Pc lent

Bonjour,
mon pc rame depuis quelques temps j'ai besoin de votre aide mercihttp://www.cijoint.fr/cjlink.php?file=cj201105/cijhZudAOR.txt

26 réponses

Résumé de la discussion

Un PC sous Windows Vista ralentit significativement et présente des indices potentiels d’infection, avec des extinctions temporaires et des défaillances lors du lancement d’outils comme GMER. Plusieurs échanges suggèrent d’installer Ad-remover et d’exécuter le pré-scan, puis de poster le rapport et de suivre les paramètres d’installation par défaut pour nettoyer le système. En parallèle, des indices techniques signalent une activité suspecte autour d’un rootkit TDSS et des messages de nettoyage du registre, renforçant l’hypothèse d’une infection plus étendue qui peut nécessiter des outils spécialisés. D'autres remarquent qu’un manque de RAM pour Vista d’origine peut aggraver les ralentissements et les instabilités, point à vérifier après nettoyage.

Bobot (l’IA à votre service)
  1. salut ce n'est pas un pc avec vista d'origine si ?
    G3?-?@¢??@?......Concepteur de List_Kill'em...Pre_Scan....MBR_Repair....
    1. pas beaucoup de RAM pour un Vista sur un pc d'origine....

      ▶ Télécharge ici : Ad-remover sur ton bureau :

      ▶ Déconnecte toi et ferme toutes applications en cours !

      si tu as XP => double clique
      si tu as Vista ou windows 7 => clic droit "executer en tant que...."


      ▶ sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

      ▶ clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

      ▶ Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

      ▶ Laisse travailler l'outil et ne touche à rien ...

      ▶ Poste le rapport qui apparait à la fin , sur le forum ...

      ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
      ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

      1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

        Mis à jour par TeamXscript le 12/04/11
        Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
        Site web: http://www.teamxscript.org

        C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 14:08:57 le 17/05/2011, Mode normal

        Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
        AS93000@ORDI-DJEMILA (Acer Aspire 9300)

        ============== ACTION(S) ==============

        (!) -- Fichiers temporaires supprimés.

        Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBHO
        Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBHO.1
        Clé supprimée: HKLM\Software\Classes\AppID\EoRezoBHO.DLL
        Clé supprimée: HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
        Clé supprimée: HKLM\Software\Freeze.com
        Clé supprimée: HKCU\Software\Spointer
        Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit

        Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo jimddp
        Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp
        Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc
        Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}

        ============== SCAN ADDITIONNEL ==============

        **** Mozilla Firefox Version [4.0.1 (fr)] ****

        HKLM_MozillaPlugins\@canalplus.fr/Assistants VOD,version=1.0.0.0 (x)
        HKLM_MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf (x)
        Searchplugins\bing.xml ( hxxp://www.bing.com/search)
        Components\browsercomps.dll (Mozilla Foundation)

        -- C:\Users\AS93000\AppData\Roaming\Mozilla\FireFox\Profiles\7xru1gzk.default --

        ========================================

        **** Internet Explorer Version [9.0.8112.16421] ****

        HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
        HKCU_Main|Start Page - hxxp://fr.msn.com/
        HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
        HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
        HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        HKLM_Main|Start Page - hxxp://fr.msn.com/
        HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (x)
        HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (x)
        HKCU_ElevationPolicy\{7D18DCD9-A63F-4CCC-AA3F-D661A5F5DED6} - C:\Program Files\Orange\Media Player\Media Player.exe (x)
        HKLM_ElevationPolicy\0737e07a-bd9e-44c2-9e47-5818d58f75c5 - C:\Program Files\myBabylon_English\myBabylon_EnglishToolbarHelper.exe (x)
        HKLM_ElevationPolicy\{003B91A6-61E3-4591-891D-01E94C8CB11E} - C:\Program Files\Microsoft Silverlight\4.0.50917.0\Silverlight.Configuration.exe (x)
        HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?)
        HKLM_ElevationPolicy\{1ec76a37-1762-46ff-9b14-765b3e6793be} - C:\Program Files\Microsoft Silverlight\4.0.50917.0\agcp.exe (x)
        HKLM_ElevationPolicy\{44270ABA-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (x)
        HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
        HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (x)
        HKLM_ElevationPolicy\{A2D14993-7315-4f91-AD76-20605495ED6C} - C:\Program Files\ESTsoft\ALUpdate\ALUpExt.exe (x)
        HKLM_ElevationPolicy\{F2632B95-A2AD-4283-B49A-34D4802BA647} - C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe (x)
        HKLM_Extensions\{90EAE591-7E7E-434a-8E28-ECFD00071806} - "PokerStars.fr" (C:\Program Files\PokerStars.FR\main.ico)

        ========================================

        C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
        C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)

        C:\Ad-Report-CLEAN[1].txt - 17/05/2011 14:09:09 (4402 Octet(s))

        Fin à: 14:10:29, 17/05/2011

        ============== E.O.F ==============
        1. desactive tes protections puis enregistre ceci sur ton bureau

          Pre_Scan

          Avertissement: Il y aura une extinction courte du bureau --> pas de panique.

          une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan.txt" sur le bureau.

          si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

          si l'outil semble ne pas avoir fonctionné clique plusieurs fois très rapidement dessus ou renomme-le winlogon , ou change son extension en .com ou .scr

          ▶▶▶ NE LE POSTE PAS SUR LE FORUM

          Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

          ▶ Clique sur Parcourir et cherche le fichier ci-dessus(Pre_Scan.txt).

          ▶ Clique sur Ouvrir.

          ▶ Clique sur "Cliquez ici pour déposer le fichier".

          juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

          http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

          ▶ Copie ce lien dans ta réponse.
          1. j'ai lancé le pre scan ensuite j'ai une extinction du bureau pendant quelques sec et ensuite il met réajuster fichiers/dossiers et puis + rien
            1. il me dit le programme a cessé de fonctionner et + rien après je suis obligée d'éteindre et de rallumer
              1. ▶ Télécharge Reload_TDSSKiller

                ▶ Lance le

                choisis : télécharger la derniere version

                ▶ relance-le

                choisis : lancer le nettoyage

                TDSSKiller va s'ouvrir , clique sur "Start Scan"

                une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

                sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

                ▶ Copie/Colle son contenu dans ta prochaine réponse.
                1. 2011/05/17 15:32:19.0614 2084 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29
                  2011/05/17 15:32:20.0175 2084 ================================================================================
                  2011/05/17 15:32:20.0175 2084 SystemInfo:
                  2011/05/17 15:32:20.0175 2084
                  2011/05/17 15:32:20.0175 2084 OS Version: 6.0.6002 ServicePack: 2.0
                  2011/05/17 15:32:20.0175 2084 Product type: Workstation
                  2011/05/17 15:32:20.0175 2084 ComputerName: ORDI-DJEMILA
                  2011/05/17 15:32:20.0175 2084 UserName: AS93000
                  2011/05/17 15:32:20.0175 2084 Windows directory: C:\Windows
                  2011/05/17 15:32:20.0175 2084 System windows directory: C:\Windows
                  2011/05/17 15:32:20.0175 2084 Processor architecture: Intel x86
                  2011/05/17 15:32:20.0175 2084 Number of processors: 2
                  2011/05/17 15:32:20.0175 2084 Page size: 0x1000
                  2011/05/17 15:32:20.0175 2084 Boot type: Normal boot
                  2011/05/17 15:32:20.0175 2084 ================================================================================
                  2011/05/17 15:32:21.0314 2084 Initialize success
                  2011/05/17 15:34:05.0550 1448 ================================================================================
                  2011/05/17 15:34:05.0550 1448 Scan started
                  2011/05/17 15:34:05.0550 1448 Mode: Manual;
                  2011/05/17 15:34:05.0550 1448 ================================================================================
                  2011/05/17 15:34:06.0670 1448 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
                  2011/05/17 15:34:06.0723 1448 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
                  2011/05/17 15:34:06.0782 1448 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
                  2011/05/17 15:34:06.0924 1448 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
                  2011/05/17 15:34:06.0968 1448 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
                  2011/05/17 15:34:07.0046 1448 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys
                  2011/05/17 15:34:07.0211 1448 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
                  2011/05/17 15:34:07.0266 1448 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
                  2011/05/17 15:34:07.0316 1448 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
                  2011/05/17 15:34:07.0367 1448 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
                  2011/05/17 15:34:07.0690 1448 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
                  2011/05/17 15:34:07.0995 1448 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
                  2011/05/17 15:34:08.0037 1448 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
                  2011/05/17 15:34:08.0172 1448 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
                  2011/05/17 15:34:08.0254 1448 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
                  2011/05/17 15:34:08.0323 1448 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
                  2011/05/17 15:34:08.0440 1448 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
                  2011/05/17 15:34:08.0557 1448 athr (44362605f5fff00c9b7696b47680a8c5) C:\Windows\system32\DRIVERS\athr.sys
                  2011/05/17 15:34:08.0754 1448 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys
                  2011/05/17 15:34:08.0814 1448 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
                  2011/05/17 15:34:09.0038 1448 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
                  2011/05/17 15:34:09.0096 1448 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
                  2011/05/17 15:34:09.0231 1448 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
                  2011/05/17 15:34:09.0271 1448 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
                  2011/05/17 15:34:09.0305 1448 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
                  2011/05/17 15:34:09.0339 1448 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
                  2011/05/17 15:34:09.0372 1448 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
                  2011/05/17 15:34:09.0523 1448 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
                  2011/05/17 15:34:09.0782 1448 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
                  2011/05/17 15:34:09.0846 1448 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
                  2011/05/17 15:34:09.0886 1448 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
                  2011/05/17 15:34:10.0017 1448 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
                  2011/05/17 15:34:10.0138 1448 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
                  2011/05/17 15:34:10.0233 1448 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
                  2011/05/17 15:34:10.0281 1448 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
                  2011/05/17 15:34:10.0311 1448 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
                  2011/05/17 15:34:10.0357 1448 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
                  2011/05/17 15:34:10.0484 1448 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys
                  2011/05/17 15:34:10.0639 1448 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
                  2011/05/17 15:34:10.0730 1448 DKbFltr (73baf270d24fe726b9cd7f80bb17a23d) C:\Windows\system32\DRIVERS\DKbFltr.sys
                  2011/05/17 15:34:10.0888 1448 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
                  2011/05/17 15:34:10.0934 1448 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
                  2011/05/17 15:34:10.0998 1448 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
                  2011/05/17 15:34:11.0129 1448 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
                  2011/05/17 15:34:11.0186 1448 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
                  2011/05/17 15:34:11.0298 1448 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
                  2011/05/17 15:34:11.0446 1448 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
                  2011/05/17 15:34:11.0595 1448 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
                  2011/05/17 15:34:11.0772 1448 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
                  2011/05/17 15:34:11.0824 1448 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
                  2011/05/17 15:34:11.0923 1448 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
                  2011/05/17 15:34:12.0032 1448 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
                  2011/05/17 15:34:12.0089 1448 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
                  2011/05/17 15:34:12.0131 1448 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
                  2011/05/17 15:34:12.0217 1448 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
                  2011/05/17 15:34:12.0415 1448 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\Windows\system32\FsUsbExDisk.SYS
                  2011/05/17 15:34:12.0509 1448 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
                  2011/05/17 15:34:12.0547 1448 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
                  2011/05/17 15:34:12.0713 1448 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
                  2011/05/17 15:34:12.0936 1448 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
                  2011/05/17 15:34:12.0995 1448 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
                  2011/05/17 15:34:13.0137 1448 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
                  2011/05/17 15:34:13.0172 1448 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
                  2011/05/17 15:34:13.0251 1448 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
                  2011/05/17 15:34:13.0301 1448 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
                  2011/05/17 15:34:13.0481 1448 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
                  2011/05/17 15:34:13.0563 1448 HSF_DPV (53229dcf431d76434816cd29251168a0) C:\Windows\system32\DRIVERS\HSX_DPV.sys
                  2011/05/17 15:34:13.0756 1448 HSXHWAZL (31f949d452201f2f0af0c88d7db512cd) C:\Windows\system32\DRIVERS\HSXHWAZL.sys
                  2011/05/17 15:34:13.0824 1448 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
                  2011/05/17 15:34:13.0980 1448 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
                  2011/05/17 15:34:14.0064 1448 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
                  2011/05/17 15:34:14.0260 1448 ialm (496db78e6a0c4c44023d9a92b4a7ac31) C:\Windows\system32\DRIVERS\igdkmd32.sys
                  2011/05/17 15:34:14.0425 1448 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
                  2011/05/17 15:34:14.0476 1448 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
                  2011/05/17 15:34:14.0642 1448 int15 (4d8d5b1c895ea0f2a721b98a7ce198f1) C:\Windows\system32\drivers\int15.sys
                  2011/05/17 15:34:14.0761 1448 IntcAzAudAddService (a47b2875680ad67b35c6150bd0203056) C:\Windows\system32\drivers\RTKVHDA.sys
                  2011/05/17 15:34:14.0946 1448 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
                  2011/05/17 15:34:15.0007 1448 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
                  2011/05/17 15:34:15.0116 1448 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
                  2011/05/17 15:34:15.0289 1448 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
                  2011/05/17 15:34:15.0350 1448 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
                  2011/05/17 15:34:15.0400 1448 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
                  2011/05/17 15:34:15.0548 1448 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
                  2011/05/17 15:34:15.0601 1448 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
                  2011/05/17 15:34:15.0674 1448 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
                  2011/05/17 15:34:15.0818 1448 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
                  2011/05/17 15:34:15.0863 1448 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
                  2011/05/17 15:34:15.0909 1448 kbdhid (d2600cb17b7408b4a83f231dc9a11ac3) C:\Windows\system32\drivers\kbdhid.sys
                  2011/05/17 15:34:15.0980 1448 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
                  2011/05/17 15:34:16.0374 1448 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
                  2011/05/17 15:34:16.0448 1448 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
                  2011/05/17 15:34:16.0641 1448 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
                  2011/05/17 15:34:16.0962 1448 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
                  2011/05/17 15:34:17.0054 1448 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
                  2011/05/17 15:34:17.0226 1448 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
                  2011/05/17 15:34:17.0307 1448 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
                  2011/05/17 15:34:17.0486 1448 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
                  2011/05/17 15:34:17.0566 1448 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
                  2011/05/17 15:34:17.0692 1448 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
                  2011/05/17 15:34:17.0737 1448 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
                  2011/05/17 15:34:17.0777 1448 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
                  2011/05/17 15:34:17.0976 1448 MpFilter (7e34bfa1a7b60bba1da03d677f16cd63) C:\Windows\system32\DRIVERS\MpFilter.sys
                  2011/05/17 15:34:18.0200 1448 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
                  2011/05/17 15:34:21.0930 1448 MpNWMon (f32e2d6a1640a469a9ed4f1929a4a861) C:\Windows\system32\DRIVERS\MpNWMon.sys
                  2011/05/17 15:34:21.0974 1448 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
                  2011/05/17 15:34:22.0019 1448 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
                  2011/05/17 15:34:22.0080 1448 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
                  2011/05/17 15:34:22.0202 1448 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys
                  2011/05/17 15:34:22.0259 1448 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys
                  2011/05/17 15:34:22.0336 1448 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
                  2011/05/17 15:34:22.0493 1448 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
                  2011/05/17 15:34:22.0555 1448 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
                  2011/05/17 15:34:22.0634 1448 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
                  2011/05/17 15:34:22.0786 1448 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
                  2011/05/17 15:34:22.0892 1448 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
                  2011/05/17 15:34:23.0052 1448 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
                  2011/05/17 15:34:23.0098 1448 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
                  2011/05/17 15:34:23.0145 1448 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
                  2011/05/17 15:34:23.0276 1448 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
                  2011/05/17 15:34:23.0344 1448 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
                  2011/05/17 15:34:23.0398 1448 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
                  2011/05/17 15:34:23.0564 1448 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
                  2011/05/17 15:34:23.0654 1448 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
                  2011/05/17 15:34:23.0770 1448 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
                  2011/05/17 15:34:23.0829 1448 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
                  2011/05/17 15:34:23.0881 1448 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
                  2011/05/17 15:34:24.0009 1448 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
                  2011/05/17 15:34:24.0077 1448 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
                  2011/05/17 15:34:24.0138 1448 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
                  2011/05/17 15:34:24.0291 1448 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
                  2011/05/17 15:34:24.0389 1448 NisDrv (17e2c08c5ecfbe94a7c67b1c275ee9d9) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
                  2011/05/17 15:34:24.0522 1448 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
                  2011/05/17 15:34:24.0582 1448 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
                  2011/05/17 15:34:24.0716 1448 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
                  2011/05/17 15:34:24.0893 1448 NTIDrvr (7f1c1f78d709c4a54cbb46ede7e0b48d) C:\Windows\system32\DRIVERS\NTIDrvr.sys
                  2011/05/17 15:34:24.0959 1448 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
                  2011/05/17 15:34:25.0003 1448 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
                  2011/05/17 15:34:25.0075 1448 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys
                  2011/05/17 15:34:25.0431 1448 nvlddmkm (e8cf3a24d0d4478150a48f95ebd7771f) C:\Windows\system32\DRIVERS\nvlddmkm.sys
                  2011/05/17 15:34:25.0697 1448 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
                  2011/05/17 15:34:25.0736 1448 nvsmu (adfdd343b1d3a9e061f17c730f1e83dc) C:\Windows\system32\DRIVERS\nvsmu.sys
                  2011/05/17 15:34:25.0798 1448 nvstor (4a5fcab82d9bf6af8a023a66802fe9e9) C:\Windows\system32\drivers\nvstor.sys
                  2011/05/17 15:34:25.0950 1448 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
                  2011/05/17 15:34:26.0038 1448 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
                  2011/05/17 15:34:26.0094 1448 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
                  2011/05/17 15:34:26.0135 1448 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
                  2011/05/17 15:34:26.0281 1448 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
                  2011/05/17 15:34:26.0391 1448 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\Windows\system32\DRIVERS\pccsmcfd.sys
                  2011/05/17 15:34:26.0557 1448 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
                  2011/05/17 15:34:26.0588 1448 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
                  2011/05/17 15:34:26.0627 1448 pcmcia (3bb2244f343b610c29c98035504c9b75) C:\Windows\system32\DRIVERS\pcmcia.sys
                  2011/05/17 15:34:26.0730 1448 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
                  2011/05/17 15:34:27.0058 1448 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
                  2011/05/17 15:34:27.0102 1448 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
                  2011/05/17 15:34:27.0280 1448 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
                  2011/05/17 15:34:27.0397 1448 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
                  2011/05/17 15:34:27.0578 1448 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
                  2011/05/17 15:34:27.0672 1448 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
                  2011/05/17 15:34:27.0759 1448 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
                  2011/05/17 15:34:27.0923 1448 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
                  2011/05/17 15:34:27.0981 1448 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
                  2011/05/17 15:34:28.0029 1448 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
                  2011/05/17 15:34:28.0176 1448 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
                  2011/05/17 15:34:28.0249 1448 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
                  2011/05/17 15:34:28.0328 1448 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
                  2011/05/17 15:34:28.0458 1448 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
                  2011/05/17 15:34:28.0519 1448 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
                  2011/05/17 15:34:28.0603 1448 rockusb (cd71d0d7985051be10306d67725f5a7c) C:\Windows\system32\DRIVERS\rockusb.sys
                  2011/05/17 15:34:28.0801 1448 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
                  2011/05/17 15:34:28.0879 1448 RTL8169 (283392af1860ecdb5e0f8ebd7f3d72df) C:\Windows\system32\DRIVERS\Rtlh86.sys
                  2011/05/17 15:34:28.0917 1448 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
                  2011/05/17 15:34:29.0084 1448 sdbus (4339a2585708c7d9b0c0ce5aad3dd6ff) C:\Windows\system32\DRIVERS\sdbus.sys
                  2011/05/17 15:34:29.0130 1448 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
                  2011/05/17 15:34:29.0184 1448 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
                  2011/05/17 15:34:29.0224 1448 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
                  2011/05/17 15:34:29.0387 1448 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
                  2011/05/17 15:34:29.0516 1448 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
                  2011/05/17 15:34:29.0549 1448 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
                  2011/05/17 15:34:29.0584 1448 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
                  2011/05/17 15:34:29.0721 1448 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
                  2011/05/17 15:34:29.0784 1448 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
                  2011/05/17 15:34:29.0823 1448 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
                  2011/05/17 15:34:29.0868 1448 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
                  2011/05/17 15:34:30.0026 1448 SmartDefragDriver (46b40982af166bf89c3f51fb13e60d6d) C:\Windows\system32\Drivers\SmartDefragDriver.sys
                  2011/05/17 15:34:30.0071 1448 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
                  2011/05/17 15:34:30.0159 1448 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
                  2011/05/17 15:34:30.0318 1448 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
                  2011/05/17 15:34:30.0363 1448 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys
                  2011/05/17 15:34:30.0415 1448 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys
                  2011/05/17 15:34:30.0577 1448 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
                  2011/05/17 15:34:30.0664 1448 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
                  2011/05/17 15:34:30.0698 1448 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
                  2011/05/17 15:34:30.0843 1448 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
                  2011/05/17 15:34:30.0922 1448 SynTP (f7a4250bb3e3afcd4af100e551509352) C:\Windows\system32\DRIVERS\SynTP.sys
                  2011/05/17 15:34:31.0020 1448 Tcpip (6a10afce0b38371064be41c1fbfd3c6b) C:\Windows\system32\drivers\tcpip.sys
                  2011/05/17 15:34:31.0218 1448 Tcpip6 (6a10afce0b38371064be41c1fbfd3c6b) C:\Windows\system32\DRIVERS\tcpip.sys
                  2011/05/17 15:34:31.0288 1448 tcpipreg (9bf343f4c878d6ad6922b2c5a4fefe0d) C:\Windows\system32\drivers\tcpipreg.sys
                  2011/05/17 15:34:31.0422 1448 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
                  2011/05/17 15:34:31.0464 1448 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
                  2011/05/17 15:34:31.0513 1448 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
                  2011/05/17 15:34:31.0563 1448 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
                  2011/05/17 15:34:31.0717 1448 tifm21 (f779ba4cd37963ab4600c9871b7752a3) C:\Windows\system32\drivers\tifm21.sys
                  2011/05/17 15:34:31.0792 1448 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
                  2011/05/17 15:34:31.0878 1448 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
                  2011/05/17 15:34:32.0006 1448 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
                  2011/05/17 15:34:32.0084 1448 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
                  2011/05/17 15:34:32.0145 1448 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
                  2011/05/17 15:34:32.0398 1448 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
                  2011/05/17 15:34:32.0438 1448 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
                  2011/05/17 15:34:32.0560 1448 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
                  2011/05/17 15:34:32.0623 1448 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
                  2011/05/17 15:34:32.0676 1448 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
                  2011/05/17 15:34:33.0083 1448 UnlockerDriver5 (bb879dcfd22926efbeb3298129898cbb) C:\Program Files\Unlocker\UnlockerDriver5.sys
                  2011/05/17 15:34:33.0333 1448 usbbus (9419faac6552a51542dbba02971c841c) C:\Windows\system32\DRIVERS\lgusbbus.sys
                  2011/05/17 15:34:33.0405 1448 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
                  2011/05/17 15:34:33.0477 1448 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
                  2011/05/17 15:34:33.0621 1448 UsbDiag (c0a466fa4ffec464320e159bc1bbdc0c) C:\Windows\system32\DRIVERS\lgusbdiag.sys
                  2011/05/17 15:34:33.0693 1448 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
                  2011/05/17 15:34:33.0725 1448 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
                  2011/05/17 15:34:33.0883 1448 USBModem (f74a54774a9b0afeb3c40adec68aa600) C:\Windows\system32\DRIVERS\lgusbmodem.sys
                  2011/05/17 15:34:33.0956 1448 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys
                  2011/05/17 15:34:34.0019 1448 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
                  2011/05/17 15:34:34.0164 1448 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
                  2011/05/17 15:34:34.0224 1448 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
                  2011/05/17 15:34:34.0274 1448 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
                  2011/05/17 15:34:34.0412 1448 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
                  2011/05/17 15:34:34.0484 1448 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
                  2011/05/17 15:34:34.0548 1448 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
                  2011/05/17 15:34:34.0669 1448 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
                  2011/05/17 15:34:34.0738 1448 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
                  2011/05/17 15:34:34.0790 1448 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
                  2011/05/17 15:34:34.0908 1448 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
                  2011/05/17 15:34:34.0976 1448 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
                  2011/05/17 15:34:35.0024 1448 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
                  2011/05/17 15:34:35.0143 1448 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
                  2011/05/17 15:34:35.0222 1448 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
                  2011/05/17 15:34:35.0275 1448 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/05/17 15:34:35.0296 1448 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/05/17 15:34:35.0439 1448 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
                  2011/05/17 15:34:35.0511 1448 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
                  2011/05/17 15:34:35.0730 1448 winachsf (6d2350bb6e77e800fc4be4e5b7a2e89a) C:\Windows\system32\DRIVERS\HSX_CNXT.sys
                  2011/05/17 15:34:35.0976 1448 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
                  2011/05/17 15:34:36.0112 1448 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
                  2011/05/17 15:34:36.0159 1448 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
                  2011/05/17 15:34:36.0346 1448 WSVD (2584df81cc9f7e7bd3545691106f8cae) C:\Windows\system32\drivers\WSVD.sys
                  2011/05/17 15:34:36.0452 1448 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
                  2011/05/17 15:34:36.0502 1448 XAudio (5a7ff9a18ff6d7e0527fe3abf9204ef8) C:\Windows\system32\DRIVERS\xaudio.sys
                  2011/05/17 15:34:36.0666 1448 ================================================================================
                  2011/05/17 15:34:36.0666 1448 Scan finished
                  2011/05/17 15:34:36.0666 1448 ================================================================================
                  2011/05/17 15:35:55.0277 3068 ================================================================================
                  2011/05/17 15:35:55.0278 3068 Scan started
                  2011/05/17 15:35:55.0278 3068 Mode: Manual;
                  2011/05/17 15:35:55.0278 3068 ================================================================================
                  2011/05/17 15:35:55.0681 3068 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
                  2011/05/17 15:35:55.0759 3068 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
                  2011/05/17 15:35:55.0804 3068 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
                  2011/05/17 15:35:55.0945 3068 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
                  2011/05/17 15:35:55.0979 3068 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
                  2011/05/17 15:35:56.0045 3068 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys
                  2011/05/17 15:35:56.0177 3068 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
                  2011/05/17 15:35:56.0244 3068 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
                  2011/05/17 15:35:56.0293 3068 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
                  2011/05/17 15:35:56.0322 3068 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
                  2011/05/17 15:35:56.0456 3068 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
                  2011/05/17 15:35:56.0494 3068 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
                  2011/05/17 15:35:56.0536 3068 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
                  2011/05/17 15:35:56.0594 3068 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
                  2011/05/17 15:35:56.0720 3068 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
                  2011/05/17 15:35:56.0778 3068 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
                  2011/05/17 15:35:56.0817 3068 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
                  2011/05/17 15:35:56.0888 3068 athr (44362605f5fff00c9b7696b47680a8c5) C:\Windows\system32\DRIVERS\athr.sys
                  2011/05/17 15:35:57.0067 3068 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys
                  2011/05/17 15:35:57.0134 3068 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
                  2011/05/17 15:35:57.0237 3068 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
                  2011/05/17 15:35:57.0362 3068 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
                  2011/05/17 15:35:57.0397 3068 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
                  2011/05/17 15:35:57.0448 3068 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
                  2011/05/17 15:35:57.0482 3068 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
                  2011/05/17 15:35:57.0516 3068 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
                  2011/05/17 15:35:57.0649 3068 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
                  2011/05/17 15:35:57.0688 3068 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
                  2011/05/17 15:35:57.0770 3068 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
                  2011/05/17 15:35:57.0811 3068 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
                  2011/05/17 15:35:57.0964 3068 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
                  2011/05/17 15:35:58.0038 3068 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
                  2011/05/17 15:35:58.0115 3068 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
                  2011/05/17 15:35:58.0243 3068 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
                  2011/05/17 15:35:58.0303 3068 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
                  2011/05/17 15:35:58.0332 3068 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
                  2011/05/17 15:35:58.0378 3068 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
                  2011/05/17 15:35:58.0573 3068 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys
                  2011/05/17 15:35:58.0660 3068 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
                  2011/05/17 15:35:58.0707 3068 DKbFltr (73baf270d24fe726b9cd7f80bb17a23d) C:\Windows\system32\DRIVERS\DKbFltr.sys
                  2011/05/17 15:35:58.0865 3068 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
                  2011/05/17 15:35:58.0923 3068 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
                  2011/05/17 15:35:58.0953 3068 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
                  2011/05/17 15:35:59.0006 3068 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
                  2011/05/17 15:35:59.0152 3068 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
                  2011/05/17 15:35:59.0197 3068 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
                  2011/05/17 15:35:59.0267 3068 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
                  2011/05/17 15:35:59.0405 3068 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
                  2011/05/17 15:35:59.0515 3068 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
                  2011/05/17 15:35:59.0567 3068 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
                  2011/05/17 15:35:59.0677 3068 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
                  2011/05/17 15:35:59.0732 3068 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
                  2011/05/17 15:35:59.0788 3068 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
                  2011/05/17 15:35:59.0841 3068 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
                  2011/05/17 15:35:59.0961 3068 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
                  2011/05/17 15:36:00.0036 3068 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\Windows\system32\FsUsbExDisk.SYS
                  2011/05/17 15:36:00.0164 3068 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
                  2011/05/17 15:36:00.0225 3068 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
                  2011/05/17 15:36:00.0289 3068 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
                  2011/05/17 15:36:00.0436 3068 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
                  2011/05/17 15:36:00.0494 3068 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
                  2011/05/17 15:36:00.0636 3068 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
                  2011/05/17 15:36:00.0671 3068 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
                  2011/05/17 15:36:00.0716 3068 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
                  2011/05/17 15:36:00.0766 3068 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
                  2011/05/17 15:36:00.0924 3068 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
                  2011/05/17 15:36:01.0006 3068 HSF_DPV (53229dcf431d76434816cd29251168a0) C:\Windows\system32\DRIVERS\HSX_DPV.sys
                  2011/05/17 15:36:01.0155 3068 HSXHWAZL (31f949d452201f2f0af0c88d7db512cd) C:\Windows\system32\DRIVERS\HSXHWAZL.sys
                  2011/05/17 15:36:01.0212 3068 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
                  2011/05/17 15:36:01.0357 3068 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
                  2011/05/17 15:36:01.0418 3068 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
                  2011/05/17 15:36:01.0514 3068 ialm (496db78e6a0c4c44023d9a92b4a7ac31) C:\Windows\system32\DRIVERS\igdkmd32.sys
                  2011/05/17 15:36:01.0668 3068 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
                  2011/05/17 15:36:01.0708 3068 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
                  2011/05/17 15:36:01.0763 3068 int15 (4d8d5b1c895ea0f2a721b98a7ce198f1) C:\Windows\system32\drivers\int15.sys
                  2011/05/17 15:36:01.0859 3068 IntcAzAudAddService (a47b2875680ad67b35c6150bd0203056) C:\Windows\system32\drivers\RTKVHDA.sys
                  2011/05/17 15:36:02.0234 3068 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
                  2011/05/17 15:36:02.0339 3068 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
                  2011/05/17 15:36:02.0404 3068 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
                  2011/05/17 15:36:02.0511 3068 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
                  2011/05/17 15:36:02.0638 3068 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
                  2011/05/17 15:36:02.0677 3068 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
                  2011/05/17 15:36:02.0758 3068 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
                  2011/05/17 15:36:02.0876 3068 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
                  2011/05/17 15:36:02.0918 3068 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
                  2011/05/17 15:36:02.0950 3068 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
                  2011/05/17 15:36:03.0017 3068 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
                  2011/05/17 15:36:03.0131 3068 kbdhid (d2600cb17b7408b4a83f231dc9a11ac3) C:\Windows\system32\drivers\kbdhid.sys
                  2011/05/17 15:36:03.0201 3068 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
                  2011/05/17 15:36:03.0495 3068 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
                  2011/05/17 15:36:03.0569 3068 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
                  2011/05/17 15:36:03.0622 3068 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
                  2011/05/17 15:36:03.0738 3068 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
                  2011/05/17 15:36:03.0798 3068 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
                  2011/05/17 15:36:03.0903 3068 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
                  2011/05/17 15:36:03.0950 3068 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
                  2011/05/17 15:36:04.0063 3068 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
                  2011/05/17 15:36:04.0110 3068 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
                  2011/05/17 15:36:04.0169 3068 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
                  2011/05/17 15:36:04.0269 3068 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
                  2011/05/17 15:36:04.0354 3068 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
                  2011/05/17 15:36:04.0429 3068 MpFilter (7e34bfa1a7b60bba1da03d677f16cd63) C:\Windows\system32\DRIVERS\MpFilter.sys
                  2011/05/17 15:36:04.0538 3068 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
                  2011/05/17 15:36:05.0961 3068 MpNWMon (f32e2d6a1640a469a9ed4f1929a4a861) C:\Windows\system32\DRIVERS\MpNWMon.sys
                  2011/05/17 15:36:06.0029 3068 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
                  2011/05/17 15:36:06.0106 3068 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
                  2011/05/17 15:36:06.0257 3068 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
                  2011/05/17 15:36:06.0311 3068 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys
                  2011/05/17 15:36:06.0368 3068 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys
                  2011/05/17 15:36:06.0512 3068 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
                  2011/05/17 15:36:06.0558 3068 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
                  2011/05/17 15:36:06.0597 3068 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
                  2011/05/17 15:36:06.0677 3068 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
                  2011/05/17 15:36:06.0817 3068 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
                  2011/05/17 15:36:06.0879 3068 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
                  2011/05/17 15:36:06.0939 3068 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
                  2011/05/17 15:36:06.0985 3068 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
                  2011/05/17 15:36:07.0112 3068 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
                  2011/05/17 15:36:07.0196 3068 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
                  2011/05/17 15:36:07.0242 3068 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
                  2011/05/17 15:36:07.0363 3068 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
                  2011/05/17 15:36:07.0418 3068 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
                  2011/05/17 15:36:07.0496 3068 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
                  2011/05/17 15:36:07.0613 3068 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
                  2011/05/17 15:36:07.0672 3068 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
                  2011/05/17 15:36:07.0724 3068 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
                  2011/05/17 15:36:07.0841 3068 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
                  2011/05/17 15:36:07.0898 3068 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
                  2011/05/17 15:36:07.0948 3068 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
                  2011/05/17 15:36:08.0112 3068 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
                  2011/05/17 15:36:08.0165 3068 NisDrv (17e2c08c5ecfbe94a7c67b1c275ee9d9) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
                  2011/05/17 15:36:08.0232 3068 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
                  2011/05/17 15:36:08.0436 3068 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
                  2011/05/17 15:36:08.0688 3068 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
                  2011/05/17 15:36:08.0835 3068 NTIDrvr (7f1c1f78d709c4a54cbb46ede7e0b48d) C:\Windows\system32\DRIVERS\NTIDrvr.sys
                  2011/05/17 15:36:08.0891 3068 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
                  2011/05/17 15:36:08.0935 3068 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
                  2011/05/17 15:36:09.0076 3068 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys
                  2011/05/17 15:36:09.0295 3068 nvlddmkm (e8cf3a24d0d4478150a48f95ebd7771f) C:\Windows\system32\DRIVERS\nvlddmkm.sys
                  2011/05/17 15:36:09.0551 3068 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
                  2011/05/17 15:36:09.0584 3068 nvsmu (adfdd343b1d3a9e061f17c730f1e83dc) C:\Windows\system32\DRIVERS\nvsmu.sys
                  2011/05/17 15:36:09.0663 3068 nvstor (4a5fcab82d9bf6af8a023a66802fe9e9) C:\Windows\system32\drivers\nvstor.sys
                  2011/05/17 15:36:09.0704 3068 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
                  2011/05/17 15:36:09.0892 3068 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
                  2011/05/17 15:36:09.0948 3068 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
                  2011/05/17 15:36:10.0000 3068 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
                  2011/05/17 15:36:10.0145 3068 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
                  2011/05/17 15:36:10.0200 3068 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\Windows\system32\DRIVERS\pccsmcfd.sys
                  2011/05/17 15:36:10.0244 3068 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
                  2011/05/17 15:36:10.0376 3068 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
                  2011/05/17 15:36:10.0450 3068 pcmcia (3bb2244f343b610c29c98035504c9b75) C:\Windows\system32\DRIVERS\pcmcia.sys
                  2011/05/17 15:36:10.0528 3068 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
                  2011/05/17 15:36:10.0769 3068 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
                  2011/05/17 15:36:10.0834 3068 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
                  2011/05/17 15:36:10.0911 3068 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
                  2011/05/17 15:36:11.0077 3068 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
                  2011/05/17 15:36:11.0153 3068 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
                  2011/05/17 15:36:11.0314 3068 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
                  2011/05/17 15:36:11.0357 3068 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
                  2011/05/17 15:36:11.0410 3068 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
                  2011/05/17 15:36:11.0557 3068 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
                  2011/05/17 15:36:11.0617 3068 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
                  2011/05/17 15:36:11.0706 3068 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
                  2011/05/17 15:36:11.0859 3068 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
                  2011/05/17 15:36:11.0926 3068 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
                  2011/05/17 15:36:11.0951 3068 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
                  2011/05/17 15:36:12.0017 3068 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
                  2011/05/17 15:36:12.0180 3068 rockusb (cd71d0d7985051be10306d67725f5a7c) C:\Windows\system32\DRIVERS\rockusb.sys
                  2011/05/17 15:36:12.0288 3068 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
                  2011/05/17 15:36:12.0332 3068 RTL8169 (283392af1860ecdb5e0f8ebd7f3d72df) C:\Windows\system32\DRIVERS\Rtlh86.sys
                  2011/05/17 15:36:12.0483 3068 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
                  2011/05/17 15:36:12.0538 3068 sdbus (4339a2585708c7d9b0c0ce5aad3dd6ff) C:\Windows\system32\DRIVERS\sdbus.sys
                  2011/05/17 15:36:12.0584 3068 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
                  2011/05/17 15:36:12.0649 3068 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
                  2011/05/17 15:36:12.0790 3068 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
                  2011/05/17 15:36:12.0863 3068 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
                  2011/05/17 15:36:12.0948 3068 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
                  2011/05/17 15:36:13.0081 3068 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
                  2011/05/17 15:36:13.0116 3068 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
                  2011/05/17 15:36:13.0153 3068 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
                  2011/05/17 15:36:13.0215 3068 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
                  2011/05/17 15:36:13.0344 3068 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
                  2011/05/17 15:36:13.0377 3068 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
                  2011/05/17 15:36:13.0435 3068 SmartDefragDriver (46b40982af166bf89c3f51fb13e60d6d) C:\Windows\system32\Drivers\SmartDefragDriver.sys
                  2011/05/17 15:36:13.0481 3068 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
                  2011/05/17 15:36:13.0646 3068 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
                  2011/05/17 15:36:13.0705 3068 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
                  2011/05/17 15:36:13.0750 3068 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys
                  2011/05/17 15:36:13.0892 3068 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys
                  2011/05/17 15:36:14.0019 3068 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
                  2011/05/17 15:36:14.0174 3068 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
                  2011/05/17 15:36:14.0207 3068 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
                  2011/05/17 15:36:14.0241 3068 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
                  2011/05/17 15:36:14.0399 3068 SynTP (f7a4250bb3e3afcd4af100e551509352) C:\Windows\system32\DRIVERS\SynTP.sys
                  2011/05/17 15:36:14.0541 3068 Tcpip (6a10afce0b38371064be41c1fbfd3c6b) C:\Windows\system32\drivers\tcpip.sys
                  2011/05/17 15:36:14.0694 3068 Tcpip6 (6a10afce0b38371064be41c1fbfd3c6b) C:\Windows\system32\DRIVERS\tcpip.sys
                  2011/05/17 15:36:14.0753 3068 tcpipreg (9bf343f4c878d6ad6922b2c5a4fefe0d) C:\Windows\system32\drivers\tcpipreg.sys
                  2011/05/17 15:36:14.0798 3068 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
                  2011/05/17 15:36:14.0829 3068 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
                  2011/05/17 15:36:14.0967 3068 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
                  2011/05/17 15:36:15.0040 3068 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
                  2011/05/17 15:36:15.0127 3068 tifm21 (f779ba4cd37963ab4600c9871b7752a3) C:\Windows\system32\drivers\tifm21.sys
                  2011/05/17 15:36:15.0290 3068 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
                  2011/05/17 15:36:15.0332 3068 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
                  2011/05/17 15:36:15.0372 3068 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
                  2011/05/17 15:36:15.0416 3068 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
                  2011/05/17 15:36:15.0568 3068 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
                  2011/05/17 15:36:15.0708 3068 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
                  2011/05/17 15:36:15.0770 3068 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
                  2011/05/17 15:36:15.0903 3068 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
                  2011/05/17 15:36:15.0944 3068 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
                  2011/05/17 15:36:15.0997 3068 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
                  2011/05/17 15:36:16.0081 3068 UnlockerDriver5 (bb879dcfd22926efbeb3298129898cbb) C:\Program Files\Unlocker\UnlockerDriver5.sys
                  2011/05/17 15:36:16.0231 3068 usbbus (9419faac6552a51542dbba02971c841c) C:\Windows\system32\DRIVERS\lgusbbus.sys
                  2011/05/17 15:36:16.0280 3068 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
                  2011/05/17 15:36:16.0331 3068 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
                  2011/05/17 15:36:16.0486 3068 UsbDiag (c0a466fa4ffec464320e159bc1bbdc0c) C:\Windows\system32\DRIVERS\lgusbdiag.sys
                  2011/05/17 15:36:16.0547 3068 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
                  2011/05/17 15:36:16.0590 3068 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
                  2011/05/17 15:36:16.0736 3068 USBModem (f74a54774a9b0afeb3c40adec68aa600) C:\Windows\system32\DRIVERS\lgusbmodem.sys
                  2011/05/17 15:36:16.0787 3068 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys
                  2011/05/17 15:36:16.0828 3068 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
                  2011/05/17 15:36:16.0962 3068 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
                  2011/05/17 15:36:17.0011 3068 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
                  2011/05/17 15:36:17.0061 3068 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
                  2011/05/17 15:36:17.0211 3068 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
                  2011/05/17 15:36:17.0294 3068 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
                  2011/05/17 15:36:17.0346 3068 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
                  2011/05/17 15:36:17.0500 3068 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
                  2011/05/17 15:36:17.0536 3068 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
                  2011/05/17 15:36:17.0566 3068 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
                  2011/05/17 15:36:17.0629 3068 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
                  2011/05/17 15:36:17.0752 3068 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
                  2011/05/17 15:36:17.0793 3068 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
                  2011/05/17 15:36:17.0841 3068 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
                  2011/05/17 15:36:17.0909 3068 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
                  2011/05/17 15:36:18.0040 3068 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/05/17 15:36:18.0059 3068 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/05/17 15:36:18.0126 3068 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
                  2011/05/17 15:36:18.0205 3068 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
                  2011/05/17 15:36:18.0410 3068 winachsf (6d2350bb6e77e800fc4be4e5b7a2e89a) C:\Windows\system32\DRIVERS\HSX_CNXT.sys
                  2011/05/17 15:36:18.0562 3068 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
                  2011/05/17 15:36:18.0721 3068 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
                  2011/05/17 15:36:18.0768 3068 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
                  2011/05/17 15:36:18.0855 3068 WSVD (2584df81cc9f7e7bd3545691106f8cae) C:\Windows\system32\drivers\WSVD.sys
                  2011/05/17 15:36:18.0994 3068 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
                  2011/05/17 15:36:19.0045 3068 XAudio (5a7ff9a18ff6d7e0527fe3abf9204ef8) C:\Windows\system32\DRIVERS\xaudio.sys
                  2011/05/17 15:36:19.0213 3068 ================================================================================
                  2011/05/17 15:36:19.0213 3068 Scan finished
                  2011/05/17 15:36:19.0213 3068 ================================================================================
                  1. je le trouve ou? je ne peux pas lancer le pre scan le prog ne fonctionne pas
                    1. désolée je viens de le trouver¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan 1.0.1.5 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                      ¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

                      Mis à jour le 17/05/2011 | 13.40 par g3n-h@ckm@n
                      Utilisateur : AS93000 (Administrateurs)
                      Ordinateur : ORDI-DJEMILA

                      Système d'exploitation : Windows Vista (TM) Home Premium (32 bits)
                      Internet Explorer : 9.0.8112.16421
                      Mozilla Firefox : 4.0.1 (fr)

                      Scan : 15:28:15 | 17/05/2011

                      ¤¤¤¤¤¤¤¤¤¤¤ Processus en cours

                      420 | C:\Windows\System32\smss.exe - SYSTEM - Normal - 4
                      488 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - 476
                      532 | C:\Windows\system32\wininit.exe - SYSTEM - High - 476
                      552 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - 540
                      588 | C:\Windows\system32\services.exe - SYSTEM - Normal - 532
                      604 | C:\Windows\system32\lsass.exe - SYSTEM - Normal - 532
                      612 | C:\Windows\system32\lsm.exe - SYSTEM - Normal - 532
                      664 | C:\Windows\system32\winlogon.exe - SYSTEM - High - 540
                      804 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - 588
                      864 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - 588
                      904 | C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe - SYSTEM - Normal - 588
                      1076 | C:\Windows\System32\svchost.exe - SERVICE LOCAL - Normal - 588
                      1128 | C:\Windows\System32\svchost.exe - SYSTEM - Normal - 588
                      1164 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - 588
                      1256 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - 588
                      1272 | C:\Windows\system32\SLsvc.exe - SERVICE RÉSEAU - Normal - 588
                      1336 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - 588
                      1440 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - 588
                      1664 | C:\Windows\System32\spoolsv.exe - SYSTEM - Normal - 588
                      1692 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - 588
                      1860 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - 588
                      1900 | C:\Windows\System32\svchost.exe - SERVICE LOCAL - Normal - 588
                      1992 | C:\Windows\System32\svchost.exe - SERVICE LOCAL - Normal - 588
                      2028 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - 588
                      284 | C:\Windows\System32\svchost.exe - SYSTEM - Normal - 588
                      464 | C:\Windows\system32\SearchIndexer.exe - SYSTEM - Normal - 588
                      540 | C:\Windows\system32\DRIVERS\xaudio.exe - SYSTEM - Normal - 588
                      1748 | C:\Windows\system32\taskeng.exe - SYSTEM - Below Normal - 1164
                      2116 | C:\Windows\system32\Dwm.exe - AS93000 - High - 1128
                      2536 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe - AS93000 - Normal - 2164
                      2556 | C:\Program Files\Microsoft Security Client\msseces.exe - AS93000 - Normal - 2164
                      2624 | C:\Program Files\Vista Start Menu\VistaStartMenu.exe - AS93000 - Normal - 2164
                      2648 | C:\Windows\system32\taskeng.exe - AS93000 - Normal - 1164
                      3700 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - 588
                      2576 | C:\Program Files\Unlocker\UnlockerAssistant.exe - AS93000 - Normal - 2636
                      1816 | C:\Program Files\Windows Media Player\WMPNSCFG.exe - AS93000 - Normal - 2636
                      1360 | C:\Program Files\Windows Media Player\wmpnetwk.exe - SERVICE RÉSEAU - Normal - 588
                      688 | C:\Windows\system32\taskeng.exe - SERVICE LOCAL - Below Normal - 1164
                      2960 | C:\Windows\system32\DllHost.exe - SYSTEM - Normal - 804
                      3220 | C:\Windows\system32\DllHost.exe - SYSTEM - Normal - 804
                      2188 | C:\Users\AS93000\telechargement\Pre_scan.exe - AS93000 - High - 2164
                      2192 | C:\Windows\system32\SearchProtocolHost.exe - SYSTEM - Idle - 464
                      3504 | C:\Windows\system32\SearchFilterHost.exe - SYSTEM - Idle - 464
                      2480 | C:\Windows\system32\cmd.exe - AS93000 - Normal - 2188
                      2356 | C:\Kill'em\Pv.exe - AS93000 - Normal - 2480

                      ¤¤¤¤¤¤¤¤¤¤ Winlogon

                      [HKLM | Winlogon] | Shell : explorer.exe
                      [HKLM | Winlogon] | AutoRestartShell : 1
                      [HKLM | Winlogon] | userinit : C:\Windows\system32\userinit.exe,
                      [HKLM | Winlogon] | PowerDownAfterShutdown : 1
                      [HKLM | Winlogon] | System :

                      ¤¤¤¤¤¤¤¤¤¤ Associations

                      [.exe] : exefile
                      [exefile | command] : "%1" %*
                      [.com] : comfile
                      [comfile | command] : "%1" %*
                      [.reg] : regfile
                      [regfile | command] : regedit.exe "%1"
                      [.scr] : scrfile
                      [scrfile | command] : "%1" /S
                      [.bat] : batfile
                      [batfile | command] : "%1" %*
                      [.cmd] : cmdfile
                      [cmdfile | command] : "%1" %*
                      [.pif] : piffile
                      [piffile | command] : "%1" %*
                      [.url] : InternetShortcut
                      [InternetShortcut | command] : "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l
                      [Application.Manifest | command] : rundll32.exe dfshim.dll,ShOpenVerbApplication %1
                      [Application.Reference | command] : rundll32.exe dfshim.dll,ShOpenVerbShortcut %1|%2
                      [Folder | command] : C:\Windows\explorer.exe

                      ¤

                      [Firefox | Command] | @ : "C:\Program Files\Mozilla Firefox\Firefox.exe"
                      [Firefox - Safemode | Command] | @ : "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
                      [IE | Command] | @ : "C:\Program Files\Internet Explorer\iexplore.exe"
                      [Applications | IE | Command] | @ : "C:\Program Files\Internet Explorer\iexplore.exe" %1
                      [Assoc | Applications] | @ : http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s

                      ¤¤¤¤¤¤¤¤¤¤ Divers

                      [HKCU | Desktop] | Wallpaper : C:\Users\AS93000\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg

                      ¤¤¤¤¤¤¤¤¤¤ Services

                      [Ndisuio] | Start : 3
                      [lmhosts] | Start : 2 : Actif
                      [LanmanWorkstation] | Start : 2 : Actif
                      [LanmanServer] | Start : 2 : Actif
                      [agp440] | Start : 2 : Redémarré
                      [AudioEndpointBuilder] | Start : 2 : Actif
                      [Audiosrv] | Start : 2 : Actif
                      [BFE] | Start : 2 : Actif
                      [Bits] | Start : 2 : Actif
                      [CryptSvc] | Start : 2 : Actif
                      [EapHost] | Start : 2 : Actif
                      [Wlansvc] | Start : 2 : Actif
                      [SharedAccess] | Start : 2 : Redémarré
                      [windefend] | Start : 2 : Redémarré
                      [wuauserv] | Start : 2 : Actif
                      [WerSvc] | Start : 2 : Actif
                      [wscsvc] | Start : 2 : Actif

                      ¤¤¤¤¤¤¤¤¤¤ Internet Explorer

                      [HKCU | Main] | Start Page : https://www.google.com/?gws_rd=ssl
                      [HKCU | Main] | Local Page : C:\Windows\system32\blank.htm
                      [HKCU | Main] | Search Page : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

                      [HKLM | Main] | Start Page : https://www.msn.com/fr-fr/?ocid=iehp
                      [HKLM | Main] | Local Page : C:\Windows\System32\blank.htm
                      [HKLM | Main] | Default_Search_URL : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      [HKLM | Main] | Default_Page_URL : https://www.msn.com/fr-fr/?ocid=iehp
                      [HKLM | Main] | Search Page : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

                      ¤¤¤¤¤¤¤¤¤¤ Processus

                      C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe -> Processus stoppé
                      C:\Windows\explorer.exe -> Processus stoppé
                      C:\Windows\RtHDVCpl.exe -> Processus stoppé
                      C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe -> Processus stoppé
                      C:\Windows\RtHDVCpl.exe -> Processus stoppé
                      C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe -> Processus stoppé
                      C:\Windows\RtHDVCpl.exe -> Processus stoppé
                      C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe -> Processus stoppé
                      C:\Windows\RtHDVCpl.exe -> Processus stoppé
                      C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe -> Processus stoppé
                      C:\Windows\RtHDVCpl.exe -> Processus stoppé

                      ¤¤¤¤¤¤¤¤¤¤ Traitement Fichiers | Dossiers | Registre

                      Mise en quarantaine : C:\Users\AS93000\AppData\Local\Temp\RtkBtMnt.exe

                      ¤¤¤¤¤¤¤¤¤¤ IFEO

                      ¤¤¤¤¤¤¤¤¤¤ Mountpoints2

                      ¤¤¤¤¤¤¤¤¤¤ Listing %AppData%

                      [02/09/2008 | 21:31:17] | C:\Users\AS93000\AppData\Roaming\Adobe
                      [11/06/2009 | 08:54:39] | C:\Users\AS93000\AppData\Roaming\Bouygues-BboxMini.649F13D0CDF968A472A16014E8BC8A2ED131D04E.1
                      [16/01/2009 | 20:32:22] | C:\Users\AS93000\AppData\Roaming\CyberLink
                      [19/03/2011 | 19:25:57] | C:\Users\AS93000\AppData\Roaming\D-Jix
                      [19/03/2011 | 19:28:12] | C:\Users\AS93000\AppData\Roaming\D-Jix Media LE
                      [19/03/2011 | 19:01:33] | C:\Users\AS93000\AppData\Roaming\dvdcss
                      [18/03/2011 | 20:42:16] | C:\Users\AS93000\AppData\Roaming\DVDVideoSoftIEHelpers
                      [27/12/2010 | 22:29:01] | C:\Users\AS93000\AppData\Roaming\ESTsoft
                      [10/09/2010 | 17:15:11] | C:\Users\AS93000\AppData\Roaming\Foxit
                      [10/09/2010 | 17:15:11] | C:\Users\AS93000\AppData\Roaming\Foxit Software
                      [11/07/2010 | 22:18:47] | C:\Users\AS93000\AppData\Roaming\GlarySoft
                      [05/09/2008 | 09:59:45] | C:\Users\AS93000\AppData\Roaming\Google
                      [02/09/2008 | 14:36:33] | C:\Users\AS93000\AppData\Roaming\HP
                      [19/10/2009 | 08:09:59] | C:\Users\AS93000\AppData\Roaming\HpUpdate
                      [21/03/2011 | 09:42:16] | C:\Users\AS93000\AppData\Roaming\IObit
                      [17/03/2011 | 19:54:12] | C:\Users\AS93000\AppData\Roaming\Macromedia
                      [17/05/2011 | 10:57:44] | C:\Users\AS93000\AppData\Roaming\Malwarebytes
                      [28/08/2008 | 15:09:36] | C:\Users\AS93000\AppData\Roaming\Microsoft
                      [15/05/2011 | 08:53:42] | C:\Users\AS93000\AppData\Roaming\Mozilla
                      [05/04/2011 | 10:33:27] | C:\Users\AS93000\AppData\Roaming\nvModes.001
                      [03/04/2011 | 11:18:48] | C:\Users\AS93000\AppData\Roaming\nvModes.dat
                      [11/10/2008 | 14:02:54] | C:\Users\AS93000\AppData\Roaming\Printer Info Cache
                      [10/09/2010 | 16:02:23] | C:\Users\AS93000\AppData\Roaming\Vista Start Menu
                      [05/12/2010 | 21:12:07] | C:\Users\AS93000\AppData\Roaming\vlc

                      ¤¤¤¤¤¤¤¤¤¤ Listing %CommonAppData%

                      [02/11/2006 | 15:02:03] | C:\ProgramData\Application Data
                      [28/08/2008 | 15:06:05] | C:\ProgramData\Bureau
                      [02/11/2006 | 15:02:03] | C:\ProgramData\Desktop
                      [02/11/2006 | 15:02:03] | C:\ProgramData\Documents
                      [11/07/2010 | 13:40:59] | C:\ProgramData\EmailNotifier
                      [27/12/2010 | 22:29:18] | C:\ProgramData\ESTsoft
                      [28/08/2008 | 15:06:05] | C:\ProgramData\Favoris
                      [02/11/2006 | 15:02:03] | C:\ProgramData\Favorites
                      [17/02/2011 | 20:29:57] | C:\ProgramData\FreeApp
                      [05/09/2008 | 09:56:53] | C:\ProgramData\Google
                      [02/09/2008 | 14:23:35] | C:\ProgramData\Hewlett-Packard
                      [02/09/2008 | 14:23:27] | C:\ProgramData\HP
                      [28/08/2008 | 15:14:30] | C:\ProgramData\InstallShield
                      [17/10/2008 | 13:53:57] | C:\ProgramData\Malwarebytes
                      [11/07/2010 | 13:41:00] | C:\ProgramData\Megaupload
                      [28/08/2008 | 15:06:05] | C:\ProgramData\Menu Démarrer
                      [02/11/2006 | 13:18:33] | C:\ProgramData\Microsoft
                      [28/08/2008 | 15:06:05] | C:\ProgramData\Modèles
                      [25/03/2010 | 20:33:28] | C:\ProgramData\ntuser.pol
                      [22/01/2009 | 21:47:55] | C:\ProgramData\NVIDIA
                      [02/11/2006 | 15:02:03] | C:\ProgramData\Start Menu
                      [31/03/2010 | 09:23:44] | C:\ProgramData\Sun
                      [10/12/2006 | 12:18:57] | C:\ProgramData\Symantec
                      [02/11/2006 | 15:02:04] | C:\ProgramData\Templates
                      [02/09/2008 | 14:37:01] | C:\ProgramData\WEBREG
                      1. le document texte qui se trouve dans ton lecteur C:\ et qui s'apelle Pre_Scan.txt
                        1. ▶ Télécharge : Gmer (by Przemyslaw Gmerek) et enregistre-le sur ton bureau

                          Desactive toutes tes protections le temps du scan de gMer

                          Pour XP => double clique sur gmer.exe
                          Pour Vista et 7 => clique droit "executer en tant que...."

                          ▶ clique sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

                          ▶ Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
                          1. dès que je lance le gmer mon la fenêtre apparait mais mon pc s'éteint aussitôt
                            1. sur ce que tu as vu aujourd'hui vois tu un ou des problèmes qui peuvent se résoudre ou pas du tout
                              1. tu as bien desactivé tes protections pour gmer ?
                                tu l'as bien lancé avec le clic droit "executer en tant qu'administrateur" ?
                                1. bonjour, oui j'avais tout désactivé j'ai lancé le gmer "executer en tant qu'administrateur" et là le scan commence et mon pc s'éteint directement y a t'il une autre solution merci
                                  • 1
                                  • 2