Für die virtuelle Maschine Linux Mint 17 Xfce 64-bit konnte keine neue Sitzung eröffnet werden. The virtual machine 'Linux Mint 17 Xfce 64-bit' has terminated unexpectedly during startup with exit code 1 (0x1). More details may be available in 'C:\Users\Werner\VirtualBox VMs\Linux Mint 17 Xfce 64-bit\Logs\VBoxStartup.log'. Fehlercode:E_FAIL (0x80004005) Komponente:Machine Interface:IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048} 8b4.d38: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110 8b4.d38: Calling main() 8b4.d38: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 8b4.d38: SUPR3HardenedMain: Respawn #1 8b4.d38: System32: \Device\HarddiskVolume2\Windows\System32 8b4.d38: WinSxS: \Device\HarddiskVolume2\Windows\winsxs 8b4.d38: ProgDir: \Device\HarddiskVolume2\Program Files 8b4.d38: ComDir: \Device\HarddiskVolume2\Program Files\Common Files 8b4.d38: ProgDir32: \Device\HarddiskVolume2\Program Files (x86) 8b4.d38: ComDir32: \Device\HarddiskVolume2\Program Files (x86)\Common Files 8b4.d38: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 8b4.d38: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) 8b4.d38: supR3HardNtEnableThreadCreation: 8b4.d38: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000077b7c340 pvNtTerminateThread=0000000077ba17e0 8b4.d38: supR3HardenedWinDoReSpawn(1): New child 1684.1174 [kernel32]. 8b4.d38: supR3HardenedWinPurifyChild: PebBaseAddress=000007fffffdb000 cbPeb=0x380 8b4.d38: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077b50000 uNtDllChildAddr=0000000077b50000 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: uLdrInitThunk=0000000077b7c340 uNtTerminateThread=0000000077ba17e0 8b4.d38: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000077b7c340 pvNtTerminateThread=0000000077ba17e0 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: mapping view of ntdll.dll[2nd] 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: ntdll.dll[2nd] mapped at 0000000000270000 LB 0x1a9000 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: mapping view of kernel32.dll 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: kernel32.dll mapped at 0000000077930000 LB 0x11f000 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: mapping view of KernelBase.dll 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: KernelBase.dll mapped at 000007fefd980000 LB 0x6c000 8b4.d38: supR3HardNtPuChTriggerInitialImageEvents: Startup delay kludge #1: 31 ms 8b4.d38: supR3HardNtEnableThreadCreation: 8b4.d38: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 8b4.d38: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 8b4.d38: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000 8b4.d38: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 8b4.d38: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 8b4.d38: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 8b4.d38: 0000000000041000-fffffffffff11fff 0x0001/0x0000 0x0000000 8b4.d38: *0000000000170000-0000000000073fff 0x0000/0x0004 0x0020000 8b4.d38: 000000000026c000-0000000000268fff 0x0104/0x0004 0x0020000 8b4.d38: 000000000026f000-000000000026dfff 0x0004/0x0004 0x0020000 8b4.d38: 0000000000270000-ffffffff8898ffff 0x0001/0x0000 0x0000000 8b4.d38: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077c82000-0000000077c79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077c8a000-0000000077c88fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077c8b000-0000000077c87fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 8b4.d38: 0000000077cf9000-0000000070a11fff 0x0001/0x0000 0x0000000 8b4.d38: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000 8b4.d38: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 8b4.d38: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 8b4.d38: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 8b4.d38: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fb61000-000000013fae1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fbe0000-000000013fbdefff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fc18000-000000013fc0efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 8b4.d38: 000000013fc5a000-fffff8037fa43fff 0x0001/0x0000 0x0000000 8b4.d38: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 8b4.d38: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 8b4.d38: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 8b4.d38: 000007fffffd3000-000007fffffcafff 0x0001/0x0000 0x0000000 8b4.d38: *000007fffffdb000-000007fffffd9fff 0x0004/0x0004 0x0020000 8b4.d38: 000007fffffdc000-000007fffffd9fff 0x0001/0x0000 0x0000000 8b4.d38: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 8b4.d38: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 8b4.d38: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 8b4.d38: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports 8b4.d38: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 1684.1174: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110 1684.1174: Calling main() 1684.1174: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 1684.1174: System32: \Device\HarddiskVolume2\Windows\System32 1684.1174: WinSxS: \Device\HarddiskVolume2\Windows\winsxs 1684.1174: ProgDir: \Device\HarddiskVolume2\Program Files 1684.1174: ComDir: \Device\HarddiskVolume2\Program Files\Common Files 1684.1174: ProgDir32: \Device\HarddiskVolume2\Program Files (x86) 1684.1174: ComDir32: \Device\HarddiskVolume2\Program Files (x86)\Common Files 1684.1174: supR3HardenedWinInit: Startup delay kludge #2/0: 93 ms, 9 sleeps 1684.1174: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION 1684.1174: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 1684.1174: *0000000000010000-ffffffffffffffff 0x0004/0x0004 0x0040000 1684.1174: 0000000000020000-000000000000ffff 0x0001/0x0000 0x0000000 1684.1174: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 1684.1174: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 1684.1174: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000050000-fffffffffffe8fff 0x0002/0x0002 0x0040000 1684.1174: 00000000000b7000-ffffffffffffdfff 0x0001/0x0000 0x0000000 1684.1174: *0000000000170000-0000000000074fff 0x0000/0x0004 0x0020000 1684.1174: 000000000026b000-0000000000268fff 0x0104/0x0004 0x0020000 1684.1174: 000000000026d000-0000000000269fff 0x0004/0x0004 0x0020000 1684.1174: *0000000000270000-00000000000c5fff 0x0004/0x0004 0x0020000 1684.1174: 000000000041a000-0000000000413fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000420000-0000000000384fff 0x0004/0x0004 0x0020000 1684.1174: 00000000004bb000-0000000000455fff 0x0000/0x0004 0x0020000 1684.1174: 0000000000520000-ffffffff8910ffff 0x0001/0x0000 0x0000000 1684.1174: *0000000077930000-000000007792efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077931000-0000000077895fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 00000000779cc000-000000007795dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a3a000-0000000077a37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a3c000-0000000077a28fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a4f000-000000007794dfff 0x0001/0x0000 0x0000000 1684.1174: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c82000-0000000077c80fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c83000-0000000077c81fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c84000-0000000077c82fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c85000-0000000077c82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c87000-0000000077c85fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c88000-0000000077c86fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c89000-0000000077c86fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8b000-0000000077c89fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8c000-0000000077c89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077cf9000-0000000070a11fff 0x0001/0x0000 0x0000000 1684.1174: *000000007efe0000-000000007efdafff 0x0002/0x0002 0x0040000 1684.1174: 000000007efe5000-000000007eee9fff 0x0000/0x0002 0x0040000 1684.1174: *000000007f0e0000-000000007e1dffff 0x0000/0x0002 0x0020000 1684.1174: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 1684.1174: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 1684.1174: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 1684.1174: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fb61000-000000013fae1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fbe0000-000000013fbdefff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc18000-000000013fc0efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc5a000-fffff80381f33fff 0x0001/0x0000 0x0000000 1684.1174: *000007fefd980000-000007fefd97efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd981000-000007fefd936fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9cb000-000007fefd9b4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9e1000-000007fefd9defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9e3000-000007fefd9d9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9ec000-000007fefb567fff 0x0001/0x0000 0x0000000 1684.1174: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 1684.1174: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 1684.1174: 000007fffffd3000-000007fffffcafff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffdb000-000007fffffd9fff 0x0004/0x0004 0x0020000 1684.1174: 000007fffffdc000-000007fffffd9fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 1684.1174: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 1684.1174: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 1684.1174: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports 1684.1174: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 1684.1174: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 1684.1174: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) 1684.1174: supHardNtVpScanVirtualMemory: enmKind=VERIFY_ONLY 1684.1174: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 1684.1174: *0000000000010000-ffffffffffffffff 0x0004/0x0004 0x0040000 1684.1174: 0000000000020000-000000000000ffff 0x0001/0x0000 0x0000000 1684.1174: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 1684.1174: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 1684.1174: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000050000-fffffffffffe8fff 0x0002/0x0002 0x0040000 1684.1174: 00000000000b7000-ffffffffffffdfff 0x0001/0x0000 0x0000000 1684.1174: *0000000000170000-0000000000075fff 0x0000/0x0004 0x0020000 1684.1174: 000000000026a000-0000000000267fff 0x0104/0x0004 0x0020000 1684.1174: 000000000026c000-0000000000267fff 0x0004/0x0004 0x0020000 1684.1174: *0000000000270000-00000000000c5fff 0x0004/0x0004 0x0020000 1684.1174: 000000000041a000-0000000000413fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000420000-0000000000366fff 0x0004/0x0004 0x0020000 1684.1174: 00000000004d9000-0000000000491fff 0x0000/0x0004 0x0020000 1684.1174: *0000000000520000-0000000000423fff 0x0004/0x0004 0x0020000 1684.1174: 000000000061c000-0000000000617fff 0x0000/0x0004 0x0020000 1684.1174: *0000000000620000-0000000000560fff 0x0004/0x0004 0x0020000 1684.1174: 00000000006df000-000000000059dfff 0x0000/0x0004 0x0020000 1684.1174: *0000000000820000-00000000006fffff 0x0004/0x0004 0x0020000 1684.1174: 0000000000940000-ffffffff8994ffff 0x0001/0x0000 0x0000000 1684.1174: *0000000077930000-000000007792efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077931000-0000000077895fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 00000000779cc000-000000007795dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a3a000-0000000077a37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a3c000-0000000077a28fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: 0000000077a4f000-000000007794dfff 0x0001/0x0000 0x0000000 1684.1174: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c82000-0000000077c80fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c83000-0000000077c81fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c84000-0000000077c82fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c85000-0000000077c82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c87000-0000000077c85fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c88000-0000000077c86fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c89000-0000000077c86fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8b000-0000000077c89fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8c000-0000000077c89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077cf9000-0000000077cf1fff 0x0001/0x0000 0x0000000 1684.1174: *0000000077d00000-0000000077cfefff 0x0004/0x0004 0x0020000 1684.1174: 0000000077d01000-0000000070a21fff 0x0001/0x0000 0x0000000 1684.1174: *000000007efe0000-000000007efdafff 0x0002/0x0002 0x0040000 1684.1174: 000000007efe5000-000000007eee9fff 0x0000/0x0002 0x0040000 1684.1174: *000000007f0e0000-000000007e1dffff 0x0000/0x0002 0x0020000 1684.1174: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 1684.1174: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 1684.1174: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 1684.1174: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fb61000-000000013fae0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc18000-000000013fc0efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc5a000-fffff80381f33fff 0x0001/0x0000 0x0000000 1684.1174: *000007fefd980000-000007fefd97efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd981000-000007fefd936fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9cb000-000007fefd9b4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9e1000-000007fefd9defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9e3000-000007fefd9d9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: 000007fefd9ec000-000007fefb567fff 0x0001/0x0000 0x0000000 1684.1174: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 1684.1174: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 1684.1174: 000007fffffd3000-000007fffffcafff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffdb000-000007fffffd9fff 0x0004/0x0004 0x0020000 1684.1174: 000007fffffdc000-000007fffffd9fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 1684.1174: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 1684.1174: SUPR3HardenedMain: Respawn #2 1684.1174: supR3HardNtEnableThreadCreation: 1684.1174: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll *pfFlags=0xffffffff pwszSearchPath=0000000000000000: 1684.1174: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll) 1684.1174: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll 1684.1174: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust] 1684.1174: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd770000 'C:\Windows\system32\apphelp.dll' 1684.1174: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000077b7c340 pvNtTerminateThread=0000000077ba17e0 1684.1174: supR3HardenedWinDoReSpawn(2): New child 14f0.1168 [kernel32]. 1684.1174: supR3HardenedWinPurifyChild: PebBaseAddress=000007fffffdd000 cbPeb=0x380 1684.1174: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077b50000 uNtDllChildAddr=0000000077b50000 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: uLdrInitThunk=0000000077b7c340 uNtTerminateThread=0000000077ba17e0 1684.1174: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000077b7c340 pvNtTerminateThread=0000000077ba17e0 1684.1174: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 1684.1174: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll) 1684.1174: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: mapping view of ntdll.dll[2nd] 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: ntdll.dll[2nd] mapped at 00000000002d0000 LB 0x1a9000 1684.1174: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll) 1684.1174: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: mapping view of kernel32.dll 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: kernel32.dll mapped at 0000000077930000 LB 0x11f000 1684.1174: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll) 1684.1174: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: mapping view of KernelBase.dll 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: KernelBase.dll mapped at 000007fefd980000 LB 0x6c000 1684.1174: supR3HardNtPuChTriggerInitialImageEvents: Startup delay kludge #1: 15 ms 1684.1174: supR3HardNtEnableThreadCreation: 1684.1174: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 1684.1174: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 1684.1174: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000 1684.1174: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 1684.1174: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 1684.1174: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 1684.1174: 0000000000041000-ffffffffffeb1fff 0x0001/0x0000 0x0000000 1684.1174: *00000000001d0000-00000000000d3fff 0x0000/0x0004 0x0020000 1684.1174: 00000000002cc000-00000000002c8fff 0x0104/0x0004 0x0020000 1684.1174: 00000000002cf000-00000000002cdfff 0x0004/0x0004 0x0020000 1684.1174: 00000000002d0000-ffffffff88a4ffff 0x0001/0x0000 0x0000000 1684.1174: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c82000-0000000077c79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8a000-0000000077c88fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8b000-0000000077c87fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 1684.1174: 0000000077cf9000-0000000070a11fff 0x0001/0x0000 0x0000000 1684.1174: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000 1684.1174: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 1684.1174: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 1684.1174: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 1684.1174: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fb61000-000000013fae1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fbe0000-000000013fbdefff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc18000-000000013fc0efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 1684.1174: 000000013fc5a000-fffff8037fa43fff 0x0001/0x0000 0x0000000 1684.1174: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 1684.1174: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 1684.1174: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000 1684.1174: *000007fffffdd000-000007fffffdbfff 0x0004/0x0004 0x0020000 1684.1174: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 1684.1174: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 14f0.1168: Log file opened: 4.3.16r95972 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110 14f0.1168: Calling main() 14f0.1168: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 14f0.1168: System32: \Device\HarddiskVolume2\Windows\System32 14f0.1168: WinSxS: \Device\HarddiskVolume2\Windows\winsxs 14f0.1168: ProgDir: \Device\HarddiskVolume2\Program Files 14f0.1168: ComDir: \Device\HarddiskVolume2\Program Files\Common Files 14f0.1168: ProgDir32: \Device\HarddiskVolume2\Program Files (x86) 14f0.1168: ComDir32: \Device\HarddiskVolume2\Program Files (x86)\Common Files 14f0.1168: supR3HardenedWinInit: Startup delay kludge #2/0: 94 ms, 11 sleeps 14f0.1168: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION 14f0.1168: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000010000-ffffffffffffffff 0x0004/0x0004 0x0040000 14f0.1168: 0000000000020000-000000000000ffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 14f0.1168: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 14f0.1168: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000050000-fffffffffffe8fff 0x0002/0x0002 0x0040000 14f0.1168: 00000000000b7000-fffffffffff9dfff 0x0001/0x0000 0x0000000 14f0.1168: *00000000001d0000-00000000000d4fff 0x0000/0x0004 0x0020000 14f0.1168: 00000000002cb000-00000000002c8fff 0x0104/0x0004 0x0020000 14f0.1168: 00000000002cd000-00000000002c9fff 0x0004/0x0004 0x0020000 14f0.1168: 00000000002d0000-000000000021ffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000380000-00000000002e4fff 0x0004/0x0004 0x0020000 14f0.1168: 000000000041b000-00000000003b5fff 0x0000/0x0004 0x0020000 14f0.1168: *0000000000480000-00000000002d5fff 0x0004/0x0004 0x0020000 14f0.1168: 000000000062a000-ffffffff89323fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000077930000-000000007792efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077931000-0000000077895fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 00000000779cc000-000000007795dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a3a000-0000000077a37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a3c000-0000000077a28fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a4f000-000000007794dfff 0x0001/0x0000 0x0000000 14f0.1168: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c82000-0000000077c80fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c83000-0000000077c81fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c84000-0000000077c82fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c85000-0000000077c82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c87000-0000000077c85fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c88000-0000000077c86fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c89000-0000000077c86fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8b000-0000000077c89fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8c000-0000000077c89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077cf9000-0000000070a11fff 0x0001/0x0000 0x0000000 14f0.1168: *000000007efe0000-000000007efdafff 0x0002/0x0002 0x0040000 14f0.1168: 000000007efe5000-000000007eee9fff 0x0000/0x0002 0x0040000 14f0.1168: *000000007f0e0000-000000007e1dffff 0x0000/0x0002 0x0020000 14f0.1168: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 14f0.1168: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 14f0.1168: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 14f0.1168: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fb61000-000000013fae1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fbe0000-000000013fbdefff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc18000-000000013fc0efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc5a000-fffff80381f33fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fefd980000-000007fefd97efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd981000-000007fefd936fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9cb000-000007fefd9b4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9e1000-000007fefd9defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9e3000-000007fefd9d9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9ec000-000007fefb567fff 0x0001/0x0000 0x0000000 14f0.1168: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 14f0.1168: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 14f0.1168: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fffffdd000-000007fffffdbfff 0x0004/0x0004 0x0020000 14f0.1168: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 14f0.1168: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 14f0.1168: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 14f0.1168: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports 14f0.1168: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 14f0.1168: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) 14f0.1168: supHardNtVpScanVirtualMemory: enmKind=VERIFY_ONLY 14f0.1168: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000010000-ffffffffffffffff 0x0004/0x0004 0x0040000 14f0.1168: 0000000000020000-000000000000ffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 14f0.1168: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 14f0.1168: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000050000-fffffffffffe8fff 0x0002/0x0002 0x0040000 14f0.1168: 00000000000b7000-00000000000adfff 0x0001/0x0000 0x0000000 14f0.1168: *00000000000c0000-fffffffffffc3fff 0x0004/0x0004 0x0020000 14f0.1168: 00000000001bc000-00000000001b7fff 0x0000/0x0004 0x0020000 14f0.1168: 00000000001c0000-00000000001affff 0x0001/0x0000 0x0000000 14f0.1168: *00000000001d0000-00000000000d5fff 0x0000/0x0004 0x0020000 14f0.1168: 00000000002ca000-00000000002c7fff 0x0104/0x0004 0x0020000 14f0.1168: 00000000002cc000-00000000002c7fff 0x0004/0x0004 0x0020000 14f0.1168: 00000000002d0000-000000000021ffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000380000-00000000002c6fff 0x0004/0x0004 0x0020000 14f0.1168: 0000000000439000-00000000003f1fff 0x0000/0x0004 0x0020000 14f0.1168: *0000000000480000-00000000002d5fff 0x0004/0x0004 0x0020000 14f0.1168: 000000000062a000-0000000000623fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000000630000-0000000000570fff 0x0004/0x0004 0x0020000 14f0.1168: 00000000006ef000-00000000005adfff 0x0000/0x0004 0x0020000 14f0.1168: *0000000000830000-000000000070ffff 0x0004/0x0004 0x0020000 14f0.1168: 0000000000950000-ffffffff8996ffff 0x0001/0x0000 0x0000000 14f0.1168: *0000000077930000-000000007792efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077931000-0000000077895fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 00000000779cc000-000000007795dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a3a000-0000000077a37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a3c000-0000000077a28fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: 0000000077a4f000-000000007794dfff 0x0001/0x0000 0x0000000 14f0.1168: *0000000077b50000-0000000077b4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077b51000-0000000077a4efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c53000-0000000077c23fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c82000-0000000077c80fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c83000-0000000077c81fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c84000-0000000077c82fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c85000-0000000077c82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c87000-0000000077c85fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c88000-0000000077c86fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c89000-0000000077c86fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8b000-0000000077c89fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8c000-0000000077c89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077c8e000-0000000077c22fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 14f0.1168: 0000000077cf9000-0000000077cf1fff 0x0001/0x0000 0x0000000 14f0.1168: *0000000077d00000-0000000077cfefff 0x0004/0x0004 0x0020000 14f0.1168: 0000000077d01000-0000000070a21fff 0x0001/0x0000 0x0000000 14f0.1168: *000000007efe0000-000000007efdafff 0x0002/0x0002 0x0040000 14f0.1168: 000000007efe5000-000000007eee9fff 0x0000/0x0002 0x0040000 14f0.1168: *000000007f0e0000-000000007e1dffff 0x0000/0x0002 0x0020000 14f0.1168: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 14f0.1168: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 14f0.1168: 000000007fff0000-ffffffffc047ffff 0x0001/0x0000 0x0000000 14f0.1168: *000000013fb60000-000000013fb5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fb61000-000000013fae0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fbe1000-000000013fba9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc18000-000000013fc0efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc21000-000000013fbe7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 14f0.1168: 000000013fc5a000-fffff80381f33fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fefd980000-000007fefd97efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd981000-000007fefd936fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9cb000-000007fefd9b4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9e1000-000007fefd9defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9e3000-000007fefd9d9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 14f0.1168: 000007fefd9ec000-000007fefb567fff 0x0001/0x0000 0x0000000 14f0.1168: *000007feffe70000-000007feffe6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll 14f0.1168: 000007feffe71000-000007fdffd31fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 14f0.1168: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000 14f0.1168: *000007fffffdd000-000007fffffdbfff 0x0004/0x0004 0x0020000 14f0.1168: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 14f0.1168: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 14f0.1168: SUPR3HardenedMain: Final process, opening VBoxDrv... 14f0.1168: Error -3738 in suplibOsInit! (enmWhat=3) 14f0.1168: VERR_SUPDRV_HARDENING_EVIL_HANDLE 14f0.1168: supR3HardNtEnableThreadCreation: 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll *pfFlags=0x0 pwszSearchPath=00000000004102b0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtguivbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtnetworkvbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtopenglvbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'comdlg32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'winmm.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtguivbox4.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qtguivbox4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devobj.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\nvinitx.dll *pfFlags=0x0 pwszSearchPath=0000000000417f90:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.; 14f0.1168: \Device\HarddiskVolume2\Windows\System32\nvinitx.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00) 14f0.1168: \Device\HarddiskVolume2\Windows\System32\nvinitx.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nvinitx.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nvinitx.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nvinitx.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000417f90:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'kernel32.dll' -> 'C:\Windows\system32\kernel32.dll' [rcNt=0xc0150008] 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077930000 'C:\Windows\system32\kernel32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd8a0000 'C:\Windows\system32\nvinitx.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=gdi32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'gdi32.dll' -> 'C:\Windows\system32\gdi32.dll' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff460000 'C:\Windows\system32\gdi32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077930000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9e00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=imm32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'imm32.dll' -> 'C:\Windows\system32\imm32.dll' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feffba0000 'C:\Windows\system32\imm32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fed9580000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa330000 'C:\Windows\system32\winmm.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=000000000041c210:C:\Windows\system32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=000000000041c210:C:\Windows\system32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=000000000041c210:C:\Windows\system32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=000000000041c210:C:\Windows\system32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=dwmapi.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'dwmapi.dll' -> 'C:\Windows\system32\dwmapi.dll' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb980000 'C:\Windows\system32\dwmapi.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=CRYPTBASE.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'CRYPTBASE.dll' -> 'C:\Windows\system32\CRYPTBASE.dll' [rcNt=0xc0150008] 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd7d0000 'C:\Windows\system32\CRYPTBASE.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe550000 'C:\Windows\system32\shell32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077930000 'C:\Windows\system32\kernel32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 2 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077a50000 'C:\Windows\system32\user32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc000000 'C:\Windows\system32\uxtheme.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077a50000 'C:\Windows\system32\user32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff460000 'C:\Windows\system32\gdi32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wintab32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 2 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\Windows\system32\wintab32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\user32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077a50000 'C:\Windows\system32\user32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=ADVAPI32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'ADVAPI32.dll' -> 'C:\Windows\system32\ADVAPI32.dll' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe1d0000 'C:\Windows\system32\ADVAPI32.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINMM.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa330000 'C:\Windows\system32\WINMM.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'ole32.dll' -> 'C:\Windows\system32\ole32.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefde90000 'C:\Windows\system32\ole32.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe490000 'API-MS-WIN-Service-Management-L1-1-0.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=rpcrt4.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'rpcrt4.dll' -> 'C:\Windows\system32\rpcrt4.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe0a0000 'C:\Windows\system32\rpcrt4.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe490000 'API-MS-WIN-Service-winsvc-L1-1-0.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=RPCRT4.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'RPCRT4.dll' -> 'C:\Windows\system32\RPCRT4.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe0a0000 'C:\Windows\system32\RPCRT4.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=MMDevAPI.DLL *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'MMDevAPI.DLL' -> 'C:\Windows\system32\MMDevAPI.DLL' [rcNt=0xc0150008] 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'propsys.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\propsys.dll) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\propsys.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefde90000 'C:\Windows\system32\ole32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=ADVAPI32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'ADVAPI32.dll' -> 'C:\Windows\system32\ADVAPI32.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe1d0000 'C:\Windows\system32\ADVAPI32.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefba50000 'C:\Windows\system32\MMDevAPI.DLL' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefde90000 'C:\Windows\system32\ole32.dll' 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'. 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=CLBCatQ.DLL *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ksuser.dll'. 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'CLBCatQ.DLL' -> 'C:\Windows\system32\CLBCatQ.DLL' [rcNt=0xc0150008] 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'avrt.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\avrt.dll) 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll) 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff850000 'C:\Windows\system32\CLBCatQ.DLL' 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MSCTF.dll *pfFlags=0x0 pwszSearchPath=0000000000695d60:C:\Windows\system32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=MMDEVAPI.DLL *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'MMDEVAPI.DLL' -> 'C:\Windows\system32\MMDEVAPI.DLL' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe2b0000 'C:\Windows\system32\MSCTF.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefba50000 'C:\Windows\system32\MMDEVAPI.DLL' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'ole32.dll' -> 'C:\Windows\system32\ole32.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefde90000 'C:\Windows\system32\ole32.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=SETUPAPI.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'SETUPAPI.dll' -> 'C:\Windows\system32\SETUPAPI.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feffc70000 'C:\Windows\system32\SETUPAPI.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=SHLWAPI.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'SHLWAPI.dll' -> 'C:\Windows\system32\SHLWAPI.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff3c0000 'C:\Windows\system32\SHLWAPI.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=ole32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'ole32.dll' -> 'C:\Windows\system32\ole32.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefde90000 'C:\Windows\system32\ole32.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=AUDIOSES.DLL *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'AUDIOSES.DLL' -> 'C:\Windows\system32\AUDIOSES.DLL' [rcNt=0xc0150008] 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef9f90000 'C:\Windows\system32\AUDIOSES.DLL' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=wdmaud.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'wdmaud.drv' -> 'C:\Windows\system32\wdmaud.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feeaab0000 'C:\Windows\system32\wdmaud.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=msacm32.drv *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'msacm32.drv' -> 'C:\Windows\system32\msacm32.drv' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb7d0000 'C:\Windows\system32\msacm32.drv' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=midimap.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'midimap.dll' -> 'C:\Windows\system32\midimap.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 14f0.1848: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'. 14f0.1848: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\midimap.dll) 14f0.1848: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1848: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1848: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa710000 'C:\Windows\system32\midimap.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=midimap.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'midimap.dll' -> 'C:\Windows\system32\midimap.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa710000 'C:\Windows\system32\midimap.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=midimap.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'midimap.dll' -> 'C:\Windows\system32\midimap.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa710000 'C:\Windows\system32\midimap.dll' 14f0.1848: supR3HardenedMonitor_LdrLoadDll: pName=midimap.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1848: supR3HardenedMonitor_LdrLoadDll: 'midimap.dll' -> 'C:\Windows\system32\midimap.dll' [rcNt=0xc0150008] 14f0.1848: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] 14f0.1848: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa710000 'C:\Windows\system32\midimap.dll' 14f0.11dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\audioses.dll *pfFlags=0x0 pwszSearchPath=00000000006aca80:C:\Windows\System32;;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.11dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 14f0.11dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef9f90000 'C:\Windows\System32\audioses.dll' 14f0.19ec: supR3HardenedMonitor_LdrLoadDll: pName=CFGMGR32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.19ec: supR3HardenedMonitor_LdrLoadDll: 'CFGMGR32.dll' -> 'C:\Windows\system32\CFGMGR32.dll' [rcNt=0xc0150008] 14f0.19ec: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] 14f0.19ec: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefda20000 'C:\Windows\system32\CFGMGR32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32.DLL *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32.DLL' -> 'C:\Windows\system32\OLEAUT32.DLL' [rcNt=0xc0150008] 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff770000 'C:\Windows\system32\OLEAUT32.DLL' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\comctl32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comctl32.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef90c0000 'C:\Windows\system32\comctl32.dll' 14f0.11dc: supR3HardenedMonitor_LdrLoadDll: pName=OLEAUT32.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.11dc: supR3HardenedMonitor_LdrLoadDll: 'OLEAUT32.dll' -> 'C:\Windows\system32\OLEAUT32.dll' [rcNt=0xc0150008] 14f0.11dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 14f0.11dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff770000 'C:\Windows\system32\OLEAUT32.dll' 14f0.1168: supR3HardenedMonitor_LdrLoadDll: pName=WINTRUST.dll *pfFlags=0x0 pwszSearchPath=0000000000641090:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32\NV;C:\Windows\system32;C:\Windows\system;C:\Windows;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\MATLAB\R2011a\runtime\win64;C:\Program Files\MATLAB\R2011a\bin;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\MATLAB\MATLAB Compiler Runtime\v711\runtime\win32;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files\OpenVPN\bin;C:\texlive\2014\bin\win32;.;;.;;.; 14f0.1168: supR3HardenedMonitor_LdrLoadDll: 'WINTRUST.dll' -> 'C:\Windows\system32\WINTRUST.dll' [rcNt=0xc0150008] 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 14f0.1168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 14f0.1168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll) 14f0.1168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 14f0.1168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' 14f0.1168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] 14f0.1168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdc10000 'C:\Windows\system32\WINTRUST.dll' 1684.1174: supR3HardenedWinDoReSpawn(2): Quitting: ExitCode=0x1 rcNt=0x0 8b4.d38: supR3HardenedWinDoReSpawn(1): Quitting: ExitCode=0x1 rcNt=0x0