Page 4 of 5 FirstFirst 12345 LastLast
Results 31 to 40 of 42

Thread: Malware #SL9DW61 message

  1. #31
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default mbar-log

    Malwarebytes Anti-Rootkit BETA 1.9.3.1001
    www.malwarebytes.org

    Database version:
    main: v2016.11.30.11
    rootkit: v2016.11.20.01

    Windows 10 x64 NTFS
    Internet Explorer 11.447.14393.0
    Martin :: MARTIN-HP [administrator]

    30/11/2016 23:34:44
    mbar-log-2016-11-30 (23-34-44).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Objects scanned: 449497
    Time elapsed: 32 minute(s),

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)

  2. #32
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default System log - Nothing found

    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.09.3.1001

    (c) Malwarebytes Corporation 2011-2012

    OS version: 10.0.9200 Windows 10 x64

    Account is Administrative

    Internet Explorer version: 11.447.14393.0

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, M:\ DRIVE_FIXED
    CPU speed: 3.293000 GHz
    Memory total: 4276658176, free: 1306554368

    Downloaded database version: v2016.11.30.11
    Downloaded database version: v2016.11.20.01
    Downloaded database version: v2016.11.29.02
    =======================================
    Driver version: 0.3.0.4
    ------------ Kernel report ------------
    11/30/2016 23:34:30
    ------------ Loaded modules -----------
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\hal.dll
    \SystemRoot\system32\kd.dll
    \SystemRoot\system32\mcupdate_GenuineIntel.dll
    \SystemRoot\System32\drivers\werkernel.sys
    \SystemRoot\System32\drivers\CLFS.SYS
    \SystemRoot\System32\drivers\tm.sys
    \SystemRoot\system32\PSHED.dll
    \SystemRoot\system32\BOOTVID.dll
    \SystemRoot\System32\drivers\FLTMGR.SYS
    \SystemRoot\System32\drivers\msrpc.sys
    \SystemRoot\System32\drivers\ksecdd.sys
    \SystemRoot\System32\drivers\clipsp.sys
    \SystemRoot\System32\drivers\cmimcext.sys
    \SystemRoot\System32\drivers\ntosext.sys
    \SystemRoot\system32\CI.dll
    \SystemRoot\System32\drivers\cng.sys
    \SystemRoot\system32\drivers\Wdf01000.sys
    \SystemRoot\system32\drivers\WDFLDR.SYS
    \SystemRoot\System32\Drivers\acpiex.sys
    \SystemRoot\System32\Drivers\WppRecorder.sys
    \SystemRoot\System32\drivers\ACPI.sys
    \SystemRoot\System32\drivers\WMILIB.SYS
    \SystemRoot\System32\drivers\intelpep.sys
    \SystemRoot\system32\drivers\WindowsTrustedRT.sys
    \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
    \SystemRoot\System32\drivers\pcw.sys
    \SystemRoot\System32\drivers\msisadrv.sys
    \SystemRoot\System32\drivers\pci.sys
    \SystemRoot\System32\drivers\vdrvroot.sys
    \SystemRoot\system32\drivers\pdc.sys
    \SystemRoot\system32\drivers\CEA.sys
    \SystemRoot\System32\drivers\partmgr.sys
    \SystemRoot\System32\drivers\spaceport.sys
    \SystemRoot\System32\drivers\volmgr.sys
    \SystemRoot\System32\drivers\volmgrx.sys
    \SystemRoot\System32\drivers\mountmgr.sys
    \SystemRoot\System32\drivers\storahci.sys
    \SystemRoot\System32\drivers\storport.sys
    \SystemRoot\System32\drivers\fileinfo.sys
    \SystemRoot\System32\Drivers\Wof.sys
    \SystemRoot\system32\drivers\mfehidk.sys
    \SystemRoot\System32\Drivers\NTFS.sys
    \SystemRoot\System32\Drivers\Fs_Rec.sys
    \SystemRoot\system32\drivers\ndis.sys
    \SystemRoot\system32\drivers\NETIO.SYS
    \SystemRoot\System32\Drivers\ksecpkg.sys
    \SystemRoot\System32\drivers\tcpip.sys
    \SystemRoot\System32\drivers\fwpkclnt.sys
    \SystemRoot\System32\drivers\wfplwfs.sys
    \SystemRoot\system32\drivers\mfewfpk.sys
    \SystemRoot\System32\DRIVERS\fvevol.sys
    \SystemRoot\System32\drivers\volume.sys
    \SystemRoot\System32\drivers\volsnap.sys
    \SystemRoot\System32\drivers\rdyboost.sys
    \SystemRoot\System32\Drivers\mup.sys
    \SystemRoot\system32\DRIVERS\mfedisk.sys
    \SystemRoot\system32\drivers\iorate.sys
    \SystemRoot\system32\drivers\EUBKMON.sys
    \SystemRoot\system32\drivers\eubakup.sys
    \SystemRoot\System32\drivers\disk.sys
    \SystemRoot\System32\drivers\CLASSPNP.SYS
    \SystemRoot\System32\Drivers\crashdmp.sys
    \SystemRoot\System32\drivers\cdrom.sys
    \SystemRoot\system32\drivers\filecrypt.sys
    \SystemRoot\system32\drivers\tbs.sys
    \??\C:\EEK\bin64\epp.sys
    \SystemRoot\System32\Drivers\Null.SYS
    \SystemRoot\System32\Drivers\Beep.SYS
    \SystemRoot\System32\drivers\BasicDisplay.sys
    \SystemRoot\System32\drivers\watchdog.sys
    \SystemRoot\System32\drivers\dxgkrnl.sys
    \SystemRoot\System32\drivers\BasicRender.sys
    \SystemRoot\System32\Drivers\Npfs.SYS
    \SystemRoot\System32\Drivers\Msfs.SYS
    \SystemRoot\system32\DRIVERS\tdx.sys
    \SystemRoot\system32\DRIVERS\TDI.SYS
    \SystemRoot\System32\DRIVERS\netbt.sys
    \SystemRoot\system32\drivers\afd.sys
    \SystemRoot\System32\drivers\vwififlt.sys
    \SystemRoot\System32\drivers\pacer.sys
    \SystemRoot\system32\drivers\netbios.sys
    \SystemRoot\system32\DRIVERS\rdbss.sys
    \??\C:\WINDOWS\System32\drivers\zamguard64.sys
    \??\C:\WINDOWS\System32\drivers\zam64.sys
    \??\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys
    \SystemRoot\system32\drivers\nsiproxy.sys
    \SystemRoot\System32\drivers\npsvctrig.sys
    \SystemRoot\System32\drivers\mssmbios.sys
    \SystemRoot\System32\drivers\gpuenergydrv.sys
    \??\C:\WINDOWS\system32\drivers\EuFdDisk.sys
    \??\C:\WINDOWS\system32\drivers\eudskacs.sys
    \SystemRoot\System32\Drivers\dfsc.sys
    \SystemRoot\system32\DRIVERS\ahcache.sys
    \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
    \SystemRoot\System32\drivers\kdnic.sys
    \SystemRoot\System32\drivers\umbus.sys
    \SystemRoot\System32\DriverStore\FileRepository\nvhdcwu.inf_amd64_16f6c9b501baeb7d\nvlddmkm.sys
    \SystemRoot\System32\drivers\HDAudBus.sys
    \SystemRoot\System32\drivers\portcls.sys
    \SystemRoot\System32\drivers\drmk.sys
    \SystemRoot\System32\drivers\ks.sys
    \SystemRoot\System32\drivers\HECIx64.sys
    \SystemRoot\System32\drivers\usbehci.sys
    \SystemRoot\System32\drivers\USBPORT.SYS
    \SystemRoot\system32\DRIVERS\netr28x.sys
    \SystemRoot\System32\drivers\vwifibus.sys
    \SystemRoot\System32\drivers\rt640x64.sys
    \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    \SystemRoot\System32\drivers\intelppm.sys
    \SystemRoot\System32\drivers\NdisVirtualBus.sys
    \SystemRoot\System32\drivers\swenum.sys
    \SystemRoot\System32\drivers\circlass.sys
    \SystemRoot\System32\drivers\rdpbus.sys
    \SystemRoot\System32\drivers\usbhub.sys
    \SystemRoot\System32\drivers\USBD.SYS
    \SystemRoot\system32\drivers\nvhda64v.sys
    \SystemRoot\system32\drivers\ksthunk.sys
    \SystemRoot\system32\DRIVERS\stwrt64.sys
    \SystemRoot\system32\drivers\mfeavfk.sys
    \SystemRoot\system32\drivers\mfefirek.sys
    \SystemRoot\system32\DRIVERS\mfencbdc.sys
    \SystemRoot\system32\drivers\mfeaack.sys
    \SystemRoot\System32\win32k.sys
    \SystemRoot\System32\win32kfull.sys
    \SystemRoot\System32\drivers\HIDPARSE.SYS
    \SystemRoot\System32\win32kbase.sys
    \SystemRoot\System32\Drivers\dump_diskdump.sys
    \SystemRoot\System32\Drivers\dump_storahci.sys
    \SystemRoot\System32\Drivers\dump_dumpfve.sys
    \SystemRoot\System32\drivers\usbccgp.sys
    \SystemRoot\system32\DRIVERS\VX3000.sys
    \SystemRoot\system32\DRIVERS\STREAM.SYS
    \SystemRoot\system32\drivers\usbaudio.sys
    \SystemRoot\System32\drivers\dxgmms2.sys
    \SystemRoot\System32\TSDDD.dll
    \SystemRoot\System32\ATMFD.DLL
    \SystemRoot\System32\cdd.dll
    \SystemRoot\System32\drivers\monitor.sys
    \SystemRoot\System32\drivers\USBSTOR.SYS
    \SystemRoot\system32\DRIVERS\hcwD3bda64.sys
    \SystemRoot\System32\drivers\hidusb.sys
    \SystemRoot\System32\drivers\HIDCLASS.SYS
    \SystemRoot\System32\drivers\kbdhid.sys
    \SystemRoot\System32\drivers\kbdclass.sys
    \SystemRoot\System32\drivers\mouhid.sys
    \SystemRoot\System32\drivers\mouclass.sys
    \SystemRoot\System32\drivers\hidir.sys
    \SystemRoot\system32\drivers\luafv.sys
    \SystemRoot\system32\drivers\wcifs.sys
    \SystemRoot\system32\drivers\storqosflt.sys
    \SystemRoot\system32\drivers\WudfPf.sys
    \SystemRoot\system32\drivers\wcnfs.sys
    \SystemRoot\System32\drivers\registry.sys
    \SystemRoot\system32\DRIVERS\WUDFRd.sys
    \SystemRoot\System32\drivers\WpdUpFltr.sys
    \SystemRoot\system32\drivers\mslldp.sys
    \SystemRoot\system32\drivers\lltdio.sys
    \SystemRoot\system32\drivers\rspndr.sys
    \SystemRoot\System32\DRIVERS\wanarp.sys
    \SystemRoot\system32\drivers\ndisuio.sys
    \SystemRoot\system32\DRIVERS\nwifi.sys
    \SystemRoot\system32\drivers\HTTP.sys
    \SystemRoot\system32\DRIVERS\bowser.sys
    \SystemRoot\system32\DRIVERS\mrxsmb.sys
    \SystemRoot\System32\drivers\mpsdrv.sys
    \SystemRoot\system32\drivers\mmcss.sys
    \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    \SystemRoot\System32\DRIVERS\srvnet.sys
    \SystemRoot\System32\Drivers\adfs.SYS
    \SystemRoot\System32\DRIVERS\srv2.sys
    \SystemRoot\System32\drivers\condrv.sys
    \SystemRoot\System32\drivers\vwifimp.sys
    \??\C:\WINDOWS\system32\drivers\mbam.sys
    \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    \SystemRoot\system32\drivers\Ndu.sys
    \SystemRoot\system32\drivers\mqac.sys
    \SystemRoot\system32\drivers\peauth.sys
    \SystemRoot\System32\DRIVERS\srv.sys
    \SystemRoot\System32\drivers\tcpipreg.sys
    \??\C:\WINDOWS\system32\Drivers\rikvm_C6F09094.sys
    \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys
    \SystemRoot\System32\drivers\tunnel.sys
    \SystemRoot\system32\drivers\cfwids.sys
    \SystemRoot\system32\DRIVERS\WSDScan.sys
    \SystemRoot\System32\drivers\WSDPrint.sys
    \??\C:\WINDOWS\system32\drivers\mbamchameleon.sys
    \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
    ----------- End -----------
    Done!

    Scan started
    Database versions:
    main: v2016.11.30.11
    rootkit: v2016.11.20.01

    <<<2>>>
    Physical Sector Size: 512
    Drive: 0, DevicePointer: 0xffffd38aa9936060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aa9854a00, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aa9936ae0, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aa9936060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aa9702060, DeviceName: \Device\00000025\, DriverName: \Driver\storahci\
    ------------ End ----------
    Alternate DeviceName: Unknown, DriverName: \Driver\partmgr\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    Done!
    Drive 0
    This is a System drive
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: A1CBFC44

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048 Numsec = 204800
    Partition is bootable
    Partition file system is NTFS

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848 Numsec = 1966690304
    Partition is not bootable
    Partition file system is NTFS

    Partition 2 type is Other (0x27)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 3873128448 Numsec = 921600
    Partition is not bootable
    Partition file system is NTFS

    Partition 3 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 3874050048 Numsec = 32976896
    Partition is bootable
    Partition file system is NTFS

    Disk Size: 2000398934016 bytes
    Sector size: 512 bytes

    Done!
    Physical Sector Size: 512
    Drive: 1, DevicePointer: 0xffffd38aa9935060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aa9852df0, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aa9853ae0, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aa9935060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aa9748060, DeviceName: \Device\00000026\, DriverName: \Driver\storahci\
    ------------ End ----------
    Alternate DeviceName: Unknown, DriverName: \Driver\partmgr\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    Drive 1
    Scanning MBR on drive 1...
    Inspecting partition table:
    This drive is a GPT Drive.
    MBR Signature: 55AA
    Disk Signature: 605DC0B

    GPT Protective MBR Partition information:

    Partition 0 type is EFI-GPT (0xee)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 1 Numsec = 4294967295

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    GPT Partition information:

    GPT Header Signature 4546492050415254
    GPT Header Revision 65536 Size 92 CRC 1185534156
    GPT Header CurrentLba = 1 BackupLba 937703087
    GPT Header FirstUsableLba 34 LastUsableLba 937703054
    GPT Header Guid a652145c-4ab9-403b-b8ed-cfd7ca371f1b
    GPT Header Contains 128 partition entries starting at LBA 2
    GPT Header Partition entry size = 128

    Backup GPT header Signature 4546492050415254
    Backup GPT header Revision 65536 Size 92 CRC 1185534156
    Backup GPT header CurrentLba = 937703087 BackupLba 1
    Backup GPT header FirstUsableLba 34 LastUsableLba 937703054
    Backup GPT header Guid a652145c-4ab9-403b-b8ed-cfd7ca371f1b
    Backup GPT header Contains 128 partition entries starting at LBA 937703055
    Backup GPT header Partition entry size = 128

    Partition 0 Type e3c9e316-b5c-4db8-817d-f92df0215ae
    Partition ID 6896e2e2-75fe-4324-9a55-37df7d42d92
    FirstLBA 34 Last LBA 262177
    Attributes 0
    Partition Name Microsoft reserved partition

    Partition 1 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
    Partition ID e0319672-ce61-4562-9024-9dd79566dca
    FirstLBA 263168 Last LBA 937702398
    Attributes 0
    Partition Name

    Disk Size: 480103981056 bytes
    Sector size: 512 bytes

    Done!
    Physical Sector Size: 0
    Drive: 2, DevicePointer: 0xffffd38aacb8d060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aacb81040, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aacb8dae0, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aacb8d060, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aacb76a70, DeviceName: \Device\00000049\, DriverName: \Driver\USBSTOR\
    ------------ End ----------
    Physical Sector Size: 0
    Drive: 3, DevicePointer: 0xffffd38aacb33610, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aacb11760, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aacb88530, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aacb33610, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aacb7b620, DeviceName: \Device\0000004a\, DriverName: \Driver\USBSTOR\
    ------------ End ----------
    Physical Sector Size: 0
    Drive: 4, DevicePointer: 0xffffd38aacb99060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aacb97240, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aacb99ae0, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aacb99060, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aacb7c060, DeviceName: \Device\0000004b\, DriverName: \Driver\USBSTOR\
    ------------ End ----------
    Physical Sector Size: 0
    Drive: 5, DevicePointer: 0xffffd38aa9e23060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\
    --------- Disk Stack ------
    DevicePointer: 0xffffd38aa9e22800, DeviceName: Unknown, DriverName: \Driver\mfedisk\
    DevicePointer: 0xffffd38aa9e23ae0, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xffffd38aa9e23060, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\disk\
    DevicePointer: 0xffffd38aacb80060, DeviceName: \Device\0000004c\, DriverName: \Driver\USBSTOR\
    ------------ End ----------
    File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\KERNELBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\apphelp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\psapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\user32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\user32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\win32u.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\gdi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\gdi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\GDI32FULL.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\advapi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msvcrt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sechost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rpcrt4.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sspicli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\CRYPTBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\BCRYPTPRIMITIVES.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\imm32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\shlwapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\combase.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\combase.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ucrtbase.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\oleaut32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MSVCP_WIN.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ntmarta.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\shell32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\version.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cfgmgr32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.STORAGE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\powrprof.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\KERNEL.APPCORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SHCore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\profapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ole32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ole32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wintrust.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\imagehlp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ws2_32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wininet.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\netapi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\userenv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mpr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\comdlg32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\comdlg32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\winmm.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\winspool.drv" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_5507ded2cb4f7f4c\comctl32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINMMBASE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\bcrypt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sfc_os.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msasn1.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\crypt32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\crypt32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\netutils.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cryptsp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rsaenh.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wkscli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cscapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\uxtheme.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\iertutil.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ONDEMANDCONNROUTEHELPER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\IPHLPAPI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\winhttp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mswsock.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\winnsi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\nsi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dnsapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\urlmon.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rasadhlp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\FWPUCLNT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msctf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dwmapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dwmapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dhcpcsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\winsta.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\srvcli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ntlanman.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\drprov.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\davclnt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\davhlpr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\clbcatq.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wtsapi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\propsys.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mssprxy.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\smss.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\csrss.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\wininit.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\services.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\lsass.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\winlogon.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\svchost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\dwm.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\setupapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\devobj.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\devrtl.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\spinf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\drvstore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\drvstore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WUDFHost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\spoolsv.exe" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9247_none_5090cb78bcba4a35\msvcr90.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\secur32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\samcli.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9247_none_5090cb78bcba4a35\msvcp90.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mapi32.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msimg32.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90ENU.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\vds_ps.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wsock32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\wbemprox.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbemcomn.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\wbemsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\fastprox.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9268_none_d08e1538442a243e\msvcr80.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9268_none_d08e1538442a243e\msvcp80.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.321_none_baab3cb4359688b4\GdiPlus.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cabinet.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dbghelp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\oleacc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\oleacc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mscms.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mqsvc.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\BITSPROXY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\BITSPROXY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\shfolder.dll" is sparse (flags = 32768)
    File "C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9\comctl32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\oledlg.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\jsproxy.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\gpapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cryptnet.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wshqos.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WSHTCPIP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\wship6.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\nlaapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NapiNSP.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pnrpnsp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\winrnr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rasapi32.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rasman.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\upnp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ssdpapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sxs.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msxml6.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msxml6.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\webio.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dasHost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\perfos.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DHCPCSVC6.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DHCPCSVC6.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\logoncli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\qwave.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\traffic.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wmiclnt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\schannel.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MSKEYPROTECT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSKEYPROTECT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ncrypt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ntasn1.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NCRYPTSSLP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NCRYPTSSLP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\conhost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\mscoree.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dbgcore.dll" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MSVCR120_CLR0400.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSVCR120_CLR0400.DLL" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\40571abae9422cd2ca6fafbbde1c3cdc\mscorlib.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System\08da6b6698b412866e6910ae9b84f363\System.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f6ebd52be27fe627fed0d185c6a9c0d5\System.Core.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\aa9c29b70b4cceab890eb841f89d73e9\System.Configuration.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\7532301b00fac8def2f526ca8b480e11\System.Xml.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dpapi.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\a280fac0c231c9d6d5f1274c2180d594\System.Management.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pdh.dll" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\WMINET_UTILS.DLL" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\WMINET_UTILS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\wmiutils.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rtutils.dll" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\PERFCOUNTER.DLL" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\PERFCOUNTER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ASPNET_COUNTERS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ASPNET_COUNTERS.DLL" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASPNET_PERF.DLL" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASPNET_PERF.DLL" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASPNET_PERF.DLL" is sparse (flags = 32768)
    File "C:\Windows\splwow64.exe" is sparse (flags = 32768)
    File "C:\Windows\splwow64.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\vds.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\sihost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\dllhost.exe" is sparse (flags = 32768)
    File "C:\Windows\explorer.exe" is sparse (flags = 32768)
    File "C:\Windows\explorer.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\TASKHOSTW.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\RUNTIMEBROKER.EXE" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\SHELLEXPERIENCEHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\SHELLEXPERIENCEHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHINDEXER.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHINDEXER.EXE" is sparse (flags = 32768)
    File "C:\Program Files\Windows Defender\MSASCuiL.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\cryptui.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\usp10.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\atlthunk.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWSCODECS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWSCODECS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DATAEXCHANGE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\d3d11.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dcomp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dxgi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TWINAPI.APPCORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\d3d9.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\d3d9.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cryptdll.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dxva2.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dsound.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DWrite.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DWrite.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\coml2.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\riched20.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msls31.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\PORTABLEDEVICEAPI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PORTABLEDEVICEAPI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PORTABLEDEVICETYPES.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PORTABLEDEVICETYPES.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\sti.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wiatrace.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wer.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\xmllite.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\loadperf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\Faultrep.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mlang.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.NETWORKING.CONNECTIVITY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.NETWORKING.CONNECTIVITY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MICROSOFTACCOUNTTOKENPROVIDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MICROSOFTACCOUNTTOKENPROVIDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\npmproxy.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wlanapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wwapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wwapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WinTypes.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WinTypes.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wcmapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rmclient.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\netprofm.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\linkinfo.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ntshrui.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wpnapps.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\USERMGRCLI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ONECOREUAPCOMMONPROXYSTUB.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ONECOREUAPCOMMONPROXYSTUB.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MFREADWRITE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MFREADWRITE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\mfplat.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mfplat.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\RTWorkQ.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\edputil.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pcacli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\avrt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\hhctrl.ocx" is sparse (flags = 32768)
    File "C:\Windows\System32\hid.dll" is sparse (flags = 32768)
    File "C:\Windows\AppPatch\AcLayers.dll" is sparse (flags = 32768)
    File "C:\Windows\AppPatch\AcLayers.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wiadss.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\srclient.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\spp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\vssapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\vsstrace.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\EXPLORERFRAME.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\d2d1.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\d2d1.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MMDevAPI.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\AudioSes.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\AudioSes.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\evr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MSAUDDECMFT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSAUDDECMFT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MFPERFHELPER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MFPERFHELPER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSMPEG2VDEC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSMPEG2VDEC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\twinapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msvproc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msvproc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\quartz.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\qasf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WMVCORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\msdmo.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WMASF.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MP3DMOD.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\D3DCOMPILER_47.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\D3DCOMPILER_47.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\THUMBCACHE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\THUMBCACHE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\POLICYMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MSVCP110_WIN.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\shdocvw.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SMARTSCREENPS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SMARTSCREENPS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\twinui.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\twinui.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.UI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.UI.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SYSTEM.LAUNCHER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SYSTEM.LAUNCHER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPPORTINGLIBRARY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPPORTINGLIBRARY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\dsclient.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SHAREHOST.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SHAREHOST.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\COREMESSAGING.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\COREUICOMPONENTS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\actxprxy.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.STATEREPOSITORY.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\STATEREPOSITORY.CORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\STATEREPOSITORY.CORE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SHELL.SERVICEHOSTBUILDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SHELL.SERVICEHOSTBUILDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\LOCKAPPBROKER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\LOCKAPPBROKER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\VEEVENTDISPATCHER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\VEEVENTDISPATCHER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MrmCoreR.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ONECORECOMMONPROXYSTUB.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ONECORECOMMONPROXYSTUB.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\msxml3.dll" is sparse (flags = 32768)
    File "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\213003369298faf75651a6b8981dce12\System.Runtime.Serialization.ni.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\fltLib.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\security.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DLNASHEXT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DLNASHEXT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PLAYTODEVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PLAYTODEVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVDISPITEMPROVIDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVDISPITEMPROVIDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SETTINGSYNCHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\idndl.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\normaliz.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ieframe.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ieframe.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mstask.dll" is sparse (flags = 32768)
    File "C:\Program Files\Windows Media Player\wmpnetwk.exe" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\REMINDERSSERVER.EXE" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\REMINDERSSERVER.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\audiodg.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\audiodg.exe" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ACTIONURISERVER.EXE" is sparse (flags = 32768)
    File "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ACTIONURISERVER.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\mshtml.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mshtml.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\srpapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msimtf.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\D3D10WARP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\D3D10WARP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\notepad.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHPROTOCOLHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHPROTOCOLHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SMARTSCREEN.EXE" is sparse (flags = 32768)
    File "C:\Windows\SysWOW64\cmd.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\cmdext.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\BACKGROUNDTASKHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\BACKGROUNDTASKHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHFILTERHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\SEARCHFILTERHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\rundll32.exe" is sparse (flags = 32768)
    File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768)
    File "C:\Windows\SysWOW64\ONEDRIVESETUP.EXE" is sparse (flags = 32768)
    File "C:\Program Files\Windows Mail\wab.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\credssp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\userinit.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\scecli.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msv1_0.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\kerberos.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wdigest.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\TSpkg.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pku2u.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pcmcia.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\UEVAGENTDRIVER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\appid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\AcpiDev.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\1394ohci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\flpydisk.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mspclock.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpiex.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\isapnp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpipmi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\Locator.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\amdk8.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpipagr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\acpitime.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mpsdrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\afd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sdstor.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ahcache.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BthhfHid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BthhfHid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\asyncmac.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\srv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\alg.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BASICRENDER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\amdppm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\irenum.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbccgp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\APPLOCKERFLTR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\APPLOCKERFLTR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pciide.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pciide.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\APPVCLIENT.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\AppVStrm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\AppvVfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\AppvVfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\APPVVEMGR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\APPVVEMGR.SYS" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASPNET_STATE.EXE" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASPNET_STATE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wcnfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wcifs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\srv2.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\atapi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\atapi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BASICDISPLAY.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\Ndu.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\bthmodem.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\bowser.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BTHAVRCPTG.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BTHAVRCPTG.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BUTTONCONVERTER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BTHHFENUM.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\BTHHFENUM.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\cdfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\clfs.sys" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSVCHOST.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\cdrom.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\circlass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\registry.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mup.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\CmBatt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\cng.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\csc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\CNGHWASSIST.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\condrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\dam.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\dfsc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\disk.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mssecflt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\DiagSvcs\DIAGNOSTICSHUB.STANDARDCOLLECTOR.SERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\dmvsc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\drmkaud.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\drmkaud.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\serial.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\dxgkrnl.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\umpass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tcpip.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\EHSTORCLASS.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\EHSTORTCGDRV.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NPSVCTRIG.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\errdev.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\kbdclass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tdx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tpm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\fileinfo.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\FXSSVC.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\fdc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\FILECRYPT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmstorfl.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ipfltdrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\FILETRACE.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\fltMgr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\monitor.sys" is sparse (flags = 32768)
    File "C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PRESENTATIONFONTCACHE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\FSDEPENDS.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\STORQOSFLT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\fvevol.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\snmptrap.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VMGENCOUNTER.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndisuio.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSGPIOCLX.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\GPUENERGYDRV.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rasl2tp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mrxsmb.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hdaudbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hdaudbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidbatt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidbth.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidi2c.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\HIDINTERRUPT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidir.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidusb.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hidusb.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\VSSVC.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\msdtc.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndis.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\http.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\HVSERVICE.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\HVSERVICE.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hwpolicy.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\hyperkbd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndproxy.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\i8042prt.sys" is sparse (flags = 32768)
    File "C:\Windows\SysWOW64\perfhost.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WPDUPFLTR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\INDIRECTKMD.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelide.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelide.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelpep.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\intelppm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WdFilter.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\iorate.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\scfilter.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\IPMIDrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ipnat.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\irda.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\msiscsi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\msiscsi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\kbdhid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ksecdd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ksecpkg.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ksthunk.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rdpdr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\lltdio.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\UCMTCPCICX.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\luafv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mqac.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mrxsmb10.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mrxsmb20.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\Ucx01000.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ufx01000.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mouhid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mmcss.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mskssrv.sys" is sparse (flags = 32768)
    File "C:\Program Files\Windows Defender\MsMpEng.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wimmount.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mrxdav.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\modem.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mspqm.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mouclass.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mountmgr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\stornvme.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\bridge.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSGPIOWIN32.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSHIDKMDF.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MSHIDUMDF.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\msisadrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mstee.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\msiexec.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mslldp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\mssmbios.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\MTConfig.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\nwifi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\netbios.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndiscap.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NDISIMPLATFORM.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tunnel.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndistapi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NDISVIRTUALBUS.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ndiswan.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\NETADAPTERCX.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\netbt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\nsiproxy.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\parport.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\partmgr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\storahci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pcw.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pdc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\storvsc.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\PEAuth.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\qwavedrv.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\raspptp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\processr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\pacer.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rasacd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\agilevpn.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\raspppoe.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rassstp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rdbss.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rdpbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\RDPVIDEOMINIPORT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\RDPVIDEOMINIPORT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rdyboost.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\rspndr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\AGENTSERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vms3cap.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sbp2port.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\swenum.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sdbus.sys" is sparse (flags = 32768)
    File "C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\SENSORDATASERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\SerCx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\SpbCx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\serenum.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\SerCx2.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sermouse.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\sfloppy.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\SPACEPORT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\sppsvc.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\srvnet.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\storufs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tcpipreg.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vdrvroot.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\terminpt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\TIERINGENGINESERVICE.EXE" is sparse (flags = 32768)
    File "C:\Windows\servicing\TRUSTEDINSTALLER.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\TsUsbFlt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\TsUsbGD.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\tsusbhub.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\uaspstor.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\UcmCx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\Udecx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\udfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\uefi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\UI0DETECT.EXE" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\umbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\URSCX01000.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBAUDIO.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBAUDIO.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbcir.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBXHCI.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBXHCI.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbuhci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbuhci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbohci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbohci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbehci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbehci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbhub.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBHUB3.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbprint.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\usbser.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\USBSTOR.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VERIFIEREXT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vhdmp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vhf.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmbus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\VMBusHID.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vmgid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volmgr.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volmgrx.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volsnap.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\volume.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vpci.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vsmraid.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vwifibus.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vwififlt.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\vwifimp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wacompen.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WUDFRd.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wanarp.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\winusb.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\winusb.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\wbengine.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WdBoot.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\Wdf01000.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WdiWiFi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WdNisDrv.sys" is sparse (flags = 32768)
    File "C:\Program Files\Windows Defender\NisSrv.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wfplwfs.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WINDOWSTRUSTEDRT.SYS" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\wmiacpi.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\WmiApSrv.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\ws2ifsl.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WSDPrint.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WSDPrint.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\drivers\WUDFPf.sys" is sparse (flags = 32768)
    File "C:\Windows\System32\AJRouter.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\AUDIOENDPOINTBUILDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\AUDIOENDPOINTBUILDER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WALLETSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\APPXDEPLOYMENTSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\EMBEDDEDMODESVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\EMBEDDEDMODESVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\inetsrv\APPHOSTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\umpnpmgr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rpcss.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\appinfo.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\appidsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\audiosrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\audiosrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\appmgmts.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dcpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\APPREADINESS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\AxInstSv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\RpcEpMap.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\CDPUSERSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\dssvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\bdesvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\BFE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\XBLAUTHMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\XBLAUTHMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\netman.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVICESETUPMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\cdpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cscsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\umpo.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\qmgr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ListSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\lltdsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\bisrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dhcpcore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\browser.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\BthHFSrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\profsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pnrpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\bthserv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\provsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\das.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\LICENSEMANAGERSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\certprop.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DMWAPPUSHSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ClipSVC.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\cryptsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TETHERINGSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEFRAGSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DEVQUERYBROKER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\wscsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WsmSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wersvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wecsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wcmsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wkssvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dot3svc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\DIAGTRACK.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.INTERNAL.MANAGEMENT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.INTERNAL.MANAGEMENT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\fdPHost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dnsrslvr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\dps.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WERCPLSUPPORT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\eapsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\efssvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ENTERPRISEAPPMGMTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\ENTERPRISEAPPMGMTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\FntCache.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\es.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sdrsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\FRAMESERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\FRAMESERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\srvsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\FDResPub.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\upnphost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\fhsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\gpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\hidserv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\HVHOSTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\IKEEXT.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\iphlpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\irmon.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\keyiso.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\msdtckrm.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\lfsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\lmhsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ipnathlp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\lsm.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\moshost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MESSAGINGSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\MPSSVC.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\iscsiexe.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\nsisvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\nlasvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ngcsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NcaSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NCDAUTOSETUP.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NCBSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\netlogon.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\trkwks.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NETPROFMSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NETSETUPSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\icsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\NGCCTNRSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\APHOSTSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pcasvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\p2psvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\PEERDISTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PHONESERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\PIMINDEXMAINTENANCE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\pla.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\pnrpauto.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\icsvcext.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\IPSECSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\rasauto.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\rasmans.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\mprdim.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\regsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\RDXSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\RMapi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\schedsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SCardSvr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\XBLGAMESAVE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SCDEVICEENUM.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SCDEVICEENUM.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\seclogon.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\Sens.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SENSORSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SENSORSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\sensrsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SessEnv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\shsvcs.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SHAREDPC.ACCOUNTMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WINDOWS.SHAREDPC.ACCOUNTMANAGER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TILEOBJSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TILEOBJSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\smphost.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SMSROUTERSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SMSROUTERSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\StorSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sstpsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\ssdpsrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wiaservc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\svsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\swprv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\inetsrv\iisw3adm.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\sysmain.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\SYSTEMEVENTSBROKERSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TabSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\termsrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\tapisrv.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\THEMESERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TIMEBROKERSERVER.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\TZAUTOUPDATE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\umrdp.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\Unistore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\USERDATASERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\usermgr.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\usocore.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\vaultsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\w32time.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\inetsrv\w3logsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbiosrvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbiosrvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wwansvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WUDFSvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wlidsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wlansvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wcncsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wdi.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WebClnt.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WEPHOSTSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\wiarpc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wbem\WMIsvc.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\FLIGHTSETTINGS.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WORKFOLDERSSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WORKFOLDERSSVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPDBUSENUM.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPNSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\WPNUSERSERVICE.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\wuaueng.dll" is sparse (flags = 32768)
    File "C:\Windows\System32\XBOXNETAPISVC.DLL" is sparse (flags = 32768)
    File "C:\Windows\System32\XBOXNETAPISVC.DLL" is sparse (flags = 32768)
    File "C:\Program Files\Windows Mail\WinMail.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\unregmp2.exe" is sparse (flags = 32768)
    File "C:\Windows\System32\ie4uinit.exe" is sparse (flags = 32768)
    File "C:\Windows\SysWOW64\rundll32.exe" is sparse (flags = 32768)
    <<<2>>>
    <<<3>>>
    Volume: M:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    File "C:\Users\Martin\AppData\Local\Comms\UnistoreDB\store.vol" is sparse (flags = 32768)
    File "C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat" is sparse (flags = 32768)
    Scan finished
    =======================================


    Removal queue found; removal started
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-206848-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-2-3873128448-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-3-3874050048-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
    Removal finished

  3. #33
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    Please download Emsisoft Emergency Kit and save it to your desktop.
    Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop.
    • Leave all settings as they are and click the Extract button at the bottom.
    • A folder named EEK will be created in the root of the drive (usually c:\).
    • After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
    • The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates.
    • Please click Yes so that it downloads the latest database updates.
    • When the update process is complete, a new button will appear in the lower-left corner that says Back. Click on this button to return to the Overview screen.
    • Click on Scan to be taken to the scan options.
    • If you are asked if you want the scanner to scan for Potentially Unwanted Programs, then click Yes.
    • Click on the Malware Scan button to start the scan.
    • When the scan is completed click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
    • When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
    • Please save the log in Notepad on your desktop, and copy it to your next reply.
    • When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.


    Tell me what the computer is doing now.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  4. #34
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default Emissoft showed no malware

    Quote Originally Posted by Juliet View Post
    Please download Emsisoft Emergency Kit and save it to your desktop.
    Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop.
    • Leave all settings as they are and click the Extract button at the bottom.
    • A folder named EEK will be created in the root of the drive (usually c:\).
    • After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
    • The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates.
    • Please click Yes so that it downloads the latest database updates.
    • When the update process is complete, a new button will appear in the lower-left corner that says Back. Click on this button to return to the Overview screen.
    • Click on Scan to be taken to the scan options.
    • If you are asked if you want the scanner to scan for Potentially Unwanted Programs, then click Yes.
    • Click on the Malware Scan button to start the scan.
    • When the scan is completed click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
    • When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
    • Please save the log in Notepad on your desktop, and copy it to your next reply.
    • When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.


    Tell me what the computer is doing now.
    Hello Juliet

    Had a problem downloading Emissoft, bin64\epp.sys not found
    checked in EKK folder that all files were present and correct. So clicked on .exe file to run scan. Results below.

    Emsisoft Emergency Kit - Version 12.0
    Last update: 02/12/2016 12:48:12
    User account: MARTIN-HP\Martin
    Computer name: MARTIN-HP
    OS version: Windows 10x64

    Scan settings:

    Scan type: Malware Scan
    Objects: Rootkits, Memory, Traces, Files

    Detect PUPs: On
    Scan archives: Off
    ADS Scan: On
    File extension filter: Off
    Direct disk access: Off

    Scan start: 02/12/2016 12:49:32

    Scanned 111277
    Found 0

    Scan end: 02/12/2016 13:16:32
    Scan time: 0:27:00

  5. #35
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default

    Juliet
    To answer your question, my computer has been running fine for the last 48 hours.

  6. #36
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    Let's give it another day or so. From what I can see your in good shape.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  7. #37
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default

    Quote Originally Posted by Juliet View Post
    Let's give it another day or so. From what I can see your in good shape.
    Hi Juliet

    Thanks I will test for another 48 hours. So far no problems.

  8. #38
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    good deal!
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  9. #39
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    Ready to remove tools and quarantine folders?
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  10. #40
    Junior Member
    Join Date
    Nov 2016
    Posts
    27

    Default

    Hi Juliet

    Yes ready to remove tools and stuff. My system is working fine now! Great work.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •