Infection par Sirefef / Gendarmerie nationale

Re

* Télécharger sur le bureau RogueKiller(par Tigzy)
* Quitter tous les programmes en cours
* Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur
* Sinon lancer simplement RogueKiller.exe
* Lorsque demandé, taper 1 et valider
* Un rapport à dû s'ouvrir (RKreport.txt se trouve également à côté de l'exécutable), donner son contenu à la personne qui vous aide
* Si le programme a été bloqué, ne pas hésiter a essayé plusieurs fois. Si vraiment cela ne passe pas (ça peut arriver), le renommer en winlogon.exe

@+

Bonsoir

Télécharge TDSSKiller

*Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
* Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.

Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

Poste moi son rapport à l'issue; merci

@+

Bonsoir Guillaume,

Visiblement TDSSKiller n'a rien trouvé de suspect.
Voici le rapport :

17:45:10.0044 5740 TDSS rootkit removing tool 2.6.23.0 Dec 13 2011 10:39:31
17:45:10.0232 5740 ============================================================
17:45:10.0232 5740 Current date / time: 2011/12/21 17:45:10.0232
17:45:10.0232 5740 SystemInfo:
17:45:10.0232 5740
17:45:10.0232 5740 OS Version: 5.1.2600 ServicePack: 3.0
17:45:10.0232 5740 Product type: Workstation
17:45:10.0232 5740 ComputerName: VINCENTMPORTABL
17:45:10.0232 5740 UserName: vmacabies
17:45:10.0232 5740 Windows directory: C:\WINDOWS
17:45:10.0232 5740 System windows directory: C:\WINDOWS
17:45:10.0232 5740 Processor architecture: Intel x86
17:45:10.0232 5740 Number of processors: 2
17:45:10.0232 5740 Page size: 0x1000
17:45:10.0232 5740 Boot type: Normal boot
17:45:10.0232 5740 ============================================================
17:45:10.0513 5740 Initialize success
17:45:11.0091 3968 ============================================================
17:45:11.0091 3968 Scan started
17:45:11.0091 3968 Mode: Manual;
17:45:11.0091 3968 ============================================================
17:45:11.0732 3968 Abiosdsk - ok
17:45:11.0794 3968 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
17:45:11.0794 3968 abp480n5 - ok
17:45:11.0841 3968 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
17:45:11.0841 3968 ACPI - ok
17:45:11.0872 3968 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
17:45:11.0888 3968 ACPIEC - ok
17:45:11.0919 3968 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
17:45:11.0919 3968 adpu160m - ok
17:45:12.0122 3968 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
17:45:12.0122 3968 aec - ok
17:45:12.0200 3968 AESTAud (20f078136f3bdc4c0405c0527b769303) C:\WINDOWS\system32\drivers\AESTAud.sys
17:45:12.0200 3968 AESTAud - ok
17:45:12.0310 3968 AFD (45e7b923bc9d8cf14cce9bdd9e17b409) C:\WINDOWS\System32\drivers\afd.sys
17:45:12.0310 3968 AFD - ok
17:45:12.0372 3968 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
17:45:12.0372 3968 agp440 - ok
17:45:12.0388 3968 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
17:45:12.0388 3968 agpCPQ - ok
17:45:12.0403 3968 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
17:45:12.0403 3968 Aha154x - ok
17:45:12.0419 3968 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
17:45:12.0419 3968 aic78u2 - ok
17:45:12.0435 3968 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
17:45:12.0450 3968 aic78xx - ok
17:45:12.0497 3968 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
17:45:12.0497 3968 AliIde - ok
17:45:12.0575 3968 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
17:45:12.0575 3968 alim1541 - ok
17:45:12.0591 3968 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
17:45:12.0591 3968 amdagp - ok
17:45:12.0622 3968 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
17:45:12.0622 3968 amsint - ok
17:45:12.0653 3968 ApfiltrService (b83f9da84f7079451c1c6a4a2f140920) C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
17:45:12.0669 3968 ApfiltrService - ok
17:45:12.0716 3968 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
17:45:12.0716 3968 Arp1394 - ok
17:45:12.0763 3968 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
17:45:12.0763 3968 asc - ok
17:45:12.0794 3968 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
17:45:12.0794 3968 asc3350p - ok
17:45:12.0856 3968 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
17:45:12.0856 3968 asc3550 - ok
17:45:12.0935 3968 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
17:45:12.0935 3968 AsyncMac - ok
17:45:13.0028 3968 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
17:45:13.0028 3968 atapi - ok
17:45:13.0153 3968 Atdisk - ok
17:45:13.0200 3968 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
17:45:13.0216 3968 Atmarpc - ok
17:45:13.0247 3968 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
17:45:13.0294 3968 audstub - ok
17:45:13.0341 3968 b57w2k (58911390115465bf6d8048f21f48655a) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
17:45:13.0341 3968 b57w2k - ok
17:45:13.0450 3968 Bacdl (1ed060440ce818f8a46f65100e5f9319) C:\WINDOWS\system32\DRIVERS\bacdl.sys
17:45:13.0450 3968 Bacdl - ok
17:45:13.0544 3968 BASFND (5c68ac6f3e5b3e6d6a78e97d05e42c3a) C:\Program Files\Broadcom\MgmtAgent\BASFND.sys
17:45:13.0544 3968 BASFND - ok
17:45:13.0669 3968 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
17:45:13.0669 3968 Beep - ok
17:45:13.0731 3968 Blfp (9b53d428de0a2566a03499d7aa48dec4) C:\WINDOWS\system32\DRIVERS\baspxp32.sys
17:45:13.0731 3968 Blfp - ok
17:45:13.0794 3968 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
17:45:13.0794 3968 cbidf - ok
17:45:13.0872 3968 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
17:45:13.0872 3968 cbidf2k - ok
17:45:13.0888 3968 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
17:45:13.0888 3968 cd20xrnt - ok
17:45:13.0934 3968 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
17:45:13.0934 3968 Cdaudio - ok
17:45:13.0966 3968 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
17:45:13.0966 3968 Cdfs - ok
17:45:13.0981 3968 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
17:45:13.0997 3968 Cdrom - ok
17:45:13.0997 3968 Changer - ok
17:45:14.0200 3968 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
17:45:14.0200 3968 CmBatt - ok
17:45:14.0247 3968 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
17:45:14.0247 3968 CmdIde - ok
17:45:14.0263 3968 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
17:45:14.0278 3968 Compbatt - ok
17:45:14.0294 3968 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
17:45:14.0294 3968 Cpqarray - ok
17:45:14.0325 3968 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
17:45:14.0325 3968 dac2w2k - ok
17:45:14.0341 3968 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
17:45:14.0341 3968 dac960nt - ok
17:45:14.0388 3968 DbgMsg (5d69c704a11a037f05270ee98106e12f) C:\WINDOWS\System32\Drivers\DbgMsg.sys
17:45:14.0388 3968 DbgMsg - ok
17:45:14.0513 3968 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
17:45:14.0513 3968 Disk - ok
17:45:14.0559 3968 DLABMFSM (a0500678a33802d8954153839301d539) C:\WINDOWS\system32\Drivers\DLABMFSM.SYS
17:45:14.0559 3968 DLABMFSM - ok
17:45:14.0591 3968 DLABOIOM (b8d2f68cac54d46281399f9092644794) C:\WINDOWS\system32\Drivers\DLABOIOM.SYS
17:45:14.0591 3968 DLABOIOM - ok
17:45:14.0622 3968 DLACDBHM (0ee93ab799d1cb4ec90b36f3612fe907) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
17:45:14.0622 3968 DLACDBHM - ok
17:45:14.0716 3968 DLADResM (86dfc5bae3878cfabde1430475bd52a7) C:\WINDOWS\system32\Drivers\DLADResM.SYS
17:45:14.0716 3968 DLADResM - ok
17:45:14.0747 3968 DLAIFS_M (766a148235be1c0039c974446e4c0edc) C:\WINDOWS\system32\Drivers\DLAIFS_M.SYS
17:45:14.0747 3968 DLAIFS_M - ok
17:45:14.0794 3968 DLAOPIOM (38267cca177354f1c64450a43a4f7627) C:\WINDOWS\system32\Drivers\DLAOPIOM.SYS
17:45:14.0794 3968 DLAOPIOM - ok
17:45:14.0809 3968 DLAPoolM (fd363369fd313b46b5aeab1a688b52e9) C:\WINDOWS\system32\Drivers\DLAPoolM.SYS
17:45:14.0825 3968 DLAPoolM - ok
17:45:14.0841 3968 DLARTL_M (336ae18f0912ef4fbe5518849e004d74) C:\WINDOWS\system32\Drivers\DLARTL_M.SYS
17:45:14.0856 3968 DLARTL_M - ok
17:45:14.0950 3968 DLAUDFAM (fd85f682c1cc2a7ca878c7a448e6d87e) C:\WINDOWS\system32\Drivers\DLAUDFAM.SYS
17:45:14.0966 3968 DLAUDFAM - ok
17:45:14.0981 3968 DLAUDF_M (af389ce587b6bf5bbdcd6f6abe5eabc0) C:\WINDOWS\system32\Drivers\DLAUDF_M.SYS
17:45:14.0981 3968 DLAUDF_M - ok
17:45:15.0137 3968 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
17:45:15.0137 3968 dmboot - ok
17:45:15.0262 3968 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
17:45:15.0262 3968 dmio - ok
17:45:15.0262 3968 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
17:45:15.0294 3968 dmload - ok
17:45:15.0325 3968 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
17:45:15.0325 3968 DMusic - ok
17:45:15.0387 3968 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
17:45:15.0387 3968 dpti2o - ok
17:45:15.0466 3968 driverhardwarev2 (a694d8db6d360a3bbb0bd1517f1c1aee) C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys
17:45:15.0466 3968 driverhardwarev2 - ok
17:45:15.0559 3968 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
17:45:15.0559 3968 drmkaud - ok
17:45:15.0637 3968 DRVMCDB (5d3b71bb2bb0009d65d290e2ef374bd3) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
17:45:15.0637 3968 DRVMCDB - ok
17:45:15.0684 3968 DRVNDDM (c591ba9f96f40a1fd6494dafdcd17185) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
17:45:15.0684 3968 DRVNDDM - ok
17:45:15.0778 3968 eamon (d42dd9021acd47683b33adf21bca49aa) C:\WINDOWS\system32\DRIVERS\eamon.sys
17:45:15.0778 3968 eamon - ok
17:45:15.0825 3968 ehdrv (fe7824239d132ad9ebd8645fe1199b30) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
17:45:15.0841 3968 ehdrv - ok
17:45:15.0887 3968 epfwtdir (aa0667eb9a92414abb784c101a6c7fec) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
17:45:15.0887 3968 epfwtdir - ok
17:45:16.0012 3968 EuMusDesignVirtualAudioCableWdm (0531fc85e96822d60d3e41f30f075fc2) C:\WINDOWS\system32\DRIVERS\PC2TVAudio.sys
17:45:16.0012 3968 EuMusDesignVirtualAudioCableWdm - ok
17:45:16.0184 3968 EverestDriver - ok
17:45:16.0465 3968 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
17:45:16.0512 3968 Fastfat - ok
17:45:16.0590 3968 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
17:45:16.0590 3968 Fdc - ok
17:45:16.0622 3968 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
17:45:16.0637 3968 Fips - ok
17:45:16.0747 3968 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
17:45:16.0747 3968 Flpydisk - ok
17:45:16.0778 3968 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
17:45:16.0794 3968 FltMgr - ok
17:45:16.0840 3968 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
17:45:16.0840 3968 Fs_Rec - ok
17:45:16.0903 3968 FTD2XX (f13c4d9f62324d810b279c370a7a7ffc) C:\WINDOWS\system32\Drivers\FTD2XX.sys
17:45:16.0903 3968 FTD2XX - ok
17:45:17.0012 3968 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
17:45:17.0012 3968 Ftdisk - ok
17:45:17.0059 3968 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
17:45:17.0075 3968 GEARAspiWDM - ok
17:45:17.0122 3968 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
17:45:17.0122 3968 Gpc - ok
17:45:17.0309 3968 hcmon (51fa91bb463b15fd8eacd5045c3f2fa6) C:\WINDOWS\system32\drivers\hcmon.sys
17:45:17.0309 3968 hcmon - ok
17:45:17.0356 3968 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
17:45:17.0372 3968 HDAudBus - ok
17:45:17.0434 3968 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
17:45:17.0434 3968 hidusb - ok
17:45:17.0512 3968 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
17:45:17.0512 3968 hpn - ok
17:45:17.0575 3968 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
17:45:17.0575 3968 HTTP - ok
17:45:17.0653 3968 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
17:45:17.0653 3968 i2omgmt - ok
17:45:17.0747 3968 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
17:45:17.0809 3968 i2omp - ok
17:45:17.0856 3968 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
17:45:17.0856 3968 i8042prt - ok
17:45:18.0090 3968 ialm (4f3139829f1ac202ff0d29c2fd6c15b6) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
17:45:18.0137 3968 ialm - ok
17:45:18.0247 3968 iaStor (692830b048aacd7e0d6ededf098acc01) C:\WINDOWS\system32\drivers\iaStor.sys
17:45:18.0247 3968 iaStor - ok
17:45:18.0309 3968 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
17:45:18.0309 3968 Imapi - ok
17:45:18.0356 3968 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
17:45:18.0356 3968 ini910u - ok
17:45:18.0403 3968 IntcHdmiAddService (64c301d73db18ebdc8680ca82d82af2d) C:\WINDOWS\system32\drivers\IntcHdmi.sys
17:45:18.0403 3968 IntcHdmiAddService - ok
17:45:18.0575 3968 IntelIde (4b6da2f0a4095857a9e3f3697399d575) C:\WINDOWS\system32\DRIVERS\intelide.sys
17:45:18.0575 3968 IntelIde - ok
17:45:18.0668 3968 intelppm (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
17:45:18.0668 3968 intelppm - ok
17:45:18.0918 3968 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
17:45:19.0012 3968 Ip6Fw - ok
17:45:19.0325 3968 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
17:45:19.0325 3968 IpFilterDriver - ok
17:45:19.0590 3968 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
17:45:19.0590 3968 IpInIp - ok
17:45:19.0903 3968 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
17:45:19.0903 3968 IpNat - ok
17:45:20.0184 3968 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
17:45:20.0184 3968 IPSec - ok
17:45:20.0309 3968 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
17:45:20.0324 3968 irda - ok
17:45:20.0356 3968 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
17:45:20.0371 3968 IRENUM - ok
17:45:20.0434 3968 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
17:45:20.0434 3968 isapnp - ok
17:45:20.0543 3968 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
17:45:20.0543 3968 Kbdclass - ok
17:45:20.0590 3968 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
17:45:20.0590 3968 kbdhid - ok
17:45:20.0637 3968 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
17:45:20.0653 3968 kmixer - ok
17:45:20.0715 3968 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
17:45:20.0715 3968 KSecDD - ok
17:45:20.0824 3968 lbrtfdc - ok
17:45:20.0918 3968 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
17:45:20.0918 3968 mnmdd - ok
17:45:20.0949 3968 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
17:45:20.0965 3968 Modem - ok
17:45:20.0981 3968 MosIrUsb (5bbe28f4188e98ebf8b7bcd9f30caa5b) C:\WINDOWS\system32\DRIVERS\MosIrUsb.sys
17:45:20.0996 3968 MosIrUsb - ok
17:45:21.0106 3968 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
17:45:21.0106 3968 Mouclass - ok
17:45:21.0168 3968 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
17:45:21.0168 3968 mouhid - ok
17:45:21.0199 3968 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
17:45:21.0199 3968 MountMgr - ok
17:45:21.0324 3968 MpKsl4114e6e5 - ok
17:45:21.0324 3968 MpKslbfa607e2 - ok
17:45:21.0340 3968 MpKsld9ff6ae9 - ok
17:45:21.0449 3968 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
17:45:21.0449 3968 mraid35x - ok
17:45:21.0527 3968 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
17:45:21.0527 3968 MRxDAV - ok
17:45:21.0590 3968 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
17:45:21.0590 3968 MRxSmb - ok
17:45:21.0731 3968 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
17:45:21.0731 3968 Msfs - ok
17:45:21.0777 3968 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
17:45:21.0777 3968 MSKSSRV - ok
17:45:21.0809 3968 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
17:45:21.0809 3968 MSPCLOCK - ok
17:45:21.0824 3968 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
17:45:21.0824 3968 MSPQM - ok
17:45:21.0934 3968 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
17:45:21.0934 3968 mssmbios - ok
17:45:21.0996 3968 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
17:45:21.0996 3968 Mup - ok
17:45:22.0074 3968 NAXMp50 (1bf91f352d746ad7469fa71783b5fae8) C:\WINDOWS\system32\Drivers\NAXMp50.sys
17:45:22.0074 3968 NAXMp50 - ok
17:45:22.0152 3968 NAXSp50 (1961590aa191b6b7dcf18a6a693af7b8) C:\WINDOWS\system32\Drivers\NAXSp50.sys
17:45:22.0152 3968 NAXSp50 - ok
17:45:22.0199 3968 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
17:45:22.0199 3968 NDIS - ok
17:45:22.0293 3968 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
17:45:22.0293 3968 NdisTapi - ok
17:45:22.0324 3968 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
17:45:22.0324 3968 Ndisuio - ok
17:45:22.0402 3968 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
17:45:22.0402 3968 NdisWan - ok
17:45:22.0449 3968 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
17:45:22.0496 3968 NDProxy - ok
17:45:22.0559 3968 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
17:45:22.0559 3968 NetBIOS - ok
17:45:22.0590 3968 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
17:45:22.0590 3968 NetBT - ok
17:45:22.0809 3968 NETw5x32 (a3b69acd14051ae87ab9e1823a508b6d) C:\WINDOWS\system32\DRIVERS\NETw5x32.sys
17:45:22.0871 3968 NETw5x32 - ok
17:45:22.0965 3968 NetworkX (5ef7dd401771693245d46f4b0b69fe2b) C:\WINDOWS\system32\ckldrv.sys
17:45:22.0965 3968 NetworkX - ok
17:45:23.0043 3968 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
17:45:23.0043 3968 NIC1394 - ok
17:45:23.0074 3968 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
17:45:23.0074 3968 Npfs - ok
17:45:23.0152 3968 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
17:45:23.0152 3968 Ntfs - ok
17:45:23.0340 3968 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
17:45:23.0340 3968 Null - ok
17:45:23.0433 3968 NvtSp50 - ok
17:45:23.0465 3968 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
17:45:23.0465 3968 NwlnkFlt - ok
17:45:23.0496 3968 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
17:45:23.0496 3968 NwlnkFwd - ok
17:45:23.0558 3968 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
17:45:23.0558 3968 ohci1394 - ok
17:45:23.0652 3968 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\drivers\Parport.sys
17:45:23.0652 3968 Parport - ok
17:45:23.0699 3968 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
17:45:23.0699 3968 PartMgr - ok
17:45:23.0730 3968 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
17:45:23.0746 3968 ParVdm - ok
17:45:23.0777 3968 PBADRV (4088c1ecd1f54281a92fa663b0fdc36f) C:\WINDOWS\system32\DRIVERS\PBADRV.sys
17:45:23.0793 3968 PBADRV - ok
17:45:23.0887 3968 PC2TV (675e6d072911d01738574a25162e8404) C:\WINDOWS\system32\DRIVERS\PC2TV.sys
17:45:23.0887 3968 PC2TV - ok
17:45:23.0918 3968 PC2TVMirror (31574f7f00aaa9a10dc96f5c62d21bc0) C:\WINDOWS\system32\DRIVERS\PC2TVMirror.sys
17:45:23.0918 3968 PC2TVMirror - ok
17:45:23.0965 3968 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
17:45:23.0965 3968 PCI - ok
17:45:23.0996 3968 PCIDump - ok
17:45:24.0027 3968 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
17:45:24.0027 3968 PCIIde - ok
17:45:24.0121 3968 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
17:45:24.0215 3968 Pcmcia - ok
17:45:24.0246 3968 PDCOMP - ok
17:45:24.0277 3968 PDFRAME - ok
17:45:24.0293 3968 PDRELI - ok
17:45:24.0308 3968 PDRFRAME - ok
17:45:24.0324 3968 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
17:45:24.0324 3968 perc2 - ok
17:45:24.0371 3968 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
17:45:24.0418 3968 perc2hib - ok
17:45:24.0527 3968 PICOPP (1ccf36763259892ba80f1b7be4c84cc3) C:\WINDOWS\system32\Drivers\picopp.sys
17:45:24.0527 3968 PICOPP - ok
17:45:24.0590 3968 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
17:45:24.0590 3968 PptpMiniport - ok
17:45:24.0636 3968 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
17:45:24.0636 3968 PSched - ok
17:45:24.0730 3968 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
17:45:24.0730 3968 Ptilink - ok
17:45:24.0777 3968 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
17:45:24.0777 3968 PxHelp20 - ok
17:45:24.0824 3968 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
17:45:24.0918 3968 ql1080 - ok
17:45:24.0996 3968 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
17:45:24.0996 3968 Ql10wnt - ok
17:45:25.0043 3968 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
17:45:25.0043 3968 ql12160 - ok
17:45:25.0058 3968 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
17:45:25.0136 3968 ql1240 - ok
17:45:25.0152 3968 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
17:45:25.0152 3968 ql1280 - ok
17:45:25.0183 3968 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
17:45:25.0183 3968 RasAcd - ok
17:45:25.0261 3968 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
17:45:25.0261 3968 Rasirda - ok
17:45:25.0371 3968 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
17:45:25.0371 3968 Rasl2tp - ok
17:45:25.0449 3968 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
17:45:25.0449 3968 RasPppoe - ok
17:45:25.0496 3968 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
17:45:25.0496 3968 Raspti - ok
17:45:25.0543 3968 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
17:45:25.0543 3968 Rdbss - ok
17:45:25.0668 3968 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
17:45:25.0668 3968 RDPCDD - ok
17:45:25.0746 3968 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
17:45:25.0746 3968 rdpdr - ok
17:45:25.0808 3968 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
17:45:25.0808 3968 RDPWD - ok
17:45:25.0918 3968 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERS\redbook.sys
17:45:25.0918 3968 redbook - ok
17:45:26.0027 3968 rimmptsk (355aac141b214bef1dbc1483afd9bd50) C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
17:45:26.0027 3968 rimmptsk - ok
17:45:26.0089 3968 s24trans (87940243ea2ad3ebe274f5409c5e9072) C:\WINDOWS\system32\DRIVERS\s24trans.sys
17:45:26.0089 3968 s24trans - ok
17:45:26.0199 3968 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
17:45:26.0199 3968 sdbus - ok
17:45:26.0261 3968 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
17:45:26.0261 3968 Secdrv - ok
17:45:26.0324 3968 Sentinel (95a26d5d8ceda33377af627dafc2796f) C:\WINDOWS\System32\Drivers\SENTINEL.SYS
17:45:26.0324 3968 Sentinel - ok
17:45:26.0418 3968 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
17:45:26.0418 3968 Serenum - ok
17:45:26.0496 3968 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\DRIVERS\serial.sys
17:45:26.0496 3968 Serial - ok
17:45:26.0527 3968 sffdisk (0fa803c64df0914b41f807ea276bf2a6) C:\WINDOWS\system32\DRIVERS\sffdisk.sys
17:45:26.0527 3968 sffdisk - ok
17:45:26.0543 3968 sffp_sd (c17c331e435ed8737525c86a7557b3ac) C:\WINDOWS\system32\DRIVERS\sffp_sd.sys
17:45:26.0543 3968 sffp_sd - ok
17:45:26.0589 3968 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
17:45:26.0589 3968 Sfloppy - ok
17:45:26.0683 3968 Simbad - ok
17:45:26.0730 3968 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
17:45:26.0730 3968 sisagp - ok
17:45:26.0839 3968 SNTNLUSB (8d4a96868ae13c3cf8425b383b59d802) C:\WINDOWS\system32\DRIVERS\SNTNLUSB.SYS
17:45:26.0839 3968 SNTNLUSB - ok
17:45:26.0902 3968 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
17:45:26.0902 3968 Sparrow - ok
17:45:26.0996 3968 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
17:45:26.0996 3968 splitter - ok
17:45:27.0042 3968 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
17:45:27.0058 3968 sr - ok
17:45:27.0136 3968 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
17:45:27.0199 3968 Srv - ok
17:45:27.0371 3968 STHDA (886c708c91db573656d64c626468d707) C:\WINDOWS\system32\drivers\sthda.sys
17:45:27.0386 3968 STHDA - ok
17:45:27.0511 3968 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
17:45:27.0511 3968 swenum - ok
17:45:27.0574 3968 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
17:45:27.0589 3968 swmidi - ok
17:45:27.0636 3968 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
17:45:27.0636 3968 symc810 - ok
17:45:27.0683 3968 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
17:45:27.0683 3968 symc8xx - ok
17:45:27.0792 3968 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
17:45:27.0792 3968 sym_hi - ok
17:45:27.0808 3968 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
17:45:27.0808 3968 sym_u3 - ok
17:45:27.0855 3968 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
17:45:27.0855 3968 sysaudio - ok
17:45:27.0949 3968 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
17:45:27.0949 3968 Tcpip - ok
17:45:28.0074 3968 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
17:45:28.0074 3968 TDPIPE - ok
17:45:28.0089 3968 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
17:45:28.0105 3968 TDTCP - ok
17:45:28.0136 3968 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
17:45:28.0152 3968 TermDD - ok
17:45:28.0167 3968 TosIde (b411668322c3bf4e690888706b999679) C:\WINDOWS\system32\DRIVERS\toside.sys
17:45:28.0167 3968 TosIde - ok
17:45:28.0199 3968 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
17:45:28.0199 3968 Udfs - ok
17:45:28.0245 3968 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
17:45:28.0245 3968 ultra - ok
17:45:28.0370 3968 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
17:45:28.0370 3968 Update - ok
17:45:28.0433 3968 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
17:45:28.0433 3968 USBAAPL - ok
17:45:28.0480 3968 usbccgp (c18d6c74953621346df6b0a11f80c1cc) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
17:45:28.0480 3968 usbccgp - ok
17:45:28.0527 3968 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
17:45:28.0527 3968 usbehci - ok
17:45:28.0620 3968 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
17:45:28.0620 3968 usbhub - ok
17:45:28.0652 3968 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
17:45:28.0652 3968 usbscan - ok
17:45:28.0699 3968 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
17:45:28.0699 3968 USBSTOR - ok
17:45:28.0824 3968 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
17:45:28.0824 3968 usbuhci - ok
17:45:28.0870 3968 VBoxDrv (30c64b663efebc34c0070838bcca32ef) C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys
17:45:28.0870 3968 VBoxDrv - ok
17:45:28.0902 3968 VBoxNetAdp (3d4b1f1f81ef8813348c01081f8b2a17) C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
17:45:28.0917 3968 VBoxNetAdp - ok
17:45:29.0027 3968 VBoxNetFlt (634b2797abf28158d1667500c78ce6d1) C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
17:45:29.0027 3968 VBoxNetFlt - ok
17:45:29.0058 3968 VBoxUSBMon (6aeaf649ef06dbb3f83efe2249472e38) C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys
17:45:29.0074 3968 VBoxUSBMon - ok
17:45:29.0105 3968 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
17:45:29.0105 3968 VgaSave - ok
17:45:29.0152 3968 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
17:45:29.0152 3968 viaagp - ok
17:45:29.0245 3968 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
17:45:29.0245 3968 ViaIde - ok
17:45:29.0308 3968 vmci (6f5d703bf312cb6cda78948763cb1e0d) C:\WINDOWS\system32\Drivers\vmci.sys
17:45:29.0308 3968 vmci - ok
17:45:29.0370 3968 vmkbd (27df4aece721961f9c9064a31790f2ea) C:\WINDOWS\system32\drivers\VMkbd.sys
17:45:29.0370 3968 vmkbd - ok
17:45:29.0386 3968 VMnetAdapter (e41704d8149992107b333cc7a52c07cc) C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys
17:45:29.0386 3968 VMnetAdapter - ok
17:45:29.0511 3968 VMnetBridge (37487769258ee1ee792517647c8982a4) C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys
17:45:29.0511 3968 VMnetBridge - ok
17:45:29.0542 3968 VMnetuserif (ea10f0c9333388d2ecc4068efb8c366d) C:\WINDOWS\system32\drivers\vmnetuserif.sys
17:45:29.0542 3968 VMnetuserif - ok
17:45:29.0636 3968 vmx86 (35dc7079a413484423750db5d40b8ea6) C:\WINDOWS\system32\Drivers\vmx86.sys
17:45:29.0652 3968 vmx86 - ok
17:45:29.0777 3968 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
17:45:29.0777 3968 VolSnap - ok
17:45:29.0855 3968 vstor2-ws60 (98929c5c5314c4c048e2f60492c26723) C:\Program Files\VMware\VMware Player\vstor2-ws60.sys
17:45:29.0855 3968 vstor2-ws60 - ok
17:45:29.0902 3968 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
17:45:29.0902 3968 Wanarp - ok
17:45:30.0042 3968 WavxDMgr (fc2606083f35db9c497d6ba9f554d22c) C:\WINDOWS\system32\DRIVERS\WavxDMgr.sys
17:45:30.0042 3968 WavxDMgr - ok
17:45:30.0089 3968 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
17:45:30.0105 3968 Wdf01000 - ok
17:45:30.0120 3968 WDICA - ok
17:45:30.0152 3968 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
17:45:30.0152 3968 wdmaud - ok
17:45:30.0292 3968 WinDriver6 (451f905bc7bff9e1cff2e7ae76196b2c) C:\WINDOWS\system32\drivers\windrvr6.sys
17:45:30.0308 3968 WinDriver6 - ok
17:45:30.0370 3968 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
17:45:30.0386 3968 WmiAcpi - ok
17:45:30.0433 3968 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
17:45:30.0433 3968 WS2IFSL - ok
17:45:30.0511 3968 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
17:45:30.0527 3968 \Device\Harddisk0\DR0 - ok
17:45:30.0527 3968 Boot (0x1200) (9d10ac20baac4b291169f724852d661c) \Device\Harddisk0\DR0\Partition0
17:45:30.0527 3968 \Device\Harddisk0\DR0\Partition0 - ok
17:45:30.0558 3968 Boot (0x1200) (a27ba701f9aa33aa8a755a1343ae5c67) \Device\Harddisk0\DR0\Partition1
17:45:30.0558 3968 \Device\Harddisk0\DR0\Partition1 - ok
17:45:30.0558 3968 ============================================================
17:45:30.0558 3968 Scan finished
17:45:30.0558 3968 ============================================================
17:45:30.0573 3528 Detected object count: 0
17:45:30.0573 3528 Actual detected object count: 0

Re

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html
en bas de la page ZHP avec un numéro de version.

Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long.

Ferme ZHPDiag en fin d'analyse.

Pour transmettre le rapport clique sur ce lien :

http://pjjoint.malekal.com/

https://www.cjoint.com/

Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Merci

A+

Merci Guillaume,

Voici donc le log de ZHPDiag :
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20111221_i6g7f10q14h13

Bonjour

1)Désinstalle Spybot.


2)Utilisation de l'outil ZHPFix :

* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------


HOSTFix
O1 - Hosts: 192.168.101.66 Bus66.comtec.siege
O1 - Hosts: 192.168.101.67 Bus67.comtec.siege
O43 - CFD: 21/12/2011 - 15:38:10 - [0,041] -SH-D- C:\Documents and Settings\vmacabies\Local Settings\Application Data\c74b35af
O43 - CFD: 07/01/2011 - 16:42:06 - [1,951] ----D- C:\Documents and Settings\vmacabies\Local Settings\Application Data\DC
[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]:Shell
[HKLM\Software\Classes\Interface\{7697BC38-D0FA-454B-AC75-968B4CCABFCE}]
C:\Documents and Settings\vmacabies\Application Data\Mozilla\Firefox\Profiles\7e26olag.default\prefs.js (.not file.)
O4 - HKLM\..\Run: [ChangeTPMAuth] Clé orpheline
O4 - HKCU\..\Run: [Polar Sync] Clé orpheline
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O47 - AAKE:Key Export DP - "C:\Documents and Settings\vmacabies\Local Settings\Temp\is-8RDTL.tmp\spybotsd162.tmp" [Enabled] .(...) -- C:\Documents and Settings\vmacabies\Local Settings\Temp\is-8RDTL.tmp\spybotsd162.tmp (.not file.)
O42 - Logiciel:Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216011FF}
OPT:O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
OPT:O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
STOP:SR - | Auto 21/12/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRAZ
Emptytemp

--------------------------------------------------------------------------------------------
Puis lance ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe
« Exécuter en tant qu'administrateur »
.

* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,

-> laisse travailler l'outil et ne touche à rien ...

-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )

3)Met à jour Java

@+

Hello,

Voilà le rapport ZHPFix :

Rapport de ZHPFix 1.12.3376 par Nicolas Coolman, Update du 20/12/2011
Fichier d'export Registre :
Run by vmacabies at 22/12/2011 09:52:19
Windows XP Professional Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
SUPPRIME ava 6 Update 20

========== Clé(s) du Registre ==========
SUPPRIME Key: HKLM\Software\Classes\Interface\{7697BC38-D0FA-454B-AC75-968B4CCABFCE}

========== Valeur(s) du Registre ==========
SUPPRIME [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]:Shell
SUPPRIME RunValue: ChangeTPMAuth
SUPPRIME RunValue: Polar Sync
SUPPRIME AAKE KeyValue: C:\Documents and Settings\vmacabies\Local Settings\Temp\is-8RDTL.tmp\spybotsd162.tmp
SUPPRIME RunValue: QuickTime Task
SUPPRIME RunValue: iTunesHelper
SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\Vincent MACABIES\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.dll
SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\Vincent MACABIES\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\Vincent MACABIES\temp\TeamViewer\Version5\TeamViewer.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Skype\Plugin Manager\skypePM.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\TeamViewer\Version5\TeamViewer.exe
SUPPRIME FirewallRaz (DP) : C:\Program Files\Skype\Plugin Manager\skypePM.exe
SUPPRIME FirewallRaz (DP) : C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe
SUPPRIME FirewallRaz (DP) : C:\Documents and Settings\vmacabies\Local Settings\Temp\jre-6u30-windows-i586-iftw-rv.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
SUPPRIME Folder: C:\Documents and Settings\vmacabies\Local Settings\Application Data\c74b35af
SUPPRIME Folder: C:\Documents and Settings\vmacabies\Local Settings\Application Data\DC
SUPPRIME Temporaires Windows: : 101

========== Fichier(s) ==========
ABSENT Folder/File: c:\documents and settings\vmacabies\application data\mozilla\firefox\profiles\7e26olag.default\prefs.js (.not file.)
ABSENT File: c:\documents and settings\vmacabies\local settings\temp\is-8rdtl.tmp\spybotsd162.tmp
SUPPRIME Temporaires Windows: : 62

========== Etat des services ==========
(Bonjour Service) . (Bonjour Service) de Apple Inc.Arrêté:

========== Récapitulatif ==========
1 : Clé(s) du Registre
15 : Valeur(s) du Registre
3 : Dossier(s)
3 : Fichier(s)
1 : Logiciel(s)
1 : Etat des services

End of clean in 01mn 30s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 22/12/2011 09:52:19 [2671]

Et voilà le rapport RogueKiller :

RogueKiller V6.2.0 [12/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: vmacabies [Droits d'admin]
Mode: Recherche -- Date : 22/12/2011 11:37:49

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 2 ¤¤¤
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (:0) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤
[ZeroAccess] (LOCKED) windir\NtUpdateKBxxxx present!

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
192.168.101.66 Bus66.comtec.siege
192.168.101.67 Bus67.comtec.siege
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
[...]

¤¤¤ MBR Verif: ¤¤¤
--- User ---
[MBR] 402a4212ed84b5d4ac3bf7f9ec39aeab
[BSP] 8b8ac007d1c138ca98b58a0a41ce5bac : MBR Code unknown
Partition table:
0 - [XXXXXX] FAT16 [HIDDEN!] Offset (sectors): 63 | Size: 115 Mo
1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 224910 | Size: 62915 Mo
2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 123106095 | Size: 57001 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

Re

Relance Roguekiller option 3

Poste moi ce nouveau rapport;merci.

@+

RogueKiller V6.2.0 [12/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: vmacabies [Droits d'admin]
Mode: HOSTS RAZ -- Date : 22/12/2011 11:43:00

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
192.168.101.66 Bus66.comtec.siege
192.168.101.67 Bus67.comtec.siege
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
[...]

¤¤¤ Nouveau fichier HOSTS: ¤¤¤
127.0.0.1 localhost

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Re

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

@+

Voilà le rapport ComboFix après la (longue) analyse et les multiples redémarrages.

https://www.cjoint.com/?ALwot0BV7iq

Salut

tu as essayé de redémarrer après Combofix?