Comment supprimer XP internet security 2012?

Résolu
fab1003 -  
Bonjour,
j'ai attrapé sur un pc ce virus et je n'arrive pas à le supprimer.
Il me bloque tout..
J'ai fait le tour de quelques méthodes, mais je ne comprend pas tout..
J'ai lancé un pre_scan, mais après que faire??
Si quelqu'un pouvait m'aider, svp..
Merci

53 réponses

Résumé de la discussion

Un ordinateur est bloqué par un virus après un pré-scan, nécessitant une désinfection approfondie pour éliminer les composants malveillants et rétablir rapidement le fonctionnement. Des réponses préconisent l’emploi d’outils de détection et de suppression tels que RogueKiller et TDSSKiller, complétés par Malwarebytes, avec génération de rapports à transmettre et suivi d’un redémarrage pour finaliser le nettoyage. Par ailleurs, la procédure peut viser les périphériques externes infectés (clé USB) et impliquer des outils complémentaires comme USBFix ou des scans en mode administration, afin de nettoyer les supports et éviter de futures infections. En cas de résultats partiels, des analyses complémentaires et des rapports détaillés peuvent guider vers des actions ciblées, sans tirer de conclusion sur l’état définitif du fil.

Bobot (l’IA à votre service)
  1. verni29 Contributeur sécurité
    Bonsoir,

    Télécharge roguekiller de Tigzy sur ton bureau
    https://www.luanagames.com/index.fr.html

    # Double-clique sur l'exécutable
    Si sous Vista/seven, click droit sur le fichier et choisir exécuter en tant qu'administrateur

    # Choisis l'option de recherche en tapant 1 à l'invite.
    # Laisse l'outil travailler.

    Un rapport va s'ouvrir. Enregistre-le et poste le dans ton prochain message.

    Si l'outil ne se lance pas, renomme le en winlogon.exe.

    A+
    1. fab1003 Auteur
      RogueKiller V6.2.0 [12/12/2011] par Tigzy
      mail: tigzyRK<at>gmail<dot>com
      Remontees: https://www.luanagames.com/index.fr.html
      Blog: http://tigzyrk.blogspot.com

      Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version
      Demarrage : Mode normal
      Utilisateur: Famille Venet [Droits d'admin]
      Mode: Recherche -- Date : 20/12/2011 22:50:52

      ¤¤¤ Processus malicieux: 2 ¤¤¤
      [WINDOW : XP Internet Security 2012] gnq.exe -- D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe -> KILLED [TermProc]
      [SUSP PATH] gnq.exe -- D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe -> KILLED [TermProc]

      ¤¤¤ Entrees de registre: 7 ¤¤¤
      [SUSP PATH] HKCU\[...]\Run : bfjwancf ("d:\documents and settings\famille venet\local settings\application data\bfjwancf.exe" bfjwancf) -> FOUND
      [SUSP PATH] HKUS\S-1-5-21-1486768304-2237576235-2102206337-1006[...]\Run : bfjwancf ("d:\documents and settings\famille venet\local settings\application data\bfjwancf.exe" bfjwancf) -> FOUND
      [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
      [FILEASSO] HKCU\[...]Software\Classes\.exe\shell\open\command : ("D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "%1" %*) -> FOUND
      [FILEASSO] HKCR\[...].exe\shell\open\command : ("D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "%1" %*) -> FOUND
      [FILEASSO] HKCR\.exe : (hmO) -> FOUND
      [FILEASSO] HKLM\[...]Software\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command : ("D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe") -> FOUND

      ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

      ¤¤¤ Driver: [LOADED] ¤¤¤
      SSDT[50] : NtCreateSection @ 0x805A041E -> HOOKED (\??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys @ 0xF7A96700)

      ¤¤¤ Infection : Rogue.AntiSpy-AH|ZeroAccess ¤¤¤
      [ZeroAccess] (LOCKED) windir\NtUpdateKBxxxx present!

      ¤¤¤ Fichier HOSTS: ¤¤¤

      ¤¤¤ MBR Verif: ¤¤¤
      --- User ---
      [MBR] ee4f07f50adff631b2d3151b5ef8a3f3
      [BSP] a673e9b32ac32229e79c3e2b4fd57f0f : MBR Code unknown
      Partition table:
      0 - [XXXXXX] FAT32 [HIDDEN!] Offset (sectors): 63 | Size: 8381 Mo
      1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 16370235 | Size: 32201 Mo
      2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 79280775 | Size: 159455 Mo
      User = LL1 ... OK!
      User = LL2 ... OK!

      Termine : << RKreport[1].txt >>
      RKreport[1].txt
    2. niko
      RogueKiller V6.2.4 [12/01/2012] par Tigzy
      mail: tigzyRK<at>gmail<dot>com
      Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
      Blog: http://tigzyrk.blogspot.com

      Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
      Demarrage : Mode normal
      Utilisateur: x [Droits d'admin]
      Mode: Recherche -- Date : 23/01/2012 19:33:31

      ¤¤¤ Processus malicieux: 1 ¤¤¤
      [SUSP PATH] autoupdater.exe -- C:\Users\x\AppData\Roaming\Agence-Exclusive\Agence-Exclusive\autoupdater.exe -> KILLED [TermProc]

      ¤¤¤ Entrees de registre: 4 ¤¤¤
      [SUSP PATH] HKLM\[...]\RunOnce : autoupdater (C:\Users\x\AppData\Roaming\Agence-Exclusive\Agence-Exclusive\autoupdater.exe -runonce) -> FOUND
      [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
      [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
      [FILEASSO] HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command : (C:\Program Files\Mozilla Firefox 3.6 Beta 2\firefox.exe) -> FOUND

      ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

      ¤¤¤ Driver: [LOADED] ¤¤¤

      ¤¤¤ Infection : Rogue.AntiSpy-AH ¤¤¤

      ¤¤¤ Fichier HOSTS: ¤¤¤
      127.0.0.1 localhost
      ::1 localhost

      ¤¤¤ MBR Verif: ¤¤¤

      +++++ PhysicalDrive0: +++++
      --- User ---
      [MBR] 1423aa323df4d344bb9071960ceb30b7
      [BSP] 4dca765259ce27c99ab56ca4007213d3 : Acer tatooed MBR Code
      Partition table:
      0 - [XXXXXX] NTFS [HIDDEN!] Offset (sectors): 2048 | Size: 13958 Mo
      1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 27265024 | Size: 306111 Mo
      User = LL1 ... OK!
      User = LL2 ... OK!

      Termine : << RKreport[1].txt >>
      RKreport[1].txt
  2. verni29 Contributeur sécurité
    fab1003,

    Pas une bonne nouvelle.
    Je note ceci dans le rapport : 

    ¤¤¤ Infection : Rogue.AntiSpy-AH|ZeroAccess ¤¤¤ 
[ZeroAccess] (LOCKED) windir\NtUpdateKBxxxx present!

    Infection ZeroAccess.

    Il reste des choses à faire.

    ---------------------------------------------------------------------

    Tu relances RogueKiller et choisis l'option 2 ( de suppression ).
    Poste le rapport.

    ------------------------------------------------------------------------

    Puis,

    Télécharge TDSSKiller sur ton Bureau.

    # Décompresse le (clic droit sur le fichier et extraire) sur le bureau.
    # dans le dossier crée, déplacer le fichier TDSSKiller.exe pour le mettre sur le Bureau
    # Faire un double clic sur TDSSKiller.exe pour le lancer.
    # Cliquer sur Start scan pour lancer l'analyse,

    # Lors de l'analyse, vérifie que l'action proposée par défaut est la suivante :
    - Pour TDSS.tdl2 : l'option Delete sera cochée.
    - Pour TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure est bien cochée.
    - Pour "Suspicious object" laisse sur "Skip"
    - Attention pour Rootkit.Win32.ZAccess :
    -- Choisir Cure pour les fichiers .sys et Delete pour le fichier .exe
    # Puis cliquer sur le bouton <gras>Continue    .
    # Si l'outil a besoin d'un redémarrage pour finaliser le nettoyage, cliquer sur le bouton Reboot now.

    Envoyer en réponse le rapport de TDSSKiller

    Note : Il se trouve aussi en C:\TDSSKiller.Version_Date_Heure_log.txt

    A+
    Allez jusqu'au bout de la procédure de désinfection.
    1. verni29 Contributeur sécurité
      fab1003,

      Le PC était sacrément infecté.
      Et on n'a pas terminé.

      La cause. Le PC n'est pas à jour ( SP2, ... )
      On verra cela après avoir désinfecté la machine.

      -----------------------------------------------------------

      On poursuit.

      1/ Tu vas sur le site de VirusTotal et tu vas pouvoir analyser un fichier.
      https://www.virustotal.com/gui/

      # Clique sur parcourir et sélectionne le fichier indiqué ci-dessous :

      Chemin : D:\Documents and Settings\Famille Venet\M-1-25-5432-6437-5685\winmgr.exe

      # Tu cliques ensuite sur envoyer le fichier.
      # Copie l'adresse de la page une fois les résultats affichés.

      Indique moi le lien de cette page.

      2/ J'aimerais avoir le rapport de gmer en entier;

      Attention, quand tu lances l'analyse, à désactiver ( temporairement ) l'antivirus , fermer toutes les applis dont les navigateurs.

      Et, lorsque tu ouvres gmer, il fait automatiquement une analyse rapide.
      Une fois les résultats de cette analyse affichés, ne clique pas sur scan pour relancer l'analyse.
      Clique sur save pour enregistrer le rapport.

      Puis poste le rapport.

      A+
      1. fab1003 Auteur
        c'est bon, voici le lien : http://www.virustotal.com/file-scan/reanalysis.html?id=aced0ba09313fd736bd3c1bc78ba65a4ad8e832950a749f4c7acf746a69ddb9e-1324474540
        2. verni29 Contributeur sécurité
          Re,

          OK. La clé est bien infecté. Pas le portable.
          Nettoie la clé . Cela va aussi la vacciner et la protéger contre d'autres possibles infections.

          Relances USBFix et choisis l'option de suppression.
          Poste le rapport.

          A la demande de l'auteur de l'outil.
          Un fichier .zip sera crée à la fin du nettoyage avec l'outil.
          Il est à envoyer à l'auteur de l'outil.
          Tu verras l'adresse à la fin du rapport.

          ----------------------------------------------------------

          Puis passe USBFix sur le PC infecté avec l'option de Recherche.
          Poste le rapport.

          et n'oublie pas la manip avec AswMBR comme je te l'ai indiqué sur le message précédent.
          https://forums.commentcamarche.net/forum/affich-23952310-comment-supprimer-xp-internet-security-2012?page=2#32

          A+
          1. MissGroulx
            https://fr.pcthreat.com/parasitebyid-19241fr.html

            Google!
            1. fab1003 Auteur
              déjà essayé, logiciel par la suite payant.
              et fiabilité??!
            2. MissGroulx
              As-tu pris le temps de lire ?
              il y a deux clé que tu peux utilisé pour ensuite le supprimé !
            3. fab1003 Auteur
              je n'ai pas réussi a le supprimer de cette façon...
            4. benji
              spybot fait l'affaire j'ai vire ce virus grace a ce logiciel
          2. fab1003 Auteur
            RogueKiller V6.2.0 [12/12/2011] par Tigzy
            mail: tigzyRK<at>gmail<dot>com
            Remontees: https://www.luanagames.com/index.fr.html
            Blog: http://tigzyrk.blogspot.com

            Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version
            Demarrage : Mode normal
            Utilisateur: Famille Venet [Droits d'admin]
            Mode: Suppression -- Date : 20/12/2011 23:08:11

            ¤¤¤ Processus malicieux: 2 ¤¤¤
            [SUSP PATH] gnq.exe -- D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe -> KILLED [TermProc]
            [SUSP PATH] gnq.exe -- D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe -> KILLED [TermProc]

            ¤¤¤ Entrees de registre: 6 ¤¤¤
            [SUSP PATH] HKCU\[...]\Run : bfjwancf ("d:\documents and settings\famille venet\local settings\application data\bfjwancf.exe" bfjwancf) -> DELETED
            [PROXY IE] HKCU\[...]\Internet Settings : ProxyServer () -> NOT REMOVED, USE PROXYFIX
            [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
            [FILEASSO] HKCU\[...]Software\Classes\.exe\shell\open\command : ("D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "%1" %*) -> REPLACED ("%1" %*)
            [FILEASSO] HKCR\[...].exe : (ohD) -> REPLACED (exefile)
            [FILEASSO] HKLM\[...]Software\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command : ("D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe") -> REPLACED ("C:\Program Files\internet explorer\iexplore.exe")

            ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

            ¤¤¤ Driver: [LOADED] ¤¤¤
            SSDT[50] : NtCreateSection @ 0x805A041E -> HOOKED (\??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys @ 0xF7A96700)

            ¤¤¤ Infection : Rogue.AntiSpy-AH|ZeroAccess ¤¤¤
            [ZeroAccess] (LOCKED) windir\NtUpdateKBxxxx present!

            ¤¤¤ Fichier HOSTS: ¤¤¤

            ¤¤¤ MBR Verif: ¤¤¤
            --- User ---
            [MBR] ee4f07f50adff631b2d3151b5ef8a3f3
            [BSP] a673e9b32ac32229e79c3e2b4fd57f0f : MBR Code unknown
            Partition table:
            0 - [XXXXXX] FAT32 [HIDDEN!] Offset (sectors): 63 | Size: 8381 Mo
            1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 16370235 | Size: 32201 Mo
            2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 79280775 | Size: 159455 Mo
            User = LL1 ... OK!
            User = LL2 ... OK!

            Termine : << RKreport[2].txt >>
            RKreport[1].txt ; RKreport[2].txt
            1. fab1003 Auteur
              Verni29,
              la recherche avec TDSSKiller ne donne rien "no threats found", la recherche est très rapide (8 secondes), je ne comprends pas..
              1. fab1003 Auteur
                le rapport obtenu par TDSSKiller est le suivant :

                23:13:34.0437 2308 TDSS rootkit removing tool 2.6.23.0 Dec 13 2011 10:39:31
                23:13:34.0468 2308 ============================================================
                23:13:34.0468 2308 Current date / time: 2011/12/20 23:13:34.0468
                23:13:34.0468 2308 SystemInfo:
                23:13:34.0468 2308
                23:13:34.0468 2308 OS Version: 5.1.2600 ServicePack: 2.0
                23:13:34.0468 2308 Product type: Workstation
                23:13:34.0468 2308 ComputerName: 113726460314
                23:13:34.0468 2308 UserName: Famille Venet
                23:13:34.0468 2308 Windows directory: C:\WINDOWS
                23:13:34.0468 2308 System windows directory: C:\WINDOWS
                23:13:34.0468 2308 Processor architecture: Intel x86
                23:13:34.0468 2308 Number of processors: 1
                23:13:34.0468 2308 Page size: 0x1000
                23:13:34.0468 2308 Boot type: Normal boot
                23:13:34.0468 2308 ============================================================
                23:13:35.0109 2308 Initialize success
                23:13:37.0328 3152 ============================================================
                23:13:37.0328 3152 Scan started
                23:13:37.0328 3152 Mode: Manual;
                23:13:37.0328 3152 ============================================================
                23:13:38.0093 3152 3xHybrid (53c2589bd342534a50e869f20c6ac2b9) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
                23:13:38.0109 3152 3xHybrid - ok
                23:13:38.0140 3152 Aavmker4 (3136c74a33d6dc32cb0d62423dd740ca) C:\WINDOWS\system32\drivers\Aavmker4.sys
                23:13:38.0140 3152 Aavmker4 - ok
                23:13:38.0156 3152 Abiosdsk - ok
                23:13:38.0187 3152 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
                23:13:38.0187 3152 abp480n5 - ok
                23:13:38.0218 3152 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
                23:13:38.0218 3152 ACPI - ok
                23:13:38.0250 3152 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
                23:13:38.0250 3152 ACPIEC - ok
                23:13:38.0265 3152 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
                23:13:38.0265 3152 adpu160m - ok
                23:13:38.0312 3152 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
                23:13:38.0312 3152 aec - ok
                23:13:38.0359 3152 AFD (090a90736d4d415d839143d3cb25be50) C:\WINDOWS\System32\drivers\afd.sys
                23:13:38.0359 3152 AFD - ok
                23:13:38.0406 3152 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
                23:13:38.0406 3152 agp440 - ok
                23:13:38.0421 3152 agpCPQ (67288b07d6aba6c1267b626e67bc56fd) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
                23:13:38.0421 3152 agpCPQ - ok
                23:13:38.0453 3152 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
                23:13:38.0453 3152 Aha154x - ok
                23:13:38.0468 3152 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
                23:13:38.0468 3152 aic78u2 - ok
                23:13:38.0484 3152 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
                23:13:38.0484 3152 aic78xx - ok
                23:13:38.0593 3152 ALCXWDM (c881453898eec64027274ebb3c8cbc0f) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
                23:13:38.0625 3152 ALCXWDM - ok
                23:13:38.0656 3152 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
                23:13:38.0656 3152 AliIde - ok
                23:13:38.0671 3152 alim1541 (f312b7cef21eff52fa23056b9d815fad) C:\WINDOWS\system32\DRIVERS\alim1541.sys
                23:13:38.0671 3152 alim1541 - ok
                23:13:38.0687 3152 amdagp (675c16a3c1f8482f85ee4a97fc0dde3d) C:\WINDOWS\system32\DRIVERS\amdagp.sys
                23:13:38.0687 3152 amdagp - ok
                23:13:38.0750 3152 AmdK8 (62271ff14baa810323ac816c5d355ba9) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                23:13:38.0750 3152 AmdK8 - ok
                23:13:38.0781 3152 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
                23:13:38.0781 3152 amsint - ok
                23:13:38.0812 3152 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
                23:13:38.0812 3152 Arp1394 - ok
                23:13:38.0828 3152 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
                23:13:38.0828 3152 asc - ok
                23:13:38.0843 3152 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
                23:13:38.0859 3152 asc3350p - ok
                23:13:38.0875 3152 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
                23:13:38.0875 3152 asc3550 - ok
                23:13:38.0921 3152 aswFsBlk (ad3bf0f023c8c446c5cae6c5db36c836) C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
                23:13:38.0921 3152 aswFsBlk - ok
                23:13:38.0937 3152 aswMon2 (a5e446ec41b884e93a540c162a06786d) C:\WINDOWS\system32\drivers\aswMon2.sys
                23:13:38.0937 3152 aswMon2 - ok
                23:13:38.0968 3152 aswRdr (da7083019bf5e47a07b9bd8ece812b47) C:\WINDOWS\system32\drivers\aswRdr.sys
                23:13:38.0968 3152 aswRdr - ok
                23:13:39.0000 3152 aswSP (c51a8309a1f07d936a22176553dfd6a0) C:\WINDOWS\system32\drivers\aswSP.sys
                23:13:39.0000 3152 aswSP - ok
                23:13:39.0031 3152 aswTdi (7353fa997054cc68ed26abcfd872bae9) C:\WINDOWS\system32\drivers\aswTdi.sys
                23:13:39.0031 3152 aswTdi - ok
                23:13:39.0062 3152 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
                23:13:39.0062 3152 AsyncMac - ok
                23:13:39.0093 3152 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
                23:13:39.0093 3152 atapi - ok
                23:13:39.0109 3152 Atdisk - ok
                23:13:39.0171 3152 ati2mtag (03621f7f968ff63713943405deb777f9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
                23:13:39.0171 3152 ati2mtag - ok
                23:13:39.0203 3152 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
                23:13:39.0203 3152 Atmarpc - ok
                23:13:39.0234 3152 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
                23:13:39.0234 3152 audstub - ok
                23:13:39.0281 3152 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
                23:13:39.0281 3152 Beep - ok
                23:13:39.0312 3152 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
                23:13:39.0312 3152 cbidf - ok
                23:13:39.0328 3152 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
                23:13:39.0328 3152 cbidf2k - ok
                23:13:39.0359 3152 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
                23:13:39.0359 3152 CCDECODE - ok
                23:13:39.0390 3152 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
                23:13:39.0390 3152 cd20xrnt - ok
                23:13:39.0421 3152 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
                23:13:39.0421 3152 Cdaudio - ok
                23:13:39.0453 3152 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
                23:13:39.0453 3152 Cdfs - ok
                23:13:39.0468 3152 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
                23:13:39.0468 3152 Cdrom - ok
                23:13:39.0484 3152 Changer - ok
                23:13:39.0515 3152 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
                23:13:39.0515 3152 CmdIde - ok
                23:13:39.0546 3152 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
                23:13:39.0546 3152 Cpqarray - ok
                23:13:39.0578 3152 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
                23:13:39.0578 3152 dac2w2k - ok
                23:13:39.0593 3152 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
                23:13:39.0593 3152 dac960nt - ok
                23:13:39.0625 3152 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
                23:13:39.0625 3152 Disk - ok
                23:13:39.0687 3152 dmboot (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
                23:13:39.0687 3152 dmboot - ok
                23:13:39.0718 3152 dmio (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
                23:13:39.0718 3152 dmio - ok
                23:13:39.0750 3152 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
                23:13:39.0750 3152 dmload - ok
                23:13:39.0781 3152 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
                23:13:39.0781 3152 DMusic - ok
                23:13:39.0796 3152 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
                23:13:39.0796 3152 dpti2o - ok
                23:13:39.0828 3152 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
                23:13:39.0828 3152 drmkaud - ok
                23:13:39.0875 3152 e4usbaw (3e1971e0f64fcf2fbe05ce4ab0132963) C:\WINDOWS\system32\DRIVERS\e4usbaw.sys
                23:13:39.0875 3152 e4usbaw - ok
                23:13:39.0906 3152 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
                23:13:39.0906 3152 Fastfat - ok
                23:13:39.0937 3152 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
                23:13:39.0953 3152 Fdc - ok
                23:13:39.0968 3152 Fips (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
                23:13:39.0984 3152 Fips - ok
                23:13:40.0000 3152 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
                23:13:40.0000 3152 Flpydisk - ok
                23:13:40.0031 3152 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
                23:13:40.0031 3152 FltMgr - ok
                23:13:40.0078 3152 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
                23:13:40.0078 3152 fssfltr - ok
                23:13:40.0109 3152 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
                23:13:40.0109 3152 Fs_Rec - ok
                23:13:40.0140 3152 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
                23:13:40.0140 3152 Ftdisk - ok
                23:13:40.0171 3152 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
                23:13:40.0171 3152 GEARAspiWDM - ok
                23:13:40.0218 3152 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
                23:13:40.0218 3152 Gpc - ok
                23:13:40.0265 3152 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
                23:13:40.0265 3152 HidUsb - ok
                23:13:40.0296 3152 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
                23:13:40.0296 3152 hpn - ok
                23:13:40.0343 3152 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
                23:13:40.0343 3152 HTTP - ok
                23:13:40.0375 3152 i2omgmt (8f09f91b5c91363b77bcd15599570f2c) C:\WINDOWS\system32\drivers\i2omgmt.sys
                23:13:40.0375 3152 i2omgmt - ok
                23:13:40.0406 3152 i2omp (ed6bf9e441fdea13292a6d30a64a24c3) C:\WINDOWS\system32\DRIVERS\i2omp.sys
                23:13:40.0406 3152 i2omp - ok
                23:13:40.0421 3152 i8042prt (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                23:13:40.0421 3152 i8042prt - ok
                23:13:40.0468 3152 IKANLOADER2 (1a03a7b28d12239a573dc20422c3068d) C:\WINDOWS\system32\Drivers\e4ldr.sys
                23:13:40.0468 3152 IKANLOADER2 - ok
                23:13:40.0484 3152 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
                23:13:40.0484 3152 Imapi - ok
                23:13:40.0515 3152 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
                23:13:40.0515 3152 ini910u - ok
                23:13:40.0546 3152 IntelIde (1367812f8a974e0c13a4888fa5e7ede6) C:\WINDOWS\system32\DRIVERS\intelide.sys
                23:13:40.0546 3152 IntelIde - ok
                23:13:40.0578 3152 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
                23:13:40.0578 3152 Ip6Fw - ok
                23:13:40.0609 3152 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
                23:13:40.0609 3152 IpFilterDriver - ok
                23:13:40.0625 3152 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
                23:13:40.0625 3152 IpInIp - ok
                23:13:40.0656 3152 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
                23:13:40.0656 3152 IpNat - ok
                23:13:40.0687 3152 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
                23:13:40.0687 3152 IPSec - ok
                23:13:40.0718 3152 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
                23:13:40.0718 3152 IRENUM - ok
                23:13:40.0765 3152 isapnp (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
                23:13:40.0765 3152 isapnp - ok
                23:13:40.0781 3152 Kbdclass (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                23:13:40.0781 3152 Kbdclass - ok
                23:13:40.0796 3152 kbdhid (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
                23:13:40.0796 3152 kbdhid - ok
                23:13:40.0843 3152 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
                23:13:40.0843 3152 kmixer - ok
                23:13:40.0875 3152 KSecDD (1be7cc2535d760ae4d481576eb789f24) C:\WINDOWS\system32\drivers\KSecDD.sys
                23:13:40.0875 3152 KSecDD - ok
                23:13:40.0906 3152 lbrtfdc - ok
                23:13:41.0187 3152 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
                23:13:41.0187 3152 mnmdd - ok
                23:13:41.0218 3152 Modem (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
                23:13:41.0218 3152 Modem - ok
                23:13:41.0250 3152 Mouclass (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
                23:13:41.0250 3152 Mouclass - ok
                23:13:41.0281 3152 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
                23:13:41.0281 3152 mouhid - ok
                23:13:41.0312 3152 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
                23:13:41.0312 3152 MountMgr - ok
                23:13:41.0343 3152 MPE (55a9a7e6bb297bf0f5b144029dcb79cc) C:\WINDOWS\system32\DRIVERS\MPE.sys
                23:13:41.0343 3152 MPE - ok
                23:13:41.0375 3152 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
                23:13:41.0375 3152 mraid35x - ok
                23:13:41.0406 3152 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
                23:13:41.0406 3152 MRxDAV - ok
                23:13:41.0468 3152 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                23:13:41.0468 3152 MRxSmb - ok
                23:13:41.0515 3152 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
                23:13:41.0515 3152 Msfs - ok
                23:13:41.0531 3152 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
                23:13:41.0531 3152 MSKSSRV - ok
                23:13:41.0562 3152 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
                23:13:41.0562 3152 MSPCLOCK - ok
                23:13:41.0593 3152 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
                23:13:41.0593 3152 MSPQM - ok
                23:13:41.0609 3152 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
                23:13:41.0609 3152 mssmbios - ok
                23:13:41.0640 3152 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
                23:13:41.0640 3152 MSTEE - ok
                23:13:41.0671 3152 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
                23:13:41.0671 3152 Mup - ok
                23:13:41.0703 3152 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
                23:13:41.0703 3152 NABTSFEC - ok
                23:13:41.0734 3152 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
                23:13:41.0734 3152 NDIS - ok
                23:13:41.0765 3152 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
                23:13:41.0765 3152 NdisIP - ok
                23:13:41.0796 3152 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
                23:13:41.0796 3152 NdisTapi - ok
                23:13:41.0812 3152 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
                23:13:41.0812 3152 Ndisuio - ok
                23:13:41.0843 3152 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
                23:13:41.0843 3152 NdisWan - ok
                23:13:41.0875 3152 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
                23:13:41.0875 3152 NDProxy - ok
                23:13:41.0890 3152 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
                23:13:41.0906 3152 NetBIOS - ok
                23:13:41.0921 3152 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
                23:13:41.0921 3152 NetBT - ok
                23:13:41.0968 3152 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS\nic1394.sys
                23:13:41.0968 3152 NIC1394 - ok
                23:13:41.0984 3152 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
                23:13:41.0984 3152 Npfs - ok
                23:13:42.0031 3152 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys
                23:13:42.0031 3152 Ntfs - ok
                23:13:42.0062 3152 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
                23:13:42.0062 3152 Null - ok
                23:13:42.0093 3152 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
                23:13:42.0093 3152 NwlnkFlt - ok
                23:13:42.0125 3152 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
                23:13:42.0125 3152 NwlnkFwd - ok
                23:13:42.0140 3152 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
                23:13:42.0140 3152 ohci1394 - ok
                23:13:42.0171 3152 Parport (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys
                23:13:42.0171 3152 Parport - ok
                23:13:42.0187 3152 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
                23:13:42.0187 3152 PartMgr - ok
                23:13:42.0218 3152 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
                23:13:42.0234 3152 ParVdm - ok
                23:13:42.0234 3152 PCAMPR5 - ok
                23:13:42.0265 3152 PCANDIS5 (ceef86cb35abe95c40a88784f5b631ad) C:\WINDOWS\system32\PCANDIS5.SYS
                23:13:42.0281 3152 PCANDIS5 - ok
                23:13:42.0312 3152 PCI (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
                23:13:42.0312 3152 PCI - ok
                23:13:42.0328 3152 PCIDump - ok
                23:13:42.0343 3152 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
                23:13:42.0343 3152 PCIIde - ok
                23:13:42.0375 3152 Pcmcia (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
                23:13:42.0375 3152 Pcmcia - ok
                23:13:42.0390 3152 PDCOMP - ok
                23:13:42.0406 3152 PDFRAME - ok
                23:13:42.0421 3152 PDRELI - ok
                23:13:42.0437 3152 PDRFRAME - ok
                23:13:42.0468 3152 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
                23:13:42.0468 3152 perc2 - ok
                23:13:42.0484 3152 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
                23:13:42.0484 3152 perc2hib - ok
                23:13:42.0750 3152 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
                23:13:42.0750 3152 PptpMiniport - ok
                23:13:42.0765 3152 Processor (f480712b761e538bc8e44ede60f3a3c3) C:\WINDOWS\system32\DRIVERS\processr.sys
                23:13:42.0765 3152 Processor - ok
                23:13:42.0812 3152 prodrv06 (5ac2dcbbceb5534bfcd88c2670993f3c) C:\WINDOWS\System32\drivers\prodrv06.sys
                23:13:42.0812 3152 prodrv06 - ok
                23:13:42.0843 3152 prohlp02 (7a78181cc947cdaa0902e113cfd01e93) C:\WINDOWS\system32\drivers\prohlp02.sys
                23:13:42.0843 3152 prohlp02 - ok
                23:13:42.0875 3152 prosync1 (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
                23:13:42.0875 3152 prosync1 - ok
                23:13:42.0921 3152 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
                23:13:42.0921 3152 PSched - ok
                23:13:42.0937 3152 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
                23:13:42.0937 3152 Ptilink - ok
                23:13:42.0984 3152 PxHelp20 (f3a3b00666a40c6914b7b2864f7dc1c0) C:\WINDOWS\system32\Drivers\PxHelp20.sys
                23:13:42.0984 3152 PxHelp20 - ok
                23:13:43.0015 3152 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
                23:13:43.0015 3152 ql1080 - ok
                23:13:43.0015 3152 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
                23:13:43.0015 3152 Ql10wnt - ok
                23:13:43.0031 3152 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
                23:13:43.0046 3152 ql12160 - ok
                23:13:43.0062 3152 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
                23:13:43.0062 3152 ql1240 - ok
                23:13:43.0078 3152 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
                23:13:43.0078 3152 ql1280 - ok
                23:13:43.0093 3152 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
                23:13:43.0093 3152 RasAcd - ok
                23:13:43.0125 3152 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
                23:13:43.0125 3152 Rasl2tp - ok
                23:13:43.0140 3152 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
                23:13:43.0140 3152 RasPppoe - ok
                23:13:43.0156 3152 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
                23:13:43.0156 3152 Raspti - ok
                23:13:43.0187 3152 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
                23:13:43.0203 3152 Rdbss - ok
                23:13:43.0218 3152 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                23:13:43.0218 3152 RDPCDD - ok
                23:13:43.0250 3152 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
                23:13:43.0265 3152 rdpdr - ok
                23:13:43.0296 3152 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
                23:13:43.0296 3152 RDPWD - ok
                23:13:43.0328 3152 redbook (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERS\redbook.sys
                23:13:43.0328 3152 redbook - ok
                23:13:43.0359 3152 RTL8023xp (4a0ae7891fcf74acc848b109294cb80f) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
                23:13:43.0359 3152 RTL8023xp - ok
                23:13:43.0421 3152 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
                23:13:43.0421 3152 Secdrv - ok
                23:13:43.0453 3152 Serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
                23:13:43.0453 3152 Serenum - ok
                23:13:43.0484 3152 Serial (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys
                23:13:43.0484 3152 Serial - ok
                23:13:43.0546 3152 sfhlp01 (91f99f3e331e24c438819a38a1ad049c) C:\WINDOWS\system32\drivers\sfhlp01.sys
                23:13:43.0546 3152 sfhlp01 - ok
                23:13:43.0578 3152 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
                23:13:43.0593 3152 Sfloppy - ok
                23:13:43.0609 3152 Simbad - ok
                23:13:43.0640 3152 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
                23:13:43.0640 3152 sisagp - ok
                23:13:43.0656 3152 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
                23:13:43.0656 3152 SLIP - ok
                23:13:43.0703 3152 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
                23:13:43.0703 3152 Sparrow - ok
                23:13:43.0750 3152 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
                23:13:43.0750 3152 splitter - ok
                23:13:43.0781 3152 sr (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
                23:13:43.0781 3152 sr - ok
                23:13:43.0843 3152 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
                23:13:43.0843 3152 Srv - ok
                23:13:43.0875 3152 sscdbus (d6870895fe46a464a19141440eb6cc1e) C:\WINDOWS\system32\DRIVERS\sscdbus.sys
                23:13:43.0875 3152 sscdbus - ok
                23:13:43.0906 3152 sscdmdfl (0fe167362e4689b716cdc8d93adedda8) C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys
                23:13:43.0906 3152 sscdmdfl - ok
                23:13:43.0937 3152 sscdmdm (55a15707e32b6709242ad127e62ca55a) C:\WINDOWS\system32\DRIVERS\sscdmdm.sys
                23:13:43.0937 3152 sscdmdm - ok
                23:13:43.0984 3152 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
                23:13:43.0984 3152 StarOpen - ok
                23:13:44.0015 3152 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
                23:13:44.0015 3152 streamip - ok
                23:13:44.0046 3152 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
                23:13:44.0046 3152 swenum - ok
                23:13:44.0078 3152 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
                23:13:44.0078 3152 swmidi - ok
                23:13:44.0109 3152 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
                23:13:44.0109 3152 symc810 - ok
                23:13:44.0125 3152 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
                23:13:44.0125 3152 symc8xx - ok
                23:13:44.0140 3152 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
                23:13:44.0140 3152 sym_hi - ok
                23:13:44.0156 3152 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
                23:13:44.0156 3152 sym_u3 - ok
                23:13:44.0187 3152 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
                23:13:44.0187 3152 sysaudio - ok
                23:13:44.0234 3152 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
                23:13:44.0234 3152 Tcpip - ok
                23:13:44.0281 3152 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
                23:13:44.0281 3152 TDPIPE - ok
                23:13:44.0296 3152 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
                23:13:44.0296 3152 TDTCP - ok
                23:13:44.0390 3152 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
                23:13:44.0390 3152 TermDD - ok
                23:13:44.0515 3152 TosIde (b411668322c3bf4e690888706b999679) C:\WINDOWS\system32\DRIVERS\toside.sys
                23:13:44.0515 3152 TosIde - ok
                23:13:44.0609 3152 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
                23:13:44.0609 3152 TrueSight - ok
                23:13:44.0640 3152 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
                23:13:44.0640 3152 Udfs - ok
                23:13:44.0671 3152 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
                23:13:44.0671 3152 ultra - ok
                23:13:44.0703 3152 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
                23:13:44.0703 3152 Update - ok
                23:13:44.0750 3152 USBAAPL (df38374e12e73c25b37b6f8a9b8622ef) C:\WINDOWS\system32\Drivers\usbaapl.sys
                23:13:44.0750 3152 USBAAPL - ok
                23:13:44.0796 3152 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
                23:13:44.0796 3152 usbccgp - ok
                23:13:44.0828 3152 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
                23:13:44.0828 3152 usbehci - ok
                23:13:44.0843 3152 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
                23:13:44.0843 3152 usbhub - ok
                23:13:44.0875 3152 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
                23:13:44.0875 3152 usbohci - ok
                23:13:44.0921 3152 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
                23:13:44.0921 3152 usbprint - ok
                23:13:44.0953 3152 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
                23:13:44.0953 3152 usbscan - ok
                23:13:44.0984 3152 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
                23:13:44.0984 3152 USBSTOR - ok
                23:13:45.0000 3152 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
                23:13:45.0015 3152 VgaSave - ok
                23:13:45.0031 3152 viaagp (d92e7c8a30cfd14d8e15b5f7f032151b) C:\WINDOWS\system32\DRIVERS\viaagp.sys
                23:13:45.0031 3152 viaagp - ok
                23:13:45.0062 3152 ViaIde (59cb1338ad3654417bea49636457f65d) C:\WINDOWS\system32\DRIVERS\viaide.sys
                23:13:45.0062 3152 ViaIde - ok
                23:13:45.0078 3152 VolSnap (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys
                23:13:45.0078 3152 VolSnap - ok
                23:13:45.0109 3152 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
                23:13:45.0109 3152 Wanarp - ok
                23:13:45.0140 3152 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys
                23:13:45.0140 3152 wanatw - ok
                23:13:45.0156 3152 WDICA - ok
                23:13:45.0218 3152 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
                23:13:45.0218 3152 wdmaud - ok
                23:13:45.0281 3152 WpdUsb (c1b3d9d75c3fb735f5fa3a5806aded57) C:\WINDOWS\system32\Drivers\wpdusb.sys
                23:13:45.0281 3152 WpdUsb - ok
                23:13:45.0328 3152 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
                23:13:45.0328 3152 WSTCODEC - ok
                23:13:45.0484 3152 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
                23:13:45.0609 3152 \Device\Harddisk0\DR0 - ok
                23:13:45.0609 3152 Boot (0x1200) (c8421bfc339861c1f1c0155df72ba3ed) \Device\Harddisk0\DR0\Partition0
                23:13:45.0609 3152 \Device\Harddisk0\DR0\Partition0 - ok
                23:13:45.0625 3152 Boot (0x1200) (718f942d91e3e87a1899c575d2c45fd8) \Device\Harddisk0\DR0\Partition1
                23:13:45.0625 3152 \Device\Harddisk0\DR0\Partition1 - ok
                23:13:45.0640 3152 ============================================================
                23:13:45.0640 3152 Scan finished
                23:13:45.0640 3152 ============================================================
                23:13:45.0656 1160 Detected object count: 0
                23:13:45.0656 1160 Actual detected object count: 0
                1. verni29 Contributeur sécurité
                  fab1003,

                  Oui, c'est surprenant pour TDSSKiller. On s'en occupera ensuite.

                  Plusieurs manips.
                  ne te précipite pas. Lis attentivement les consignes.
                  Et si tu as des questions sur ces manips, n'hésite pas. Au contraire.

                  -----------------------------------------------

                  Relance RogueKiller et choisis l'option 4.
                  Poste le rapport;

                  ----------------------------------------------

                  Télécharge gmer sur ton bureau ( IMPORTANT )
                  http://www.gmer.net/#files

                  Précautions d'usage :
                  - Commence par désactiver ou arrêter des logiciels comme Alcolhol Soft ou Daemon tools car ils biaisent le rapport de gmer.
                  - Durant l'utilisation du logiciel, désactive tes protections actives ( antivirus, parefeu ). IMPORTANT.
                  - Ferme également toutes les applications actives dont ton navigateur.

                  # Double-clique sur l'exécutable téléchargé .
                  Si sous Vista , click droit sur l'exécutable et choisir exécuter en tant qu'administrateur.
                  # Le scan va se lancer de lui-même.

                  Si tu reçois un message t'indiquant la présence de rootkits, choisis oui pour effectuer une analyse complète du PC mais ne supprime rien.

                  # A la fin de l'analyse, clique sur save pour enregistrer le rapport
                  # Enregistre-le sur le bureau ( fichier .log )

                  Édite ce rapport dans ta prochaine réponse.

                  ---------------------------------------------

                  Télécharge OTL (de OldTimer) sur ton Bureau.
                  http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/

                  Prends le soin de fermer toutes les autres fenêtres Windows afin de ne pas interrompre le scan.

                  * Double-clique sur OTL.exe pour le lancer.
                  Si Sous Vista/seven, , click droit sur sur le fichier et choisir Exécuter en tant qu'administrateur.
                  * Sélectionne l'option tous les utilisateurs.
                  * Dans la partie Personnalisation, copie/colle la liste suivante. 

                  netsvcs 
Drivers32
msconfig  
 /md5start  
userinit.exe  
winlogon.exe 
explorer.exe
svchost.exe
wininit.exe
/md5stop
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe /s
%appdata%\*.exe /s
%APPDATA%\*. 
%systemroot%\*. /mp /s 
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
hklm\software\clients\startmenuinternet|command /rs 
hklm\software\clients\startmenuinternet|command /64 /rs
hklm\System\CurrentControlSet\Control\SessionManager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCerDlls /s
SAVEMBR :0
CREATERESTOREPOINT


                  * Enfin, clique sur le bouton Analyse rapide.

                  * Une fois l'analyse terminée, deux fenêtres vont s'ouvrir dans le Bloc-notes : OTL.txt et Extras.txt. Ils se trouvent au même endroit que OTL (donc par défaut sur le Bureau)

                  Utilise un site comme https://www.cjoint.com/ pour les déposer.
                  indique ensuite les deux liens crées.

                  Donc, 4 rapports :
                  - Roguekiller
                  - gmer
                  - les deux rapports d'OTL ( via le site indiqué )

                  A+
                  1. fab1003 Auteur
                    Verni29,
                    j'ai refait un scan, dans "change parameters" j'ai coché les 2 "additional options", et là le rapport est différent :

                    23:13:34.0437 2308 TDSS rootkit removing tool 2.6.23.0 Dec 13 2011 10:39:31
                    23:13:34.0468 2308 ============================================================
                    23:13:34.0468 2308 Current date / time: 2011/12/20 23:13:34.0468
                    23:13:34.0468 2308 SystemInfo:
                    23:13:34.0468 2308
                    23:13:34.0468 2308 OS Version: 5.1.2600 ServicePack: 2.0
                    23:13:34.0468 2308 Product type: Workstation
                    23:13:34.0468 2308 ComputerName: 113726460314
                    23:13:34.0468 2308 UserName: Famille Venet
                    23:13:34.0468 2308 Windows directory: C:\WINDOWS
                    23:13:34.0468 2308 System windows directory: C:\WINDOWS
                    23:13:34.0468 2308 Processor architecture: Intel x86
                    23:13:34.0468 2308 Number of processors: 1
                    23:13:34.0468 2308 Page size: 0x1000
                    23:13:34.0468 2308 Boot type: Normal boot
                    23:13:34.0468 2308 ============================================================
                    23:13:35.0109 2308 Initialize success
                    23:13:37.0328 3152 ============================================================
                    23:13:37.0328 3152 Scan started
                    23:13:37.0328 3152 Mode: Manual;
                    23:13:37.0328 3152 ============================================================
                    23:13:38.0093 3152 3xHybrid (53c2589bd342534a50e869f20c6ac2b9) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
                    23:13:38.0109 3152 3xHybrid - ok
                    23:13:38.0140 3152 Aavmker4 (3136c74a33d6dc32cb0d62423dd740ca) C:\WINDOWS\system32\drivers\Aavmker4.sys
                    23:13:38.0140 3152 Aavmker4 - ok
                    23:13:38.0156 3152 Abiosdsk - ok
                    23:13:38.0187 3152 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
                    23:13:38.0187 3152 abp480n5 - ok
                    23:13:38.0218 3152 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
                    23:13:38.0218 3152 ACPI - ok
                    23:13:38.0250 3152 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
                    23:13:38.0250 3152 ACPIEC - ok
                    23:13:38.0265 3152 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
                    23:13:38.0265 3152 adpu160m - ok
                    23:13:38.0312 3152 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
                    23:13:38.0312 3152 aec - ok
                    23:13:38.0359 3152 AFD (090a90736d4d415d839143d3cb25be50) C:\WINDOWS\System32\drivers\afd.sys
                    23:13:38.0359 3152 AFD - ok
                    23:13:38.0406 3152 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
                    23:13:38.0406 3152 agp440 - ok
                    23:13:38.0421 3152 agpCPQ (67288b07d6aba6c1267b626e67bc56fd) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
                    23:13:38.0421 3152 agpCPQ - ok
                    23:13:38.0453 3152 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
                    23:13:38.0453 3152 Aha154x - ok
                    23:13:38.0468 3152 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
                    23:13:38.0468 3152 aic78u2 - ok
                    23:13:38.0484 3152 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
                    23:13:38.0484 3152 aic78xx - ok
                    23:13:38.0593 3152 ALCXWDM (c881453898eec64027274ebb3c8cbc0f) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
                    23:13:38.0625 3152 ALCXWDM - ok
                    23:13:38.0656 3152 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
                    23:13:38.0656 3152 AliIde - ok
                    23:13:38.0671 3152 alim1541 (f312b7cef21eff52fa23056b9d815fad) C:\WINDOWS\system32\DRIVERS\alim1541.sys
                    23:13:38.0671 3152 alim1541 - ok
                    23:13:38.0687 3152 amdagp (675c16a3c1f8482f85ee4a97fc0dde3d) C:\WINDOWS\system32\DRIVERS\amdagp.sys
                    23:13:38.0687 3152 amdagp - ok
                    23:13:38.0750 3152 AmdK8 (62271ff14baa810323ac816c5d355ba9) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                    23:13:38.0750 3152 AmdK8 - ok
                    23:13:38.0781 3152 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
                    23:13:38.0781 3152 amsint - ok
                    23:13:38.0812 3152 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
                    23:13:38.0812 3152 Arp1394 - ok
                    23:13:38.0828 3152 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
                    23:13:38.0828 3152 asc - ok
                    23:13:38.0843 3152 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
                    23:13:38.0859 3152 asc3350p - ok
                    23:13:38.0875 3152 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
                    23:13:38.0875 3152 asc3550 - ok
                    23:13:38.0921 3152 aswFsBlk (ad3bf0f023c8c446c5cae6c5db36c836) C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
                    23:13:38.0921 3152 aswFsBlk - ok
                    23:13:38.0937 3152 aswMon2 (a5e446ec41b884e93a540c162a06786d) C:\WINDOWS\system32\drivers\aswMon2.sys
                    23:13:38.0937 3152 aswMon2 - ok
                    23:13:38.0968 3152 aswRdr (da7083019bf5e47a07b9bd8ece812b47) C:\WINDOWS\system32\drivers\aswRdr.sys
                    23:13:38.0968 3152 aswRdr - ok
                    23:13:39.0000 3152 aswSP (c51a8309a1f07d936a22176553dfd6a0) C:\WINDOWS\system32\drivers\aswSP.sys
                    23:13:39.0000 3152 aswSP - ok
                    23:13:39.0031 3152 aswTdi (7353fa997054cc68ed26abcfd872bae9) C:\WINDOWS\system32\drivers\aswTdi.sys
                    23:13:39.0031 3152 aswTdi - ok
                    23:13:39.0062 3152 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
                    23:13:39.0062 3152 AsyncMac - ok
                    23:13:39.0093 3152 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
                    23:13:39.0093 3152 atapi - ok
                    23:13:39.0109 3152 Atdisk - ok
                    23:13:39.0171 3152 ati2mtag (03621f7f968ff63713943405deb777f9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
                    23:13:39.0171 3152 ati2mtag - ok
                    23:13:39.0203 3152 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
                    23:13:39.0203 3152 Atmarpc - ok
                    23:13:39.0234 3152 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
                    23:13:39.0234 3152 audstub - ok
                    23:13:39.0281 3152 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
                    23:13:39.0281 3152 Beep - ok
                    23:13:39.0312 3152 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
                    23:13:39.0312 3152 cbidf - ok
                    23:13:39.0328 3152 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
                    23:13:39.0328 3152 cbidf2k - ok
                    23:13:39.0359 3152 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
                    23:13:39.0359 3152 CCDECODE - ok
                    23:13:39.0390 3152 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
                    23:13:39.0390 3152 cd20xrnt - ok
                    23:13:39.0421 3152 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
                    23:13:39.0421 3152 Cdaudio - ok
                    23:13:39.0453 3152 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
                    23:13:39.0453 3152 Cdfs - ok
                    23:13:39.0468 3152 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
                    23:13:39.0468 3152 Cdrom - ok
                    23:13:39.0484 3152 Changer - ok
                    23:13:39.0515 3152 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
                    23:13:39.0515 3152 CmdIde - ok
                    23:13:39.0546 3152 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
                    23:13:39.0546 3152 Cpqarray - ok
                    23:13:39.0578 3152 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
                    23:13:39.0578 3152 dac2w2k - ok
                    23:13:39.0593 3152 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
                    23:13:39.0593 3152 dac960nt - ok
                    23:13:39.0625 3152 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
                    23:13:39.0625 3152 Disk - ok
                    23:13:39.0687 3152 dmboot (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
                    23:13:39.0687 3152 dmboot - ok
                    23:13:39.0718 3152 dmio (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
                    23:13:39.0718 3152 dmio - ok
                    23:13:39.0750 3152 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
                    23:13:39.0750 3152 dmload - ok
                    23:13:39.0781 3152 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
                    23:13:39.0781 3152 DMusic - ok
                    23:13:39.0796 3152 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
                    23:13:39.0796 3152 dpti2o - ok
                    23:13:39.0828 3152 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
                    23:13:39.0828 3152 drmkaud - ok
                    23:13:39.0875 3152 e4usbaw (3e1971e0f64fcf2fbe05ce4ab0132963) C:\WINDOWS\system32\DRIVERS\e4usbaw.sys
                    23:13:39.0875 3152 e4usbaw - ok
                    23:13:39.0906 3152 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
                    23:13:39.0906 3152 Fastfat - ok
                    23:13:39.0937 3152 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
                    23:13:39.0953 3152 Fdc - ok
                    23:13:39.0968 3152 Fips (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
                    23:13:39.0984 3152 Fips - ok
                    23:13:40.0000 3152 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
                    23:13:40.0000 3152 Flpydisk - ok
                    23:13:40.0031 3152 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
                    23:13:40.0031 3152 FltMgr - ok
                    23:13:40.0078 3152 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
                    23:13:40.0078 3152 fssfltr - ok
                    23:13:40.0109 3152 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
                    23:13:40.0109 3152 Fs_Rec - ok
                    23:13:40.0140 3152 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
                    23:13:40.0140 3152 Ftdisk - ok
                    23:13:40.0171 3152 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
                    23:13:40.0171 3152 GEARAspiWDM - ok
                    23:13:40.0218 3152 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
                    23:13:40.0218 3152 Gpc - ok
                    23:13:40.0265 3152 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
                    23:13:40.0265 3152 HidUsb - ok
                    23:13:40.0296 3152 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
                    23:13:40.0296 3152 hpn - ok
                    23:13:40.0343 3152 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
                    23:13:40.0343 3152 HTTP - ok
                    23:13:40.0375 3152 i2omgmt (8f09f91b5c91363b77bcd15599570f2c) C:\WINDOWS\system32\drivers\i2omgmt.sys
                    23:13:40.0375 3152 i2omgmt - ok
                    23:13:40.0406 3152 i2omp (ed6bf9e441fdea13292a6d30a64a24c3) C:\WINDOWS\system32\DRIVERS\i2omp.sys
                    23:13:40.0406 3152 i2omp - ok
                    23:13:40.0421 3152 i8042prt (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                    23:13:40.0421 3152 i8042prt - ok
                    23:13:40.0468 3152 IKANLOADER2 (1a03a7b28d12239a573dc20422c3068d) C:\WINDOWS\system32\Drivers\e4ldr.sys
                    23:13:40.0468 3152 IKANLOADER2 - ok
                    23:13:40.0484 3152 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
                    23:13:40.0484 3152 Imapi - ok
                    23:13:40.0515 3152 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
                    23:13:40.0515 3152 ini910u - ok
                    23:13:40.0546 3152 IntelIde (1367812f8a974e0c13a4888fa5e7ede6) C:\WINDOWS\system32\DRIVERS\intelide.sys
                    23:13:40.0546 3152 IntelIde - ok
                    23:13:40.0578 3152 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
                    23:13:40.0578 3152 Ip6Fw - ok
                    23:13:40.0609 3152 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
                    23:13:40.0609 3152 IpFilterDriver - ok
                    23:13:40.0625 3152 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
                    23:13:40.0625 3152 IpInIp - ok
                    23:13:40.0656 3152 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
                    23:13:40.0656 3152 IpNat - ok
                    23:13:40.0687 3152 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
                    23:13:40.0687 3152 IPSec - ok
                    23:13:40.0718 3152 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
                    23:13:40.0718 3152 IRENUM - ok
                    23:13:40.0765 3152 isapnp (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
                    23:13:40.0765 3152 isapnp - ok
                    23:13:40.0781 3152 Kbdclass (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                    23:13:40.0781 3152 Kbdclass - ok
                    23:13:40.0796 3152 kbdhid (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
                    23:13:40.0796 3152 kbdhid - ok
                    23:13:40.0843 3152 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
                    23:13:40.0843 3152 kmixer - ok
                    23:13:40.0875 3152 KSecDD (1be7cc2535d760ae4d481576eb789f24) C:\WINDOWS\system32\drivers\KSecDD.sys
                    23:13:40.0875 3152 KSecDD - ok
                    23:13:40.0906 3152 lbrtfdc - ok
                    23:13:41.0187 3152 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
                    23:13:41.0187 3152 mnmdd - ok
                    23:13:41.0218 3152 Modem (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
                    23:13:41.0218 3152 Modem - ok
                    23:13:41.0250 3152 Mouclass (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
                    23:13:41.0250 3152 Mouclass - ok
                    23:13:41.0281 3152 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
                    23:13:41.0281 3152 mouhid - ok
                    23:13:41.0312 3152 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
                    23:13:41.0312 3152 MountMgr - ok
                    23:13:41.0343 3152 MPE (55a9a7e6bb297bf0f5b144029dcb79cc) C:\WINDOWS\system32\DRIVERS\MPE.sys
                    23:13:41.0343 3152 MPE - ok
                    23:13:41.0375 3152 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
                    23:13:41.0375 3152 mraid35x - ok
                    23:13:41.0406 3152 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
                    23:13:41.0406 3152 MRxDAV - ok
                    23:13:41.0468 3152 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                    23:13:41.0468 3152 MRxSmb - ok
                    23:13:41.0515 3152 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
                    23:13:41.0515 3152 Msfs - ok
                    23:13:41.0531 3152 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
                    23:13:41.0531 3152 MSKSSRV - ok
                    23:13:41.0562 3152 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
                    23:13:41.0562 3152 MSPCLOCK - ok
                    23:13:41.0593 3152 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
                    23:13:41.0593 3152 MSPQM - ok
                    23:13:41.0609 3152 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
                    23:13:41.0609 3152 mssmbios - ok
                    23:13:41.0640 3152 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
                    23:13:41.0640 3152 MSTEE - ok
                    23:13:41.0671 3152 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
                    23:13:41.0671 3152 Mup - ok
                    23:13:41.0703 3152 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
                    23:13:41.0703 3152 NABTSFEC - ok
                    23:13:41.0734 3152 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
                    23:13:41.0734 3152 NDIS - ok
                    23:13:41.0765 3152 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
                    23:13:41.0765 3152 NdisIP - ok
                    23:13:41.0796 3152 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
                    23:13:41.0796 3152 NdisTapi - ok
                    23:13:41.0812 3152 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
                    23:13:41.0812 3152 Ndisuio - ok
                    23:13:41.0843 3152 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
                    23:13:41.0843 3152 NdisWan - ok
                    23:13:41.0875 3152 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
                    23:13:41.0875 3152 NDProxy - ok
                    23:13:41.0890 3152 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
                    23:13:41.0906 3152 NetBIOS - ok
                    23:13:41.0921 3152 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
                    23:13:41.0921 3152 NetBT - ok
                    23:13:41.0968 3152 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS\nic1394.sys
                    23:13:41.0968 3152 NIC1394 - ok
                    23:13:41.0984 3152 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
                    23:13:41.0984 3152 Npfs - ok
                    23:13:42.0031 3152 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys
                    23:13:42.0031 3152 Ntfs - ok
                    23:13:42.0062 3152 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
                    23:13:42.0062 3152 Null - ok
                    23:13:42.0093 3152 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
                    23:13:42.0093 3152 NwlnkFlt - ok
                    23:13:42.0125 3152 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
                    23:13:42.0125 3152 NwlnkFwd - ok
                    23:13:42.0140 3152 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
                    23:13:42.0140 3152 ohci1394 - ok
                    23:13:42.0171 3152 Parport (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys
                    23:13:42.0171 3152 Parport - ok
                    23:13:42.0187 3152 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
                    23:13:42.0187 3152 PartMgr - ok
                    23:13:42.0218 3152 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
                    23:13:42.0234 3152 ParVdm - ok
                    23:13:42.0234 3152 PCAMPR5 - ok
                    23:13:42.0265 3152 PCANDIS5 (ceef86cb35abe95c40a88784f5b631ad) C:\WINDOWS\system32\PCANDIS5.SYS
                    23:13:42.0281 3152 PCANDIS5 - ok
                    23:13:42.0312 3152 PCI (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
                    23:13:42.0312 3152 PCI - ok
                    23:13:42.0328 3152 PCIDump - ok
                    23:13:42.0343 3152 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
                    23:13:42.0343 3152 PCIIde - ok
                    23:13:42.0375 3152 Pcmcia (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
                    23:13:42.0375 3152 Pcmcia - ok
                    23:13:42.0390 3152 PDCOMP - ok
                    23:13:42.0406 3152 PDFRAME - ok
                    23:13:42.0421 3152 PDRELI - ok
                    23:13:42.0437 3152 PDRFRAME - ok
                    23:13:42.0468 3152 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
                    23:13:42.0468 3152 perc2 - ok
                    23:13:42.0484 3152 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
                    23:13:42.0484 3152 perc2hib - ok
                    23:13:42.0750 3152 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
                    23:13:42.0750 3152 PptpMiniport - ok
                    23:13:42.0765 3152 Processor (f480712b761e538bc8e44ede60f3a3c3) C:\WINDOWS\system32\DRIVERS\processr.sys
                    23:13:42.0765 3152 Processor - ok
                    23:13:42.0812 3152 prodrv06 (5ac2dcbbceb5534bfcd88c2670993f3c) C:\WINDOWS\System32\drivers\prodrv06.sys
                    23:13:42.0812 3152 prodrv06 - ok
                    23:13:42.0843 3152 prohlp02 (7a78181cc947cdaa0902e113cfd01e93) C:\WINDOWS\system32\drivers\prohlp02.sys
                    23:13:42.0843 3152 prohlp02 - ok
                    23:13:42.0875 3152 prosync1 (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
                    23:13:42.0875 3152 prosync1 - ok
                    23:13:42.0921 3152 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
                    23:13:42.0921 3152 PSched - ok
                    23:13:42.0937 3152 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
                    23:13:42.0937 3152 Ptilink - ok
                    23:13:42.0984 3152 PxHelp20 (f3a3b00666a40c6914b7b2864f7dc1c0) C:\WINDOWS\system32\Drivers\PxHelp20.sys
                    23:13:42.0984 3152 PxHelp20 - ok
                    23:13:43.0015 3152 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
                    23:13:43.0015 3152 ql1080 - ok
                    23:13:43.0015 3152 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
                    23:13:43.0015 3152 Ql10wnt - ok
                    23:13:43.0031 3152 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
                    23:13:43.0046 3152 ql12160 - ok
                    23:13:43.0062 3152 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
                    23:13:43.0062 3152 ql1240 - ok
                    23:13:43.0078 3152 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
                    23:13:43.0078 3152 ql1280 - ok
                    23:13:43.0093 3152 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
                    23:13:43.0093 3152 RasAcd - ok
                    23:13:43.0125 3152 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
                    23:13:43.0125 3152 Rasl2tp - ok
                    23:13:43.0140 3152 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
                    23:13:43.0140 3152 RasPppoe - ok
                    23:13:43.0156 3152 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
                    23:13:43.0156 3152 Raspti - ok
                    23:13:43.0187 3152 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
                    23:13:43.0203 3152 Rdbss - ok
                    23:13:43.0218 3152 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                    23:13:43.0218 3152 RDPCDD - ok
                    23:13:43.0250 3152 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
                    23:13:43.0265 3152 rdpdr - ok
                    23:13:43.0296 3152 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
                    23:13:43.0296 3152 RDPWD - ok
                    23:13:43.0328 3152 redbook (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERS\redbook.sys
                    23:13:43.0328 3152 redbook - ok
                    23:13:43.0359 3152 RTL8023xp (4a0ae7891fcf74acc848b109294cb80f) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
                    23:13:43.0359 3152 RTL8023xp - ok
                    23:13:43.0421 3152 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
                    23:13:43.0421 3152 Secdrv - ok
                    23:13:43.0453 3152 Serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
                    23:13:43.0453 3152 Serenum - ok
                    23:13:43.0484 3152 Serial (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys
                    23:13:43.0484 3152 Serial - ok
                    23:13:43.0546 3152 sfhlp01 (91f99f3e331e24c438819a38a1ad049c) C:\WINDOWS\system32\drivers\sfhlp01.sys
                    23:13:43.0546 3152 sfhlp01 - ok
                    23:13:43.0578 3152 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
                    23:13:43.0593 3152 Sfloppy - ok
                    23:13:43.0609 3152 Simbad - ok
                    23:13:43.0640 3152 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
                    23:13:43.0640 3152 sisagp - ok
                    23:13:43.0656 3152 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
                    23:13:43.0656 3152 SLIP - ok
                    23:13:43.0703 3152 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
                    23:13:43.0703 3152 Sparrow - ok
                    23:13:43.0750 3152 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
                    23:13:43.0750 3152 splitter - ok
                    23:13:43.0781 3152 sr (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
                    23:13:43.0781 3152 sr - ok
                    23:13:43.0843 3152 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
                    23:13:43.0843 3152 Srv - ok
                    23:13:43.0875 3152 sscdbus (d6870895fe46a464a19141440eb6cc1e) C:\WINDOWS\system32\DRIVERS\sscdbus.sys
                    23:13:43.0875 3152 sscdbus - ok
                    23:13:43.0906 3152 sscdmdfl (0fe167362e4689b716cdc8d93adedda8) C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys
                    23:13:43.0906 3152 sscdmdfl - ok
                    23:13:43.0937 3152 sscdmdm (55a15707e32b6709242ad127e62ca55a) C:\WINDOWS\system32\DRIVERS\sscdmdm.sys
                    23:13:43.0937 3152 sscdmdm - ok
                    23:13:43.0984 3152 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
                    23:13:43.0984 3152 StarOpen - ok
                    23:13:44.0015 3152 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
                    23:13:44.0015 3152 streamip - ok
                    23:13:44.0046 3152 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
                    23:13:44.0046 3152 swenum - ok
                    23:13:44.0078 3152 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
                    23:13:44.0078 3152 swmidi - ok
                    23:13:44.0109 3152 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
                    23:13:44.0109 3152 symc810 - ok
                    23:13:44.0125 3152 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
                    23:13:44.0125 3152 symc8xx - ok
                    23:13:44.0140 3152 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
                    23:13:44.0140 3152 sym_hi - ok
                    23:13:44.0156 3152 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
                    23:13:44.0156 3152 sym_u3 - ok
                    23:13:44.0187 3152 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
                    23:13:44.0187 3152 sysaudio - ok
                    23:13:44.0234 3152 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
                    23:13:44.0234 3152 Tcpip - ok
                    23:13:44.0281 3152 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
                    23:13:44.0281 3152 TDPIPE - ok
                    23:13:44.0296 3152 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
                    23:13:44.0296 3152 TDTCP - ok
                    23:13:44.0390 3152 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
                    23:13:44.0390 3152 TermDD - ok
                    23:13:44.0515 3152 TosIde (b411668322c3bf4e690888706b999679) C:\WINDOWS\system32\DRIVERS\toside.sys
                    23:13:44.0515 3152 TosIde - ok
                    23:13:44.0609 3152 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
                    23:13:44.0609 3152 TrueSight - ok
                    23:13:44.0640 3152 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
                    23:13:44.0640 3152 Udfs - ok
                    23:13:44.0671 3152 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
                    23:13:44.0671 3152 ultra - ok
                    23:13:44.0703 3152 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
                    23:13:44.0703 3152 Update - ok
                    23:13:44.0750 3152 USBAAPL (df38374e12e73c25b37b6f8a9b8622ef) C:\WINDOWS\system32\Drivers\usbaapl.sys
                    23:13:44.0750 3152 USBAAPL - ok
                    23:13:44.0796 3152 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
                    23:13:44.0796 3152 usbccgp - ok
                    23:13:44.0828 3152 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
                    23:13:44.0828 3152 usbehci - ok
                    23:13:44.0843 3152 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
                    23:13:44.0843 3152 usbhub - ok
                    23:13:44.0875 3152 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
                    23:13:44.0875 3152 usbohci - ok
                    23:13:44.0921 3152 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
                    23:13:44.0921 3152 usbprint - ok
                    23:13:44.0953 3152 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
                    23:13:44.0953 3152 usbscan - ok
                    23:13:44.0984 3152 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
                    23:13:44.0984 3152 USBSTOR - ok
                    23:13:45.0000 3152 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
                    23:13:45.0015 3152 VgaSave - ok
                    23:13:45.0031 3152 viaagp (d92e7c8a30cfd14d8e15b5f7f032151b) C:\WINDOWS\system32\DRIVERS\viaagp.sys
                    23:13:45.0031 3152 viaagp - ok
                    23:13:45.0062 3152 ViaIde (59cb1338ad3654417bea49636457f65d) C:\WINDOWS\system32\DRIVERS\viaide.sys
                    23:13:45.0062 3152 ViaIde - ok
                    23:13:45.0078 3152 VolSnap (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys
                    23:13:45.0078 3152 VolSnap - ok
                    23:13:45.0109 3152 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
                    23:13:45.0109 3152 Wanarp - ok
                    23:13:45.0140 3152 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys
                    23:13:45.0140 3152 wanatw - ok
                    23:13:45.0156 3152 WDICA - ok
                    23:13:45.0218 3152 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
                    23:13:45.0218 3152 wdmaud - ok
                    23:13:45.0281 3152 WpdUsb (c1b3d9d75c3fb735f5fa3a5806aded57) C:\WINDOWS\system32\Drivers\wpdusb.sys
                    23:13:45.0281 3152 WpdUsb - ok
                    23:13:45.0328 3152 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
                    23:13:45.0328 3152 WSTCODEC - ok
                    23:13:45.0484 3152 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
                    23:13:45.0609 3152 \Device\Harddisk0\DR0 - ok
                    23:13:45.0609 3152 Boot (0x1200) (c8421bfc339861c1f1c0155df72ba3ed) \Device\Harddisk0\DR0\Partition0
                    23:13:45.0609 3152 \Device\Harddisk0\DR0\Partition0 - ok
                    23:13:45.0625 3152 Boot (0x1200) (718f942d91e3e87a1899c575d2c45fd8) \Device\Harddisk0\DR0\Partition1
                    23:13:45.0625 3152 \Device\Harddisk0\DR0\Partition1 - ok
                    23:13:45.0640 3152 ============================================================
                    23:13:45.0640 3152 Scan finished
                    23:13:45.0640 3152 ============================================================
                    23:13:45.0656 1160 Detected object count: 0
                    23:13:45.0656 1160 Actual detected object count: 0
                    23:20:13.0843 0836 ============================================================
                    23:20:13.0843 0836 Scan started
                    23:20:13.0843 0836 Mode: Manual;
                    23:20:13.0843 0836 ============================================================
                    23:20:14.0296 0836 3xHybrid (53c2589bd342534a50e869f20c6ac2b9) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
                    23:20:14.0296 0836 3xHybrid - ok
                    23:20:14.0328 0836 Aavmker4 (3136c74a33d6dc32cb0d62423dd740ca) C:\WINDOWS\system32\drivers\Aavmker4.sys
                    23:20:14.0328 0836 Aavmker4 - ok
                    23:20:14.0359 0836 Abiosdsk - ok
                    23:20:14.0375 0836 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
                    23:20:14.0375 0836 abp480n5 - ok
                    23:20:14.0406 0836 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
                    23:20:14.0406 0836 ACPI - ok
                    23:20:14.0421 0836 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
                    23:20:14.0421 0836 ACPIEC - ok
                    23:20:14.0453 0836 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
                    23:20:14.0453 0836 adpu160m - ok
                    23:20:14.0500 0836 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
                    23:20:14.0500 0836 aec - ok
                    23:20:14.0546 0836 AFD (090a90736d4d415d839143d3cb25be50) C:\WINDOWS\System32\drivers\afd.sys
                    23:20:14.0546 0836 AFD - ok
                    23:20:14.0593 0836 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
                    23:20:14.0593 0836 agp440 - ok
                    23:20:14.0609 0836 agpCPQ (67288b07d6aba6c1267b626e67bc56fd) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
                    23:20:14.0609 0836 agpCPQ - ok
                    23:20:14.0640 0836 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
                    23:20:14.0640 0836 Aha154x - ok
                    23:20:14.0656 0836 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
                    23:20:14.0656 0836 aic78u2 - ok
                    23:20:14.0671 0836 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
                    23:20:14.0671 0836 aic78xx - ok
                    23:20:14.0781 0836 ALCXWDM (c881453898eec64027274ebb3c8cbc0f) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
                    23:20:14.0812 0836 ALCXWDM - ok
                    23:20:14.0828 0836 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
                    23:20:14.0828 0836 AliIde - ok
                    23:20:14.0859 0836 alim1541 (f312b7cef21eff52fa23056b9d815fad) C:\WINDOWS\system32\DRIVERS\alim1541.sys
                    23:20:14.0859 0836 alim1541 - ok
                    23:20:14.0875 0836 amdagp (675c16a3c1f8482f85ee4a97fc0dde3d) C:\WINDOWS\system32\DRIVERS\amdagp.sys
                    23:20:14.0875 0836 amdagp - ok
                    23:20:15.0046 0836 AmdK8 (62271ff14baa810323ac816c5d355ba9) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                    23:20:15.0046 0836 AmdK8 - ok
                    23:20:15.0046 0836 Scan interrupted by user!
                    23:20:15.0046 0836 Scan interrupted by user!
                    23:20:15.0046 0836 Scan interrupted by user!
                    23:20:15.0046 0836 ============================================================
                    23:20:15.0046 0836 Scan finished
                    23:20:15.0046 0836 ============================================================
                    23:20:15.0062 3804 Detected object count: 0
                    23:20:15.0062 3804 Actual detected object count: 0
                    23:20:16.0515 3600 ============================================================
                    23:20:16.0515 3600 Scan started
                    23:20:16.0515 3600 Mode: Manual;
                    23:20:16.0515 3600 ============================================================
                    23:20:16.0843 3600 3xHybrid (53c2589bd342534a50e869f20c6ac2b9) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
                    23:20:16.0859 3600 3xHybrid - ok
                    23:20:16.0890 3600 Aavmker4 (3136c74a33d6dc32cb0d62423dd740ca) C:\WINDOWS\system32\drivers\Aavmker4.sys
                    23:20:16.0890 3600 Aavmker4 - ok
                    23:20:16.0906 3600 Abiosdsk - ok
                    23:20:16.0937 3600 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
                    23:20:16.0937 3600 abp480n5 - ok
                    23:20:16.0953 3600 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
                    23:20:16.0953 3600 ACPI - ok
                    23:20:16.0984 3600 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
                    23:20:16.0984 3600 ACPIEC - ok
                    23:20:17.0000 3600 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
                    23:20:17.0000 3600 adpu160m - ok
                    23:20:17.0062 3600 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
                    23:20:17.0062 3600 aec - ok
                    23:20:17.0093 3600 AFD (090a90736d4d415d839143d3cb25be50) C:\WINDOWS\System32\drivers\afd.sys
                    23:20:17.0093 3600 AFD - ok
                    23:20:17.0125 3600 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
                    23:20:17.0125 3600 agp440 - ok
                    23:20:17.0140 3600 agpCPQ (67288b07d6aba6c1267b626e67bc56fd) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
                    23:20:17.0140 3600 agpCPQ - ok
                    23:20:17.0171 3600 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
                    23:20:17.0171 3600 Aha154x - ok
                    23:20:17.0187 3600 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
                    23:20:17.0187 3600 aic78u2 - ok
                    23:20:17.0203 3600 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
                    23:20:17.0203 3600 aic78xx - ok
                    23:20:17.0312 3600 ALCXWDM (c881453898eec64027274ebb3c8cbc0f) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
                    23:20:17.0343 3600 ALCXWDM - ok
                    23:20:17.0343 3600 Scan interrupted by user!
                    23:20:17.0343 3600 Scan interrupted by user!
                    23:20:17.0343 3600 Scan interrupted by user!
                    23:20:17.0343 3600 ============================================================
                    23:20:17.0343 3600 Scan finished
                    23:20:17.0343 3600 ============================================================
                    23:20:17.0359 2752 Detected object count: 0
                    23:20:17.0359 2752 Actual detected object count: 0
                    23:20:18.0328 3548 ============================================================
                    23:20:18.0328 3548 Scan started
                    23:20:18.0328 3548 Mode: Manual;
                    23:20:18.0328 3548 ============================================================
                    23:20:18.0656 3548 3xHybrid (53c2589bd342534a50e869f20c6ac2b9) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
                    23:20:18.0671 3548 3xHybrid - ok
                    23:20:18.0703 3548 Aavmker4 (3136c74a33d6dc32cb0d62423dd740ca) C:\WINDOWS\system32\drivers\Aavmker4.sys
                    23:20:18.0703 3548 Aavmker4 - ok
                    23:20:18.0718 3548 Abiosdsk - ok
                    23:20:18.0734 3548 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
                    23:20:18.0750 3548 abp480n5 - ok
                    23:20:18.0765 3548 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
                    23:20:18.0765 3548 ACPI - ok
                    23:20:18.0796 3548 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
                    23:20:18.0796 3548 ACPIEC - ok
                    23:20:18.0812 3548 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
                    23:20:18.0812 3548 adpu160m - ok
                    23:20:18.0859 3548 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
                    23:20:18.0859 3548 aec - ok
                    23:20:18.0906 3548 AFD (090a90736d4d415d839143d3cb25be50) C:\WINDOWS\System32\drivers\afd.sys
                    23:20:18.0906 3548 AFD - ok
                    23:20:18.0937 3548 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
                    23:20:18.0937 3548 agp440 - ok
                    23:20:18.0968 3548 agpCPQ (67288b07d6aba6c1267b626e67bc56fd) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
                    23:20:18.0968 3548 agpCPQ - ok
                    23:20:19.0000 3548 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
                    23:20:19.0000 3548 Aha154x - ok
                    23:20:19.0015 3548 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
                    23:20:19.0015 3548 aic78u2 - ok
                    23:20:19.0015 3548 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
                    23:20:19.0031 3548 aic78xx - ok
                    23:20:19.0140 3548 ALCXWDM (c881453898eec64027274ebb3c8cbc0f) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
                    23:20:19.0171 3548 ALCXWDM - ok
                    23:20:19.0187 3548 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
                    23:20:19.0187 3548 AliIde - ok
                    23:20:19.0203 3548 alim1541 (f312b7cef21eff52fa23056b9d815fad) C:\WINDOWS\system32\DRIVERS\alim1541.sys
                    23:20:19.0203 3548 alim1541 - ok
                    23:20:19.0234 3548 amdagp (675c16a3c1f8482f85ee4a97fc0dde3d) C:\WINDOWS\system32\DRIVERS\amdagp.sys
                    23:20:19.0234 3548 amdagp - ok
                    23:20:19.0265 3548 AmdK8 (62271ff14baa810323ac816c5d355ba9) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                    23:20:19.0265 3548 AmdK8 - ok
                    23:20:19.0281 3548 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
                    23:20:19.0281 3548 amsint - ok
                    23:20:19.0312 3548 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
                    23:20:19.0312 3548 Arp1394 - ok
                    23:20:19.0343 3548 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
                    23:20:19.0359 3548 asc - ok
                    23:20:19.0375 3548 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
                    23:20:19.0375 3548 asc3350p - ok
                    23:20:19.0390 3548 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
                    23:20:19.0390 3548 asc3550 - ok
                    23:20:19.0437 3548 aswFsBlk (ad3bf0f023c8c446c5cae6c5db36c836) C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
                    23:20:19.0437 3548 aswFsBlk - ok
                    23:20:19.0453 3548 aswMon2 (a5e446ec41b884e93a540c162a06786d) C:\WINDOWS\system32\drivers\aswMon2.sys
                    23:20:19.0453 3548 aswMon2 - ok
                    23:20:19.0484 3548 aswRdr (da7083019bf5e47a07b9bd8ece812b47) C:\WINDOWS\system32\drivers\aswRdr.sys
                    23:20:19.0484 3548 aswRdr - ok
                    23:20:19.0515 3548 aswSP (c51a8309a1f07d936a22176553dfd6a0) C:\WINDOWS\system32\drivers\aswSP.sys
                    23:20:19.0515 3548 aswSP - ok
                    23:20:19.0531 3548 aswTdi (7353fa997054cc68ed26abcfd872bae9) C:\WINDOWS\system32\drivers\aswTdi.sys
                    23:20:19.0531 3548 aswTdi - ok
                    23:20:19.0562 3548 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
                    23:20:19.0562 3548 AsyncMac - ok
                    23:20:19.0609 3548 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
                    23:20:19.0609 3548 atapi - ok
                    23:20:19.0625 3548 Atdisk - ok
                    23:20:19.0671 3548 ati2mtag (03621f7f968ff63713943405deb777f9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
                    23:20:19.0687 3548 ati2mtag - ok
                    23:20:19.0703 3548 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
                    23:20:19.0703 3548 Atmarpc - ok
                    23:20:19.0921 3548 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
                    23:20:19.0921 3548 audstub - ok
                    23:20:20.0125 3548 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
                    23:20:20.0125 3548 Beep - ok
                    23:20:20.0156 3548 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
                    23:20:20.0156 3548 cbidf - ok
                    23:20:20.0171 3548 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
                    23:20:20.0171 3548 cbidf2k - ok
                    23:20:20.0203 3548 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
                    23:20:20.0203 3548 CCDECODE - ok
                    23:20:20.0234 3548 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
                    23:20:20.0234 3548 cd20xrnt - ok
                    23:20:20.0265 3548 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
                    23:20:20.0265 3548 Cdaudio - ok
                    23:20:20.0296 3548 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
                    23:20:20.0296 3548 Cdfs - ok
                    23:20:20.0312 3548 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
                    23:20:20.0312 3548 Cdrom - ok
                    23:20:20.0328 3548 Changer - ok
                    23:20:20.0375 3548 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
                    23:20:20.0375 3548 CmdIde - ok
                    23:20:20.0390 3548 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
                    23:20:20.0390 3548 Cpqarray - ok
                    23:20:20.0421 3548 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
                    23:20:20.0421 3548 dac2w2k - ok
                    23:20:20.0437 3548 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
                    23:20:20.0437 3548 dac960nt - ok
                    23:20:20.0453 3548 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
                    23:20:20.0453 3548 Disk - ok
                    23:20:20.0500 3548 dmboot (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
                    23:20:20.0500 3548 dmboot - ok
                    23:20:20.0531 3548 dmio (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
                    23:20:20.0531 3548 dmio - ok
                    23:20:20.0562 3548 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
                    23:20:20.0562 3548 dmload - ok
                    23:20:20.0593 3548 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
                    23:20:20.0593 3548 DMusic - ok
                    23:20:20.0625 3548 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
                    23:20:20.0625 3548 dpti2o - ok
                    23:20:20.0640 3548 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
                    23:20:20.0640 3548 drmkaud - ok
                    23:20:20.0671 3548 e4usbaw (3e1971e0f64fcf2fbe05ce4ab0132963) C:\WINDOWS\system32\DRIVERS\e4usbaw.sys
                    23:20:20.0671 3548 e4usbaw - ok
                    23:20:20.0703 3548 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
                    23:20:20.0703 3548 Fastfat - ok
                    23:20:20.0734 3548 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
                    23:20:20.0734 3548 Fdc - ok
                    23:20:20.0765 3548 Fips (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
                    23:20:20.0765 3548 Fips - ok
                    23:20:20.0781 3548 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
                    23:20:20.0781 3548 Flpydisk - ok
                    23:20:20.0828 3548 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
                    23:20:20.0828 3548 FltMgr - ok
                    23:20:20.0859 3548 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
                    23:20:20.0859 3548 fssfltr - ok
                    23:20:20.0890 3548 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
                    23:20:20.0890 3548 Fs_Rec - ok
                    23:20:20.0921 3548 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
                    23:20:20.0921 3548 Ftdisk - ok
                    23:20:20.0953 3548 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
                    23:20:20.0953 3548 GEARAspiWDM - ok
                    23:20:20.0984 3548 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
                    23:20:20.0984 3548 Gpc - ok
                    23:20:21.0031 3548 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
                    23:20:21.0031 3548 HidUsb - ok
                    23:20:21.0062 3548 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
                    23:20:21.0062 3548 hpn - ok
                    23:20:21.0109 3548 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
                    23:20:21.0109 3548 HTTP - ok
                    23:20:21.0125 3548 i2omgmt (8f09f91b5c91363b77bcd15599570f2c) C:\WINDOWS\system32\drivers\i2omgmt.sys
                    23:20:21.0125 3548 i2omgmt - ok
                    23:20:21.0140 3548 i2omp (ed6bf9e441fdea13292a6d30a64a24c3) C:\WINDOWS\system32\DRIVERS\i2omp.sys
                    23:20:21.0140 3548 i2omp - ok
                    23:20:21.0156 3548 i8042prt (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                    23:20:21.0156 3548 i8042prt - ok
                    23:20:21.0203 3548 IKANLOADER2 (1a03a7b28d12239a573dc20422c3068d) C:\WINDOWS\system32\Drivers\e4ldr.sys
                    23:20:21.0203 3548 IKANLOADER2 - ok
                    23:20:21.0218 3548 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
                    23:20:21.0218 3548 Imapi - ok
                    23:20:21.0250 3548 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
                    23:20:21.0250 3548 ini910u - ok
                    23:20:21.0281 3548 IntelIde (1367812f8a974e0c13a4888fa5e7ede6) C:\WINDOWS\system32\DRIVERS\intelide.sys
                    23:20:21.0281 3548 IntelIde - ok
                    23:20:21.0312 3548 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
                    23:20:21.0312 3548 Ip6Fw - ok
                    23:20:21.0328 3548 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
                    23:20:21.0328 3548 IpFilterDriver - ok
                    23:20:21.0359 3548 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
                    23:20:21.0359 3548 IpInIp - ok
                    23:20:21.0390 3548 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
                    23:20:21.0390 3548 IpNat - ok
                    23:20:21.0406 3548 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
                    23:20:21.0406 3548 IPSec - ok
                    23:20:21.0437 3548 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
                    23:20:21.0437 3548 IRENUM - ok
                    23:20:21.0484 3548 isapnp (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
                    23:20:21.0484 3548 isapnp - ok
                    23:20:21.0515 3548 Kbdclass (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                    23:20:21.0515 3548 Kbdclass - ok
                    23:20:21.0531 3548 kbdhid (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
                    23:20:21.0531 3548 kbdhid - ok
                    23:20:21.0562 3548 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
                    23:20:21.0562 3548 kmixer - ok
                    23:20:21.0593 3548 KSecDD (1be7cc2535d760ae4d481576eb789f24) C:\WINDOWS\system32\drivers\KSecDD.sys
                    23:20:21.0593 3548 KSecDD - ok
                    23:20:21.0625 3548 lbrtfdc - ok
                    23:20:21.0671 3548 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
                    23:20:21.0671 3548 mnmdd - ok
                    23:20:21.0703 3548 Modem (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
                    23:20:21.0703 3548 Modem - ok
                    23:20:21.0718 3548 Mouclass (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
                    23:20:21.0734 3548 Mouclass - ok
                    23:20:21.0750 3548 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
                    23:20:21.0750 3548 mouhid - ok
                    23:20:21.0765 3548 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
                    23:20:21.0765 3548 MountMgr - ok
                    23:20:21.0796 3548 MPE (55a9a7e6bb297bf0f5b144029dcb79cc) C:\WINDOWS\system32\DRIVERS\MPE.sys
                    23:20:21.0796 3548 MPE - ok
                    23:20:21.0828 3548 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
                    23:20:21.0828 3548 mraid35x - ok
                    23:20:21.0859 3548 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
                    23:20:21.0859 3548 MRxDAV - ok
                    23:20:21.0906 3548 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                    23:20:21.0906 3548 MRxSmb - ok
                    23:20:21.0937 3548 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
                    23:20:21.0937 3548 Msfs - ok
                    23:20:21.0968 3548 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
                    23:20:21.0968 3548 MSKSSRV - ok
                    23:20:21.0984 3548 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
                    23:20:21.0984 3548 MSPCLOCK - ok
                    23:20:22.0000 3548 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
                    23:20:22.0000 3548 MSPQM - ok
                    23:20:22.0031 3548 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
                    23:20:22.0031 3548 mssmbios - ok
                    23:20:22.0062 3548 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
                    23:20:22.0062 3548 MSTEE - ok
                    23:20:22.0093 3548 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
                    23:20:22.0093 3548 Mup - ok
                    23:20:22.0109 3548 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
                    23:20:22.0109 3548 NABTSFEC - ok
                    23:20:22.0140 3548 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
                    23:20:22.0140 3548 NDIS - ok
                    23:20:22.0171 3548 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
                    23:20:22.0171 3548 NdisIP - ok
                    23:20:22.0203 3548 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
                    23:20:22.0203 3548 NdisTapi - ok
                    23:20:22.0218 3548 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
                    23:20:22.0218 3548 Ndisuio - ok
                    23:20:22.0250 3548 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
                    23:20:22.0250 3548 NdisWan - ok
                    23:20:22.0281 3548 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
                    23:20:22.0281 3548 NDProxy - ok
                    23:20:22.0312 3548 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
                    23:20:22.0312 3548 NetBIOS - ok
                    23:20:22.0343 3548 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
                    23:20:22.0343 3548 NetBT - ok
                    23:20:22.0375 3548 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS\nic1394.sys
                    23:20:22.0390 3548 NIC1394 - ok
                    23:20:22.0406 3548 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
                    23:20:22.0406 3548 Npfs - ok
                    23:20:22.0453 3548 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys
                    23:20:22.0468 3548 Ntfs - ok
                    23:20:22.0546 3548 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
                    23:20:22.0546 3548 Null - ok
                    23:20:22.0562 3548 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
                    23:20:22.0562 3548 NwlnkFlt - ok
                    23:20:22.0593 3548 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
                    23:20:22.0593 3548 NwlnkFwd - ok
                    23:20:22.0625 3548 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
                    23:20:22.0625 3548 ohci1394 - ok
                    23:20:22.0640 3548 Parport (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys
                    23:20:22.0640 3548 Parport - ok
                    23:20:22.0671 3548 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
                    23:20:22.0671 3548 PartMgr - ok
                    23:20:22.0687 3548 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
                    23:20:22.0687 3548 ParVdm - ok
                    23:20:22.0703 3548 PCAMPR5 - ok
                    23:20:22.0734 3548 PCANDIS5 (ceef86cb35abe95c40a88784f5b631ad) C:\WINDOWS\system32\PCANDIS5.SYS
                    23:20:22.0734 3548 PCANDIS5 - ok
                    23:20:22.0765 3548 PCI (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
                    23:20:22.0765 3548 PCI - ok
                    23:20:22.0781 3548 PCIDump - ok
                    23:20:22.0812 3548 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
                    23:20:22.0812 3548 PCIIde - ok
                    23:20:22.0843 3548 Pcmcia (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
                    23:20:22.0859 3548 Pcmcia - ok
                    23:20:22.0875 3548 PDCOMP - ok
                    23:20:22.0890 3548 PDFRAME - ok
                    23:20:22.0906 3548 PDRELI - ok
                    23:20:22.0921 3548 PDRFRAME - ok
                    23:20:22.0937 3548 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
                    23:20:22.0937 3548 perc2 - ok
                    23:20:22.0953 3548 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
                    23:20:22.0953 3548 perc2hib - ok
                    23:20:23.0000 3548 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
                    23:20:23.0000 3548 PptpMiniport - ok
                    23:20:23.0031 3548 Processor (f480712b761e538bc8e44ede60f3a3c3) C:\WINDOWS\system32\DRIVERS\processr.sys
                    23:20:23.0031 3548 Processor - ok
                    23:20:23.0062 3548 prodrv06 (5ac2dcbbceb5534bfcd88c2670993f3c) C:\WINDOWS\System32\drivers\prodrv06.sys
                    23:20:23.0062 3548 prodrv06 - ok
                    23:20:23.0093 3548 prohlp02 (7a78181cc947cdaa0902e113cfd01e93) C:\WINDOWS\system32\drivers\prohlp02.sys
                    23:20:23.0093 3548 prohlp02 - ok
                    23:20:23.0109 3548 prosync1 (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
                    23:20:23.0109 3548 prosync1 - ok
                    23:20:23.0140 3548 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
                    23:20:23.0140 3548 PSched - ok
                    23:20:23.0156 3548 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
                    23:20:23.0156 3548 Ptilink - ok
                    23:20:23.0203 3548 PxHelp20 (f3a3b00666a40c6914b7b2864f7dc1c0) C:\WINDOWS\system32\Drivers\PxHelp20.sys
                    23:20:23.0203 3548 PxHelp20 - ok
                    23:20:23.0203 3548 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
                    23:20:23.0203 3548 ql1080 - ok
                    23:20:23.0234 3548 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
                    23:20:23.0234 3548 Ql10wnt - ok
                    23:20:23.0250 3548 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
                    23:20:23.0250 3548 ql12160 - ok
                    23:20:23.0296 3548 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
                    23:20:23.0296 3548 ql1240 - ok
                    23:20:23.0312 3548 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
                    23:20:23.0312 3548 ql1280 - ok
                    23:20:23.0328 3548 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
                    23:20:23.0328 3548 RasAcd - ok
                    23:20:23.0343 3548 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
                    23:20:23.0343 3548 Rasl2tp - ok
                    23:20:23.0359 3548 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
                    23:20:23.0359 3548 RasPppoe - ok
                    23:20:23.0375 3548 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
                    23:20:23.0375 3548 Raspti - ok
                    23:20:23.0515 3548 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
                    23:20:23.0515 3548 Rdbss - ok
                    23:20:23.0562 3548 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                    23:20:23.0562 3548 RDPCDD - ok
                    23:20:23.0609 3548 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
                    23:20:23.0609 3548 rdpdr - ok
                    23:20:23.0640 3548 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
                    23:20:23.0640 3548 RDPWD - ok
                    23:20:23.0671 3548 redbook (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERS\redbook.sys
                    23:20:23.0671 3548 redbook - ok
                    23:20:23.0703 3548 RTL8023xp (4a0ae7891fcf74acc848b109294cb80f) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
                    23:20:23.0703 3548 RTL8023xp - ok
                    23:20:23.0750 3548 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
                    23:20:23.0750 3548 Secdrv - ok
                    23:20:23.0781 3548 Serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
                    23:20:23.0781 3548 Serenum - ok
                    23:20:23.0796 3548 Serial (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys
                    23:20:23.0796 3548 Serial - ok
                    23:20:23.0859 3548 sfhlp01 (91f99f3e331e24c438819a38a1ad049c) C:\WINDOWS\system32\drivers\sfhlp01.sys
                    23:20:23.0859 3548 sfhlp01 - ok
                    23:20:23.0875 3548 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
                    23:20:23.0875 3548 Sfloppy - ok
                    23:20:23.0890 3548 Simbad - ok
                    23:20:23.0921 3548 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
                    23:20:23.0921 3548 sisagp - ok
                    23:20:23.0953 3548 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
                    23:20:23.0953 3548 SLIP - ok
                    23:20:23.0984 3548 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
                    23:20:23.0984 3548 Sparrow - ok
                    23:20:24.0000 3548 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
                    23:20:24.0000 3548 splitter - ok
                    23:20:24.0031 3548 sr (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
                    23:20:24.0031 3548 sr - ok
                    23:20:24.0093 3548 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
                    23:20:24.0093 3548 Srv - ok
                    23:20:24.0140 3548 sscdbus (d6870895fe46a464a19141440eb6cc1e) C:\WINDOWS\system32\DRIVERS\sscdbus.sys
                    23:20:24.0140 3548 sscdbus - ok
                    23:20:24.0156 3548 sscdmdfl (0fe167362e4689b716cdc8d93adedda8) C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys
                    23:20:24.0156 3548 sscdmdfl - ok
                    23:20:24.0187 3548 sscdmdm (55a15707e32b6709242ad127e62ca55a) C:\WINDOWS\system32\DRIVERS\sscdmdm.sys
                    23:20:24.0187 3548 sscdmdm - ok
                    23:20:24.0234 3548 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
                    23:20:24.0234 3548 StarOpen - ok
                    1. fab1003 Auteur
                      le rapport de gmer ne se sauvegarde pas tout seul, il faut que je lance le scan et que je clique sur save au fur et a mesure de l'analyse...
                      1. verni29 Contributeur sécurité
                        Re,

                        Non, Quand tu lances gmer, il y a une analyse rapide.
                        Clique sur Save une fois affiché les résultats.
                        Tu auras le rapport.

                        A+
                        1. fab1003 Auteur
                          Verni,
                          voici le rapport option 4 roguekiller:
                          RogueKiller V6.2.0 [12/12/2011] par Tigzy
                          mail: tigzyRK<at>gmail<dot>com
                          Remontees: https://www.luanagames.com/index.fr.html
                          Blog: http://tigzyrk.blogspot.com

                          Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version
                          Demarrage : Mode normal
                          Utilisateur: Famille Venet [Droits d'admin]
                          Mode: Proxy RAZ -- Date : 20/12/2011 23:37:27

                          ¤¤¤ Processus malicieux: 0 ¤¤¤

                          ¤¤¤ Driver: [LOADED] ¤¤¤

                          ¤¤¤ Entrees de registre: 1 ¤¤¤
                          [PROXY IE] HKCU\[...]\Internet Settings : ProxyServer () -> DELETED

                          Termine : << RKreport[3].txt >>
                          RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

                          -------------------------------------------------------------------------------------------------------

                          Voici le rapport gmer:

                          GMER 1.0.15.15641 - http://www.gmer.net
                          Rootkit scan 2011-12-20 23:59:44
                          Windows 5.1.2600 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3200826AS rev.3.03
                          Running: st88m4rd.exe; Driver: D:\DOCUME~1\FAMILL~1\LOCALS~1\Temp\kwddikoc.sys

                          ---- System - GMER 1.0.15 ----

                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xF26E1576]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xF26E1432]
                          SSDT \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys ZwCreateSection [0xF7A96700]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteValueKey [0xF26E1910]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDuplicateObject [0xF26E100A]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenKey [0xF26E150C]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenProcess [0xF26E0F4A]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenThread [0xF26E0FAE]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwQueryValueKey [0xF26E162C]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRestoreKey [0xF26E15EC]
                          SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwSetValueKey [0xF26E176C]

                          ---- Kernel code sections - GMER 1.0.15 ----

                          .text afd.sys F2794000 24 Bytes [79, F2, 6A, 00, FF, 73, 0C, ...]
                          .text afd.sys F2794019 59 Bytes [C1, C1, E9, 02, F3, A5, 8B, ...]
                          .text afd.sys F2794055 19 Bytes [C0, EB, 3D, 8B, 45, DC, 80, ...]
                          .text afd.sys F2794069 123 Bytes [EB, 45, C7, 45, E4, 0D, 00, ...]
                          .text afd.sys F27940E5 24 Bytes [8B, DA, 8B, F1, 89, 75, E0, ...]
                          .text ...
                          ? C:\WINDOWS\System32\drivers\afd.sys suspicious PE modification
                          ? C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys Le fichier spécifié est introuvable. !

                          ---- User code sections - GMER 1.0.15 ----

                          .text C:\WINDOWS\System32\svchost.exe[908] ntdll.dll!NtProtectVirtualMemory 7C91D6EE 5 Bytes JMP 00D9000A
                          .text C:\WINDOWS\System32\svchost.exe[908] ntdll.dll!NtWriteVirtualMemory 7C91DFAE 5 Bytes JMP 00DA000A
                          .text C:\WINDOWS\System32\svchost.exe[908] ntdll.dll!KiUserExceptionDispatcher 7C91E47C 5 Bytes JMP 00D8000C
                          .text C:\WINDOWS\System32\ping.exe[3920] ntdll.dll!NtCreateProcess 7C91D14E 5 Bytes JMP 00B4000A
                          .text C:\WINDOWS\System32\ping.exe[3920] ntdll.dll!NtCreateProcessEx 7C91D15E 5 Bytes JMP 00B5000A
                          .text C:\WINDOWS\System32\ping.exe[3920] ntdll.dll!NtProtectVirtualMemory 7C91D6EE 5 Bytes JMP 009F000A
                          .text C:\WINDOWS\System32\ping.exe[3920] ntdll.dll!NtWriteVirtualMemory 7C91DFAE 5 Bytes JMP 00A0000A
                          .text C:\WINDOWS\System32\ping.exe[3920] ntdll.dll!KiUserExceptionDispatcher 7C91E47C 5 Bytes JMP 009E000C
                          .text C:\WINDOWS\System32\ping.exe[3920] USER32.dll!GetCursorPos 7E39BD76 5 Bytes JMP 00B8000A
                          .text C:\WINDOWS\System32\ping.exe[3920] USER32.dll!WindowFromPoint 7E39BD8E 5 Bytes JMP 00B9000A
                          .text C:\WINDOWS\System32\ping.exe[3920] USER32.dll!GetForegroundWindow 7E39BE4B 5 Bytes JMP 00BA000A
                          .text C:\WINDOWS\System32\ping.exe[3920] ole32.dll!CoCreateInstance 774BFAC3 5 Bytes JMP 00B7000A

                          ---- User IAT/EAT - GMER 1.0.15 ----

                          IAT C:\WINDOWS\system32\services.exe[600] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00380002
                          IAT C:\WINDOWS\system32\services.exe[600] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW] 00380000

                          ---- Devices - GMER 1.0.15 ----

                          Device Ntfs.sys (NT File System Driver/Microsoft Corporation)
                          Device Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation)

                          AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
                          AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

                          Device \Driver\prodrv06 \Device\ProDrv06 E185D008
                          Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort0 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort1 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort2 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort3 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort4 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdePort5 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\atapi \Device\Ide\IdeDeviceP5T0L0-14 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
                          Device \Driver\prohlp02 \Device\ProHlp02 E158E320

                          AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
                          AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

                          Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)

                          AttachedDevice fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

                          ---- Modules - GMER 1.0.15 ----

                          Module (noname) (*** hidden *** ) F27B5000-F27CF000 (106496 bytes)

                          ----------------------------------------------------------------------------------------------------

                          Voici les liens pour les 2 fichiers text via OTL :
                          https://www.cjoint.com/?ALvacdFHXde (OTL)
                          https://www.cjoint.com/?ALvacMOO5WV (Extras)
                          1. verni29 Contributeur sécurité
                            fab1003,

                            OK, merci pour les rapports.
                            celui de gmer est incomplet.
                            Si tu as bien enregistré le rapport, tu peux le poster en utilisant le site.

                            Il se fait tard.
                            Je regarderais les rapports demain matin.

                            A+
                            1. fab1003 Auteur
                              ok en tout cas, je te remercie sincèrement, ça a l'air d'avoir supprimé quelques cochonneries il me semble !!
                              Merci beaucoup.

                              A+
                              1. verni29 Contributeur sécurité
                                Re,

                                Télécharge le fichier xp_exe.reg à l'adresse suivant :
                                http://www.libellules.ch/assoc/xp_exe.reg

                                Il faut l'enregistrer sur ton bureau.
                                Click droit sur le fichier et choisis fusionner.

                                ----------------------------------------------------------------------

                                Relance OTL.exe.

                                * Sous l'onglet Personnalisation en bas de la fenêtre, copie-colle le texte suivant : 

                                :OTL
DRV - File not found [Kernel | Unknown | Running] --  -- (esgiguard)
IE - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = https://fr.ask.com/?o=14909&l=dis
FF - prefs.js..browser.startup.homepage: "http://www.searcheo.fr/france"
FF - prefs.js..keyword.URL: "http://www.searcheo.fr/france?search&q="
FF - prefs.js..browser.search.selectedEngine: "Searcheo"
FF - prefs.js..browser.startup.homepage: "http://www.searcheo.fr/france"
FF - prefs.js..keyword.URL: "http://www.searcheo.fr/france?search&q="
FF - prefs.js..browser.search.selectedEngine: "Searcheo"
FF - prefs.js..browser.startup.homepage: "http://www.mystart101.com/"
O2 - BHO: (Facetheme) - {de4e75d3-60aa-4f02-a0e4-c8a40576574c} - C:\Program Files\Object\bho_project.dll File not found
O3 - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe File not found
O4 - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006..\Run: [WinUsr] C:\Program Files\Winsudate\gibusr.exe File not found
O37 - HKU\.DEFAULT\...exe [@ = a6L] -- "D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "%1" %* (Microsoft Corporation)
O37 - HKU\S-1-5-18\...exe [@ = a6L] -- "D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe" -a "%1" %* (Microsoft Corporation)
O37 - HKU\S-1-5-21-1486768304-2237576235-2102206337-1006\...exe [@ = exefile] -- Reg Error: Key error. File not found
[2011/12/20 19:55:30 | 000,000,000 | ---D | C] -- C:\sh4ldr
[2011/12/20 20:56:46 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Démarrer\Programmes\GridinSoft
[2011/12/20 20:56:40 | 000,000,000 | ---D | C] -- C:\Program Files\GridinSoft Trojan Killer
[2011/12/19 21:54:22 | 000,009,776 | -HS- | C] () -- D:\Documents and Settings\Famille Venet\Local Settings\Application Data\985553392
[2011/12/19 21:54:22 | 000,009,776 | -HS- | C] () -- D:\Documents and Settings\All Users\Application Data\985553392
[2011/12/19 21:36:16 | 000,009,782 | -HS- | C] () -- D:\Documents and Settings\Famille Venet\Local Settings\Application Data\127190944
[2011/12/19 18:49:34 | 000,010,218 | -HS- | C] () -- D:\Documents and Settings\Famille Venet\Local Settings\Application Data\7vu435atb5u5500a328c58y8ur5m0mlpq00jjo02n30
[2011/12/19 18:49:34 | 000,009,782 | -HS- | C] () -- D:\Documents and Settings\All Users\Application Data\127190944
[2011/12/19 17:10:35 | 000,010,218 | -HS- | C] () -- D:\Documents and Settings\All Users\Application Data\7vu435atb5u5500a328c58y8ur5m0mlpq00jjo02n30
[2011/12/19 17:10:35 | 000,009,764 | -HS- | C] () -- D:\Documents and Settings\NetworkService\Local Settings\Application Data\7vu435atb5u5500a328c58y8ur5m0mlpq00jjo02n30
[2011/11/22 21:12:44 | 000,004,215 | ---- | C] () -- D:\Documents and Settings\Famille Venet\Local Settings\Application Data\bfjwancf.dat
[2007/07/08 11:30:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Account.1883          (Retrieved after unexpected restart.)\Application Data\WinAntiSpyware 2006
[2006/12/01 20:43:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Account.5145          (Retrieved after unexpected restart.)\Application Data\DriveCleaner 2006 Free
[2010/12/15 15:30:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Famille Venet\Application Data\Uniblue
@Alternate Data Stream - 106 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:CAAA7DD7

:Files
C:\Program Files\Enigma Software Group\SpyHunter
D:\Documents and Settings\NetworkService\Local Settings\Application Data\gnq.exe 
d:\documents and settings\famille venet\local settings\application data\bfjwancf.exe

:Commands
[Emptytemp]


                                * Puis clique sur le bouton Correction en haut de la fenêtre.
                                * Laisse le programme travailler, le PC va redémarrer.

                                Tu verras un log s'ouvrir après le fix (c'est le log qui montre si la suppression a réussi).
                                sauvegarde-le sur ton Bureau et poste-le après redémarrage.

                                Note : Si tu ne le trouves pas, c'est un fichier log dans C:\_OTL\MovedFiles
                                Regarde suivant la date : mmjjaaaa_xxxxxxxx.log

                                A+
                                1. fab1003
                                  bonjour, le programme a terminé, le pc est en train de redémarrer, mais au 1er redémarrage, il m'a fait un p'tit écran bleu bien sympa, je l'ai ré-éteind, là il a l'air de redémarrer..
                                  Je t'envoie la suite dès qu'il se rallume
                                  2. fab1003 Auteur
                                    je suis désolé mais je ne trouve pas le fichier que vous me demandez...
                                    • 1
                                    • 2
                                    • 3

                                    Discussions similaires

                                    Security boot fail lors du démarrage
                                    Steu

                                    5 réponses
                                    Comment retirer le SECURE BOOT ?
                                    Elparigo60

                                    10 réponses
                                    Security Boot Fail Windows 10 Acer
                                    benjamin5800

                                    22 réponses