Security sphere 2012????

gourbiz Messages postés 20 Statut Membre -  
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonsoir,

J'ai des fenêtre security sphere qui s'ouvre de manière intempestive sur le pc d'une amie. Est un virus? comment faire?

Merci pour votre aide
A voir également:

7 réponses

Réponse 1 / 7
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
Salut,

Télécharge RogueKiller : https://www.luanagames.com/index.fr.html
Lances en option 2 (Suppression).
Poste le rapport ici.

Si RogueKiller est bloqué - tente de le renommer en iexplore ou winlogon
Si tjrs pas - affiche les extensions de fichiers : https://www.commentcamarche.net/informatique/windows/185-afficher-les-extensions-et-les-fichiers-caches-sous-windows/
Renomme RogueKiller.exe en RogueKiller.com
1
Réponse 2 / 7
gourbiz Messages postés 20 Statut Membre
 
RogueKiller V6.1.10 [18/11/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
Demarrage : Mode sans echec avec prise en charge reseau
Utilisateur: Dim et Nam [Droits d'admin]
Mode: Suppression -- Date : 27/11/2011 22:59:39

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 3 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : mB33011DePaK33011 (C:\ProgramData\mB33011DePaK33011\mB33011DePaK33011.exe) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤


Termine : << RKreport[1].txt >>
RKreport[1].txt
0
Réponse 3 / 7
gourbiz Messages postés 20 Statut Membre
 
merci pour le coup de main!!
0
Réponse 4 / 7
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi.
Poste le rapport ici.

S'il détecte des choses règles bien comme c'est expliqué sur la page

ETAPE 2 :

Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
!!! Malwarebyte doit être à jour avant de faire le scan !!!
Supprime bien ce qui est détecté : bouton supprimer sélection.

ETAPE 3 :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Lance OTL
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
consrv.dll
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
* Clique sur le bouton Analyse.
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
gourbiz Messages postés 20 Statut Membre
 
22:25:29.0957 0828 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44
22:25:30.0082 0828 ============================================================
22:25:30.0082 0828 Current date / time: 2011/11/27 22:25:30.0082
22:25:30.0082 0828 SystemInfo:
22:25:30.0082 0828
22:25:30.0082 0828 OS Version: 6.1.7600 ServicePack: 0.0
22:25:30.0082 0828 Product type: Workstation
22:25:30.0082 0828 ComputerName: ORDINATEUR
22:25:30.0082 0828 UserName: Dim et Nam
22:25:30.0082 0828 Windows directory: C:\Windows
22:25:30.0082 0828 System windows directory: C:\Windows
22:25:30.0082 0828 Running under WOW64
22:25:30.0082 0828 Processor architecture: Intel x64
22:25:30.0082 0828 Number of processors: 2
22:25:30.0082 0828 Page size: 0x1000
22:25:30.0082 0828 Boot type: Safe boot with network
22:25:30.0082 0828 ============================================================
22:25:31.0595 0828 Initialize success
22:25:42.0001 1208 ============================================================
22:25:42.0001 1208 Scan started
22:25:42.0001 1208 Mode: Manual;
22:25:42.0001 1208 ============================================================
22:25:43.0046 1208 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
22:25:43.0046 1208 1394ohci - ok
22:25:43.0108 1208 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
22:25:43.0108 1208 ACPI - ok
22:25:43.0139 1208 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
22:25:43.0139 1208 AcpiPmi - ok
22:25:43.0311 1208 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:25:43.0327 1208 adp94xx - ok
22:25:43.0420 1208 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:25:43.0420 1208 adpahci - ok
22:25:43.0483 1208 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:25:43.0483 1208 adpu320 - ok
22:25:43.0623 1208 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
22:25:43.0623 1208 AFD - ok
22:25:43.0670 1208 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
22:25:43.0670 1208 agp440 - ok
22:25:43.0748 1208 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
22:25:43.0748 1208 aliide - ok
22:25:43.0779 1208 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
22:25:43.0779 1208 amdide - ok
22:25:43.0810 1208 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:25:43.0810 1208 AmdK8 - ok
22:25:43.0982 1208 amdkmdag (83418f6ee5a81dddd8e248fcbfc99af6) C:\Windows\system32\DRIVERS\atipmdag.sys
22:25:44.0107 1208 amdkmdag - ok
22:25:44.0231 1208 amdkmdap (7e58b5e1deaa70bd46997068df06b4e3) C:\Windows\system32\DRIVERS\atikmpag.sys
22:25:44.0231 1208 amdkmdap - ok
22:25:44.0387 1208 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:25:44.0387 1208 AmdPPM - ok
22:25:44.0528 1208 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
22:25:44.0528 1208 amdsata - ok
22:25:44.0590 1208 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:25:44.0590 1208 amdsbs - ok
22:25:44.0621 1208 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
22:25:44.0621 1208 amdxata - ok
22:25:44.0731 1208 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
22:25:44.0731 1208 AppID - ok
22:25:44.0809 1208 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:25:44.0809 1208 arc - ok
22:25:44.0902 1208 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:25:44.0918 1208 arcsas - ok
22:25:44.0996 1208 aswFsBlk (f810e3ea3d1f3c3ba26f2f4719bdca4f) C:\Windows\system32\drivers\aswFsBlk.sys
22:25:44.0996 1208 aswFsBlk - ok
22:25:45.0074 1208 aswMonFlt (3687fd9cedf56d3b9f18923f4e14f3f9) C:\Windows\system32\drivers\aswMonFlt.sys
22:25:45.0074 1208 aswMonFlt - ok
22:25:45.0105 1208 aswRdr (e99e48596b35e5d5240104bcd61b3471) C:\Windows\system32\drivers\aswRdr.sys
22:25:45.0105 1208 aswRdr - ok
22:25:45.0277 1208 aswSnx (84ad8fb3fd2efa52d8599a0028bbb6fe) C:\Windows\system32\drivers\aswSnx.sys
22:25:45.0292 1208 aswSnx - ok
22:25:45.0308 1208 aswSP (8cba6cc5dca9e3829f1792bf98f06901) C:\Windows\system32\drivers\aswSP.sys
22:25:45.0308 1208 aswSP - ok
22:25:45.0355 1208 aswTdi (184248f2ded7b1641c7f3b30381baa2a) C:\Windows\system32\drivers\aswTdi.sys
22:25:45.0355 1208 aswTdi - ok
22:25:45.0448 1208 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:25:45.0448 1208 AsyncMac - ok
22:25:45.0479 1208 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
22:25:45.0479 1208 atapi - ok
22:25:45.0573 1208 athr (70260c7c98cc0101316f5b2650c3bb44) C:\Windows\system32\DRIVERS\athrx.sys
22:25:45.0635 1208 athr - ok
22:25:45.0760 1208 AtiPcie (c07a040d6b5a42dd41ee386cf90974c8) C:\Windows\system32\DRIVERS\AtiPcie.sys
22:25:45.0760 1208 AtiPcie - ok
22:25:45.0947 1208 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:25:45.0947 1208 b06bdrv - ok
22:25:46.0041 1208 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:25:46.0041 1208 b57nd60a - ok
22:25:46.0103 1208 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:25:46.0103 1208 Beep - ok
22:25:46.0275 1208 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:25:46.0275 1208 blbdrive - ok
22:25:46.0384 1208 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
22:25:46.0384 1208 bowser - ok
22:25:46.0478 1208 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:25:46.0478 1208 BrFiltLo - ok
22:25:46.0493 1208 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:25:46.0493 1208 BrFiltUp - ok
22:25:46.0556 1208 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:25:46.0571 1208 Brserid - ok
22:25:46.0603 1208 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:25:46.0603 1208 BrSerWdm - ok
22:25:46.0634 1208 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:25:46.0634 1208 BrUsbMdm - ok
22:25:46.0649 1208 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:25:46.0649 1208 BrUsbSer - ok
22:25:46.0681 1208 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:25:46.0681 1208 BTHMODEM - ok
22:25:46.0712 1208 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:25:46.0712 1208 cdfs - ok
22:25:46.0852 1208 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
22:25:46.0852 1208 cdrom - ok
22:25:46.0977 1208 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:25:46.0977 1208 circlass - ok
22:25:47.0039 1208 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:25:47.0055 1208 CLFS - ok
22:25:47.0242 1208 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:25:47.0242 1208 CmBatt - ok
22:25:47.0305 1208 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
22:25:47.0305 1208 cmdide - ok
22:25:47.0414 1208 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
22:25:47.0429 1208 CNG - ok
22:25:47.0570 1208 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:25:47.0570 1208 Compbatt - ok
22:25:47.0679 1208 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
22:25:47.0679 1208 CompositeBus - ok
22:25:47.0726 1208 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:25:47.0726 1208 crcdisk - ok
22:25:47.0913 1208 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
22:25:47.0913 1208 DfsC - ok
22:25:47.0960 1208 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:25:47.0960 1208 discache - ok
22:25:48.0069 1208 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:25:48.0069 1208 Disk - ok
22:25:48.0178 1208 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:25:48.0178 1208 drmkaud - ok
22:25:48.0334 1208 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
22:25:48.0334 1208 DXGKrnl - ok
22:25:48.0459 1208 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:25:48.0537 1208 ebdrv - ok
22:25:48.0740 1208 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:25:48.0740 1208 elxstor - ok
22:25:48.0787 1208 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
22:25:48.0787 1208 ErrDev - ok
22:25:48.0911 1208 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:25:48.0911 1208 exfat - ok
22:25:48.0943 1208 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:25:48.0943 1208 fastfat - ok
22:25:49.0099 1208 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:25:49.0099 1208 fdc - ok
22:25:49.0145 1208 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:25:49.0145 1208 FileInfo - ok
22:25:49.0177 1208 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:25:49.0177 1208 Filetrace - ok
22:25:49.0286 1208 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:25:49.0286 1208 flpydisk - ok
22:25:49.0317 1208 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
22:25:49.0317 1208 FltMgr - ok
22:25:49.0379 1208 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:25:49.0379 1208 FsDepends - ok
22:25:49.0395 1208 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
22:25:49.0411 1208 Fs_Rec - ok
22:25:49.0520 1208 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:25:49.0520 1208 fvevol - ok
22:25:49.0613 1208 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:25:49.0613 1208 gagp30kx - ok
22:25:49.0847 1208 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:25:49.0847 1208 hcw85cir - ok
22:25:49.0910 1208 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
22:25:49.0910 1208 HdAudAddService - ok
22:25:49.0972 1208 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
22:25:49.0972 1208 HDAudBus - ok
22:25:49.0988 1208 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:25:49.0988 1208 HidBatt - ok
22:25:50.0097 1208 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:25:50.0097 1208 HidBth - ok
22:25:50.0113 1208 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:25:50.0128 1208 HidIr - ok
22:25:50.0253 1208 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
22:25:50.0253 1208 HidUsb - ok
22:25:50.0347 1208 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
22:25:50.0362 1208 HpSAMD - ok
22:25:50.0440 1208 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
22:25:50.0456 1208 HTTP - ok
22:25:50.0471 1208 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
22:25:50.0471 1208 hwpolicy - ok
22:25:50.0565 1208 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
22:25:50.0565 1208 i8042prt - ok
22:25:50.0643 1208 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
22:25:50.0643 1208 iaStorV - ok
22:25:50.0690 1208 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:25:50.0690 1208 iirsp - ok
22:25:50.0893 1208 IntcAzAudAddService (feadc18677a85a123e95a9b976101120) C:\Windows\system32\drivers\RTKVHD64.sys
22:25:50.0939 1208 IntcAzAudAddService - ok
22:25:51.0064 1208 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
22:25:51.0064 1208 intelide - ok
22:25:51.0111 1208 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:25:51.0111 1208 intelppm - ok
22:25:51.0142 1208 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:25:51.0142 1208 IpFilterDriver - ok
22:25:51.0173 1208 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
22:25:51.0173 1208 IPMIDRV - ok
22:25:51.0251 1208 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:25:51.0251 1208 IPNAT - ok
22:25:51.0298 1208 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:25:51.0298 1208 IRENUM - ok
22:25:51.0329 1208 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
22:25:51.0329 1208 isapnp - ok
22:25:51.0361 1208 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
22:25:51.0361 1208 iScsiPrt - ok
22:25:51.0548 1208 k57nd60a (c9b4ecc187581e5bf3f76648884b7829) C:\Windows\system32\DRIVERS\k57nd60a.sys
22:25:51.0563 1208 k57nd60a - ok
22:25:51.0641 1208 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:25:51.0641 1208 kbdclass - ok
22:25:51.0688 1208 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
22:25:51.0688 1208 kbdhid - ok
22:25:51.0719 1208 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
22:25:51.0719 1208 KSecDD - ok
22:25:51.0782 1208 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
22:25:51.0782 1208 KSecPkg - ok
22:25:51.0829 1208 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:25:51.0829 1208 ksthunk - ok
22:25:51.0953 1208 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:25:51.0969 1208 lltdio - ok
22:25:52.0016 1208 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:25:52.0031 1208 LSI_FC - ok
22:25:52.0172 1208 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:25:52.0172 1208 LSI_SAS - ok
22:25:52.0203 1208 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:25:52.0219 1208 LSI_SAS2 - ok
22:25:52.0250 1208 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:25:52.0250 1208 LSI_SCSI - ok
22:25:52.0281 1208 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:25:52.0281 1208 luafv - ok
22:25:52.0312 1208 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:25:52.0312 1208 megasas - ok
22:25:52.0421 1208 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:25:52.0437 1208 MegaSR - ok
22:25:52.0499 1208 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:25:52.0499 1208 Modem - ok
22:25:52.0640 1208 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:25:52.0640 1208 monitor - ok
22:25:52.0718 1208 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:25:52.0718 1208 mouclass - ok
22:25:52.0780 1208 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:25:52.0780 1208 mouhid - ok
22:25:52.0858 1208 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
22:25:52.0858 1208 mountmgr - ok
22:25:52.0905 1208 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
22:25:52.0905 1208 mpio - ok
22:25:52.0936 1208 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:25:52.0936 1208 mpsdrv - ok
22:25:53.0045 1208 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
22:25:53.0045 1208 MRxDAV - ok
22:25:53.0108 1208 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:25:53.0123 1208 mrxsmb - ok
22:25:53.0201 1208 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:25:53.0201 1208 mrxsmb10 - ok
22:25:53.0264 1208 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:25:53.0264 1208 mrxsmb20 - ok
22:25:53.0311 1208 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
22:25:53.0311 1208 msahci - ok
22:25:53.0342 1208 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
22:25:53.0342 1208 msdsm - ok
22:25:53.0404 1208 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:25:53.0404 1208 Msfs - ok
22:25:53.0451 1208 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:25:53.0451 1208 mshidkmdf - ok
22:25:53.0482 1208 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
22:25:53.0482 1208 msisadrv - ok
22:25:53.0638 1208 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:25:53.0638 1208 MSKSSRV - ok
22:25:53.0716 1208 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:25:53.0716 1208 MSPCLOCK - ok
22:25:53.0732 1208 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:25:53.0732 1208 MSPQM - ok
22:25:53.0779 1208 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
22:25:53.0779 1208 MsRPC - ok
22:25:53.0841 1208 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
22:25:53.0841 1208 mssmbios - ok
22:25:53.0935 1208 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:25:53.0935 1208 MSTEE - ok
22:25:53.0966 1208 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:25:53.0966 1208 MTConfig - ok
22:25:53.0997 1208 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:25:53.0997 1208 Mup - ok
22:25:54.0153 1208 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:25:54.0153 1208 NativeWifiP - ok
22:25:54.0247 1208 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
22:25:54.0247 1208 NDIS - ok
22:25:54.0403 1208 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:25:54.0403 1208 NdisCap - ok
22:25:54.0449 1208 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:25:54.0449 1208 NdisTapi - ok
22:25:54.0527 1208 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
22:25:54.0527 1208 Ndisuio - ok
22:25:54.0543 1208 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
22:25:54.0543 1208 NdisWan - ok
22:25:54.0637 1208 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
22:25:54.0637 1208 NDProxy - ok
22:25:54.0699 1208 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:25:54.0699 1208 NetBIOS - ok
22:25:54.0746 1208 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
22:25:54.0746 1208 NetBT - ok
22:25:54.0902 1208 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:25:54.0917 1208 nfrd960 - ok
22:25:54.0964 1208 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:25:54.0964 1208 Npfs - ok
22:25:54.0980 1208 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:25:54.0995 1208 nsiproxy - ok
22:25:55.0120 1208 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
22:25:55.0167 1208 Ntfs - ok
22:25:55.0307 1208 NTIDrvr (64ddd0dee976302f4bd93e5efcc2f013) C:\Windows\system32\drivers\NTIDrvr.sys
22:25:55.0307 1208 NTIDrvr - ok
22:25:55.0354 1208 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:25:55.0354 1208 Null - ok
22:25:55.0417 1208 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
22:25:55.0417 1208 nvraid - ok
22:25:55.0510 1208 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
22:25:55.0510 1208 nvstor - ok
22:25:55.0557 1208 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
22:25:55.0557 1208 nv_agp - ok
22:25:55.0588 1208 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
22:25:55.0588 1208 ohci1394 - ok
22:25:55.0619 1208 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:25:55.0635 1208 Parport - ok
22:25:55.0651 1208 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
22:25:55.0651 1208 partmgr - ok
22:25:55.0666 1208 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
22:25:55.0682 1208 pci - ok
22:25:55.0713 1208 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
22:25:55.0713 1208 pciide - ok
22:25:55.0744 1208 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:25:55.0744 1208 pcmcia - ok
22:25:55.0775 1208 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:25:55.0775 1208 pcw - ok
22:25:55.0807 1208 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:25:55.0822 1208 PEAUTH - ok
22:25:55.0978 1208 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
22:25:55.0978 1208 PptpMiniport - ok
22:25:56.0009 1208 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:25:56.0025 1208 Processor - ok
22:25:56.0134 1208 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
22:25:56.0134 1208 Psched - ok
22:25:56.0165 1208 PxHlpa64 (fbf4db6d53585437e41a113300002a2b) C:\Windows\system32\Drivers\PxHlpa64.sys
22:25:56.0165 1208 PxHlpa64 - ok
22:25:56.0321 1208 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:25:56.0353 1208 ql2300 - ok
22:25:56.0477 1208 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:25:56.0477 1208 ql40xx - ok
22:25:56.0524 1208 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:25:56.0524 1208 QWAVEdrv - ok
22:25:56.0555 1208 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:25:56.0555 1208 RasAcd - ok
22:25:56.0696 1208 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:25:56.0696 1208 RasAgileVpn - ok
22:25:56.0727 1208 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:25:56.0743 1208 Rasl2tp - ok
22:25:56.0883 1208 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:25:56.0883 1208 RasPppoe - ok
22:25:56.0899 1208 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:25:56.0899 1208 RasSstp - ok
22:25:56.0930 1208 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
22:25:56.0930 1208 rdbss - ok
22:25:56.0961 1208 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:25:56.0961 1208 rdpbus - ok
22:25:56.0977 1208 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:25:56.0977 1208 RDPCDD - ok
22:25:57.0039 1208 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:25:57.0039 1208 RDPENCDD - ok
22:25:57.0055 1208 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:25:57.0055 1208 RDPREFMP - ok
22:25:57.0101 1208 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
22:25:57.0101 1208 RDPWD - ok
22:25:57.0148 1208 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
22:25:57.0148 1208 rdyboost - ok
22:25:57.0195 1208 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:25:57.0195 1208 rspndr - ok
22:25:57.0289 1208 RSUSBSTOR (3ceee53bbf8ba284ff44585cec0162fe) C:\Windows\system32\Drivers\RtsUStor.sys
22:25:57.0289 1208 RSUSBSTOR - ok
22:25:57.0335 1208 RTHDMIAzAudService (4e821c740a675f6d040be41d59a62b1d) C:\Windows\system32\drivers\RtHDMIVX.sys
22:25:57.0335 1208 RTHDMIAzAudService - ok
22:25:57.0382 1208 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
22:25:57.0382 1208 sbp2port - ok
22:25:57.0398 1208 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
22:25:57.0398 1208 scfilter - ok
22:25:57.0491 1208 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:25:57.0491 1208 secdrv - ok
22:25:57.0538 1208 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:25:57.0538 1208 Serenum - ok
22:25:57.0569 1208 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:25:57.0585 1208 Serial - ok
22:25:57.0725 1208 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:25:57.0725 1208 sermouse - ok
22:25:57.0772 1208 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
22:25:57.0772 1208 sffdisk - ok
22:25:57.0788 1208 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
22:25:57.0788 1208 sffp_mmc - ok
22:25:57.0819 1208 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
22:25:57.0819 1208 sffp_sd - ok
22:25:57.0881 1208 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:25:57.0881 1208 sfloppy - ok
22:25:57.0913 1208 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:25:57.0913 1208 SiSRaid2 - ok
22:25:57.0944 1208 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:25:57.0944 1208 SiSRaid4 - ok
22:25:58.0069 1208 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:25:58.0069 1208 Smb - ok
22:25:58.0131 1208 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:25:58.0131 1208 spldr - ok
22:25:58.0209 1208 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
22:25:58.0225 1208 srv - ok
22:25:58.0318 1208 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
22:25:58.0318 1208 srv2 - ok
22:25:58.0396 1208 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
22:25:58.0412 1208 srvnet - ok
22:25:58.0552 1208 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:25:58.0552 1208 stexstor - ok
22:25:58.0599 1208 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
22:25:58.0599 1208 swenum - ok
22:25:58.0724 1208 SynTP (064a2530a4a7c7cec1be6a1945645be4) C:\Windows\system32\DRIVERS\SynTP.sys
22:25:58.0724 1208 SynTP - ok
22:25:58.0880 1208 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
22:25:58.0927 1208 Tcpip - ok
22:25:59.0114 1208 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
22:25:59.0114 1208 TCPIP6 - ok
22:25:59.0176 1208 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
22:25:59.0176 1208 tcpipreg - ok
22:25:59.0223 1208 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:25:59.0223 1208 TDPIPE - ok
22:25:59.0254 1208 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
22:25:59.0254 1208 TDTCP - ok
22:25:59.0285 1208 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
22:25:59.0285 1208 tdx - ok
22:25:59.0332 1208 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
22:25:59.0332 1208 TermDD - ok
22:25:59.0363 1208 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:25:59.0363 1208 tssecsrv - ok
22:25:59.0473 1208 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
22:25:59.0473 1208 tunnel - ok
22:25:59.0504 1208 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:25:59.0519 1208 uagp35 - ok
22:25:59.0535 1208 UBHelper (2e22c1fd397a5a9ffef55e9d1fc96c00) C:\Windows\system32\drivers\UBHelper.sys
22:25:59.0535 1208 UBHelper - ok
22:25:59.0551 1208 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
22:25:59.0551 1208 udfs - ok
22:25:59.0597 1208 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
22:25:59.0597 1208 uliagpkx - ok
22:25:59.0629 1208 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
22:25:59.0629 1208 umbus - ok
22:25:59.0644 1208 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:25:59.0644 1208 UmPass - ok
22:25:59.0707 1208 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys
22:25:59.0707 1208 usbccgp - ok
22:25:59.0769 1208 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
22:25:59.0769 1208 usbcir - ok
22:25:59.0925 1208 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys
22:25:59.0925 1208 usbehci - ok
22:26:00.0003 1208 usbfilter (2c780746dc44a28fe67004dc58173f05) C:\Windows\system32\DRIVERS\usbfilter.sys
22:26:00.0003 1208 usbfilter - ok
22:26:00.0112 1208 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys
22:26:00.0112 1208 usbhub - ok
22:26:00.0175 1208 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys
22:26:00.0175 1208 usbohci - ok
22:26:00.0237 1208 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:26:00.0237 1208 usbprint - ok
22:26:00.0393 1208 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
22:26:00.0393 1208 usbscan - ok
22:26:00.0440 1208 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:26:00.0440 1208 USBSTOR - ok
22:26:00.0580 1208 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys
22:26:00.0580 1208 usbuhci - ok
22:26:00.0643 1208 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
22:26:00.0643 1208 usbvideo - ok
22:26:00.0689 1208 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
22:26:00.0689 1208 vdrvroot - ok
22:26:00.0721 1208 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:26:00.0721 1208 vga - ok
22:26:00.0799 1208 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:26:00.0799 1208 VgaSave - ok
22:26:00.0830 1208 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
22:26:00.0830 1208 vhdmp - ok
22:26:00.0861 1208 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
22:26:00.0861 1208 viaide - ok
22:26:00.0892 1208 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
22:26:00.0892 1208 volmgr - ok
22:26:00.0923 1208 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
22:26:00.0923 1208 volmgrx - ok
22:26:00.0955 1208 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
22:26:00.0955 1208 volsnap - ok
22:26:00.0986 1208 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:26:01.0001 1208 vsmraid - ok
22:26:01.0017 1208 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
22:26:01.0033 1208 vwifibus - ok
22:26:01.0157 1208 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
22:26:01.0157 1208 vwififlt - ok
22:26:01.0220 1208 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:26:01.0220 1208 WacomPen - ok
22:26:01.0345 1208 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:26:01.0345 1208 WANARP - ok
22:26:01.0345 1208 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
22:26:01.0345 1208 Wanarpv6 - ok
22:26:01.0407 1208 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:26:01.0407 1208 Wd - ok
22:26:01.0454 1208 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:26:01.0454 1208 Wdf01000 - ok
22:26:01.0610 1208 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:26:01.0610 1208 WfpLwf - ok
22:26:01.0657 1208 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:26:01.0657 1208 WIMMount - ok
22:26:01.0859 1208 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
22:26:01.0859 1208 WinUsb - ok
22:26:01.0922 1208 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
22:26:01.0922 1208 WmiAcpi - ok
22:26:01.0953 1208 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:26:01.0953 1208 ws2ifsl - ok
22:26:02.0000 1208 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
22:26:02.0000 1208 WudfPf - ok
22:26:02.0047 1208 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:26:02.0047 1208 WUDFRd - ok
22:26:02.0093 1208 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:26:02.0125 1208 \Device\Harddisk0\DR0 - ok
22:26:02.0125 1208 MBR (0x1B8) (ddae9d649db12f6aff24483f2c298989) \Device\Harddisk1\DR1
22:26:02.0140 1208 \Device\Harddisk1\DR1 - ok
22:26:02.0140 1208 Boot (0x1200) (c934a1e635494e3592b7fdd5c79390bf) \Device\Harddisk0\DR0\Partition0
22:26:02.0140 1208 \Device\Harddisk0\DR0\Partition0 - ok
22:26:02.0156 1208 Boot (0x1200) (f1c023ce9dbb8ae6ad94cc0f72ab05c5) \Device\Harddisk0\DR0\Partition1
22:26:02.0156 1208 \Device\Harddisk0\DR0\Partition1 - ok
22:26:02.0156 1208 Boot (0x1200) (7cb3fdffe186f4f0bac1d5f457fdbbcd) \Device\Harddisk1\DR1\Partition0
22:26:02.0156 1208 \Device\Harddisk1\DR1\Partition0 - ok
22:26:02.0156 1208 ============================================================
22:26:02.0156 1208 Scan finished
22:26:02.0156 1208 ============================================================
22:26:02.0187 1232 Detected object count: 0
22:26:02.0187 1232 Actual detected object count: 0
22:26:12.0670 0624 Deinitialize success
0
Réponse 6 / 7
gourbiz Messages postés 20 Statut Membre
 
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8253

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

27/11/2011 23:55:28
mbam-log-2011-11-27 (23-55-28).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 550961
Temps écoulé: 20 minute(s), 15 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 20

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29} (Adware.HotBar.CP) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\Users\dim et nam\AppData\Local\Temp\0.25542895902086304.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\208F.tmp (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\jar_cache7087710816108608006.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\jar_cache7507566042441395500.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup1005391880.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup1436060392.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup1662602408.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2150618624.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2330458496.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2340924424.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2447145688.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2456270464.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2493475880.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup2839295192.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup3421876752.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup3619393704.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup3810301040.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup3888244728.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup481851176.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\Users\dim et nam\AppData\Local\Temp\setup94146440.exe (Trojan.Inject) -> Quarantined and deleted successfully.
0
Réponse 7 / 7
gourbiz Messages postés 20 Statut Membre
 
OTL en cours... merci
0
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
ok :)
0

Discussions similaires

SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
Walti55 -
Walti55 -

2 réponses
Security boot fail lors du démarrage
Steu -
Thiecoss -

5 réponses
Analyse de l'appli "AI SECURITY"
cl06 -
CCMBot -

1 réponse
Boîte mail piratée ?
mike the llama -
mike the llama -

4 réponses
Security Health Service qui pompe 25% de mon CPU
mimirte -
bazfile -

6 réponses