BBAF90B4BC84F523, sha256: 6E9C9ED3D51E4B6E494D42ECA6F824AD86D676C12C39BBE6B8BD96366BCB02DA 15:11:35.0774 0x0760 vpcivsp - detected LockedFile. Multi. Generic ( 1 ) 15:11:38.0321 0x0760 Detect skipped due to KSN trusted 15:11:38.0321 0x0760 vpcivsp - ok 15:11:38.0586 0x0760 vsmraid C:\Windows\system32\drivers\vsmraid. sys 15:11:38.0586 0x0760 Suspicious file : C:\Windows\system32\drivers\vsmraid. sys. md5: 4539F45F9F4C9757A86A56C949421E07, sha256: DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C 15:11:38.0727 0x0760 vsmraid - detected LockedFile. Multi. Generic ( 1 ) 15:11:41.0149 0x0760 Detect skipped due to KSN trusted 15:11:41.0149 0x0760 vsmraid - ok 15:11:41.0539 0x0760 VSS C:\Windows\system32\vssvc. exe 15:11:41.0602 0x0760 VSS - ok 15:11:41.0899 0x0760 VSSS - ok 15:11:42.0086 0x0760 VSTXRAID C:\Windows\system32\drivers\vstxraid. sys 15:11:42.0086 0x0760 Suspicious file : C:\Windows\system32\drivers\vstxraid. sys. md5: 0849B7260F26FE05EA56DED0672E2F4B, sha256: 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 15:11:42.0274 0x0760 VSTXRAID - detected LockedFile. Multi. Generic ( 1 ) 15:11:44.0727 0x0760 Detect skipped due to KSN trusted 15:11:44.0727 0x0760 VSTXRAID - ok 15:11:45.0040 0x0760 vwifibus C:\Windows\System32\drivers\vwifibus. sys 15:11:45.0040 0x0760 Suspicious file : C:\Windows\System32\drivers\vwifibus. sys. md5: BE970C369E43B509C1EDA2B8FA7CECB0, sha256: 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 15:11:45.0258 0x0760 vwifibus - detected LockedFile. Multi. Generic ( 1 ) 15:11:47.0868 0x0760 Detect skipped due to KSN trusted 15:11:47.0868 0x0760 vwifibus - ok 15:11:48.0118 0x0760 vwififlt C:\Windows\system32\DRIVERS\vwififlt. sys 15:11:48.0118 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\vwififlt. sys. md5: 35BF5C5F5E3C9902C98978C7640574DA, sha256: C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 15:11:48.0212 0x0760 vwififlt - detected LockedFile. Multi. Generic ( 1 ) 15:11:50.0649 0x0760 Detect skipped due to KSN trusted 15:11:50.0649 0x0760 vwififlt - ok 15:11:50.0884 0x0760 vwifimp C:\Windows\system32\DRIVERS\vwifimp. sys 15:11:50.0884 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\vwifimp. sys. md5: 65ED7B9CFEA893DF7748D5FF692690DE, sha256: 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 15:11:50.0946 0x0760 vwifimp - detected LockedFile. Multi. Generic ( 1 ) 15:11:53.0399 0x0760 Detect skipped due to KSN trusted 15:11:53.0399 0x0760 vwifimp - ok 15:11:53.0743 0x0760 W32Time C:\Windows\system32\w32time. dll 15:11:53.0806 0x0760 W32Time - ok 15:11:54.0009 0x0760 WacomPen C:\Windows\System32\drivers\wacompen. sys 15:11:54.0009 0x0760 Suspicious file : C:\Windows\System32\drivers\wacompen. sys. md5: 0910AB9ED404C1434E2D0376C2AD5D8B, sha256: 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B 15:11:54.0071 0x0760 WacomPen - detected LockedFile. Multi. Generic ( 1 ) 15:11:56.0525 0x0760 Detect skipped due to KSN trusted 15:11:56.0525 0x0760 WacomPen - ok 15:11:56.0853 0x0760 wbengine C:\Windows\system32\wbengine. exe 15:11:56.0946 0x0760 wbengine - ok 15:11:57.0243 0x0760 WbioSrvc C:\Windows\System32\wbiosrvc. dll 15:11:57.0321 0x0760 WbioSrvc - ok 15:11:57.0587 0x0760 Wcmsvc C:\Windows\System32\wcmsvc. dll 15:11:57.0634 0x0760 Wcmsvc - ok 15:11:57.0900 0x0760 wcncsvc C:\Windows\System32\wcncsvc. dll 15:11:57.0931 0x0760 wcncsvc - ok 15:11:58.0196 0x0760 WcsPlugInService C:\Windows\System32\WcsPlugInService. dll 15:11:58.0306 0x0760 WcsPlugInService - ok 15:11:58.0556 0x0760 WdBoot C:\Windows\system32\drivers\WdBoot. sys 15:11:58.0556 0x0760 WdBoot - ok 15:11:58.0743 0x0760 Wdf01000 C:\Windows\system32\drivers\Wdf01000. sys 15:11:58.0743 0x0760 Suspicious file : C:\Windows\system32\drivers\Wdf01000. sys. md5: CB6C63FF8342B467E2EF76E98D5B934D, sha256: BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 15:11:58.0790 0x0760 Wdf01000 - detected LockedFile. Multi. Generic ( 1 ) 15:12:04.0666 0x0760 Detect skipped due to KSN trusted 15:12:04.0666 0x0760 Wdf01000 - ok 15:12:05.0212 0x0760 WdFilter C:\Windows\system32\drivers\WdFilter. sys 15:12:05.0228 0x0760 WdFilter - ok 15:12:05.0666 0x0760 WdiServiceHost C:\Windows\system32\wdi. dll 15:12:05.0697 0x0760 WdiServiceHost - ok 15:12:06.0009 0x0760 WdiSystemHost C:\Windows\system32\wdi. dll 15:12:06.0009 0x0760 WdiSystemHost - ok 15:12:06.0322 0x0760 WdNisDrv C:\Windows\system32\Drivers\WdNisDrv. sys 15:12:06.0338 0x0760 WdNisDrv - ok 15:12:06.0666 0x0760 WdNisSvc - ok 15:12:07.0275 0x0760 WebClient C:\Windows\System32\webclnt. dll 15:12:07.0400 0x0760 WebClient - ok 15:12:07.0869 0x0760 Wecsvc C:\Windows\system32\wecsvc. dll 15:12:07.0869 0x0760 Wecsvc - ok 15:12:08.0009 0x0760 WEPHOSTSVC C:\Windows\system32\wephostsvc. dll 15:12:08.0025 0x0760 WEPHOSTSVC - ok 15:12:08.0119 0x0760 wercplsupport C:\Windows\System32\wercplsupport. dll 15:12:08.0275 0x0760 wercplsupport - ok 15:12:08.0431 0x0760 WerSvc C:\Windows\System32\WerSvc. dll 15:12:08.0494 0x0760 WerSvc - ok 15:12:08.0666 0x0760 WFPLWFS C:\Windows\system32\DRIVERS\wfplwfs. sys 15:12:08.0666 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\wfplwfs. sys. md5: BAB713B409258DB7B5D9F9693F802B0E, sha256: C0D0391EC4FDC07E0A07F4EEB2DC9CC5B2BE5D2E292E7D01929E8D39D6F73EA5 15:12:08.0681 0x0760 WFPLWFS - detected LockedFile. Multi. Generic ( 1 ) 15:12:11.0166 0x0760 Detect skipped due to KSN trusted 15:12:11.0166 0x0760 WFPLWFS - ok 15:12:11.0603 0x0760 WiaRpc C:\Windows\System32\wiarpc. dll 15:12:11.0619 0x0760 WiaRpc - ok 15:12:11.0963 0x0760 WIMMount C:\Windows\system32\drivers\wimmount. sys 15:12:11.0963 0x0760 Suspicious file : C:\Windows\system32\drivers\wimmount. sys. md5: 5F66B7BB330AA80067FC66149A692620, sha256: 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 15:12:12.0041 0x0760 WIMMount - detected LockedFile. Multi. Generic ( 1 ) 15:12:14.0604 0x0760 Detect skipped due to KSN trusted 15:12:14.0604 0x0760 WIMMount - ok 15:12:14.0885 0x0760 WinDefend - ok 15:12:15.0572 0x0760 WinHttpAutoProxySvc C:\Windows\system32\winhttp. dll 15:12:15.0604 0x0760 WinHttpAutoProxySvc - ok 15:12:16.0041 0x0760 Winmgmt C:\Windows\system32\wbem\WMIsvc. dll 15:12:16.0197 0x0760 Winmgmt - ok 15:12:16.0588 0x0760 WinRM C:\Windows\system32\WsmSvc. dll 15:12:16.0697 0x0760 WinRM - ok 15:12:16.0885 0x0760 WinUsb C:\Windows\System32\drivers\WinUsb. sys 15:12:16.0885 0x0760 Suspicious file : C:\Windows\System32\drivers\WinUsb. sys. md5: AC263C2F66405589528995AA41040599, sha256: 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 15:12:16.0947 0x0760 WinUsb - detected LockedFile. Multi. Generic ( 1 ) 15:12:19.0494 0x0760 Detect skipped due to KSN trusted 15:12:19.0494 0x0760 WinUsb - ok 15:12:19.0885 0x0760 WlanSvc C:\Windows\System32\wlansvc. dll 15:12:19.0916 0x0760 WlanSvc - ok 15:12:20.0510 0x0760 wlidsvc C:\Windows\system32\wlidsvc. dll 15:12:20.0573 0x0760 wlidsvc - ok 15:12:20.0776 0x0760 WmiAcpi C:\Windows\System32\drivers\wmiacpi. sys 15:12:20.0776 0x0760 Suspicious file : C:\Windows\System32\drivers\wmiacpi. sys. md5: 2834D9D3B4F554A39C72F00EA3F0E128, sha256: D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 15:12:20.0854 0x0760 WmiAcpi - detected LockedFile. Multi. Generic ( 1 ) 15:12:23.0323 0x0760 Detect skipped due to KSN trusted 15:12:23.0323 0x0760 WmiAcpi - ok 15:12:24.0073 0x0760 wmiApSrv C:\Windows\system32\wbem\WmiApSrv. exe 15:12:24.0088 0x0760 wmiApSrv - ok 15:12:24.0448 0x0760 WMPNetworkSvc - ok 15:12:24.0823 0x0760 Wof C:\Windows\system32\drivers\Wof. sys 15:12:24.0823 0x0760 Suspicious file : C:\Windows\system32\drivers\Wof. sys. md5: 7FC5667DF73D4B04AA457CC3A4180E09, sha256: CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E 15:12:25.0010 0x0760 Wof - detected LockedFile. Multi. Generic ( 1 ) 15:12:27.0557 0x0760 Detect skipped due to KSN trusted 15:12:27.0557 0x0760 Wof - ok 15:12:28.0026 0x0760 workfolderssvc C:\Windows\system32\workfolderssvc. dll 15:12:28.0167 0x0760 workfolderssvc - ok 15:12:28.0479 0x0760 wpcfltr C:\Windows\system32\DRIVERS\wpcfltr. sys 15:12:28.0479 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\wpcfltr. sys. md5: A2468CC3509394A33C4C32F99563D845, sha256: 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 15:12:28.0667 0x0760 wpcfltr - detected LockedFile. Multi. Generic ( 1 ) 15:12:31.0104 0x0760 Detect skipped due to KSN trusted 15:12:31.0104 0x0760 wpcfltr - ok 15:12:31.0886 0x0760 WPCSvc C:\Windows\System32\wpcsvc. dll 15:12:31.0964 0x0760 WPCSvc - ok 15:12:32.0292 0x0760 WPDBusEnum C:\Windows\system32\wpdbusenum. dll 15:12:32.0339 0x0760 WPDBusEnum - ok 15:12:32.0682 0x0760 WpdUpFltr C:\Windows\system32\drivers\WpdUpFltr. sys 15:12:32.0682 0x0760 Suspicious file : C:\Windows\system32\drivers\WpdUpFltr. sys. md5: 9F2904B55F6CECCD1A8D986B5CE2609A, sha256: E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 15:12:32.0792 0x0760 WpdUpFltr - detected LockedFile. Multi. Generic ( 1 ) 15:12:35.0339 0x0760 Detect skipped due to KSN trusted 15:12:35.0339 0x0760 WpdUpFltr - ok 15:12:35.0589 0x0760 ws2ifsl C:\Windows\system32\drivers\ws2ifsl. sys 15:12:35.0589 0x0760 Suspicious file : C:\Windows\system32\drivers\ws2ifsl. sys. md5: AE072B0339D0A18E455DC21666CAD572, sha256: AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB 15:12:35.0714 0x0760 ws2ifsl - detected LockedFile. Multi. Generic ( 1 ) 15:12:38.0136 0x0760 Detect skipped due to KSN trusted 15:12:38.0136 0x0760 ws2ifsl - ok 15:12:38.0230 0x0760 wscsvc C:\Windows\System32\wscsvc. dll 15:12:38.0355 0x0760 wscsvc - ok 15:12:38.0402 0x0760 WSDPrintDevice C:\Windows\System32\drivers\WSDPrint. sys 15:12:38.0402 0x0760 Suspicious file : C:\Windows\System32\drivers\WSDPrint. sys. md5: F586F3F1BF962FE9AE4316E0D896B22F, sha256: 8D0AD48D79294567123D943D0F5B6D5A32D7A82B129A24DC821D3095AFAA100B 15:12:38.0433 0x0760 WSDPrintDevice - detected LockedFile. Multi. Generic ( 1 ) 15:12:41.0105 0x0760 Detect skipped due to KSN trusted 15:12:41.0105 0x0760 WSDPrintDevice - ok 15:12:41.0167 0x0760 WSDScan C:\Windows\System32\drivers\WSDScan. sys 15:12:41.0167 0x0760 Suspicious file : C:\Windows\System32\drivers\WSDScan. sys. md5: 58035FD3369879E02D65989C44D27450, sha256: B9245DB5C17F7CE94FAA20AB4B0D06A4DFB6133C6E82343758CDC713EB64DFEF 15:12:41.0199 0x0760 WSDScan - detected LockedFile. Multi. Generic ( 1 ) 15:12:43.0636 0x0760 Detect skipped due to KSN trusted 15:12:43.0636 0x0760 WSDScan - ok 15:12:43.0652 0x0760 WSearch - ok 15:12:43.0792 0x0760 WSService C:\Windows\System32\WSService. dll 15:12:43.0886 0x0760 WSService - ok 15:12:44.0027 0x0760 wuauserv C:\Windows\system32\wuaueng. dll 15:12:44.0167 0x0760 wuauserv - ok 15:12:44.0261 0x0760 WudfPf C:\Windows\system32\drivers\WudfPf. sys 15:12:44.0261 0x0760 Suspicious file : C:\Windows\system32\drivers\WudfPf. sys. md5: 481286719402E4BAEFEA0604AB1B5113, sha256: F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F 15:12:44.0292 0x0760 WudfPf - detected LockedFile. Multi. Generic ( 1 ) 15:12:46.0949 0x0760 Detect skipped due to KSN trusted 15:12:46.0949 0x0760 WudfPf - ok 15:12:47.0074 0x0760 WUDFRd C:\Windows\System32\drivers\WUDFRd. sys 15:12:47.0074 0x0760 Suspicious file : C:\Windows\System32\drivers\WUDFRd. sys. md5: D7B4859227B02BCC1055B279A63C937F, sha256: 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 15:12:47.0152 0x0760 WUDFRd - detected LockedFile. Multi. Generic ( 1 ) 15:12:49.0605 0x0760 Detect skipped due to KSN trusted 15:12:49.0605 0x0760 WUDFRd - ok 15:12:49.0652 0x0760 WUDFSensorLP C:\Windows\System32\drivers\WUDFRd. sys 15:12:49.0652 0x0760 Suspicious file : C:\Windows\System32\drivers\WUDFRd. sys. md5: D7B4859227B02BCC1055B279A63C937F, sha256: 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 15:12:49.0652 0x0760 WUDFSensorLP - detected LockedFile. Multi. Generic ( 1 ) 15:12:49.0652 0x0760 Detect skipped due to KSN trusted 15:12:49.0652 0x0760 WUDFSensorLP - ok 15:12:49.0699 0x0760 wudfsvc C:\Windows\System32\WUDFSvc. dll 15:12:49.0793 0x0760 wudfsvc - ok 15:12:49.0824 0x0760 WUDFWpdFs C:\Windows\System32\drivers\WUDFRd. sys 15:12:49.0824 0x0760 Suspicious file : C:\Windows\System32\drivers\WUDFRd. sys. md5: D7B4859227B02BCC1055B279A63C937F, sha256: 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 15:12:49.0824 0x0760 WUDFWpdFs - detected LockedFile. Multi. Generic ( 1 ) 15:12:49.0824 0x0760 Detect skipped due to KSN trusted 15:12:49.0824 0x0760 WUDFWpdFs - ok 15:12:49.0840 0x0760 WUDFWpdMtp C:\Windows\System32\drivers\WUDFRd. sys 15:12:49.0840 0x0760 Suspicious file : C:\Windows\System32\drivers\WUDFRd. sys. md5: D7B4859227B02BCC1055B279A63C937F, sha256: 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 15:12:49.0840 0x0760 WUDFWpdMtp - detected LockedFile. Multi. Generic ( 1 ) 15:12:49.0840 0x0760 Detect skipped due to KSN trusted 15:12:49.0840 0x0760 WUDFWpdMtp - ok 15:12:49.0902 0x0760 WwanSvc C:\Windows\System32\wwansvc. dll 15:12:49.0933 0x0760 WwanSvc - ok 15:12:50.0011 0x0760 ZTEusbmdm6k C:\Windows\system32\DRIVERS\ZTEusbmdm6k. sys 15:12:50.0011 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\ZTEusbmdm6k. sys. md5: 8A9E7E6169F92E64D5B5305562E363BB, sha256: E2C07ED52BE138BD29672261CADDEBC58E48767394E062316859D5E9E1B03885 15:12:50.0027 0x0760 ZTEusbmdm6k - detected LockedFile. Multi. Generic ( 1 ) 15:12:52.0449 0x0760 Detect skipped due to KSN trusted 15:12:52.0449 0x0760 ZTEusbmdm6k - ok 15:12:52.0699 0x0760 ZTEusbnmea C:\Windows\system32\DRIVERS\ZTEusbnmea. sys 15:12:52.0699 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\ZTEusbnmea. sys. md5: 8A9E7E6169F92E64D5B5305562E363BB, sha256: E2C07ED52BE138BD29672261CADDEBC58E48767394E062316859D5E9E1B03885 15:12:52.0762 0x0760 ZTEusbnmea - detected LockedFile. Multi. Generic ( 1 ) 15:12:52.0762 0x0760 Detect skipped due to KSN trusted 15:12:52.0762 0x0760 ZTEusbnmea - ok 15:12:52.0933 0x0760 ZTEusbser6k C:\Windows\system32\DRIVERS\ZTEusbser6k. sys 15:12:52.0933 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\ZTEusbser6k. sys. md5: 8A9E7E6169F92E64D5B5305562E363BB, sha256: E2C07ED52BE138BD29672261CADDEBC58E48767394E062316859D5E9E1B03885 15:12:52.0996 0x0760 ZTEusbser6k - detected LockedFile. Multi. Generic ( 1 ) 15:12:52.0996 0x0760 Detect skipped due to KSN trusted 15:12:52.0996 0x0760 ZTEusbser6k - ok 15:12:53.0137 0x0760 ZTEusbvoice C:\Windows\system32\DRIVERS\ZTEusbvoice. sys 15:12:53.0137 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\ZTEusbvoice. sys. md5: 8A9E7E6169F92E64D5B5305562E363BB, sha256: E2C07ED52BE138BD29672261CADDEBC58E48767394E062316859D5E9E1B03885 15:12:53.0199 0x0760 ZTEusbvoice - detected LockedFile. Multi. Generic ( 1 ) 15:12:53.0199 0x0760 Detect skipped due to KSN trusted 15:12:53.0199 0x0760 ZTEusbvoice - ok 15:12:53.0387 0x0760 ZTEusbwwan C:\Windows\system32\DRIVERS\ZTEusbwwan. sys 15:12:53.0387 0x0760 Suspicious file : C:\Windows\system32\DRIVERS\ZTEusbwwan. sys. md5: E188176F34478C9EC1D7DDC705A08670, sha256: C8E943AE9B206726416B3E50942F9FADDCC16DC3D2A300854FA88C98EE43A2B5 15:12:53.0433 0x0760 ZTEusbwwan - detected LockedFile. Multi. Generic ( 1 ) 15:12:55.0980 0x0760 Detect skipped due to KSN trusted 15:12:55.0980 0x0760 ZTEusbwwan - ok 15:12:56.0027 0x0760 Scan global 15:12:56.0121 0x0760 C:\Windows\system32\basesrv. dll 15:12:56.0184 0x0760 C:\Windows\system32\winsrv. dll 15:12:56.0246 0x0760 C:\Windows\system32\sxssrv. dll 15:12:56.0309 0x0760 C:\Windows\system32\services. exe 15:12:56.0309 0x0760 - ok 15:12:56.0309 0x0760 Scan MBR 15:12:56.0324 0x0760 \Device\Harddisk0\DR0 15:12:56.0652 0x0760 \Device\Harddisk0\DR0 - ok 15:12:56.0652 0x0760 \Device\Harddisk1\DR1 15:12:56.0746 0x0760 \Device\Harddisk1\DR1 - ok 15:12:56.0746 0x0760 Scan VBR 15:12:56.0762 0x0760 \Device\Harddisk0\DR0\Partition1 15:12:56.0777 0x0760 \Device\Harddisk0\DR0\Partition1 - ok 15:12:56.0777 0x0760 \Device\Harddisk0\DR0\Partition2 15:12:56.0793 0x0760 \Device\Harddisk0\DR0\Partition2 - ok 15:12:56.0793 0x0760 \Device\Harddisk1\DR1\Partition1 15:12:56.0793 0x0760 \Device\Harddisk1\DR1\Partition1 - ok 15:12:56.0793 0x0760 Scan generic autorun 15:12:57.0215 0x0760 C:\Program Files\Logitech Gaming Software\LCore. exe 15:12:57.0527 0x0760 Launch LCore - ok 15:12:57.0699 0x0760 C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend. exe 15:12:57.0762 0x0760 NvBackend - ok 15:12:57.0809 0x0760 C:\Windows\system32\rundll32. exe 15:12:57.0871 0x0760 ShadowPlay - ok 15:12:57.0934 0x0760 C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex. exe 15:12:57.0934 0x0760 RazerCortex - ok 15:12:58.0012 0x0760 C:\Program Files (x86)\DFX\DFX. exe 15:12:58.0043 0x0760 DFX - detected UnsignedFile. Multi. Generic ( 1 ) 15:13:00.0496 0x0760 DFX - warning 15:13:03.0043 0x0760 C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN. EXE 15:13:03.0075 0x0760 CanonQuickMenu - ok 15:13:03.0137 0x0760 C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST. exe 15:13:03.0153 0x0760 IJNetworkScannerSelectorEX - ok 15:13:03.0184 0x0760 C:\Program Files (x86)\Common Files\Java\Java Update\jusched. exe 15:13:03.0200 0x0760 SunJavaUpdateSched - ok 15:13:03.0262 0x0760 C:\Windows\Installer\ \syshost. exe 15:13:03.0262 0x0760 Suspicious file : C:\Windows\Installer\ \syshost. exe. md5: 03DDA97788180DC9DF8633000C5A255F, sha256: 71D0A463453DBD2AEDB7C9F91423D7E01A19890197576E8DA5A94732BECDFD11 15:13:03.0262 0x0760 syshost32 - detected LockedFile. Multi. Generic ( 1 ) 15:13:05.0903 0x0760 Detect turned to UDS exact due to KSN untrusted 15:13:05.0903 0x0760 syshost32 - infected 15:13:05.0903 0x0760 Force sending object to P2P due to detect: C:\Windows\Installer\ \syshost. exe 15:13:08.0465 0x0760 Object send P2P result: true 15:13:11.0137 0x0760 C:\Program Files\DAEMON Tools Lite\DTLite. exe 15:13:11.0262 0x0760 DAEMON Tools Lite - ok 15:13:11.0309 0x0760 Akamai NetSession Interface - ok 15:13:11.0450 0x0760 C:\Program Files (x86)\Steam\steam. exe 15:13:11.0512 0x0760 Steam - ok 15:13:11.0622 0x0760 Skype - ok 15:13:11.0872 0x0760 C:\Program Files\Autodesk\Autodesk Sync\AdSync. exe 15:13:11.0903 0x0760 Autodesk Sync - ok 15:13:11.0981 0x0760 GoogleDriveSync - ok 15:13:11.0981 0x0760 Waiting for KSN requests completion. In queue: 3 15:13:12.0997 0x0760 Waiting for KSN requests completion. In queue: 3 15:13:14.0013 0x0760 Waiting for KSN requests completion. In queue: 3 15:13:15.0091 0x0760 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui. exe ( 4.7.205.0 ), 0x60100 15:13:15.0169 0x0760 Win FW state via NFP2: enabled 15:13:17.0700 0x0760 15:13:17.0700 0x0760 Scan finished 15:13:17.0700 0x0760 15:13:17.0700 0x06d0 Detected object count: 5 15:13:17.0700 0x06d0 Actual detected object count: 5 15:14:54.0908 0x06d0 C:\Windows\System32\Drivers\8436f649de97ccad. sys - copied to quarantine 15:14:54.0970 0x06d0 HKLM\SYSTEM\ControlSet001\services\8436f649de97ccad - will be deleted on reboot 15:14:55.0002 0x06d0 C:\Windows\System32\Drivers\8436f649de97ccad. sys - will be deleted on reboot 15:14:55.0002 0x06d0 8436f649de97ccad ( Rootkit. Win32. Necurs. gen ) - User select action: Delete 15:14:55.0345 0x06d0 C:\Program Files (x86)\ITbrain Agent\itbrain_agent. exe - copied to quarantine 15:14:55.0377 0x06d0 HKLM\SYSTEM\ControlSet001\services\ITbrain Agent - will be deleted on reboot 15:14:55.0392 0x06d0 C:\Program Files (x86)\ITbrain Agent\itbrain_agent. exe - will be deleted on reboot 15:14:55.0392 0x06d0 ITbrain Agent - User select action: Delete 15:14:55.0470 0x06d0 C:\Program Files\KMSpico\Service_KMS. exe - copied to quarantine 15:14:55.0470 0x06d0 Service KMSELDI - User select action: Quarantine 15:14:55.0549 0x06d0 C:\Program Files (x86)\DFX\DFX. exe - copied to quarantine 15:14:55.0549 0x06d0 DFX - User select action: Quarantine 15:14:55.0595 0x06d0 C:\Windows\Installer\ \syshost. exe - copied to quarantine 15:14:55.0595 0x06d0 HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run:syshost32 - will be deleted on reboot 15:14:55.0595 0x06d0 C:\Windows\Installer\ \syshost. exe - will be deleted on reboot 15:14:55.0595 0x06d0 syshost32 - User select action: Delete 15:14:55.0939 0x06d0 KLMD registered as C:\Windows\system32\drivers\99130850. sys 15:15:08.0377 0x0674 Deinitialize success Murat5038 tarafından rootkit taraması yapılmış ve silinmiştir. Geri kalan normal zararlılar KIS 2015 ile silinmektedir.

"Hata" olarak mı yazıyor?

Şimdi sen bunla çok uğraşacaksın o yüzden Teamviewer ile halledelim.

Virüs varsa temizlemeye çalışmıyorsunuz da telefona bulaşacağından korkuyorsunuz. Bu ne biçim mantık? İmzamdan KIS 2015'i indir güncelle fullscan yap. Full scan yapmadan önce tüm bellekleri pc'ye bağla. Rootkit var çoğunlukla. Sonra istediğin telefon veya usb'yi bağlayabilirsin.