Edit C:\ProgramData\CheckPoint\Logs\efrsal_flt.log
20191101 11:19:45.881 I dbc SetStoreLocation: Storage name C:\ProgramData\Checkpoint\DBStore\EFRSAL_FLT.db 20191101 11:19:45.881 I dbc SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:19:45.881 I dbc SetSalDynamicExclusionHandler: Sal Dynamic Exclusion Handler is set 20191101 11:19:45.881 I dbc StartSensor: Starting, PID=4028 20191101 11:19:45.881 W fc8 cpepmon::SystemMonitor::LogFileProcessor: LogFileProcessor - file size is invalid. GetLastError(): 0 20191101 11:19:46.006 V dbc SetSensorConfig: FltSalConfig : SetSensorConfig : start 20191101 11:19:46.006 V dbc SetSensorConfig: FltSalConfig : ResetPathExemption - code:0 20191101 11:19:46.006 V dbc SetSensorConfig: add opmask filter: res: 0 opmask: 0x00000b52 path: "C:\Windows" 20191101 11:19:46.006 V dbc SetSensorConfig: FileTypes signatures hast table if of size 21 20191101 11:19:46.006 E dbc EFRUtils::DriverInfoHelper::FillDriverDetails: DriverInfoHelper::FillDriverDetails [VolumeLtr=(null)], [DeviceName=\Device\HarddiskVolume1] 20191101 11:19:46.006 E dbc EFRUtils::DriverInfoHelper::FillDriverDetails: DriverInfoHelper::FillDriverDetails [VolumeLtr=C:\], [DeviceName=\Device\HarddiskVolume2] 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\myapp.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\hgfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prl_paravirt_32.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prl_pv32.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prleth.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prltime.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlvideo.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxguest.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxsf.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxvideo.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmhgfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmnet.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmsrvc.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmx86.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmxnet.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vpc-s3.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxcontrol.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxdisp.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxhook.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxmrxnp.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxogl.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglarrayspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglcrutil.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglerrorspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglfeedbackspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglpackspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglpassthroughspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxservice.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxtray.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\hgfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prl_paravirt_32.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prl_pv32.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prleth.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prltime.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlvideo.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxguest.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxsf.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxvideo.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmhgfs.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmmouse.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmnet.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmsrvc.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmx86.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmxnet.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vpc-s3.sys" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxcontrol.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxdisp.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxhook.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxmrxnp.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxogl.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglarrayspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglcrutil.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglerrorspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglfeedbackspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglpackspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglpassthroughspu.dll" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxservice.exe" 20191101 11:19:46.006 V dbc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxtray.exe" 20191101 11:19:46.006 V dbc SetSensorConfig: SetSensorConfig : FltSalMonitorMode : sensor config is off 20191101 11:19:46.913 V dbc ApplySalPolicy: ApplySalPolicy : newPolicyFltSalMonitorMode : NA 20191101 11:19:46.913 V dbc ApplySalPolicy: ApplySalPolicy : Staying with current config 20191101 11:20:51.200 I fb8 StopSensor: Stopping, PID=4028 20191101 11:21:46.934 I 1bcc SetStoreLocation: Storage name C:\ProgramData\Checkpoint\DBStore\EFRSAL_FLT.db 20191101 11:21:46.934 I 1bcc SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:21:46.934 I 1bcc SetSalDynamicExclusionHandler: Sal Dynamic Exclusion Handler is set 20191101 11:21:46.934 I 1bcc StartSensor: Starting, PID=6996 20191101 11:21:46.934 W 1b84 cpepmon::SystemMonitor::LogFileProcessor: LogFileProcessor - file size is invalid. GetLastError(): 0 20191101 11:21:46.965 V 1bcc SetSensorConfig: FltSalConfig : SetSensorConfig : start 20191101 11:21:46.965 V 1bcc SetSensorConfig: FltSalConfig : ResetPathExemption - code:0 20191101 11:21:46.965 V 1bcc SetSensorConfig: add opmask filter: res: 0 opmask: 0x00000b52 path: "C:\Windows" 20191101 11:21:46.965 V 1bcc SetSensorConfig: FileTypes signatures hast table if of size 21 20191101 11:21:46.965 E 1bcc EFRUtils::DriverInfoHelper::FillDriverDetails: DriverInfoHelper::FillDriverDetails [VolumeLtr=(null)], [DeviceName=\Device\HarddiskVolume1] 20191101 11:21:46.965 E 1bcc EFRUtils::DriverInfoHelper::FillDriverDetails: DriverInfoHelper::FillDriverDetails [VolumeLtr=C:\], [DeviceName=\Device\HarddiskVolume2] 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\myapp.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\hgfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prl_paravirt_32.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prl_pv32.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prleth.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prltime.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\prlvideo.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxguest.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxsf.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vboxvideo.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmhgfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmnet.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmsrvc.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmx86.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vmxnet.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\drivers\vpc-s3.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxcontrol.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxdisp.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxhook.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxmrxnp.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxogl.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglarrayspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglcrutil.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglerrorspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglfeedbackspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglpackspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxoglpassthroughspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxservice.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\system32\vboxtray.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\hgfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prl_paravirt_32.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prl_pv32.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prleth.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prltime.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\prlvideo.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxguest.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxsf.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vboxvideo.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmhgfs.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmmouse.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmnet.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmsrvc.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmx86.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vmxnet.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\drivers\vpc-s3.sys" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxcontrol.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxdisp.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxhook.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxmrxnp.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxogl.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglarrayspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglcrutil.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglerrorspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglfeedbackspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglpackspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxoglpassthroughspu.dll" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxservice.exe" 20191101 11:21:46.965 V 1bcc FltSal::DriverResetMonitoredfiles: DriverResetMonitoredfiles : SetOperationMaskForPathDriver : res : 0 opmask: 0x000003fe path: "\Device\HarddiskVolume2\windows\syswow64\vboxtray.exe" 20191101 11:21:46.965 V 1bcc SetSensorConfig: SetSensorConfig : FltSalMonitorMode : sensor config is off 20191101 11:21:47.106 V 1bcc ApplySalPolicy: ApplySalPolicy : newPolicyFltSalMonitorMode : NA 20191101 11:21:47.106 V 1bcc ApplySalPolicy: ApplySalPolicy : Staying with current config 20191101 11:36:37.140 I 1b24 StopSensor: Stopping, PID=6996
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de