Probleme infection Zaccess que faire .
Résolu
babou834
Messages postés
8
Statut
Membre
-
babou834 -
babou834 -
Bonjour, a tous je suis nouveaux sur le forum ,je vous explique mon petit problème
Il y a quelque jour mon Pc est devenue si je puis dire (une véritable écurie champignonnière un nid a virus) il y en a tellement que je ne saurais vous les citer .
j'ai don réaliser un scan combo en suivant scrupuleusement les recommandation donné par plusieurs sites comme on dis google a été mon ami mais la je bloque sur l'interprétation du rapport donc si quelqu'un pourrais me donner la marche a suivre pour éradiquer tout sa et aussi pour prévenir la prochaine fois je suis preneur merci d'avance
tout les réponse seront les bienvenue
(il y aussi ce probleme de Gomeo je me demande si il n'y serais pas pour quelque chose )
Voici le rapport :
ComboFix 11-08-29.03 - koron's 30/08/2011 2:09.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1685 [GMT 2:00]
Lancé depuis: c:\documents and settings\koron's\Bureau\cacafixounet.exe
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\koron's\Application Data\cacaoweb
c:\documents and settings\koron's\Application Data\cacaoweb\errorlog.txt
c:\documents and settings\koron's\Application Data\cacaoweb\npdfile.dat
c:\documents and settings\koron's\Application Data\cacaoweb\replicating8F67E66076B69068B28CFFB1CB446B60.cacao
c:\documents and settings\koron's\Application Data\cacaoweb\storage.db
c:\documents and settings\koron's\Bureau\cacaoweb.exe
c:\documents and settings\koron's\WINDOWS
c:\program files\cacaoweb
c:\program files\cacaoweb\cacaoweb.exe
c:\windows\$NtUninstallKB46880$
c:\windows\$NtUninstallKB46880$\2480090170
c:\windows\$NtUninstallKB46880$\3275721696\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB46880$\3275721696\click.tlb
c:\windows\$NtUninstallKB46880$\3275721696\L\bjprseiu
c:\windows\$NtUninstallKB46880$\3275721696\loader(2).tlb
c:\windows\$NtUninstallKB46880$\3275721696\loader.tlb
c:\windows\$NtUninstallKB46880$\3275721696\U\@00000001
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000c0
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000cb
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000cf
c:\windows\$NtUninstallKB46880$\3275721696\U\@80000000
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000c0
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000cb
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000cf
c:\windows\system32\c_47781.nls
.
Une copie infectée de c:\windows\system32\drivers\cdrom.sys a été trouvée et désinfectée
Copie restaurée à partir de - The cat found it :)
Une copie infectée de c:\windows\system32\wuauclt.exe a été trouvée et désinfectée
Copie restaurée à partir de - c:\windows\system32\dllcache\wuauclt.exe
.
c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe . . . est infecté!!
.
c:\program files\Bonjour\mDNSResponder.exe . . . est infecté!!
.
c:\program files\iPod\bin\iPodService.exe . . . est infecté!!
.
c:\program files\Java\jre6\bin\jqs.exe . . . est infecté!!
.
c:\program files\PC Connectivity Solution\ServiceLayer.exe . . . est infecté!!
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_c33f8be0
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-07-28 au 2011-08-30 ))))))))))))))))))))))))))))))))))))
.
.
2011-08-30 00:06 . 2008-04-13 18:40 62976 -c--a-w- c:\windows\system32\dllcache\cdrom.sys
2011-08-30 00:06 . 2008-04-13 18:40 62976 ----a-w- c:\windows\system32\drivers\cdrom.sys
2011-08-29 23:39 . 2011-08-29 23:39 4606 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-08-29 23:18 . 2011-08-29 23:18 -------- d-----w- c:\documents and settings\LocalService\Bureau
2011-08-29 23:17 . 2011-08-15 11:08 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2011-08-29 23:15 . 2011-08-15 11:14 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2011-08-29 23:15 . 2011-08-29 23:43 -------- d-----w- c:\documents and settings\koron's\Application Data\TuneUp Software
2011-08-29 23:15 . 2011-08-29 23:17 -------- d-----w- c:\program files\TuneUp Utilities 2011
2011-08-29 23:15 . 2011-08-29 23:17 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2011-08-29 23:15 . 2011-08-29 23:15 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-08-29 23:10 . 2011-08-29 23:10 -------- d-----w- c:\program files\CCleaner
2011-08-29 23:09 . 2011-08-29 23:09 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-08-29 20:03 . 2008-04-13 18:45 20608 -c--a-w- c:\windows\system32\dllcache\usbuhci.sys
2011-08-29 20:03 . 2008-04-13 18:45 20608 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-08-29 19:56 . 2011-08-29 19:56 -------- d-----w- c:\windows\system32\wbem\Repository
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Desktop iPhone
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Fichiers communs\Nuance
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Fichiers communs\ScanSoft Shared
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\ScanSoft
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Nuance
2011-08-29 19:50 . 2011-08-29 19:50 -------- d-----w- c:\program files\Ubisoft
2011-08-29 19:50 . 2011-08-29 19:50 -------- d-----w- c:\program files\Xilisoft
2011-08-29 19:33 . 2011-08-29 19:33 -------- d-----w- c:\documents and settings\koron's\Application Data\SUPERAntiSpyware.com
2011-08-29 19:30 . 2011-08-29 19:30 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-08-29 19:11 . 2011-08-29 19:47 -------- d-s---w- c:\documents and settings\Administrateur
2011-08-29 18:49 . 2011-08-29 18:53 -------- d-----w- c:\documents and settings\koron's\Local Settings\Application Data\antiphishing-vmntbcleaner1_0dn
2011-08-29 18:49 . 2011-08-29 19:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Anti-phishing Domain Advisor
2011-08-29 18:49 . 2011-08-29 19:47 -------- d-----w- c:\program files\Toolbar Cleaner
2011-08-28 21:46 . 2011-08-28 21:46 -------- d-----w- c:\documents and settings\koron's\Application Data\Lavasoft
2011-08-28 21:38 . 2011-08-28 21:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-08-28 21:25 . 2011-08-29 19:48 -------- d-----w- c:\program files\Ad-Remover
2011-08-28 19:22 . 2011-08-29 19:49 -------- d-----w- C:\pebuilder313
2011-08-26 22:12 . 2011-08-26 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2011-08-26 21:29 . 2011-08-26 21:29 -------- d-----w- c:\documents and settings\koron's\Local Settings\Application Data\Microsoft Corporation
2011-08-26 21:29 . 2011-08-29 19:50 -------- d-----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2011-08-26 20:51 . 2011-08-26 20:51 -------- d-----w- c:\program files\Realtek
2011-08-26 20:50 . 2011-08-26 20:50 -------- d-----w- c:\program files\Marvell
2011-08-26 20:29 . 2011-08-29 19:52 -------- d-----w- c:\program files\ma-config.com
2011-08-26 20:29 . 2011-08-29 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2011-08-26 16:36 . 2011-08-26 16:36 -------- d-----w- c:\program files\PowerQuest
2011-08-25 09:34 . 2011-08-25 09:34 -------- d-----w- c:\program files\Alcohol Soft
2011-08-25 09:08 . 2011-08-29 19:53 -------- d-----w- c:\documents and settings\NetworkService\UserData
2011-08-25 08:34 . 2011-08-25 08:34 -------- d-----w- c:\documents and settings\koron's\Application Data\Ahead
2011-08-25 08:34 . 2011-08-25 08:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Ahead
2011-08-25 08:07 . 2011-08-29 19:53 -------- d-----w- c:\documents and settings\koron's\Application Data\DeepBurner
2011-08-23 09:13 . 2011-08-29 19:55 -------- d-----w- c:\program files\Analog Devices
2011-08-23 08:29 . 2011-08-23 08:29 -------- d-----w- c:\windows\OPTIONS
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-21 18:17 . 2004-08-05 12:00 371200 ----a-w- c:\windows\system32\html.iec
2011-06-06 11:35 . 2004-08-05 12:00 1859072 ----a-w- c:\windows\system32\win32k.sys
2011-07-27 12:15 . 2011-05-09 19:18 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2002-08-29 . A0EE5C06390357FEE7B7949DBCA156D3 . 165376 . . [5.1.2600.1106] . . c:\windows\system32\appmgmts.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\C:\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"cacaoweb"="c:\program files\cacaoweb\cacaoweb.exe" -noplayer
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"SUPERAntiSpyware"=c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" /background
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"BigDogPath"=c:\windows\VM_STI.EXE Cammaestro 4.2GU build 1105
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking10\Ereg\Ereg.exe" -r "c:\documents and settings\All Users\Application Data\Nuance\NaturallySpeaking10\Ereg.ini
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"ISUSPM Startup"=c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
"SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\adslTV\\adsltv.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\koron's\\Application Data\\uTorrent\\Duke3D\\eduke32.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Nokia\\Nokia PC Suite 7\\PCSuite.exe"=
"c:\\WINDOWS\\system32\\oobe\\msoobe.exe"=
"c:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"=
"c:\\Documents and Settings\\koron's\\Bureau\\SUPERAntiSpyware.exe"=
"d:\\ccsetup310.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\UpdateWizard.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\RegWiz.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\TURatingSynch.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22/07/2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12/07/2011 23:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [12/08/2011 01:38 116608]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [15/08/2011 13:10 1526080]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [07/10/2010 13:34 10064]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [05/08/2004 14:00 14336]
S3 DLPortIO;DriverLINX Port I/O Driver;c:\windows\system32\drivers\DLPORTIO.SYS [19/10/2010 17:12 3584]
S3 L6TportK;Service - Line 6 TonePort KB37;c:\windows\system32\drivers\L6TportK.sys [07/08/2009 18:10 532992]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [19/11/2009 20:17 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [19/11/2009 20:17 8320]
S3 ZSMC302;Cammaestro 4.2GU build 1105;c:\windows\system32\drivers\usbvm302.sys [12/10/2009 21:16 195263]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'
.
2011-07-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:57]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.0.254
FF - ProfilePath - c:\documents and settings\koron's\Application Data\Mozilla\Firefox\Profiles\1ndrfmyr.default\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-30 02:21
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: WDC_WD3200AAKS-00L9A0 rev.01.03E01 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP5T0L0-1f
.
device: opened successfully
user: MBR read successfully
error: Read Un périphérique attaché au système ne fonctionne pas correctement.
kernel: MBR read successfully
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x8A34C31B
user & kernel MBR OK
.
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(916)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(732)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_fre.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\program files\Microsoft Virtual PC\VPCShExH.DLL
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\wscntfy.exe
c:\windows\SOUNDMAN.EXE
.
**************************************************************************
.
Heure de fin: 2011-08-30 02:27:46 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-08-30 00:27
.
Avant-CF: 121 008 619 520 octets libres
Après-CF: 121 659 547 648 octets libres
.
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect
.
- - End Of File - - D736B70E9DD4593B578CE79A6353318C
Il y a quelque jour mon Pc est devenue si je puis dire (une véritable écurie champignonnière un nid a virus) il y en a tellement que je ne saurais vous les citer .
j'ai don réaliser un scan combo en suivant scrupuleusement les recommandation donné par plusieurs sites comme on dis google a été mon ami mais la je bloque sur l'interprétation du rapport donc si quelqu'un pourrais me donner la marche a suivre pour éradiquer tout sa et aussi pour prévenir la prochaine fois je suis preneur merci d'avance
tout les réponse seront les bienvenue
(il y aussi ce probleme de Gomeo je me demande si il n'y serais pas pour quelque chose )
Voici le rapport :
ComboFix 11-08-29.03 - koron's 30/08/2011 2:09.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1685 [GMT 2:00]
Lancé depuis: c:\documents and settings\koron's\Bureau\cacafixounet.exe
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\koron's\Application Data\cacaoweb
c:\documents and settings\koron's\Application Data\cacaoweb\errorlog.txt
c:\documents and settings\koron's\Application Data\cacaoweb\npdfile.dat
c:\documents and settings\koron's\Application Data\cacaoweb\replicating8F67E66076B69068B28CFFB1CB446B60.cacao
c:\documents and settings\koron's\Application Data\cacaoweb\storage.db
c:\documents and settings\koron's\Bureau\cacaoweb.exe
c:\documents and settings\koron's\WINDOWS
c:\program files\cacaoweb
c:\program files\cacaoweb\cacaoweb.exe
c:\windows\$NtUninstallKB46880$
c:\windows\$NtUninstallKB46880$\2480090170
c:\windows\$NtUninstallKB46880$\3275721696\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB46880$\3275721696\click.tlb
c:\windows\$NtUninstallKB46880$\3275721696\L\bjprseiu
c:\windows\$NtUninstallKB46880$\3275721696\loader(2).tlb
c:\windows\$NtUninstallKB46880$\3275721696\loader.tlb
c:\windows\$NtUninstallKB46880$\3275721696\U\@00000001
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000c0
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000cb
c:\windows\$NtUninstallKB46880$\3275721696\U\@000000cf
c:\windows\$NtUninstallKB46880$\3275721696\U\@80000000
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000c0
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000cb
c:\windows\$NtUninstallKB46880$\3275721696\U\@800000cf
c:\windows\system32\c_47781.nls
.
Une copie infectée de c:\windows\system32\drivers\cdrom.sys a été trouvée et désinfectée
Copie restaurée à partir de - The cat found it :)
Une copie infectée de c:\windows\system32\wuauclt.exe a été trouvée et désinfectée
Copie restaurée à partir de - c:\windows\system32\dllcache\wuauclt.exe
.
c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe . . . est infecté!!
.
c:\program files\Bonjour\mDNSResponder.exe . . . est infecté!!
.
c:\program files\iPod\bin\iPodService.exe . . . est infecté!!
.
c:\program files\Java\jre6\bin\jqs.exe . . . est infecté!!
.
c:\program files\PC Connectivity Solution\ServiceLayer.exe . . . est infecté!!
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_c33f8be0
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-07-28 au 2011-08-30 ))))))))))))))))))))))))))))))))))))
.
.
2011-08-30 00:06 . 2008-04-13 18:40 62976 -c--a-w- c:\windows\system32\dllcache\cdrom.sys
2011-08-30 00:06 . 2008-04-13 18:40 62976 ----a-w- c:\windows\system32\drivers\cdrom.sys
2011-08-29 23:39 . 2011-08-29 23:39 4606 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-08-29 23:18 . 2011-08-29 23:18 -------- d-----w- c:\documents and settings\LocalService\Bureau
2011-08-29 23:17 . 2011-08-15 11:08 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2011-08-29 23:15 . 2011-08-15 11:14 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2011-08-29 23:15 . 2011-08-29 23:43 -------- d-----w- c:\documents and settings\koron's\Application Data\TuneUp Software
2011-08-29 23:15 . 2011-08-29 23:17 -------- d-----w- c:\program files\TuneUp Utilities 2011
2011-08-29 23:15 . 2011-08-29 23:17 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2011-08-29 23:15 . 2011-08-29 23:15 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-08-29 23:10 . 2011-08-29 23:10 -------- d-----w- c:\program files\CCleaner
2011-08-29 23:09 . 2011-08-29 23:09 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-08-29 20:03 . 2008-04-13 18:45 20608 -c--a-w- c:\windows\system32\dllcache\usbuhci.sys
2011-08-29 20:03 . 2008-04-13 18:45 20608 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-08-29 19:56 . 2011-08-29 19:56 -------- d-----w- c:\windows\system32\wbem\Repository
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Desktop iPhone
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Fichiers communs\Nuance
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Fichiers communs\ScanSoft Shared
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\ScanSoft
2011-08-29 19:52 . 2011-08-29 19:52 -------- d-----w- c:\program files\Nuance
2011-08-29 19:50 . 2011-08-29 19:50 -------- d-----w- c:\program files\Ubisoft
2011-08-29 19:50 . 2011-08-29 19:50 -------- d-----w- c:\program files\Xilisoft
2011-08-29 19:33 . 2011-08-29 19:33 -------- d-----w- c:\documents and settings\koron's\Application Data\SUPERAntiSpyware.com
2011-08-29 19:30 . 2011-08-29 19:30 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-08-29 19:11 . 2011-08-29 19:47 -------- d-s---w- c:\documents and settings\Administrateur
2011-08-29 18:49 . 2011-08-29 18:53 -------- d-----w- c:\documents and settings\koron's\Local Settings\Application Data\antiphishing-vmntbcleaner1_0dn
2011-08-29 18:49 . 2011-08-29 19:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Anti-phishing Domain Advisor
2011-08-29 18:49 . 2011-08-29 19:47 -------- d-----w- c:\program files\Toolbar Cleaner
2011-08-28 21:46 . 2011-08-28 21:46 -------- d-----w- c:\documents and settings\koron's\Application Data\Lavasoft
2011-08-28 21:38 . 2011-08-28 21:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-08-28 21:25 . 2011-08-29 19:48 -------- d-----w- c:\program files\Ad-Remover
2011-08-28 19:22 . 2011-08-29 19:49 -------- d-----w- C:\pebuilder313
2011-08-26 22:12 . 2011-08-26 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2011-08-26 21:29 . 2011-08-26 21:29 -------- d-----w- c:\documents and settings\koron's\Local Settings\Application Data\Microsoft Corporation
2011-08-26 21:29 . 2011-08-29 19:50 -------- d-----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2011-08-26 20:51 . 2011-08-26 20:51 -------- d-----w- c:\program files\Realtek
2011-08-26 20:50 . 2011-08-26 20:50 -------- d-----w- c:\program files\Marvell
2011-08-26 20:29 . 2011-08-29 19:52 -------- d-----w- c:\program files\ma-config.com
2011-08-26 20:29 . 2011-08-29 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2011-08-26 16:36 . 2011-08-26 16:36 -------- d-----w- c:\program files\PowerQuest
2011-08-25 09:34 . 2011-08-25 09:34 -------- d-----w- c:\program files\Alcohol Soft
2011-08-25 09:08 . 2011-08-29 19:53 -------- d-----w- c:\documents and settings\NetworkService\UserData
2011-08-25 08:34 . 2011-08-25 08:34 -------- d-----w- c:\documents and settings\koron's\Application Data\Ahead
2011-08-25 08:34 . 2011-08-25 08:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Ahead
2011-08-25 08:07 . 2011-08-29 19:53 -------- d-----w- c:\documents and settings\koron's\Application Data\DeepBurner
2011-08-23 09:13 . 2011-08-29 19:55 -------- d-----w- c:\program files\Analog Devices
2011-08-23 08:29 . 2011-08-23 08:29 -------- d-----w- c:\windows\OPTIONS
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-21 18:17 . 2004-08-05 12:00 371200 ----a-w- c:\windows\system32\html.iec
2011-06-06 11:35 . 2004-08-05 12:00 1859072 ----a-w- c:\windows\system32\win32k.sys
2011-07-27 12:15 . 2011-05-09 19:18 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2002-08-29 . A0EE5C06390357FEE7B7949DBCA156D3 . 165376 . . [5.1.2600.1106] . . c:\windows\system32\appmgmts.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\C:\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"cacaoweb"="c:\program files\cacaoweb\cacaoweb.exe" -noplayer
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"SUPERAntiSpyware"=c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" /background
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"BigDogPath"=c:\windows\VM_STI.EXE Cammaestro 4.2GU build 1105
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking10\Ereg\Ereg.exe" -r "c:\documents and settings\All Users\Application Data\Nuance\NaturallySpeaking10\Ereg.ini
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"ISUSPM Startup"=c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
"SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\adslTV\\adsltv.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\koron's\\Application Data\\uTorrent\\Duke3D\\eduke32.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Nokia\\Nokia PC Suite 7\\PCSuite.exe"=
"c:\\WINDOWS\\system32\\oobe\\msoobe.exe"=
"c:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"=
"c:\\Documents and Settings\\koron's\\Bureau\\SUPERAntiSpyware.exe"=
"d:\\ccsetup310.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\UpdateWizard.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\RegWiz.exe"=
"c:\\Program Files\\TuneUp Utilities 2011\\TURatingSynch.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22/07/2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12/07/2011 23:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [12/08/2011 01:38 116608]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [15/08/2011 13:10 1526080]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [07/10/2010 13:34 10064]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [05/08/2004 14:00 14336]
S3 DLPortIO;DriverLINX Port I/O Driver;c:\windows\system32\drivers\DLPORTIO.SYS [19/10/2010 17:12 3584]
S3 L6TportK;Service - Line 6 TonePort KB37;c:\windows\system32\drivers\L6TportK.sys [07/08/2009 18:10 532992]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [19/11/2009 20:17 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [19/11/2009 20:17 8320]
S3 ZSMC302;Cammaestro 4.2GU build 1105;c:\windows\system32\drivers\usbvm302.sys [12/10/2009 21:16 195263]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'
.
2011-07-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:57]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.0.254
FF - ProfilePath - c:\documents and settings\koron's\Application Data\Mozilla\Firefox\Profiles\1ndrfmyr.default\
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-30 02:21
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: WDC_WD3200AAKS-00L9A0 rev.01.03E01 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP5T0L0-1f
.
device: opened successfully
user: MBR read successfully
error: Read Un périphérique attaché au système ne fonctionne pas correctement.
kernel: MBR read successfully
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x8A34C31B
user & kernel MBR OK
.
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(916)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(732)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_fre.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\program files\Microsoft Virtual PC\VPCShExH.DLL
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\wscntfy.exe
c:\windows\SOUNDMAN.EXE
.
**************************************************************************
.
Heure de fin: 2011-08-30 02:27:46 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-08-30 00:27
.
Avant-CF: 121 008 619 520 octets libres
Après-CF: 121 659 547 648 octets libres
.
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect
.
- - End Of File - - D736B70E9DD4593B578CE79A6353318C
10 réponses
-
Salut,
Tu as une infection Zacess : https://www.malekal.com/sirefef-b-rootkit-win32-zaccess-max/
et possible aussi Trojan.Urugay qui patch les fichiers au démarrage...
Ca va pas des cracks ou faux codecs mais aussi des exploits sur site WEB...
Ton truc c'est pas simple à virer. Le mieux c'est de formater.
Sauvegarde déjà les documents importants.
Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Poste le rapport ici.
Fais un scan en ligne NOD32 et éradique tout ce qui est détecté :
https://www.malekal.com/scan-antivirus-ligne-nod32/#NOD32
https://www.commentcamarche.net/faq/29643-scanner-en-ligne-avec-eset-nod32
Poste le rapport ici.
Refais un scan Combofix et poste le rapport ici.
-
je te remercie pour ton aide je fais tous sa et je poste sa en rentrant ce soir ou avan si j'ai le temp :)
-
oui mais bon je te garantie pas que ça va marcher...
Et surtout, l'infection là elle est pas stable du tout, ton Windows il peut se mettre à m*rdouiller à tout moment, donc sauvegarde bien les docs importants.
-
en cas de probleme si sa merdouille est ce que je pourrais récupérer mes données avec bart pe ou pci file recovery que je sais utiliser ??
merci d'avance -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
oui, eventuellement tu as ce BartPE : https://forum.malekal.com/viewtopic.php?t=23453&start=
qui permet de lancer OTL, un outil de diagnostique...
On peux tenter de supprimer le malware, mais pas dit qu'on y arrive.
-
je ne sais pas du tout sa fais bien longtemps que je m'en suis pas servi j'ai aussi ultimate boot ou hirent boot car si je perd mes donnée je crois que je m'en remetrais pas :p
-
voici mon rapport tdss killer qui bizarrement ne m'a rien detecter le rapport nod 32 arrive:
merci d'avance
2011/08/30 23:17:09.0484 1312 TDSS rootkit removing tool 2.5.17.0 Aug 22 2011 15:46:57
2011/08/30 23:17:09.0781 1312 ================================================================================
2011/08/30 23:17:09.0781 1312 SystemInfo:
2011/08/30 23:17:09.0781 1312
2011/08/30 23:17:09.0781 1312 OS Version: 5.1.2600 ServicePack: 3.0
2011/08/30 23:17:09.0781 1312 Product type: Workstation
2011/08/30 23:17:09.0781 1312 ComputerName: KORON-2E24155B6
2011/08/30 23:17:09.0781 1312 UserName: koron's
2011/08/30 23:17:09.0781 1312 Windows directory: C:\WINDOWS
2011/08/30 23:17:09.0781 1312 System windows directory: C:\WINDOWS
2011/08/30 23:17:09.0781 1312 Processor architecture: Intel x86
2011/08/30 23:17:09.0781 1312 Number of processors: 2
2011/08/30 23:17:09.0781 1312 Page size: 0x1000
2011/08/30 23:17:09.0781 1312 Boot type: Safe boot with network
2011/08/30 23:17:09.0781 1312 ================================================================================
2011/08/30 23:17:11.0046 1312 Initialize success
2011/08/30 23:17:15.0000 1616 ================================================================================
2011/08/30 23:17:15.0000 1616 Scan started
2011/08/30 23:17:15.0000 1616 Mode: Manual;
2011/08/30 23:17:15.0000 1616 ================================================================================
2011/08/30 23:17:16.0156 1616 Aavmker4 (dfcdd5936cad0138775d5a105d4c7716) C:\WINDOWS\system32\drivers\Aavmker4.sys
2011/08/30 23:17:16.0265 1616 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/08/30 23:17:16.0312 1616 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/08/30 23:17:16.0390 1616 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/08/30 23:17:16.0468 1616 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
2011/08/30 23:17:16.0687 1616 ALCXWDM (dd8520280304b6145a6be31008748c7c) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011/08/30 23:17:16.0875 1616 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
2011/08/30 23:17:17.0015 1616 aswFsBlk (861cb512e4e850e87dd2316f88d69330) C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011/08/30 23:17:17.0046 1616 aswMon2 (7857e0b4c817f69ff463eea2c63e56f9) C:\WINDOWS\system32\drivers\aswMon2.sys
2011/08/30 23:17:17.0078 1616 aswRdr (8db043bf96bb6d334e5b4888e709e1c7) C:\WINDOWS\system32\drivers\aswRdr.sys
2011/08/30 23:17:17.0109 1616 aswSnx (17230708a2028cd995656df455f2e303) C:\WINDOWS\system32\drivers\aswSnx.sys
2011/08/30 23:17:17.0140 1616 aswSP (dbedd9d43b00630966ef05d2d8d04cee) C:\WINDOWS\system32\drivers\aswSP.sys
2011/08/30 23:17:17.0187 1616 aswTdi (984cfce2168286c2511695c2f9621475) C:\WINDOWS\system32\drivers\aswTdi.sys
2011/08/30 23:17:17.0218 1616 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/08/30 23:17:17.0265 1616 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/08/30 23:17:17.0531 1616 ati2mtag (c0b86ecb324e50f6bbd529f9d5c6b24b) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
2011/08/30 23:17:17.0593 1616 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/08/30 23:17:17.0656 1616 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/08/30 23:17:17.0703 1616 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/08/30 23:17:17.0781 1616 Btcsrusb (7304acc25455746912de37d7ded387ed) C:\WINDOWS\system32\Drivers\btcusb.sys
2011/08/30 23:17:17.0843 1616 BTNetFilter (6b05fdc0cfc3753b520d2d4176cc32d0) C:\WINDOWS\system32\drivers\BTNetFilter.sys
2011/08/30 23:17:17.0906 1616 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/08/30 23:17:17.0953 1616 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/08/30 23:17:18.0000 1616 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/08/30 23:17:18.0046 1616 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/08/30 23:17:18.0093 1616 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/08/30 23:17:18.0359 1616 CrystalSysInfo (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder\SysInfo.sys
2011/08/30 23:17:18.0437 1616 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/08/30 23:17:18.0500 1616 DLPortIO (1d95d36db805787d54eb50e45ed4af40) C:\WINDOWS\system32\DRIVERS\DLPortIO.SYS
2011/08/30 23:17:18.0562 1616 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
2011/08/30 23:17:18.0593 1616 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
2011/08/30 23:17:18.0625 1616 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/08/30 23:17:18.0687 1616 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/08/30 23:17:18.0812 1616 driverhardwarev2 (0f1189883690949ba7a9f68339587e51) C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys
2011/08/30 23:17:18.0828 1616 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/08/30 23:17:18.0906 1616 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/08/30 23:17:18.0953 1616 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/08/30 23:17:18.0984 1616 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
2011/08/30 23:17:19.0015 1616 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/08/30 23:17:19.0093 1616 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/08/30 23:17:19.0125 1616 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/08/30 23:17:19.0140 1616 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/08/30 23:17:19.0203 1616 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
2011/08/30 23:17:19.0265 1616 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/08/30 23:17:19.0343 1616 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/08/30 23:17:19.0375 1616 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/08/30 23:17:19.0484 1616 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/08/30 23:17:19.0562 1616 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/08/30 23:17:19.0609 1616 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/08/30 23:17:19.0750 1616 intelppm (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/08/30 23:17:19.0812 1616 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/08/30 23:17:19.0843 1616 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/08/30 23:17:19.0875 1616 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/08/30 23:17:19.0921 1616 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/08/30 23:17:19.0953 1616 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/08/30 23:17:20.0015 1616 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/08/30 23:17:20.0031 1616 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/08/30 23:17:20.0078 1616 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/08/30 23:17:20.0109 1616 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
2011/08/30 23:17:20.0156 1616 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/08/30 23:17:20.0203 1616 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/08/30 23:17:20.0265 1616 L6TportK (8b41ca266b68e2207bd92c8a3ed7c431) C:\WINDOWS\system32\Drivers\L6TportK.sys
2011/08/30 23:17:20.0375 1616 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/08/30 23:17:20.0437 1616 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
2011/08/30 23:17:20.0484 1616 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/08/30 23:17:20.0546 1616 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/08/30 23:17:20.0562 1616 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/08/30 23:17:20.0625 1616 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/08/30 23:17:20.0703 1616 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/08/30 23:17:20.0765 1616 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/08/30 23:17:20.0812 1616 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/08/30 23:17:20.0828 1616 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/08/30 23:17:20.0859 1616 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/08/30 23:17:20.0890 1616 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/08/30 23:17:20.0937 1616 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/08/30 23:17:20.0968 1616 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
2011/08/30 23:17:21.0015 1616 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/08/30 23:17:21.0046 1616 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2011/08/30 23:17:21.0093 1616 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/08/30 23:17:21.0125 1616 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/08/30 23:17:21.0171 1616 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/08/30 23:17:21.0203 1616 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/08/30 23:17:21.0250 1616 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/08/30 23:17:21.0281 1616 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/08/30 23:17:21.0328 1616 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/08/30 23:17:21.0406 1616 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
2011/08/30 23:17:21.0484 1616 nmwcd (4a8a2aa0706b659175169decf198e9d7) C:\WINDOWS\system32\drivers\ccdcmb.sys
2011/08/30 23:17:21.0546 1616 nmwcdc (fd3e61831095ac62e6840d986b5a2016) C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011/08/30 23:17:21.0578 1616 nmwcdnsu (02e96113511171ba7559386d10d3daea) C:\WINDOWS\system32\drivers\nmwcdnsu.sys
2011/08/30 23:17:21.0609 1616 nmwcdnsuc (fb09150cfc7a499a53c308d04841a3bd) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
2011/08/30 23:17:21.0625 1616 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/08/30 23:17:21.0687 1616 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/08/30 23:17:21.0734 1616 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/08/30 23:17:21.0781 1616 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/08/30 23:17:21.0828 1616 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/08/30 23:17:21.0843 1616 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
2011/08/30 23:17:21.0890 1616 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/08/30 23:17:21.0906 1616 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/08/30 23:17:21.0968 1616 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/08/30 23:17:22.0031 1616 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
2011/08/30 23:17:22.0046 1616 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/08/30 23:17:22.0125 1616 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/08/30 23:17:22.0156 1616 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/08/30 23:17:22.0421 1616 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/08/30 23:17:22.0453 1616 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/08/30 23:17:22.0500 1616 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/08/30 23:17:22.0656 1616 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/08/30 23:17:22.0718 1616 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/08/30 23:17:22.0750 1616 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/08/30 23:17:22.0781 1616 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/08/30 23:17:22.0843 1616 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/08/30 23:17:22.0875 1616 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/08/30 23:17:22.0921 1616 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/08/30 23:17:22.0968 1616 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/08/30 23:17:23.0062 1616 RTL8023xp (cf84b1f0e8b14d4120aaf9cf35cbb265) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
2011/08/30 23:17:23.0093 1616 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/08/30 23:17:23.0203 1616 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
2011/08/30 23:17:23.0234 1616 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
2011/08/30 23:17:23.0296 1616 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/08/30 23:17:23.0343 1616 Ser2pl (de0a165d9f8ea295e62ea702ef2f8125) C:\WINDOWS\system32\DRIVERS\ser2pl.sys
2011/08/30 23:17:23.0390 1616 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/08/30 23:17:23.0421 1616 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/08/30 23:17:23.0468 1616 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/08/30 23:17:23.0578 1616 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/08/30 23:17:23.0656 1616 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/08/30 23:17:23.0703 1616 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/08/30 23:17:23.0750 1616 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/08/30 23:17:23.0812 1616 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/08/30 23:17:23.0859 1616 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/08/30 23:17:23.0875 1616 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/08/30 23:17:24.0046 1616 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/08/30 23:17:24.0140 1616 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/08/30 23:17:24.0187 1616 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/08/30 23:17:24.0218 1616 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/08/30 23:17:24.0265 1616 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/08/30 23:17:24.0562 1616 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
2011/08/30 23:17:24.0593 1616 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/08/30 23:17:24.0671 1616 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/08/30 23:17:24.0718 1616 upperdev (587e643a4e2ffd9a00f114b057ceb773) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
2011/08/30 23:17:24.0765 1616 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
2011/08/30 23:17:24.0828 1616 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
2011/08/30 23:17:24.0890 1616 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/08/30 23:17:24.0953 1616 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/08/30 23:17:25.0000 1616 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/08/30 23:17:25.0062 1616 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
2011/08/30 23:17:25.0093 1616 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2011/08/30 23:17:25.0140 1616 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys
2011/08/30 23:17:25.0171 1616 UsbserFilt (fca6a196d47cb972a0e4adc0db9cd17c) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
2011/08/30 23:17:25.0187 1616 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/08/30 23:17:25.0234 1616 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/08/30 23:17:25.0281 1616 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/08/30 23:17:25.0375 1616 vmm (e41fef9e3056fe88c71e411f705be41e) C:\WINDOWS\system32\Drivers\vmm.sys
2011/08/30 23:17:25.0406 1616 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/08/30 23:17:25.0484 1616 VPCNetS2 (f96a678debdccb0b4bb7f38cb2580589) C:\WINDOWS\system32\DRIVERS\VMNetSrv.sys
2011/08/30 23:17:25.0531 1616 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/08/30 23:17:25.0609 1616 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
2011/08/30 23:17:25.0671 1616 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/08/30 23:17:25.0843 1616 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
2011/08/30 23:17:25.0890 1616 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/08/30 23:17:25.0921 1616 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/08/30 23:17:25.0968 1616 WudfRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/08/30 23:17:26.0062 1616 xusb21 (f5e5f944e63a9b5f6e76c2ebb2ac462f) C:\WINDOWS\system32\DRIVERS\xusb21.sys
2011/08/30 23:17:26.0109 1616 yukonwxp (ba8554d0a121816db0a917f5d5d9ea5e) C:\WINDOWS\system32\DRIVERS\yk51x86.sys
2011/08/30 23:17:26.0156 1616 ZSMC302 (1e7313797552a93222e36e425676308a) C:\WINDOWS\system32\Drivers\usbvm302.sys
2011/08/30 23:17:26.0250 1616 MBR (0x1B8) (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
2011/08/30 23:17:26.0359 1616 MBR (0x1B8) (e19755ebf80189ed46bb260ead5d0214) \Device\Harddisk1\DR2
2011/08/30 23:17:26.0531 1616 Boot (0x1200) (2396d994f57228835b9bbe4ec0dc9484) \Device\Harddisk0\DR0\Partition0
2011/08/30 23:17:26.0562 1616 ================================================================================
2011/08/30 23:17:26.0562 1616 Scan finished
2011/08/30 23:17:26.0562 1616 ================================================================================
2011/08/30 23:17:26.0578 1356 Detected object count: 0
2011/08/30 23:17:26.0578 1356 Actual detected object count: 0 -
-
-
Bonjour désolé de répondre un-peu tard a tout ça. Pour moi la solution a été une bonne récupération de données et un bon formatage .
Cordialement
