Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Rootkit/Malware identification and/or removal
Message
<blockquote data-quote="Enigmas" data-source="post: 702834" data-attributes="member: 68936"><p>Attached are requested logs from normal mode. However scan says it was a safe mode. I repeated steps in SafeMode and will upload at your request:</p><p></p><p></p><p>---------------------------------------</p><p>Malwarebytes Anti-Rootkit BETA 1.09.3.1001</p><p></p><p>(c) Malwarebytes Corporation 2011-2012</p><p></p><p>OS version: 10.0.9200 Windows 10 x64</p><p></p><p>System is currently in a safe mode</p><p></p><p>Account is Administrative</p><p></p><p>Internet Explorer version: 11.786.15063.0</p><p></p><p>File system is: NTFS</p><p>Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED</p><p>CPU speed: 2.592000 GHz</p><p>Memory total: 12704256000, free: 8321941504</p><p></p><p>Downloaded database version: v2018.01.03.09</p><p>Downloaded database version: v2017.10.14.01</p><p>Downloaded database version: v2017.11.28.01</p><p>=======================================</p><p>------------ Kernel report ------------</p><p> 01/03/2018 23:18:15</p><p>------------ Loaded modules -----------</p><p>\SystemRoot\system32\ntoskrnl.exe</p><p>\SystemRoot\system32\hal.dll</p><p>\SystemRoot\system32\kd.dll</p><p>\SystemRoot\system32\mcupdate_GenuineIntel.dll</p><p>\SystemRoot\System32\drivers\msrpc.sys</p><p>\SystemRoot\System32\drivers\ksecdd.sys</p><p>\SystemRoot\System32\drivers\werkernel.sys</p><p>\SystemRoot\System32\drivers\CLFS.SYS</p><p>\SystemRoot\System32\drivers\tm.sys</p><p>\SystemRoot\system32\PSHED.dll</p><p>\SystemRoot\system32\BOOTVID.dll</p><p>\SystemRoot\System32\drivers\FLTMGR.SYS</p><p>\SystemRoot\System32\drivers\clipsp.sys</p><p>\SystemRoot\System32\drivers\cmimcext.sys</p><p>\SystemRoot\System32\drivers\ntosext.sys</p><p>\SystemRoot\system32\CI.dll</p><p>\SystemRoot\System32\drivers\cng.sys</p><p>\SystemRoot\system32\drivers\Wdf01000.sys</p><p>\SystemRoot\system32\drivers\WDFLDR.SYS</p><p>\SystemRoot\system32\drivers\SleepStudyHelper.sys</p><p>\SystemRoot\System32\Drivers\acpiex.sys</p><p>\SystemRoot\System32\Drivers\WppRecorder.sys</p><p>\SystemRoot\System32\drivers\ACPI.sys</p><p>\SystemRoot\System32\drivers\WMILIB.SYS</p><p>\SystemRoot\System32\drivers\intelpep.sys</p><p>\SystemRoot\system32\drivers\WindowsTrustedRT.sys</p><p>\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys</p><p>\SystemRoot\system32\drivers\63500115.sys</p><p>\SystemRoot\System32\drivers\pcw.sys</p><p>\SystemRoot\System32\drivers\msisadrv.sys</p><p>\SystemRoot\System32\drivers\isapnp.sys</p><p>\SystemRoot\System32\drivers\pci.sys</p><p>\SystemRoot\System32\drivers\vdrvroot.sys</p><p>\SystemRoot\system32\drivers\ucx01000.sys</p><p>\SystemRoot\system32\drivers\pdc.sys</p><p>\SystemRoot\system32\drivers\CEA.sys</p><p>\SystemRoot\System32\drivers\partmgr.sys</p><p>\SystemRoot\System32\drivers\intelide.sys</p><p>\SystemRoot\System32\drivers\PCIIDEX.SYS</p><p>\SystemRoot\System32\drivers\evbda.sys</p><p>\SystemRoot\System32\drivers\nvraid.sys</p><p>\SystemRoot\System32\drivers\CLASSPNP.SYS</p><p>\SystemRoot\system32\drivers\MBAMSwissArmy.sys</p><p>\SystemRoot\System32\drivers\pcmcia.sys</p><p>\SystemRoot\System32\drivers\spaceport.sys</p><p>\SystemRoot\System32\drivers\volmgr.sys</p><p>\SystemRoot\System32\drivers\volmgrx.sys</p><p>\SystemRoot\System32\drivers\vmbus.sys</p><p>\SystemRoot\System32\drivers\NDIS.SYS</p><p>\SystemRoot\System32\drivers\NETIO.SYS</p><p>\SystemRoot\System32\drivers\hvsocket.sys</p><p>\SystemRoot\System32\drivers\vmbkmcl.sys</p><p>\SystemRoot\System32\drivers\winhv.sys</p><p>\SystemRoot\System32\drivers\sdbus.sys</p><p>\SystemRoot\System32\drivers\bxvbda.sys</p><p>\SystemRoot\System32\drivers\pciide.sys</p><p>\SystemRoot\system32\drivers\urscx01000.sys</p><p>\SystemRoot\System32\drivers\mountmgr.sys</p><p>\SystemRoot\System32\drivers\iaStorAV.sys</p><p>\SystemRoot\System32\drivers\storport.sys</p><p>\SystemRoot\System32\drivers\iaStorV.sys</p><p>\SystemRoot\System32\drivers\3ware.sys</p><p>\SystemRoot\System32\drivers\amdsata.sys</p><p>\SystemRoot\System32\drivers\amdxata.sys</p><p>\SystemRoot\System32\drivers\amdsbs.sys</p><p>\SystemRoot\System32\drivers\arcsas.sys</p><p>\SystemRoot\System32\drivers\lsi_sas.sys</p><p>\SystemRoot\System32\drivers\lsi_sas2i.sys</p><p>\SystemRoot\System32\drivers\lsi_sas3i.sys</p><p>\SystemRoot\System32\drivers\lsi_sss.sys</p><p>\SystemRoot\System32\drivers\megasas.sys</p><p>\SystemRoot\System32\drivers\MegaSas2i.sys</p><p>\SystemRoot\System32\drivers\megasr.sys</p><p>\SystemRoot\System32\drivers\mvumis.sys</p><p>\SystemRoot\System32\drivers\nvstor.sys</p><p>\SystemRoot\System32\drivers\percsas2i.sys</p><p>\SystemRoot\System32\drivers\percsas3i.sys</p><p>\SystemRoot\System32\drivers\SiSRaid2.sys</p><p>\SystemRoot\System32\drivers\sisraid4.sys</p><p>\SystemRoot\System32\drivers\stexstor.sys</p><p>\SystemRoot\System32\drivers\vsmraid.sys</p><p>\SystemRoot\System32\drivers\vstxraid.sys</p><p>\SystemRoot\System32\drivers\atapi.sys</p><p>\SystemRoot\System32\drivers\ataport.SYS</p><p>\SystemRoot\System32\drivers\storahci.sys</p><p>\SystemRoot\System32\drivers\stornvme.sys</p><p>\SystemRoot\System32\drivers\iaStorA.sys</p><p>\SystemRoot\System32\drivers\ADP80XX.SYS</p><p>\SystemRoot\System32\drivers\HpSAMD.sys</p><p>\SystemRoot\System32\drivers\EhStorTcgDrv.sys</p><p>\SystemRoot\System32\drivers\EhStorClass.sys</p><p>\SystemRoot\System32\drivers\fileinfo.sys</p><p>\SystemRoot\System32\Drivers\Wof.sys</p><p>\SystemRoot\system32\drivers\MBAMChameleon.sys</p><p>\SystemRoot\System32\Drivers\NTFS.sys</p><p>\SystemRoot\System32\drivers\usbccgp.sys</p><p>\SystemRoot\System32\drivers\USBD.SYS</p><p>\SystemRoot\System32\drivers\storvsc.sys</p><p>\SystemRoot\System32\drivers\urschipidea.sys</p><p>\SystemRoot\System32\drivers\usbhub.sys</p><p>\SystemRoot\System32\drivers\UsbHub3.sys</p><p>\SystemRoot\System32\drivers\usbehci.sys</p><p>\SystemRoot\System32\drivers\USBPORT.SYS</p><p>\SystemRoot\System32\Drivers\Fs_Rec.sys</p><p>\SystemRoot\System32\Drivers\ksecpkg.sys</p><p>\SystemRoot\System32\drivers\tcpip.sys</p><p>\SystemRoot\System32\drivers\fwpkclnt.sys</p><p>\SystemRoot\System32\drivers\wfplwfs.sys</p><p>\SystemRoot\System32\drivers\vmstorfl.sys</p><p>\SystemRoot\System32\drivers\amdkmpfd.sys</p><p>\SystemRoot\System32\DRIVERS\fvevol.sys</p><p>\SystemRoot\System32\drivers\volume.sys</p><p>\SystemRoot\System32\drivers\volsnap.sys</p><p>\SystemRoot\System32\drivers\USBXHCI.SYS</p><p>\SystemRoot\System32\drivers\USBSTOR.SYS</p><p>\SystemRoot\System32\drivers\uaspstor.sys</p><p>\SystemRoot\System32\drivers\TVALZ_O.SYS</p><p>\SystemRoot\System32\drivers\storufs.sys</p><p>\SystemRoot\System32\drivers\sdstor.sys</p><p>\SystemRoot\System32\drivers\scmbus.sys</p><p>\SystemRoot\System32\drivers\sbp2port.sys</p><p>\SystemRoot\System32\drivers\rdyboost.sys</p><p>\SystemRoot\System32\Drivers\mup.sys</p><p>\SystemRoot\system32\drivers\iorate.sys</p><p>\SystemRoot\System32\drivers\disk.sys</p><p>\SystemRoot\System32\Drivers\crashdmp.sys</p><p>\SystemRoot\System32\drivers\cdrom.sys</p><p>\SystemRoot\system32\drivers\aswSP.sys</p><p>\SystemRoot\system32\drivers\ks.sys</p><p>\SystemRoot\system32\drivers\filecrypt.sys</p><p>\SystemRoot\system32\drivers\tbs.sys</p><p>\SystemRoot\System32\Drivers\Null.SYS</p><p>\SystemRoot\System32\Drivers\Beep.SYS</p><p>\SystemRoot\System32\drivers\BasicDisplay.sys</p><p>\SystemRoot\System32\drivers\watchdog.sys</p><p>\SystemRoot\System32\drivers\dxgkrnl.sys</p><p>\SystemRoot\System32\drivers\vmbkmclr.sys</p><p>\SystemRoot\System32\drivers\BasicRender.sys</p><p>\SystemRoot\System32\Drivers\Npfs.SYS</p><p>\SystemRoot\System32\Drivers\Msfs.SYS</p><p>\SystemRoot\system32\DRIVERS\tdx.sys</p><p>\SystemRoot\system32\DRIVERS\TDI.SYS</p><p>\SystemRoot\System32\DRIVERS\netbt.sys</p><p>\SystemRoot\system32\drivers\aswRdr2.sys</p><p>\SystemRoot\system32\drivers\afd.sys</p><p>\SystemRoot\System32\drivers\vwififlt.sys</p><p>\SystemRoot\System32\drivers\pacer.sys</p><p>\SystemRoot\system32\drivers\netbios.sys</p><p>\SystemRoot\system32\DRIVERS\rdbss.sys</p><p>\SystemRoot\system32\drivers\csc.sys</p><p>\??\C:\WINDOWS\System32\drivers\zamguard64.sys</p><p>\??\C:\WINDOWS\System32\drivers\zam64.sys</p><p>\SystemRoot\system32\drivers\nsiproxy.sys</p><p>\SystemRoot\System32\drivers\npsvctrig.sys</p><p>\SystemRoot\System32\drivers\mssmbios.sys</p><p>\??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS</p><p>\SystemRoot\System32\drivers\gpuenergydrv.sys</p><p>\??\C:\WINDOWS\system32\drivers\mbae64.sys</p><p>\SystemRoot\System32\Drivers\dfsc.sys</p><p>\SystemRoot\system32\drivers\aswArPot.sys</p><p>\SystemRoot\system32\DRIVERS\ahcache.sys</p><p>\SystemRoot\System32\drivers\tap0901.sys</p><p>\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys</p><p>\SystemRoot\System32\drivers\kdnic.sys</p><p>\SystemRoot\System32\drivers\umbus.sys</p><p>\SystemRoot\System32\drivers\CAD.sys</p><p>\SystemRoot\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igdkmd64.sys</p><p>\SystemRoot\System32\drivers\ax88179_178a.sys</p><p>\SystemRoot\system32\DRIVERS\ibtusb.sys</p><p>\SystemRoot\System32\drivers\BTHUSB.sys</p><p>\SystemRoot\System32\drivers\bthport.sys</p><p>\SystemRoot\System32\drivers\hidusb.sys</p><p>\SystemRoot\System32\drivers\HIDCLASS.SYS</p><p>\SystemRoot\System32\drivers\HIDPARSE.SYS</p><p>\SystemRoot\System32\Drivers\usbvideo.sys</p><p>\SystemRoot\system32\drivers\ksthunk.sys</p><p>\SystemRoot\System32\drivers\TeeDriverW8x64.sys</p><p>\SystemRoot\system32\DRIVERS\Netwtw04.sys</p><p>\SystemRoot\system32\DRIVERS\wdiwifi.sys</p><p>\SystemRoot\System32\drivers\vwifibus.sys</p><p>\SystemRoot\system32\DRIVERS\RtsP2Stor.sys</p><p>\SystemRoot\System32\drivers\i8042prt.sys</p><p>\SystemRoot\system32\DRIVERS\SynTP.sys</p><p>\SystemRoot\System32\drivers\kbdclass.sys</p><p>\SystemRoot\System32\drivers\mouclass.sys</p><p>\SystemRoot\System32\drivers\HDAudBus.sys</p><p>\SystemRoot\System32\drivers\portcls.sys</p><p>\SystemRoot\System32\drivers\drmk.sys</p><p>\SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys</p><p>\SystemRoot\System32\drivers\CmBatt.sys</p><p>\SystemRoot\System32\drivers\BATTC.SYS</p><p>\SystemRoot\System32\drivers\wmiacpi.sys</p><p>\SystemRoot\System32\drivers\intelppm.sys</p><p>\SystemRoot\System32\drivers\acpipagr.sys</p><p>\SystemRoot\System32\drivers\tosrfec.sys</p><p>\SystemRoot\System32\drivers\Thotkey.sys</p><p>\SystemRoot\System32\drivers\mshidkmdf.sys</p><p>\SystemRoot\System32\drivers\msgpiowin32.sys</p><p>\SystemRoot\System32\drivers\UEFI.sys</p><p>\SystemRoot\System32\drivers\NdisVirtualBus.sys</p><p>\SystemRoot\System32\drivers\swenum.sys</p><p>\SystemRoot\System32\drivers\rdpbus.sys</p><p>\SystemRoot\system32\drivers\RTKVHD64.sys</p><p>\SystemRoot\system32\DRIVERS\IntcDAud.sys</p><p>\SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys</p><p>\SystemRoot\System32\drivers\rfcomm.sys</p><p>\SystemRoot\System32\drivers\BthEnum.sys</p><p>\SystemRoot\System32\drivers\bthpan.sys</p><p>\SystemRoot\system32\drivers\BthA2DP.sys</p><p>\SystemRoot\system32\drivers\btampm.sys</p><p>\SystemRoot\System32\drivers\BthAvrcpTg.sys</p><p>\SystemRoot\System32\drivers\bthhfenum.sys</p><p>\SystemRoot\System32\drivers\BthHfAud.sys</p><p>\SystemRoot\System32\drivers\BthHFHid.sys</p><p>\SystemRoot\System32\Drivers\fastfat.SYS</p><p>\SystemRoot\System32\Drivers\dump_diskdump.sys</p><p>\SystemRoot\System32\Drivers\dump_iaStorA.sys</p><p>\SystemRoot\System32\Drivers\dump_dumpfve.sys</p><p>\SystemRoot\System32\win32k.sys</p><p>\SystemRoot\System32\win32kfull.sys</p><p>\SystemRoot\System32\win32kbase.sys</p><p>\SystemRoot\System32\drivers\dxgmms2.sys</p><p>\SystemRoot\System32\drivers\monitor.sys</p><p>\SystemRoot\System32\TSDDD.dll</p><p>\SystemRoot\System32\cdd.dll</p><p>\SystemRoot\system32\drivers\WudfPf.sys</p><p>\SystemRoot\system32\drivers\luafv.sys</p><p>\SystemRoot\system32\drivers\wcifs.sys</p><p>\SystemRoot\system32\drivers\storqosflt.sys</p><p>\SystemRoot\system32\drivers\aswMonFlt.sys</p><p>\SystemRoot\System32\drivers\registry.sys</p><p>\SystemRoot\system32\drivers\mslldp.sys</p><p>\SystemRoot\system32\drivers\HTTP.sys</p><p>\SystemRoot\system32\drivers\aswStm.sys</p><p>\SystemRoot\System32\DRIVERS\wanarp.sys</p><p>\SystemRoot\system32\drivers\ndisuio.sys</p><p>\SystemRoot\system32\DRIVERS\nwifi.sys</p><p>\??\C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys</p><p>\SystemRoot\System32\drivers\condrv.sys</p><p>\SystemRoot\system32\DRIVERS\bowser.sys</p><p>\SystemRoot\System32\drivers\mpsdrv.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb20.sys</p><p>\SystemRoot\System32\DRIVERS\srvnet.sys</p><p>\SystemRoot\system32\drivers\mmcss.sys</p><p>\SystemRoot\system32\drivers\Ndu.sys</p><p>\SystemRoot\system32\drivers\peauth.sys</p><p>\SystemRoot\System32\drivers\tcpipreg.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb10.sys</p><p>\SystemRoot\System32\DRIVERS\srv2.sys</p><p>\SystemRoot\System32\DRIVERS\srv.sys</p><p>\SystemRoot\System32\drivers\tunnel.sys</p><p>\SystemRoot\System32\drivers\vwifimp.sys</p><p>\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS</p><p>\??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS</p><p>----------- End -----------</p><p>Done!</p><p></p><p>Scan started</p><p>Database versions:</p><p> main: v2018.01.03.09</p><p> rootkit: v2017.10.14.01</p><p></p><p><<<2>>></p><p>Physical Sector Size: 512</p><p>Drive: 0, DevicePointer: 0xffffb903e05f9060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>--------- Disk Stack ------</p><p>DevicePointer: 0xffffb903dfee69f0, DeviceName: Unknown, DriverName: \Driver\partmgr\</p><p>DevicePointer: 0xffffb903e05f9060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>DevicePointer: 0xffffb903dfe509f0, DeviceName: Unknown, DriverName: \Driver\ACPI\</p><p>DevicePointer: 0xffffb903e05a33c0, DeviceName: \Device\00000028\, DriverName: \Driver\iaStorA\</p><p>------------ End ----------</p><p>Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>Upper DeviceData: 0x0, 0x0, 0x0</p><p>Lower DeviceData: 0x0, 0x0, 0x0</p><p><<<3>>></p><p>Volume: C:</p><p>File system type: NTFS</p><p>SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes</p><p><<<2>>></p><p><<<3>>></p><p>Volume: C:</p><p>File system type: NTFS</p><p>SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes</p><p>Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...</p><p>Done!</p><p>Drive 0</p><p>This is a System drive</p><p>Scanning MBR on drive 0...</p><p>Inspecting partition table:</p><p>This drive is a GPT Drive.</p><p>MBR Signature: 55AA</p><p>Disk Signature: 1B351DD7</p><p></p><p>GPT Protective MBR Partition information:</p><p></p><p> Partition 0 type is EFI-GPT (0xee)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 1 Numsec = 4294967295</p><p></p><p> Partition 1 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p> Partition 2 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p> Partition 3 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p>GPT Partition information:</p><p></p><p> GPT Header Signature 4546492050415254</p><p> GPT Header Revision 65536 Size 92 CRC 2220430882</p><p> GPT Header CurrentLba = 1 BackupLba 937703087</p><p> GPT Header FirstUsableLba 34 LastUsableLba 937703054</p><p> GPT Header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3</p><p> GPT Header Contains 128 partition entries starting at LBA 2</p><p> GPT Header Partition entry size = 128</p><p></p><p> Backup GPT header Signature 4546492050415254</p><p> Backup GPT header Revision 65536 Size 92 CRC 2220430882</p><p> Backup GPT header CurrentLba = 937703087 BackupLba 1</p><p> Backup GPT header FirstUsableLba 34 LastUsableLba 937703054</p><p> Backup GPT header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3</p><p> Backup GPT header Contains 128 partition entries starting at LBA 937703055</p><p> Backup GPT header Partition entry size = 128</p><p></p><p> Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b</p><p> Partition ID 5d071003-882f-4260-869b-fb6a86cb1f86</p><p> FirstLBA 2048 Last LBA 534527</p><p> Attributes 0</p><p> Partition Name EFI system partition</p><p></p><p> GPT Partition 0 is bootable</p><p> Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae</p><p> Partition ID 862a81d1-cf88-4244-a9c1-4e94f6d6784</p><p> FirstLBA 534528 Last LBA 567295</p><p> Attributes 0</p><p> Partition Name Microsoft reserved partition</p><p></p><p> Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7</p><p> Partition ID 3afb849c-9c48-444f-bb93-5522bf96872e</p><p> FirstLBA 567296 Last LBA 934660740</p><p> Attributes 0</p><p> Partition Name Basic data partition</p><p></p><p> Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac</p><p> Partition ID 933c2ef7-cb2a-4ed2-848f-e2b311ffe493</p><p> FirstLBA 934662144 Last LBA 936677375</p><p> Attributes 1</p><p> Partition Name </p><p></p><p> Partition 4 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac</p><p> Partition ID 6ea67a2f-88a5-4c0a-b93f-67656372b2ed</p><p> FirstLBA 936679424 Last LBA 937701375</p><p> Attributes 1</p><p> Partition Name </p><p></p><p>Disk Size: 480103981056 bytes</p><p>Sector size: 512 bytes</p><p></p><p>Done!</p><p>Physical Sector Size: 512</p><p>Drive: 1, DevicePointer: 0xffffb903e2f02060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\</p><p>--------- Disk Stack ------</p><p>DevicePointer: 0xffffb903e2e8f040, DeviceName: Unknown, DriverName: \Driver\partmgr\</p><p>DevicePointer: 0xffffb903e2f02060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\</p><p>DevicePointer: 0xffffb903e2f00060, DeviceName: \Device\00000037\, DriverName: \Driver\UASPStor\</p><p>------------ End ----------</p><p>Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\</p><p>Upper DeviceData: 0x0, 0x0, 0x0</p><p>Lower DeviceData: 0x0, 0x0, 0x0</p><p>Drive 1</p><p>Scanning MBR on drive 1...</p><p>Inspecting partition table:</p><p>MBR Signature: 55AA</p><p>Disk Signature: B5F5BCFB</p><p></p><p>Partition information:</p><p></p><p> Partition 0 type is Primary (0x7)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 2048 Numsec = 3907022848</p><p> Partition is not bootable</p><p> Partition file system is NTFS</p><p></p><p> Partition 1 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p> Partition is not bootable</p><p></p><p> Partition 2 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p> Partition is not bootable</p><p></p><p> Partition 3 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p> Partition is not bootable</p><p></p><p>Disk Size: 2000398933504 bytes</p><p>Sector size: 512 bytes</p><p></p><p>Done!</p><p>File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\psapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\user32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ucrtbase.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\advapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msvcrt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sechost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rpcrt4.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sspicli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\imm32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\combase.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\version.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cfgmgr32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SHCore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\powrprof.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\userenv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mpr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winmm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winspool.drv" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bcrypt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netutils.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sfc_os.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptsp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rsaenh.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wkscli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cscapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\uxtheme.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPHLPAPI.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winhttp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mswsock.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msIso.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasadhlp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FWPUCLNT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ntmarta.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\clbcatq.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sxs.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\twinapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wtsapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winsta.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\propsys.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\coml2.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mssprxy.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\linkinfo.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ntshrui.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\srvcli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\smss.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\csrss.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lsass.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\svchost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FONTDRVHOST.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dwm.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dasHost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\shfolder.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wsock32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\oledlg.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msimg32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cabinet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wshqos.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WSHTCPIP.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wship6.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\samcli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptnet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NapiNSP.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpnsp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winrnr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SECURITYHEALTHSERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\setupapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\devobj.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\fltLib.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Faultrep.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dbgcore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\security.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\secur32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\srclient.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\spp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vssapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vsstrace.dll" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Media Player\wmpnetwk.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WmiPrvSE.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\unsecapp.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ctfmon.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\opengl32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\glu32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sihost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TASKHOSTW.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PRESENTATIONFONTCACHE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\explorer.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RUNTIMEBROKER.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPLICATIONFRAMEHOST.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dllhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\cmd.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cmdext.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\conhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Mail\wab.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\userinit.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\scecli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Locator.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\appid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mspclock.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpiex.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mpsdrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\afd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ahcache.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\asyncmac.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\alg.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wcnfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srv2.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\netbt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Ndu.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cng.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\csc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bowser.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\irda.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bthpan.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cdfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cldflt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\registry.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mup.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\CNGHWASSIST.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\condrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dfsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mssecflt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dxgkrnl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tcpip.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SPATIALGRAPHFILTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fileinfo.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FXSSVC.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ipfltdrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fltMgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FSDEPENDS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fvevol.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndisuio.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSGPIOCLX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wanarp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rasl2tp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\VSSVC.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msdtc.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hwpolicy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndproxy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pacer.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\perfhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdFilter.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\iorate.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ipnat.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\irenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\kbdhid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ksecdd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\lltdio.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\luafv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mstee.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mmcss.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wimmount.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxdav.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\modem.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mspqm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mountmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb10.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb20.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Ucx01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ufx01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msiexec.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mslldp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\netbios.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndis.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndiscap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tunnel.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndistapi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndiswan.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\nsiproxy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\partmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pcw.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\PEAuth.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\qwavedrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\raspptp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rasacd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\agilevpn.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\raspppoe.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rassstp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdbss.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdpdr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdyboost.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rspndr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AGENTSERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sdbus.sys" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SENSORDATASERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SerCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SpbCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SerCx2.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Spectrum.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srvnet.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\stornvme.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tcpipreg.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\terminpt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\servicing\TRUSTEDINSTALLER.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\TsUsbFlt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tsusbhub.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\UcmCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Udecx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\udfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vds.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vhf.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volmgrx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volsnap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vpci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vwifimp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbengine.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdBoot.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Wdf01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdiWiFi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdNisDrv.sys" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Defender\NisSrv.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wfplwfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\winnat.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WmiApSrv.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ws2ifsl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AJRouter.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NATURALAUTH.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\umpnpmgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rpcss.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\appinfo.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\appmgmts.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AxInstSv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RpcEpMap.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bdesvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BFE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netman.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cscsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\qmgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lltdsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ListSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\browser.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\profsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bthserv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\provsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\das.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\LICENSEMANAGERSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ClipSVC.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\XBOXGIPSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVICESFLOWBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wscsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wersvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wecsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wcmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wkssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dot3svc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dusmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dps.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\eapsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\efssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\es.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sdrsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\xbgmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FDResPub.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\upnphost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\gpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\hidserv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IKEEXT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPXLATCFG.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\irmon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\keyiso.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msdtckrm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lfsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lmhsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lsm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MPSSVC.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\nlasvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ngcsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NcaSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netlogon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\trkwks.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\icsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\p2psvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PEERDISTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PHONESERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pla.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpauto.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPSECSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\qwave.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasauto.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasmans.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\regsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RMapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\schedsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\seclogon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SEMgrSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Sens.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SessEnv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sstpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ssdpsrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wiaservc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\svsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\swprv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TabSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\termsrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\tapisrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TOKENBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\umrdp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\usermgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\usocore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vaultsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\w32time.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wwansvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wcncsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wdi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WebClnt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wiarpc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WMIsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rundll32.exe" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Mail\WinMail.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ie4uinit.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\rundll32.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)</p><p>File "C:\ProgramData\Microsoft\Network\Downloader\qmgr.db" is sparse (flags = 32768)</p><p>Scan finished</p><p>=======================================</p><p></p><p></p><p>Removal queue found; removal started</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-2048-i.mbam...</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...</p><p>Removal finished</p><p>---------------------------------------</p><p>Malwarebytes Anti-Rootkit BETA 1.09.3.1001</p><p></p><p>(c) Malwarebytes Corporation 2011-2012</p><p></p><p>OS version: 6.2.9200 Windows 8 x64</p><p></p><p>System is currently in a safe mode</p><p></p><p>Account is Administrative</p><p></p><p>Internet Explorer version: 11.786.15063.0</p><p></p><p>File system is: NTFS</p><p>Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED</p><p>CPU speed: 2.592000 GHz</p><p>Memory total: 12704256000, free: 10832072704</p><p></p><p>=======================================</p><p></p><p></p><p>---------------------------------------</p><p>Malwarebytes Anti-Rootkit BETA 1.09.3.1001</p><p></p><p>(c) Malwarebytes Corporation 2011-2012</p><p></p><p>OS version: 6.2.9200 Windows 8 x64</p><p></p><p>System is currently in a safe mode</p><p></p><p>Account is Administrative</p><p></p><p>Internet Explorer version: 11.786.15063.0</p><p></p><p>File system is: NTFS</p><p>Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED</p><p>CPU speed: 2.592000 GHz</p><p>Memory total: 12704256000, free: 10871791616</p><p></p><p>=======================================</p><p></p><p></p><p>---------------------------------------</p><p>Malwarebytes Anti-Rootkit BETA 1.10.3.1001</p><p></p><p>(c) Malwarebytes Corporation 2011-2012</p><p></p><p>OS version: 10.0.9200 Windows 10 x64</p><p></p><p>Account is Administrative</p><p></p><p>Internet Explorer version: 11.786.15063.0</p><p></p><p>File system is: NTFS</p><p>Disk drives: C:\ DRIVE_FIXED</p><p>CPU speed: 2.592000 GHz</p><p>Memory total: 12704256000, free: 9287733248</p><p></p><p>Downloaded database version: v2018.01.06.01</p><p>Downloaded database version: v2017.11.28.01</p><p>=======================================</p><p>Driver version: 4.3.0.15</p><p>------------ Kernel report ------------</p><p> 01/05/2018 18:57:39</p><p>------------ Loaded modules -----------</p><p>\SystemRoot\system32\ntoskrnl.exe</p><p>\SystemRoot\system32\hal.dll</p><p>\SystemRoot\system32\kd.dll</p><p>\SystemRoot\system32\mcupdate_GenuineIntel.dll</p><p>\SystemRoot\System32\drivers\msrpc.sys</p><p>\SystemRoot\System32\drivers\ksecdd.sys</p><p>\SystemRoot\System32\drivers\werkernel.sys</p><p>\SystemRoot\System32\drivers\CLFS.SYS</p><p>\SystemRoot\System32\drivers\tm.sys</p><p>\SystemRoot\system32\PSHED.dll</p><p>\SystemRoot\system32\BOOTVID.dll</p><p>\SystemRoot\System32\drivers\FLTMGR.SYS</p><p>\SystemRoot\System32\drivers\clipsp.sys</p><p>\SystemRoot\System32\drivers\cmimcext.sys</p><p>\SystemRoot\System32\drivers\ntosext.sys</p><p>\SystemRoot\system32\CI.dll</p><p>\SystemRoot\System32\drivers\cng.sys</p><p>\SystemRoot\system32\drivers\Wdf01000.sys</p><p>\SystemRoot\system32\drivers\WDFLDR.SYS</p><p>\SystemRoot\system32\drivers\SleepStudyHelper.sys</p><p>\SystemRoot\System32\Drivers\acpiex.sys</p><p>\SystemRoot\System32\Drivers\WppRecorder.sys</p><p>\SystemRoot\System32\drivers\ACPI.sys</p><p>\SystemRoot\System32\drivers\WMILIB.SYS</p><p>\SystemRoot\System32\drivers\intelpep.sys</p><p>\SystemRoot\system32\drivers\WindowsTrustedRT.sys</p><p>\SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys</p><p>\SystemRoot\System32\drivers\pcw.sys</p><p>\SystemRoot\System32\drivers\msisadrv.sys</p><p>\SystemRoot\System32\drivers\pci.sys</p><p>\SystemRoot\System32\drivers\vdrvroot.sys</p><p>\SystemRoot\system32\drivers\pdc.sys</p><p>\SystemRoot\system32\drivers\CEA.sys</p><p>\SystemRoot\System32\drivers\partmgr.sys</p><p>\SystemRoot\System32\drivers\spaceport.sys</p><p>\SystemRoot\System32\drivers\volmgr.sys</p><p>\SystemRoot\System32\drivers\volmgrx.sys</p><p>\SystemRoot\System32\drivers\mountmgr.sys</p><p>\SystemRoot\System32\drivers\iaStorA.sys</p><p>\SystemRoot\System32\drivers\storport.sys</p><p>\SystemRoot\System32\drivers\fileinfo.sys</p><p>\SystemRoot\System32\Drivers\Wof.sys</p><p>\SystemRoot\system32\drivers\WdFilter.sys</p><p>\SystemRoot\System32\Drivers\NTFS.sys</p><p>\SystemRoot\System32\Drivers\Fs_Rec.sys</p><p>\SystemRoot\system32\drivers\ndis.sys</p><p>\SystemRoot\system32\drivers\NETIO.SYS</p><p>\SystemRoot\System32\Drivers\ksecpkg.sys</p><p>\SystemRoot\System32\drivers\tcpip.sys</p><p>\SystemRoot\System32\drivers\fwpkclnt.sys</p><p>\SystemRoot\System32\drivers\wfplwfs.sys</p><p>\SystemRoot\System32\drivers\amdkmpfd.sys</p><p>\SystemRoot\System32\DRIVERS\fvevol.sys</p><p>\SystemRoot\System32\drivers\volume.sys</p><p>\SystemRoot\System32\drivers\volsnap.sys</p><p>\SystemRoot\System32\drivers\TVALZ_O.SYS</p><p>\SystemRoot\System32\drivers\rdyboost.sys</p><p>\SystemRoot\System32\Drivers\mup.sys</p><p>\SystemRoot\system32\drivers\iorate.sys</p><p>\SystemRoot\System32\drivers\disk.sys</p><p>\SystemRoot\System32\drivers\CLASSPNP.SYS</p><p>\SystemRoot\System32\Drivers\crashdmp.sys</p><p>\SystemRoot\System32\drivers\cdrom.sys</p><p>\SystemRoot\system32\drivers\filecrypt.sys</p><p>\SystemRoot\system32\drivers\tbs.sys</p><p>\SystemRoot\System32\Drivers\Null.SYS</p><p>\SystemRoot\System32\Drivers\Beep.SYS</p><p>\SystemRoot\System32\drivers\BasicDisplay.sys</p><p>\SystemRoot\System32\drivers\watchdog.sys</p><p>\SystemRoot\System32\drivers\dxgkrnl.sys</p><p>\SystemRoot\System32\drivers\vmbkmclr.sys</p><p>\SystemRoot\System32\drivers\BasicRender.sys</p><p>\SystemRoot\System32\Drivers\Npfs.SYS</p><p>\SystemRoot\System32\Drivers\Msfs.SYS</p><p>\SystemRoot\system32\DRIVERS\tdx.sys</p><p>\SystemRoot\system32\DRIVERS\TDI.SYS</p><p>\SystemRoot\System32\DRIVERS\netbt.sys</p><p>\SystemRoot\system32\drivers\afd.sys</p><p>\SystemRoot\System32\drivers\vwififlt.sys</p><p>\SystemRoot\System32\drivers\pacer.sys</p><p>\SystemRoot\system32\drivers\netbios.sys</p><p>\SystemRoot\system32\DRIVERS\rdbss.sys</p><p>\SystemRoot\system32\drivers\csc.sys</p><p>\??\C:\WINDOWS\System32\drivers\zamguard64.sys</p><p>\??\C:\WINDOWS\System32\drivers\zam64.sys</p><p>\SystemRoot\system32\DRIVERS\sbwfw.sys</p><p>\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS</p><p>\??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS</p><p>\SystemRoot\system32\drivers\nsiproxy.sys</p><p>\SystemRoot\System32\drivers\npsvctrig.sys</p><p>\SystemRoot\System32\drivers\mssmbios.sys</p><p>\??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS</p><p>\SystemRoot\System32\drivers\gpuenergydrv.sys</p><p>\SystemRoot\System32\Drivers\dfsc.sys</p><p>\SystemRoot\system32\drivers\aswHdsKe.sys</p><p>\SystemRoot\system32\drivers\aswArPot.sys</p><p>\SystemRoot\system32\DRIVERS\ahcache.sys</p><p>\SystemRoot\System32\drivers\tap0901.sys</p><p>\SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys</p><p>\SystemRoot\System32\drivers\kdnic.sys</p><p>\SystemRoot\System32\drivers\umbus.sys</p><p>\SystemRoot\System32\drivers\CAD.sys</p><p>\SystemRoot\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igdkmd64.sys</p><p>\SystemRoot\System32\Drivers\fastfat.SYS</p><p>\SystemRoot\System32\drivers\USBXHCI.SYS</p><p>\SystemRoot\system32\drivers\ucx01000.sys</p><p>\SystemRoot\System32\drivers\TeeDriverW8x64.sys</p><p>\SystemRoot\system32\DRIVERS\Netwtw04.sys</p><p>\SystemRoot\system32\DRIVERS\wdiwifi.sys</p><p>\SystemRoot\System32\drivers\vwifibus.sys</p><p>\SystemRoot\system32\DRIVERS\RtsP2Stor.sys</p><p>\SystemRoot\System32\drivers\i8042prt.sys</p><p>\SystemRoot\system32\DRIVERS\SynTP.sys</p><p>\SystemRoot\system32\DRIVERS\USBD.SYS</p><p>\SystemRoot\system32\DRIVERS\HIDPARSE.SYS</p><p>\SystemRoot\System32\drivers\kbdclass.sys</p><p>\SystemRoot\System32\drivers\mouclass.sys</p><p>\SystemRoot\System32\drivers\HDAudBus.sys</p><p>\SystemRoot\System32\drivers\portcls.sys</p><p>\SystemRoot\System32\drivers\drmk.sys</p><p>\SystemRoot\System32\drivers\ks.sys</p><p>\SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys</p><p>\SystemRoot\System32\drivers\CmBatt.sys</p><p>\SystemRoot\System32\drivers\BATTC.SYS</p><p>\SystemRoot\System32\drivers\wmiacpi.sys</p><p>\SystemRoot\System32\drivers\intelppm.sys</p><p>\SystemRoot\System32\drivers\acpipagr.sys</p><p>\SystemRoot\System32\drivers\tosrfec.sys</p><p>\SystemRoot\System32\drivers\Thotkey.sys</p><p>\SystemRoot\System32\drivers\mshidkmdf.sys</p><p>\SystemRoot\System32\drivers\HIDCLASS.SYS</p><p>\SystemRoot\System32\drivers\msgpiowin32.sys</p><p>\SystemRoot\System32\drivers\UEFI.sys</p><p>\SystemRoot\System32\drivers\NdisVirtualBus.sys</p><p>\SystemRoot\System32\drivers\swenum.sys</p><p>\SystemRoot\system32\DRIVERS\avchv.sys</p><p>\SystemRoot\System32\drivers\rdpbus.sys</p><p>\SystemRoot\System32\drivers\UsbHub3.sys</p><p>\SystemRoot\system32\drivers\RTKVHD64.sys</p><p>\SystemRoot\system32\drivers\ksthunk.sys</p><p>\SystemRoot\system32\DRIVERS\IntcDAud.sys</p><p>\SystemRoot\system32\DRIVERS\ibtusb.sys</p><p>\SystemRoot\System32\drivers\BTHUSB.sys</p><p>\SystemRoot\System32\drivers\bthport.sys</p><p>\SystemRoot\System32\drivers\usbccgp.sys</p><p>\SystemRoot\System32\Drivers\usbvideo.sys</p><p>\SystemRoot\System32\drivers\ax88179_178a.sys</p><p>\SystemRoot\System32\drivers\hidusb.sys</p><p>\SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys</p><p>\SystemRoot\System32\drivers\rfcomm.sys</p><p>\SystemRoot\System32\drivers\BthEnum.sys</p><p>\SystemRoot\System32\drivers\bthpan.sys</p><p>\SystemRoot\system32\drivers\BthA2DP.sys</p><p>\SystemRoot\system32\drivers\btampm.sys</p><p>\SystemRoot\System32\drivers\BthAvrcpTg.sys</p><p>\SystemRoot\System32\drivers\bthhfenum.sys</p><p>\SystemRoot\System32\drivers\BthHfAud.sys</p><p>\SystemRoot\System32\drivers\BthHFHid.sys</p><p>\SystemRoot\System32\win32k.sys</p><p>\SystemRoot\System32\win32kfull.sys</p><p>\SystemRoot\System32\win32kbase.sys</p><p>\SystemRoot\System32\drivers\dxgmms2.sys</p><p>\SystemRoot\System32\drivers\monitor.sys</p><p>\SystemRoot\System32\TSDDD.dll</p><p>\SystemRoot\System32\cdd.dll</p><p>\SystemRoot\system32\drivers\WudfPf.sys</p><p>\SystemRoot\System32\drivers\WUDFRd.sys</p><p>\SystemRoot\system32\drivers\mmcss.sys</p><p>\SystemRoot\system32\drivers\luafv.sys</p><p>\SystemRoot\system32\drivers\wcifs.sys</p><p>\SystemRoot\system32\drivers\storqosflt.sys</p><p>\SystemRoot\system32\DRIVERS\sbapifs.sys</p><p>\SystemRoot\System32\drivers\registry.sys</p><p>\SystemRoot\system32\drivers\mslldp.sys</p><p>\SystemRoot\system32\drivers\lltdio.sys</p><p>\SystemRoot\system32\drivers\rspndr.sys</p><p>\SystemRoot\System32\DRIVERS\wanarp.sys</p><p>\SystemRoot\system32\DRIVERS\nwifi.sys</p><p>\SystemRoot\system32\drivers\ndisuio.sys</p><p>\SystemRoot\System32\Drivers\dump_diskdump.sys</p><p>\SystemRoot\System32\Drivers\dump_iaStorA.sys</p><p>\SystemRoot\System32\Drivers\dump_dumpfve.sys</p><p>\??\C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys</p><p>\SystemRoot\system32\drivers\HTTP.sys</p><p>\SystemRoot\system32\DRIVERS\bowser.sys</p><p>\SystemRoot\System32\drivers\mpsdrv.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb20.sys</p><p>\SystemRoot\System32\drivers\condrv.sys</p><p>\??\C:\WINDOWS\system32\Drivers\WebExaminer64.sys</p><p>\SystemRoot\System32\DRIVERS\srvnet.sys</p><p>\SystemRoot\system32\drivers\Ndu.sys</p><p>\SystemRoot\system32\DRIVERS\mrxsmb10.sys</p><p>\SystemRoot\System32\DRIVERS\srv2.sys</p><p>\SystemRoot\system32\drivers\peauth.sys</p><p>\SystemRoot\System32\DRIVERS\srv.sys</p><p>\SystemRoot\System32\drivers\tcpipreg.sys</p><p>\SystemRoot\System32\drivers\vwifimp.sys</p><p>\SystemRoot\System32\drivers\tunnel.sys</p><p>\SystemRoot\system32\DRIVERS\sbwtis.sys</p><p>\SystemRoot\system32\DRIVERS\avc3.sys</p><p>\SystemRoot\system32\DRIVERS\avckf.sys</p><p>\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys</p><p>\??\C:\WINDOWS\system32\drivers\6331A74D.sys</p><p>----------- End -----------</p><p>Done!</p><p></p><p>Scan started</p><p>Database versions:</p><p> main: v2018.01.06.01</p><p> rootkit: v2017.10.14.01</p><p></p><p><<<2>>></p><p>Physical Sector Size: 512</p><p>Drive: 0, DevicePointer: 0xffff9d0294ef6610, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>--------- Disk Stack ------</p><p>DevicePointer: 0xffff9d0294ea39f0, DeviceName: Unknown, DriverName: \Driver\partmgr\</p><p>DevicePointer: 0xffff9d0294ef6610, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>DevicePointer: 0xffff9d0294f7be40, DeviceName: Unknown, DriverName: \Driver\ACPI\</p><p>DevicePointer: 0xffff9d0293a583c0, DeviceName: \Device\0000002b\, DriverName: \Driver\iaStorA\</p><p>------------ End ----------</p><p>Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\</p><p>Upper DeviceData: 0x0, 0x0, 0x0</p><p>Lower DeviceData: 0x0, 0x0, 0x0</p><p><<<3>>></p><p>Volume: C:</p><p>File system type: NTFS</p><p>SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes</p><p><<<2>>></p><p><<<3>>></p><p>Volume: C:</p><p>File system type: NTFS</p><p>SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes</p><p>Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...</p><p>Done!</p><p>Drive 0</p><p>This is a System drive</p><p>Scanning MBR on drive 0...</p><p>Inspecting partition table:</p><p>This drive is a GPT Drive.</p><p>MBR Signature: 55AA</p><p>Disk Signature: 1B351DD7</p><p></p><p>GPT Protective MBR Partition information:</p><p></p><p> Partition 0 type is EFI-GPT (0xee)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 1 Numsec = 4294967295</p><p></p><p> Partition 1 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p> Partition 2 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p> Partition 3 type is Empty (0x0)</p><p> Partition is NOT ACTIVE.</p><p> Partition starts at LBA: 0 Numsec = 0</p><p></p><p>GPT Partition information:</p><p></p><p> GPT Header Signature 4546492050415254</p><p> GPT Header Revision 65536 Size 92 CRC 2220430882</p><p> GPT Header CurrentLba = 1 BackupLba 937703087</p><p> GPT Header FirstUsableLba 34 LastUsableLba 937703054</p><p> GPT Header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3</p><p> GPT Header Contains 128 partition entries starting at LBA 2</p><p> GPT Header Partition entry size = 128</p><p></p><p> Backup GPT header Signature 4546492050415254</p><p> Backup GPT header Revision 65536 Size 92 CRC 2220430882</p><p> Backup GPT header CurrentLba = 937703087 BackupLba 1</p><p> Backup GPT header FirstUsableLba 34 LastUsableLba 937703054</p><p> Backup GPT header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3</p><p> Backup GPT header Contains 128 partition entries starting at LBA 937703055</p><p> Backup GPT header Partition entry size = 128</p><p></p><p> Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b</p><p> Partition ID 5d071003-882f-4260-869b-fb6a86cb1f86</p><p> FirstLBA 2048 Last LBA 534527</p><p> Attributes 0</p><p> Partition Name EFI system partition</p><p></p><p> GPT Partition 0 is bootable</p><p> Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae</p><p> Partition ID 862a81d1-cf88-4244-a9c1-4e94f6d6784</p><p> FirstLBA 534528 Last LBA 567295</p><p> Attributes 0</p><p> Partition Name Microsoft reserved partition</p><p></p><p> Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7</p><p> Partition ID 3afb849c-9c48-444f-bb93-5522bf96872e</p><p> FirstLBA 567296 Last LBA 934660740</p><p> Attributes 0</p><p> Partition Name Basic data partition</p><p></p><p> Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac</p><p> Partition ID 933c2ef7-cb2a-4ed2-848f-e2b311ffe493</p><p> FirstLBA 934662144 Last LBA 936677375</p><p> Attributes 1</p><p> Partition Name </p><p></p><p> Partition 4 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac</p><p> Partition ID 6ea67a2f-88a5-4c0a-b93f-67656372b2ed</p><p> FirstLBA 936679424 Last LBA 937701375</p><p> Attributes 1</p><p> Partition Name </p><p></p><p>Disk Size: 480103981056 bytes</p><p>Sector size: 512 bytes</p><p></p><p>Done!</p><p>File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\psapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\user32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ucrtbase.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\advapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msvcrt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sechost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rpcrt4.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sspicli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\imm32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cfgmgr32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SHCore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\combase.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\powrprof.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\version.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winmm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winspool.drv" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\userenv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mpr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPHLPAPI.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bcrypt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netutils.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sfc_os.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptsp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rsaenh.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wkscli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cscapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\uxtheme.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winhttp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mswsock.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msIso.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasadhlp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FWPUCLNT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ntmarta.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\clbcatq.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sxs.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\twinapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wtsapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winsta.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\propsys.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\coml2.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mssprxy.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\linkinfo.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ntshrui.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\srvcli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\smss.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\csrss.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lsass.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\svchost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FONTDRVHOST.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dwm.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dasHost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wlanext.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\conhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\setupapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.15063.608_none_9e9d5d4256d15def\GdiPlus.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msimg32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SECURITYHEALTHSERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WmiPrvSE.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\devobj.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wshqos.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WSHTCPIP.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wship6.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\fltLib.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Faultrep.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dbgcore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\security.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\secur32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\srclient.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\spp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vssapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vsstrace.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\unsecapp.exe" is sparse (flags = 32768)</p><p>File "C:\Program Files\Windows Media Player\wmpnetwk.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sihost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PRESENTATIONFONTCACHE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\shfolder.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pcacli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\devrtl.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TASKHOSTW.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\explorer.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RUNTIMEBROKER.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\usp10.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wsock32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\xmllite.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cabinet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wer.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\loadperf.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pdh.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ncrypt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ntasn1.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mlang.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msxml6.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ROMETADATA.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPXDEPLOYMENTCLIENT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WINDOWS.SERVICES.TARGETEDCONTENT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\taskschd.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FAMILYSAFETYEXT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Wpc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wlidprov.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\samcli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\oledlg.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\wbemprox.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbemcomn.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\wbemsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\fastprox.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DWrite.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DHCPCSVC6.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\avrt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\atlthunk.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\webio.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\schannel.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MSKEYPROTECT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NCRYPTSSLP.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dpapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\mscms.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptnet.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msiltcfg.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\schedcli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ktmw32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasapi32.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasman.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NapiNSP.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpnsp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\winrnr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\cmd.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cmdext.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Taskmgr.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\userinit.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\scecli.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Locator.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\appid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mspclock.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpiex.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mpsdrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\afd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ahcache.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\asyncmac.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\alg.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wcnfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srv2.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\netbt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bowser.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Ndu.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\bthpan.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cng.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\csc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cdfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\cldflt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\registry.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mup.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\CNGHWASSIST.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dllhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\condrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dfsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mssecflt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\dxgkrnl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tcpip.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SPATIALGRAPHFILTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fileinfo.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FXSSVC.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ipfltdrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fltMgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\FSDEPENDS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\fvevol.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndisuio.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSGPIOCLX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wanarp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rasl2tp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hwpolicy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndproxy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pacer.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\perfhost.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdFilter.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\iorate.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ipnat.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\irda.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\irenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\kbdhid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ksecdd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\lltdio.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\luafv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mmcss.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wimmount.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxdav.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\modem.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mspqm.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mountmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb10.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mrxsmb20.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Ucx01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ufx01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\VSSVC.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msdtc.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mstee.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msiexec.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mslldp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\netbios.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndis.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndiscap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tunnel.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndistapi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ndiswan.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\nsiproxy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\partmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pcw.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\PEAuth.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\qwavedrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\raspptp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rasacd.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\agilevpn.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\raspppoe.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rassstp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdbss.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdpdr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rdyboost.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\rspndr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AGENTSERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\srvnet.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sdbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SENSORDATASERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SerCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SpbCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SerCx2.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Spectrum.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\stornvme.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tcpipreg.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\terminpt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\servicing\TRUSTEDINSTALLER.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\TsUsbFlt.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\tsusbhub.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\UcmCx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Udecx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\udfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vds.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vhf.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volmgrx.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volsnap.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vpci.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\vwifimp.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbengine.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdBoot.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\Wdf01000.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdiWiFi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WdNisDrv.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wfplwfs.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\winnat.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WmiApSrv.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\drivers\ws2ifsl.sys" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AJRouter.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NATURALAUTH.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\umpnpmgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rpcss.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\appinfo.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\appmgmts.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\AxInstSv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RpcEpMap.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bdesvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BFE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netman.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cscsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\qmgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lltdsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ListSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\browser.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\profsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\bthserv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\provsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\das.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\LICENSEMANAGERSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ClipSVC.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\XBOXGIPSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\cryptsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVICESFLOWBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wscsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wersvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wecsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wcmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wkssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dot3svc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dusmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\dps.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\eapsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\efssvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\es.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sdrsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\xbgmsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FDResPub.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\upnphost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\gpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\hidserv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IKEEXT.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPXLATCFG.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\irmon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\keyiso.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\msdtckrm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lfsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lmhsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\lsm.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\MPSSVC.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\nlasvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ngcsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NcaSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\netlogon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\trkwks.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\icsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\p2psvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PEERDISTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PHONESERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pla.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\pnrpauto.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\IPSECSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\qwave.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasauto.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rasmans.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\regsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\RMapi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\schedsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\seclogon.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SEMgrSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\Sens.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SessEnv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\sstpsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ssdpsrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wiaservc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\svsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\swprv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TabSvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\termsrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\tapisrv.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\TOKENBROKER.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\umrdp.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\usermgr.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\usocore.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\vaultsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\w32time.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wwansvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wcncsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wdi.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WebClnt.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wiarpc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wbem\WMIsvc.dll" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768)</p><p>File "C:\Program Files (x86)\Windows Mail\WinMail.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\ie4uinit.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\System32\rundll32.exe" is sparse (flags = 32768)</p><p>File "C:\Windows\SysWOW64\rundll32.exe" is sparse (flags = 32768)</p><p>File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.79" is compressed (flags = 1)</p><p>File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.7C" is compressed (flags = 1)</p><p>File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.83" is compressed (flags = 1)</p><p>Scan finished</p><p>=======================================</p><p></p><p></p><p>Removal queue found; removal started</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...</p><p>Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...</p><p>Removal finished</p><p></p><p></p><p>Malwarebytes Anti-Rootkit BETA 1.10.3.1001</p><p><a href="http://www.malwarebytes.org" target="_blank">www.malwarebytes.org</a></p><p></p><p>Database version:</p><p> main: v2018.01.06.01</p><p> rootkit: v2017.10.14.01</p><p></p><p>Windows 10 x64 NTFS</p><p>Internet Explorer 11.786.15063.0</p><p>RecoveryAdmin :: STUDIOR4KUHD [administrator]</p><p></p><p>1/5/2018 18:57:43</p><p>mbar-log-2018-01-05 (18-57-43).txt</p><p></p><p>Scan type: Quick scan</p><p>Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken</p><p>Scan options disabled:</p><p>Objects scanned: 318723</p><p>Time elapsed: 11 minute(s), 57 second(s)</p><p></p><p>Memory Processes Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Memory Modules Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Registry Keys Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Registry Values Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Registry Data Items Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Folders Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Files Detected: 0</p><p>(No malicious items detected)</p><p></p><p>Physical Sectors Detected: 0</p><p>(No malicious items detected)</p><p></p><p>(end)</p></blockquote><p></p>
[QUOTE="Enigmas, post: 702834, member: 68936"] Attached are requested logs from normal mode. However scan says it was a safe mode. I repeated steps in SafeMode and will upload at your request: --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 10.0.9200 Windows 10 x64 System is currently in a safe mode Account is Administrative Internet Explorer version: 11.786.15063.0 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED CPU speed: 2.592000 GHz Memory total: 12704256000, free: 8321941504 Downloaded database version: v2018.01.03.09 Downloaded database version: v2017.10.14.01 Downloaded database version: v2017.11.28.01 ======================================= ------------ Kernel report ------------ 01/03/2018 23:18:15 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kd.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\System32\drivers\msrpc.sys \SystemRoot\System32\drivers\ksecdd.sys \SystemRoot\System32\drivers\werkernel.sys \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\System32\drivers\FLTMGR.SYS \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\System32\drivers\cmimcext.sys \SystemRoot\System32\drivers\ntosext.sys \SystemRoot\system32\CI.dll \SystemRoot\System32\drivers\cng.sys \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\SleepStudyHelper.sys \SystemRoot\System32\Drivers\acpiex.sys \SystemRoot\System32\Drivers\WppRecorder.sys \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\System32\drivers\intelpep.sys \SystemRoot\system32\drivers\WindowsTrustedRT.sys \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys \SystemRoot\system32\drivers\63500115.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\msisadrv.sys \SystemRoot\System32\drivers\isapnp.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\System32\drivers\vdrvroot.sys \SystemRoot\system32\drivers\ucx01000.sys \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\drivers\CEA.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\System32\drivers\intelide.sys \SystemRoot\System32\drivers\PCIIDEX.SYS \SystemRoot\System32\drivers\evbda.sys \SystemRoot\System32\drivers\nvraid.sys \SystemRoot\System32\drivers\CLASSPNP.SYS \SystemRoot\system32\drivers\MBAMSwissArmy.sys \SystemRoot\System32\drivers\pcmcia.sys \SystemRoot\System32\drivers\spaceport.sys \SystemRoot\System32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\vmbus.sys \SystemRoot\System32\drivers\NDIS.SYS \SystemRoot\System32\drivers\NETIO.SYS \SystemRoot\System32\drivers\hvsocket.sys \SystemRoot\System32\drivers\vmbkmcl.sys \SystemRoot\System32\drivers\winhv.sys \SystemRoot\System32\drivers\sdbus.sys \SystemRoot\System32\drivers\bxvbda.sys \SystemRoot\System32\drivers\pciide.sys \SystemRoot\system32\drivers\urscx01000.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\System32\drivers\iaStorAV.sys \SystemRoot\System32\drivers\storport.sys \SystemRoot\System32\drivers\iaStorV.sys \SystemRoot\System32\drivers\3ware.sys \SystemRoot\System32\drivers\amdsata.sys \SystemRoot\System32\drivers\amdxata.sys \SystemRoot\System32\drivers\amdsbs.sys \SystemRoot\System32\drivers\arcsas.sys \SystemRoot\System32\drivers\lsi_sas.sys \SystemRoot\System32\drivers\lsi_sas2i.sys \SystemRoot\System32\drivers\lsi_sas3i.sys \SystemRoot\System32\drivers\lsi_sss.sys \SystemRoot\System32\drivers\megasas.sys \SystemRoot\System32\drivers\MegaSas2i.sys \SystemRoot\System32\drivers\megasr.sys \SystemRoot\System32\drivers\mvumis.sys \SystemRoot\System32\drivers\nvstor.sys \SystemRoot\System32\drivers\percsas2i.sys \SystemRoot\System32\drivers\percsas3i.sys \SystemRoot\System32\drivers\SiSRaid2.sys \SystemRoot\System32\drivers\sisraid4.sys \SystemRoot\System32\drivers\stexstor.sys \SystemRoot\System32\drivers\vsmraid.sys \SystemRoot\System32\drivers\vstxraid.sys \SystemRoot\System32\drivers\atapi.sys \SystemRoot\System32\drivers\ataport.SYS \SystemRoot\System32\drivers\storahci.sys \SystemRoot\System32\drivers\stornvme.sys \SystemRoot\System32\drivers\iaStorA.sys \SystemRoot\System32\drivers\ADP80XX.SYS \SystemRoot\System32\drivers\HpSAMD.sys \SystemRoot\System32\drivers\EhStorTcgDrv.sys \SystemRoot\System32\drivers\EhStorClass.sys \SystemRoot\System32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\drivers\MBAMChameleon.sys \SystemRoot\System32\Drivers\NTFS.sys \SystemRoot\System32\drivers\usbccgp.sys \SystemRoot\System32\drivers\USBD.SYS \SystemRoot\System32\drivers\storvsc.sys \SystemRoot\System32\drivers\urschipidea.sys \SystemRoot\System32\drivers\usbhub.sys \SystemRoot\System32\drivers\UsbHub3.sys \SystemRoot\System32\drivers\usbehci.sys \SystemRoot\System32\drivers\USBPORT.SYS \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\drivers\wfplwfs.sys \SystemRoot\System32\drivers\vmstorfl.sys \SystemRoot\System32\drivers\amdkmpfd.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\volume.sys \SystemRoot\System32\drivers\volsnap.sys \SystemRoot\System32\drivers\USBXHCI.SYS \SystemRoot\System32\drivers\USBSTOR.SYS \SystemRoot\System32\drivers\uaspstor.sys \SystemRoot\System32\drivers\TVALZ_O.SYS \SystemRoot\System32\drivers\storufs.sys \SystemRoot\System32\drivers\sdstor.sys \SystemRoot\System32\drivers\scmbus.sys \SystemRoot\System32\drivers\sbp2port.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\system32\drivers\iorate.sys \SystemRoot\System32\drivers\disk.sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\drivers\cdrom.sys \SystemRoot\system32\drivers\aswSP.sys \SystemRoot\system32\drivers\ks.sys \SystemRoot\system32\drivers\filecrypt.sys \SystemRoot\system32\drivers\tbs.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\BasicDisplay.sys \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\vmbkmclr.sys \SystemRoot\System32\drivers\BasicRender.sys \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\aswRdr2.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\drivers\vwififlt.sys \SystemRoot\System32\drivers\pacer.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\csc.sys \??\C:\WINDOWS\System32\drivers\zamguard64.sys \??\C:\WINDOWS\System32\drivers\zam64.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS \SystemRoot\System32\drivers\gpuenergydrv.sys \??\C:\WINDOWS\system32\drivers\mbae64.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\drivers\aswArPot.sys \SystemRoot\system32\DRIVERS\ahcache.sys \SystemRoot\System32\drivers\tap0901.sys \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys \SystemRoot\System32\drivers\kdnic.sys \SystemRoot\System32\drivers\umbus.sys \SystemRoot\System32\drivers\CAD.sys \SystemRoot\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igdkmd64.sys \SystemRoot\System32\drivers\ax88179_178a.sys \SystemRoot\system32\DRIVERS\ibtusb.sys \SystemRoot\System32\drivers\BTHUSB.sys \SystemRoot\System32\drivers\bthport.sys \SystemRoot\System32\drivers\hidusb.sys \SystemRoot\System32\drivers\HIDCLASS.SYS \SystemRoot\System32\drivers\HIDPARSE.SYS \SystemRoot\System32\Drivers\usbvideo.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\System32\drivers\TeeDriverW8x64.sys \SystemRoot\system32\DRIVERS\Netwtw04.sys \SystemRoot\system32\DRIVERS\wdiwifi.sys \SystemRoot\System32\drivers\vwifibus.sys \SystemRoot\system32\DRIVERS\RtsP2Stor.sys \SystemRoot\System32\drivers\i8042prt.sys \SystemRoot\system32\DRIVERS\SynTP.sys \SystemRoot\System32\drivers\kbdclass.sys \SystemRoot\System32\drivers\mouclass.sys \SystemRoot\System32\drivers\HDAudBus.sys \SystemRoot\System32\drivers\portcls.sys \SystemRoot\System32\drivers\drmk.sys \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys \SystemRoot\System32\drivers\CmBatt.sys \SystemRoot\System32\drivers\BATTC.SYS \SystemRoot\System32\drivers\wmiacpi.sys \SystemRoot\System32\drivers\intelppm.sys \SystemRoot\System32\drivers\acpipagr.sys \SystemRoot\System32\drivers\tosrfec.sys \SystemRoot\System32\drivers\Thotkey.sys \SystemRoot\System32\drivers\mshidkmdf.sys \SystemRoot\System32\drivers\msgpiowin32.sys \SystemRoot\System32\drivers\UEFI.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys \SystemRoot\System32\drivers\swenum.sys \SystemRoot\System32\drivers\rdpbus.sys \SystemRoot\system32\drivers\RTKVHD64.sys \SystemRoot\system32\DRIVERS\IntcDAud.sys \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys \SystemRoot\System32\drivers\rfcomm.sys \SystemRoot\System32\drivers\BthEnum.sys \SystemRoot\System32\drivers\bthpan.sys \SystemRoot\system32\drivers\BthA2DP.sys \SystemRoot\system32\drivers\btampm.sys \SystemRoot\System32\drivers\BthAvrcpTg.sys \SystemRoot\System32\drivers\bthhfenum.sys \SystemRoot\System32\drivers\BthHfAud.sys \SystemRoot\System32\drivers\BthHFHid.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\Drivers\dump_diskdump.sys \SystemRoot\System32\Drivers\dump_iaStorA.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kfull.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\drivers\dxgmms2.sys \SystemRoot\System32\drivers\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\wcifs.sys \SystemRoot\system32\drivers\storqosflt.sys \SystemRoot\system32\drivers\aswMonFlt.sys \SystemRoot\System32\drivers\registry.sys \SystemRoot\system32\drivers\mslldp.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\drivers\aswStm.sys \SystemRoot\System32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\ndisuio.sys \SystemRoot\system32\DRIVERS\nwifi.sys \??\C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys \SystemRoot\System32\drivers\condrv.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\system32\drivers\mmcss.sys \SystemRoot\system32\drivers\Ndu.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\drivers\tunnel.sys \SystemRoot\System32\drivers\vwifimp.sys \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS ----------- End ----------- Done! Scan started Database versions: main: v2018.01.03.09 rootkit: v2017.10.14.01 <<<2>>> Physical Sector Size: 512 Drive: 0, DevicePointer: 0xffffb903e05f9060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffb903dfee69f0, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffb903e05f9060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xffffb903dfe509f0, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffffb903e05a33c0, DeviceName: \Device\00000028\, DriverName: \Driver\iaStorA\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Drive 0 This is a System drive Scanning MBR on drive 0... Inspecting partition table: This drive is a GPT Drive. MBR Signature: 55AA Disk Signature: 1B351DD7 GPT Protective MBR Partition information: Partition 0 type is EFI-GPT (0xee) Partition is NOT ACTIVE. Partition starts at LBA: 1 Numsec = 4294967295 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 GPT Partition information: GPT Header Signature 4546492050415254 GPT Header Revision 65536 Size 92 CRC 2220430882 GPT Header CurrentLba = 1 BackupLba 937703087 GPT Header FirstUsableLba 34 LastUsableLba 937703054 GPT Header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3 GPT Header Contains 128 partition entries starting at LBA 2 GPT Header Partition entry size = 128 Backup GPT header Signature 4546492050415254 Backup GPT header Revision 65536 Size 92 CRC 2220430882 Backup GPT header CurrentLba = 937703087 BackupLba 1 Backup GPT header FirstUsableLba 34 LastUsableLba 937703054 Backup GPT header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3 Backup GPT header Contains 128 partition entries starting at LBA 937703055 Backup GPT header Partition entry size = 128 Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b Partition ID 5d071003-882f-4260-869b-fb6a86cb1f86 FirstLBA 2048 Last LBA 534527 Attributes 0 Partition Name EFI system partition GPT Partition 0 is bootable Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae Partition ID 862a81d1-cf88-4244-a9c1-4e94f6d6784 FirstLBA 534528 Last LBA 567295 Attributes 0 Partition Name Microsoft reserved partition Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7 Partition ID 3afb849c-9c48-444f-bb93-5522bf96872e FirstLBA 567296 Last LBA 934660740 Attributes 0 Partition Name Basic data partition Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 933c2ef7-cb2a-4ed2-848f-e2b311ffe493 FirstLBA 934662144 Last LBA 936677375 Attributes 1 Partition Name Partition 4 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 6ea67a2f-88a5-4c0a-b93f-67656372b2ed FirstLBA 936679424 Last LBA 937701375 Attributes 1 Partition Name Disk Size: 480103981056 bytes Sector size: 512 bytes Done! Physical Sector Size: 512 Drive: 1, DevicePointer: 0xffffb903e2f02060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffb903e2e8f040, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffb903e2f02060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ DevicePointer: 0xffffb903e2f00060, DeviceName: \Device\00000037\, DriverName: \Driver\UASPStor\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 1 Scanning MBR on drive 1... Inspecting partition table: MBR Signature: 55AA Disk Signature: B5F5BCFB Partition information: Partition 0 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 2048 Numsec = 3907022848 Partition is not bootable Partition file system is NTFS Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 2000398933504 bytes Sector size: 512 bytes Done! File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\psapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\user32.dll" is sparse (flags = 32768) File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768) File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768) File "C:\Windows\System32\ucrtbase.dll" is sparse (flags = 32768) File "C:\Windows\System32\advapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\msvcrt.dll" is sparse (flags = 32768) File "C:\Windows\System32\sechost.dll" is sparse (flags = 32768) File "C:\Windows\System32\rpcrt4.dll" is sparse (flags = 32768) File "C:\Windows\System32\sspicli.dll" is sparse (flags = 32768) File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768) File "C:\Windows\System32\imm32.dll" is sparse (flags = 32768) File "C:\Windows\System32\combase.dll" is sparse (flags = 32768) File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768) File "C:\Windows\System32\version.dll" is sparse (flags = 32768) File "C:\Windows\System32\cfgmgr32.dll" is sparse (flags = 32768) File "C:\Windows\System32\SHCore.dll" is sparse (flags = 32768) File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\powrprof.dll" is sparse (flags = 32768) File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768) File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768) File "C:\Windows\System32\netapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\userenv.dll" is sparse (flags = 32768) File "C:\Windows\System32\mpr.dll" is sparse (flags = 32768) File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768) File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768) File "C:\Windows\System32\winmm.dll" is sparse (flags = 32768) File "C:\Windows\System32\winspool.drv" is sparse (flags = 32768) File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\bcrypt.dll" is sparse (flags = 32768) File "C:\Windows\System32\netutils.dll" is sparse (flags = 32768) File "C:\Windows\System32\sfc_os.dll" is sparse (flags = 32768) File "C:\Windows\System32\cryptsp.dll" is sparse (flags = 32768) File "C:\Windows\System32\rsaenh.dll" is sparse (flags = 32768) File "C:\Windows\System32\wkscli.dll" is sparse (flags = 32768) File "C:\Windows\System32\cscapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\uxtheme.dll" is sparse (flags = 32768) File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768) File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\IPHLPAPI.DLL" is sparse (flags = 32768) File "C:\Windows\System32\winhttp.dll" is sparse (flags = 32768) File "C:\Windows\System32\mswsock.dll" is sparse (flags = 32768) File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768) File "C:\Windows\System32\msIso.dll" is sparse (flags = 32768) File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasadhlp.dll" is sparse (flags = 32768) File "C:\Windows\System32\FWPUCLNT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768) File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ntmarta.dll" is sparse (flags = 32768) File "C:\Windows\System32\clbcatq.dll" is sparse (flags = 32768) File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768) File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768) File "C:\Windows\System32\sxs.dll" is sparse (flags = 32768) File "C:\Windows\System32\twinapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wtsapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\winsta.dll" is sparse (flags = 32768) File "C:\Windows\System32\propsys.dll" is sparse (flags = 32768) File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768) File "C:\Windows\System32\coml2.dll" is sparse (flags = 32768) File "C:\Windows\System32\mssprxy.dll" is sparse (flags = 32768) File "C:\Windows\System32\linkinfo.dll" is sparse (flags = 32768) File "C:\Windows\System32\ntshrui.dll" is sparse (flags = 32768) File "C:\Windows\System32\srvcli.dll" is sparse (flags = 32768) File "C:\Windows\System32\smss.exe" is sparse (flags = 32768) File "C:\Windows\System32\csrss.exe" is sparse (flags = 32768) File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768) File "C:\Windows\System32\lsass.exe" is sparse (flags = 32768) File "C:\Windows\System32\svchost.exe" is sparse (flags = 32768) File "C:\Windows\System32\FONTDRVHOST.EXE" is sparse (flags = 32768) File "C:\Windows\System32\dwm.exe" is sparse (flags = 32768) File "C:\Windows\System32\dasHost.exe" is sparse (flags = 32768) File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768) File "C:\Windows\System32\shfolder.dll" is sparse (flags = 32768) File "C:\Windows\System32\wsock32.dll" is sparse (flags = 32768) File "C:\Windows\System32\oledlg.dll" is sparse (flags = 32768) File "C:\Windows\System32\msimg32.dll" is sparse (flags = 32768) File "C:\Windows\System32\cabinet.dll" is sparse (flags = 32768) File "C:\Windows\System32\wshqos.dll" is sparse (flags = 32768) File "C:\Windows\System32\WSHTCPIP.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wship6.dll" is sparse (flags = 32768) File "C:\Windows\System32\samcli.dll" is sparse (flags = 32768) File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\cryptnet.dll" is sparse (flags = 32768) File "C:\Windows\System32\NapiNSP.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpnsp.dll" is sparse (flags = 32768) File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\winrnr.dll" is sparse (flags = 32768) File "C:\Windows\System32\SECURITYHEALTHSERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\setupapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\msi.dll" is sparse (flags = 32768) File "C:\Windows\System32\devobj.dll" is sparse (flags = 32768) File "C:\Windows\System32\fltLib.dll" is sparse (flags = 32768) File "C:\Windows\System32\Faultrep.dll" is sparse (flags = 32768) File "C:\Windows\System32\dbgcore.dll" is sparse (flags = 32768) File "C:\Windows\System32\security.dll" is sparse (flags = 32768) File "C:\Windows\System32\secur32.dll" is sparse (flags = 32768) File "C:\Windows\System32\srclient.dll" is sparse (flags = 32768) File "C:\Windows\System32\spp.dll" is sparse (flags = 32768) File "C:\Windows\System32\vssapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\vsstrace.dll" is sparse (flags = 32768) File "C:\Program Files\Windows Media Player\wmpnetwk.exe" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WmiPrvSE.exe" is sparse (flags = 32768) File "C:\Windows\System32\wbem\unsecapp.exe" is sparse (flags = 32768) File "C:\Windows\System32\ctfmon.exe" is sparse (flags = 32768) File "C:\Windows\System32\opengl32.dll" is sparse (flags = 32768) File "C:\Windows\System32\glu32.dll" is sparse (flags = 32768) File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768) File "C:\Windows\System32\sihost.exe" is sparse (flags = 32768) File "C:\Windows\System32\TASKHOSTW.EXE" is sparse (flags = 32768) File "C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PRESENTATIONFONTCACHE.EXE" is sparse (flags = 32768) File "C:\Windows\explorer.exe" is sparse (flags = 32768) File "C:\Windows\System32\RUNTIMEBROKER.EXE" is sparse (flags = 32768) File "C:\Windows\System32\APPLICATIONFRAMEHOST.EXE" is sparse (flags = 32768) File "C:\Windows\System32\dllhost.exe" is sparse (flags = 32768) File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768) File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768) File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768) File "C:\Windows\SysWOW64\cmd.exe" is sparse (flags = 32768) File "C:\Windows\System32\cmdext.dll" is sparse (flags = 32768) File "C:\Windows\System32\conhost.exe" is sparse (flags = 32768) File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768) File "C:\Program Files\Windows Mail\wab.exe" is sparse (flags = 32768) File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768) File "C:\Windows\System32\userinit.exe" is sparse (flags = 32768) File "C:\Windows\System32\scecli.dll" is sparse (flags = 32768) File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768) File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768) File "C:\Windows\System32\Locator.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\appid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mspclock.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpiex.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mpsdrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\afd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ahcache.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\asyncmac.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srv.sys" is sparse (flags = 32768) File "C:\Windows\System32\alg.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768) File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wcnfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srv2.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\netbt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Ndu.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cng.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\csc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bowser.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\irda.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bthpan.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cdfs.sys" is sparse (flags = 32768) File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cldflt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\registry.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mup.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\CNGHWASSIST.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\condrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dfsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mssecflt.sys" is sparse (flags = 32768) File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dxgkrnl.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tcpip.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SPATIALGRAPHFILTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fileinfo.sys" is sparse (flags = 32768) File "C:\Windows\System32\FXSSVC.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ipfltdrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fltMgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FSDEPENDS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fvevol.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndisuio.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSGPIOCLX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wanarp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rasl2tp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768) File "C:\Windows\System32\VSSVC.exe" is sparse (flags = 32768) File "C:\Windows\System32\msdtc.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hwpolicy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndproxy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pacer.sys" is sparse (flags = 32768) File "C:\Windows\SysWOW64\perfhost.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdFilter.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\iorate.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ipnat.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\irenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\kbdhid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ksecdd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\lltdio.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\luafv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mstee.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mmcss.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wimmount.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxdav.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\modem.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mspqm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mountmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb10.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb20.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Ucx01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ufx01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768) File "C:\Windows\System32\msiexec.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mslldp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\netbios.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndis.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndiscap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tunnel.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndistapi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndiswan.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\nsiproxy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\partmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pcw.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\PEAuth.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\qwavedrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\raspptp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rasacd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\agilevpn.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\raspppoe.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rassstp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdbss.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdpdr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdyboost.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rspndr.sys" is sparse (flags = 32768) File "C:\Windows\System32\AGENTSERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sdbus.sys" is sparse (flags = 32768) File "C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe" is sparse (flags = 32768) File "C:\Windows\System32\SENSORDATASERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SerCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SpbCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SerCx2.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768) File "C:\Windows\System32\Spectrum.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srvnet.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\stornvme.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tcpipreg.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\terminpt.sys" is sparse (flags = 32768) File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\servicing\TRUSTEDINSTALLER.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\TsUsbFlt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tsusbhub.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\UcmCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Udecx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\udfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768) File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768) File "C:\Windows\System32\vds.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vhf.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volmgrx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volsnap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vpci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vwifimp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768) File "C:\Windows\System32\wbengine.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdBoot.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Wdf01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdiWiFi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdNisDrv.sys" is sparse (flags = 32768) File "C:\Program Files\Windows Defender\NisSrv.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wfplwfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\winnat.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WmiApSrv.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ws2ifsl.sys" is sparse (flags = 32768) File "C:\Windows\System32\AJRouter.dll" is sparse (flags = 32768) File "C:\Windows\System32\NATURALAUTH.DLL" is sparse (flags = 32768) File "C:\Windows\System32\umpnpmgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\rpcss.dll" is sparse (flags = 32768) File "C:\Windows\System32\appinfo.dll" is sparse (flags = 32768) File "C:\Windows\System32\appmgmts.dll" is sparse (flags = 32768) File "C:\Windows\System32\AxInstSv.dll" is sparse (flags = 32768) File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\RpcEpMap.dll" is sparse (flags = 32768) File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\dssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\bdesvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\BFE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\netman.dll" is sparse (flags = 32768) File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\cscsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\qmgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\lltdsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ListSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768) File "C:\Windows\System32\browser.dll" is sparse (flags = 32768) File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\profsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\bthserv.dll" is sparse (flags = 32768) File "C:\Windows\System32\provsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\das.dll" is sparse (flags = 32768) File "C:\Windows\System32\LICENSEMANAGERSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\ClipSVC.dll" is sparse (flags = 32768) File "C:\Windows\System32\XBOXGIPSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\cryptsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEVICESFLOWBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wscsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wersvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wecsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wcmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wkssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dot3svc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dusmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768) File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768) File "C:\Windows\System32\dps.dll" is sparse (flags = 32768) File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\eapsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\efssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768) File "C:\Windows\System32\es.dll" is sparse (flags = 32768) File "C:\Windows\System32\sdrsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\xbgmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FDResPub.dll" is sparse (flags = 32768) File "C:\Windows\System32\upnphost.dll" is sparse (flags = 32768) File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\gpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\hidserv.dll" is sparse (flags = 32768) File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\IKEEXT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\IPXLATCFG.DLL" is sparse (flags = 32768) File "C:\Windows\System32\irmon.dll" is sparse (flags = 32768) File "C:\Windows\System32\keyiso.dll" is sparse (flags = 32768) File "C:\Windows\System32\msdtckrm.dll" is sparse (flags = 32768) File "C:\Windows\System32\lfsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\lmhsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768) File "C:\Windows\System32\lsm.dll" is sparse (flags = 32768) File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\MPSSVC.dll" is sparse (flags = 32768) File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768) File "C:\Windows\System32\nlasvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ngcsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NcaSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768) File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\netlogon.dll" is sparse (flags = 32768) File "C:\Windows\System32\trkwks.dll" is sparse (flags = 32768) File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\icsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\p2psvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\PEERDISTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\PHONESERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\pla.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpauto.dll" is sparse (flags = 32768) File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768) File "C:\Windows\System32\IPSECSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\qwave.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasauto.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasmans.dll" is sparse (flags = 32768) File "C:\Windows\System32\regsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\RMapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\schedsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\seclogon.dll" is sparse (flags = 32768) File "C:\Windows\System32\SEMgrSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\Sens.dll" is sparse (flags = 32768) File "C:\Windows\System32\SessEnv.dll" is sparse (flags = 32768) File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768) File "C:\Windows\System32\sstpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ssdpsrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\wiaservc.dll" is sparse (flags = 32768) File "C:\Windows\System32\svsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\swprv.dll" is sparse (flags = 32768) File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TabSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\termsrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\tapisrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TOKENBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\umrdp.dll" is sparse (flags = 32768) File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\usermgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\usocore.dll" is sparse (flags = 32768) File "C:\Windows\System32\vaultsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\w32time.dll" is sparse (flags = 32768) File "C:\Windows\System32\wwansvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wcncsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wdi.dll" is sparse (flags = 32768) File "C:\Windows\System32\WebClnt.dll" is sparse (flags = 32768) File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wiarpc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WMIsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768) File "C:\Windows\System32\rundll32.exe" is sparse (flags = 32768) File "C:\Program Files\Windows Mail\WinMail.exe" is sparse (flags = 32768) File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768) File "C:\Windows\System32\ie4uinit.exe" is sparse (flags = 32768) File "C:\Windows\SysWOW64\rundll32.exe" is sparse (flags = 32768) File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768) File "C:\ProgramData\Microsoft\Network\Downloader\qmgr.db" is sparse (flags = 32768) Scan finished ======================================= Removal queue found; removal started Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-2048-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam... Removal finished --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 6.2.9200 Windows 8 x64 System is currently in a safe mode Account is Administrative Internet Explorer version: 11.786.15063.0 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED CPU speed: 2.592000 GHz Memory total: 12704256000, free: 10832072704 ======================================= --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 6.2.9200 Windows 8 x64 System is currently in a safe mode Account is Administrative Internet Explorer version: 11.786.15063.0 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED CPU speed: 2.592000 GHz Memory total: 12704256000, free: 10871791616 ======================================= --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.10.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 10.0.9200 Windows 10 x64 Account is Administrative Internet Explorer version: 11.786.15063.0 File system is: NTFS Disk drives: C:\ DRIVE_FIXED CPU speed: 2.592000 GHz Memory total: 12704256000, free: 9287733248 Downloaded database version: v2018.01.06.01 Downloaded database version: v2017.11.28.01 ======================================= Driver version: 4.3.0.15 ------------ Kernel report ------------ 01/05/2018 18:57:39 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kd.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\System32\drivers\msrpc.sys \SystemRoot\System32\drivers\ksecdd.sys \SystemRoot\System32\drivers\werkernel.sys \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\System32\drivers\FLTMGR.SYS \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\System32\drivers\cmimcext.sys \SystemRoot\System32\drivers\ntosext.sys \SystemRoot\system32\CI.dll \SystemRoot\System32\drivers\cng.sys \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\SleepStudyHelper.sys \SystemRoot\System32\Drivers\acpiex.sys \SystemRoot\System32\Drivers\WppRecorder.sys \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\System32\drivers\intelpep.sys \SystemRoot\system32\drivers\WindowsTrustedRT.sys \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\msisadrv.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\System32\drivers\vdrvroot.sys \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\drivers\CEA.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\System32\drivers\spaceport.sys \SystemRoot\System32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\System32\drivers\iaStorA.sys \SystemRoot\System32\drivers\storport.sys \SystemRoot\System32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\drivers\WdFilter.sys \SystemRoot\System32\Drivers\NTFS.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\drivers\wfplwfs.sys \SystemRoot\System32\drivers\amdkmpfd.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\volume.sys \SystemRoot\System32\drivers\volsnap.sys \SystemRoot\System32\drivers\TVALZ_O.SYS \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\system32\drivers\iorate.sys \SystemRoot\System32\drivers\disk.sys \SystemRoot\System32\drivers\CLASSPNP.SYS \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\drivers\cdrom.sys \SystemRoot\system32\drivers\filecrypt.sys \SystemRoot\system32\drivers\tbs.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\BasicDisplay.sys \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\vmbkmclr.sys \SystemRoot\System32\drivers\BasicRender.sys \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\drivers\vwififlt.sys \SystemRoot\System32\drivers\pacer.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\csc.sys \??\C:\WINDOWS\System32\drivers\zamguard64.sys \??\C:\WINDOWS\System32\drivers\zam64.sys \SystemRoot\system32\DRIVERS\sbwfw.sys \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS \SystemRoot\System32\drivers\gpuenergydrv.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\drivers\aswHdsKe.sys \SystemRoot\system32\drivers\aswArPot.sys \SystemRoot\system32\DRIVERS\ahcache.sys \SystemRoot\System32\drivers\tap0901.sys \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys \SystemRoot\System32\drivers\kdnic.sys \SystemRoot\System32\drivers\umbus.sys \SystemRoot\System32\drivers\CAD.sys \SystemRoot\System32\DriverStore\FileRepository\igdlh64.inf_amd64_75bf0d025ab049e0\igdkmd64.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\drivers\USBXHCI.SYS \SystemRoot\system32\drivers\ucx01000.sys \SystemRoot\System32\drivers\TeeDriverW8x64.sys \SystemRoot\system32\DRIVERS\Netwtw04.sys \SystemRoot\system32\DRIVERS\wdiwifi.sys \SystemRoot\System32\drivers\vwifibus.sys \SystemRoot\system32\DRIVERS\RtsP2Stor.sys \SystemRoot\System32\drivers\i8042prt.sys \SystemRoot\system32\DRIVERS\SynTP.sys \SystemRoot\system32\DRIVERS\USBD.SYS \SystemRoot\system32\DRIVERS\HIDPARSE.SYS \SystemRoot\System32\drivers\kbdclass.sys \SystemRoot\System32\drivers\mouclass.sys \SystemRoot\System32\drivers\HDAudBus.sys \SystemRoot\System32\drivers\portcls.sys \SystemRoot\System32\drivers\drmk.sys \SystemRoot\System32\drivers\ks.sys \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys \SystemRoot\System32\drivers\CmBatt.sys \SystemRoot\System32\drivers\BATTC.SYS \SystemRoot\System32\drivers\wmiacpi.sys \SystemRoot\System32\drivers\intelppm.sys \SystemRoot\System32\drivers\acpipagr.sys \SystemRoot\System32\drivers\tosrfec.sys \SystemRoot\System32\drivers\Thotkey.sys \SystemRoot\System32\drivers\mshidkmdf.sys \SystemRoot\System32\drivers\HIDCLASS.SYS \SystemRoot\System32\drivers\msgpiowin32.sys \SystemRoot\System32\drivers\UEFI.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys \SystemRoot\System32\drivers\swenum.sys \SystemRoot\system32\DRIVERS\avchv.sys \SystemRoot\System32\drivers\rdpbus.sys \SystemRoot\System32\drivers\UsbHub3.sys \SystemRoot\system32\drivers\RTKVHD64.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\DRIVERS\IntcDAud.sys \SystemRoot\system32\DRIVERS\ibtusb.sys \SystemRoot\System32\drivers\BTHUSB.sys \SystemRoot\System32\drivers\bthport.sys \SystemRoot\System32\drivers\usbccgp.sys \SystemRoot\System32\Drivers\usbvideo.sys \SystemRoot\System32\drivers\ax88179_178a.sys \SystemRoot\System32\drivers\hidusb.sys \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys \SystemRoot\System32\drivers\rfcomm.sys \SystemRoot\System32\drivers\BthEnum.sys \SystemRoot\System32\drivers\bthpan.sys \SystemRoot\system32\drivers\BthA2DP.sys \SystemRoot\system32\drivers\btampm.sys \SystemRoot\System32\drivers\BthAvrcpTg.sys \SystemRoot\System32\drivers\bthhfenum.sys \SystemRoot\System32\drivers\BthHfAud.sys \SystemRoot\System32\drivers\BthHFHid.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kfull.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\drivers\dxgmms2.sys \SystemRoot\System32\drivers\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\System32\drivers\WUDFRd.sys \SystemRoot\system32\drivers\mmcss.sys \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\wcifs.sys \SystemRoot\system32\drivers\storqosflt.sys \SystemRoot\system32\DRIVERS\sbapifs.sys \SystemRoot\System32\drivers\registry.sys \SystemRoot\system32\drivers\mslldp.sys \SystemRoot\system32\drivers\lltdio.sys \SystemRoot\system32\drivers\rspndr.sys \SystemRoot\System32\DRIVERS\wanarp.sys \SystemRoot\system32\DRIVERS\nwifi.sys \SystemRoot\system32\drivers\ndisuio.sys \SystemRoot\System32\Drivers\dump_diskdump.sys \SystemRoot\System32\Drivers\dump_iaStorA.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \??\C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\System32\drivers\condrv.sys \??\C:\WINDOWS\system32\Drivers\WebExaminer64.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\system32\drivers\Ndu.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\DRIVERS\srv.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\drivers\vwifimp.sys \SystemRoot\System32\drivers\tunnel.sys \SystemRoot\system32\DRIVERS\sbwtis.sys \SystemRoot\system32\DRIVERS\avc3.sys \SystemRoot\system32\DRIVERS\avckf.sys \??\C:\WINDOWS\system32\drivers\mbamchameleon.sys \??\C:\WINDOWS\system32\drivers\6331A74D.sys ----------- End ----------- Done! Scan started Database versions: main: v2018.01.06.01 rootkit: v2017.10.14.01 <<<2>>> Physical Sector Size: 512 Drive: 0, DevicePointer: 0xffff9d0294ef6610, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffff9d0294ea39f0, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffff9d0294ef6610, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xffff9d0294f7be40, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffff9d0293a583c0, DeviceName: \Device\0000002b\, DriverName: \Driver\iaStorA\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Drive 0 This is a System drive Scanning MBR on drive 0... Inspecting partition table: This drive is a GPT Drive. MBR Signature: 55AA Disk Signature: 1B351DD7 GPT Protective MBR Partition information: Partition 0 type is EFI-GPT (0xee) Partition is NOT ACTIVE. Partition starts at LBA: 1 Numsec = 4294967295 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 GPT Partition information: GPT Header Signature 4546492050415254 GPT Header Revision 65536 Size 92 CRC 2220430882 GPT Header CurrentLba = 1 BackupLba 937703087 GPT Header FirstUsableLba 34 LastUsableLba 937703054 GPT Header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3 GPT Header Contains 128 partition entries starting at LBA 2 GPT Header Partition entry size = 128 Backup GPT header Signature 4546492050415254 Backup GPT header Revision 65536 Size 92 CRC 2220430882 Backup GPT header CurrentLba = 937703087 BackupLba 1 Backup GPT header FirstUsableLba 34 LastUsableLba 937703054 Backup GPT header Guid b40cb676-879f-11e5-87e4-ce6ebb8a7d3 Backup GPT header Contains 128 partition entries starting at LBA 937703055 Backup GPT header Partition entry size = 128 Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b Partition ID 5d071003-882f-4260-869b-fb6a86cb1f86 FirstLBA 2048 Last LBA 534527 Attributes 0 Partition Name EFI system partition GPT Partition 0 is bootable Partition 1 Type e3c9e316-b5c-4db8-817d-f92df0215ae Partition ID 862a81d1-cf88-4244-a9c1-4e94f6d6784 FirstLBA 534528 Last LBA 567295 Attributes 0 Partition Name Microsoft reserved partition Partition 2 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7 Partition ID 3afb849c-9c48-444f-bb93-5522bf96872e FirstLBA 567296 Last LBA 934660740 Attributes 0 Partition Name Basic data partition Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 933c2ef7-cb2a-4ed2-848f-e2b311ffe493 FirstLBA 934662144 Last LBA 936677375 Attributes 1 Partition Name Partition 4 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 6ea67a2f-88a5-4c0a-b93f-67656372b2ed FirstLBA 936679424 Last LBA 937701375 Attributes 1 Partition Name Disk Size: 480103981056 bytes Sector size: 512 bytes Done! File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\psapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\user32.dll" is sparse (flags = 32768) File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768) File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768) File "C:\Windows\System32\ucrtbase.dll" is sparse (flags = 32768) File "C:\Windows\System32\advapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\msvcrt.dll" is sparse (flags = 32768) File "C:\Windows\System32\sechost.dll" is sparse (flags = 32768) File "C:\Windows\System32\rpcrt4.dll" is sparse (flags = 32768) File "C:\Windows\System32\sspicli.dll" is sparse (flags = 32768) File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768) File "C:\Windows\System32\imm32.dll" is sparse (flags = 32768) File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768) File "C:\Windows\System32\cfgmgr32.dll" is sparse (flags = 32768) File "C:\Windows\System32\SHCore.dll" is sparse (flags = 32768) File "C:\Windows\System32\combase.dll" is sparse (flags = 32768) File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\powrprof.dll" is sparse (flags = 32768) File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768) File "C:\Windows\System32\version.dll" is sparse (flags = 32768) File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768) File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768) File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768) File "C:\Windows\System32\netapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\winmm.dll" is sparse (flags = 32768) File "C:\Windows\System32\winspool.drv" is sparse (flags = 32768) File "C:\Windows\System32\userenv.dll" is sparse (flags = 32768) File "C:\Windows\System32\mpr.dll" is sparse (flags = 32768) File "C:\Windows\System32\IPHLPAPI.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\bcrypt.dll" is sparse (flags = 32768) File "C:\Windows\System32\netutils.dll" is sparse (flags = 32768) File "C:\Windows\System32\sfc_os.dll" is sparse (flags = 32768) File "C:\Windows\System32\cryptsp.dll" is sparse (flags = 32768) File "C:\Windows\System32\rsaenh.dll" is sparse (flags = 32768) File "C:\Windows\System32\wkscli.dll" is sparse (flags = 32768) File "C:\Windows\System32\cscapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\uxtheme.dll" is sparse (flags = 32768) File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768) File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\winhttp.dll" is sparse (flags = 32768) File "C:\Windows\System32\mswsock.dll" is sparse (flags = 32768) File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768) File "C:\Windows\System32\msIso.dll" is sparse (flags = 32768) File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasadhlp.dll" is sparse (flags = 32768) File "C:\Windows\System32\FWPUCLNT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768) File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ntmarta.dll" is sparse (flags = 32768) File "C:\Windows\System32\clbcatq.dll" is sparse (flags = 32768) File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768) File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768) File "C:\Windows\System32\sxs.dll" is sparse (flags = 32768) File "C:\Windows\System32\twinapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wtsapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\winsta.dll" is sparse (flags = 32768) File "C:\Windows\System32\propsys.dll" is sparse (flags = 32768) File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768) File "C:\Windows\System32\coml2.dll" is sparse (flags = 32768) File "C:\Windows\System32\mssprxy.dll" is sparse (flags = 32768) File "C:\Windows\System32\linkinfo.dll" is sparse (flags = 32768) File "C:\Windows\System32\ntshrui.dll" is sparse (flags = 32768) File "C:\Windows\System32\srvcli.dll" is sparse (flags = 32768) File "C:\Windows\System32\smss.exe" is sparse (flags = 32768) File "C:\Windows\System32\csrss.exe" is sparse (flags = 32768) File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768) File "C:\Windows\System32\lsass.exe" is sparse (flags = 32768) File "C:\Windows\System32\svchost.exe" is sparse (flags = 32768) File "C:\Windows\System32\FONTDRVHOST.EXE" is sparse (flags = 32768) File "C:\Windows\System32\dwm.exe" is sparse (flags = 32768) File "C:\Windows\System32\dasHost.exe" is sparse (flags = 32768) File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768) File "C:\Windows\System32\wlanext.exe" is sparse (flags = 32768) File "C:\Windows\System32\conhost.exe" is sparse (flags = 32768) File "C:\Windows\System32\setupapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\msi.dll" is sparse (flags = 32768) File "C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.15063.608_none_9e9d5d4256d15def\GdiPlus.dll" is sparse (flags = 32768) File "C:\Windows\System32\msimg32.dll" is sparse (flags = 32768) File "C:\Windows\System32\SECURITYHEALTHSERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WmiPrvSE.exe" is sparse (flags = 32768) File "C:\Windows\System32\devobj.dll" is sparse (flags = 32768) File "C:\Windows\System32\wshqos.dll" is sparse (flags = 32768) File "C:\Windows\System32\WSHTCPIP.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wship6.dll" is sparse (flags = 32768) File "C:\Windows\System32\fltLib.dll" is sparse (flags = 32768) File "C:\Windows\System32\Faultrep.dll" is sparse (flags = 32768) File "C:\Windows\System32\dbgcore.dll" is sparse (flags = 32768) File "C:\Windows\System32\security.dll" is sparse (flags = 32768) File "C:\Windows\System32\secur32.dll" is sparse (flags = 32768) File "C:\Windows\System32\srclient.dll" is sparse (flags = 32768) File "C:\Windows\System32\spp.dll" is sparse (flags = 32768) File "C:\Windows\System32\vssapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\vsstrace.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\unsecapp.exe" is sparse (flags = 32768) File "C:\Program Files\Windows Media Player\wmpnetwk.exe" is sparse (flags = 32768) File "C:\Windows\System32\sihost.exe" is sparse (flags = 32768) File "C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PRESENTATIONFONTCACHE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\shfolder.dll" is sparse (flags = 32768) File "C:\Windows\System32\pcacli.dll" is sparse (flags = 32768) File "C:\Windows\System32\devrtl.dll" is sparse (flags = 32768) File "C:\Windows\System32\TASKHOSTW.EXE" is sparse (flags = 32768) File "C:\Windows\explorer.exe" is sparse (flags = 32768) File "C:\Windows\System32\RUNTIMEBROKER.EXE" is sparse (flags = 32768) File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768) File "C:\Windows\System32\usp10.dll" is sparse (flags = 32768) File "C:\Windows\System32\wsock32.dll" is sparse (flags = 32768) File "C:\Windows\System32\xmllite.dll" is sparse (flags = 32768) File "C:\Windows\System32\cabinet.dll" is sparse (flags = 32768) File "C:\Windows\System32\wer.dll" is sparse (flags = 32768) File "C:\Windows\System32\loadperf.dll" is sparse (flags = 32768) File "C:\Windows\System32\pdh.dll" is sparse (flags = 32768) File "C:\Windows\System32\ncrypt.dll" is sparse (flags = 32768) File "C:\Windows\System32\ntasn1.dll" is sparse (flags = 32768) File "C:\Windows\System32\mlang.dll" is sparse (flags = 32768) File "C:\Windows\System32\msxml6.dll" is sparse (flags = 32768) File "C:\Windows\System32\ROMETADATA.DLL" is sparse (flags = 32768) File "C:\Windows\System32\APPXDEPLOYMENTCLIENT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WINDOWS.SERVICES.TARGETEDCONTENT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\taskschd.dll" is sparse (flags = 32768) File "C:\Windows\System32\FAMILYSAFETYEXT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\Wpc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wlidprov.dll" is sparse (flags = 32768) File "C:\Windows\System32\samcli.dll" is sparse (flags = 32768) File "C:\Windows\System32\oledlg.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\wbemprox.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbemcomn.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\wbemsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\fastprox.dll" is sparse (flags = 32768) File "C:\Windows\System32\DWrite.dll" is sparse (flags = 32768) File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\DHCPCSVC6.DLL" is sparse (flags = 32768) File "C:\Windows\System32\avrt.dll" is sparse (flags = 32768) File "C:\Windows\System32\atlthunk.dll" is sparse (flags = 32768) File "C:\Windows\System32\webio.dll" is sparse (flags = 32768) File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768) File "C:\Windows\System32\schannel.dll" is sparse (flags = 32768) File "C:\Windows\System32\MSKEYPROTECT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\NCRYPTSSLP.DLL" is sparse (flags = 32768) File "C:\Windows\System32\dpapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\mscms.dll" is sparse (flags = 32768) File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\cryptnet.dll" is sparse (flags = 32768) File "C:\Windows\System32\msiltcfg.dll" is sparse (flags = 32768) File "C:\Windows\System32\schedcli.dll" is sparse (flags = 32768) File "C:\Windows\System32\ktmw32.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasapi32.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasman.dll" is sparse (flags = 32768) File "C:\Windows\System32\NapiNSP.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpnsp.dll" is sparse (flags = 32768) File "C:\Windows\System32\winrnr.dll" is sparse (flags = 32768) File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768) File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768) File "C:\Windows\SysWOW64\cmd.exe" is sparse (flags = 32768) File "C:\Windows\System32\cmdext.dll" is sparse (flags = 32768) File "C:\Windows\System32\Taskmgr.exe" is sparse (flags = 32768) File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768) File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768) File "C:\Windows\System32\userinit.exe" is sparse (flags = 32768) File "C:\Windows\System32\scecli.dll" is sparse (flags = 32768) File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768) File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768) File "C:\Windows\System32\Locator.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\appid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mspclock.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpiex.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mpsdrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\afd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ahcache.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\asyncmac.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srv.sys" is sparse (flags = 32768) File "C:\Windows\System32\alg.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768) File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wcnfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srv2.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\netbt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bowser.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Ndu.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\bthpan.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cng.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\csc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cdfs.sys" is sparse (flags = 32768) File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\cldflt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\registry.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mup.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\CNGHWASSIST.SYS" is sparse (flags = 32768) File "C:\Windows\System32\dllhost.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\condrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dfsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mssecflt.sys" is sparse (flags = 32768) File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\dxgkrnl.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tcpip.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SPATIALGRAPHFILTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fileinfo.sys" is sparse (flags = 32768) File "C:\Windows\System32\FXSSVC.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ipfltdrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fltMgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\FSDEPENDS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\fvevol.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndisuio.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSGPIOCLX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wanarp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rasl2tp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hwpolicy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndproxy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pacer.sys" is sparse (flags = 32768) File "C:\Windows\SysWOW64\perfhost.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdFilter.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\iorate.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ipnat.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\irda.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\irenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\kbdhid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ksecdd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\lltdio.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\luafv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mmcss.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wimmount.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxdav.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\modem.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mspqm.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mountmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb10.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mrxsmb20.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Ucx01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ufx01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\VSSVC.exe" is sparse (flags = 32768) File "C:\Windows\System32\msdtc.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mstee.sys" is sparse (flags = 32768) File "C:\Windows\System32\msiexec.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mslldp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\netbios.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndis.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndiscap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tunnel.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndistapi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ndiswan.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\nsiproxy.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\partmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pcw.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\PEAuth.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\qwavedrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\raspptp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rasacd.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\agilevpn.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\raspppoe.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rassstp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdbss.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdpdr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rdyboost.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\rspndr.sys" is sparse (flags = 32768) File "C:\Windows\System32\AGENTSERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\srvnet.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sdbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\SENSORDATASERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SerCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SpbCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SerCx2.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768) File "C:\Windows\System32\Spectrum.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\stornvme.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tcpipreg.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\terminpt.sys" is sparse (flags = 32768) File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768) File "C:\Windows\servicing\TRUSTEDINSTALLER.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\TsUsbFlt.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\tsusbhub.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\UcmCx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Udecx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\udfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768) File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768) File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768) File "C:\Windows\System32\vds.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vhf.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volmgrx.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volsnap.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vpci.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\vwifimp.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768) File "C:\Windows\System32\wbengine.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdBoot.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\Wdf01000.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdiWiFi.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WdNisDrv.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wfplwfs.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768) File "C:\Windows\System32\drivers\winnat.sys" is sparse (flags = 32768) File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WmiApSrv.exe" is sparse (flags = 32768) File "C:\Windows\System32\drivers\ws2ifsl.sys" is sparse (flags = 32768) File "C:\Windows\System32\AJRouter.dll" is sparse (flags = 32768) File "C:\Windows\System32\NATURALAUTH.DLL" is sparse (flags = 32768) File "C:\Windows\System32\umpnpmgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\rpcss.dll" is sparse (flags = 32768) File "C:\Windows\System32\appinfo.dll" is sparse (flags = 32768) File "C:\Windows\System32\appmgmts.dll" is sparse (flags = 32768) File "C:\Windows\System32\AxInstSv.dll" is sparse (flags = 32768) File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\RpcEpMap.dll" is sparse (flags = 32768) File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\dssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\bdesvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\BFE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\netman.dll" is sparse (flags = 32768) File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\cscsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\qmgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\lltdsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ListSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768) File "C:\Windows\System32\browser.dll" is sparse (flags = 32768) File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\profsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\bthserv.dll" is sparse (flags = 32768) File "C:\Windows\System32\provsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\das.dll" is sparse (flags = 32768) File "C:\Windows\System32\LICENSEMANAGERSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\ClipSVC.dll" is sparse (flags = 32768) File "C:\Windows\System32\XBOXGIPSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\cryptsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEVICESFLOWBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wscsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wersvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wecsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wcmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wkssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dot3svc.dll" is sparse (flags = 32768) File "C:\Windows\System32\dusmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768) File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768) File "C:\Windows\System32\dps.dll" is sparse (flags = 32768) File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\eapsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\efssvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768) File "C:\Windows\System32\es.dll" is sparse (flags = 32768) File "C:\Windows\System32\sdrsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\xbgmsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FDResPub.dll" is sparse (flags = 32768) File "C:\Windows\System32\upnphost.dll" is sparse (flags = 32768) File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\gpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\hidserv.dll" is sparse (flags = 32768) File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\IKEEXT.DLL" is sparse (flags = 32768) File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\IPXLATCFG.DLL" is sparse (flags = 32768) File "C:\Windows\System32\irmon.dll" is sparse (flags = 32768) File "C:\Windows\System32\keyiso.dll" is sparse (flags = 32768) File "C:\Windows\System32\msdtckrm.dll" is sparse (flags = 32768) File "C:\Windows\System32\lfsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\lmhsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768) File "C:\Windows\System32\lsm.dll" is sparse (flags = 32768) File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\MPSSVC.dll" is sparse (flags = 32768) File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768) File "C:\Windows\System32\nlasvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ngcsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NcaSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768) File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\netlogon.dll" is sparse (flags = 32768) File "C:\Windows\System32\trkwks.dll" is sparse (flags = 32768) File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\icsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\p2psvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\PEERDISTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\PHONESERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\pla.dll" is sparse (flags = 32768) File "C:\Windows\System32\pnrpauto.dll" is sparse (flags = 32768) File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768) File "C:\Windows\System32\IPSECSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\qwave.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasauto.dll" is sparse (flags = 32768) File "C:\Windows\System32\rasmans.dll" is sparse (flags = 32768) File "C:\Windows\System32\regsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\RMapi.dll" is sparse (flags = 32768) File "C:\Windows\System32\schedsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\seclogon.dll" is sparse (flags = 32768) File "C:\Windows\System32\SEMgrSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\Sens.dll" is sparse (flags = 32768) File "C:\Windows\System32\SessEnv.dll" is sparse (flags = 32768) File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768) File "C:\Windows\System32\sstpsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\ssdpsrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\wiaservc.dll" is sparse (flags = 32768) File "C:\Windows\System32\svsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\swprv.dll" is sparse (flags = 32768) File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TabSvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\termsrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\tapisrv.dll" is sparse (flags = 32768) File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\TOKENBROKER.DLL" is sparse (flags = 32768) File "C:\Windows\System32\umrdp.dll" is sparse (flags = 32768) File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\usermgr.dll" is sparse (flags = 32768) File "C:\Windows\System32\usocore.dll" is sparse (flags = 32768) File "C:\Windows\System32\vaultsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\w32time.dll" is sparse (flags = 32768) File "C:\Windows\System32\wwansvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wcncsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wdi.dll" is sparse (flags = 32768) File "C:\Windows\System32\WebClnt.dll" is sparse (flags = 32768) File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wiarpc.dll" is sparse (flags = 32768) File "C:\Windows\System32\wbem\WMIsvc.dll" is sparse (flags = 32768) File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768) File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768) File "C:\Program Files (x86)\Windows Mail\WinMail.exe" is sparse (flags = 32768) File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768) File "C:\Windows\System32\ie4uinit.exe" is sparse (flags = 32768) File "C:\Windows\System32\rundll32.exe" is sparse (flags = 32768) File "C:\Windows\SysWOW64\rundll32.exe" is sparse (flags = 32768) File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.79" is compressed (flags = 1) File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.7C" is compressed (flags = 1) File "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-462C0F1B365F1B372444FDB32BAEB6AA8AED83C1.bin.83" is compressed (flags = 1) Scan finished ======================================= Removal queue found; removal started Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam... Removal finished Malwarebytes Anti-Rootkit BETA 1.10.3.1001 [URL="http://www.malwarebytes.org"]www.malwarebytes.org[/URL] Database version: main: v2018.01.06.01 rootkit: v2017.10.14.01 Windows 10 x64 NTFS Internet Explorer 11.786.15063.0 RecoveryAdmin :: STUDIOR4KUHD [administrator] 1/5/2018 18:57:43 mbar-log-2018-01-05 (18-57-43).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 318723 Time elapsed: 11 minute(s), 57 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) [/QUOTE]
Insert quotes…
Verification
Post reply
Top