Security sphere 2012

Salut,

Télécharge RogueKiller : https://www.luanagames.com/index.fr.html
Lances en option 2 (Suppression).
Poste le rapport ici.

Si RogueKiller est bloqué - tente de le renommer en iexplore ou winlogon
Si tjrs pas - affiche les extensions de fichiers : https://www.commentcamarche.net/informatique/windows/185-afficher-les-extensions-et-les-fichiers-caches-sous-windows/
Renomme RogueKiller.exe en RogueKiller.com

Salut,

Merci pour ce retour rapide.

J'ai réalisé les étapes décrites et voici le rapport établi par Roguekiller :

RogueKiller V6.1.4 [17/10/2011] par Tigzy
contact sur https://www.luanagames.com/index.fr.html
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
Demarrage : Mode normal
Utilisateur: ttonio44 [Droits d'admin]
Mode: Suppression -- Date : 22/10/2011 11:42:28

Processus malicieux: 1
[SUSP PATH] jE20302LmBcG20302.exe -- c:\programdata\je20302lmbcg20302\je20302lmbcg20302.exe -> KILLED [TermProc]

Entrees de registre: 6
[RANDOMNAME] HKCU\[...]\Run : BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} ("C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe") -> DELETED
[RANDOMNAME] HKCU\[...]\Run : DAEMON Tools Lite ("C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun) -> DELETED
[RANDOMNAME] HKLM\[...]\Run : F-Secure TNB ("C:\Program Files\DartyBox Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW) -> DELETED
[SUSP PATH] HKCU\[...]\RunOnce : jE20302LmBcG20302 (C:\ProgramData\jE20302LmBcG20302\jE20302LmBcG20302.exe) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()

Fichiers / Dossiers particuliers:

Driver: [LOADED]
SSDT[382] : NtCreateThreadEx @ 0x8224DF82 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405E96)
SSDT[358] : NtWriteVirtualMemory @ 0x8225A033 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405F76)
SSDT[335] : NtTerminateThread @ 0x8225BAF3 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405AF6)
SSDT[334] : NtTerminateProcess @ 0x8222F2F0 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405996)
SSDT[332] : NtSystemDebugControl @ 0x82249E60 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91406032)
SSDT[331] : NtSuspendThread @ 0x8229ECEA -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405EB0)
SSDT[330] : NtSuspendProcess @ 0x822E1E23 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405A3C)
SSDT[317] : NtSetSystemInformation @ 0x82243722 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x9140642E)
SSDT[267] : NtRenameKey @ 0x822A2FFE -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x9140787C)
SSDT[197] : NtOpenSection @ 0x82274BA2 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x914065DE)
SSDT[177] : NtMapViewOfSection @ 0x82270AFE -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405BBC)
SSDT[165] : NtLoadDriver @ 0x821BBAD0 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x914061AC)
SSDT[78] : NtCreateThread @ 0x822E0560 -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91405E7C)
S_SSDT[573] : Unknown -> HOOKED (\??\C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys @ 0x91408636)

Fichier HOSTS:
127.0.0.1 localhost
::1 localhost

Termine : << RKreport[1].txt >>
RKreport[1].txt

Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi.
Poste le rapport ici.

Vraiment efficace... Merci beaucoup

voici le rapport de tdskiller suite aux nouvelles tâches effectuées :

12:28:53.0081 2088 TDSS rootkit removing tool 2.6.12.0 Oct 21 2011 11:23:48
12:28:53.0455 2088 ============================================================
12:28:53.0455 2088 Current date / time: 2011/10/22 12:28:53.0455
12:28:53.0455 2088 SystemInfo:
12:28:53.0455 2088
12:28:53.0455 2088 OS Version: 6.0.6001 ServicePack: 1.0
12:28:53.0455 2088 Product type: Workstation
12:28:53.0455 2088 ComputerName: PC-DE-ttonio44
12:28:53.0455 2088 UserName: Bourdet
12:28:53.0455 2088 Windows directory: C:\Windows
12:28:53.0455 2088 System windows directory: C:\Windows
12:28:53.0455 2088 Processor architecture: Intel x86
12:28:53.0455 2088 Number of processors: 2
12:28:53.0455 2088 Page size: 0x1000
12:28:53.0455 2088 Boot type: Normal boot
12:28:53.0455 2088 ============================================================
12:28:54.0594 2088 Initialize success
12:29:05.0030 3404 ============================================================
12:29:05.0030 3404 Scan started
12:29:05.0030 3404 Mode: Manual;
12:29:05.0030 3404 ============================================================
12:29:05.0530 3404 61883 (585e64bb6dfbc0a2f1f0b554ded012df) C:\Windows\system32\DRIVERS\61883.sys
12:29:05.0530 3404 61883 - ok
12:29:05.0561 3404 ACPI (fcb8c7210f0135e24c6580f7f649c73c) C:\Windows\system32\drivers\acpi.sys
12:29:05.0561 3404 ACPI - ok
12:29:05.0654 3404 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
12:29:05.0654 3404 adp94xx - ok
12:29:05.0686 3404 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
12:29:05.0701 3404 adpahci - ok
12:29:05.0717 3404 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
12:29:05.0717 3404 adpu160m - ok
12:29:05.0748 3404 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
12:29:05.0748 3404 adpu320 - ok
12:29:05.0857 3404 AFD (48eb99503533c27ac6135648e5474457) C:\Windows\system32\drivers\afd.sys
12:29:05.0998 3404 AFD - ok
12:29:06.0029 3404 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
12:29:06.0029 3404 agp440 - ok
12:29:06.0044 3404 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
12:29:06.0060 3404 aic78xx - ok
12:29:06.0076 3404 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
12:29:06.0091 3404 aliide - ok
12:29:06.0107 3404 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
12:29:06.0107 3404 amdagp - ok
12:29:06.0138 3404 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
12:29:06.0138 3404 amdide - ok
12:29:06.0154 3404 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
12:29:06.0154 3404 AmdK7 - ok
12:29:06.0185 3404 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
12:29:06.0185 3404 AmdK8 - ok
12:29:06.0216 3404 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
12:29:06.0216 3404 arc - ok
12:29:06.0232 3404 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
12:29:06.0247 3404 arcsas - ok
12:29:06.0278 3404 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
12:29:06.0278 3404 AsyncMac - ok
12:29:06.0310 3404 atapi (2d9c903dc76a66813d350a562de40ed9) C:\Windows\system32\drivers\atapi.sys
12:29:06.0310 3404 atapi - ok
12:29:06.0356 3404 Avc (f4b56425a00beb32f5fa6603ff7b0ea2) C:\Windows\system32\DRIVERS\avc.sys
12:29:06.0356 3404 Avc - ok
12:29:06.0372 3404 Bdfndisf - ok
12:29:06.0403 3404 bdfsfltr - ok
12:29:06.0434 3404 bdftdif - ok
12:29:06.0450 3404 BDSelfPr - ok
12:29:06.0481 3404 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
12:29:06.0481 3404 Beep - ok
12:29:06.0512 3404 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
12:29:06.0512 3404 blbdrive - ok
12:29:06.0590 3404 bowser (8153396d5551276227fa146900f734e6) C:\Windows\system32\DRIVERS\bowser.sys
12:29:06.0590 3404 bowser - ok
12:29:06.0622 3404 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
12:29:06.0622 3404 BrFiltLo - ok
12:29:06.0637 3404 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
12:29:06.0637 3404 BrFiltUp - ok
12:29:06.0668 3404 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
12:29:06.0668 3404 Brserid - ok
12:29:06.0700 3404 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
12:29:06.0700 3404 BrSerWdm - ok
12:29:06.0731 3404 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
12:29:06.0731 3404 BrUsbMdm - ok
12:29:06.0731 3404 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
12:29:06.0746 3404 BrUsbSer - ok
12:29:06.0778 3404 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
12:29:06.0778 3404 BTHMODEM - ok
12:29:06.0809 3404 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
12:29:06.0809 3404 cdfs - ok
12:29:06.0824 3404 cdrom (1ec25cea0de6ac4718bf89f9e1778b57) C:\Windows\system32\DRIVERS\cdrom.sys
12:29:06.0824 3404 cdrom - ok
12:29:06.0871 3404 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
12:29:06.0871 3404 circlass - ok
12:29:06.0918 3404 CLFS (465745561c832b29f7c48b488aab3842) C:\Windows\system32\CLFS.sys
12:29:06.0918 3404 CLFS - ok
12:29:06.0965 3404 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
12:29:06.0965 3404 cmdide - ok
12:29:06.0980 3404 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\drivers\compbatt.sys
12:29:06.0980 3404 Compbatt - ok
12:29:07.0012 3404 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
12:29:07.0012 3404 crcdisk - ok
12:29:07.0043 3404 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
12:29:07.0043 3404 Crusoe - ok
12:29:07.0105 3404 DfsC (a3e9fa213f443ac77c7746119d13feec) C:\Windows\system32\Drivers\dfsc.sys
12:29:07.0105 3404 DfsC - ok
12:29:07.0168 3404 disk (64109e623abd6955c8fb110b592e68b7) C:\Windows\system32\drivers\disk.sys
12:29:07.0168 3404 disk - ok
12:29:07.0214 3404 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
12:29:07.0214 3404 drmkaud - ok
12:29:07.0261 3404 DXGKrnl (85f33880b8cfb554bd3d9ccdb486845a) C:\Windows\System32\drivers\dxgkrnl.sys
12:29:07.0261 3404 DXGKrnl - ok
12:29:07.0292 3404 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
12:29:07.0292 3404 E1G60 - ok
12:29:07.0339 3404 Ecache (dd2cd259d83d8b72c02c5f2331ff9d68) C:\Windows\system32\drivers\ecache.sys
12:29:07.0339 3404 Ecache - ok
12:29:07.0386 3404 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
12:29:07.0386 3404 elxstor - ok
12:29:07.0433 3404 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
12:29:07.0448 3404 ErrDev - ok
12:29:07.0558 3404 exfat (0d858eb20589a34efb25695acaa6aa2d) C:\Windows\system32\drivers\exfat.sys
12:29:07.0558 3404 exfat - ok
12:29:07.0636 3404 F-Secure Gatekeeper (29d12e1e45d93b45d2598e2663bbeff4) C:\Program Files\DartyBox Sécurité\Anti-Virus\minifilter\fsgk.sys
12:29:07.0636 3404 F-Secure Gatekeeper - ok
12:29:07.0698 3404 F-Secure HIPS (dc0720248dc4d1f303df94ccc3adff96) C:\Program Files\DartyBox Sécurité\HIPS\drivers\fshs.sys
12:29:07.0698 3404 F-Secure HIPS - ok
12:29:07.0776 3404 fastfat (3c489390c2e2064563727752af8eab9e) C:\Windows\system32\drivers\fastfat.sys
12:29:07.0776 3404 fastfat - ok
12:29:07.0807 3404 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
12:29:07.0823 3404 fdc - ok
12:29:07.0870 3404 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
12:29:07.0870 3404 FileInfo - ok
12:29:07.0901 3404 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
12:29:07.0901 3404 Filetrace - ok
12:29:07.0948 3404 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
12:29:07.0948 3404 flpydisk - ok
12:29:07.0979 3404 FltMgr (05ea53afe985443011e36dab07343b46) C:\Windows\system32\drivers\fltmgr.sys
12:29:07.0979 3404 FltMgr - ok
12:29:08.0041 3404 fsbts (343786e182b9c9ae3066e00dec650f50) C:\Windows\system32\Drivers\fsbts.sys
12:29:08.0041 3404 fsbts - ok
12:29:08.0088 3404 FSES (2bffae1318ce3d9847a8d61b3726e54e) C:\Windows\system32\drivers\fses.sys
12:29:08.0088 3404 FSES - ok
12:29:08.0135 3404 FSFW (4873e90a180e1585f9b6c6d52aebf52c) C:\Windows\system32\drivers\fsdfw.sys
12:29:08.0135 3404 FSFW - ok
12:29:08.0213 3404 fsvista (d8b300c1c744460dae837db72bc2ccbd) C:\Program Files\DartyBox Sécurité\Anti-Virus\minifilter\fsvista.sys
12:29:08.0213 3404 fsvista - ok
12:29:08.0244 3404 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
12:29:08.0244 3404 Fs_Rec - ok
12:29:08.0275 3404 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
12:29:08.0275 3404 gagp30kx - ok
12:29:08.0306 3404 gdrv (54789f9ba0d59072cdd4e7c200e122c4) C:\Windows\gdrv.sys
12:29:08.0306 3404 gdrv - ok
12:29:08.0384 3404 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
12:29:08.0384 3404 HdAudAddService - ok
12:29:08.0416 3404 HDAudBus (c87b1ee051c0464491c1a7b03fa0bc99) C:\Windows\system32\DRIVERS\HDAudBus.sys
12:29:08.0416 3404 HDAudBus - ok
12:29:08.0447 3404 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
12:29:08.0447 3404 HidBth - ok
12:29:08.0478 3404 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
12:29:08.0494 3404 HidIr - ok
12:29:08.0540 3404 HidUsb (854ca287ab7faf949617a788306d967e) C:\Windows\system32\DRIVERS\hidusb.sys
12:29:08.0540 3404 HidUsb - ok
12:29:08.0587 3404 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
12:29:08.0587 3404 HpCISSs - ok
12:29:08.0650 3404 HTTP (96e241624c71211a79c84f50a8e71cab) C:\Windows\system32\drivers\HTTP.sys
12:29:08.0665 3404 HTTP - ok
12:29:08.0681 3404 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
12:29:08.0681 3404 i2omp - ok
12:29:08.0728 3404 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
12:29:08.0728 3404 i8042prt - ok
12:29:08.0759 3404 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
12:29:08.0759 3404 iaStorV - ok
12:29:08.0790 3404 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
12:29:08.0790 3404 iirsp - ok
12:29:08.0915 3404 IntcAzAudAddService (efad2bc74d06c5f53fa64b6dd6dbb459) C:\Windows\system32\drivers\RTKVHDA.sys
12:29:08.0946 3404 IntcAzAudAddService - ok
12:29:08.0962 3404 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
12:29:08.0962 3404 intelide - ok
12:29:09.0008 3404 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
12:29:09.0008 3404 intelppm - ok
12:29:09.0040 3404 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:29:09.0040 3404 IpFilterDriver - ok
12:29:09.0055 3404 IpInIp - ok
12:29:09.0102 3404 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
12:29:09.0102 3404 IPMIDRV - ok
12:29:09.0118 3404 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
12:29:09.0118 3404 IPNAT - ok
12:29:09.0149 3404 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
12:29:09.0149 3404 IRENUM - ok
12:29:09.0180 3404 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
12:29:09.0180 3404 isapnp - ok
12:29:09.0196 3404 iScsiPrt (f247eec28317f6c739c16de420097301) C:\Windows\system32\DRIVERS\msiscsi.sys
12:29:09.0196 3404 iScsiPrt - ok
12:29:09.0227 3404 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
12:29:09.0227 3404 iteatapi - ok
12:29:09.0274 3404 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
12:29:09.0274 3404 iteraid - ok
12:29:09.0305 3404 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
12:29:09.0320 3404 kbdclass - ok
12:29:09.0320 3404 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys
12:29:09.0320 3404 kbdhid - ok
12:29:09.0398 3404 KSecDD (7a0cf7908b6824d6a2a1d313e5ae3dca) C:\Windows\system32\Drivers\ksecdd.sys
12:29:09.0414 3404 KSecDD - ok
12:29:09.0445 3404 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
12:29:09.0461 3404 lltdio - ok
12:29:09.0492 3404 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
12:29:09.0508 3404 LSI_FC - ok
12:29:09.0523 3404 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
12:29:09.0539 3404 LSI_SAS - ok
12:29:09.0570 3404 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
12:29:09.0586 3404 LSI_SCSI - ok
12:29:09.0601 3404 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
12:29:09.0601 3404 luafv - ok
12:29:09.0679 3404 MarvinBus (a3e700d78eec390f1208098cdca5c6b6) C:\Windows\system32\DRIVERS\MarvinBus.sys
12:29:09.0679 3404 MarvinBus - ok
12:29:09.0710 3404 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
12:29:09.0710 3404 megasas - ok
12:29:09.0742 3404 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
12:29:09.0773 3404 MegaSR - ok
12:29:09.0804 3404 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
12:29:09.0804 3404 Modem - ok
12:29:09.0851 3404 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
12:29:09.0851 3404 monitor - ok
12:29:09.0866 3404 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
12:29:09.0866 3404 mouclass - ok
12:29:09.0882 3404 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
12:29:09.0882 3404 mouhid - ok
12:29:09.0898 3404 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
12:29:09.0898 3404 MountMgr - ok
12:29:09.0944 3404 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
12:29:09.0960 3404 mpio - ok
12:29:09.0976 3404 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
12:29:09.0991 3404 mpsdrv - ok
12:29:10.0022 3404 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
12:29:10.0022 3404 Mraid35x - ok
12:29:10.0038 3404 MRxDAV (ae3de84536b6799d2267443cec8edbb9) C:\Windows\system32\drivers\mrxdav.sys
12:29:10.0038 3404 MRxDAV - ok
12:29:10.0116 3404 mrxsmb (5734a0f2be7e495f7d3ed6efd4b9f5a1) C:\Windows\system32\DRIVERS\mrxsmb.sys
12:29:10.0116 3404 mrxsmb - ok
12:29:10.0178 3404 mrxsmb10 (6b5fa5adfacac9dbbe0991f4566d7d55) C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:29:10.0178 3404 mrxsmb10 - ok
12:29:10.0225 3404 mrxsmb20 (5c80d8159181c7abf1b14ba703b01e0b) C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:29:10.0225 3404 mrxsmb20 - ok
12:29:10.0256 3404 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
12:29:10.0256 3404 msahci - ok
12:29:10.0288 3404 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
12:29:10.0303 3404 msdsm - ok
12:29:10.0428 3404 MSDV (343291a4dfd7c923c3f71f550830ec1c) C:\Windows\system32\DRIVERS\msdv.sys
12:29:10.0428 3404 MSDV - ok
12:29:10.0475 3404 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
12:29:10.0475 3404 Msfs - ok
12:29:10.0506 3404 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
12:29:10.0506 3404 msisadrv - ok
12:29:10.0537 3404 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
12:29:10.0553 3404 MSKSSRV - ok
12:29:10.0584 3404 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
12:29:10.0584 3404 MSPCLOCK - ok
12:29:10.0600 3404 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
12:29:10.0600 3404 MSPQM - ok
12:29:10.0631 3404 MsRPC (b5614aecb05a9340aa0fb55bf561cc63) C:\Windows\system32\drivers\MsRPC.sys
12:29:10.0631 3404 MsRPC - ok
12:29:10.0646 3404 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
12:29:10.0646 3404 mssmbios - ok
12:29:10.0662 3404 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
12:29:10.0662 3404 MSTEE - ok
12:29:10.0678 3404 Mup (6dfd1d322de55b0b7db7d21b90bec49c) C:\Windows\system32\Drivers\mup.sys
12:29:10.0678 3404 Mup - ok
12:29:10.0724 3404 NativeWifiP (3c21ce48ff529bb73dadb98770b54025) C:\Windows\system32\DRIVERS\nwifi.sys
12:29:10.0724 3404 NativeWifiP - ok
12:29:10.0787 3404 NDIS (9bdc71790fa08f0a0b5f10462b1bd0b1) C:\Windows\system32\drivers\ndis.sys
12:29:10.0787 3404 NDIS - ok
12:29:10.0802 3404 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
12:29:10.0802 3404 NdisTapi - ok
12:29:10.0834 3404 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
12:29:10.0834 3404 Ndisuio - ok
12:29:10.0865 3404 NdisWan (3d14c3b3496f88890d431e8aa022a411) C:\Windows\system32\DRIVERS\ndiswan.sys
12:29:10.0865 3404 NdisWan - ok
12:29:10.0896 3404 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
12:29:10.0896 3404 NDProxy - ok
12:29:10.0912 3404 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
12:29:10.0912 3404 NetBIOS - ok
12:29:10.0943 3404 netbt (7c5fee5b1c5728507cd96fb4a13e7a02) C:\Windows\system32\DRIVERS\netbt.sys
12:29:10.0943 3404 netbt - ok
12:29:10.0974 3404 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
12:29:10.0990 3404 nfrd960 - ok
12:29:11.0036 3404 Npfs (ecb5003f484f9ed6c608d6d6c7886cbb) C:\Windows\system32\drivers\Npfs.sys
12:29:11.0036 3404 Npfs - ok
12:29:11.0052 3404 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
12:29:11.0052 3404 nsiproxy - ok
12:29:11.0099 3404 Ntfs (b4effe29eb4f15538fd8a9681108492d) C:\Windows\system32\drivers\Ntfs.sys
12:29:11.0114 3404 Ntfs - ok
12:29:11.0146 3404 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
12:29:11.0161 3404 ntrigdigi - ok
12:29:11.0224 3404 NuidFltr (cf7e041663119e09d2e118521ada9300) C:\Windows\system32\DRIVERS\NuidFltr.sys
12:29:11.0255 3404 NuidFltr - ok
12:29:11.0270 3404 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
12:29:11.0270 3404 Null - ok
12:29:11.0348 3404 NVENETFD (d668632606d1cebf0b6ec64c1df7ed6f) C:\Windows\system32\DRIVERS\nvmfdx32.sys
12:29:11.0348 3404 NVENETFD - ok
12:29:11.0567 3404 nvlddmkm (9a87bba2307b0f16fab141a2ee664e4d) C:\Windows\system32\DRIVERS\nvlddmkm.sys
12:29:11.0816 3404 nvlddmkm - ok
12:29:11.0894 3404 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
12:29:11.0894 3404 nvraid - ok
12:29:11.0926 3404 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
12:29:11.0926 3404 nvstor - ok
12:29:11.0957 3404 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
12:29:11.0957 3404 nv_agp - ok
12:29:11.0972 3404 NwlnkFlt - ok
12:29:11.0988 3404 NwlnkFwd - ok
12:29:12.0035 3404 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys
12:29:12.0035 3404 ohci1394 - ok
12:29:12.0082 3404 PalmUSBD - ok
12:29:12.0113 3404 Parport (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
12:29:12.0128 3404 Parport - ok
12:29:12.0144 3404 partmgr (3b38467e7c3daed009dfe359e17f139f) C:\Windows\system32\drivers\partmgr.sys
12:29:12.0144 3404 partmgr - ok
12:29:12.0160 3404 Parvdm (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
12:29:12.0160 3404 Parvdm - ok
12:29:12.0175 3404 pci (01b94418deb235dff777cc80076354b4) C:\Windows\system32\drivers\pci.sys
12:29:12.0191 3404 pci - ok
12:29:12.0222 3404 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
12:29:12.0222 3404 pciide - ok
12:29:12.0253 3404 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
12:29:12.0253 3404 pcmcia - ok
12:29:12.0316 3404 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
12:29:12.0316 3404 PEAUTH - ok
12:29:12.0394 3404 Point32 (437827d69040c0c2565d47b024ed5372) C:\Windows\system32\DRIVERS\point32k.sys
12:29:12.0487 3404 Point32 - ok
12:29:12.0518 3404 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
12:29:12.0518 3404 PptpMiniport - ok
12:29:12.0550 3404 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
12:29:12.0565 3404 Processor - ok
12:29:12.0674 3404 PSched (bfef604508a0ed1eae2a73e872555ffb) C:\Windows\system32\DRIVERS\pacer.sys
12:29:12.0690 3404 PSched - ok
12:29:12.0737 3404 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
12:29:12.0768 3404 ql2300 - ok
12:29:12.0799 3404 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
12:29:12.0799 3404 ql40xx - ok
12:29:12.0830 3404 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
12:29:12.0830 3404 QWAVEdrv - ok
12:29:12.0862 3404 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
12:29:12.0862 3404 RasAcd - ok
12:29:12.0877 3404 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
12:29:12.0893 3404 Rasl2tp - ok
12:29:12.0924 3404 RasPppoe (3e9d9b048107b40d87b97df2e48e0744) C:\Windows\system32\DRIVERS\raspppoe.sys
12:29:12.0924 3404 RasPppoe - ok
12:29:12.0924 3404 RasSstp (a7d141684e9500ac928a772ed8e6b671) C:\Windows\system32\DRIVERS\rassstp.sys
12:29:12.0940 3404 RasSstp - ok
12:29:12.0955 3404 rdbss (6e1c5d0457622f9ee35f683110e93d14) C:\Windows\system32\DRIVERS\rdbss.sys
12:29:12.0955 3404 rdbss - ok
12:29:12.0971 3404 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
12:29:12.0971 3404 RDPCDD - ok
12:29:13.0018 3404 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
12:29:13.0018 3404 rdpdr - ok
12:29:13.0049 3404 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
12:29:13.0049 3404 RDPENCDD - ok
12:29:13.0096 3404 RDPWD (e1c18f4097a5abcec941dc4b2f99db7e) C:\Windows\system32\drivers\RDPWD.sys
12:29:13.0096 3404 RDPWD - ok
12:29:13.0142 3404 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
12:29:13.0142 3404 rspndr - ok
12:29:13.0174 3404 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
12:29:13.0174 3404 sbp2port - ok
12:29:13.0220 3404 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
12:29:13.0220 3404 secdrv - ok
12:29:13.0267 3404 Serenum (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
12:29:13.0267 3404 Serenum - ok
12:29:13.0283 3404 Serial (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
12:29:13.0283 3404 Serial - ok
12:29:13.0298 3404 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
12:29:13.0298 3404 sermouse - ok
12:29:13.0345 3404 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
12:29:13.0345 3404 sffdisk - ok
12:29:13.0376 3404 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
12:29:13.0376 3404 sffp_mmc - ok
12:29:13.0376 3404 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
12:29:13.0392 3404 sffp_sd - ok
12:29:13.0408 3404 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
12:29:13.0408 3404 sfloppy - ok
12:29:13.0439 3404 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
12:29:13.0439 3404 sisagp - ok
12:29:13.0470 3404 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
12:29:13.0470 3404 SiSRaid2 - ok
12:29:13.0486 3404 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
12:29:13.0486 3404 SiSRaid4 - ok
12:29:13.0532 3404 Smb (031e6bcd53c9b2b9ace111eafec347b6) C:\Windows\system32\DRIVERS\smb.sys
12:29:13.0532 3404 Smb - ok
12:29:13.0564 3404 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
12:29:13.0564 3404 spldr - ok
12:29:13.0626 3404 sptd (71e276f6d189413266ea22171806597b) C:\Windows\system32\Drivers\sptd.sys
12:29:13.0626 3404 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 71e276f6d189413266ea22171806597b
12:29:13.0626 3404 sptd ( LockedFile.Multi.Generic ) - warning
12:29:13.0626 3404 sptd - detected LockedFile.Multi.Generic (1)
12:29:13.0688 3404 SQTECH905C (ef8bd02ad9110c17e0f0e6f9b1479ad5) C:\Windows\system32\Drivers\Capt905c.sys
12:29:13.0766 3404 SQTECH905C - ok
12:29:13.0829 3404 srv (2252aef839b1093d16761189f45af885) C:\Windows\system32\DRIVERS\srv.sys
12:29:13.0829 3404 srv - ok
12:29:13.0860 3404 srv2 (b7ff59408034119476b00a81bb53d5d1) C:\Windows\system32\DRIVERS\srv2.sys
12:29:13.0876 3404 srv2 - ok
12:29:13.0907 3404 srvnet (2accc9b12af02030f531e6cca6f8b76e) C:\Windows\system32\DRIVERS\srvnet.sys
12:29:13.0907 3404 srvnet - ok
12:29:13.0938 3404 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
12:29:13.0954 3404 swenum - ok
12:29:13.0985 3404 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
12:29:13.0985 3404 Symc8xx - ok
12:29:14.0032 3404 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
12:29:14.0032 3404 Sym_hi - ok
12:29:14.0063 3404 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
12:29:14.0063 3404 Sym_u3 - ok
12:29:14.0156 3404 Tcpip (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\drivers\tcpip.sys
12:29:14.0156 3404 Tcpip - ok
12:29:14.0188 3404 Tcpip6 (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\DRIVERS\tcpip.sys
12:29:14.0203 3404 Tcpip6 - ok
12:29:14.0219 3404 tcpipreg (d4a2e4a4b011f3a883af77315a5ae76b) C:\Windows\system32\drivers\tcpipreg.sys
12:29:14.0219 3404 tcpipreg - ok
12:29:14.0250 3404 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
12:29:14.0250 3404 TDPIPE - ok
12:29:14.0266 3404 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
12:29:14.0281 3404 TDTCP - ok
12:29:14.0297 3404 tdx (d09276b1fab033ce1d40dcbdf303d10f) C:\Windows\system32\DRIVERS\tdx.sys
12:29:14.0297 3404 tdx - ok
12:29:14.0312 3404 TermDD (a048056f5e1a96a9bf3071b91741a5aa) C:\Windows\system32\DRIVERS\termdd.sys
12:29:14.0328 3404 TermDD - ok
12:29:14.0406 3404 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
12:29:14.0437 3404 TrueSight - ok
12:29:14.0468 3404 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
12:29:14.0468 3404 tssecsrv - ok
12:29:14.0500 3404 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
12:29:14.0500 3404 tunmp - ok
12:29:14.0546 3404 tunnel (6042505ff6fa9ac1ef7684d0e03b6940) C:\Windows\system32\DRIVERS\tunnel.sys
12:29:14.0546 3404 tunnel - ok
12:29:14.0578 3404 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
12:29:14.0578 3404 uagp35 - ok
12:29:14.0624 3404 udfs (8b5088058fa1d1cd897a2113ccff6c58) C:\Windows\system32\DRIVERS\udfs.sys
12:29:14.0624 3404 udfs - ok
12:29:14.0656 3404 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
12:29:14.0671 3404 uliagpkx - ok
12:29:14.0687 3404 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
12:29:14.0687 3404 uliahci - ok
12:29:14.0718 3404 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
12:29:14.0718 3404 UlSata - ok
12:29:14.0749 3404 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
12:29:14.0749 3404 ulsata2 - ok
12:29:14.0765 3404 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
12:29:14.0780 3404 umbus - ok
12:29:14.0812 3404 usbaudio (292a25bb75a568ae2c67169ba2c6365a) C:\Windows\system32\drivers\usbaudio.sys
12:29:14.0812 3404 usbaudio - ok
12:29:14.0843 3404 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
12:29:14.0843 3404 usbccgp - ok
12:29:14.0874 3404 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
12:29:14.0890 3404 usbcir - ok
12:29:14.0921 3404 usbehci (cebe90821810e76320155beba722fcf9) C:\Windows\system32\DRIVERS\usbehci.sys
12:29:14.0921 3404 usbehci - ok
12:29:14.0952 3404 usbhub (cc6b28e4ce39951357963119ce47b143) C:\Windows\system32\DRIVERS\usbhub.sys
12:29:14.0952 3404 usbhub - ok
12:29:14.0952 3404 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys
12:29:14.0968 3404 usbohci - ok
12:29:14.0999 3404 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
12:29:14.0999 3404 usbprint - ok
12:29:15.0046 3404 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
12:29:15.0046 3404 usbscan - ok
12:29:15.0077 3404 USBSTOR (87ba6b83c5d19b69160968d07d6e2982) C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:29:15.0077 3404 USBSTOR - ok
12:29:15.0108 3404 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
12:29:15.0108 3404 usbuhci - ok
12:29:15.0155 3404 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
12:29:15.0155 3404 usbvideo - ok
12:29:15.0202 3404 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
12:29:15.0202 3404 vga - ok
12:29:15.0202 3404 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
12:29:15.0217 3404 VgaSave - ok
12:29:15.0248 3404 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
12:29:15.0248 3404 viaagp - ok
12:29:15.0295 3404 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
12:29:15.0311 3404 ViaC7 - ok
12:29:15.0342 3404 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
12:29:15.0342 3404 viaide - ok
12:29:15.0358 3404 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
12:29:15.0358 3404 volmgr - ok
12:29:15.0404 3404 volmgrx (98f5ffe6316bd74e9e2c97206c190196) C:\Windows\system32\drivers\volmgrx.sys
12:29:15.0404 3404 volmgrx - ok
12:29:15.0420 3404 volsnap (d8b4a53dd2769f226b3eb374374987c9) C:\Windows\system32\drivers\volsnap.sys
12:29:15.0436 3404 volsnap - ok
12:29:15.0467 3404 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
12:29:15.0467 3404 vsmraid - ok
12:29:15.0514 3404 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
12:29:15.0514 3404 WacomPen - ok
12:29:15.0545 3404 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
12:29:15.0545 3404 Wanarp - ok
12:29:15.0576 3404 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
12:29:15.0576 3404 Wanarpv6 - ok
12:29:15.0654 3404 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
12:29:15.0670 3404 Wd - ok
12:29:15.0701 3404 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
12:29:15.0701 3404 Wdf01000 - ok
12:29:15.0779 3404 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
12:29:15.0779 3404 WmiAcpi - ok
12:29:15.0857 3404 WpdUsb (0cec23084b51b8288099eb710224e955) C:\Windows\system32\DRIVERS\wpdusb.sys
12:29:15.0857 3404 WpdUsb - ok
12:29:15.0904 3404 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
12:29:15.0904 3404 ws2ifsl - ok
12:29:15.0966 3404 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
12:29:15.0966 3404 WUDFRd - ok
12:29:15.0982 3404 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
12:29:15.0997 3404 \Device\Harddisk0\DR0 - ok
12:29:15.0997 3404 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
12:29:15.0997 3404 \Device\Harddisk1\DR1 - ok
12:29:16.0013 3404 MBR (0x1B8) (739b36f7a373fc81121d831231b6d311) \Device\Harddisk6\DR7
12:29:18.0181 3404 \Device\Harddisk6\DR7 - ok
12:29:18.0181 3404 Boot (0x1200) (d4b54eb152a2b066331771a7fb0f1109) \Device\Harddisk0\DR0\Partition0
12:29:18.0181 3404 \Device\Harddisk0\DR0\Partition0 - ok
12:29:18.0197 3404 Boot (0x1200) (21caf79f432466213e7867531919b558) \Device\Harddisk1\DR1\Partition0
12:29:18.0197 3404 \Device\Harddisk1\DR1\Partition0 - ok
12:29:18.0197 3404 Boot (0x1200) (65e668e848d7096b8ed569a3913c976a) \Device\Harddisk6\DR7\Partition0
12:29:18.0197 3404 \Device\Harddisk6\DR7\Partition0 - ok
12:29:18.0197 3404 ============================================================
12:29:18.0197 3404 Scan finished
12:29:18.0197 3404 ============================================================
12:29:18.0212 1292 Detected object count: 1
12:29:18.0212 1292 Actual detected object count: 1
12:31:50.0110 1292 sptd ( LockedFile.Multi.Generic ) - skipped by user
12:31:50.0110 1292 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Après le redémarrage de l'ordi, j'ai récupéré l'affichage normal de mon bureau.

Reste t'il des manipulation spécifiques à réaliser ?

Et que faire du dossier de RK quarantaine qui a été généré ?

Merci encore pour l'efficacité de la réponse apportée.

Fais ça pour voir :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Lance OTL
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
* Clique sur le bouton Analyse.
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.

Voici les liens pour les deux rapports suite à l'analyse avec OTL :

Fichier OTL : https://pjjoint.malekal.com/files.php?id=q10p9x13t13v14e9k13r13p6x11r13q6w10v913i613o8u7t7

Fichier extras : https://pjjoint.malekal.com/files.php?id=n10t8c7y14h5v13z13k10w11m5p5f7j511u14u5i12o15j8p5

Concernant les remarques de Tigzy et g3n-h, que sont les FPs et dois je réaliser la manip proposée ?

Merci d'avance

A supprimer :
C:\ProgramData\jE20302LmBcG20302
C:\Users\Bourdet\AppData\Roaming\EoRezo

~~

C'est correct.

Fais plus attention à l'avenir....

Maintiens tes logiciels à jour c'est important, utilise ce programme : /faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
Absolument à faire.

Les antivirus ne font pas tout en ce qui concerne la sécurité de ta machine (mettre à jour ses logiciels etc etc)
La meilleur protection reste de connaître les infections pour pouvoir les éviter et avoir de bonne habitude.
Donc faut se documenter.

Si tu utilises Avast! ou AVG - regle le pour détecter les LPIs - voir : https://www.malekal.com/adwares-pup-protection/

Un peu de lecture pour éviter les infections :
- connaitre et éviter les infections : https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware-courte.pdf
- sécuriser son PC : http://forum.malekal.com/comment-securiser-son-ordinateur.html et https://www.commentcamarche.net/faq/8934-securisation-de-son-pc
- Si tu utilises Avast! ou AVG, pense à activer les détections PUPs/LPIs : https://www.commentcamarche.net/faq/32913-avast-et-avg-activer-la-detection-des-pups-lpis
- lire : http://www.commentcamarche.net/faq/27128-malwares-quels-enjeux-version-synthese

Ce qu'il ne faut pas faire :
Je télécharge n'importe quoi - je m'infecte - evite les programmes par publicités ou sur les liens commerciaux des moteurs de recherche - ce sont des arnaques ::
Les PUPs/LPIs : https://www.malekal.com/adwares-pup-protection/
Exemple de ce qu'il ne faut pas faire :
https://forums.commentcamarche.net/forum/affich-19719198-onglets-pub-intempestifs#14
https://forums.commentcamarche.net/forum/affich-18347759-le-nouveau-avast-sonne-trop-souvent#9
Je télécharge depuis n'importe où - je m'infecte : https://forums.commentcamarche.net/forum/affich-19916973-clickpotato-vlc-virus#6
Recommandations sur la sécurité : https://forums.commentcamarche.net/forum/affich-18680013-windows-7-et-antispyware#1

Fonctionnement de quelques catégories de malwares :
https://forums.commentcamarche.net/forum/affich-17725521-virus-programme-troyen
https://forums.commentcamarche.net/forum/affich-17746390-concernant-la-propagation-des-virus

Si tu as des questions sur le fonctionement des malwares.
N'hésite pas.

Merci beaucoup pour l'aide apportée.

A priori, plus de problème au niveau de l'ordi : tout semble rentré dans l'ordre.

Merci également pour les différents liens : j'ai commencé à lire et c'est vraiment très instructif pour quelqu'un comme moi qui ne connait pas grand chose à l'informatique...