Scan OTL

marianna -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour,

J'ai fait un scan avec OTL je l'ai posté sur le lien indiqué.. c'est quoi la suite des évènements?

Quelqu'un peut m'aider à supprimer mon virus pourri qui est censé prendre tous mes coordonnées bancaires svp ?

Merci d'avance

Marianna

12 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Donne le lien du rapport :)
    0
    1. marianna
       
      OTL Extras logfile created on: 12/03/2011 20:27:47 - Run 1
      OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Grenouille\Desktop
      Starter Edition (Version = 6.1.7600) - Type = NTWorkstation
      Internet Explorer (Version = 8.0.7600.16385)
      Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

      1 013,00 Mb Total Physical Memory | 190,00 Mb Available Physical Memory | 19,00% Memory free
      2,00 Gb Paging File | 1,00 Gb Available in Paging File | 48,00% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
      Drive C: | 116,44 Gb Total Space | 83,74 Gb Free Space | 71,91% Space Free | Partition Type: NTFS
      Drive D: | 116,05 Gb Total Space | 110,22 Gb Free Space | 94,97% Space Free | Partition Type: NTFS

      Computer Name: MARIANNANA | User Name: Grenouille | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: Current user
      Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

      [color=#E56717]========== Extra Registry (SafeList) ==========[/color]


      [color=#E56717]========== File Associations ==========[/color]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
      .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
      .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

      [color=#E56717]========== Shell Spawning ==========[/color]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
      batfile [open] -- "%1" %*
      cmdfile [open] -- "%1" %*
      comfile [open] -- "%1" %*
      cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
      exefile [open] -- "%1" %*
      helpfile [open] -- Reg Error: Key error.
      hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
      htmlfile [edit] -- "C:\ProgramESC\Microsoft Office 2007\Office12\msohtmed.exe" %1 (Microsoft Corporation)
      htmlfile [print] -- "C:\ProgramESC\Microsoft Office 2007\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
      inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
      piffile [open] -- "%1" %*
      regfile [merge] -- Reg Error: Key error.
      scrfile [config] -- "%1"
      scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
      scrfile [open] -- "%1" /S
      txtfile [edit] -- Reg Error: Key error.
      Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
      Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
      Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
      Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
      Directory [OneNote.Open] -- C:\PROGRA~1\MIF5BA~1\Office12\ONENOTE.EXE "%L"
      Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
      Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
      Folder [explore] -- Reg Error: Value error.
      Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

      [color=#E56717]========== Security Center Settings ==========[/color]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
      "cval" = 1

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
      "VistaSp1" = Reg Error: Unknown registry data type -- File not found
      "AntiVirusOverride" = 0
      "AntiSpywareOverride" = 0
      "FirewallOverride" = 0

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

      [color=#E56717]========== Firewall Settings ==========[/color]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
      "DisableNotifications" = 0
      "EnableFirewall" = 1

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
      "DisableNotifications" = 0
      "EnableFirewall" = 1

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
      "DisableNotifications" = 0
      "EnableFirewall" = 1

      [color=#E56717]========== Authorized Applications List ==========[/color]


      [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
      "{07766F89-EFAA-4635-86B7-636B89EA2C0D}" = Bing Bar Platform
      "{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Barre d'outils Bing
      "{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack
      "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
      "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
      "{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
      "{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
      "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
      "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
      "{1C84AB70-7851-D03E-14B0-2CE969DD6CBA}" = Photo Service - powered by myphotobook
      "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
      "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
      "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
      "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
      "{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
      "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
      "{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14
      "{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
      "{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
      "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
      "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
      "{3A9B3B6D-3C08-4283-AF50-FD82C49DD71E}" = TOSHIBA TEMPRO
      "{3B160861-7250-451E-B5EE-8B92BF30A710}" = Microsoft Works
      "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
      "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
      "{3F62782D-2798-4540-B493-F6472197900E}" = Microsoft Search Enhancement Pack
      "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
      "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
      "{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
      "{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
      "{53536479-DFB0-47ED-9D10-43F3708C222D}" = TOSHIBA eco Utility
      "{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
      "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
      "{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application
      "{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
      "{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
      "{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
      "{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
      "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
      "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
      "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
      "{6B81F4D9-A640-4081-A01D-7CB37F5DF4A4}" = TOSHIBA Bulletin Board
      "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
      "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
      "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
      "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
      "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
      "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
      "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
      "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later
      "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
      "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
      "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
      "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
      "{90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
      "{90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
      "{90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
      "{90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
      "{90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
      "{90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
      "{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0401-0000-0000000FF1CE}_VISPRO_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0401-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
      "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0407-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0407-0000-0000000FF1CE}_VISPRO_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
      "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0409-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0409-0000-0000000FF1CE}_VISPRO_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
      "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-040C-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-040C-0000-0000000FF1CE}_VISPRO_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
      "{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0413-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0413-0000-0000000FF1CE}_VISPRO_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
      "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-001F-0C0A-0000-0000000FF1CE}_VISPRO_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
      "{90120000-001F-0C0A-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007
      "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
      "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
      "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
      "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
      "{90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-0051-0000-0000-0000000FF1CE}" = Microsoft Office Visio Professional 2007
      "{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{0FD405D3-CAF8-4CA6-8BFD-911D2F8A6585}" = Microsoft Office Visio 2007 Service Pack 2 (SP2)
      "{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
      "{90120000-0054-040C-0000-0000000FF1CE}" = Microsoft Office Visio MUI (French) 2007
      "{90120000-0054-040C-0000-0000000FF1CE}_VISPRO_{7EC87B94-B9A7-4C72-9C55-21C1C9DEE3C5}" = Microsoft Office Visio 2007 Service Pack 2 (SP2)
      "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
      "{90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-006E-040C-0000-0000000FF1CE}_VISPRO_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-006E-040C-0000-0000000FF1CE}_VISPRO_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2007
      "{90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{90120000-00BA-040C-0000-0000000FF1CE}" = Microsoft Office Groove MUI (French) 2007
      "{90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{9DE3F0B9-F2D1-4EEE-B3B6-CAFB7C17FA4A}" =
      "{90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
      "{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}" = Toshiba Manuals
      "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
      "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
      "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
      "{921F22A4-290B-4B6C-9E8E-B50B58F18ED0}" = TOSHIBA ReelTime
      "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
      "{94A90C69-71C1-470A-88F5-AA47ECC96B40}" = TOSHIBA HDD Protection
      "{95120000-00AF-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (French)
      "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
      "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
      "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
      "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
      "{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor
      "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
      "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
      "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
      "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
      "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
      "{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = Mobile Partner Manager
      "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
      "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
      "{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
      "{AC76BA86-7AD7-1036-7B44-A91000000001}" = Adobe Reader 9.1 - Français
      "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
      "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
      "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
      "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
      "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
      "{CCF62642-ECB1-4D2B-80C0-3FD3286AEAED}" = Utilitaire de synchronisation TOSHIBA
      "{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
      "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
      "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
      "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
      "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
      "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
      "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
      "{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}" = TOSHIBA USB Sleep and Charge Utility
      "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
      "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype(TM) 5.0
      "{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
      "{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
      "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
      "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
      "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
      "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
      "{F3529665-D75E-4D6D-98F0-745C78C68E9B}" = TOSHIBA ConfigFree
      "{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
      "{FCFBA290-CB48-4AF1-A241-2685AEDEDD66}" = Windows Live Family Safety
      "{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
      "Adobe AIR" = Adobe AIR
      "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
      "avast" = avast! Free Antivirus
      "CCleaner" = CCleaner
      "ENTERPRISE" = Microsoft Office Enterprise 2007
      "eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1" = Photo Service - powered by myphotobook
      "HDMI" = Intel(R) Graphics Media Accelerator Driver
      "HOMESTUDENTR" = Microsoft Office Home and Student 2007
      "InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Mot de passe responsable
      "InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
      "InstallShield_{53536479-DFB0-47ED-9D10-43F3708C222D}" = TOSHIBA eco Utility
      "InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
      "InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
      "InstallShield_{6B81F4D9-A640-4081-A01D-7CB37F5DF4A4}" = TOSHIBA Bulletin Board
      "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
      "InstallShield_{921F22A4-290B-4B6C-9E8E-B50B58F18ED0}" = TOSHIBA ReelTime
      "InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
      "InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
      "InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
      "Le Sphinx" = Le Sphinx
      "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
      "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
      "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
      "StarterBackgroundChanger" = StarterBackgroundChanger
      "SynTPDeinstKey" = Synaptics Pointing Device Driver
      "VISPRO" = Microsoft Office Visio Professional 2007
      "VLC media player" = VLC media player 1.0.5
      "WildTangent toshiba Master Uninstall" = Jeux WildTangent
      "WinLiveSuite" = Windows Live
      "YesMessenger_is1" = YesMessenger 2.5.01

      [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
      "CopyTrans Suite" = CopyTrans Suite désinstallation uniquement
      "Google Chrome" = Google Chrome

      [color=#E56717]========== Last 10 Event Log Errors ==========[/color]

      [ Application Events ]
      Error - 09/03/2011 13:04:25 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Nom du module défaillant : UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Code d'exception : 0xc0000417 Décalage d'erreur : 0x00002b58 ID du processus
      défaillant : 0x100c Heure de début de l'application défaillante : 0x01cbde7c075b9c0d
      Chemin
      d'accès de l'application défaillante : C:\Program Files\Mobile Partner Manager\UIExec.exe
      Chemin
      d'accès du module défaillant: C:\Program Files\Mobile Partner Manager\UIExec.exe
      ID
      de rapport : 489c98b7-4a6f-11e0-9003-af748d3c1e5d

      Error - 09/03/2011 16:53:31 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante AssistantServices.exe, version :
      0.0.0.0, horodatage : 0x4c3faf20 Nom du module défaillant : AssistantServices.exe,
      version : 0.0.0.0, horodatage : 0x4c3faf20 Code d'exception : 0xc0000417 Décalage
      d'erreur : 0x0000ee9a ID du processus défaillant : 0xb48 Heure de début de l'application
      défaillante : 0x01cbde9c0384b9e8 Chemin d'accès de l'application défaillante : C:\Program
      Files\Mobile Partner Manager\AssistantServices.exe Chemin d'accès du module défaillant:
      C:\Program Files\Mobile Partner Manager\AssistantServices.exe ID de rapport : 4a494694-4a8f-11e0-923a-e9831e83835b

      Error - 09/03/2011 16:54:01 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Nom du module défaillant : UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Code d'exception : 0xc0000417 Décalage d'erreur : 0x00002b58 ID du processus
      défaillant : 0xb48 Heure de début de l'application défaillante : 0x01cbde9c1a399a45
      Chemin
      d'accès de l'application défaillante : C:\Program Files\Mobile Partner Manager\UIExec.exe
      Chemin
      d'accès du module défaillant: C:\Program Files\Mobile Partner Manager\UIExec.exe
      ID
      de rapport : 5c04a6bf-4a8f-11e0-923a-e9831e83835b

      Error - 10/03/2011 02:15:55 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante AssistantServices.exe, version :
      0.0.0.0, horodatage : 0x4c3faf20 Nom du module défaillant : AssistantServices.exe,
      version : 0.0.0.0, horodatage : 0x4c3faf20 Code d'exception : 0xc0000417 Décalage
      d'erreur : 0x0000ee9a ID du processus défaillant : 0xb2c Heure de début de l'application
      défaillante : 0x01cbdeea9439fed3 Chemin d'accès de l'application défaillante : C:\Program
      Files\Mobile Partner Manager\AssistantServices.exe Chemin d'accès du module défaillant:
      C:\Program Files\Mobile Partner Manager\AssistantServices.exe ID de rapport : daf9c8bf-4add-11e0-a54b-b581dc96585c

      Error - 10/03/2011 02:16:24 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Nom du module défaillant : UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Code d'exception : 0xc0000417 Décalage d'erreur : 0x00002b58 ID du processus
      défaillant : 0x102c Heure de début de l'application défaillante : 0x01cbdeeaab553a5c
      Chemin
      d'accès de l'application défaillante : C:\Program Files\Mobile Partner Manager\UIExec.exe
      Chemin
      d'accès du module défaillant: C:\Program Files\Mobile Partner Manager\UIExec.exe
      ID
      de rapport : ec7c07e3-4add-11e0-a54b-b581dc96585c

      Error - 10/03/2011 13:31:51 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante AssistantServices.exe, version :
      0.0.0.0, horodatage : 0x4c3faf20 Nom du module défaillant : AssistantServices.exe,
      version : 0.0.0.0, horodatage : 0x4c3faf20 Code d'exception : 0xc0000417 Décalage
      d'erreur : 0x0000ee9a ID du processus défaillant : 0xb40 Heure de début de l'application
      défaillante : 0x01cbdf49017c7e7a Chemin d'accès de l'application défaillante : C:\Program
      Files\Mobile Partner Manager\AssistantServices.exe Chemin d'accès du module défaillant:
      C:\Program Files\Mobile Partner Manager\AssistantServices.exe ID de rapport : 48410b26-4b3c-11e0-bf04-d89d4aeb1f5d

      Error - 10/03/2011 13:32:20 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Nom du module défaillant : UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Code d'exception : 0xc0000417 Décalage d'erreur : 0x00002b58 ID du processus
      défaillant : 0xbb8 Heure de début de l'application défaillante : 0x01cbdf4917115856
      Chemin
      d'accès de l'application défaillante : C:\Program Files\Mobile Partner Manager\UIExec.exe
      Chemin
      d'accès du module défaillant: C:\Program Files\Mobile Partner Manager\UIExec.exe
      ID
      de rapport : 597e4262-4b3c-11e0-bf04-c42e0b53a459

      Error - 10/03/2011 13:47:20 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante AssistantServices.exe, version :
      0.0.0.0, horodatage : 0x4c3faf20 Nom du module défaillant : AssistantServices.exe,
      version : 0.0.0.0, horodatage : 0x4c3faf20 Code d'exception : 0xc0000417 Décalage
      d'erreur : 0x0000ee9a ID du processus défaillant : 0xa14 Heure de début de l'application
      défaillante : 0x01cbdf4b2a240aae Chemin d'accès de l'application défaillante : C:\Program
      Files\Mobile Partner Manager\AssistantServices.exe Chemin d'accès du module défaillant:
      C:\Program Files\Mobile Partner Manager\AssistantServices.exe ID de rapport : 7219477d-4b3e-11e0-8c1e-c01fedb7cd5f

      Error - 10/03/2011 13:48:24 | Computer Name = Mariannana | Source = Application Error | ID = 1000
      Description = Nom de l'application défaillante UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Nom du module défaillant : UIExec.exe, version : 0.0.0.0, horodatage
      : 0x4c3faefc Code d'exception : 0xc0000417 Décalage d'erreur : 0x00002b58 ID du processus
      défaillant : 0x9a8 Heure de début de l'application défaillante : 0x01cbdf4b5758b552
      Chemin
      d'accès de l'application défaillante : C:\Program Files\Mobile Partner Manager\UIExec.exe
      Chemin
      d'accès du module défaillant: C:\Program Files\Mobile Partner Manager\UIExec.exe
      ID
      de rapport : 97f311a9-4b3e-11e0-8c1e-c01fedb7cd5f

      Error - 10/03/2011 14:12:28 | Computer Name = Mariannana | Source = Bonjour Service | ID = 100
      Description = Task Scheduling Error: Continuously busy for more than a second

      [ System Events ]
      Error - 02/11/2010 10:52:05 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7026
      Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
      charger : cdrom

      Error - 02/11/2010 13:35:11 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7000
      Description = Le service McAfee Real-time Scanner n'a pas pu démarrer en raison
      de l'erreur : %%2

      Error - 02/11/2010 13:35:14 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7023
      Description = Le service Publication des ressources de découverte de fonctions s'est
      arrêté avec l'erreur : %%-2147014847

      Error - 02/11/2010 13:35:17 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7026
      Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
      charger : cdrom

      Error - 02/11/2010 14:45:46 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7000
      Description = Le service McAfee Real-time Scanner n'a pas pu démarrer en raison
      de l'erreur : %%2

      Error - 02/11/2010 14:45:50 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7026
      Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
      charger : cdrom

      Error - 03/11/2010 02:26:06 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7000
      Description = Le service McAfee Real-time Scanner n'a pas pu démarrer en raison
      de l'erreur : %%2

      Error - 03/11/2010 02:26:12 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7026
      Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
      charger : cdrom

      Error - 03/11/2010 15:42:27 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7000
      Description = Le service McAfee Real-time Scanner n'a pas pu démarrer en raison
      de l'erreur : %%2

      Error - 03/11/2010 15:42:33 | Computer Name = Mariannana | Source = Service Control Manager | ID = 7026
      Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
      charger : cdrom


      < End of report >
      0
    2. marianna
       
      Voila mon rapport.
      J'ai fait tout ce qu'il y avait marqué et le virus est toujours la avast me detecte toujours le fameux MBR Physicaldrive0 ! Je ne sais plus quoi faire avec mon net book :(
      0
  2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Faiis ça :

    Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
    Poste le rapport ici.

    ensuite :

    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
    !!! Malwarebyte doit être à jour avant de faire le scan !!!

    ensuite :

    Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

    * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
    (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

    * Lance OTL
    * Sous Peronnalisation, copie-colle ce qu'il y a dans le cadre ci-dessous :
    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    %ALLUSERSPROFILE\%Application Data\*.
    %ALLUSERSPROFILE%\Application Data\*.exe /s
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %temp%\.exe /s
    %SYSTEMDRIVE%\*.exe
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    /md5start
    explorer.exe
    winlogon.exe
    wininit.exe
    /md5stop
    CREATERESTOREPOINT
    nslookup www.google.fr /c
    * Clique sur le bouton Analyse.
    * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports.
    Donnes le liens pjjoint ici ensuite pour pouvoir être consultés.

    0
  3. marianna
     
    Voici mon rapport après TDS Killer

    2011/03/13 08:15:19.0563 5572 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
    2011/03/13 08:15:19.0962 5572 ================================================================================
    2011/03/13 08:15:19.0962 5572 SystemInfo:
    2011/03/13 08:15:19.0962 5572
    2011/03/13 08:15:19.0962 5572 OS Version: 6.1.7600 ServicePack: 0.0
    2011/03/13 08:15:19.0962 5572 Product type: Workstation
    2011/03/13 08:15:19.0962 5572 ComputerName: MARIANNANA
    2011/03/13 08:15:19.0962 5572 UserName: Grenouille
    2011/03/13 08:15:19.0962 5572 Windows directory: C:\Windows
    2011/03/13 08:15:19.0962 5572 System windows directory: C:\Windows
    2011/03/13 08:15:19.0962 5572 Processor architecture: Intel x86
    2011/03/13 08:15:19.0962 5572 Number of processors: 2
    2011/03/13 08:15:19.0962 5572 Page size: 0x1000
    2011/03/13 08:15:19.0962 5572 Boot type: Normal boot
    2011/03/13 08:15:19.0962 5572 ================================================================================
    2011/03/13 08:15:20.0728 5572 Initialize success
    2011/03/13 08:15:26.0103 3884 ================================================================================
    2011/03/13 08:15:26.0104 3884 Scan started
    2011/03/13 08:15:26.0104 3884 Mode: Manual;
    2011/03/13 08:15:26.0104 3884 ================================================================================
    2011/03/13 08:15:27.0118 3884 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    2011/03/13 08:15:27.0559 3884 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    2011/03/13 08:15:27.0957 3884 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    2011/03/13 08:15:32.0627 3884 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    2011/03/13 08:15:33.0409 3884 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    2011/03/13 08:15:33.0978 3884 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    2011/03/13 08:15:34.0595 3884 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
    2011/03/13 08:15:34.0963 3884 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    2011/03/13 08:15:35.0362 3884 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    2011/03/13 08:15:35.0752 3884 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    2011/03/13 08:15:36.0187 3884 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    2011/03/13 08:15:36.0554 3884 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    2011/03/13 08:15:36.0911 3884 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    2011/03/13 08:15:37.0309 3884 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    2011/03/13 08:15:37.0692 3884 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
    2011/03/13 08:15:38.0087 3884 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    2011/03/13 08:15:38.0541 3884 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
    2011/03/13 08:15:38.0898 3884 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    2011/03/13 08:15:39.0356 3884 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    2011/03/13 08:15:39.0713 3884 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    2011/03/13 08:15:40.0100 3884 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\Windows\system32\drivers\aswFsBlk.sys
    2011/03/13 08:15:40.0524 3884 aswMonFlt (b0f137f664f10829cd2380b0e20e7c29) C:\Windows\system32\drivers\aswMonFlt.sys
    2011/03/13 08:15:40.0915 3884 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\Windows\system32\drivers\aswRdr.sys
    2011/03/13 08:15:41.0351 3884 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\Windows\system32\drivers\aswSnx.sys
    2011/03/13 08:15:41.0719 3884 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\Windows\system32\drivers\aswSP.sys
    2011/03/13 08:15:42.0156 3884 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\Windows\system32\drivers\aswTdi.sys
    2011/03/13 08:15:42.0526 3884 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    2011/03/13 08:15:42.0879 3884 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    2011/03/13 08:15:43.0246 3884 athr (0f4b6b99d6cdc1d93df1fa690796b2f7) C:\Windows\system32\DRIVERS\athr.sys
    2011/03/13 08:15:43.0972 3884 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    2011/03/13 08:15:44.0401 3884 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    2011/03/13 08:15:44.0957 3884 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    2011/03/13 08:15:45.0390 3884 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    2011/03/13 08:15:45.0980 3884 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
    2011/03/13 08:15:46.0635 3884 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    2011/03/13 08:15:47.0469 3884 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    2011/03/13 08:15:47.0927 3884 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    2011/03/13 08:15:48.0568 3884 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    2011/03/13 08:15:48.0957 3884 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    2011/03/13 08:15:49.0801 3884 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    2011/03/13 08:15:50.0169 3884 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    2011/03/13 08:15:50.0614 3884 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    2011/03/13 08:15:51.0028 3884 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    2011/03/13 08:15:51.0428 3884 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    2011/03/13 08:15:51.0722 3884 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    2011/03/13 08:15:52.0132 3884 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    2011/03/13 08:15:52.0476 3884 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    2011/03/13 08:15:52.0940 3884 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    2011/03/13 08:15:53.0329 3884 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    2011/03/13 08:15:53.0741 3884 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    2011/03/13 08:15:54.0140 3884 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    2011/03/13 08:15:54.0610 3884 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
    2011/03/13 08:15:54.0988 3884 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    2011/03/13 08:15:55.0401 3884 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    2011/03/13 08:15:55.0834 3884 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    2011/03/13 08:15:56.0195 3884 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    2011/03/13 08:15:56.0674 3884 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    2011/03/13 08:15:57.0132 3884 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    2011/03/13 08:15:57.0638 3884 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    2011/03/13 08:15:58.0245 3884 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    2011/03/13 08:15:58.0988 3884 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    2011/03/13 08:15:59.0612 3884 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    2011/03/13 08:16:00.0309 3884 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    2011/03/13 08:16:01.0460 3884 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    2011/03/13 08:16:02.0327 3884 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    2011/03/13 08:16:03.0159 3884 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    2011/03/13 08:16:03.0976 3884 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    2011/03/13 08:16:04.0760 3884 fssfltr (8e307583e6b45f1accf762fe22a61c0d) C:\Windows\system32\DRIVERS\fssfltr.sys
    2011/03/13 08:16:05.0544 3884 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    2011/03/13 08:16:06.0793 3884 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    2011/03/13 08:16:07.0782 3884 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    2011/03/13 08:16:08.0859 3884 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    2011/03/13 08:16:09.0762 3884 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
    2011/03/13 08:16:10.0683 3884 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    2011/03/13 08:16:11.0568 3884 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    2011/03/13 08:16:12.0445 3884 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    2011/03/13 08:16:13.0451 3884 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    2011/03/13 08:16:14.0466 3884 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    2011/03/13 08:16:15.0521 3884 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    2011/03/13 08:16:16.0355 3884 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    2011/03/13 08:16:17.0048 3884 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    2011/03/13 08:16:17.0496 3884 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    2011/03/13 08:16:18.0237 3884 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
    2011/03/13 08:16:19.0131 3884 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
    2011/03/13 08:16:20.0273 3884 igfx (e21a74a91f7aa3bb2e985c4cddca63f2) C:\Windows\system32\DRIVERS\igdkmd32.sys
    2011/03/13 08:16:20.0893 3884 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    2011/03/13 08:16:21.0822 3884 IntcAzAudAddService (0a0e3c041c20c4175e1cc6580138ca38) C:\Windows\system32\drivers\RTKVHDA.sys
    2011/03/13 08:16:22.0448 3884 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    2011/03/13 08:16:22.0895 3884 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    2011/03/13 08:16:23.0540 3884 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    2011/03/13 08:16:24.0441 3884 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    2011/03/13 08:16:25.0189 3884 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    2011/03/13 08:16:25.0599 3884 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    2011/03/13 08:16:26.0009 3884 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    2011/03/13 08:16:26.0365 3884 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    2011/03/13 08:16:26.0769 3884 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    2011/03/13 08:16:27.0124 3884 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    2011/03/13 08:16:27.0586 3884 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    2011/03/13 08:16:27.0938 3884 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    2011/03/13 08:16:28.0344 3884 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    2011/03/13 08:16:28.0765 3884 LPCFilter (6adab14d7ad12b35bdc665b35278099b) C:\Windows\system32\DRIVERS\LPCFilter.sys
    2011/03/13 08:16:29.0149 3884 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    2011/03/13 08:16:29.0507 3884 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    2011/03/13 08:16:29.0866 3884 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    2011/03/13 08:16:30.0242 3884 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    2011/03/13 08:16:30.0610 3884 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    2011/03/13 08:16:31.0423 3884 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    2011/03/13 08:16:31.0798 3884 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    2011/03/13 08:16:32.0183 3884 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    2011/03/13 08:16:32.0562 3884 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    2011/03/13 08:16:32.0935 3884 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    2011/03/13 08:16:33.0331 3884 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    2011/03/13 08:16:33.0910 3884 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    2011/03/13 08:16:34.0535 3884 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    2011/03/13 08:16:34.0904 3884 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    2011/03/13 08:16:35.0428 3884 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    2011/03/13 08:16:35.0808 3884 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys
    2011/03/13 08:16:36.0197 3884 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    2011/03/13 08:16:36.0573 3884 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    2011/03/13 08:16:36.0937 3884 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    2011/03/13 08:16:37.0284 3884 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    2011/03/13 08:16:37.0726 3884 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    2011/03/13 08:16:38.0071 3884 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    2011/03/13 08:16:38.0471 3884 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    2011/03/13 08:16:38.0898 3884 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    2011/03/13 08:16:39.0309 3884 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    2011/03/13 08:16:39.0698 3884 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    2011/03/13 08:16:40.0058 3884 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    2011/03/13 08:16:40.0453 3884 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    2011/03/13 08:16:40.0848 3884 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    2011/03/13 08:16:41.0204 3884 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    2011/03/13 08:16:41.0583 3884 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    2011/03/13 08:16:42.0749 3884 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    2011/03/13 08:16:43.0683 3884 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    2011/03/13 08:16:44.0177 3884 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    2011/03/13 08:16:44.0711 3884 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    2011/03/13 08:16:45.0175 3884 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    2011/03/13 08:16:45.0835 3884 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    2011/03/13 08:16:47.0049 3884 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    2011/03/13 08:16:47.0773 3884 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    2011/03/13 08:16:48.0554 3884 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
    2011/03/13 08:16:49.0284 3884 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    2011/03/13 08:16:49.0903 3884 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    2011/03/13 08:16:50.0542 3884 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    2011/03/13 08:16:50.0999 3884 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
    2011/03/13 08:16:51.0367 3884 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    2011/03/13 08:16:51.0716 3884 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
    2011/03/13 08:16:52.0074 3884 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
    2011/03/13 08:16:52.0498 3884 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    2011/03/13 08:16:52.0859 3884 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    2011/03/13 08:16:53.0265 3884 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    2011/03/13 08:16:53.0740 3884 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    2011/03/13 08:16:54.0108 3884 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    2011/03/13 08:16:54.0505 3884 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    2011/03/13 08:16:54.0901 3884 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    2011/03/13 08:16:55.0274 3884 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    2011/03/13 08:16:55.0640 3884 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    2011/03/13 08:16:56.0243 3884 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    2011/03/13 08:16:56.0800 3884 PGEffect (1b5011dd8d57f53aed31ff0f7d635802) C:\Windows\system32\DRIVERS\pgeffect.sys
    2011/03/13 08:16:57.0312 3884 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    2011/03/13 08:16:57.0720 3884 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    2011/03/13 08:16:58.0144 3884 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    2011/03/13 08:16:58.0609 3884 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    2011/03/13 08:16:58.0986 3884 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    2011/03/13 08:16:59.0355 3884 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    2011/03/13 08:16:59.0699 3884 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    2011/03/13 08:17:00.0278 3884 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    2011/03/13 08:17:01.0188 3884 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    2011/03/13 08:17:02.0035 3884 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    2011/03/13 08:17:03.0104 3884 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    2011/03/13 08:17:04.0464 3884 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    2011/03/13 08:17:05.0231 3884 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    2011/03/13 08:17:06.0210 3884 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    2011/03/13 08:17:07.0610 3884 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    2011/03/13 08:17:08.0319 3884 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    2011/03/13 08:17:09.0116 3884 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    2011/03/13 08:17:09.0716 3884 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    2011/03/13 08:17:10.0951 3884 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    2011/03/13 08:17:12.0025 3884 RSUSBSTOR (ef8b2afc3c0751c5e5a59983c8893260) C:\Windows\system32\Drivers\RtsUStor.sys
    2011/03/13 08:17:12.0410 3884 RTL8167 (bcebd5d1aabce4efb7597635e347c44b) C:\Windows\system32\DRIVERS\Rt86win7.sys
    2011/03/13 08:17:13.0254 3884 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    2011/03/13 08:17:13.0834 3884 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    2011/03/13 08:17:14.0288 3884 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
    2011/03/13 08:17:14.0678 3884 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    2011/03/13 08:17:15.0062 3884 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
    2011/03/13 08:17:15.0427 3884 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    2011/03/13 08:17:15.0951 3884 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
    2011/03/13 08:17:16.0294 3884 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
    2011/03/13 08:17:16.0805 3884 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
    2011/03/13 08:17:17.0239 3884 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    2011/03/13 08:17:18.0063 3884 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    2011/03/13 08:17:19.0474 3884 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    2011/03/13 08:17:20.0608 3884 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    2011/03/13 08:17:21.0634 3884 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    2011/03/13 08:17:22.0456 3884 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    2011/03/13 08:17:23.0366 3884 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\Windows\system32\DRIVERS\srv.sys
    2011/03/13 08:17:24.0095 3884 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\Windows\system32\DRIVERS\srv2.sys
    2011/03/13 08:17:24.0747 3884 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\Windows\system32\DRIVERS\srvnet.sys
    2011/03/13 08:17:25.0574 3884 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    2011/03/13 08:17:26.0287 3884 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    2011/03/13 08:17:26.0986 3884 SynTP (6da97d6b6de6326eba8ab8291ab41a09) C:\Windows\system32\DRIVERS\SynTP.sys
    2011/03/13 08:17:27.0602 3884 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
    2011/03/13 08:17:28.0235 3884 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
    2011/03/13 08:17:28.0829 3884 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    2011/03/13 08:17:29.0625 3884 tdcmdpst (4084ea00d50c858d6f9038f86ae2e2d0) C:\Windows\system32\DRIVERS\tdcmdpst.sys
    2011/03/13 08:17:30.0251 3884 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    2011/03/13 08:17:31.0166 3884 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    2011/03/13 08:17:31.0900 3884 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    2011/03/13 08:17:32.0681 3884 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    2011/03/13 08:17:33.0444 3884 Thpdrv (9528f2a39cb660a49f0592d57127f370) C:\Windows\system32\DRIVERS\thpdrv.sys
    2011/03/13 08:17:34.0588 3884 Thpevm (e17dcde74ff00ca802643b4a9a4a4a5c) C:\Windows\system32\DRIVERS\Thpevm.SYS
    2011/03/13 08:17:35.0738 3884 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    2011/03/13 08:17:36.0980 3884 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    2011/03/13 08:17:38.0120 3884 TVALZ (fc24015b4052600c324c43e3a79c0664) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
    2011/03/13 08:17:39.0150 3884 TVALZFL (866462f5ae3f375ef83ef9dce436031c) C:\Windows\system32\DRIVERS\TVALZFL.sys
    2011/03/13 08:17:40.0149 3884 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    2011/03/13 08:17:41.0121 3884 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    2011/03/13 08:17:42.0402 3884 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    2011/03/13 08:17:43.0345 3884 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    2011/03/13 08:17:44.0123 3884 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    2011/03/13 08:17:44.0865 3884 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
    2011/03/13 08:17:45.0838 3884 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
    2011/03/13 08:17:47.0272 3884 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    2011/03/13 08:17:48.0195 3884 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
    2011/03/13 08:17:48.0904 3884 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
    2011/03/13 08:17:49.0682 3884 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
    2011/03/13 08:17:50.0404 3884 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    2011/03/13 08:17:51.0001 3884 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
    2011/03/13 08:17:51.0656 3884 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    2011/03/13 08:17:52.0489 3884 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
    2011/03/13 08:17:53.0218 3884 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\Windows\System32\Drivers\usbvideo.sys
    2011/03/13 08:17:54.0039 3884 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    2011/03/13 08:17:55.0009 3884 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    2011/03/13 08:17:55.0904 3884 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    2011/03/13 08:17:56.0859 3884 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    2011/03/13 08:17:57.0642 3884 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    2011/03/13 08:17:58.0488 3884 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    2011/03/13 08:17:59.0461 3884 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    2011/03/13 08:18:00.0461 3884 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    2011/03/13 08:18:01.0902 3884 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    2011/03/13 08:18:02.0803 3884 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    2011/03/13 08:18:03.0789 3884 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    2011/03/13 08:18:04.0842 3884 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
    2011/03/13 08:18:05.0866 3884 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
    2011/03/13 08:18:06.0866 3884 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    2011/03/13 08:18:07.0690 3884 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/03/13 08:18:07.0774 3884 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/03/13 08:18:08.0547 3884 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    2011/03/13 08:18:09.0424 3884 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    2011/03/13 08:18:10.0453 3884 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    2011/03/13 08:18:11.0468 3884 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    2011/03/13 08:18:12.0838 3884 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
    2011/03/13 08:18:14.0009 3884 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    2011/03/13 08:18:15.0177 3884 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    2011/03/13 08:18:15.0923 3884 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    2011/03/13 08:18:16.0525 3884 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    2011/03/13 08:18:18.0102 3884 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0)
    2011/03/13 08:18:18.0129 3884 ================================================================================
    2011/03/13 08:18:18.0129 3884 Scan finished
    2011/03/13 08:18:18.0129 3884 ================================================================================
    2011/03/13 08:18:18.0189 3444 Detected object count: 1
    2011/03/13 08:30:09.0838 3444 \HardDisk0 - copied to quarantine
    2011/03/13 08:30:09.0869 3444 \HardDisk0\TDLFS\cfg.ini - copied to quarantine
    2011/03/13 08:30:09.0869 3444 \HardDisk0\TDLFS\mbr - copied to quarantine
    2011/03/13 08:30:09.0885 3444 \HardDisk0\TDLFS\bckfg.tmp - copied to quarantine
    2011/03/13 08:30:09.0932 3444 \HardDisk0\TDLFS\cmd.dll - copied to quarantine
    2011/03/13 08:30:09.0947 3444 \HardDisk0\TDLFS\ldr16 - copied to quarantine
    2011/03/13 08:30:09.0963 3444 \HardDisk0\TDLFS\ldr32 - copied to quarantine
    2011/03/13 08:30:09.0979 3444 \HardDisk0\TDLFS\ldr64 - copied to quarantine
    2011/03/13 08:30:09.0994 3444 \HardDisk0\TDLFS\drv64 - copied to quarantine
    2011/03/13 08:30:10.0010 3444 \HardDisk0\TDLFS\cmd64.dll - copied to quarantine
    2011/03/13 08:30:10.0025 3444 \HardDisk0\TDLFS\drv32 - copied to quarantine
    2011/03/13 08:30:10.0041 3444 \HardDisk0\TDLFS\keywords - copied to quarantine
    2011/03/13 08:30:10.0057 3444 \HardDisk0\TDLFS\socks.dll - copied to quarantine
    2011/03/13 08:30:10.0072 3444 \HardDisk0\TDLFS\r.dll - copied to quarantine
    2011/03/13 08:30:10.0072 3444 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Quarantine
    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      OK fais la suite.
      0
    2. marianna
       
      Voici mon rapport MBAN



      Malwarebytes' Anti-Malware 1.50.1.1100
      www.malwarebytes.org

      Version de la base de données: 6039

      Windows 6.1.7600
      Internet Explorer 8.0.7600.16385

      13/03/2011 22:17:30
      mbam-log-2011-03-13 (22-17-14).txt

      Type d'examen: Examen complet (C:\|D:\|)
      Elément(s) analysé(s): 260704
      Temps écoulé: 2 heure(s), 23 minute(s), 17 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 0
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 3

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      c:\tdsskiller_quarantine\13.03.2011_08.15.19\boot0000\tdlfs0000\tsk0005.dta (Malware.Packer.Gen) -> No action taken.
      c:\tdsskiller_quarantine\13.03.2011_08.15.19\boot0000\tdlfs0000\tsk0008.dta (Rootkit.TDSS) -> No action taken.
      c:\tdsskiller_quarantine\13.03.2011_08.15.19\boot0000\tdlfs0000\tsk0011.dta (Trojan.Banker) -> No action taken.
      0
  4. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    surf voir si tu as encore des redirections Gomeo
    J'te filerai des conseils ensuite :)
    0
    1. marianna
       
      j'ai tout fait et avast me dit encore que MBR physicaldrive0 est dans mon pc :(
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    manque le rapport OTL.

    Si tu refais un TDSSKiller il redétecte qq chose ?
    0
    1. marianna
       
      j'ai oublié d'enregistrer le rapport OTL la je refais un Malware anti malware pour voir ...
      0
    2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Non Malware Anti-Malware sert à rien.
      Ce qu'il faut voir c'est si TDSS (qui a été détecté précedemment par TDSSKiller) est revenu c'est ça qu'Avast! détecte.
      Donc relance un TDSSKiller comme demandé voir s'il revient et si c'est le cas, faire un OTL voir si un autre malware ne le remet pas.
      0
    3. marianna
       
      TDS Killer me dit que j'ai un rootkit.win.32.TDStdl4. Je choisi skipe? mettre en quarentaine ou cure ?
      0
    4. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      cure
      0
    5. marianna
       
      Voila mon pc a ensuite redémaré et j'ai relancé un scan TDSkiller pour te donner le rapport; estce que je dois faire OTL maintenant ?


      2011/03/14 19:04:24.0032 3120 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
      2011/03/14 19:04:24.0441 3120 ================================================================================
      2011/03/14 19:04:24.0441 3120 SystemInfo:
      2011/03/14 19:04:24.0442 3120
      2011/03/14 19:04:24.0442 3120 OS Version: 6.1.7600 ServicePack: 0.0
      2011/03/14 19:04:24.0442 3120 Product type: Workstation
      2011/03/14 19:04:24.0442 3120 ComputerName: MARIANNANA
      2011/03/14 19:04:24.0443 3120 UserName: Grenouille
      2011/03/14 19:04:24.0443 3120 Windows directory: C:\Windows
      2011/03/14 19:04:24.0443 3120 System windows directory: C:\Windows
      2011/03/14 19:04:24.0443 3120 Processor architecture: Intel x86
      2011/03/14 19:04:24.0443 3120 Number of processors: 2
      2011/03/14 19:04:24.0443 3120 Page size: 0x1000
      2011/03/14 19:04:24.0443 3120 Boot type: Normal boot
      2011/03/14 19:04:24.0443 3120 ================================================================================
      2011/03/14 19:04:25.0113 3120 Initialize success
      2011/03/14 19:04:28.0516 4564 ================================================================================
      2011/03/14 19:04:28.0516 4564 Scan started
      2011/03/14 19:04:28.0516 4564 Mode: Manual;
      2011/03/14 19:04:28.0516 4564 ================================================================================
      2011/03/14 19:04:30.0157 4564 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
      2011/03/14 19:04:30.0621 4564 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
      2011/03/14 19:04:31.0088 4564 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
      2011/03/14 19:04:31.0623 4564 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
      2011/03/14 19:04:32.0339 4564 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
      2011/03/14 19:04:33.0049 4564 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
      2011/03/14 19:04:33.0720 4564 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
      2011/03/14 19:04:34.0272 4564 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
      2011/03/14 19:04:34.0822 4564 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
      2011/03/14 19:04:35.0361 4564 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
      2011/03/14 19:04:35.0873 4564 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
      2011/03/14 19:04:36.0351 4564 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
      2011/03/14 19:04:36.0986 4564 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
      2011/03/14 19:04:37.0465 4564 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
      2011/03/14 19:04:38.0178 4564 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
      2011/03/14 19:04:39.0278 4564 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
      2011/03/14 19:04:40.0060 4564 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
      2011/03/14 19:04:40.0684 4564 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
      2011/03/14 19:04:41.0353 4564 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
      2011/03/14 19:04:41.0788 4564 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
      2011/03/14 19:04:42.0286 4564 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\Windows\system32\drivers\aswFsBlk.sys
      2011/03/14 19:04:42.0943 4564 aswMonFlt (b0f137f664f10829cd2380b0e20e7c29) C:\Windows\system32\drivers\aswMonFlt.sys
      2011/03/14 19:04:43.0523 4564 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\Windows\system32\drivers\aswRdr.sys
      2011/03/14 19:04:44.0184 4564 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\Windows\system32\drivers\aswSnx.sys
      2011/03/14 19:04:44.0762 4564 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\Windows\system32\drivers\aswSP.sys
      2011/03/14 19:04:45.0255 4564 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\Windows\system32\drivers\aswTdi.sys
      2011/03/14 19:04:45.0677 4564 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
      2011/03/14 19:04:46.0033 4564 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
      2011/03/14 19:04:46.0431 4564 athr (0f4b6b99d6cdc1d93df1fa690796b2f7) C:\Windows\system32\DRIVERS\athr.sys
      2011/03/14 19:04:46.0903 4564 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
      2011/03/14 19:04:47.0277 4564 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
      2011/03/14 19:04:47.0705 4564 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
      2011/03/14 19:04:48.0185 4564 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
      2011/03/14 19:04:48.0735 4564 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
      2011/03/14 19:04:49.0225 4564 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
      2011/03/14 19:04:49.0705 4564 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
      2011/03/14 19:04:50.0285 4564 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
      2011/03/14 19:04:50.0625 4564 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
      2011/03/14 19:04:50.0995 4564 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
      2011/03/14 19:04:51.0325 4564 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
      2011/03/14 19:04:51.0667 4564 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
      2011/03/14 19:04:52.0056 4564 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
      2011/03/14 19:04:52.0415 4564 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
      2011/03/14 19:04:52.0799 4564 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
      2011/03/14 19:04:53.0059 4564 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
      2011/03/14 19:04:53.0679 4564 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
      2011/03/14 19:04:54.0309 4564 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
      2011/03/14 19:04:55.0169 4564 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
      2011/03/14 19:04:55.0626 4564 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
      2011/03/14 19:04:56.0049 4564 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
      2011/03/14 19:04:56.0428 4564 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
      2011/03/14 19:04:57.0029 4564 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
      2011/03/14 19:04:57.0407 4564 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
      2011/03/14 19:04:57.0793 4564 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
      2011/03/14 19:04:58.0323 4564 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
      2011/03/14 19:04:58.0683 4564 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
      2011/03/14 19:04:59.0183 4564 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
      2011/03/14 19:04:59.0953 4564 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
      2011/03/14 19:05:00.0463 4564 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
      2011/03/14 19:05:00.0873 4564 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
      2011/03/14 19:05:01.0223 4564 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
      2011/03/14 19:05:01.0589 4564 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
      2011/03/14 19:05:02.0158 4564 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
      2011/03/14 19:05:02.0536 4564 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
      2011/03/14 19:05:03.0055 4564 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
      2011/03/14 19:05:03.0415 4564 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
      2011/03/14 19:05:03.0885 4564 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
      2011/03/14 19:05:04.0285 4564 fssfltr (8e307583e6b45f1accf762fe22a61c0d) C:\Windows\system32\DRIVERS\fssfltr.sys
      2011/03/14 19:05:04.0645 4564 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
      2011/03/14 19:05:05.0095 4564 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
      2011/03/14 19:05:05.0505 4564 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
      2011/03/14 19:05:06.0055 4564 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
      2011/03/14 19:05:06.0425 4564 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
      2011/03/14 19:05:06.0782 4564 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
      2011/03/14 19:05:07.0123 4564 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
      2011/03/14 19:05:07.0471 4564 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
      2011/03/14 19:05:07.0803 4564 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
      2011/03/14 19:05:08.0437 4564 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
      2011/03/14 19:05:08.0874 4564 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
      2011/03/14 19:05:09.0288 4564 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
      2011/03/14 19:05:09.0635 4564 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
      2011/03/14 19:05:10.0005 4564 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
      2011/03/14 19:05:10.0393 4564 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
      2011/03/14 19:05:10.0786 4564 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
      2011/03/14 19:05:11.0314 4564 igfx (e21a74a91f7aa3bb2e985c4cddca63f2) C:\Windows\system32\DRIVERS\igdkmd32.sys
      2011/03/14 19:05:11.0914 4564 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
      2011/03/14 19:05:12.0490 4564 IntcAzAudAddService (0a0e3c041c20c4175e1cc6580138ca38) C:\Windows\system32\drivers\RTKVHDA.sys
      2011/03/14 19:05:12.0936 4564 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
      2011/03/14 19:05:13.0304 4564 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
      2011/03/14 19:05:13.0658 4564 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
      2011/03/14 19:05:14.0207 4564 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
      2011/03/14 19:05:14.0564 4564 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
      2011/03/14 19:05:14.0897 4564 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
      2011/03/14 19:05:15.0254 4564 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
      2011/03/14 19:05:15.0619 4564 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
      2011/03/14 19:05:15.0977 4564 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
      2011/03/14 19:05:16.0344 4564 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
      2011/03/14 19:05:16.0761 4564 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
      2011/03/14 19:05:17.0125 4564 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
      2011/03/14 19:05:17.0698 4564 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
      2011/03/14 19:05:18.0129 4564 LPCFilter (6adab14d7ad12b35bdc665b35278099b) C:\Windows\system32\DRIVERS\LPCFilter.sys
      2011/03/14 19:05:18.0723 4564 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
      2011/03/14 19:05:19.0291 4564 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
      2011/03/14 19:05:19.0660 4564 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
      2011/03/14 19:05:20.0030 4564 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
      2011/03/14 19:05:20.0397 4564 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
      2011/03/14 19:05:21.0236 4564 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
      2011/03/14 19:05:21.0617 4564 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
      2011/03/14 19:05:22.0025 4564 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
      2011/03/14 19:05:22.0393 4564 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
      2011/03/14 19:05:22.0785 4564 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
      2011/03/14 19:05:23.0173 4564 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
      2011/03/14 19:05:23.0552 4564 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
      2011/03/14 19:05:23.0915 4564 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
      2011/03/14 19:05:24.0278 4564 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
      2011/03/14 19:05:24.0669 4564 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
      2011/03/14 19:05:25.0041 4564 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys
      2011/03/14 19:05:25.0396 4564 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
      2011/03/14 19:05:25.0781 4564 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
      2011/03/14 19:05:26.0142 4564 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
      2011/03/14 19:05:26.0501 4564 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
      2011/03/14 19:05:27.0155 4564 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
      2011/03/14 19:05:27.0711 4564 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
      2011/03/14 19:05:28.0078 4564 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
      2011/03/14 19:05:28.0494 4564 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
      2011/03/14 19:05:28.0871 4564 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
      2011/03/14 19:05:29.0248 4564 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
      2011/03/14 19:05:29.0609 4564 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
      2011/03/14 19:05:29.0976 4564 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
      2011/03/14 19:05:30.0343 4564 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
      2011/03/14 19:05:30.0676 4564 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
      2011/03/14 19:05:31.0033 4564 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
      2011/03/14 19:05:31.0455 4564 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
      2011/03/14 19:05:31.0858 4564 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
      2011/03/14 19:05:32.0238 4564 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
      2011/03/14 19:05:32.0594 4564 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
      2011/03/14 19:05:32.0961 4564 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
      2011/03/14 19:05:33.0342 4564 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
      2011/03/14 19:05:33.0677 4564 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
      2011/03/14 19:05:34.0033 4564 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
      2011/03/14 19:05:34.0392 4564 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
      2011/03/14 19:05:34.0832 4564 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
      2011/03/14 19:05:35.0208 4564 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
      2011/03/14 19:05:35.0580 4564 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
      2011/03/14 19:05:36.0022 4564 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
      2011/03/14 19:05:36.0416 4564 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
      2011/03/14 19:05:36.0786 4564 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
      2011/03/14 19:05:37.0127 4564 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
      2011/03/14 19:05:37.0492 4564 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
      2011/03/14 19:05:37.0863 4564 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
      2011/03/14 19:05:38.0293 4564 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
      2011/03/14 19:05:38.0679 4564 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
      2011/03/14 19:05:39.0056 4564 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
      2011/03/14 19:05:39.0448 4564 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
      2011/03/14 19:05:39.0828 4564 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
      2011/03/14 19:05:40.0180 4564 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
      2011/03/14 19:05:40.0587 4564 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
      2011/03/14 19:05:40.0963 4564 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
      2011/03/14 19:05:41.0449 4564 PGEffect (1b5011dd8d57f53aed31ff0f7d635802) C:\Windows\system32\DRIVERS\pgeffect.sys
      2011/03/14 19:05:41.0974 4564 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
      2011/03/14 19:05:42.0324 4564 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
      2011/03/14 19:05:42.0716 4564 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
      2011/03/14 19:05:43.0109 4564 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
      2011/03/14 19:05:43.0509 4564 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
      2011/03/14 19:05:43.0881 4564 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
      2011/03/14 19:05:44.0247 4564 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
      2011/03/14 19:05:44.0727 4564 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
      2011/03/14 19:05:45.0093 4564 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
      2011/03/14 19:05:45.0461 4564 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
      2011/03/14 19:05:45.0876 4564 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
      2011/03/14 19:05:46.0438 4564 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
      2011/03/14 19:05:46.0982 4564 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
      2011/03/14 19:05:47.0582 4564 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
      2011/03/14 19:05:48.0008 4564 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
      2011/03/14 19:05:48.0482 4564 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
      2011/03/14 19:05:49.0004 4564 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
      2011/03/14 19:05:49.0577 4564 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
      2011/03/14 19:05:50.0202 4564 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
      2011/03/14 19:05:50.0781 4564 RSUSBSTOR (ef8b2afc3c0751c5e5a59983c8893260) C:\Windows\system32\Drivers\RtsUStor.sys
      2011/03/14 19:05:51.0217 4564 RTL8167 (bcebd5d1aabce4efb7597635e347c44b) C:\Windows\system32\DRIVERS\Rt86win7.sys
      2011/03/14 19:05:52.0316 4564 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
      2011/03/14 19:05:52.0838 4564 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
      2011/03/14 19:05:53.0320 4564 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
      2011/03/14 19:05:53.0810 4564 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
      2011/03/14 19:05:54.0209 4564 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
      2011/03/14 19:05:54.0678 4564 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
      2011/03/14 19:05:55.0211 4564 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
      2011/03/14 19:05:55.0700 4564 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
      2011/03/14 19:05:56.0456 4564 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
      2011/03/14 19:05:56.0856 4564 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
      2011/03/14 19:05:57.0336 4564 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
      2011/03/14 19:05:57.0748 4564 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
      2011/03/14 19:05:58.0104 4564 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
      2011/03/14 19:05:58.0484 4564 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
      2011/03/14 19:05:58.0975 4564 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
      2011/03/14 19:05:59.0419 4564 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\Windows\system32\DRIVERS\srv.sys
      2011/03/14 19:05:59.0783 4564 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\Windows\system32\DRIVERS\srv2.sys
      2011/03/14 19:06:00.0167 4564 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\Windows\system32\DRIVERS\srvnet.sys
      2011/03/14 19:06:00.0592 4564 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
      2011/03/14 19:06:00.0961 4564 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
      2011/03/14 19:06:01.0373 4564 SynTP (6da97d6b6de6326eba8ab8291ab41a09) C:\Windows\system32\DRIVERS\SynTP.sys
      2011/03/14 19:06:01.0851 4564 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
      2011/03/14 19:06:02.0297 4564 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
      2011/03/14 19:06:02.0660 4564 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
      2011/03/14 19:06:03.0061 4564 tdcmdpst (4084ea00d50c858d6f9038f86ae2e2d0) C:\Windows\system32\DRIVERS\tdcmdpst.sys
      2011/03/14 19:06:03.0439 4564 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
      2011/03/14 19:06:03.0818 4564 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
      2011/03/14 19:06:04.0175 4564 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
      2011/03/14 19:06:04.0557 4564 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
      2011/03/14 19:06:04.0975 4564 Thpdrv (9528f2a39cb660a49f0592d57127f370) C:\Windows\system32\DRIVERS\thpdrv.sys
      2011/03/14 19:06:05.0362 4564 Thpevm (e17dcde74ff00ca802643b4a9a4a4a5c) C:\Windows\system32\DRIVERS\Thpevm.SYS
      2011/03/14 19:06:06.0051 4564 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
      2011/03/14 19:06:06.0394 4564 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
      2011/03/14 19:06:06.0763 4564 TVALZ (fc24015b4052600c324c43e3a79c0664) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
      2011/03/14 19:06:07.0164 4564 TVALZFL (866462f5ae3f375ef83ef9dce436031c) C:\Windows\system32\DRIVERS\TVALZFL.sys
      2011/03/14 19:06:07.0514 4564 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
      2011/03/14 19:06:07.0897 4564 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
      2011/03/14 19:06:08.0328 4564 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
      2011/03/14 19:06:08.0700 4564 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
      2011/03/14 19:06:09.0100 4564 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
      2011/03/14 19:06:09.0498 4564 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
      2011/03/14 19:06:09.0838 4564 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
      2011/03/14 19:06:10.0572 4564 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
      2011/03/14 19:06:10.0928 4564 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
      2011/03/14 19:06:11.0305 4564 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
      2011/03/14 19:06:11.0679 4564 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
      2011/03/14 19:06:12.0041 4564 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
      2011/03/14 19:06:12.0411 4564 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
      2011/03/14 19:06:12.0788 4564 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
      2011/03/14 19:06:13.0143 4564 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
      2011/03/14 19:06:13.0528 4564 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\Windows\System32\Drivers\usbvideo.sys
      2011/03/14 19:06:13.0970 4564 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
      2011/03/14 19:06:14.0319 4564 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
      2011/03/14 19:06:14.0714 4564 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
      2011/03/14 19:06:15.0069 4564 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
      2011/03/14 19:06:15.0431 4564 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
      2011/03/14 19:06:15.0810 4564 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
      2011/03/14 19:06:16.0154 4564 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
      2011/03/14 19:06:16.0515 4564 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
      2011/03/14 19:06:16.0877 4564 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
      2011/03/14 19:06:17.0241 4564 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
      2011/03/14 19:06:17.0631 4564 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
      2011/03/14 19:06:18.0007 4564 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
      2011/03/14 19:06:18.0364 4564 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
      2011/03/14 19:06:18.0753 4564 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
      2011/03/14 19:06:19.0132 4564 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
      2011/03/14 19:06:19.0192 4564 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
      2011/03/14 19:06:19.0633 4564 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
      2011/03/14 19:06:20.0002 4564 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
      2011/03/14 19:06:20.0506 4564 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
      2011/03/14 19:06:20.0884 4564 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
      2011/03/14 19:06:21.0394 4564 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
      2011/03/14 19:06:21.0862 4564 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
      2011/03/14 19:06:22.0374 4564 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
      2011/03/14 19:06:22.0810 4564 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
      2011/03/14 19:06:23.0178 4564 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
      2011/03/14 19:06:24.0413 4564 ================================================================================
      2011/03/14 19:06:24.0413 4564 Scan finished
      2011/03/14 19:06:24.0413 4564 ================================================================================
      0
  7. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    oui OTL.
    0
    1. mariannana Messages postés 8 Statut Membre
       
      Voici mon rapport OTL
      https://pjjoint.malekal.com/files.php?id=29aaff704891210
      Mot de passe azerty

      Peux tu me dire si tout est ok? moi tout semble refonctionner correctement. penses tu que c'est le même virus qui fesait redémarer mon pc tout seul ?

      Par contre un truc bizar, impossible de me reconnecter sur ce site. j'ai du recreer un compte et yavait une adresse étrange pré enregistrée dans la liste des adresse rebooter quelque chose !!!
      pense tu que je dois changer les mots de passe de mes comptes msn et face book ?
      0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Attends,

    Tu peux canner ce fichier C:\Users\Grenouille\AppData\Local\aqexutux.dll
    sur https://www.virustotal.com/gui/

    Yes, no, maybe
    I don't know
    Can you repeat the question?
    You're not the boss of me now
    0
    1. mariannana Messages postés 8 Statut Membre
       
      Voicile résultat du scan:
      8 dossier sur 42 sont infectés:

      Antivirus Version Last Update Result
      AhnLab-V3 2011.03.15.01 2011.03.14 -
      AntiVir 7.11.4.200 2011.03.14 TR/Crypt.XPACK.Gen3
      Antiy-AVL 2.0.3.7 2011.03.14 -
      Avast 4.8.1351.0 2011.03.14 -
      Avast5 5.0.677.0 2011.03.14 -
      AVG 10.0.0.1190 2011.03.14 Win32/Cryptor
      BitDefender 7.2 2011.03.14 Gen:Variant.Kazy.11661
      CAT-QuickHeal 11.00 2011.03.14 -
      ClamAV 0.96.4.0 2011.03.14 -
      Commtouch 5.2.11.5 2011.03.14 -
      DrWeb 5.0.2.03300 2011.03.14 Trojan.Packed.194
      Emsisoft 5.1.0.2 2011.03.14 -
      eSafe 7.0.17.0 2011.03.14 -
      eTrust-Vet 36.1.8215 2011.03.14 Win32/Agent.ADI
      F-Prot 4.6.2.117 2011.03.14 -
      F-Secure 9.0.16440.0 2011.03.14 Gen:Variant.Kazy.11661
      Fortinet 4.2.254.0 2011.03.14 -
      GData 21 2011.03.14 Gen:Variant.Kazy.11661
      Ikarus T3.1.1.97.0 2011.03.14 -
      Jiangmin 13.0.900 2011.03.14 -
      K7AntiVirus 9.93.4100 2011.03.14 -
      Kaspersky 7.0.0.125 2011.03.14 -
      McAfee 5.400.0.1158 2011.03.14 -
      McAfee-GW-Edition 2010.1C 2011.03.14 -
      Microsoft 1.6603 2011.03.14 -
      NOD32 5953 2011.03.14 -
      Norman 6.07.03 2011.03.14 -
      nProtect 2011-02-10.01 2011.02.15 -
      Panda 10.0.3.5 2011.03.14 -
      PCTools 7.0.3.5 2011.03.11 -
      Prevx 3.0 2011.03.14 -
      Rising 23.49.00.06 2011.03.14 -
      Sophos 4.63.0 2011.03.14 -
      SUPERAntiSpyware 4.40.0.1006 2011.03.14 -
      Symantec 20101.3.0.103 2011.03.14 -
      TheHacker 6.7.0.1.149 2011.03.13 -
      TrendMicro 9.200.0.1012 2011.03.14 -
      TrendMicro-HouseCall 9.200.0.1012 2011.03.14 -
      VBA32 3.12.14.3 2011.03.14 -
      VIPRE 8704 2011.03.14 -
      ViRobot 2011.3.14.4356 2011.03.14 -
      VirusBuster 13.6.249.3 2011.03.14 Trojan.Podjot.Gen!Pac
      Additional informationShow all
      MD5 : b979f39b508190892bff678d591685ee
      SHA1 : 1d7f1684b37da33987707e8811949883b4104337
      SHA256: c0b1132c6c07c42e18e960271e36d1167dd727277381fc24d9cf95a331d27772
      0
  9. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Tu peux supprimer le dit fichier ?
    0
    1. mariannana Messages postés 8 Statut Membre
       
      je dois supprimer ce dossier en entier ?
      C:\Users\Grenouille\AppData\Local\aqexutux.dll

      Avec tout ce qu'il y a dedans juste en faisant clic droit et supprimer ?
      0
    2. mariannana Messages postés 8 Statut Membre
       
      je l'ai supprimé
      0
  10. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    reviens demain voir si Avast! refait des détections :)
    0
    1. mariannana Messages postés 8 Statut Membre
       
      Bonjour, et bien il semblerait que avast ne detecte plus de virus ou autre. Par contre lors du démarage de mon pc j'ai eu ce message: C:\windows\$XNTUninstall643$\rtkcs.dll module spécifié introuvable
      0
  11. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Passe un coup de CCleaner, en recherche d'erreur : https://www.malekal.com/tutoriel-ccleaner/
    pour voir..
    0
    1. mariannana Messages postés 8 Statut Membre
       
      Bonjour, j'ai fait le CCleaner comme tu me l'a dis, et quand j'ai redémarrer mon pc le message d'erreur était toujours là. C'est d'un compliqué tout ça, je ne te remercierais jamais assez :-)
      0
    2. mariannana Messages postés 8 Statut Membre
       
      Oups j'avais fait une analyse et pas une recherche d'erreur.. attend je te tiens au jus
      0
    3. mariannana Messages postés 8 Statut Membre
       
      Enfin OUF ! Ples aucun message d'erreur nul part, mon pc a retrouvé sa vitesse normal ! Il ne s'eteind plus tout seul et ne change plus non plus de page google tout seul. Un très grand merci pour ton assistance et ton aide face à une nana qui connait rien à tout ça ! Juste une petite question, j'ai tous ces problèmes depuis que je suis à l'étranger est-ce que tu penses qu'il peut y avoir un lien ?
      0
  12. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    quoii hoo quoiii le magic CCleaner n'a pas résolu le prb :>
    mince alors :>

    Relance OTL.
    o sous Personnalisation, copie_colle le contenu du cadre ci dessous et clic Correction, un rapport apparraitra suite à l'operation que tu conserveras sur clé usb par exemple afin d'en coller le resultat:

    :OTL
    O2 - BHO: (adfadekspr Object) - {1D27328B-4186-4DEC-9541-892250964557} - C:\Windows\$\rtkcs.dll ()
    O4 - HKLM..\Run: [bipro] C:\Windows\$\rtkcs.dll ()

    * redemarre le pc sous windows et poste le rapport ici

    0
  13. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    :)

    Fais plus attention à l'avenir....

    Maintiens tes logiciel à jour c'est important, utilise ce programme : /faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
    Absolument à faire.

    Les antivirus ne font pas tout en ce qui concerne la sécurité de ta machine (mettre à jour ses logiciels etc etc)
    La meilleur protection reste de connaître les infections pour pouvoir les éviter et avoir de bonne habitude.
    Donc faut se documenter.

    Un peu de lecture pour éviter les infections :
    - connaitre et éviter les infections : https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware-courte.pdf
    - sécuriser son PC : http://forum.malekal.com/comment-securiser-son-ordinateur.html
    - lire : http://www.commentcamarche.net/faq/27128-malwares-quels-enjeux-version-synthese

    Ce qu'il ne faut pas faire :
    Je télécharge n'importe quoi - je m'infecte :
    https://forums.commentcamarche.net/forum/affich-19719198-onglets-pub-intempestifs#14
    https://forums.commentcamarche.net/forum/affich-18347759-le-nouveau-avast-sonne-trop-souvent#9
    Je télécharge depuis n'importe où - je m'infecte : https://forums.commentcamarche.net/forum/affich-19916973-clickpotato-vlc-virus#6
    Recommandations sur la sécurité : https://forums.commentcamarche.net/forum/affich-18680013-windows-7-et-antispyware#1

    Fonctionnement de quelques catégories de malwares :
    https://forums.commentcamarche.net/forum/affich-17725521-virus-programme-troyen
    https://forums.commentcamarche.net/forum/affich-17746390-concernant-la-propagation-des-virus

    Si tu as des questions sur le fonctionement des malwares.
    N'hésite pas.

    0

Discussions similaires

Scan manga m'a bloqué
Mia -
bazfile -

5 réponses
Bloqué de scan manga
Am43768 -
bazfile -

1 réponse
télécharger router scan v2.6 ou v3.6
naf_2019 -
brucine -

2 réponses
IJ Scan utility
ministratif -
Pierr10 -

3 réponses
Problème lecture Scan manga
léa -
nagisa_hl -

14 réponses