S2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe run options=01100010040000000000000000000000 sourceguid=C78087A8-C960-4464-A618-3D351DF6C0D7
C:\Program Files\004
C:\ProgramData\pdfdoc2.dll
C:\Users\MSI\AppData\Local\Temp\nsz963.tmp.exe
S1 qknfd; system32\drivers\qknfd.sys [X]
c:\windows\system32\drivers\qknfd.sys