Sujet Précédent Sujet Suivant

Malware JS/Redirector.DC.8

Fermé
PierreV - 25 sept. 2011 à 17:00
 Utilisateur anonyme - 30 sept. 2011 à 07:38
Bonjour,

Antivir me détecte le malware "JC/Redirector.DC.8" dans C:\windows\system32\RegBack\SOFWARE

J'ai lancé un scan complet de Malwarebytes (lui aussi à jour), mais lui ne trouve rien :'(

Je ne sais pas comment me débarrasser de cette ordure.

Merci d'avance pour votre aide précieuse.


A voir également:

7 réponses

Réponse 1 / 7
Utilisateur anonyme
25 sept. 2011 à 17:08
bonjour,

* Télécharge TDSSKiller sur ton bureau :

https://support.kaspersky.com/downloads/utils/tdsskiller.exe

* Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant qu'administrateur " )

* Clique sur [Start Scan] pour démarrer l'analyse.

* Si des élements sont trouvés, cliques sur [Continue] puis sur [Reboot Now]

* Un rapport s'ouvrira au redémarrage du PC.

* Copie/Colle son contenu dans ta prochaine réponse.

Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt.
0
Réponse 2 / 7
PierreV
28 sept. 2011 à 10:12
Merci beaucoup pour ta réponse: un élément a été trouvé au cours du scan :


10:03:41.0528 4072 TDSS rootkit removing tool 2.6.2.0 Sep 26 2011 18:56:43
10:03:41.0669 4072 ============================================================
10:03:41.0669 4072 Current date / time: 2011/09/28 10:03:41.0669
10:03:41.0669 4072 SystemInfo:
10:03:41.0669 4072
10:03:41.0669 4072 OS Version: 6.0.6002 ServicePack: 2.0
10:03:41.0669 4072 Product type: Workstation
10:03:41.0669 4072 ComputerName: X61S-EUROMED
10:03:41.0669 4072 UserName: etudiant
10:03:41.0669 4072 Windows directory: C:\Windows
10:03:41.0669 4072 System windows directory: C:\Windows
10:03:41.0669 4072 Processor architecture: Intel x86
10:03:41.0670 4072 Number of processors: 2
10:03:41.0670 4072 Page size: 0x1000
10:03:41.0670 4072 Boot type: Normal boot
10:03:41.0670 4072 ============================================================
10:03:42.0994 4072 Initialize success
10:03:44.0515 2808 ============================================================
10:03:44.0515 2808 Scan started
10:03:44.0516 2808 Mode: Manual;
10:03:44.0516 2808 ============================================================
10:03:45.0835 2808 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
10:03:45.0838 2808 ACPI - ok
10:03:45.0886 2808 ADIHdAudAddService (fd34fea01d4a59b715914e435a5106d7) C:\Windows\system32\drivers\ADIHdAud.sys
10:03:45.0894 2808 ADIHdAudAddService - ok
10:03:45.0998 2808 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
10:03:46.0113 2808 adp94xx - ok
10:03:46.0216 2808 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
10:03:46.0249 2808 adpahci - ok
10:03:46.0287 2808 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
10:03:46.0329 2808 adpu160m - ok
10:03:46.0389 2808 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
10:03:46.0426 2808 adpu320 - ok
10:03:46.0474 2808 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
10:03:46.0516 2808 AFD - ok
10:03:46.0582 2808 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
10:03:46.0614 2808 agp440 - ok
10:03:46.0744 2808 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
10:03:46.0812 2808 aic78xx - ok
10:03:46.0890 2808 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
10:03:46.0912 2808 aliide - ok
10:03:46.0959 2808 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
10:03:46.0986 2808 amdagp - ok
10:03:47.0025 2808 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
10:03:47.0051 2808 amdide - ok
10:03:47.0103 2808 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
10:03:47.0135 2808 AmdK7 - ok
10:03:47.0180 2808 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
10:03:47.0211 2808 AmdK8 - ok
10:03:47.0288 2808 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
10:03:47.0316 2808 arc - ok
10:03:47.0377 2808 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
10:03:47.0408 2808 arcsas - ok
10:03:47.0457 2808 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
10:03:47.0461 2808 AsyncMac - ok
10:03:47.0491 2808 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
10:03:47.0519 2808 atapi - ok
10:03:47.0559 2808 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
10:03:47.0579 2808 avgntflt - ok
10:03:47.0617 2808 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
10:03:47.0619 2808 avipbb - ok
10:03:47.0656 2808 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
10:03:47.0666 2808 Beep - ok
10:03:47.0732 2808 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
10:03:47.0767 2808 blbdrive - ok
10:03:47.0804 2808 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
10:03:47.0842 2808 bowser - ok
10:03:47.0902 2808 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
10:03:47.0929 2808 BrFiltLo - ok
10:03:47.0976 2808 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
10:03:47.0996 2808 BrFiltUp - ok
10:03:48.0051 2808 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
10:03:48.0082 2808 Brserid - ok
10:03:48.0140 2808 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
10:03:48.0170 2808 BrSerWdm - ok
10:03:48.0217 2808 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
10:03:48.0242 2808 BrUsbMdm - ok
10:03:48.0291 2808 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
10:03:48.0315 2808 BrUsbSer - ok
10:03:48.0366 2808 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
10:03:48.0399 2808 BTHMODEM - ok
10:03:48.0435 2808 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
10:03:48.0436 2808 cdfs - ok
10:03:48.0468 2808 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
10:03:48.0485 2808 cdrom - ok
10:03:48.0549 2808 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
10:03:48.0572 2808 circlass - ok
10:03:48.0606 2808 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
10:03:48.0630 2808 CLFS - ok
10:03:48.0667 2808 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
10:03:48.0675 2808 CmBatt - ok
10:03:48.0759 2808 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
10:03:48.0784 2808 cmdide - ok
10:03:48.0837 2808 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
10:03:48.0870 2808 Compbatt - ok
10:03:48.0900 2808 cpuz135 - ok
10:03:48.0938 2808 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
10:03:48.0961 2808 crcdisk - ok
10:03:49.0008 2808 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
10:03:49.0037 2808 Crusoe - ok
10:03:49.0083 2808 CSC (9bdb2e89be8d0ef37b1f25c3d3fc192c) C:\Windows\system32\drivers\csc.sys
10:03:49.0116 2808 CSC - ok
10:03:49.0157 2808 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
10:03:49.0195 2808 DfsC - ok
10:03:49.0233 2808 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
10:03:49.0241 2808 disk - ok
10:03:49.0299 2808 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
10:03:49.0311 2808 drmkaud - ok
10:03:49.0362 2808 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
10:03:49.0379 2808 DXGKrnl - ok
10:03:49.0422 2808 e1express (e4563be48ef4e8d8ad3edd92bb01ad9a) C:\Windows\system32\DRIVERS\e1e6032.sys
10:03:49.0453 2808 e1express - ok
10:03:49.0524 2808 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
10:03:49.0555 2808 E1G60 - ok
10:03:49.0592 2808 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
10:03:49.0617 2808 Ecache - ok
10:03:49.0672 2808 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
10:03:49.0708 2808 elxstor - ok
10:03:49.0764 2808 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
10:03:49.0798 2808 ErrDev - ok
10:03:49.0836 2808 ewusbnet - ok
10:03:49.0891 2808 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
10:03:49.0922 2808 exfat - ok
10:03:49.0955 2808 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
10:03:49.0981 2808 fastfat - ok
10:03:50.0036 2808 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
10:03:50.0062 2808 fdc - ok
10:03:50.0132 2808 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
10:03:50.0150 2808 FileInfo - ok
10:03:50.0204 2808 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
10:03:50.0237 2808 Filetrace - ok
10:03:50.0291 2808 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
10:03:50.0322 2808 flpydisk - ok
10:03:50.0360 2808 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
10:03:50.0391 2808 FltMgr - ok
10:03:50.0430 2808 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
10:03:50.0437 2808 Fs_Rec - ok
10:03:50.0540 2808 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
10:03:50.0582 2808 gagp30kx - ok
10:03:50.0668 2808 hcw95bda (a036414384b1f3f36d7e40286cf6dd07) C:\Windows\system32\Drivers\hcw95bda.sys
10:03:50.0709 2808 hcw95bda - ok
10:03:50.0756 2808 hcw95rc (a83862f32f86da77b1ab3a11e18bb62f) C:\Windows\system32\DRIVERS\hcw95rc.sys
10:03:50.0784 2808 hcw95rc - ok
10:03:50.0931 2808 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
10:03:50.0977 2808 HdAudAddService - ok
10:03:51.0030 2808 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
10:03:51.0046 2808 HDAudBus - ok
10:03:51.0100 2808 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
10:03:51.0138 2808 HidBth - ok
10:03:51.0236 2808 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
10:03:51.0305 2808 HidIr - ok
10:03:51.0348 2808 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
10:03:51.0383 2808 HidUsb - ok
10:03:51.0499 2808 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
10:03:51.0535 2808 HpCISSs - ok
10:03:51.0627 2808 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
10:03:51.0663 2808 HSFHWAZL - ok
10:03:51.0730 2808 HSF_DPV (7bc42c65b5c6281777c1a7605b253ba8) C:\Windows\system32\DRIVERS\HSX_DPV.sys
10:03:51.0761 2808 HSF_DPV - ok
10:03:51.0799 2808 HSXHWAZL (9ebf2d102ccbb6bcdfbf1b7922f8ba2e) C:\Windows\system32\DRIVERS\HSXHWAZL.sys
10:03:51.0801 2808 HSXHWAZL - ok
10:03:51.0848 2808 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
10:03:51.0910 2808 HTTP - ok
10:03:51.0954 2808 hwdatacard - ok
10:03:51.0991 2808 hwusbdev - ok
10:03:52.0091 2808 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
10:03:52.0124 2808 i2omp - ok
10:03:52.0157 2808 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
10:03:52.0171 2808 i8042prt - ok
10:03:52.0261 2808 iaNvStor (23c172d6d817d0791361f7693c8ec7cf) C:\Windows\system32\DRIVERS\iaNvStor.sys
10:03:52.0263 2808 iaNvStor - ok
10:03:52.0313 2808 iaStor (e5a0034847537eaee3c00349d5c34c5f) C:\Windows\system32\DRIVERS\iaStor.sys
10:03:52.0319 2808 iaStor - ok
10:03:52.0415 2808 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
10:03:52.0484 2808 iaStorV - ok
10:03:52.0514 2808 IBMPMDRV (bf648877413f6160e480814a24942b65) C:\Windows\system32\DRIVERS\ibmpmdrv.sys
10:03:52.0542 2808 IBMPMDRV - ok
10:03:52.0659 2808 igfx (9378d57e2b96c0a185d844770ad49948) C:\Windows\system32\DRIVERS\igdkmd32.sys
10:03:52.0751 2808 igfx - ok
10:03:52.0793 2808 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
10:03:52.0830 2808 iirsp - ok
10:03:52.0870 2808 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
10:03:52.0884 2808 intelide - ok
10:03:52.0916 2808 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
10:03:52.0918 2808 intelppm - ok
10:03:52.0974 2808 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:03:53.0017 2808 IpFilterDriver - ok
10:03:53.0050 2808 IpInIp - ok
10:03:53.0214 2808 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
10:03:53.0289 2808 IPMIDRV - ok
10:03:53.0345 2808 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
10:03:53.0381 2808 IPNAT - ok
10:03:53.0489 2808 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
10:03:53.0540 2808 IRENUM - ok
10:03:53.0612 2808 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
10:03:53.0646 2808 isapnp - ok
10:03:53.0690 2808 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
10:03:53.0695 2808 iScsiPrt - ok
10:03:53.0762 2808 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
10:03:53.0811 2808 iteatapi - ok
10:03:53.0882 2808 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
10:03:53.0893 2808 iteraid - ok
10:03:53.0935 2808 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
10:03:53.0961 2808 kbdclass - ok
10:03:53.0998 2808 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
10:03:54.0042 2808 kbdhid - ok
10:03:54.0123 2808 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
10:03:54.0228 2808 KSecDD - ok
10:03:54.0289 2808 lenovo.smi (63de2c8974f5d528fbc3d6978fd8ad6a) C:\Windows\system32\DRIVERS\smiif32.sys
10:03:54.0330 2808 lenovo.smi - ok
10:03:54.0368 2808 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
10:03:54.0370 2808 lltdio - ok
10:03:54.0489 2808 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
10:03:54.0525 2808 LSI_FC - ok
10:03:54.0595 2808 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
10:03:54.0637 2808 LSI_SAS - ok
10:03:54.0707 2808 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
10:03:54.0773 2808 LSI_SCSI - ok
10:03:54.0810 2808 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
10:03:54.0813 2808 luafv - ok
10:03:54.0850 2808 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
10:03:54.0879 2808 mdmxsdk - ok
10:03:54.0945 2808 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
10:03:54.0974 2808 megasas - ok
10:03:55.0117 2808 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
10:03:55.0199 2808 MegaSR - ok
10:03:55.0268 2808 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
10:03:55.0270 2808 Modem - ok
10:03:55.0305 2808 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
10:03:55.0307 2808 monitor - ok
10:03:55.0337 2808 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
10:03:55.0370 2808 mouclass - ok
10:03:55.0415 2808 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
10:03:55.0444 2808 mouhid - ok
10:03:55.0495 2808 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
10:03:55.0503 2808 MountMgr - ok
10:03:55.0549 2808 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
10:03:55.0605 2808 mpio - ok
10:03:55.0645 2808 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
10:03:55.0662 2808 mpsdrv - ok
10:03:55.0788 2808 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
10:03:55.0845 2808 Mraid35x - ok
10:03:55.0878 2808 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
10:03:55.0910 2808 MRxDAV - ok
10:03:55.0943 2808 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
10:03:55.0959 2808 mrxsmb - ok
10:03:55.0996 2808 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:03:56.0022 2808 mrxsmb10 - ok
10:03:56.0055 2808 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:03:56.0095 2808 mrxsmb20 - ok
10:03:56.0128 2808 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
10:03:56.0145 2808 msahci - ok
10:03:56.0197 2808 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
10:03:56.0209 2808 msdsm - ok
10:03:56.0249 2808 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
10:03:56.0280 2808 Msfs - ok
10:03:56.0334 2808 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
10:03:56.0368 2808 msisadrv - ok
10:03:56.0479 2808 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
10:03:56.0494 2808 MSKSSRV - ok
10:03:56.0562 2808 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
10:03:56.0587 2808 MSPCLOCK - ok
10:03:56.0640 2808 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
10:03:56.0676 2808 MSPQM - ok
10:03:56.0710 2808 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
10:03:56.0727 2808 MsRPC - ok
10:03:56.0763 2808 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
10:03:56.0765 2808 mssmbios - ok
10:03:56.0821 2808 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
10:03:56.0849 2808 MSTEE - ok
10:03:56.0886 2808 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
10:03:56.0906 2808 Mup - ok
10:03:56.0974 2808 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
10:03:57.0057 2808 NativeWifiP - ok
10:03:57.0107 2808 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
10:03:57.0116 2808 NDIS - ok
10:03:57.0146 2808 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
10:03:57.0159 2808 NdisTapi - ok
10:03:57.0190 2808 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
10:03:57.0211 2808 Ndisuio - ok
10:03:57.0244 2808 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
10:03:57.0262 2808 NdisWan - ok
10:03:57.0294 2808 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
10:03:57.0306 2808 NDProxy - ok
10:03:57.0338 2808 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
10:03:57.0362 2808 NetBIOS - ok
10:03:57.0397 2808 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
10:03:57.0428 2808 netbt - ok
10:03:57.0553 2808 NETw4v32 (cb3af516a6797b27725e3f1e73f3496c) C:\Windows\system32\DRIVERS\NETw4v32.sys
10:03:57.0673 2808 NETw4v32 - ok
10:03:57.0729 2808 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
10:03:57.0763 2808 nfrd960 - ok
10:03:57.0805 2808 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
10:03:57.0822 2808 Npfs - ok
10:03:57.0856 2808 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
10:03:57.0862 2808 nsiproxy - ok
10:03:57.0951 2808 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
10:03:58.0021 2808 Ntfs - ok
10:03:58.0076 2808 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
10:03:58.0080 2808 ntrigdigi - ok
10:03:58.0109 2808 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
10:03:58.0129 2808 Null - ok
10:03:58.0240 2808 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
10:03:58.0272 2808 nvraid - ok
10:03:58.0320 2808 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
10:03:58.0326 2808 nvstor - ok
10:03:58.0376 2808 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
10:03:58.0421 2808 nv_agp - ok
10:03:58.0449 2808 NwlnkFlt - ok
10:03:58.0480 2808 NwlnkFwd - ok
10:03:58.0517 2808 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
10:03:58.0519 2808 ohci1394 - ok
10:03:58.0566 2808 Parport (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
10:03:58.0593 2808 Parport - ok
10:03:58.0625 2808 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
10:03:58.0641 2808 partmgr - ok
10:03:58.0698 2808 Parvdm (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
10:03:58.0726 2808 Parvdm - ok
10:03:58.0759 2808 PcdrNdisuio - ok
10:03:58.0799 2808 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
10:03:58.0819 2808 pci - ok
10:03:58.0870 2808 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
10:03:58.0900 2808 pciide - ok
10:03:58.0954 2808 pcmcia (3bb2244f343b610c29c98035504c9b75) C:\Windows\system32\DRIVERS\pcmcia.sys
10:03:58.0997 2808 pcmcia - ok
10:03:59.0062 2808 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
10:03:59.0139 2808 PEAUTH - ok
10:03:59.0215 2808 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
10:03:59.0239 2808 PptpMiniport - ok
10:03:59.0271 2808 PROCDD (1d80309fed4babf8ea9e7b84a394348b) C:\Windows\system32\DRIVERS\PROCDD.SYS
10:03:59.0298 2808 PROCDD - ok
10:03:59.0397 2808 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
10:03:59.0449 2808 Processor - ok
10:03:59.0514 2808 psadd (aac08defb15aaab00b30341c716efa35) C:\Windows\system32\DRIVERS\psadd.sys
10:03:59.0538 2808 psadd - ok
10:03:59.0572 2808 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
10:03:59.0575 2808 PSched - ok
10:03:59.0683 2808 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
10:03:59.0796 2808 ql2300 - ok
10:03:59.0898 2808 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
10:03:59.0931 2808 ql40xx - ok
10:03:59.0986 2808 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
10:04:00.0010 2808 QWAVEdrv - ok
10:04:00.0042 2808 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
10:04:00.0071 2808 RasAcd - ok
10:04:00.0109 2808 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
10:04:00.0131 2808 Rasl2tp - ok
10:04:00.0167 2808 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
10:04:00.0188 2808 RasPppoe - ok
10:04:00.0222 2808 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
10:04:00.0248 2808 RasSstp - ok
10:04:00.0288 2808 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
10:04:00.0323 2808 rdbss - ok
10:04:00.0357 2808 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
10:04:00.0386 2808 RDPCDD - ok
10:04:00.0430 2808 rdpdr (943b18305eae3935598a9b4a3d560b4c) C:\Windows\system32\DRIVERS\rdpdr.sys
10:04:00.0476 2808 rdpdr - ok
10:04:00.0509 2808 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
10:04:00.0519 2808 RDPENCDD - ok
10:04:00.0580 2808 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
10:04:00.0623 2808 RDPWD - ok
10:04:00.0673 2808 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
10:04:00.0701 2808 rspndr - ok
10:04:00.0754 2808 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
10:04:00.0787 2808 sbp2port - ok
10:04:00.0835 2808 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
10:04:00.0868 2808 sdbus - ok
10:04:00.0903 2808 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
10:04:00.0910 2808 secdrv - ok
10:04:00.0968 2808 Serenum (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
10:04:00.0990 2808 Serenum - ok
10:04:01.0089 2808 Serial (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
10:04:01.0125 2808 Serial - ok
10:04:01.0183 2808 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
10:04:01.0220 2808 sermouse - ok
10:04:01.0294 2808 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\DRIVERS\sffdisk.sys
10:04:01.0321 2808 sffdisk - ok
10:04:01.0380 2808 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
10:04:01.0403 2808 sffp_mmc - ok
10:04:01.0456 2808 sffp_sd (9f66a46c55d6f1ccabc79bb7afccc545) C:\Windows\system32\DRIVERS\sffp_sd.sys
10:04:01.0489 2808 sffp_sd - ok
10:04:01.0543 2808 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
10:04:01.0566 2808 sfloppy - ok
10:04:01.0605 2808 Shockprf (a3aee791db8c73882f4503bfaacd8c9e) C:\Windows\system32\DRIVERS\Apsx86.sys
10:04:01.0627 2808 Shockprf - ok
10:04:01.0693 2808 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
10:04:01.0735 2808 sisagp - ok
10:04:01.0805 2808 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
10:04:01.0839 2808 SiSRaid2 - ok
10:04:01.0894 2808 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
10:04:01.0936 2808 SiSRaid4 - ok
10:04:01.0973 2808 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
10:04:01.0983 2808 Smb - ok
10:04:01.0989 2808 smihlp (350483c5a139f8a39ed3191aff39bed0) C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys
10:04:02.0004 2808 smihlp - ok
10:04:02.0067 2808 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
10:04:02.0102 2808 spldr - ok
10:04:02.0176 2808 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
10:04:02.0177 2808 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
10:04:02.0180 2808 sptd ( LockedFile.Multi.Generic ) - warning
10:04:02.0180 2808 sptd - detected LockedFile.Multi.Generic (1)
10:04:02.0223 2808 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
10:04:02.0254 2808 srv - ok
10:04:02.0289 2808 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
10:04:02.0310 2808 srv2 - ok
10:04:02.0344 2808 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
10:04:02.0359 2808 srvnet - ok
10:04:02.0397 2808 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
10:04:02.0413 2808 ssmdrv - ok
10:04:02.0451 2808 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
10:04:02.0471 2808 swenum - ok
10:04:02.0520 2808 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
10:04:02.0549 2808 Symc8xx - ok
10:04:02.0606 2808 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
10:04:02.0633 2808 Sym_hi - ok
10:04:02.0711 2808 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
10:04:02.0747 2808 Sym_u3 - ok
10:04:02.0812 2808 taphss (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\Windows\system32\DRIVERS\taphss.sys
10:04:02.0837 2808 taphss - ok
10:04:02.0927 2808 Tcpip (2756186e287139310997090797e0182b) C:\Windows\system32\drivers\tcpip.sys
10:04:03.0000 2808 Tcpip - ok
10:04:03.0079 2808 Tcpip6 (2756186e287139310997090797e0182b) C:\Windows\system32\DRIVERS\tcpip.sys
10:04:03.0095 2808 Tcpip6 - ok
10:04:03.0137 2808 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
10:04:03.0180 2808 tcpipreg - ok
10:04:03.0222 2808 TcUsb (109d1f5cd9cc370a87901db3ddd533f1) C:\Windows\system32\Drivers\tcusb.sys
10:04:03.0242 2808 TcUsb - ok
10:04:03.0290 2808 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
10:04:03.0323 2808 TDPIPE - ok
10:04:03.0424 2808 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
10:04:03.0462 2808 TDTCP - ok
10:04:03.0495 2808 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
10:04:03.0504 2808 tdx - ok
10:04:03.0535 2808 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
10:04:03.0578 2808 TermDD - ok
10:04:03.0621 2808 Tp4Track (d26c91ba5e0a22a4981e6e0a15e60d7c) C:\Windows\system32\DRIVERS\tp4track.sys
10:04:03.0653 2808 Tp4Track - ok
10:04:03.0684 2808 TPDIGIMN (639ba7b37f25054cf5e82604e736d250) C:\Windows\system32\DRIVERS\ApsHM86.sys
10:04:03.0711 2808 TPDIGIMN - ok
10:04:03.0747 2808 TPM (cb258c2f726f1be73c507022be33ebb3) C:\Windows\system32\drivers\tpm.sys
10:04:03.0755 2808 TPM - ok
10:04:03.0786 2808 TPPWRIF (1bd5719ef160e0ab739cd0ff3ba5e298) C:\Windows\system32\drivers\Tppwr32v.sys
10:04:03.0793 2808 TPPWRIF - ok
10:04:03.0859 2808 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
10:04:03.0925 2808 tssecsrv - ok
10:04:03.0959 2808 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
10:04:03.0979 2808 tunmp - ok
10:04:04.0012 2808 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
10:04:04.0046 2808 tunnel - ok
10:04:04.0114 2808 tvtfilter (49258a02a1e8d304ed88b0f1c56b1738) C:\Windows\system32\DRIVERS\tvtfilter.sys
10:04:04.0116 2808 tvtfilter - ok
10:04:04.0155 2808 TVTI2C (8ab24d4b7da715c2c80455137910e792) C:\Windows\system32\DRIVERS\Tvti2c.sys
10:04:04.0167 2808 TVTI2C - ok
10:04:04.0282 2808 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
10:04:04.0314 2808 uagp35 - ok
10:04:04.0458 2808 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
10:04:04.0512 2808 udfs - ok
10:04:04.0555 2808 UIUSys - ok
10:04:04.0614 2808 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
10:04:04.0642 2808 uliagpkx - ok
10:04:04.0721 2808 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
10:04:04.0772 2808 uliahci - ok
10:04:04.0817 2808 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
10:04:04.0852 2808 UlSata - ok
10:04:04.0909 2808 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
10:04:04.0946 2808 ulsata2 - ok
10:04:04.0979 2808 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
10:04:05.0029 2808 umbus - ok
10:04:05.0073 2808 USBAAPL - ok
10:04:05.0150 2808 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
10:04:05.0178 2808 usbaudio - ok
10:04:05.0256 2808 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
10:04:05.0285 2808 usbccgp - ok
10:04:05.0343 2808 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
10:04:05.0388 2808 usbcir - ok
10:04:05.0426 2808 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
10:04:05.0451 2808 usbehci - ok
10:04:05.0496 2808 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
10:04:05.0523 2808 usbhub - ok
10:04:05.0586 2808 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
10:04:05.0616 2808 usbohci - ok
10:04:05.0708 2808 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
10:04:05.0753 2808 usbprint - ok
10:04:05.0833 2808 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:04:05.0879 2808 USBSTOR - ok
10:04:05.0927 2808 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
10:04:05.0943 2808 usbuhci - ok
10:04:06.0028 2808 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
10:04:06.0067 2808 usbvideo - ok
10:04:06.0152 2808 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
10:04:06.0178 2808 vga - ok
10:04:06.0216 2808 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
10:04:06.0238 2808 VgaSave - ok
10:04:06.0332 2808 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
10:04:06.0345 2808 viaagp - ok
10:04:06.0393 2808 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
10:04:06.0421 2808 ViaC7 - ok
10:04:06.0483 2808 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
10:04:06.0516 2808 viaide - ok
10:04:06.0555 2808 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
10:04:06.0581 2808 volmgr - ok
10:04:06.0632 2808 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
10:04:06.0664 2808 volmgrx - ok
10:04:06.0711 2808 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
10:04:06.0738 2808 volsnap - ok
10:04:06.0804 2808 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
10:04:06.0842 2808 vsmraid - ok
10:04:06.0926 2808 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
10:04:06.0935 2808 WacomPen - ok
10:04:06.0974 2808 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
10:04:07.0007 2808 Wanarp - ok
10:04:07.0017 2808 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
10:04:07.0020 2808 Wanarpv6 - ok
10:04:07.0095 2808 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
10:04:07.0101 2808 Wd - ok
10:04:07.0169 2808 WDC_SAM (d6efaf429fd30c5df613d220e344cce7) C:\Windows\system32\DRIVERS\wdcsam.sys
10:04:07.0190 2808 WDC_SAM - ok
10:04:07.0259 2808 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
10:04:07.0303 2808 Wdf01000 - ok
10:04:07.0391 2808 WimFltr (f9ad3a5e3fd7e0bdb18b8202b0fdd4e4) C:\Windows\system32\DRIVERS\wimfltr.sys
10:04:07.0438 2808 WimFltr - ok
10:04:07.0498 2808 winachsf (5a77ac34a0ffb70ce8b35b524fede9ba) C:\Windows\system32\DRIVERS\HSX_CNXT.sys
10:04:07.0515 2808 winachsf - ok
10:04:07.0602 2808 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
10:04:07.0606 2808 WmiAcpi - ok
10:04:07.0718 2808 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
10:04:07.0743 2808 WpdUsb - ok
10:04:07.0808 2808 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
10:04:07.0837 2808 ws2ifsl - ok
10:04:07.0922 2808 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
10:04:07.0954 2808 WUDFRd - ok
10:04:07.0991 2808 XAudio (88af537264f2b818da15479ceeaf5d7c) C:\Windows\system32\DRIVERS\xaudio.sys
10:04:07.0992 2808 XAudio - ok
10:04:08.0034 2808 MBR (0x1B8) (74c30e84e6b095b46c24acfae0e5f0c1) \Device\Harddisk0\DR0
10:04:08.0047 2808 \Device\Harddisk0\DR0 - ok
10:04:08.0052 2808 Boot (0x1200) (6ac59aa33f2debf77eab0f9858649b4d) \Device\Harddisk0\DR0\Partition0
10:04:08.0056 2808 \Device\Harddisk0\DR0\Partition0 - ok
10:04:08.0057 2808 ============================================================
10:04:08.0057 2808 Scan finished
10:04:08.0057 2808 ============================================================
10:04:08.0071 5736 Detected object count: 1
10:04:08.0071 5736 Actual detected object count: 1
10:04:21.0036 5736 HKLM\SYSTEM\ControlSet001\services\sptd - will be deleted on reboot
10:04:21.0048 5736 HKLM\SYSTEM\ControlSet003\services\sptd - will be deleted on reboot
10:04:21.0054 5736 C:\Windows\system32\Drivers\sptd.sys - will be deleted on reboot
10:04:21.0055 5736 sptd ( LockedFile.Multi.Generic ) - User select action: Delete
10:04:30.0858 4636 Deinitialize success
0
Réponse 3 / 7
Utilisateur anonyme
28 sept. 2011 à 14:57
* Télécharge ZHPDiag sur ton bureau :


https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
ou
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
http://www.cijoint.fr/
ou :
http://dl.free.fr
ou :
http://ww38.toofiles.com/fr/documents-upload.html
ou :
https://www.terafiles.net/
0
Réponse 4 / 7
PierreV
29 sept. 2011 à 17:43
Super merci encore ! Voici le log :

http://www.cijoint.fr/cjlink.php?file=cj201109/cij7VA1eco.txt
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
Utilisateur anonyme
29 sept. 2011 à 18:55
tu as avira et LENOVO security sur ton pc !
si lenovo est un antivirus, il faut en choisir et grader un sur le pc!


* Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)

* Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
Copie et colle les lignes suivantes en gras dans Zhpfix :

----------------------------------------------------------

O51 - MPSK:{348312fa-5f86-11e0-8b71-00215c6dbfe9}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{348312ff-5f86-11e0-8b71-001e101fabdd}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)
O51 - MPSK:{6cfc5ea8-63e2-11dd-ab53-00215c5129b3}\AutoRun\command. (...) -- D:\SETUP.exe (.not file.)
O51 - MPSK:{42d3fc51-335d-11df-af65-001d729cdfba}\AutoRun\command. (...) -- G:\_AUTORUN\AUTORUN.exe (.not file.) => Fichier absent
O87 - FAEL: "TCP Query User{B45F9B36-7037-4BEB-B669-D8369CBCC473}C:\pierre\jeux\battlefield 2\bf2_w32ded.exe" |In - Private - P6 - TRUE | .(...) -- C:\pierre\jeux\battlefield 2\bf2_w32ded.exe (.not file.) => Fichier absent
O87 - FAEL: "UDP Query User{506D26E2-3497-40D7-9D60-000A2621569F}C:\pierre\jeux\battlefield 2\bf2_w32ded.exe" |In - Private - P17 - TRUE | .(...) -- C:\pierre\jeux\battlefield 2\bf2_w32ded.exe (.not file.) => Fichier absent
O87 - FAEL: "{75087E7C-D56E-4EEE-B32B-FEAD2F1C2C2B}" |In - Private - P6 - TRUE | .(...) -- C:\Pierre\Jeux\Vegas Rainbow\Binaries\R6Vegas_Game.exe (.not file.) => Fichier absent
O87 - FAEL: "{481302CB-6D4A-4D4E-869F-46B29FD888EE}" |In - Private - P17 - TRUE | .(...) -- C:\Pierre\Jeux\Vegas Rainbow\Binaries\R6Vegas_Game.exe (.not file.) => Fichier absent
O87 - FAEL: "{6A61722B-2BE7-4306-9CBA-68E185111845}" |In - Private - P6 - TRUE | .(...) -- C:\Pierre\Jeux\Vegas Rainbow\Binaries\R6Vegas_Launcher.exe (.not file.) => Fichier absent
O87 - FAEL: "{AF027A1E-8837-476E-BE66-555C5BFD02A8}" |In - Private - P17 - TRUE | .(...) -- C:\Pierre\Jeux\Vegas Rainbow\Binaries\R6Vegas_Launcher.exe (.not file.) => Fichier absent
O87 - FAEL: "TCP Query User{B8C0EB1E-F270-4F9C-B3F6-DBAAE589AC29}C:\pierre\utilitaires\bit torrent\bittorrent.exe" |In - Public - P6 - TRUE | .(...) -- C:\pierre\utilitaires\bit torrent\bittorrent.exe (.not file.) => Fichier absent
O87 - FAEL: "UDP Query User{9D21A3A7-C102-43C8-A39B-88342B47EF6D}C:\pierre\utilitaires\bit torrent\bittorrent.exe" |In - Public - P17 - TRUE | .(...) -- C:\pierre\utilitaires\bit torrent\bittorrent.exe (.not file.) => Fichier absent
O51 - MPSK:{7049ecfa-3745-11df-b762-001d729cdfba}\AutoRun\command. (...) -- D:\chxnxyx.exe (.not file.)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] =>Trojan.Adclicker
emptytemp







----------------------------------------------------------

- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse
Tuto :

http://www.premiumorange.com/zeb-help-process/zhpfix.html
0
Réponse 6 / 7
PierreV
29 sept. 2011 à 22:00
Non non, Lenovo security c'est pas un antivirus, c'est le logiciel qui configure mon lecteur d'empreinte digital sur mon PC :)


Voici le rapport :

Rapport de ZHPFix 1.12.3362 par Nicolas Coolman, Update du 23/09/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-29-09-2011-21-56-07.txt
Run by etudiant at 29/09/2011 21:56:07
Windows Vista Business Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME CLSID MPSK: {348312fa-5f86-11e0-8b71-00215c6dbfe9}
SUPPRIME CLSID MPSK: {348312ff-5f86-11e0-8b71-001e101fabdd}
SUPPRIME CLSID MPSK: {6cfc5ea8-63e2-11dd-ab53-00215c5129b3}
SUPPRIME CLSID MPSK: {42d3fc51-335d-11df-af65-001d729cdfba}
SUPPRIME CLSID MPSK: {7049ecfa-3745-11df-b762-001d729cdfba}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

========== Valeur(s) du Registre ==========
SUPPRIME TCP Query User{B45F9B36-7037-4BEB-B669-D8369CBCC473}C:/pierre/jeux/battlefield 2/bf2_w32ded.exe
SUPPRIME UDP Query User{506D26E2-3497-40D7-9D60-000A2621569F}C:/pierre/jeux/battlefield 2/bf2_w32ded.exe
SUPPRIME {75087E7C-D56E-4EEE-B32B-FEAD2F1C2C2B}
SUPPRIME {481302CB-6D4A-4D4E-869F-46B29FD888EE}
SUPPRIME {6A61722B-2BE7-4306-9CBA-68E185111845}
SUPPRIME {AF027A1E-8837-476E-BE66-555C5BFD02A8}
SUPPRIME TCP Query User{B8C0EB1E-F270-4F9C-B3F6-DBAAE589AC29}C:/pierre/utilitaires/bit torrent/bittorrent.exe
SUPPRIME UDP Query User{9D21A3A7-C102-43C8-A39B-88342B47EF6D}C:/pierre/utilitaires/bit torrent/bittorrent.exe

========== Dossier(s) ==========
SUPPRIME Temporaires Windows: : 86

========== Fichier(s) ==========
SUPPRIME Temporaires Windows: : 167


========== Récapitulatif ==========
6 : Clé(s) du Registre
8 : Valeur(s) du Registre
1 : Dossier(s)
1 : Fichier(s)


End of clean in 00mn 04s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 29/09/2011 21:56:07 [1766]
0
Réponse 7 / 7
Utilisateur anonyme
30 sept. 2011 à 07:38
super :D

fais une mise à jour d'avira et lance un scan pour voir ce qu'il dit :D

@++
0

Discussions similaires

Comment supprimer tor.jack sur Android
sabinelouisonbruno -
akaloupile -

4 réponses
Javascript Arrondi à 2 chiffres après la virgule
jeremy -
gravityaerox -

12 réponses
Livres & catégories
musicetcie -
anonyme -

5 réponses
Win64:Malware-gen
ptb35 -
MisteryBean -

3 réponses
code couleur associé a une image
magic charly -
pandora -

9 réponses