We recently had a server infected with Arrow malware. The old IT staff really didn't know what they were doing and put our VPN and FTP server in the same VM....yeah, we know...we are in the process of redoing our entire infrastructure. They were also able to gain access to one of our RDS servers and install coin mining software.
We have removed the malware and secured the servers but when we were picking through files we found a vmgcoininstall.txt file. What is this? Any tips or trick for making sure things are clean? We have already done the usual clean and password roll.
Thank you!
Contents of vmgcoininstall.txt:
==============> Begin Log 2012/03/30 14:58:37
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (pre-processing) Processing install info for device ACPI\VMBUS Service name = vmbus Cleared reboot-needed flags
==============> Begin Log 2012/03/30 14:58:37
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (post-processing) Processing install info for device ACPI\VMBUS Service name = vmbus No additional processing required
==============> Begin Log 2012/03/30 14:58:43
HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown No additional processing required
==============> Begin Log 2012/03/30 14:58:43
HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown Attempting to start device driver service Service is already runnning
==============> Begin Log 2012/03/30 14:58:43
HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync No additional processing required
==============> Begin Log 2012/03/30 14:58:45
HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync Attempting to start device driver service Service is already runnning
==============> Begin Log 2012/03/30 14:58:45
HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss No additional processing required
==============> Begin Log 2012/03/30 14:58:45
HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss Attempting to start device driver service Service is already runnning
==============> Begin Log 2012/03/30 14:58:48
HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat No additional processing required
==============> Begin Log 2012/03/30 14:58:50
HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat Attempting to start device driver service Service is already runnning
==============> Begin Log 2012/03/30 14:58:53
HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt No additional processing required
==============> Begin Log 2012/03/30 14:58:53
HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt Set registry value SYSTEM\CurrentControlSet\Control\Class{4d36e967-e325-11ce-bfc1-08002be10318}\LowerFilters += storflt: 0x0 Set registry value SYSTEM\CurrentControlSet\Services\storflt\Enabled = 0x1: 0x0 Value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue exists and NO_CLOBBER specified, skipping. Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\Service = intelide: 0x0 Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}: 0x0 No additional processing required
==============> Begin Log 2012/03/30 14:58:54
HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange No additional processing required
==============> Begin Log 2012/03/30 14:58:55
HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} DIF_INSTALLDEVICE (post-processing) Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange Attempting to start device driver service Service is already runnning
==============> Begin Log 2013/08/19 22:04:02
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (pre-processing) Processing install info for device ACPI\VMBUS Service name = vmbus Cleared reboot-needed flags
==============> Begin Log 2013/08/19 22:04:02
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device ACPI\VMBUS Service name = vmbus Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\Service = intelide: 0x0 Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:04
HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync No additional processing required
==============> Begin Log 2013/08/19 22:04:05
HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync Set registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted += vmictimesync: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:07
HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown No additional processing required
==============> Begin Log 2013/08/19 22:04:07
HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown Set registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted += vmicshutdown: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:08
HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss No additional processing required
==============> Begin Log 2013/08/19 22:04:08
HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss Set registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted += vmicvss: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:08
HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt No additional processing required
==============> Begin Log 2013/08/19 22:04:09
HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt Registry value SYSTEM\CurrentControlSet\Control\Class{4d36e967-e325-11ce-bfc1-08002be10318}\LowerFilters already contains storflt Set registry value SYSTEM\CurrentControlSet\Services\storflt\Enabled = 0x1: 0x0 Get registry value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue, Type: 4, Size: 4; Error: 0x0 Set registry value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue = 0x78: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:13
HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat No additional processing required
==============> Begin Log 2013/08/19 22:04:13
HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat Set registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\ICService += vmicheartbeat: 0x0 No additional processing required
==============> Begin Log 2013/08/19 22:04:14
HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange No additional processing required
==============> Begin Log 2013/08/19 22:04:14
HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange Set registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted += vmickvpexchange: 0x0 No additional processing required
==============> Begin Log 2017/04/08 23:02:40
HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown No additional processing required
==============> Begin Log 2017/04/08 23:02:40
HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmicshutdown No additional processing required
==============> Begin Log 2017/04/08 23:02:52
HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange No additional processing required
==============> Begin Log 2017/04/08 23:02:53
HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmickvpexchange No additional processing required
==============> Begin Log 2017/04/08 23:02:55
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (pre-processing) Processing install info for device ACPI\VMBUS Service name = vmbus Cleared reboot-needed flags
==============> Begin Log 2017/04/08 23:03:00
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device ACPI\VMBUS Service name = vmbus Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\Service = intelide: 0x0 Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}: 0x0 No additional processing required
==============> Begin Log 2017/04/08 23:03:01
HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync No additional processing required
==============> Begin Log 2017/04/08 23:03:02
HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted already contains vmictimesync No additional processing required
==============> Begin Log 2017/04/08 23:03:03
HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss No additional processing required
==============> Begin Log 2017/04/08 23:03:03
HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmicvss No additional processing required
==============> Begin Log 2017/04/08 23:03:04
HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat No additional processing required
==============> Begin Log 2017/04/08 23:03:04
HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\ICService already contains vmicheartbeat No additional processing required
==============> Begin Log 2017/04/08 23:03:06
HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt No additional processing required
==============> Begin Log 2017/04/08 23:03:06
HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt Registry value SYSTEM\CurrentControlSet\Control\Class{4d36e967-e325-11ce-bfc1-08002be10318}\LowerFilters already contains storflt Set registry value SYSTEM\CurrentControlSet\Services\storflt\Enabled = 0x1: 0x0 Get registry value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue, Type: 4, Size: 4; Error: 0x0 INCREASE_TO_AT_LEAST used, but value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue exists(120) and is not less than specified(120), skipping... No additional processing required
==============> Begin Log 2018/03/17 20:07:19
HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange No additional processing required
==============> Begin Log 2018/03/17 20:07:20
HardwareId = VMBUS{a9a0f4e7-5a45-4d96-b827-8a841e8c03e6} HardwareId = VMBUS{242ff919-07db-4180-9c2e-b86cb68c8c55} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{242ff919-07db-4180-9c2e-b86cb68c8c55} Service name = vmickvpexchange Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmickvpexchange No additional processing required
==============> Begin Log 2018/03/17 20:07:21
HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss No additional processing required
==============> Begin Log 2018/03/17 20:07:22
HardwareId = VMBUS{35fa2e29-ea23-4236-96ae-3a6ebacba440} HardwareId = VMBUS{2450ee40-33bf-4fbd-892e-9fb06e9214cf} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2450ee40-33bf-4fbd-892e-9fb06e9214cf} Service name = vmicvss Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmicvss No additional processing required
==============> Begin Log 2018/03/17 20:07:30
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (pre-processing) Processing install info for device ACPI\VMBUS Service name = vmbus Cleared reboot-needed flags
==============> Begin Log 2018/03/17 20:07:36
HardwareId = ACPI\VMBus HardwareId = *VMBus DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device ACPI\VMBUS Service name = vmbus Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\Service = intelide: 0x0 Set registry value SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#VEN_8086&CC_0101\ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}: 0x0 No additional processing required
==============> Begin Log 2018/03/17 20:07:38
HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync No additional processing required
==============> Begin Log 2018/03/17 20:07:39
HardwareId = VMBUS{9527e630-d0ae-497b-adce-e80ab0175caf} HardwareId = VMBUS{2dd1ce17-079e-403c-b352-a1921ee207ee} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{2dd1ce17-079e-403c-b352-a1921ee207ee} Service name = vmictimesync Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted already contains vmictimesync No additional processing required
==============> Begin Log 2018/03/17 20:07:40
HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat No additional processing required
==============> Begin Log 2018/03/17 20:07:41
HardwareId = VMBUS{57164f39-9115-4e78-ab55-382f3bd5422d} HardwareId = VMBUS{fd149e91-82e0-4a7d-afa6-2a4166cbd7c0} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{57164f39-9115-4e78-ab55-382f3bd5422d} Service name = vmicheartbeat Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\ICService already contains vmicheartbeat No additional processing required
==============> Begin Log 2018/03/17 20:07:55
HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt No additional processing required
==============> Begin Log 2018/03/17 20:08:01
HardwareId = VMBUS{32412632-86cb-44a2-9b5c-50d1417354f5} HardwareId = VMBUS{00000000-0000-8899-0000-000000000000} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{32412632-86cb-44a2-9b5c-50d1417354f5} Service name = storflt Registry value SYSTEM\CurrentControlSet\Control\Class{4d36e967-e325-11ce-bfc1-08002be10318}\LowerFilters already contains storflt Set registry value SYSTEM\CurrentControlSet\Services\storflt\Enabled = 0x1: 0x0 Get registry value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue, Type: 4, Size: 4; Error: 0x0 INCREASE_TO_AT_LEAST used, but value SYSTEM\CurrentControlSet\Services\disk\TimeoutValue exists(120) and is not less than specified(120), skipping... No additional processing required
==============> Begin Log 2018/03/17 20:08:04
HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} DIF_INSTALLDEVICE (pre-processing) Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown No additional processing required
==============> Begin Log 2018/03/17 20:08:04
HardwareId = VMBUS{0e0b6031-5213-4934-818b-38d90ced39db} HardwareId = VMBUS{b6650ff7-33bc-4840-8048-e0676786f393} DIF_INSTALLDEVICE (post-processing): InstallResult=0x0 Processing install info for device vmbus{b6650ff7-33bc-4840-8048-e0676786f393} Service name = vmicshutdown Registry value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted already contains vmicshutdown No additional processing required