"System Restore"

savannah224 Messages postés 8 Statut Membre -  
 Utilisateur anonyme -
Bonjour,

Depuis quelques jours, je ne peux plus éxécuter aucun programme sur mon pc. Les fichiers ont tous disparus, mon écran et noir, et dès le démarrage, "System Restore" s'ouvre, en m'affichant de nombreuses fenêtres "Windows-Delayed Write Failed".
Comment faire pour récupérer le contenu de mon PC et retirer ce "system restore" ?

Merci d'avance

2 réponses

  1. Utilisateur anonyme
     
    Bonjour savannah
    Tu as un rogue dans ton PC
    Tu vas essayer ceci

    Télécharge sur le bureau RogueKiller
    * Quitte tous les programmes en cours, c'est important
    * Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur
    * Sinon lance simplement RogueKiller.exe
    * Lorsque demandé, tape 2 et valide
    * Un rapport à dû s'ouvrir (RKreport.txt se trouve également à côté de l'exécutable), poste
    le contenu
    * Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois. Si vraiment cela ne passe pas (ça peut arriver), le renommer en winlogon.exe
    1
    1. savannah224 Messages postés 8 Statut Membre
       
      Merci beaucoup !
      Voici le rapport :

      RogueKiller V6.1.5 [29/10/2011] par Tigzy
      mail: tigzyRK<at>gmail<dot>com
      Remontees: https://www.luanagames.com/index.fr.html
      Blog: http://tigzyrk.blogspot.com

      Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
      Demarrage : Mode normal
      Utilisateur: Marine [Droits d'admin]
      Mode: Suppression -- Date : 30/10/2011 17:41:15

      Processus malicieux: 2
      [SUSP PATH] SIyHoyHlXaPT.exe -- c:\programdata\siyhoyhlxapt.exe -> KILLED [TermProc]
      [SUSP PATH] 6DSS92c31Apgjk.exe -- c:\programdata\6dss92c31apgjk.exe -> KILLED [TermProc]

      Entrees de registre: 11
      [SUSP PATH] HKCU\[...]\Run : Facebook Update ("C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver) -> DELETED
      [SUSP PATH] HKCU\[...]\Run : SIyHoyHlXaPT.exe (C:\ProgramData\SIyHoyHlXaPT.exe) -> DELETED
      [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000UA.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
      [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000Core.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
      [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000Core.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
      [SUSP PATH] Notification de cadeaux MSN.lnk : C:\Users\Marine\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe -> DELETED
      [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
      [HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
      [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()
      [HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()
      [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED ()

      Fichiers / Dossiers particuliers:

      Driver: [LOADED]

      Fichier HOSTS:
      127.0.0.1 localhost
      ::1 localhost


      Termine : << RKreport[1].txt >>
      RKreport[1].txt
      0
    2. Utilisateur anonyme
       
      Effectivement c'était infecté
      Relance Rogue Killer et tape 6, puis poste le rapport

      Ensuite
      On va vérifier s'il y a la présence d'un rootkit :
      Télécharge TDSSKiller (de Kaspersky) sur ton bureau
      https://support.kaspersky.com/downloads/utils/tdsskiller.exe

      Double clique sur TDSSKiller pour le lancer (avec Vista/Seven, clic droit
      dessus, et sur exécuter en tant qu'administrateur

      Clique sur Start scan, et laisse l'outil travailler

      Si des fichiers infectés sont trouvés, une nouvelle fenêtre va s'ouvrir

      Si TDSS. tdl2 est détecté, l'option delete sera cochée par défaut

      Si TDSS.tdl3 est détecté, vérifie que Cure est bien cochée

      Si TDSS.tdl4 (\HardDisk0\MBR) est détecté, vérifie que Cure
      est bien cochée

      Si Suspicious file est indiqué, laisse l'option cochée sur Skip

      Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

      Clique sur Continue, puis sur Reboot now pour
      redémarrer le PC

      Poste le rapport qui est sauvegardé dans C:\TDSSKiller_Quarantine\
      JJ.MM.AA_HH.MM.SS.
      (JJ.MM.AA date du passage de l'outil, HH.MM.SS
      heure de passage).
      0
    3. savannah224 Messages postés 8 Statut Membre
       
      RogueKiller V6.1.5 [29/10/2011] par Tigzy
      mail: tigzyRK<at>gmail<dot>com
      Remontees: https://www.luanagames.com/index.fr.html
      Blog: http://tigzyrk.blogspot.com

      Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
      Demarrage : Mode normal
      Utilisateur: Marine [Droits d'admin]
      Mode: Raccourcis RAZ -- Date : 30/10/2011 17:53:49

      Processus malicieux: 0

      Driver: [LOADED]

      Attributs de fichiers restaures:
      Bureau: Success 25 / Fail 0
      Lancement rapide: Success 9 / Fail 0
      Programmes: Success 205 / Fail 0
      Menu demarrer: Success 40 / Fail 0
      Dossier utilisateur: Success 22597 / Fail 0
      Mes documents: Success 3096 / Fail 0
      Mes favoris: Success 82 / Fail 0
      Mes images: Success 29293 / Fail 0
      Ma musique: Success 4142 / Fail 0
      Mes videos: Success 9 / Fail 0
      Disques locaux: Success 7440 / Fail 0
      Sauvegarde: [FOUND] Success 28 / Fail 0

      Lecteurs:
      [C:] \Device\HarddiskVolume2 -- 0x3 --> Restored
      [D:] \Device\HarddiskVolume4 -- 0x2 --> Restored
      [E:] \Device\HarddiskVolume5 -- 0x2 --> Restored
      [F:] \Device\CdRom0 -- 0x5 --> Skipped

      Termine : << RKreport[2].txt >>
      RKreport[1].txt ; RKreport[2].txt


      Je télécharge ce que vous m'avez conseillé maintenant !
      0
    4. Utilisateur anonyme
       
      D'accord, j'attends le résultat
      0
    5. savannah224 Messages postés 8 Statut Membre
       
      17:57:38.0470 7624 TDSS rootkit removing tool 2.6.14.0 Oct 28 2011 11:11:01
      17:57:39.0240 7624 ============================================================
      17:57:39.0241 7624 Current date / time: 2011/10/30 17:57:39.0240
      17:57:39.0241 7624 SystemInfo:
      17:57:39.0241 7624
      17:57:39.0241 7624 OS Version: 6.0.6001 ServicePack: 1.0
      17:57:39.0241 7624 Product type: Workstation
      17:57:39.0241 7624 ComputerName: PC-DE-MARINE
      17:57:39.0241 7624 UserName: Marine
      17:57:39.0241 7624 Windows directory: C:\Windows
      17:57:39.0241 7624 System windows directory: C:\Windows
      17:57:39.0241 7624 Processor architecture: Intel x86
      17:57:39.0241 7624 Number of processors: 2
      17:57:39.0241 7624 Page size: 0x1000
      17:57:39.0241 7624 Boot type: Normal boot
      17:57:39.0242 7624 ============================================================
      17:57:40.0304 7624 Initialize success
      17:57:42.0711 3392 ============================================================
      17:57:42.0711 3392 Scan started
      17:57:42.0711 3392 Mode: Manual;
      17:57:42.0711 3392 ============================================================
      17:57:45.0385 3392 ACPI (fcb8c7210f0135e24c6580f7f649c73c) C:\Windows\system32\drivers\acpi.sys
      17:57:45.0394 3392 ACPI - ok
      17:57:45.0556 3392 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
      17:57:45.0603 3392 adp94xx - ok
      17:57:45.0769 3392 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
      17:57:45.0800 3392 adpahci - ok
      17:57:45.0924 3392 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
      17:57:45.0962 3392 adpu160m - ok
      17:57:46.0069 3392 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
      17:57:46.0091 3392 adpu320 - ok
      17:57:46.0256 3392 AFD (48eb99503533c27ac6135648e5474457) C:\Windows\system32\drivers\afd.sys
      17:57:46.0297 3392 AFD - ok
      17:57:46.0463 3392 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
      17:57:46.0507 3392 agp440 - ok
      17:57:46.0637 3392 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
      17:57:46.0662 3392 aic78xx - ok
      17:57:46.0775 3392 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
      17:57:46.0804 3392 aliide - ok
      17:57:46.0947 3392 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
      17:57:46.0985 3392 amdagp - ok
      17:57:47.0027 3392 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
      17:57:47.0045 3392 amdide - ok
      17:57:47.0173 3392 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
      17:57:47.0197 3392 AmdK7 - ok
      17:57:47.0296 3392 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
      17:57:47.0322 3392 AmdK8 - ok
      17:57:47.0570 3392 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
      17:57:47.0609 3392 arc - ok
      17:57:47.0754 3392 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
      17:57:47.0789 3392 arcsas - ok
      17:57:47.0888 3392 ArcSoftKsUFilter (857b48965a0503b7ab795d4bfe7cbd8b) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
      17:57:47.0929 3392 ArcSoftKsUFilter - ok
      17:57:48.0083 3392 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
      17:57:48.0100 3392 AsyncMac - ok
      17:57:48.0234 3392 atapi (2d9c903dc76a66813d350a562de40ed9) C:\Windows\system32\drivers\atapi.sys
      17:57:48.0252 3392 atapi - ok
      17:57:48.0356 3392 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
      17:57:48.0362 3392 avgio - ok
      17:57:48.0491 3392 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys
      17:57:48.0518 3392 avgntflt - ok
      17:57:48.0618 3392 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys
      17:57:48.0630 3392 avipbb - ok
      17:57:48.0723 3392 avshws (a31cb3fa1a98ffef7628a3170e6ed98b) C:\Windows\system32\DRIVERS\youup.sys
      17:57:48.0764 3392 avshws - ok
      17:57:48.0935 3392 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
      17:57:48.0961 3392 Beep - ok
      17:57:49.0081 3392 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
      17:57:49.0108 3392 blbdrive - ok
      17:57:49.0276 3392 bowser (8153396d5551276227fa146900f734e6) C:\Windows\system32\DRIVERS\bowser.sys
      17:57:49.0304 3392 bowser - ok
      17:57:49.0432 3392 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
      17:57:49.0468 3392 BrFiltLo - ok
      17:57:49.0571 3392 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
      17:57:49.0587 3392 BrFiltUp - ok
      17:57:49.0732 3392 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
      17:57:49.0763 3392 Brserid - ok
      17:57:49.0891 3392 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
      17:57:49.0913 3392 BrSerWdm - ok
      17:57:49.0948 3392 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
      17:57:49.0972 3392 BrUsbMdm - ok
      17:57:50.0090 3392 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
      17:57:50.0108 3392 BrUsbSer - ok
      17:57:50.0294 3392 BthEnum (ae19cfbbba41800f3d5343e21d2ca09f) C:\Windows\system32\DRIVERS\BthEnum.sys
      17:57:50.0321 3392 BthEnum - ok
      17:57:50.0566 3392 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
      17:57:50.0600 3392 BTHMODEM - ok
      17:57:50.0751 3392 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
      17:57:50.0754 3392 BthPan - ok
      17:57:50.0902 3392 BTHPORT (75f19df0bc62992d05fdd8a32d968531) C:\Windows\system32\Drivers\BTHport.sys
      17:57:50.0945 3392 BTHPORT - ok
      17:57:51.0094 3392 BTHUSB (4ce2a25c5936bc515357d60fee73f221) C:\Windows\system32\Drivers\BTHUSB.sys
      17:57:51.0115 3392 BTHUSB - ok
      17:57:51.0235 3392 btwaudio (6e41621e03d91167ceae555ce2b468b8) C:\Windows\system32\drivers\btwaudio.sys
      17:57:51.0265 3392 btwaudio - ok
      17:57:51.0388 3392 btwavdt (7e67b295081b33ea22c0fb04798b306c) C:\Windows\system32\drivers\btwavdt.sys
      17:57:51.0416 3392 btwavdt - ok
      17:57:51.0539 3392 btwl2cap (54c2ee0a3cec586629035d771aacae67) C:\Windows\system32\DRIVERS\btwl2cap.sys
      17:57:51.0558 3392 btwl2cap - ok
      17:57:51.0610 3392 btwrchid (4b4f992ee709c40efd33ba4d2bafa402) C:\Windows\system32\DRIVERS\btwrchid.sys
      17:57:51.0635 3392 btwrchid - ok
      17:57:51.0734 3392 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
      17:57:51.0756 3392 cdfs - ok
      17:57:51.0869 3392 cdrom (1ec25cea0de6ac4718bf89f9e1778b57) C:\Windows\system32\DRIVERS\cdrom.sys
      17:57:51.0897 3392 cdrom - ok
      17:57:51.0950 3392 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
      17:57:52.0001 3392 circlass - ok
      17:57:52.0109 3392 CLFS (465745561c832b29f7c48b488aab3842) C:\Windows\system32\CLFS.sys
      17:57:52.0143 3392 CLFS - ok
      17:57:52.0302 3392 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
      17:57:52.0327 3392 CmBatt - ok
      17:57:52.0405 3392 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
      17:57:52.0426 3392 cmdide - ok
      17:57:52.0492 3392 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
      17:57:52.0523 3392 Compbatt - ok
      17:57:52.0617 3392 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
      17:57:52.0660 3392 crcdisk - ok
      17:57:52.0704 3392 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
      17:57:52.0730 3392 Crusoe - ok
      17:57:52.0831 3392 DfsC (a3e9fa213f443ac77c7746119d13feec) C:\Windows\system32\Drivers\dfsc.sys
      17:57:52.0833 3392 DfsC - ok
      17:57:53.0020 3392 disk (64109e623abd6955c8fb110b592e68b7) C:\Windows\system32\drivers\disk.sys
      17:57:53.0023 3392 disk - ok
      17:57:53.0167 3392 DMICall (f206e28ed74c491fd5d7c0a1119ce37f) C:\Windows\system32\DRIVERS\DMICall.sys
      17:57:53.0189 3392 DMICall - ok
      17:57:53.0347 3392 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
      17:57:53.0382 3392 Dot4 - ok
      17:57:53.0504 3392 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
      17:57:53.0528 3392 Dot4Print - ok
      17:57:53.0649 3392 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
      17:57:53.0673 3392 dot4usb - ok
      17:57:53.0810 3392 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
      17:57:53.0827 3392 drmkaud - ok
      17:57:53.0872 3392 DXGKrnl (85f33880b8cfb554bd3d9ccdb486845a) C:\Windows\System32\drivers\dxgkrnl.sys
      17:57:53.0887 3392 DXGKrnl - ok
      17:57:54.0012 3392 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
      17:57:54.0033 3392 E1G60 - ok
      17:57:54.0177 3392 Ecache (dd2cd259d83d8b72c02c5f2331ff9d68) C:\Windows\system32\drivers\ecache.sys
      17:57:54.0216 3392 Ecache - ok
      17:57:54.0370 3392 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
      17:57:54.0417 3392 elxstor - ok
      17:57:54.0541 3392 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
      17:57:54.0557 3392 ErrDev - ok
      17:57:54.0705 3392 exfat (0d858eb20589a34efb25695acaa6aa2d) C:\Windows\system32\drivers\exfat.sys
      17:57:54.0734 3392 exfat - ok
      17:57:54.0856 3392 fastfat (3c489390c2e2064563727752af8eab9e) C:\Windows\system32\drivers\fastfat.sys
      17:57:54.0888 3392 fastfat - ok
      17:57:55.0014 3392 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
      17:57:55.0039 3392 fdc - ok
      17:57:55.0140 3392 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
      17:57:55.0164 3392 FileInfo - ok
      17:57:55.0227 3392 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
      17:57:55.0234 3392 Filetrace - ok
      17:57:55.0349 3392 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
      17:57:55.0365 3392 flpydisk - ok
      17:57:55.0456 3392 FltMgr (05ea53afe985443011e36dab07343b46) C:\Windows\system32\drivers\fltmgr.sys
      17:57:55.0489 3392 FltMgr - ok
      17:57:55.0598 3392 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
      17:57:55.0603 3392 Fs_Rec - ok
      17:57:55.0641 3392 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
      17:57:55.0669 3392 gagp30kx - ok
      17:57:55.0811 3392 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
      17:57:55.0831 3392 GEARAspiWDM - ok
      17:57:56.0028 3392 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
      17:57:56.0045 3392 HdAudAddService - ok
      17:57:56.0075 3392 HDAudBus (c87b1ee051c0464491c1a7b03fa0bc99) C:\Windows\system32\DRIVERS\HDAudBus.sys
      17:57:56.0078 3392 HDAudBus - ok
      17:57:56.0194 3392 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
      17:57:56.0219 3392 HidBth - ok
      17:57:56.0336 3392 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
      17:57:56.0357 3392 HidIr - ok
      17:57:56.0472 3392 HidUsb (e2b5bd48afcc0f0974fb44641b223250) C:\Windows\system32\DRIVERS\hidusb.sys
      17:57:56.0474 3392 HidUsb - ok
      17:57:56.0559 3392 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
      17:57:56.0581 3392 HpCISSs - ok
      17:57:56.0707 3392 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
      17:57:56.0723 3392 HSFHWAZL - ok
      17:57:56.0840 3392 HTTP (96e241624c71211a79c84f50a8e71cab) C:\Windows\system32\drivers\HTTP.sys
      17:57:56.0886 3392 HTTP - ok
      17:57:56.0994 3392 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
      17:57:57.0018 3392 i2omp - ok
      17:57:57.0153 3392 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
      17:57:57.0183 3392 i8042prt - ok
      17:57:57.0301 3392 iaStor (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys
      17:57:57.0305 3392 iaStor - ok
      17:57:57.0376 3392 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
      17:57:57.0418 3392 iaStorV - ok
      17:57:57.0540 3392 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
      17:57:57.0566 3392 iirsp - ok
      17:57:57.0760 3392 IntcAzAudAddService (5d26ccb06e1f3b5c26e863df3f4f2611) C:\Windows\system32\drivers\RTKVHDA.sys
      17:57:57.0844 3392 IntcAzAudAddService - ok
      17:57:57.0972 3392 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
      17:57:57.0990 3392 intelide - ok
      17:57:58.0093 3392 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
      17:57:58.0095 3392 intelppm - ok
      17:57:58.0213 3392 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
      17:57:58.0221 3392 IpFilterDriver - ok
      17:57:58.0295 3392 IpInIp - ok
      17:57:58.0375 3392 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
      17:57:58.0403 3392 IPMIDRV - ok
      17:57:58.0486 3392 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
      17:57:58.0522 3392 IPNAT - ok
      17:57:58.0586 3392 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
      17:57:58.0601 3392 IRENUM - ok
      17:57:58.0710 3392 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
      17:57:58.0720 3392 isapnp - ok
      17:57:58.0786 3392 iScsiPrt (f247eec28317f6c739c16de420097301) C:\Windows\system32\DRIVERS\msiscsi.sys
      17:57:58.0792 3392 iScsiPrt - ok
      17:57:58.0886 3392 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
      17:57:58.0909 3392 iteatapi - ok
      17:57:59.0015 3392 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
      17:57:59.0040 3392 iteraid - ok
      17:57:59.0156 3392 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
      17:57:59.0178 3392 kbdclass - ok
      17:57:59.0210 3392 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys
      17:57:59.0237 3392 kbdhid - ok
      17:57:59.0376 3392 KSecDD (7a0cf7908b6824d6a2a1d313e5ae3dca) C:\Windows\system32\Drivers\ksecdd.sys
      17:57:59.0435 3392 KSecDD - ok
      17:57:59.0560 3392 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
      17:57:59.0586 3392 lltdio - ok
      17:57:59.0726 3392 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
      17:57:59.0793 3392 LSI_FC - ok
      17:57:59.0952 3392 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
      17:57:59.0986 3392 LSI_SAS - ok
      17:58:00.0098 3392 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
      17:58:00.0127 3392 LSI_SCSI - ok
      17:58:00.0263 3392 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
      17:58:00.0289 3392 luafv - ok
      17:58:00.0396 3392 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
      17:58:00.0420 3392 mdmxsdk - ok
      17:58:00.0585 3392 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
      17:58:00.0593 3392 megasas - ok
      17:58:00.0719 3392 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
      17:58:00.0756 3392 MegaSR - ok
      17:58:00.0850 3392 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
      17:58:00.0876 3392 Modem - ok
      17:58:00.0969 3392 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
      17:58:00.0971 3392 monitor - ok
      17:58:00.0994 3392 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
      17:58:01.0019 3392 mouclass - ok
      17:58:01.0117 3392 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
      17:58:01.0142 3392 mouhid - ok
      17:58:01.0266 3392 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
      17:58:01.0277 3392 MountMgr - ok
      17:58:01.0413 3392 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
      17:58:01.0441 3392 mpio - ok
      17:58:01.0541 3392 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
      17:58:01.0566 3392 mpsdrv - ok
      17:58:01.0662 3392 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
      17:58:01.0688 3392 Mraid35x - ok
      17:58:01.0786 3392 MRxDAV (ae3de84536b6799d2267443cec8edbb9) C:\Windows\system32\drivers\mrxdav.sys
      17:58:01.0817 3392 MRxDAV - ok
      17:58:01.0916 3392 mrxsmb (5734a0f2be7e495f7d3ed6efd4b9f5a1) C:\Windows\system32\DRIVERS\mrxsmb.sys
      17:58:01.0928 3392 mrxsmb - ok
      17:58:02.0052 3392 mrxsmb10 (6b5fa5adfacac9dbbe0991f4566d7d55) C:\Windows\system32\DRIVERS\mrxsmb10.sys
      17:58:02.0092 3392 mrxsmb10 - ok
      17:58:02.0245 3392 mrxsmb20 (5c80d8159181c7abf1b14ba703b01e0b) C:\Windows\system32\DRIVERS\mrxsmb20.sys
      17:58:02.0278 3392 mrxsmb20 - ok
      17:58:02.0410 3392 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
      17:58:02.0428 3392 msahci - ok
      17:58:02.0548 3392 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
      17:58:02.0580 3392 msdsm - ok
      17:58:02.0714 3392 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
      17:58:02.0732 3392 Msfs - ok
      17:58:02.0840 3392 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
      17:58:02.0868 3392 msisadrv - ok
      17:58:02.0988 3392 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
      17:58:02.0993 3392 MSKSSRV - ok
      17:58:03.0089 3392 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
      17:58:03.0094 3392 MSPCLOCK - ok
      17:58:03.0244 3392 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
      17:58:03.0270 3392 MSPQM - ok
      17:58:03.0374 3392 MsRPC (b5614aecb05a9340aa0fb55bf561cc63) C:\Windows\system32\drivers\MsRPC.sys
      17:58:03.0407 3392 MsRPC - ok
      17:58:03.0510 3392 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
      17:58:03.0512 3392 mssmbios - ok
      17:58:03.0602 3392 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
      17:58:03.0606 3392 MSTEE - ok
      17:58:03.0700 3392 Mup (6dfd1d322de55b0b7db7d21b90bec49c) C:\Windows\system32\Drivers\mup.sys
      17:58:03.0723 3392 Mup - ok
      17:58:03.0847 3392 NativeWifiP (3c21ce48ff529bb73dadb98770b54025) C:\Windows\system32\DRIVERS\nwifi.sys
      17:58:03.0874 3392 NativeWifiP - ok
      17:58:03.0992 3392 NDIS (9bdc71790fa08f0a0b5f10462b1bd0b1) C:\Windows\system32\drivers\ndis.sys
      17:58:04.0004 3392 NDIS - ok
      17:58:04.0091 3392 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
      17:58:04.0108 3392 NdisTapi - ok
      17:58:04.0228 3392 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
      17:58:04.0253 3392 Ndisuio - ok
      17:58:04.0369 3392 NdisWan (3d14c3b3496f88890d431e8aa022a411) C:\Windows\system32\DRIVERS\ndiswan.sys
      17:58:04.0392 3392 NdisWan - ok
      17:58:04.0483 3392 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
      17:58:04.0511 3392 NDProxy - ok
      17:58:04.0612 3392 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
      17:58:04.0641 3392 NetBIOS - ok
      17:58:04.0740 3392 netbt (7c5fee5b1c5728507cd96fb4a13e7a02) C:\Windows\system32\DRIVERS\netbt.sys
      17:58:04.0767 3392 netbt - ok
      17:58:04.0999 3392 NETw5v32 (ba420e8ebfcad35581fe8e4c64f71469) C:\Windows\system32\DRIVERS\NETw5v32.sys
      17:58:05.0133 3392 NETw5v32 - ok
      17:58:05.0240 3392 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
      17:58:05.0265 3392 nfrd960 - ok
      17:58:05.0352 3392 Npfs (ecb5003f484f9ed6c608d6d6c7886cbb) C:\Windows\system32\drivers\Npfs.sys
      17:58:05.0380 3392 Npfs - ok
      17:58:05.0490 3392 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
      17:58:05.0495 3392 nsiproxy - ok
      17:58:05.0621 3392 Ntfs (b4effe29eb4f15538fd8a9681108492d) C:\Windows\system32\drivers\Ntfs.sys
      17:58:05.0676 3392 Ntfs - ok
      17:58:05.0778 3392 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
      17:58:05.0803 3392 ntrigdigi - ok
      17:58:05.0891 3392 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
      17:58:05.0911 3392 Null - ok
      17:58:06.0248 3392 nvlddmkm (00d9589b379710782e7b341433190fc9) C:\Windows\system32\DRIVERS\nvlddmkm.sys
      17:58:06.0601 3392 nvlddmkm - ok
      17:58:06.0699 3392 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
      17:58:06.0710 3392 nvraid - ok
      17:58:06.0814 3392 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
      17:58:06.0841 3392 nvstor - ok
      17:58:06.0959 3392 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
      17:58:06.0971 3392 nv_agp - ok
      17:58:07.0061 3392 NwlnkFlt - ok
      17:58:07.0077 3392 NwlnkFwd - ok
      17:58:07.0225 3392 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys
      17:58:07.0228 3392 ohci1394 - ok
      17:58:07.0410 3392 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
      17:58:07.0438 3392 Parport - ok
      17:58:07.0519 3392 partmgr (3b38467e7c3daed009dfe359e17f139f) C:\Windows\system32\drivers\partmgr.sys
      17:58:07.0547 3392 partmgr - ok
      17:58:07.0640 3392 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
      17:58:07.0665 3392 Parvdm - ok
      17:58:07.0769 3392 pci (01b94418deb235dff777cc80076354b4) C:\Windows\system32\drivers\pci.sys
      17:58:07.0806 3392 pci - ok
      17:58:07.0909 3392 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
      17:58:07.0932 3392 pciide - ok
      17:58:08.0035 3392 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
      17:58:08.0060 3392 pcmcia - ok
      17:58:08.0249 3392 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
      17:58:08.0316 3392 PEAUTH - ok
      17:58:08.0482 3392 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
      17:58:08.0512 3392 PptpMiniport - ok
      17:58:08.0618 3392 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
      17:58:08.0644 3392 Processor - ok
      17:58:08.0759 3392 PSched (bfef604508a0ed1eae2a73e872555ffb) C:\Windows\system32\DRIVERS\pacer.sys
      17:58:08.0761 3392 PSched - ok
      17:58:08.0867 3392 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\Windows\system32\Drivers\PxHelp20.sys
      17:58:08.0896 3392 PxHelp20 - ok
      17:58:09.0050 3392 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
      17:58:09.0106 3392 ql2300 - ok
      17:58:09.0240 3392 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
      17:58:09.0268 3392 ql40xx - ok
      17:58:09.0377 3392 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
      17:58:09.0379 3392 QWAVEdrv - ok
      17:58:09.0478 3392 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
      17:58:09.0495 3392 RasAcd - ok
      17:58:09.0600 3392 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
      17:58:09.0609 3392 Rasl2tp - ok
      17:58:09.0710 3392 RasPppoe (3e9d9b048107b40d87b97df2e48e0744) C:\Windows\system32\DRIVERS\raspppoe.sys
      17:58:09.0737 3392 RasPppoe - ok
      17:58:09.0828 3392 RasSstp (a7d141684e9500ac928a772ed8e6b671) C:\Windows\system32\DRIVERS\rassstp.sys
      17:58:09.0855 3392 RasSstp - ok
      17:58:09.0962 3392 rdbss (6e1c5d0457622f9ee35f683110e93d14) C:\Windows\system32\DRIVERS\rdbss.sys
      17:58:09.0998 3392 rdbss - ok
      17:58:10.0085 3392 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
      17:58:10.0105 3392 RDPCDD - ok
      17:58:10.0236 3392 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
      17:58:10.0267 3392 rdpdr - ok
      17:58:10.0364 3392 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
      17:58:10.0383 3392 RDPENCDD - ok
      17:58:10.0494 3392 RDPWD (e1c18f4097a5abcec941dc4b2f99db7e) C:\Windows\system32\drivers\RDPWD.sys
      17:58:10.0519 3392 RDPWD - ok
      17:58:10.0620 3392 regi (001b4278407f4303efc902a2b16f2453) C:\Windows\system32\drivers\regi.sys
      17:58:10.0640 3392 regi - ok
      17:58:10.0772 3392 RFCOMM (23f486726da7a9b2f3ec7326421a9c36) C:\Windows\system32\DRIVERS\rfcomm.sys
      17:58:10.0805 3392 RFCOMM - ok
      17:58:10.0897 3392 rimsptsk (f7d9ecf41ebd3cf6c65944368150f66b) C:\Windows\system32\DRIVERS\rimsptsk.sys
      17:58:10.0898 3392 rimsptsk - ok
      17:58:10.0922 3392 risdptsk (1be6c42767a7c67ba31ae32b293b37a3) C:\Windows\system32\DRIVERS\risdptsk.sys
      17:58:10.0924 3392 risdptsk - ok
      17:58:11.0029 3392 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
      17:58:11.0050 3392 rspndr - ok
      17:58:11.0178 3392 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
      17:58:11.0206 3392 sbp2port - ok
      17:58:11.0333 3392 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
      17:58:11.0355 3392 sdbus - ok
      17:58:11.0453 3392 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
      17:58:11.0479 3392 secdrv - ok
      17:58:11.0592 3392 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
      17:58:11.0610 3392 Serenum - ok
      17:58:11.0709 3392 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
      17:58:11.0736 3392 Serial - ok
      17:58:11.0830 3392 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
      17:58:11.0836 3392 sermouse - ok
      17:58:11.0958 3392 SFEP (8b7c1768d2cde2e02e09a66563ddfd16) C:\Windows\system32\DRIVERS\SFEP.sys
      17:58:11.0963 3392 SFEP - ok
      17:58:11.0999 3392 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
      17:58:12.0004 3392 sffdisk - ok
      17:58:12.0111 3392 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
      17:58:12.0116 3392 sffp_mmc - ok
      17:58:12.0234 3392 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
      17:58:12.0240 3392 sffp_sd - ok
      17:58:12.0292 3392 sfloppy (c33bfbd6e9e41fcd9ffef9729e9faed6) C:\Windows\system32\DRIVERS\sfloppy.sys
      17:58:12.0318 3392 sfloppy - ok
      17:58:12.0461 3392 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
      17:58:12.0480 3392 sisagp - ok
      17:58:12.0572 3392 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
      17:58:12.0595 3392 SiSRaid2 - ok
      17:58:12.0697 3392 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
      17:58:12.0721 3392 SiSRaid4 - ok
      17:58:12.0834 3392 Smb (031e6bcd53c9b2b9ace111eafec347b6) C:\Windows\system32\DRIVERS\smb.sys
      17:58:12.0844 3392 Smb - ok
      17:58:12.0982 3392 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
      17:58:13.0009 3392 spldr - ok
      17:58:13.0122 3392 srv (2252aef839b1093d16761189f45af885) C:\Windows\system32\DRIVERS\srv.sys
      17:58:13.0167 3392 srv - ok
      17:58:13.0265 3392 srv2 (b7ff59408034119476b00a81bb53d5d1) C:\Windows\system32\DRIVERS\srv2.sys
      17:58:13.0288 3392 srv2 - ok
      17:58:13.0392 3392 srvnet (2accc9b12af02030f531e6cca6f8b76e) C:\Windows\system32\DRIVERS\srvnet.sys
      17:58:13.0418 3392 srvnet - ok
      17:58:13.0519 3392 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys
      17:58:13.0539 3392 ssmdrv - ok
      17:58:13.0654 3392 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
      17:58:13.0661 3392 swenum - ok
      17:58:13.0769 3392 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
      17:58:13.0787 3392 Symc8xx - ok
      17:58:13.0892 3392 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
      17:58:13.0899 3392 Sym_hi - ok
      17:58:14.0002 3392 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
      17:58:14.0030 3392 Sym_u3 - ok
      17:58:14.0169 3392 SynTP (5f298993ae2910df72ccec1480b7c3d0) C:\Windows\system32\DRIVERS\SynTP.sys
      17:58:14.0184 3392 SynTP - ok
      17:58:14.0316 3392 Tcpip (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\drivers\tcpip.sys
      17:58:14.0366 3392 Tcpip - ok
      17:58:14.0482 3392 Tcpip6 (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\DRIVERS\tcpip.sys
      17:58:14.0491 3392 Tcpip6 - ok
      17:58:14.0583 3392 tcpipreg (d4a2e4a4b011f3a883af77315a5ae76b) C:\Windows\system32\drivers\tcpipreg.sys
      17:58:14.0610 3392 tcpipreg - ok
      17:58:14.0714 3392 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
      17:58:14.0720 3392 TDPIPE - ok
      17:58:14.0813 3392 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
      17:58:14.0835 3392 TDTCP - ok
      17:58:14.0932 3392 tdx (d09276b1fab033ce1d40dcbdf303d10f) C:\Windows\system32\DRIVERS\tdx.sys
      17:58:14.0941 3392 tdx - ok
      17:58:15.0029 3392 TermDD (a048056f5e1a96a9bf3071b91741a5aa) C:\Windows\system32\DRIVERS\termdd.sys
      17:58:15.0039 3392 TermDD - ok
      17:58:15.0207 3392 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
      17:58:15.0209 3392 TrueSight - ok
      17:58:15.0320 3392 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
      17:58:15.0345 3392 tssecsrv - ok
      17:58:15.0458 3392 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
      17:58:15.0481 3392 tunmp - ok
      17:58:15.0574 3392 tunnel (6042505ff6fa9ac1ef7684d0e03b6940) C:\Windows\system32\DRIVERS\tunnel.sys
      17:58:15.0594 3392 tunnel - ok
      17:58:15.0692 3392 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
      17:58:15.0721 3392 uagp35 - ok
      17:58:15.0841 3392 udfs (8b5088058fa1d1cd897a2113ccff6c58) C:\Windows\system32\DRIVERS\udfs.sys
      17:58:15.0871 3392 udfs - ok
      17:58:15.0980 3392 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
      17:58:16.0010 3392 uliagpkx - ok
      17:58:16.0114 3392 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
      17:58:16.0129 3392 uliahci - ok
      17:58:16.0229 3392 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
      17:58:16.0257 3392 UlSata - ok
      17:58:16.0355 3392 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
      17:58:16.0387 3392 ulsata2 - ok
      17:58:16.0490 3392 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
      17:58:16.0512 3392 umbus - ok
      17:58:16.0633 3392 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
      17:58:16.0661 3392 USBAAPL - ok
      17:58:16.0769 3392 usbccgp (a7cd5b4adea26765cab06bdab7b07b13) C:\Windows\system32\DRIVERS\usbccgp.sys
      17:58:16.0792 3392 usbccgp - ok
      17:58:16.0889 3392 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
      17:58:16.0917 3392 usbcir - ok
      17:58:17.0024 3392 usbehci (686d4188ae36254c3008b71fedacadf3) C:\Windows\system32\DRIVERS\usbehci.sys
      17:58:17.0055 3392 usbehci - ok
      17:58:17.0172 3392 usbhub (4e42f665a658f08d153f7fffe7c83806) C:\Windows\system32\DRIVERS\usbhub.sys
      17:58:17.0187 3392 usbhub - ok
      17:58:17.0295 3392 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
      17:58:17.0319 3392 usbohci - ok
      17:58:17.0420 3392 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
      17:58:17.0441 3392 usbprint - ok
      17:58:17.0548 3392 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
      17:58:17.0574 3392 usbscan - ok
      17:58:17.0678 3392 USBSTOR (87ba6b83c5d19b69160968d07d6e2982) C:\Windows\system32\DRIVERS\USBSTOR.SYS
      17:58:17.0681 3392 USBSTOR - ok
      17:58:17.0778 3392 usbuhci (40f95a3d6d50d82f947f1d167c2ec39d) C:\Windows\system32\DRIVERS\usbuhci.sys
      17:58:17.0798 3392 usbuhci - ok
      17:58:17.0919 3392 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
      17:58:17.0943 3392 usbvideo - ok
      17:58:18.0084 3392 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
      17:58:18.0102 3392 vga - ok
      17:58:18.0134 3392 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
      17:58:18.0153 3392 VgaSave - ok
      17:58:18.0254 3392 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
      17:58:18.0285 3392 viaagp - ok
      17:58:18.0389 3392 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
      17:58:18.0425 3392 ViaC7 - ok
      17:58:18.0527 3392 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
      17:58:18.0535 3392 viaide - ok
      17:58:18.0623 3392 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
      17:58:18.0645 3392 volmgr - ok
      17:58:18.0750 3392 volmgrx (98f5ffe6316bd74e9e2c97206c190196) C:\Windows\system32\drivers\volmgrx.sys
      17:58:18.0787 3392 volmgrx - ok
      17:58:18.0893 3392 volsnap (d8b4a53dd2769f226b3eb374374987c9) C:\Windows\system32\drivers\volsnap.sys
      17:58:18.0900 3392 volsnap - ok
      17:58:19.0011 3392 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
      17:58:19.0044 3392 vsmraid - ok
      17:58:19.0221 3392 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
      17:58:19.0246 3392 WacomPen - ok
      17:58:19.0342 3392 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
      17:58:19.0369 3392 Wanarp - ok
      17:58:19.0381 3392 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
      17:58:19.0383 3392 Wanarpv6 - ok
      17:58:19.0491 3392 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
      17:58:19.0499 3392 Wd - ok
      17:58:19.0620 3392 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
      17:58:19.0645 3392 Wdf01000 - ok
      17:58:19.0764 3392 WimFltr (090a2b8f055343815556a01f725f6c35) C:\Windows\system32\DRIVERS\wimfltr.sys
      17:58:19.0792 3392 WimFltr - ok
      17:58:19.0912 3392 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
      17:58:19.0936 3392 WmiAcpi - ok
      17:58:20.0087 3392 WpdUsb (0cec23084b51b8288099eb710224e955) C:\Windows\system32\DRIVERS\wpdusb.sys
      17:58:20.0094 3392 WpdUsb - ok
      17:58:20.0220 3392 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
      17:58:20.0238 3392 ws2ifsl - ok
      17:58:20.0356 3392 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
      17:58:20.0360 3392 WUDFRd - ok
      17:58:20.0451 3392 XAudio (dab33cfa9dd24251aaa389ff36b64d4b) C:\Windows\system32\DRIVERS\xaudio.sys
      17:58:20.0456 3392 XAudio - ok
      17:58:20.0570 3392 yukonwlh (3e1c915c6291ab5d1cfca680e1bd6bad) C:\Windows\system32\DRIVERS\yk60x86.sys
      17:58:20.0578 3392 yukonwlh - ok
      17:58:20.0618 3392 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
      17:58:20.0644 3392 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
      17:58:20.0644 3392 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
      17:58:20.0680 3392 Boot (0x1200) (9975497c3c67292d561d0ecdf91fcdd9) \Device\Harddisk0\DR0\Partition0
      17:58:20.0681 3392 \Device\Harddisk0\DR0\Partition0 - ok
      17:58:20.0682 3392 ============================================================
      17:58:20.0682 3392 Scan finished
      17:58:20.0682 3392 ============================================================
      17:58:20.0702 7756 Detected object count: 1
      17:58:20.0702 7756 Actual detected object count: 1
      17:58:48.0244 7756 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - will be cured on reboot
      17:58:48.0245 7756 \Device\Harddisk0\DR0 - ok
      17:58:48.0245 7756 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Cure
      17:59:54.0592 1464 Deinitialize success
      0
  2. crackman2 Messages postés 1547 Statut Membre 201
     
    cela veut dire :
    Windows décalée écriture a était échoué
    est ce que tu peut accéder a ton pc ?
    0